Lkft-triage September 2026

lkft-triage@lists.linaro.org

29 participants
36 discussions

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.2.9 release. There are 457 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 02 Oct 2026 15:23:04 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.9-rc1.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.2.9-rc1 Shengzhuo Wei <me(a)cherr.cc> i2c: qcom-geni: release DMA channels on probe error Karol Wachowski <karol.wachowski(a)linux.intel.com> accel/ivpu: Drop IRQF_ONESHOT to allow IPC IRQ threading on PREEMPT_RT Sean Christopherson <seanjc(a)google.com> KVM: x86: Add static calls for nested virtualization ops Sean Christopherson <seanjc(a)google.com> KVM: x86: Reject nested CAP enablement if nested virtualization is disabled Paolo Bonzini <pbonzini(a)redhat.com> KVM: move TSS constants from kvm_host.h to tss.h Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Move kvm_mmu_do_page_fault() from mmu_internal.h => mmu.c Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Move kvm_arch_async_page_ready() below kvm_tdp_page_fault() Sean Christopherson <seanjc(a)google.com> KVM: x86: Move IRQ-related helper declarations from kvm_host.h => irq.h Marc Zyngier <maz(a)kernel.org> KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction Marc Zyngier <maz(a)kernel.org> KVM: arm64: nv: Fix life cycle of the nested_mmus array Ilya Maximets <i.maximets(a)ovn.org> net/sched: act_ct: avoid modifying shared unconfirmed ct entry Ilya Maximets <i.maximets(a)ovn.org> net/sched: act_ct: fix helper UAF due to extensions realloc Alex Hung <alex.hung(a)amd.com> drm/amd/display: Relax DML frame limit with UBSAN Christian Brauner <brauner(a)kernel.org> super: make iterate_supers_type() deletion-safe Christian Brauner <brauner(a)kernel.org> super: take lock after last reference count Christian Brauner <brauner(a)kernel.org> super: convert s_count to refcount_t s_passive Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL Praveen Talari <praveen.talari(a)oss.qualcomm.com> i2c: qcom-geni: Store of_device_id data in driver private struct Praveen Talari <praveen.talari(a)oss.qualcomm.com> i2c: qcom-geni: Move resource initialization to separate function Praveen Talari <praveen.talari(a)oss.qualcomm.com> i2c: qcom-geni: Isolate serial engine setup Jakub Pawlak <jakub.pawlak(a)intel.com> accel/ivpu: Use separate flag for job timeout Karol Wachowski <karol.wachowski(a)linux.intel.com> accel/ivpu: Use threaded IRQ for IPC callback processing Arnd Bergmann <arnd(a)arndb.de> landlock: Work around gcc-16 -Wuninitialized warning Tangudu Tilak Tirumalesh <tilak.tirumalesh.tangudu(a)intel.com> drm/xe: Add wa_14025941587 to xe2, xe3 and xe3p platforms Darrick J. Wong <djwong(a)kernel.org> xfs: fix cursor and pointer handling when recovering iunlink buckets Darrick J. Wong <djwong(a)kernel.org> xfs: fix blockgc group quota scanning when usrquota isn't enforced Darrick J. Wong <djwong(a)kernel.org> xfs: drop dquot flush lock when we can't find a buffer to flush Darrick J. Wong <djwong(a)kernel.org> xfs: don't merge different file IO error types Darrick J. Wong <djwong(a)kernel.org> xfs: don't let memory failures leak blocks and kill repairs Darrick J. Wong <djwong(a)kernel.org> xfs: don't let hidden_space go negative in xfs_metafile_resv_init Darrick J. Wong <djwong(a)kernel.org> xfs: call xfs_dquot_set_prealloc_limits if we installed default rtb limits Darrick J. Wong <djwong(a)kernel.org> xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots Darrick J. Wong <djwong(a)kernel.org> xfs: fix rtgroup repair estimations Darrick J. Wong <djwong(a)kernel.org> xfs: check di_forkoff correctly in scrub Darrick J. Wong <djwong(a)kernel.org> xfs: use the correct reservations for rtrmap/refcount recovery Darrick J. Wong <djwong(a)kernel.org> xfs: only flag zero padding for dir3 data blocks, not dir3 block blocks Darrick J. Wong <djwong(a)kernel.org> xfs: don't call xfs_exchange_range_finish for a dry run Darrick J. Wong <djwong(a)kernel.org> xfs: check padding field in xfs_ioc_commit_range Darrick J. Wong <djwong(a)kernel.org> xfs: use correct jiffies comparison function in xchk_maybe_relax Darrick J. Wong <djwong(a)kernel.org> xfs: release orphanage dir inode if chown fails Darrick J. Wong <djwong(a)kernel.org> xfs: fix attr fork block count checks in xrep_inode_blockcounts Darrick J. Wong <djwong(a)kernel.org> xfs: don't assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption Adarsh Das <adarshdas950(a)gmail.com> smb: client: delete compound mids on send failure before unlock Zihan Xi <zihanx(a)nebusec.ai> smb: client: close completed creates on compound wait errors Zihan Xi <zihanx(a)nebusec.ai> smb: client: validate POSIX create context length Namjae Jeon <linkinjeon(a)kernel.org> smb: client: use finish_no_open() for non-regular inodes Zihan Xi <zihanx(a)nebusec.ai> smb: client: preserve create-context parsing errors Zihan Xi <zihanx(a)nebusec.ai> smb: client: clean up failed cached directory opens Zihan Xi <zihanx(a)nebusec.ai> smb: client: close handle after create-context parsing failure Zihan Xi <zihanx(a)nebusec.ai> smb: client: fix create context out-of-bounds reads Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: mgmt: fix race in read_unconf_index_list() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: L2CAP: validate frame length before control and FCS access Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: ISO: release unused CIS holds after channel attach Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: ISO: balance the parent hold in hci_bind_bis() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: reject out-of-range OCF values Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: validate event length before filtering Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_conn: fix CIS hold ownership on reuse Davi Chaves Azevedo <davichazbh(a)gmail.com> sched/cache: Refresh LLC capacity across CPU hotplug, to fix capacity underestimation bug Tim Chen <tim.c.chen(a)linux.intel.com> sched/cache: Decouple sched_cache_group from mm to fix UAF Tejun Heo <tj(a)kernel.org> sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags Tan Chi <tanchi25(a)mails.ucas.ac.cn> RISC-V: KVM: Fix HSM hart status error propagation Xie Bo <xb(a)ultrarisc.com> RISC-V: KVM: Propagate interrupted G-stage faults Xie Bo <xb(a)ultrarisc.com> RISC-V: KVM: Release unused page after MMU invalidation Myeonghun Pak <mhun512(a)gmail.com> RISC-V: KVM: Synchronize hrtimer callback during teardown Xie Bo <xb(a)ultrarisc.com> RISC-V: KVM: Serialize IMSIC attributes with vCPU migration Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Transfer the hyp stack pages out of the host stage-2 Lorenzo Stoakes (ARM) <ljs(a)kernel.org> KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race Lorenzo Stoakes (ARM) <ljs(a)kernel.org> KVM: arm64: Fix spurious warning for benign stage 2 teardown race Karl Mehltretter <kmehltretter(a)gmail.com> KVM: arm64: Fix AArch32 DBGBXVR<n> handling Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode Sean Christopherson <seanjc(a)google.com> KVM: SEV: Do cache maintenance on the source VM during intra-host migration Sean Christopherson <seanjc(a)google.com> KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV Zeng Chi <zengchi(a)kylinos.cn> KVM: Don't treat reserved xarray entries as having memory attributes David Ballesteros <davimaba.v(a)proton.me> KVM: Ensure memory attributes xarray nodes are accounted to the caller's memcg Anthony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Niklas Schnelle <schnelle(a)linux.ibm.com> s390/pci: Don't report recovery success on skipped recovery Niklas Schnelle <schnelle(a)linux.ibm.com> s390/pci: Report SCLP status on error events when no pdev is associated Niklas Schnelle <schnelle(a)linux.ibm.com> s390/pci: Fix missing device lock in zpci_report_status() Niklas Schnelle <schnelle(a)linux.ibm.com> s390/pci: Fix leak of struct pci_dev reference in zpci_report_status() Peter Oberparleiter <oberpar(a)linux.ibm.com> s390/cmf: Fix virtual vs physical address confusion Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() Ilya Titov <ilya.titov(a)wirenboard.com> pinctrl: sunxi: keep a shadow copy of the data register output latches Myeonghun Pak <mhun512(a)gmail.com> pinctrl: single: free the IRQ on domain creation failure Shawn Guo <shengchao.guo(a)oss.qualcomm.com> pinctrl: qcom: nord: Split QUP1 SE2/SE3 into lane-pair functions Conor Dooley <conor.dooley(a)microchip.com> pinctrl: mpfs-mssio: use correct regmap function to set bank voltage Conor Dooley <conor.dooley(a)microchip.com> pinctrl: mpfs-mssio: fix width of unused bank voltage setting Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Constrain Panther Cove UOPS_DISPATCHED events to PMCs 0-3 Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Remove incorrect Panther Cove PEBS data-source constraints Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Fix Panther Cove PEBS data-source snoop states Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Fix DKT PEBS load/store direction for latency events, to fix sample classification Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Fix CMT PEBS load/store direction for latency events, to fix sample classification Puranjay Mohan <puranjay(a)kernel.org> perf/core: Run sched_task() for PMUs with only CPU-wide events Puranjay Mohan <puranjay(a)kernel.org> perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() Zhenghui Hao <zhenghui.hao(a)qq.com> parisc: parse early parameters in setup_arch() Helge Deller <deller(a)gmx.de> parisc: Increase kernel stack size to 32kb Geert Uytterhoeven <geert+renesas(a)glider.be> scsi: ufs: pltfrm: Add quirk for R-Car S4 lacking lanes-per-direction Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Keep internal commands dispatchable during error handling Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> scsi: libiscsi_tcp: Check the data direction of a Data-In PDU Myeonghun Pak <mhun512(a)gmail.com> nfc: trf7970a: power down on startup RX gain failure Doruk Tan Ozturk <doruk(a)0sec.ai> nfc: port100: reject frames whose declared length exceeds the received data Aamir Ahmed <elb12345(a)hotmail.co.uk> nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() Luxiao Xu <rakukuip(a)gmail.com> nfc: fix use-after-free in nfc_get_local_general_bytes Aohan Mei <henrymei(a)tencent.com> netfilter: nf_tables: skip expired catchall elements on insert and delete Luxiao Xu <rakukuip(a)gmail.com> netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read Weiming Shi <bestswngs(a)gmail.com> netfilter: ip6t_rpfilter: reject routes without inet6_dev Wentao Liang <vulab(a)iscas.ac.cn> net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() Ming Wang <wangming01(a)loongson.cn> net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist Zhang Yunfei <zhangyunfei1(a)kylinos.cn> net: txgbe: fix FDIR filter restore for VF rules Abhishek Ojha <abhishek.ojha(a)savoirfairelinux.com> net: phy: micrel: Advance register data pointer in write loop Alexander Sverdlin <alexander.sverdlin(a)siemens.com> net: phy: intel-xway: workaround 100BASE-TX Link-Up issue Guangshuo Li <lgs201920130244(a)gmail.com> net: ena: fix MMIO read buffer leak on probe failure Guangshuo Li <lgs201920130244(a)gmail.com> net: ena: fix PHC cleanup on probe failure Fourie Zhang <littleddfu(a)gmail.com> net: bridge: mdb: restart port group walk after deletion Gajdos Tamás <tamas(a)rimpianto.com> net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Gajdos Tamás <tamas(a)rimpianto.com> net: atl1c: fix soft lockup on out-of-range tpd_cons read Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: fix helper UAF due to extensions realloc Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: remove 'add_helper' dead code Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths Yuqi Xu <xuyuqiabc(a)gmail.com> net: ipconfig: bound DHCP option construction Wentao Liang <vulab(a)iscas.ac.cn> net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy() Gajdos Tamás <tamas(a)rimpianto.com> net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Zijie Huang <milkory(a)outlook.com> net: arp: terminate device name before lookup Myeonghun Pak <mhun512(a)gmail.com> net: airoha: npu: cancel wdt_work after releasing the WDT IRQ Weiming Shi <bestswngs(a)gmail.com> net/sched: reject IDR error pointers when deleting actions Andrea Parri <parri.andrea(a)gmail.com> net/mlx5e: fix swapped IPv6 IPsec policy masks Ralf Lici <ralf(a)mandelbit.com> net/mlx5e: advertise MACsec offload only when supported Wentao Liang <vulab(a)iscas.ac.cn> net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() Wei Jie LAW <98lawweijie(a)gmail.com> HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() Junjie Cao <junjie.cao(a)intel.com> HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard Tristan Madani <tristan(a)talencesecurity.com> HID: hid-oxp: use cancel_delayed_work_sync() in remove Chen Changcheng <chenchangcheng(a)kylinos.cn> HID: alps: fix use-after-free on input2 registration failure Chen Changcheng <chenchangcheng(a)kylinos.cn> HID: alps: unregister DualPoint Stick input device on remove Willem de Bruijn <willemb(a)google.com> packet: use ubuf_info completion for TX_RING packets Angel J <iamanaws(a)httpd.dev> PCI: of_property: Omit bus properties without a subordinate bus Liz Fong-Jones <lizf(a)honeycomb.io> PCI: Fix BAR resize for devices on a root bus SJ Park <sj(a)kernel.org> mm/damon/core: reset invalid quota->charge_target_from Liew Rui Yan <aethernet65535(a)gmail.com> mm/damon/core: allow esz to be set to zero Liew Rui Yan <aethernet65535(a)gmail.com> mm/damon/core: fix unconditionally skip last region Nathan Gao <zcgao(a)amazon.com> mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold() SJ Park <sj(a)kernel.org> mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() Jaewook You <jaewook376(a)gmail.com> mm/hugetlb: preserve mremap address delta when skipping page tables Longlong Xia <xialonglong(a)kylinos.cn> mm/hugetlb: do not dissolve gigantic pages without runtime support Jinjiang Tu <tujinjiang(a)huawei.com> mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish Karl Mehltretter <kmehltretter(a)gmail.com> gpio: tps65219: Fix TPS65214 GPIO direction programming Karl Mehltretter <kmehltretter(a)gmail.com> gpio: tps65219: Use the variant-specific direction callback Karl Mehltretter <kmehltretter(a)gmail.com> gpio: tps65219: Fix GPIO input value reads Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/virtio: fix NULL pointer dereference on fence allocation failure Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/virtio: fix memory leak of fence event on execbuffer failure Matthew Brost <matthew.brost(a)intel.com> drm/xe: Keep walking on SVM eviction failure Szymon Acedański <accek(a)invisiblethingslab.com> drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV Tangudu Tilak Tirumalesh <tilak.tirumalesh.tangudu(a)intel.com> drm/xe: harden adjust_idledly() against divide-by-zero and overflow Matthew Auld <matthew.auld(a)intel.com> drm/xe/vm: nuke PTs only after unlinking contested VMAs Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() Jonghyuk Kim(MalHyuk) <malhyuk97(a)gmail.com> drm/nouveau: RCU-free the scheduler-containing nouveau_sched Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix gem reference leak in validate_init() Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: fix double-free in nvif_vmm_dtor Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix bridge reference leak in nv1a_ram_new() Guangshuo Li <lgs201920130244(a)gmail.com> drm/nouveau: fix autosuspend cleanup during teardown Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM Junrui Luo <moonafterrain(a)outlook.com> drm/nouveau/dmem: pin VRAM for the whole registered range Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu: move userq fence wait out of signalling section Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc() Sunil Khatri <sunil.khatri(a)amd.com> drm/amdgpu/vcn5.0.1: fix video_timeout unit mismatch in jpeg reset wait Sunil Khatri <sunil.khatri(a)amd.com> drm/amdgpu/vcn4.0.3: fix video_timeout unit mismatch in jpeg reset wait Sunil Khatri <sunil.khatri(a)amd.com> drm/amdgpu/userq: fix double jiffies conversion in hang detect timeout Ivan Lipski <ivan.lipski(a)amd.com> drm/amd/display: Bump frame warning limit for clang builds of dml Wentao Liang <vulab(a)iscas.ac.cn> drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() Asad Kamal <asad.kamal(a)amd.com> drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping Imre Deak <imre.deak(a)intel.com> drm/i915/dp_mst: Fix configuring TUs for a disconnected stream Imre Deak <imre.deak(a)intel.com> drm/i915/dp_mst: Fix configuring FEC for a disconnected stream Ankit Nautiyal <ankit.k.nautiyal(a)intel.com> drm/i915/quirks: Limit eDP rate to HBR2 on HP Pavilion Plus 14-ew1 Christian König <ckoenig.leichtzumerken(a)gmail.com> drm/i915: fix incorrect RCU teardown order Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Fix page count for page table for map() interface Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() shechenglong <shechenglong(a)xfusion.com> drm/client: fix restore of partially initialized client Dongliang Qin <cccccccccccc777777(a)gmail.com> rds: ib: Clear the sg list when mapping an MR fails Hui Peng <benquike(a)gmail.com> mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() Zixuan Chai <petalzu987(a)gmail.com> llc: reserve device headroom for allocated frames Ridham Khurana <khurana.ridham222(a)gmail.com> gpio: zynq: fix runtime PM leak on request error path Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: cdev: fix kernel stack leak to user-space in error path Wentao Liang <vulab(a)iscas.ac.cn> gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() Andrea Parri <parri.andrea(a)gmail.com> kprobes: Fix permanent hang when flushing the kprobe optimizer Hui Peng <benquike(a)gmail.com> ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST Norbert Szetei <norbert(a)doyensec.com> ipv6: do not let ipv6_find_hdr() return an offset past the packet end Fan Wu <wufan(a)kernel.org> ipe: protect the dm-verity root hash with RCU Fan Wu <wufan(a)kernel.org> ipe: fix use-after-free when auditing a newly loaded policy Wentao Liang <vulab(a)iscas.ac.cn> fsl/fman: Fix clk reference leak in read_dts_node() Josef Bacik <josef(a)toxicpanda.com> writeback: report a Tasks-RCU quiescent state per cgwb drain pass Pavankumar Kondeti <pavan.kondeti(a)oss.qualcomm.com> workqueue: Fix NULL current_pwq deref in flush dependency check Patrick Lu (Anthropic) <perf.patrick.lu(a)gmail.com> writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes Hao Ge <hao.ge(a)linux.dev> netfs: Fix missing alloc tagging of direct mempool allocations Christian Brauner <brauner(a)kernel.org> fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga David Carlier <devnexen(a)gmail.com> fprobe: Terminate the fgraph_data list when the reservation is not filled Hui Peng <benquike(a)gmail.com> fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT Guopeng Zhang <zhangguopeng(a)kylinos.cn> cgroup/pids: Restore pids.events notifications in local mode Hui Peng <benquike(a)gmail.com> cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict Holger Dengler <dengler(a)linux.ibm.com> crypto: s390/hmac - Generate intermediate CV for API partial block handling Andrea Parri <parri.andrea(a)gmail.com> bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir Myeonghun Pak <mhun512(a)gmail.com> bna: prevent IOC timer rearm during teardown Matthias Goergens <matthias.goergens(a)gmail.com> ata: libata-scsi: bound the ATA passthru sense descriptor writes David Carlier <devnexen(a)gmail.com> arm64: errata: match the target implementation CPU's own MIDR Fuad Tabba <fuad.tabba(a)linux.dev> arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 Dairui Zhang <zhangdairui(a)gmail.com> af_packet: fix integer overflow in prb_calc_retire_blk_tmo() Aohan Mei <henrymei(a)tencent.com> sctp: discard the rest of the packet on a stale-cookie error Willem de Bruijn <willemb(a)google.com> tcp: prevent collapsing skbs across boundary in rtx queue Eric Dumazet <edumazet(a)google.com> tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow Willem de Bruijn <willemb(a)google.com> virtio_net: copy zerocopy frags in start_xmit without NAPI Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> vsock: ignore empty child namespace mode writes Melody Wang <huibo.wang(a)amd.com> x86/sev: Make vTPM SVSM calls preemption-safe Mario Limonciello <mario.limonciello(a)amd.com> x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 Masami Hiramatsu (Google) <mhiramat(a)kernel.org> x86/mce: Fix hardware debug register corruption on task migration Xiang Mei <xmei5(a)asu.edu> vlan: require the MAC header to be present in __vlan_insert_inner_tag() Matthew Brost <matthew.brost(a)intel.com> drm/pagemap: dma-unmap pages before handling migration errors Mark Amirkan <markdamirkan(a)gmail.com> mptcp: return sk_wait_data() errors from recvmsg() Zhan Xusheng <zhanxusheng1024(a)gmail.com> sched/core: Account PSI IRQ time to the execution context, not the scheduling context Puranjay Mohan <puranjay(a)kernel.org> perf/core: Fill branch entries with a single assignment Namhyung Kim <namhyung(a)kernel.org> perf/core: Fix a refcount leak in attach_perf_ctx_data() Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Delete dead NVL PEBS data-source initcall Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs() Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits Hui Peng <benquike(a)gmail.com> autofs: fix sbi->pipe file reference leak in autofs_kill_sb() Amir Goldstein <amir73il(a)gmail.com> ovl: fix UAF in ovl_do_mkdir() debug print Eric Dumazet <edumazet(a)google.com> vlan: ensure sufficient headroom in vlan_dev_hard_header() Eric Dumazet <edumazet(a)google.com> net/sched: sch_teql: fix shadowed err in __teql_resolve() Eric Dumazet <edumazet(a)google.com> bridge: check llc_mac_hdr_init() return value in br_send_bpdu() Eric Dumazet <edumazet(a)google.com> llc: fix skb UAF and leaks on llc_mac_hdr_init() failure Eric Dumazet <edumazet(a)google.com> gve: DQO: reject TSO packets with an out of range MSS Eddie Phillips <eddiephillips(a)google.com> gve: fix TX drop when GSO MSS is too small for hw Eric Dumazet <edumazet(a)google.com> gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO Eric Dumazet <edumazet(a)google.com> net: flush skb_defer_nodes in dev_cpu_dead() Coia Prant <coiaprant(a)gmail.com> net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails Ginger Li <ginger.jzllee(a)gmail.com> tipc: Fix a data race on mon->peer_cnt in mon_timeout() Sidraya Jayagond <sidraya(a)linux.ibm.com> net/smc: fix UAF on lgr list traversal in smcr_port_err() Allison Henderson <achender(a)kernel.org> net/rds: size a connection's path set by the transport it ends up with Sang-Hoon Choi <csh0052(a)gmail.com> nfp: hold IPsec RX state under the XArray lock Jiawen Wu <jiawenwu(a)trustnetic.com> net: libwx: fix races in Tx timestamp handling Jiawen Wu <jiawenwu(a)trustnetic.com> net: wangxun: implement soft quiesce for PCIe error recovery Aleksei Sviridkin <f(a)lex.la> net: phylink: record the PHY only once bringup cannot fail Yilin Zhang <yilinzhang(a)moonshot.ai> tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() Aleksei Sviridkin <f(a)lex.la> net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq Aleksei Sviridkin <f(a)lex.la> net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> bpf: Zero-fill other CPUs when BPF_F_CPU creates a per-cpu hash element Christian Lamparter <chunkeey(a)gmail.com> net: emac: move setting of netops to fix crash Fang Xieyan <fangxy(a)xiaopeng.com> net/sched: act_ife: validate metadata length before decoding Haseeb Malik <haseebulhaq55(a)gmail.com> macsec: initialize SecY before registering the netdevice David Dai <zdai(a)linux.ibm.com> bonding: crypto offload enabled, non-offload slave failover, rekey failed Pengpeng Hou <hppiscas(a)163.com> drm/imagination: clamp freelist reconstruction requests Norbert Szetei <norbert(a)doyensec.com> net: xps: reject an out of range traffic class Sanghyun Park <sanghyun.park.cnu(a)gmail.com> vxlan: use one headroom snapshot for neighbour replies Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> ip_gre: Reject enabling collect metadata through changelink Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: do not skip WoL power up on GENET V1 Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: initialize u64 stats seq counter for all queues Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems Yuya Kusakabe <yuya.kusakabe(a)gmail.com> net: ipv6: keep room for the mac header in dst_dev_overhead() Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: clear stale buf->page after recycling on skb build failure Ivan Delalande <colona(a)arista.com> tg3: use random MAC address when tg3_get_device_address fails Johan Almbladh <johan.almbladh(a)anyfinetworks.com> bpf: Fix BSWAP 32 and 16 on MIPS64 Johan Almbladh <johan.almbladh(a)anyfinetworks.com> bpf: Fix immediate JMP JEQ/JNE on MIPS32 Jonas Jelonek <jonas(a)jonasjelonek.de> net: mdio: realtek-rtl9300: fix RTL931x C22 extended page selection Nicolo Giuliani <nicolo.giuliani6(a)studio.unibo.it> net: dsa: mv88e6xxx: 88E6191X and 88E6193X have no PTP Ido Schimmel <idosch(a)nvidia.com> vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets Shihuang Liu <shlomojune6(a)gmail.com> net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() Jakub Kicinski <kuba(a)kernel.org> veth: manage XDP program pointers during channel resize Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: stop Tx NAPI before disabling the queues Victor Nogueira <victor(a)mojatatu.com> net/sched: act_gate: budget the per-entry list in get_fill_size Deepanshu Kartikey <kartikey406(a)gmail.com> nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix slab-out-of-bounds reads when logging service names Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix -ENOMEM on connect with zero-length service name Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate ISO15693 inventory length Cong Nguyen <congnt264(a)gmail.com> nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure Chris Gellermann <christian.gellermann(a)codasip.com> nfc: virtual_ncidev: Add missing ioctl compat handler Chris Gellermann <christian.gellermann(a)codasip.com> selftests/nci: Fix out-of-bounds store on thread join Chaithanya Lagisetty <nagachaithanya9911(a)gmail.com> selftests: nci: Fix uninitialized family ID on missing attribute Lee Jones <lee(a)kernel.org> nfc: llcp: Fix race condition in accept_queue lifecycle Lei Zhu <zhulei(a)kylinos.cn> selftests: nci: Correct pthread_create return value check Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate received frame size Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: nfcmrvl: validate helper command length before pull Weiming Shi <bestswngs(a)gmail.com> bpf: Reject dev-bound-only programs on other devices Bernard Ladenthin <bernard.ladenthin(a)gmail.com> net/sched: fix potential stack infoleak in em_text_dump() Björn Töpel <bjorn(a)kernel.org> eth: fbnic: Avoid rounding zero ring sizes Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: size the RX buffers from the frame length, not the MTU Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Capture all packets for vlan checks Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Check the dev->features for S-TAG offload testing Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Validate EEE based on the actual LPI timer value Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Support running selftests on DSA conduits Xin Long <lucien.xin(a)gmail.com> sctp: hold asoc or transport before mod_timer() in timer handlers Bernardo Soares <bsoares.it(a)gmail.com> net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports Bernardo Soares <bsoares.it(a)gmail.com> net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports Takashi Sakamoto <o-takashi(a)sakamocchi.jp> firewire: cdev: fix back-transition for iso_resource_auto client resource Zhao Gongyi <zhaogongyi(a)BYTEDANCE.COM> bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc Emil Tsalapatis <emil(a)etsalapatis.com> bpf: Reject pkt arguments in mutating subprogs Emil Tsalapatis <emil(a)etsalapatis.com> bpf: Fix bpf_sock context code generation Emil Tsalapatis <emil(a)etsalapatis.com> bpf: Fix bounds check for skb-backed dynptrs Manaf Meethalavalappu Pallikunhi <manaf.pallikunhi(a)oss.qualcomm.com> thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds Florian Schmaus <flo(a)geekplace.eu> PM: hibernate: Freeze kernel threads after image preallocation Coia Prant <coiaprant(a)gmail.com> net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure Jakub Kicinski <kuba(a)kernel.org> genetlink: report the real command id for dump-only ops in policy dumps bui duc phuc <phucduc.bui(a)gmail.com> net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error Muhammad Bilal <meatuni001(a)gmail.com> net: spacemit: clear TX descriptor on fragment mapping failure Mikhail Zaslonko <zaslonko(a)linux.ibm.com> s390/debug: Fix NULL pointer dereference in debug_info_copy() Mikhail Zaslonko <zaslonko(a)linux.ibm.com> s390/debug: Do not register views for failed static debug areas Nemesa Garg <nemesa.garg(a)intel.com> drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable Myeonghun Pak <mhun512(a)gmail.com> tg3: clean up PHYLIB resources on probe failure Shardul Bankar <shardul.b(a)mpiricsoftware.com> udp: remove a disconnected socket from the 4-tuple hash table Shardul Bankar <shardul.b(a)mpiricsoftware.com> udp: relocate a connected socket in the 4-tuple hash table on re-connect Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Fix dst leak for uncached routes. Pengpeng Hou <hppiscas(a)163.com> net: usb: sr9700: include receive overhead in the length check Ivan Vecera <ivecera(a)redhat.com> dpll: use exact lookup for reference sync pin id Nicolai Buchwitz <nb(a)tipi-net.de> net: don't require the hwtstamp NDOs when a PHY provides timestamping Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Prevent rt6_insert_exception() for dying fib6_info. Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Fix memory scaling limitation in SR-IOV mode Xu Yunxiang <xyx2021(a)mail.ustc.edu.cn> bpf: Reject non-negative offsets in stack_slot_obj_get_spi() Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() Ravindra <ravindra(a)intel.com> Bluetooth: btintel_pcie: validate device-supplied DMA indices Hui Peng <benquike(a)gmail.com> Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough Sk Anirban <sk.anirban(a)intel.com> drm/xe/gt_throttle: Report power brake as a throttle reason on CRI Ralf Lici <ralf(a)mandelbit.com> ovpn: reject invalid peer VPN addresses Ralf Lici <ralf(a)mandelbit.com> ovpn: reject multipeer peers without VPN addresses Ralf Lici <ralf(a)mandelbit.com> ovpn: reject duplicate peer VPN addresses Ralf Lici <ralf(a)mandelbit.com> ovpn: always unhash old VPN addresses before rehashing Ralf Lici <ralf(a)mandelbit.com> ovpn: replace bind when clearing stale local source Ralf Lici <ralf(a)mandelbit.com> ovpn: replace bind when learning local endpoint Ralf Lici <ralf(a)mandelbit.com> ovpn: validate peer state before caching UDP dst Ralf Lici <ralf(a)mandelbit.com> ovpn: track UDP socket route key for peer dst cache Ralf Lici <ralf(a)mandelbit.com> ovpn: skip UDP source validation for unspecified addresses Ralf Lici <ralf(a)mandelbit.com> ovpn: preserve IPv6 scope id for netlink peer endpoints Li Youhong <liyouhong(a)kylinos.cn> drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach Prathamesh Shete <pshete(a)nvidia.com> pinctrl: tegra238: Fix register bank for AON pin groups Benjamin Leggett <benjamin(a)edera.io> drm/virtio: sync shmem backing on guest-bound transfers Dmitry Osipenko <dmitry.osipenko(a)collabora.com> Revert "drm/virtio: Allow importing prime buffers when 3D is enabled" Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: release the GEM object on virtio_gpu_vram_create() errors Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak when drm_gem_handle_create() fails Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget Yuqi Xu <xuyuqiabc(a)gmail.com> bpf: Check params size before reading reserved fields Aamir Ahmed <elb12345(a)hotmail.co.uk> net: usb: catc: bound the RX packet length in catc_rx_done() Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Bound ownership depth through local kptrs and graph roots Quentin Armitage <quentin(a)armitage.org.uk> net: allow IFLA_INET_CONF messages when NLA_F_NESTED unset Yiqi Sun <sunyiqixm(a)gmail.com> sctp: avoid livelock while updating retransmit path Alexander Duyck <alexanderduyck(a)fb.com> eth: fbnic: Handle FW mailbox completions flagged with an error Alexander Duyck <alexanderduyck(a)fb.com> eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox Alexander Duyck <alexanderduyck(a)fb.com> eth: fbnic: reset num_napi when the napi vectors are freed Alexander Duyck <alexanderduyck(a)fb.com> eth: fbnic: use the Rx queue napi pointer to find the napi vector Björn Töpel <bjorn(a)kernel.org> eth: fbnic: Handle maximum standalone channels Alexander Duyck <alexanderduyck(a)fb.com> net: ethtool: keep rtnl_lock for the ioctl self test Kuniyuki Iwashima <kuniyu(a)google.com> ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink(). Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> net: gue: reject invalid REMCSUM offsets Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure Giuseppe Ranieri <giuseppe(a)ranieri.dev> drm/nouveau/disp: don't reject HDMI config on cards without SCDC Francesco Magazzu <postadelmaga(a)gmail.com> drm/nouveau/clk: don't clobber reclock status when restoring volt/fan Dan Carpenter <error27(a)gmail.com> drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update hpp.iscas <hppiscas(a)163.com> pinctrl: qcom: ipq5210: Publish the OF module alias Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: make ocfs2_calc_xattr_init() return void Zeng Heng <zengheng4(a)huawei.com> arm64: io: Reject non-user protection in ioremap_prot() Naman Gulati <namangulati(a)google.com> netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name Julian Anastasov <ja(a)ssi.bg> ipvs: revalidate ihl before icmp_send Karl Mehltretter <kmehltretter(a)gmail.com> netfilter: nft_synproxy: use the family-aware checksum helper Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_queue: hold nfnl mutex in event notifier Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> netfilter: flowtable: publish HW_DEAD after worker is done Frank Wunderlich <frank-w(a)public-files.de> gpiolib: use of_node_name if line-name is missing Linkui Xiao <xiaolinkui(a)kylinos.cn> ipv4: fib: fix data-race and stale genid check around nh->nh_saddr Kumar Kartikeya Dwivedi <memxor(a)gmail.com> libbpf: Reject truncated ldimm64 CO-RE relocations Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Restrict CO-RE poisoning to relocatable instructions Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Preserve packet pointer class displacement in regsafe() Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Make post-verification instruction rewrites killable Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, reload IB reps of LAG master before the rest Shay Drory <shayd(a)nvidia.com> net/mlx5: SD, unload reps on shared FDB create error path Shay Drory <shayd(a)nvidia.com> net/mlx5: devcom, Base component size on linked devices Heyang Tan <thy15333007817(a)163.com> octeontx2-af: use seq_file for rsrc_alloc debugfs Kyle Hendry <khendry(a)reliablecontrols.com> net: pcs: rzn1-miic: Fix config array initialization Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_u32: fix manual hash table handle IDR aliasing Björn Töpel <bjorn(a)kernel.org> eth: fbnic: Fix payload page pool error cleanup Weiming Shi <bestswngs(a)gmail.com> bpf: Skip unsettled links in link iterator Zhiling Zou <zhilinz(a)nebusec.ai> xsk: Use a 32-bit compare in xsk_map_gen_lookup Julian Sun <sunjunchao(a)bytedance.com> fs: avoid repeated scans in evict_inodes() David Howells <dhowells(a)redhat.com> netfs, afs: Fix symlink reading David Howells <dhowells(a)redhat.com> netfs: Fix netfs_read_gaps() to use separate sink folios Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Guard PMCW field accesses with dnv check Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix cio_update_schib() to not cache invalid schib Karl Mehltretter <kmehltretter(a)gmail.com> s390/pci/docs: Fix sriov_numvfs attribute name Bart Van Assche <bvanassche(a)acm.org> scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume() Eva Kurchatova <eva.kurchatova(a)virtuozzo.com> selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode Lee Jones <lee(a)kernel.org> Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() Christiano Amora <christiano.amora(a)gmail.com> Bluetooth: SMP: reject Security Request over BR/EDR Andre Przywara <andre.przywara(a)arm.com> pinctrl: sunxi: A523: fix voltage withstand encoding ZHOU Jiaxiang <me(a)fxti.xyz> scsi: sd_zbc: Reject disks with too many zones ZHOU Jiaxiang <me(a)fxti.xyz> scsi: block: Fix zones_cond out-of-bounds write on zone report Ran Hongyun <ranhongyun1(a)huawei.com> squashfs: Add dictionary size range check to prevent shift-out-of-bounds Mark Brown <broonie(a)kernel.org> KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP Sebastian Ott <sebott(a)redhat.com> KVM: selftests: fix steal_time for arm64 with host page size > 4K Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Match hyp text by physical address in fix_host_ownership() Karl Mehltretter <kmehltretter(a)gmail.com> KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0 Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: vgic-its: Free the caches when GITS_BASER changes SeungJu Cheon <suunj1331(a)gmail.com> RISC-V: KVM: Fix perf-backed counter accounting across stop and read SeungJu Cheon <suunj1331(a)gmail.com> RISC-V: KVM: Report snapshot write failure to the guest SeungJu Cheon <suunj1331(a)gmail.com> RISC-V: KVM: Preserve firmware counter value across stop/start Zongmin Zhou <zhouzongmin(a)kylinos.cn> KVM: riscv: Fix NACL hfence entry update order Yicong Yang <yang.yicong(a)picoheart.com> RISC-V: KVM: Fix the conversion between vsip and hvip Benjamin Tissoires <bentiss(a)kernel.org> HID: bpf: fix __hid_bpf_hw_check_params report length Slawomir Stepien <sst(a)poczta.fm> HID: amd_sfh: Validate PCI BAR size before mapping Sarah Emery <sarah.emery(a)canonical.com> pinctrl: generic: serialise pinctrl_generic_dt_node_to_map() Sean Anderson <sanderson(a)brivo.com> pinctrl: meson: Fix typo in s4 group name Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> bpf, arm64: set up the frame pointer for the exception callback Masoud Aghasi <maghasi(a)disroot.org> bpf: Fix u32 overflow issue in map batch operations Geliang Tang <geliang(a)kernel.org> bpf, sockmap: Fix self-redirect copied_seq double-counting Pu Lehui <pulehui(a)huawei.com> bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix out-of-bounds read of rtt_min in sock_ops Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev> bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() Siddharth Chintamaneni <sidchintamaneni(a)gmail.com> bpf: Allow terminal gotox instructions Jim Mattson <jmattson(a)google.com> KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() Oscar Priego Verdugo <oscar.priegov(a)gmail.com> HID: elecom: fix bus type for M-XGL20DLBK René Onier <f3nr1l(a)me.com> HID: winwing: fix use-after-free in force feedback teardown Lovekesh Solanki <lovekeshsolanki00(a)gmail.com> HID: multitouch: Add report ID mismatch quirk for ASUS ROG Z13 Folio Jiayuan Chen <jiayuan.chen(a)linux.dev> tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix divide-by-zero in btf_struct_walk() Sven Schnelle <svens(a)linux.ibm.com> selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc Weiming Shi <bestswngs(a)gmail.com> bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix bpf_skb_change_tail wrt csum partial skbs Steffen Eiden <seiden(a)linux.ibm.com> s390/uv: Prevent potential out-of-bounds read Steffen Eiden <seiden(a)linux.ibm.com> s390/uv: Fix loop condition in uv_find_secrets Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix race in _destroy_pages_crste() Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix potential races in dat skey functions Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key() Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Add missing srcu in kvm_s390_set_irq_state() Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix IRQ injection with SIGP Stop and Store Status Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix _gaccess_shadow_fault() Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix dirty marking in adapter_indicators_set*() Mostafa Saleh <smostafa(a)google.com> remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage Dominik Kaszewski <dominik.kaszewski(a)amd.com> drm/amd/display: Remove sink usage from DPMS Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Add StarFighter HDA SSID Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Limit Star Labs internal mic boost Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Atomize IRQ register read/modify/write ops ------------- Diffstat: Documentation/arch/arm64/booting.rst | 1 + Documentation/arch/s390/pci.rst | 2 +- .../bindings/pinctrl/qcom,nord-tlmm.yaml | 7 +- Makefile | 4 +- arch/arm64/include/asm/el2_setup.h | 9 +- arch/arm64/include/asm/io.h | 3 +- arch/arm64/include/asm/kvm_host.h | 2 +- arch/arm64/include/asm/kvm_nested.h | 3 +- arch/arm64/include/asm/kvm_pkvm.h | 3 +- arch/arm64/kernel/cpu_errata.c | 15 +- arch/arm64/kvm/arm.c | 8 +- arch/arm64/kvm/emulate-nested.c | 2 +- arch/arm64/kvm/hyp/include/nvhe/mem_protect.h | 1 + arch/arm64/kvm/hyp/nvhe/mem_protect.c | 8 + arch/arm64/kvm/hyp/nvhe/pkvm.c | 25 +- arch/arm64/kvm/hyp/nvhe/setup.c | 12 +- arch/arm64/kvm/hypercalls.c | 3 +- arch/arm64/kvm/mmu.c | 15 +- arch/arm64/kvm/nested.c | 115 ++++---- arch/arm64/kvm/sys_regs.c | 1 + arch/arm64/kvm/vgic/vgic-its.c | 43 +-- arch/arm64/net/bpf_jit_comp.c | 2 + arch/mips/net/bpf_jit_comp32.c | 2 +- arch/mips/net/bpf_jit_comp64.c | 3 +- arch/parisc/include/asm/thread_info.h | 2 +- arch/parisc/kernel/setup.c | 12 + arch/riscv/include/asm/csr.h | 20 +- arch/riscv/kvm/aia_imsic.c | 11 +- arch/riscv/kvm/mmu.c | 10 +- arch/riscv/kvm/nacl.c | 20 +- arch/riscv/kvm/vcpu.c | 3 +- arch/riscv/kvm/vcpu_exit.c | 2 +- arch/riscv/kvm/vcpu_onereg.c | 8 +- arch/riscv/kvm/vcpu_pmu.c | 33 +-- arch/riscv/kvm/vcpu_sbi_hsm.c | 4 +- arch/riscv/kvm/vcpu_timer.c | 5 +- arch/s390/crypto/hmac_s390.c | 5 +- arch/s390/include/asm/debug.h | 8 +- arch/s390/kernel/debug.c | 15 +- arch/s390/kernel/uv.c | 8 +- arch/s390/kvm/dat.c | 41 ++- arch/s390/kvm/gaccess.c | 13 + arch/s390/kvm/gmap.c | 6 +- arch/s390/kvm/interrupt.c | 149 ++++++----- arch/s390/pci/pci_event.c | 7 +- arch/s390/pci/pci_report.c | 32 ++- arch/s390/pci/pci_report.h | 4 +- arch/x86/coco/sev/svsm.c | 10 +- arch/x86/events/amd/brs.c | 9 +- arch/x86/events/amd/lbr.c | 16 +- arch/x86/events/intel/core.c | 80 ++++-- arch/x86/events/intel/ds.c | 68 ++--- arch/x86/events/intel/lbr.c | 63 +++-- arch/x86/events/perf_event.h | 4 - arch/x86/include/asm/kvm-x86-nested-ops.h | 36 +++ arch/x86/include/asm/kvm_host.h | 22 +- arch/x86/kernel/cpu/mce/core.c | 27 +- arch/x86/kvm/hyperv.c | 6 +- arch/x86/kvm/irq.h | 6 + arch/x86/kvm/mmu.h | 5 +- arch/x86/kvm/mmu/mmu.c | 129 ++++++--- arch/x86/kvm/mmu/mmu_internal.h | 66 ----- arch/x86/kvm/mmu/paging_tmpl.h | 2 +- arch/x86/kvm/pmu.c | 8 - arch/x86/kvm/svm/nested.c | 1 + arch/x86/kvm/svm/sev.c | 18 +- arch/x86/kvm/svm/svm.c | 1 + arch/x86/kvm/tss.h | 7 + arch/x86/kvm/vmx/nested.c | 1 + arch/x86/kvm/vmx/pmu_intel.c | 3 + arch/x86/kvm/vmx/vmx.c | 2 + arch/x86/kvm/x86.c | 62 +++-- arch/x86/kvm/x86.h | 2 +- arch/x86/pci/fixup.c | 99 +++++++ block/blk-zoned.c | 15 +- drivers/accel/ivpu/ivpu_drv.c | 31 ++- drivers/accel/ivpu/ivpu_drv.h | 7 +- drivers/accel/ivpu/ivpu_hw.c | 4 + drivers/accel/ivpu/ivpu_ipc.c | 8 +- drivers/accel/ivpu/ivpu_ipc.h | 2 +- drivers/accel/ivpu/ivpu_job.c | 66 ++++- drivers/accel/ivpu/ivpu_job.h | 7 +- drivers/accel/ivpu/ivpu_mmu.c | 1 - drivers/accel/ivpu/ivpu_pm.c | 1 + drivers/ata/libata-scsi.c | 10 +- drivers/base/cacheinfo.c | 11 +- drivers/bluetooth/btintel_pcie.c | 16 ++ drivers/bluetooth/btnxpuart.c | 8 +- drivers/dpll/dpll_netlink.c | 3 +- drivers/firewire/core-cdev.c | 6 +- drivers/gpio/gpio-arizona.c | 8 +- drivers/gpio/gpio-tps65219.c | 12 +- drivers/gpio/gpio-zynq.c | 10 +- drivers/gpio/gpiolib-cdev.c | 32 ++- drivers/gpio/gpiolib.c | 7 + drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_eviction_fence.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 1 + drivers/gpu/drm/amd/amdgpu/vcn_v4_0_3.c | 3 +- drivers/gpu/drm/amd/amdgpu/vcn_v5_0_1.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 71 ++++- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 8 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 12 + .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 3 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 3 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c | 62 +++-- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.h | 28 ++ drivers/gpu/drm/amd/display/dc/dml/Makefile | 8 +- drivers/gpu/drm/amd/display/dc/dml2_0/Makefile | 2 +- drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 180 ++++++------- drivers/gpu/drm/bridge/samsung-dsim.c | 2 +- drivers/gpu/drm/clients/drm_fbdev_client.c | 8 + drivers/gpu/drm/drm_pagemap.c | 12 +- drivers/gpu/drm/i915/display/intel_cursor.c | 7 +- drivers/gpu/drm/i915/display/intel_display_types.h | 2 + drivers/gpu/drm/i915/display/intel_dp_mst.c | 24 +- drivers/gpu/drm/i915/display/intel_dp_mst.h | 2 + drivers/gpu/drm/i915/display/intel_link_bw.c | 3 +- drivers/gpu/drm/i915/display/intel_psr.c | 15 ++ drivers/gpu/drm/i915/display/intel_quirks.c | 3 + drivers/gpu/drm/i915/display/skl_universal_plane.c | 9 +- drivers/gpu/drm/i915/gem/i915_gem_object.c | 2 +- drivers/gpu/drm/imagination/pvr_free_list.c | 15 +- drivers/gpu/drm/imagination/pvr_mmu.c | 19 +- drivers/gpu/drm/imagination/pvr_mmu.h | 2 +- drivers/gpu/drm/imagination/pvr_vm.c | 4 +- drivers/gpu/drm/nouveau/nouveau_bo.c | 3 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 5 +- drivers/gpu/drm/nouveau/nouveau_dmem.c | 4 +- drivers/gpu/drm/nouveau/nouveau_drm.c | 5 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 2 + drivers/gpu/drm/nouveau/nouveau_sched.c | 2 +- drivers/gpu/drm/nouveau/nouveau_sched.h | 1 + drivers/gpu/drm/nouveau/nouveau_uvmm.c | 13 +- drivers/gpu/drm/nouveau/nvif/vmm.c | 1 + drivers/gpu/drm/nouveau/nvkm/engine/disp/uoutp.c | 3 +- drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c | 23 +- drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c | 2 + drivers/gpu/drm/virtio/virtgpu_drv.h | 5 + drivers/gpu/drm/virtio/virtgpu_gem.c | 2 +- drivers/gpu/drm/virtio/virtgpu_ioctl.c | 49 +++- drivers/gpu/drm/virtio/virtgpu_prime.c | 2 +- drivers/gpu/drm/virtio/virtgpu_submit.c | 11 +- drivers/gpu/drm/virtio/virtgpu_vq.c | 46 ++++ drivers/gpu/drm/virtio/virtgpu_vram.c | 17 +- drivers/gpu/drm/xe/regs/xe_gt_regs.h | 1 + drivers/gpu/drm/xe/xe_bo.c | 7 + drivers/gpu/drm/xe/xe_bo.h | 19 ++ drivers/gpu/drm/xe/xe_gt_throttle.c | 5 +- drivers/gpu/drm/xe/xe_guc_ads.c | 2 +- drivers/gpu/drm/xe/xe_hw_engine.c | 96 ++++++- drivers/gpu/drm/xe/xe_vm.c | 21 +- drivers/gpu/drm/xe/xe_wa_oob.rules | 2 + drivers/hid/amd-sfh-hid/amd_sfh_common.h | 4 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 10 + drivers/hid/bpf/hid_bpf_dispatch.c | 12 +- drivers/hid/hid-alps.c | 25 +- drivers/hid/hid-ids.h | 3 + drivers/hid/hid-multitouch.c | 29 +- drivers/hid/hid-oxp.c | 6 +- drivers/hid/hid-quirks.c | 3 +- drivers/hid/hid-winwing.c | 10 +- drivers/hid/wacom_sys.c | 5 +- drivers/i2c/busses/i2c-qcom-geni.c | 293 +++++++++++---------- drivers/net/bonding/bond_main.c | 2 +- drivers/net/dsa/mt7530-mdio.c | 18 +- drivers/net/dsa/mt7530.c | 3 - drivers/net/dsa/mv88e6xxx/chip.c | 68 ++++- drivers/net/ethernet/airoha/airoha_npu.c | 18 +- drivers/net/ethernet/amazon/ena/ena_netdev.c | 2 + drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 3 + drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 3 + drivers/net/ethernet/atheros/atlx/atl1.c | 3 + drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 3 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 34 ++- drivers/net/ethernet/broadcom/tg3.c | 15 +- drivers/net/ethernet/brocade/bna/bnad.c | 24 +- drivers/net/ethernet/cadence/macb_main.c | 14 +- drivers/net/ethernet/freescale/fman/fman.c | 1 + drivers/net/ethernet/google/gve/gve_desc_dqo.h | 5 + drivers/net/ethernet/google/gve/gve_tx_dqo.c | 40 ++- drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c | 3 + drivers/net/ethernet/ibm/emac/core.c | 16 +- drivers/net/ethernet/marvell/octeontx2/af/common.h | 45 +++- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 104 +++----- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 6 +- .../ethernet/mellanox/mlx5/core/en/rep/bridge.c | 45 +++- drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c | 3 + .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 4 +- .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 1 - .../net/ethernet/mellanox/mlx5/core/esw/bridge.c | 15 +- .../net/ethernet/mellanox/mlx5/core/esw/bridge.h | 2 + drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 44 +++- .../ethernet/mellanox/mlx5/core/lag/shared_fdb.c | 1 + .../net/ethernet/mellanox/mlx5/core/lib/devcom.c | 5 +- drivers/net/ethernet/meta/fbnic/fbnic_csr.h | 5 + drivers/net/ethernet/meta/fbnic/fbnic_debugfs.c | 4 +- drivers/net/ethernet/meta/fbnic/fbnic_ethtool.c | 16 +- drivers/net/ethernet/meta/fbnic/fbnic_fw.c | 47 +++- drivers/net/ethernet/meta/fbnic/fbnic_fw.h | 1 + drivers/net/ethernet/meta/fbnic/fbnic_pci.c | 18 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 30 ++- drivers/net/ethernet/netronome/nfp/crypto/ipsec.c | 3 +- drivers/net/ethernet/spacemit/k1_emac.c | 3 + drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c | 5 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c | 4 +- drivers/net/ethernet/stmicro/stmmac/hwif.h | 2 +- drivers/net/ethernet/stmicro/stmmac/ring_mode.c | 4 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 21 +- .../net/ethernet/stmicro/stmmac/stmmac_selftests.c | 153 ++++++++--- drivers/net/ethernet/ti/netcp_core.c | 2 +- drivers/net/ethernet/wangxun/libwx/wx_hw.c | 1 + drivers/net/ethernet/wangxun/libwx/wx_lib.c | 65 ++++- drivers/net/ethernet/wangxun/libwx/wx_lib.h | 1 + drivers/net/ethernet/wangxun/libwx/wx_ptp.c | 161 ++++++++--- drivers/net/ethernet/wangxun/libwx/wx_ptp.h | 1 + drivers/net/ethernet/wangxun/libwx/wx_type.h | 2 + drivers/net/ethernet/wangxun/txgbe/txgbe_fdir.c | 13 +- drivers/net/ethernet/wangxun/txgbe/txgbe_main.c | 16 ++ drivers/net/macsec.c | 84 +++--- drivers/net/mdio/mdio-realtek-rtl9300.c | 6 + drivers/net/ovpn/netlink.c | 108 +++++++- drivers/net/ovpn/peer.c | 121 +++++++-- drivers/net/ovpn/peer.h | 25 +- drivers/net/ovpn/udp.c | 193 +++++++++++--- drivers/net/pcs/pcs-rzn1-miic.c | 3 +- drivers/net/pcs/pcs-xpcs.c | 4 +- drivers/net/phy/intel-xway.c | 29 +- drivers/net/phy/micrel.c | 1 + drivers/net/phy/phylink.c | 20 +- drivers/net/usb/catc.c | 15 +- drivers/net/usb/cdc_mbim.c | 5 + drivers/net/usb/lan78xx.c | 2 + drivers/net/usb/sr9700.c | 3 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 9 + drivers/net/vrf.c | 2 - drivers/net/vxlan/vxlan_core.c | 6 +- drivers/nfc/microread/microread.c | 6 +- drivers/nfc/nfcmrvl/fw_dnld.c | 11 +- drivers/nfc/pn533/pn533.c | 14 +- drivers/nfc/pn533/pn533.h | 4 +- drivers/nfc/pn533/usb.c | 4 +- drivers/nfc/pn544/pn544.c | 7 +- drivers/nfc/port100.c | 7 + drivers/nfc/st21nfca/core.c | 12 +- drivers/nfc/st21nfca/i2c.c | 29 +- drivers/nfc/trf7970a.c | 4 +- drivers/nfc/virtual_ncidev.c | 3 +- drivers/pci/of_property.c | 11 +- drivers/pci/setup-bus.c | 23 +- drivers/perf/arm_brbe.c | 2 +- drivers/pinctrl/meson/pinctrl-meson-s4.c | 2 +- drivers/pinctrl/microchip/pinctrl-mpfs-mssio.c | 6 +- drivers/pinctrl/pinctrl-generic.c | 4 + drivers/pinctrl/pinctrl-single.c | 3 +- drivers/pinctrl/qcom/pinctrl-ipq5210.c | 1 + drivers/pinctrl/qcom/pinctrl-nord.c | 34 ++- drivers/pinctrl/sunxi/pinctrl-sun55i-a523-r.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sun55i-a523.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sunxi.c | 82 ++++-- drivers/pinctrl/sunxi/pinctrl-sunxi.h | 9 + drivers/pinctrl/tegra/pinctrl-tegra238.c | 204 +++++++------- drivers/remoteproc/qcom_q6v5_adsp.c | 8 +- drivers/s390/cio/chp.c | 3 + drivers/s390/cio/cio.c | 11 +- drivers/s390/cio/cio.h | 5 +- drivers/s390/cio/cmf.c | 2 +- drivers/s390/cio/device.c | 9 +- drivers/s390/cio/device_fsm.c | 3 + drivers/s390/cio/device_ops.c | 23 ++ drivers/s390/cio/vfio_ccw_fsm.c | 2 +- drivers/s390/crypto/vfio_ap_ops.c | 18 +- drivers/scsi/libiscsi_tcp.c | 3 + drivers/scsi/megaraid/megaraid_sas_base.c | 4 +- drivers/scsi/sd_zbc.c | 8 +- drivers/thermal/gov_step_wise.c | 10 +- drivers/ufs/core/ufshcd.c | 6 + drivers/ufs/host/ufshcd-pltfrm.c | 6 +- fs/autofs/inode.c | 4 + fs/bpf_fs_kfuncs.c | 4 - fs/fs-writeback.c | 25 +- fs/inode.c | 11 +- fs/kernfs/mount.c | 4 +- fs/netfs/buffered_read.c | 34 +-- fs/netfs/objects.c | 4 +- fs/netfs/read_collect.c | 5 + fs/netfs/rolling_buffer.c | 2 +- fs/ntfs3/inode.c | 7 +- fs/ocfs2/namei.c | 9 +- fs/ocfs2/xattr.c | 13 +- fs/ocfs2/xattr.h | 8 +- fs/overlayfs/overlayfs.h | 4 +- fs/smb/client/cached_dir.c | 32 ++- fs/smb/client/dir.c | 52 +++- fs/smb/client/smb2inode.c | 6 +- fs/smb/client/smb2misc.c | 9 +- fs/smb/client/smb2ops.c | 28 +- fs/smb/client/smb2pdu.c | 54 +++- fs/smb/client/transport.c | 71 ++++- fs/squashfs/xz_wrapper.c | 6 +- fs/super.c | 114 ++++---- fs/xfs/libxfs/xfs_metafile.c | 8 +- fs/xfs/libxfs/xfs_rtrefcount_btree.c | 4 +- fs/xfs/scrub/dir.c | 2 +- fs/xfs/scrub/health.c | 6 +- fs/xfs/scrub/inode.c | 2 +- fs/xfs/scrub/inode_repair.c | 2 +- fs/xfs/scrub/newbt.c | 8 +- fs/xfs/scrub/orphanage.c | 6 +- fs/xfs/scrub/repair.c | 21 +- fs/xfs/scrub/scrub.h | 2 +- fs/xfs/scrub/trace.h | 12 +- fs/xfs/xfs_dquot.c | 8 +- fs/xfs/xfs_exchrange.c | 13 +- fs/xfs/xfs_healthmon.c | 4 +- fs/xfs/xfs_icache.c | 2 +- fs/xfs/xfs_log_recover.c | 13 +- fs/xfs/xfs_qm.c | 10 +- fs/xfs/xfs_refcount_item.c | 8 +- fs/xfs/xfs_rmap_item.c | 8 +- include/linux/ethtool.h | 2 + include/linux/fs/super_types.h | 2 +- include/linux/if_vlan.h | 3 + include/linux/mempool.h | 7 + include/linux/mm_types.h | 15 +- include/linux/perf_event.h | 17 -- include/linux/sched.h | 6 +- include/linux/sched/topology.h | 4 +- include/linux/skbuff.h | 24 +- include/net/dst.h | 3 +- include/net/gue.h | 19 +- include/net/ip6_route.h | 4 +- include/net/netfilter/nf_conntrack.h | 5 + include/net/nfc/hci.h | 2 +- include/net/nfc/nfc.h | 3 +- include/net/tcp.h | 4 +- kernel/bpf/btf.c | 140 ++++++---- kernel/bpf/core.c | 21 +- kernel/bpf/crypto.c | 5 +- kernel/bpf/fixups.c | 24 +- kernel/bpf/hashtab.c | 43 ++- kernel/bpf/memalloc.c | 50 ++-- kernel/bpf/offload.c | 2 + kernel/bpf/states.c | 3 + kernel/bpf/syscall.c | 15 +- kernel/bpf/verifier.c | 17 +- kernel/cgroup/cpuset.c | 3 +- kernel/cgroup/pids.c | 5 + kernel/events/core.c | 17 +- kernel/exit.c | 11 +- kernel/kprobes.c | 22 +- kernel/power/hibernate.c | 26 +- kernel/sched/core.c | 2 +- kernel/sched/ext/ext.c | 7 +- kernel/sched/fair.c | 173 ++++++++---- kernel/sched/topology.c | 22 +- kernel/trace/fprobe.c | 15 ++ kernel/workqueue.c | 2 +- mm/backing-dev.c | 5 +- mm/damon/core.c | 39 ++- mm/damon/ops-common.c | 7 +- mm/damon/vaddr.c | 21 +- mm/hugetlb.c | 20 +- mm/rmap.c | 6 +- mm/vma.c | 8 + net/8021q/vlan_dev.c | 5 + net/bluetooth/bnep/core.c | 17 +- net/bluetooth/bnep/netdev.c | 8 +- net/bluetooth/hci_conn.c | 14 +- net/bluetooth/hci_sock.c | 20 +- net/bluetooth/iso.c | 7 + net/bluetooth/l2cap_core.c | 10 +- net/bluetooth/mgmt.c | 27 +- net/bluetooth/rfcomm/core.c | 3 +- net/bluetooth/rfcomm/sock.c | 6 +- net/bluetooth/smp.c | 17 ++ net/bridge/br_mdb.c | 2 + net/bridge/br_stp_bpdu.c | 5 +- net/core/dev.c | 49 +++- net/core/dev.h | 2 + net/core/dev_ioctl.c | 25 +- net/core/filter.c | 46 ++-- net/core/skbuff.c | 21 +- net/core/skmsg.c | 4 + net/core/sock_map.c | 1 + net/ethtool/common.h | 2 + net/ipv4/arp.c | 1 + net/ipv4/devinet.c | 7 +- net/ipv4/fib_semantics.c | 13 +- net/ipv4/fou_core.c | 4 + net/ipv4/inet_connection_sock.c | 3 +- net/ipv4/ip_gre.c | 12 + net/ipv4/ipconfig.c | 45 ++-- net/ipv4/tcp_output.c | 3 + net/ipv4/udp.c | 44 +++- net/ipv6/exthdrs_core.c | 3 + net/ipv6/ip6_fib.c | 2 +- net/ipv6/ip6_gre.c | 2 +- net/ipv6/netfilter/ip6t_rpfilter.c | 2 +- net/ipv6/netfilter/ip6t_rt.c | 11 +- net/ipv6/route.c | 12 +- net/ipv6/seg6.c | 4 +- net/llc/llc_c_ac.c | 2 +- net/llc/llc_s_ac.c | 4 + net/llc/llc_sap.c | 8 +- net/mctp/route.c | 2 +- net/mptcp/protocol.c | 2 +- net/netfilter/ipvs/ip_vs_core.c | 6 + net/netfilter/nf_conntrack_netlink.c | 3 +- net/netfilter/nf_flow_table_offload.c | 7 +- net/netfilter/nf_tables_api.c | 10 +- net/netfilter/nfnetlink_queue.c | 8 +- net/netfilter/nft_synproxy.c | 3 +- net/netlink/genetlink.c | 8 +- net/nfc/core.c | 15 +- net/nfc/digital_dep.c | 8 +- net/nfc/llcp.h | 1 + net/nfc/llcp_commands.c | 2 +- net/nfc/llcp_core.c | 173 ++++++++---- net/nfc/llcp_sock.c | 67 +++-- net/nfc/nci/core.c | 10 +- net/nfc/netlink.c | 7 +- net/nfc/nfc.h | 3 +- net/openvswitch/conntrack.c | 37 ++- net/packet/af_packet.c | 104 +++++--- net/rds/connection.c | 6 + net/rds/ib_frmr.c | 11 +- net/sched/act_api.c | 2 +- net/sched/act_ct.c | 41 ++- net/sched/act_gate.c | 30 ++- net/sched/act_ife.c | 17 +- net/sched/act_meta_mark.c | 6 +- net/sched/act_meta_skbprio.c | 6 +- net/sched/act_meta_skbtcindex.c | 6 +- net/sched/cls_u32.c | 12 +- net/sched/em_text.c | 2 +- net/sched/sch_hfsc.c | 22 ++ net/sched/sch_teql.c | 7 +- net/sctp/associola.c | 15 +- net/sctp/input.c | 7 +- net/sctp/sm_sideeffect.c | 37 +-- net/sctp/sm_statefuns.c | 2 + net/smc/smc_core.c | 2 + net/smc/smc_ib.c | 10 +- net/tipc/group.c | 4 +- net/tipc/monitor.c | 3 +- net/vmw_vsock/af_vsock.c | 3 + net/xdp/xskmap.c | 2 +- security/ipe/eval.c | 12 +- security/ipe/eval.h | 2 +- security/ipe/fs.c | 8 +- security/ipe/hooks.c | 22 +- security/ipe/policy_fs.c | 3 + security/landlock/access.h | 8 + sound/hda/codecs/realtek/alc269.c | 9 + tools/arch/riscv/include/asm/csr.h | 20 +- tools/lib/bpf/libbpf.c | 7 + tools/lib/bpf/relo_core.c | 58 ++-- .../testing/selftests/bpf/prog_tests/linked_list.c | 4 +- tools/testing/selftests/cgroup/test_cpuset_prs.sh | 2 + tools/testing/selftests/cgroup/test_memcontrol.c | 2 +- .../ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc | 2 +- tools/testing/selftests/kvm/steal_time.c | 30 ++- tools/testing/selftests/nci/nci_dev.c | 45 ++-- virt/kvm/kvm_main.c | 30 ++- 471 files changed, 5769 insertions(+), 2585 deletions(-)

2 weeks, 1 day

[PATCH 5.15 000/752] 5.15.222-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.15.222 release. There are 752 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 02 Oct 2026 15:23:04 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.222-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.15.222-rc1 Guangshuo Li <lgs201920130244(a)gmail.com> drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() Rengarajan S <rengarajan.s(a)microchip.com> lan78xx: Enable Auto Speed and Auto Duplex configuration for LAN7801 if NO EEPROM is detected Rengarajan S <rengarajan.s(a)microchip.com> lan78xx: Enable 125 MHz CLK configuration for LAN7801 if NO EEPROM is detected Florian Eckert <fe(a)dev.tdt.de> tools/thermal/tmon: Fix compilation warning for wrong format James Clark <james.clark(a)linaro.org> perf test: Change all remaining #!/bin/sh to #!/bin/bash Christian Brauner <brauner(a)kernel.org> eventpoll: fix ep_remove struct eventpoll / struct file UAF Christian Brauner <brauner(a)kernel.org> eventpoll: move epi_fget() up Christian Brauner <brauner(a)kernel.org> eventpoll: rename ep_remove_safe() back to ep_remove() Christian Brauner <brauner(a)kernel.org> eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() Christian Brauner <brauner(a)kernel.org> eventpoll: kill __ep_remove() Christian Brauner <brauner(a)kernel.org> eventpoll: split __ep_remove() Christian Brauner <brauner(a)kernel.org> eventpoll: use hlist_is_singular_node() in __ep_remove() Christian Brauner <brauner(a)kernel.org> file: add fput() cleanup helper Linus Torvalds <torvalds(a)linux-foundation.org> eventpoll: don't decrement ep refcount while still holding the ep mutex Jakub Kicinski <kuba(a)kernel.org> net: tls: fix silent data drop under pipe back-pressure Darrick J. Wong <djwong(a)kernel.org> xfs: fix blockgc group quota scanning when usrquota isn't enforced Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: L2CAP: validate frame length before control and FCS access Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: reject out-of-range OCF values Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: validate event length before filtering Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() Myeonghun Pak <mhun512(a)gmail.com> pinctrl: single: free the IRQ on domain creation failure Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> scsi: libiscsi_tcp: Check the data direction of a Data-In PDU Doruk Tan Ozturk <doruk(a)0sec.ai> nfc: port100: reject frames whose declared length exceeds the received data Aamir Ahmed <elb12345(a)hotmail.co.uk> nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() Luxiao Xu <rakukuip(a)gmail.com> nfc: fix use-after-free in nfc_get_local_general_bytes Luxiao Xu <rakukuip(a)gmail.com> netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read Weiming Shi <bestswngs(a)gmail.com> netfilter: ip6t_rpfilter: reject routes without inet6_dev Ming Wang <wangming01(a)loongson.cn> net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist Gajdos Tamás <tamas(a)rimpianto.com> net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Gajdos Tamás <tamas(a)rimpianto.com> net: atl1c: fix soft lockup on out-of-range tpd_cons read Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry Wentao Liang <vulab(a)iscas.ac.cn> net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy() Gajdos Tamás <tamas(a)rimpianto.com> net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Zijie Huang <milkory(a)outlook.com> net: arp: terminate device name before lookup Weiming Shi <bestswngs(a)gmail.com> net/sched: reject IDR error pointers when deleting actions Wentao Liang <vulab(a)iscas.ac.cn> net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() Wei Jie LAW <98lawweijie(a)gmail.com> HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() Junjie Cao <junjie.cao(a)intel.com> HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard Chen Changcheng <chenchangcheng(a)kylinos.cn> HID: alps: fix use-after-free on input2 registration failure Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix gem reference leak in validate_init() Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: fix double-free in nvif_vmm_dtor Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix bridge reference leak in nv1a_ram_new() Guangshuo Li <lgs201920130244(a)gmail.com> drm/nouveau: fix autosuspend cleanup during teardown Dongliang Qin <cccccccccccc777777(a)gmail.com> rds: ib: Clear the sg list when mapping an MR fails Zixuan Chai <petalzu987(a)gmail.com> llc: reserve device headroom for allocated frames Ridham Khurana <khurana.ridham222(a)gmail.com> gpio: zynq: fix runtime PM leak on request error path Wentao Liang <vulab(a)iscas.ac.cn> gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() Hui Peng <benquike(a)gmail.com> ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST Norbert Szetei <norbert(a)doyensec.com> ipv6: do not let ipv6_find_hdr() return an offset past the packet end Wentao Liang <vulab(a)iscas.ac.cn> fsl/fman: Fix clk reference leak in read_dts_node() Josef Bacik <josef(a)toxicpanda.com> writeback: report a Tasks-RCU quiescent state per cgwb drain pass Pavankumar Kondeti <pavan.kondeti(a)oss.qualcomm.com> workqueue: Fix NULL current_pwq deref in flush dependency check Hui Peng <benquike(a)gmail.com> fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT Dairui Zhang <zhangdairui(a)gmail.com> af_packet: fix integer overflow in prb_calc_retire_blk_tmo() Aohan Mei <henrymei(a)tencent.com> sctp: discard the rest of the packet on a stale-cookie error Eric Dumazet <edumazet(a)google.com> tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow Mario Limonciello <mario.limonciello(a)amd.com> x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 Stephen Dolan <sdolan(a)janestreet.com> x86/mm: Fix check/use ordering in switch_mm_irqs_off() Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Paolo Bonzini <pbonzini(a)redhat.com> KVM: x86: Fix shadow paging use-after-free due to unexpected role Sean Christopherson <seanjc(a)google.com> KVM: x86: Fix shadow paging use-after-free due to unexpected GFN Paolo Bonzini <pbonzini(a)redhat.com> KVM: x86/mmu: pull call to drop_large_spte() into __link_shadow_page() David Matlack <dmatlack(a)google.com> KVM: x86/mmu: Always pass 0 for @quadrant when gptes are 8 bytes David Matlack <dmatlack(a)google.com> KVM: x86/mmu: Derive shadow MMU page role from parent Lai Jiangshan <laijs(a)linux.alibaba.com> KVM: X86: Rename gpte_is_8_bytes to has_4_byte_gpte and invert the direction Lai Jiangshan <laijs(a)linux.alibaba.com> KVM: X86: Calculate quadrant when !role.gpte_is_8_bytes Lai Jiangshan <laijs(a)linux.alibaba.com> KVM: X86: Remove useless code to set role.gpte_is_8_bytes when role.direct Paolo Bonzini <pbonzini(a)redhat.com> KVM: MMU: update comment on the number of page role combinations David Matlack <dmatlack(a)google.com> KVM: x86/mmu: Stop passing "direct" to mmu_alloc_root() David Matlack <dmatlack(a)google.com> KVM: x86/mmu: Use a bool for direct Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase Pablo Neira Ayuso <pablo(a)netfilter.org> rculist: add list_splice_rcu() for private lists Hui Peng <benquike(a)gmail.com> autofs: fix sbi->pipe file reference leak in autofs_kill_sb() Eric Dumazet <edumazet(a)google.com> vlan: ensure sufficient headroom in vlan_dev_hard_header() Eric Dumazet <edumazet(a)google.com> net/sched: sch_teql: fix shadowed err in __teql_resolve() Eric Dumazet <edumazet(a)google.com> bridge: check llc_mac_hdr_init() return value in br_send_bpdu() Eric Dumazet <edumazet(a)google.com> llc: fix skb UAF and leaks on llc_mac_hdr_init() failure Ginger Li <ginger.jzllee(a)gmail.com> tipc: Fix a data race on mon->peer_cnt in mon_timeout() Sidraya Jayagond <sidraya(a)linux.ibm.com> net/smc: fix UAF on lgr list traversal in smcr_port_err() Karsten Graul <kgraul(a)linux.ibm.com> net/smc: stop links when their GID is removed Yilin Zhang <yilinzhang(a)moonshot.ai> tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() Norbert Szetei <norbert(a)doyensec.com> net: xps: reject an out of range traffic class Sanghyun Park <sanghyun.park.cnu(a)gmail.com> vxlan: use one headroom snapshot for neighbour replies Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> ip_gre: Reject enabling collect metadata through changelink Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr Ido Schimmel <idosch(a)nvidia.com> vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets Shihuang Liu <shlomojune6(a)gmail.com> net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() Jakub Kicinski <kuba(a)kernel.org> veth: manage XDP program pointers during channel resize Deepanshu Kartikey <kartikey406(a)gmail.com> nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix slab-out-of-bounds reads when logging service names Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix -ENOMEM on connect with zero-length service name Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate ISO15693 inventory length Cong Nguyen <congnt264(a)gmail.com> nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure Chris Gellermann <christian.gellermann(a)codasip.com> nfc: virtual_ncidev: Add missing ioctl compat handler Chris Gellermann <christian.gellermann(a)codasip.com> selftests/nci: Fix out-of-bounds store on thread join Chaithanya Lagisetty <nagachaithanya9911(a)gmail.com> selftests: nci: Fix uninitialized family ID on missing attribute Lee Jones <lee(a)kernel.org> nfc: llcp: Fix race condition in accept_queue lifecycle Lei Zhu <zhulei(a)kylinos.cn> selftests: nci: Correct pthread_create return value check Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate received frame size Colin Ian King <colin.i.king(a)gmail.com> nfc: st21nfca: remove redundant assignment to variable i Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: nfcmrvl: validate helper command length before pull Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K Andrew Halaney <ahalaney(a)redhat.com> net: stmmac: Remove some unnecessary void pointers Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Capture all packets for vlan checks Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Check the dev->features for S-TAG offload testing Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Support running selftests on DSA conduits Xin Long <lucien.xin(a)gmail.com> sctp: hold asoc or transport before mod_timer() in timer handlers Zhao Gongyi <zhaogongyi(a)BYTEDANCE.COM> bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc Emil Tsalapatis <emil(a)etsalapatis.com> bpf: Fix bpf_sock context code generation bui duc phuc <phucduc.bui(a)gmail.com> net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error Mikhail Zaslonko <zaslonko(a)linux.ibm.com> s390/debug: Fix NULL pointer dereference in debug_info_copy() Mikhail Zaslonko <zaslonko(a)linux.ibm.com> s390/debug: Do not register views for failed static debug areas Myeonghun Pak <mhun512(a)gmail.com> tg3: clean up PHYLIB resources on probe failure Pengpeng Hou <hppiscas(a)163.com> net: usb: sr9700: include receive overhead in the length check Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() Hui Peng <benquike(a)gmail.com> Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: release the GEM object on virtio_gpu_vram_create() errors Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak when drm_gem_handle_create() fails Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget Aamir Ahmed <elb12345(a)hotmail.co.uk> net: usb: catc: bound the RX packet length in catc_rx_done() Yiqi Sun <sunyiqixm(a)gmail.com> sctp: avoid livelock while updating retransmit path Kuniyuki Iwashima <kuniyu(a)google.com> ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink(). Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> net: gue: reject invalid REMCSUM offsets Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure Francesco Magazzu <postadelmaga(a)gmail.com> drm/nouveau/clk: don't clobber reclock status when restoring volt/fan Dan Carpenter <dan.carpenter(a)oracle.com> drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: make ocfs2_calc_xattr_init() return void Julian Anastasov <ja(a)ssi.bg> ipvs: revalidate ihl before icmp_send Karl Mehltretter <kmehltretter(a)gmail.com> netfilter: nft_synproxy: use the family-aware checksum helper Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_queue: hold nfnl mutex in event notifier Scott Mitchell <scott.k.mitch1(a)gmail.com> netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> netfilter: flowtable: publish HW_DEAD after worker is done Vlad Buslov <vladbu(a)nvidia.com> netfilter: flowtable: allow unidirectional rules Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Restrict CO-RE poisoning to relocatable instructions Yonghong Song <yhs(a)fb.com> libbpf: Fix an error in 64bit relocation value computation Zhiling Zou <zhilinz(a)nebusec.ai> xsk: Use a 32-bit compare in xsk_map_gen_lookup Julian Sun <sunjunchao(a)bytedance.com> fs: avoid repeated scans in evict_inodes() Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix cio_update_schib() to not cache invalid schib Karl Mehltretter <kmehltretter(a)gmail.com> s390/pci/docs: Fix sriov_numvfs attribute name Niklas Schnelle <schnelle(a)linux.ibm.com> docs: s390/pci: Improve and update PCI documentation Randy Dunlap <rdunlap(a)infradead.org> Documentation: s390: correct spelling Christiano Amora <christiano.amora(a)gmail.com> Bluetooth: SMP: reject Security Request over BR/EDR Ran Hongyun <ranhongyun1(a)huawei.com> squashfs: Add dictionary size range check to prevent shift-out-of-bounds Slawomir Stepien <sst(a)poczta.fm> HID: amd_sfh: Validate PCI BAR size before mapping Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> HID: amd_sfh: Move common macros and structures Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix out-of-bounds read of rtt_min in sock_ops Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev> bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() Oscar Priego Verdugo <oscar.priegov(a)gmail.com> HID: elecom: fix bus type for M-XGL20DLBK Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix divide-by-zero in btf_struct_walk() Feng Zhou <zhoufeng.zf(a)bytedance.com> bpf: support access variable length array of integer type Sven Schnelle <svens(a)linux.ibm.com> selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc Weiming Shi <bestswngs(a)gmail.com> bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix bpf_skb_change_tail wrt csum partial skbs Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix IRQ injection with SIGP Stop and Store Status Vitaly Kuznetsov <vkuznets(a)redhat.com> HID: hyperv: streamline driver probe to avoid devres issues Junli Liu <liujunli(a)lixiang.com> erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC Sandeep Dhavale <dhavale(a)google.com> erofs: Fix detection of atomic context Jinjie Ruan <ruanjinjie(a)huawei.com> spi: zynqmp-gqspi: Use devm_spi_alloc_host() Itai Handler <itai.handler(a)gmail.com> spi: spi-zynqmp-gqspi: stop the controller on shutdown Benoît Sevens <bsevens(a)google.com> HID: logitech-hidpp: fix race condition when accessing stale stack pointer Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/adreno: fix autosuspend cleanup during teardown Sajal Gupta <sajal2005gupta(a)gmail.com> drm/gud: fix out-of-bounds write in gud_plane_atomic_check() Rik van Riel <riel(a)surriel.com> wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver Zhao Li <enderaoelyther(a)gmail.com> wifi: mwifiex: validate action frame fixed fields Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: mwifiex: validate scan response extents Doruk Tan Ozturk <doruk(a)0sec.ai> wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length Shengzhuo Wei <me(a)cherr.cc> wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST Shengzhuo Wei <me(a)cherr.cc> wifi: p54: validate curve data length in the calibration curve converters Tianchu Chen <flynnnchen(a)tencent.com> wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() Ali Ahmet Memis <ali(a)iusegentoo.com> wifi: wilc1000: fix out-of-bounds read in P2P public action frames Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: wlcore: release runtime PM ref on regdomain config failure Tianchu Chen <flynnnchen(a)tencent.com> wifi: rsi: fix heap OOB write on key removal Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: libertas_tf: fix UAF in lbtf_free_adapter() Stanislaw Gruszka <stf_xl(a)wp.pl> wifi: iwlegacy: fix broadcast stations deallocation Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: brcmsmac: fix UAF in brcms_free_timer() Wentao Liang <vulab(a)iscas.ac.cn> watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix premature reset during timeout update Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: digicolor: Avoid division by zero Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83793) release probe data through kref Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding Nuno Sá <nuno.sa(a)analog.com> hwmon: (pmbus/core) increase number of phases and add new mask Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: zero ff_effect before compat copy in input_ff_effect_from_user Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Raphaël Larocque <rlarocque(a)disroot.org> Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - check btns_desc->package.count Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - fix MS Surface Pro 11 probe failure Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() Chris Sommers <chris.sommers(a)icloud.com> Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: evdev - zero absinfo before partial copy in EVIOCSABS Alexei Turtanov <9alexei9(a)gmail.com> Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Reset command and data lines on failed tuning Xu Rao <raoxu(a)uniontech.com> mmc: spi: reset bytes_xfered before retrying CRC failures Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt Felix Gu <ustc.gu(a)gmail.com> mmc: sdio_uart: fix xmit_fifo leak when the port table is full Myeonghun Pak <mhun512(a)gmail.com> mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Florian Maillard <florian.maillard(a)mailoo.org> mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 Fan Wu <fanwu01(a)zju.edu.cn> mmc: mxcmmc: cancel data work and watchdog on remove Zhu Ling <zhuling0805(a)qq.com> mmc: core: Fix OF node reference leak on card add failure Christian Göttsche <cgzones(a)googlemail.com> selinux: always fill AVC decision in avc_has_perm_noaudit() Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> IB/mlx4: Fix use-after-free on pkey sysfs registration failure Shengzhuo Wei <me(a)cherr.cc> i2c: imx: release DMA channels on probe error Shengzhuo Wei <me(a)cherr.cc> i2c: at91: release DMA channels on remove and probe error Jarkko Sakkinen <jarkko(a)kernel.org> KEYS: trusted: Fix tpm2_load_cmd() boundary check Maoyi Xie <maoyixie.tju(a)gmail.com> keys: translate request_key_auth pid for the reading procfs instance Mark Amirkan <markdamirkan(a)gmail.com> net/packet: avoid truncating TPACKET_V3 private size Mark Amirkan <markdamirkan(a)gmail.com> net/packet: clear RX owner on VNET header error Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: hhf: cap hh_flows_limit at change time Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain Zhiling Zou <zhilinz(a)nebusec.ai> ipv6: xfrm: use full sockets in local error paths Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix non-atomic read of DMA position registers Nicolas Thibert <nithibert(a)gmail.com> Bluetooth: btusb: fix NXP IW610 composite device handling Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_and() mask generation Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_write() casting Thomas Huth <thuth(a)redhat.com> kselftest/arm64: Fix size of thread_data values for pthread_join() Wyatt Feng <wf.kernel.dev(a)gmail.com> net: xfrm: reject unrepresentable espintcp transport headers Zhiling Zou <zhilinz(a)nebusec.ai> openvswitch: avoid reallocating confirmed conntrack labels Jeffin Philip <jeffinphilip14(a)gmail.com> RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() Quanye Yang <quanyeyang(a)proton.me> RDMA/ucma: Serialize join and leave on copy_to_user failure Inbal Schussheim <inbal.lipshtat(a)mail.huji.ac.il> tcp: exclude old ACKs from tcp fast path Aohan Mei <henrymei(a)tencent.com> rds: ib: use rds_conn_drop() on protocol version mismatch Niklas Cassel <cassel(a)kernel.org> ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY Jeremy Nyberg <slickstretch3.0(a)gmail.com> Input: xpad - fix PDP Marvel Xbox 360 controller Roberts Kursitis <roberts.kursitis(a)azeron.eu> Input: xpad - add support for Azeron devices Erich Sartison <byt.es(a)mailbox.org> Input: xpad - add support for Victrix Pro BFG Controller hackyzh002 <hackyzh002(a)gmail.com> drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 hpp.iscas <hppiscas(a)163.com> Input: eeti_ts - publish the OF module alias Dmitriy Okunev <dokunevdmitriy(a)gmail.com> net: mvpp2: prevent buffer overflow in page_pool allocation Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Ack RX overrun interrupt correctly Eric Dumazet <edumazet(a)google.com> net: lock the socket in sock_gettstamp() Yige Jiang <yigejiang86(a)gmail.com> net: netsec: fix device_node reference leak on phy_np HyeongJun An <sammiee5311(a)gmail.com> ASoC: hdmi-codec: Report a change when the channel status moves Sasha Levin <sashal(a)kernel.org> ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments Shivaprasad G Bhat <sbhat(a)linux.ibm.com> powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() Nicholas Piggin <npiggin(a)gmail.com> KVM: PPC: Book3S HV Nested: Change nested guest lookup to use idr Eric Dumazet <edumazet(a)google.com> drop_monitor: fix out-of-bounds write in reset_per_cpu_data() Eric Dumazet <edumazet(a)google.com> drop_monitor: synchronize tracepoint unregistration on error path Eric Dumazet <edumazet(a)google.com> pppoatm: ensure a writable skb header and linear data Juan Perdomo <jcperdomo100(a)gmail.com> Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup Tzung-Bi Shih <tzungbi(a)kernel.org> Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown Baineng Shou <shoubaineng(a)gmail.com> dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() Eric Dumazet <edumazet(a)google.com> tcp: do not let tcp_rmem be set below 4096 Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). Karl Mehltretter <kmehltretter(a)gmail.com> wifi: brcmfmac: fix lost 802.1x TX completion wakeup Hohyun Sim <tlaghgus0425(a)korea.ac.kr> net: fddi: skfp: fix NULL deref when setting the MAC address while down Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> drm/msm/dsi: correct byte intf clock rate for 14nm DSI PHY Filipe Manana <fdmanana(a)suse.com> btrfs: tree-checker: print dev extent offset in error message Slavin Liu <bolin.liu(a)seu.edu.cn> ALSA: hda: trace PCM open only after assigning a stream Zihan Xi <zihanx(a)nebusec.ai> wifi: virt_wifi: don't transfer operstate before register Karl Mehltretter <kmehltretter(a)gmail.com> Input: trackpoint - fix the inertia attribute name in the ABI document Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> ALSA: pcm: set timer->private_data before registering the PCM timer Karl Mehltretter <kmehltretter(a)gmail.com> keys: fix lost wakeup when reaping a dead key type Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: hold reference on ct until flow is released Theodor Arsenij Larionov Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_nat: fully initialise new_addr in netmap setup Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> RDMA/siw: Bound fragmented header copies by the remaining length Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't access the TSF of a down interface Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: suppress chanctx warning for debugfs reset Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't filter by BSS type when removing stale entries Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: only group hidden BSSes with beacon entries Shivank Garg <shivankg(a)amd.com> dmaengine: wait for RCU readers before releasing dma_device Shivank Garg <shivankg(a)amd.com> dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() Shivank Garg <shivankg(a)amd.com> dmaengine: Fix device kref underflow in dma_chan_put() Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> dma-coherent: report a failed reserved memory assignment Chen-Yu Tsai <wenst(a)chromium.org> dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask Orgad Shaneh <orgads(a)gmail.com> MIPS: Octeon: apply USB FDT fixups also when USB is modular Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: cadence_master: wait and cancel cdns->work before clock stop Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: check IP header size in cfg80211_classify8021d() Carolina Jubran <cjubran(a)nvidia.com> IB/IPoIB: Avoid restoring OPER_UP after multicast flush Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short association responses Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short beacon and probe responses Peng Hao <flyingpenghao(a)gmail.com> wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path Mariano Baragiola <mbaragiola(a)linux.com> wifi: virt_wifi: free skb when disconnected Ruoyu Wang <ruoyuw560(a)gmail.com> dmaengine: sprd: Fix runtime PM reference leak in probe Quanye Yang <quanyeyang(a)proton.me> RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Enforce local fence for IB_WR_REG_MR Li RongQing <lirongqing(a)baidu.com> RDMA/mad: Fix receive buffer leak when PKey enforcement fails Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/isert: wait for deferred control PDU completions before releasing the connection Max Gurtovoy <mgurtovoy(a)nvidia.com> scsi: target: iscsi: Rename iscsi_cmd to iscsit_cmd Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/iser: reject a remote invalidation of an unregistered direction Max Gurtovoy <mgurtovoy(a)nvidia.com> IB/iser: Use iser_fr_desc as registration context Max Gurtovoy <mgurtovoy(a)nvidia.com> IB/iser: Remove iser_reg_data_sg helper function Max Gurtovoy <mgurtovoy(a)nvidia.com> IB/iser: Align coding style across driver Xixin Liu <liuxixin(a)kylinos.cn> clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate Xixin Liu <liuxixin(a)kylinos.cn> firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Cleanup siw_accept Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Introduce siw_cep_set_free_and_put Pengpeng Hou <pengpeng(a)iscas.ac.cn> ARM: socfpga: select the PL310 erratum 753970 workaround Eric Dumazet <edumazet(a)google.com> xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() Kyle Zeng <kylebot(a)openai.com> xfrm: fix compat ALLOCSPI request use-after-free Sabrina Dubroca <sd(a)queasysnail.net> xfrm: avoid RCU warnings around the per-netns netlink socket Sabrina Dubroca <sd(a)queasysnail.net> xfrm: add extack to verify_one_alg, verify_auth_trunc, verify_aead Sabrina Dubroca <sd(a)queasysnail.net> xfrm: add extack support to verify_newsa_info Sabrina Dubroca <sd(a)queasysnail.net> xfrm: add extack to verify_sec_ctx_len Sabrina Dubroca <sd(a)queasysnail.net> xfrm: propagate extack to all netlink doit handlers Ido Schimmel <idosch(a)nvidia.com> ipv6: Honor oif when choosing nexthop for locally generated traffic Ido Schimmel <idosch(a)nvidia.com> ipv6: Select best matching nexthop object in fib6_table_lookup() Arash Golgol <arash.golgol(a)gmail.com> media: video-i2c: fix buffer queue ordering Sasha Levin <sashal(a)kernel.org> Revert "perf cs-etm: Flush thread stacks after decoder reset" Sasha Levin <sashal(a)kernel.org> Revert "perf cs-etm: Avoid truncating AUX buffer sizes to int" Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg Jens Axboe <axboe(a)kernel.dk> sunvdc: fix -EIO issue due to lack of retries Günther Noack <gnoack(a)google.com> selftests/landlock: Add tests for whiteout object creation Sasha Levin <sashal(a)kernel.org> Revert "alpha: fix ieee_swcr_to_fpcr setting FPCR_DNOD unconditionally" Sasha Levin <sashal(a)kernel.org> Revert "alpha: don't leak hardware-fabricated FP exception bits to user space" Günther Noack <gnoack(a)google.com> landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation Edward Adam Davis <eadavis(a)qq.com> bluetooth/l2cap: sync sock recv cb and release Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix deadlock Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> ARM: ensure interrupts are enabled in __do_user_fault() Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> ARM: fix branch predictor hardening Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> ARM: fix hash_name() fault Darrick J. Wong <djwong(a)kernel.org> iomap: iomap: fix memory corruption when recording errors during writeback Paolo Abeni <pabeni(a)redhat.com> mptcp: close race between scheduler and state change Paolo Abeni <pabeni(a)redhat.com> mptcp: avoid unneeded actions on subflow reset Eric Biggers <ebiggers(a)kernel.org> netfilter: nft_set_pipapo_avx2: add missing vzeroupper Eric Biggers <ebiggers(a)kernel.org> crypto: sun8i-ss - Remove crypto_rng interface Eric Biggers <ebiggers(a)kernel.org> crypto: sun8i-ce - Remove crypto_rng interface Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> fou: Fix use-after-free in fou_create() Weiming Shi <bestswngs(a)gmail.com> net: appletalk: fix NULL pointer dereference in aarp_send_ddp() Weiming Shi <bestswngs(a)gmail.com> i2c: smbus: reject oversized block transfers in the common path Kazuki Hanai <hnkz.64(a)gmail.com> ALSA: us122l: Prevent write upgrades for read mappings Sasha Levin <sashal(a)kernel.org> Revert "perf tests: Fix flakiness in BPF counters test on hybrid systems" Eric Dumazet <edumazet(a)google.com> ipv6: mcast: extend RCU protection in igmp6_send() Suraj Jitindar Singh <surajjs(a)amazon.com> bpftool: remove duplicate free_btf_vmlinux() definition Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: syncookies: remember the request backup flag Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: options: handle MPC data + csum reqd + no csum Joe Damato <joe(a)dama.to> bnxt_en: Propagate RX ring init failures in bnxt_init_nic() Joe Damato <joe(a)dama.to> bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() Michael Bommarito <michael.bommarito(a)gmail.com> media: v4l2-ctrls: validate HEVC tile counts Haotian Zhang <vulab(a)iscas.ac.cn> media: v4l2-h264: Fix memcmp() size in B1 reference list comparison Michael Bommarito <michael.bommarito(a)gmail.com> media: hevc: add bounded tile-count helpers Vishnu Razdan <vrazdan(a)openai.com> hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS Fan Wu <fanwu01(a)zju.edu.cn> hwmon: (gpio-fan) Fix use-after-free in alarm work Cong Nguyen <congnt264(a)gmail.com> hwmon: (applesmc) fix key backlight workqueue leak on register failure Harald Freudenberger <freude(a)linux.ibm.com> s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm Nagamani PV <nagamani(a)linux.ibm.com> s390/qeth: allow bridgeport queries despite OS_MISMATCH leixiang <leixiang(a)kylinos.cn> KVM: PPC: Book3S HV: Set irqfd->producer only on success Kyle Zeng <kylebot(a)openai.com> ipvs: reject invalid states in connection template sync records Zihan Xi <zihanx(a)nebusec.ai> ipv4: fib: bound automatic table ID allocation Zhiling Zou <zhilinz(a)nebusec.ai> ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink Weiming Shi <bestswngs(a)gmail.com> fbdev: vfb: defer cleanup until the last reference Ilya Maximets <i.maximets(a)ovn.org> netfilter: report NLM_F_DUMP_FILTERED when all is filtered out Chengfeng Ye <nicoyip.dev(a)gmail.com> netfilter: nf_log: unregister loggers before per-net teardown Norbert Szetei <norbert(a)doyensec.com> net: openvswitch: fix use-after-free of the flow table mask array Fourie Zhang <littleddfu(a)gmail.com> net: mpls: clear inner_protocol when the last label is popped Johan Hovold <johan(a)kernel.org> net: hso: fix TIOCMIWAIT race Thorsten Blum <thorsten.blum(a)linux.dev> drm/i915: Fix memory leak in query_perf_config_list() Jann Horn <jannh(a)google.com> exec: do_close_on_exec() before taking exec_update_lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> cpufreq: initialize policy rwsem before sysfs publication Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: zero-initialize policy cpumask before sysfs publication Runyu Xiao <runyu.xiao(a)seu.edu.cn> ASoC: sti: initialize IRQ lock before requesting IRQ Tianchu Chen <flynnnchen(a)tencent.com> ASoC: sprd: validate compress buffer sizes against fixed allocations Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Free histogram the var ref when its initialization fails Ido Schimmel <idosch(a)nvidia.com> tunnels: Drop stale dst when building an ICMP error for PMTUD Ali Ahmet Memis <ali(a)iusegentoo.com> ufs: validate cylinder group metadata before caching it Ali Ahmet Memis <ali(a)iusegentoo.com> ufs: create the root dentry after loading cylinder metadata James Hilliard <james.hilliard1(a)gmail.com> watchdog: sunxi_wdt: preserve boot-enabled watchdog Harry Wentland <harry.wentland(a)amd.com> dm/amdgpu: fix malformed link_settings debugfs output Tristan Madani <tristan(a)talencesecurity.com> ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf Roman Prucha <zorgan.roman(a)gmail.com> ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough Zihan Xi <zihanx(a)nebusec.ai> ipv6: fix fib6 walker UAF on seq stop Shivaprasad G Bhat <sbhat(a)linux.ibm.com> powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver Sasha Levin <sashal(a)kernel.org> Revert "scsi: smartpqi: Capture controller reason codes" Sasha Levin <sashal(a)kernel.org> Revert "scsi: core: Register sysfs attributes earlier" Sasha Levin <sashal(a)kernel.org> Revert "scsi: smartpqi: Switch to attribute groups" Sasha Levin <sashal(a)kernel.org> Revert "scsi: smartpqi: Fix BUILD_BUG_ON() statements" Sasha Levin <sashal(a)kernel.org> Revert "scsi: smartpqi: Stop using the SCSI pointer" Sasha Levin <sashal(a)kernel.org> Revert "scsi: smartpqi: Fix AIO retry marker cleared by SCSI core between dispatches." Eric Dumazet <edumazet(a)google.com> macvlan: inherit needed_headroom and needed_tailroom from lowerdev Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent out-of-bounds reads in share config responses Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands Dmitry Bogdanov <d.bogdanov(a)yadro.com> scsi: target: iscsi: Handle abort for WRITE_PENDING cmds WenTao Liang <vulab(a)iscas.ac.cn> drm/amd/display: set new_stream to NULL after release Stian Halseth <stian(a)itx.no> sunvdc: unmap LDC cookies when the descriptor send fails Greg Marsden <greg.marsden(a)oracle.com> net/rds: fix tcp stream corruption with large pages Linus Walleij <linus.walleij(a)linaro.org> net/rds: Pass a pointer to virt_to_page() Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: fix PF/CGX debugfs PCI bus lookup Aamir Ahmed <elb12345(a)hotmail.co.uk> net: hinic: fix mailbox segment buffer overflow Li Youhong <liyouhong(a)kylinos.cn> net: sun4i-emac: fix missing of_node_put() for phy_node Kuniyuki Iwashima <kuniyu(a)google.com> net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: free emptied bucket on filter move Thibault Ferrante <thibault.ferrante(a)canonical.com> selftests/powerpc/tm: Fix tcheck() reading uninitialised CR value Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: initialize ptp_lock at probe time Yannick Vignon <yannick.vignon(a)nxp.com> net: stmmac: optimize locking around PTP clock reads Qingfang Deng <qingfang.deng(a)linux.dev> ppp_synctty: ensure a writeable skb header Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors Cong Nguyen <congnt264(a)gmail.com> hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix clock leak and spurious timer in settimeout() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Avoid division by zero David Arcari <darcari(a)redhat.com> watchdog: fix hrtimer start when pretimeout is zero Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count RX descriptors for freeq refill Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count RX drops once per frame Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: No mapping is a dropped rx Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count dropped frames as NAPI work Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Finish RX updates before NAPI completion Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Fix budget accounting Alice Mikityanska <alice(a)isovalent.com> net: ipv6: Clamp to IP6_MAX_MTU in ip6_dst_mtu_maybe_forward Andrew Stellman <astellman(a)stellman-greene.com> virtio-pci: return IRQ_HANDLED after non-zero ISR Linfeng Sun <linfeng.sun.dev(a)gmail.com> vdpa_sim_blk: reject out-of-range sector starts Stefano Garzarella <sgarzare(a)redhat.com> vdpa_sim_blk: make vdpasim_blk_check_range usable by other requests Stefano Garzarella <sgarzare(a)redhat.com> vdpa_sim_blk: use dev_dbg() to print errors Yu Zhang <yuz08559(a)gmail.com> vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx Jia Jia <physicalmtea(a)gmail.com> virtio_console: do not free control-out buffers on remove Xianting Tian <xianting.tian(a)linux.alibaba.com> virtio-console: call scheduler when we free unused buffs hpp.iscas <hppiscas(a)163.com> ASoC: mt6351: Publish the OF module alias Florian Westphal <fw(a)strlen.de> netfilter: ip6_tables: set F_PROTO when proto value is nonzero Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: cope with concurrent instance destruction hpp.iscas <hppiscas(a)163.com> ASoC: Intel: SST: Publish the PCI module aliases hpp.iscas <hppiscas(a)163.com> ASoC: bcm: bcm63xx: Publish the OF module aliases Edward Adam Davis <eadavis(a)sina.com> ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: ets: clamp quantum in parse and fallback paths Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: drr: clamp quantum in change class Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: pie: clamp psched_mtu in pie_drop_early Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: hhf: clamp quantum in change and init paths Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sfq: clamp quantum in change path Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: fq_pie: clamp quantum in change path Eric Dumazet <edumazet(a)google.com> net_sched: sch_fq_pie: implement lockless fq_pie_dump() Lama Kayal <lkayal(a)nvidia.com> net/mlx5: E-Switch, prevent mc_list repopulation during vport disable Yael Chemla <ychemla(a)nvidia.com> net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Fix use-after-free race in sample_restore_put() Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Fix ETS zero BW reporting when one TC holds 100% Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5e: Fix setting RS FEC after remapping Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/kexec_file: Use inclusive range checks in add_usable_mem() Jamal Hadi Salim <jhs(a)mojatatu.com> net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations Seungwon Bae <qotmddnjs(a)ajou.ac.kr> vxlan: reject dynamic fdb entries that reference a nexthop id Jason Winter <jjx(a)live.nl> net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow Jakub Kicinski <kuba(a)kernel.org> net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size Jakub Kicinski <kuba(a)kernel.org> net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size Eric Dumazet <edumazet(a)google.com> bonding: use skb_cow_head() in bond_do_alb_xmit() and rlb_arp_xmit() Ido Schimmel <idosch(a)nvidia.com> nexthop: Initialize extack in remove_nh_grp_entry() Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix NULL-ptr-deref in btf_var_show() Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix NULL-ptr-deref when showing a void BTF type Takashi Iwai <tiwai(a)suse.de> ALSA: caiaq: Fix potential double-free at error path Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: reconfigure RX packet parser table in stmmac_hw_setup() after reset Allison Henderson <achender(a)kernel.org> net/rds: don't let rds_conn_shutdown() consume a concurrent drop Håkon Bugge <haakon.bugge(a)oracle.com> net/rds: acquire the fastpath locks in rds_conn_shutdown() Allison Henderson <achender(a)kernel.org> net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() Gerd Rausch <gerd.rausch(a)oracle.com> net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown Allison Henderson <achender(a)kernel.org> net/rds: clear cp_flags bits individually in rds_conn_path_reset() Allison Henderson <achender(a)kernel.org> net/rds: use clear_bit_unlock() in release_refill() Allison Henderson <achender(a)kernel.org> net/rds: use wq_has_sleeper() in release_in_xmit() Eric Dumazet <edumazet(a)google.com> bonding: do not clear curr_active_slave prematurely when releasing all slaves Eduard Zingerman <eddyz87(a)gmail.com> bpf: reject BPF_PSEUDO_FUNC reference to the main program Henry Martin <bsdhenrymartin(a)gmail.com> tracing/probes: Fix use-after-free on field name/type of events with multiple probes Joas Antonio dos Santos <joasantonio108(a)gmail.com> netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() Kyle Zeng <kylebot(a)openai.com> ipvs: fix reversed sequence option serialization Qu Wenruo <wqu(a)suse.com> btrfs: do not force reloc root creation during qgroup_account_snapshot() Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Program the MSP FIFO watermarks Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Request the MSP MMIO resource Arnd Bergmann <arnd(a)arndb.de> ASoC: ux500: remove stedma40 references Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Validate MSP DAI configuration Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Correct MSP frame and bit clock setup Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Propagate MSP setup errors Arnd Bergmann <arnd(a)arndb.de> ASoC: ux500: remove platform_data support Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Fix MSP stream lifecycle handling Eric Dumazet <edumazet(a)google.com> locking/lockdep: Invalidate stale class_cache entries for zapped classes Kent Overstreet <kent.overstreet(a)linux.dev> lockdep: Add lock_set_cmp_fn() annotation Boqun Feng <boqun.feng(a)gmail.com> locking/lockdep: Improve the deadlock scenario print for sync and read lock Boqun Feng <boqun.feng(a)gmail.com> locking/lockdep: Introduce lock_sync() Leo Yan <leo.yan(a)arm.com> perf/core: Skip empty AUX records with only format flags Ivy Lopez <skunkolee(a)gmail.com> scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues() Nitesh Narayan Lal <nitesh(a)redhat.com> scsi: mpt3sas: Use irq_set_affinity_and_hint() Guanghui Yang <3497809730(a)qq.com> btrfs: restore active device pointers after failed sprout Anand Jain <anand.jain(a)oracle.com> btrfs: consolidate device_list_mutex in prepare_sprout to its parent Guanghui Yang <3497809730(a)qq.com> btrfs: detach failed sprout device from transaction update list wangdicheng <wangdicheng(a)kylinos.cn> ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits Hui Su <sh_def(a)163.com> staging: fbtft: make dirty_lock IRQ-safe Kuniyuki Iwashima <kuniyu(a)google.com> af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). Eric Dumazet <edumazet(a)google.com> ipv6: sr: restore network header before routing and forwarding Tung Nguyen <tung.quang.nguyen(a)est.tech> tipc: fix NULL deref in tipc_named_node_up() on empty publication list Qingfang Deng <qingfang.deng(a)linux.dev> ppp: ppp_async: simplify tty disc_data access Jiri Slaby <jirislaby(a)kernel.org> tty: make tty_ldisc_ops::hangup return void Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Validate and program TDM slots correctly Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Correct digital interface format setup Mark Brown <broonie(a)kernel.org> ASoC: ab8500: Update to modern clocking terminology Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Repair the DAPM capture graph Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Reset the audio block before configuring it Gongwei Li <ligongwei(a)kylinos.cn> Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: rate limit unmapped SID errors Yilin Zhang <yilinzhang(a)moonshot.ai> ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF Colin Ian King <colin.i.king(a)gmail.com> OPP: of: Fix potential multiplication overflow when calculating freq Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix NULL pointer dereference in PM callbacks James Nugraha <aslan.jnn(a)gmail.com> net: amd-xgbe: discard rx packets with bad FCS Henry Martin <bsdhenrymartin(a)gmail.com> sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> smb: client: transport: Fix debug printing in __release_mid() Xin Long <lucien.xin(a)gmail.com> sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: size the RTM_GETACTION reply from the actions Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: budget all shared attributes in notify skbs Hongfu Li <lihongfu(a)kylinos.cn> selftests/cgroup: Fix cg_run_in_subcgroups ignoring arg parameter Xixin Liu <liuxixin(a)kylinos.cn> nvme-rdma: fix -EIO cleanup order in queue_rq Dan Carpenter <error27(a)gmail.com> drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Jad Keskes <inasj268(a)gmail.com> EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix channel address decode for non-hash mode Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix channel selection hash Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix interleave boundary condition Xie Yuanbin <xieyuanbin1(a)huawei.com> ARM: 9484/1: enable interrupts when unhandled user faults are triggered Sasha Levin <sashal(a)kernel.org> Revert "Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU" Sasha Levin <sashal(a)kernel.org> Revert "Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU" SJ Park <sj(a)kernel.org> mm/damon/core: avoid infinite kdamond_merge_regions() internal loop Vlatko Kosturjak <kost(a)linux.hr> ppp_async: drop the errored frame instead of resetting its headroom Geert Uytterhoeven <geert+renesas(a)glider.be> clk: at91: pmc: #undef field_{get,prep}() before definition Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state Rudi Heitbaum <rudi(a)heitbaum.com> ASoC: rt5645: Perform the initial jack detect at probe Jia Jia <physicalmtea(a)gmail.com> vhost-scsi: flush backend after device ioctls Robert Abrahamse <denobyte2(a)gmail.com> ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) Jiale Yao <yaojiale02(a)163.com> Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame Deepanshu Kartikey <kartikey406(a)gmail.com> wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() Li Qiang <liqiang01(a)kylinos.cn> cifs: validate idmap key payload length Vaibhav Jain <vaibhav(a)linux.ibm.com> powerpc/pseries: Ensure vpa,slb_shadow & dtl are unregistered during crash Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: pass the return value of skb_checksum_help() Madhavender Singh <madhav(a)disroot.org> ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx Minhong He <heminhong(a)kylinos.cn> phonet: check register_netdevice_notifier() error in phonet_device_init() Pengpeng Hou <pengpeng(a)iscas.ac.cn> drm/gma500: return errors from Oaktrail HDMI I2C reads Ibrahim Hashimov <security(a)auditcode.ai> wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO Kamal Wadhwa <kamal.wadhwa(a)oss.qualcomm.com> regulator: core: clamp voltage constraints before applying apply_uV Georgi Valkov <gvalkov(a)gmail.com> wifi: mwifiex: replace one-element arrays with flexible array members Daniel C. Ribeiro <dcoutinho.96(a)gmail.com> ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: bound aligned TLV advance in FW parser Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized Pu Hu <hupu(a)transsion.com> arm64: kprobes: Allow reentering kprobes while single-stepping Yu Peng <pengyu(a)kylinos.cn> arm64: fixmap: Allow 256K early_ioremap() at any offset Tao Cui <cuitao(a)kylinos.cn> blk-cgroup: fix leaks and online flag on radix_tree_insert failure Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix sched scan IE sizing Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix an off-by-1 boundary check Filipe Manana <fdmanana(a)suse.com> btrfs: fix reloc root cleanup in merge_reloc_roots() Filipe Manana <fdmanana(a)suse.com> btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() Dave Chen <davechen(a)synology.com> btrfs: only account delalloc bytes for regular file inodes in btrfs_getattr() Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: rsi: validate beacon length before fixed buffer copy Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: mark the rcu locked areas properly Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: libipw: fix key index receive bound checks Liang Hao <haohlliang(a)gmail.com> gpio: dwapb: Mask interrupts at hardware initialization Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate rx/tx MLME callback frame lengths before access Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate SID namespace before mapping IDs Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: mark invalid session responses as signed Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: find bound sessions during reauthentication Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: libertas: reject short monitor TX frames Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate deauth frame length before reason access Corentin Labbe <clabbe(a)baylibre.com> wifi: ralink: RT2X00: init EEPROM properly Pengpeng Hou <pengpeng(a)iscas.ac.cn> ALSA: usb-audio: caiaq: validate EP1 reply lengths Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix credit charge calculation for SMB2 QUERY_INFO Yousef Alhouseen <alhouseenyousef(a)gmail.com> xen/gntalloc: validate grant count before allocation Farhad Alemi <farhad.alemi(a)berkeley.edu> freevxfs: don't BUG() on unknown typed-extent type Yousef Alhouseen <alhouseenyousef(a)gmail.com> xen/front-pgdir-shbuf: free grant reference head on errors Qiang Liu <liuqiang(a)kylinos.cn> ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling Qiang Liu <liuqiang(a)kylinos.cn> ksmbd: fix n.data memory leak in ksmbd_vfs_set_dos_attrib_xattr Gustavo Kenji Mendonça Kaneko <kaneko.dev(a)pm.me> drm/arm/komeda: fix error handling for clk_prepare_enable() and callers Qiang Liu <liuqiang(a)kylinos.cn> ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr Florian Westphal <fw(a)strlen.de> netfilter: nf_conntrack_expect: zero at allocation time Gustavo Kenji Mendonça Kaneko <kaneko.dev(a)pm.me> drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend Weiming Shi <bestswngs(a)gmail.com> btrfs: tree-checker: validate INODE_REF's namelen Haoxiang Li <haoxiang_li2024(a)163.com> fbdev: pm2fb: unwind WC setup on probe failure Adriana Stancu <adriana(a)arista.com> rtc: bq32000: add delay between RTC reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> net: au1000: move free_irq out of the close-time spinlocked section Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/sysfs: Use kstrtobool() to parse the ROM attribute input Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: break RH leases before delete-on-close Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: apply create security descriptor first Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: treat unnamed DATA stream as base file Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use connection ClientGUID for lease lookup Tommy Huang <tommy_huang(a)aspeedtech.com> rtc: aspeed: add AST2700 compatible Samuel Moelius <sam.moelius(a)trailofbits.com> f2fs: validate inline dentry name lengths before conversion Chen Cheng <chencheng(a)fnnas.com> md/raid5: let stripe batch bm_seq comparison wrap-safe Yu Kuai <yukuai(a)fygo.io> md/raid5: account discard IO Hans Zhang <18255117159(a)163.com> PCI: mediatek: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: rockchip: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: altera: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: iproc: Protect root bus removal with rescan lock Jean-Louis Colaco <jean-louis.colaco(a)orange.fr> ALSA: usb-audio: Add quirk for YAMAHA CDS3000 Matthew Bystrin <dev.mbstr(a)gmail.com> mfd: rsmu: Add 8a34002 support Tobias Deiminger <tobias.deiminger(a)linutronix.de> leds: pca9532: Don't stop blinking for non-zero brightness Yousef Alhouseen <alhouseenyousef(a)gmail.com> leds: uleds: Return -EFAULT on copy_to_user() failure Galen Hassen <rwekyes(a)gmail.com> ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 guoqi0226 <guoqi0226(a)163.com> spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() Rob Herring (Arm) <robh(a)kernel.org> gpio: pisosr: Read "ngpios" as u32 Arnd Bergmann <arnd(a)arndb.de> scsi: bfa: Reduce kernel stack usage in bfa_fcs_lport_fdmi_build_portattr_block() Zhang Tianci <zhangtianci.1997(a)bytedance.com> fuse: set ff->flock only on success Rosen Penev <rosenp(a)gmail.com> sparc: Disable compat support with LLD Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA Alice Mikityanska <alice(a)isovalent.com> net/sched: act_csum: don't mangle UDP tunnel GSO packets Agalakov Daniil <ade(a)amicon.ru> e1000e: limit endianness conversion to boundary words Raf Dickson <rafdog35(a)gmail.com> vsock: use sk_acceptq_is_full() helper in all transports Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ptp: ocp: add shutdown callback Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Rosen Penev <rosenp(a)gmail.com> sparc64: uprobes: add missing break bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: L2CAP: validate connectionless PSM length Potin Lai <potin.lai.pt(a)gmail.com> hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i Tze Yee Ng <tze.yee.ng(a)altera.com> dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems Yuho Choi <dbgh9129(a)gmail.com> sctp: Unwind address notifier registration on failure Nikolay Metchev <nikolaymetchev(a)gmail.com> platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table Xu Rao <raoxu(a)uniontech.com> ata: libata-pmp: add JMicron JMS562 quirk Kory Maincent <kory.maincent(a)bootlin.com> hwmon: (adt7462) Add of_match_table to support devicetree KangNing Liao <lkangn.kernel(a)gmail.com> btrfs: protect sb_write_pointer() with invalidate lock Jiajia Liu <liujiajia(a)kylinos.cn> wifi: mt76: transform aspm_conf for pci_disable_link_state Gleb Sonichev <sonichev555(a)gmail.com> platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table Rosen Penev <rosenp(a)gmail.com> net: ibm: emac: mal: fix potential system hang in mal_remove() Al Viro <viro(a)zeniv.linux.org.uk> configfs_depend_prep(): pass configfs_dirent instead of dentry Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Add request-pool slack for delayed recycling Aurelien DESBRIERES <aurelien(a)hackers.camp> RDMA/rtrs-srv: Fix integer underflow in process_read and process_write ZhengYuan Huang <gality369(a)gmail.com> btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() Rosen Penev <rosenp(a)gmail.com> netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() Ruoyu Wang <ruoyuw560(a)gmail.com> ALSA: es18xx: check control allocation before private data setup Maoyi Xie <maoyixie.tju(a)gmail.com> hsr: broadcast netlink notifications in the device's net namespace Guangshuo Li <lgs201920130244(a)gmail.com> net: cpsw_new: unregister devlink on port registration failure Dawei Feng <dawei.feng(a)seu.edu.cn> bpf: NUL-terminate replaced sysctl value Li RongQing <lirongqing(a)baidu.com> RDMA/mlx5: Fix state and counter desync on loopback enable failure Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() Thiyagarajan Pandiyan <thiyagarajan(a)aerlync.com> wifi: nl80211: Increase ie_len size to prevent truncated IEs in new peer notifications Rosen Penev <rosenp(a)gmail.com> ipmi: si: Use platform_get_irq_optional() to retrieve interrupt Andrei Faleichyk <andrei.faleichyk(a)noogadev.com> ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP Michael Walle <mwalle(a)kernel.org> clk: keystone: don't cache clock rate Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: Prevent queuing new commands if xhci is inaccessible Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix handling of NAPI on the remove path David Yang <mmyangfl(a)gmail.com> net: dsa: sja1105: flower: reject cross-chip redirect Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix the error path in dpaa2_switch_rx() Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: rework FDB management on the bridge leave path Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: seq: oss: Reject reads that cannot fit the next event Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: codecs: rk3328: Use managed GPIO and clock helpers Alessandro Schino <7991aleschino(a)gmail.com> ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e() ZhengYuan Huang <gality369(a)gmail.com> fs/ntfs3: validate index entry key bounds ZhengYuan Huang <gality369(a)gmail.com> fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib Simon Xue <xxm(a)rock-chips.com> iommu/rockchip: disable fetch dte time limit Wentao Liang <vulab(a)iscas.ac.cn> net: qrtr: fix node refcount leak on ctrl packet alloc failure Chen Pei <cp0613(a)linux.alibaba.com> ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach liyouhong <liyouhong(a)kylinos.cn> ata: ahci: fail probe if BAR too small for claimed ports Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive Rosen Penev <rosenp(a)gmail.com> net: ibm: emac: Reserve VLAN header in MJS limit Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Also reset {insn,data}_cur on realloc failure Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: switch to non-devm request_threaded_irq() Rik van Riel <riel(a)surriel.com> perf/ftrace: Fix WARNING in __unregister_ftrace_function Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC Osama Abdelkader <osama.abdelkader(a)gmail.com> mmc: davinci: fix mmc_add_host order in probe Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: only handle alert events when the peripheral is attached Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Complete coredump handling Alexandre Courbot <acourbot(a)nvidia.com> scripts: modpost: detect and report truncated buf_printf() output shayderrr <darknessshayder(a)gmail.com> host1x: bus: Fix missing ops null check in error teardown Viacheslav Dubeyko <slava(a)dubeyko.com> hfs: rework hfsplus_readdir() logic ikaros <void0red(a)gmail.com> ACPICA: add boundary checks in two places ikaros <void0red(a)gmail.com> ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() Weiming Shi <bestswngs(a)gmail.com> ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() ikaros <void0red(a)gmail.com> ACPICA: Add validation for node in acpi_ns_build_normalized_path() ikaros <void0red(a)gmail.com> ACPICA: Add package limit checks in parser functions ikaros <void0red(a)gmail.com> ACPICA: validate handler object type in two places ikaros <void0red(a)gmail.com> ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() ikaros <void0red(a)gmail.com> ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) ikaros <void0red(a)gmail.com> ACPICA: Prevent adding invalid references ikaros <void0red(a)gmail.com> ACPICA: validate byte_count in acpi_ps_get_next_package_length() ikaros <void0red(a)gmail.com> ACPICA: add boundary checks in acpi_ps_get_next_field() ikaros <void0red(a)gmail.com> ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() ikaros <void0red(a)gmail.com> ACPICA: Fix condition check in acpi_ps_parse_loop() Jeremy Klarenbeek <jeremy.klarenbeek99(a)gmail.com> drm/amd/pm/si: Fix updating clock limits from power states Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: addrconf: fix temp address generation after prefix deprecation Uwe Küchler <uwe(a)kuechler.org> ALSA: usb-audio: Add quirk for Novation Mininova Mostafa Saleh <smostafa(a)google.com> irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed Stepan Ionichev <sozdayvek(a)gmail.com> iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind Rosen Penev <rosenp(a)gmail.com> mips: cps: Assemble jr.hb with an R2 ISA level Dario Binacchi <dario.binacchi(a)amarulasolutions.com> drm/panel: simple: Add AM-1280800W8TZQW-T00H Daniel Lezcano <daniel.lezcano(a)oss.qualcomm.com> thermal/drivers/tegra/soctherma: Switch to devm cooling device registration Adrian Ng Ho Yin <adrian.ho.yin.ng(a)altera.com> clk: socfpga: agilex: implement l3_main_free_clk Heiko Carstens <hca(a)linux.ibm.com> s390/zcore: Removed unused variables Jiayuan Chen <jiayuan.chen(a)linux.dev> rds: annotate data-race around rs_seen_congestion Maoyi Xie <maoyixie.tju(a)gmail.com> rds: filter RDS_INFO_* getsockopt by caller's netns Chenguang Zhao <zhaochenguang(a)kylinos.cn> netlabel: fix IPv6 unlabeled address add error handling Venkat Rao Bagalkote <venkat88(a)linux.ibm.com> char/nvram: Remove redundant nvram_mutex Christian Marangi <ansuelsmth(a)gmail.com> usb: host: add ARCH_AIROHA in XHCI MTK dependency Marco Felsch <m.felsch(a)pengutronix.de> serial: 8250: fix possible ISR soft lockup Stepan Ionichev <sozdayvek(a)gmail.com> usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log Oliver Neukum <oneukum(a)suse.com> usb: core: hcd: fix possible deadlock in rh control transfers Adrian Wowk <dev(a)adrianwowk.com> usbip: vhci_hcd: fix NULL deref in status_show_vhci Christoph Hellwig <hch(a)lst.de> isofs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> omfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> hpfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> jfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> qnx4: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> minix: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> bfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> affs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> befs: handle set_blocksize failures Allison Henderson <achender(a)kernel.org> net/rds: Don't sleep inside rds_ib_conn_path_shutdown Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: make cl->quantum lockless Eric Dumazet <edumazet(a)google.com> net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() Jan Volckaert <janvolck(a)gmail.com> net: usb: qmi_wwan: add MeiG SRM813Q Yury Norov <ynorov(a)nvidia.com> bitfield: wire __bf_shf to __builtin_ctzll Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Validate SENSOR_UPDATE payload size Leonardo Bras <leo.bras(a)arm.com> arm64/daifflags: Make local_daif_*() helpers __always_inline Pierre Barre <pierre(a)barre.sh> 9p: invalidate readdir buffer on seek Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usx2y: Drain pending US-428 pipe-4 output commands Joonwon Kang <joonwonkang(a)google.com> mailbox: Make mbox_send_message() return error code when tx fails Chenguang Zhao <zhaochenguang(a)kylinos.cn> RDMA/mlx5: Use QP port when decoding responder CQEs Alessandro Baldi <baldovic(a)virgilio.it> media: imon: Add iMON VFD HID OEM v1.2 key mappings Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-ecc - add support for atecc608b Lukas Wunner <lukas(a)wunner.de> crypto: ecc - Unbreak the build on arm with CONFIG_KASAN_STACK=y Kumar Meiyappan <kumar.meiyappan(a)microchip.com> scsi: pm8001: Reject non-fatal dump when controller is crashed Kumar Meiyappan <kumar.meiyappan(a)microchip.com> scsi: pm8001: Reject firmware update in fatal error state Stefan Berger <stefanb(a)linux.ibm.com> integrity: Check for NULL returned by asymmetric_key_public_key Sophie D <patches(a)scd31.com> drm/gud: Add RCade Display Adapter VID/PID pair Viacheslav Dubeyko <slava(a)dubeyko.com> hfsplus: rework hfsplus_readdir() logic Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Fix CRC open failure during active rendering Stepan Ionichev <sozdayvek(a)gmail.com> mmc: davinci: avoid NULL deref of host->data in IRQ handler Shawn Lin <shawn.lin(a)rock-chips.com> mmc: core: Add validation for host-provided max_segs Ethan Nelson-Moore <enelsonmoore(a)gmail.com> ASoC: ti: omap3pandora: update board check to use DT compatible Geert Uytterhoeven <geert+renesas(a)glider.be> clk: renesas: cpg-mssr: Add number of clock cells check Ruoyu Wang <ruoyuw560(a)gmail.com> crypto: ixp4xx - fix buffer chain unwind on allocation failure Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> media: em28xx-video: fix missing res_free() on init_usb_xfer failure Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: enable .rmu_disable() for 6320 family Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: define .pot_clear() for 6321 Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: fix number of g1 interrupts for 6320 family Zhaoyang Yu <2426767509(a)qq.com> media: dm1105: fix missing error check for dma_alloc_coherent Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Set tb->root_switch to NULL when domain is stopped Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Keep the domain reference while processing hotplug Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Purge based on the cdev's online status Riccardo Boninsegna <rboninsegna2(a)gmail.com> media: rc: mceusb: Add support for 04eb:e033 Pengpeng Hou <pengpeng(a)iscas.ac.cn> soundwire: validate DT compatible before parsing it Danielle Ratson <danieller(a)nvidia.com> bridge: Do not suppress ARP probes and DAD NS unconditionally Marco Elver <elver(a)google.com> kcsan: Silence -Wmaybe-uninitialized when calling __kcsan_check_access() Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: always allow transmitting null-data on TXQs Viacheslav Dubeyko <slava(a)dubeyko.com> hfsplus: fix issue of direct writes beyond end-of-file Lukas Wunner <lukas(a)wunner.de> PCI: Stop setting cached power state to 'unknown' on unbind Hirokazu Honda <hiroh(a)chromium.org> tee: optee: Allow MT_NORMAL_TAGGED shared memory Goldwyn Rodrigues <rgoldwyn(a)suse.de> ima: return error early if file xattr cannot be changed Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate write errors in generic mixer put callbacks Ioana Ciornei <ioana.ciornei(a)nxp.com> bus: fsl-mc: wait for the MC firmware to complete its boot ------------- Diffstat: .../ABI/testing/sysfs-devices-platform-trackpoint | 2 +- Documentation/driver-api/serial/tty.rst | 2 +- Documentation/networking/ip-sysctl.rst | 2 + Documentation/s390/pci.rst | 144 ++++-- Documentation/s390/vfio-ccw.rst | 2 +- Documentation/virt/kvm/mmu.rst | 8 +- Makefile | 4 +- arch/alpha/include/uapi/asm/fpu.h | 8 +- arch/alpha/kernel/traps.c | 6 +- arch/alpha/math-emu/math.c | 88 +--- arch/arm/mach-socfpga/Kconfig | 2 +- arch/arm/mm/alignment.c | 4 + arch/arm/mm/fault.c | 82 ++- arch/arm64/include/asm/daifflags.h | 10 +- arch/arm64/include/asm/fixmap.h | 6 +- arch/arm64/include/asm/kprobes.h | 6 + arch/arm64/include/asm/percpu.h | 16 +- arch/arm64/kernel/probes/kprobes.c | 23 +- arch/mips/cavium-octeon/octeon-platform.c | 4 +- arch/mips/kernel/cps-vec.S | 6 + arch/powerpc/include/asm/kvm_host.h | 3 +- arch/powerpc/kernel/eeh_driver.c | 2 - arch/powerpc/kernel/iommu.c | 2 +- arch/powerpc/kexec/file_load_64.c | 2 +- arch/powerpc/kvm/book3s_hv.c | 4 +- arch/powerpc/kvm/book3s_hv_nested.c | 112 ++-- arch/powerpc/kvm/book3s_hv_uvmem.c | 5 +- arch/powerpc/platforms/pseries/kexec.c | 13 +- arch/s390/crypto/aes_s390.c | 16 +- arch/s390/include/asm/debug.h | 8 +- arch/s390/kernel/debug.c | 15 +- arch/s390/kvm/interrupt.c | 72 +-- arch/sparc/Kconfig | 1 + arch/sparc/kernel/uprobes.c | 1 + arch/x86/include/asm/kvm_host.h | 32 +- arch/x86/kvm/mmu/mmu.c | 187 ++++--- arch/x86/kvm/mmu/mmutrace.h | 2 +- arch/x86/kvm/mmu/paging_tmpl.h | 30 +- arch/x86/kvm/mmu/spte.h | 5 + arch/x86/kvm/mmu/tdp_mmu.c | 2 +- arch/x86/mm/tlb.c | 16 +- arch/x86/pci/fixup.c | 99 ++++ block/blk-cgroup.c | 4 +- crypto/Makefile | 5 + drivers/acpi/acpica/dsmethod.c | 43 ++ drivers/acpi/acpica/evhandler.c | 11 + drivers/acpi/acpica/exoparg3.c | 2 +- drivers/acpi/acpica/nsnames.c | 6 + drivers/acpi/acpica/nsprepkg.c | 7 + drivers/acpi/acpica/nsxfname.c | 4 + drivers/acpi/acpica/psargs.c | 134 ++++- drivers/acpi/acpica/psloop.c | 30 +- drivers/acpi/acpica/psparse.c | 14 + drivers/acpi/acpica/utcopy.c | 10 +- drivers/acpi/acpica/utresrc.c | 30 ++ drivers/acpi/pci_root.c | 4 + drivers/ata/ahci.c | 22 + drivers/ata/libahci.c | 15 +- drivers/ata/libata-pmp.c | 7 +- drivers/block/sunvdc.c | 26 +- drivers/bluetooth/btmtksdio.c | 4 +- drivers/bluetooth/btusb.c | 23 +- drivers/bluetooth/hci_mrvl.c | 3 +- drivers/bus/fsl-mc/fsl-mc-bus.c | 46 ++ drivers/char/ipmi/ipmi_si_platform.c | 5 +- drivers/char/nvram.c | 16 +- drivers/char/virtio_console.c | 22 +- drivers/clk/at91/pmc.h | 2 + drivers/clk/clk-scpi.c | 2 +- drivers/clk/keystone/sci-clk.c | 8 + drivers/clk/renesas/renesas-cpg-mssr.c | 3 + drivers/clk/socfpga/clk-agilex.c | 2 + drivers/cpufreq/cpufreq.c | 6 +- drivers/crypto/allwinner/Kconfig | 16 - drivers/crypto/allwinner/sun8i-ce/Makefile | 1 - drivers/crypto/allwinner/sun8i-ce/sun8i-ce-core.c | 54 -- drivers/crypto/allwinner/sun8i-ce/sun8i-ce-prng.c | 162 ------ drivers/crypto/allwinner/sun8i-ce/sun8i-ce.h | 29 -- drivers/crypto/allwinner/sun8i-ss/Makefile | 1 - drivers/crypto/allwinner/sun8i-ss/sun8i-ss-core.c | 39 -- drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c | 172 ------- drivers/crypto/allwinner/sun8i-ss/sun8i-ss.h | 23 - drivers/crypto/atmel-ecc.c | 3 + drivers/crypto/ixp4xx_crypto.c | 25 +- drivers/dma/dmaengine.c | 10 +- drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c | 11 +- drivers/dma/mmp_pdma.c | 2 +- drivers/dma/sprd-dma.c | 3 +- drivers/dma/sun6i-dma.c | 9 +- drivers/dma/ti/k3-udma-glue.c | 5 +- drivers/dma/xilinx/xilinx_dma.c | 26 +- drivers/edac/edac_device_sysfs.c | 11 +- drivers/edac/igen6_edac.c | 27 +- drivers/firmware/arm_scmi/base.c | 15 +- drivers/firmware/arm_scmi/sensors.c | 10 +- drivers/firmware/arm_scpi.c | 4 +- drivers/gpio/gpio-arizona.c | 8 +- drivers/gpio/gpio-dwapb.c | 17 + drivers/gpio/gpio-pisosr.c | 4 +- drivers/gpio/gpio-zynq.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 3 +- drivers/gpu/drm/amd/amdgpu/atom.c | 9 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1 + .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crc.c | 7 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 20 +- drivers/gpu/drm/amd/pm/powerplay/si_dpm.c | 31 +- drivers/gpu/drm/arm/display/komeda/komeda_dev.c | 6 +- drivers/gpu/drm/arm/display/komeda/komeda_drv.c | 14 +- drivers/gpu/drm/arm/malidp_drv.c | 22 +- drivers/gpu/drm/drm_atomic_uapi.c | 13 +- drivers/gpu/drm/gma500/oaktrail_hdmi_i2c.c | 21 +- drivers/gpu/drm/gud/gud_drv.c | 1 + drivers/gpu/drm/gud/gud_pipe.c | 4 +- drivers/gpu/drm/i915/i915_query.c | 4 +- drivers/gpu/drm/msm/adreno/adreno_gpu.c | 2 + drivers/gpu/drm/msm/dsi/dsi.h | 1 + drivers/gpu/drm/msm/dsi/dsi_host.c | 38 +- drivers/gpu/drm/msm/dsi/phy/dsi_phy.c | 4 + drivers/gpu/drm/msm/hdmi/hdmi_phy.c | 8 +- drivers/gpu/drm/nouveau/nouveau_bo.c | 3 +- drivers/gpu/drm/nouveau/nouveau_drm.c | 5 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 2 + drivers/gpu/drm/nouveau/nvif/vmm.c | 1 + drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c | 23 +- drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c | 2 + drivers/gpu/drm/panel/panel-simple.c | 28 + drivers/gpu/drm/virtio/virtgpu_display.c | 2 +- drivers/gpu/drm/virtio/virtgpu_gem.c | 2 +- drivers/gpu/drm/virtio/virtgpu_ioctl.c | 6 +- drivers/gpu/drm/virtio/virtgpu_vram.c | 17 +- drivers/gpu/host1x/bus.c | 4 +- drivers/hid/amd-sfh-hid/amd_sfh_common.h | 63 +++ drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 10 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.h | 42 +- drivers/hid/hid-alps.c | 6 +- drivers/hid/hid-hyperv.c | 58 ++- drivers/hid/hid-ids.h | 3 + drivers/hid/hid-logitech-hidpp.c | 10 +- drivers/hid/hid-quirks.c | 3 +- drivers/hid/wacom_sys.c | 5 +- drivers/hwmon/adt7462.c | 8 + drivers/hwmon/applesmc.c | 7 +- drivers/hwmon/aspeed-pwm-tacho.c | 4 +- drivers/hwmon/gpio-fan.c | 13 +- drivers/hwmon/pmbus/lm25066.c | 60 +-- drivers/hwmon/pmbus/pmbus.h | 3 +- drivers/hwmon/pmbus/pmbus_core.c | 4 +- drivers/hwmon/pmbus/tps53679.c | 11 +- drivers/hwmon/w83791d.c | 1 + drivers/hwmon/w83793.c | 4 +- drivers/i2c/busses/i2c-at91-core.c | 3 + drivers/i2c/busses/i2c-at91-master.c | 12 +- drivers/i2c/busses/i2c-at91.h | 1 + drivers/i2c/busses/i2c-imx.c | 2 + drivers/i2c/i2c-core-smbus.c | 12 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 4 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 4 +- drivers/iio/accel/mma8452.c | 19 +- drivers/iio/adc/qcom-spmi-iadc.c | 18 +- drivers/infiniband/core/iwpm_util.c | 9 +- drivers/infiniband/core/mad.c | 3 +- drivers/infiniband/core/ucma.c | 7 +- drivers/infiniband/core/umem.c | 18 +- drivers/infiniband/hw/irdma/verbs.c | 2 +- drivers/infiniband/hw/mlx4/sysfs.c | 4 + drivers/infiniband/hw/mlx5/cq.c | 3 +- drivers/infiniband/hw/mlx5/main.c | 11 + drivers/infiniband/sw/siw/siw_cm.c | 75 ++- drivers/infiniband/sw/siw/siw_qp_rx.c | 2 +- drivers/infiniband/ulp/ipoib/ipoib.h | 7 + drivers/infiniband/ulp/ipoib/ipoib_ib.c | 12 +- drivers/infiniband/ulp/ipoib/ipoib_multicast.c | 16 +- drivers/infiniband/ulp/iser/iscsi_iser.c | 72 +-- drivers/infiniband/ulp/iser/iscsi_iser.h | 8 +- drivers/infiniband/ulp/iser/iser_initiator.c | 49 +- drivers/infiniband/ulp/iser/iser_memory.c | 87 ++-- drivers/infiniband/ulp/iser/iser_verbs.c | 56 +- drivers/infiniband/ulp/isert/ib_isert.c | 86 ++-- drivers/infiniband/ulp/isert/ib_isert.h | 4 +- drivers/infiniband/ulp/rtrs/rtrs-clt.c | 8 + drivers/infiniband/ulp/rtrs/rtrs-clt.h | 2 + drivers/infiniband/ulp/rtrs/rtrs-srv.c | 12 +- drivers/input/evdev.c | 2 + drivers/input/input-compat.c | 2 + drivers/input/joystick/xpad.c | 10 +- drivers/input/keyboard/atkbd.c | 8 + drivers/input/misc/soc_button_array.c | 16 +- drivers/input/mouse/synaptics.c | 8 + drivers/input/rmi4/rmi_driver.c | 13 + drivers/input/rmi4/rmi_smbus.c | 10 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/input/serio/serport.c | 3 +- drivers/input/touchscreen/eeti_ts.c | 1 + drivers/iommu/rockchip-iommu.c | 8 + drivers/irqchip/irq-gic-v3-its.c | 1 + drivers/leds/leds-pca9532.c | 8 +- drivers/leds/uleds.c | 11 +- drivers/mailbox/mailbox.c | 6 +- drivers/md/raid5.c | 35 +- drivers/media/i2c/video-i2c.c | 5 +- drivers/media/pci/dm1105/dm1105.c | 7 +- drivers/media/rc/imon.c | 4 + drivers/media/rc/mceusb.c | 2 + drivers/media/usb/em28xx/em28xx-video.c | 4 +- drivers/media/v4l2-core/v4l2-ctrls-core.c | 12 + drivers/media/v4l2-core/v4l2-h264.c | 3 +- drivers/mfd/rsmu_i2c.c | 2 + drivers/mfd/rsmu_spi.c | 2 + drivers/mmc/core/bus.c | 2 +- drivers/mmc/core/queue.c | 8 +- drivers/mmc/core/sdio_uart.c | 3 + drivers/mmc/host/davinci_mmc.c | 16 +- drivers/mmc/host/mmc_spi.c | 1 + drivers/mmc/host/mxcmmc.c | 4 + drivers/mmc/host/renesas_sdhi_internal_dmac.c | 2 + drivers/mmc/host/rtsx_pci_sdmmc.c | 5 + drivers/mmc/host/sdhci-of-aspeed.c | 5 +- drivers/mmc/host/sdhci_am654.c | 4 +- drivers/mmc/host/sh_mmcif.c | 3 +- drivers/net/bonding/bond_alb.c | 19 +- drivers/net/bonding/bond_main.c | 4 +- drivers/net/can/slcan.c | 3 +- drivers/net/dsa/bcm_sf2_cfp.c | 2 + drivers/net/dsa/mv88e6xxx/chip.c | 23 +- drivers/net/dsa/sja1105/sja1105_flower.c | 4 +- drivers/net/ethernet/allwinner/sun4i-emac.c | 2 + drivers/net/ethernet/amd/au1000_eth.c | 3 +- drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 3 +- drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 3 + drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 3 + drivers/net/ethernet/atheros/atlx/atl1.c | 3 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 16 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 3 + drivers/net/ethernet/broadcom/tg3.c | 4 + drivers/net/ethernet/cortina/gemini.c | 79 +-- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 69 ++- drivers/net/ethernet/freescale/fman/fman.c | 1 + drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c | 3 + drivers/net/ethernet/huawei/hinic/hinic_hw_mbox.c | 4 +- drivers/net/ethernet/ibm/emac/core.c | 3 +- drivers/net/ethernet/ibm/emac/mal.c | 6 +- drivers/net/ethernet/intel/e1000e/ethtool.c | 19 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 20 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 3 +- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 10 +- drivers/net/ethernet/mellanox/mlx5/core/en/port.c | 15 +- .../net/ethernet/mellanox/mlx5/core/en/tc/sample.c | 7 +- drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 8 +- .../mellanox/mlx5/core/eswitch_offloads_termtbl.c | 7 +- drivers/net/ethernet/socionext/netsec.c | 2 + drivers/net/ethernet/stmicro/stmmac/chain_mode.c | 10 +- drivers/net/ethernet/stmicro/stmmac/dwmac-intel.c | 4 +- drivers/net/ethernet/stmicro/stmmac/dwmac100_dma.c | 4 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c | 12 +- drivers/net/ethernet/stmicro/stmmac/dwxgmac2.h | 4 +- .../net/ethernet/stmicro/stmmac/dwxgmac2_descs.c | 6 +- drivers/net/ethernet/stmicro/stmmac/enh_desc.c | 11 +- drivers/net/ethernet/stmicro/stmmac/hwif.h | 32 +- drivers/net/ethernet/stmicro/stmmac/norm_desc.c | 8 +- drivers/net/ethernet/stmicro/stmmac/ring_mode.c | 14 +- drivers/net/ethernet/stmicro/stmmac/stmmac.h | 2 +- .../net/ethernet/stmicro/stmmac/stmmac_hwtstamp.c | 4 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 9 + drivers/net/ethernet/stmicro/stmmac/stmmac_ptp.c | 21 +- .../net/ethernet/stmicro/stmmac/stmmac_selftests.c | 114 ++++- drivers/net/ethernet/ti/cpsw_new.c | 4 +- drivers/net/ethernet/ti/netcp_core.c | 2 +- drivers/net/fddi/skfp/skfddi.c | 3 +- drivers/net/macvlan.c | 4 + drivers/net/ppp/ppp_async.c | 90 +--- drivers/net/ppp/ppp_synctty.c | 17 +- drivers/net/slip/slip.c | 3 +- drivers/net/usb/catc.c | 15 +- drivers/net/usb/cdc_mbim.c | 5 + drivers/net/usb/cx82310_eth.c | 1 + drivers/net/usb/hso.c | 2 +- drivers/net/usb/lan78xx.c | 7 +- drivers/net/usb/qmi_wwan.c | 2 + drivers/net/usb/sr9700.c | 3 +- drivers/net/veth.c | 2 + drivers/net/vrf.c | 2 - drivers/net/vxlan/vxlan_core.c | 17 +- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 2 + .../broadcom/brcm80211/brcmsmac/mac80211_if.c | 4 + drivers/net/wireless/intel/ipw2x00/libipw_rx.c | 10 +- drivers/net/wireless/intel/iwlegacy/common.c | 2 +- drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 13 +- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 6 +- drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 4 +- drivers/net/wireless/intersil/p54/eeprom.c | 22 +- drivers/net/wireless/mac80211_hwsim.c | 6 +- drivers/net/wireless/marvell/libertas/tx.c | 7 + drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/fw.h | 18 +- drivers/net/wireless/marvell/mwifiex/join.c | 8 +- drivers/net/wireless/marvell/mwifiex/pcie.c | 2 +- drivers/net/wireless/marvell/mwifiex/scan.c | 54 +- drivers/net/wireless/marvell/mwifiex/sta_cmd.c | 2 +- drivers/net/wireless/marvell/mwifiex/util.c | 10 +- drivers/net/wireless/mediatek/mt76/pci.c | 8 +- drivers/net/wireless/microchip/wilc1000/cfg80211.c | 14 + drivers/net/wireless/microchip/wilc1000/wlan.c | 9 + drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2800pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt61pci.c | 2 +- drivers/net/wireless/rsi/rsi_91x_hal.c | 8 + drivers/net/wireless/rsi/rsi_91x_mgmt.c | 8 +- drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/virt_wifi.c | 4 +- drivers/net/wwan/mhi_wwan_mbim.c | 28 +- drivers/nfc/microread/microread.c | 6 +- drivers/nfc/nfcmrvl/fw_dnld.c | 11 +- drivers/nfc/pn533/pn533.c | 14 +- drivers/nfc/pn533/pn533.h | 4 +- drivers/nfc/pn533/usb.c | 4 +- drivers/nfc/pn544/pn544.c | 7 +- drivers/nfc/port100.c | 7 + drivers/nfc/st21nfca/core.c | 12 +- drivers/nfc/st21nfca/i2c.c | 33 +- drivers/nfc/virtual_ncidev.c | 3 +- drivers/nvme/host/rdma.c | 18 +- drivers/opp/of.c | 2 +- drivers/pci/controller/pcie-altera.c | 2 + drivers/pci/controller/pcie-iproc.c | 2 + drivers/pci/controller/pcie-mediatek.c | 2 + drivers/pci/controller/pcie-rockchip-host.c | 2 + drivers/pci/pci-driver.c | 10 +- drivers/pci/pci-sysfs.c | 11 +- drivers/pci/quirks.c | 3 + drivers/pinctrl/pinctrl-single.c | 3 +- drivers/platform/x86/dell/dell-laptop.c | 9 + drivers/platform/x86/intel/hid.c | 7 + drivers/ptp/ptp_ocp.c | 1 + drivers/regulator/core.c | 163 +++--- drivers/rtc/rtc-aspeed.c | 1 + drivers/rtc/rtc-bq32k.c | 9 + drivers/s390/char/zcore.c | 8 +- drivers/s390/cio/cio.c | 11 +- drivers/s390/cio/device.c | 2 +- drivers/s390/cio/device_ops.c | 14 + drivers/s390/net/qeth_l2.h | 3 +- drivers/s390/net/qeth_l2_main.c | 26 +- drivers/s390/net/qeth_l2_sys.c | 7 +- drivers/scsi/bfa/bfa_fcs_lport.c | 2 +- drivers/scsi/hosts.c | 23 +- drivers/scsi/libiscsi_tcp.c | 3 + drivers/scsi/mpt3sas/mpt3sas_base.c | 24 +- drivers/scsi/pm8001/pm8001_ctl.c | 8 + drivers/scsi/pm8001/pm80xx_hwi.c | 7 + drivers/scsi/scsi_priv.h | 4 +- drivers/scsi/scsi_sysfs.c | 81 ++- drivers/scsi/smartpqi/smartpqi.h | 25 +- drivers/scsi/smartpqi/smartpqi_init.c | 123 ++--- drivers/scsi/smartpqi/smartpqi_sis.c | 11 +- drivers/scsi/smartpqi/smartpqi_sis.h | 4 +- drivers/soundwire/bus.c | 4 + drivers/soundwire/cadence_master.c | 7 + drivers/soundwire/slave.c | 4 +- drivers/spi/spi-zynqmp-gqspi.c | 52 +- drivers/spi/spi.c | 6 +- drivers/staging/fbtft/fbtft-core.c | 9 +- drivers/target/iscsi/cxgbit/cxgbit.h | 8 +- drivers/target/iscsi/cxgbit/cxgbit_ddp.c | 4 +- drivers/target/iscsi/cxgbit/cxgbit_target.c | 34 +- drivers/target/iscsi/iscsi_target.c | 165 +++--- drivers/target/iscsi/iscsi_target.h | 14 +- drivers/target/iscsi/iscsi_target_configfs.c | 14 +- drivers/target/iscsi/iscsi_target_datain_values.c | 18 +- drivers/target/iscsi/iscsi_target_datain_values.h | 12 +- drivers/target/iscsi/iscsi_target_device.c | 2 +- drivers/target/iscsi/iscsi_target_device.h | 4 +- drivers/target/iscsi/iscsi_target_erl0.c | 30 +- drivers/target/iscsi/iscsi_target_erl0.h | 8 +- drivers/target/iscsi/iscsi_target_erl1.c | 42 +- drivers/target/iscsi/iscsi_target_erl1.h | 20 +- drivers/target/iscsi/iscsi_target_erl2.c | 20 +- drivers/target/iscsi/iscsi_target_erl2.h | 8 +- drivers/target/iscsi/iscsi_target_nego.c | 2 +- drivers/target/iscsi/iscsi_target_seq_pdu_list.c | 34 +- drivers/target/iscsi/iscsi_target_seq_pdu_list.h | 10 +- drivers/target/iscsi/iscsi_target_tmr.c | 38 +- drivers/target/iscsi/iscsi_target_tmr.h | 8 +- drivers/target/iscsi/iscsi_target_util.c | 66 +-- drivers/target/iscsi/iscsi_target_util.h | 48 +- drivers/tee/optee/call.c | 3 +- drivers/thermal/tegra/soctherm.c | 6 +- drivers/thunderbolt/tb.c | 6 +- drivers/thunderbolt/xdomain.c | 13 +- drivers/tty/serial/8250/8250_port.c | 7 + drivers/usb/core/hcd.c | 14 +- drivers/usb/gadget/udc/goku_udc.c | 3 +- drivers/usb/host/Kconfig | 2 +- drivers/usb/host/xhci-ring.c | 6 + drivers/usb/host/xhci.c | 4 + drivers/usb/usbip/vhci_sysfs.c | 52 +- drivers/vdpa/vdpa_sim/vdpa_sim_blk.c | 53 +- drivers/vhost/scsi.c | 3 +- drivers/vhost/vdpa.c | 12 +- drivers/video/fbdev/pm2fb.c | 1 + drivers/video/fbdev/vfb.c | 11 +- drivers/virtio/virtio_pci_common.c | 4 +- drivers/watchdog/digicolor_wdt.c | 13 +- drivers/watchdog/msc313e_wdt.c | 35 +- drivers/watchdog/sp5100_tco.c | 6 +- drivers/watchdog/sunxi_wdt.c | 45 +- drivers/watchdog/watchdog_hrtimer_pretimeout.c | 1 + drivers/xen/gntalloc.c | 13 +- drivers/xen/xen-front-pgdir-shbuf.c | 12 +- fs/9p/vfs_dir.c | 12 + fs/affs/affs.h | 5 - fs/affs/super.c | 6 +- fs/autofs/inode.c | 4 + fs/befs/linuxvfs.c | 3 +- fs/bfs/inode.c | 3 +- fs/btrfs/inode.c | 3 +- fs/btrfs/relocation.c | 47 +- fs/btrfs/transaction.c | 13 +- fs/btrfs/tree-checker.c | 8 +- fs/btrfs/volumes.c | 79 ++- fs/btrfs/zoned.c | 2 + fs/cifs/cifsacl.c | 3 + fs/cifs/transport.c | 11 +- fs/configfs/dir.c | 12 +- fs/erofs/zdata.c | 13 +- fs/eventpoll.c | 152 +++--- fs/exec.c | 22 +- fs/f2fs/inline.c | 7 + fs/freevxfs/vxfs_bmap.c | 3 +- fs/fuse/file.c | 3 +- fs/hfs/catalog.c | 9 - fs/hfs/dir.c | 28 +- fs/hfs/hfs.h | 3 +- fs/hfs/hfs_fs.h | 2 - fs/hfs/inode.c | 4 - fs/hfsplus/catalog.c | 11 - fs/hfsplus/dir.c | 28 +- fs/hfsplus/hfsplus_fs.h | 5 +- fs/hfsplus/inode.c | 40 +- fs/hfsplus/super.c | 2 - fs/hpfs/super.c | 3 +- fs/inode.c | 11 +- fs/iomap/buffered-io.c | 2 +- fs/isofs/inode.c | 3 +- fs/jfs/super.c | 3 +- fs/ksmbd/mgmt/share_config.c | 36 +- fs/ksmbd/misc.c | 14 +- fs/ksmbd/oplock.c | 16 +- fs/ksmbd/oplock.h | 2 +- fs/ksmbd/server.c | 6 + fs/ksmbd/smb2misc.c | 9 +- fs/ksmbd/smb2pdu.c | 35 +- fs/ksmbd/smbacl.c | 25 +- fs/ksmbd/transport_ipc.c | 24 +- fs/ksmbd/vfs.c | 14 +- fs/minix/inode.c | 3 +- fs/ntfs3/dir.c | 4 +- fs/ntfs3/fslog.c | 28 +- fs/ntfs3/index.c | 41 +- fs/ntfs3/xattr.c | 4 +- fs/ocfs2/namei.c | 9 +- fs/ocfs2/xattr.c | 13 +- fs/ocfs2/xattr.h | 8 +- fs/omfs/inode.c | 6 +- fs/qnx4/inode.c | 3 +- fs/squashfs/xz_wrapper.c | 6 +- fs/ufs/cylinder.c | 10 + fs/ufs/super.c | 17 +- fs/xfs/xfs_icache.c | 2 +- include/keys/request_key_auth-type.h | 2 +- include/linux/bitfield.h | 2 +- include/linux/file.h | 2 + include/linux/kcsan-checks.h | 6 +- include/linux/lockdep.h | 16 +- include/linux/lockdep_types.h | 8 + include/linux/lsm_hook_defs.h | 2 +- include/linux/lsm_hooks.h | 1 + include/linux/mailbox_controller.h | 2 + include/linux/platform_data/asoc-ux500-msp.h | 20 - include/linux/rculist.h | 29 ++ include/linux/tty_ldisc.h | 2 +- include/media/v4l2-hevc.h | 41 ++ include/net/cfg80211.h | 2 +- include/net/gue.h | 19 +- include/net/ip6_route.h | 2 + include/net/netfilter/nf_conntrack.h | 5 + include/net/netfilter/nf_flow_table.h | 1 + include/net/netns/xfrm.h | 2 +- include/net/nfc/hci.h | 2 +- include/net/nfc/nfc.h | 3 +- include/rdma/ib_umem.h | 4 +- include/scsi/scsi_device.h | 7 - include/scsi/scsi_host.h | 12 - include/target/iscsi/iscsi_target_core.h | 34 +- include/target/iscsi/iscsi_transport.h | 92 ++-- include/uapi/linux/landlock.h | 1 + kernel/bpf/btf.c | 29 +- kernel/bpf/cgroup.c | 1 + kernel/bpf/hashtab.c | 24 +- kernel/bpf/verifier.c | 9 + kernel/dma/coherent.c | 13 +- kernel/events/ring_buffer.c | 9 +- kernel/locking/lockdep.c | 230 +++++++-- kernel/trace/trace_event_perf.c | 12 +- kernel/trace/trace_events_hist.c | 2 +- kernel/trace/trace_probe.c | 48 +- kernel/trace/trace_probe.h | 2 + kernel/workqueue.c | 2 +- mm/backing-dev.c | 5 +- mm/damon/core.c | 13 +- net/8021q/vlan_dev.c | 5 + net/appletalk/aarp.c | 5 + net/atm/pppoatm.c | 42 +- net/bluetooth/bnep/core.c | 17 +- net/bluetooth/bnep/netdev.c | 8 +- net/bluetooth/hci_sock.c | 20 +- net/bluetooth/l2cap_core.c | 31 +- net/bluetooth/l2cap_sock.c | 10 +- net/bluetooth/rfcomm/core.c | 6 + net/bluetooth/rfcomm/sock.c | 19 +- net/bluetooth/smp.c | 17 + net/bridge/br_arp_nd_proxy.c | 16 +- net/bridge/br_multicast.c | 2 - net/bridge/br_stp_bpdu.c | 5 +- net/core/dev.c | 4 +- net/core/drop_monitor.c | 4 +- net/core/filter.c | 33 +- net/core/skbuff.c | 16 +- net/core/sock.c | 9 +- net/core/sock_map.c | 1 + net/hsr/hsr_netlink.c | 9 +- net/ieee802154/6lowpan/core.c | 2 +- net/ipv4/arp.c | 1 + net/ipv4/fib_rules.c | 4 +- net/ipv4/fou_core.c | 6 +- net/ipv4/ip_gre.c | 12 + net/ipv4/ip_tunnel_core.c | 6 + net/ipv4/nexthop.c | 2 +- net/ipv4/sysctl_net_ipv4.c | 4 +- net/ipv4/tcp_input.c | 3 +- net/ipv4/tcp_output.c | 3 + net/ipv6/addrconf.c | 10 +- net/ipv6/exthdrs.c | 4 +- net/ipv6/exthdrs_core.c | 3 + net/ipv6/ip6_fib.c | 4 +- net/ipv6/ip6_gre.c | 2 +- net/ipv6/mcast.c | 32 +- net/ipv6/netfilter/ip6_tables.c | 5 + net/ipv6/netfilter/ip6t_rpfilter.c | 2 +- net/ipv6/netfilter/ip6t_rt.c | 11 +- net/ipv6/route.c | 22 +- net/ipv6/seg6.c | 4 +- net/ipv6/seg6_local.c | 3 + net/ipv6/tcp_ipv6.c | 3 +- net/ipv6/xfrm6_output.c | 10 +- net/llc/llc_c_ac.c | 2 +- net/llc/llc_s_ac.c | 4 + net/llc/llc_sap.c | 8 +- net/mac80211/cfg.c | 5 +- net/mac80211/debugfs.c | 2 +- net/mac80211/debugfs_netdev.c | 6 + net/mac80211/ieee80211_i.h | 2 +- net/mac80211/iface.c | 2 + net/mac80211/mesh.c | 1 - net/mac80211/mlme.c | 6 +- net/mac80211/pm.c | 8 +- net/mac80211/tx.c | 2 +- net/mac80211/util.c | 6 +- net/mptcp/options.c | 3 +- net/mptcp/protocol.c | 10 +- net/mptcp/protocol.h | 3 +- net/mptcp/subflow.c | 11 + net/mptcp/syncookies.c | 5 +- net/netfilter/ipset/ip_set_hash_gen.h | 13 +- net/netfilter/ipvs/ip_vs_core.c | 6 + net/netfilter/ipvs/ip_vs_sync.c | 20 +- net/netfilter/nf_conntrack_expect.c | 3 +- net/netfilter/nf_conntrack_netlink.c | 13 +- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 2 +- net/netfilter/nf_flow_table_core.c | 12 +- net/netfilter/nf_flow_table_offload.c | 19 +- net/netfilter/nf_log_syslog.c | 6 +- net/netfilter/nf_tables_api.c | 4 +- net/netfilter/nfnetlink_log.c | 28 +- net/netfilter/nfnetlink_queue.c | 77 ++- net/netfilter/nft_nat.c | 2 +- net/netfilter/nft_set_pipapo_avx2.c | 1 + net/netfilter/nft_synproxy.c | 3 +- net/netlabel/netlabel_unlabeled.c | 2 +- net/nfc/core.c | 15 +- net/nfc/digital_dep.c | 8 +- net/nfc/llcp.h | 1 + net/nfc/llcp_commands.c | 2 +- net/nfc/llcp_core.c | 173 +++++-- net/nfc/llcp_sock.c | 67 ++- net/nfc/nci/core.c | 10 +- net/nfc/netlink.c | 7 +- net/nfc/nfc.h | 3 +- net/openvswitch/conntrack.c | 14 +- net/openvswitch/flow_table.c | 4 +- net/packet/af_packet.c | 11 +- net/packet/internal.h | 2 +- net/phonet/pn_dev.c | 30 +- net/qrtr/af_qrtr.c | 4 +- net/rds/af_rds.c | 63 ++- net/rds/connection.c | 102 +++- net/rds/ib_cm.c | 27 +- net/rds/ib_frmr.c | 11 +- net/rds/ib_recv.c | 9 +- net/rds/message.c | 6 +- net/rds/send.c | 16 +- net/rds/tcp.c | 164 ++++-- net/rds/tcp_listen.c | 6 +- net/sched/act_api.c | 22 +- net/sched/act_csum.c | 8 +- net/sched/act_ct.c | 5 +- net/sched/cls_api.c | 2 +- net/sched/cls_route.c | 45 +- net/sched/sch_drr.c | 13 +- net/sched/sch_ets.c | 12 +- net/sched/sch_fq_pie.c | 62 ++- net/sched/sch_hfsc.c | 22 + net/sched/sch_hhf.c | 15 +- net/sched/sch_pie.c | 2 +- net/sched/sch_sfq.c | 7 +- net/sched/sch_teql.c | 7 +- net/sctp/associola.c | 15 +- net/sctp/input.c | 7 +- net/sctp/ipv6.c | 12 +- net/sctp/protocol.c | 10 +- net/sctp/sm_make_chunk.c | 14 +- net/sctp/sm_sideeffect.c | 48 +- net/sctp/sm_statefuns.c | 2 + net/smc/smc_clc.c | 8 +- net/smc/smc_clc.h | 9 +- net/smc/smc_core.c | 2 + net/smc/smc_ib.c | 59 +++ net/sunrpc/xprtrdma/verbs.c | 21 +- net/tipc/group.c | 4 +- net/tipc/monitor.c | 3 +- net/tipc/name_table.c | 32 +- net/tls/tls_sw.c | 6 +- net/vmw_vsock/hyperv_transport.c | 2 +- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/mlme.c | 49 +- net/wireless/nl80211.c | 2 +- net/wireless/scan.c | 12 +- net/wireless/util.c | 26 +- net/wireless/wext-sme.c | 9 + net/xdp/xskmap.c | 2 +- net/xfrm/espintcp.c | 6 +- net/xfrm/xfrm_input.c | 11 + net/xfrm/xfrm_user.c | 228 ++++++--- scripts/mod/modpost.c | 11 +- security/apparmor/lsm.c | 7 +- security/integrity/digsig_asymmetric.c | 4 + security/integrity/ima/ima_appraise.c | 5 + security/keys/gc.c | 4 +- security/keys/request_key_auth.c | 12 +- security/keys/trusted-keys/trusted_tpm2.c | 12 +- security/landlock/errata/abi-1.h | 24 + security/landlock/fs.c | 40 +- security/security.c | 4 +- security/selinux/avc.c | 5 +- security/tomoyo/tomoyo.c | 4 +- sound/core/pcm_native.c | 35 +- sound/core/pcm_timer.c | 7 +- sound/core/seq/oss/seq_oss_rw.c | 3 +- sound/isa/es18xx.c | 4 + sound/pci/ctxfi/cthw20k2.c | 1 + sound/pci/hda/hda_controller.c | 2 +- sound/pci/hda/patch_conexant.c | 12 + sound/pci/hda/patch_realtek.c | 2 + sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 +- sound/soc/bcm/bcm63xx-i2s-whistler.c | 1 + sound/soc/codecs/ab8500-codec.c | 565 ++++++++++----------- sound/soc/codecs/cx20442.c | 3 +- sound/soc/codecs/hdmi-codec.c | 6 +- sound/soc/codecs/mt6351.c | 1 + sound/soc/codecs/pcm3168a.c | 20 +- sound/soc/codecs/rk3328_codec.c | 54 +- sound/soc/codecs/rt5645.c | 4 + sound/soc/intel/atom/sst/sst_pci.c | 1 + sound/soc/intel/catpt/ipc.c | 8 + sound/soc/intel/catpt/loader.c | 3 + sound/soc/intel/catpt/registers.h | 12 + sound/soc/rockchip/rockchip_pdm.c | 16 +- sound/soc/rockchip/rockchip_spdif.c | 1 + sound/soc/sprd/sprd-pcm-compress.c | 15 +- sound/soc/sti/uniperif_reader.c | 4 +- sound/soc/ti/ams-delta.c | 3 +- sound/soc/ti/omap3pandora.c | 5 +- sound/soc/ux500/mop500.c | 8 +- sound/soc/ux500/ux500_msp_dai.c | 167 ++---- sound/soc/ux500/ux500_msp_dai.h | 11 - sound/soc/ux500/ux500_msp_i2s.c | 326 ++++++------ sound/soc/ux500/ux500_msp_i2s.h | 30 +- sound/soc/ux500/ux500_pcm.c | 83 +-- sound/usb/caiaq/audio.c | 10 +- sound/usb/caiaq/device.c | 53 +- sound/usb/caiaq/device.h | 4 +- sound/usb/caiaq/input.c | 6 + sound/usb/caiaq/midi.c | 6 +- sound/usb/mixer.c | 17 +- sound/usb/mixer_maps.c | 10 + sound/usb/quirks-table.h | 22 + sound/usb/quirks.c | 2 + sound/usb/usx2y/us122l.c | 9 +- sound/usb/usx2y/usbusx2y.c | 45 +- sound/usb/usx2y/usbusx2y.h | 4 +- tools/bpf/bpftool/map.c | 6 - tools/lib/bpf/gen_loader.c | 2 + tools/lib/bpf/relo_core.c | 60 ++- tools/perf/tests/shell/stat_bpf_counters.sh | 30 +- tools/perf/util/cs-etm.c | 81 +-- .../selftests/arm64/mte/check_gcr_el1_cswitch.c | 2 +- tools/testing/selftests/cgroup/test_kmem.c | 2 +- .../ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc | 2 +- tools/testing/selftests/landlock/fs_test.c | 154 ++++++ tools/testing/selftests/nci/nci_dev.c | 45 +- tools/testing/selftests/net/fib_nexthops.sh | 28 + tools/testing/selftests/net/pmtu.sh | 2 +- tools/testing/selftests/powerpc/tm/tm.h | 8 +- tools/thermal/tmon/tui.c | 2 +- 727 files changed, 7788 insertions(+), 4869 deletions(-)

2 weeks, 2 days

[PATCH 6.6 0000/1193] 6.6.158-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.158 release. There are 1193 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 02 Oct 2026 15:23:04 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.158-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.158-rc1 Breno Leitao <leitao(a)debian.org> net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-ecc - avoid stale fallback key after set_secret failure Fourie Zhang <littleddfu(a)gmail.com> netfilter: nf_tables: don't queue packet path object notifications Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: place base_seq in struct net Yang Li <yang.lee(a)linux.alibaba.com> netfilter: nft_set_rbtree: Remove unused variable nft_net Bryam Vargas <hexlabsecurity(a)proton.me> crypto: virtio - bound the akcipher result length Lukas Wunner <lukas(a)wunner.de> crypto: virtio - Drop superfluous [as]kcipher_req pointer Lukas Wunner <lukas(a)wunner.de> crypto: virtio - Drop superfluous [as]kcipher_ctx pointer Lukas Wunner <lukas(a)wunner.de> crypto: virtio - Drop sign/verify operations Markus Elfring <elfring(a)users.sourceforge.net> crypto: virtio - Less function calls in __virtio_crypto_akcipher_do_req() after error detection Eric Dumazet <edumazet(a)google.com> vlan: fix skb_under_panic and races when toggling HW VLAN offload Jakub Kicinski <kuba(a)kernel.org> vlan: defer real device state propagation to netdev_work Kyle Zeng <kylebot(a)openai.com> net/packet: defer vmalloc TX_RING free until skbs finish Qing Ming <a0yami(a)mailbox.org> gtp: serialize PDP context updates Breno Leitao <leitao(a)debian.org> usb: xhci: bail out of setup if the controller is inaccessible Niklas Neronin <niklas.neronin(a)linux.intel.com> usb: xhci: simplify handling of Structural Parameters 1 values Niklas Neronin <niklas.neronin(a)linux.intel.com> usb: xhci: use cached HCSPARAMS1 value Niklas Neronin <niklas.neronin(a)linux.intel.com> usb: xhci: implement USB Port Register Set struct Niklas Neronin <niklas.neronin(a)linux.intel.com> usb: xhci: add USB Port Register Set struct Niklas Neronin <niklas.neronin(a)linux.intel.com> usb: xhci: add helper to read PORTSC register Niklas Neronin <niklas.neronin(a)linux.intel.com> usb: xhci: add tracing for PORTSC register writes Denis Arefev <arefev(a)swemel.ru> ALSA: hda: Fix missing pointer check in hda_component_manager_init function Guangshuo Li <lgs201920130244(a)gmail.com> drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() Rengarajan S <rengarajan.s(a)microchip.com> lan78xx: Enable Auto Speed and Auto Duplex configuration for LAN7801 if NO EEPROM is detected Rengarajan S <rengarajan.s(a)microchip.com> lan78xx: Enable 125 MHz CLK configuration for LAN7801 if NO EEPROM is detected Florian Eckert <fe(a)dev.tdt.de> tools/thermal/tmon: Fix compilation warning for wrong format Chunguang Xu <chunguang.xu(a)shopee.com> nvme-fabrics: use reserved tag for reg read/write command James Clark <james.clark(a)linaro.org> perf test: Change all remaining #!/bin/sh to #!/bin/bash Dan Carpenter <dan.carpenter(a)linaro.org> drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy() Alex Hung <alex.hung(a)amd.com> drm/amd/display: Validate function returns Alex Hung <alex.hung(a)amd.com> drm/amd/display: Check null pointers before using them Alex Hung <alex.hung(a)amd.com> drm/amd/display: Ensure array index tg_inst won't be -1 Allen Pan <allen.pan(a)amd.com> drm/amd/display: Add a dc_state NULL check in dc_state_release Baochen Qiang <quic_bqiang(a)quicinc.com> wifi: ath12k: check M3 buffer size as well whey trying to reuse it Baochen Qiang <quic_bqiang(a)quicinc.com> wifi: ath12k: fix kernel crash during resume Jakub Kicinski <kuba(a)kernel.org> net: tls: fix silent data drop under pipe back-pressure Li Ming <ming4.li(a)intel.com> cxl/mem: Fix no cxl_nvd during pmem region auto-assembling Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Defer work in bpf_timer_cancel_and_free Yonghong Song <yonghong.song(a)linux.dev> bpf: Fail verification for sign-extension of packet data/data_end/data_meta Darrick J. Wong <djwong(a)kernel.org> xfs: fix blockgc group quota scanning when usrquota isn't enforced Zihan Xi <zihanx(a)nebusec.ai> smb: client: validate POSIX create context length Zihan Xi <zihanx(a)nebusec.ai> smb: client: fix create context out-of-bounds reads Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: mgmt: fix race in read_unconf_index_list() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: L2CAP: validate frame length before control and FCS access Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: ISO: balance the parent hold in hci_bind_bis() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: reject out-of-range OCF values Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: validate event length before filtering Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_conn: fix CIS hold ownership on reuse Tan Chi <tanchi25(a)mails.ucas.ac.cn> RISC-V: KVM: Fix HSM hart status error propagation Myeonghun Pak <mhun512(a)gmail.com> RISC-V: KVM: Synchronize hrtimer callback during teardown Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() Myeonghun Pak <mhun512(a)gmail.com> pinctrl: single: free the IRQ on domain creation failure Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> scsi: libiscsi_tcp: Check the data direction of a Data-In PDU Doruk Tan Ozturk <doruk(a)0sec.ai> nfc: port100: reject frames whose declared length exceeds the received data Aamir Ahmed <elb12345(a)hotmail.co.uk> nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() Luxiao Xu <rakukuip(a)gmail.com> nfc: fix use-after-free in nfc_get_local_general_bytes Luxiao Xu <rakukuip(a)gmail.com> netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read Weiming Shi <bestswngs(a)gmail.com> netfilter: ip6t_rpfilter: reject routes without inet6_dev Wentao Liang <vulab(a)iscas.ac.cn> net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() Ming Wang <wangming01(a)loongson.cn> net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist Gajdos Tamás <tamas(a)rimpianto.com> net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Gajdos Tamás <tamas(a)rimpianto.com> net: atl1c: fix soft lockup on out-of-range tpd_cons read Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry Wentao Liang <vulab(a)iscas.ac.cn> net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy() Gajdos Tamás <tamas(a)rimpianto.com> net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Zijie Huang <milkory(a)outlook.com> net: arp: terminate device name before lookup Weiming Shi <bestswngs(a)gmail.com> net/sched: reject IDR error pointers when deleting actions Ralf Lici <ralf(a)mandelbit.com> net/mlx5e: advertise MACsec offload only when supported Wentao Liang <vulab(a)iscas.ac.cn> net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() Wei Jie LAW <98lawweijie(a)gmail.com> HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() Junjie Cao <junjie.cao(a)intel.com> HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard Chen Changcheng <chenchangcheng(a)kylinos.cn> HID: alps: fix use-after-free on input2 registration failure Angel J <iamanaws(a)httpd.dev> PCI: of_property: Omit bus properties without a subordinate bus Karl Mehltretter <kmehltretter(a)gmail.com> gpio: tps65219: Fix GPIO input value reads Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/virtio: fix NULL pointer dereference on fence allocation failure Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/virtio: fix memory leak of fence event on execbuffer failure Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix gem reference leak in validate_init() Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: fix double-free in nvif_vmm_dtor Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix bridge reference leak in nv1a_ram_new() Guangshuo Li <lgs201920130244(a)gmail.com> drm/nouveau: fix autosuspend cleanup during teardown Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() Wentao Liang <vulab(a)iscas.ac.cn> drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() Christian König <ckoenig.leichtzumerken(a)gmail.com> drm/i915: fix incorrect RCU teardown order Dongliang Qin <cccccccccccc777777(a)gmail.com> rds: ib: Clear the sg list when mapping an MR fails Zixuan Chai <petalzu987(a)gmail.com> llc: reserve device headroom for allocated frames Ridham Khurana <khurana.ridham222(a)gmail.com> gpio: zynq: fix runtime PM leak on request error path Wentao Liang <vulab(a)iscas.ac.cn> gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() Hui Peng <benquike(a)gmail.com> ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST Norbert Szetei <norbert(a)doyensec.com> ipv6: do not let ipv6_find_hdr() return an offset past the packet end Wentao Liang <vulab(a)iscas.ac.cn> fsl/fman: Fix clk reference leak in read_dts_node() Josef Bacik <josef(a)toxicpanda.com> writeback: report a Tasks-RCU quiescent state per cgwb drain pass Pavankumar Kondeti <pavan.kondeti(a)oss.qualcomm.com> workqueue: Fix NULL current_pwq deref in flush dependency check Patrick Lu (Anthropic) <perf.patrick.lu(a)gmail.com> writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes Hui Peng <benquike(a)gmail.com> fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT Matthias Goergens <matthias.goergens(a)gmail.com> ata: libata-scsi: bound the ATA passthru sense descriptor writes Dairui Zhang <zhangdairui(a)gmail.com> af_packet: fix integer overflow in prb_calc_retire_blk_tmo() Aohan Mei <henrymei(a)tencent.com> sctp: discard the rest of the packet on a stale-cookie error Eric Dumazet <edumazet(a)google.com> tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow Mario Limonciello <mario.limonciello(a)amd.com> x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Drop all SCM attributes for SOCKMAP. Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase Pablo Neira Ayuso <pablo(a)netfilter.org> rculist: add list_splice_rcu() for private lists Mark Amirkan <markdamirkan(a)gmail.com> mptcp: return sk_wait_data() errors from recvmsg() Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs() Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits Hui Peng <benquike(a)gmail.com> autofs: fix sbi->pipe file reference leak in autofs_kill_sb() Eric Dumazet <edumazet(a)google.com> vlan: ensure sufficient headroom in vlan_dev_hard_header() Eric Dumazet <edumazet(a)google.com> net/sched: sch_teql: fix shadowed err in __teql_resolve() Eric Dumazet <edumazet(a)google.com> bridge: check llc_mac_hdr_init() return value in br_send_bpdu() Eric Dumazet <edumazet(a)google.com> llc: fix skb UAF and leaks on llc_mac_hdr_init() failure Coia Prant <coiaprant(a)gmail.com> net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails Ginger Li <ginger.jzllee(a)gmail.com> tipc: Fix a data race on mon->peer_cnt in mon_timeout() Sidraya Jayagond <sidraya(a)linux.ibm.com> net/smc: fix UAF on lgr list traversal in smcr_port_err() Sang-Hoon Choi <csh0052(a)gmail.com> nfp: hold IPsec RX state under the XArray lock Yilin Zhang <yilinzhang(a)moonshot.ai> tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() Aleksei Sviridkin <f(a)lex.la> net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 David Dai <zdai(a)linux.ibm.com> bonding: crypto offload enabled, non-offload slave failover, rekey failed Norbert Szetei <norbert(a)doyensec.com> net: xps: reject an out of range traffic class Sanghyun Park <sanghyun.park.cnu(a)gmail.com> vxlan: use one headroom snapshot for neighbour replies Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> ip_gre: Reject enabling collect metadata through changelink Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: do not skip WoL power up on GENET V1 Doug Berger <opendmb(a)gmail.com> net: bcmgenet: allow return of power up status Doug Berger <opendmb(a)gmail.com> net: bcmgenet: move bcmgenet_power_up into resume_noirq Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: initialize u64 stats seq counter for all queues Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems Ivan Delalande <colona(a)arista.com> tg3: use random MAC address when tg3_get_device_address fails Dragan Simic <dsimic(a)manjaro.org> driver core: Add device probe log helper dev_warn_probe() Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> driver core: Make dev_err_probe() silent for -ENOMEM Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> driver core: Better advertise dev_err_probe() Johan Almbladh <johan.almbladh(a)anyfinetworks.com> bpf: Fix BSWAP 32 and 16 on MIPS64 Johan Almbladh <johan.almbladh(a)anyfinetworks.com> bpf: Fix immediate JMP JEQ/JNE on MIPS32 Ido Schimmel <idosch(a)nvidia.com> vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets Shihuang Liu <shlomojune6(a)gmail.com> net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() Jakub Kicinski <kuba(a)kernel.org> veth: manage XDP program pointers during channel resize Victor Nogueira <victor(a)mojatatu.com> net/sched: act_gate: budget the per-entry list in get_fill_size Deepanshu Kartikey <kartikey406(a)gmail.com> nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix slab-out-of-bounds reads when logging service names Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix -ENOMEM on connect with zero-length service name Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate ISO15693 inventory length Cong Nguyen <congnt264(a)gmail.com> nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure Chris Gellermann <christian.gellermann(a)codasip.com> nfc: virtual_ncidev: Add missing ioctl compat handler Chris Gellermann <christian.gellermann(a)codasip.com> selftests/nci: Fix out-of-bounds store on thread join Chaithanya Lagisetty <nagachaithanya9911(a)gmail.com> selftests: nci: Fix uninitialized family ID on missing attribute Lee Jones <lee(a)kernel.org> nfc: llcp: Fix race condition in accept_queue lifecycle Lei Zhu <zhulei(a)kylinos.cn> selftests: nci: Correct pthread_create return value check Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate received frame size Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: nfcmrvl: validate helper command length before pull Weiming Shi <bestswngs(a)gmail.com> bpf: Reject dev-bound-only programs on other devices Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Capture all packets for vlan checks Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Check the dev->features for S-TAG offload testing Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Support running selftests on DSA conduits Xin Long <lucien.xin(a)gmail.com> sctp: hold asoc or transport before mod_timer() in timer handlers Bernardo Soares <bsoares.it(a)gmail.com> net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports Bernardo Soares <bsoares.it(a)gmail.com> net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports Zhao Gongyi <zhaogongyi(a)BYTEDANCE.COM> bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc Emil Tsalapatis <emil(a)etsalapatis.com> bpf: Fix bpf_sock context code generation Emil Tsalapatis <emil(a)etsalapatis.com> bpf: Fix bounds check for skb-backed dynptrs Jakub Kicinski <kuba(a)kernel.org> genetlink: report the real command id for dump-only ops in policy dumps bui duc phuc <phucduc.bui(a)gmail.com> net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error Mikhail Zaslonko <zaslonko(a)linux.ibm.com> s390/debug: Fix NULL pointer dereference in debug_info_copy() Mikhail Zaslonko <zaslonko(a)linux.ibm.com> s390/debug: Do not register views for failed static debug areas Myeonghun Pak <mhun512(a)gmail.com> tg3: clean up PHYLIB resources on probe failure Pengpeng Hou <hppiscas(a)163.com> net: usb: sr9700: include receive overhead in the length check Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() Hui Peng <benquike(a)gmail.com> Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough Li Youhong <liyouhong(a)kylinos.cn> drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: release the GEM object on virtio_gpu_vram_create() errors Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak when drm_gem_handle_create() fails Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget Aamir Ahmed <elb12345(a)hotmail.co.uk> net: usb: catc: bound the RX packet length in catc_rx_done() Yiqi Sun <sunyiqixm(a)gmail.com> sctp: avoid livelock while updating retransmit path Kuniyuki Iwashima <kuniyu(a)google.com> ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink(). Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure Breno Leitao <leitao(a)debian.org> net: mediatek: mtk_eth_sock: allocate dummy net_device dynamically Breno Leitao <leitao(a)debian.org> net: create a dummy net_device allocator Breno Leitao <leitao(a)debian.org> net: core: Fix documentation Amit Cohen <amcohen(a)nvidia.com> net: Do not return value from init_dummy_netdev() Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> net: gue: reject invalid REMCSUM offsets Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure Francesco Magazzu <postadelmaga(a)gmail.com> drm/nouveau/clk: don't clobber reclock status when restoring volt/fan Dan Carpenter <error27(a)gmail.com> drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: make ocfs2_calc_xattr_init() return void Zeng Heng <zengheng4(a)huawei.com> arm64: io: Reject non-user protection in ioremap_prot() Naman Gulati <namangulati(a)google.com> netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name Julian Anastasov <ja(a)ssi.bg> ipvs: revalidate ihl before icmp_send Karl Mehltretter <kmehltretter(a)gmail.com> netfilter: nft_synproxy: use the family-aware checksum helper Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_queue: hold nfnl mutex in event notifier Scott Mitchell <scott.k.mitch1(a)gmail.com> netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> netfilter: flowtable: publish HW_DEAD after worker is done Kumar Kartikeya Dwivedi <memxor(a)gmail.com> libbpf: Reject truncated ldimm64 CO-RE relocations Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Restrict CO-RE poisoning to relocatable instructions Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_u32: fix manual hash table handle IDR aliasing Weiming Shi <bestswngs(a)gmail.com> bpf: Skip unsettled links in link iterator Zhiling Zou <zhilinz(a)nebusec.ai> xsk: Use a 32-bit compare in xsk_map_gen_lookup Julian Sun <sunjunchao(a)bytedance.com> fs: avoid repeated scans in evict_inodes() Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Guard PMCW field accesses with dnv check Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix cio_update_schib() to not cache invalid schib Karl Mehltretter <kmehltretter(a)gmail.com> s390/pci/docs: Fix sriov_numvfs attribute name Niklas Schnelle <schnelle(a)linux.ibm.com> docs: s390/pci: Improve and update PCI documentation Bart Van Assche <bvanassche(a)acm.org> scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume() Eva Kurchatova <eva.kurchatova(a)virtuozzo.com> selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode Sean Christopherson <seanjc(a)google.com> cgroup: selftests: Move memcontrol specific helpers out of common cgroup_util.c Lee Jones <lee(a)kernel.org> Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel Christiano Amora <christiano.amora(a)gmail.com> Bluetooth: SMP: reject Security Request over BR/EDR Ran Hongyun <ranhongyun1(a)huawei.com> squashfs: Add dictionary size range check to prevent shift-out-of-bounds Karl Mehltretter <kmehltretter(a)gmail.com> KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0 Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes Slawomir Stepien <sst(a)poczta.fm> HID: amd_sfh: Validate PCI BAR size before mapping Sean Anderson <sanderson(a)brivo.com> pinctrl: meson: Fix typo in s4 group name Geliang Tang <tanggeliang(a)kylinos.cn> bpf, sockmap: Fix self-redirect copied_seq double-counting Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix out-of-bounds read of rtt_min in sock_ops Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev> bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() Oscar Priego Verdugo <oscar.priegov(a)gmail.com> HID: elecom: fix bus type for M-XGL20DLBK Jiayuan Chen <jiayuan.chen(a)linux.dev> tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix divide-by-zero in btf_struct_walk() Sven Schnelle <svens(a)linux.ibm.com> selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc Weiming Shi <bestswngs(a)gmail.com> bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix bpf_skb_change_tail wrt csum partial skbs Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix IRQ injection with SIGP Stop and Store Status Mostafa Saleh <smostafa(a)google.com> remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage Phil Sutter <phil(a)nwl.cc> netfilter: nf_tables: Simplify chain netdev notifier Phil Sutter <phil(a)nwl.cc> netfilter: nf_tables: Tolerate chains with no remaining hooks Helge Deller <deller(a)gmx.de> apparmor: Fix 8-byte alignment for initial dfa blob streams Gaosheng Cui <cuigaosheng1(a)huawei.com> apparmor: Fix memory leak in unpack_profile() Fedor Pchelkin <pchelkin(a)ispras.ru> apparmor: free the allocated pdb objects Wenwu Hou <hwenwur(a)gmail.com> erofs: fix large folio race in erofs_fscache_req_complete Jinjie Ruan <ruanjinjie(a)huawei.com> spi: zynqmp-gqspi: Use devm_spi_alloc_host() Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Add layout1.refer_mount_root Itai Handler <itai.handler(a)gmail.com> spi: spi-zynqmp-gqspi: stop the controller on shutdown Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix partial normalized name responses Eric Dumazet <edumazet(a)google.com> ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src() Eric Dumazet <edumazet(a)google.com> ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Don't hold RTNL for MCAST_ socket options. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Don't hold RTNL for IPV6_DROP_MEMBERSHIP and MCAST_LEAVE_GROUP. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Don't hold RTNL for IPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Use in6_dev_get() in ipv6_dev_mc_dec(). Frank Sorenson <sorenson(a)redhat.com> smb: client: fix missing iov bounds check in parse_posix_sids() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix missing lower-bound check on DFS referral string offsets Frank Sorenson <sorenson(a)redhat.com> smb: client: fix server->total_read for compound encrypted PDUs Frank Sorenson <sorenson(a)redhat.com> smb: client: fix potential OOB read in smb3_enum_snapshots() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Paulo Alcantara <pc(a)manguebit.org> smb: client: fix smbd_connection leak on cifs_get_tcp_session() error Frank Sorenson <sorenson(a)redhat.com> smb: client: reject short Next offsets in parse_server_interfaces() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix rlist race and missing initialization Paulo Alcantara <pc(a)manguebit.org> smb: client: cancel reconnect work in clean_demultiplex_info() Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/adreno: fix autosuspend cleanup during teardown Sajal Gupta <sajal2005gupta(a)gmail.com> drm/gud: fix out-of-bounds write in gud_plane_atomic_check() Rik van Riel <riel(a)surriel.com> wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver Zhao Li <enderaoelyther(a)gmail.com> wifi: mwifiex: validate action frame fixed fields Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: mwifiex: validate scan response extents Doruk Tan Ozturk <doruk(a)0sec.ai> wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length Shengzhuo Wei <me(a)cherr.cc> wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST Shengzhuo Wei <me(a)cherr.cc> wifi: p54: validate curve data length in the calibration curve converters Tianchu Chen <flynnnchen(a)tencent.com> wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() Ali Ahmet Memis <ali(a)iusegentoo.com> wifi: wilc1000: fix out-of-bounds read in P2P public action frames Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: wlcore: release runtime PM ref on regdomain config failure Tianchu Chen <flynnnchen(a)tencent.com> wifi: rsi: fix heap OOB write on key removal Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: libertas_tf: fix UAF in lbtf_free_adapter() Stanislaw Gruszka <stf_xl(a)wp.pl> wifi: iwlegacy: fix broadcast stations deallocation Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: brcmsmac: fix UAF in brcms_free_timer() Wentao Liang <vulab(a)iscas.ac.cn> watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() Wentao Liang <vulab(a)iscas.ac.cn> watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: rtd119x: Avoid division by zero Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Propagate error code in resume() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix premature reset during timeout update Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: digicolor: Avoid division by zero Li Jun <lijun01(a)kylinos.cn> watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83793) release probe data through kref Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding Nuno Sá <nuno.sa(a)analog.com> hwmon: (pmbus/core) increase number of phases and add new mask Muhammad Bilal <meatuni001(a)gmail.com> hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: zero ff_effect before compat copy in input_ff_effect_from_user Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Raphaël Larocque <rlarocque(a)disroot.org> Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - check btns_desc->package.count Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - fix MS Surface Pro 11 probe failure Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() Chris Sommers <chris.sommers(a)icloud.com> Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: evdev - zero absinfo before partial copy in EVIOCSABS Linkai Gong <gonglinkai(a)kylinos.cn> Input: cyttsp5 - clamp the HID report size before memcpy Alexei Turtanov <9alexei9(a)gmail.com> Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 Alvin Šipraga <alvin.sipraga(a)analog.com> Input: adp5588-keys - cache GPIO state before registering the gpiochip Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Reset command and data lines on failed tuning Xu Rao <raoxu(a)uniontech.com> mmc: spi: reset bytes_xfered before retrying CRC failures Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt Felix Gu <ustc.gu(a)gmail.com> mmc: sdio_uart: fix xmit_fifo leak when the port table is full Myeonghun Pak <mhun512(a)gmail.com> mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Florian Maillard <florian.maillard(a)mailoo.org> mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 Fan Wu <fanwu01(a)zju.edu.cn> mmc: mxcmmc: cancel data work and watchdog on remove Fan Wu <fanwu01(a)zju.edu.cn> mmc: hsq: Fix use-after-free in retry work Zhu Ling <zhuling0805(a)qq.com> mmc: core: Fix OF node reference leak on card add failure Fan Wu <fanwu01(a)zju.edu.cn> mmc: core: Cancel SDIO IRQ work before freeing host Christian Göttsche <cgzones(a)googlemail.com> selinux: always fill AVC decision in avc_has_perm_noaudit() Karl Mehltretter <kmehltretter(a)gmail.com> selinux: recheck intermediate backing files on mprotect() Karl Mehltretter <kmehltretter(a)gmail.com> selinux: preserve user SID across nested backing files Shuhei Takeshita <jyohuku.alterego(a)gmail.com> IB/hfi1: Fix the PIO_CRED credit-return mmap Shuhei Takeshita <jyohuku.alterego(a)gmail.com> IB/hfi1: Resolve the credit-return buffer through the send context's node Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> IB/mlx4: Fix use-after-free on pkey sysfs registration failure Guangshuo Li <lgs201920130244(a)gmail.com> i2c: imx: disable autosuspend on remove Shengzhuo Wei <me(a)cherr.cc> i2c: imx: release DMA channels on probe error Linkai Gong <gonglinkai(a)kylinos.cn> i2c: atr: fix dangling adapter pointer on add failure Shengzhuo Wei <me(a)cherr.cc> i2c: at91: release DMA channels on remove and probe error Jarkko Sakkinen <jarkko(a)kernel.org> KEYS: trusted: Fix tpm2_load_cmd() boundary check Maoyi Xie <maoyixie.tju(a)gmail.com> keys: translate request_key_auth pid for the reading procfs instance Shakeel Butt <shakeel.butt(a)linux.dev> mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio() Yifei Gao <gyf161023(a)gmail.com> memstick: ms_block: destroy io_queue workqueue on removal Chengfeng Ye <nicoyip.dev(a)gmail.com> xfrm: serialize state GC with device state flush Alberto Carboneri <acarboneri(a)drivesec.com> scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() Mark Amirkan <markdamirkan(a)gmail.com> net/packet: avoid truncating TPACKET_V3 private size Mark Amirkan <markdamirkan(a)gmail.com> net/packet: clear RX owner on VNET header error Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: hhf: cap hh_flows_limit at change time Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() Mark Amirkan <markdamirkan(a)gmail.com> net: lan743x: fix RX checksum use-after-free Zhiling Zou <zhilinz(a)nebusec.ai> ipv6: xfrm: use full sockets in local error paths Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix non-atomic read of DMA position registers Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Serialize local codec list cleanup Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: hci_codec: validate vendor codec count length Aamir Ahmed <elb12345(a)hotmail.co.uk> Bluetooth: eir: validate service data length before reading UUID Nicolas Thibert <nithibert(a)gmail.com> Bluetooth: btusb: fix NXP IW610 composite device handling Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_and() mask generation Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_write() casting Koichiro Den <den(a)valinux.co.jp> arm64: dts: renesas: r8a779f0: Set UFS lane count Bradley Morgan <include(a)grrlz.net> arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc Thomas Huth <thuth(a)redhat.com> kselftest/arm64: Fix size of thread_data values for pthread_join() Benoît Sevens <bsevens(a)google.com> HID: logitech-hidpp: fix race condition when accessing stale stack pointer Wyatt Feng <wf.kernel.dev(a)gmail.com> net: xfrm: reject unrepresentable espintcp transport headers Zhiling Zou <zhilinz(a)nebusec.ai> openvswitch: avoid reallocating confirmed conntrack labels Jeffin Philip <jeffinphilip14(a)gmail.com> RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() Quanye Yang <quanyeyang(a)proton.me> RDMA/ucma: Serialize join and leave on copy_to_user failure Inbal Schussheim <inbal.lipshtat(a)mail.huji.ac.il> tcp: exclude old ACKs from tcp fast path Aohan Mei <henrymei(a)tencent.com> rds: ib: use rds_conn_drop() on protocol version mismatch Hyunwoo Kim <imv4bel(a)gmail.com> exec: Cleanup POSIX timers right after de_thread() Wentao Liang <vulab(a)iscas.ac.cn> cifs: Fix server use-after-free in cifs_chan_skip_or_disable() Niklas Cassel <cassel(a)kernel.org> ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY Jiangshan Yi <yijiangshan(a)kylinos.cn> ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type Yuho Choi <oss.patchbox(a)gmail.com> ALSA: virtio: reset device before deleting virtqueues Jeremy Nyberg <slickstretch3.0(a)gmail.com> Input: xpad - fix PDP Marvel Xbox 360 controller Roberts Kursitis <roberts.kursitis(a)azeron.eu> Input: xpad - add support for Azeron devices Erich Sartison <byt.es(a)mailbox.org> Input: xpad - add support for Victrix Pro BFG Controller Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix the random "error beacon valid" messages for USB Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: TX QOS Null data the same way as Null data Kevin Hao <haokexin(a)gmail.com> net: cpsw: Execute ndo_set_rx_mode callback in a work queue Kevin Hao <haokexin(a)gmail.com> net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue Zi Yan <ziy(a)nvidia.com> mm/huge_memory: use folio's memcg inside __folio_split() Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update inode for hole punching and reflinking Filipe Manana <fdmanana(a)suse.com> btrfs: remove redundant root argument from btrfs_update_inode() Filipe Manana <fdmanana(a)suse.com> btrfs: simplify error check condition at btrfs_dirty_inode() Dmitriy Chumachenko <Dmitry.Chumachenko(a)cyberprotect.ru> drm/amdgpu: check ras and obj before dereference Dmitriy Okunev <dokunevdmitriy(a)gmail.com> net: mvpp2: prevent buffer overflow in page_pool allocation James Clark <jjc(a)jclark.com> net: macb: fix ordering around PTP timestamp read Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Ack RX overrun interrupt correctly Eric Dumazet <edumazet(a)google.com> net: lock the socket in sock_gettstamp() Yige Jiang <yigejiang86(a)gmail.com> net: netsec: fix device_node reference leak on phy_np HyeongJun An <sammiee5311(a)gmail.com> ASoC: hdmi-codec: Report a change when the channel status moves Sasha Levin <sashal(a)kernel.org> ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments Shivaprasad G Bhat <sbhat(a)linux.ibm.com> powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() Eric Dumazet <edumazet(a)google.com> drop_monitor: fix out-of-bounds write in reset_per_cpu_data() Eric Dumazet <edumazet(a)google.com> drop_monitor: synchronize tracepoint unregistration on error path Eric Dumazet <edumazet(a)google.com> pppoatm: ensure a writable skb header and linear data Juan Perdomo <jcperdomo100(a)gmail.com> Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup Tzung-Bi Shih <tzungbi(a)kernel.org> Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() Baineng Shou <shoubaineng(a)gmail.com> dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: keep compound responses on query info errors Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix partial file information responses Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: return buffer overflow for partial filesystem info Eric Dumazet <edumazet(a)google.com> tcp: do not let tcp_rmem be set below 4096 Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: mst: move switchdev call outside rcu Karl Mehltretter <kmehltretter(a)gmail.com> wifi: brcmfmac: fix lost 802.1x TX completion wakeup Hohyun Sim <tlaghgus0425(a)korea.ac.kr> net: fddi: skfp: fix NULL deref when setting the MAC address while down Dong Chenchen <dongchenchen2(a)huawei.com> ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL Filipe Manana <fdmanana(a)suse.com> btrfs: tree-checker: print dev extent offset in error message Slavin Liu <bolin.liu(a)seu.edu.cn> ALSA: hda: trace PCM open only after assigning a stream Karl Mehltretter <kmehltretter(a)gmail.com> drm/vc4: Use managed KMS polling to fix UAF on unbind Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: Automatically clean up poll helper Zihan Xi <zihanx(a)nebusec.ai> wifi: virt_wifi: don't transfer operstate before register Xiang Mei <xmei5(a)asu.edu> ALSA: 6fire: fix OOB write from device-reported iso length Takashi Iwai <tiwai(a)suse.de> ALSA: usb: 6fire: Avoid embedded URBs Takashi Iwai <tiwai(a)suse.de> ALSA: 6fire: Clean ups with guard() Karl Mehltretter <kmehltretter(a)gmail.com> Input: trackpoint - fix the inertia attribute name in the ABI document Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> ALSA: pcm: set timer->private_data before registering the PCM timer AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow Takashi Iwai <tiwai(a)suse.de> ALSA: bcd2000: Fix race between rawmidi and disconnect Karl Mehltretter <kmehltretter(a)gmail.com> keys: fix lost wakeup when reaping a dead key type Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr Shouping Wang <allen.wang(a)hj-micro.com> perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: hold reference on ct until flow is released Theodor Arsenij Larionov Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_nat: fully initialise new_addr in netmap setup Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> RDMA/siw: Bound fragmented header copies by the remaining length Leon Romanovsky <leon(a)kernel.org> RDMA/efa: Keep EQ resources alive while IRQ is registered Leon Romanovsky <leon(a)kernel.org> RDMA/efa: Keep admin queues alive while IRQ is registered Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order Karl Mehltretter <kmehltretter(a)gmail.com> scsi: qla2xxx: Fix the ql2xfc2target parameter description Meijing Zhao <zhaomeijing(a)lixiang.com> mm: memblock: show all region flags in debugfs Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: set up the TX info early to fix failure paths Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: rework ack_frame_id handling a bit Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: mesh: release the channel if start fails Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: add HE 6 GHz capability in the scan elems len Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't access the TSF of a down interface Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't allow link changes when iface is down Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: require a peer station for TDLS setup confirm Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: unlist vifs when their netdev is unregistered Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: suppress chanctx warning for debugfs reset Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't offload TC setup on AP_VLAN interfaces Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't filter by BSS type when removing stale entries Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: only group hidden BSSes with beacon entries Shivank Garg <shivankg(a)amd.com> dmaengine: wait for RCU readers before releasing dma_device Shivank Garg <shivankg(a)amd.com> dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() Shivank Garg <shivankg(a)amd.com> dmaengine: Fix device kref underflow in dma_chan_put() Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> dma-coherent: report a failed reserved memory assignment Chen-Yu Tsai <wenst(a)chromium.org> dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask Orgad Shaneh <orgads(a)gmail.com> MIPS: Octeon: apply USB FDT fixups also when USB is modular Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: cadence_master: wait and cancel cdns->work before clock stop Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: check IP header size in cfg80211_classify8021d() Carolina Jubran <cjubran(a)nvidia.com> IB/IPoIB: Avoid restoring OPER_UP after multicast flush Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short association responses Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short beacon and probe responses Peng Hao <flyingpenghao(a)gmail.com> wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path Mariano Baragiola <mbaragiola(a)linux.com> wifi: virt_wifi: free skb when disconnected Ruoyu Wang <ruoyuw560(a)gmail.com> dmaengine: sprd: Fix runtime PM reference leak in probe Quanye Yang <quanyeyang(a)proton.me> RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Enforce local fence for IB_WR_REG_MR Li RongQing <lirongqing(a)baidu.com> RDMA/mad: Fix receive buffer leak when PKey enforcement fails Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/isert: wait for deferred control PDU completions before releasing the connection Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/iser: reject a remote invalidation of an unregistered direction Krystian Kaniewski <krystianmkaniewski(a)gmail.com> RDMA/core: Reject unregistering netdevs in ib_get_eth_speed Eric Dumazet <edumazet(a)google.com> net: convert dev->reg_state to u8 Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds Xixin Liu <liuxixin(a)kylinos.cn> clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate Xixin Liu <liuxixin(a)kylinos.cn> firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS Gang Yan <yangang(a)kylinos.cn> RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access Norbert Szetei <norbert(a)doyensec.com> RDMA/rxe: validate access flags before swapping the MR's PD Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Cleanup siw_accept Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Introduce siw_cep_set_free_and_put Pengpeng Hou <pengpeng(a)iscas.ac.cn> ARM: socfpga: select the PL310 erratum 753970 workaround Maher Azzouzi <maherazz04(a)gmail.com> esp: downgrade zerocopy managed frags before mutating skb frags Eric Dumazet <edumazet(a)google.com> xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() Kyle Zeng <kylebot(a)openai.com> xfrm: fix compat ALLOCSPI request use-after-free Sabrina Dubroca <sd(a)queasysnail.net> xfrm: avoid RCU warnings around the per-netns netlink socket Ido Schimmel <idosch(a)nvidia.com> ipv6: Honor oif when choosing nexthop for locally generated traffic Ido Schimmel <idosch(a)nvidia.com> ipv6: Select best matching nexthop object in fib6_table_lookup() Arash Golgol <arash.golgol(a)gmail.com> media: video-i2c: fix buffer queue ordering Jens Axboe <axboe(a)kernel.dk> sunvdc: fix -EIO issue due to lack of retries Günther Noack <gnoack(a)google.com> selftests/landlock: Add tests for whiteout object creation Sasha Levin <sashal(a)kernel.org> Revert "alpha: fix ieee_swcr_to_fpcr setting FPCR_DNOD unconditionally" Sasha Levin <sashal(a)kernel.org> Revert "alpha: don't leak hardware-fabricated FP exception bits to user space" Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Add disconnected leafs and branch test suites Tingmao Wang <m(a)maowtm.org> selftests/landlock: Add tests for access through disconnected paths Sasha Levin <sashal(a)kernel.org> Revert "hwmon: (emc1403) Rely on subsystem locking" Sasha Levin <sashal(a)kernel.org> Revert "hwmon: (emc1403) Drop hysteresis for low limit temperature" Paolo Abeni <pabeni(a)redhat.com> mptcp: close race between scheduler and state change Paolo Abeni <pabeni(a)redhat.com> mptcp: avoid unneeded actions on subflow reset Paolo Abeni <pabeni(a)redhat.com> mptcp: fix bad accounting in __mptcp_subflow_push_pending() Kiran K <kiran.k(a)intel.com> Bluetooth: btintel: Fix compiler warning for multi_v7_defconfig config Mallesh Koujalagi <mallesh.koujalagi(a)intel.com> workqueue: Update documentation as per system_percpu_wq naming Eric Biggers <ebiggers(a)kernel.org> netfilter: nft_set_pipapo_avx2: add missing vzeroupper Eric Biggers <ebiggers(a)kernel.org> crypto: sun8i-ce - Remove crypto_rng interface Eric Biggers <ebiggers(a)kernel.org> crypto: sun8i-ss - Remove crypto_rng interface Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> fou: Fix use-after-free in fou_create() Weiming Shi <bestswngs(a)gmail.com> net: appletalk: fix NULL pointer dereference in aarp_send_ddp() Weiming Shi <bestswngs(a)gmail.com> i2c: smbus: reject oversized block transfers in the common path Kazuki Hanai <hnkz.64(a)gmail.com> ALSA: us122l: Prevent write upgrades for read mappings Gary Guo <gary(a)garyguo.net> net: usb: pegasus: don't rely on id table pointer arithmetic Gary Guo <gary(a)garyguo.net> media: as102: do not rely on id table address comparison Gary Guo <gary(a)garyguo.net> usb: serial: spcp8x5: don't store usb_device_id Gary Guo <gary(a)garyguo.net> usb: usbtmc: don't store usb_device_id Gary Guo <gary(a)garyguo.net> wifi: ath9k_htc: don't store usb_device_id Gary Guo <gary(a)garyguo.net> usb: xusbatm: don't rely on id table pointer arithmetic Ian Rogers <irogers(a)google.com> perf evsel: Add per-thread warning for EOPNOTSUPP open failues Sasha Levin <sashal(a)kernel.org> Revert "perf tests: Fix flakiness in BPF counters test on hybrid systems" Sasha Levin <sashal(a)kernel.org> Revert "selftests/mm: report unique test names for each cow test" Sasha Levin <sashal(a)kernel.org> Revert "selftests/mm: skip COW tmpfile cases when fallocate() is unsupported" Sasha Levin <sashal(a)kernel.org> Revert "nvme: apple: Add Apple A11 support" Sasha Levin <sashal(a)kernel.org> Revert "nvme-apple: Drop the PRP null check chicken bit" Sasha Levin <sashal(a)kernel.org> Revert "nvme-apple: Prevent shared tags across queues on Apple A11" Sasha Levin <sashal(a)kernel.org> Revert "nvme-apple: Reset q->sq_tail during queue init" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sc8180x: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sdm845: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8150: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8250: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8350: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8450: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8550: Fix the PCIe iommu-map entries" Darrick J. Wong <djwong(a)kernel.org> xfs: bail out on bitmap errors in xrep_agfl_fill Darrick J. Wong <djwong(a)kernel.org> xfs: count escaped corruption errors in scrub stats Darrick J. Wong <djwong(a)kernel.org> xfs: signal inode btree xref error if get_rec returns an error Darrick J. Wong <djwong(a)kernel.org> xfs: snapshot old AGFL before rewriting it Darrick J. Wong <djwong(a)kernel.org> xfs: snapshot scrub stats when rendering them Bjoern Doebel <doebel(a)amazon.de> smb: client: fix heap overflow in DACL owner/group rewrite Bjoern Doebel <doebel(a)amazon.de> smb: client: avoid leaking refcount when cifs_sb_tlink() fails Bjoern Doebel <doebel(a)amazon.de> smb: client: avoid leaking refcount in cifs_queue_oplock_break() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix file type corruption in wsl_to_fattr() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix file type corruption in cifs_reparse_point_to_fattr() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix one-byte OOB read in smb2_parse_native_symlink() Karl Mehltretter <kmehltretter(a)gmail.com> smb: client: pin DFS superblock in iterator callback Aohan Mei <henrymei(a)tencent.com> smb: client: reject userspace cifs.idmap descriptions Gang Yan <yangang(a)kylinos.cn> selftests: mptcp: fix an UAF in mptcp_connect.c Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: syncookies: remember the request backup flag Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: subflow: no need to copy thmac during ulp_clone Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: options: handle MPC data + csum reqd + no csum Joe Damato <joe(a)dama.to> bnxt_en: Propagate RX ring init failures in bnxt_init_nic() Joe Damato <joe(a)dama.to> bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() Joe Damato <joe(a)dama.to> bnxt_en: Only restore LRO if the device supports TPA Michael Bommarito <michael.bommarito(a)gmail.com> media: v4l2-ctrls: validate AV1 tile counts Michael Bommarito <michael.bommarito(a)gmail.com> media: v4l2-ctrls: validate HEVC tile counts Michael Bommarito <michael.bommarito(a)gmail.com> media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity Michael Bommarito <michael.bommarito(a)gmail.com> media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer Haotian Zhang <vulab(a)iscas.ac.cn> media: v4l2-h264: Fix memcmp() size in B1 reference list comparison Michael Bommarito <michael.bommarito(a)gmail.com> media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity Michael Bommarito <michael.bommarito(a)gmail.com> media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity Michael Bommarito <michael.bommarito(a)gmail.com> media: hevc: add bounded tile-count helpers Vishnu Razdan <vrazdan(a)openai.com> hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS Fan Wu <fanwu01(a)zju.edu.cn> hwmon: (gpio-fan) Fix use-after-free in alarm work Cong Nguyen <congnt264(a)gmail.com> hwmon: (applesmc) fix key backlight workqueue leak on register failure Harald Freudenberger <freude(a)linux.ibm.com> s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm Nagamani PV <nagamani(a)linux.ibm.com> s390/qeth: allow bridgeport queries despite OS_MISMATCH leixiang <leixiang(a)kylinos.cn> KVM: PPC: Book3S HV: Set irqfd->producer only on success Ibrahim Hashimov <security(a)auditcode.ai> mac802154: fix use-after-free of sdata via queued RX frames Kyle Zeng <kylebot(a)openai.com> ipvs: reject invalid states in connection template sync records Zihan Xi <zihanx(a)nebusec.ai> ipv4: fib: bound automatic table ID allocation David Carlier <devnexen(a)gmail.com> ieee802154: hwsim: serialize pib updates to fix double-free Zhiling Zou <zhilinz(a)nebusec.ai> ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink Yilin Zhang <yilinzhang(a)moonshot.ai> inet: frags: invalidate queues before flushing them Weiming Shi <bestswngs(a)gmail.com> fbdev: vfb: defer cleanup until the last reference Nathan Chancellor <nathan(a)kernel.org> scripts/sorttable: Mark long_size as __maybe_unused Xiong Weimin <xiongweimin(a)kylinos.cn> vdpa: solidrun: Free IRQs after request failure Xiong Weimin <xiongweimin(a)kylinos.cn> vdpa: ifcvf: Put device on unsupported feature error Ilya Maximets <i.maximets(a)ovn.org> netfilter: report NLM_F_DUMP_FILTERED when all is filtered out Chengfeng Ye <nicoyip.dev(a)gmail.com> netfilter: nf_log: unregister loggers before per-net teardown Norbert Szetei <norbert(a)doyensec.com> net: openvswitch: fix use-after-free of the flow table mask array Fourie Zhang <littleddfu(a)gmail.com> net: mpls: clear inner_protocol when the last label is popped Sahil Chandna <sahilchandna(a)linux.microsoft.com> net: mana: Reserve extra CQ slot for the fence completion CQE Johan Hovold <johan(a)kernel.org> net: hso: fix TIOCMIWAIT race Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> ring-buffer: Acquire the lock with irqsave in rb_wake_up_waiters() Thorsten Blum <thorsten.blum(a)linux.dev> drm/i915: Fix memory leak in query_perf_config_list() Sunil Khatri <sunil.khatri(a)amd.com> drm/drm_exec: fix up contended obj when num_objects is 0 Jann Horn <jannh(a)google.com> exec: do_close_on_exec() before taking exec_update_lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> cpufreq: initialize policy rwsem before sysfs publication Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: zero-initialize policy cpumask before sysfs publication Rong Zhang <i(a)rong.moe> Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 Runyu Xiao <runyu.xiao(a)seu.edu.cn> ASoC: sti: initialize IRQ lock before requesting IRQ Tianchu Chen <flynnnchen(a)tencent.com> ASoC: sprd: validate compress buffer sizes against fixed allocations Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Keep the entry count when the histogram stats allocation fails Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Let histogram values keep the percent and graph modifiers Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Free histogram the field rejected for a bad modifier Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Free histogram var refs regardless of how often they are referenced Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Free histogram the var ref when its initialization fails Henry Martin <bsdhenrymartin(a)gmail.com> tracing/user_events: Don't destroy fields when event removal fails Thomas Gleixner <tglx(a)linutronix.de> tick/broadcast: Plug clockevents replacement race Ido Schimmel <idosch(a)nvidia.com> tunnels: Drop stale dst when building an ICMP error for PMTUD Ali Ahmet Memis <ali(a)iusegentoo.com> ufs: validate cylinder group metadata before caching it Ali Ahmet Memis <ali(a)iusegentoo.com> ufs: create the root dentry after loading cylinder metadata James Hilliard <james.hilliard1(a)gmail.com> watchdog: sunxi_wdt: preserve boot-enabled watchdog Harry Wentland <harry.wentland(a)amd.com> dm/amdgpu: fix malformed link_settings debugfs output Tristan Madani <tristan(a)talencesecurity.com> ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf Roman Prucha <zorgan.roman(a)gmail.com> ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Fix memory corruption from the histogram stacktrace modifier Zihan Xi <zihanx(a)nebusec.ai> ipv6: fix fib6 walker UAF on seq stop Vernon Yang <yanglincheng(a)kylinos.cn> x86/mm: Fix user-space data loss with MADV_FREE and THP Eric Biggers <ebiggers(a)kernel.org> crypto: x86/aria - add missing vzeroupper in AVX-512 code Eric Biggers <ebiggers(a)kernel.org> crypto: x86/aria - add missing vzeroupper in AVX2 code Shivaprasad G Bhat <sbhat(a)linux.ibm.com> powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/ps3: Fix repository.c build failure Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent out-of-bounds reads in share config responses Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands Stian Halseth <stian(a)itx.no> sunvdc: unmap LDC cookies when the descriptor send fails Eelco Chaudron <echaudro(a)redhat.com> openvswitch: fix wrong flag value in get_ipv6_ext_hdrs() Greg Marsden <greg.marsden(a)oracle.com> net/rds: fix tcp stream corruption with large pages Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: fix PF/CGX debugfs PCI bus lookup Aamir Ahmed <elb12345(a)hotmail.co.uk> net: hinic: fix mailbox segment buffer overflow Li Youhong <liyouhong(a)kylinos.cn> net: sun4i-emac: fix missing of_node_put() for phy_node Kuniyuki Iwashima <kuniyu(a)google.com> net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: Fix in-place replace Pedro Tammela <pctammela(a)mojatatu.com> net/sched: cls_route: make netlink errors meaningful Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: Reject handle aliasing Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: free emptied bucket on filter move Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Correct pt_regs->flags update for PEBS path Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel/ds: Factor out PEBS group processing code to functions Changbin Du <changbin.du(a)huawei.com> perf/x86/intel/ds: Remove redundant assignments to sample.period Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel/ds: Clarify adaptive PEBS processing Yabin Cui <yabinc(a)google.com> perf/core: Check sample_type in perf_sample_save_callchain Thibault Ferrante <thibault.ferrante(a)canonical.com> selftests/powerpc/tm: Fix tcheck() reading uninitialised CR value Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: initialize ptp_lock at probe time Qingfang Deng <qingfang.deng(a)linux.dev> ppp_synctty: ensure a writeable skb header Eric Dumazet <edumazet(a)google.com> vxlan: initialize _md in vxlan_xmit_one() Guillaume Nault <gnault(a)redhat.com> vxlan: Pull inner IP header in vxlan_xmit_one(). Beniamino Galvani <b.galvani(a)gmail.com> vxlan: use generic function for tunnel IPv6 route lookup Beniamino Galvani <b.galvani(a)gmail.com> ipv6: add new arguments to udp_tunnel6_dst_lookup() Beniamino Galvani <b.galvani(a)gmail.com> ipv6: remove "proto" argument from udp_tunnel6_dst_lookup() Beniamino Galvani <b.galvani(a)gmail.com> vxlan: use generic function for tunnel IPv4 route lookup Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: reset HTB scheduler topology before freeing queues Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors Cong Nguyen <congnt264(a)gmail.com> hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() Marek Vasut <marex(a)nabladev.com> net: ks8851: Fix receiver error in 100BASE-TX mode following software power-down Yicong Hui <yiconghui(a)gmail.com> net/micrel: Fix typos in micrel driver code comments Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Sync timeout value if WDT was running at boot Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix undefined behavior Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix spurious reset on suspend Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Enable clock before accessing hardware registers Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix clock leak and spurious timer in settimeout() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Avoid division by zero David Arcari <darcari(a)redhat.com> watchdog: fix hrtimer start when pretimeout is zero Nicolai Buchwitz <nb(a)tipi-net.de> net: macb: destroy the phylink instance on the probe error path Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: btusb: Fix UAF of btusb_data by rx_work Jacob Keller <jacob.e.keller(a)intel.com> ice: add missing xa_destroy for sched_node_ids HyeongJun An <sammiee5311(a)gmail.com> ALSA: hda: Report a change when only the channel status bytes move Takashi Iwai <tiwai(a)suse.de> ALSA: hda/common: Use guard() for mutex locks Takashi Iwai <tiwai(a)suse.de> ALSA: hda/common: Use cleanup macros for PM controls Takashi Iwai <tiwai(a)suse.de> ALSA: hda: Introduce auto cleanup macros for PM Karl Mehltretter <kmehltretter(a)gmail.com> drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count RX descriptors for freeq refill Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count RX drops once per frame Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: No mapping is a dropped rx Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count dropped frames as NAPI work Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Finish RX updates before NAPI completion Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Fix budget accounting Alice Mikityanska <alice(a)isovalent.com> net: ipv6: Clamp to IP6_MAX_MTU in ip6_dst_mtu_maybe_forward Alice Mikityanska <alice(a)isovalent.com> net: ipv6: Fix UDP length overflow with PMTU discover and big MTU Eric Dumazet <edumazet(a)google.com> ipv6: lockless IPV6_MTU implementation Eric Dumazet <edumazet(a)google.com> ipv6: lockless IPV6_MULTICAST_HOPS implementation Eric Dumazet <edumazet(a)google.com> ipv6: lockless IPV6_MULTICAST_LOOP implementation Eric Dumazet <edumazet(a)google.com> ipv6: lockless IPV6_UNICAST_HOPS implementation Karl Mehltretter <kmehltretter(a)gmail.com> virtio_input: stop callbacks before unregistering input device Xiong Weimin <xiongweimin(a)kylinos.cn> virtio_input: reset device if input_register_device() fails Andrew Stellman <astellman(a)stellman-greene.com> virtio-pci: return IRQ_HANDLED after non-zero ISR Linfeng Sun <linfeng.sun.dev(a)gmail.com> vdpa_sim_net: check TX pull result before RX copy Linfeng Sun <linfeng.sun.dev(a)gmail.com> vdpa_sim_blk: reject out-of-range sector starts Yu Zhang <yuz08559(a)gmail.com> vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx Jia Jia <physicalmtea(a)gmail.com> vhost/vdpa: reject VRING_NUM larger than device max Si-Wei Liu <si-wei.liu(a)oracle.com> vhost-vdpa: clean iotlb map during reset for older userspace Si-Wei Liu <si-wei.liu(a)oracle.com> vdpa: introduce .compat_reset operation callback Si-Wei Liu <si-wei.liu(a)oracle.com> vhost-vdpa: introduce IOTLB_PERSIST backend feature bit Si-Wei Liu <si-wei.liu(a)oracle.com> vdpa: introduce .reset_map operation callback Si-Wei Liu <si-wei.liu(a)oracle.com> vhost-vdpa: introduce descriptor group backend feature Si-Wei Liu <si-wei.liu(a)oracle.com> vdpa: introduce dedicated descriptor group for virtqueue Jia Jia <physicalmtea(a)gmail.com> virtio_console: do not free control-out buffers on remove hpp.iscas <hppiscas(a)163.com> ASoC: mt6351: Publish the OF module alias Florian Westphal <fw(a)strlen.de> netfilter: ip6_tables: set F_PROTO when proto value is nonzero Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: cope with concurrent instance destruction hpp.iscas <hppiscas(a)163.com> ASoC: Intel: SST: Publish the PCI module aliases hpp.iscas <hppiscas(a)163.com> ASoC: bcm: bcm63xx: Publish the OF module aliases Edward Adam Davis <eadavis(a)sina.com> ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Reject non-scalar bpf_loop iteration counts Vineeth Karumanchi <vineeth.karumanchi(a)amd.com> net: macb: fix NULL pointer dereference on unbind with fixed-link Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: rename bp->sgmii_phy field to bp->phy Allen Pais <apais(a)linux.microsoft.com> workqueue: Introduce from_work() helper for cleaner callback declarations Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: ets: clamp quantum in parse and fallback paths Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: drr: clamp quantum in change class Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: pie: clamp psched_mtu in pie_drop_early Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: hhf: clamp quantum in change and init paths Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sfq: clamp quantum in change path Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: fq_pie: clamp quantum in change path Eric Dumazet <edumazet(a)google.com> net_sched: sch_fq_pie: implement lockless fq_pie_dump() Lama Kayal <lkayal(a)nvidia.com> net/mlx5: E-Switch, prevent mc_list repopulation during vport disable Yael Chemla <ychemla(a)nvidia.com> net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Fix use-after-free race in sample_restore_put() Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Fix ETS zero BW reporting when one TC holds 100% Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5e: Fix setting RS FEC after remapping Weiming Shi <bestswngs(a)gmail.com> net/sched: defer qdisc freeing after failed creation Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/kexec_file: Use inclusive range checks in add_usable_mem() Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix cmd_regs access racing BAR unmap on reset Jamal Hadi Salim <jhs(a)mojatatu.com> net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations Seungwon Bae <qotmddnjs(a)ajou.ac.kr> vxlan: reject dynamic fdb entries that reference a nexthop id Alexandra Winter <wintera(a)linux.ibm.com> s390/ism: folio_put() after error Jason Winter <jjx(a)live.nl> net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow Viswajith Murali <viswajithm(a)marvell.com> octeontx2-af: mcs: Clear stale X2P calibration state before calibration Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: mcast: properly convert mglist to rcu Jakub Kicinski <kuba(a)kernel.org> net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size Jakub Kicinski <kuba(a)kernel.org> net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size Eric Dumazet <edumazet(a)google.com> bonding: use skb_cow_head() in bond_do_alb_xmit() and rlb_arp_xmit() Ido Schimmel <idosch(a)nvidia.com> nexthop: Initialize extack in remove_nh_grp_entry() Jiayuan Chen <jiayuan.chen(a)linux.dev> selftests/bpf: Fix flaky bpf_nf test when random NAT port is 0 Brad Cowie <brad(a)faucet.nz> selftests/bpf: Update tests for new ct zone opts for nf_conntrack kfuncs Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Mark bpf_btf_find_by_name_kind() as sleepable Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: clear txcb->last before writing each descriptor Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: avs: Clean up the bus when fetching ML caps fails Mohamed Khalfella <mkhalfella(a)purestorage.com> nvme: remove stale namespaces by NSID range during scan Stuart Hayes <stuart.w.hayes(a)gmail.com> nvme_core: scan namespaces asynchronously Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix NULL-ptr-deref in btf_var_show() Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix NULL-ptr-deref when showing a void BTF type Takashi Iwai <tiwai(a)suse.de> ALSA: caiaq: Fix potential double-free at error path HyeongJun An <sammiee5311(a)gmail.com> selftests/alsa: Fix the step check for INTEGER controls Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: reconfigure RX packet parser table in stmmac_hw_setup() after reset Allison Henderson <achender(a)kernel.org> net/rds: don't let rds_conn_shutdown() consume a concurrent drop Håkon Bugge <haakon.bugge(a)oracle.com> net/rds: acquire the fastpath locks in rds_conn_shutdown() Allison Henderson <achender(a)kernel.org> net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() Gerd Rausch <gerd.rausch(a)oracle.com> net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown Allison Henderson <achender(a)kernel.org> net/rds: clear cp_flags bits individually in rds_conn_path_reset() Allison Henderson <achender(a)kernel.org> net/rds: use clear_bit_unlock() in release_refill() Allison Henderson <achender(a)kernel.org> net/rds: use wq_has_sleeper() in release_in_xmit() Eric Dumazet <edumazet(a)google.com> bonding: do not clear curr_active_slave prematurely when releasing all slaves Eduard Zingerman <eddyz87(a)gmail.com> bpf: reject BPF_PSEUDO_FUNC reference to the main program Henry Martin <bsdhenrymartin(a)gmail.com> tracing/probes: Fix use-after-free on field name/type of events with multiple probes Joas Antonio dos Santos <joasantonio108(a)gmail.com> netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() Kyle Zeng <kylebot(a)openai.com> ipvs: fix reversed sequence option serialization Qu Wenruo <wqu(a)suse.com> btrfs: do not force reloc root creation during qgroup_account_snapshot() Avi Weiss <thnkslprpt(a)gmail.com> btrfs: send: fix lost error return value in will_overwrite_ref() Qu Wenruo <wqu(a)suse.com> btrfs: fix the possible bioc_list memory leak during error Dan Carpenter <dan.carpenter(a)linaro.org> btrfs: directly return 0 on no error code in btrfs_insert_raid_extent() Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> btrfs: fix transaction use-after-free in raid stripe insertion Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Program the MSP FIFO watermarks Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Request the MSP MMIO resource Linus Walleij <linusw(a)kernel.org> mfd: db8500-prcmu: Fold dbx500 header into db8500 Kees Cook <kees(a)kernel.org> arm: Handle KCOV __init vs inline mismatches Zijun Hu <quic_zijuhu(a)quicinc.com> mfd: db8500-prcmu: Remove needless return in three void APIs Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Validate MSP DAI configuration Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Correct MSP frame and bit clock setup Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Propagate MSP setup errors Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Fix MSP stream lifecycle handling Qingyu Zhang <usupergate(a)gmail.com> ALSA: ump: do not touch legacy_rmidi before it exists Takashi Iwai <tiwai(a)suse.de> ALSA: ump: Update rawmidi name per EP name update Takashi Iwai <tiwai(a)suse.de> ALSA: ump: Copy safe string name to rawmidi Takashi Iwai <tiwai(a)suse.de> ALSA: ump: Copy FB name string more safely Takashi Iwai <tiwai(a)suse.de> ALSA: rawmidi: Show substream activity in info ioctl Takashi Iwai <tiwai(a)suse.de> ALSA: rawmidi: Expose the tied device number in info ioctl Eric Dumazet <edumazet(a)google.com> locking/lockdep: Invalidate stale class_cache entries for zapped classes Leo Yan <leo.yan(a)arm.com> perf/core: Skip empty AUX records with only format flags Ivy Lopez <skunkolee(a)gmail.com> scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues() Eric Dumazet <edumazet(a)google.com> bonding: alb: fix uninitialized transport header access in alb_determine_nd() Guanghui Yang <3497809730(a)qq.com> btrfs: restore active device pointers after failed sprout Guanghui Yang <3497809730(a)qq.com> btrfs: detach failed sprout device from transaction update list wangdicheng <wangdicheng(a)kylinos.cn> ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() wangdicheng <wangdicheng(a)kylinos.cn> ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits Vasily Gorbik <gor(a)linux.ibm.com> s390/boot: Fix physical memory search range Xu Rao <raoxu(a)uniontech.com> ALSA: hda: restore MFG widget enumeration after core split Takashi Iwai <tiwai(a)suse.de> ALSA: hda/core: Use guard() for mutex locks Hui Su <sh_def(a)163.com> staging: fbtft: make dirty_lock IRQ-safe Kuniyuki Iwashima <kuniyu(a)google.com> af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). Eric Dumazet <edumazet(a)google.com> ipv6: sr: restore network header before routing and forwarding Tung Nguyen <tung.quang.nguyen(a)est.tech> tipc: fix NULL deref in tipc_named_node_up() on empty publication list Eric Dumazet <edumazet(a)google.com> ip6_gre: check tunnel info before xmit in ip6gre_tunnel_xmit Qingfang Deng <qingfang.deng(a)linux.dev> ppp: ppp_async: simplify tty disc_data access Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Validate and program TDM slots correctly Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Correct digital interface format setup Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Repair the DAPM capture graph Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Reset the audio block before configuring it Gongwei Li <ligongwei(a)kylinos.cn> Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan Aleksandr Nogikh <nogikh(a)google.com> Bluetooth: hci_core: Fix race condition during device registration Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btintel: validate version TLV value lengths Kiran K <kiran.k(a)intel.com> Bluetooth: btintel: Export few static functions Kiran K <kiran.k(a)intel.com> Bluetooth: btintel: Print firmware SHA1 Jiacheng Xu <stitch(a)zju.edu.cn> workqueue: reject watchdog thresholds that overflow jiffies Marco Crivellari <marco.crivellari(a)suse.com> workqueue: replace use of system_wq with system_percpu_wq Vasily Gorbik <gor(a)linux.ibm.com> s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block Vasily Gorbik <gor(a)linux.ibm.com> s390/ipl: Fix NULL deref in kdump without re-IPL parm block Alexander Gordeev <agordeev(a)linux.ibm.com> s390/os_info: Introduce value entries Heiko Carstens <hca(a)linux.ibm.com> s390/checksum: provide and use cksm() inline assembly Heiko Carstens <hca(a)linux.ibm.com> s390/checksum: call instrument_read() instead of kasan_check_read() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: rate limit unmapped SID errors Yilin Zhang <yilinzhang(a)moonshot.ai> ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF Colin Ian King <colin.i.king(a)gmail.com> OPP: of: Fix potential multiplication overflow when calculating freq Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix NULL pointer dereference in PM callbacks Baul Lee <baul.lee(a)xbow.com> vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() James Nugraha <aslan.jnn(a)gmail.com> net: amd-xgbe: discard rx packets with bad FCS Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> raw: annotate disconnect-side IPv4 match writers Henry Martin <bsdhenrymartin(a)gmail.com> sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> smb: client: transport: Fix debug printing in __release_mid() Huiwen He <hehuiwen(a)kylinos.cn> smb/client: mark file sparse before emulating insert range Milan P. Gandhi <mgandhi(a)redhat.com> scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() Milan P. Gandhi <mgandhi(a)redhat.com> scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() Xin Long <lucien.xin(a)gmail.com> sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: fix skb sizing and action leak on reoffload delete Pedro Tammela <pctammela(a)mojatatu.com> net/sched: act_api: conditional notification of events Pedro Tammela <pctammela(a)mojatatu.com> net/sched: act_api: don't open code max() Pedro Tammela <pctammela(a)mojatatu.com> rtnl: add helper to send if skb is not null Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: size the RTM_GETACTION reply from the actions Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: budget all shared attributes in notify skbs Eric Dumazet <edumazet(a)google.com> net: icmp: avoid invalid transport header access in icmp_send tracepoint Slawomir Stepien <sst(a)poczta.fm> drm/cirrus-qemu: Validate BAR0 size during probe Thomas Zimmermann <tzimmermann(a)suse.de> drm/cirrus: Use video aperture helpers Ali Ahmet Memis <ali(a)iusegentoo.com> ufs: do not treat unreadable directory blocks as empty Matthew Wilcox (Oracle) <willy(a)infradead.org> ufs: Convert ufs_get_page() to ufs_get_folio() Matthew Wilcox (Oracle) <willy(a)infradead.org> ufs: Convert ufs_get_page() to use a folio Jeff Layton <jlayton(a)kernel.org> ufs: convert to new timestamp accessors Hongfu Li <lihongfu(a)kylinos.cn> selftests/cgroup: Fix cg_run_in_subcgroups ignoring arg parameter Xixin Liu <liuxixin(a)kylinos.cn> nvme-rdma: fix -EIO cleanup order in queue_rq Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> accel/qaic: Address potential out-of-bounds read in resp_worker() Dan Carpenter <error27(a)gmail.com> drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Jad Keskes <inasj268(a)gmail.com> EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix channel address decode for non-hash mode Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix channel selection hash Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix interleave boundary condition Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> ARM: ensure interrupts are enabled in __do_user_fault() Xie Yuanbin <xieyuanbin1(a)huawei.com> ARM: 9484/1: enable interrupts when unhandled user faults are triggered Sasha Levin <sashal(a)kernel.org> Revert "Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU" Sasha Levin <sashal(a)kernel.org> Revert "Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU" SJ Park <sj(a)kernel.org> mm/damon/core: avoid infinite kdamond_merge_regions() internal loop Saravana Kannan <saravanak(a)google.com> of: dynamic: Fix overlayed devices not probing because of fw_devlink Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Unlink scc_entry in unix_del_edge(). Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use memcmp() to compare ClientGUIDs HyeongJun An <sammiee5311(a)gmail.com> ASoC: meson: aiu: Validate written enum values Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: topology: Check PCM and DAI name strings before use Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). Jiri Olsa <jolsa(a)kernel.org> bpf: Guard __get_user acesss with access_ok for uprobe_multi data Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Proper rollback if the ioremap fails Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: platform: defer connection counter increment until alloc succeeds Xin Long <lucien.xin(a)gmail.com> sctp: fix err_chunk memory leaks in INIT handling Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Mask pseudo pointer values in verifier logs Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix malformed ISO_END/CONT handling Cen Zhang (Microsoft) <blbllhy(a)gmail.com> tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD Eric Dumazet <edumazet(a)google.com> drop_monitor: fix size calculations for 64-bit attributes Eric Dumazet <edumazet(a)google.com> drop_monitor: perform u64_stats updates under IRQ-disabled section Vlatko Kosturjak <kost(a)linux.hr> ppp_async: drop the errored frame instead of resetting its headroom Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> wifi: mt76: mt7921: skip unknown CLC firmware records Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> wifi: mt76: mt7921: validate CLC firmware records Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> tracing/histograms: Simplify last_cmd_set() Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: remove stale channels from all sessions on teardown Genevieve Chan <genevieve.chan(a)altera.com> firmware: stratix10-svc: fix FCS SMC call kernel-doc Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state Lin Xianglin <1021538027(a)qq.com> ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx Zizhi Wo <wozizhi(a)huawei.com> scsi: core: Do not block on tag allocation in scsi_eh_lock_door() Rudi Heitbaum <rudi(a)heitbaum.com> ASoC: rt5645: Perform the initial jack detect at probe Jisheng Zhang <jszhang(a)kernel.org> spi: dw: fix wrong RX_SAMPLE_DLY setting after resume Guenter Roeck <linux(a)roeck-us.net> hwmon: (corsair-psu) Fix linear11 calculation Jia Jia <physicalmtea(a)gmail.com> vhost-scsi: flush backend after device ioctls Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx Hardik Garg <hargar(a)linux.microsoft.com> Drivers: hv: vmbus: add VTL2 redirect connection ID Robert Abrahamse <denobyte2(a)gmail.com> ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) Jiale Yao <yaojiale02(a)163.com> Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame Deepanshu Kartikey <kartikey406(a)gmail.com> wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() Li Qiang <liqiang01(a)kylinos.cn> cifs: validate idmap key payload length Vaibhav Jain <vaibhav(a)linux.ibm.com> powerpc/pseries: Ensure vpa,slb_shadow & dtl are unregistered during crash Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: pass the return value of skb_checksum_help() Madhavender Singh <madhav(a)disroot.org> ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx Markus Lindner <lindner.markus(a)outlook.at> ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 Minhong He <heminhong(a)kylinos.cn> phonet: check register_netdevice_notifier() error in phonet_device_init() Pengpeng Hou <pengpeng(a)iscas.ac.cn> drm/gma500: return errors from Oaktrail HDMI I2C reads Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: preserve VFS inherited POSIX ACL mask Ibrahim Hashimov <security(a)auditcode.ai> wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO Kamal Wadhwa <kamal.wadhwa(a)oss.qualcomm.com> regulator: core: clamp voltage constraints before applying apply_uV Jay Vadayath <jay(a)artiphishell.com> smb: client: bound dirent name against end of SMB response in cifs_filldir Georgi Valkov <gvalkov(a)gmail.com> wifi: mwifiex: replace one-element arrays with flexible array members Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: acpi: validate WGDS table revision index Daniel C. Ribeiro <dcoutinho.96(a)gmail.com> ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: bound aligned TLV advance in FW parser Takashi Iwai <tiwai(a)suse.de> ALSA: hda/realtek: Add quirk for HP Pavilion x360 Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized Pu Hu <hupu(a)transsion.com> arm64: kprobes: Allow reentering kprobes while single-stepping Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: add a check on the tid coming from the firmware Yu Peng <pengyu(a)kylinos.cn> arm64: fixmap: Allow 256K early_ioremap() at any offset Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix a possible underflow Huiwen He <hehuiwen(a)kylinos.cn> smb/client: flush dirty data before punching a hole Tao Cui <cuitao(a)kylinos.cn> blk-cgroup: fix leaks and online flag on radix_tree_insert failure Marcel Kłos <marcel(a)marmak.net.pl> ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix sched scan IE sizing Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix an off-by-1 boundary check Filipe Manana <fdmanana(a)suse.com> btrfs: fix reloc root cleanup in merge_reloc_roots() Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: validate sta_id in BA window status notif Wang YuWei <1973615295(a)qq.com> spi: dw-dma: Wait for controller idle before completing Tx Filipe Manana <fdmanana(a)suse.com> btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() Dave Chen <davechen(a)synology.com> btrfs: only account delalloc bytes for regular file inodes in btrfs_getattr() Chen Bowen <hicbowen(a)gmail.com> ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series Huiwen He <hehuiwen(a)kylinos.cn> smb/client: reduce fallocate zero buffer allocation Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: rsi: validate beacon length before fixed buffer copy Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: mark the rcu locked areas properly Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: libipw: fix key index receive bound checks Liang Hao <haohlliang(a)gmail.com> gpio: dwapb: Mask interrupts at hardware initialization Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate rx/tx MLME callback frame lengths before access Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate SID namespace before mapping IDs Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: mark invalid session responses as signed Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: find bound sessions during reauthentication Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate assoc response length before status and IE access Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: libertas: reject short monitor TX frames Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate deauth frame length before reason access Corentin Labbe <clabbe(a)baylibre.com> wifi: ralink: RT2X00: init EEPROM properly Pengpeng Hou <pengpeng(a)iscas.ac.cn> ALSA: usb-audio: caiaq: validate EP1 reply lengths Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix credit charge calculation for SMB2 QUERY_INFO Perry Yuan <perry.yuan(a)amd.com> drm/amdgpu: flush pending RCU callbacks on module unload Jetha Chan <jethachan(a)gmail.com> ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table David Howells <dhowells(a)redhat.com> cachefiles: Fix double fput Yousef Alhouseen <alhouseenyousef(a)gmail.com> xen/gntalloc: validate grant count before allocation Farhad Alemi <farhad.alemi(a)berkeley.edu> freevxfs: don't BUG() on unknown typed-extent type Yousef Alhouseen <alhouseenyousef(a)gmail.com> xen/front-pgdir-shbuf: free grant reference head on errors Qiang Liu <liuqiang(a)kylinos.cn> ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling Qiang Liu <liuqiang(a)kylinos.cn> ksmbd: fix n.data memory leak in ksmbd_vfs_set_dos_attrib_xattr Gustavo Kenji Mendonça Kaneko <kaneko.dev(a)pm.me> drm/arm/komeda: fix error handling for clk_prepare_enable() and callers Qiang Liu <liuqiang(a)kylinos.cn> ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr Florian Westphal <fw(a)strlen.de> netfilter: nf_conntrack_expect: zero at allocation time Gustavo Kenji Mendonça Kaneko <kaneko.dev(a)pm.me> drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend Weiming Shi <bestswngs(a)gmail.com> btrfs: tree-checker: validate INODE_REF's namelen Praveen Talari <praveen.talari(a)oss.qualcomm.com> spi: core: Abort active target transfer on controller suspend Haoxiang Li <haoxiang_li2024(a)163.com> fbdev: pm2fb: unwind WC setup on probe failure Arnd Bergmann <arnd(a)arndb.de> eth: mlx5: fix macsec dependency Adriana Stancu <adriana(a)arista.com> rtc: bq32000: add delay between RTC reads Yu Kuai <yukuai(a)fygo.io> blk-cgroup: protect iterating blkgs with blkcg->lock in blkcg_print_stat() Runyu Xiao <runyu.xiao(a)seu.edu.cn> net: au1000: move free_irq out of the close-time spinlocked section Pengpeng Hou <pengpeng(a)iscas.ac.cn> regulator: da9121: Use subvariant ids in the I2C table Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/sysfs: Use kstrtobool() to parse the ROM attribute input Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: treat read-control opens as stat opens only for leases Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: break RH leases before delete-on-close Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: start file id allocation at 1 Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: deny renaming directory with open children Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: apply create security descriptor first Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: treat unnamed DATA stream as base file Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use connection ClientGUID for lease lookup Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: align SMB2 oplock break ack handling Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate SMB2 lease create contexts Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix lease break and ack state handling Tommy Huang <tommy_huang(a)aspeedtech.com> rtc: aspeed: add AST2700 compatible Samuel Moelius <sam.moelius(a)trailofbits.com> f2fs: validate inline dentry name lengths before conversion Chen Cheng <chencheng(a)fnnas.com> md/raid5: let stripe batch bm_seq comparison wrap-safe Yu Kuai <yukuai(a)fygo.io> md/raid5: account discard IO Hans Zhang <18255117159(a)163.com> PCI: mediatek: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: rockchip: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: altera: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: iproc: Protect root bus removal with rescan lock Jean-Louis Colaco <jean-louis.colaco(a)orange.fr> ALSA: usb-audio: Add quirk for YAMAHA CDS3000 Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu: Use system unbound workqueue for soft IH ring Xiaogang Chen <xiaogang.chen(a)amd.com> drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap Xiaogang Chen <xiaogang.chen(a)amd.com> drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl Matthew Bystrin <dev.mbstr(a)gmail.com> mfd: rsmu: Add 8a34002 support Akashdeep Kaur <a-kaur(a)ti.com> mfd: tps65219: Make poweroff handler conditional on system-power-controller Tobias Deiminger <tobias.deiminger(a)linutronix.de> leds: pca9532: Don't stop blinking for non-zero brightness Yousef Alhouseen <alhouseenyousef(a)gmail.com> leds: uleds: Return -EFAULT on copy_to_user() failure Galen Hassen <rwekyes(a)gmail.com> ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 Jakub Kicinski <kuba(a)kernel.org> tls: reject the combination of TLS and sockmap Ai Chao <aichao(a)kylinos.cn> ALSA: usb-audio: Add quirk flags for SC13A guoqi0226 <guoqi0226(a)163.com> spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() Rob Herring (Arm) <robh(a)kernel.org> gpio: pisosr: Read "ngpios" as u32 Arnd Bergmann <arnd(a)arndb.de> scsi: bfa: Reduce kernel stack usage in bfa_fcs_lport_fdmi_build_portattr_block() Zhang Tianci <zhangtianci.1997(a)bytedance.com> fuse: set ff->flock only on success Jiri Kosina <jkosina(a)suse.com> HID: hidpp: fix potential UAF in hidpp_connect_event() Viktor Menshin <ripeeerr(a)gmail.com> ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT Rosen Penev <rosenp(a)gmail.com> sparc: Disable compat support with LLD Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: fix races in cifsd thread creation Alice Mikityanska <alice(a)isovalent.com> net/sched: act_csum: don't mangle UDP tunnel GSO packets Agalakov Daniil <ade(a)amicon.ru> e1000e: limit endianness conversion to boundary words Raf Dickson <rafdog35(a)gmail.com> vsock: use sk_acceptq_is_full() helper in all transports Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ptp: ocp: add shutdown callback Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Rosen Penev <rosenp(a)gmail.com> sparc64: uprobes: add missing break Nils Helmig <nils.helmig(a)web.de> Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: L2CAP: validate connectionless PSM length Cris <cxs1494089474(a)gmail.com> Bluetooth: btusb: Add support for TP-Link TL-UB250 Hrvoje Nuic <hrvoje.nuic(a)gmail.com> Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV Vadim Fedorenko <vadim.fedorenko(a)linux.dev> spi: xilinx: let transfers timeout in case of no IRQ Potin Lai <potin.lai.pt(a)gmail.com> hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i Tze Yee Ng <tze.yee.ng(a)altera.com> dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems Yuho Choi <dbgh9129(a)gmail.com> sctp: Unwind address notifier registration on failure Mohamed Khalfella <mkhalfella(a)purestorage.com> nvme-fc: Do not cancel requests in io target before it is initialized Nikolay Metchev <nikolaymetchev(a)gmail.com> platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table Xu Rao <raoxu(a)uniontech.com> ata: libata-pmp: add JMicron JMS562 quirk Moritz Baron <moritz.baron(a)stud.uni-hannover.de> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 Furst Blumier <seal(a)furst.blue> ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC Evgenii Burenchev <evg28bur(a)yandex.ru> vdpa/ifcvf: handle dev_set_name() failure in ifcvf_vdpa_dev_add() George Moussalem <george.moussalem(a)outlook.com> net: dsa: qca8k: Add support for force mode for fixed link topology Kory Maincent <kory.maincent(a)bootlin.com> hwmon: (adt7462) Add of_match_table to support devicetree KangNing Liao <lkangn.kernel(a)gmail.com> btrfs: protect sb_write_pointer() with invalidate lock Jiajia Liu <liujiajia(a)kylinos.cn> wifi: mt76: transform aspm_conf for pci_disable_link_state Gleb Sonichev <sonichev555(a)gmail.com> platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table Chuck Lever <chuck.lever(a)oracle.com> tls: Flush backlog before waiting for a new record Rosen Penev <rosenp(a)gmail.com> net: ibm: emac: mal: fix potential system hang in mal_remove() Al Viro <viro(a)zeniv.linux.org.uk> configfs_depend_prep(): pass configfs_dirent instead of dentry Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Add request-pool slack for delayed recycling Aurelien DESBRIERES <aurelien(a)hackers.camp> RDMA/rtrs-srv: Fix integer underflow in process_read and process_write Dai Ngo <dai.ngo(a)oracle.com> NFS: fix eof updates after NFSv4.2 fallocate/zero-range Zhang Cen <rollkingzzc(a)gmail.com> btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF ZhengYuan Huang <gality369(a)gmail.com> btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() Rosen Penev <rosenp(a)gmail.com> netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() Ruoyu Wang <ruoyuw560(a)gmail.com> ALSA: es18xx: check control allocation before private data setup Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> net: microchip: sparx5: clean up PSFP resources on flower setup failure Maoyi Xie <maoyixie.tju(a)gmail.com> hsr: broadcast netlink notifications in the device's net namespace Guangshuo Li <lgs201920130244(a)gmail.com> net: cpsw_new: unregister devlink on port registration failure Dawei Feng <dawei.feng(a)seu.edu.cn> bpf: NUL-terminate replaced sysctl value Li RongQing <lirongqing(a)baidu.com> RDMA/mlx5: Fix state and counter desync on loopback enable failure Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() Thiyagarajan Pandiyan <thiyagarajan(a)aerlync.com> wifi: nl80211: Increase ie_len size to prevent truncated IEs in new peer notifications Yongqiang Sun <Yongqiang.Sun(a)amd.com> drm/amdkfd: Unwind debug trap enable on copy_to_user failure Rosen Penev <rosenp(a)gmail.com> ipmi: si: Use platform_get_irq_optional() to retrieve interrupt Andrei Faleichyk <andrei.faleichyk(a)noogadev.com> ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP Michael Walle <mwalle(a)kernel.org> clk: keystone: don't cache clock rate Shay Drory <shayd(a)nvidia.com> net/mlx5: E-Switch, align disable sequence with switchdev-to-legacy transition Cyrill Gorcunov <gorcunov(a)gmail.com> RDMA/irdma: Fix typo in SQ completions generation Shiwu Zhang <shiwu.zhang(a)amd.com> drm/amdgpu: fix buffer overflow during vBIOS update Asad Kamal <asad.kamal(a)amd.com> drm/amd/pm: bound pp_dpm_set_pp_table() memcpy Alysa Liu <Alysa.Liu(a)amd.com> drm/amdkfd: fix UAF race in destroy_queue_cpsch Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: Prevent queuing new commands if xhci is inaccessible Priyansh Jain <priyansh.jain(a)oss.qualcomm.com> thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix handling of NAPI on the remove path David Yang <mmyangfl(a)gmail.com> net: dsa: sja1105: flower: reject cross-chip redirect Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix the error path in dpaa2_switch_rx() Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: rework FDB management on the bridge leave path Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: seq: oss: Reject reads that cannot fit the next event Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: codecs: rk3328: Use managed GPIO and clock helpers Alessandro Schino <7991aleschino(a)gmail.com> ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e() ZhengYuan Huang <gality369(a)gmail.com> fs/ntfs3: validate index entry key bounds ZhengYuan Huang <gality369(a)gmail.com> fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib Simon Xue <xxm(a)rock-chips.com> iommu/rockchip: disable fetch dte time limit Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> net: wwan: t7xx: Add delay between MD and SAP suspend Wentao Liang <vulab(a)iscas.ac.cn> net: qrtr: fix node refcount leak on ctrl packet alloc failure Chen Pei <cp0613(a)linux.alibaba.com> ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach liyouhong <liyouhong(a)kylinos.cn> ata: ahci: fail probe if BAR too small for claimed ports Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: return error code to consumers on failures Miaoqing Pan <miaoqing.pan(a)oss.qualcomm.com> wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi Rosen Penev <rosenp(a)gmail.com> net: ibm: emac: Reserve VLAN header in MJS limit Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Also reset {insn,data}_cur on realloc failure Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: switch to non-devm request_threaded_irq() Rik van Riel <riel(a)surriel.com> perf/ftrace: Fix WARNING in __unregister_ftrace_function Miao Li <limiao(a)kylinos.cn> iio: light: stk3310: Deal with the ps interrupt issue in PM Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC Karl Mehltretter <kmehltretter(a)gmail.com> tracing: Disable KCOV instrumentation for trace_irqsoff.o Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC Osama Abdelkader <osama.abdelkader(a)gmail.com> mmc: davinci: fix mmc_add_host order in probe Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: only handle alert events when the peripheral is attached Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: page poisoning fix Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: dmi-quirks: Disable ghost Realtek devices Tiezhu Yang <yangtiezhu(a)loongson.cn> libbpf: Add __NR_bpf definition for LoongArch Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Complete coredump handling Timur Tabi <ttabi(a)nvidia.com> drm/nouveau/gsp: add SEC2 to GA100 chip table Alexandre Courbot <acourbot(a)nvidia.com> scripts: modpost: detect and report truncated buf_printf() output shayderrr <darknessshayder(a)gmail.com> host1x: bus: Fix missing ops null check in error teardown Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> pinctrl: renesas: rzv2m: Use -ENOTSUPP instead of -EOPNOTSUPP Viacheslav Dubeyko <slava(a)dubeyko.com> hfs: rework hfsplus_readdir() logic ikaros <void0red(a)gmail.com> ACPICA: add boundary checks in two places ikaros <void0red(a)gmail.com> ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() Weiming Shi <bestswngs(a)gmail.com> ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() ikaros <void0red(a)gmail.com> ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() ikaros <void0red(a)gmail.com> ACPICA: Add validation for node in acpi_ns_build_normalized_path() ikaros <void0red(a)gmail.com> ACPICA: Add package limit checks in parser functions ikaros <void0red(a)gmail.com> ACPICA: validate handler object type in two places ikaros <void0red(a)gmail.com> ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() ikaros <void0red(a)gmail.com> ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) ikaros <void0red(a)gmail.com> ACPICA: Prevent adding invalid references ikaros <void0red(a)gmail.com> ACPICA: validate byte_count in acpi_ps_get_next_package_length() ikaros <void0red(a)gmail.com> ACPICA: add boundary checks in acpi_ps_get_next_field() ikaros <void0red(a)gmail.com> ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() ikaros <void0red(a)gmail.com> ACPICA: Fix condition check in acpi_ps_parse_loop() Jeremy Klarenbeek <jeremy.klarenbeek99(a)gmail.com> drm/amd/pm/si: Fix updating clock limits from power states Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> net: thunderx: fix PTP device ref leak in nicvf_probe() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: addrconf: fix temp address generation after prefix deprecation Luka Gejak <luka.gejak(a)linux.dev> net: hsr: require valid EOT supervision TLV Uwe Küchler <uwe(a)kuechler.org> ALSA: usb-audio: Add quirk for Novation Mininova Mostafa Saleh <smostafa(a)google.com> irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed Stepan Ionichev <sozdayvek(a)gmail.com> iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind Rosen Penev <rosenp(a)gmail.com> mips: cps: Assemble jr.hb with an R2 ISA level Dario Binacchi <dario.binacchi(a)amarulasolutions.com> drm/panel: simple: Add AM-1280800W8TZQW-T00H Daniel Lezcano <daniel.lezcano(a)oss.qualcomm.com> thermal/drivers/tegra/soctherma: Switch to devm cooling device registration Adrian Ng Ho Yin <adrian.ho.yin.ng(a)altera.com> clk: socfpga: agilex: implement l3_main_free_clk Heiko Carstens <hca(a)linux.ibm.com> s390/zcore: Removed unused variables Jiayuan Chen <jiayuan.chen(a)linux.dev> rds: annotate data-race around rs_seen_congestion Maoyi Xie <maoyixie.tju(a)gmail.com> rds: filter RDS_INFO_* getsockopt by caller's netns Chenguang Zhao <zhaochenguang(a)kylinos.cn> netlabel: fix IPv6 unlabeled address add error handling Dian-Syuan Yang <dian_syuan0116(a)realtek.com> wifi: rtw89: pci: enable LTR based on pcie control register Zqiang <qiang.zhang(a)linux.dev> rcu-tasks: Fix possible boot-time tests failed for the call_rcu_tasks() Venkat Rao Bagalkote <venkat88(a)linux.ibm.com> char/nvram: Remove redundant nvram_mutex Christian Marangi <ansuelsmth(a)gmail.com> usb: host: add ARCH_AIROHA in XHCI MTK dependency Marco Felsch <m.felsch(a)pengutronix.de> serial: 8250: fix possible ISR soft lockup Maoyi Xie <maoyixie.tju(a)gmail.com> usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue Dave Carey <carvsdriver(a)gmail.com> USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set Stepan Ionichev <sozdayvek(a)gmail.com> usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log Oliver Neukum <oneukum(a)suse.com> usb: core: hcd: fix possible deadlock in rh control transfers Adrian Wowk <dev(a)adrianwowk.com> usbip: vhci_hcd: fix NULL deref in status_show_vhci Christoph Hellwig <hch(a)lst.de> isofs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> omfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> hpfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> jfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> qnx4: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> minix: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> bfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> affs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> ntfs3: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> befs: handle set_blocksize failures Allison Henderson <achender(a)kernel.org> net/rds: Don't sleep inside rds_ib_conn_path_shutdown Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: make cl->quantum lockless Eric Dumazet <edumazet(a)google.com> net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() Jan Volckaert <janvolck(a)gmail.com> net: usb: qmi_wwan: add MeiG SRM813Q Maurizio Lombardi <mlombard(a)redhat.com> nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl Yury Norov <ynorov(a)nvidia.com> bitfield: wire __bf_shf to __builtin_ctzll Gil Fine <gil.fine(a)linux.intel.com> thunderbolt: Verify Router Ready bit is set after router enumeration Gil Fine <gil.fine(a)linux.intel.com> thunderbolt: Increase timeout for Configuration Ready bit Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Validate SENSOR_UPDATE payload size Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> thunderbolt: Improve multi-display DisplayPort tunnel allocation Pooja Katiyar <pooja.katiyar(a)intel.com> thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() Ido Schimmel <idosch(a)nvidia.com> bridge: Add missing READ_ONCE() annotations around FDB destination port Pierre Barre <pierre(a)barre.sh> 9p: use kvzalloc for readdir buffer Leonardo Bras <leo.bras(a)arm.com> arm64/daifflags: Make local_daif_*() helpers __always_inline Pierre Barre <pierre(a)barre.sh> 9p: invalidate readdir buffer on seek Andrea Righi <arighi(a)nvidia.com> sched/fair: Reject misfit pulls onto busy SMT siblings on asym-capacity Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usx2y: Drain pending US-428 pipe-4 output commands David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds on allocate_doorbell Sunday Clement <Sunday.Clement(a)amd.com> drm/amdkfd: Fix OOB memory exposure in get_wave_state() David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id Bjorn Helgaas <helgaas(a)kernel.org> PCI: Wait for device readiness after D3hot -> D0uninitialized transition Joonwon Kang <joonwonkang(a)google.com> mailbox: Make mbox_send_message() return error code when tx fails Chenguang Zhao <zhaochenguang(a)kylinos.cn> RDMA/mlx5: Use QP port when decoding responder CQEs Alessandro Baldi <baldovic(a)virgilio.it> media: imon: Add iMON VFD HID OEM v1.2 key mappings Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-ecc - add support for atecc608b Lukas Wunner <lukas(a)wunner.de> crypto: ecc - Unbreak the build on arm with CONFIG_KASAN_STACK=y Kumar Meiyappan <kumar.meiyappan(a)microchip.com> scsi: pm8001: Reject non-fatal dump when controller is crashed Kumar Meiyappan <kumar.meiyappan(a)microchip.com> scsi: pm8001: Reject firmware update in fatal error state Alexey Klimov <alexey.klimov(a)linaro.org> clk: samsung: exynos850: mark APM I3C clocks as critical Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> soundwire: intel: Move suspend tracking from trigger to pm suspend Pengpeng Hou <pengpeng(a)iscas.ac.cn> drivers/of: validate status properties in reconfig state changes Stefan Berger <stefanb(a)linux.ibm.com> integrity: Check for NULL returned by asymmetric_key_public_key Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: add support for RTL8367SB Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: phy: check length before parsing PHY status IE Arash Golgol <arash.golgol(a)gmail.com> media: video-i2c: use vb2_video_unregister_device on driver removal Sophie D <patches(a)scd31.com> drm/gud: Add RCade Display Adapter VID/PID pair chunzhi.lin <linchunzhi0(a)gmail.com> net: phy: motorcomm: use device properties for firmware tuning Viacheslav Dubeyko <slava(a)dubeyko.com> hfsplus: rework hfsplus_readdir() logic Florian Eckert <fe(a)dev.tdt.de> PCI: intel-gw: Enable clock before PHY init Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Fix CRC open failure during active rendering Stepan Ionichev <sozdayvek(a)gmail.com> mmc: davinci: avoid NULL deref of host->data in IRQ handler Shawn Lin <shawn.lin(a)rock-chips.com> mmc: core: Add validation for host-provided max_segs Ethan Nelson-Moore <enelsonmoore(a)gmail.com> ASoC: ti: omap3pandora: update board check to use DT compatible Parth Pancholi <parth.pancholi(a)toradex.com> drm/bridge: tc358768: Set pre_enable_prev_first for reverse order Geert Uytterhoeven <geert+renesas(a)glider.be> clk: renesas: cpg-mssr: Add number of clock cells check Thorsten Blum <thorsten.blum(a)linux.dev> crypto: omap - add omap_des_unregister_algs helper Ruoyu Wang <ruoyuw560(a)gmail.com> crypto: ixp4xx - fix buffer chain unwind on allocation failure Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> media: em28xx-video: fix missing res_free() on init_usb_xfer failure Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: enable .rmu_disable() for 6320 family Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: define .pot_clear() for 6321 Ben Reed <Ben.Reed(a)microchip.com> PCI: switchtec: Add Gen6 Device IDs Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: fix number of g1 interrupts for 6320 family Zhaoyang Yu <2426767509(a)qq.com> media: dm1105: fix missing error check for dma_alloc_coherent Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> thunderbolt: Don't create multiple DMA tunnels on firmware connection manager Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Set tb->root_switch to NULL when domain is stopped Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Keep the domain reference while processing hotplug Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Keep XDomain reference during the lifetime of a service Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() Riccardo Boninsegna <rboninsegna2(a)gmail.com> media: rc: mceusb: Add support for 04eb:e033 Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM Pengpeng Hou <pengpeng(a)iscas.ac.cn> soundwire: validate DT compatible before parsing it Danielle Ratson <danieller(a)nvidia.com> bridge: Do not suppress ARP probes and DAD NS unconditionally Siew Chin Lim <elly.siew.chin.lim(a)intel.com> firmware: stratix10-svc: change get provision data to async SMC call Marco Elver <elver(a)google.com> kcsan: Silence -Wmaybe-uninitialized when calling __kcsan_check_access() Panagiotis Petrakopoulos <npetrakopoulos2003(a)gmail.com> wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: always allow transmitting null-data on TXQs Johannes Berg <johannes.berg(a)intel.com> wifi: nl80211: reject beacons with bad HE operation Viacheslav Dubeyko <slava(a)dubeyko.com> hfsplus: fix issue of direct writes beyond end-of-file Lukas Wunner <lukas(a)wunner.de> PCI: Stop setting cached power state to 'unknown' on unbind Thomas Weißschuh <linux(a)weissschuh.net> tools/nolibc: avoid call to wcslen() in _start_c() inserted by clang Hirokazu Honda <hiroh(a)chromium.org> tee: optee: Allow MT_NORMAL_TAGGED shared memory Xu Yang <xu.yang_2(a)nxp.com> usb: gadget: udc: skip pullup() if already connected Goldwyn Rodrigues <rgoldwyn(a)suse.de> ima: return error early if file xattr cannot be changed Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate write errors in generic mixer put callbacks Lijo Lazar <lijo.lazar(a)amd.com> drm/amd/pm: Check SMUv13.0.6/12 metrics integrity Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/panel: jadard-jd9365da-h3: set prepare_prev_first Dominik Kaszewski <dominik.kaszewski(a)amd.com> drm/amd/display: Fix DPMS using partially updated pipe context Ioana Ciornei <ioana.ciornei(a)nxp.com> bus: fsl-mc: wait for the MC firmware to complete its boot Boris Brezillon <boris.brezillon(a)collabora.com> drm/gem: Consider GEM object reclaimable if shrinking fails Abdifatah Suruur <suruurism(a)gmail.com> ksmbd: fix use-after-free in oplock break notification ------------- Diffstat: .../ABI/testing/sysfs-devices-platform-trackpoint | 2 +- Documentation/arch/s390/pci.rst | 144 +- Documentation/hwmon/emc1403.rst | 8 +- Documentation/networking/ip-sysctl.rst | 2 + Documentation/sound/designs/midi-2.0.rst | 11 + Makefile | 4 +- arch/alpha/include/uapi/asm/fpu.h | 8 +- arch/alpha/kernel/traps.c | 6 +- arch/alpha/math-emu/math.c | 88 +- arch/arm/mach-socfpga/Kconfig | 2 +- arch/arm/mach-ux500/cpu-db8500.c | 6 +- arch/arm/mm/cache-feroceon-l2.c | 2 +- arch/arm/mm/cache-tauros2.c | 2 +- arch/arm/mm/fault.c | 12 +- arch/arm64/boot/dts/qcom/sc8180x.dtsi | 16 +- arch/arm64/boot/dts/qcom/sdm845.dtsi | 64 +- arch/arm64/boot/dts/qcom/sm8150.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8250.dtsi | 12 +- arch/arm64/boot/dts/qcom/sm8350.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8450.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8550.dtsi | 8 +- arch/arm64/boot/dts/renesas/r8a779f0.dtsi | 1 + arch/arm64/include/asm/daifflags.h | 10 +- arch/arm64/include/asm/fixmap.h | 6 +- arch/arm64/include/asm/io.h | 3 +- arch/arm64/include/asm/kprobes.h | 6 + arch/arm64/include/asm/percpu.h | 16 +- arch/arm64/kernel/hibernate-asm.S | 2 + arch/arm64/kernel/probes/kprobes.c | 23 +- arch/arm64/kvm/hypercalls.c | 3 +- arch/arm64/kvm/vgic/vgic-its.c | 96 +- arch/arm64/kvm/vgic/vgic.h | 23 - arch/mips/cavium-octeon/octeon-platform.c | 4 +- arch/mips/kernel/cps-vec.S | 6 + arch/mips/net/bpf_jit_comp32.c | 2 +- arch/mips/net/bpf_jit_comp64.c | 3 +- arch/powerpc/kernel/eeh_driver.c | 2 - arch/powerpc/kernel/iommu.c | 2 +- arch/powerpc/kexec/file_load_64.c | 2 +- arch/powerpc/kvm/book3s_hv.c | 4 +- arch/powerpc/kvm/book3s_hv_nested.c | 2 + arch/powerpc/kvm/book3s_hv_uvmem.c | 5 +- arch/powerpc/platforms/ps3/repository.c | 5 +- arch/powerpc/platforms/pseries/kexec.c | 13 +- arch/riscv/kvm/vcpu_sbi_hsm.c | 4 +- arch/riscv/kvm/vcpu_timer.c | 5 +- arch/s390/boot/physmem_info.c | 2 +- arch/s390/crypto/aes_s390.c | 16 +- arch/s390/include/asm/checksum.h | 29 +- arch/s390/include/asm/debug.h | 8 +- arch/s390/include/asm/os_info.h | 19 +- arch/s390/kernel/debug.c | 15 +- arch/s390/kernel/ipl.c | 19 +- arch/s390/kernel/os_info.c | 21 +- arch/s390/kvm/interrupt.c | 72 +- arch/sparc/Kconfig | 1 + arch/sparc/kernel/uprobes.c | 1 + arch/x86/crypto/aria-aesni-avx2-asm_64.S | 6 + arch/x86/crypto/aria-gfni-avx512-asm_64.S | 3 + arch/x86/events/amd/ibs.c | 3 +- arch/x86/events/intel/core.c | 76 +- arch/x86/events/intel/ds.c | 208 ++- arch/x86/include/asm/perf_event.h | 16 +- arch/x86/include/asm/pgtable.h | 2 +- arch/x86/pci/fixup.c | 99 ++ block/blk-cgroup.c | 13 +- crypto/Makefile | 5 + drivers/accel/qaic/qaic_control.c | 46 +- drivers/acpi/acpica/dsmethod.c | 43 + drivers/acpi/acpica/evhandler.c | 11 + drivers/acpi/acpica/exconfig.c | 26 +- drivers/acpi/acpica/exoparg3.c | 2 +- drivers/acpi/acpica/nsnames.c | 6 + drivers/acpi/acpica/nsprepkg.c | 7 + drivers/acpi/acpica/nsxfname.c | 4 + drivers/acpi/acpica/psargs.c | 134 +- drivers/acpi/acpica/psloop.c | 30 +- drivers/acpi/acpica/psparse.c | 14 + drivers/acpi/acpica/utcopy.c | 10 +- drivers/acpi/acpica/utresrc.c | 30 + drivers/acpi/pci_root.c | 4 + drivers/ata/ahci.c | 22 + drivers/ata/libahci.c | 15 +- drivers/ata/libata-pmp.c | 7 +- drivers/ata/libata-scsi.c | 10 +- drivers/base/core.c | 200 ++- drivers/block/sunvdc.c | 26 +- drivers/bluetooth/btintel.c | 68 +- drivers/bluetooth/btintel.h | 47 +- drivers/bluetooth/btmtk.c | 7 +- drivers/bluetooth/btmtksdio.c | 4 +- drivers/bluetooth/btrtl.c | 5 +- drivers/bluetooth/btusb.c | 41 +- drivers/bluetooth/hci_mrvl.c | 3 +- drivers/bus/fsl-mc/fsl-mc-bus.c | 46 + drivers/char/ipmi/ipmi_si_platform.c | 5 +- drivers/char/nvram.c | 16 +- drivers/char/virtio_console.c | 21 +- drivers/clk/clk-scpi.c | 2 +- drivers/clk/keystone/sci-clk.c | 8 + drivers/clk/renesas/renesas-cpg-mssr.c | 3 + drivers/clk/samsung/clk-exynos850.c | 5 +- drivers/clk/socfpga/clk-agilex.c | 2 + drivers/clk/ux500/clk-prcmu.c | 20 +- drivers/clk/ux500/u8500_of_clk.c | 2 +- drivers/clocksource/timer-orion.c | 2 +- drivers/cpufreq/cpufreq.c | 6 +- drivers/cpuidle/cpuidle-ux500.c | 6 +- drivers/crypto/allwinner/Kconfig | 16 - drivers/crypto/allwinner/sun8i-ce/Makefile | 1 - drivers/crypto/allwinner/sun8i-ce/sun8i-ce-core.c | 55 - drivers/crypto/allwinner/sun8i-ce/sun8i-ce-prng.c | 159 -- drivers/crypto/allwinner/sun8i-ce/sun8i-ce.h | 29 - drivers/crypto/allwinner/sun8i-ss/Makefile | 1 - drivers/crypto/allwinner/sun8i-ss/sun8i-ss-core.c | 39 - drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c | 177 -- drivers/crypto/allwinner/sun8i-ss/sun8i-ss.h | 23 - drivers/crypto/atmel-ecc.c | 11 +- drivers/crypto/intel/ixp4xx/ixp4xx_crypto.c | 25 +- drivers/crypto/omap-des.c | 26 +- .../crypto/virtio/virtio_crypto_akcipher_algs.c | 91 +- .../crypto/virtio/virtio_crypto_skcipher_algs.c | 13 +- drivers/cxl/core/pmem.c | 21 +- drivers/cxl/core/region.c | 2 +- drivers/cxl/cxl.h | 4 +- drivers/cxl/mem.c | 18 +- drivers/dma/dmaengine.c | 10 +- drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c | 11 +- drivers/dma/mmp_pdma.c | 2 +- drivers/dma/sprd-dma.c | 3 +- drivers/dma/sun6i-dma.c | 9 +- drivers/dma/ti/k3-udma-glue.c | 5 +- drivers/dma/xilinx/xilinx_dma.c | 26 +- drivers/edac/edac_device_sysfs.c | 11 +- drivers/edac/igen6_edac.c | 27 +- drivers/firmware/arm_scmi/base.c | 15 +- drivers/firmware/arm_scmi/sensors.c | 10 +- drivers/firmware/arm_scpi.c | 4 +- drivers/firmware/stratix10-svc.c | 4 +- drivers/gpio/gpio-arizona.c | 8 +- drivers/gpio/gpio-dwapb.c | 17 + drivers/gpio/gpio-pisosr.c | 4 +- drivers/gpio/gpio-tps65219.c | 2 +- drivers/gpio/gpio-zynq.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 23 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 + drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 1 + drivers/gpu/drm/amd/amdgpu/atom.c | 9 +- drivers/gpu/drm/amd/amdgpu/nbio_v7_9.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 10 +- drivers/gpu/drm/amd/amdkfd/kfd_debug.c | 6 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 17 +- drivers/gpu/drm/amd/amdkfd/kfd_doorbell.c | 8 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 11 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 17 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crc.c | 7 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 20 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 24 +- drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 3 +- drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c | 7 +- .../gpu/drm/amd/display/dc/dcn20/dcn20_hubbub.c | 3 +- .../display/dc/link/protocols/link_dp_training.c | 4 +- drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 31 +- drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 3 + .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c | 4 + drivers/gpu/drm/arm/display/komeda/komeda_dev.c | 6 +- drivers/gpu/drm/arm/display/komeda/komeda_drv.c | 14 +- drivers/gpu/drm/arm/malidp_drv.c | 22 +- drivers/gpu/drm/ast/ast_mode.c | 4 +- drivers/gpu/drm/bridge/samsung-dsim.c | 2 +- drivers/gpu/drm/bridge/tc358768.c | 2 + drivers/gpu/drm/drm_atomic_uapi.c | 13 +- drivers/gpu/drm/drm_exec.c | 13 + drivers/gpu/drm/drm_gem.c | 10 + drivers/gpu/drm/drm_probe_helper.c | 27 + drivers/gpu/drm/gma500/oaktrail_hdmi_i2c.c | 21 +- drivers/gpu/drm/gud/gud_drv.c | 1 + drivers/gpu/drm/gud/gud_pipe.c | 4 +- drivers/gpu/drm/i915/gem/i915_gem_object.c | 2 +- drivers/gpu/drm/i915/i915_query.c | 4 +- drivers/gpu/drm/logicvc/Kconfig | 1 - drivers/gpu/drm/mediatek/mtk_drm_crtc.c | 3 +- drivers/gpu/drm/msm/adreno/adreno_gpu.c | 2 + drivers/gpu/drm/msm/dsi/dsi_host.c | 36 +- drivers/gpu/drm/msm/hdmi/hdmi_phy.c | 8 +- drivers/gpu/drm/nouveau/nouveau_bo.c | 3 +- drivers/gpu/drm/nouveau/nouveau_drm.c | 5 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 2 + drivers/gpu/drm/nouveau/nvif/vmm.c | 1 + drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 1 + drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c | 23 +- drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c | 2 + drivers/gpu/drm/panel/panel-jadard-jd9365da-h3.c | 2 + drivers/gpu/drm/panel/panel-simple.c | 28 + drivers/gpu/drm/tiny/cirrus.c | 7 +- drivers/gpu/drm/vc4/vc4_kms.c | 2 +- drivers/gpu/drm/virtio/virtgpu_display.c | 2 +- drivers/gpu/drm/virtio/virtgpu_gem.c | 2 +- drivers/gpu/drm/virtio/virtgpu_ioctl.c | 6 +- drivers/gpu/drm/virtio/virtgpu_submit.c | 11 +- drivers/gpu/drm/virtio/virtgpu_vram.c | 17 +- drivers/gpu/host1x/bus.c | 4 +- drivers/hid/amd-sfh-hid/amd_sfh_common.h | 4 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 10 + drivers/hid/hid-alps.c | 6 +- drivers/hid/hid-ids.h | 3 + drivers/hid/hid-logitech-hidpp.c | 25 +- drivers/hid/hid-quirks.c | 3 +- drivers/hid/wacom_sys.c | 5 +- drivers/hv/connection.c | 47 +- drivers/hv/hyperv_vmbus.h | 2 + drivers/hwmon/adt7462.c | 8 + drivers/hwmon/applesmc.c | 7 +- drivers/hwmon/aspeed-pwm-tacho.c | 4 +- drivers/hwmon/corsair-psu.c | 23 +- drivers/hwmon/emc1403.c | 73 +- drivers/hwmon/gpio-fan.c | 13 +- drivers/hwmon/hp-wmi-sensors.c | 2 + drivers/hwmon/pmbus/lm25066.c | 60 +- drivers/hwmon/pmbus/pmbus.h | 3 +- drivers/hwmon/pmbus/pmbus_core.c | 4 +- drivers/hwmon/pmbus/tps53679.c | 11 +- drivers/hwmon/w83791d.c | 1 + drivers/hwmon/w83793.c | 4 +- drivers/hwtracing/coresight/coresight-platform.c | 12 +- drivers/i2c/busses/i2c-at91-core.c | 3 + drivers/i2c/busses/i2c-at91-master.c | 12 +- drivers/i2c/busses/i2c-at91.h | 1 + drivers/i2c/busses/i2c-imx.c | 3 + drivers/i2c/i2c-atr.c | 1 + drivers/i2c/i2c-core-smbus.c | 12 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 4 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 4 +- drivers/iio/accel/mma8452.c | 19 +- drivers/iio/adc/qcom-spmi-iadc.c | 18 +- drivers/iio/light/stk3310.c | 76 +- drivers/infiniband/core/iwpm_util.c | 9 +- drivers/infiniband/core/mad.c | 3 +- drivers/infiniband/core/ucma.c | 7 +- drivers/infiniband/core/umem.c | 18 +- drivers/infiniband/core/verbs.c | 12 +- drivers/infiniband/hw/bnxt_re/qplib_res.c | 11 + drivers/infiniband/hw/efa/efa_com.c | 7 +- drivers/infiniband/hw/efa/efa_com.h | 1 + drivers/infiniband/hw/efa/efa_main.c | 35 +- drivers/infiniband/hw/hfi1/file_ops.c | 23 +- drivers/infiniband/hw/irdma/utils.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 2 +- drivers/infiniband/hw/mlx4/sysfs.c | 4 + drivers/infiniband/hw/mlx5/cq.c | 3 +- drivers/infiniband/hw/mlx5/main.c | 11 + drivers/infiniband/sw/rxe/rxe_mcast.c | 50 +- drivers/infiniband/sw/rxe/rxe_mr.c | 3 +- drivers/infiniband/sw/rxe/rxe_verbs.c | 13 +- drivers/infiniband/sw/siw/siw_cm.c | 75 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 2 +- drivers/infiniband/ulp/ipoib/ipoib.h | 7 + drivers/infiniband/ulp/ipoib/ipoib_ib.c | 12 +- drivers/infiniband/ulp/ipoib/ipoib_multicast.c | 16 +- drivers/infiniband/ulp/iser/iser_initiator.c | 16 +- drivers/infiniband/ulp/isert/ib_isert.c | 22 + drivers/infiniband/ulp/isert/ib_isert.h | 2 + drivers/infiniband/ulp/rtrs/rtrs-clt.c | 8 + drivers/infiniband/ulp/rtrs/rtrs-clt.h | 2 + drivers/infiniband/ulp/rtrs/rtrs-srv.c | 12 +- drivers/input/evdev.c | 2 + drivers/input/input-compat.c | 2 + drivers/input/joystick/xpad.c | 10 +- drivers/input/keyboard/adp5588-keys.c | 12 +- drivers/input/keyboard/atkbd.c | 8 + drivers/input/misc/soc_button_array.c | 16 +- drivers/input/mouse/synaptics.c | 8 + drivers/input/rmi4/rmi_driver.c | 13 + drivers/input/rmi4/rmi_smbus.c | 10 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/input/touchscreen/cyttsp5.c | 1 + drivers/iommu/rockchip-iommu.c | 8 + drivers/irqchip/irq-gic-v3-its.c | 1 + drivers/leds/leds-pca9532.c | 8 +- drivers/leds/uleds.c | 11 +- drivers/mailbox/mailbox.c | 6 +- drivers/md/raid5.c | 35 +- drivers/media/i2c/video-i2c.c | 7 +- drivers/media/pci/dm1105/dm1105.c | 7 +- .../vcodec/decoder/vdec/vdec_av1_req_lat_if.c | 5 +- .../platform/verisilicon/hantro_g2_hevc_dec.c | 6 +- .../verisilicon/rockchip_vpu981_hw_av1_dec.c | 57 +- drivers/media/rc/imon.c | 4 + drivers/media/rc/mceusb.c | 2 + drivers/media/usb/as102/as102_usb_drv.c | 75 +- drivers/media/usb/em28xx/em28xx-video.c | 4 +- drivers/media/v4l2-core/v4l2-ctrls-core.c | 32 + drivers/media/v4l2-core/v4l2-h264.c | 3 +- drivers/memstick/core/ms_block.c | 2 + drivers/mfd/ab8500-core.c | 2 +- drivers/mfd/db8500-prcmu.c | 6 +- drivers/mfd/rsmu_i2c.c | 2 + drivers/mfd/rsmu_spi.c | 2 + drivers/mfd/tps65219.c | 14 +- drivers/mmc/core/bus.c | 2 +- drivers/mmc/core/host.c | 1 + drivers/mmc/core/queue.c | 8 +- drivers/mmc/core/sdio_uart.c | 3 + drivers/mmc/host/davinci_mmc.c | 16 +- drivers/mmc/host/mmc_hsq.c | 8 +- drivers/mmc/host/mmc_spi.c | 1 + drivers/mmc/host/mxcmmc.c | 4 + drivers/mmc/host/renesas_sdhi_internal_dmac.c | 2 + drivers/mmc/host/rtsx_pci_sdmmc.c | 5 + drivers/mmc/host/sdhci-of-aspeed.c | 5 +- drivers/mmc/host/sdhci_am654.c | 4 +- drivers/mmc/host/sh_mmcif.c | 3 +- drivers/net/bareudp.c | 11 +- drivers/net/bonding/bond_alb.c | 32 +- drivers/net/bonding/bond_main.c | 6 +- drivers/net/dsa/bcm_sf2_cfp.c | 2 + drivers/net/dsa/mt7530-mdio.c | 18 +- drivers/net/dsa/mv88e6xxx/chip.c | 23 +- drivers/net/dsa/qca/qca8k-8xxx.c | 22 +- drivers/net/dsa/qca/qca8k.h | 1 + drivers/net/dsa/realtek/rtl8365mb.c | 14 + drivers/net/dsa/sja1105/sja1105_flower.c | 4 +- drivers/net/ethernet/allwinner/sun4i-emac.c | 2 + drivers/net/ethernet/amd/au1000_eth.c | 3 +- drivers/net/ethernet/amd/pds_core/fw.c | 10 +- drivers/net/ethernet/amd/pds_core/main.c | 8 +- drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 3 +- drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 3 + drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 3 + drivers/net/ethernet/atheros/atlx/atl1.c | 3 + drivers/net/ethernet/broadcom/asp2/bcmasp_intf.c | 4 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 19 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 63 +- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 5 +- drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 20 +- drivers/net/ethernet/broadcom/tg3.c | 15 +- drivers/net/ethernet/cadence/macb.h | 2 +- drivers/net/ethernet/cadence/macb_main.c | 39 +- drivers/net/ethernet/cadence/macb_ptp.c | 9 + drivers/net/ethernet/cavium/thunder/nicvf_main.c | 8 +- drivers/net/ethernet/cortina/gemini.c | 79 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 69 +- drivers/net/ethernet/freescale/fman/fman.c | 1 + drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c | 3 + drivers/net/ethernet/huawei/hinic/hinic_hw_mbox.c | 4 +- drivers/net/ethernet/ibm/emac/core.c | 3 +- drivers/net/ethernet/ibm/emac/mal.c | 6 +- drivers/net/ethernet/intel/e1000e/ethtool.c | 19 +- drivers/net/ethernet/intel/ice/ice_common.c | 9 +- drivers/net/ethernet/intel/ice/ice_sched.c | 4 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 20 +- drivers/net/ethernet/intel/ice/ice_type.h | 2 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 3 +- drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 10 + .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 10 +- drivers/net/ethernet/marvell/octeontx2/nic/qos.c | 60 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 22 +- drivers/net/ethernet/mediatek/mtk_eth_soc.h | 2 +- drivers/net/ethernet/mellanox/mlx5/core/Kconfig | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en/port.c | 15 +- .../ethernet/mellanox/mlx5/core/en/rep/bridge.c | 45 +- .../net/ethernet/mellanox/mlx5/core/en/tc/sample.c | 7 +- drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c | 3 + .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 1 - .../net/ethernet/mellanox/mlx5/core/esw/bridge.c | 15 +- .../net/ethernet/mellanox/mlx5/core/esw/bridge.h | 2 + drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 8 +- .../mellanox/mlx5/core/eswitch_offloads_termtbl.c | 7 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 + drivers/net/ethernet/micrel/ks8842.c | 4 +- drivers/net/ethernet/micrel/ks8851_common.c | 10 +- drivers/net/ethernet/micrel/ks8851_spi.c | 4 +- drivers/net/ethernet/micrel/ksz884x.c | 4 +- drivers/net/ethernet/microchip/lan743x_main.c | 2 +- .../net/ethernet/microchip/sparx5/sparx5_psfp.c | 5 +- .../ethernet/microchip/sparx5/sparx5_tc_flower.c | 18 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 6 +- drivers/net/ethernet/netronome/nfp/crypto/ipsec.c | 3 +- drivers/net/ethernet/socionext/netsec.c | 2 + drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c | 5 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c | 4 +- drivers/net/ethernet/stmicro/stmmac/dwxgmac2.h | 4 +- drivers/net/ethernet/stmicro/stmmac/hwif.h | 2 +- drivers/net/ethernet/stmicro/stmmac/ring_mode.c | 4 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 9 + drivers/net/ethernet/stmicro/stmmac/stmmac_ptp.c | 1 - .../net/ethernet/stmicro/stmmac/stmmac_selftests.c | 106 +- drivers/net/ethernet/ti/cpsw.c | 41 +- drivers/net/ethernet/ti/cpsw_new.c | 39 +- drivers/net/ethernet/ti/cpsw_priv.h | 1 + drivers/net/ethernet/ti/netcp_core.c | 2 +- drivers/net/fddi/skfp/skfddi.c | 3 +- drivers/net/gtp.c | 18 +- drivers/net/ieee802154/mac802154_hwsim.c | 10 +- drivers/net/phy/motorcomm.c | 41 +- drivers/net/ppp/ppp_async.c | 89 +- drivers/net/ppp/ppp_synctty.c | 14 +- drivers/net/usb/catc.c | 15 +- drivers/net/usb/cdc_mbim.c | 5 + drivers/net/usb/cx82310_eth.c | 1 + drivers/net/usb/hso.c | 2 +- drivers/net/usb/lan78xx.c | 9 +- drivers/net/usb/pegasus.c | 54 +- drivers/net/usb/pegasus.h | 3 - drivers/net/usb/qmi_wwan.c | 2 + drivers/net/usb/sr9700.c | 3 +- drivers/net/veth.c | 2 + drivers/net/vrf.c | 2 - drivers/net/vxlan/vxlan_core.c | 266 +-- drivers/net/vxlan/vxlan_mdb.c | 8 + drivers/net/wireless/ath/ath11k/dp_rx.c | 50 +- drivers/net/wireless/ath/ath12k/qmi.c | 59 +- drivers/net/wireless/ath/ath12k/qmi.h | 2 + drivers/net/wireless/ath/ath9k/hif_usb.c | 12 +- drivers/net/wireless/ath/ath9k/hif_usb.h | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 2 + .../broadcom/brcm80211/brcmsmac/mac80211_if.c | 4 + drivers/net/wireless/intel/ipw2x00/libipw_rx.c | 10 +- drivers/net/wireless/intel/iwlegacy/common.c | 2 +- drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 5 + drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 13 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 19 +- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 6 +- drivers/net/wireless/intel/iwlwifi/mvm/rx.c | 5 + drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 4 +- drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 11 +- drivers/net/wireless/intersil/p54/eeprom.c | 22 +- drivers/net/wireless/marvell/libertas/tx.c | 7 + drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/fw.h | 18 +- drivers/net/wireless/marvell/mwifiex/join.c | 8 +- drivers/net/wireless/marvell/mwifiex/pcie.c | 2 +- drivers/net/wireless/marvell/mwifiex/scan.c | 54 +- drivers/net/wireless/marvell/mwifiex/sta_cmd.c | 2 +- drivers/net/wireless/marvell/mwifiex/util.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 33 +- drivers/net/wireless/mediatek/mt76/pci.c | 8 +- drivers/net/wireless/microchip/wilc1000/cfg80211.c | 14 + drivers/net/wireless/microchip/wilc1000/wlan.c | 9 + drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2800pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt61pci.c | 2 +- drivers/net/wireless/realtek/rtw88/fw.c | 11 +- drivers/net/wireless/realtek/rtw88/tx.c | 2 +- drivers/net/wireless/realtek/rtw89/core.c | 4 +- drivers/net/wireless/realtek/rtw89/pci.c | 16 +- drivers/net/wireless/rsi/rsi_91x_hal.c | 8 + drivers/net/wireless/rsi/rsi_91x_mgmt.c | 8 +- drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/virtual/mac80211_hwsim.c | 45 +- drivers/net/wireless/virtual/virt_wifi.c | 4 +- drivers/net/wwan/mhi_wwan_mbim.c | 28 +- drivers/net/wwan/t7xx/t7xx_netdev.c | 4 + drivers/net/wwan/t7xx/t7xx_pci.c | 3 + drivers/nfc/microread/microread.c | 6 +- drivers/nfc/nfcmrvl/fw_dnld.c | 11 +- drivers/nfc/pn533/pn533.c | 14 +- drivers/nfc/pn533/pn533.h | 4 +- drivers/nfc/pn533/usb.c | 4 +- drivers/nfc/pn544/pn544.c | 7 +- drivers/nfc/port100.c | 7 + drivers/nfc/st21nfca/core.c | 12 +- drivers/nfc/st21nfca/i2c.c | 29 +- drivers/nfc/virtual_ncidev.c | 3 +- drivers/nvme/host/apple.c | 182 +- drivers/nvme/host/core.c | 64 +- drivers/nvme/host/fabrics.c | 6 +- drivers/nvme/host/fc.c | 7 +- drivers/nvme/host/rdma.c | 18 +- drivers/of/dynamic.c | 20 +- drivers/of/overlay.c | 15 + drivers/opp/of.c | 2 +- drivers/pci/controller/dwc/pcie-intel-gw.c | 19 +- drivers/pci/controller/pcie-altera.c | 2 + drivers/pci/controller/pcie-iproc.c | 2 + drivers/pci/controller/pcie-mediatek.c | 2 + drivers/pci/controller/pcie-rockchip-host.c | 2 + drivers/pci/of_property.c | 11 +- drivers/pci/pci-driver.c | 10 +- drivers/pci/pci-sysfs.c | 11 +- drivers/pci/pci.c | 24 +- drivers/pci/proc.c | 79 +- drivers/pci/quirks.c | 3 + drivers/pci/switch/switchtec.c | 16 + drivers/perf/arm-cmn.c | 10 +- drivers/phy/mediatek/phy-mtk-hdmi-mt8195.c | 4 +- drivers/phy/mediatek/phy-mtk-hdmi-mt8195.h | 3 + drivers/pinctrl/meson/pinctrl-meson-s4.c | 2 +- drivers/pinctrl/pinctrl-single.c | 3 +- drivers/pinctrl/renesas/pinctrl-rzv2m.c | 4 +- drivers/platform/x86/dell/dell-laptop.c | 9 + drivers/platform/x86/intel/hid.c | 7 + drivers/ptp/ptp_ocp.c | 1 + drivers/regulator/core.c | 163 +- drivers/regulator/da9121-regulator.c | 18 +- drivers/regulator/db8500-prcmu.c | 12 +- drivers/remoteproc/qcom_q6v5_adsp.c | 8 +- drivers/rtc/rtc-aspeed.c | 1 + drivers/rtc/rtc-bq32k.c | 9 + drivers/s390/char/zcore.c | 8 +- drivers/s390/cio/chp.c | 3 + drivers/s390/cio/cio.c | 11 +- drivers/s390/cio/device.c | 9 +- drivers/s390/cio/device_fsm.c | 3 + drivers/s390/cio/device_ops.c | 23 + drivers/s390/cio/vfio_ccw_fsm.c | 2 +- drivers/s390/net/ism_drv.c | 4 +- drivers/s390/net/qeth_l2.h | 3 +- drivers/s390/net/qeth_l2_main.c | 26 +- drivers/s390/net/qeth_l2_sys.c | 7 +- drivers/scsi/bfa/bfa_fcs_lport.c | 2 +- drivers/scsi/libiscsi_tcp.c | 3 + drivers/scsi/megaraid/megaraid_sas_base.c | 4 +- drivers/scsi/mpi3mr/mpi3mr_transport.c | 8 + drivers/scsi/mpt3sas/mpt3sas_base.c | 5 +- drivers/scsi/pm8001/pm8001_ctl.c | 8 + drivers/scsi/pm8001/pm80xx_hwi.c | 7 + drivers/scsi/qla2xxx/qla_os.c | 2 +- drivers/scsi/scsi.c | 24 +- drivers/scsi/scsi_error.c | 2 +- drivers/soc/ti/pm33xx.c | 2 +- drivers/soundwire/bus.c | 4 + drivers/soundwire/cadence_master.c | 7 + drivers/soundwire/dmi-quirks.c | 35 + drivers/soundwire/intel.c | 31 +- drivers/soundwire/intel_ace2x.c | 39 +- drivers/soundwire/slave.c | 4 +- drivers/spi/spi-dw-dma.c | 3 +- drivers/spi/spi-dw.h | 1 + drivers/spi/spi-qcom-qspi.c | 44 +- drivers/spi/spi-xilinx.c | 6 +- drivers/spi/spi-zynqmp-gqspi.c | 52 +- drivers/spi/spi.c | 9 +- drivers/staging/fbtft/fbtft-core.c | 9 +- drivers/target/iscsi/iscsi_target.c | 4 +- drivers/tee/optee/call.c | 3 +- drivers/thermal/db8500_thermal.c | 10 +- drivers/thermal/qcom/tsens.c | 111 +- drivers/thermal/qcom/tsens.h | 1 + drivers/thermal/tegra/soctherm.c | 6 +- drivers/thunderbolt/icm.c | 10 + drivers/thunderbolt/switch.c | 6 + drivers/thunderbolt/tb.c | 9 +- drivers/thunderbolt/tb_regs.h | 1 + drivers/thunderbolt/usb4.c | 11 +- drivers/thunderbolt/xdomain.c | 41 +- drivers/tty/serial/8250/8250_port.c | 7 + drivers/usb/atm/xusbatm.c | 6 +- drivers/usb/class/cdc-acm.c | 6 + drivers/usb/class/usbtmc.c | 2 - drivers/usb/core/hcd.c | 14 +- drivers/usb/gadget/udc/aspeed_udc.c | 7 +- drivers/usb/gadget/udc/core.c | 7 +- drivers/usb/gadget/udc/goku_udc.c | 3 +- drivers/usb/host/Kconfig | 2 +- drivers/usb/host/xhci-debugfs.c | 16 +- drivers/usb/host/xhci-hub.c | 117 +- drivers/usb/host/xhci-mem.c | 40 +- drivers/usb/host/xhci-pci.c | 8 +- drivers/usb/host/xhci-ring.c | 14 +- drivers/usb/host/xhci-tegra.c | 12 +- drivers/usb/host/xhci-trace.h | 5 + drivers/usb/host/xhci.c | 79 +- drivers/usb/host/xhci.h | 44 +- drivers/usb/serial/spcp8x5.c | 6 +- drivers/usb/usbip/vhci_sysfs.c | 52 +- drivers/vdpa/ifcvf/ifcvf_main.c | 14 +- drivers/vdpa/solidrun/snet_main.c | 6 +- drivers/vdpa/vdpa_sim/vdpa_sim_blk.c | 3 +- drivers/vdpa/vdpa_sim/vdpa_sim_net.c | 7 +- drivers/vhost/scsi.c | 3 +- drivers/vhost/vdpa.c | 106 +- drivers/video/fbdev/pm2fb.c | 1 + drivers/video/fbdev/vfb.c | 11 +- drivers/virtio/virtio_input.c | 9 +- drivers/virtio/virtio_pci_common.c | 4 +- drivers/virtio/virtio_vdpa.c | 2 +- drivers/watchdog/da9063_wdt.c | 4 +- drivers/watchdog/db8500_wdt.c | 22 +- drivers/watchdog/digicolor_wdt.c | 13 +- drivers/watchdog/msc313e_wdt.c | 88 +- drivers/watchdog/rtd119x_wdt.c | 7 +- drivers/watchdog/sp5100_tco.c | 6 +- drivers/watchdog/starfive-wdt.c | 2 +- drivers/watchdog/sunxi_wdt.c | 45 +- drivers/watchdog/watchdog_hrtimer_pretimeout.c | 1 + drivers/xen/gntalloc.c | 13 +- drivers/xen/xen-front-pgdir-shbuf.c | 12 +- fs/9p/vfs_dir.c | 14 +- fs/affs/affs.h | 5 - fs/affs/super.c | 6 +- fs/autofs/inode.c | 4 + fs/befs/linuxvfs.c | 3 +- fs/bfs/inode.c | 3 +- fs/btrfs/block-group.c | 3 +- fs/btrfs/btrfs_inode.h | 2 +- fs/btrfs/file.c | 12 +- fs/btrfs/free-space-cache.c | 13 +- fs/btrfs/inode.c | 42 +- fs/btrfs/ioctl.c | 13 +- fs/btrfs/raid-stripe-tree.c | 19 +- fs/btrfs/raid-stripe-tree.h | 1 + fs/btrfs/reflink.c | 3 +- fs/btrfs/relocation.c | 47 +- fs/btrfs/send.c | 2 +- fs/btrfs/transaction.c | 13 +- fs/btrfs/tree-checker.c | 43 +- fs/btrfs/tree-log.c | 12 +- fs/btrfs/verity.c | 4 +- fs/btrfs/volumes.c | 10 +- fs/btrfs/xattr.c | 4 +- fs/btrfs/zoned.c | 2 + fs/cachefiles/namei.c | 1 - fs/configfs/dir.c | 12 +- fs/erofs/fscache.c | 2 + fs/exec.c | 51 +- fs/f2fs/inline.c | 7 + fs/freevxfs/vxfs_bmap.c | 3 +- fs/fs-writeback.c | 25 +- fs/fuse/file.c | 3 +- fs/gfs2/bmap.c | 19 + fs/gfs2/bmap.h | 1 + fs/gfs2/file.c | 10 + fs/hfs/catalog.c | 9 - fs/hfs/dir.c | 28 +- fs/hfs/hfs.h | 3 +- fs/hfs/hfs_fs.h | 2 - fs/hfs/inode.c | 4 - fs/hfsplus/catalog.c | 11 - fs/hfsplus/dir.c | 28 +- fs/hfsplus/hfsplus_fs.h | 5 +- fs/hfsplus/inode.c | 40 +- fs/hfsplus/super.c | 2 - fs/hpfs/super.c | 3 +- fs/inode.c | 11 +- fs/isofs/inode.c | 3 +- fs/jfs/super.c | 3 +- fs/minix/inode.c | 3 +- fs/nfs/nfs42proc.c | 15 +- fs/ntfs3/dir.c | 4 +- fs/ntfs3/fslog.c | 28 +- fs/ntfs3/index.c | 41 +- fs/ntfs3/super.c | 8 +- fs/ntfs3/xattr.c | 4 +- fs/ocfs2/namei.c | 9 +- fs/ocfs2/xattr.c | 13 +- fs/ocfs2/xattr.h | 8 +- fs/omfs/inode.c | 6 +- fs/qnx4/inode.c | 3 +- fs/smb/client/cifsacl.c | 30 +- fs/smb/client/connect.c | 36 +- fs/smb/client/file.c | 5 +- fs/smb/client/misc.c | 36 +- fs/smb/client/readdir.c | 9 +- fs/smb/client/reparse.c | 5 +- fs/smb/client/smb2inode.c | 11 + fs/smb/client/smb2ops.c | 75 +- fs/smb/client/smb2pdu.c | 64 +- fs/smb/client/transport.c | 11 +- fs/smb/server/mgmt/share_config.c | 36 +- fs/smb/server/mgmt/user_session.c | 25 +- fs/smb/server/misc.c | 14 +- fs/smb/server/oplock.c | 221 ++- fs/smb/server/oplock.h | 2 +- fs/smb/server/server.c | 6 + fs/smb/server/smb2misc.c | 9 +- fs/smb/server/smb2pdu.c | 366 ++-- fs/smb/server/smb2pdu.h | 1 + fs/smb/server/smbacl.c | 25 +- fs/smb/server/transport_ipc.c | 21 +- fs/smb/server/vfs.c | 46 +- fs/smb/server/vfs_cache.c | 28 +- fs/smb/server/vfs_cache.h | 8 +- fs/squashfs/xz_wrapper.c | 6 +- fs/ufs/cylinder.c | 10 + fs/ufs/dir.c | 122 +- fs/ufs/ialloc.c | 2 +- fs/ufs/inode.c | 42 +- fs/ufs/super.c | 17 +- fs/xfs/scrub/agheader_repair.c | 39 +- fs/xfs/scrub/ialloc.c | 4 + fs/xfs/scrub/scrub.c | 3 +- fs/xfs/scrub/stats.c | 60 +- fs/xfs/scrub/stats.h | 4 +- fs/xfs/xfs_icache.c | 2 +- include/drm/drm_probe_helper.h | 2 + include/keys/request_key_auth-type.h | 2 +- include/linux/bitfield.h | 2 +- include/linux/bpf.h | 2 + include/linux/dev_printk.h | 1 + include/linux/firmware/intel/stratix10-smc.h | 18 +- include/linux/fwnode.h | 1 + include/linux/ipv6.h | 35 +- include/linux/kcsan-checks.h | 6 +- include/linux/mailbox_controller.h | 2 + include/linux/mfd/db8500-prcmu.h | 252 ++- include/linux/mfd/dbx500-prcmu.h | 575 ------- include/linux/netdevice.h | 28 +- include/linux/perf_event.h | 5 + include/linux/rculist.h | 29 + include/linux/rtnetlink.h | 7 + include/linux/skbuff.h | 5 +- include/linux/switchtec.h | 1 + include/linux/thunderbolt.h | 2 + include/linux/vdpa.h | 41 +- include/linux/workqueue.h | 41 +- include/media/v4l2-hevc.h | 41 + include/net/cfg80211.h | 2 +- include/net/cfg802154.h | 1 + include/net/gue.h | 19 +- include/net/if_inet6.h | 2 - include/net/inet_sock.h | 1 + include/net/ip.h | 3 +- include/net/ip6_route.h | 2 + include/net/ip_fib.h | 5 + include/net/ipv6.h | 4 +- include/net/mac80211.h | 9 +- include/net/netfilter/nf_conntrack.h | 5 + include/net/netfilter/nf_tables.h | 3 - include/net/netns/nftables.h | 1 + include/net/netns/xfrm.h | 2 +- include/net/nfc/hci.h | 2 +- include/net/nfc/nfc.h | 3 +- include/net/sch_generic.h | 2 +- include/net/sock.h | 2 +- include/net/udp_tunnel.h | 7 +- include/rdma/ib_umem.h | 4 +- include/sound/hda_codec.h | 30 + include/sound/rawmidi.h | 2 + include/trace/events/icmp.h | 13 +- include/uapi/linux/vhost_types.h | 7 + include/uapi/linux/virtio_crypto.h | 1 + include/uapi/sound/asound.h | 6 +- kernel/bpf/bpf_iter.c | 2 +- kernel/bpf/btf.c | 22 +- kernel/bpf/cgroup.c | 1 + kernel/bpf/disasm.c | 5 +- kernel/bpf/hashtab.c | 24 +- kernel/bpf/helpers.c | 58 +- kernel/bpf/offload.c | 2 + kernel/bpf/syscall.c | 5 +- kernel/bpf/verifier.c | 15 +- kernel/dma/coherent.c | 13 +- kernel/events/ring_buffer.c | 9 +- kernel/locking/lockdep.c | 50 +- kernel/rcu/tasks.h | 3 +- kernel/sched/fair.c | 11 +- kernel/time/clockevents.c | 35 +- kernel/time/tick-broadcast.c | 36 +- kernel/time/tick-internal.h | 2 + kernel/trace/Makefile | 5 +- kernel/trace/bpf_trace.c | 11 + kernel/trace/ring_buffer.c | 13 +- kernel/trace/trace_event_perf.c | 12 +- kernel/trace/trace_events_hist.c | 53 +- kernel/trace/trace_events_user.c | 26 +- kernel/trace/trace_probe.c | 48 +- kernel/trace/trace_probe.h | 2 + kernel/workqueue.c | 7 +- mm/backing-dev.c | 5 +- mm/damon/core.c | 13 +- mm/huge_memory.c | 10 + mm/memblock.c | 18 +- mm/mlock.c | 2 +- net/8021q/vlan.c | 23 - net/8021q/vlan.h | 2 + net/8021q/vlan_dev.c | 61 +- net/9p/client.c | 2 +- net/appletalk/aarp.c | 5 + net/atm/pppoatm.c | 42 +- net/bluetooth/bnep/core.c | 17 +- net/bluetooth/bnep/netdev.c | 8 +- net/bluetooth/eir.c | 10 +- net/bluetooth/hci_codec.c | 36 +- net/bluetooth/hci_conn.c | 14 +- net/bluetooth/hci_core.c | 4 +- net/bluetooth/hci_sock.c | 20 +- net/bluetooth/hci_sync.c | 2 + net/bluetooth/iso.c | 32 +- net/bluetooth/l2cap_core.c | 28 +- net/bluetooth/mgmt.c | 27 +- net/bluetooth/msft.c | 2 +- net/bluetooth/rfcomm/core.c | 6 + net/bluetooth/rfcomm/sock.c | 19 +- net/bluetooth/smp.c | 17 + net/bridge/br_arp_nd_proxy.c | 16 +- net/bridge/br_device.c | 2 +- net/bridge/br_fdb.c | 7 +- net/bridge/br_input.c | 2 +- net/bridge/br_mst.c | 20 +- net/bridge/br_multicast.c | 11 +- net/bridge/br_stp_bpdu.c | 5 +- net/core/dev.c | 68 +- net/core/drop_monitor.c | 22 +- net/core/filter.c | 67 +- net/core/skbuff.c | 16 +- net/core/skmsg.c | 4 + net/core/sock.c | 13 +- net/core/sock_map.c | 1 + net/dccp/ipv6.c | 2 +- net/hsr/hsr_forward.c | 2 +- net/hsr/hsr_netlink.c | 9 +- net/ieee802154/6lowpan/core.c | 2 +- net/ipv4/arp.c | 1 + net/ipv4/esp4.c | 6 + net/ipv4/fib_rules.c | 4 +- net/ipv4/fib_trie.c | 4 + net/ipv4/fou_core.c | 6 +- net/ipv4/icmp.c | 17 +- net/ipv4/inet_connection_sock.c | 3 +- net/ipv4/inet_fragment.c | 6 + net/ipv4/ip_gre.c | 12 + net/ipv4/ip_tunnel_core.c | 6 + net/ipv4/nexthop.c | 2 +- net/ipv4/sysctl_net_ipv4.c | 4 +- net/ipv4/tcp_input.c | 3 +- net/ipv4/tcp_output.c | 3 + net/ipv4/udp.c | 4 +- net/ipv6/addrconf.c | 13 +- net/ipv6/af_inet6.c | 2 +- net/ipv6/esp6.c | 6 + net/ipv6/exthdrs.c | 4 +- net/ipv6/exthdrs_core.c | 3 + net/ipv6/ip6_fib.c | 4 +- net/ipv6/ip6_gre.c | 8 +- net/ipv6/ip6_output.c | 23 +- net/ipv6/ip6_udp_tunnel.c | 37 +- net/ipv6/ipv6_sockglue.c | 90 +- net/ipv6/mcast.c | 273 +-- net/ipv6/ndisc.c | 4 +- net/ipv6/netfilter/ip6_tables.c | 5 + net/ipv6/netfilter/ip6t_rpfilter.c | 2 +- net/ipv6/netfilter/ip6t_rt.c | 11 +- net/ipv6/route.c | 22 +- net/ipv6/seg6.c | 4 +- net/ipv6/seg6_local.c | 3 + net/ipv6/tcp_ipv6.c | 6 +- net/ipv6/xfrm6_output.c | 10 +- net/llc/llc_c_ac.c | 2 +- net/llc/llc_s_ac.c | 4 + net/llc/llc_sap.c | 8 +- net/mac80211/cfg.c | 14 +- net/mac80211/debugfs.c | 2 +- net/mac80211/debugfs_netdev.c | 9 + net/mac80211/ieee80211_i.h | 7 +- net/mac80211/iface.c | 31 +- net/mac80211/main.c | 4 + net/mac80211/mesh.c | 1 - net/mac80211/mlme.c | 6 +- net/mac80211/pm.c | 8 +- net/mac80211/status.c | 4 +- net/mac80211/tdls.c | 19 +- net/mac80211/tx.c | 46 +- net/mac802154/ieee802154_i.h | 8 + net/mac802154/iface.c | 6 + net/mac802154/main.c | 1 + net/mac802154/rx.c | 120 +- net/mac802154/scan.c | 10 +- net/mptcp/options.c | 3 +- net/mptcp/protocol.c | 15 +- net/mptcp/protocol.h | 3 +- net/mptcp/subflow.c | 12 +- net/mptcp/syncookies.c | 5 +- net/netfilter/ipset/ip_set_hash_gen.h | 13 +- net/netfilter/ipvs/ip_vs_core.c | 6 + net/netfilter/ipvs/ip_vs_sync.c | 30 +- net/netfilter/nf_conntrack_expect.c | 3 +- net/netfilter/nf_conntrack_netlink.c | 16 +- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 2 +- net/netfilter/nf_flow_table_core.c | 12 +- net/netfilter/nf_flow_table_offload.c | 7 +- net/netfilter/nf_log_syslog.c | 6 +- net/netfilter/nf_tables_api.c | 151 +- net/netfilter/nfnetlink_log.c | 28 +- net/netfilter/nfnetlink_queue.c | 77 +- net/netfilter/nft_chain_filter.c | 50 +- net/netfilter/nft_nat.c | 2 +- net/netfilter/nft_set_pipapo_avx2.c | 1 + net/netfilter/nft_set_rbtree.c | 2 - net/netfilter/nft_synproxy.c | 3 +- net/netlabel/netlabel_unlabeled.c | 2 +- net/netlink/genetlink.c | 8 +- net/nfc/core.c | 15 +- net/nfc/digital_dep.c | 8 +- net/nfc/llcp.h | 1 + net/nfc/llcp_commands.c | 2 +- net/nfc/llcp_core.c | 173 +- net/nfc/llcp_sock.c | 67 +- net/nfc/nci/core.c | 10 +- net/nfc/netlink.c | 7 +- net/nfc/nfc.h | 3 +- net/openvswitch/conntrack.c | 14 +- net/openvswitch/flow.c | 4 +- net/openvswitch/flow_table.c | 4 +- net/packet/af_packet.c | 108 +- net/packet/internal.h | 2 +- net/phonet/pn_dev.c | 30 +- net/qrtr/af_qrtr.c | 4 +- net/rds/af_rds.c | 63 +- net/rds/connection.c | 102 +- net/rds/ib_cm.c | 27 +- net/rds/ib_frmr.c | 11 +- net/rds/ib_recv.c | 9 +- net/rds/message.c | 4 +- net/rds/send.c | 16 +- net/rds/tcp.c | 164 +- net/rds/tcp_listen.c | 6 +- net/sched/act_api.c | 136 +- net/sched/act_csum.c | 8 +- net/sched/act_ct.c | 5 +- net/sched/act_gate.c | 30 +- net/sched/cls_api.c | 2 +- net/sched/cls_route.c | 101 +- net/sched/cls_u32.c | 44 +- net/sched/sch_api.c | 2 +- net/sched/sch_drr.c | 13 +- net/sched/sch_ets.c | 12 +- net/sched/sch_fq_pie.c | 62 +- net/sched/sch_generic.c | 24 +- net/sched/sch_hfsc.c | 22 + net/sched/sch_hhf.c | 15 +- net/sched/sch_pie.c | 2 +- net/sched/sch_sfq.c | 7 +- net/sched/sch_teql.c | 7 +- net/sctp/associola.c | 15 +- net/sctp/input.c | 7 +- net/sctp/ipv6.c | 12 +- net/sctp/protocol.c | 10 +- net/sctp/sm_make_chunk.c | 14 +- net/sctp/sm_sideeffect.c | 48 +- net/sctp/sm_statefuns.c | 7 + net/smc/smc_core.c | 2 + net/smc/smc_ib.c | 10 +- net/sunrpc/xprtrdma/verbs.c | 21 +- net/tipc/group.c | 4 +- net/tipc/monitor.c | 3 +- net/tipc/name_table.c | 32 +- net/tipc/socket.c | 4 +- net/tls/tls_main.c | 11 + net/tls/tls_sw.c | 18 +- net/unix/af_unix.c | 42 +- net/unix/garbage.c | 1 + net/vmw_vsock/hyperv_transport.c | 2 +- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/mlme.c | 105 +- net/wireless/nl80211.c | 8 +- net/wireless/scan.c | 12 +- net/wireless/util.c | 26 +- net/wireless/wext-sme.c | 9 + net/xdp/xskmap.c | 2 +- net/xfrm/espintcp.c | 6 +- net/xfrm/xfrm_input.c | 11 + net/xfrm/xfrm_state.c | 5 + net/xfrm/xfrm_user.c | 37 +- scripts/mod/modpost.c | 11 +- scripts/sorttable.c | 2 +- security/apparmor/lsm.c | 4 +- security/apparmor/policy.c | 13 +- security/apparmor/policy_unpack.c | 2 + security/integrity/digsig_asymmetric.c | 4 + security/integrity/ima/ima_appraise.c | 5 + security/keys/gc.c | 4 +- security/keys/request_key_auth.c | 12 +- security/keys/trusted-keys/trusted_tpm2.c | 12 +- security/selinux/avc.c | 5 +- security/selinux/hooks.c | 158 +- security/selinux/include/objsec.h | 10 +- sound/core/pcm_native.c | 35 +- sound/core/pcm_timer.c | 7 +- sound/core/rawmidi.c | 4 + sound/core/seq/oss/seq_oss_rw.c | 3 +- sound/core/ump.c | 94 +- sound/hda/ext/hdac_ext_controller.c | 6 +- sound/hda/hdac_bus.c | 8 +- sound/hda/hdac_component.c | 6 +- sound/hda/hdac_device.c | 28 +- sound/hda/hdac_regmap.c | 35 +- sound/isa/es18xx.c | 4 + sound/pci/ctxfi/cthw20k2.c | 1 + sound/pci/hda/hda_codec.c | 119 +- sound/pci/hda/hda_controller.c | 26 +- sound/pci/hda/hda_proc.c | 4 +- sound/pci/hda/hda_sysfs.c | 77 +- sound/pci/hda/patch_conexant.c | 12 + sound/pci/hda/patch_realtek.c | 44 + sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 +- sound/soc/amd/yc/acp6x-mach.c | 21 + sound/soc/amd/yc/acp6x-pdm-dma.c | 2 + sound/soc/bcm/bcm63xx-i2s-whistler.c | 1 + sound/soc/codecs/ab8500-codec.c | 543 +++--- sound/soc/codecs/hdmi-codec.c | 6 +- sound/soc/codecs/mt6351.c | 1 + sound/soc/codecs/pcm3168a.c | 20 +- sound/soc/codecs/rk3328_codec.c | 54 +- sound/soc/codecs/rt5645.c | 4 + sound/soc/codecs/rt712-sdca-dmic.c | 14 +- sound/soc/intel/atom/sst/sst_pci.c | 1 + sound/soc/intel/avs/core.c | 11 +- sound/soc/intel/catpt/ipc.c | 8 + sound/soc/intel/catpt/loader.c | 3 + sound/soc/intel/catpt/registers.h | 12 + sound/soc/meson/aiu-acodec-ctrl.c | 3 + sound/soc/meson/aiu-codec-ctrl.c | 3 + sound/soc/qcom/qdsp6/q6apm.c | 10 +- sound/soc/rockchip/rockchip_pdm.c | 16 +- sound/soc/rockchip/rockchip_spdif.c | 1 + sound/soc/soc-topology.c | 37 +- sound/soc/sprd/sprd-pcm-compress.c | 15 +- sound/soc/sti/uniperif_reader.c | 4 +- sound/soc/ti/omap3pandora.c | 5 +- sound/soc/ux500/ux500_msp_dai.c | 132 +- sound/soc/ux500/ux500_msp_dai.h | 11 - sound/soc/ux500/ux500_msp_i2s.c | 260 ++- sound/soc/ux500/ux500_msp_i2s.h | 16 +- sound/usb/6fire/chip.c | 40 +- sound/usb/6fire/comm.c | 42 +- sound/usb/6fire/comm.h | 2 +- sound/usb/6fire/midi.c | 64 +- sound/usb/6fire/midi.h | 2 +- sound/usb/6fire/pcm.c | 221 +-- sound/usb/6fire/pcm.h | 5 +- sound/usb/bcd2000/bcd2000.c | 33 +- sound/usb/caiaq/audio.c | 10 +- sound/usb/caiaq/device.c | 53 +- sound/usb/caiaq/device.h | 4 +- sound/usb/caiaq/input.c | 6 + sound/usb/caiaq/midi.c | 6 +- sound/usb/mixer.c | 17 +- sound/usb/mixer_maps.c | 25 + sound/usb/quirks-table.h | 22 + sound/usb/quirks.c | 4 + sound/usb/usx2y/us122l.c | 9 +- sound/usb/usx2y/usbusx2y.c | 45 +- sound/usb/usx2y/usbusx2y.h | 4 +- sound/virtio/virtio_card.c | 4 +- tools/build/feature/test-bpf.c | 2 + tools/include/nolibc/crt.h | 2 +- tools/lib/bpf/bpf.c | 2 + tools/lib/bpf/gen_loader.c | 2 + tools/lib/bpf/libbpf.c | 7 + tools/lib/bpf/relo_core.c | 58 +- tools/perf/tests/shell/stat_bpf_counters.sh | 30 +- tools/perf/util/evsel.c | 4 + tools/testing/selftests/alsa/mixer-test.c | 4 +- .../selftests/arm64/mte/check_gcr_el1_cswitch.c | 2 +- tools/testing/selftests/bpf/config | 1 + tools/testing/selftests/bpf/prog_tests/bpf_nf.c | 7 + tools/testing/selftests/bpf/progs/test_bpf_nf.c | 112 +- tools/testing/selftests/cgroup/cgroup_util.c | 82 +- tools/testing/selftests/cgroup/cgroup_util.h | 8 +- tools/testing/selftests/cgroup/test_kmem.c | 2 +- tools/testing/selftests/cgroup/test_memcontrol.c | 78 + .../ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc | 2 +- tools/testing/selftests/landlock/fs_test.c | 1746 +++++++++++++++++++- tools/testing/selftests/mm/cow.c | 338 ++-- tools/testing/selftests/nci/nci_dev.c | 45 +- tools/testing/selftests/net/fib_nexthops.sh | 28 + tools/testing/selftests/net/mptcp/mptcp_connect.c | 4 +- tools/testing/selftests/net/pmtu.sh | 2 +- tools/testing/selftests/net/test_vxlan_mdb.sh | 6 + tools/testing/selftests/powerpc/tm/tm.h | 8 +- tools/thermal/tmon/tui.c | 2 +- 1071 files changed, 14700 insertions(+), 7671 deletions(-)

2 weeks, 2 days

[PATCH 6.18 000/395] 6.18.55-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.55 release. There are 395 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 02 Oct 2026 15:23:04 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.55-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.55-rc1 Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Reject key-less BTF for hash maps Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: don't warn on stray CALL_ACCEPTED/CLEAR_CONFIRMATION in state 3 Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: use timer_shutdown_sync() for t0timer teardown Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: guard rose_transmit_link() against a NULL neighbour Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: keep the route needed for routing loop detection Tejun Heo <tj(a)kernel.org> sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags Shardul Bankar <shardulsb08(a)gmail.com> hfsplus: avoid double unload_nls() on mount failure Liew Rui Yan <aethernet65535(a)gmail.com> mm/damon/core: fix unconditionally skip last region Chunfeng Song <springbreeze(a)stu.pku.edu.cn> rust: net: phy: fix off-by-one bit positions in device status accessors Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Revert "rust: net: phy: fix off-by-one bit positions in device status accessors" Xie Bo <xb(a)ultrarisc.com> RISC-V: KVM: Serialize IMSIC attributes with vCPU migration Jiakai Xu <jiakaipeanut(a)gmail.com> RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_rw_attr() Ilya Maximets <i.maximets(a)ovn.org> net/sched: act_ct: avoid modifying shared unconfirmed ct entry Ilya Maximets <i.maximets(a)ovn.org> net/sched: act_ct: fix helper UAF due to extensions realloc Melody Wang <huibo.wang(a)amd.com> x86/sev: Make vTPM SVSM calls preemption-safe Nikunj A Dadhania <nikunj(a)amd.com> x86/sev: Remove redundant ghcbs_initialized checks around __sev_{get,put}_ghcb() Borislav Petkov (AMD) <bp(a)alien8.de> x86/sev: Carve out the SVSM code into a separate compilation unit Borislav Petkov (AMD) <bp(a)alien8.de> x86/sev: Add internal header guards Borislav Petkov (AMD) <bp(a)alien8.de> x86/sev: Move the internal header Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Update event constraints and cache_extra_regsfor LNL Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Update event constraints and cache_extra_regsfor ADL Yuqi Xu <xuyuqiabc(a)gmail.com> net: ipconfig: bound DHCP option construction Thorsten Blum <thorsten.blum(a)linux.dev> net: ipconfig: Remove outdated comment and indent code block Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths Chen Changcheng <chenchangcheng(a)kylinos.cn> HID: alps: unregister DualPoint Stick input device on remove Bastien Nocera <hadess(a)hadess.net> HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM Liz Fong-Jones <lizf(a)honeycomb.io> PCI: Fix BAR resize for devices on a root bus Christian Brauner <brauner(a)kernel.org> super: make iterate_supers_type() deletion-safe Longlong Xia <xialonglong(a)kylinos.cn> mm/hugetlb: do not dissolve gigantic pages without runtime support Usama Arif <usamaarif642(a)gmail.com> mm/hugetlb: create hstate_is_gigantic_no_runtime helper Jinjiang Tu <tujinjiang(a)huawei.com> mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> mm/rmap: allocate anon_vma_chain objects unlocked when possible shechenglong <shechenglong(a)xfusion.com> drm/client: fix restore of partially initialized client Thomas Zimmermann <tzimmermann(a)suse.de> drm/client: Pass force parameter to client restore Thomas Zimmermann <tzimmermann(a)suse.de> drm/client: Remove holds_console_lock parameter from suspend/resume Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc() Ankit Nautiyal <ankit.k.nautiyal(a)intel.com> drm/i915/quirks: Limit eDP rate to HBR2 on HP Pavilion Plus 14-ew1 Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Disable PSR2 on Xiaomi Book Pro 14 2026 as a quirk Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Fixes for Dell XPS DA14260 quirk Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Disable Panel Replay on Dell XPS 14 DA14260 as a quirk Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL Xiang Mei <xmei5(a)asu.edu> vlan: require the MAC header to be present in __vlan_insert_inner_tag() Hui Peng <benquike(a)gmail.com> cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict Waiman Long <longman(a)redhat.com> cgroup/cpuset: Ensure domain isolated CPUs stay in root or isolated partition Waiman Long <longman(a)redhat.com> cgroup/cpuset: Move up prstate_housekeeping_conflict() helper Jakub Kicinski <kuba(a)kernel.org> net: tls: fix silent data drop under pipe back-pressure Darrick J. Wong <djwong(a)kernel.org> xfs: fix cursor and pointer handling when recovering iunlink buckets Darrick J. Wong <djwong(a)kernel.org> xfs: fix blockgc group quota scanning when usrquota isn't enforced Darrick J. Wong <djwong(a)kernel.org> xfs: drop dquot flush lock when we can't find a buffer to flush Darrick J. Wong <djwong(a)kernel.org> xfs: don't let hidden_space go negative in xfs_metafile_resv_init Darrick J. Wong <djwong(a)kernel.org> xfs: call xfs_dquot_set_prealloc_limits if we installed default rtb limits Darrick J. Wong <djwong(a)kernel.org> xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots Darrick J. Wong <djwong(a)kernel.org> xfs: fix rtgroup repair estimations Darrick J. Wong <djwong(a)kernel.org> xfs: check di_forkoff correctly in scrub Darrick J. Wong <djwong(a)kernel.org> xfs: use the correct reservations for rtrmap/refcount recovery Darrick J. Wong <djwong(a)kernel.org> xfs: don't call xfs_exchange_range_finish for a dry run Darrick J. Wong <djwong(a)kernel.org> xfs: check padding field in xfs_ioc_commit_range Darrick J. Wong <djwong(a)kernel.org> xfs: use correct jiffies comparison function in xchk_maybe_relax Darrick J. Wong <djwong(a)kernel.org> xfs: release orphanage dir inode if chown fails Darrick J. Wong <djwong(a)kernel.org> xfs: fix attr fork block count checks in xrep_inode_blockcounts Darrick J. Wong <djwong(a)kernel.org> xfs: don't assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption Zihan Xi <zihanx(a)nebusec.ai> smb: client: validate POSIX create context length Zihan Xi <zihanx(a)nebusec.ai> smb: client: preserve create-context parsing errors Zihan Xi <zihanx(a)nebusec.ai> smb: client: clean up failed cached directory opens Zihan Xi <zihanx(a)nebusec.ai> smb: client: fix create context out-of-bounds reads Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: mgmt: fix race in read_unconf_index_list() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: L2CAP: validate frame length before control and FCS access Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: ISO: release unused CIS holds after channel attach Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: ISO: balance the parent hold in hci_bind_bis() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: reject out-of-range OCF values Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: validate event length before filtering Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_conn: fix CIS hold ownership on reuse Tan Chi <tanchi25(a)mails.ucas.ac.cn> RISC-V: KVM: Fix HSM hart status error propagation Xie Bo <xb(a)ultrarisc.com> RISC-V: KVM: Propagate interrupted G-stage faults Myeonghun Pak <mhun512(a)gmail.com> RISC-V: KVM: Synchronize hrtimer callback during teardown Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Transfer the hyp stack pages out of the host stage-2 Lorenzo Stoakes (ARM) <ljs(a)kernel.org> KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race Lorenzo Stoakes (ARM) <ljs(a)kernel.org> KVM: arm64: Fix spurious warning for benign stage 2 teardown race Karl Mehltretter <kmehltretter(a)gmail.com> KVM: arm64: Fix AArch32 DBGBXVR<n> handling Sean Christopherson <seanjc(a)google.com> KVM: SEV: Do cache maintenance on the source VM during intra-host migration Sean Christopherson <seanjc(a)google.com> KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV Zeng Chi <zengchi(a)kylinos.cn> KVM: Don't treat reserved xarray entries as having memory attributes David Ballesteros <davimaba.v(a)proton.me> KVM: Ensure memory attributes xarray nodes are accounted to the caller's memcg Anthony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Niklas Schnelle <schnelle(a)linux.ibm.com> s390/pci: Don't report recovery success on skipped recovery Niklas Schnelle <schnelle(a)linux.ibm.com> s390/pci: Report SCLP status on error events when no pdev is associated Niklas Schnelle <schnelle(a)linux.ibm.com> s390/pci: Fix missing device lock in zpci_report_status() Niklas Schnelle <schnelle(a)linux.ibm.com> s390/pci: Fix leak of struct pci_dev reference in zpci_report_status() Peter Oberparleiter <oberpar(a)linux.ibm.com> s390/cmf: Fix virtual vs physical address confusion Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() Ilya Titov <ilya.titov(a)wirenboard.com> pinctrl: sunxi: keep a shadow copy of the data register output latches Myeonghun Pak <mhun512(a)gmail.com> pinctrl: single: free the IRQ on domain creation failure Puranjay Mohan <puranjay(a)kernel.org> perf/core: Run sched_task() for PMUs with only CPU-wide events Puranjay Mohan <puranjay(a)kernel.org> perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() Helge Deller <deller(a)gmx.de> parisc: Increase kernel stack size to 32kb Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> scsi: libiscsi_tcp: Check the data direction of a Data-In PDU Myeonghun Pak <mhun512(a)gmail.com> nfc: trf7970a: power down on startup RX gain failure Doruk Tan Ozturk <doruk(a)0sec.ai> nfc: port100: reject frames whose declared length exceeds the received data Aamir Ahmed <elb12345(a)hotmail.co.uk> nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() Luxiao Xu <rakukuip(a)gmail.com> nfc: fix use-after-free in nfc_get_local_general_bytes Aohan Mei <henrymei(a)tencent.com> netfilter: nf_tables: skip expired catchall elements on insert and delete Luxiao Xu <rakukuip(a)gmail.com> netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read Weiming Shi <bestswngs(a)gmail.com> netfilter: ip6t_rpfilter: reject routes without inet6_dev Wentao Liang <vulab(a)iscas.ac.cn> net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() Ming Wang <wangming01(a)loongson.cn> net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist Zhang Yunfei <zhangyunfei1(a)kylinos.cn> net: txgbe: fix FDIR filter restore for VF rules Abhishek Ojha <abhishek.ojha(a)savoirfairelinux.com> net: phy: micrel: Advance register data pointer in write loop Guangshuo Li <lgs201920130244(a)gmail.com> net: ena: fix MMIO read buffer leak on probe failure Guangshuo Li <lgs201920130244(a)gmail.com> net: ena: fix PHC cleanup on probe failure Fourie Zhang <littleddfu(a)gmail.com> net: bridge: mdb: restart port group walk after deletion Gajdos Tamás <tamas(a)rimpianto.com> net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Gajdos Tamás <tamas(a)rimpianto.com> net: atl1c: fix soft lockup on out-of-range tpd_cons read Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: fix helper UAF due to extensions realloc Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: remove 'add_helper' dead code Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry Wentao Liang <vulab(a)iscas.ac.cn> net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy() Gajdos Tamás <tamas(a)rimpianto.com> net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Zijie Huang <milkory(a)outlook.com> net: arp: terminate device name before lookup Myeonghun Pak <mhun512(a)gmail.com> net: airoha: npu: cancel wdt_work after releasing the WDT IRQ Weiming Shi <bestswngs(a)gmail.com> net/sched: reject IDR error pointers when deleting actions Andrea Parri <parri.andrea(a)gmail.com> net/mlx5e: fix swapped IPv6 IPsec policy masks Ralf Lici <ralf(a)mandelbit.com> net/mlx5e: advertise MACsec offload only when supported Wentao Liang <vulab(a)iscas.ac.cn> net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() Wei Jie LAW <98lawweijie(a)gmail.com> HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() Junjie Cao <junjie.cao(a)intel.com> HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard Chen Changcheng <chenchangcheng(a)kylinos.cn> HID: alps: fix use-after-free on input2 registration failure Willem de Bruijn <willemb(a)google.com> packet: use ubuf_info completion for TX_RING packets Angel J <iamanaws(a)httpd.dev> PCI: of_property: Omit bus properties without a subordinate bus SJ Park <sj(a)kernel.org> mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() Jaewook You <jaewook376(a)gmail.com> mm/hugetlb: preserve mremap address delta when skipping page tables Karl Mehltretter <kmehltretter(a)gmail.com> gpio: tps65219: Fix TPS65214 GPIO direction programming Karl Mehltretter <kmehltretter(a)gmail.com> gpio: tps65219: Use the variant-specific direction callback Karl Mehltretter <kmehltretter(a)gmail.com> gpio: tps65219: Fix GPIO input value reads Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/virtio: fix NULL pointer dereference on fence allocation failure Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/virtio: fix memory leak of fence event on execbuffer failure Matthew Brost <matthew.brost(a)intel.com> drm/xe: Keep walking on SVM eviction failure Szymon Acedański <accek(a)invisiblethingslab.com> drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV Tangudu Tilak Tirumalesh <tilak.tirumalesh.tangudu(a)intel.com> drm/xe: harden adjust_idledly() against divide-by-zero and overflow Matthew Auld <matthew.auld(a)intel.com> drm/xe/vm: nuke PTs only after unlinking contested VMAs Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() Jonghyuk Kim(MalHyuk) <malhyuk97(a)gmail.com> drm/nouveau: RCU-free the scheduler-containing nouveau_sched Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix gem reference leak in validate_init() Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: fix double-free in nvif_vmm_dtor Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix bridge reference leak in nv1a_ram_new() Guangshuo Li <lgs201920130244(a)gmail.com> drm/nouveau: fix autosuspend cleanup during teardown Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() Ivan Lipski <ivan.lipski(a)amd.com> drm/amd/display: Bump frame warning limit for clang builds of dml Wentao Liang <vulab(a)iscas.ac.cn> drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() Imre Deak <imre.deak(a)intel.com> drm/i915/dp_mst: Fix configuring TUs for a disconnected stream Imre Deak <imre.deak(a)intel.com> drm/i915/dp_mst: Fix configuring FEC for a disconnected stream Christian König <ckoenig.leichtzumerken(a)gmail.com> drm/i915: fix incorrect RCU teardown order Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Fix page count for page table for map() interface Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() Dongliang Qin <cccccccccccc777777(a)gmail.com> rds: ib: Clear the sg list when mapping an MR fails Hui Peng <benquike(a)gmail.com> mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() Zixuan Chai <petalzu987(a)gmail.com> llc: reserve device headroom for allocated frames Ridham Khurana <khurana.ridham222(a)gmail.com> gpio: zynq: fix runtime PM leak on request error path Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: cdev: fix kernel stack leak to user-space in error path Wentao Liang <vulab(a)iscas.ac.cn> gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() Hui Peng <benquike(a)gmail.com> ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST Norbert Szetei <norbert(a)doyensec.com> ipv6: do not let ipv6_find_hdr() return an offset past the packet end Fan Wu <wufan(a)kernel.org> ipe: protect the dm-verity root hash with RCU Fan Wu <wufan(a)kernel.org> ipe: fix use-after-free when auditing a newly loaded policy Wentao Liang <vulab(a)iscas.ac.cn> fsl/fman: Fix clk reference leak in read_dts_node() Josef Bacik <josef(a)toxicpanda.com> writeback: report a Tasks-RCU quiescent state per cgwb drain pass Pavankumar Kondeti <pavan.kondeti(a)oss.qualcomm.com> workqueue: Fix NULL current_pwq deref in flush dependency check Patrick Lu (Anthropic) <perf.patrick.lu(a)gmail.com> writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes Christian Brauner <brauner(a)kernel.org> fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga Hui Peng <benquike(a)gmail.com> fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT Guopeng Zhang <zhangguopeng(a)kylinos.cn> cgroup/pids: Restore pids.events notifications in local mode Holger Dengler <dengler(a)linux.ibm.com> crypto: s390/hmac - Generate intermediate CV for API partial block handling Andrea Parri <parri.andrea(a)gmail.com> bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir Myeonghun Pak <mhun512(a)gmail.com> bna: prevent IOC timer rearm during teardown Matthias Goergens <matthias.goergens(a)gmail.com> ata: libata-scsi: bound the ATA passthru sense descriptor writes David Carlier <devnexen(a)gmail.com> arm64: errata: match the target implementation CPU's own MIDR Fuad Tabba <fuad.tabba(a)linux.dev> arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 Dairui Zhang <zhangdairui(a)gmail.com> af_packet: fix integer overflow in prb_calc_retire_blk_tmo() Aohan Mei <henrymei(a)tencent.com> sctp: discard the rest of the packet on a stale-cookie error Willem de Bruijn <willemb(a)google.com> tcp: prevent collapsing skbs across boundary in rtx queue Eric Dumazet <edumazet(a)google.com> tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow Willem de Bruijn <willemb(a)google.com> virtio_net: copy zerocopy frags in start_xmit without NAPI Mario Limonciello <mario.limonciello(a)amd.com> x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 Masami Hiramatsu (Google) <mhiramat(a)kernel.org> x86/mce: Fix hardware debug register corruption on task migration Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase Pablo Neira Ayuso <pablo(a)netfilter.org> rculist: add list_splice_rcu() for private lists Mark Amirkan <markdamirkan(a)gmail.com> mptcp: return sk_wait_data() errors from recvmsg() Zhan Xusheng <zhanxusheng1024(a)gmail.com> sched/core: Account PSI IRQ time to the execution context, not the scheduling context Namhyung Kim <namhyung(a)kernel.org> perf/core: Fix a refcount leak in attach_perf_ctx_data() Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs() Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits Hui Peng <benquike(a)gmail.com> autofs: fix sbi->pipe file reference leak in autofs_kill_sb() Eric Dumazet <edumazet(a)google.com> vlan: ensure sufficient headroom in vlan_dev_hard_header() Eric Dumazet <edumazet(a)google.com> net/sched: sch_teql: fix shadowed err in __teql_resolve() Eric Dumazet <edumazet(a)google.com> bridge: check llc_mac_hdr_init() return value in br_send_bpdu() Eric Dumazet <edumazet(a)google.com> llc: fix skb UAF and leaks on llc_mac_hdr_init() failure Eric Dumazet <edumazet(a)google.com> gve: DQO: reject TSO packets with an out of range MSS Eddie Phillips <eddiephillips(a)google.com> gve: fix TX drop when GSO MSS is too small for hw Eric Dumazet <edumazet(a)google.com> gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO Ankit Garg <nktgrg(a)google.com> gve: add support for UDP GSO for DQO format Ankit Garg <nktgrg(a)google.com> gve: Enable hw-gro by default if device supported Ankit Garg <nktgrg(a)google.com> gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO Ankit Garg <nktgrg(a)google.com> gve: Allow ethtool to configure rx_buf_len Ankit Garg <nktgrg(a)google.com> gve: Use extack to log xdp config verification errors Ankit Garg <nktgrg(a)google.com> gve: Consolidate and persist ethtool ring changes Coia Prant <coiaprant(a)gmail.com> net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails Ginger Li <ginger.jzllee(a)gmail.com> tipc: Fix a data race on mon->peer_cnt in mon_timeout() Sidraya Jayagond <sidraya(a)linux.ibm.com> net/smc: fix UAF on lgr list traversal in smcr_port_err() Sang-Hoon Choi <csh0052(a)gmail.com> nfp: hold IPsec RX state under the XArray lock Aleksei Sviridkin <f(a)lex.la> net: phylink: record the PHY only once bringup cannot fail Yilin Zhang <yilinzhang(a)moonshot.ai> tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() Aleksei Sviridkin <f(a)lex.la> net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq Aleksei Sviridkin <f(a)lex.la> net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 Haseeb Malik <haseebulhaq55(a)gmail.com> macsec: initialize SecY before registering the netdevice David Dai <zdai(a)linux.ibm.com> bonding: crypto offload enabled, non-offload slave failover, rekey failed Pengpeng Hou <hppiscas(a)163.com> drm/imagination: clamp freelist reconstruction requests Norbert Szetei <norbert(a)doyensec.com> net: xps: reject an out of range traffic class Sanghyun Park <sanghyun.park.cnu(a)gmail.com> vxlan: use one headroom snapshot for neighbour replies Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> ip_gre: Reject enabling collect metadata through changelink Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: do not skip WoL power up on GENET V1 Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: initialize u64 stats seq counter for all queues Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: clear stale buf->page after recycling on skb build failure Ivan Delalande <colona(a)arista.com> tg3: use random MAC address when tg3_get_device_address fails Johan Almbladh <johan.almbladh(a)anyfinetworks.com> bpf: Fix BSWAP 32 and 16 on MIPS64 Johan Almbladh <johan.almbladh(a)anyfinetworks.com> bpf: Fix immediate JMP JEQ/JNE on MIPS32 Ido Schimmel <idosch(a)nvidia.com> vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets Shihuang Liu <shlomojune6(a)gmail.com> net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() Jakub Kicinski <kuba(a)kernel.org> veth: manage XDP program pointers during channel resize Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: stop Tx NAPI before disabling the queues Victor Nogueira <victor(a)mojatatu.com> net/sched: act_gate: budget the per-entry list in get_fill_size Deepanshu Kartikey <kartikey406(a)gmail.com> nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix slab-out-of-bounds reads when logging service names Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix -ENOMEM on connect with zero-length service name Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate ISO15693 inventory length Cong Nguyen <congnt264(a)gmail.com> nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure Chris Gellermann <christian.gellermann(a)codasip.com> nfc: virtual_ncidev: Add missing ioctl compat handler Chris Gellermann <christian.gellermann(a)codasip.com> selftests/nci: Fix out-of-bounds store on thread join Chaithanya Lagisetty <nagachaithanya9911(a)gmail.com> selftests: nci: Fix uninitialized family ID on missing attribute Lee Jones <lee(a)kernel.org> nfc: llcp: Fix race condition in accept_queue lifecycle Lei Zhu <zhulei(a)kylinos.cn> selftests: nci: Correct pthread_create return value check Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate received frame size Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: nfcmrvl: validate helper command length before pull Weiming Shi <bestswngs(a)gmail.com> bpf: Reject dev-bound-only programs on other devices Bernard Ladenthin <bernard.ladenthin(a)gmail.com> net/sched: fix potential stack infoleak in em_text_dump() Björn Töpel <bjorn(a)kernel.org> eth: fbnic: Avoid rounding zero ring sizes Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Capture all packets for vlan checks Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Check the dev->features for S-TAG offload testing Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Support running selftests on DSA conduits Xin Long <lucien.xin(a)gmail.com> sctp: hold asoc or transport before mod_timer() in timer handlers Bernardo Soares <bsoares.it(a)gmail.com> net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports Bernardo Soares <bsoares.it(a)gmail.com> net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports Zhao Gongyi <zhaogongyi(a)BYTEDANCE.COM> bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc Emil Tsalapatis <emil(a)etsalapatis.com> bpf: Fix bpf_sock context code generation Emil Tsalapatis <emil(a)etsalapatis.com> bpf: Fix bounds check for skb-backed dynptrs Manaf Meethalavalappu Pallikunhi <manaf.pallikunhi(a)oss.qualcomm.com> thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds Coia Prant <coiaprant(a)gmail.com> net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure Jakub Kicinski <kuba(a)kernel.org> genetlink: report the real command id for dump-only ops in policy dumps bui duc phuc <phucduc.bui(a)gmail.com> net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error Muhammad Bilal <meatuni001(a)gmail.com> net: spacemit: clear TX descriptor on fragment mapping failure Mikhail Zaslonko <zaslonko(a)linux.ibm.com> s390/debug: Fix NULL pointer dereference in debug_info_copy() Mikhail Zaslonko <zaslonko(a)linux.ibm.com> s390/debug: Do not register views for failed static debug areas Nemesa Garg <nemesa.garg(a)intel.com> drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable Myeonghun Pak <mhun512(a)gmail.com> tg3: clean up PHYLIB resources on probe failure Shardul Bankar <shardul.b(a)mpiricsoftware.com> udp: remove a disconnected socket from the 4-tuple hash table Shardul Bankar <shardul.b(a)mpiricsoftware.com> udp: relocate a connected socket in the 4-tuple hash table on re-connect Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Fix dst leak for uncached routes. Pengpeng Hou <hppiscas(a)163.com> net: usb: sr9700: include receive overhead in the length check Ivan Vecera <ivecera(a)redhat.com> dpll: use exact lookup for reference sync pin id Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Prevent rt6_insert_exception() for dying fib6_info. Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Fix memory scaling limitation in SR-IOV mode Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() Ravindra <ravindra(a)intel.com> Bluetooth: btintel_pcie: validate device-supplied DMA indices Hui Peng <benquike(a)gmail.com> Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough Ralf Lici <ralf(a)mandelbit.com> ovpn: reject invalid peer VPN addresses Ralf Lici <ralf(a)mandelbit.com> ovpn: reject multipeer peers without VPN addresses Ralf Lici <ralf(a)mandelbit.com> ovpn: reject duplicate peer VPN addresses Ralf Lici <ralf(a)mandelbit.com> ovpn: always unhash old VPN addresses before rehashing Ralf Lici <ralf(a)mandelbit.com> ovpn: replace bind when clearing stale local source Ralf Lici <ralf(a)mandelbit.com> ovpn: replace bind when learning local endpoint Ralf Lici <ralf(a)mandelbit.com> ovpn: validate peer state before caching UDP dst Ralf Lici <ralf(a)mandelbit.com> ovpn: track UDP socket route key for peer dst cache Ralf Lici <ralf(a)mandelbit.com> ovpn: skip UDP source validation for unspecified addresses Ralf Lici <ralf(a)mandelbit.com> ovpn: preserve IPv6 scope id for netlink peer endpoints Li Youhong <liyouhong(a)kylinos.cn> drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach Benjamin Leggett <benjamin(a)edera.io> drm/virtio: sync shmem backing on guest-bound transfers Dmitry Osipenko <dmitry.osipenko(a)collabora.com> Revert "drm/virtio: Allow importing prime buffers when 3D is enabled" Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: release the GEM object on virtio_gpu_vram_create() errors Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak when drm_gem_handle_create() fails Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget Yuqi Xu <xuyuqiabc(a)gmail.com> bpf: Check params size before reading reserved fields Aamir Ahmed <elb12345(a)hotmail.co.uk> net: usb: catc: bound the RX packet length in catc_rx_done() Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Bound ownership depth through local kptrs and graph roots Yiqi Sun <sunyiqixm(a)gmail.com> sctp: avoid livelock while updating retransmit path Alexander Duyck <alexanderduyck(a)fb.com> eth: fbnic: Handle FW mailbox completions flagged with an error Mike Marciniszyn (Meta) <mike.marciniszyn(a)gmail.com> eth fbnic: Add debugfs hooks for firmware mailbox Mohsin Bashir <mohsin.bashr(a)gmail.com> eth: fbnic: Reuse RX mailbox pages Alexander Duyck <alexanderduyck(a)fb.com> eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox Alexander Duyck <alexanderduyck(a)fb.com> eth: fbnic: reset num_napi when the napi vectors are freed Björn Töpel <bjorn(a)kernel.org> eth: fbnic: Handle maximum standalone channels Kuniyuki Iwashima <kuniyu(a)google.com> ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink(). Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> net: gue: reject invalid REMCSUM offsets Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure Giuseppe Ranieri <giuseppe(a)ranieri.dev> drm/nouveau/disp: don't reject HDMI config on cards without SCDC Francesco Magazzu <postadelmaga(a)gmail.com> drm/nouveau/clk: don't clobber reclock status when restoring volt/fan Dan Carpenter <error27(a)gmail.com> drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: make ocfs2_calc_xattr_init() return void Zeng Heng <zengheng4(a)huawei.com> arm64: io: Reject non-user protection in ioremap_prot() Naman Gulati <namangulati(a)google.com> netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name Julian Anastasov <ja(a)ssi.bg> ipvs: revalidate ihl before icmp_send Karl Mehltretter <kmehltretter(a)gmail.com> netfilter: nft_synproxy: use the family-aware checksum helper Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_queue: hold nfnl mutex in event notifier Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> netfilter: flowtable: publish HW_DEAD after worker is done Linkui Xiao <xiaolinkui(a)kylinos.cn> ipv4: fib: fix data-race and stale genid check around nh->nh_saddr Kumar Kartikeya Dwivedi <memxor(a)gmail.com> libbpf: Reject truncated ldimm64 CO-RE relocations Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Restrict CO-RE poisoning to relocatable instructions Shay Drory <shayd(a)nvidia.com> net/mlx5: devcom, Base component size on linked devices Heyang Tan <thy15333007817(a)163.com> octeontx2-af: use seq_file for rsrc_alloc debugfs Kyle Hendry <khendry(a)reliablecontrols.com> net: pcs: rzn1-miic: Fix config array initialization Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_u32: fix manual hash table handle IDR aliasing Björn Töpel <bjorn(a)kernel.org> eth: fbnic: Fix payload page pool error cleanup Weiming Shi <bestswngs(a)gmail.com> bpf: Skip unsettled links in link iterator Zhiling Zou <zhilinz(a)nebusec.ai> xsk: Use a 32-bit compare in xsk_map_gen_lookup Julian Sun <sunjunchao(a)bytedance.com> fs: avoid repeated scans in evict_inodes() Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Guard PMCW field accesses with dnv check Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix cio_update_schib() to not cache invalid schib Karl Mehltretter <kmehltretter(a)gmail.com> s390/pci/docs: Fix sriov_numvfs attribute name Niklas Schnelle <schnelle(a)linux.ibm.com> docs: s390/pci: Improve and update PCI documentation Bart Van Assche <bvanassche(a)acm.org> scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume() Eva Kurchatova <eva.kurchatova(a)virtuozzo.com> selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode Lee Jones <lee(a)kernel.org> Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump() Christiano Amora <christiano.amora(a)gmail.com> Bluetooth: SMP: reject Security Request over BR/EDR Andre Przywara <andre.przywara(a)arm.com> pinctrl: sunxi: A523: fix voltage withstand encoding ZHOU Jiaxiang <me(a)fxti.xyz> scsi: sd_zbc: Reject disks with too many zones Ran Hongyun <ranhongyun1(a)huawei.com> squashfs: Add dictionary size range check to prevent shift-out-of-bounds Mark Brown <broonie(a)kernel.org> KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP Karl Mehltretter <kmehltretter(a)gmail.com> KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0 Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2 Fuad Tabba <tabba(a)google.com> KVM: arm64: Include VM type when checking VM capabilities in pKVM Fuad Tabba <tabba(a)google.com> KVM: arm64: Fix MTE flag initialization for protected VMs Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic-v3: Fix GICv3 trapping in protected mode Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve() Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: vgic-its: Free the caches when GITS_BASER changes SeungJu Cheon <suunj1331(a)gmail.com> RISC-V: KVM: Fix perf-backed counter accounting across stop and read SeungJu Cheon <suunj1331(a)gmail.com> RISC-V: KVM: Report snapshot write failure to the guest SeungJu Cheon <suunj1331(a)gmail.com> RISC-V: KVM: Preserve firmware counter value across stop/start Zongmin Zhou <zhouzongmin(a)kylinos.cn> KVM: riscv: Fix NACL hfence entry update order Benjamin Tissoires <bentiss(a)kernel.org> HID: bpf: fix __hid_bpf_hw_check_params report length Slawomir Stepien <sst(a)poczta.fm> HID: amd_sfh: Validate PCI BAR size before mapping Sean Anderson <sanderson(a)brivo.com> pinctrl: meson: Fix typo in s4 group name Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> bpf, arm64: set up the frame pointer for the exception callback Geliang Tang <geliang(a)kernel.org> bpf, sockmap: Fix self-redirect copied_seq double-counting Pu Lehui <pulehui(a)huawei.com> bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Register dtor for freeing special fields Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix out-of-bounds read of rtt_min in sock_ops Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev> bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() Jim Mattson <jmattson(a)google.com> KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() Oscar Priego Verdugo <oscar.priegov(a)gmail.com> HID: elecom: fix bus type for M-XGL20DLBK Lovekesh Solanki <lovekeshsolanki00(a)gmail.com> HID: multitouch: Add report ID mismatch quirk for ASUS ROG Z13 Folio Jiayuan Chen <jiayuan.chen(a)linux.dev> tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix divide-by-zero in btf_struct_walk() Sven Schnelle <svens(a)linux.ibm.com> selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc Weiming Shi <bestswngs(a)gmail.com> bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix bpf_skb_change_tail wrt csum partial skbs Steffen Eiden <seiden(a)linux.ibm.com> s390/uv: Prevent potential out-of-bounds read Steffen Eiden <seiden(a)linux.ibm.com> s390/uv: Fix loop condition in uv_find_secrets Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix IRQ injection with SIGP Stop and Store Status Mostafa Saleh <smostafa(a)google.com> remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Add StarFighter HDA SSID Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Limit Star Labs internal mic boost Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Atomize IRQ register read/modify/write ops Wenwu Hou <hwenwur(a)gmail.com> erofs: fix large folio race in erofs_fscache_req_complete Darrick J. Wong <djwong(a)kernel.org> xfs: don't stash removename operations with unknown ftype ------------- Diffstat: Documentation/arch/arm64/booting.rst | 1 + Documentation/arch/s390/pci.rst | 144 +++++--- Makefile | 4 +- arch/arm64/include/asm/el2_setup.h | 9 +- arch/arm64/include/asm/io.h | 3 +- arch/arm64/include/asm/kvm_pkvm.h | 10 +- arch/arm64/kernel/cpu_errata.c | 15 +- arch/arm64/kvm/arm.c | 4 +- arch/arm64/kvm/emulate-nested.c | 2 +- arch/arm64/kvm/hyp/nvhe/pkvm.c | 38 +- arch/arm64/kvm/hyp/nvhe/setup.c | 10 + arch/arm64/kvm/hyp/nvhe/sys_regs.c | 5 + arch/arm64/kvm/hypercalls.c | 3 +- arch/arm64/kvm/mmu.c | 15 +- arch/arm64/kvm/nested.c | 15 +- arch/arm64/kvm/sys_regs.c | 1 + arch/arm64/kvm/vgic/vgic-its.c | 43 ++- arch/arm64/net/bpf_jit_comp.c | 2 + arch/mips/net/bpf_jit_comp32.c | 2 +- arch/mips/net/bpf_jit_comp64.c | 3 +- arch/parisc/include/asm/thread_info.h | 2 +- arch/riscv/kvm/aia_imsic.c | 11 +- arch/riscv/kvm/mmu.c | 2 + arch/riscv/kvm/nacl.c | 20 +- arch/riscv/kvm/vcpu_exit.c | 2 +- arch/riscv/kvm/vcpu_pmu.c | 33 +- arch/riscv/kvm/vcpu_sbi_hsm.c | 4 +- arch/riscv/kvm/vcpu_timer.c | 5 +- arch/s390/crypto/hmac_s390.c | 5 +- arch/s390/include/asm/debug.h | 8 +- arch/s390/kernel/debug.c | 15 +- arch/s390/kernel/uv.c | 8 +- arch/s390/kvm/interrupt.c | 72 ++-- arch/s390/pci/pci_event.c | 7 +- arch/s390/pci/pci_report.c | 32 +- arch/s390/pci/pci_report.h | 4 +- arch/x86/boot/startup/sev-startup.c | 3 +- arch/x86/coco/sev/Makefile | 2 +- arch/x86/coco/sev/core.c | 388 +-------------------- .../asm/sev-internal.h => coco/sev/internal.h} | 32 ++ arch/x86/coco/sev/noinstr.c | 7 +- arch/x86/coco/sev/svsm.c | 362 +++++++++++++++++++ arch/x86/coco/sev/vc-handle.c | 3 +- arch/x86/events/intel/core.c | 79 +++-- arch/x86/events/intel/ds.c | 36 +- arch/x86/kernel/cpu/mce/core.c | 27 +- arch/x86/kvm/pmu.c | 8 - arch/x86/kvm/svm/sev.c | 18 +- arch/x86/kvm/vmx/pmu_intel.c | 3 + arch/x86/pci/fixup.c | 99 ++++++ drivers/ata/libata-scsi.c | 10 +- drivers/bluetooth/btintel_pcie.c | 16 + drivers/bluetooth/btnxpuart.c | 8 +- drivers/dpll/dpll_netlink.c | 3 +- drivers/gpio/gpio-arizona.c | 8 +- drivers/gpio/gpio-tps65219.c | 12 +- drivers/gpio/gpio-zynq.c | 10 +- drivers/gpio/gpiolib-cdev.c | 32 +- drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 1 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 8 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 12 + .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 3 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 3 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c | 62 ++-- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.h | 28 ++ drivers/gpu/drm/amd/display/dc/dml/Makefile | 6 +- drivers/gpu/drm/bridge/samsung-dsim.c | 2 +- drivers/gpu/drm/clients/drm_fbdev_client.c | 28 +- drivers/gpu/drm/clients/drm_log.c | 4 +- drivers/gpu/drm/drm_client_event.c | 20 +- drivers/gpu/drm/drm_fb_helper.c | 24 +- drivers/gpu/drm/drm_file.c | 2 +- drivers/gpu/drm/drm_modeset_helper.c | 6 +- drivers/gpu/drm/i915/display/intel_cursor.c | 7 +- drivers/gpu/drm/i915/display/intel_display_types.h | 2 + drivers/gpu/drm/i915/display/intel_dp_mst.c | 24 +- drivers/gpu/drm/i915/display/intel_dp_mst.h | 2 + drivers/gpu/drm/i915/display/intel_link_bw.c | 3 +- drivers/gpu/drm/i915/display/intel_psr.c | 26 ++ drivers/gpu/drm/i915/display/intel_quirks.c | 37 +- drivers/gpu/drm/i915/display/intel_quirks.h | 2 + drivers/gpu/drm/i915/display/skl_universal_plane.c | 9 +- drivers/gpu/drm/i915/gem/i915_gem_object.c | 2 +- drivers/gpu/drm/i915/i915_driver.c | 6 +- drivers/gpu/drm/imagination/pvr_free_list.c | 15 +- drivers/gpu/drm/imagination/pvr_mmu.c | 19 +- drivers/gpu/drm/imagination/pvr_mmu.h | 2 +- drivers/gpu/drm/imagination/pvr_vm.c | 4 +- drivers/gpu/drm/nouveau/nouveau_bo.c | 3 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 5 +- drivers/gpu/drm/nouveau/nouveau_display.c | 4 +- drivers/gpu/drm/nouveau/nouveau_drm.c | 5 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 2 + drivers/gpu/drm/nouveau/nouveau_sched.c | 2 +- drivers/gpu/drm/nouveau/nouveau_sched.h | 1 + drivers/gpu/drm/nouveau/nouveau_uvmm.c | 13 +- drivers/gpu/drm/nouveau/nvif/vmm.c | 1 + drivers/gpu/drm/nouveau/nvkm/engine/disp/uoutp.c | 3 +- drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c | 23 +- drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c | 2 + drivers/gpu/drm/radeon/radeon_device.c | 4 +- drivers/gpu/drm/virtio/virtgpu_drv.h | 5 + drivers/gpu/drm/virtio/virtgpu_gem.c | 2 +- drivers/gpu/drm/virtio/virtgpu_ioctl.c | 49 ++- drivers/gpu/drm/virtio/virtgpu_prime.c | 2 +- drivers/gpu/drm/virtio/virtgpu_submit.c | 11 +- drivers/gpu/drm/virtio/virtgpu_vq.c | 46 +++ drivers/gpu/drm/virtio/virtgpu_vram.c | 17 +- drivers/gpu/drm/xe/display/xe_display.c | 6 +- drivers/gpu/drm/xe/xe_bo.c | 7 + drivers/gpu/drm/xe/xe_bo.h | 19 + drivers/gpu/drm/xe/xe_hw_engine.c | 27 +- drivers/gpu/drm/xe/xe_vm.c | 21 +- drivers/hid/amd-sfh-hid/amd_sfh_common.h | 4 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 10 + drivers/hid/bpf/hid_bpf_dispatch.c | 12 +- drivers/hid/hid-alps.c | 31 +- drivers/hid/hid-ids.h | 3 + drivers/hid/hid-multitouch.c | 29 +- drivers/hid/hid-quirks.c | 3 +- drivers/hid/wacom_sys.c | 5 +- drivers/i2c/busses/i2c-qcom-geni.c | 38 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/dsa/mt7530-mdio.c | 18 +- drivers/net/dsa/mt7530.c | 3 - drivers/net/ethernet/airoha/airoha_npu.c | 18 +- drivers/net/ethernet/amazon/ena/ena_netdev.c | 2 + drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 3 + drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 3 + drivers/net/ethernet/atheros/atlx/atl1.c | 3 + drivers/net/ethernet/broadcom/genet/bcmgenet.c | 34 +- drivers/net/ethernet/broadcom/tg3.c | 15 +- drivers/net/ethernet/brocade/bna/bnad.c | 24 +- drivers/net/ethernet/cadence/macb_main.c | 14 +- drivers/net/ethernet/freescale/fman/fman.c | 1 + drivers/net/ethernet/google/gve/gve.h | 12 +- drivers/net/ethernet/google/gve/gve_adminq.c | 12 +- drivers/net/ethernet/google/gve/gve_desc_dqo.h | 5 + drivers/net/ethernet/google/gve/gve_ethtool.c | 105 +++--- drivers/net/ethernet/google/gve/gve_main.c | 93 +++-- drivers/net/ethernet/google/gve/gve_tx_dqo.c | 71 +++- drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c | 3 + drivers/net/ethernet/marvell/octeontx2/af/common.h | 45 ++- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 104 ++---- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 6 +- .../ethernet/mellanox/mlx5/core/en/rep/bridge.c | 45 ++- drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c | 3 + .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 4 +- .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 1 - .../net/ethernet/mellanox/mlx5/core/esw/bridge.c | 15 +- .../net/ethernet/mellanox/mlx5/core/esw/bridge.h | 2 + .../net/ethernet/mellanox/mlx5/core/lib/devcom.c | 5 +- drivers/net/ethernet/meta/fbnic/fbnic_csr.h | 5 + drivers/net/ethernet/meta/fbnic/fbnic_debugfs.c | 48 +++ drivers/net/ethernet/meta/fbnic/fbnic_ethtool.c | 13 +- drivers/net/ethernet/meta/fbnic/fbnic_fw.c | 74 +++- drivers/net/ethernet/meta/fbnic/fbnic_fw.h | 2 + drivers/net/ethernet/meta/fbnic/fbnic_pci.c | 18 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 4 +- drivers/net/ethernet/netronome/nfp/crypto/ipsec.c | 3 +- drivers/net/ethernet/spacemit/k1_emac.c | 3 + drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c | 5 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c | 4 +- drivers/net/ethernet/stmicro/stmmac/hwif.h | 2 +- drivers/net/ethernet/stmicro/stmmac/ring_mode.c | 4 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 1 + .../net/ethernet/stmicro/stmmac/stmmac_selftests.c | 109 ++++-- drivers/net/ethernet/ti/netcp_core.c | 2 +- drivers/net/ethernet/wangxun/txgbe/txgbe_fdir.c | 13 +- drivers/net/macsec.c | 84 ++--- drivers/net/ovpn/netlink.c | 108 +++++- drivers/net/ovpn/peer.c | 121 +++++-- drivers/net/ovpn/peer.h | 25 +- drivers/net/ovpn/udp.c | 193 ++++++++-- drivers/net/pcs/pcs-rzn1-miic.c | 3 +- drivers/net/pcs/pcs-xpcs.c | 4 +- drivers/net/phy/micrel.c | 1 + drivers/net/phy/phylink.c | 20 +- drivers/net/usb/catc.c | 15 +- drivers/net/usb/cdc_mbim.c | 5 + drivers/net/usb/lan78xx.c | 2 + drivers/net/usb/sr9700.c | 3 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 9 + drivers/net/vrf.c | 2 - drivers/net/vxlan/vxlan_core.c | 6 +- drivers/nfc/microread/microread.c | 6 +- drivers/nfc/nfcmrvl/fw_dnld.c | 11 +- drivers/nfc/pn533/pn533.c | 14 +- drivers/nfc/pn533/pn533.h | 4 +- drivers/nfc/pn533/usb.c | 4 +- drivers/nfc/pn544/pn544.c | 7 +- drivers/nfc/port100.c | 7 + drivers/nfc/st21nfca/core.c | 12 +- drivers/nfc/st21nfca/i2c.c | 29 +- drivers/nfc/trf7970a.c | 4 +- drivers/nfc/virtual_ncidev.c | 3 +- drivers/pci/of_property.c | 11 +- drivers/pci/setup-bus.c | 23 +- drivers/pinctrl/meson/pinctrl-meson-s4.c | 2 +- drivers/pinctrl/pinctrl-single.c | 3 +- drivers/pinctrl/sunxi/pinctrl-sun55i-a523-r.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sun55i-a523.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sunxi.c | 82 ++++- drivers/pinctrl/sunxi/pinctrl-sunxi.h | 9 + drivers/remoteproc/qcom_q6v5_adsp.c | 8 +- drivers/s390/cio/chp.c | 3 + drivers/s390/cio/cio.c | 11 +- drivers/s390/cio/cio.h | 5 +- drivers/s390/cio/cmf.c | 2 +- drivers/s390/cio/device.c | 9 +- drivers/s390/cio/device_fsm.c | 3 + drivers/s390/cio/device_ops.c | 23 ++ drivers/s390/cio/vfio_ccw_fsm.c | 2 +- drivers/s390/crypto/vfio_ap_ops.c | 18 +- drivers/scsi/libiscsi_tcp.c | 3 + drivers/scsi/megaraid/megaraid_sas_base.c | 4 +- drivers/scsi/sd_zbc.c | 8 +- drivers/thermal/gov_step_wise.c | 10 +- fs/autofs/inode.c | 4 + fs/bpf_fs_kfuncs.c | 4 - fs/erofs/fscache.c | 2 + fs/fs-writeback.c | 25 +- fs/hfsplus/super.c | 1 - fs/inode.c | 11 +- fs/kernfs/mount.c | 4 +- fs/ntfs3/inode.c | 7 +- fs/ocfs2/namei.c | 9 +- fs/ocfs2/xattr.c | 13 +- fs/ocfs2/xattr.h | 8 +- fs/smb/client/cached_dir.c | 32 +- fs/smb/client/smb2inode.c | 4 +- fs/smb/client/smb2ops.c | 28 +- fs/smb/client/smb2pdu.c | 51 ++- fs/squashfs/xz_wrapper.c | 6 +- fs/super.c | 43 +-- fs/xfs/libxfs/xfs_metafile.c | 8 +- fs/xfs/libxfs/xfs_rtrefcount_btree.c | 4 +- fs/xfs/scrub/dir_repair.c | 19 +- fs/xfs/scrub/health.c | 6 +- fs/xfs/scrub/inode.c | 2 +- fs/xfs/scrub/inode_repair.c | 2 +- fs/xfs/scrub/orphanage.c | 6 +- fs/xfs/scrub/repair.c | 21 +- fs/xfs/scrub/scrub.h | 2 +- fs/xfs/scrub/trace.h | 12 +- fs/xfs/xfs_dquot.c | 8 +- fs/xfs/xfs_exchrange.c | 13 +- fs/xfs/xfs_icache.c | 2 +- fs/xfs/xfs_log_recover.c | 13 +- fs/xfs/xfs_qm.c | 10 +- fs/xfs/xfs_refcount_item.c | 8 +- fs/xfs/xfs_rmap_item.c | 8 +- include/drm/drm_client.h | 22 +- include/drm/drm_client_event.h | 12 +- include/drm/drm_fb_helper.h | 8 +- include/linux/bpf_mem_alloc.h | 6 + include/linux/if_vlan.h | 3 + include/linux/rculist.h | 29 ++ include/linux/skbuff.h | 24 +- include/net/gue.h | 19 +- include/net/ip6_route.h | 4 +- include/net/netfilter/nf_conntrack.h | 5 + include/net/nfc/hci.h | 2 +- include/net/nfc/nfc.h | 3 +- include/net/rose.h | 28 +- include/net/tcp.h | 4 +- kernel/bpf/btf.c | 140 +++++--- kernel/bpf/crypto.c | 5 +- kernel/bpf/hashtab.c | 114 +++++- kernel/bpf/memalloc.c | 106 ++++-- kernel/bpf/offload.c | 2 + kernel/bpf/syscall.c | 5 +- kernel/cgroup/cpuset.c | 53 +-- kernel/cgroup/pids.c | 5 + kernel/events/core.c | 17 +- kernel/sched/core.c | 2 +- kernel/sched/ext.c | 7 +- kernel/workqueue.c | 2 +- mm/backing-dev.c | 5 +- mm/damon/core.c | 24 +- mm/damon/vaddr.c | 21 +- mm/hugetlb.c | 41 ++- mm/rmap.c | 23 +- mm/vma.c | 8 + net/8021q/vlan_dev.c | 5 + net/bluetooth/bnep/core.c | 17 +- net/bluetooth/bnep/netdev.c | 8 +- net/bluetooth/hci_conn.c | 14 +- net/bluetooth/hci_sock.c | 20 +- net/bluetooth/iso.c | 7 + net/bluetooth/l2cap_core.c | 10 +- net/bluetooth/mgmt.c | 27 +- net/bluetooth/rfcomm/core.c | 3 +- net/bluetooth/rfcomm/sock.c | 6 +- net/bluetooth/smp.c | 17 + net/bridge/br_mdb.c | 2 + net/bridge/br_stp_bpdu.c | 5 +- net/core/dev.c | 2 +- net/core/filter.c | 46 ++- net/core/skbuff.c | 9 +- net/core/skmsg.c | 4 + net/core/sock_map.c | 1 + net/ipv4/arp.c | 1 + net/ipv4/fib_semantics.c | 13 +- net/ipv4/fou_core.c | 4 + net/ipv4/inet_connection_sock.c | 3 +- net/ipv4/ip_gre.c | 12 + net/ipv4/ipconfig.c | 90 ++--- net/ipv4/tcp_output.c | 3 + net/ipv4/udp.c | 44 ++- net/ipv6/exthdrs_core.c | 3 + net/ipv6/ip6_fib.c | 2 +- net/ipv6/ip6_gre.c | 2 +- net/ipv6/netfilter/ip6t_rpfilter.c | 2 +- net/ipv6/netfilter/ip6t_rt.c | 11 +- net/ipv6/route.c | 12 +- net/ipv6/seg6.c | 4 +- net/llc/llc_c_ac.c | 2 +- net/llc/llc_s_ac.c | 4 + net/llc/llc_sap.c | 8 +- net/mctp/route.c | 2 +- net/mptcp/protocol.c | 2 +- net/netfilter/ipvs/ip_vs_core.c | 6 + net/netfilter/nf_conntrack_netlink.c | 3 +- net/netfilter/nf_flow_table_offload.c | 7 +- net/netfilter/nf_tables_api.c | 18 +- net/netfilter/nfnetlink_queue.c | 8 +- net/netfilter/nft_synproxy.c | 3 +- net/netlink/genetlink.c | 8 +- net/nfc/core.c | 15 +- net/nfc/digital_dep.c | 8 +- net/nfc/llcp.h | 1 + net/nfc/llcp_commands.c | 2 +- net/nfc/llcp_core.c | 173 ++++++--- net/nfc/llcp_sock.c | 67 +++- net/nfc/nci/core.c | 10 +- net/nfc/netlink.c | 7 +- net/nfc/nfc.h | 3 +- net/openvswitch/conntrack.c | 37 +- net/packet/af_packet.c | 104 +++--- net/rds/ib_frmr.c | 11 +- net/rose/rose_in.c | 13 +- net/rose/rose_link.c | 5 + net/rose/rose_route.c | 81 ++++- net/sched/act_api.c | 2 +- net/sched/act_ct.c | 41 ++- net/sched/act_gate.c | 30 +- net/sched/cls_u32.c | 12 +- net/sched/em_text.c | 2 +- net/sched/sch_hfsc.c | 22 ++ net/sched/sch_teql.c | 7 +- net/sctp/associola.c | 15 +- net/sctp/input.c | 7 +- net/sctp/sm_sideeffect.c | 37 +- net/sctp/sm_statefuns.c | 2 + net/smc/smc_core.c | 2 + net/smc/smc_ib.c | 10 +- net/tipc/group.c | 4 +- net/tipc/monitor.c | 3 +- net/tls/tls_sw.c | 6 +- net/xdp/xskmap.c | 2 +- rust/kernel/net/phy.rs | 38 +- security/ipe/eval.c | 12 +- security/ipe/eval.h | 2 +- security/ipe/fs.c | 8 +- security/ipe/hooks.c | 22 +- security/ipe/policy_fs.c | 3 + sound/hda/codecs/realtek/alc269.c | 9 + tools/lib/bpf/libbpf.c | 7 + tools/lib/bpf/relo_core.c | 58 +-- .../testing/selftests/bpf/prog_tests/linked_list.c | 4 +- tools/testing/selftests/cgroup/test_cpuset_prs.sh | 2 + tools/testing/selftests/cgroup/test_memcontrol.c | 2 +- .../ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc | 2 +- tools/testing/selftests/nci/nci_dev.c | 45 ++- virt/kvm/kvm_main.c | 30 +- 382 files changed, 4875 insertions(+), 2189 deletions(-)

2 weeks, 2 days

[PATCH 5.10 000/595] 5.10.271-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.10.271 release. There are 595 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 02 Oct 2026 15:23:04 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.271-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.10.271-rc1 Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: ems_usb: validate CPC message lengths Guangshuo Li <lgs201920130244(a)gmail.com> drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() Rengarajan S <rengarajan.s(a)microchip.com> lan78xx: Enable Auto Speed and Auto Duplex configuration for LAN7801 if NO EEPROM is detected Rengarajan S <rengarajan.s(a)microchip.com> lan78xx: Enable 125 MHz CLK configuration for LAN7801 if NO EEPROM is detected Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: L2CAP: validate frame length before control and FCS access Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: reject out-of-range OCF values Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: validate event length before filtering Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() Myeonghun Pak <mhun512(a)gmail.com> pinctrl: single: free the IRQ on domain creation failure Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> scsi: libiscsi_tcp: Check the data direction of a Data-In PDU Doruk Tan Ozturk <doruk(a)0sec.ai> nfc: port100: reject frames whose declared length exceeds the received data Aamir Ahmed <elb12345(a)hotmail.co.uk> nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() Luxiao Xu <rakukuip(a)gmail.com> nfc: fix use-after-free in nfc_get_local_general_bytes Luxiao Xu <rakukuip(a)gmail.com> netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read Weiming Shi <bestswngs(a)gmail.com> netfilter: ip6t_rpfilter: reject routes without inet6_dev Ming Wang <wangming01(a)loongson.cn> net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist Gajdos Tamás <tamas(a)rimpianto.com> net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Gajdos Tamás <tamas(a)rimpianto.com> net: atl1c: fix soft lockup on out-of-range tpd_cons read Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry Wentao Liang <vulab(a)iscas.ac.cn> net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy() Gajdos Tamás <tamas(a)rimpianto.com> net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Zijie Huang <milkory(a)outlook.com> net: arp: terminate device name before lookup Weiming Shi <bestswngs(a)gmail.com> net/sched: reject IDR error pointers when deleting actions Wentao Liang <vulab(a)iscas.ac.cn> net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() Wei Jie LAW <98lawweijie(a)gmail.com> HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() Junjie Cao <junjie.cao(a)intel.com> HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard Chen Changcheng <chenchangcheng(a)kylinos.cn> HID: alps: fix use-after-free on input2 registration failure Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix gem reference leak in validate_init() Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: fix double-free in nvif_vmm_dtor Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix bridge reference leak in nv1a_ram_new() Guangshuo Li <lgs201920130244(a)gmail.com> drm/nouveau: fix autosuspend cleanup during teardown Dongliang Qin <cccccccccccc777777(a)gmail.com> rds: ib: Clear the sg list when mapping an MR fails Zixuan Chai <petalzu987(a)gmail.com> llc: reserve device headroom for allocated frames Ridham Khurana <khurana.ridham222(a)gmail.com> gpio: zynq: fix runtime PM leak on request error path Wentao Liang <vulab(a)iscas.ac.cn> gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() Hui Peng <benquike(a)gmail.com> ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST Norbert Szetei <norbert(a)doyensec.com> ipv6: do not let ipv6_find_hdr() return an offset past the packet end Wentao Liang <vulab(a)iscas.ac.cn> fsl/fman: Fix clk reference leak in read_dts_node() Pavankumar Kondeti <pavan.kondeti(a)oss.qualcomm.com> workqueue: Fix NULL current_pwq deref in flush dependency check Hui Peng <benquike(a)gmail.com> fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT Dairui Zhang <zhangdairui(a)gmail.com> af_packet: fix integer overflow in prb_calc_retire_blk_tmo() Aohan Mei <henrymei(a)tencent.com> sctp: discard the rest of the packet on a stale-cookie error Eric Dumazet <edumazet(a)google.com> tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow Mario Limonciello <mario.limonciello(a)amd.com> x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 Eric Dumazet <edumazet(a)google.com> net: preserve skb_end_offset() in skb_unclone_keeptruesize() Eric Dumazet <edumazet(a)google.com> net: add skb_set_end_offset() helper Eric Dumazet <edumazet(a)google.com> net: add and use skb_unclone_keeptruesize() helper Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase Pablo Neira Ayuso <pablo(a)netfilter.org> rculist: add list_splice_rcu() for private lists Hui Peng <benquike(a)gmail.com> autofs: fix sbi->pipe file reference leak in autofs_kill_sb() Eric Dumazet <edumazet(a)google.com> vlan: ensure sufficient headroom in vlan_dev_hard_header() Eric Dumazet <edumazet(a)google.com> net/sched: sch_teql: fix shadowed err in __teql_resolve() Eric Dumazet <edumazet(a)google.com> bridge: check llc_mac_hdr_init() return value in br_send_bpdu() Eric Dumazet <edumazet(a)google.com> llc: fix skb UAF and leaks on llc_mac_hdr_init() failure Ginger Li <ginger.jzllee(a)gmail.com> tipc: Fix a data race on mon->peer_cnt in mon_timeout() Norbert Szetei <norbert(a)doyensec.com> net: xps: reject an out of range traffic class Sanghyun Park <sanghyun.park.cnu(a)gmail.com> vxlan: use one headroom snapshot for neighbour replies Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> ip_gre: Reject enabling collect metadata through changelink Shihuang Liu <shlomojune6(a)gmail.com> net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() Victor Nogueira <victor(a)mojatatu.com> net/sched: act_gate: budget the per-entry list in get_fill_size Nam Cao <namcao(a)linutronix.de> hrtimers: Introduce hrtimer_setup() to replace hrtimer_init() Nam Cao <namcao(a)linutronix.de> hrtimers: Add missing hrtimer_init() trace points Baowen Zheng <baowen.zheng(a)corigine.com> flow_offload: rename offload functions with offload instead of flow Deepanshu Kartikey <kartikey406(a)gmail.com> nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix slab-out-of-bounds reads when logging service names Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix -ENOMEM on connect with zero-length service name Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate ISO15693 inventory length Cong Nguyen <congnt264(a)gmail.com> nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure Lee Jones <lee(a)kernel.org> nfc: llcp: Fix race condition in accept_queue lifecycle Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate received frame size Colin Ian King <colin.i.king(a)gmail.com> nfc: st21nfca: remove redundant assignment to variable i Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: nfcmrvl: validate helper command length before pull Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K Andrew Halaney <ahalaney(a)redhat.com> net: stmmac: Remove some unnecessary void pointers Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Capture all packets for vlan checks Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Check the dev->features for S-TAG offload testing Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Support running selftests on DSA conduits Emil Tsalapatis <emil(a)etsalapatis.com> bpf: Fix bpf_sock context code generation bui duc phuc <phucduc.bui(a)gmail.com> net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error Myeonghun Pak <mhun512(a)gmail.com> tg3: clean up PHYLIB resources on probe failure Pengpeng Hou <hppiscas(a)163.com> net: usb: sr9700: include receive overhead in the length check Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() Hui Peng <benquike(a)gmail.com> Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak when drm_gem_handle_create() fails Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget Aamir Ahmed <elb12345(a)hotmail.co.uk> net: usb: catc: bound the RX packet length in catc_rx_done() Yiqi Sun <sunyiqixm(a)gmail.com> sctp: avoid livelock while updating retransmit path Kuniyuki Iwashima <kuniyu(a)google.com> ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink(). Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> net: gue: reject invalid REMCSUM offsets Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure Francesco Magazzu <postadelmaga(a)gmail.com> drm/nouveau/clk: don't clobber reclock status when restoring volt/fan Dan Carpenter <dan.carpenter(a)oracle.com> drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: make ocfs2_calc_xattr_init() return void Julian Anastasov <ja(a)ssi.bg> ipvs: revalidate ihl before icmp_send Karl Mehltretter <kmehltretter(a)gmail.com> netfilter: nft_synproxy: use the family-aware checksum helper Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_queue: hold nfnl mutex in event notifier Scott Mitchell <scott.k.mitch1(a)gmail.com> netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> netfilter: flowtable: publish HW_DEAD after worker is done Vlad Buslov <vladbu(a)nvidia.com> netfilter: flowtable: allow unidirectional rules Zhiling Zou <zhilinz(a)nebusec.ai> xsk: Use a 32-bit compare in xsk_map_gen_lookup Julian Sun <sunjunchao(a)bytedance.com> fs: avoid repeated scans in evict_inodes() Karl Mehltretter <kmehltretter(a)gmail.com> s390/pci/docs: Fix sriov_numvfs attribute name Niklas Schnelle <schnelle(a)linux.ibm.com> docs: s390/pci: Improve and update PCI documentation Randy Dunlap <rdunlap(a)infradead.org> Documentation: s390: correct spelling Niklas Schnelle <schnelle(a)linux.ibm.com> s390/pci: expose UID uniqueness guarantee Christiano Amora <christiano.amora(a)gmail.com> Bluetooth: SMP: reject Security Request over BR/EDR Ran Hongyun <ranhongyun1(a)huawei.com> squashfs: Add dictionary size range check to prevent shift-out-of-bounds Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix out-of-bounds read of rtt_min in sock_ops Sven Schnelle <svens(a)linux.ibm.com> selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc Weiming Shi <bestswngs(a)gmail.com> bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix bpf_skb_change_tail wrt csum partial skbs Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix IRQ injection with SIGP Stop and Store Status NeilBrown <neilb(a)suse.de> SUNRPC: lock against ->sock changing during sysfs read Vitaly Kuznetsov <vkuznets(a)redhat.com> HID: hyperv: streamline driver probe to avoid devres issues Jinjie Ruan <ruanjinjie(a)huawei.com> spi: zynqmp-gqspi: Use devm_spi_alloc_host() Benoît Sevens <bsevens(a)google.com> HID: logitech-hidpp: fix race condition when accessing stale stack pointer Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/adreno: fix autosuspend cleanup during teardown Rik van Riel <riel(a)surriel.com> wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver Zhao Li <enderaoelyther(a)gmail.com> wifi: mwifiex: validate action frame fixed fields Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: mwifiex: validate scan response extents Doruk Tan Ozturk <doruk(a)0sec.ai> wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length Shengzhuo Wei <me(a)cherr.cc> wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST Shengzhuo Wei <me(a)cherr.cc> wifi: p54: validate curve data length in the calibration curve converters Tianchu Chen <flynnnchen(a)tencent.com> wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() Ali Ahmet Memis <ali(a)iusegentoo.com> wifi: wilc1000: fix out-of-bounds read in P2P public action frames Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: wlcore: release runtime PM ref on regdomain config failure Tianchu Chen <flynnnchen(a)tencent.com> wifi: rsi: fix heap OOB write on key removal Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: libertas_tf: fix UAF in lbtf_free_adapter() Stanislaw Gruszka <stf_xl(a)wp.pl> wifi: iwlegacy: fix broadcast stations deallocation Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: brcmsmac: fix UAF in brcms_free_timer() Wentao Liang <vulab(a)iscas.ac.cn> watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: digicolor: Avoid division by zero Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83793) release probe data through kref Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: zero ff_effect before compat copy in input_ff_effect_from_user Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Raphaël Larocque <rlarocque(a)disroot.org> Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - check btns_desc->package.count Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - fix MS Surface Pro 11 probe failure Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() Chris Sommers <chris.sommers(a)icloud.com> Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: evdev - zero absinfo before partial copy in EVIOCSABS Alexei Turtanov <9alexei9(a)gmail.com> Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Reset command and data lines on failed tuning Xu Rao <raoxu(a)uniontech.com> mmc: spi: reset bytes_xfered before retrying CRC failures Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt Felix Gu <ustc.gu(a)gmail.com> mmc: sdio_uart: fix xmit_fifo leak when the port table is full Myeonghun Pak <mhun512(a)gmail.com> mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Fan Wu <fanwu01(a)zju.edu.cn> mmc: mxcmmc: cancel data work and watchdog on remove Zhu Ling <zhuling0805(a)qq.com> mmc: core: Fix OF node reference leak on card add failure Christian Göttsche <cgzones(a)googlemail.com> selinux: always fill AVC decision in avc_has_perm_noaudit() Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> IB/mlx4: Fix use-after-free on pkey sysfs registration failure Shengzhuo Wei <me(a)cherr.cc> i2c: imx: release DMA channels on probe error Shengzhuo Wei <me(a)cherr.cc> i2c: at91: release DMA channels on remove and probe error Maoyi Xie <maoyixie.tju(a)gmail.com> keys: translate request_key_auth pid for the reading procfs instance Mark Amirkan <markdamirkan(a)gmail.com> net/packet: avoid truncating TPACKET_V3 private size Mark Amirkan <markdamirkan(a)gmail.com> net/packet: clear RX owner on VNET header error Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: hhf: cap hh_flows_limit at change time Zhiling Zou <zhilinz(a)nebusec.ai> ipv6: xfrm: use full sockets in local error paths Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix non-atomic read of DMA position registers Nicolas Thibert <nithibert(a)gmail.com> Bluetooth: btusb: fix NXP IW610 composite device handling Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_and() mask generation Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_write() casting Wyatt Feng <wf.kernel.dev(a)gmail.com> net: xfrm: reject unrepresentable espintcp transport headers Zhiling Zou <zhilinz(a)nebusec.ai> openvswitch: avoid reallocating confirmed conntrack labels Jeffin Philip <jeffinphilip14(a)gmail.com> RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() Quanye Yang <quanyeyang(a)proton.me> RDMA/ucma: Serialize join and leave on copy_to_user failure Inbal Schussheim <inbal.lipshtat(a)mail.huji.ac.il> tcp: exclude old ACKs from tcp fast path Aohan Mei <henrymei(a)tencent.com> rds: ib: use rds_conn_drop() on protocol version mismatch Niklas Cassel <cassel(a)kernel.org> ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY Jeremy Nyberg <slickstretch3.0(a)gmail.com> Input: xpad - fix PDP Marvel Xbox 360 controller Erich Sartison <byt.es(a)mailbox.org> Input: xpad - add support for Victrix Pro BFG Controller hackyzh002 <hackyzh002(a)gmail.com> drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 hpp.iscas <hppiscas(a)163.com> Input: eeti_ts - publish the OF module alias Dmitriy Okunev <dokunevdmitriy(a)gmail.com> net: mvpp2: prevent buffer overflow in page_pool allocation Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Ack RX overrun interrupt correctly Eric Dumazet <edumazet(a)google.com> net: lock the socket in sock_gettstamp() Yige Jiang <yigejiang86(a)gmail.com> net: netsec: fix device_node reference leak on phy_np Sasha Levin <sashal(a)kernel.org> ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments Shivaprasad G Bhat <sbhat(a)linux.ibm.com> powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure Eric Dumazet <edumazet(a)google.com> drop_monitor: fix out-of-bounds write in reset_per_cpu_data() Eric Dumazet <edumazet(a)google.com> drop_monitor: synchronize tracepoint unregistration on error path Tzung-Bi Shih <tzungbi(a)kernel.org> Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown Baineng Shou <shoubaineng(a)gmail.com> dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() Eric Dumazet <edumazet(a)google.com> tcp: do not let tcp_rmem be set below 4096 Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). Karl Mehltretter <kmehltretter(a)gmail.com> wifi: brcmfmac: fix lost 802.1x TX completion wakeup Hohyun Sim <tlaghgus0425(a)korea.ac.kr> net: fddi: skfp: fix NULL deref when setting the MAC address while down Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation Filipe Manana <fdmanana(a)suse.com> btrfs: tree-checker: print dev extent offset in error message Slavin Liu <bolin.liu(a)seu.edu.cn> ALSA: hda: trace PCM open only after assigning a stream Zihan Xi <zihanx(a)nebusec.ai> wifi: virt_wifi: don't transfer operstate before register Karl Mehltretter <kmehltretter(a)gmail.com> Input: trackpoint - fix the inertia attribute name in the ABI document Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> ALSA: pcm: set timer->private_data before registering the PCM timer Karl Mehltretter <kmehltretter(a)gmail.com> keys: fix lost wakeup when reaping a dead key type Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: hold reference on ct until flow is released Theodor Arsenij Larionov Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_nat: fully initialise new_addr in netmap setup Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> RDMA/siw: Bound fragmented header copies by the remaining length Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't access the TSF of a down interface Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't filter by BSS type when removing stale entries Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: only group hidden BSSes with beacon entries Shivank Garg <shivankg(a)amd.com> dmaengine: wait for RCU readers before releasing dma_device Shivank Garg <shivankg(a)amd.com> dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() Shivank Garg <shivankg(a)amd.com> dmaengine: Fix device kref underflow in dma_chan_put() Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> dma-coherent: report a failed reserved memory assignment Chen-Yu Tsai <wenst(a)chromium.org> dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask Christoph Hellwig <hch(a)lst.de> dma-mapping: simplify dma_init_coherent_memory Orgad Shaneh <orgads(a)gmail.com> MIPS: Octeon: apply USB FDT fixups also when USB is modular Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: cadence_master: wait and cancel cdns->work before clock stop Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: check IP header size in cfg80211_classify8021d() Carolina Jubran <cjubran(a)nvidia.com> IB/IPoIB: Avoid restoring OPER_UP after multicast flush Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short association responses Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short beacon and probe responses Peng Hao <flyingpenghao(a)gmail.com> wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path Mariano Baragiola <mbaragiola(a)linux.com> wifi: virt_wifi: free skb when disconnected Ruoyu Wang <ruoyuw560(a)gmail.com> dmaengine: sprd: Fix runtime PM reference leak in probe Li RongQing <lirongqing(a)baidu.com> RDMA/mad: Fix receive buffer leak when PKey enforcement fails Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/isert: wait for deferred control PDU completions before releasing the connection Max Gurtovoy <mgurtovoy(a)nvidia.com> scsi: target: iscsi: Rename iscsi_cmd to iscsit_cmd Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> scsi: target: iscsi: Redo iscsit_check_session_usage_count() return code Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> scsi: target: iscsi: Avoid in_interrupt() usage in iscsit_check_session_usage_count() Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> scsi: target: iscsi: Avoid in_interrupt() usage in iscsit_close_session() Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/iser: reject a remote invalidation of an unregistered direction Max Gurtovoy <mgurtovoy(a)nvidia.com> IB/iser: Use iser_fr_desc as registration context Max Gurtovoy <mgurtovoy(a)nvidia.com> IB/iser: Remove iser_reg_data_sg helper function Max Gurtovoy <mgurtovoy(a)nvidia.com> IB/iser: Align coding style across driver Xixin Liu <liuxixin(a)kylinos.cn> clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate Xixin Liu <liuxixin(a)kylinos.cn> firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Cleanup siw_accept Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Introduce siw_cep_set_free_and_put Pengpeng Hou <pengpeng(a)iscas.ac.cn> ARM: socfpga: select the PL310 erratum 753970 workaround Kyle Zeng <kylebot(a)openai.com> xfrm: fix compat ALLOCSPI request use-after-free Sabrina Dubroca <sd(a)queasysnail.net> xfrm: avoid RCU warnings around the per-netns netlink socket Sabrina Dubroca <sd(a)queasysnail.net> xfrm: add extack to verify_one_alg, verify_auth_trunc, verify_aead Sabrina Dubroca <sd(a)queasysnail.net> xfrm: add extack support to verify_newsa_info Sabrina Dubroca <sd(a)queasysnail.net> xfrm: add extack to verify_sec_ctx_len Sabrina Dubroca <sd(a)queasysnail.net> xfrm: propagate extack to all netlink doit handlers Ido Schimmel <idosch(a)nvidia.com> ipv6: Honor oif when choosing nexthop for locally generated traffic Ido Schimmel <idosch(a)nvidia.com> ipv6: Select best matching nexthop object in fib6_table_lookup() Arash Golgol <arash.golgol(a)gmail.com> media: video-i2c: fix buffer queue ordering Sasha Levin <sashal(a)kernel.org> Revert "perf cs-etm: Flush thread stacks after decoder reset" Sasha Levin <sashal(a)kernel.org> Revert "perf cs-etm: Avoid truncating AUX buffer sizes to int" Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: check smcd_v2_ext_offset when receiving proposal msg Jens Axboe <axboe(a)kernel.dk> sunvdc: fix -EIO issue due to lack of retries Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> ARM: ensure interrupts are enabled in __do_user_fault() Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> ARM: fix branch predictor hardening Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> ARM: fix hash_name() fault Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix deadlock Sasha Levin <sashal(a)kernel.org> Reapply "bluetooth/l2cap: sync sock recv cb and release" Darrick J. Wong <djwong(a)kernel.org> iomap: iomap: fix memory corruption when recording errors during writeback Paolo Abeni <pabeni(a)redhat.com> mptcp: close race between scheduler and state change Paolo Abeni <pabeni(a)redhat.com> mptcp: avoid unneeded actions on subflow reset Florian Westphal <fw(a)strlen.de> mptcp: hold mptcp socket before calling tcp_done Eric Biggers <ebiggers(a)kernel.org> netfilter: nft_set_pipapo_avx2: add missing vzeroupper Eric Biggers <ebiggers(a)kernel.org> crypto: sun8i-ce - Remove crypto_rng interface Eric Biggers <ebiggers(a)kernel.org> crypto: sun8i-ss - Remove crypto_rng interface Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> fou: Fix use-after-free in fou_create() Weiming Shi <bestswngs(a)gmail.com> net: appletalk: fix NULL pointer dereference in aarp_send_ddp() Weiming Shi <bestswngs(a)gmail.com> i2c: smbus: reject oversized block transfers in the common path Kazuki Hanai <hnkz.64(a)gmail.com> ALSA: us122l: Prevent write upgrades for read mappings Eric Dumazet <edumazet(a)google.com> ipv6: mcast: extend RCU protection in igmp6_send() Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: syncookies: remember the request backup flag Joe Damato <joe(a)dama.to> bnxt_en: Propagate RX ring init failures in bnxt_init_nic() Joe Damato <joe(a)dama.to> bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() Haotian Zhang <vulab(a)iscas.ac.cn> media: v4l2-h264: Fix memcmp() size in B1 reference list comparison Michael Bommarito <michael.bommarito(a)gmail.com> media: hevc: add bounded tile-count helpers Vishnu Razdan <vrazdan(a)openai.com> hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS Cong Nguyen <congnt264(a)gmail.com> hwmon: (applesmc) fix key backlight workqueue leak on register failure Harald Freudenberger <freude(a)linux.ibm.com> s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm Nagamani PV <nagamani(a)linux.ibm.com> s390/qeth: allow bridgeport queries despite OS_MISMATCH leixiang <leixiang(a)kylinos.cn> KVM: PPC: Book3S HV: Set irqfd->producer only on success Kyle Zeng <kylebot(a)openai.com> ipvs: reject invalid states in connection template sync records Zihan Xi <zihanx(a)nebusec.ai> ipv4: fib: bound automatic table ID allocation Zhiling Zou <zhilinz(a)nebusec.ai> ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink Weiming Shi <bestswngs(a)gmail.com> fbdev: vfb: defer cleanup until the last reference Ilya Maximets <i.maximets(a)ovn.org> netfilter: report NLM_F_DUMP_FILTERED when all is filtered out Norbert Szetei <norbert(a)doyensec.com> net: openvswitch: fix use-after-free of the flow table mask array Fourie Zhang <littleddfu(a)gmail.com> net: mpls: clear inner_protocol when the last label is popped Johan Hovold <johan(a)kernel.org> net: hso: fix TIOCMIWAIT race Thorsten Blum <thorsten.blum(a)linux.dev> drm/i915: Fix memory leak in query_perf_config_list() Jann Horn <jannh(a)google.com> exec: do_close_on_exec() before taking exec_update_lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> cpufreq: initialize policy rwsem before sysfs publication Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: zero-initialize policy cpumask before sysfs publication Runyu Xiao <runyu.xiao(a)seu.edu.cn> ASoC: sti: initialize IRQ lock before requesting IRQ Tianchu Chen <flynnnchen(a)tencent.com> ASoC: sprd: validate compress buffer sizes against fixed allocations Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Free histogram the var ref when its initialization fails Ido Schimmel <idosch(a)nvidia.com> tunnels: Drop stale dst when building an ICMP error for PMTUD Ali Ahmet Memis <ali(a)iusegentoo.com> ufs: validate cylinder group metadata before caching it Ali Ahmet Memis <ali(a)iusegentoo.com> ufs: create the root dentry after loading cylinder metadata James Hilliard <james.hilliard1(a)gmail.com> watchdog: sunxi_wdt: preserve boot-enabled watchdog Harry Wentland <harry.wentland(a)amd.com> dm/amdgpu: fix malformed link_settings debugfs output Roman Prucha <zorgan.roman(a)gmail.com> ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough Zihan Xi <zihanx(a)nebusec.ai> ipv6: fix fib6 walker UAF on seq stop Shivaprasad G Bhat <sbhat(a)linux.ibm.com> powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver Eric Dumazet <edumazet(a)google.com> macvlan: inherit needed_headroom and needed_tailroom from lowerdev Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands Dmitry Bogdanov <d.bogdanov(a)yadro.com> scsi: target: iscsi: Handle abort for WRITE_PENDING cmds Sasha Levin <sashal(a)kernel.org> Revert "bluetooth/l2cap: sync sock recv cb and release" WenTao Liang <vulab(a)iscas.ac.cn> drm/amd/display: set new_stream to NULL after release Stian Halseth <stian(a)itx.no> sunvdc: unmap LDC cookies when the descriptor send fails Greg Marsden <greg.marsden(a)oracle.com> net/rds: fix tcp stream corruption with large pages Linus Walleij <linus.walleij(a)linaro.org> net/rds: Pass a pointer to virt_to_page() Aamir Ahmed <elb12345(a)hotmail.co.uk> net: hinic: fix mailbox segment buffer overflow Li Youhong <liyouhong(a)kylinos.cn> net: sun4i-emac: fix missing of_node_put() for phy_node Kuniyuki Iwashima <kuniyu(a)google.com> net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: free emptied bucket on filter move Thibault Ferrante <thibault.ferrante(a)canonical.com> selftests/powerpc/tm: Fix tcheck() reading uninitialised CR value Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors Cong Nguyen <congnt264(a)gmail.com> hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count RX descriptors for freeq refill Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count RX drops once per frame Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: No mapping is a dropped rx Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count dropped frames as NAPI work Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Finish RX updates before NAPI completion Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Fix budget accounting Andrew Stellman <astellman(a)stellman-greene.com> virtio-pci: return IRQ_HANDLED after non-zero ISR Yu Zhang <yuz08559(a)gmail.com> vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx Jia Jia <physicalmtea(a)gmail.com> virtio_console: do not free control-out buffers on remove Xianting Tian <xianting.tian(a)linux.alibaba.com> virtio-console: call scheduler when we free unused buffs hpp.iscas <hppiscas(a)163.com> ASoC: mt6351: Publish the OF module alias Florian Westphal <fw(a)strlen.de> netfilter: ip6_tables: set F_PROTO when proto value is nonzero Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: cope with concurrent instance destruction hpp.iscas <hppiscas(a)163.com> ASoC: Intel: SST: Publish the PCI module aliases hpp.iscas <hppiscas(a)163.com> ASoC: bcm: bcm63xx: Publish the OF module aliases Edward Adam Davis <eadavis(a)sina.com> ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: ets: clamp quantum in parse and fallback paths Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: drr: clamp quantum in change class Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: pie: clamp psched_mtu in pie_drop_early Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: hhf: clamp quantum in change and init paths Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sfq: clamp quantum in change path Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: fq_pie: clamp quantum in change path Eric Dumazet <edumazet(a)google.com> net_sched: sch_fq_pie: implement lockless fq_pie_dump() Yael Chemla <ychemla(a)nvidia.com> net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Fix ETS zero BW reporting when one TC holds 100% Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5e: Fix setting RS FEC after remapping Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/kexec_file: Use inclusive range checks in add_usable_mem() Jamal Hadi Salim <jhs(a)mojatatu.com> net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations Seungwon Bae <qotmddnjs(a)ajou.ac.kr> vxlan: reject dynamic fdb entries that reference a nexthop id Jason Winter <jjx(a)live.nl> net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow Jakub Kicinski <kuba(a)kernel.org> net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size Jakub Kicinski <kuba(a)kernel.org> net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size Eric Dumazet <edumazet(a)google.com> bonding: use skb_cow_head() in bond_do_alb_xmit() and rlb_arp_xmit() Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix NULL-ptr-deref in btf_var_show() Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix NULL-ptr-deref when showing a void BTF type Takashi Iwai <tiwai(a)suse.de> ALSA: caiaq: Fix potential double-free at error path Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: reconfigure RX packet parser table in stmmac_hw_setup() after reset Allison Henderson <achender(a)kernel.org> net/rds: don't let rds_conn_shutdown() consume a concurrent drop Håkon Bugge <haakon.bugge(a)oracle.com> net/rds: acquire the fastpath locks in rds_conn_shutdown() Allison Henderson <achender(a)kernel.org> net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() Gerd Rausch <gerd.rausch(a)oracle.com> net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown Allison Henderson <achender(a)kernel.org> net/rds: clear cp_flags bits individually in rds_conn_path_reset() Allison Henderson <achender(a)kernel.org> net/rds: use clear_bit_unlock() in release_refill() Allison Henderson <achender(a)kernel.org> net/rds: use wq_has_sleeper() in release_in_xmit() Eric Dumazet <edumazet(a)google.com> bonding: do not clear curr_active_slave prematurely when releasing all slaves Henry Martin <bsdhenrymartin(a)gmail.com> tracing/probes: Fix use-after-free on field name/type of events with multiple probes Joas Antonio dos Santos <joasantonio108(a)gmail.com> netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() Kyle Zeng <kylebot(a)openai.com> ipvs: fix reversed sequence option serialization Qu Wenruo <wqu(a)suse.com> btrfs: do not force reloc root creation during qgroup_account_snapshot() Josef Bacik <josef(a)toxicpanda.com> btrfs: return an error from btrfs_record_root_in_trans Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Program the MSP FIFO watermarks Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Request the MSP MMIO resource Arnd Bergmann <arnd(a)arndb.de> ASoC: ux500: remove stedma40 references Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Validate MSP DAI configuration Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Correct MSP frame and bit clock setup Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Propagate MSP setup errors Arnd Bergmann <arnd(a)arndb.de> ASoC: ux500: remove platform_data support Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Fix MSP stream lifecycle handling Guanghui Yang <3497809730(a)qq.com> btrfs: detach failed sprout device from transaction update list wangdicheng <wangdicheng(a)kylinos.cn> ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits Hui Su <sh_def(a)163.com> staging: fbtft: make dirty_lock IRQ-safe Kuniyuki Iwashima <kuniyu(a)google.com> af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). Eric Dumazet <edumazet(a)google.com> ipv6: sr: restore network header before routing and forwarding Qingfang Deng <qingfang.deng(a)linux.dev> ppp: ppp_async: simplify tty disc_data access Jiri Slaby <jirislaby(a)kernel.org> tty: make tty_ldisc_ops::hangup return void Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Validate and program TDM slots correctly Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Correct digital interface format setup Mark Brown <broonie(a)kernel.org> ASoC: ab8500: Update to modern clocking terminology Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Repair the DAPM capture graph Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Reset the audio block before configuring it Gongwei Li <ligongwei(a)kylinos.cn> Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan Colin Ian King <colin.i.king(a)gmail.com> OPP: of: Fix potential multiplication overflow when calculating freq James Nugraha <aslan.jnn(a)gmail.com> net: amd-xgbe: discard rx packets with bad FCS Henry Martin <bsdhenrymartin(a)gmail.com> sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration Xin Long <lucien.xin(a)gmail.com> sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: size the RTM_GETACTION reply from the actions Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: budget all shared attributes in notify skbs Hongfu Li <lihongfu(a)kylinos.cn> selftests/cgroup: Fix cg_run_in_subcgroups ignoring arg parameter Dan Carpenter <error27(a)gmail.com> drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Jad Keskes <inasj268(a)gmail.com> EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation Xie Yuanbin <xieyuanbin1(a)huawei.com> ARM: 9484/1: enable interrupts when unhandled user faults are triggered Sasha Levin <sashal(a)kernel.org> Revert "Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU" Sasha Levin <sashal(a)kernel.org> Revert "Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU" Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Reject monmaps advertising zero monitors Vlatko Kosturjak <kost(a)linux.hr> ppp_async: drop the errored frame instead of resetting its headroom Geert Uytterhoeven <geert+renesas(a)glider.be> clk: at91: pmc: #undef field_{get,prep}() before definition Rudi Heitbaum <rudi(a)heitbaum.com> ASoC: rt5645: Perform the initial jack detect at probe Jia Jia <physicalmtea(a)gmail.com> vhost-scsi: flush backend after device ioctls Robert Abrahamse <denobyte2(a)gmail.com> ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) Jiale Yao <yaojiale02(a)163.com> Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame Deepanshu Kartikey <kartikey406(a)gmail.com> wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() Li Qiang <liqiang01(a)kylinos.cn> cifs: validate idmap key payload length Vaibhav Jain <vaibhav(a)linux.ibm.com> powerpc/pseries: Ensure vpa,slb_shadow & dtl are unregistered during crash Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: pass the return value of skb_checksum_help() Madhavender Singh <madhav(a)disroot.org> ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx Minhong He <heminhong(a)kylinos.cn> phonet: check register_netdevice_notifier() error in phonet_device_init() Pengpeng Hou <pengpeng(a)iscas.ac.cn> drm/gma500: return errors from Oaktrail HDMI I2C reads Ibrahim Hashimov <security(a)auditcode.ai> wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO Georgi Valkov <gvalkov(a)gmail.com> wifi: mwifiex: replace one-element arrays with flexible array members Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: bound aligned TLV advance in FW parser Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized Pu Hu <hupu(a)transsion.com> arm64: kprobes: Allow reentering kprobes while single-stepping Yu Peng <pengyu(a)kylinos.cn> arm64: fixmap: Allow 256K early_ioremap() at any offset Tao Cui <cuitao(a)kylinos.cn> blk-cgroup: fix leaks and online flag on radix_tree_insert failure Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix an off-by-1 boundary check Filipe Manana <fdmanana(a)suse.com> btrfs: fix reloc root cleanup in merge_reloc_roots() Filipe Manana <fdmanana(a)suse.com> btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: rsi: validate beacon length before fixed buffer copy Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: mark the rcu locked areas properly Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: libipw: fix key index receive bound checks Liang Hao <haohlliang(a)gmail.com> gpio: dwapb: Mask interrupts at hardware initialization Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: libertas: reject short monitor TX frames Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate deauth frame length before reason access Corentin Labbe <clabbe(a)baylibre.com> wifi: ralink: RT2X00: init EEPROM properly Pengpeng Hou <pengpeng(a)iscas.ac.cn> ALSA: usb-audio: caiaq: validate EP1 reply lengths Yousef Alhouseen <alhouseenyousef(a)gmail.com> xen/gntalloc: validate grant count before allocation Farhad Alemi <farhad.alemi(a)berkeley.edu> freevxfs: don't BUG() on unknown typed-extent type Yousef Alhouseen <alhouseenyousef(a)gmail.com> xen/front-pgdir-shbuf: free grant reference head on errors Gustavo Kenji Mendonça Kaneko <kaneko.dev(a)pm.me> drm/arm/komeda: fix error handling for clk_prepare_enable() and callers Florian Westphal <fw(a)strlen.de> netfilter: nf_conntrack_expect: zero at allocation time Gustavo Kenji Mendonça Kaneko <kaneko.dev(a)pm.me> drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend Haoxiang Li <haoxiang_li2024(a)163.com> fbdev: pm2fb: unwind WC setup on probe failure Adriana Stancu <adriana(a)arista.com> rtc: bq32000: add delay between RTC reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> net: au1000: move free_irq out of the close-time spinlocked section Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/sysfs: Use kstrtobool() to parse the ROM attribute input Tommy Huang <tommy_huang(a)aspeedtech.com> rtc: aspeed: add AST2700 compatible Samuel Moelius <sam.moelius(a)trailofbits.com> f2fs: validate inline dentry name lengths before conversion Chen Cheng <chencheng(a)fnnas.com> md/raid5: let stripe batch bm_seq comparison wrap-safe Hans Zhang <18255117159(a)163.com> PCI: mediatek: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: rockchip: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: altera: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: iproc: Protect root bus removal with rescan lock Jean-Louis Colaco <jean-louis.colaco(a)orange.fr> ALSA: usb-audio: Add quirk for YAMAHA CDS3000 Tobias Deiminger <tobias.deiminger(a)linutronix.de> leds: pca9532: Don't stop blinking for non-zero brightness Yousef Alhouseen <alhouseenyousef(a)gmail.com> leds: uleds: Return -EFAULT on copy_to_user() failure Galen Hassen <rwekyes(a)gmail.com> ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 Rob Herring (Arm) <robh(a)kernel.org> gpio: pisosr: Read "ngpios" as u32 Arnd Bergmann <arnd(a)arndb.de> scsi: bfa: Reduce kernel stack usage in bfa_fcs_lport_fdmi_build_portattr_block() Zhang Tianci <zhangtianci.1997(a)bytedance.com> fuse: set ff->flock only on success Rosen Penev <rosenp(a)gmail.com> sparc: Disable compat support with LLD Alice Mikityanska <alice(a)isovalent.com> net/sched: act_csum: don't mangle UDP tunnel GSO packets Agalakov Daniil <ade(a)amicon.ru> e1000e: limit endianness conversion to boundary words Raf Dickson <rafdog35(a)gmail.com> vsock: use sk_acceptq_is_full() helper in all transports Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Rosen Penev <rosenp(a)gmail.com> sparc64: uprobes: add missing break bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: L2CAP: validate connectionless PSM length Potin Lai <potin.lai.pt(a)gmail.com> hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems Yuho Choi <dbgh9129(a)gmail.com> sctp: Unwind address notifier registration on failure Nikolay Metchev <nikolaymetchev(a)gmail.com> platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table Xu Rao <raoxu(a)uniontech.com> ata: libata-pmp: add JMicron JMS562 quirk Kory Maincent <kory.maincent(a)bootlin.com> hwmon: (adt7462) Add of_match_table to support devicetree Jiajia Liu <liujiajia(a)kylinos.cn> wifi: mt76: transform aspm_conf for pci_disable_link_state Gleb Sonichev <sonichev555(a)gmail.com> platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table Rosen Penev <rosenp(a)gmail.com> net: ibm: emac: mal: fix potential system hang in mal_remove() Al Viro <viro(a)zeniv.linux.org.uk> configfs_depend_prep(): pass configfs_dirent instead of dentry Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Add request-pool slack for delayed recycling ZhengYuan Huang <gality369(a)gmail.com> btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() Rosen Penev <rosenp(a)gmail.com> netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() Ruoyu Wang <ruoyuw560(a)gmail.com> ALSA: es18xx: check control allocation before private data setup Maoyi Xie <maoyixie.tju(a)gmail.com> hsr: broadcast netlink notifications in the device's net namespace Guangshuo Li <lgs201920130244(a)gmail.com> net: cpsw_new: unregister devlink on port registration failure Dawei Feng <dawei.feng(a)seu.edu.cn> bpf: NUL-terminate replaced sysctl value Li RongQing <lirongqing(a)baidu.com> RDMA/mlx5: Fix state and counter desync on loopback enable failure Thiyagarajan Pandiyan <thiyagarajan(a)aerlync.com> wifi: nl80211: Increase ie_len size to prevent truncated IEs in new peer notifications Rosen Penev <rosenp(a)gmail.com> ipmi: si: Use platform_get_irq_optional() to retrieve interrupt Andrei Faleichyk <andrei.faleichyk(a)noogadev.com> ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP Michael Walle <mwalle(a)kernel.org> clk: keystone: don't cache clock rate Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: Prevent queuing new commands if xhci is inaccessible David Yang <mmyangfl(a)gmail.com> net: dsa: sja1105: flower: reject cross-chip redirect Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: seq: oss: Reject reads that cannot fit the next event Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: codecs: rk3328: Use managed GPIO and clock helpers Simon Xue <xxm(a)rock-chips.com> iommu/rockchip: disable fetch dte time limit Wentao Liang <vulab(a)iscas.ac.cn> net: qrtr: fix node refcount leak on ctrl packet alloc failure liyouhong <liyouhong(a)kylinos.cn> ata: ahci: fail probe if BAR too small for claimed ports Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive Rosen Penev <rosenp(a)gmail.com> net: ibm: emac: Reserve VLAN header in MJS limit Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: switch to non-devm request_threaded_irq() Rik van Riel <riel(a)surriel.com> perf/ftrace: Fix WARNING in __unregister_ftrace_function Osama Abdelkader <osama.abdelkader(a)gmail.com> mmc: davinci: fix mmc_add_host order in probe Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: only handle alert events when the peripheral is attached Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Complete coredump handling Alexandre Courbot <acourbot(a)nvidia.com> scripts: modpost: detect and report truncated buf_printf() output Viacheslav Dubeyko <slava(a)dubeyko.com> hfs: rework hfsplus_readdir() logic ikaros <void0red(a)gmail.com> ACPICA: add boundary checks in two places ikaros <void0red(a)gmail.com> ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() Weiming Shi <bestswngs(a)gmail.com> ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() ikaros <void0red(a)gmail.com> ACPICA: Add validation for node in acpi_ns_build_normalized_path() ikaros <void0red(a)gmail.com> ACPICA: Add package limit checks in parser functions ikaros <void0red(a)gmail.com> ACPICA: validate handler object type in two places ikaros <void0red(a)gmail.com> ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() ikaros <void0red(a)gmail.com> ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) ikaros <void0red(a)gmail.com> ACPICA: Prevent adding invalid references ikaros <void0red(a)gmail.com> ACPICA: validate byte_count in acpi_ps_get_next_package_length() ikaros <void0red(a)gmail.com> ACPICA: add boundary checks in acpi_ps_get_next_field() ikaros <void0red(a)gmail.com> ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() ikaros <void0red(a)gmail.com> ACPICA: Fix condition check in acpi_ps_parse_loop() Jeremy Klarenbeek <jeremy.klarenbeek99(a)gmail.com> drm/amd/pm/si: Fix updating clock limits from power states Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: addrconf: fix temp address generation after prefix deprecation Uwe Küchler <uwe(a)kuechler.org> ALSA: usb-audio: Add quirk for Novation Mininova Mostafa Saleh <smostafa(a)google.com> irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed Stepan Ionichev <sozdayvek(a)gmail.com> iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind Rosen Penev <rosenp(a)gmail.com> mips: cps: Assemble jr.hb with an R2 ISA level Dario Binacchi <dario.binacchi(a)amarulasolutions.com> drm/panel: simple: Add AM-1280800W8TZQW-T00H Daniel Lezcano <daniel.lezcano(a)oss.qualcomm.com> thermal/drivers/tegra/soctherma: Switch to devm cooling device registration Adrian Ng Ho Yin <adrian.ho.yin.ng(a)altera.com> clk: socfpga: agilex: implement l3_main_free_clk Heiko Carstens <hca(a)linux.ibm.com> s390/zcore: Removed unused variables Jiayuan Chen <jiayuan.chen(a)linux.dev> rds: annotate data-race around rs_seen_congestion Maoyi Xie <maoyixie.tju(a)gmail.com> rds: filter RDS_INFO_* getsockopt by caller's netns Chenguang Zhao <zhaochenguang(a)kylinos.cn> netlabel: fix IPv6 unlabeled address add error handling Venkat Rao Bagalkote <venkat88(a)linux.ibm.com> char/nvram: Remove redundant nvram_mutex Christian Marangi <ansuelsmth(a)gmail.com> usb: host: add ARCH_AIROHA in XHCI MTK dependency Marco Felsch <m.felsch(a)pengutronix.de> serial: 8250: fix possible ISR soft lockup Stepan Ionichev <sozdayvek(a)gmail.com> usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log Oliver Neukum <oneukum(a)suse.com> usb: core: hcd: fix possible deadlock in rh control transfers Adrian Wowk <dev(a)adrianwowk.com> usbip: vhci_hcd: fix NULL deref in status_show_vhci Christoph Hellwig <hch(a)lst.de> isofs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> omfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> hpfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> jfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> qnx4: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> minix: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> bfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> affs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> befs: handle set_blocksize failures Allison Henderson <achender(a)kernel.org> net/rds: Don't sleep inside rds_ib_conn_path_shutdown Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: make cl->quantum lockless Eric Dumazet <edumazet(a)google.com> net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() Jan Volckaert <janvolck(a)gmail.com> net: usb: qmi_wwan: add MeiG SRM813Q Yury Norov <ynorov(a)nvidia.com> bitfield: wire __bf_shf to __builtin_ctzll Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size Leonardo Bras <leo.bras(a)arm.com> arm64/daifflags: Make local_daif_*() helpers __always_inline Pierre Barre <pierre(a)barre.sh> 9p: invalidate readdir buffer on seek Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usx2y: Drain pending US-428 pipe-4 output commands Joonwon Kang <joonwonkang(a)google.com> mailbox: Make mbox_send_message() return error code when tx fails Chenguang Zhao <zhaochenguang(a)kylinos.cn> RDMA/mlx5: Use QP port when decoding responder CQEs Alessandro Baldi <baldovic(a)virgilio.it> media: imon: Add iMON VFD HID OEM v1.2 key mappings Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-ecc - add support for atecc608b Lukas Wunner <lukas(a)wunner.de> crypto: ecc - Unbreak the build on arm with CONFIG_KASAN_STACK=y Kumar Meiyappan <kumar.meiyappan(a)microchip.com> scsi: pm8001: Reject non-fatal dump when controller is crashed Kumar Meiyappan <kumar.meiyappan(a)microchip.com> scsi: pm8001: Reject firmware update in fatal error state Viacheslav Dubeyko <slava(a)dubeyko.com> hfsplus: rework hfsplus_readdir() logic Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Fix CRC open failure during active rendering Stepan Ionichev <sozdayvek(a)gmail.com> mmc: davinci: avoid NULL deref of host->data in IRQ handler Ethan Nelson-Moore <enelsonmoore(a)gmail.com> ASoC: ti: omap3pandora: update board check to use DT compatible Geert Uytterhoeven <geert+renesas(a)glider.be> clk: renesas: cpg-mssr: Add number of clock cells check Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> media: em28xx-video: fix missing res_free() on init_usb_xfer failure Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: enable .rmu_disable() for 6320 family Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: fix number of g1 interrupts for 6320 family Zhaoyang Yu <2426767509(a)qq.com> media: dm1105: fix missing error check for dma_alloc_coherent Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Set tb->root_switch to NULL when domain is stopped Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Keep the domain reference while processing hotplug Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() Riccardo Boninsegna <rboninsegna2(a)gmail.com> media: rc: mceusb: Add support for 04eb:e033 Pengpeng Hou <pengpeng(a)iscas.ac.cn> soundwire: validate DT compatible before parsing it Danielle Ratson <danieller(a)nvidia.com> bridge: Do not suppress ARP probes and DAD NS unconditionally Marco Elver <elver(a)google.com> kcsan: Silence -Wmaybe-uninitialized when calling __kcsan_check_access() Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: always allow transmitting null-data on TXQs Viacheslav Dubeyko <slava(a)dubeyko.com> hfsplus: fix issue of direct writes beyond end-of-file Lukas Wunner <lukas(a)wunner.de> PCI: Stop setting cached power state to 'unknown' on unbind Hirokazu Honda <hiroh(a)chromium.org> tee: optee: Allow MT_NORMAL_TAGGED shared memory Goldwyn Rodrigues <rgoldwyn(a)suse.de> ima: return error early if file xattr cannot be changed Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate write errors in generic mixer put callbacks Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: atomically update mac addresses ------------- Diffstat: .../ABI/testing/sysfs-devices-platform-trackpoint | 2 +- Documentation/driver-api/serial/tty.rst | 2 +- Documentation/networking/ip-sysctl.rst | 2 + Documentation/s390/pci.rst | 138 +++-- Documentation/s390/vfio-ccw.rst | 2 +- Makefile | 4 +- arch/arm/mach-socfpga/Kconfig | 2 +- arch/arm/mm/alignment.c | 4 + arch/arm/mm/fault.c | 82 ++- arch/arm64/include/asm/daifflags.h | 10 +- arch/arm64/include/asm/fixmap.h | 6 +- arch/arm64/include/asm/kprobes.h | 6 + arch/arm64/include/asm/percpu.h | 16 +- arch/arm64/kernel/probes/kprobes.c | 23 +- arch/mips/cavium-octeon/octeon-platform.c | 4 +- arch/mips/kernel/cps-vec.S | 6 + arch/powerpc/kernel/eeh_driver.c | 2 - arch/powerpc/kernel/iommu.c | 2 +- arch/powerpc/kexec/file_load_64.c | 2 +- arch/powerpc/kvm/book3s_hv.c | 4 +- arch/powerpc/kvm/book3s_hv_uvmem.c | 5 +- arch/powerpc/platforms/pseries/kexec.c | 13 +- arch/s390/crypto/aes_s390.c | 16 +- arch/s390/kvm/interrupt.c | 72 +-- arch/s390/pci/pci_sysfs.c | 9 + arch/sparc/Kconfig | 1 + arch/sparc/kernel/uprobes.c | 1 + arch/x86/pci/fixup.c | 99 ++++ block/blk-cgroup.c | 4 +- crypto/Makefile | 5 + drivers/acpi/acpica/dsmethod.c | 43 ++ drivers/acpi/acpica/evhandler.c | 11 + drivers/acpi/acpica/exoparg3.c | 2 +- drivers/acpi/acpica/nsnames.c | 6 + drivers/acpi/acpica/nsprepkg.c | 7 + drivers/acpi/acpica/nsxfname.c | 4 + drivers/acpi/acpica/psargs.c | 134 ++++- drivers/acpi/acpica/psloop.c | 30 +- drivers/acpi/acpica/psparse.c | 14 + drivers/acpi/acpica/utcopy.c | 10 +- drivers/acpi/acpica/utresrc.c | 30 ++ drivers/ata/ahci.c | 22 + drivers/ata/libahci.c | 15 +- drivers/ata/libata-pmp.c | 7 +- drivers/block/sunvdc.c | 26 +- drivers/bluetooth/btmtksdio.c | 4 +- drivers/bluetooth/btusb.c | 23 +- drivers/bluetooth/hci_mrvl.c | 3 +- drivers/char/ipmi/ipmi_si_platform.c | 5 +- drivers/char/nvram.c | 16 +- drivers/char/virtio_console.c | 22 +- drivers/clk/at91/pmc.h | 2 + drivers/clk/clk-scpi.c | 2 +- drivers/clk/keystone/sci-clk.c | 8 + drivers/clk/renesas/renesas-cpg-mssr.c | 3 + drivers/clk/socfpga/clk-agilex.c | 2 + drivers/cpufreq/cpufreq.c | 6 +- drivers/crypto/allwinner/Kconfig | 16 - drivers/crypto/allwinner/sun8i-ce/Makefile | 1 - drivers/crypto/allwinner/sun8i-ce/sun8i-ce-core.c | 54 -- drivers/crypto/allwinner/sun8i-ce/sun8i-ce-prng.c | 164 ------ drivers/crypto/allwinner/sun8i-ce/sun8i-ce.h | 29 -- drivers/crypto/allwinner/sun8i-ss/Makefile | 1 - drivers/crypto/allwinner/sun8i-ss/sun8i-ss-core.c | 39 -- drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c | 175 ------- drivers/crypto/allwinner/sun8i-ss/sun8i-ss.h | 23 - drivers/crypto/atmel-ecc.c | 3 + drivers/dma/dmaengine.c | 10 +- drivers/dma/mmp_pdma.c | 2 +- drivers/dma/sprd-dma.c | 3 +- drivers/dma/sun6i-dma.c | 9 +- drivers/dma/ti/k3-udma-glue.c | 5 +- drivers/dma/xilinx/xilinx_dma.c | 26 +- drivers/edac/edac_device_sysfs.c | 11 +- drivers/firmware/arm_scmi/base.c | 15 +- drivers/firmware/arm_scpi.c | 4 +- drivers/gpio/gpio-arizona.c | 8 +- drivers/gpio/gpio-dwapb.c | 17 + drivers/gpio/gpio-pisosr.c | 4 +- drivers/gpio/gpio-zynq.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 3 +- drivers/gpu/drm/amd/amdgpu/atom.c | 9 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1 + .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crc.c | 7 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 20 +- drivers/gpu/drm/amd/pm/powerplay/si_dpm.c | 31 +- drivers/gpu/drm/arm/display/komeda/komeda_dev.c | 6 +- drivers/gpu/drm/arm/display/komeda/komeda_drv.c | 14 +- drivers/gpu/drm/arm/malidp_drv.c | 22 +- drivers/gpu/drm/drm_atomic_uapi.c | 13 +- drivers/gpu/drm/gma500/oaktrail_hdmi_i2c.c | 21 +- drivers/gpu/drm/i915/i915_query.c | 4 +- drivers/gpu/drm/msm/adreno/adreno_gpu.c | 2 + drivers/gpu/drm/msm/hdmi/hdmi_phy.c | 8 +- drivers/gpu/drm/nouveau/nouveau_drm.c | 5 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 2 + drivers/gpu/drm/nouveau/nvif/vmm.c | 1 + drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c | 23 +- drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c | 2 + drivers/gpu/drm/panel/panel-simple.c | 28 + drivers/gpu/drm/virtio/virtgpu_display.c | 2 +- drivers/gpu/drm/virtio/virtgpu_gem.c | 2 +- drivers/gpu/drm/virtio/virtgpu_ioctl.c | 2 +- drivers/hid/hid-alps.c | 6 +- drivers/hid/hid-hyperv.c | 58 ++- drivers/hid/hid-ids.h | 3 + drivers/hid/hid-logitech-hidpp.c | 10 +- drivers/hid/hid-quirks.c | 1 + drivers/hid/wacom_sys.c | 5 +- drivers/hwmon/adt7462.c | 8 + drivers/hwmon/applesmc.c | 7 +- drivers/hwmon/aspeed-pwm-tacho.c | 4 +- drivers/hwmon/gpio-fan.c | 5 +- drivers/hwmon/pmbus/lm25066.c | 60 +-- drivers/hwmon/pmbus/pmbus_core.c | 4 +- drivers/hwmon/w83791d.c | 1 + drivers/hwmon/w83793.c | 4 +- drivers/i2c/busses/i2c-at91-core.c | 3 + drivers/i2c/busses/i2c-at91-master.c | 12 +- drivers/i2c/busses/i2c-at91.h | 1 + drivers/i2c/busses/i2c-imx.c | 2 + drivers/i2c/i2c-core-smbus.c | 12 + drivers/iio/accel/mma8452.c | 19 +- drivers/iio/adc/qcom-spmi-iadc.c | 18 +- drivers/infiniband/core/iwpm_util.c | 9 +- drivers/infiniband/core/mad.c | 3 +- drivers/infiniband/core/ucma.c | 7 +- drivers/infiniband/hw/mlx4/sysfs.c | 4 + drivers/infiniband/hw/mlx5/cq.c | 3 +- drivers/infiniband/hw/mlx5/main.c | 11 + drivers/infiniband/sw/siw/siw_cm.c | 75 ++- drivers/infiniband/sw/siw/siw_qp_rx.c | 2 +- drivers/infiniband/ulp/ipoib/ipoib.h | 7 + drivers/infiniband/ulp/ipoib/ipoib_ib.c | 12 +- drivers/infiniband/ulp/ipoib/ipoib_multicast.c | 16 +- drivers/infiniband/ulp/iser/iscsi_iser.c | 72 +-- drivers/infiniband/ulp/iser/iscsi_iser.h | 8 +- drivers/infiniband/ulp/iser/iser_initiator.c | 49 +- drivers/infiniband/ulp/iser/iser_memory.c | 87 ++-- drivers/infiniband/ulp/iser/iser_verbs.c | 56 +- drivers/infiniband/ulp/isert/ib_isert.c | 86 ++-- drivers/infiniband/ulp/isert/ib_isert.h | 4 +- drivers/input/evdev.c | 2 + drivers/input/input-compat.c | 2 + drivers/input/joystick/xpad.c | 3 +- drivers/input/keyboard/atkbd.c | 8 + drivers/input/misc/soc_button_array.c | 16 +- drivers/input/mouse/synaptics.c | 8 + drivers/input/rmi4/rmi_driver.c | 13 + drivers/input/rmi4/rmi_smbus.c | 10 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/input/serio/serport.c | 3 +- drivers/input/touchscreen/eeti_ts.c | 1 + drivers/iommu/rockchip-iommu.c | 8 + drivers/irqchip/irq-gic-v3-its.c | 1 + drivers/leds/leds-pca9532.c | 8 +- drivers/leds/uleds.c | 11 +- drivers/mailbox/mailbox.c | 6 +- drivers/md/raid5.c | 2 +- drivers/media/i2c/video-i2c.c | 5 +- drivers/media/pci/dm1105/dm1105.c | 7 +- drivers/media/rc/imon.c | 4 + drivers/media/rc/mceusb.c | 2 + drivers/media/usb/em28xx/em28xx-video.c | 4 +- drivers/media/v4l2-core/v4l2-h264.c | 3 +- drivers/mmc/core/bus.c | 2 +- drivers/mmc/core/sdio_uart.c | 3 + drivers/mmc/host/davinci_mmc.c | 16 +- drivers/mmc/host/mmc_spi.c | 1 + drivers/mmc/host/mxcmmc.c | 4 + drivers/mmc/host/sdhci-of-aspeed.c | 5 +- drivers/mmc/host/sdhci_am654.c | 4 +- drivers/mmc/host/sh_mmcif.c | 3 +- drivers/net/bonding/bond_alb.c | 19 +- drivers/net/bonding/bond_main.c | 4 +- drivers/net/can/slcan.c | 3 +- drivers/net/can/usb/ems_usb.c | 43 ++ drivers/net/dsa/bcm_sf2_cfp.c | 2 + drivers/net/dsa/mv88e6xxx/chip.c | 22 +- drivers/net/dsa/sja1105/sja1105_flower.c | 4 +- drivers/net/ethernet/allwinner/sun4i-emac.c | 2 + drivers/net/ethernet/amd/au1000_eth.c | 3 +- drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 3 +- drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 3 + drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 3 + drivers/net/ethernet/atheros/atlx/atl1.c | 3 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 16 +- drivers/net/ethernet/broadcom/tg3.c | 4 + drivers/net/ethernet/cortina/gemini.c | 79 +-- drivers/net/ethernet/freescale/fman/fman.c | 1 + drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c | 3 + drivers/net/ethernet/huawei/hinic/hinic_hw_mbox.c | 4 +- drivers/net/ethernet/ibm/emac/core.c | 3 +- drivers/net/ethernet/ibm/emac/mal.c | 6 +- drivers/net/ethernet/intel/e1000e/ethtool.c | 19 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 20 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/en/port.c | 15 +- drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 2 +- .../mellanox/mlx5/core/eswitch_offloads_termtbl.c | 7 +- drivers/net/ethernet/socionext/netsec.c | 2 + drivers/net/ethernet/stmicro/stmmac/chain_mode.c | 10 +- drivers/net/ethernet/stmicro/stmmac/dwmac100_dma.c | 4 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c | 12 +- drivers/net/ethernet/stmicro/stmmac/dwxgmac2.h | 4 +- .../net/ethernet/stmicro/stmmac/dwxgmac2_descs.c | 6 +- drivers/net/ethernet/stmicro/stmmac/enh_desc.c | 11 +- drivers/net/ethernet/stmicro/stmmac/hwif.h | 32 +- drivers/net/ethernet/stmicro/stmmac/norm_desc.c | 8 +- drivers/net/ethernet/stmicro/stmmac/ring_mode.c | 14 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 8 + .../net/ethernet/stmicro/stmmac/stmmac_selftests.c | 106 +++- drivers/net/ethernet/ti/cpsw_new.c | 4 +- drivers/net/ethernet/ti/netcp_core.c | 2 +- drivers/net/fddi/skfp/skfddi.c | 3 +- drivers/net/macvlan.c | 4 + drivers/net/ppp/ppp_async.c | 90 +--- drivers/net/ppp/ppp_synctty.c | 3 +- drivers/net/slip/slip.c | 3 +- drivers/net/usb/catc.c | 15 +- drivers/net/usb/cdc_mbim.c | 5 + drivers/net/usb/cx82310_eth.c | 1 + drivers/net/usb/hso.c | 2 +- drivers/net/usb/lan78xx.c | 7 +- drivers/net/usb/qmi_wwan.c | 2 + drivers/net/usb/sr9700.c | 3 +- drivers/net/vxlan/vxlan_core.c | 17 +- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 2 + .../broadcom/brcm80211/brcmsmac/mac80211_if.c | 4 + drivers/net/wireless/intel/ipw2x00/libipw_rx.c | 10 +- drivers/net/wireless/intel/iwlegacy/common.c | 2 +- drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 13 +- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 2 +- drivers/net/wireless/intersil/p54/eeprom.c | 22 +- drivers/net/wireless/mac80211_hwsim.c | 6 +- drivers/net/wireless/marvell/libertas/tx.c | 7 + drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/fw.h | 18 +- drivers/net/wireless/marvell/mwifiex/join.c | 8 +- drivers/net/wireless/marvell/mwifiex/pcie.c | 2 +- drivers/net/wireless/marvell/mwifiex/scan.c | 54 +- drivers/net/wireless/marvell/mwifiex/sta_cmd.c | 2 +- drivers/net/wireless/marvell/mwifiex/util.c | 10 +- drivers/net/wireless/mediatek/mt76/pci.c | 8 +- drivers/net/wireless/microchip/wilc1000/cfg80211.c | 14 + drivers/net/wireless/microchip/wilc1000/wlan.c | 9 + drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2800pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt61pci.c | 2 +- drivers/net/wireless/rsi/rsi_91x_hal.c | 8 + drivers/net/wireless/rsi/rsi_91x_mgmt.c | 8 +- drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/virt_wifi.c | 4 +- drivers/nfc/microread/microread.c | 6 +- drivers/nfc/nfcmrvl/fw_dnld.c | 11 +- drivers/nfc/pn533/pn533.c | 14 +- drivers/nfc/pn533/pn533.h | 4 +- drivers/nfc/pn533/usb.c | 4 +- drivers/nfc/pn544/pn544.c | 7 +- drivers/nfc/port100.c | 7 + drivers/nfc/st21nfca/core.c | 12 +- drivers/nfc/st21nfca/i2c.c | 33 +- drivers/opp/of.c | 2 +- drivers/pci/controller/pcie-altera.c | 2 + drivers/pci/controller/pcie-iproc.c | 2 + drivers/pci/controller/pcie-mediatek.c | 2 + drivers/pci/controller/pcie-rockchip-host.c | 2 + drivers/pci/pci-driver.c | 10 +- drivers/pci/pci-sysfs.c | 11 +- drivers/pci/quirks.c | 3 + drivers/pinctrl/pinctrl-single.c | 3 +- drivers/platform/x86/dell-laptop.c | 9 + drivers/platform/x86/intel-hid.c | 7 + drivers/rtc/rtc-aspeed.c | 1 + drivers/rtc/rtc-bq32k.c | 9 + drivers/s390/char/zcore.c | 8 +- drivers/s390/cio/device_ops.c | 2 + drivers/s390/net/qeth_l2.h | 3 +- drivers/s390/net/qeth_l2_main.c | 26 +- drivers/s390/net/qeth_l2_sys.c | 7 +- drivers/scsi/bfa/bfa_fcs_lport.c | 2 +- drivers/scsi/libiscsi_tcp.c | 3 + drivers/scsi/pm8001/pm8001_ctl.c | 8 + drivers/scsi/pm8001/pm80xx_hwi.c | 7 + drivers/soundwire/bus.c | 4 + drivers/soundwire/cadence_master.c | 7 + drivers/soundwire/slave.c | 4 +- drivers/spi/spi-zynqmp-gqspi.c | 18 +- drivers/staging/fbtft/fbtft-core.c | 9 +- drivers/target/iscsi/cxgbit/cxgbit.h | 8 +- drivers/target/iscsi/cxgbit/cxgbit_ddp.c | 4 +- drivers/target/iscsi/cxgbit/cxgbit_target.c | 34 +- drivers/target/iscsi/iscsi_target.c | 185 +++---- drivers/target/iscsi/iscsi_target.h | 16 +- drivers/target/iscsi/iscsi_target_configfs.c | 14 +- drivers/target/iscsi/iscsi_target_datain_values.c | 18 +- drivers/target/iscsi/iscsi_target_datain_values.h | 12 +- drivers/target/iscsi/iscsi_target_device.c | 2 +- drivers/target/iscsi/iscsi_target_device.h | 4 +- drivers/target/iscsi/iscsi_target_erl0.c | 32 +- drivers/target/iscsi/iscsi_target_erl0.h | 8 +- drivers/target/iscsi/iscsi_target_erl1.c | 42 +- drivers/target/iscsi/iscsi_target_erl1.h | 20 +- drivers/target/iscsi/iscsi_target_erl2.c | 20 +- drivers/target/iscsi/iscsi_target_erl2.h | 8 +- drivers/target/iscsi/iscsi_target_nego.c | 2 +- drivers/target/iscsi/iscsi_target_seq_pdu_list.c | 34 +- drivers/target/iscsi/iscsi_target_seq_pdu_list.h | 10 +- drivers/target/iscsi/iscsi_target_tmr.c | 38 +- drivers/target/iscsi/iscsi_target_tmr.h | 8 +- drivers/target/iscsi/iscsi_target_util.c | 77 +-- drivers/target/iscsi/iscsi_target_util.h | 50 +- drivers/tee/optee/call.c | 3 +- drivers/thermal/tegra/soctherm.c | 6 +- drivers/thunderbolt/tb.c | 6 +- drivers/thunderbolt/xdomain.c | 13 +- drivers/tty/serial/8250/8250_port.c | 7 + drivers/usb/core/hcd.c | 14 +- drivers/usb/gadget/udc/goku_udc.c | 3 +- drivers/usb/host/Kconfig | 2 +- drivers/usb/host/xhci-ring.c | 6 + drivers/usb/host/xhci.c | 4 + drivers/usb/usbip/vhci_sysfs.c | 52 +- drivers/vhost/scsi.c | 3 +- drivers/vhost/vdpa.c | 12 +- drivers/video/fbdev/pm2fb.c | 1 + drivers/video/fbdev/vfb.c | 11 +- drivers/virtio/virtio_pci_common.c | 4 +- drivers/watchdog/digicolor_wdt.c | 13 +- drivers/watchdog/sp5100_tco.c | 6 +- drivers/watchdog/sunxi_wdt.c | 45 +- drivers/xen/gntalloc.c | 13 +- drivers/xen/xen-front-pgdir-shbuf.c | 12 +- fs/9p/vfs_dir.c | 12 + fs/affs/affs.h | 5 - fs/affs/super.c | 6 +- fs/autofs/inode.c | 4 + fs/befs/linuxvfs.c | 3 +- fs/bfs/inode.c | 3 +- fs/btrfs/relocation.c | 47 +- fs/btrfs/transaction.c | 16 +- fs/btrfs/tree-checker.c | 2 +- fs/btrfs/volumes.c | 8 +- fs/cifs/cifsacl.c | 3 + fs/configfs/dir.c | 12 +- fs/exec.c | 22 +- fs/f2fs/inline.c | 7 + fs/freevxfs/vxfs_bmap.c | 3 +- fs/fuse/file.c | 3 +- fs/hfs/catalog.c | 9 - fs/hfs/dir.c | 28 +- fs/hfs/hfs.h | 3 +- fs/hfs/hfs_fs.h | 2 - fs/hfs/inode.c | 4 - fs/hfsplus/catalog.c | 11 - fs/hfsplus/dir.c | 28 +- fs/hfsplus/hfsplus_fs.h | 5 +- fs/hfsplus/inode.c | 40 +- fs/hfsplus/super.c | 2 - fs/hpfs/super.c | 3 +- fs/inode.c | 11 +- fs/iomap/buffered-io.c | 2 +- fs/isofs/inode.c | 3 +- fs/jfs/super.c | 3 +- fs/minix/inode.c | 3 +- fs/ocfs2/namei.c | 9 +- fs/ocfs2/xattr.c | 13 +- fs/ocfs2/xattr.h | 8 +- fs/omfs/inode.c | 6 +- fs/qnx4/inode.c | 3 +- fs/squashfs/xz_wrapper.c | 6 +- fs/ufs/cylinder.c | 10 + fs/ufs/super.c | 17 +- include/keys/request_key_auth-type.h | 2 +- include/linux/bitfield.h | 2 +- include/linux/hrtimer.h | 21 +- include/linux/kcsan-checks.h | 6 +- include/linux/mailbox_controller.h | 2 + include/linux/platform_data/asoc-ux500-msp.h | 20 - include/linux/rculist.h | 29 ++ include/linux/skbuff.h | 26 + include/linux/tty_ldisc.h | 2 +- include/media/v4l2-hevc.h | 41 ++ include/net/cfg80211.h | 2 +- include/net/gue.h | 19 +- include/net/netfilter/nf_conntrack.h | 5 + include/net/netfilter/nf_flow_table.h | 1 + include/net/netns/xfrm.h | 2 +- include/net/nfc/hci.h | 2 +- include/net/nfc/nfc.h | 3 +- include/net/pkt_cls.h | 6 +- include/target/iscsi/iscsi_target_core.h | 34 +- include/target/iscsi/iscsi_transport.h | 92 ++-- kernel/bpf/btf.c | 19 +- kernel/bpf/cgroup.c | 1 + kernel/dma/coherent.c | 79 ++- kernel/time/hrtimer.c | 103 ++-- kernel/trace/trace_event_perf.c | 12 +- kernel/trace/trace_events_hist.c | 2 +- kernel/trace/trace_probe.c | 48 +- kernel/trace/trace_probe.h | 2 + kernel/workqueue.c | 2 +- net/8021q/vlan_dev.c | 5 + net/appletalk/aarp.c | 5 + net/batman-adv/distributed-arp-table.c | 65 ++- net/batman-adv/types.h | 2 +- net/bluetooth/bnep/core.c | 17 +- net/bluetooth/bnep/netdev.c | 8 +- net/bluetooth/hci_sock.c | 20 +- net/bluetooth/l2cap_core.c | 31 +- net/bluetooth/l2cap_sock.c | 13 +- net/bluetooth/rfcomm/core.c | 6 + net/bluetooth/rfcomm/sock.c | 6 +- net/bluetooth/smp.c | 17 + net/bridge/br_arp_nd_proxy.c | 16 +- net/bridge/br_multicast.c | 2 - net/bridge/br_stp_bpdu.c | 5 +- net/ceph/mon_client.c | 2 +- net/core/dev.c | 4 +- net/core/drop_monitor.c | 4 +- net/core/filter.c | 33 +- net/core/skbuff.c | 81 +-- net/core/sock.c | 9 +- net/hsr/hsr_netlink.c | 9 +- net/ieee802154/6lowpan/core.c | 2 +- net/ipv4/arp.c | 1 + net/ipv4/fib_rules.c | 4 +- net/ipv4/fou_core.c | 6 +- net/ipv4/ip_gre.c | 12 + net/ipv4/ip_tunnel_core.c | 6 + net/ipv4/sysctl_net_ipv4.c | 4 +- net/ipv4/tcp_input.c | 3 +- net/ipv4/tcp_output.c | 6 +- net/ipv6/addrconf.c | 10 +- net/ipv6/exthdrs.c | 4 +- net/ipv6/exthdrs_core.c | 3 + net/ipv6/ip6_fib.c | 4 +- net/ipv6/ip6_gre.c | 2 +- net/ipv6/mcast.c | 32 +- net/ipv6/netfilter/ip6_tables.c | 5 + net/ipv6/netfilter/ip6t_rpfilter.c | 2 +- net/ipv6/netfilter/ip6t_rt.c | 11 +- net/ipv6/route.c | 22 +- net/ipv6/seg6.c | 4 +- net/ipv6/seg6_local.c | 3 + net/ipv6/tcp_ipv6.c | 3 +- net/ipv6/xfrm6_output.c | 10 +- net/llc/llc_c_ac.c | 2 +- net/llc/llc_s_ac.c | 4 + net/llc/llc_sap.c | 8 +- net/mac80211/cfg.c | 3 + net/mac80211/debugfs_netdev.c | 6 + net/mac80211/iface.c | 2 + net/mac80211/mesh.c | 1 - net/mac80211/mlme.c | 6 +- net/mac80211/tx.c | 2 +- net/mac80211/util.c | 6 +- net/mptcp/protocol.c | 10 +- net/mptcp/protocol.h | 3 +- net/mptcp/subflow.c | 18 +- net/mptcp/syncookies.c | 5 +- net/netfilter/ipset/ip_set_hash_gen.h | 13 +- net/netfilter/ipvs/ip_vs_core.c | 6 + net/netfilter/ipvs/ip_vs_sync.c | 20 +- net/netfilter/nf_conntrack_expect.c | 3 +- net/netfilter/nf_conntrack_netlink.c | 13 +- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 2 +- net/netfilter/nf_flow_table_core.c | 12 +- net/netfilter/nf_flow_table_offload.c | 19 +- net/netfilter/nf_tables_api.c | 4 +- net/netfilter/nfnetlink_log.c | 13 +- net/netfilter/nfnetlink_queue.c | 77 ++- net/netfilter/nft_nat.c | 2 +- net/netfilter/nft_set_pipapo_avx2.c | 1 + net/netfilter/nft_synproxy.c | 3 +- net/netlabel/netlabel_unlabeled.c | 2 +- net/nfc/core.c | 15 +- net/nfc/digital_dep.c | 8 +- net/nfc/llcp.h | 1 + net/nfc/llcp_commands.c | 2 +- net/nfc/llcp_core.c | 173 +++++-- net/nfc/llcp_sock.c | 67 ++- net/nfc/nci/core.c | 10 +- net/nfc/netlink.c | 7 +- net/nfc/nfc.h | 3 +- net/openvswitch/conntrack.c | 14 +- net/openvswitch/flow_table.c | 4 +- net/packet/af_packet.c | 11 +- net/packet/internal.h | 2 +- net/phonet/pn_dev.c | 30 +- net/qrtr/af_qrtr.c | 4 +- net/rds/af_rds.c | 63 ++- net/rds/connection.c | 102 +++- net/rds/ib_cm.c | 27 +- net/rds/ib_frmr.c | 11 +- net/rds/ib_recv.c | 9 +- net/rds/message.c | 6 +- net/rds/send.c | 16 +- net/rds/tcp.c | 164 ++++-- net/rds/tcp_listen.c | 6 +- net/sched/act_api.c | 22 +- net/sched/act_csum.c | 8 +- net/sched/act_ct.c | 5 +- net/sched/act_gate.c | 30 +- net/sched/cls_api.c | 14 +- net/sched/cls_flower.c | 8 +- net/sched/cls_matchall.c | 8 +- net/sched/cls_route.c | 45 +- net/sched/sch_drr.c | 13 +- net/sched/sch_ets.c | 12 +- net/sched/sch_fq_pie.c | 62 ++- net/sched/sch_hfsc.c | 22 + net/sched/sch_hhf.c | 15 +- net/sched/sch_pie.c | 2 +- net/sched/sch_sfq.c | 7 +- net/sched/sch_teql.c | 7 +- net/sctp/associola.c | 15 +- net/sctp/ipv6.c | 12 +- net/sctp/protocol.c | 10 +- net/sctp/sm_make_chunk.c | 14 +- net/sctp/sm_sideeffect.c | 11 +- net/sctp/sm_statefuns.c | 2 + net/smc/smc_clc.c | 8 +- net/smc/smc_clc.h | 17 +- net/sunrpc/xprtrdma/verbs.c | 21 +- net/sunrpc/xprtsock.c | 7 +- net/tipc/group.c | 4 +- net/tipc/monitor.c | 3 +- net/vmw_vsock/hyperv_transport.c | 2 +- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/nl80211.c | 2 +- net/wireless/scan.c | 12 +- net/wireless/util.c | 26 +- net/wireless/wext-sme.c | 9 + net/xdp/xskmap.c | 2 +- net/xfrm/espintcp.c | 6 +- net/xfrm/xfrm_user.c | 228 ++++++--- scripts/mod/modpost.c | 11 +- security/integrity/ima/ima_appraise.c | 5 + security/keys/gc.c | 4 +- security/keys/request_key_auth.c | 12 +- security/selinux/avc.c | 5 +- sound/core/pcm_timer.c | 7 +- sound/core/seq/oss/seq_oss_rw.c | 3 +- sound/isa/es18xx.c | 4 + sound/pci/ctxfi/cthw20k2.c | 1 + sound/pci/hda/hda_controller.c | 2 +- sound/pci/hda/patch_conexant.c | 12 + sound/pci/hda/patch_realtek.c | 2 + sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 +- sound/soc/bcm/bcm63xx-i2s-whistler.c | 1 + sound/soc/codecs/ab8500-codec.c | 565 ++++++++++----------- sound/soc/codecs/cx20442.c | 3 +- sound/soc/codecs/mt6351.c | 1 + sound/soc/codecs/pcm3168a.c | 20 +- sound/soc/codecs/rk3328_codec.c | 54 +- sound/soc/codecs/rt5645.c | 4 + sound/soc/intel/atom/sst/sst_pci.c | 1 + sound/soc/intel/catpt/ipc.c | 8 + sound/soc/intel/catpt/loader.c | 3 + sound/soc/intel/catpt/registers.h | 12 + sound/soc/rockchip/rockchip_pdm.c | 16 +- sound/soc/rockchip/rockchip_spdif.c | 1 + sound/soc/sprd/sprd-pcm-compress.c | 15 +- sound/soc/sti/uniperif_reader.c | 4 +- sound/soc/ti/ams-delta.c | 3 +- sound/soc/ti/omap3pandora.c | 5 +- sound/soc/ux500/mop500.c | 8 +- sound/soc/ux500/ux500_msp_dai.c | 167 ++---- sound/soc/ux500/ux500_msp_dai.h | 11 - sound/soc/ux500/ux500_msp_i2s.c | 326 ++++++------ sound/soc/ux500/ux500_msp_i2s.h | 30 +- sound/soc/ux500/ux500_pcm.c | 83 +-- sound/usb/caiaq/audio.c | 10 +- sound/usb/caiaq/device.c | 53 +- sound/usb/caiaq/device.h | 4 +- sound/usb/caiaq/input.c | 6 + sound/usb/caiaq/midi.c | 6 +- sound/usb/mixer.c | 17 +- sound/usb/mixer_maps.c | 10 + sound/usb/quirks-table.h | 22 + sound/usb/usx2y/us122l.c | 9 +- sound/usb/usx2y/usbusx2y.c | 39 +- tools/perf/util/cs-etm.c | 81 +-- tools/testing/selftests/cgroup/test_kmem.c | 2 +- .../ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc | 2 +- tools/testing/selftests/net/fib_nexthops.sh | 28 + tools/testing/selftests/net/pmtu.sh | 2 +- tools/testing/selftests/powerpc/tm/tm.h | 8 +- 592 files changed, 5904 insertions(+), 3858 deletions(-)

2 weeks, 2 days

[PATCH 6.1 000/982] 6.1.189-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.189 release. There are 982 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 02 Oct 2026 15:23:04 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.189-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.189-rc1 Denis Arefev <arefev(a)swemel.ru> ALSA: hda: Fix missing pointer check in hda_component_manager_init function Guangshuo Li <lgs201920130244(a)gmail.com> drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_table_locked() Rengarajan S <rengarajan.s(a)microchip.com> lan78xx: Enable Auto Speed and Auto Duplex configuration for LAN7801 if NO EEPROM is detected Rengarajan S <rengarajan.s(a)microchip.com> lan78xx: Enable 125 MHz CLK configuration for LAN7801 if NO EEPROM is detected Florian Eckert <fe(a)dev.tdt.de> tools/thermal/tmon: Fix compilation warning for wrong format James Clark <james.clark(a)linaro.org> perf test: Change all remaining #!/bin/sh to #!/bin/bash Jakub Kicinski <kuba(a)kernel.org> net: tls: fix silent data drop under pipe back-pressure Darrick J. Wong <djwong(a)kernel.org> xfs: fix blockgc group quota scanning when usrquota isn't enforced Zihan Xi <zihanx(a)nebusec.ai> smb: client: validate POSIX create context length Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: L2CAP: validate frame length before control and FCS access Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: reject out-of-range OCF values Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: validate event length before filtering Myeonghun Pak <mhun512(a)gmail.com> RISC-V: KVM: Synchronize hrtimer callback during teardown Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() Myeonghun Pak <mhun512(a)gmail.com> pinctrl: single: free the IRQ on domain creation failure Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> scsi: libiscsi_tcp: Check the data direction of a Data-In PDU Doruk Tan Ozturk <doruk(a)0sec.ai> nfc: port100: reject frames whose declared length exceeds the received data Aamir Ahmed <elb12345(a)hotmail.co.uk> nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() Luxiao Xu <rakukuip(a)gmail.com> nfc: fix use-after-free in nfc_get_local_general_bytes Luxiao Xu <rakukuip(a)gmail.com> netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read Weiming Shi <bestswngs(a)gmail.com> netfilter: ip6t_rpfilter: reject routes without inet6_dev Wentao Liang <vulab(a)iscas.ac.cn> net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() Ming Wang <wangming01(a)loongson.cn> net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist Gajdos Tamás <tamas(a)rimpianto.com> net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Gajdos Tamás <tamas(a)rimpianto.com> net: atl1c: fix soft lockup on out-of-range tpd_cons read Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry Wentao Liang <vulab(a)iscas.ac.cn> net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy() Gajdos Tamás <tamas(a)rimpianto.com> net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Zijie Huang <milkory(a)outlook.com> net: arp: terminate device name before lookup Weiming Shi <bestswngs(a)gmail.com> net/sched: reject IDR error pointers when deleting actions Wentao Liang <vulab(a)iscas.ac.cn> net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() Wei Jie LAW <98lawweijie(a)gmail.com> HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() Junjie Cao <junjie.cao(a)intel.com> HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard Chen Changcheng <chenchangcheng(a)kylinos.cn> HID: alps: fix use-after-free on input2 registration failure Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix gem reference leak in validate_init() Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: fix double-free in nvif_vmm_dtor Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix bridge reference leak in nv1a_ram_new() Guangshuo Li <lgs201920130244(a)gmail.com> drm/nouveau: fix autosuspend cleanup during teardown Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() Christian König <ckoenig.leichtzumerken(a)gmail.com> drm/i915: fix incorrect RCU teardown order Dongliang Qin <cccccccccccc777777(a)gmail.com> rds: ib: Clear the sg list when mapping an MR fails Zixuan Chai <petalzu987(a)gmail.com> llc: reserve device headroom for allocated frames Ridham Khurana <khurana.ridham222(a)gmail.com> gpio: zynq: fix runtime PM leak on request error path Wentao Liang <vulab(a)iscas.ac.cn> gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() Hui Peng <benquike(a)gmail.com> ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST Norbert Szetei <norbert(a)doyensec.com> ipv6: do not let ipv6_find_hdr() return an offset past the packet end Wentao Liang <vulab(a)iscas.ac.cn> fsl/fman: Fix clk reference leak in read_dts_node() Josef Bacik <josef(a)toxicpanda.com> writeback: report a Tasks-RCU quiescent state per cgwb drain pass Pavankumar Kondeti <pavan.kondeti(a)oss.qualcomm.com> workqueue: Fix NULL current_pwq deref in flush dependency check Patrick Lu (Anthropic) <perf.patrick.lu(a)gmail.com> writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes Hui Peng <benquike(a)gmail.com> fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT Dairui Zhang <zhangdairui(a)gmail.com> af_packet: fix integer overflow in prb_calc_retire_blk_tmo() Aohan Mei <henrymei(a)tencent.com> sctp: discard the rest of the packet on a stale-cookie error Eric Dumazet <edumazet(a)google.com> tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow Mario Limonciello <mario.limonciello(a)amd.com> x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Drop all SCM attributes for SOCKMAP. Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase Pablo Neira Ayuso <pablo(a)netfilter.org> rculist: add list_splice_rcu() for private lists Mark Amirkan <markdamirkan(a)gmail.com> mptcp: return sk_wait_data() errors from recvmsg() Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits Hui Peng <benquike(a)gmail.com> autofs: fix sbi->pipe file reference leak in autofs_kill_sb() Eric Dumazet <edumazet(a)google.com> vlan: ensure sufficient headroom in vlan_dev_hard_header() Eric Dumazet <edumazet(a)google.com> net/sched: sch_teql: fix shadowed err in __teql_resolve() Eric Dumazet <edumazet(a)google.com> bridge: check llc_mac_hdr_init() return value in br_send_bpdu() Eric Dumazet <edumazet(a)google.com> llc: fix skb UAF and leaks on llc_mac_hdr_init() failure Coia Prant <coiaprant(a)gmail.com> net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails Ginger Li <ginger.jzllee(a)gmail.com> tipc: Fix a data race on mon->peer_cnt in mon_timeout() Sidraya Jayagond <sidraya(a)linux.ibm.com> net/smc: fix UAF on lgr list traversal in smcr_port_err() Yilin Zhang <yilinzhang(a)moonshot.ai> tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() Norbert Szetei <norbert(a)doyensec.com> net: xps: reject an out of range traffic class Sanghyun Park <sanghyun.park.cnu(a)gmail.com> vxlan: use one headroom snapshot for neighbour replies Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> ip_gre: Reject enabling collect metadata through changelink Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: do not skip WoL power up on GENET V1 Doug Berger <opendmb(a)gmail.com> net: bcmgenet: allow return of power up status Doug Berger <opendmb(a)gmail.com> net: bcmgenet: move bcmgenet_power_up into resume_noirq Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: initialize u64 stats seq counter for all queues Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems Ivan Delalande <colona(a)arista.com> tg3: use random MAC address when tg3_get_device_address fails Dragan Simic <dsimic(a)manjaro.org> driver core: Add device probe log helper dev_warn_probe() Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> driver core: Make dev_err_probe() silent for -ENOMEM Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> driver core: Better advertise dev_err_probe() Johan Almbladh <johan.almbladh(a)anyfinetworks.com> bpf: Fix BSWAP 32 and 16 on MIPS64 Johan Almbladh <johan.almbladh(a)anyfinetworks.com> bpf: Fix immediate JMP JEQ/JNE on MIPS32 Ido Schimmel <idosch(a)nvidia.com> vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets Shihuang Liu <shlomojune6(a)gmail.com> net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() Jakub Kicinski <kuba(a)kernel.org> veth: manage XDP program pointers during channel resize Victor Nogueira <victor(a)mojatatu.com> net/sched: act_gate: budget the per-entry list in get_fill_size Deepanshu Kartikey <kartikey406(a)gmail.com> nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix slab-out-of-bounds reads when logging service names Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix -ENOMEM on connect with zero-length service name Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate ISO15693 inventory length Cong Nguyen <congnt264(a)gmail.com> nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure Chris Gellermann <christian.gellermann(a)codasip.com> nfc: virtual_ncidev: Add missing ioctl compat handler Chris Gellermann <christian.gellermann(a)codasip.com> selftests/nci: Fix out-of-bounds store on thread join Chaithanya Lagisetty <nagachaithanya9911(a)gmail.com> selftests: nci: Fix uninitialized family ID on missing attribute Lee Jones <lee(a)kernel.org> nfc: llcp: Fix race condition in accept_queue lifecycle Lei Zhu <zhulei(a)kylinos.cn> selftests: nci: Correct pthread_create return value check Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate received frame size Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: nfcmrvl: validate helper command length before pull Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Capture all packets for vlan checks Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Check the dev->features for S-TAG offload testing Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Support running selftests on DSA conduits Xin Long <lucien.xin(a)gmail.com> sctp: hold asoc or transport before mod_timer() in timer handlers Bernardo Soares <bsoares.it(a)gmail.com> net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports Vlad Buslov <vladbu(a)nvidia.com> net/mlx5: Bridge, pass net device when linking vport to bridge Bernardo Soares <bsoares.it(a)gmail.com> net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports Vlad Buslov <vladbu(a)nvidia.com> net/mlx5: Bridge, snoop igmp/mld packets Vlad Buslov <vladbu(a)nvidia.com> net/mlx5: Bridge, extract code to lookup parent bridge of port Vlad Buslov <vladbu(a)nvidia.com> net/mlx5: Bridge, move additional data structures to priv header Vlad Buslov <vladbu(a)nvidia.com> net/mlx5: Bridge, increase bridge tables sizes Vlad Buslov <vladbu(a)nvidia.com> net/mlx5: Add mlx5_ifc definitions for bridge multicast support Zhao Gongyi <zhaogongyi(a)BYTEDANCE.COM> bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc Emil Tsalapatis <emil(a)etsalapatis.com> bpf: Fix bpf_sock context code generation bui duc phuc <phucduc.bui(a)gmail.com> net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error Mikhail Zaslonko <zaslonko(a)linux.ibm.com> s390/debug: Fix NULL pointer dereference in debug_info_copy() Mikhail Zaslonko <zaslonko(a)linux.ibm.com> s390/debug: Do not register views for failed static debug areas Myeonghun Pak <mhun512(a)gmail.com> tg3: clean up PHYLIB resources on probe failure Pengpeng Hou <hppiscas(a)163.com> net: usb: sr9700: include receive overhead in the length check Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() Hui Peng <benquike(a)gmail.com> Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: release the GEM object on virtio_gpu_vram_create() errors Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak when drm_gem_handle_create() fails Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget Aamir Ahmed <elb12345(a)hotmail.co.uk> net: usb: catc: bound the RX packet length in catc_rx_done() Yiqi Sun <sunyiqixm(a)gmail.com> sctp: avoid livelock while updating retransmit path Kuniyuki Iwashima <kuniyu(a)google.com> ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink(). Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> net: gue: reject invalid REMCSUM offsets Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure Francesco Magazzu <postadelmaga(a)gmail.com> drm/nouveau/clk: don't clobber reclock status when restoring volt/fan Dan Carpenter <error27(a)gmail.com> drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: make ocfs2_calc_xattr_init() return void Naman Gulati <namangulati(a)google.com> netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name Julian Anastasov <ja(a)ssi.bg> ipvs: revalidate ihl before icmp_send Karl Mehltretter <kmehltretter(a)gmail.com> netfilter: nft_synproxy: use the family-aware checksum helper Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_queue: hold nfnl mutex in event notifier Scott Mitchell <scott.k.mitch1(a)gmail.com> netfilter: nfnetlink_queue: nfqnl_instance GFP_ATOMIC -> GFP_KERNEL_ACCOUNT allocation Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> netfilter: flowtable: publish HW_DEAD after worker is done Kumar Kartikeya Dwivedi <memxor(a)gmail.com> libbpf: Reject truncated ldimm64 CO-RE relocations Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Restrict CO-RE poisoning to relocatable instructions Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_u32: fix manual hash table handle IDR aliasing Weiming Shi <bestswngs(a)gmail.com> bpf: Skip unsettled links in link iterator Zhiling Zou <zhilinz(a)nebusec.ai> xsk: Use a 32-bit compare in xsk_map_gen_lookup Julian Sun <sunjunchao(a)bytedance.com> fs: avoid repeated scans in evict_inodes() Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix cio_update_schib() to not cache invalid schib Karl Mehltretter <kmehltretter(a)gmail.com> s390/pci/docs: Fix sriov_numvfs attribute name Niklas Schnelle <schnelle(a)linux.ibm.com> docs: s390/pci: Improve and update PCI documentation Randy Dunlap <rdunlap(a)infradead.org> Documentation: s390: correct spelling Bart Van Assche <bvanassche(a)acm.org> scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume() Lee Jones <lee(a)kernel.org> Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel Christiano Amora <christiano.amora(a)gmail.com> Bluetooth: SMP: reject Security Request over BR/EDR Ran Hongyun <ranhongyun1(a)huawei.com> squashfs: Add dictionary size range check to prevent shift-out-of-bounds Slawomir Stepien <sst(a)poczta.fm> HID: amd_sfh: Validate PCI BAR size before mapping Sean Anderson <sanderson(a)brivo.com> pinctrl: meson: Fix typo in s4 group name Geliang Tang <tanggeliang(a)kylinos.cn> bpf, sockmap: Fix self-redirect copied_seq double-counting Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix out-of-bounds read of rtt_min in sock_ops Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev> bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() Oscar Priego Verdugo <oscar.priegov(a)gmail.com> HID: elecom: fix bus type for M-XGL20DLBK Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix divide-by-zero in btf_struct_walk() Feng Zhou <zhoufeng.zf(a)bytedance.com> bpf: support access variable length array of integer type Sven Schnelle <svens(a)linux.ibm.com> selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc Weiming Shi <bestswngs(a)gmail.com> bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix bpf_skb_change_tail wrt csum partial skbs Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix IRQ injection with SIGP Stop and Store Status Xingui Yang <yangxingui(a)huawei.com> scsi: hisi_sas: Grab sas_dev lock when traversing the members of sas_dev.list Boris Burkov <boris(a)bur.io> btrfs: insert tree mod log move in push_node_left Dmitry Antipov <dmantipov(a)yandex.ru> wifi: rtw88: delete timer and free skb queue when unloading Duoming Zhou <duoming(a)zju.edu.cn> sh: push-switch: Reorder cleanup operations to avoid use-after-free bug Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: TC, Fix internal port memory leak Hans de Goede <hdegoede(a)redhat.com> media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings ndesaulniers(a)google.com <ndesaulniers(a)google.com> start_kernel: Add __no_stack_protector function attribute Vitaly Kuznetsov <vkuznets(a)redhat.com> HID: hyperv: streamline driver probe to avoid devres issues Martin KaFai Lau <martin.lau(a)kernel.org> bpf: bpf_sk_storage: Fix the missing uncharge in sk_omem_alloc Jinjie Ruan <ruanjinjie(a)huawei.com> spi: zynqmp-gqspi: Use devm_spi_alloc_host() Junli Liu <liujunli(a)lixiang.com> erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Add layout1.refer_mount_root Sandeep Dhavale <dhavale(a)google.com> erofs: Fix detection of atomic context Bjorn Andersson <quic_bjorande(a)quicinc.com> drm/msm/dp: Drop aux devices together with DP controller Martin KaFai Lau <martin.lau(a)kernel.org> bpf: bpf_sk_storage: Fix invalid wait context lockdep report Itai Handler <itai.handler(a)gmail.com> spi: spi-zynqmp-gqspi: stop the controller on shutdown Chen Xiaokun <shinnkka1(a)gmail.com> io_uring/io-wq: Fix memory leak in io_wq_create() on success path Christoph Hellwig <hch(a)lst.de> btrfs: don't check PageError in __extent_writepage Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: always check if connection is alive before deleting Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync Chengming Zhou <zhouchengming(a)bytedance.com> blk-mq: fix tags UAF when shrinking q->nr_hw_queues Chengming Zhou <zhouchengming(a)bytedance.com> blk-mq: fix tags leak when shrink nr_hw_queues Benoît Sevens <bsevens(a)google.com> HID: logitech-hidpp: fix race condition when accessing stale stack pointer Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-topology: Clarify bind failure caused by missing fw_module Guennadi Liakhovetski <guennadi.liakhovetski(a)linux.intel.com> ASoC: SOF: avoid a NULL dereference with unsupported widgets Frank Sorenson <sorenson(a)redhat.com> smb: client: fix missing lower-bound check on DFS referral string offsets Frank Sorenson <sorenson(a)redhat.com> smb: client: fix server->total_read for compound encrypted PDUs Frank Sorenson <sorenson(a)redhat.com> smb: client: fix potential OOB read in smb3_enum_snapshots() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Paulo Alcantara <pc(a)manguebit.org> smb: client: fix smbd_connection leak on cifs_get_tcp_session() error Frank Sorenson <sorenson(a)redhat.com> smb: client: reject short Next offsets in parse_server_interfaces() Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/adreno: fix autosuspend cleanup during teardown Sajal Gupta <sajal2005gupta(a)gmail.com> drm/gud: fix out-of-bounds write in gud_plane_atomic_check() Rik van Riel <riel(a)surriel.com> wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver Zhao Li <enderaoelyther(a)gmail.com> wifi: mwifiex: validate action frame fixed fields Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: mwifiex: validate scan response extents Doruk Tan Ozturk <doruk(a)0sec.ai> wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length Shengzhuo Wei <me(a)cherr.cc> wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST Shengzhuo Wei <me(a)cherr.cc> wifi: p54: validate curve data length in the calibration curve converters Tianchu Chen <flynnnchen(a)tencent.com> wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() Ali Ahmet Memis <ali(a)iusegentoo.com> wifi: wilc1000: fix out-of-bounds read in P2P public action frames Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: wlcore: release runtime PM ref on regdomain config failure Tianchu Chen <flynnnchen(a)tencent.com> wifi: rsi: fix heap OOB write on key removal Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: libertas_tf: fix UAF in lbtf_free_adapter() Stanislaw Gruszka <stf_xl(a)wp.pl> wifi: iwlegacy: fix broadcast stations deallocation Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: brcmsmac: fix UAF in brcms_free_timer() Wentao Liang <vulab(a)iscas.ac.cn> watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Propagate error code in resume() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix premature reset during timeout update Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: digicolor: Avoid division by zero Li Jun <lijun01(a)kylinos.cn> watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83793) release probe data through kref Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding Nuno Sá <nuno.sa(a)analog.com> hwmon: (pmbus/core) increase number of phases and add new mask Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: zero ff_effect before compat copy in input_ff_effect_from_user Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Raphaël Larocque <rlarocque(a)disroot.org> Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - check btns_desc->package.count Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - fix MS Surface Pro 11 probe failure Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() Chris Sommers <chris.sommers(a)icloud.com> Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: evdev - zero absinfo before partial copy in EVIOCSABS Alexei Turtanov <9alexei9(a)gmail.com> Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 Alvin Šipraga <alvin.sipraga(a)analog.com> Input: adp5588-keys - cache GPIO state before registering the gpiochip Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Reset command and data lines on failed tuning Xu Rao <raoxu(a)uniontech.com> mmc: spi: reset bytes_xfered before retrying CRC failures Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt Felix Gu <ustc.gu(a)gmail.com> mmc: sdio_uart: fix xmit_fifo leak when the port table is full Myeonghun Pak <mhun512(a)gmail.com> mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Florian Maillard <florian.maillard(a)mailoo.org> mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 Fan Wu <fanwu01(a)zju.edu.cn> mmc: mxcmmc: cancel data work and watchdog on remove Zhu Ling <zhuling0805(a)qq.com> mmc: core: Fix OF node reference leak on card add failure Fan Wu <fanwu01(a)zju.edu.cn> mmc: core: Cancel SDIO IRQ work before freeing host Christian Göttsche <cgzones(a)googlemail.com> selinux: always fill AVC decision in avc_has_perm_noaudit() Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> IB/mlx4: Fix use-after-free on pkey sysfs registration failure Shengzhuo Wei <me(a)cherr.cc> i2c: imx: release DMA channels on probe error Shengzhuo Wei <me(a)cherr.cc> i2c: at91: release DMA channels on remove and probe error Jarkko Sakkinen <jarkko(a)kernel.org> KEYS: trusted: Fix tpm2_load_cmd() boundary check Maoyi Xie <maoyixie.tju(a)gmail.com> keys: translate request_key_auth pid for the reading procfs instance Yifei Gao <gyf161023(a)gmail.com> memstick: ms_block: destroy io_queue workqueue on removal Mark Amirkan <markdamirkan(a)gmail.com> net/packet: avoid truncating TPACKET_V3 private size Mark Amirkan <markdamirkan(a)gmail.com> net/packet: clear RX owner on VNET header error Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: hhf: cap hh_flows_limit at change time Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain Mark Amirkan <markdamirkan(a)gmail.com> net: lan743x: fix RX checksum use-after-free Zhiling Zou <zhilinz(a)nebusec.ai> ipv6: xfrm: use full sockets in local error paths Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix non-atomic read of DMA position registers Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Serialize local codec list cleanup Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: hci_codec: validate vendor codec count length Aamir Ahmed <elb12345(a)hotmail.co.uk> Bluetooth: eir: validate service data length before reading UUID Nicolas Thibert <nithibert(a)gmail.com> Bluetooth: btusb: fix NXP IW610 composite device handling Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_and() mask generation Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_write() casting Koichiro Den <den(a)valinux.co.jp> arm64: dts: renesas: r8a779f0: Set UFS lane count Bradley Morgan <include(a)grrlz.net> arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc Thomas Huth <thuth(a)redhat.com> kselftest/arm64: Fix size of thread_data values for pthread_join() Wyatt Feng <wf.kernel.dev(a)gmail.com> net: xfrm: reject unrepresentable espintcp transport headers Zhiling Zou <zhilinz(a)nebusec.ai> openvswitch: avoid reallocating confirmed conntrack labels Jeffin Philip <jeffinphilip14(a)gmail.com> RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() Quanye Yang <quanyeyang(a)proton.me> RDMA/ucma: Serialize join and leave on copy_to_user failure Inbal Schussheim <inbal.lipshtat(a)mail.huji.ac.il> tcp: exclude old ACKs from tcp fast path Aohan Mei <henrymei(a)tencent.com> rds: ib: use rds_conn_drop() on protocol version mismatch Niklas Cassel <cassel(a)kernel.org> ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY Yuho Choi <oss.patchbox(a)gmail.com> ALSA: virtio: reset device before deleting virtqueues Jeremy Nyberg <slickstretch3.0(a)gmail.com> Input: xpad - fix PDP Marvel Xbox 360 controller Roberts Kursitis <roberts.kursitis(a)azeron.eu> Input: xpad - add support for Azeron devices Erich Sartison <byt.es(a)mailbox.org> Input: xpad - add support for Victrix Pro BFG Controller Andrea Righi <arighi(a)nvidia.com> sched/fair: Reject misfit pulls onto busy SMT siblings on asym-capacity Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> sched/fair: Move is_core_idle() out of CONFIG_NUMA Tomer Tayar <ttayar(a)habana.ai> accel/habanalabs: postpone mem_mgr IDR destruction to hpriv_release() Dmitriy Okunev <dokunevdmitriy(a)gmail.com> net: mvpp2: prevent buffer overflow in page_pool allocation James Clark <jjc(a)jclark.com> net: macb: fix ordering around PTP timestamp read Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Ack RX overrun interrupt correctly Eric Dumazet <edumazet(a)google.com> net: lock the socket in sock_gettstamp() Yige Jiang <yigejiang86(a)gmail.com> net: netsec: fix device_node reference leak on phy_np HyeongJun An <sammiee5311(a)gmail.com> ASoC: hdmi-codec: Report a change when the channel status moves Sasha Levin <sashal(a)kernel.org> ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments Shivaprasad G Bhat <sbhat(a)linux.ibm.com> powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() Eric Dumazet <edumazet(a)google.com> drop_monitor: fix out-of-bounds write in reset_per_cpu_data() Eric Dumazet <edumazet(a)google.com> drop_monitor: synchronize tracepoint unregistration on error path Eric Dumazet <edumazet(a)google.com> pppoatm: ensure a writable skb header and linear data Juan Perdomo <jcperdomo100(a)gmail.com> Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup Tzung-Bi Shih <tzungbi(a)kernel.org> Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown Baineng Shou <shoubaineng(a)gmail.com> dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() Eric Dumazet <edumazet(a)google.com> tcp: do not let tcp_rmem be set below 4096 Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: mst: move switchdev call outside rcu Karl Mehltretter <kmehltretter(a)gmail.com> wifi: brcmfmac: fix lost 802.1x TX completion wakeup Hohyun Sim <tlaghgus0425(a)korea.ac.kr> net: fddi: skfp: fix NULL deref when setting the MAC address while down Dong Chenchen <dongchenchen2(a)huawei.com> ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> drm/msm/dsi: correct byte intf clock rate for 14nm DSI PHY Filipe Manana <fdmanana(a)suse.com> btrfs: tree-checker: print dev extent offset in error message Slavin Liu <bolin.liu(a)seu.edu.cn> ALSA: hda: trace PCM open only after assigning a stream Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: Rework definition of I/O read and write helpers Thomas Zimmermann <tzimmermann(a)suse.de> drm/ast: Remove little-endianism from I/O helpers Thomas Zimmermann <tzimmermann(a)suse.de> drm/atomic-helper: Add atomic_enable plane-helper callback Zihan Xi <zihanx(a)nebusec.ai> wifi: virt_wifi: don't transfer operstate before register Xiang Mei <xmei5(a)asu.edu> ALSA: 6fire: fix OOB write from device-reported iso length Takashi Iwai <tiwai(a)suse.de> ALSA: usb: 6fire: Avoid embedded URBs Takashi Iwai <tiwai(a)suse.de> ALSA: 6fire: Clean ups with guard() Karl Mehltretter <kmehltretter(a)gmail.com> Input: trackpoint - fix the inertia attribute name in the ABI document Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> ALSA: pcm: set timer->private_data before registering the PCM timer Takashi Iwai <tiwai(a)suse.de> ALSA: bcd2000: Fix race between rawmidi and disconnect Karl Mehltretter <kmehltretter(a)gmail.com> keys: fix lost wakeup when reaping a dead key type Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr Shouping Wang <allen.wang(a)hj-micro.com> perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: hold reference on ct until flow is released Theodor Arsenij Larionov Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_nat: fully initialise new_addr in netmap setup Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> RDMA/siw: Bound fragmented header copies by the remaining length Leon Romanovsky <leon(a)kernel.org> RDMA/efa: Keep EQ resources alive while IRQ is registered Leon Romanovsky <leon(a)kernel.org> RDMA/efa: Keep admin queues alive while IRQ is registered Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order Karl Mehltretter <kmehltretter(a)gmail.com> scsi: qla2xxx: Fix the ql2xfc2target parameter description Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: set up the TX info early to fix failure paths Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: rework ack_frame_id handling a bit Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: mesh: release the channel if start fails Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: add HE 6 GHz capability in the scan elems len Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't access the TSF of a down interface Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't allow link changes when iface is down Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: require a peer station for TDLS setup confirm Mukesh Sisodiya <mukesh.sisodiya(a)intel.com> wifi: mac80211: handle TDLS negotiation with MLO Mukesh Sisodiya <mukesh.sisodiya(a)intel.com> wifi: cfg80211: make TDLS management link-aware Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: trace: remove MAC_PR_{FMT,ARG} Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: unlist vifs when their netdev is unregistered Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: suppress chanctx warning for debugfs reset Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't filter by BSS type when removing stale entries Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: only group hidden BSSes with beacon entries Shivank Garg <shivankg(a)amd.com> dmaengine: wait for RCU readers before releasing dma_device Shivank Garg <shivankg(a)amd.com> dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() Shivank Garg <shivankg(a)amd.com> dmaengine: Fix device kref underflow in dma_chan_put() Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> dma-coherent: report a failed reserved memory assignment Chen-Yu Tsai <wenst(a)chromium.org> dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask Orgad Shaneh <orgads(a)gmail.com> MIPS: Octeon: apply USB FDT fixups also when USB is modular Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: cadence_master: wait and cancel cdns->work before clock stop Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: check IP header size in cfg80211_classify8021d() Carolina Jubran <cjubran(a)nvidia.com> IB/IPoIB: Avoid restoring OPER_UP after multicast flush Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short association responses Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short beacon and probe responses Peng Hao <flyingpenghao(a)gmail.com> wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path Mariano Baragiola <mbaragiola(a)linux.com> wifi: virt_wifi: free skb when disconnected Ruoyu Wang <ruoyuw560(a)gmail.com> dmaengine: sprd: Fix runtime PM reference leak in probe Quanye Yang <quanyeyang(a)proton.me> RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Enforce local fence for IB_WR_REG_MR Li RongQing <lirongqing(a)baidu.com> RDMA/mad: Fix receive buffer leak when PKey enforcement fails Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/isert: wait for deferred control PDU completions before releasing the connection Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/iser: reject a remote invalidation of an unregistered direction Krystian Kaniewski <krystianmkaniewski(a)gmail.com> RDMA/core: Reject unregistering netdevs in ib_get_eth_speed Eric Dumazet <edumazet(a)google.com> net: convert dev->reg_state to u8 Jiri Pirko <jiri(a)nvidia.com> net: devlink: take RTNL in port_fill() function only if it is not held Jiri Pirko <jiri(a)nvidia.com> net: devlink: move port_type_netdev_checks() call to __devlink_port_type_set() Jiri Pirko <jiri(a)nvidia.com> net: devlink: move port_type_warn_schedule() call to __devlink_port_type_set() Jiri Pirko <jiri(a)nvidia.com> net: devlink: convert devlink port type-specific pointers to union Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds Xixin Liu <liuxixin(a)kylinos.cn> clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate Xixin Liu <liuxixin(a)kylinos.cn> firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Cleanup siw_accept Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Introduce siw_cep_set_free_and_put Pengpeng Hou <pengpeng(a)iscas.ac.cn> ARM: socfpga: select the PL310 erratum 753970 workaround Maher Azzouzi <maherazz04(a)gmail.com> esp: downgrade zerocopy managed frags before mutating skb frags Eric Dumazet <edumazet(a)google.com> xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() Kyle Zeng <kylebot(a)openai.com> xfrm: fix compat ALLOCSPI request use-after-free Sabrina Dubroca <sd(a)queasysnail.net> xfrm: avoid RCU warnings around the per-netns netlink socket Ido Schimmel <idosch(a)nvidia.com> ipv6: Honor oif when choosing nexthop for locally generated traffic Ido Schimmel <idosch(a)nvidia.com> ipv6: Select best matching nexthop object in fib6_table_lookup() Arash Golgol <arash.golgol(a)gmail.com> media: video-i2c: fix buffer queue ordering Sasha Levin <sashal(a)kernel.org> Revert "perf cs-etm: Flush thread stacks after decoder reset" Sasha Levin <sashal(a)kernel.org> Revert "perf cs-etm: Avoid truncating AUX buffer sizes to int" Jens Axboe <axboe(a)kernel.dk> sunvdc: fix -EIO issue due to lack of retries Günther Noack <gnoack(a)google.com> selftests/landlock: Add tests for whiteout object creation Guangguan Wang <guangguan.wang(a)linux.alibaba.com> net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg Sasha Levin <sashal(a)kernel.org> Revert "alpha: fix ieee_swcr_to_fpcr setting FPCR_DNOD unconditionally" Sasha Levin <sashal(a)kernel.org> Revert "alpha: don't leak hardware-fabricated FP exception bits to user space" Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Add disconnected leafs and branch test suites Tingmao Wang <m(a)maowtm.org> selftests/landlock: Add tests for access through disconnected paths Mickaël Salaün <mic(a)digikod.net> landlock: Fix handling of disconnected directories Paolo Abeni <pabeni(a)redhat.com> mptcp: close race between scheduler and state change Paolo Abeni <pabeni(a)redhat.com> mptcp: avoid unneeded actions on subflow reset Paolo Abeni <pabeni(a)redhat.com> mptcp: consolidate subflow cleanup Eric Biggers <ebiggers(a)kernel.org> netfilter: nft_set_pipapo_avx2: add missing vzeroupper Eric Biggers <ebiggers(a)kernel.org> crypto: sun8i-ss - Remove crypto_rng interface Eric Biggers <ebiggers(a)kernel.org> crypto: sun8i-ce - Remove crypto_rng interface Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> fou: Fix use-after-free in fou_create() Weiming Shi <bestswngs(a)gmail.com> net: appletalk: fix NULL pointer dereference in aarp_send_ddp() Weiming Shi <bestswngs(a)gmail.com> i2c: smbus: reject oversized block transfers in the common path Kazuki Hanai <hnkz.64(a)gmail.com> ALSA: us122l: Prevent write upgrades for read mappings Gary Guo <gary(a)garyguo.net> net: usb: pegasus: don't rely on id table pointer arithmetic Gary Guo <gary(a)garyguo.net> media: as102: do not rely on id table address comparison Gary Guo <gary(a)garyguo.net> usb: usbtmc: don't store usb_device_id Gary Guo <gary(a)garyguo.net> wifi: ath9k_htc: don't store usb_device_id Gary Guo <gary(a)garyguo.net> usb: xusbatm: don't rely on id table pointer arithmetic Sasha Levin <sashal(a)kernel.org> Revert "perf tests: Fix flakiness in BPF counters test on hybrid systems" Sasha Levin <sashal(a)kernel.org> Revert "nvme: apple: Add Apple A11 support" Sasha Levin <sashal(a)kernel.org> Revert "nvme-apple: Drop the PRP null check chicken bit" Sasha Levin <sashal(a)kernel.org> Revert "nvme-apple: Prevent shared tags across queues on Apple A11" Sasha Levin <sashal(a)kernel.org> Revert "nvme-apple: Reset q->sq_tail during queue init" Eric Dumazet <edumazet(a)google.com> ipv6: mcast: extend RCU protection in igmp6_send() Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sdm845: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8150: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8250: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8350: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8450: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8550: Fix the PCIe iommu-map entries" Suraj Jitindar Singh <surajjs(a)amazon.com> bpftool: remove duplicate free_btf_vmlinux() definition Bjoern Doebel <doebel(a)amazon.de> smb: client: avoid leaking refcount when cifs_sb_tlink() fails Bjoern Doebel <doebel(a)amazon.de> smb: client: avoid leaking refcount in cifs_queue_oplock_break() Aohan Mei <henrymei(a)tencent.com> smb: client: reject userspace cifs.idmap descriptions Gang Yan <yangang(a)kylinos.cn> selftests: mptcp: fix an UAF in mptcp_connect.c Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: syncookies: remember the request backup flag Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: subflow: no need to copy thmac during ulp_clone Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: options: handle MPC data + csum reqd + no csum Joe Damato <joe(a)dama.to> bnxt_en: Propagate RX ring init failures in bnxt_init_nic() Joe Damato <joe(a)dama.to> bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() Joe Damato <joe(a)dama.to> bnxt_en: Only restore LRO if the device supports TPA Michael Bommarito <michael.bommarito(a)gmail.com> media: v4l2-ctrls: validate HEVC tile counts Haotian Zhang <vulab(a)iscas.ac.cn> media: v4l2-h264: Fix memcmp() size in B1 reference list comparison Michael Bommarito <michael.bommarito(a)gmail.com> media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity Michael Bommarito <michael.bommarito(a)gmail.com> media: hevc: add bounded tile-count helpers Vishnu Razdan <vrazdan(a)openai.com> hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS Fan Wu <fanwu01(a)zju.edu.cn> hwmon: (gpio-fan) Fix use-after-free in alarm work Cong Nguyen <congnt264(a)gmail.com> hwmon: (applesmc) fix key backlight workqueue leak on register failure Harald Freudenberger <freude(a)linux.ibm.com> s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm Nagamani PV <nagamani(a)linux.ibm.com> s390/qeth: allow bridgeport queries despite OS_MISMATCH leixiang <leixiang(a)kylinos.cn> KVM: PPC: Book3S HV: Set irqfd->producer only on success Kyle Zeng <kylebot(a)openai.com> ipvs: reject invalid states in connection template sync records Zihan Xi <zihanx(a)nebusec.ai> ipv4: fib: bound automatic table ID allocation Zhiling Zou <zhilinz(a)nebusec.ai> ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink Weiming Shi <bestswngs(a)gmail.com> fbdev: vfb: defer cleanup until the last reference Ilya Maximets <i.maximets(a)ovn.org> netfilter: report NLM_F_DUMP_FILTERED when all is filtered out Chengfeng Ye <nicoyip.dev(a)gmail.com> netfilter: nf_log: unregister loggers before per-net teardown Norbert Szetei <norbert(a)doyensec.com> net: openvswitch: fix use-after-free of the flow table mask array Fourie Zhang <littleddfu(a)gmail.com> net: mpls: clear inner_protocol when the last label is popped Johan Hovold <johan(a)kernel.org> net: hso: fix TIOCMIWAIT race Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> ring-buffer: Acquire the lock with irqsave in rb_wake_up_waiters() Thorsten Blum <thorsten.blum(a)linux.dev> drm/i915: Fix memory leak in query_perf_config_list() Jann Horn <jannh(a)google.com> exec: do_close_on_exec() before taking exec_update_lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> cpufreq: initialize policy rwsem before sysfs publication Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: zero-initialize policy cpumask before sysfs publication Runyu Xiao <runyu.xiao(a)seu.edu.cn> ASoC: sti: initialize IRQ lock before requesting IRQ Tianchu Chen <flynnnchen(a)tencent.com> ASoC: sprd: validate compress buffer sizes against fixed allocations Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Keep the entry count when the histogram stats allocation fails Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Let histogram values keep the percent and graph modifiers Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Free histogram the field rejected for a bad modifier Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Free histogram var refs regardless of how often they are referenced Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Free histogram the var ref when its initialization fails Thomas Gleixner <tglx(a)linutronix.de> tick/broadcast: Plug clockevents replacement race Ido Schimmel <idosch(a)nvidia.com> tunnels: Drop stale dst when building an ICMP error for PMTUD Ali Ahmet Memis <ali(a)iusegentoo.com> ufs: validate cylinder group metadata before caching it Ali Ahmet Memis <ali(a)iusegentoo.com> ufs: create the root dentry after loading cylinder metadata James Hilliard <james.hilliard1(a)gmail.com> watchdog: sunxi_wdt: preserve boot-enabled watchdog Harry Wentland <harry.wentland(a)amd.com> dm/amdgpu: fix malformed link_settings debugfs output Tristan Madani <tristan(a)talencesecurity.com> ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf Roman Prucha <zorgan.roman(a)gmail.com> ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough Zihan Xi <zihanx(a)nebusec.ai> ipv6: fix fib6 walker UAF on seq stop Shivaprasad G Bhat <sbhat(a)linux.ibm.com> powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver Eric Dumazet <edumazet(a)google.com> ipv4: start using dst_dev_rcu() Eric Dumazet <edumazet(a)google.com> net: dst: introduce dst->dev_rcu Eric Dumazet <edumazet(a)google.com> ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] Eric Dumazet <edumazet(a)google.com> net: dst: add four helpers to annotate data-races around dst->dev Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent out-of-bounds reads in share config responses Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands Dmitry Bogdanov <d.bogdanov(a)yadro.com> scsi: target: iscsi: Handle abort for WRITE_PENDING cmds WenTao Liang <vulab(a)iscas.ac.cn> drm/amd/display: set new_stream to NULL after release Stian Halseth <stian(a)itx.no> sunvdc: unmap LDC cookies when the descriptor send fails Eelco Chaudron <echaudro(a)redhat.com> openvswitch: fix wrong flag value in get_ipv6_ext_hdrs() Greg Marsden <greg.marsden(a)oracle.com> net/rds: fix tcp stream corruption with large pages Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: fix PF/CGX debugfs PCI bus lookup Aamir Ahmed <elb12345(a)hotmail.co.uk> net: hinic: fix mailbox segment buffer overflow Li Youhong <liyouhong(a)kylinos.cn> net: sun4i-emac: fix missing of_node_put() for phy_node Kuniyuki Iwashima <kuniyu(a)google.com> net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: free emptied bucket on filter move Thibault Ferrante <thibault.ferrante(a)canonical.com> selftests/powerpc/tm: Fix tcheck() reading uninitialised CR value Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: initialize ptp_lock at probe time Qingfang Deng <qingfang.deng(a)linux.dev> ppp_synctty: ensure a writeable skb header Eric Dumazet <edumazet(a)google.com> vxlan: initialize _md in vxlan_xmit_one() Guillaume Nault <gnault(a)redhat.com> vxlan: Pull inner IP header in vxlan_xmit_one(). Beniamino Galvani <b.galvani(a)gmail.com> vxlan: use generic function for tunnel IPv6 route lookup Beniamino Galvani <b.galvani(a)gmail.com> ipv6: add new arguments to udp_tunnel6_dst_lookup() Beniamino Galvani <b.galvani(a)gmail.com> ipv6: remove "proto" argument from udp_tunnel6_dst_lookup() Beniamino Galvani <b.galvani(a)gmail.com> vxlan: use generic function for tunnel IPv4 route lookup Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors Cong Nguyen <congnt264(a)gmail.com> hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() Marek Vasut <marex(a)nabladev.com> net: ks8851: Fix receiver error in 100BASE-TX mode following software power-down Yicong Hui <yiconghui(a)gmail.com> net/micrel: Fix typos in micrel driver code comments Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Sync timeout value if WDT was running at boot Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix undefined behavior Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix spurious reset on suspend Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Enable clock before accessing hardware registers Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix clock leak and spurious timer in settimeout() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Avoid division by zero David Arcari <darcari(a)redhat.com> watchdog: fix hrtimer start when pretimeout is zero Nicolai Buchwitz <nb(a)tipi-net.de> net: macb: destroy the phylink instance on the probe error path Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: btusb: Fix UAF of btusb_data by rx_work Jacob Keller <jacob.e.keller(a)intel.com> ice: add missing xa_destroy for sched_node_ids HyeongJun An <sammiee5311(a)gmail.com> ALSA: hda: Report a change when only the channel status bytes move Takashi Iwai <tiwai(a)suse.de> ALSA: hda/common: Use guard() for mutex locks Takashi Iwai <tiwai(a)suse.de> ALSA: hda/common: Use cleanup macros for PM controls Takashi Iwai <tiwai(a)suse.de> ALSA: hda: Introduce auto cleanup macros for PM Karl Mehltretter <kmehltretter(a)gmail.com> drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count RX descriptors for freeq refill Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count RX drops once per frame Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: No mapping is a dropped rx Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count dropped frames as NAPI work Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Finish RX updates before NAPI completion Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Fix budget accounting Alice Mikityanska <alice(a)isovalent.com> net: ipv6: Clamp to IP6_MAX_MTU in ip6_dst_mtu_maybe_forward Karl Mehltretter <kmehltretter(a)gmail.com> virtio_input: stop callbacks before unregistering input device Xiong Weimin <xiongweimin(a)kylinos.cn> virtio_input: reset device if input_register_device() fails Andrew Stellman <astellman(a)stellman-greene.com> virtio-pci: return IRQ_HANDLED after non-zero ISR Linfeng Sun <linfeng.sun.dev(a)gmail.com> vdpa_sim_blk: reject out-of-range sector starts Yu Zhang <yuz08559(a)gmail.com> vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx Jia Jia <physicalmtea(a)gmail.com> virtio_console: do not free control-out buffers on remove Xianting Tian <xianting.tian(a)linux.alibaba.com> virtio-console: call scheduler when we free unused buffs hpp.iscas <hppiscas(a)163.com> ASoC: mt6351: Publish the OF module alias Florian Westphal <fw(a)strlen.de> netfilter: ip6_tables: set F_PROTO when proto value is nonzero Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: cope with concurrent instance destruction hpp.iscas <hppiscas(a)163.com> ASoC: Intel: SST: Publish the PCI module aliases hpp.iscas <hppiscas(a)163.com> ASoC: bcm: bcm63xx: Publish the OF module aliases Edward Adam Davis <eadavis(a)sina.com> ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev Vineeth Karumanchi <vineeth.karumanchi(a)amd.com> net: macb: fix NULL pointer dereference on unbind with fixed-link Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: rename bp->sgmii_phy field to bp->phy Allen Pais <apais(a)linux.microsoft.com> workqueue: Introduce from_work() helper for cleaner callback declarations Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: ets: clamp quantum in parse and fallback paths Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: drr: clamp quantum in change class Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: pie: clamp psched_mtu in pie_drop_early Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: hhf: clamp quantum in change and init paths Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sfq: clamp quantum in change path Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: fq_pie: clamp quantum in change path Eric Dumazet <edumazet(a)google.com> net_sched: sch_fq_pie: implement lockless fq_pie_dump() Lama Kayal <lkayal(a)nvidia.com> net/mlx5: E-Switch, prevent mc_list repopulation during vport disable Yael Chemla <ychemla(a)nvidia.com> net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Fix use-after-free race in sample_restore_put() Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Fix ETS zero BW reporting when one TC holds 100% Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5e: Fix setting RS FEC after remapping Weiming Shi <bestswngs(a)gmail.com> net/sched: defer qdisc freeing after failed creation Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/kexec_file: Use inclusive range checks in add_usable_mem() Jamal Hadi Salim <jhs(a)mojatatu.com> net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations Seungwon Bae <qotmddnjs(a)ajou.ac.kr> vxlan: reject dynamic fdb entries that reference a nexthop id Jason Winter <jjx(a)live.nl> net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow Viswajith Murali <viswajithm(a)marvell.com> octeontx2-af: mcs: Clear stale X2P calibration state before calibration Jakub Kicinski <kuba(a)kernel.org> net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size Jakub Kicinski <kuba(a)kernel.org> net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size Eric Dumazet <edumazet(a)google.com> bonding: use skb_cow_head() in bond_do_alb_xmit() and rlb_arp_xmit() Ido Schimmel <idosch(a)nvidia.com> nexthop: Initialize extack in remove_nh_grp_entry() Jiayuan Chen <jiayuan.chen(a)linux.dev> selftests/bpf: Fix flaky bpf_nf test when random NAT port is 0 Brad Cowie <brad(a)faucet.nz> selftests/bpf: Update tests for new ct zone opts for nf_conntrack kfuncs Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Mark bpf_btf_find_by_name_kind() as sleepable Yonghong Song <yhs(a)fb.com> bpf: Introduce might_sleep field in bpf_func_proto Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: avs: Clean up the bus when fetching ML caps fails Pierre-Louis Bossart <pierre-louis.bossart(a)linux.intel.com> ALSA/ASoC: hda: ext: add 'ext' prefix to snd_hdac_link_free_all Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix NULL-ptr-deref in btf_var_show() Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix NULL-ptr-deref when showing a void BTF type Takashi Iwai <tiwai(a)suse.de> ALSA: caiaq: Fix potential double-free at error path HyeongJun An <sammiee5311(a)gmail.com> selftests/alsa: Fix the step check for INTEGER controls Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: reconfigure RX packet parser table in stmmac_hw_setup() after reset Allison Henderson <achender(a)kernel.org> net/rds: don't let rds_conn_shutdown() consume a concurrent drop Håkon Bugge <haakon.bugge(a)oracle.com> net/rds: acquire the fastpath locks in rds_conn_shutdown() Allison Henderson <achender(a)kernel.org> net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() Gerd Rausch <gerd.rausch(a)oracle.com> net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown Allison Henderson <achender(a)kernel.org> net/rds: clear cp_flags bits individually in rds_conn_path_reset() Allison Henderson <achender(a)kernel.org> net/rds: use clear_bit_unlock() in release_refill() Allison Henderson <achender(a)kernel.org> net/rds: use wq_has_sleeper() in release_in_xmit() Eric Dumazet <edumazet(a)google.com> bonding: do not clear curr_active_slave prematurely when releasing all slaves Eduard Zingerman <eddyz87(a)gmail.com> bpf: reject BPF_PSEUDO_FUNC reference to the main program Henry Martin <bsdhenrymartin(a)gmail.com> tracing/probes: Fix use-after-free on field name/type of events with multiple probes Joas Antonio dos Santos <joasantonio108(a)gmail.com> netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() Kyle Zeng <kylebot(a)openai.com> ipvs: fix reversed sequence option serialization Qu Wenruo <wqu(a)suse.com> btrfs: do not force reloc root creation during qgroup_account_snapshot() Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Program the MSP FIFO watermarks Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Request the MSP MMIO resource Arnd Bergmann <arnd(a)arndb.de> ASoC: ux500: remove stedma40 references Linus Walleij <linusw(a)kernel.org> mfd: db8500-prcmu: Fold dbx500 header into db8500 Kees Cook <kees(a)kernel.org> arm: Handle KCOV __init vs inline mismatches Zijun Hu <quic_zijuhu(a)quicinc.com> mfd: db8500-prcmu: Remove needless return in three void APIs YueHaibing <yuehaibing(a)huawei.com> mfd: db8500-prcmu: Remove unused inline functions Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Validate MSP DAI configuration Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Correct MSP frame and bit clock setup Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Propagate MSP setup errors Arnd Bergmann <arnd(a)arndb.de> ASoC: ux500: remove platform_data support Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Fix MSP stream lifecycle handling Eric Dumazet <edumazet(a)google.com> locking/lockdep: Invalidate stale class_cache entries for zapped classes Kent Overstreet <kent.overstreet(a)linux.dev> lockdep: Add lock_set_cmp_fn() annotation Boqun Feng <boqun.feng(a)gmail.com> locking/lockdep: Improve the deadlock scenario print for sync and read lock Boqun Feng <boqun.feng(a)gmail.com> locking/lockdep: Introduce lock_sync() Leo Yan <leo.yan(a)arm.com> perf/core: Skip empty AUX records with only format flags Ivy Lopez <skunkolee(a)gmail.com> scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues() Eric Dumazet <edumazet(a)google.com> bonding: alb: fix uninitialized transport header access in alb_determine_nd() Guanghui Yang <3497809730(a)qq.com> btrfs: restore active device pointers after failed sprout Guanghui Yang <3497809730(a)qq.com> btrfs: detach failed sprout device from transaction update list wangdicheng <wangdicheng(a)kylinos.cn> ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() wangdicheng <wangdicheng(a)kylinos.cn> ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits Hui Su <sh_def(a)163.com> staging: fbtft: make dirty_lock IRQ-safe Kuniyuki Iwashima <kuniyu(a)google.com> af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). Eric Dumazet <edumazet(a)google.com> ipv6: sr: restore network header before routing and forwarding Tung Nguyen <tung.quang.nguyen(a)est.tech> tipc: fix NULL deref in tipc_named_node_up() on empty publication list Eric Dumazet <edumazet(a)google.com> ip6_gre: check tunnel info before xmit in ip6gre_tunnel_xmit Eric Dumazet <edumazet(a)google.com> ipv6: tunnels: use DEV_STATS_INC() Qingfang Deng <qingfang.deng(a)linux.dev> ppp: ppp_async: simplify tty disc_data access Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Validate and program TDM slots correctly Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Correct digital interface format setup Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Repair the DAPM capture graph Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Reset the audio block before configuring it Gongwei Li <ligongwei(a)kylinos.cn> Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: rate limit unmapped SID errors Yilin Zhang <yilinzhang(a)moonshot.ai> ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF Colin Ian King <colin.i.king(a)gmail.com> OPP: of: Fix potential multiplication overflow when calculating freq Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix NULL pointer dereference in PM callbacks James Nugraha <aslan.jnn(a)gmail.com> net: amd-xgbe: discard rx packets with bad FCS Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> raw: annotate disconnect-side IPv4 match writers Henry Martin <bsdhenrymartin(a)gmail.com> sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> smb: client: transport: Fix debug printing in __release_mid() Huiwen He <hehuiwen(a)kylinos.cn> smb/client: mark file sparse before emulating insert range Milan P. Gandhi <mgandhi(a)redhat.com> scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() Milan P. Gandhi <mgandhi(a)redhat.com> scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() Xin Long <lucien.xin(a)gmail.com> sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: fix skb sizing and action leak on reoffload delete Pedro Tammela <pctammela(a)mojatatu.com> net/sched: act_api: conditional notification of events Pedro Tammela <pctammela(a)mojatatu.com> net/sched: act_api: don't open code max() Pedro Tammela <pctammela(a)mojatatu.com> rtnl: add helper to send if skb is not null Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: size the RTM_GETACTION reply from the actions Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: budget all shared attributes in notify skbs Eric Dumazet <edumazet(a)google.com> net: icmp: avoid invalid transport header access in icmp_send tracepoint Hongfu Li <lihongfu(a)kylinos.cn> selftests/cgroup: Fix cg_run_in_subcgroups ignoring arg parameter Xixin Liu <liuxixin(a)kylinos.cn> nvme-rdma: fix -EIO cleanup order in queue_rq Dan Carpenter <error27(a)gmail.com> drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Jad Keskes <inasj268(a)gmail.com> EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix channel address decode for non-hash mode Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix channel selection hash Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix interleave boundary condition Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> ARM: ensure interrupts are enabled in __do_user_fault() Xie Yuanbin <xieyuanbin1(a)huawei.com> ARM: 9484/1: enable interrupts when unhandled user faults are triggered Sasha Levin <sashal(a)kernel.org> Revert "Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU" Sasha Levin <sashal(a)kernel.org> Revert "Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU" SJ Park <sj(a)kernel.org> mm/damon/core: avoid infinite kdamond_merge_regions() internal loop Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Unlink scc_entry in unix_del_edge(). Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use memcmp() to compare ClientGUIDs HyeongJun An <sammiee5311(a)gmail.com> ASoC: meson: aiu: Validate written enum values Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). Xin Long <lucien.xin(a)gmail.com> sctp: fix err_chunk memory leaks in INIT handling Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Mask pseudo pointer values in verifier logs Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix malformed ISO_END/CONT handling Pauli Virtanen <pav(a)iki.fi> Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds Cen Zhang (Microsoft) <blbllhy(a)gmail.com> tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD Eric Dumazet <edumazet(a)google.com> drop_monitor: fix size calculations for 64-bit attributes Eric Dumazet <edumazet(a)google.com> drop_monitor: perform u64_stats updates under IRQ-disabled section Zhiling Zou <roxy520tt(a)gmail.com> sctp: close UDP tunnel sockets during netns teardown Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate ACE size against SID sub-authorities Vlatko Kosturjak <kost(a)linux.hr> ppp_async: drop the errored frame instead of resetting its headroom Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> wifi: mt76: mt7921: skip unknown CLC firmware records Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> wifi: mt76: mt7921: validate CLC firmware records Geert Uytterhoeven <geert+renesas(a)glider.be> clk: at91: pmc: #undef field_{get,prep}() before definition Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> tracing/histograms: Simplify last_cmd_set() Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: remove stale channels from all sessions on teardown Genevieve Chan <genevieve.chan(a)altera.com> firmware: stratix10-svc: fix FCS SMC call kernel-doc Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state Zizhi Wo <wozizhi(a)huawei.com> scsi: core: Do not block on tag allocation in scsi_eh_lock_door() Rudi Heitbaum <rudi(a)heitbaum.com> ASoC: rt5645: Perform the initial jack detect at probe Jisheng Zhang <jszhang(a)kernel.org> spi: dw: fix wrong RX_SAMPLE_DLY setting after resume Jia Jia <physicalmtea(a)gmail.com> vhost-scsi: flush backend after device ioctls Robert Abrahamse <denobyte2(a)gmail.com> ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) Jiale Yao <yaojiale02(a)163.com> Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame Deepanshu Kartikey <kartikey406(a)gmail.com> wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() Li Qiang <liqiang01(a)kylinos.cn> cifs: validate idmap key payload length Vaibhav Jain <vaibhav(a)linux.ibm.com> powerpc/pseries: Ensure vpa,slb_shadow & dtl are unregistered during crash Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: pass the return value of skb_checksum_help() Madhavender Singh <madhav(a)disroot.org> ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx Markus Lindner <lindner.markus(a)outlook.at> ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 Minhong He <heminhong(a)kylinos.cn> phonet: check register_netdevice_notifier() error in phonet_device_init() Pengpeng Hou <pengpeng(a)iscas.ac.cn> drm/gma500: return errors from Oaktrail HDMI I2C reads Ibrahim Hashimov <security(a)auditcode.ai> wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO Kamal Wadhwa <kamal.wadhwa(a)oss.qualcomm.com> regulator: core: clamp voltage constraints before applying apply_uV Jay Vadayath <jay(a)artiphishell.com> smb: client: bound dirent name against end of SMB response in cifs_filldir Georgi Valkov <gvalkov(a)gmail.com> wifi: mwifiex: replace one-element arrays with flexible array members Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: acpi: validate WGDS table revision index Daniel C. Ribeiro <dcoutinho.96(a)gmail.com> ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: bound aligned TLV advance in FW parser Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized Pu Hu <hupu(a)transsion.com> arm64: kprobes: Allow reentering kprobes while single-stepping Yu Peng <pengyu(a)kylinos.cn> arm64: fixmap: Allow 256K early_ioremap() at any offset Tao Cui <cuitao(a)kylinos.cn> blk-cgroup: fix leaks and online flag on radix_tree_insert failure Marcel Kłos <marcel(a)marmak.net.pl> ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix sched scan IE sizing Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix an off-by-1 boundary check Filipe Manana <fdmanana(a)suse.com> btrfs: fix reloc root cleanup in merge_reloc_roots() Wang YuWei <1973615295(a)qq.com> spi: dw-dma: Wait for controller idle before completing Tx Filipe Manana <fdmanana(a)suse.com> btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() Dave Chen <davechen(a)synology.com> btrfs: only account delalloc bytes for regular file inodes in btrfs_getattr() Chen Bowen <hicbowen(a)gmail.com> ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: rsi: validate beacon length before fixed buffer copy Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: mark the rcu locked areas properly Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: libipw: fix key index receive bound checks Liang Hao <haohlliang(a)gmail.com> gpio: dwapb: Mask interrupts at hardware initialization Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate rx/tx MLME callback frame lengths before access Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate SID namespace before mapping IDs Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: mark invalid session responses as signed Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: find bound sessions during reauthentication Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate assoc response length before status and IE access Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: libertas: reject short monitor TX frames Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate deauth frame length before reason access Corentin Labbe <clabbe(a)baylibre.com> wifi: ralink: RT2X00: init EEPROM properly Pengpeng Hou <pengpeng(a)iscas.ac.cn> ALSA: usb-audio: caiaq: validate EP1 reply lengths Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix credit charge calculation for SMB2 QUERY_INFO Jetha Chan <jethachan(a)gmail.com> ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table David Howells <dhowells(a)redhat.com> cachefiles: Fix double fput Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix outstanding credit leak on abort and error paths Yousef Alhouseen <alhouseenyousef(a)gmail.com> xen/gntalloc: validate grant count before allocation Farhad Alemi <farhad.alemi(a)berkeley.edu> freevxfs: don't BUG() on unknown typed-extent type Yousef Alhouseen <alhouseenyousef(a)gmail.com> xen/front-pgdir-shbuf: free grant reference head on errors Qiang Liu <liuqiang(a)kylinos.cn> ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling Qiang Liu <liuqiang(a)kylinos.cn> ksmbd: fix n.data memory leak in ksmbd_vfs_set_dos_attrib_xattr Gustavo Kenji Mendonça Kaneko <kaneko.dev(a)pm.me> drm/arm/komeda: fix error handling for clk_prepare_enable() and callers Qiang Liu <liuqiang(a)kylinos.cn> ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr Florian Westphal <fw(a)strlen.de> netfilter: nf_conntrack_expect: zero at allocation time Gustavo Kenji Mendonça Kaneko <kaneko.dev(a)pm.me> drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend Weiming Shi <bestswngs(a)gmail.com> btrfs: tree-checker: validate INODE_REF's namelen Praveen Talari <praveen.talari(a)oss.qualcomm.com> spi: core: Abort active target transfer on controller suspend Haoxiang Li <haoxiang_li2024(a)163.com> fbdev: pm2fb: unwind WC setup on probe failure Arnd Bergmann <arnd(a)arndb.de> eth: mlx5: fix macsec dependency Adriana Stancu <adriana(a)arista.com> rtc: bq32000: add delay between RTC reads Yu Kuai <yukuai(a)fygo.io> blk-cgroup: protect iterating blkgs with blkcg->lock in blkcg_print_stat() Runyu Xiao <runyu.xiao(a)seu.edu.cn> net: au1000: move free_irq out of the close-time spinlocked section Pengpeng Hou <pengpeng(a)iscas.ac.cn> regulator: da9121: Use subvariant ids in the I2C table Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/sysfs: Use kstrtobool() to parse the ROM attribute input Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: break RH leases before delete-on-close Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: start file id allocation at 1 Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: apply create security descriptor first Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: treat unnamed DATA stream as base file Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use connection ClientGUID for lease lookup Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: align SMB2 oplock break ack handling Tommy Huang <tommy_huang(a)aspeedtech.com> rtc: aspeed: add AST2700 compatible Samuel Moelius <sam.moelius(a)trailofbits.com> f2fs: validate inline dentry name lengths before conversion Chen Cheng <chencheng(a)fnnas.com> md/raid5: let stripe batch bm_seq comparison wrap-safe Yu Kuai <yukuai(a)fygo.io> md/raid5: account discard IO Hans Zhang <18255117159(a)163.com> PCI: mediatek: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: rockchip: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: altera: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: iproc: Protect root bus removal with rescan lock Jean-Louis Colaco <jean-louis.colaco(a)orange.fr> ALSA: usb-audio: Add quirk for YAMAHA CDS3000 Matthew Bystrin <dev.mbstr(a)gmail.com> mfd: rsmu: Add 8a34002 support Tobias Deiminger <tobias.deiminger(a)linutronix.de> leds: pca9532: Don't stop blinking for non-zero brightness Yousef Alhouseen <alhouseenyousef(a)gmail.com> leds: uleds: Return -EFAULT on copy_to_user() failure Galen Hassen <rwekyes(a)gmail.com> ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 Jakub Kicinski <kuba(a)kernel.org> tls: reject the combination of TLS and sockmap Ai Chao <aichao(a)kylinos.cn> ALSA: usb-audio: Add quirk flags for SC13A guoqi0226 <guoqi0226(a)163.com> spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() Rob Herring (Arm) <robh(a)kernel.org> gpio: pisosr: Read "ngpios" as u32 Arnd Bergmann <arnd(a)arndb.de> scsi: bfa: Reduce kernel stack usage in bfa_fcs_lport_fdmi_build_portattr_block() Zhang Tianci <zhangtianci.1997(a)bytedance.com> fuse: set ff->flock only on success Jiri Kosina <jkosina(a)suse.com> HID: hidpp: fix potential UAF in hidpp_connect_event() Viktor Menshin <ripeeerr(a)gmail.com> ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT Rosen Penev <rosenp(a)gmail.com> sparc: Disable compat support with LLD Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA Alice Mikityanska <alice(a)isovalent.com> net/sched: act_csum: don't mangle UDP tunnel GSO packets Agalakov Daniil <ade(a)amicon.ru> e1000e: limit endianness conversion to boundary words Raf Dickson <rafdog35(a)gmail.com> vsock: use sk_acceptq_is_full() helper in all transports Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ptp: ocp: add shutdown callback Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Rosen Penev <rosenp(a)gmail.com> sparc64: uprobes: add missing break bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: L2CAP: validate connectionless PSM length Cris <cxs1494089474(a)gmail.com> Bluetooth: btusb: Add support for TP-Link TL-UB250 Hrvoje Nuic <hrvoje.nuic(a)gmail.com> Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV Vadim Fedorenko <vadim.fedorenko(a)linux.dev> spi: xilinx: let transfers timeout in case of no IRQ Potin Lai <potin.lai.pt(a)gmail.com> hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i Tze Yee Ng <tze.yee.ng(a)altera.com> dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems Yuho Choi <dbgh9129(a)gmail.com> sctp: Unwind address notifier registration on failure Nikolay Metchev <nikolaymetchev(a)gmail.com> platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table Xu Rao <raoxu(a)uniontech.com> ata: libata-pmp: add JMicron JMS562 quirk Furst Blumier <seal(a)furst.blue> ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC Evgenii Burenchev <evg28bur(a)yandex.ru> vdpa/ifcvf: handle dev_set_name() failure in ifcvf_vdpa_dev_add() Kory Maincent <kory.maincent(a)bootlin.com> hwmon: (adt7462) Add of_match_table to support devicetree KangNing Liao <lkangn.kernel(a)gmail.com> btrfs: protect sb_write_pointer() with invalidate lock Jiajia Liu <liujiajia(a)kylinos.cn> wifi: mt76: transform aspm_conf for pci_disable_link_state Gleb Sonichev <sonichev555(a)gmail.com> platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table Rosen Penev <rosenp(a)gmail.com> net: ibm: emac: mal: fix potential system hang in mal_remove() Al Viro <viro(a)zeniv.linux.org.uk> configfs_depend_prep(): pass configfs_dirent instead of dentry Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Add request-pool slack for delayed recycling Aurelien DESBRIERES <aurelien(a)hackers.camp> RDMA/rtrs-srv: Fix integer underflow in process_read and process_write Dai Ngo <dai.ngo(a)oracle.com> NFS: fix eof updates after NFSv4.2 fallocate/zero-range Zhang Cen <rollkingzzc(a)gmail.com> btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF ZhengYuan Huang <gality369(a)gmail.com> btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() Rosen Penev <rosenp(a)gmail.com> netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() Ruoyu Wang <ruoyuw560(a)gmail.com> ALSA: es18xx: check control allocation before private data setup Maoyi Xie <maoyixie.tju(a)gmail.com> hsr: broadcast netlink notifications in the device's net namespace Guangshuo Li <lgs201920130244(a)gmail.com> net: cpsw_new: unregister devlink on port registration failure Dawei Feng <dawei.feng(a)seu.edu.cn> bpf: NUL-terminate replaced sysctl value Li RongQing <lirongqing(a)baidu.com> RDMA/mlx5: Fix state and counter desync on loopback enable failure Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() Thiyagarajan Pandiyan <thiyagarajan(a)aerlync.com> wifi: nl80211: Increase ie_len size to prevent truncated IEs in new peer notifications Rosen Penev <rosenp(a)gmail.com> ipmi: si: Use platform_get_irq_optional() to retrieve interrupt Andrei Faleichyk <andrei.faleichyk(a)noogadev.com> ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP Michael Walle <mwalle(a)kernel.org> clk: keystone: don't cache clock rate Cyrill Gorcunov <gorcunov(a)gmail.com> RDMA/irdma: Fix typo in SQ completions generation Asad Kamal <asad.kamal(a)amd.com> drm/amd/pm: bound pp_dpm_set_pp_table() memcpy Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: Prevent queuing new commands if xhci is inaccessible Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix handling of NAPI on the remove path David Yang <mmyangfl(a)gmail.com> net: dsa: sja1105: flower: reject cross-chip redirect Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix the error path in dpaa2_switch_rx() Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: rework FDB management on the bridge leave path Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: seq: oss: Reject reads that cannot fit the next event Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: codecs: rk3328: Use managed GPIO and clock helpers Alessandro Schino <7991aleschino(a)gmail.com> ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e() ZhengYuan Huang <gality369(a)gmail.com> fs/ntfs3: validate index entry key bounds ZhengYuan Huang <gality369(a)gmail.com> fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib Simon Xue <xxm(a)rock-chips.com> iommu/rockchip: disable fetch dte time limit Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> net: wwan: t7xx: Add delay between MD and SAP suspend Wentao Liang <vulab(a)iscas.ac.cn> net: qrtr: fix node refcount leak on ctrl packet alloc failure Chen Pei <cp0613(a)linux.alibaba.com> ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach liyouhong <liyouhong(a)kylinos.cn> ata: ahci: fail probe if BAR too small for claimed ports Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: return error code to consumers on failures Miaoqing Pan <miaoqing.pan(a)oss.qualcomm.com> wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi Rosen Penev <rosenp(a)gmail.com> net: ibm: emac: Reserve VLAN header in MJS limit Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Also reset {insn,data}_cur on realloc failure Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: switch to non-devm request_threaded_irq() Rik van Riel <riel(a)surriel.com> perf/ftrace: Fix WARNING in __unregister_ftrace_function Miao Li <limiao(a)kylinos.cn> iio: light: stk3310: Deal with the ps interrupt issue in PM Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC Karl Mehltretter <kmehltretter(a)gmail.com> tracing: Disable KCOV instrumentation for trace_irqsoff.o Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC Osama Abdelkader <osama.abdelkader(a)gmail.com> mmc: davinci: fix mmc_add_host order in probe Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: only handle alert events when the peripheral is attached Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: dmi-quirks: Disable ghost Realtek devices Tiezhu Yang <yangtiezhu(a)loongson.cn> libbpf: Add __NR_bpf definition for LoongArch Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Complete coredump handling Alexandre Courbot <acourbot(a)nvidia.com> scripts: modpost: detect and report truncated buf_printf() output shayderrr <darknessshayder(a)gmail.com> host1x: bus: Fix missing ops null check in error teardown Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> pinctrl: renesas: rzv2m: Use -ENOTSUPP instead of -EOPNOTSUPP Viacheslav Dubeyko <slava(a)dubeyko.com> hfs: rework hfsplus_readdir() logic ikaros <void0red(a)gmail.com> ACPICA: add boundary checks in two places ikaros <void0red(a)gmail.com> ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() Weiming Shi <bestswngs(a)gmail.com> ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() ikaros <void0red(a)gmail.com> ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() ikaros <void0red(a)gmail.com> ACPICA: Add validation for node in acpi_ns_build_normalized_path() ikaros <void0red(a)gmail.com> ACPICA: Add package limit checks in parser functions ikaros <void0red(a)gmail.com> ACPICA: validate handler object type in two places ikaros <void0red(a)gmail.com> ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() ikaros <void0red(a)gmail.com> ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) ikaros <void0red(a)gmail.com> ACPICA: Prevent adding invalid references ikaros <void0red(a)gmail.com> ACPICA: validate byte_count in acpi_ps_get_next_package_length() ikaros <void0red(a)gmail.com> ACPICA: add boundary checks in acpi_ps_get_next_field() ikaros <void0red(a)gmail.com> ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() ikaros <void0red(a)gmail.com> ACPICA: Fix condition check in acpi_ps_parse_loop() Jeremy Klarenbeek <jeremy.klarenbeek99(a)gmail.com> drm/amd/pm/si: Fix updating clock limits from power states Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> net: thunderx: fix PTP device ref leak in nicvf_probe() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: addrconf: fix temp address generation after prefix deprecation Luka Gejak <luka.gejak(a)linux.dev> net: hsr: require valid EOT supervision TLV Uwe Küchler <uwe(a)kuechler.org> ALSA: usb-audio: Add quirk for Novation Mininova Mostafa Saleh <smostafa(a)google.com> irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed Stepan Ionichev <sozdayvek(a)gmail.com> iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind Rosen Penev <rosenp(a)gmail.com> mips: cps: Assemble jr.hb with an R2 ISA level Dario Binacchi <dario.binacchi(a)amarulasolutions.com> drm/panel: simple: Add AM-1280800W8TZQW-T00H Daniel Lezcano <daniel.lezcano(a)oss.qualcomm.com> thermal/drivers/tegra/soctherma: Switch to devm cooling device registration Adrian Ng Ho Yin <adrian.ho.yin.ng(a)altera.com> clk: socfpga: agilex: implement l3_main_free_clk Heiko Carstens <hca(a)linux.ibm.com> s390/zcore: Removed unused variables Jiayuan Chen <jiayuan.chen(a)linux.dev> rds: annotate data-race around rs_seen_congestion Maoyi Xie <maoyixie.tju(a)gmail.com> rds: filter RDS_INFO_* getsockopt by caller's netns Chenguang Zhao <zhaochenguang(a)kylinos.cn> netlabel: fix IPv6 unlabeled address add error handling Dian-Syuan Yang <dian_syuan0116(a)realtek.com> wifi: rtw89: pci: enable LTR based on pcie control register Venkat Rao Bagalkote <venkat88(a)linux.ibm.com> char/nvram: Remove redundant nvram_mutex Christian Marangi <ansuelsmth(a)gmail.com> usb: host: add ARCH_AIROHA in XHCI MTK dependency Marco Felsch <m.felsch(a)pengutronix.de> serial: 8250: fix possible ISR soft lockup Maoyi Xie <maoyixie.tju(a)gmail.com> usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue Dave Carey <carvsdriver(a)gmail.com> USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set Stepan Ionichev <sozdayvek(a)gmail.com> usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log Oliver Neukum <oneukum(a)suse.com> usb: core: hcd: fix possible deadlock in rh control transfers Adrian Wowk <dev(a)adrianwowk.com> usbip: vhci_hcd: fix NULL deref in status_show_vhci Nikhil Chatterjee <nikhilc1527(a)gmail.com> HID: bpf: Add Huion Inspiroy Frego M button quirk Christoph Hellwig <hch(a)lst.de> isofs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> omfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> hpfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> jfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> qnx4: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> minix: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> bfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> affs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> befs: handle set_blocksize failures Allison Henderson <achender(a)kernel.org> net/rds: Don't sleep inside rds_ib_conn_path_shutdown Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: make cl->quantum lockless Eric Dumazet <edumazet(a)google.com> net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() Jan Volckaert <janvolck(a)gmail.com> net: usb: qmi_wwan: add MeiG SRM813Q Maurizio Lombardi <mlombard(a)redhat.com> nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl Yury Norov <ynorov(a)nvidia.com> bitfield: wire __bf_shf to __builtin_ctzll Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Validate SENSOR_UPDATE payload size Pierre Barre <pierre(a)barre.sh> 9p: use kvzalloc for readdir buffer Leonardo Bras <leo.bras(a)arm.com> arm64/daifflags: Make local_daif_*() helpers __always_inline Pierre Barre <pierre(a)barre.sh> 9p: invalidate readdir buffer on seek Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usx2y: Drain pending US-428 pipe-4 output commands David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds on allocate_doorbell David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id Bjorn Helgaas <helgaas(a)kernel.org> PCI: Wait for device readiness after D3hot -> D0uninitialized transition Joonwon Kang <joonwonkang(a)google.com> mailbox: Make mbox_send_message() return error code when tx fails Chenguang Zhao <zhaochenguang(a)kylinos.cn> RDMA/mlx5: Use QP port when decoding responder CQEs Alessandro Baldi <baldovic(a)virgilio.it> media: imon: Add iMON VFD HID OEM v1.2 key mappings Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-ecc - add support for atecc608b Lukas Wunner <lukas(a)wunner.de> crypto: ecc - Unbreak the build on arm with CONFIG_KASAN_STACK=y Kumar Meiyappan <kumar.meiyappan(a)microchip.com> scsi: pm8001: Reject non-fatal dump when controller is crashed Kumar Meiyappan <kumar.meiyappan(a)microchip.com> scsi: pm8001: Reject firmware update in fatal error state Alexey Klimov <alexey.klimov(a)linaro.org> clk: samsung: exynos850: mark APM I3C clocks as critical Stefan Berger <stefanb(a)linux.ibm.com> integrity: Check for NULL returned by asymmetric_key_public_key Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: add support for RTL8367SB Arash Golgol <arash.golgol(a)gmail.com> media: video-i2c: use vb2_video_unregister_device on driver removal Sophie D <patches(a)scd31.com> drm/gud: Add RCade Display Adapter VID/PID pair Viacheslav Dubeyko <slava(a)dubeyko.com> hfsplus: rework hfsplus_readdir() logic Florian Eckert <fe(a)dev.tdt.de> PCI: intel-gw: Enable clock before PHY init Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Fix CRC open failure during active rendering Stepan Ionichev <sozdayvek(a)gmail.com> mmc: davinci: avoid NULL deref of host->data in IRQ handler Shawn Lin <shawn.lin(a)rock-chips.com> mmc: core: Add validation for host-provided max_segs Ethan Nelson-Moore <enelsonmoore(a)gmail.com> ASoC: ti: omap3pandora: update board check to use DT compatible Parth Pancholi <parth.pancholi(a)toradex.com> drm/bridge: tc358768: Set pre_enable_prev_first for reverse order Geert Uytterhoeven <geert+renesas(a)glider.be> clk: renesas: cpg-mssr: Add number of clock cells check Ruoyu Wang <ruoyuw560(a)gmail.com> crypto: ixp4xx - fix buffer chain unwind on allocation failure Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> media: em28xx-video: fix missing res_free() on init_usb_xfer failure Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: enable .rmu_disable() for 6320 family Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: define .pot_clear() for 6321 Ben Reed <Ben.Reed(a)microchip.com> PCI: switchtec: Add Gen6 Device IDs Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: fix number of g1 interrupts for 6320 family Zhaoyang Yu <2426767509(a)qq.com> media: dm1105: fix missing error check for dma_alloc_coherent Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> thunderbolt: Don't create multiple DMA tunnels on firmware connection manager Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Set tb->root_switch to NULL when domain is stopped Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Keep the domain reference while processing hotplug Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Keep XDomain reference during the lifetime of a service Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Purge based on the cdev's online status Riccardo Boninsegna <rboninsegna2(a)gmail.com> media: rc: mceusb: Add support for 04eb:e033 Pengpeng Hou <pengpeng(a)iscas.ac.cn> soundwire: validate DT compatible before parsing it Danielle Ratson <danieller(a)nvidia.com> bridge: Do not suppress ARP probes and DAD NS unconditionally Siew Chin Lim <elly.siew.chin.lim(a)intel.com> firmware: stratix10-svc: change get provision data to async SMC call Marco Elver <elver(a)google.com> kcsan: Silence -Wmaybe-uninitialized when calling __kcsan_check_access() Panagiotis Petrakopoulos <npetrakopoulos2003(a)gmail.com> wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: always allow transmitting null-data on TXQs Johannes Berg <johannes.berg(a)intel.com> wifi: nl80211: reject beacons with bad HE operation Viacheslav Dubeyko <slava(a)dubeyko.com> hfsplus: fix issue of direct writes beyond end-of-file Lukas Wunner <lukas(a)wunner.de> PCI: Stop setting cached power state to 'unknown' on unbind Hirokazu Honda <hiroh(a)chromium.org> tee: optee: Allow MT_NORMAL_TAGGED shared memory Xu Yang <xu.yang_2(a)nxp.com> usb: gadget: udc: skip pullup() if already connected Goldwyn Rodrigues <rgoldwyn(a)suse.de> ima: return error early if file xattr cannot be changed Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate write errors in generic mixer put callbacks Ioana Ciornei <ioana.ciornei(a)nxp.com> bus: fsl-mc: wait for the MC firmware to complete its boot Boris Brezillon <boris.brezillon(a)collabora.com> drm/gem: Consider GEM object reclaimable if shrinking fails ------------- Diffstat: .../ABI/testing/sysfs-devices-platform-trackpoint | 2 +- Documentation/networking/ip-sysctl.rst | 2 + Documentation/s390/pci.rst | 144 +- Documentation/s390/vfio-ccw.rst | 2 +- Makefile | 4 +- arch/alpha/include/uapi/asm/fpu.h | 8 +- arch/alpha/kernel/traps.c | 6 +- arch/alpha/math-emu/math.c | 88 +- arch/arm/mach-socfpga/Kconfig | 2 +- arch/arm/mach-ux500/cpu-db8500.c | 6 +- arch/arm/mm/cache-feroceon-l2.c | 2 +- arch/arm/mm/cache-tauros2.c | 2 +- arch/arm/mm/fault.c | 12 +- arch/arm64/boot/dts/qcom/sdm845.dtsi | 64 +- arch/arm64/boot/dts/qcom/sm8150.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8250.dtsi | 12 +- arch/arm64/boot/dts/qcom/sm8350.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8450.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8550.dtsi | 8 +- arch/arm64/boot/dts/renesas/r8a779f0.dtsi | 1 + arch/arm64/include/asm/daifflags.h | 10 +- arch/arm64/include/asm/fixmap.h | 6 +- arch/arm64/include/asm/kprobes.h | 6 + arch/arm64/include/asm/percpu.h | 16 +- arch/arm64/kernel/hibernate-asm.S | 2 + arch/arm64/kernel/probes/kprobes.c | 23 +- arch/mips/cavium-octeon/octeon-platform.c | 4 +- arch/mips/kernel/cps-vec.S | 6 + arch/mips/net/bpf_jit_comp32.c | 2 +- arch/mips/net/bpf_jit_comp64.c | 3 +- arch/powerpc/kernel/eeh_driver.c | 2 - arch/powerpc/kernel/iommu.c | 2 +- arch/powerpc/kernel/smp.c | 1 + arch/powerpc/kexec/file_load_64.c | 2 +- arch/powerpc/kvm/book3s_hv.c | 4 +- arch/powerpc/kvm/book3s_hv_nested.c | 2 + arch/powerpc/kvm/book3s_hv_uvmem.c | 5 +- arch/powerpc/platforms/pseries/kexec.c | 13 +- arch/riscv/kvm/vcpu_timer.c | 5 +- arch/s390/crypto/aes_s390.c | 16 +- arch/s390/include/asm/debug.h | 8 +- arch/s390/kernel/debug.c | 15 +- arch/s390/kvm/interrupt.c | 72 +- arch/sh/drivers/push-switch.c | 2 +- arch/sparc/Kconfig | 1 + arch/sparc/kernel/uprobes.c | 1 + arch/x86/events/intel/core.c | 55 +- arch/x86/pci/fixup.c | 99 ++ block/blk-cgroup.c | 13 +- block/blk-mq.c | 8 +- crypto/Makefile | 5 + drivers/acpi/acpica/dsmethod.c | 43 + drivers/acpi/acpica/evhandler.c | 11 + drivers/acpi/acpica/exconfig.c | 26 +- drivers/acpi/acpica/exoparg3.c | 2 +- drivers/acpi/acpica/nsnames.c | 6 + drivers/acpi/acpica/nsprepkg.c | 7 + drivers/acpi/acpica/nsxfname.c | 4 + drivers/acpi/acpica/psargs.c | 134 +- drivers/acpi/acpica/psloop.c | 30 +- drivers/acpi/acpica/psparse.c | 14 + drivers/acpi/acpica/utcopy.c | 10 +- drivers/acpi/acpica/utresrc.c | 30 + drivers/acpi/pci_root.c | 4 + drivers/ata/ahci.c | 22 + drivers/ata/libahci.c | 15 +- drivers/ata/libata-pmp.c | 7 +- drivers/base/core.c | 119 +- drivers/block/sunvdc.c | 26 +- drivers/bluetooth/btmtksdio.c | 4 +- drivers/bluetooth/btusb.c | 41 +- drivers/bluetooth/hci_mrvl.c | 3 +- drivers/bus/fsl-mc/fsl-mc-bus.c | 46 + drivers/char/ipmi/ipmi_si_platform.c | 5 +- drivers/char/nvram.c | 16 +- drivers/char/virtio_console.c | 22 +- drivers/clk/at91/pmc.h | 2 + drivers/clk/clk-scpi.c | 2 +- drivers/clk/keystone/sci-clk.c | 8 + drivers/clk/renesas/renesas-cpg-mssr.c | 3 + drivers/clk/samsung/clk-exynos850.c | 5 +- drivers/clk/socfpga/clk-agilex.c | 2 + drivers/clk/ux500/clk-prcmu.c | 20 +- drivers/clk/ux500/u8500_of_clk.c | 2 +- drivers/clocksource/timer-orion.c | 2 +- drivers/cpufreq/cpufreq.c | 6 +- drivers/cpuidle/cpuidle-ux500.c | 6 +- drivers/crypto/allwinner/Kconfig | 16 - drivers/crypto/allwinner/sun8i-ce/Makefile | 1 - drivers/crypto/allwinner/sun8i-ce/sun8i-ce-core.c | 55 - drivers/crypto/allwinner/sun8i-ce/sun8i-ce-prng.c | 160 -- drivers/crypto/allwinner/sun8i-ce/sun8i-ce.h | 29 - drivers/crypto/allwinner/sun8i-ss/Makefile | 1 - drivers/crypto/allwinner/sun8i-ss/sun8i-ss-core.c | 39 - drivers/crypto/allwinner/sun8i-ss/sun8i-ss-prng.c | 170 -- drivers/crypto/allwinner/sun8i-ss/sun8i-ss.h | 23 - drivers/crypto/atmel-ecc.c | 3 + drivers/crypto/ixp4xx_crypto.c | 25 +- drivers/dma/dmaengine.c | 10 +- drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c | 11 +- drivers/dma/mmp_pdma.c | 2 +- drivers/dma/sprd-dma.c | 3 +- drivers/dma/sun6i-dma.c | 9 +- drivers/dma/ti/k3-udma-glue.c | 5 +- drivers/dma/xilinx/xilinx_dma.c | 26 +- drivers/edac/edac_device_sysfs.c | 11 +- drivers/edac/igen6_edac.c | 27 +- drivers/firmware/arm_scmi/base.c | 15 +- drivers/firmware/arm_scmi/sensors.c | 10 +- drivers/firmware/arm_scpi.c | 4 +- drivers/firmware/stratix10-svc.c | 4 +- drivers/gpio/gpio-arizona.c | 8 +- drivers/gpio/gpio-dwapb.c | 17 + drivers/gpio/gpio-pisosr.c | 4 +- drivers/gpio/gpio-zynq.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 1 + drivers/gpu/drm/amd/amdgpu/atom.c | 9 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 9 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1 + .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crc.c | 7 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 20 +- drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 31 +- drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 3 + drivers/gpu/drm/arm/display/komeda/komeda_dev.c | 6 +- drivers/gpu/drm/arm/display/komeda/komeda_drv.c | 14 +- drivers/gpu/drm/arm/malidp_drv.c | 22 +- drivers/gpu/drm/ast/ast_drv.h | 52 +- drivers/gpu/drm/bridge/tc358768.c | 2 + drivers/gpu/drm/drm_atomic_helper.c | 20 +- drivers/gpu/drm/drm_atomic_uapi.c | 13 +- drivers/gpu/drm/drm_gem.c | 10 + drivers/gpu/drm/gma500/oaktrail_hdmi_i2c.c | 21 +- drivers/gpu/drm/gud/gud_drv.c | 1 + drivers/gpu/drm/gud/gud_pipe.c | 4 +- drivers/gpu/drm/i915/gem/i915_gem_object.c | 2 +- drivers/gpu/drm/i915/i915_query.c | 4 +- drivers/gpu/drm/logicvc/Kconfig | 1 - drivers/gpu/drm/msm/adreno/adreno_gpu.c | 2 + drivers/gpu/drm/msm/dp/dp_display.c | 14 +- drivers/gpu/drm/msm/dsi/dsi.h | 1 + drivers/gpu/drm/msm/dsi/dsi_host.c | 38 +- drivers/gpu/drm/msm/dsi/phy/dsi_phy.c | 4 + drivers/gpu/drm/msm/hdmi/hdmi_phy.c | 8 +- drivers/gpu/drm/nouveau/nouveau_bo.c | 3 +- drivers/gpu/drm/nouveau/nouveau_drm.c | 5 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 2 + drivers/gpu/drm/nouveau/nvif/vmm.c | 1 + drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c | 23 +- drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c | 2 + drivers/gpu/drm/panel/panel-simple.c | 28 + drivers/gpu/drm/virtio/virtgpu_display.c | 2 +- drivers/gpu/drm/virtio/virtgpu_gem.c | 2 +- drivers/gpu/drm/virtio/virtgpu_ioctl.c | 6 +- drivers/gpu/drm/virtio/virtgpu_vram.c | 17 +- drivers/gpu/host1x/bus.c | 4 +- drivers/hid/amd-sfh-hid/amd_sfh_common.h | 4 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 10 + .../hid/bpf/progs/Huion__Inspiroy-Frego-M.bpf.c | 87 + drivers/hid/hid-alps.c | 6 +- drivers/hid/hid-hyperv.c | 58 +- drivers/hid/hid-ids.h | 3 + drivers/hid/hid-logitech-hidpp.c | 11 +- drivers/hid/hid-quirks.c | 3 +- drivers/hid/wacom_sys.c | 5 +- drivers/hwmon/adt7462.c | 8 + drivers/hwmon/applesmc.c | 7 +- drivers/hwmon/aspeed-pwm-tacho.c | 4 +- drivers/hwmon/gpio-fan.c | 13 +- drivers/hwmon/pmbus/lm25066.c | 60 +- drivers/hwmon/pmbus/pmbus.h | 3 +- drivers/hwmon/pmbus/pmbus_core.c | 4 +- drivers/hwmon/pmbus/tps53679.c | 11 +- drivers/hwmon/w83791d.c | 1 + drivers/hwmon/w83793.c | 4 +- drivers/i2c/busses/i2c-at91-core.c | 3 + drivers/i2c/busses/i2c-at91-master.c | 12 +- drivers/i2c/busses/i2c-at91.h | 1 + drivers/i2c/busses/i2c-imx.c | 2 + drivers/i2c/i2c-core-smbus.c | 12 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 4 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 4 +- drivers/iio/accel/mma8452.c | 19 +- drivers/iio/adc/qcom-spmi-iadc.c | 18 +- drivers/iio/light/stk3310.c | 76 +- drivers/infiniband/core/iwpm_util.c | 9 +- drivers/infiniband/core/mad.c | 3 +- drivers/infiniband/core/ucma.c | 7 +- drivers/infiniband/core/umem.c | 18 +- drivers/infiniband/core/verbs.c | 12 +- drivers/infiniband/hw/efa/efa_com.c | 7 +- drivers/infiniband/hw/efa/efa_com.h | 1 + drivers/infiniband/hw/efa/efa_main.c | 35 +- drivers/infiniband/hw/irdma/utils.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 2 +- drivers/infiniband/hw/mlx4/sysfs.c | 4 + drivers/infiniband/hw/mlx5/cq.c | 3 +- drivers/infiniband/hw/mlx5/main.c | 11 + drivers/infiniband/sw/rxe/rxe_mcast.c | 50 +- drivers/infiniband/sw/siw/siw_cm.c | 75 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 2 +- drivers/infiniband/ulp/ipoib/ipoib.h | 7 + drivers/infiniband/ulp/ipoib/ipoib_ib.c | 12 +- drivers/infiniband/ulp/ipoib/ipoib_multicast.c | 16 +- drivers/infiniband/ulp/iser/iser_initiator.c | 16 +- drivers/infiniband/ulp/isert/ib_isert.c | 22 + drivers/infiniband/ulp/isert/ib_isert.h | 2 + drivers/infiniband/ulp/rtrs/rtrs-clt.c | 8 + drivers/infiniband/ulp/rtrs/rtrs-clt.h | 2 + drivers/infiniband/ulp/rtrs/rtrs-srv.c | 12 +- drivers/input/evdev.c | 2 + drivers/input/input-compat.c | 2 + drivers/input/joystick/xpad.c | 10 +- drivers/input/keyboard/adp5588-keys.c | 12 +- drivers/input/keyboard/atkbd.c | 8 + drivers/input/misc/soc_button_array.c | 16 +- drivers/input/mouse/synaptics.c | 8 + drivers/input/rmi4/rmi_driver.c | 13 + drivers/input/rmi4/rmi_smbus.c | 10 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/iommu/rockchip-iommu.c | 8 + drivers/irqchip/irq-gic-v3-its.c | 1 + drivers/leds/leds-pca9532.c | 8 +- drivers/leds/uleds.c | 11 +- drivers/mailbox/mailbox.c | 6 +- drivers/md/raid5.c | 35 +- drivers/media/i2c/video-i2c.c | 7 +- drivers/media/pci/dm1105/dm1105.c | 7 +- drivers/media/pci/intel/ipu3/cio2-bridge.c | 5 + .../platform/verisilicon/hantro_g2_hevc_dec.c | 6 +- drivers/media/rc/imon.c | 4 + drivers/media/rc/mceusb.c | 2 + drivers/media/usb/as102/as102_usb_drv.c | 75 +- drivers/media/usb/em28xx/em28xx-video.c | 4 +- drivers/media/v4l2-core/v4l2-ctrls-core.c | 12 + drivers/media/v4l2-core/v4l2-h264.c | 3 +- drivers/memstick/core/ms_block.c | 2 + drivers/mfd/ab8500-core.c | 2 +- drivers/mfd/db8500-prcmu.c | 6 +- drivers/mfd/rsmu_i2c.c | 2 + drivers/mfd/rsmu_spi.c | 2 + drivers/misc/habanalabs/common/device.c | 9 + drivers/misc/habanalabs/common/habanalabs.h | 1 + drivers/misc/habanalabs/common/habanalabs_drv.c | 1 + drivers/misc/habanalabs/common/memory_mgr.c | 13 +- drivers/mmc/core/bus.c | 2 +- drivers/mmc/core/host.c | 1 + drivers/mmc/core/queue.c | 8 +- drivers/mmc/core/sdio_uart.c | 3 + drivers/mmc/host/davinci_mmc.c | 16 +- drivers/mmc/host/mmc_spi.c | 1 + drivers/mmc/host/mxcmmc.c | 4 + drivers/mmc/host/renesas_sdhi_internal_dmac.c | 2 + drivers/mmc/host/rtsx_pci_sdmmc.c | 5 + drivers/mmc/host/sdhci-of-aspeed.c | 5 +- drivers/mmc/host/sdhci_am654.c | 4 +- drivers/mmc/host/sh_mmcif.c | 3 +- drivers/net/bareudp.c | 11 +- drivers/net/bonding/bond_alb.c | 32 +- drivers/net/bonding/bond_main.c | 4 +- drivers/net/dsa/bcm_sf2_cfp.c | 2 + drivers/net/dsa/mv88e6xxx/chip.c | 23 +- drivers/net/dsa/realtek/rtl8365mb.c | 14 + drivers/net/dsa/sja1105/sja1105_flower.c | 4 +- drivers/net/ethernet/allwinner/sun4i-emac.c | 2 + drivers/net/ethernet/amd/au1000_eth.c | 3 +- drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 3 +- drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 3 + drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 3 + drivers/net/ethernet/atheros/atlx/atl1.c | 3 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 19 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 63 +- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 5 +- drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 20 +- drivers/net/ethernet/broadcom/tg3.c | 15 +- drivers/net/ethernet/cadence/macb.h | 2 +- drivers/net/ethernet/cadence/macb_main.c | 39 +- drivers/net/ethernet/cadence/macb_ptp.c | 9 + drivers/net/ethernet/cavium/thunder/nicvf_main.c | 8 +- drivers/net/ethernet/cortina/gemini.c | 79 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 69 +- drivers/net/ethernet/freescale/fman/fman.c | 1 + drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c | 3 + drivers/net/ethernet/huawei/hinic/hinic_hw_mbox.c | 4 +- drivers/net/ethernet/ibm/emac/core.c | 3 +- drivers/net/ethernet/ibm/emac/mal.c | 6 +- drivers/net/ethernet/intel/e1000e/ethtool.c | 19 +- drivers/net/ethernet/intel/ice/ice_common.c | 9 +- drivers/net/ethernet/intel/ice/ice_sched.c | 4 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 20 +- drivers/net/ethernet/intel/ice/ice_type.h | 2 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 3 +- drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 10 + .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 10 +- drivers/net/ethernet/mellanox/mlx5/core/Kconfig | 2 +- drivers/net/ethernet/mellanox/mlx5/core/Makefile | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en/port.c | 15 +- .../ethernet/mellanox/mlx5/core/en/rep/bridge.c | 58 +- .../net/ethernet/mellanox/mlx5/core/en/tc/sample.c | 7 +- drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 11 + .../net/ethernet/mellanox/mlx5/core/esw/bridge.c | 213 +-- .../net/ethernet/mellanox/mlx5/core/esw/bridge.h | 21 +- .../ethernet/mellanox/mlx5/core/esw/bridge_mcast.c | 316 ++++ .../ethernet/mellanox/mlx5/core/esw/bridge_priv.h | 104 ++ drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 8 +- .../mellanox/mlx5/core/eswitch_offloads_termtbl.c | 7 +- drivers/net/ethernet/micrel/ks8842.c | 4 +- drivers/net/ethernet/micrel/ks8851_common.c | 10 +- drivers/net/ethernet/micrel/ks8851_spi.c | 4 +- drivers/net/ethernet/micrel/ksz884x.c | 4 +- drivers/net/ethernet/microchip/lan743x_main.c | 2 +- drivers/net/ethernet/socionext/netsec.c | 2 + drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c | 5 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c | 4 +- drivers/net/ethernet/stmicro/stmmac/dwxgmac2.h | 4 +- drivers/net/ethernet/stmicro/stmmac/hwif.h | 2 +- drivers/net/ethernet/stmicro/stmmac/ring_mode.c | 4 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 9 + drivers/net/ethernet/stmicro/stmmac/stmmac_ptp.c | 1 - .../net/ethernet/stmicro/stmmac/stmmac_selftests.c | 106 +- drivers/net/ethernet/ti/cpsw_new.c | 4 +- drivers/net/ethernet/ti/netcp_core.c | 2 +- drivers/net/fddi/skfp/skfddi.c | 3 +- drivers/net/ppp/ppp_async.c | 89 +- drivers/net/ppp/ppp_synctty.c | 14 +- drivers/net/usb/catc.c | 15 +- drivers/net/usb/cdc_mbim.c | 5 + drivers/net/usb/cx82310_eth.c | 1 + drivers/net/usb/hso.c | 2 +- drivers/net/usb/lan78xx.c | 9 +- drivers/net/usb/pegasus.c | 54 +- drivers/net/usb/pegasus.h | 3 - drivers/net/usb/qmi_wwan.c | 2 + drivers/net/usb/sr9700.c | 3 +- drivers/net/veth.c | 2 + drivers/net/vrf.c | 2 - drivers/net/vxlan/vxlan_core.c | 266 +-- drivers/net/wireless/ath/ath11k/dp_rx.c | 50 +- drivers/net/wireless/ath/ath9k/hif_usb.c | 12 +- drivers/net/wireless/ath/ath9k/hif_usb.h | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 2 + .../broadcom/brcm80211/brcmsmac/mac80211_if.c | 4 + drivers/net/wireless/intel/ipw2x00/libipw_rx.c | 10 +- drivers/net/wireless/intel/iwlegacy/common.c | 2 +- drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 5 + drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 13 +- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 6 +- drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 4 +- drivers/net/wireless/intersil/p54/eeprom.c | 22 +- drivers/net/wireless/mac80211_hwsim.c | 45 +- drivers/net/wireless/marvell/libertas/tx.c | 7 + drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 8 +- drivers/net/wireless/marvell/mwifiex/fw.h | 18 +- drivers/net/wireless/marvell/mwifiex/join.c | 8 +- drivers/net/wireless/marvell/mwifiex/pcie.c | 2 +- drivers/net/wireless/marvell/mwifiex/scan.c | 54 +- drivers/net/wireless/marvell/mwifiex/sta_cmd.c | 2 +- drivers/net/wireless/marvell/mwifiex/util.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 33 +- drivers/net/wireless/mediatek/mt76/pci.c | 8 +- drivers/net/wireless/microchip/wilc1000/cfg80211.c | 14 + drivers/net/wireless/microchip/wilc1000/wlan.c | 9 + drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2800pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt61pci.c | 2 +- drivers/net/wireless/realtek/rtw88/fw.c | 3 + drivers/net/wireless/realtek/rtw88/main.c | 4 +- drivers/net/wireless/realtek/rtw89/pci.c | 16 +- drivers/net/wireless/rsi/rsi_91x_hal.c | 8 + drivers/net/wireless/rsi/rsi_91x_mgmt.c | 8 +- drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/virt_wifi.c | 4 +- drivers/net/wwan/mhi_wwan_mbim.c | 28 +- drivers/net/wwan/t7xx/t7xx_netdev.c | 4 + drivers/net/wwan/t7xx/t7xx_pci.c | 3 + drivers/nfc/microread/microread.c | 6 +- drivers/nfc/nfcmrvl/fw_dnld.c | 11 +- drivers/nfc/pn533/pn533.c | 14 +- drivers/nfc/pn533/pn533.h | 4 +- drivers/nfc/pn533/usb.c | 4 +- drivers/nfc/pn544/pn544.c | 7 +- drivers/nfc/port100.c | 7 + drivers/nfc/st21nfca/core.c | 12 +- drivers/nfc/st21nfca/i2c.c | 29 +- drivers/nfc/virtual_ncidev.c | 3 +- drivers/nvme/host/apple.c | 182 +- drivers/nvme/host/core.c | 6 +- drivers/nvme/host/rdma.c | 18 +- drivers/opp/of.c | 2 +- drivers/pci/controller/dwc/pcie-intel-gw.c | 19 +- drivers/pci/controller/pcie-altera.c | 2 + drivers/pci/controller/pcie-iproc.c | 2 + drivers/pci/controller/pcie-mediatek.c | 2 + drivers/pci/controller/pcie-rockchip-host.c | 2 + drivers/pci/pci-driver.c | 10 +- drivers/pci/pci-sysfs.c | 11 +- drivers/pci/pci.c | 24 +- drivers/pci/proc.c | 79 +- drivers/pci/quirks.c | 3 + drivers/pci/switch/switchtec.c | 16 + drivers/perf/arm-cmn.c | 10 +- drivers/pinctrl/meson/pinctrl-meson-s4.c | 2 +- drivers/pinctrl/pinctrl-single.c | 3 +- drivers/pinctrl/renesas/pinctrl-rzv2m.c | 4 +- drivers/platform/x86/dell/dell-laptop.c | 9 + drivers/platform/x86/intel/hid.c | 7 + drivers/ptp/ptp_ocp.c | 1 + drivers/regulator/core.c | 163 +- drivers/regulator/da9121-regulator.c | 18 +- drivers/regulator/db8500-prcmu.c | 12 +- drivers/rtc/rtc-aspeed.c | 1 + drivers/rtc/rtc-bq32k.c | 9 + drivers/s390/char/zcore.c | 8 +- drivers/s390/cio/cio.c | 11 +- drivers/s390/cio/device.c | 2 +- drivers/s390/cio/device_ops.c | 14 + drivers/s390/net/qeth_l2.h | 3 +- drivers/s390/net/qeth_l2_main.c | 26 +- drivers/s390/net/qeth_l2_sys.c | 7 +- drivers/scsi/bfa/bfa_fcs_lport.c | 2 +- drivers/scsi/hisi_sas/hisi_sas.h | 3 +- drivers/scsi/hisi_sas/hisi_sas_main.c | 23 +- drivers/scsi/hisi_sas/hisi_sas_v1_hw.c | 2 +- drivers/scsi/hisi_sas/hisi_sas_v2_hw.c | 2 +- drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 4 +- drivers/scsi/libiscsi_tcp.c | 3 + drivers/scsi/megaraid/megaraid_sas_base.c | 4 +- drivers/scsi/mpi3mr/mpi3mr_transport.c | 8 + drivers/scsi/mpt3sas/mpt3sas_base.c | 5 +- drivers/scsi/pm8001/pm8001_ctl.c | 8 + drivers/scsi/pm8001/pm80xx_hwi.c | 7 + drivers/scsi/qla2xxx/qla_os.c | 2 +- drivers/scsi/scsi_error.c | 2 +- drivers/soc/ti/pm33xx.c | 2 +- drivers/soundwire/bus.c | 4 + drivers/soundwire/cadence_master.c | 7 + drivers/soundwire/dmi-quirks.c | 35 + drivers/soundwire/slave.c | 4 +- drivers/spi/spi-dw-dma.c | 3 +- drivers/spi/spi-dw.h | 1 + drivers/spi/spi-xilinx.c | 6 +- drivers/spi/spi-zynqmp-gqspi.c | 52 +- drivers/spi/spi.c | 9 +- drivers/staging/fbtft/fbtft-core.c | 9 +- drivers/target/iscsi/iscsi_target.c | 15 +- drivers/tee/optee/call.c | 3 +- drivers/thermal/db8500_thermal.c | 10 +- drivers/thermal/tegra/soctherm.c | 6 +- drivers/thunderbolt/icm.c | 10 + drivers/thunderbolt/tb.c | 6 +- drivers/thunderbolt/xdomain.c | 41 +- drivers/tty/serial/8250/8250_port.c | 7 + drivers/usb/atm/xusbatm.c | 6 +- drivers/usb/class/cdc-acm.c | 6 + drivers/usb/class/usbtmc.c | 2 - drivers/usb/core/hcd.c | 14 +- drivers/usb/gadget/udc/aspeed_udc.c | 7 +- drivers/usb/gadget/udc/core.c | 7 +- drivers/usb/gadget/udc/goku_udc.c | 3 +- drivers/usb/host/Kconfig | 2 +- drivers/usb/host/xhci-ring.c | 6 + drivers/usb/host/xhci.c | 4 + drivers/usb/usbip/vhci_sysfs.c | 52 +- drivers/vdpa/ifcvf/ifcvf_main.c | 11 +- drivers/vdpa/vdpa_sim/vdpa_sim_blk.c | 3 +- drivers/vhost/scsi.c | 3 +- drivers/vhost/vdpa.c | 12 +- drivers/video/fbdev/pm2fb.c | 1 + drivers/video/fbdev/vfb.c | 11 +- drivers/virtio/virtio_input.c | 9 +- drivers/virtio/virtio_pci_common.c | 4 +- drivers/watchdog/da9063_wdt.c | 4 +- drivers/watchdog/db8500_wdt.c | 22 +- drivers/watchdog/digicolor_wdt.c | 13 +- drivers/watchdog/msc313e_wdt.c | 88 +- drivers/watchdog/sp5100_tco.c | 6 +- drivers/watchdog/sunxi_wdt.c | 45 +- drivers/watchdog/watchdog_hrtimer_pretimeout.c | 1 + drivers/xen/gntalloc.c | 13 +- drivers/xen/xen-front-pgdir-shbuf.c | 12 +- fs/9p/vfs_dir.c | 14 +- fs/affs/affs.h | 5 - fs/affs/super.c | 6 +- fs/autofs/inode.c | 4 + fs/befs/linuxvfs.c | 3 +- fs/bfs/inode.c | 3 +- fs/btrfs/ctree.c | 10 +- fs/btrfs/extent_io.c | 33 +- fs/btrfs/inode.c | 3 +- fs/btrfs/ioctl.c | 11 +- fs/btrfs/relocation.c | 47 +- fs/btrfs/transaction.c | 13 +- fs/btrfs/tree-checker.c | 43 +- fs/btrfs/tree-mod-log.c | 73 +- fs/btrfs/volumes.c | 10 +- fs/btrfs/zoned.c | 2 + fs/cachefiles/namei.c | 1 - fs/configfs/dir.c | 12 +- fs/erofs/zdata.c | 13 +- fs/exec.c | 22 +- fs/f2fs/inline.c | 7 + fs/freevxfs/vxfs_bmap.c | 3 +- fs/fs-writeback.c | 25 +- fs/fuse/file.c | 3 +- fs/hfs/catalog.c | 9 - fs/hfs/dir.c | 28 +- fs/hfs/hfs.h | 3 +- fs/hfs/hfs_fs.h | 2 - fs/hfs/inode.c | 4 - fs/hfsplus/catalog.c | 11 - fs/hfsplus/dir.c | 28 +- fs/hfsplus/hfsplus_fs.h | 5 +- fs/hfsplus/inode.c | 40 +- fs/hfsplus/super.c | 2 - fs/hpfs/super.c | 3 +- fs/inode.c | 11 +- fs/isofs/inode.c | 3 +- fs/jfs/super.c | 3 +- fs/minix/inode.c | 3 +- fs/nfs/nfs42proc.c | 15 +- fs/ntfs3/dir.c | 4 +- fs/ntfs3/fslog.c | 28 +- fs/ntfs3/index.c | 41 +- fs/ntfs3/xattr.c | 4 +- fs/ocfs2/namei.c | 9 +- fs/ocfs2/xattr.c | 13 +- fs/ocfs2/xattr.h | 8 +- fs/omfs/inode.c | 6 +- fs/qnx4/inode.c | 3 +- fs/smb/client/cifsacl.c | 18 + fs/smb/client/connect.c | 1 + fs/smb/client/file.c | 5 +- fs/smb/client/misc.c | 19 +- fs/smb/client/readdir.c | 9 +- fs/smb/client/smb2ops.c | 31 +- fs/smb/client/smb2pdu.c | 7 +- fs/smb/client/transport.c | 11 +- fs/smb/server/ksmbd_work.h | 7 + fs/smb/server/mgmt/share_config.c | 36 +- fs/smb/server/mgmt/user_session.c | 25 +- fs/smb/server/misc.c | 14 +- fs/smb/server/oplock.c | 16 +- fs/smb/server/oplock.h | 2 +- fs/smb/server/server.c | 20 + fs/smb/server/smb2misc.c | 18 +- fs/smb/server/smb2pdu.c | 148 +- fs/smb/server/smbacl.c | 38 +- fs/smb/server/transport_ipc.c | 24 +- fs/smb/server/vfs.c | 14 +- fs/smb/server/vfs_cache.c | 3 +- fs/smb/server/vfs_cache.h | 7 +- fs/squashfs/xz_wrapper.c | 6 +- fs/ufs/cylinder.c | 10 + fs/ufs/super.c | 17 +- fs/xfs/xfs_icache.c | 2 +- include/drm/drm_atomic_helper.h | 26 + include/drm/drm_modeset_helper_vtables.h | 29 +- include/keys/request_key_auth-type.h | 2 +- include/linux/bitfield.h | 2 +- include/linux/bpf.h | 1 + include/linux/compiler_attributes.h | 12 + include/linux/dev_printk.h | 1 + include/linux/firmware/intel/stratix10-smc.h | 18 +- include/linux/kcsan-checks.h | 6 +- include/linux/lockdep.h | 16 +- include/linux/lockdep_types.h | 8 + include/linux/mailbox_controller.h | 2 + include/linux/mfd/db8500-prcmu.h | 252 ++- include/linux/mfd/dbx500-prcmu.h | 596 ------- include/linux/mlx5/mlx5_ifc.h | 7 +- include/linux/netdevice.h | 23 +- include/linux/platform_data/asoc-ux500-msp.h | 20 - include/linux/rculist.h | 29 + include/linux/rtnetlink.h | 7 + include/linux/switchtec.h | 1 + include/linux/thunderbolt.h | 2 + include/linux/workqueue.h | 3 + include/media/v4l2-hevc.h | 41 + include/net/cfg80211.h | 9 +- include/net/devlink.h | 13 +- include/net/dst.h | 34 +- include/net/gue.h | 19 +- include/net/inet_hashtables.h | 2 +- include/net/ip.h | 14 +- include/net/ip6_route.h | 2 + include/net/ip_fib.h | 5 + include/net/mac80211.h | 9 +- include/net/netfilter/nf_conntrack.h | 5 + include/net/netns/xfrm.h | 2 +- include/net/nfc/hci.h | 2 +- include/net/nfc/nfc.h | 3 +- include/net/route.h | 2 +- include/net/sch_generic.h | 2 +- include/net/udp_tunnel.h | 7 +- include/rdma/ib_umem.h | 4 +- include/sound/hda_codec.h | 30 + include/sound/hdaudio_ext.h | 2 +- include/trace/events/icmp.h | 13 +- init/main.c | 3 +- io_uring/io-wq.c | 1 + kernel/bpf/bpf_local_storage.c | 49 +- kernel/bpf/bpf_lsm.c | 6 +- kernel/bpf/btf.c | 30 +- kernel/bpf/cgroup.c | 1 + kernel/bpf/disasm.c | 5 +- kernel/bpf/hashtab.c | 24 +- kernel/bpf/helpers.c | 2 + kernel/bpf/syscall.c | 5 +- kernel/bpf/verifier.c | 14 + kernel/dma/coherent.c | 13 +- kernel/events/ring_buffer.c | 9 +- kernel/locking/lockdep.c | 230 ++- kernel/sched/fair.c | 45 +- kernel/time/clockevents.c | 35 +- kernel/time/tick-broadcast.c | 36 +- kernel/time/tick-internal.h | 2 + kernel/trace/Makefile | 5 +- kernel/trace/bpf_trace.c | 4 +- kernel/trace/ring_buffer.c | 13 +- kernel/trace/trace_event_perf.c | 12 +- kernel/trace/trace_events_hist.c | 41 +- kernel/trace/trace_probe.c | 48 +- kernel/trace/trace_probe.h | 2 + kernel/workqueue.c | 2 +- mm/backing-dev.c | 5 +- mm/damon/core.c | 13 +- net/8021q/vlan_dev.c | 5 + net/9p/client.c | 2 +- net/appletalk/aarp.c | 5 + net/atm/pppoatm.c | 42 +- net/bluetooth/bnep/core.c | 17 +- net/bluetooth/bnep/netdev.c | 8 +- net/bluetooth/eir.c | 10 +- net/bluetooth/hci_codec.c | 36 +- net/bluetooth/hci_sock.c | 20 +- net/bluetooth/hci_sync.c | 60 +- net/bluetooth/iso.c | 31 +- net/bluetooth/l2cap_core.c | 28 +- net/bluetooth/mgmt.c | 45 +- net/bluetooth/rfcomm/core.c | 6 + net/bluetooth/rfcomm/sock.c | 19 +- net/bluetooth/smp.c | 17 + net/bridge/br_arp_nd_proxy.c | 16 +- net/bridge/br_mst.c | 20 +- net/bridge/br_multicast.c | 2 - net/bridge/br_stp_bpdu.c | 5 +- net/core/dev.c | 12 +- net/core/drop_monitor.c | 22 +- net/core/dst.c | 4 +- net/core/filter.c | 33 +- net/core/skbuff.c | 16 +- net/core/skmsg.c | 4 + net/core/sock.c | 15 +- net/core/sock_map.c | 1 + net/devlink/leftover.c | 99 +- net/hsr/hsr_forward.c | 2 +- net/hsr/hsr_netlink.c | 9 +- net/ieee802154/6lowpan/core.c | 2 +- net/ipv4/arp.c | 1 + net/ipv4/esp4.c | 6 + net/ipv4/fib_rules.c | 4 +- net/ipv4/fib_trie.c | 4 + net/ipv4/fou_core.c | 6 +- net/ipv4/icmp.c | 45 +- net/ipv4/igmp.c | 2 +- net/ipv4/ip_fragment.c | 9 +- net/ipv4/ip_gre.c | 12 + net/ipv4/ip_output.c | 4 +- net/ipv4/ip_tunnel_core.c | 6 + net/ipv4/ip_vti.c | 4 +- net/ipv4/ipmr.c | 2 +- net/ipv4/netfilter.c | 4 +- net/ipv4/nexthop.c | 2 +- net/ipv4/route.c | 10 +- net/ipv4/sysctl_net_ipv4.c | 4 +- net/ipv4/tcp_fastopen.c | 4 +- net/ipv4/tcp_input.c | 3 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv4/tcp_metrics.c | 8 +- net/ipv4/tcp_output.c | 3 + net/ipv4/udp.c | 4 +- net/ipv4/xfrm4_output.c | 2 +- net/ipv6/addrconf.c | 10 +- net/ipv6/esp6.c | 6 + net/ipv6/exthdrs.c | 4 +- net/ipv6/exthdrs_core.c | 3 + net/ipv6/ip6_fib.c | 4 +- net/ipv6/ip6_gre.c | 19 +- net/ipv6/ip6_tunnel.c | 26 +- net/ipv6/ip6_udp_tunnel.c | 37 +- net/ipv6/ip6_vti.c | 16 +- net/ipv6/ip6mr.c | 10 +- net/ipv6/mcast.c | 32 +- net/ipv6/netfilter/ip6_tables.c | 5 + net/ipv6/netfilter/ip6t_rpfilter.c | 2 +- net/ipv6/netfilter/ip6t_rt.c | 11 +- net/ipv6/route.c | 22 +- net/ipv6/seg6.c | 4 +- net/ipv6/seg6_local.c | 3 + net/ipv6/tcp_ipv6.c | 3 +- net/ipv6/xfrm6_output.c | 10 +- net/llc/llc_c_ac.c | 2 +- net/llc/llc_s_ac.c | 4 + net/llc/llc_sap.c | 8 +- net/mac80211/cfg.c | 14 +- net/mac80211/debugfs.c | 2 +- net/mac80211/debugfs_netdev.c | 9 + net/mac80211/ieee80211_i.h | 15 +- net/mac80211/iface.c | 28 +- net/mac80211/main.c | 4 + net/mac80211/mesh.c | 1 - net/mac80211/mlme.c | 6 +- net/mac80211/pm.c | 8 +- net/mac80211/status.c | 4 +- net/mac80211/tdls.c | 194 ++- net/mac80211/tx.c | 46 +- net/mac80211/util.c | 6 +- net/mptcp/options.c | 3 +- net/mptcp/protocol.c | 12 +- net/mptcp/protocol.h | 3 +- net/mptcp/subflow.c | 47 +- net/mptcp/syncookies.c | 5 +- net/netfilter/ipset/ip_set_hash_gen.h | 13 +- net/netfilter/ipvs/ip_vs_core.c | 6 + net/netfilter/ipvs/ip_vs_sync.c | 20 +- net/netfilter/nf_conntrack_expect.c | 3 +- net/netfilter/nf_conntrack_netlink.c | 16 +- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 2 +- net/netfilter/nf_flow_table_core.c | 12 +- net/netfilter/nf_flow_table_offload.c | 7 +- net/netfilter/nf_log_syslog.c | 6 +- net/netfilter/nf_tables_api.c | 4 +- net/netfilter/nfnetlink_log.c | 28 +- net/netfilter/nfnetlink_queue.c | 77 +- net/netfilter/nft_nat.c | 2 +- net/netfilter/nft_set_pipapo_avx2.c | 1 + net/netfilter/nft_synproxy.c | 3 +- net/netlabel/netlabel_unlabeled.c | 2 +- net/nfc/core.c | 15 +- net/nfc/digital_dep.c | 8 +- net/nfc/llcp.h | 1 + net/nfc/llcp_commands.c | 2 +- net/nfc/llcp_core.c | 173 +- net/nfc/llcp_sock.c | 67 +- net/nfc/nci/core.c | 10 +- net/nfc/netlink.c | 7 +- net/nfc/nfc.h | 3 +- net/openvswitch/conntrack.c | 14 +- net/openvswitch/flow.c | 4 +- net/openvswitch/flow_table.c | 4 +- net/packet/af_packet.c | 11 +- net/packet/internal.h | 2 +- net/phonet/pn_dev.c | 30 +- net/qrtr/af_qrtr.c | 4 +- net/rds/af_rds.c | 63 +- net/rds/connection.c | 102 +- net/rds/ib_cm.c | 27 +- net/rds/ib_frmr.c | 11 +- net/rds/ib_recv.c | 9 +- net/rds/message.c | 4 +- net/rds/send.c | 16 +- net/rds/tcp.c | 164 +- net/rds/tcp_listen.c | 6 +- net/sched/act_api.c | 136 +- net/sched/act_csum.c | 8 +- net/sched/act_ct.c | 5 +- net/sched/act_gate.c | 30 +- net/sched/cls_api.c | 2 +- net/sched/cls_route.c | 45 +- net/sched/cls_u32.c | 44 +- net/sched/sch_api.c | 2 +- net/sched/sch_drr.c | 13 +- net/sched/sch_ets.c | 12 +- net/sched/sch_fq_pie.c | 62 +- net/sched/sch_generic.c | 24 +- net/sched/sch_hfsc.c | 22 + net/sched/sch_hhf.c | 15 +- net/sched/sch_pie.c | 2 +- net/sched/sch_sfq.c | 7 +- net/sched/sch_teql.c | 7 +- net/sctp/associola.c | 15 +- net/sctp/input.c | 7 +- net/sctp/ipv6.c | 12 +- net/sctp/protocol.c | 11 +- net/sctp/sm_make_chunk.c | 14 +- net/sctp/sm_sideeffect.c | 48 +- net/sctp/sm_statefuns.c | 7 + net/smc/af_smc.c | 3 +- net/smc/smc_clc.c | 8 +- net/smc/smc_clc.h | 8 +- net/smc/smc_core.c | 2 + net/smc/smc_ib.c | 10 +- net/sunrpc/xprtrdma/verbs.c | 21 +- net/tipc/group.c | 4 +- net/tipc/monitor.c | 3 +- net/tipc/name_table.c | 32 +- net/tipc/socket.c | 4 +- net/tls/tls_main.c | 11 + net/tls/tls_sw.c | 6 +- net/unix/af_unix.c | 42 +- net/unix/garbage.c | 1 + net/vmw_vsock/hyperv_transport.c | 2 +- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/mlme.c | 105 +- net/wireless/nl80211.c | 15 +- net/wireless/rdev-ops.h | 15 +- net/wireless/scan.c | 12 +- net/wireless/trace.h | 255 ++- net/wireless/util.c | 26 +- net/wireless/wext-sme.c | 9 + net/xdp/xskmap.c | 2 +- net/xfrm/espintcp.c | 6 +- net/xfrm/xfrm_input.c | 11 + net/xfrm/xfrm_user.c | 37 +- scripts/mod/modpost.c | 11 +- security/integrity/digsig_asymmetric.c | 4 + security/integrity/ima/ima_appraise.c | 5 + security/keys/gc.c | 4 +- security/keys/request_key_auth.c | 12 +- security/keys/trusted-keys/trusted_tpm2.c | 12 +- security/landlock/errata/abi-1.h | 15 + security/landlock/fs.c | 40 +- security/selinux/avc.c | 5 +- sound/core/pcm_native.c | 35 +- sound/core/pcm_timer.c | 7 +- sound/core/seq/oss/seq_oss_rw.c | 3 +- sound/hda/ext/hdac_ext_controller.c | 6 +- sound/isa/es18xx.c | 4 + sound/pci/ctxfi/cthw20k2.c | 1 + sound/pci/hda/hda_codec.c | 119 +- sound/pci/hda/hda_controller.c | 26 +- sound/pci/hda/hda_proc.c | 4 +- sound/pci/hda/hda_sysfs.c | 77 +- sound/pci/hda/patch_conexant.c | 12 + sound/pci/hda/patch_realtek.c | 19 + sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 +- sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/amd/yc/acp6x-pdm-dma.c | 2 + sound/soc/bcm/bcm63xx-i2s-whistler.c | 1 + sound/soc/codecs/ab8500-codec.c | 543 +++--- sound/soc/codecs/hdmi-codec.c | 6 +- sound/soc/codecs/mt6351.c | 1 + sound/soc/codecs/pcm3168a.c | 20 +- sound/soc/codecs/rk3328_codec.c | 54 +- sound/soc/codecs/rt5645.c | 4 + sound/soc/intel/atom/sst/sst_pci.c | 1 + sound/soc/intel/avs/core.c | 13 +- sound/soc/intel/catpt/ipc.c | 8 + sound/soc/intel/catpt/loader.c | 3 + sound/soc/intel/catpt/registers.h | 12 + sound/soc/intel/skylake/skl.c | 2 +- sound/soc/meson/aiu-acodec-ctrl.c | 3 + sound/soc/meson/aiu-codec-ctrl.c | 3 + sound/soc/qcom/qdsp6/q6apm.c | 10 +- sound/soc/rockchip/rockchip_pdm.c | 16 +- sound/soc/rockchip/rockchip_spdif.c | 1 + sound/soc/sof/intel/hda.c | 2 +- sound/soc/sof/ipc4-topology.c | 10 + sound/soc/sprd/sprd-pcm-compress.c | 15 +- sound/soc/sti/uniperif_reader.c | 4 +- sound/soc/ti/omap3pandora.c | 5 +- sound/soc/ux500/mop500.c | 8 +- sound/soc/ux500/ux500_msp_dai.c | 169 +- sound/soc/ux500/ux500_msp_dai.h | 11 - sound/soc/ux500/ux500_msp_i2s.c | 326 ++-- sound/soc/ux500/ux500_msp_i2s.h | 30 +- sound/soc/ux500/ux500_pcm.c | 83 +- sound/usb/6fire/chip.c | 40 +- sound/usb/6fire/comm.c | 42 +- sound/usb/6fire/comm.h | 2 +- sound/usb/6fire/midi.c | 64 +- sound/usb/6fire/midi.h | 2 +- sound/usb/6fire/pcm.c | 221 +-- sound/usb/6fire/pcm.h | 5 +- sound/usb/bcd2000/bcd2000.c | 33 +- sound/usb/caiaq/audio.c | 10 +- sound/usb/caiaq/device.c | 53 +- sound/usb/caiaq/device.h | 4 +- sound/usb/caiaq/input.c | 6 + sound/usb/caiaq/midi.c | 6 +- sound/usb/mixer.c | 17 +- sound/usb/mixer_maps.c | 25 + sound/usb/quirks-table.h | 22 + sound/usb/quirks.c | 4 + sound/usb/usx2y/us122l.c | 9 +- sound/usb/usx2y/usbusx2y.c | 45 +- sound/usb/usx2y/usbusx2y.h | 4 +- sound/virtio/virtio_card.c | 4 +- tools/bpf/bpftool/map.c | 5 - tools/build/feature/test-bpf.c | 2 + tools/lib/bpf/bpf.c | 2 + tools/lib/bpf/gen_loader.c | 2 + tools/lib/bpf/libbpf.c | 7 + tools/lib/bpf/relo_core.c | 58 +- tools/perf/tests/shell/stat_bpf_counters.sh | 30 +- tools/perf/util/cs-etm.c | 81 +- tools/testing/selftests/alsa/mixer-test.c | 4 +- .../selftests/arm64/mte/check_gcr_el1_cswitch.c | 2 +- tools/testing/selftests/bpf/config | 1 + tools/testing/selftests/bpf/prog_tests/bpf_nf.c | 7 + tools/testing/selftests/bpf/progs/test_bpf_nf.c | 112 +- tools/testing/selftests/cgroup/test_kmem.c | 2 +- .../ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc | 2 +- tools/testing/selftests/landlock/fs_test.c | 1746 +++++++++++++++++++- tools/testing/selftests/nci/nci_dev.c | 45 +- tools/testing/selftests/net/fib_nexthops.sh | 28 + tools/testing/selftests/net/mptcp/mptcp_connect.c | 4 +- tools/testing/selftests/net/pmtu.sh | 2 +- tools/testing/selftests/powerpc/tm/tm.h | 8 +- tools/thermal/tmon/tui.c | 2 +- 916 files changed, 12377 insertions(+), 6492 deletions(-)

2 weeks, 2 days

[PATCH 6.12 000/877] 6.12.112-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.112 release. There are 877 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 02 Oct 2026 15:23:04 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.112-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.112-rc1 Longlong Xia <xialonglong(a)kylinos.cn> mm/hugetlb: keep max_huge_pages when dissolving surplus folios Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Reject key-less BTF for hash maps Pei Xiao <xiaopei01(a)kylinos.cn> usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails Miquel Raynal (DAVE) <miquel.raynal(a)bootlin.com> mtd: rawnand: pl353: Fix debug prints Steven Rostedt <rostedt(a)goodmis.org> tracing: Move d_max_latency out of CONFIG_FSNOTIFY protection Ben Hutchings <benh(a)debian.org> bootconfig: Fix negative seeks on 32-bit with LFS enabled Christoph Hellwig <hch(a)lst.de> nvme: revert the cross-controller atomic write size validation Lin.Cao <lincao12(a)amd.com> drm/amdgpu: fix ring timeout issue in gfx10 sr-iov environment Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: don't free fd-owned sockets when reaping in the heartbeat Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: clear neighbour pointer in rose_kill_by_device() Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: cancel neighbour timers in rose_neigh_put() before freeing Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: drop CALL_REQUEST in loopback timer when device is not running Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: release netdev ref and destroy orphaned incoming sockets Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: fix netdev double-hold in rose_make_new() Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: disconnect orphaned STATE_2 sockets when device is gone Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: set SOCK_DESTROY in rose_kill_by_device() for prompt cleanup Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: fix notifier unregistered too early in rose_exit() Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: fix netdev double-hold in rose_rx_call_request() Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: guard rose_neigh_put() against NULL in timer expiry Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: clear neighbour pointer after rose_neigh_put() in state machines Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: fix race between loopback timer and module removal Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: hold loopback neighbour reference across timer callback Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: fix dev_put() leak in rose_loopback_timer() Xie Bo <xb(a)ultrarisc.com> RISC-V: KVM: Serialize IMSIC attributes with vCPU migration Jiakai Xu <jiakaipeanut(a)gmail.com> RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_rw_attr() Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Update event constraints and cache_extra_regsfor ADL Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Update event constraints and cache_extra_regsfor LNL Sean Christopherson <seanjc(a)google.com> KVM: SEV: Do cache maintenance on the source VM during intra-host migration Zheyun Shen <szy0127(a)sjtu.edu.cn> KVM: SVM: Flush cache only on CPUs running SEV guest Guangshuo Li <lgs201920130244(a)gmail.com> net: ena: fix MMIO read buffer leak on probe failure Dr. David Alan Gilbert <linux(a)treblig.org> net: ena: Remove autopolling mode Yuqi Xu <xuyuqiabc(a)gmail.com> net: ipconfig: bound DHCP option construction Thorsten Blum <thorsten.blum(a)linux.dev> net: ipconfig: Remove outdated comment and indent code block Ilya Maximets <i.maximets(a)ovn.org> net/sched: act_ct: avoid modifying shared unconfirmed ct entry Ilya Maximets <i.maximets(a)ovn.org> net/sched: act_ct: fix helper UAF due to extensions realloc Chen Changcheng <chenchangcheng(a)kylinos.cn> HID: alps: unregister DualPoint Stick input device on remove Bastien Nocera <hadess(a)hadess.net> HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM Willem de Bruijn <willemb(a)google.com> packet: use ubuf_info completion for TX_RING packets Liz Fong-Jones <lizf(a)honeycomb.io> PCI: Fix BAR resize for devices on a root bus Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix Resizable BAR restore order Christian Brauner <brauner(a)kernel.org> super: make iterate_supers_type() deletion-safe Longlong Xia <xialonglong(a)kylinos.cn> mm/hugetlb: do not dissolve gigantic pages without runtime support Usama Arif <usamaarif642(a)gmail.com> mm/hugetlb: create hstate_is_gigantic_no_runtime helper Jinjiang Tu <tujinjiang(a)huawei.com> mm/hugetlb: fix surplus pages in dissolve_free_huge_page() SJ Park <sj(a)kernel.org> mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold() Matthew Auld <matthew.auld(a)intel.com> drm/xe/vm: nuke PTs only after unlinking contested VMAs Jinjiang Tu <tujinjiang(a)huawei.com> mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish Lorenzo Stoakes <lorenzo.stoakes(a)oracle.com> mm/rmap: allocate anon_vma_chain objects unlocked when possible Imre Deak <imre.deak(a)intel.com> drm/i915/dp_mst: Fix configuring FEC for a disconnected stream Jani Nikula <jani.nikula(a)intel.com> drm/i915/mst: add mst sub-struct to struct intel_dp shechenglong <shechenglong(a)xfusion.com> drm/client: fix restore of partially initialized client Thomas Zimmermann <tzimmermann(a)suse.de> drm/client: Pass force parameter to client restore Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc() Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL Myeonghun Pak <mhun512(a)gmail.com> bna: prevent IOC timer rearm during teardown Fan Wu <wufan(a)kernel.org> ipe: fix use-after-free when auditing a newly loaded policy Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: cdev: fix kernel stack leak to user-space in error path Xiang Mei <xmei5(a)asu.edu> vlan: require the MAC header to be present in __vlan_insert_inner_tag() Fuad Tabba <fuad.tabba(a)linux.dev> arm64/boot: Disable trapping of PMZR_EL0 writes to EL2 April Cardenas <april.cardenas(a)canonical.com> smb/client: send lease break ACKs thru correct session for multiuser mounts Frank Sorenson <sorenson(a)redhat.com> smb: client: fix reparse buffer bounds in cifs_query_reparse_point() Mike Lothian <mike(a)fireburn.co.uk> drm/amdgpu: hold a runtime PM reference for P2P dma-buf attachments Yunxiang Li <Yunxiang.Li(a)amd.com> drm: add drm_memory_stats_is_zero Frank Sorenson <sorenson(a)redhat.com> smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() Chengjun Yao <Chengjun.Yao(a)amd.com> drm/amdgpu: fix rmmio iounmap skipped on device removal Christian König <christian.koenig(a)amd.com> drm/amdgpu: use GFP_NOWAIT for memory allocations Saleemkhan Jamadar <saleemkhan.jamadar(a)amd.com> drm/amdgpu/umsch: remove vpe test from umsch Christian König <christian.koenig(a)amd.com> drm/amdgpu: set the VM pointer to NULL in amdgpu_job_prepare Andrew Martin <Andrew.Martin(a)amd.com> drm/amdgpu: Failed to check various return code Joseph Qi <joseph.qi(a)linux.alibaba.com> smb: client: fix use-after-free of iface in cifs_try_adding_channels() Bharath SM <bharathsm(a)microsoft.com> smb: mark the new channel addition log as informational log with cifs_info Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mac80211: refuse to make a monitor active when it has no queue Benjamin Berg <benjamin.berg(a)intel.com> wifi: mac80211: track MU-MIMO configuration on disabled interfaces Daehyeon Ko <4ncienth(a)gmail.com> wifi: libipw: reject TKIP frames without a full MIC Saim Shujah <saimzst(a)gmail.com> drm/msm/dpu: clear pending peripheral flush state Yibo Tan <lhfff(a)tju.edu.cn> hwmon: (pwm-fan) Stop RPM timer before freeing tach data Fan Wu <fanwu01(a)zju.edu.cn> wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown Runyu Xiao <runyu.xiao(a)seu.edu.cn> Input: hp_sdc - shut down kicker timer on module exit Arun Easi <aeasi(a)cisco.com> scsi: fnic: Fix missed link-up when critical IRQ targets offline CPU Liu Zhenlong <dragonliu2018(a)gmail.com> i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() Jiapeng Chong <jiapeng.chong(a)linux.alibaba.com> i2c: qcom-cci: Remove the unused variable cci_clk_rate Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> i2c: qcom-cci: Stop complaining about DT set clock rate Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix LSE operations on {8,16}-bit types Catalin Marinas <catalin.marinas(a)arm.com> arm64: Use load LSE atomics for the non-return per-CPU atomic operations Hongling Zeng <zenghongling(a)kylinos.cn> btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() Ahmed Naseef <naseefkm(a)gmail.com> net: phy: mediatek: do not report link and per-speed LED rules together Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> swiotlb: use the adjusted address for the highmem page lookup Xiang Mei <xmei5(a)asu.edu> ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Avoid long delay in atomic context David Howells <dhowells(a)redhat.com> 9p: Fix v9fs_issue_write() to update i_size and remote_i_size David Howells <dhowells(a)redhat.com> cifs: Fix specification of function pointers Darrick J. Wong <djwong(a)kernel.org> xfs: fix backwards mergeability logic in refcount scrubber Darrick J. Wong <djwong(a)kernel.org> xfs: fix under-reservation of blocks when repairing sf directories Christoph Hellwig <hch(a)lst.de> xfs: remove the i_ino field in struct xfs_inode Darrick J. Wong <djwong(a)kernel.org> xfs: strengthen the "is cow staging" helpers in scrub Darrick J. Wong <djwong(a)kernel.org> xfs: fix short ifork reaping computation in xreap_bmapi_binval Darrick J. Wong <djwong(a)kernel.org> xfs: report healthy filesystem events in scrub stats Bjoern Doebel <doebel(a)amazon.de> smb: client: fail DACL rewrite when the new DACL exceeds 64K Ralph Boehme <slow(a)samba.org> smb/client: fix security flag calculation when setting security descriptors Ralph Boehme <slow(a)samba.org> smb: client: refactor ACL setting control flow in id_mode_to_cifs_acl() Paolo Abeni <pabeni(a)redhat.com> mptcp: prevent race between disconnect() and rtx Paolo Abeni <pabeni(a)redhat.com> mptcp: do not reschedule the RTX timer for fallback sockets Eric Dumazet <edumazet(a)google.com> tcp: introduce icsk->icsk_keepalive_timer Kalpan Jani <kalpan.jani(a)mpiricsoftware.com> mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0 Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: rename add_entry structure to add_addr Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: use for_each_subflow helper Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: reset retrans_time when ADD_ADDR entry is reused Joe Damato <joe(a)dama.to> bnxt_en: Don't free the live ring's TPA state on queue restart failure Will Chen <will.chen.tty(a)gmail.com> bnxt: fix memory leak in bnxt_queue_mem_alloc error cases Pavel Begunkov <asml.silence(a)gmail.com> eth: bnxt: store rx buffer size per queue Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Do not set EOP on RX AGG BDs on 5760X chips Qing Luo <luoqing(a)kylinos.cn> mptcp: pm: userspace: fix address ID overflow Geliang Tang <geliang(a)kernel.org> mptcp: use sock_kmemdup for address entry Geliang Tang <geliang(a)kernel.org> sock: add sock_kmemdup helper Geliang Tang <geliang(a)kernel.org> mptcp: pm: drop match in userspace_pm_append_new_local_addr Joe Damato <joe(a)dama.to> bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc() Mina Almasry <almasrymina(a)google.com> page_pool: disable sync for cpu for dmabuf memory provider Mina Almasry <almasrymina(a)google.com> net: page_pool: rename page_pool_alloc_netmem to *_netmems Alexander Lobakin <aleksander.lobakin(a)intel.com> netmem: add a couple of page helper wrappers Norbert Szetei <norbert(a)doyensec.com> landlock: Fix use-after-free of the source's parent directory Günther Noack <gnoack3000(a)gmail.com> landlock: Clarify documentation for the IOCTL access right Zhiling Zou <zhilinz(a)nebusec.ai> ipv6: flowlabel: cap duplicate leases per socket Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Move ipv6_fl_list from ipv6_pinfo to inet_sock. Eric Dumazet <edumazet(a)google.com> ipv6: reorganise struct ipv6_pinfo Eric Dumazet <edumazet(a)google.com> ipv6: make ipv6_pinfo.saddr_cache a boolean Eric Dumazet <edumazet(a)google.com> ipv4: remove fib_info_devhash[] Eric Dumazet <edumazet(a)google.com> ipv4: use rcu in ip_fib_check_default() Eric Dumazet <edumazet(a)google.com> ipv4: remove fib_devindex_hashfn() Myeonghun Pak <mhun512(a)gmail.com> idpf: disable DIM work before freeing q_vectors Pavan Kumar Linga <pavan.kumar.linga(a)intel.com> idpf: introduce idpf_q_vec_rsrc struct and move vector resources to it Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> idpf: Fix kernel-doc descriptions to avoid warnings Jingbo Xu <jefflexu(a)linux.alibaba.com> erofs: add sysfs feature entry for xattr prefixes Runyu Xiao <runyu.xiao(a)seu.edu.cn> net: macb: initialize PTP state before registering clock Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: unify device pointer naming convention Kevin Hao <haokexin(a)gmail.com> net: macb: Use netif_napi_add_tx() instead of netif_napi_add() for TX NAPI Kevin Hao <haokexin(a)gmail.com> net: macb: Replace open-coded implementation with napi_schedule() Chengfeng Ye <nicoyip.dev(a)gmail.com> netfilter: cttimeout: prevent UAF during module unload Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches Zhiling Zou <zhilinz(a)nebusec.ai> net: bridge: use option bits for CFM/MRP frame handlers Masami Hiramatsu (Google) <mhiramat(a)kernel.org> bootconfig: Fix integer overflow in initrd size check Gabriel Krisman Bertazi <krisman(a)suse.de> io_uring/net: don't overconsume buffers when using MSG_TRUNC Jens Axboe <axboe(a)kernel.dk> io_uring/rw: end write accounting from ->ki_complete Leonardo Costa <leonardo.costa(a)toradex.com> drm/bridge: tc358768: Enforce input bus flags via atomic_check XingWang Xiang <v3rdant.xiang(a)gmail.com> genetlink: pin family module during policy dump Dinh Nguyen <dinguyen(a)kernel.org> EDAC/altera: Use parent device for devres in altr_portb_setup() Rounak Das <rounakdas2025(a)gmail.com> EDAC/altera: Use ECC manager compatible to select A10/S10 IRQ layout Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Undo the registration when enabling the histogram trigger fails Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Take the reference before publishing the named histogram trigger Steven Rostedt <rostedt(a)goodmis.org> tracing: Take trace_array reference when opening a tracer options file Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tools/bootconfig: Fix integer overflow and truncation in size checks Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tools/bootconfig: Cleanup bootconfig footer size calculations Xiong Weimin <xiongweimin(a)kylinos.cn> virtio_mmio: disable IRQ wake before free_irq Viresh Kumar <viresh.kumar(a)linaro.org> virtio-mmio: Remove virtqueue list from mmio device Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Set the trace clock before registering the histogram trigger Steven Rostedt <rostedt(a)goodmis.org> tracing: Merge struct event_trigger_ops into struct event_command Steven Rostedt <rostedt(a)goodmis.org> tracing: Remove get_trigger_ops() and add count_func() from trigger ops Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> tracing: Constify struct event_trigger_ops Vasileios Almpanis <vasilisalmpanis(a)gmail.com> configfs: unhash the dentry before dropping the item in rmdir Cen Zhang (Microsoft) <blbllhy(a)gmail.com> reboot: fix cad_pid use-after-free race Oleg Nesterov <oleg(a)redhat.com> sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[] Zihan Xi <zihanx(a)nebusec.ai> ipmr: account multicast table and route memory Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Fix memory corruption from a "STACKTRACE" histogram key Vasileios Almpanis <vasilisalmpanis(a)gmail.com> configfs: pin the symlink target's dirent instead of chasing ->ci_dentry Al Viro <viro(a)zeniv.linux.org.uk> configfs:get_target() - release path as soon as we grab configfs_item reference Shixiong Ou <oushixiong(a)kylinos.cn> drm/sysfb: ofdrm: Fix is_avivo() constant comparison bug Shixiong Ou <oushixiong(a)kylinos.cn> drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation Thomas Zimmermann <tzimmermann(a)suse.de> drm/sysfb: simpledrm: Improve framebuffer-size validation Thomas Zimmermann <tzimmermann(a)suse.de> firmware: sysfb: Move bpp-depth calculation into screen_info helper Thomas Zimmermann <tzimmermann(a)suse.de> drm/sysfb: simpledrm: Improve stride validation Thomas Zimmermann <tzimmermann(a)suse.de> drm/sysfb: simpledrm: Improve panel-size validation Roman Li <Roman.Li(a)amd.com> drm/amd/display: Set gpuvm min page size to 4K on dcn35/36 Lyude Paul <lyude(a)redhat.com> drm/nouveau/disp/r535: Add scanline position support + head state support Bob Zhou <bobzhou2(a)amd.com> drm/amdgpu: avoid force-completing uninitialized UVD rings Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: plumb timedout fence through to force completion Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: add a helper to calculate ring distance Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu: Fix missing unwind in amdgpu_ib_schedule() error path Daeho Jeong <daehojeong(a)google.com> f2fs: accurately adjust free_sections during free_segment_range Chao Yu <chao(a)kernel.org> f2fs: fix to clear dirty flag on folio in error path Matthew Wilcox (Oracle) <willy(a)infradead.org> f2fs: Convert clear_node_page_dirty() to clear_node_folio_dirty() Chao Yu <chao(a)kernel.org> f2fs: embed f2fs_gc_kthread in f2fs_sb_info Guanghui Yang <3497809730(a)qq.com> f2fs: fix dentry folio leak in find_in_level Wenjie Qi <qwjhust(a)gmail.com> f2fs: limit recovery filename logging to stored length Joanne Chang <joannechien(a)google.com> f2fs: dirty directory inodes on mtime/ctime update Chao Yu <chao(a)kernel.org> f2fs: fix to avoid potential section-unaligned pinfile wangzijie <wangzijie1(a)honor.com> f2fs: don't allow unaligned truncation to smaller/equal size on pinned file wangzijie <wangzijie1(a)honor.com> f2fs: convert F2FS_I_SB to sbi in f2fs_setattr() Wenjie Qi <qwjhust(a)gmail.com> f2fs: validate MOVE_RANGE destination size Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[] Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Clamp max_npiv_vports to VP_CTRL bitmap capacity Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Skip vport under deletion in report ID acquisition Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs Jackson Lee <jackson.lee(a)chipsnmedia.com> media: chips-media: wave5: Add timeout while stop_streaming Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking Nilesh Javali <njavali(a)marvell.com> scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak Yosry Ahmed <yosry(a)kernel.org> KVM: x86: Disallow EFER.LME and EFER.LMA if long mode is not supported Christian Borntraeger <borntraeger(a)linux.ibm.com> KVM: s390: Zero initialize data structures for inject_pfault_token Narasimharao Vadlamudi <ahmisaranrao(a)gmail.com> media: rkvdec: Propagate platform_get_irq() errors Dave Stevenson <dave.stevenson(a)raspberrypi.com> media: imx355: Avoid calling imx355_power_off twice in error path Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> media: i2c: imx355: Replace client->dev usage Yosry Ahmed <yosry(a)kernel.org> KVM: x86: Check EFER validity on KVM_SET_SREGS* Sean Christopherson <seanjc(a)google.com> KVM: x86: Move the bulk of register specific code from x86.c to regs.c Sean Christopherson <seanjc(a)google.com> KVM: x86: Rename __{g,s}et_sregs2() => kvm_vcpu_ioctl_x86_{g,s}et_sregs2() Sean Christopherson <seanjc(a)google.com> KVM: x86: Extract REGS and SREGS runtime sync code to helpers Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Split kvm_mmu_zap_all_fast() into "front" and "back" halves Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Dynamically allocate shadow MMU's hashed page list Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: reset unfaulted VMA page offset for MREMAP_DONTUNMAP Jon Hunter <jonathanh(a)nvidia.com> ASoC: tegra: Fix the MIXER enable default value Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: tegra210_mixer: sort the register default table Imran Shaik <imran.shaik(a)oss.qualcomm.com> clk: qcom: Fix test_ctl_hi field for DEFAULT_EVO PLLs Miquel Raynal (DAVE) <miquel.raynal(a)bootlin.com> mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses Andrea Scian <andrea.scian(a)dave.eu> mtd: rawnand: pl353: Add message about ECC mode Li Chen <me(a)linux.beauty> nvdimm: virtio_pmem: refcount requests for token lifetime Li Chen <me(a)linux.beauty> nvdimm: virtio_pmem: use READ_ONCE()/WRITE_ONCE() for wait flags Li Chen <me(a)linux.beauty> nvdimm: virtio_pmem: always wake -ENOSPC waiters Li Chen <me(a)linux.beauty> nvdimm: virtio_pmem: stop allocating child flush bio Li Chen <me(a)linux.beauty> nvdimm: pmem: keep PREFLUSH before data writes Li Chen <me(a)linux.beauty> nvdimm: preserve flush callback -ENOMEM Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: fix incorrect vm_flags usage when checking allowable orders for tmpfs Anthony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects Chao Shi <coshi036(a)gmail.com> nvme: skip the zoned limits update if the zone info query failed Christoph Hellwig <hch(a)lst.de> nvme: fix atomic write size validation Christoph Hellwig <hch(a)lst.de> nvme: refactor the atomic write unit detection Alan Adamson <alan.adamson(a)oracle.com> nvme: all namespaces in a subsystem must adhere to a common atomic write size Tristan Madani <tristan(a)talencesecurity.com> nvme: add missing SRCU grace period in error path Vincent Donnefort <vdonnefort(a)google.com> ring-buffer: Allow splice reads on static buffers Steven Rostedt <rostedt(a)goodmis.org> ring-buffer: Show persistent buffer dropped events in trace_pipe file Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Remove anythread_deprecated bit from perf_capabilities Yabin Cui <yabinc(a)google.com> perf/aux: Allocate non-contiguous AUX pages by default Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> rtc: rzn1: Handle unset alarm weekday in rzn1_rtc_read_alarm Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> futex: Provide rt_mutex_.*_schedule() equivalents for futex scheduling Marco Elver <elver(a)google.com> compiler_types: Move lock checking attributes to compiler-context-analysis.h Baineng Shou <shoubaineng(a)gmail.com> dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds Steven Rostedt <rostedt(a)goodmis.org> ftrace: Take trace_array reference before accessing its ftrace_ops Steven Rostedt <rostedt(a)goodmis.org> tracing: Take trace_array reference when opening options file Steven Rostedt <rostedt(a)goodmis.org> tracing: Clean up use of trace_create_maxlat_file() Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/secretmem: properly account locked pages Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix BTF kflag check for anonymous struct member access Steven Rostedt <rostedt(a)goodmis.org> Documentation: tracing: Add documentation about eprobes Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix anon_stack check for unnamed bitfields in btf_find_struct_member Muhammad Bilal <meatuni001(a)gmail.com> staging: sm750fb: fix mono image source stride mismatch in lynxfb_ops_imageblit() Muhammad Bilal <meatuni001(a)gmail.com> staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie() Vivek BalachandharTN <vivek.balachandhar(a)gmail.com> staging: rtl8723bs: fix spacing around operators Jeffin Philip <jeffinphilip14(a)gmail.com> usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers() Myeonghun Pak <mhun512(a)gmail.com> usb: storage: realtek_cr: fix use-after-free on disconnect Pawel Laszczak <pawell(a)cadence.com> usb: cdnsp: fix wakeup from S3 after controller context loss Théo Lebrun <theo.lebrun(a)bootlin.com> usb: cdns3: rename hibernated argument of role->resume() to lost_power Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: Cleanup Candence controller PCI device and vendor ID usage Bryam Vargas <hexlabsecurity(a)proton.me> wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy Amit Sunil Dhamne <amitsd(a)google.com> usb: typec: tcpm: constrain TCPM_SOURCING_VBUS event handling Xu Yang <xu.yang_2(a)nxp.com> usb: typec: tcpm: fix debug accessory mode detection for sink ports Yuhang.chen <yhchen312(a)gmail.com> wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw89: Hide some errors when the device is unplugged Zong-Zhe Yang <kevin_yang(a)realtek.com> wifi: rtw89: cleanup unused rtwdev::roc_work Elson Serrao <elson.serrao(a)oss.qualcomm.com> usb: dwc3: clear forceRM when issuing EndTransfer Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: dwc3: gadget: Reinitiate stream for all host NoStream behavior Jan Kara <jack(a)suse.cz> udf: Fix data loss when converting inline inodes to out of line Jan Kara <jack(a)suse.cz> udf: Move udf_map_block() up Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Fix use-after-free of master->this Bryam Vargas <hexlabsecurity(a)proton.me> wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy StanleyYP Wang <StanleyYP.Wang(a)mediatek.com> wifi: mt76: mt7915: set correct background radar capability Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Do not treat master device as a duplicate target Can Peng <pengcan(a)kylinos.cn> hwrng: stm32 - Fix runtime PM cleanup on registration failure Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> hwrng: drivers - Switch back to struct platform_driver::remove() Xu Rao <raoxu(a)uniontech.com> ALSA: hda/ext: preserve PPLCCTL bits when clearing reset Glenn Judd <gmj(a)meta.com> net/mlx5e: do not HW-GRO coalesce small frames Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5e: SHAMPO, Always calculate page size Hidayath Khan <hidayath(a)linux.ibm.com> net/smc: stop killed, freed and out_of_sync sharing a byte Simon Horman <horms(a)kernel.org> net/smc: Address spelling errors Fan Wu <fanwu01(a)zju.edu.cn> power: supply: qcom_battmgr: fix use-after-free Hui Su <sh_def(a)163.com> io_uring/waitid: avoid siginfo copy during ring teardown Jens Axboe <axboe(a)kernel.dk> io_uring/waitid: have io_waitid_complete() remove wait queue entry Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd/pmc: Propagate SMU errors and validate S2D address Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd/pmc: Restore msg_port on amd_stb_s2d_init() error paths Shyam Sundar S K <Shyam-sundar.S-k(a)amd.com> platform/x86/amd/pmc: Define enum for S2D/PMC msg_port and add helper function Shyam Sundar S K <Shyam-sundar.S-k(a)amd.com> platform/x86/amd/pmc: Move STB functionality to a new file for better code organization Shyam Sundar S K <Shyam-sundar.S-k(a)amd.com> platform/x86/amd/pmc: Move STB block into amd_pmc_s2d_init() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> platform/x86: int1092: Fix potential memory leak in sar_probe() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: intel_sar: Check ACPI_HANDLE() against NULL Thorsten Blum <thorsten.blum(a)linux.dev> platform/x86: think-lmi: Fix certificate thumbprint sysfs output Mark Pearson <mpearson-lenovo(a)squebb.ca> platform/x86: think-lmi: improve check if BIOS account security enabled Thorsten Blum <thorsten.blum(a)linux.dev> platform/x86: think-lmi: Fix current password length check Farhan Ali <alifm(a)linux.ibm.com> PCI: Allow per function PCI slots to fix slot reset on s390 Farhan Ali <alifm(a)linux.ibm.com> PCI: Introduce PCI_SLOT_PLACEHOLDER constant for slot_nr placeholder value Fan Wu <fanwu01(a)zju.edu.cn> mmc: via-sdmmc: cancel card-detect work on remove Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86: ISST: Validate max level for set feature Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86: ISST: Check for admin capability for write commands Peiyang He <peiyang_he(a)smail.nju.edu.cn> iommufd: Fix UAF in selftest IOPF reporting Yi Liu <yi.l.liu(a)intel.com> iommufd: Pass @pasid through the device attach/replace path Weimin Xiong <xiongwm2026(a)163.com> iommu/msm: Unwind probe state on registration failure Zhang Heng <zhangheng(a)kylinos.cn> iommu/msm: Use helper function devm_clk_get_prepared() Ali Tariq <alitariq45892(a)gmail.com> PCI: starfive: Fix resource leaks on error paths in host_init() Hal Feng <hal.feng(a)starfivetech.com> PCI: starfive: Use regulator APIs to control the 3v3 power supply of PCIe slots Fan Wu <fanwu01(a)zju.edu.cn> power: supply: ab8500_fg: fix use-after-free on remove Pan Chuang <panchuang(a)vivo.com> power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe() Mukesh Ojha <mukesh.ojha(a)oss.qualcomm.com> remoteproc: qcom: pas: Guard dtb metadata release with dtb_pas_id check Mukesh Ojha <mukesh.ojha(a)oss.qualcomm.com> remoteproc: pas: Replace metadata context with PAS context structure Mukesh Ojha <mukesh.ojha(a)oss.qualcomm.com> firmware: qcom_scm: Rename peripheral as pas_id Oscar Ou <oscarou(a)synology.com> lockd: fix swapped arguments in nlmsvc_match_ip() Ruoyu Wang <ruoyuw560(a)gmail.com> i2c: mxs: fix DMA channel leak on probe error Bence Csókás <csokas.bence(a)prolan.hu> dmaengine: Add devm_dma_request_chan() Vincent Donnefort <vdonnefort(a)google.com> ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page Jorijn van der Graaf <jorijnvdgraaf(a)catcrafts.net> ASoC: codecs: aw88261: only check PLL and clock state at power-up Val Packett <val(a)packett.cool> ASoC: codecs: aw88261: reduce log spam Tejun Heo <tj(a)kernel.org> sched/core: Make core-sched flips wait for in-flight selections John Stultz <jstultz(a)google.com> sched: Rework prev_balance() to avoid stale prev references Vincent Donnefort <vdonnefort(a)google.com> ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() Steven Rostedt <rostedt(a)goodmis.org> ring-buffer: Add helper functions for allocations James Clark <james.clark(a)linaro.org> perf test: Change all remaining #!/bin/sh to #!/bin/bash Jakub Kicinski <kuba(a)kernel.org> net: tls: fix silent data drop under pipe back-pressure Darrick J. Wong <djwong(a)kernel.org> xfs: fix blockgc group quota scanning when usrquota isn't enforced Darrick J. Wong <djwong(a)kernel.org> xfs: drop dquot flush lock when we can't find a buffer to flush Darrick J. Wong <djwong(a)kernel.org> xfs: check di_forkoff correctly in scrub Darrick J. Wong <djwong(a)kernel.org> xfs: don't call xfs_exchange_range_finish for a dry run Darrick J. Wong <djwong(a)kernel.org> xfs: check padding field in xfs_ioc_commit_range Darrick J. Wong <djwong(a)kernel.org> xfs: use correct jiffies comparison function in xchk_maybe_relax Darrick J. Wong <djwong(a)kernel.org> xfs: release orphanage dir inode if chown fails Darrick J. Wong <djwong(a)kernel.org> xfs: fix attr fork block count checks in xrep_inode_blockcounts Darrick J. Wong <djwong(a)kernel.org> xfs: don't assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption Zihan Xi <zihanx(a)nebusec.ai> smb: client: validate POSIX create context length Zihan Xi <zihanx(a)nebusec.ai> smb: client: clean up failed cached directory opens Zihan Xi <zihanx(a)nebusec.ai> smb: client: fix create context out-of-bounds reads Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: mgmt: fix race in read_unconf_index_list() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: L2CAP: validate frame length before control and FCS access Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: ISO: balance the parent hold in hci_bind_bis() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: reject out-of-range OCF values Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_sock: validate event length before filtering Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: hci_conn: fix CIS hold ownership on reuse Tan Chi <tanchi25(a)mails.ucas.ac.cn> RISC-V: KVM: Fix HSM hart status error propagation Myeonghun Pak <mhun512(a)gmail.com> RISC-V: KVM: Synchronize hrtimer callback during teardown Lorenzo Stoakes (ARM) <ljs(a)kernel.org> KVM: arm64: Fix spurious warning for benign stage 2 teardown race Zeng Chi <zengchi(a)kylinos.cn> KVM: Don't treat reserved xarray entries as having memory attributes David Ballesteros <davimaba.v(a)proton.me> KVM: Ensure memory attributes xarray nodes are accounted to the caller's memcg Anthony Krowiak <akrowiak(a)linux.ibm.com> s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config Peter Oberparleiter <oberpar(a)linux.ibm.com> s390/cmf: Fix virtual vs physical address confusion Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str() Ilya Titov <ilya.titov(a)wirenboard.com> pinctrl: sunxi: keep a shadow copy of the data register output latches Myeonghun Pak <mhun512(a)gmail.com> pinctrl: single: free the IRQ on domain creation failure Puranjay Mohan <puranjay(a)kernel.org> perf/core: Run sched_task() for PMUs with only CPU-wide events Puranjay Mohan <puranjay(a)kernel.org> perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> scsi: libiscsi_tcp: Check the data direction of a Data-In PDU Doruk Tan Ozturk <doruk(a)0sec.ai> nfc: port100: reject frames whose declared length exceeds the received data Aamir Ahmed <elb12345(a)hotmail.co.uk> nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc() Luxiao Xu <rakukuip(a)gmail.com> nfc: fix use-after-free in nfc_get_local_general_bytes Aohan Mei <henrymei(a)tencent.com> netfilter: nf_tables: skip expired catchall elements on insert and delete Luxiao Xu <rakukuip(a)gmail.com> netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read Weiming Shi <bestswngs(a)gmail.com> netfilter: ip6t_rpfilter: reject routes without inet6_dev Wentao Liang <vulab(a)iscas.ac.cn> net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs() Ming Wang <wangming01(a)loongson.cn> net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist Fourie Zhang <littleddfu(a)gmail.com> net: bridge: mdb: restart port group walk after deletion Gajdos Tamás <tamas(a)rimpianto.com> net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read Gajdos Tamás <tamas(a)rimpianto.com> net: atl1c: fix soft lockup on out-of-range tpd_cons read Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: fix helper UAF due to extensions realloc Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: remove 'add_helper' dead code Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry Wentao Liang <vulab(a)iscas.ac.cn> net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy() Gajdos Tamás <tamas(a)rimpianto.com> net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read Zijie Huang <milkory(a)outlook.com> net: arp: terminate device name before lookup Weiming Shi <bestswngs(a)gmail.com> net/sched: reject IDR error pointers when deleting actions Ralf Lici <ralf(a)mandelbit.com> net/mlx5e: advertise MACsec offload only when supported Wentao Liang <vulab(a)iscas.ac.cn> net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get() Wei Jie LAW <98lawweijie(a)gmail.com> HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce() Junjie Cao <junjie.cao(a)intel.com> HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard Chen Changcheng <chenchangcheng(a)kylinos.cn> HID: alps: fix use-after-free on input2 registration failure Angel J <iamanaws(a)httpd.dev> PCI: of_property: Omit bus properties without a subordinate bus Jaewook You <jaewook376(a)gmail.com> mm/hugetlb: preserve mremap address delta when skipping page tables Karl Mehltretter <kmehltretter(a)gmail.com> gpio: tps65219: Fix GPIO input value reads Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/virtio: fix NULL pointer dereference on fence allocation failure Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/virtio: fix memory leak of fence event on execbuffer failure Szymon Acedański <accek(a)invisiblethingslab.com> drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked() Jonghyuk Kim(MalHyuk) <malhyuk97(a)gmail.com> drm/nouveau: RCU-free the scheduler-containing nouveau_sched Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix runtime PM leak in nouveau_connector_detect() Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix gem reference leak in validate_init() Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau: fix double-free in nvif_vmm_dtor Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau: Fix bridge reference leak in nv1a_ram_new() Guangshuo Li <lgs201920130244(a)gmail.com> drm/nouveau: fix autosuspend cleanup during teardown Peiyang He <peiyang_he(a)smail.nju.edu.cn> drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init() Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show() Wentao Liang <vulab(a)iscas.ac.cn> drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init() Ivan Lipski <ivan.lipski(a)amd.com> drm/amd/display: Bump frame warning limit for clang builds of dml Wentao Liang <vulab(a)iscas.ac.cn> drm/amd/display: Fix dc stream excess put in dm_update_crtc_state() Christian König <ckoenig.leichtzumerken(a)gmail.com> drm/i915: fix incorrect RCU teardown order Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Fix page count for page table for map() interface Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl() Dongliang Qin <cccccccccccc777777(a)gmail.com> rds: ib: Clear the sg list when mapping an MR fails Hui Peng <benquike(a)gmail.com> mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag() Zixuan Chai <petalzu987(a)gmail.com> llc: reserve device headroom for allocated frames Ridham Khurana <khurana.ridham222(a)gmail.com> gpio: zynq: fix runtime PM leak on request error path Wentao Liang <vulab(a)iscas.ac.cn> gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out() Hui Peng <benquike(a)gmail.com> ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST Norbert Szetei <norbert(a)doyensec.com> ipv6: do not let ipv6_find_hdr() return an offset past the packet end Fan Wu <wufan(a)kernel.org> ipe: protect the dm-verity root hash with RCU Wentao Liang <vulab(a)iscas.ac.cn> fsl/fman: Fix clk reference leak in read_dts_node() Josef Bacik <josef(a)toxicpanda.com> writeback: report a Tasks-RCU quiescent state per cgwb drain pass Pavankumar Kondeti <pavan.kondeti(a)oss.qualcomm.com> workqueue: Fix NULL current_pwq deref in flush dependency check Patrick Lu (Anthropic) <perf.patrick.lu(a)gmail.com> writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes Christian Brauner <brauner(a)kernel.org> fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga Hui Peng <benquike(a)gmail.com> fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT Guopeng Zhang <zhangguopeng(a)kylinos.cn> cgroup/pids: Restore pids.events notifications in local mode Matthias Goergens <matthias.goergens(a)gmail.com> ata: libata-scsi: bound the ATA passthru sense descriptor writes Dairui Zhang <zhangdairui(a)gmail.com> af_packet: fix integer overflow in prb_calc_retire_blk_tmo() Aohan Mei <henrymei(a)tencent.com> sctp: discard the rest of the packet on a stale-cookie error Willem de Bruijn <willemb(a)google.com> tcp: prevent collapsing skbs across boundary in rtx queue Eric Dumazet <edumazet(a)google.com> tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow Willem de Bruijn <willemb(a)google.com> virtio_net: copy zerocopy frags in start_xmit without NAPI Mario Limonciello <mario.limonciello(a)amd.com> x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11 Masami Hiramatsu (Google) <mhiramat(a)kernel.org> x86/mce: Fix hardware debug register corruption on task migration Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase Pablo Neira Ayuso <pablo(a)netfilter.org> rculist: add list_splice_rcu() for private lists Mark Amirkan <markdamirkan(a)gmail.com> mptcp: return sk_wait_data() errors from recvmsg() Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs() Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED Sean Christopherson <seanjc(a)google.com> perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits Hui Peng <benquike(a)gmail.com> autofs: fix sbi->pipe file reference leak in autofs_kill_sb() Eric Dumazet <edumazet(a)google.com> vlan: ensure sufficient headroom in vlan_dev_hard_header() Eric Dumazet <edumazet(a)google.com> net/sched: sch_teql: fix shadowed err in __teql_resolve() Eric Dumazet <edumazet(a)google.com> bridge: check llc_mac_hdr_init() return value in br_send_bpdu() Eric Dumazet <edumazet(a)google.com> llc: fix skb UAF and leaks on llc_mac_hdr_init() failure Coia Prant <coiaprant(a)gmail.com> net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails Ginger Li <ginger.jzllee(a)gmail.com> tipc: Fix a data race on mon->peer_cnt in mon_timeout() Sidraya Jayagond <sidraya(a)linux.ibm.com> net/smc: fix UAF on lgr list traversal in smcr_port_err() Sang-Hoon Choi <csh0052(a)gmail.com> nfp: hold IPsec RX state under the XArray lock Yilin Zhang <yilinzhang(a)moonshot.ai> tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack() Aleksei Sviridkin <f(a)lex.la> net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621 Haseeb Malik <haseebulhaq55(a)gmail.com> macsec: initialize SecY before registering the netdevice Sabrina Dubroca <sd(a)queasysnail.net> macsec: inherit lower device's TSO limits when offloading Sabrina Dubroca <sd(a)queasysnail.net> macsec: add some of the lower device's features when offloading David Dai <zdai(a)linux.ibm.com> bonding: crypto offload enabled, non-offload slave failover, rekey failed Pengpeng Hou <hppiscas(a)163.com> drm/imagination: clamp freelist reconstruction requests Norbert Szetei <norbert(a)doyensec.com> net: xps: reject an out of range traffic class Sanghyun Park <sanghyun.park.cnu(a)gmail.com> vxlan: use one headroom snapshot for neighbour replies Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> ip_gre: Reject enabling collect metadata through changelink Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: do not skip WoL power up on GENET V1 Doug Berger <opendmb(a)gmail.com> net: bcmgenet: allow return of power up status Doug Berger <opendmb(a)gmail.com> net: bcmgenet: move bcmgenet_power_up into resume_noirq Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: initialize u64 stats seq counter for all queues Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems Ivan Delalande <colona(a)arista.com> tg3: use random MAC address when tg3_get_device_address fails Dragan Simic <dsimic(a)manjaro.org> driver core: Add device probe log helper dev_warn_probe() Johan Almbladh <johan.almbladh(a)anyfinetworks.com> bpf: Fix BSWAP 32 and 16 on MIPS64 Johan Almbladh <johan.almbladh(a)anyfinetworks.com> bpf: Fix immediate JMP JEQ/JNE on MIPS32 Ido Schimmel <idosch(a)nvidia.com> vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets Shihuang Liu <shlomojune6(a)gmail.com> net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6() Jakub Kicinski <kuba(a)kernel.org> veth: manage XDP program pointers during channel resize Victor Nogueira <victor(a)mojatatu.com> net/sched: act_gate: budget the per-entry list in get_fill_size Deepanshu Kartikey <kartikey406(a)gmail.com> nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix slab-out-of-bounds reads when logging service names Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap() Ömer Mete Kaya <omermetekaya0(a)gmail.com> nfc: llcp: fix -ENOMEM on connect with zero-length service name Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate ISO15693 inventory length Cong Nguyen <congnt264(a)gmail.com> nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure Chris Gellermann <christian.gellermann(a)codasip.com> nfc: virtual_ncidev: Add missing ioctl compat handler Chris Gellermann <christian.gellermann(a)codasip.com> selftests/nci: Fix out-of-bounds store on thread join Chaithanya Lagisetty <nagachaithanya9911(a)gmail.com> selftests: nci: Fix uninitialized family ID on missing attribute Lee Jones <lee(a)kernel.org> nfc: llcp: Fix race condition in accept_queue lifecycle Lei Zhu <zhulei(a)kylinos.cn> selftests: nci: Correct pthread_create return value check Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm() Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: st21nfca: validate received frame size Pengpeng Hou <pengpeng(a)iscas.ac.cn> nfc: nfcmrvl: validate helper command length before pull Weiming Shi <bestswngs(a)gmail.com> bpf: Reject dev-bound-only programs on other devices Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Capture all packets for vlan checks Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Check the dev->features for S-TAG offload testing Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: stmmac: selftests: Support running selftests on DSA conduits Xin Long <lucien.xin(a)gmail.com> sctp: hold asoc or transport before mod_timer() in timer handlers Bernardo Soares <bsoares.it(a)gmail.com> net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports Bernardo Soares <bsoares.it(a)gmail.com> net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports Zhao Gongyi <zhaogongyi(a)BYTEDANCE.COM> bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc Emil Tsalapatis <emil(a)etsalapatis.com> bpf: Fix bpf_sock context code generation Emil Tsalapatis <emil(a)etsalapatis.com> bpf: Fix bounds check for skb-backed dynptrs Manaf Meethalavalappu Pallikunhi <manaf.pallikunhi(a)oss.qualcomm.com> thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds Coia Prant <coiaprant(a)gmail.com> net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure Jakub Kicinski <kuba(a)kernel.org> genetlink: report the real command id for dump-only ops in policy dumps bui duc phuc <phucduc.bui(a)gmail.com> net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error Mikhail Zaslonko <zaslonko(a)linux.ibm.com> s390/debug: Fix NULL pointer dereference in debug_info_copy() Mikhail Zaslonko <zaslonko(a)linux.ibm.com> s390/debug: Do not register views for failed static debug areas Nemesa Garg <nemesa.garg(a)intel.com> drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Add new SU area calculation helper to apply workarounds Myeonghun Pak <mhun512(a)gmail.com> tg3: clean up PHYLIB resources on probe failure Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Fix dst leak for uncached routes. Pengpeng Hou <hppiscas(a)163.com> net: usb: sr9700: include receive overhead in the length check Ivan Vecera <ivecera(a)redhat.com> dpll: use exact lookup for reference sync pin id Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Fix memory scaling limitation in SR-IOV mode Hui Peng <benquike(a)gmail.com> Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame() Ravindra <ravindra(a)intel.com> Bluetooth: btintel_pcie: validate device-supplied DMA indices Hui Peng <benquike(a)gmail.com> Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough Li Youhong <liyouhong(a)kylinos.cn> drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: release the GEM object on virtio_gpu_vram_create() errors Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl() Junrui Luo <moonafterrain(a)outlook.com> drm/virtio: fix object leak when drm_gem_handle_create() fails Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget Yuqi Xu <xuyuqiabc(a)gmail.com> bpf: Check params size before reading reserved fields Aamir Ahmed <elb12345(a)hotmail.co.uk> net: usb: catc: bound the RX packet length in catc_rx_done() Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Bound ownership depth through local kptrs and graph roots Yiqi Sun <sunyiqixm(a)gmail.com> sctp: avoid livelock while updating retransmit path Alexander Duyck <alexanderduyck(a)fb.com> eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox Björn Töpel <bjorn(a)kernel.org> eth: fbnic: Handle maximum standalone channels Kuniyuki Iwashima <kuniyu(a)google.com> ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink(). Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> net: gue: reject invalid REMCSUM offsets Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure Giuseppe Ranieri <giuseppe(a)ranieri.dev> drm/nouveau/disp: don't reject HDMI config on cards without SCDC Francesco Magazzu <postadelmaga(a)gmail.com> drm/nouveau/clk: don't clobber reclock status when restoring volt/fan Dan Carpenter <error27(a)gmail.com> drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: make ocfs2_calc_xattr_init() return void Zeng Heng <zengheng4(a)huawei.com> arm64: io: Reject non-user protection in ioremap_prot() Naman Gulati <namangulati(a)google.com> netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name Julian Anastasov <ja(a)ssi.bg> ipvs: revalidate ihl before icmp_send Karl Mehltretter <kmehltretter(a)gmail.com> netfilter: nft_synproxy: use the family-aware checksum helper Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_queue: hold nfnl mutex in event notifier Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> netfilter: flowtable: publish HW_DEAD after worker is done Kumar Kartikeya Dwivedi <memxor(a)gmail.com> libbpf: Reject truncated ldimm64 CO-RE relocations Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Restrict CO-RE poisoning to relocatable instructions Shay Drory <shayd(a)nvidia.com> net/mlx5: devcom, Base component size on linked devices Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_u32: fix manual hash table handle IDR aliasing Weiming Shi <bestswngs(a)gmail.com> bpf: Skip unsettled links in link iterator Zhiling Zou <zhilinz(a)nebusec.ai> xsk: Use a 32-bit compare in xsk_map_gen_lookup Julian Sun <sunjunchao(a)bytedance.com> fs: avoid repeated scans in evict_inodes() Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Guard PMCW field accesses with dnv check Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Fix cio_update_schib() to not cache invalid schib Karl Mehltretter <kmehltretter(a)gmail.com> s390/pci/docs: Fix sriov_numvfs attribute name Niklas Schnelle <schnelle(a)linux.ibm.com> docs: s390/pci: Improve and update PCI documentation Bart Van Assche <bvanassche(a)acm.org> scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume() Eva Kurchatova <eva.kurchatova(a)virtuozzo.com> selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode Sean Christopherson <seanjc(a)google.com> cgroup: selftests: Move memcontrol specific helpers out of common cgroup_util.c Lee Jones <lee(a)kernel.org> Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel Christiano Amora <christiano.amora(a)gmail.com> Bluetooth: SMP: reject Security Request over BR/EDR ZHOU Jiaxiang <me(a)fxti.xyz> scsi: sd_zbc: Reject disks with too many zones Ran Hongyun <ranhongyun1(a)huawei.com> squashfs: Add dictionary size range check to prevent shift-out-of-bounds Mark Brown <broonie(a)kernel.org> KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP Karl Mehltretter <kmehltretter(a)gmail.com> KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0 Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: vgic-its: Free the caches when GITS_BASER changes SeungJu Cheon <suunj1331(a)gmail.com> RISC-V: KVM: Fix perf-backed counter accounting across stop and read SeungJu Cheon <suunj1331(a)gmail.com> RISC-V: KVM: Report snapshot write failure to the guest SeungJu Cheon <suunj1331(a)gmail.com> RISC-V: KVM: Preserve firmware counter value across stop/start Benjamin Tissoires <bentiss(a)kernel.org> HID: bpf: fix __hid_bpf_hw_check_params report length Slawomir Stepien <sst(a)poczta.fm> HID: amd_sfh: Validate PCI BAR size before mapping Sean Anderson <sanderson(a)brivo.com> pinctrl: meson: Fix typo in s4 group name Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> bpf, arm64: set up the frame pointer for the exception callback Geliang Tang <geliang(a)kernel.org> bpf, sockmap: Fix self-redirect copied_seq double-counting Pu Lehui <pulehui(a)huawei.com> bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Register dtor for freeing special fields Hou Tao <houtao1(a)huawei.com> bpf: Factor out htab_elem_value helper() Hou Tao <houtao1(a)huawei.com> bpf: Bail out early in __htab_map_lookup_and_delete_elem() Hou Tao <houtao1(a)huawei.com> bpf: Remove migrate_{disable|enable} in ->map_for_each_callback Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix out-of-bounds read of rtt_min in sock_ops Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev> bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch() Jim Mattson <jmattson(a)google.com> KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr() Oscar Priego Verdugo <oscar.priegov(a)gmail.com> HID: elecom: fix bus type for M-XGL20DLBK Jiayuan Chen <jiayuan.chen(a)linux.dev> tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy() Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix divide-by-zero in btf_struct_walk() Sven Schnelle <svens(a)linux.ibm.com> selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc Weiming Shi <bestswngs(a)gmail.com> bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix bpf_skb_change_tail wrt csum partial skbs Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix IRQ injection with SIGP Stop and Store Status Mostafa Saleh <smostafa(a)google.com> remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage Zhiling Zou <zhilinz(a)nebusec.ai> xfrm: save input state data before secpath resets Dong Chenchen <dongchenchen2(a)huawei.com> xfrm: Fix dev use-after-free in xfrm async resumption Jianbo Liu <jianbol(a)nvidia.com> xfrm: Refactor xfrm_input lock to reduce contention with RSS Phil Sutter <phil(a)nwl.cc> netfilter: nf_tables: Simplify chain netdev notifier Phil Sutter <phil(a)nwl.cc> netfilter: nf_tables: Tolerate chains with no remaining hooks Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Add StarFighter HDA SSID Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Limit Star Labs internal mic boost Wenwu Hou <hwenwur(a)gmail.com> erofs: fix large folio race in erofs_fscache_req_complete Darrick J. Wong <djwong(a)kernel.org> xfs: don't stash removename operations with unknown ftype Zizhi Wo <wozizhi(a)huawei.com> smb: client: fix busy dentry warning on unmount after DIO Itai Handler <itai.handler(a)gmail.com> spi: spi-zynqmp-gqspi: stop the controller on shutdown Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix partial normalized name responses Antheas Kapenekakis <lkml(a)antheas.dev> HID: asus: fortify keyboard handshake Frank Sorenson <sorenson(a)redhat.com> smb: client: fix missing iov bounds check in parse_posix_sids() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix missing lower-bound check on DFS referral string offsets Frank Sorenson <sorenson(a)redhat.com> smb: client: fix server->total_read for compound encrypted PDUs Frank Sorenson <sorenson(a)redhat.com> smb: client: fix potential OOB read in smb3_enum_snapshots() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Paulo Alcantara <pc(a)manguebit.org> smb: client: fix unaligned access in WSL reparse point parser Paulo Alcantara <pc(a)manguebit.org> smb: client: fix smbd_connection leak on cifs_get_tcp_session() error Frank Sorenson <sorenson(a)redhat.com> smb: client: reject short Next offsets in parse_server_interfaces() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix rlist race and missing initialization Paulo Alcantara <pc(a)manguebit.org> smb: client: cancel reconnect work in clean_demultiplex_info() Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/adreno: fix autosuspend cleanup during teardown Sajal Gupta <sajal2005gupta(a)gmail.com> drm/gud: fix out-of-bounds write in gud_plane_atomic_check() Rik van Riel <riel(a)surriel.com> wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver Zhao Li <enderaoelyther(a)gmail.com> wifi: mwifiex: validate action frame fixed fields Linmao Li <lilinmao(a)kylinos.cn> wifi: mwifiex: prevent authentication frame length truncation Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: mwifiex: validate scan response extents Doruk Tan Ozturk <doruk(a)0sec.ai> wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length Shengzhuo Wei <me(a)cherr.cc> wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST Shengzhuo Wei <me(a)cherr.cc> wifi: p54: validate curve data length in the calibration curve converters Tianchu Chen <flynnnchen(a)tencent.com> wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() Ali Ahmet Memis <ali(a)iusegentoo.com> wifi: wilc1000: fix out-of-bounds read in P2P public action frames Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: wlcore: release runtime PM ref on regdomain config failure Tianchu Chen <flynnnchen(a)tencent.com> wifi: rsi: fix heap OOB write on key removal Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: libertas_tf: fix UAF in lbtf_free_adapter() Stanislaw Gruszka <stf_xl(a)wp.pl> wifi: iwlegacy: fix broadcast stations deallocation Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: brcmsmac: fix UAF in brcms_free_timer() Wentao Liang <vulab(a)iscas.ac.cn> watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() Wentao Liang <vulab(a)iscas.ac.cn> watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: rtd119x: Avoid division by zero Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Propagate error code in resume() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix premature reset during timeout update Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: digicolor: Avoid division by zero Li Jun <lijun01(a)kylinos.cn> watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83793) release probe data through kref Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding Nuno Sá <nuno.sa(a)analog.com> hwmon: (pmbus/core) increase number of phases and add new mask Muhammad Bilal <meatuni001(a)gmail.com> hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: zero ff_effect before compat copy in input_ff_effect_from_user Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Raphaël Larocque <rlarocque(a)disroot.org> Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - check btns_desc->package.count Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - fix MS Surface Pro 11 probe failure Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() Chris Sommers <chris.sommers(a)icloud.com> Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: evdev - zero absinfo before partial copy in EVIOCSABS Linkai Gong <gonglinkai(a)kylinos.cn> Input: cyttsp5 - clamp the HID report size before memcpy Alexei Turtanov <9alexei9(a)gmail.com> Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 Alvin Šipraga <alvin.sipraga(a)analog.com> Input: adp5588-keys - cache GPIO state before registering the gpiochip Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Clear ITAPDLY on tuning failure Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Reset command and data lines on failed tuning Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Move tuning_loop to local variable Xu Rao <raoxu(a)uniontech.com> mmc: spi: reset bytes_xfered before retrying CRC failures Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt Felix Gu <ustc.gu(a)gmail.com> mmc: sdio_uart: fix xmit_fifo leak when the port table is full Myeonghun Pak <mhun512(a)gmail.com> mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Florian Maillard <florian.maillard(a)mailoo.org> mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 Fan Wu <fanwu01(a)zju.edu.cn> mmc: mxcmmc: cancel data work and watchdog on remove Fan Wu <fanwu01(a)zju.edu.cn> mmc: mmci: Fix use-after-free in busy-timeout work Fan Wu <fanwu01(a)zju.edu.cn> mmc: hsq: Fix use-after-free in retry work Zhu Ling <zhuling0805(a)qq.com> mmc: core: Fix OF node reference leak on card add failure Fan Wu <fanwu01(a)zju.edu.cn> mmc: core: Cancel SDIO IRQ work before freeing host Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed Christian Göttsche <cgzones(a)googlemail.com> selinux: always fill AVC decision in avc_has_perm_noaudit() Karl Mehltretter <kmehltretter(a)gmail.com> selinux: recheck intermediate backing files on mprotect() Karl Mehltretter <kmehltretter(a)gmail.com> selinux: preserve user SID across nested backing files Shuhei Takeshita <jyohuku.alterego(a)gmail.com> IB/hfi1: Fix the PIO_CRED credit-return mmap Shuhei Takeshita <jyohuku.alterego(a)gmail.com> IB/hfi1: Resolve the credit-return buffer through the send context's node Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> IB/mlx4: Fix use-after-free on pkey sysfs registration failure Guangshuo Li <lgs201920130244(a)gmail.com> i2c: imx: disable autosuspend on remove Shengzhuo Wei <me(a)cherr.cc> i2c: imx: release DMA channels on probe error Linkai Gong <gonglinkai(a)kylinos.cn> i2c: atr: fix dangling adapter pointer on add failure Shengzhuo Wei <me(a)cherr.cc> i2c: at91: release DMA channels on remove and probe error Jarkko Sakkinen <jarkko(a)kernel.org> KEYS: trusted: Fix tpm2_load_cmd() boundary check Maoyi Xie <maoyixie.tju(a)gmail.com> keys: translate request_key_auth pid for the reading procfs instance Cen Zhang <cenzhang(a)linux.microsoft.com> KEYS: encrypted: fix integer overflow of datablob_len Shakeel Butt <shakeel.butt(a)linux.dev> mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio() Yifei Gao <gyf161023(a)gmail.com> memstick: ms_block: destroy io_queue workqueue on removal Siwei Zhang <fourdizhang(a)tencent.com> xfrm: use hlist_del_init_rcu for state_cache and state_cache_input Chengfeng Ye <nicoyip.dev(a)gmail.com> xfrm: serialize state GC with device state flush Alberto Carboneri <acarboneri(a)drivesec.com> scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() Mark Amirkan <markdamirkan(a)gmail.com> net/packet: avoid truncating TPACKET_V3 private size Mark Amirkan <markdamirkan(a)gmail.com> net/packet: clear RX owner on VNET header error Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: hhf: cap hh_flows_limit at change time Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> net/sched: act_api: release tail references on DELACTION failure Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() Mark Amirkan <markdamirkan(a)gmail.com> net: lan743x: fix RX checksum use-after-free Zhiling Zou <zhilinz(a)nebusec.ai> ipv6: xfrm: use full sockets in local error paths Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix non-atomic read of DMA position registers Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Serialize local codec list cleanup Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: hci_codec: validate vendor codec count length Aamir Ahmed <elb12345(a)hotmail.co.uk> Bluetooth: eir: validate service data length before reading UUID Nicolas Thibert <nithibert(a)gmail.com> Bluetooth: btusb: fix NXP IW610 composite device handling Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_and() mask generation Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_write() casting Koichiro Den <den(a)valinux.co.jp> arm64: dts: renesas: r8a779f0: Set UFS lane count Bradley Morgan <include(a)grrlz.net> arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc Thomas Huth <thuth(a)redhat.com> kselftest/arm64: Fix size of thread_data values for pthread_join() Benoît Sevens <bsevens(a)google.com> HID: logitech-hidpp: fix race condition when accessing stale stack pointer Wyatt Feng <wf.kernel.dev(a)gmail.com> net: xfrm: reject unrepresentable espintcp transport headers Zhiling Zou <zhilinz(a)nebusec.ai> openvswitch: avoid reallocating confirmed conntrack labels Jeffin Philip <jeffinphilip14(a)gmail.com> RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() Quanye Yang <quanyeyang(a)proton.me> RDMA/ucma: Serialize join and leave on copy_to_user failure Inbal Schussheim <inbal.lipshtat(a)mail.huji.ac.il> tcp: exclude old ACKs from tcp fast path Chang S. Bae <chang.seok.bae(a)intel.com> x86/microcode/intel: Reject problematic loading on Granite Rapids systems Aohan Mei <henrymei(a)tencent.com> rds: ib: use rds_conn_drop() on protocol version mismatch Hyunwoo Kim <imv4bel(a)gmail.com> exec: Cleanup POSIX timers right after de_thread() Wentao Liang <vulab(a)iscas.ac.cn> cifs: Fix server use-after-free in cifs_chan_skip_or_disable() Wentao Liang <vulab(a)iscas.ac.cn> ata: libahci_platform: Fix device reference leak in ahci_platform_get_resources() Niklas Cassel <cassel(a)kernel.org> ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY Jiangshan Yi <yijiangshan(a)kylinos.cn> ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type Yuho Choi <oss.patchbox(a)gmail.com> ALSA: virtio: reset device before deleting virtqueues Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix potential UAF after asynchronous card release Jeremy Nyberg <slickstretch3.0(a)gmail.com> Input: xpad - fix PDP Marvel Xbox 360 controller Roberts Kursitis <roberts.kursitis(a)azeron.eu> Input: xpad - add support for Azeron devices Erich Sartison <byt.es(a)mailbox.org> Input: xpad - add support for Victrix Pro BFG Controller Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix the random "error beacon valid" messages for USB Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: TX QOS Null data the same way as Null data Zi Yan <ziy(a)nvidia.com> mm/huge_memory: use folio's memcg inside __folio_split() Matthew Schwartz <matthew.schwartz(a)linux.dev> x86/fred: Reconstruct the #GP context for rejected INT instructions Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update inode for hole punching and reflinking Dmitriy Chumachenko <Dmitry.Chumachenko(a)cyberprotect.ru> drm/amdgpu: check ras and obj before dereference Eric Dumazet <edumazet(a)google.com> net: skbuff: do not leave stale header offsets after pskb_carve() Dmitriy Okunev <dokunevdmitriy(a)gmail.com> net: mvpp2: prevent buffer overflow in page_pool allocation James Clark <jjc(a)jclark.com> net: macb: fix ordering around PTP timestamp read Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: propagate FPE preemption-class mapping errors Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Ack RX overrun interrupt correctly Eric Dumazet <edumazet(a)google.com> net: lock the socket in sock_gettstamp() Yige Jiang <yigejiang86(a)gmail.com> net: netsec: fix device_node reference leak on phy_np HyeongJun An <sammiee5311(a)gmail.com> ASoC: hdmi-codec: Report a change when the channel status moves Sasha Levin <sashal(a)kernel.org> ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments Shivaprasad G Bhat <sbhat(a)linux.ibm.com> powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: do not overwrite phc_index when no PTP clock is registered Eric Dumazet <edumazet(a)google.com> drop_monitor: fix out-of-bounds write in reset_per_cpu_data() Eric Dumazet <edumazet(a)google.com> drop_monitor: synchronize tracepoint unregistration on error path Eric Dumazet <edumazet(a)google.com> pppoatm: ensure a writable skb header and linear data Juan Perdomo <jcperdomo100(a)gmail.com> Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit Tzung-Bi Shih <tzungbi(a)kernel.org> Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() Weiming Shi <bestswngs(a)gmail.com> Bluetooth: coredump: Quiesce dump work on unregister ThangNN99 <ngocthang2710.1999(a)gmail.com> Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_core: Print number of packets in conn->data_q Baineng Shou <shoubaineng(a)gmail.com> dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: keep compound responses on query info errors Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix partial file information responses Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: return buffer overflow for partial filesystem info Eric Dumazet <edumazet(a)google.com> tcp: do not let tcp_rmem be set below 4096 Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: mst: move switchdev call outside rcu Karl Mehltretter <kmehltretter(a)gmail.com> wifi: brcmfmac: fix lost 802.1x TX completion wakeup Hohyun Sim <tlaghgus0425(a)korea.ac.kr> net: fddi: skfp: fix NULL deref when setting the MAC address while down Dong Chenchen <dongchenchen2(a)huawei.com> ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL Filipe Manana <fdmanana(a)suse.com> btrfs: tree-checker: print dev extent offset in error message Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() Slavin Liu <bolin.liu(a)seu.edu.cn> ALSA: hda: trace PCM open only after assigning a stream Karl Mehltretter <kmehltretter(a)gmail.com> drm/vc4: Use managed KMS polling to fix UAF on unbind Zihan Xi <zihanx(a)nebusec.ai> wifi: virt_wifi: don't transfer operstate before register Xiang Mei <xmei5(a)asu.edu> ALSA: 6fire: fix OOB write from device-reported iso length Takashi Iwai <tiwai(a)suse.de> ALSA: usb: 6fire: Avoid embedded URBs Takashi Iwai <tiwai(a)suse.de> ALSA: 6fire: Clean ups with guard() Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: virtuser: skip free_irq when no IRQ is installed Karl Mehltretter <kmehltretter(a)gmail.com> Input: trackpoint - fix the inertia attribute name in the ABI document Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: soc-pcm: Apply snd_soc_dai_link_ch_map.codec_ch_mask to codec params Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: Add codec_ch_mask to snd_soc_dai_link_ch_map Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: Rename snd_soc_dai_link_ch_map.ch_mask to cpu_ch_mask Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> ALSA: pcm: set timer->private_data before registering the PCM timer AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow Takashi Iwai <tiwai(a)suse.de> ALSA: bcd2000: Fix race between rawmidi and disconnect Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Skip default parms when resumed in neightbl_dump_info(). Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Add missing RCU annotation for neightbl_dump_info(). Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Convert RTM_GETNEIGHTBL to RCU. Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Convert RTM_GETNEIGH to RCU. Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Move neigh_find_table() to neigh_get(). Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Allocate skb in neigh_get(). Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Move two validations from neigh_get() to neigh_valid_get_req(). Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Make neigh_valid_get_req() return ndmsg. Kuniyuki Iwashima <kuniyu(a)amazon.com> neighbour: Use rtnl_register_many(). Karl Mehltretter <kmehltretter(a)gmail.com> keys: fix lost wakeup when reaping a dead key type Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr Breno Leitao <leitao(a)debian.org> arm64: hibernate: clone only the linear map that exists at runtime Shouping Wang <allen.wang(a)hj-micro.com> perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: hold reference on ct until flow is released Theodor Arsenij Larionov Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_nat: fully initialise new_addr in netmap setup Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> RDMA/siw: Bound fragmented header copies by the remaining length Leon Romanovsky <leon(a)kernel.org> RDMA/efa: Keep EQ resources alive while IRQ is registered Leon Romanovsky <leon(a)kernel.org> RDMA/efa: Keep admin queues alive while IRQ is registered Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order Karl Mehltretter <kmehltretter(a)gmail.com> scsi: qla2xxx: Fix the ql2xfc2target parameter description Meijing Zhao <zhaomeijing(a)lixiang.com> mm: memblock: show all region flags in debugfs Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: set up the TX info early to fix failure paths Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: mesh: release the channel if start fails Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: mesh: reset the CSA state when leaving Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: add HE 6 GHz capability in the scan elems len Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't access the TSF of a down interface Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't allow link changes when iface is down Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: require a peer station for TDLS setup confirm Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't allow injecting frames wider than the chanctx Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: expose cfg80211_chandef_get_width() Kavita Kavita <quic_kkavita(a)quicinc.com> wifi: cfg80211: skip regulatory for punctured subchannels Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: unlist vifs when their netdev is unregistered Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: reset state when starting AP fails Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: abort chanswitch when leaving a mesh Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: suppress chanctx warning for debugfs reset Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't offload TC setup on AP_VLAN interfaces Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't warn when an IBSS has no channel to scan Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: use vif radio mask to limit ibss scan frequencies Felix Fietkau <nbd(a)nbd.name> wifi: cfg80211: add option for vif allowed radios Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't start a ROC while scanning Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't filter by BSS type when removing stale entries Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: only group hidden BSSes with beacon entries Shivank Garg <shivankg(a)amd.com> dmaengine: wait for RCU readers before releasing dma_device Shivank Garg <shivankg(a)amd.com> dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() Shivank Garg <shivankg(a)amd.com> dmaengine: Fix device kref underflow in dma_chan_put() Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> dma-coherent: report a failed reserved memory assignment Chen-Yu Tsai <wenst(a)chromium.org> dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask Orgad Shaneh <orgads(a)gmail.com> MIPS: Octeon: apply USB FDT fixups also when USB is modular Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: cadence_master: wait and cancel cdns->work before clock stop Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: check IP header size in cfg80211_classify8021d() Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't get the radio mask for netdev-less wdevs Carolina Jubran <cjubran(a)nvidia.com> IB/IPoIB: Avoid restoring OPER_UP after multicast flush Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short association responses Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short beacon and probe responses Peng Hao <flyingpenghao(a)gmail.com> wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path Mariano Baragiola <mbaragiola(a)linux.com> wifi: virt_wifi: free skb when disconnected Ruoyu Wang <ruoyuw560(a)gmail.com> dmaengine: sprd: Fix runtime PM reference leak in probe Quanye Yang <quanyeyang(a)proton.me> RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Enforce local fence for IB_WR_REG_MR Li RongQing <lirongqing(a)baidu.com> RDMA/mad: Fix receive buffer leak when PKey enforcement fails Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/isert: wait for deferred control PDU completions before releasing the connection Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/iser: reject a remote invalidation of an unregistered direction Krystian Kaniewski <krystianmkaniewski(a)gmail.com> RDMA/core: Reject unregistering netdevs in ib_get_eth_speed Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds Xixin Liu <liuxixin(a)kylinos.cn> clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate Xixin Liu <liuxixin(a)kylinos.cn> firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS Gang Yan <yangang(a)kylinos.cn> RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access Norbert Szetei <norbert(a)doyensec.com> RDMA/rxe: validate access flags before swapping the MR's PD Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept Pengpeng Hou <pengpeng(a)iscas.ac.cn> ARM: socfpga: select the PL310 erratum 753970 workaround Maher Azzouzi <maherazz04(a)gmail.com> esp: downgrade zerocopy managed frags before mutating skb frags Eric Dumazet <edumazet(a)google.com> xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() Kyle Zeng <kylebot(a)openai.com> xfrm: fix compat ALLOCSPI request use-after-free Sabrina Dubroca <sd(a)queasysnail.net> xfrm: avoid RCU warnings around the per-netns netlink socket Chen Linxuan <me(a)black-desk.cn> pidfd: hold exec_update_lock around namespace ioctl Ido Schimmel <idosch(a)nvidia.com> ipv6: Honor oif when choosing nexthop for locally generated traffic Ido Schimmel <idosch(a)nvidia.com> ipv6: Select best matching nexthop object in fib6_table_lookup() Arash Golgol <arash.golgol(a)gmail.com> media: video-i2c: fix buffer queue ordering Eric Dumazet <edumazet(a)google.com> ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Don't hold RTNL for MCAST_ socket options. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Don't hold RTNL for IPV6_DROP_MEMBERSHIP and MCAST_LEAVE_GROUP. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Don't hold RTNL for IPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Use in6_dev_get() in ipv6_dev_mc_dec(). Kevin Hao <haokexin(a)gmail.com> net: cpsw: Execute ndo_set_rx_mode callback in a work queue Kevin Hao <haokexin(a)gmail.com> net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue Jens Axboe <axboe(a)kernel.dk> sunvdc: fix -EIO issue due to lack of retries Günther Noack <gnoack(a)google.com> selftests/landlock: Add tests for whiteout object creation Vasily Gorbik <gor(a)linux.ibm.com> s390/boot: Avoid IPL parameter append past command line Vasily Gorbik <gor(a)linux.ibm.com> s390/boot: Add sized_strscpy() to enable strscpy() usage Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Add disconnected leafs and branch test suites Tingmao Wang <m(a)maowtm.org> selftests/landlock: Add tests for access through disconnected paths Matthieu Buffet <matthieu(a)buffet.re> selftests/landlock: Add missing connect(minimal AF_UNSPEC) test Matthieu Buffet <matthieu(a)buffet.re> selftests/landlock: Add test for TCP fast open Matthieu Buffet <matthieu(a)buffet.re> landlock: Fix TCP Fast Open connection bypass Sasha Levin <sashal(a)kernel.org> Revert "hwmon: (emc1403) Rely on subsystem locking" Sasha Levin <sashal(a)kernel.org> Revert "hwmon: (emc1403) Drop hysteresis for low limit temperature" ------------- Diffstat: .../ABI/testing/sysfs-devices-platform-trackpoint | 2 +- Documentation/ABI/testing/sysfs-fs-erofs | 2 +- Documentation/arch/arm64/booting.rst | 1 + Documentation/arch/s390/pci.rst | 144 +- Documentation/hwmon/emc1403.rst | 8 +- Documentation/networking/ip-sysctl.rst | 2 + .../net_cachelines/inet_connection_sock.rst | 1 + .../networking/net_cachelines/inet_sock.rst | 1 + .../networking/net_cachelines/net_device.rst | 1 + Documentation/trace/eprobetrace.rst | 269 ++++ Documentation/trace/index.rst | 1 + Makefile | 4 +- arch/arm/mach-socfpga/Kconfig | 2 +- arch/arm64/boot/dts/renesas/r8a779f0.dtsi | 1 + arch/arm64/include/asm/el2_setup.h | 8 +- arch/arm64/include/asm/io.h | 3 +- arch/arm64/include/asm/percpu.h | 33 +- arch/arm64/kernel/hibernate-asm.S | 2 + arch/arm64/kernel/hibernate.c | 4 +- arch/arm64/kvm/emulate-nested.c | 2 +- arch/arm64/kvm/hypercalls.c | 3 +- arch/arm64/kvm/mmu.c | 15 +- arch/arm64/kvm/vgic/vgic-its.c | 108 +- arch/arm64/kvm/vgic/vgic.h | 23 - arch/arm64/net/bpf_jit_comp.c | 2 + arch/mips/cavium-octeon/octeon-platform.c | 4 +- arch/mips/net/bpf_jit_comp32.c | 2 +- arch/mips/net/bpf_jit_comp64.c | 3 +- arch/powerpc/kernel/iommu.c | 2 +- arch/powerpc/kvm/book3s_hv_nested.c | 2 + arch/powerpc/kvm/book3s_hv_uvmem.c | 5 +- arch/riscv/kvm/aia_imsic.c | 11 +- arch/riscv/kvm/vcpu_pmu.c | 33 +- arch/riscv/kvm/vcpu_sbi_hsm.c | 4 +- arch/riscv/kvm/vcpu_timer.c | 5 +- arch/s390/boot/ipl_parm.c | 26 +- arch/s390/boot/string.c | 12 + arch/s390/include/asm/debug.h | 8 +- arch/s390/kernel/debug.c | 15 +- arch/s390/kvm/interrupt.c | 72 +- arch/s390/kvm/kvm-s390.c | 4 +- arch/x86/entry/entry_fred.c | 11 +- arch/x86/events/intel/core.c | 89 +- arch/x86/events/intel/ds.c | 36 +- arch/x86/events/intel/pt.c | 2 + arch/x86/events/perf_event.h | 2 +- arch/x86/include/asm/kvm_host.h | 4 +- arch/x86/kernel/cpu/mce/core.c | 27 +- arch/x86/kernel/cpu/microcode/intel.c | 26 + arch/x86/kvm/Makefile | 2 +- arch/x86/kvm/mmu/mmu.c | 60 +- arch/x86/kvm/pmu.c | 8 - arch/x86/kvm/regs.c | 872 ++++++++++ arch/x86/kvm/svm/sev.c | 77 +- arch/x86/kvm/svm/svm.h | 1 + arch/x86/kvm/vmx/pmu_intel.c | 3 + arch/x86/kvm/x86.c | 900 +---------- arch/x86/kvm/x86.h | 28 + arch/x86/pci/fixup.c | 99 ++ drivers/ata/libahci.c | 15 +- drivers/ata/libahci_platform.c | 2 +- drivers/ata/libata-scsi.c | 10 +- drivers/base/core.c | 131 +- drivers/block/sunvdc.c | 9 +- drivers/bluetooth/btintel_pcie.c | 18 +- drivers/bluetooth/btmtk.c | 7 +- drivers/bluetooth/btmtksdio.c | 4 +- drivers/bluetooth/btusb.c | 17 + drivers/char/hw_random/atmel-rng.c | 2 +- drivers/char/hw_random/cctrng.c | 2 +- drivers/char/hw_random/exynos-trng.c | 2 +- drivers/char/hw_random/ingenic-rng.c | 2 +- drivers/char/hw_random/ks-sa-rng.c | 2 +- drivers/char/hw_random/mxc-rnga.c | 2 +- drivers/char/hw_random/n2-drv.c | 2 +- drivers/char/hw_random/npcm-rng.c | 2 +- drivers/char/hw_random/omap-rng.c | 2 +- drivers/char/hw_random/stm32-rng.c | 11 +- drivers/char/hw_random/timeriomem-rng.c | 2 +- drivers/char/hw_random/xgene-rng.c | 2 +- drivers/clk/clk-scpi.c | 2 +- drivers/clk/qcom/gcc-qcm2290.c | 6 +- drivers/clk/qcom/gcc-sm6115.c | 6 +- drivers/dma-buf/dma-heap.c | 80 +- drivers/dma/dmaengine.c | 40 +- drivers/dma/mmp_pdma.c | 2 +- drivers/dma/sprd-dma.c | 3 +- drivers/dma/sun6i-dma.c | 9 +- drivers/dma/ti/k3-udma-glue.c | 5 +- drivers/dma/xilinx/xilinx_dma.c | 26 +- drivers/dpll/dpll_netlink.c | 3 +- drivers/edac/altera_edac.c | 115 +- drivers/edac/altera_edac.h | 1 + drivers/firmware/arm_scpi.c | 4 +- drivers/firmware/qcom/qcom_scm.c | 44 +- drivers/firmware/sysfb_simplefb.c | 31 +- drivers/gpio/gpio-arizona.c | 8 +- drivers/gpio/gpio-tps65219.c | 2 +- drivers/gpio/gpio-virtuser.c | 3 +- drivers/gpio/gpio-zynq.c | 10 +- drivers/gpio/gpiolib-cdev.c | 30 +- drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 20 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 18 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 36 + drivers/gpu/drm/amd/amdgpu/amdgpu_fence.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_job.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_mes.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ring.h | 21 +- drivers/gpu/drm/amd/amdgpu/amdgpu_sync.c | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_sync.h | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_umsch_mm.c | 459 +----- drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 1 + drivers/gpu/drm/amd/amdgpu/nbio_v7_9.c | 2 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 4 +- drivers/gpu/drm/amd/display/dc/dml/Makefile | 6 +- .../amd/display/dc/dml2/dml2_translation_helper.c | 1 + drivers/gpu/drm/armada/armada_fbdev.c | 4 +- drivers/gpu/drm/bridge/samsung-dsim.c | 2 +- drivers/gpu/drm/bridge/tc358768.c | 15 +- drivers/gpu/drm/drm_atomic_uapi.c | 13 +- drivers/gpu/drm/drm_client.c | 4 +- drivers/gpu/drm/drm_fb_helper.c | 24 +- drivers/gpu/drm/drm_fbdev_client.c | 14 +- drivers/gpu/drm/drm_fbdev_dma.c | 4 +- drivers/gpu/drm/drm_fbdev_shmem.c | 4 +- drivers/gpu/drm/drm_fbdev_ttm.c | 4 +- drivers/gpu/drm/drm_file.c | 12 +- drivers/gpu/drm/exynos/exynos_drm_fbdev.c | 4 +- drivers/gpu/drm/gma500/fbdev.c | 4 +- drivers/gpu/drm/gud/gud_pipe.c | 4 +- drivers/gpu/drm/i915/display/intel_connector.c | 4 +- drivers/gpu/drm/i915/display/intel_cursor.c | 7 +- drivers/gpu/drm/i915/display/intel_ddi.c | 4 +- .../gpu/drm/i915/display/intel_display_debugfs.c | 8 +- drivers/gpu/drm/i915/display/intel_display_types.h | 20 +- drivers/gpu/drm/i915/display/intel_dp.c | 36 +- drivers/gpu/drm/i915/display/intel_dp_hdcp.c | 6 +- .../gpu/drm/i915/display/intel_dp_link_training.c | 4 +- drivers/gpu/drm/i915/display/intel_dp_mst.c | 155 +- drivers/gpu/drm/i915/display/intel_fbdev.c | 8 +- drivers/gpu/drm/i915/display/intel_hdcp.c | 8 +- drivers/gpu/drm/i915/display/intel_psr.c | 39 +- drivers/gpu/drm/i915/display/skl_universal_plane.c | 9 +- drivers/gpu/drm/i915/gem/i915_gem_object.c | 2 +- drivers/gpu/drm/imagination/pvr_free_list.c | 15 +- drivers/gpu/drm/imagination/pvr_mmu.c | 19 +- drivers/gpu/drm/imagination/pvr_mmu.h | 2 +- drivers/gpu/drm/imagination/pvr_vm.c | 4 +- drivers/gpu/drm/msm/adreno/adreno_gpu.c | 2 + drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 1 + drivers/gpu/drm/msm/dsi/dsi_host.c | 36 +- drivers/gpu/drm/msm/hdmi/hdmi_phy.c | 8 +- drivers/gpu/drm/msm/msm_fbdev.c | 4 +- drivers/gpu/drm/nouveau/nouveau_bo.c | 3 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 5 +- drivers/gpu/drm/nouveau/nouveau_drm.c | 5 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 2 + drivers/gpu/drm/nouveau/nouveau_sched.c | 2 +- drivers/gpu/drm/nouveau/nouveau_sched.h | 1 + drivers/gpu/drm/nouveau/nouveau_uvmm.c | 13 +- drivers/gpu/drm/nouveau/nvif/vmm.c | 1 + drivers/gpu/drm/nouveau/nvkm/engine/disp/gv100.c | 4 +- drivers/gpu/drm/nouveau/nvkm/engine/disp/head.h | 2 + drivers/gpu/drm/nouveau/nvkm/engine/disp/r535.c | 8 +- drivers/gpu/drm/nouveau/nvkm/engine/disp/uoutp.c | 3 +- drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c | 23 +- drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c | 2 + drivers/gpu/drm/omapdrm/omap_fbdev.c | 4 +- drivers/gpu/drm/radeon/radeon_fbdev.c | 4 +- drivers/gpu/drm/tegra/fbdev.c | 4 +- drivers/gpu/drm/tiny/ofdrm.c | 8 +- drivers/gpu/drm/tiny/simpledrm.c | 61 +- drivers/gpu/drm/vc4/vc4_kms.c | 2 +- drivers/gpu/drm/virtio/virtgpu_gem.c | 2 +- drivers/gpu/drm/virtio/virtgpu_ioctl.c | 6 +- drivers/gpu/drm/virtio/virtgpu_submit.c | 11 +- drivers/gpu/drm/virtio/virtgpu_vram.c | 17 +- drivers/gpu/drm/xe/instructions/xe_gpu_commands.h | 1 + drivers/gpu/drm/xe/xe_bo.h | 19 + drivers/gpu/drm/xe/xe_ring_ops.c | 16 +- drivers/gpu/drm/xe/xe_vm.c | 29 +- drivers/hid/amd-sfh-hid/amd_sfh_common.h | 4 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 10 + drivers/hid/bpf/hid_bpf_dispatch.c | 12 +- drivers/hid/hid-alps.c | 31 +- drivers/hid/hid-asus.c | 34 +- drivers/hid/hid-ids.h | 3 + drivers/hid/hid-logitech-hidpp.c | 24 +- drivers/hid/hid-quirks.c | 3 +- drivers/hid/wacom_sys.c | 5 +- drivers/hwmon/emc1403.c | 73 +- drivers/hwmon/hp-wmi-sensors.c | 2 + drivers/hwmon/pmbus/pmbus.h | 3 +- drivers/hwmon/pmbus/tps53679.c | 11 +- drivers/hwmon/pwm-fan.c | 13 +- drivers/hwmon/w83791d.c | 1 + drivers/hwmon/w83793.c | 4 +- drivers/i2c/busses/i2c-at91-core.c | 3 + drivers/i2c/busses/i2c-at91-master.c | 12 +- drivers/i2c/busses/i2c-at91.h | 1 + drivers/i2c/busses/i2c-imx.c | 3 + drivers/i2c/busses/i2c-mxs.c | 5 +- drivers/i2c/busses/i2c-qcom-cci.c | 37 +- drivers/i2c/busses/i2c-qcom-geni.c | 33 +- drivers/i2c/i2c-atr.c | 1 + drivers/i3c/master.c | 20 +- drivers/infiniband/core/iwpm_util.c | 9 +- drivers/infiniband/core/mad.c | 3 +- drivers/infiniband/core/ucma.c | 7 +- drivers/infiniband/core/verbs.c | 12 +- drivers/infiniband/hw/efa/efa_com.c | 7 +- drivers/infiniband/hw/efa/efa_com.h | 1 + drivers/infiniband/hw/efa/efa_main.c | 35 +- drivers/infiniband/hw/hfi1/file_ops.c | 23 +- drivers/infiniband/hw/irdma/verbs.c | 2 +- drivers/infiniband/hw/mlx4/sysfs.c | 4 + drivers/infiniband/sw/rxe/rxe_mcast.c | 50 +- drivers/infiniband/sw/rxe/rxe_mr.c | 3 +- drivers/infiniband/sw/rxe/rxe_verbs.c | 13 +- drivers/infiniband/sw/siw/siw_cm.c | 7 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 2 +- drivers/infiniband/ulp/ipoib/ipoib.h | 7 + drivers/infiniband/ulp/ipoib/ipoib_ib.c | 12 +- drivers/infiniband/ulp/ipoib/ipoib_multicast.c | 16 +- drivers/infiniband/ulp/iser/iser_initiator.c | 16 +- drivers/infiniband/ulp/isert/ib_isert.c | 22 + drivers/infiniband/ulp/isert/ib_isert.h | 2 + drivers/infiniband/ulp/rtrs/rtrs-clt.c | 8 + drivers/infiniband/ulp/rtrs/rtrs-clt.h | 2 + drivers/input/evdev.c | 2 + drivers/input/input-compat.c | 2 + drivers/input/joystick/xpad.c | 10 +- drivers/input/keyboard/adp5588-keys.c | 12 +- drivers/input/keyboard/atkbd.c | 8 + drivers/input/misc/soc_button_array.c | 16 +- drivers/input/mouse/synaptics.c | 8 + drivers/input/rmi4/rmi_driver.c | 13 + drivers/input/rmi4/rmi_smbus.c | 10 +- drivers/input/serio/hp_sdc.c | 2 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/input/touchscreen/cyttsp5.c | 1 + drivers/iommu/iommufd/device.c | 70 +- drivers/iommu/iommufd/hw_pagetable.c | 13 +- drivers/iommu/iommufd/iommufd_private.h | 8 +- drivers/iommu/iommufd/selftest.c | 20 + drivers/iommu/msm_iommu.c | 55 +- drivers/media/i2c/imx355.c | 62 +- drivers/media/i2c/video-i2c.c | 5 +- .../platform/chips-media/wave5/wave5-vpu-dec.c | 12 +- .../platform/chips-media/wave5/wave5-vpuconfig.h | 1 + drivers/memstick/core/ms_block.c | 2 + drivers/mmc/core/bus.c | 2 +- drivers/mmc/core/host.c | 1 + drivers/mmc/core/sdio_uart.c | 3 + drivers/mmc/host/mmc_hsq.c | 8 +- drivers/mmc/host/mmc_spi.c | 1 + drivers/mmc/host/mmci.c | 3 + drivers/mmc/host/mxcmmc.c | 4 + drivers/mmc/host/rtsx_pci_sdmmc.c | 5 + drivers/mmc/host/sdhci-of-aspeed.c | 5 +- drivers/mmc/host/sdhci_am654.c | 43 +- drivers/mmc/host/sh_mmcif.c | 3 +- drivers/mmc/host/via-sdmmc.c | 4 + drivers/mtd/nand/raw/pl35x-nand-controller.c | 10 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/dsa/mt7530-mdio.c | 18 +- drivers/net/ethernet/amazon/ena/ena_com.c | 25 +- drivers/net/ethernet/amazon/ena/ena_com.h | 14 - drivers/net/ethernet/amazon/ena/ena_netdev.c | 1 + drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 3 + drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 3 + drivers/net/ethernet/atheros/atlx/atl1.c | 3 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 82 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 2 + drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 6 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.h | 2 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 63 +- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 5 +- drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 20 +- drivers/net/ethernet/broadcom/tg3.c | 15 +- drivers/net/ethernet/brocade/bna/bnad.c | 16 +- drivers/net/ethernet/cadence/macb_main.c | 13 +- drivers/net/ethernet/cadence/macb_ptp.c | 20 +- .../chelsio/inline_crypto/chtls/chtls_cm.c | 4 +- drivers/net/ethernet/cortina/gemini.c | 2 +- drivers/net/ethernet/freescale/fman/fman.c | 1 + drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c | 3 + drivers/net/ethernet/intel/idpf/idpf.h | 24 +- drivers/net/ethernet/intel/idpf/idpf_dev.c | 10 +- drivers/net/ethernet/intel/idpf/idpf_lib.c | 35 +- drivers/net/ethernet/intel/idpf/idpf_txrx.c | 301 ++-- drivers/net/ethernet/intel/idpf/idpf_txrx.h | 14 +- drivers/net/ethernet/intel/idpf/idpf_vf_dev.c | 10 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.c | 20 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.h | 3 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 3 +- drivers/net/ethernet/marvell/octeontx2/af/common.h | 45 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 6 +- .../ethernet/mellanox/mlx5/core/en/rep/bridge.c | 45 +- drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c | 3 + .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 1 - drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 39 +- .../net/ethernet/mellanox/mlx5/core/esw/bridge.c | 15 +- .../net/ethernet/mellanox/mlx5/core/esw/bridge.h | 2 + .../net/ethernet/mellanox/mlx5/core/lib/devcom.c | 5 +- drivers/net/ethernet/meta/fbnic/fbnic_csr.h | 1 + drivers/net/ethernet/meta/fbnic/fbnic_fw.c | 9 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 2 +- drivers/net/ethernet/microchip/lan743x_main.c | 2 +- drivers/net/ethernet/netronome/nfp/crypto/ipsec.c | 3 +- drivers/net/ethernet/socionext/netsec.c | 2 + drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c | 5 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c | 4 +- drivers/net/ethernet/stmicro/stmmac/hwif.h | 4 +- drivers/net/ethernet/stmicro/stmmac/ring_mode.c | 4 +- .../net/ethernet/stmicro/stmmac/stmmac_ethtool.c | 2 - .../net/ethernet/stmicro/stmmac/stmmac_selftests.c | 106 +- drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 19 +- drivers/net/ethernet/ti/cpsw.c | 41 +- drivers/net/ethernet/ti/cpsw_new.c | 35 +- drivers/net/ethernet/ti/cpsw_priv.h | 1 + drivers/net/ethernet/ti/netcp_core.c | 2 +- drivers/net/fddi/skfp/skfddi.c | 3 +- drivers/net/macsec.c | 123 +- drivers/net/pcs/pcs-xpcs.c | 4 +- drivers/net/phy/mediatek/mtk-ge-soc.c | 23 +- drivers/net/usb/catc.c | 15 +- drivers/net/usb/cdc_mbim.c | 5 + drivers/net/usb/lan78xx.c | 2 + drivers/net/usb/sr9700.c | 3 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 9 + drivers/net/vrf.c | 2 - drivers/net/vxlan/vxlan_core.c | 6 +- drivers/net/wireless/ath/ath11k/mac.c | 25 +- drivers/net/wireless/ath/wcn36xx/dxe.c | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 2 + .../broadcom/brcm80211/brcmsmac/mac80211_if.c | 4 + drivers/net/wireless/intel/ipw2x00/libipw_rx.c | 6 + drivers/net/wireless/intel/iwlegacy/common.c | 2 +- drivers/net/wireless/intersil/p54/eeprom.c | 22 +- drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 12 +- drivers/net/wireless/marvell/mwifiex/pcie.c | 2 +- drivers/net/wireless/marvell/mwifiex/scan.c | 54 +- drivers/net/wireless/marvell/mwifiex/util.c | 10 +- .../net/wireless/mediatek/mt76/mt7915/debugfs.c | 5 + drivers/net/wireless/mediatek/mt76/mt7915/eeprom.c | 33 +- drivers/net/wireless/mediatek/mt76/mt7915/eeprom.h | 1 + drivers/net/wireless/mediatek/mt76/mt7915/init.c | 7 +- drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 15 +- drivers/net/wireless/mediatek/mt76/mt7915/mt7915.h | 3 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 8 +- drivers/net/wireless/microchip/wilc1000/cfg80211.c | 14 + drivers/net/wireless/microchip/wilc1000/wlan.c | 9 + drivers/net/wireless/realtek/rtw88/fw.c | 8 +- drivers/net/wireless/realtek/rtw88/tx.c | 2 +- drivers/net/wireless/realtek/rtw89/core.h | 3 +- drivers/net/wireless/realtek/rtw89/mac.c | 13 +- drivers/net/wireless/realtek/rtw89/mac80211.c | 3 +- drivers/net/wireless/realtek/rtw89/pci.c | 13 + drivers/net/wireless/realtek/rtw89/pci.h | 1 + drivers/net/wireless/realtek/rtw89/phy.c | 3 +- drivers/net/wireless/realtek/rtw89/rtw8851be.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8852ae.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8852be.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8852bte.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8852ce.c | 1 + drivers/net/wireless/realtek/rtw89/rtw8922ae.c | 1 + drivers/net/wireless/rsi/rsi_91x_mgmt.c | 2 - drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/virtual/mac80211_hwsim.c | 39 +- drivers/net/wireless/virtual/virt_wifi.c | 4 +- drivers/net/wwan/mhi_wwan_mbim.c | 28 +- drivers/net/wwan/t7xx/t7xx_netdev.c | 4 + drivers/nfc/microread/microread.c | 6 +- drivers/nfc/nfcmrvl/fw_dnld.c | 11 +- drivers/nfc/pn533/pn533.c | 14 +- drivers/nfc/pn533/pn533.h | 4 +- drivers/nfc/pn533/usb.c | 4 +- drivers/nfc/pn544/pn544.c | 7 +- drivers/nfc/port100.c | 7 + drivers/nfc/st21nfca/core.c | 12 +- drivers/nfc/st21nfca/i2c.c | 29 +- drivers/nfc/virtual_ncidev.c | 3 +- drivers/nvdimm/nd_virtio.c | 125 +- drivers/nvdimm/pmem.c | 15 +- drivers/nvdimm/region_devs.c | 5 +- drivers/nvdimm/virtio_pmem.c | 14 +- drivers/nvdimm/virtio_pmem.h | 6 + drivers/nvme/host/core.c | 83 +- drivers/nvme/host/nvme.h | 2 +- drivers/pci/controller/plda/pcie-starfive.c | 36 +- drivers/pci/hotplug/pnv_php.c | 2 +- drivers/pci/hotplug/rpaphp_slot.c | 2 +- drivers/pci/of_property.c | 11 +- drivers/pci/pci.c | 5 +- drivers/pci/rebar.c | 19 +- drivers/pci/setup-bus.c | 56 +- drivers/pci/slot.c | 67 +- drivers/perf/arm-cmn.c | 10 +- drivers/phy/mediatek/phy-mtk-hdmi-mt8195.c | 4 +- drivers/phy/mediatek/phy-mtk-hdmi-mt8195.h | 3 + drivers/phy/renesas/phy-rcar-gen3-usb2.c | 302 +++- drivers/pinctrl/meson/pinctrl-meson-s4.c | 2 +- drivers/pinctrl/pinctrl-single.c | 3 +- drivers/pinctrl/sunxi/pinctrl-sunxi.c | 76 +- drivers/pinctrl/sunxi/pinctrl-sunxi.h | 7 + drivers/platform/x86/amd/pmc/Makefile | 2 +- drivers/platform/x86/amd/pmc/mp1_stb.c | 316 ++++ drivers/platform/x86/amd/pmc/pmc.c | 314 +--- drivers/platform/x86/amd/pmc/pmc.h | 18 +- drivers/platform/x86/intel/int1092/intel_sar.c | 39 +- .../x86/intel/speed_select_if/isst_tpmi_core.c | 14 +- drivers/platform/x86/think-lmi.c | 45 +- drivers/platform/x86/think-lmi.h | 2 +- drivers/power/sequencing/core.c | 11 +- drivers/power/supply/ab8500_fg.c | 32 +- drivers/power/supply/qcom_battmgr.c | 8 +- drivers/remoteproc/qcom_q6v5_adsp.c | 8 +- drivers/remoteproc/qcom_q6v5_pas.c | 93 +- drivers/rtc/rtc-rzn1.c | 16 +- drivers/s390/cio/chp.c | 3 + drivers/s390/cio/cio.c | 11 +- drivers/s390/cio/cio.h | 5 +- drivers/s390/cio/cmf.c | 2 +- drivers/s390/cio/device.c | 9 +- drivers/s390/cio/device_fsm.c | 3 + drivers/s390/cio/device_ops.c | 23 + drivers/s390/cio/vfio_ccw_fsm.c | 2 +- drivers/s390/crypto/vfio_ap_ops.c | 44 +- drivers/scsi/fnic/fnic.h | 2 +- drivers/scsi/fnic/fnic_isr.c | 13 +- drivers/scsi/fnic/fnic_main.c | 33 +- drivers/scsi/libiscsi_tcp.c | 3 + drivers/scsi/megaraid/megaraid_sas_base.c | 4 +- drivers/scsi/qla2xxx/qla_bsg.c | 47 +- drivers/scsi/qla2xxx/qla_def.h | 2 + drivers/scsi/qla2xxx/qla_fw.h | 4 + drivers/scsi/qla2xxx/qla_init.c | 14 + drivers/scsi/qla2xxx/qla_iocb.c | 23 +- drivers/scsi/qla2xxx/qla_isr.c | 33 +- drivers/scsi/qla2xxx/qla_mbx.c | 6 +- drivers/scsi/qla2xxx/qla_mid.c | 49 +- drivers/scsi/qla2xxx/qla_nvme.c | 10 + drivers/scsi/qla2xxx/qla_os.c | 17 +- drivers/scsi/scsi.c | 24 +- drivers/scsi/sd_zbc.c | 8 +- drivers/soc/qcom/mdt_loader.c | 4 +- drivers/soundwire/cadence_master.c | 7 + drivers/spi/spi-zynqmp-gqspi.c | 34 + drivers/staging/media/rkvdec/rkvdec.c | 4 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 5 +- drivers/staging/sm750fb/sm750.c | 2 +- drivers/staging/sm750fb/sm750.h | 2 +- drivers/staging/sm750fb/sm750_accel.c | 6 +- drivers/staging/sm750fb/sm750_accel.h | 4 +- drivers/thermal/gov_step_wise.c | 10 +- drivers/usb/cdns3/cdns3-gadget.c | 4 +- drivers/usb/cdns3/cdnsp-gadget.c | 112 +- drivers/usb/cdns3/cdnsp-gadget.h | 1 + drivers/usb/cdns3/cdnsp-mem.c | 98 +- drivers/usb/cdns3/core.h | 2 +- drivers/usb/dwc3/core.h | 3 +- drivers/usb/dwc3/ep0.c | 2 +- drivers/usb/dwc3/gadget.c | 129 +- drivers/usb/gadget/function/f_mass_storage.c | 3 + drivers/usb/host/xhci-pci.c | 8 +- drivers/usb/storage/realtek_cr.c | 9 +- drivers/usb/typec/tcpm/tcpm.c | 39 +- drivers/video/screen_info_generic.c | 36 + drivers/virtio/virtio_mmio.c | 66 +- drivers/watchdog/da9063_wdt.c | 4 +- drivers/watchdog/digicolor_wdt.c | 13 +- drivers/watchdog/msc313e_wdt.c | 16 +- drivers/watchdog/rtd119x_wdt.c | 7 +- drivers/watchdog/sp5100_tco.c | 6 +- drivers/watchdog/starfive-wdt.c | 2 +- fs/9p/vfs_addr.c | 12 + fs/autofs/inode.c | 4 + fs/btrfs/dev-replace.c | 1 + fs/btrfs/file.c | 4 +- fs/btrfs/tree-checker.c | 2 +- fs/configfs/dir.c | 13 +- fs/configfs/symlink.c | 51 +- fs/erofs/fscache.c | 2 + fs/erofs/sysfs.c | 2 + fs/exec.c | 29 +- fs/f2fs/debug.c | 4 - fs/f2fs/dir.c | 7 +- fs/f2fs/f2fs.h | 29 +- fs/f2fs/file.c | 47 +- fs/f2fs/gc.c | 51 +- fs/f2fs/gc.h | 25 - fs/f2fs/inline.c | 2 +- fs/f2fs/namei.c | 6 +- fs/f2fs/node.c | 22 +- fs/f2fs/recovery.c | 41 +- fs/f2fs/segment.c | 9 +- fs/f2fs/super.c | 4 +- fs/f2fs/sysfs.c | 18 +- fs/fs-writeback.c | 25 +- fs/inode.c | 11 +- fs/kernfs/mount.c | 4 +- fs/lockd/svcsubs.c | 2 +- fs/ntfs3/inode.c | 7 +- fs/ocfs2/namei.c | 9 +- fs/ocfs2/xattr.c | 13 +- fs/ocfs2/xattr.h | 8 +- fs/pidfs.c | 43 +- fs/smb/client/cached_dir.c | 32 +- fs/smb/client/cifs_fs_sb.h | 1 + fs/smb/client/cifsacl.c | 69 +- fs/smb/client/cifsfs.c | 12 + fs/smb/client/cifsglob.h | 12 +- fs/smb/client/cifsproto.h | 8 +- fs/smb/client/cifssmb.c | 2 +- fs/smb/client/connect.c | 10 + fs/smb/client/file.c | 11 +- fs/smb/client/misc.c | 12 +- fs/smb/client/reparse.c | 4 +- fs/smb/client/reparse.h | 7 +- fs/smb/client/sess.c | 106 +- fs/smb/client/smb2inode.c | 11 + fs/smb/client/smb2ops.c | 78 +- fs/smb/client/smb2pdu.c | 64 +- fs/smb/client/transport.c | 4 +- fs/smb/server/smb2pdu.c | 89 +- fs/smb/server/smb2pdu.h | 1 + fs/squashfs/xz_wrapper.c | 6 +- fs/super.c | 43 +- fs/udf/inode.c | 129 +- fs/xfs/libxfs/xfs_da_btree.c | 2 +- fs/xfs/libxfs/xfs_da_btree.h | 2 + fs/xfs/scrub/attr_repair.c | 4 +- fs/xfs/scrub/dir_repair.c | 23 +- fs/xfs/scrub/health.c | 6 +- fs/xfs/scrub/inode.c | 2 +- fs/xfs/scrub/inode_repair.c | 2 +- fs/xfs/scrub/orphanage.c | 6 +- fs/xfs/scrub/reap.c | 2 +- fs/xfs/scrub/refcount.c | 8 +- fs/xfs/scrub/scrub.h | 2 +- fs/xfs/scrub/stats.c | 1 + fs/xfs/scrub/tempfile.c | 29 +- fs/xfs/xfs_exchrange.c | 13 +- fs/xfs/xfs_icache.c | 2 +- fs/xfs/xfs_inode.h | 3 + fs/xfs/xfs_qm.c | 10 +- include/drm/drm_client.h | 10 +- include/drm/drm_fb_helper.h | 11 +- include/drm/drm_file.h | 1 + include/keys/request_key_auth-type.h | 2 +- include/linux/bpf_mem_alloc.h | 6 + include/linux/compiler-context-analysis.h | 32 + include/linux/compiler_types.h | 18 +- include/linux/dev_printk.h | 1 + include/linux/dmaengine.h | 7 + include/linux/firmware/qcom/qcom_scm.h | 20 +- include/linux/ftrace.h | 5 +- include/linux/if_vlan.h | 3 + include/linux/ipv6.h | 40 +- include/linux/libnvdimm.h | 9 + include/linux/lockd/lockd.h | 2 +- include/linux/netdevice.h | 3 + include/linux/pci.h | 14 +- include/linux/perf_event.h | 1 + include/linux/rculist.h | 29 + include/linux/sched.h | 16 +- include/linux/sched/rt.h | 2 + include/linux/sched/signal.h | 5 +- include/linux/sched/user.h | 3 +- include/linux/screen_info.h | 2 + include/linux/skbuff.h | 24 +- include/linux/soc/qcom/mdt_loader.h | 6 +- include/linux/virtio.h | 2 +- include/net/bluetooth/coredump.h | 2 + include/net/cfg80211.h | 25 + include/net/gue.h | 19 +- include/net/if_inet6.h | 2 - include/net/inet_connection_sock.h | 11 +- include/net/inet_sock.h | 1 + include/net/ip6_route.h | 8 +- include/net/mac80211.h | 5 +- include/net/netfilter/nf_conntrack.h | 5 + include/net/netfilter/nf_conntrack_timeout.h | 27 +- include/net/netfilter/nf_tables.h | 2 - include/net/netmem.h | 78 +- include/net/netns/xfrm.h | 2 +- include/net/nfc/hci.h | 2 +- include/net/nfc/nfc.h | 3 +- include/net/page_pool/helpers.h | 35 +- include/net/page_pool/types.h | 5 +- include/net/rose.h | 12 + include/net/sock.h | 8 +- include/net/tcp.h | 4 +- include/sound/soc.h | 3 +- include/uapi/linux/landlock.h | 37 +- include/uapi/linux/nl80211.h | 5 + init/main.c | 27 +- io_uring/net.c | 41 +- io_uring/rw.c | 32 +- io_uring/waitid.c | 44 +- kernel/bpf/arraymap.c | 6 +- kernel/bpf/btf.c | 140 +- kernel/bpf/crypto.c | 5 +- kernel/bpf/hashtab.c | 236 ++- kernel/bpf/memalloc.c | 106 +- kernel/bpf/offload.c | 2 + kernel/bpf/syscall.c | 5 +- kernel/cgroup/pids.c | 5 + kernel/dma/coherent.c | 13 +- kernel/dma/swiotlb.c | 4 +- kernel/events/core.c | 15 +- kernel/events/ring_buffer.c | 29 +- kernel/futex/pi.c | 10 - kernel/locking/rtmutex_api.c | 2 + kernel/reboot.c | 55 +- kernel/sched/core.c | 77 +- kernel/sched/sched.h | 9 +- kernel/signal.c | 24 +- kernel/sysctl.c | 31 - kernel/trace/ftrace.c | 57 +- kernel/trace/ring_buffer.c | 135 +- kernel/trace/trace.c | 155 +- kernel/trace/trace.h | 131 +- kernel/trace/trace_btf.c | 31 +- kernel/trace/trace_btf.h | 3 +- kernel/trace/trace_eprobe.c | 19 +- kernel/trace/trace_events_hist.c | 167 +- kernel/trace/trace_events_trigger.c | 344 ++-- kernel/trace/trace_functions.c | 2 +- kernel/trace/trace_probe.c | 5 +- kernel/trace/trace_stack.c | 2 +- kernel/workqueue.c | 2 +- mm/backing-dev.c | 5 +- mm/damon/vaddr.c | 1 + mm/huge_memory.c | 10 + mm/hugetlb.c | 55 +- mm/khugepaged.c | 6 - mm/madvise.c | 8 + mm/memblock.c | 18 +- mm/mlock.c | 2 +- mm/mremap.c | 12 +- mm/rmap.c | 23 +- mm/secretmem.c | 117 +- mm/vma.c | 8 + net/8021q/vlan_dev.c | 5 + net/atm/pppoatm.c | 42 +- net/bluetooth/bnep/core.c | 17 +- net/bluetooth/bnep/netdev.c | 8 +- net/bluetooth/coredump.c | 65 +- net/bluetooth/eir.c | 10 +- net/bluetooth/hci_codec.c | 36 +- net/bluetooth/hci_conn.c | 14 +- net/bluetooth/hci_core.c | 26 +- net/bluetooth/hci_sock.c | 20 +- net/bluetooth/hci_sync.c | 2 + net/bluetooth/iso.c | 53 +- net/bluetooth/l2cap_core.c | 10 +- net/bluetooth/mgmt.c | 27 +- net/bluetooth/rfcomm/core.c | 3 +- net/bluetooth/rfcomm/sock.c | 19 +- net/bluetooth/smp.c | 17 + net/bridge/br_cfm.c | 11 +- net/bridge/br_device.c | 1 - net/bridge/br_input.c | 35 +- net/bridge/br_mdb.c | 2 + net/bridge/br_mrp.c | 13 +- net/bridge/br_mst.c | 20 +- net/bridge/br_private.h | 26 +- net/bridge/br_stp_bpdu.c | 5 +- net/core/dev.c | 2 +- net/core/devmem.c | 1 + net/core/drop_monitor.c | 4 +- net/core/filter.c | 46 +- net/core/neighbour.c | 241 ++- net/core/page_pool.c | 9 +- net/core/skbuff.c | 41 +- net/core/skmsg.c | 4 + net/core/sock.c | 25 +- net/core/sock_map.c | 1 + net/dccp/ipv6.c | 4 +- net/dccp/timer.c | 4 +- net/ipv4/arp.c | 1 + net/ipv4/esp4.c | 6 + net/ipv4/fib_semantics.c | 59 +- net/ipv4/fou_core.c | 4 + net/ipv4/icmp.c | 17 +- net/ipv4/inet_connection_sock.c | 13 +- net/ipv4/inet_diag.c | 4 +- net/ipv4/ip_gre.c | 12 + net/ipv4/ipconfig.c | 90 +- net/ipv4/ipmr.c | 3 +- net/ipv4/ipmr_base.c | 2 +- net/ipv4/sysctl_net_ipv4.c | 4 +- net/ipv4/tcp_input.c | 3 +- net/ipv4/tcp_ipv4.c | 4 +- net/ipv4/tcp_output.c | 3 + net/ipv4/tcp_timer.c | 5 +- net/ipv4/xfrm4_input.c | 2 - net/ipv6/addrconf.c | 3 +- net/ipv6/af_inet6.c | 2 +- net/ipv6/esp6.c | 6 + net/ipv6/exthdrs_core.c | 3 + net/ipv6/inet6_connection_sock.c | 2 +- net/ipv6/ip6_flowlabel.c | 67 +- net/ipv6/ip6_gre.c | 2 +- net/ipv6/ip6_output.c | 3 +- net/ipv6/ip6mr.c | 2 +- net/ipv6/ipv6_sockglue.c | 9 - net/ipv6/mcast.c | 253 +-- net/ipv6/netfilter/ip6t_rpfilter.c | 2 +- net/ipv6/netfilter/ip6t_rt.c | 11 +- net/ipv6/route.c | 33 +- net/ipv6/seg6.c | 4 +- net/ipv6/seg6_local.c | 3 + net/ipv6/tcp_ipv6.c | 21 +- net/ipv6/xfrm6_input.c | 2 - net/ipv6/xfrm6_output.c | 10 +- net/llc/llc_c_ac.c | 2 +- net/llc/llc_s_ac.c | 4 + net/llc/llc_sap.c | 8 +- net/mac80211/cfg.c | 55 +- net/mac80211/debugfs.c | 2 +- net/mac80211/debugfs_netdev.c | 9 + net/mac80211/ieee80211_i.h | 5 +- net/mac80211/iface.c | 76 +- net/mac80211/main.c | 4 + net/mac80211/mesh.c | 34 +- net/mac80211/offchannel.c | 7 + net/mac80211/pm.c | 8 +- net/mac80211/scan.c | 24 +- net/mac80211/tdls.c | 19 +- net/mac80211/tx.c | 66 +- net/mac80211/util.c | 3 +- net/mctp/route.c | 2 +- net/mptcp/Makefile | 2 +- net/mptcp/ctrl.c | 4 +- net/mptcp/mib.c | 5 + net/mptcp/mib.h | 5 + net/mptcp/options.c | 6 +- net/mptcp/{pm_netlink.c => pm_kernel.c} | 71 +- net/mptcp/pm_userspace.c | 32 +- net/mptcp/protocol.c | 95 +- net/mptcp/protocol.h | 36 +- net/mptcp/subflow.c | 10 +- net/netfilter/ipvs/ip_vs_core.c | 6 + net/netfilter/nf_conntrack_core.c | 6 +- net/netfilter/nf_conntrack_netlink.c | 3 +- net/netfilter/nf_conntrack_timeout.c | 27 +- net/netfilter/nf_flow_table_core.c | 12 +- net/netfilter/nf_flow_table_offload.c | 7 +- net/netfilter/nf_tables_api.c | 59 +- net/netfilter/nfnetlink_cttimeout.c | 114 +- net/netfilter/nfnetlink_queue.c | 8 +- net/netfilter/nft_chain_filter.c | 50 +- net/netfilter/nft_ct.c | 7 +- net/netfilter/nft_nat.c | 2 +- net/netfilter/nft_synproxy.c | 3 +- net/netfilter/xt_CT.c | 2 +- net/netlink/genetlink.c | 29 +- net/nfc/core.c | 15 +- net/nfc/digital_dep.c | 8 +- net/nfc/llcp.h | 1 + net/nfc/llcp_commands.c | 2 +- net/nfc/llcp_core.c | 173 +- net/nfc/llcp_sock.c | 67 +- net/nfc/nci/core.c | 10 +- net/nfc/netlink.c | 7 +- net/nfc/nfc.h | 3 +- net/openvswitch/conntrack.c | 39 +- net/packet/af_packet.c | 108 +- net/packet/internal.h | 2 +- net/rds/ib_cm.c | 2 +- net/rds/ib_frmr.c | 11 +- net/rose/af_rose.c | 49 +- net/rose/rose_in.c | 6 + net/rose/rose_loopback.c | 61 +- net/rose/rose_timer.c | 87 +- net/sched/act_api.c | 13 +- net/sched/act_ct.c | 41 +- net/sched/act_gate.c | 30 +- net/sched/cls_u32.c | 12 +- net/sched/sch_hfsc.c | 22 + net/sched/sch_hhf.c | 9 +- net/sched/sch_teql.c | 7 +- net/sctp/associola.c | 15 +- net/sctp/input.c | 7 +- net/sctp/ipv6.c | 8 +- net/sctp/sm_sideeffect.c | 37 +- net/sctp/sm_statefuns.c | 2 + net/smc/smc.h | 6 +- net/smc/smc_clc.h | 2 +- net/smc/smc_core.c | 4 +- net/smc/smc_core.h | 4 +- net/smc/smc_ib.c | 10 +- net/tipc/group.c | 4 +- net/tipc/monitor.c | 3 +- net/tls/tls_sw.c | 6 +- net/wireless/chan.c | 389 ++--- net/wireless/core.c | 2 + net/wireless/lib80211_crypt_tkip.c | 13 +- net/wireless/nl80211.c | 60 +- net/wireless/scan.c | 22 +- net/wireless/util.c | 68 +- net/xdp/xskmap.c | 2 +- net/xfrm/espintcp.c | 6 +- net/xfrm/xfrm_input.c | 63 +- net/xfrm/xfrm_state.c | 9 +- net/xfrm/xfrm_user.c | 37 +- security/ipe/eval.c | 12 +- security/ipe/eval.h | 2 +- security/ipe/fs.c | 4 - security/ipe/hooks.c | 22 +- security/ipe/policy_fs.c | 4 + security/keys/encrypted-keys/encrypted.c | 20 +- security/keys/gc.c | 4 +- security/keys/request_key_auth.c | 12 +- security/keys/trusted-keys/trusted_tpm2.c | 12 +- security/landlock/fs.c | 18 +- security/landlock/net.c | 14 + security/selinux/avc.c | 5 +- security/selinux/hooks.c | 158 +- security/selinux/include/objsec.h | 10 +- sound/core/init.c | 3 +- sound/core/pcm_timer.c | 7 +- sound/hda/ext/hdac_ext_stream.c | 4 +- sound/pci/hda/hda_controller.c | 2 +- sound/pci/hda/patch_realtek.c | 9 + sound/soc/codecs/aw88261.c | 30 +- sound/soc/codecs/aw88261.h | 6 - sound/soc/codecs/hdmi-codec.c | 6 +- sound/soc/codecs/rt712-sdca-dmic.c | 14 +- sound/soc/sdw_utils/soc_sdw_utils.c | 2 +- sound/soc/soc-pcm.c | 18 +- sound/soc/tegra/tegra210_mixer.c | 10 +- sound/soc/ux500/ux500_msp_i2s.h | 4 +- sound/usb/6fire/chip.c | 40 +- sound/usb/6fire/comm.c | 42 +- sound/usb/6fire/comm.h | 2 +- sound/usb/6fire/midi.c | 64 +- sound/usb/6fire/midi.h | 2 +- sound/usb/6fire/pcm.c | 221 +-- sound/usb/6fire/pcm.h | 5 +- sound/usb/bcd2000/bcd2000.c | 33 +- sound/usb/card.h | 3 +- sound/usb/endpoint.c | 16 +- sound/virtio/virtio_card.c | 4 +- tools/bootconfig/main.c | 32 +- tools/lib/bpf/libbpf.c | 7 + tools/lib/bpf/relo_core.c | 58 +- tools/perf/tests/shell/stat_bpf_counters.sh | 2 +- .../selftests/arm64/mte/check_gcr_el1_cswitch.c | 2 +- .../testing/selftests/bpf/prog_tests/linked_list.c | 4 +- tools/testing/selftests/bpf/progs/bpf_iter_tcp4.c | 4 +- tools/testing/selftests/bpf/progs/bpf_iter_tcp6.c | 4 +- tools/testing/selftests/cgroup/cgroup_util.c | 82 +- tools/testing/selftests/cgroup/cgroup_util.h | 8 +- tools/testing/selftests/cgroup/test_memcontrol.c | 78 + .../ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc | 2 +- tools/testing/selftests/landlock/fs_test.c | 1679 +++++++++++++++++++- tools/testing/selftests/landlock/net_test.c | 169 +- tools/testing/selftests/mm/memfd_secret.c | 30 +- tools/testing/selftests/nci/nci_dev.c | 45 +- virt/kvm/kvm_main.c | 30 +- 875 files changed, 14469 insertions(+), 7651 deletions(-)

2 weeks, 2 days

[PATCH 6.18 000/398] 6.18.54-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.54 release. There are 398 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 25 Sep 2026 14:05:48 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.54-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.54-rc1 April Cardenas <april.cardenas(a)canonical.com> smb/client: send lease break ACKs thru correct session for multiuser mounts Namjae Jeon <linkinjeon(a)kernel.org> Revert "ksmbd: Fix to handle removal of rfc1002 header from smb_hdr" Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device Bard Liao <yung-chuan.liao(a)linux.intel.com> ASoC: sdw_utils: subtract the endpoint that is not present Dmitry Antipov <dmantipov(a)yandex.ru> wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix partial normalized name responses Maoyi Xie <maoyixie.tju(a)gmail.com> time/namespace: Export init_time_ns and do_timens_ktime_to_host() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix reparse buffer bounds in cifs_query_reparse_point() Daehyeon Ko <4ncienth(a)gmail.com> wifi: libipw: reject TKIP frames without a full MIC Eric Biggers <ebiggers(a)kernel.org> wifi: ipw2x00: Use michael_mic() from cfg80211 Eric Biggers <ebiggers(a)kernel.org> wifi: mac80211, cfg80211: Export michael_mic() and move it to cfg80211 Eric Biggers <ebiggers(a)kernel.org> wifi: ipw2x00: Rename michael_mic() to libipw_michael_mic() Mike Lothian <mike(a)fireburn.co.uk> drm/amdgpu: hold a runtime PM reference for P2P dma-buf attachments Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer(a)amd.com> drm/amdgpu: lock bo before calling amdgpu_vm_bo_update_shared Darrick J. Wong <djwong(a)kernel.org> xfs: fix under-reservation of blocks when repairing sf directories Christoph Hellwig <hch(a)lst.de> xfs: remove the i_ino field in struct xfs_inode Christoph Hellwig <hch(a)lst.de> xfs: convert xchk_inode_xref_set_corrupt to xchk_ip_xref_set_corrupt Christoph Hellwig <hch(a)lst.de> xfs: add a xfs_rmap_inode_owner helper Fan Wu <fanwu01(a)zju.edu.cn> smb: client: fix cifsFileInfo reference leak in deferred close Arun Easi <aeasi(a)cisco.com> scsi: fnic: Fix missed link-up when critical IRQ targets offline CPU Karan Tilak Kumar <kartilak(a)cisco.com> scsi: fnic: Bump up version number again Karan Tilak Kumar <kartilak(a)cisco.com> scsi: fnic: Make debug logging protocol independent Karan Tilak Kumar <kartilak(a)cisco.com> scsi: fnic: Bump up version number Karan Tilak Kumar <kartilak(a)cisco.com> scsi: fnic: Rename fnic_scsi_fcpio_reset() Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mac80211: refuse to make a monitor active when it has no queue Benjamin Berg <benjamin.berg(a)intel.com> wifi: mac80211: track MU-MIMO configuration on disabled interfaces Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/vma: correctly unaccount on mmap_prepare() failure David Howells <dhowells(a)redhat.com> 9p: Fix v9fs_issue_write() to update i_size and remote_i_size David Howells <dhowells(a)redhat.com> cifs: Fix specification of function pointers Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/huge_memory: bypass THP tuneables for huge pfnmap mappings David Hildenbrand (Arm) <david(a)kernel.org> mm: move vma_kernel_pagesize() from hugetlb to mm.h Zhiling Zou <zhilinz(a)nebusec.ai> xfrm: save input state data before secpath resets Dong Chenchen <dongchenchen2(a)huawei.com> xfrm: Fix dev use-after-free in xfrm async resumption Jianbo Liu <jianbol(a)nvidia.com> xfrm: Refactor xfrm_input lock to reduce contention with RSS Thomas Gleixner <tglx(a)kernel.org> signal: Prevent exec() race Thomas Gleixner <tglx(a)linutronix.de> signal: Move MMCID exit out of sighand lock Xiang Mei <xmei5(a)asu.edu> ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling Zizhi Wo <wozizhi(a)huawei.com> smb: client: fix busy dentry warning on unmount after DIO Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> ntsync: reject wait ioctls with zero owner Maoyi Xie <maoyixie.tju(a)gmail.com> ntsync: Honour caller's time namespace for absolute MONOTONIC timeouts Antheas Kapenekakis <lkml(a)antheas.dev> HID: asus: fortify keyboard handshake Frank Sorenson <sorenson(a)redhat.com> smb: client: fix missing iov bounds check in parse_posix_sids() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix missing lower-bound check on DFS referral string offsets Frank Sorenson <sorenson(a)redhat.com> smb: client: fix server->total_read for compound encrypted PDUs Frank Sorenson <sorenson(a)redhat.com> smb: client: fix potential OOB read in smb3_enum_snapshots() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Paulo Alcantara <pc(a)manguebit.org> smb: client: fix unaligned access in WSL reparse point parser Paulo Alcantara <pc(a)manguebit.org> smb: client: fix smbd_connection leak on cifs_get_tcp_session() error Frank Sorenson <sorenson(a)redhat.com> smb: client: reject short Next offsets in parse_server_interfaces() Joseph Qi <joseph.qi(a)linux.alibaba.com> smb: client: fix use-after-free of iface in cifs_try_adding_channels() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix rlist race and missing initialization Paulo Alcantara <pc(a)manguebit.org> smb: client: cancel reconnect work in clean_demultiplex_info() Chengjun Yao <Chengjun.Yao(a)amd.com> drm/amdgpu: fix rmmio iounmap skipped on device removal Jonghyuk Kim(MalHyuk) <malhyuk97(a)gmail.com> drm/msm: RCU-free the scheduler-containing ring and VM objects Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure Saim Shujah <saimzst(a)gmail.com> drm/msm/dpu: clear pending peripheral flush state Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/adreno: fix autosuspend cleanup during teardown Sophie D <patches(a)scd31.com> drm/gud: Ignore damage clips in full update mode Sajal Gupta <sajal2005gupta(a)gmail.com> drm/gud: fix out-of-bounds write in gud_plane_atomic_check() Rik van Riel <riel(a)surriel.com> wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver Zhao Li <enderaoelyther(a)gmail.com> wifi: mwifiex: validate action frame fixed fields Linmao Li <lilinmao(a)kylinos.cn> wifi: mwifiex: prevent authentication frame length truncation Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: mwifiex: validate scan response extents Doruk Tan Ozturk <doruk(a)0sec.ai> wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length Shengzhuo Wei <me(a)cherr.cc> wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST Shengzhuo Wei <me(a)cherr.cc> wifi: p54: validate curve data length in the calibration curve converters Tianchu Chen <flynnnchen(a)tencent.com> wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() Ali Ahmet Memis <ali(a)iusegentoo.com> wifi: wilc1000: fix out-of-bounds read in P2P public action frames Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: wlcore: release runtime PM ref on regdomain config failure Fan Wu <fanwu01(a)zju.edu.cn> wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown Tianchu Chen <flynnnchen(a)tencent.com> wifi: rsi: fix heap OOB write on key removal Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: libertas_tf: fix UAF in lbtf_free_adapter() Stanislaw Gruszka <stf_xl(a)wp.pl> wifi: iwlegacy: fix broadcast stations deallocation Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: brcmsmac: fix UAF in brcms_free_timer() Wentao Liang <vulab(a)iscas.ac.cn> watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() Wentao Liang <vulab(a)iscas.ac.cn> watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: rzv2h: Avoid division by zero Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: rtd119x: Avoid division by zero Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Propagate error code in resume() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix premature reset during timeout update Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: digicolor: Avoid division by zero Li Jun <lijun01(a)kylinos.cn> watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog Thomas Richard (congatec GmbH) <thomas.richard(a)bootlin.com> hwmon: (cgbc-hwmon) Add missing sensors Thomas Richard (congatec GmbH) <thomas.richard(a)bootlin.com> hwmon: (cgbc-hwmon) Fix current sensors ID lookup Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83793) release probe data through kref Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove Yibo Tan <lhfff(a)tju.edu.cn> hwmon: (pwm-fan) Stop RPM timer before freeing tach data Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding Nuno Sá <nuno.sa(a)analog.com> hwmon: (pmbus/core) increase number of phases and add new mask Muhammad Bilal <meatuni001(a)gmail.com> hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: zero ff_effect before compat copy in input_ff_effect_from_user Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Raphaël Larocque <rlarocque(a)disroot.org> Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - check btns_desc->package.count Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - fix MS Surface Pro 11 probe failure Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() Chris Sommers <chris.sommers(a)icloud.com> Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P Runyu Xiao <runyu.xiao(a)seu.edu.cn> Input: hp_sdc - shut down kicker timer on module exit Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: evdev - zero absinfo before partial copy in EVIOCSABS Linkai Gong <gonglinkai(a)kylinos.cn> Input: cyttsp5 - clamp the HID report size before memcpy Alexei Turtanov <9alexei9(a)gmail.com> Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 Alvin Šipraga <alvin.sipraga(a)analog.com> Input: adp5588-keys - cache GPIO state before registering the gpiochip Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Clear ITAPDLY on tuning failure Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Reset command and data lines on failed tuning Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Move tuning_loop to local variable Xu Rao <raoxu(a)uniontech.com> mmc: spi: reset bytes_xfered before retrying CRC failures Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt Felix Gu <ustc.gu(a)gmail.com> mmc: sdio_uart: fix xmit_fifo leak when the port table is full Myeonghun Pak <mhun512(a)gmail.com> mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Florian Maillard <florian.maillard(a)mailoo.org> mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 Fan Wu <fanwu01(a)zju.edu.cn> mmc: mxcmmc: cancel data work and watchdog on remove Fan Wu <fanwu01(a)zju.edu.cn> mmc: mmci: Fix use-after-free in busy-timeout work Fan Wu <fanwu01(a)zju.edu.cn> mmc: hsq: Fix use-after-free in retry work Zhu Ling <zhuling0805(a)qq.com> mmc: core: Fix OF node reference leak on card add failure Fan Wu <fanwu01(a)zju.edu.cn> mmc: core: Cancel SDIO IRQ work before freeing host Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed Christian Göttsche <cgzones(a)googlemail.com> selinux: always fill AVC decision in avc_has_perm_noaudit() Karl Mehltretter <kmehltretter(a)gmail.com> selinux: recheck intermediate backing files on mprotect() Karl Mehltretter <kmehltretter(a)gmail.com> selinux: preserve user SID across nested backing files Shuhei Takeshita <jyohuku.alterego(a)gmail.com> IB/hfi1: Fix the PIO_CRED credit-return mmap Shuhei Takeshita <jyohuku.alterego(a)gmail.com> IB/hfi1: Resolve the credit-return buffer through the send context's node Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> IB/mlx4: Fix use-after-free on pkey sysfs registration failure Guangshuo Li <lgs201920130244(a)gmail.com> i2c: imx: disable autosuspend on remove Shengzhuo Wei <me(a)cherr.cc> i2c: imx: release DMA channels on probe error Liu Zhenlong <dragonliu2018(a)gmail.com> i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() Linkai Gong <gonglinkai(a)kylinos.cn> i2c: atr: fix dangling adapter pointer on add failure Shengzhuo Wei <me(a)cherr.cc> i2c: at91: release DMA channels on remove and probe error Jarkko Sakkinen <jarkko(a)kernel.org> KEYS: trusted: Fix tpm2_load_cmd() boundary check Maoyi Xie <maoyixie.tju(a)gmail.com> keys: translate request_key_auth pid for the reading procfs instance Cen Zhang <cenzhang(a)linux.microsoft.com> KEYS: encrypted: fix integer overflow of datablob_len Wenjie Qi <qiwenjie(a)xiaomi.com> mm: filemap: retain mapped dropbehind folios Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: account mm->locked_vm correctly for MREMAP_DONTUNMAP Shakeel Butt <shakeel.butt(a)linux.dev> mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio() Nhat Pham <nphamcs(a)gmail.com> mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count Yifei Gao <gyf161023(a)gmail.com> memstick: ms_block: destroy io_queue workqueue on removal Shakeel Butt <shakeel.butt(a)linux.dev> memcg: avoid charging the root memcg from obj_cgroup_charge_pages() Alexey Klimov <alexey.klimov(a)linaro.org> soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node Siwei Zhang <fourdizhang(a)tencent.com> xfrm: use hlist_del_init_rcu for state_cache and state_cache_input Chengfeng Ye <nicoyip.dev(a)gmail.com> xfrm: serialize state GC with device state flush Alberto Carboneri <acarboneri(a)drivesec.com> scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() Mark Amirkan <markdamirkan(a)gmail.com> net/packet: avoid truncating TPACKET_V3 private size Mark Amirkan <markdamirkan(a)gmail.com> net/packet: clear RX owner on VNET header error Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: hhf: cap hh_flows_limit at change time Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> net/sched: act_api: release tail references on DELACTION failure Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() Ahmed Naseef <naseefkm(a)gmail.com> net: phy: mediatek: do not report link and per-speed LED rules together Mark Amirkan <markdamirkan(a)gmail.com> net: lan743x: fix RX checksum use-after-free Gris Ge <cnfourt(a)gmail.com> net: ip_tunnel: initialize `options_len` before referencing options Zhiling Zou <zhilinz(a)nebusec.ai> ipv6: xfrm: use full sockets in local error paths Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix non-atomic read of DMA position registers Guanghui Yang <3497809730(a)qq.com> btrfs: clear free space tree creation state on rebuild failure Hongling Zeng <zenghongling(a)kylinos.cn> btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Serialize local codec list cleanup Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: hci_codec: validate vendor codec count length Aamir Ahmed <elb12345(a)hotmail.co.uk> Bluetooth: eir: validate service data length before reading UUID Nicolas Thibert <nithibert(a)gmail.com> Bluetooth: btusb: fix NXP IW610 composite device handling Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix LSE operations on {8,16}-bit types Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_and() mask generation Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_write() casting Koichiro Den <den(a)valinux.co.jp> arm64: dts: renesas: r8a779f0: Set UFS lane count Bradley Morgan <include(a)grrlz.net> arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc Thomas Huth <thuth(a)redhat.com> kselftest/arm64: Fix size of thread_data values for pthread_join() Benoît Sevens <bsevens(a)google.com> HID: logitech-hidpp: fix race condition when accessing stale stack pointer Wyatt Feng <wf.kernel.dev(a)gmail.com> net: xfrm: reject unrepresentable espintcp transport headers Zhiling Zou <zhilinz(a)nebusec.ai> openvswitch: avoid reallocating confirmed conntrack labels Jeffin Philip <jeffinphilip14(a)gmail.com> RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() Quanye Yang <quanyeyang(a)proton.me> RDMA/ucma: Serialize join and leave on copy_to_user failure Hao-Qun Huang <alvinhuang0603(a)gmail.com> spi: virtio: Use the per-transfer bits per word Itai Handler <itai.handler(a)gmail.com> spi: spi-zynqmp-gqspi: stop the controller on shutdown Frieder Schrempf <frieder.schrempf(a)kontron.de> spi: fsl-qspi: Reprogram the clock rate when the operation frequency changes Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> swiotlb: use the adjusted address for the highmem page lookup Inbal Schussheim <inbal.lipshtat(a)mail.huji.ac.il> tcp: exclude old ACKs from tcp fast path Chang S. Bae <chang.seok.bae(a)intel.com> x86/microcode/intel: Reject problematic loading on Granite Rapids systems Chang S. Bae <chang.seok.bae(a)intel.com> x86/build/64: Prevent native builds from generating EGPR use Lyude Paul <lyude(a)redhat.com> drm/nouveau/gsp/r570: Enable S/R Display workaround in GSP Lyude Paul <lyude(a)redhat.com> drm/nouveau/gsp/r570: Set GcOff = 0 in fbsr Lyude Paul <lyude(a)redhat.com> drm/nouveau/gsp: Increase delay for magic sleep in r535_gsp_fini() Lyude Paul <lyude(a)redhat.com> Revert "nouveau/gsp: fix suspend/resume regression on r570 firmware" Chunfeng Song <springbreeze(a)stu.pku.edu.cn> rust: net: phy: fix off-by-one bit positions in device status accessors Aohan Mei <henrymei(a)tencent.com> rds: ib: use rds_conn_drop() on protocol version mismatch Thomas Gleixner <tglx(a)kernel.org> posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Avoid long delay in atomic context Seunguk Shin <seunguk.shin(a)arm.com> fs/dax: check zero or empty entry before converting xarray entry Hyunwoo Kim <imv4bel(a)gmail.com> exec: Cleanup POSIX timers right after de_thread() Wentao Liang <vulab(a)iscas.ac.cn> cifs: Fix server use-after-free in cifs_chan_skip_or_disable() Wentao Liang <vulab(a)iscas.ac.cn> ata: libahci_platform: Fix device reference leak in ahci_platform_get_resources() Niklas Cassel <cassel(a)kernel.org> ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY Jiangshan Yi <yijiangshan(a)kylinos.cn> ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type Yuho Choi <oss.patchbox(a)gmail.com> ALSA: virtio: reset device before deleting virtqueues Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix potential UAF after asynchronous card release Jeremy Nyberg <slickstretch3.0(a)gmail.com> Input: xpad - fix PDP Marvel Xbox 360 controller Roberts Kursitis <roberts.kursitis(a)azeron.eu> Input: xpad - add support for Azeron devices Erich Sartison <byt.es(a)mailbox.org> Input: xpad - add support for Victrix Pro BFG Controller Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: TX QOS Null data the same way as Null data Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: processor: Update cpuidle driver check in __acpi_processor_start() Li Jun <lijun01(a)kylinos.cn> watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog James Seo <james(a)equiv.tech> hwmon: (hp-wmi-sensors) Improve raw WMI string handling Cong Nguyen <congnt264(a)gmail.com> hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler hpp.iscas <hppiscas(a)163.com> Input: eeti_ts - publish the OF module alias Matthew Schwartz <matthew.schwartz(a)linux.dev> x86/fred: Reconstruct the #GP context for rejected INT instructions Filipe Manana <fdmanana(a)suse.com> btrfs: check if there is space for chunk item when validating sys chunk array Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update inode for hole punching and reflinking Dmitriy Chumachenko <Dmitry.Chumachenko(a)cyberprotect.ru> drm/amdgpu: check ras and obj before dereference Eric Dumazet <edumazet(a)google.com> net: skbuff: do not leave stale header offsets after pskb_carve() Dmitriy Okunev <dokunevdmitriy(a)gmail.com> net: mvpp2: prevent buffer overflow in page_pool allocation James Clark <jjc(a)jclark.com> net: macb: fix ordering around PTP timestamp read Jinke Han <jinkehan(a)didiglobal.com> x86/kprobes: Fix crash when probing CS CALL instructions Josh Poimboeuf <jpoimboe(a)kernel.org> x86/alternative: Refactor INT3 call emulation selftest Daniel Zahka <daniel.zahka(a)gmail.com> net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: propagate FPE preemption-class mapping errors Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Ack RX overrun interrupt correctly Eric Dumazet <edumazet(a)google.com> net: lock the socket in sock_gettstamp() Jakub Kicinski <kuba(a)kernel.org> eth: fbnic: ring the doorbell if a burst ends in a drop Yige Jiang <yigejiang86(a)gmail.com> net: netsec: fix device_node reference leak on phy_np Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: acp: fix ffs() operator precedence for SoundWire link ID Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: acp: refactor codec config count in SOF SoundWire machine driver Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: sdw_utils: tidyup asoc_sdw_parse_sdw_endpoints() Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: sdw_utils: tidyup .count_sidecar Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: intel: sof_sdw: Add ability to have auxiliary devices Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: sdw_utils: Add codec_conf for every DAI Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: acp: bounds-check SoundWire link ID in machine drivers HyeongJun An <sammiee5311(a)gmail.com> ASoC: hdmi-codec: Report a change when the channel status moves Sasha Levin <sashal(a)kernel.org> ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments Daniel Linjama <daniel(a)dev.linjama.com> btrfs: handle lack of space when cleaning up verity items Sun YangKai <sunk67188(a)gmail.com> btrfs: more trivial BTRFS_PATH_AUTO_FREE conversions Peter Zijlstra <peterz(a)infradead.org> futex: Also allocate private hash on vfork() Shivaprasad G Bhat <sbhat(a)linux.ibm.com> powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: do not overwrite phc_index when no PTP clock is registered Eric Dumazet <edumazet(a)google.com> drop_monitor: fix out-of-bounds write in reset_per_cpu_data() Eric Dumazet <edumazet(a)google.com> drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown Eric Dumazet <edumazet(a)google.com> drop_monitor: synchronize tracepoint unregistration on error path Eric Dumazet <edumazet(a)google.com> pppoatm: ensure a writable skb header and linear data Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). Juan Perdomo <jcperdomo100(a)gmail.com> Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit Tzung-Bi Shih <tzungbi(a)kernel.org> Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() Ibrahim Abdelkader <iabdelka(a)qti.qualcomm.com> Bluetooth: hci_qca: Do not write to the serial port after it is closed Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Bluetooth: qca: enable pwrseq support for WCN39xx devices Vivek Sahu <vivek.sahu(a)oss.qualcomm.com> Bluetooth: qca: Refactor code on the basis of chipset names Mengshi Wu <mengshi.wu(a)oss.qualcomm.com> Bluetooth: hci_qca: Refactor HFP hardware offload capability handling Weiming Shi <bestswngs(a)gmail.com> Bluetooth: coredump: Quiesce dump work on unregister Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel_pcie: validate TX skb length in send_sync ThangNN99 <ngocthang2710.1999(a)gmail.com> Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained Baineng Shou <shoubaineng(a)gmail.com> dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: keep compound responses on query info errors Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix partial file information responses Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: return buffer overflow for partial filesystem info Eric Dumazet <edumazet(a)google.com> tcp: do not let tcp_rmem be set below 4096 Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: mst: move switchdev call outside rcu Karl Mehltretter <kmehltretter(a)gmail.com> wifi: brcmfmac: fix lost 802.1x TX completion wakeup Hohyun Sim <tlaghgus0425(a)korea.ac.kr> net: fddi: skfp: fix NULL deref when setting the MAC address while down Dong Chenchen <dongchenchen2(a)huawei.com> ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: restore the hardware filters on open Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: convert RX path to page_pool Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL Filipe Manana <fdmanana(a)suse.com> btrfs: tree-checker: print dev extent offset in error message Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() Slavin Liu <bolin.liu(a)seu.edu.cn> ALSA: hda: trace PCM open only after assigning a stream Karl Mehltretter <kmehltretter(a)gmail.com> drm/vc4: Use managed KMS polling to fix UAF on unbind Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/shrinker: Return the freed page count through a parameter Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/mmio_gem: Revoke drm_vma_node on xe_mmio_gem destroy Ilia Levi <ilia.levi(a)intel.com> drm/xe/mmio_gem: use write-back mapping for dummy page Ilia Levi <ilia.levi(a)intel.com> drm/xe/mmio_gem: forbid VMA split Zihan Xi <zihanx(a)nebusec.ai> wifi: virt_wifi: don't transfer operstate before register Xiang Mei <xmei5(a)asu.edu> ALSA: 6fire: fix OOB write from device-reported iso length Takashi Iwai <tiwai(a)suse.de> ALSA: usb: 6fire: Avoid embedded URBs Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: virtuser: skip free_irq when no IRQ is installed Karl Mehltretter <kmehltretter(a)gmail.com> Input: trackpoint - fix the inertia attribute name in the ABI document Gabor Juhos <j4g8y7(a)gmail.com> spi: spi-qpic-snand: avoid writing QPIC_EBI2_ECC_BUF_CFG register Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: soc-pcm: Apply snd_soc_dai_link_ch_map.codec_ch_mask to codec params Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: Add codec_ch_mask to snd_soc_dai_link_ch_map Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: Rename snd_soc_dai_link_ch_map.ch_mask to cpu_ch_mask William Bright <william.bright(a)imd-tec.com> drm/msm/dp: fix link bandwidth check when wide bus is enabled Jesse Casco <jesse.casco(a)gmail.com> drm/msm/dp: skip PUSH_IDLE when the link was never enabled Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> ALSA: pcm: set timer->private_data before registering the PCM timer AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow Takashi Iwai <tiwai(a)suse.de> ALSA: bcd2000: Fix race between rawmidi and disconnect Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Skip default parms when resumed in neightbl_dump_info(). Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Add missing RCU annotation for neightbl_dump_info(). Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Convert RTM_GETNEIGHTBL to RCU. Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. Karl Mehltretter <kmehltretter(a)gmail.com> keys: fix lost wakeup when reaping a dead key type Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr Breno Leitao <leitao(a)debian.org> arm64: hibernate: clone only the linear map that exists at runtime Shouping Wang <allen.wang(a)hj-micro.com> perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: hold reference on ct until flow is released Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_nat: unregister and release hooks on error Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_tables: fix device name and prefix match in hook lookup Theodor Arsenij Larionov Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_nat: fully initialise new_addr in netmap setup Karl Mehltretter <kmehltretter(a)gmail.com> drm/msm/adreno: Fix the skip_gpu parameter description Karl Mehltretter <kmehltretter(a)gmail.com> drm/msm: Fix the separate_gpu_kms parameter description Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> RDMA/siw: Bound fragmented header copies by the remaining length Leon Romanovsky <leon(a)kernel.org> RDMA/efa: Keep EQ resources alive while IRQ is registered Leon Romanovsky <leon(a)kernel.org> RDMA/efa: Keep admin queues alive while IRQ is registered Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order Karl Mehltretter <kmehltretter(a)gmail.com> scsi: qla2xxx: Fix the ql2xfc2target parameter description Meijing Zhao <zhaomeijing(a)lixiang.com> mm: memblock: show all region flags in debugfs Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: set up the TX info early to fix failure paths Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: mesh: release the channel if start fails Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: mesh: reset the CSA state when leaving Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: add HE 6 GHz capability in the scan elems len Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't access the TSF of a down interface Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't allow link changes when iface is down Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: require a peer station for TDLS setup confirm Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't allow injecting frames wider than the chanctx Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: get the wiphy out of a dying network namespace Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: unlist vifs when their netdev is unregistered Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: undo netns switch if renaming the wiphy fails Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: restore netns_immutable on failures Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: reset state when starting AP fails Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: abort chanswitch when leaving a mesh Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: suppress chanctx warning for debugfs reset Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't offload TC setup on AP_VLAN interfaces Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't warn when an IBSS has no channel to scan Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't start a ROC while scanning Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't filter by BSS type when removing stale entries Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: only group hidden BSSes with beacon entries Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't free driver-owned scan requests Shivank Garg <shivankg(a)amd.com> dmaengine: wait for RCU readers before releasing dma_device Shivank Garg <shivankg(a)amd.com> dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() Shivank Garg <shivankg(a)amd.com> dmaengine: Fix device kref underflow in dma_chan_put() Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> dma-coherent: report a failed reserved memory assignment Orgad Shaneh <orgads(a)gmail.com> MIPS: Octeon: apply USB FDT fixups also when USB is modular Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: cadence_master: wait and cancel cdns->work before clock stop Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: check IP header size in cfg80211_classify8021d() Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't get the radio mask for netdev-less wdevs Carolina Jubran <cjubran(a)nvidia.com> IB/IPoIB: Avoid restoring OPER_UP after multicast flush Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short association responses Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short beacon and probe responses Bogdan Nicolae <bogdan.nicolae(a)gmail.com> wifi: brcmfmac: cyw: pass PMKID to firmware if present Peng Hao <flyingpenghao(a)gmail.com> wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path Mariano Baragiola <mbaragiola(a)linux.com> wifi: virt_wifi: free skb when disconnected Lachlan Hodges <lachlan.hodges(a)morsemicro.com> wifi: mac80211: include TIM bitmap control for buffered S1G mcast traffic Ruoyu Wang <ruoyuw560(a)gmail.com> dmaengine: sprd: Fix runtime PM reference leak in probe Quanye Yang <quanyeyang(a)proton.me> RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Enforce local fence for IB_WR_REG_MR Li RongQing <lirongqing(a)baidu.com> RDMA/mad: Fix receive buffer leak when PKey enforcement fails Linkai Gong <gonglinkai(a)kylinos.cn> RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/isert: wait for deferred control PDU completions before releasing the connection Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/iser: reject a remote invalidation of an unregistered direction Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> arm64: dts: renesas: r9a09g047: Switch GBETH TX queue scheduling to WRR Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> arm64: dts: renesas: r9a09g056: Switch GBETH TX queue scheduling to WRR Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> arm64: dts: renesas: r9a09g057: Switch GBETH TX queue scheduling to WRR Biju Das <biju.das.jz(a)bp.renesas.com> power: sequencing: Fix build issue with COMPILE_TEST Krystian Kaniewski <krystianmkaniewski(a)gmail.com> RDMA/core: Reject unregistering netdevs in ib_get_eth_speed Or Har-Toov <ohartoov(a)nvidia.com> RDMA/mlx5: Remove warn on missing representor in query_port_speed Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds Weiming Shi <bestswngs(a)gmail.com> RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths Xixin Liu <liuxixin(a)kylinos.cn> clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate Xixin Liu <liuxixin(a)kylinos.cn> firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS Gang Yan <yangang(a)kylinos.cn> RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access Norbert Szetei <norbert(a)doyensec.com> RDMA/rxe: validate access flags before swapping the MR's PD Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept Pengpeng Hou <pengpeng(a)iscas.ac.cn> ARM: socfpga: select the PL310 erratum 753970 workaround Maher Azzouzi <maherazz04(a)gmail.com> esp: downgrade zerocopy managed frags before mutating skb frags Eric Dumazet <edumazet(a)google.com> xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() Kyle Zeng <kylebot(a)openai.com> xfrm: fix compat ALLOCSPI request use-after-free Sabrina Dubroca <sd(a)queasysnail.net> xfrm: avoid RCU warnings around the per-netns netlink socket Henry Martin <bsdhenrymartin(a)gmail.com> xfrm: iptfs: fix runt reassembly panic from short inner tot_len Roshan Kumar <roshaen09(a)gmail.com> xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() Ido Schimmel <idosch(a)nvidia.com> ipv6: Honor oif when choosing nexthop for locally generated traffic Ido Schimmel <idosch(a)nvidia.com> ipv6: Select best matching nexthop object in fib6_table_lookup() Arash Golgol <arash.golgol(a)gmail.com> media: video-i2c: fix buffer queue ordering Jens Axboe <axboe(a)kernel.dk> sunvdc: fix -EIO issue due to lack of retries Günther Noack <gnoack(a)google.com> selftests/landlock: Add audit test for whiteout object creation Günther Noack <gnoack(a)google.com> selftests/landlock: Add tests for whiteout object creation Günther Noack <gnoack(a)google.com> selftests/landlock: Use an actual chardev for MAKE_CHAR audit test Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Add disconnected leafs and branch test suites Tingmao Wang <m(a)maowtm.org> selftests/landlock: Add tests for access through disconnected paths Maximilian Heyne <mheyne(a)amazon.de> selftests/landlock: Explicitly disable audit in teardowns Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Increase default audit socket timeout Mickaël Salaün <mic(a)digikod.net> selftests/landlock: Fix socket file descriptor leaks in audit helpers Matthieu Buffet <matthieu(a)buffet.re> selftests/landlock: Add missing connect(minimal AF_UNSPEC) test Matthieu Buffet <matthieu(a)buffet.re> selftests/landlock: Add test for TCP fast open Matthieu Buffet <matthieu(a)buffet.re> landlock: Fix TCP Fast Open connection bypass Sasha Levin <sashal(a)kernel.org> Revert "perf annotate: Fix build with NO_SLANG=1" ------------- Diffstat: .../ABI/testing/sysfs-devices-platform-trackpoint | 2 +- Documentation/hwmon/cgbc-hwmon.rst | 42 +- Documentation/netlink/specs/rt-neigh.yaml | 3 + Documentation/networking/ip-sysctl.rst | 4 +- Makefile | 4 +- arch/arm/mach-socfpga/Kconfig | 2 +- arch/arm64/boot/dts/renesas/r8a779f0.dtsi | 1 + arch/arm64/boot/dts/renesas/r9a09g047.dtsi | 10 + arch/arm64/boot/dts/renesas/r9a09g056.dtsi | 10 + arch/arm64/boot/dts/renesas/r9a09g057.dtsi | 10 + arch/arm64/include/asm/percpu.h | 20 +- arch/arm64/kernel/hibernate-asm.S | 2 + arch/arm64/kernel/hibernate.c | 4 +- arch/mips/cavium-octeon/octeon-platform.c | 4 +- arch/powerpc/kernel/iommu.c | 2 +- arch/powerpc/kvm/book3s_hv_nested.c | 2 + arch/powerpc/kvm/book3s_hv_uvmem.c | 5 +- arch/x86/Kconfig.cpu | 11 + arch/x86/Makefile | 5 + arch/x86/entry/entry_fred.c | 11 +- arch/x86/include/asm/text-patching.h | 4 +- arch/x86/kernel/alternative.c | 55 +- arch/x86/kernel/cpu/microcode/intel.c | 26 + arch/x86/kernel/kprobes/core.c | 5 +- drivers/acpi/processor_driver.c | 2 +- drivers/ata/libahci.c | 15 +- drivers/ata/libahci_platform.c | 2 +- drivers/block/sunvdc.c | 9 +- drivers/bluetooth/btintel_pcie.c | 8 +- drivers/bluetooth/btmtk.c | 7 +- drivers/bluetooth/btmtksdio.c | 4 +- drivers/bluetooth/btqca.c | 37 +- drivers/bluetooth/btusb.c | 17 + drivers/bluetooth/hci_qca.c | 80 +- drivers/clk/clk-scpi.c | 2 +- drivers/dma/dmaengine.c | 10 +- drivers/dma/mmp_pdma.c | 2 +- drivers/dma/sprd-dma.c | 3 +- drivers/dma/sun6i-dma.c | 9 +- drivers/dma/ti/k3-udma-glue.c | 5 +- drivers/dma/xilinx/xilinx_dma.c | 26 +- drivers/firmware/arm_scpi.c | 4 +- drivers/gpio/gpio-virtuser.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 48 + drivers/gpu/drm/amd/amdgpu/nbio_v7_9.c | 2 +- drivers/gpu/drm/drm_atomic_uapi.c | 13 +- drivers/gpu/drm/gud/gud_pipe.c | 7 +- drivers/gpu/drm/msm/adreno/adreno_device.c | 2 +- drivers/gpu/drm/msm/adreno/adreno_gpu.c | 2 + drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 1 + drivers/gpu/drm/msm/dp/dp_display.c | 21 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 36 +- drivers/gpu/drm/msm/hdmi/hdmi_phy.c | 8 +- drivers/gpu/drm/msm/msm_drv.c | 2 +- drivers/gpu/drm/msm/msm_gem.h | 3 + drivers/gpu/drm/msm/msm_gem_vma.c | 2 +- drivers/gpu/drm/msm/msm_ringbuffer.c | 2 +- drivers/gpu/drm/msm/msm_ringbuffer.h | 1 + .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/fbsr.c | 2 +- .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/gsp.c | 8 +- .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/fbsr.c | 8 +- .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/gsp.c | 3 +- .../drm/nouveau/nvkm/subdev/gsp/rm/r570/nvrm/gsp.h | 8 + drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/rm.h | 2 +- drivers/gpu/drm/vc4/vc4_kms.c | 2 +- drivers/gpu/drm/xe/xe_mmio_gem.c | 33 +- drivers/gpu/drm/xe/xe_mmio_gem.h | 2 +- drivers/gpu/drm/xe/xe_shrinker.c | 62 +- drivers/hid/hid-asus.c | 34 +- drivers/hid/hid-logitech-hidpp.c | 24 +- drivers/hwmon/cgbc-hwmon.c | 129 +- drivers/hwmon/gpio-fan.c | 4 +- drivers/hwmon/hp-wmi-sensors.c | 32 +- drivers/hwmon/pmbus/pmbus.h | 3 +- drivers/hwmon/pmbus/tps53679.c | 11 +- drivers/hwmon/pwm-fan.c | 13 +- drivers/hwmon/w83791d.c | 1 + drivers/hwmon/w83793.c | 4 +- drivers/i2c/busses/i2c-at91-core.c | 3 + drivers/i2c/busses/i2c-at91-master.c | 12 +- drivers/i2c/busses/i2c-at91.h | 1 + drivers/i2c/busses/i2c-imx.c | 3 + drivers/i2c/busses/i2c-qcom-cci.c | 20 +- drivers/i2c/i2c-atr.c | 1 + drivers/infiniband/core/iwpm_util.c | 9 +- drivers/infiniband/core/mad.c | 3 +- drivers/infiniband/core/ucma.c | 7 +- drivers/infiniband/core/verbs.c | 12 +- drivers/infiniband/hw/bnxt_re/main.c | 10 +- drivers/infiniband/hw/efa/efa_com.c | 7 +- drivers/infiniband/hw/efa/efa_com.h | 1 + drivers/infiniband/hw/efa/efa_main.c | 35 +- drivers/infiniband/hw/hfi1/file_ops.c | 23 +- drivers/infiniband/hw/irdma/verbs.c | 2 +- drivers/infiniband/hw/mlx4/sysfs.c | 4 + drivers/infiniband/hw/mlx5/main.c | 7 +- drivers/infiniband/sw/rxe/rxe_mcast.c | 50 +- drivers/infiniband/sw/rxe/rxe_mr.c | 3 +- drivers/infiniband/sw/rxe/rxe_odp.c | 16 +- drivers/infiniband/sw/rxe/rxe_verbs.c | 13 +- drivers/infiniband/sw/siw/siw_cm.c | 7 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 2 +- drivers/infiniband/ulp/ipoib/ipoib.h | 7 + drivers/infiniband/ulp/ipoib/ipoib_ib.c | 12 +- drivers/infiniband/ulp/ipoib/ipoib_multicast.c | 16 +- drivers/infiniband/ulp/iser/iser_initiator.c | 16 +- drivers/infiniband/ulp/isert/ib_isert.c | 22 + drivers/infiniband/ulp/isert/ib_isert.h | 2 + drivers/infiniband/ulp/rtrs/rtrs-clt.c | 8 + drivers/infiniband/ulp/rtrs/rtrs-clt.h | 2 + drivers/input/evdev.c | 2 + drivers/input/input-compat.c | 2 + drivers/input/joystick/xpad.c | 10 +- drivers/input/keyboard/adp5588-keys.c | 12 +- drivers/input/keyboard/atkbd.c | 8 + drivers/input/misc/soc_button_array.c | 16 +- drivers/input/mouse/synaptics.c | 8 + drivers/input/rmi4/rmi_driver.c | 13 + drivers/input/rmi4/rmi_smbus.c | 10 +- drivers/input/serio/hp_sdc.c | 2 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/input/touchscreen/cyttsp5.c | 1 + drivers/input/touchscreen/eeti_ts.c | 1 + drivers/media/i2c/video-i2c.c | 5 +- drivers/memstick/core/ms_block.c | 2 + drivers/misc/ntsync.c | 6 + drivers/mmc/core/bus.c | 2 +- drivers/mmc/core/host.c | 1 + drivers/mmc/core/sdio_uart.c | 3 + drivers/mmc/host/mmc_hsq.c | 8 +- drivers/mmc/host/mmc_spi.c | 1 + drivers/mmc/host/mmci.c | 3 + drivers/mmc/host/mxcmmc.c | 4 + drivers/mmc/host/rtsx_pci_sdmmc.c | 5 + drivers/mmc/host/sdhci-of-aspeed.c | 5 +- drivers/mmc/host/sdhci_am654.c | 43 +- drivers/mmc/host/sh_mmcif.c | 3 +- drivers/net/ethernet/broadcom/Kconfig | 1 + drivers/net/ethernet/broadcom/genet/bcmgenet.c | 245 +-- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 5 +- drivers/net/ethernet/cadence/macb_ptp.c | 9 + drivers/net/ethernet/cortina/gemini.c | 2 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 3 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 42 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.h | 9 +- drivers/net/ethernet/microchip/lan743x_main.c | 2 +- drivers/net/ethernet/socionext/netsec.c | 2 + drivers/net/ethernet/stmicro/stmmac/hwif.h | 2 +- .../net/ethernet/stmicro/stmmac/stmmac_ethtool.c | 2 - drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 19 +- drivers/net/fddi/skfp/skfddi.c | 3 +- drivers/net/phy/mediatek/mtk-phy-lib.c | 27 +- drivers/net/wireless/ath/ath11k/mac.c | 25 +- drivers/net/wireless/ath/wcn36xx/dxe.c | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 2 + .../broadcom/brcm80211/brcmfmac/cyw/core.c | 5 +- .../broadcom/brcm80211/brcmsmac/mac80211_if.c | 4 + drivers/net/wireless/intel/ipw2x00/Kconfig | 1 - .../wireless/intel/ipw2x00/libipw_crypto_tkip.c | 130 +- drivers/net/wireless/intel/ipw2x00/libipw_rx.c | 6 + drivers/net/wireless/intel/iwlegacy/common.c | 2 +- drivers/net/wireless/intersil/p54/eeprom.c | 22 +- drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 12 +- drivers/net/wireless/marvell/mwifiex/pcie.c | 2 +- drivers/net/wireless/marvell/mwifiex/scan.c | 54 +- drivers/net/wireless/marvell/mwifiex/util.c | 10 +- drivers/net/wireless/microchip/wilc1000/cfg80211.c | 14 + drivers/net/wireless/microchip/wilc1000/wlan.c | 9 + drivers/net/wireless/realtek/rtw88/tx.c | 2 +- drivers/net/wireless/rsi/rsi_91x_mgmt.c | 2 - drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/virtual/mac80211_hwsim.c | 39 +- drivers/net/wireless/virtual/virt_wifi.c | 4 +- drivers/net/wwan/mhi_wwan_mbim.c | 28 +- drivers/net/wwan/t7xx/t7xx_netdev.c | 4 + drivers/perf/arm-cmn.c | 10 +- drivers/phy/mediatek/phy-mtk-hdmi-mt8195.c | 4 +- drivers/phy/mediatek/phy-mtk-hdmi-mt8195.h | 3 + drivers/phy/renesas/phy-rcar-gen3-usb2.c | 310 +++- drivers/power/sequencing/Kconfig | 3 +- drivers/power/sequencing/core.c | 11 +- drivers/scsi/fnic/fdls_disc.c | 730 ++++----- drivers/scsi/fnic/fip.c | 119 +- drivers/scsi/fnic/fip.h | 2 +- drivers/scsi/fnic/fnic.h | 69 +- drivers/scsi/fnic/fnic_fcs.c | 166 +- drivers/scsi/fnic/fnic_fdls.h | 2 +- drivers/scsi/fnic/fnic_isr.c | 41 +- drivers/scsi/fnic/fnic_main.c | 89 +- drivers/scsi/fnic/fnic_scsi.c | 264 ++- drivers/scsi/qla2xxx/qla_os.c | 2 +- drivers/scsi/scsi.c | 24 +- drivers/soc/samsung/exynos-pmu.c | 7 +- drivers/soundwire/cadence_master.c | 7 + drivers/spi/spi-fsl-qspi.c | 5 +- drivers/spi/spi-qpic-snand.c | 4 - drivers/spi/spi-virtio.c | 2 +- drivers/spi/spi-zynqmp-gqspi.c | 34 + drivers/watchdog/da9062_wdt.c | 4 +- drivers/watchdog/da9063_wdt.c | 4 +- drivers/watchdog/digicolor_wdt.c | 13 +- drivers/watchdog/msc313e_wdt.c | 16 +- drivers/watchdog/rtd119x_wdt.c | 7 +- drivers/watchdog/rzv2h_wdt.c | 7 +- drivers/watchdog/sp5100_tco.c | 6 +- drivers/watchdog/starfive-wdt.c | 2 +- fs/9p/vfs_addr.c | 29 +- fs/btrfs/dev-replace.c | 1 + fs/btrfs/disk-io.c | 4 + fs/btrfs/file.c | 4 +- fs/btrfs/free-space-tree.c | 14 +- fs/btrfs/inode.c | 3 +- fs/btrfs/tree-checker.c | 2 +- fs/btrfs/uuid-tree.c | 120 +- fs/btrfs/verity.c | 47 +- fs/btrfs/volumes.c | 153 +- fs/btrfs/xattr.c | 36 +- fs/dax.c | 9 +- fs/exec.c | 29 +- fs/smb/client/cifs_fs_sb.h | 1 + fs/smb/client/cifsfs.c | 12 + fs/smb/client/cifsglob.h | 12 +- fs/smb/client/cifsproto.h | 8 +- fs/smb/client/cifssmb.c | 2 +- fs/smb/client/connect.c | 10 + fs/smb/client/file.c | 28 +- fs/smb/client/misc.c | 12 +- fs/smb/client/reparse.c | 4 +- fs/smb/client/reparse.h | 7 +- fs/smb/client/sess.c | 104 +- fs/smb/client/smb2inode.c | 11 + fs/smb/client/smb2ops.c | 51 +- fs/smb/client/smb2pdu.c | 13 +- fs/smb/client/trace.h | 1 + fs/smb/client/transport.c | 4 +- fs/smb/server/server.c | 2 +- fs/smb/server/smb2pdu.c | 89 +- fs/smb/server/smb2pdu.h | 1 + fs/smb/server/smb_common.c | 20 +- fs/xfs/libxfs/xfs_bmap.c | 2 +- fs/xfs/libxfs/xfs_da_btree.c | 2 +- fs/xfs/libxfs/xfs_da_btree.h | 2 + fs/xfs/libxfs/xfs_rmap.h | 2 + fs/xfs/scrub/attr_repair.c | 4 +- fs/xfs/scrub/bmap.c | 6 +- fs/xfs/scrub/common.c | 6 +- fs/xfs/scrub/common.h | 4 +- fs/xfs/scrub/dir_repair.c | 4 +- fs/xfs/scrub/dirtree.c | 4 +- fs/xfs/scrub/inode.c | 6 +- fs/xfs/scrub/nlinks.c | 2 +- fs/xfs/scrub/reap.c | 3 +- fs/xfs/scrub/rtbitmap.c | 4 +- fs/xfs/scrub/rtsummary.c | 4 +- fs/xfs/scrub/tempfile.c | 29 +- fs/xfs/xfs_inode.h | 3 + include/keys/request_key_auth-type.h | 2 +- include/linux/hugetlb.h | 7 - include/linux/ieee80211.h | 5 + include/linux/mm.h | 24 +- include/net/bluetooth/coredump.h | 2 + include/net/mac80211.h | 5 +- include/net/netns/xfrm.h | 2 +- include/net/sock.h | 2 + include/sound/soc.h | 3 +- include/sound/soc_sdw_utils.h | 42 +- kernel/dma/coherent.c | 3 +- kernel/dma/swiotlb.c | 4 +- kernel/exit.c | 12 +- kernel/fork.c | 4 +- kernel/sched/core.c | 6 +- kernel/signal.c | 119 +- kernel/time/namespace.c | 2 + kernel/time/posix-cpu-timers.c | 40 +- mm/filemap.c | 2 +- mm/huge_memory.c | 86 +- mm/hugetlb.c | 17 - mm/memblock.c | 18 +- mm/memcontrol.c | 2 +- mm/mlock.c | 2 +- mm/mremap.c | 9 +- mm/swapfile.c | 2 +- mm/vma.c | 6 +- net/atm/pppoatm.c | 42 +- net/bluetooth/coredump.c | 65 +- net/bluetooth/eir.c | 10 +- net/bluetooth/hci_codec.c | 36 +- net/bluetooth/hci_core.c | 18 +- net/bluetooth/hci_sync.c | 2 + net/bluetooth/iso.c | 53 +- net/bluetooth/rfcomm/sock.c | 13 +- net/bridge/br_mst.c | 20 +- net/core/drop_monitor.c | 12 +- net/core/neighbour.c | 56 +- net/core/skbuff.c | 32 +- net/core/sock.c | 16 +- net/ipv4/esp4.c | 6 + net/ipv4/icmp.c | 17 +- net/ipv4/ip_tunnel_core.c | 16 +- net/ipv4/sysctl_net_ipv4.c | 4 +- net/ipv4/tcp_input.c | 3 +- net/ipv4/tcp_ulp.c | 4 + net/ipv4/xfrm4_input.c | 2 - net/ipv6/esp6.c | 6 + net/ipv6/route.c | 22 +- net/ipv6/seg6_local.c | 3 + net/ipv6/tcp_ipv6.c | 3 +- net/ipv6/xfrm6_input.c | 2 - net/ipv6/xfrm6_output.c | 10 +- net/mac80211/Makefile | 1 - net/mac80211/cfg.c | 63 +- net/mac80211/debugfs.c | 2 +- net/mac80211/debugfs_netdev.c | 9 + net/mac80211/ieee80211_i.h | 5 +- net/mac80211/iface.c | 79 +- net/mac80211/main.c | 4 + net/mac80211/mesh.c | 34 +- net/mac80211/michael.h | 22 - net/mac80211/offchannel.c | 7 + net/mac80211/pm.c | 8 +- net/mac80211/scan.c | 2 +- net/mac80211/tdls.c | 19 +- net/mac80211/tx.c | 107 +- net/mac80211/util.c | 3 +- net/mac80211/wpa.c | 1 - net/netfilter/nf_flow_table_core.c | 12 +- net/netfilter/nf_nat_core.c | 46 +- net/netfilter/nf_tables_api.c | 22 +- net/netfilter/nft_nat.c | 2 +- net/openvswitch/conntrack.c | 2 +- net/packet/af_packet.c | 4 +- net/packet/internal.h | 2 +- net/psp/psp_sock.c | 4 + net/rds/ib_cm.c | 2 +- net/sched/act_api.c | 11 +- net/sched/sch_hhf.c | 9 +- net/unix/garbage.c | 17 +- net/wireless/Makefile | 2 +- net/wireless/core.c | 150 +- net/wireless/core.h | 10 + net/{mac80211/michael.c => wireless/michael-mic.c} | 5 +- net/wireless/rdev-ops.h | 3 + net/wireless/scan.c | 43 +- net/wireless/util.c | 35 +- net/xfrm/espintcp.c | 6 +- net/xfrm/xfrm_input.c | 65 +- net/xfrm/xfrm_iptfs.c | 12 +- net/xfrm/xfrm_state.c | 9 +- net/xfrm/xfrm_user.c | 37 +- rust/kernel/net/phy.rs | 38 +- scripts/generate_rust_target.rs | 5 + security/keys/encrypted-keys/encrypted.c | 20 +- security/keys/gc.c | 4 +- security/keys/request_key_auth.c | 12 +- security/keys/trusted-keys/trusted_tpm2.c | 12 +- security/landlock/net.c | 14 + security/selinux/avc.c | 5 +- security/selinux/hooks.c | 158 +- security/selinux/include/objsec.h | 10 +- sound/core/init.c | 3 +- sound/core/pcm_timer.c | 7 +- sound/hda/common/controller.c | 2 +- sound/soc/amd/acp/acp-sdw-legacy-mach.c | 33 +- sound/soc/amd/acp/acp-sdw-sof-mach.c | 31 +- sound/soc/codecs/hdmi-codec.c | 6 +- sound/soc/codecs/rt712-sdca-dmic.c | 14 +- sound/soc/intel/boards/sof_sdw.c | 21 +- sound/soc/sdw_utils/soc_sdw_bridge_cs35l56.c | 4 +- sound/soc/sdw_utils/soc_sdw_utils.c | 59 +- sound/soc/soc-pcm.c | 18 +- sound/soc/ux500/ux500_msp_i2s.h | 4 +- sound/usb/6fire/comm.c | 42 +- sound/usb/6fire/comm.h | 2 +- sound/usb/6fire/midi.c | 43 +- sound/usb/6fire/midi.h | 2 +- sound/usb/6fire/pcm.c | 138 +- sound/usb/6fire/pcm.h | 5 +- sound/usb/bcd2000/bcd2000.c | 33 +- sound/usb/card.h | 3 +- sound/usb/endpoint.c | 16 +- sound/virtio/virtio_card.c | 4 +- tools/perf/util/hist.h | 8 +- .../selftests/arm64/mte/check_gcr_el1_cswitch.c | 2 +- tools/testing/selftests/landlock/audit.h | 119 +- tools/testing/selftests/landlock/audit_test.c | 4 +- tools/testing/selftests/landlock/fs_test.c | 1694 +++++++++++++++++++- tools/testing/selftests/landlock/net_test.c | 169 +- 389 files changed, 6902 insertions(+), 2843 deletions(-)

3 weeks, 2 days

[PATCH 7.2 000/438] 7.2.8-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.2.8 release. There are 438 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 25 Sep 2026 14:05:46 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.8-rc1.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.2.8-rc1 Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix partial normalized name responses Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only Vadim Nikitushkin <bub4z0r(a)gmail.com> drm/ttm: fix swapped-out resources never leaving their bulk_move range Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> ntsync: reject wait ioctls with zero owner Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: Fix GPU PCIe link capability reporting chong li <chongli2(a)amd.com> drm/amdgpu: reduce early full GPU access during SR-IOV init Arun Easi <aeasi(a)cisco.com> scsi: fnic: Fix missed link-up when critical IRQ targets offline CPU Karan Tilak Kumar <kartilak(a)cisco.com> scsi: fnic: Bump up version number Karan Tilak Kumar <kartilak(a)cisco.com> scsi: fnic: Make debug logging protocol independent Qi Zheng <qi.zheng(a)linux.dev> fs: fix missed removal of super_fs_objects_eligible() Usama Arif <usama.arif(a)linux.dev> fs/super: skip non-memcg-aware nr_cached_objects in memcg slab shrink Frank Sorenson <sorenson(a)redhat.com> smb: client: fix missing iov bounds check in parse_posix_sids() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix missing lower-bound check on DFS referral string offsets Frank Sorenson <sorenson(a)redhat.com> smb: client: fix server->total_read for compound encrypted PDUs Frank Sorenson <sorenson(a)redhat.com> smb: client: fix reparse buffer bounds in cifs_query_reparse_point() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix potential OOB read in smb3_enum_snapshots() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs() Frank Sorenson <sorenson(a)redhat.com> smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs Paulo Alcantara <pc(a)manguebit.org> smb: client: fix fattr leaking on wsl_to_fattr() failure Paulo Alcantara <pc(a)manguebit.org> smb: client: fix unaligned access in WSL reparse point parser Paulo Alcantara <pc(a)manguebit.org> smb: client: fix smbd_connection leak on cifs_get_tcp_session() error Frank Sorenson <sorenson(a)redhat.com> smb: client: reject short Next offsets in parse_server_interfaces() Joseph Qi <joseph.qi(a)linux.alibaba.com> smb: client: fix use-after-free of iface in cifs_try_adding_channels() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix rlist race and missing initialization April Cardenas <april.cardenas(a)canonical.com> smb/client: send lease break ACKs thru correct session for multiuser mounts Paulo Alcantara <pc(a)manguebit.org> smb: client: cancel reconnect work in clean_demultiplex_info() Vladimir Marioukhine <Vladimir.Marioukhine(a)amd.com> drm/amdkfd: implement restore_mqd callbacks for GFX12/12.1 David Francis <David.Francis(a)amd.com> drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc David Francis <David.Francis(a)amd.com> drm/amdkfd: Avoid integer underflow in EOP ring size calculation. Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: Skip KFD mapping clear before initialization Mike Lothian <mike(a)fireburn.co.uk> drm/amdgpu: hold a runtime PM reference for P2P dma-buf attachments Chengjun Yao <Chengjun.Yao(a)amd.com> drm/amdgpu: fix rmmio iounmap skipped on device removal Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/sched: Fix virtual runtime race Jonghyuk Kim(MalHyuk) <malhyuk97(a)gmail.com> drm/msm: RCU-free the scheduler-containing ring and VM objects Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure Saim Shujah <saimzst(a)gmail.com> drm/msm/dpu: clear pending peripheral flush state Guangshuo Li <lgs201920130244(a)gmail.com> drm/msm/adreno: fix autosuspend cleanup during teardown Sophie D <patches(a)scd31.com> drm/gud: Ignore damage clips in full update mode Sajal Gupta <sajal2005gupta(a)gmail.com> drm/gud: fix out-of-bounds write in gud_plane_atomic_check() Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mac80211: refuse to make a monitor active when it has no queue Ivan Pustogarov <ivan(a)ipust.net> wifi: mac80211: avoid out-of-bounds read for empty PREQ elements Rik van Riel <riel(a)surriel.com> wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver Zhao Li <enderaoelyther(a)gmail.com> wifi: mwifiex: validate action frame fixed fields Linmao Li <lilinmao(a)kylinos.cn> wifi: mwifiex: prevent authentication frame length truncation Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: mwifiex: validate scan response extents Doruk Tan Ozturk <doruk(a)0sec.ai> wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length Shengzhuo Wei <me(a)cherr.cc> wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST Shengzhuo Wei <me(a)cherr.cc> wifi: p54: validate curve data length in the calibration curve converters Tianchu Chen <flynnnchen(a)tencent.com> wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext() Ali Ahmet Memis <ali(a)iusegentoo.com> wifi: wilc1000: fix out-of-bounds read in P2P public action frames Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: wlcore: release runtime PM ref on regdomain config failure Fan Wu <fanwu01(a)zju.edu.cn> wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown Tianchu Chen <flynnnchen(a)tencent.com> wifi: rsi: fix heap OOB write on key removal Daehyeon Ko <4ncienth(a)gmail.com> wifi: libipw: reject TKIP frames without a full MIC Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: libertas_tf: fix UAF in lbtf_free_adapter() Stanislaw Gruszka <stf_xl(a)wp.pl> wifi: iwlegacy: fix broadcast stations deallocation Jiangshan Yi <yijiangshan(a)kylinos.cn> wifi: brcmsmac: fix UAF in brcms_free_timer() Wentao Liang <vulab(a)iscas.ac.cn> watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start() Wentao Liang <vulab(a)iscas.ac.cn> watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: rzv2h: Avoid division by zero Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: rtd119x: Avoid division by zero Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Propagate error code in resume() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix premature reset during timeout update Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: digicolor: Avoid division by zero Li Jun <lijun01(a)kylinos.cn> watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog Thomas Richard (congatec GmbH) <thomas.richard(a)bootlin.com> hwmon: (cgbc-hwmon) Add missing sensors Thomas Richard (congatec GmbH) <thomas.richard(a)bootlin.com> hwmon: (cgbc-hwmon) Fix current sensors ID lookup Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83793) release probe data through kref Guangshuo Li <lgs201920130244(a)gmail.com> hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove Yibo Tan <lhfff(a)tju.edu.cn> hwmon: (pwm-fan) Stop RPM timer before freeing tach data Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676 Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding Nuno Sá <nuno.sa(a)analog.com> hwmon: (pmbus/core) increase number of phases and add new mask Muhammad Bilal <meatuni001(a)gmail.com> hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show() Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: zero ff_effect before compat copy in input_ff_effect_from_user Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound Raphaël Larocque <rlarocque(a)disroot.org> Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722) Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - check btns_desc->package.count Hans de Goede <johannes.goede(a)oss.qualcomm.com> Input: soc_button_array - fix MS Surface Pro 11 probe failure Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block() Chris Sommers <chris.sommers(a)icloud.com> Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P Runyu Xiao <runyu.xiao(a)seu.edu.cn> Input: hp_sdc - shut down kicker timer on module exit Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> Input: evdev - zero absinfo before partial copy in EVIOCSABS Linkai Gong <gonglinkai(a)kylinos.cn> Input: cyttsp5 - clamp the HID report size before memcpy Alexei Turtanov <9alexei9(a)gmail.com> Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026 Alvin Šipraga <alvin.sipraga(a)analog.com> Input: adp5588-keys - cache GPIO state before registering the gpiochip Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Clear ITAPDLY on tuning failure Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Reset command and data lines on failed tuning Diogo Ivo (Schneider Electric) <diogo.ivo(a)bootlin.com> mmc: sdhci_am654: Move tuning_loop to local variable Xu Rao <raoxu(a)uniontech.com> mmc: spi: reset bytes_xfered before retrying CRC failures Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt Felix Gu <ustc.gu(a)gmail.com> mmc: sdio_uart: fix xmit_fifo leak when the port table is full Myeonghun Pak <mhun512(a)gmail.com> mmc: sdhci-of-aspeed: Remove children before releasing SDC resources Florian Maillard <florian.maillard(a)mailoo.org> mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260 Fan Wu <fanwu01(a)zju.edu.cn> mmc: mxcmmc: cancel data work and watchdog on remove Fan Wu <fanwu01(a)zju.edu.cn> mmc: mmci: Fix use-after-free in busy-timeout work Fan Wu <fanwu01(a)zju.edu.cn> mmc: hsq: Fix use-after-free in retry work Zhu Ling <zhuling0805(a)qq.com> mmc: core: Fix OF node reference leak on card add failure Fan Wu <fanwu01(a)zju.edu.cn> mmc: core: Cancel SDIO IRQ work before freeing host Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed Christian Göttsche <cgzones(a)googlemail.com> selinux: always fill AVC decision in avc_has_perm_noaudit() Karl Mehltretter <kmehltretter(a)gmail.com> selinux: recheck intermediate backing files on mprotect() Karl Mehltretter <kmehltretter(a)gmail.com> selinux: preserve user SID across nested backing files Shuhei Takeshita <jyohuku.alterego(a)gmail.com> IB/hfi1: Fix the PIO_CRED credit-return mmap Shuhei Takeshita <jyohuku.alterego(a)gmail.com> IB/hfi1: Resolve the credit-return buffer through the send context's node Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> IB/mlx4: Fix use-after-free on pkey sysfs registration failure Guangshuo Li <lgs201920130244(a)gmail.com> i2c: imx: disable autosuspend on remove Shengzhuo Wei <me(a)cherr.cc> i2c: imx: release DMA channels on probe error Liu Zhenlong <dragonliu2018(a)gmail.com> i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove() Linkai Gong <gonglinkai(a)kylinos.cn> i2c: atr: fix dangling adapter pointer on add failure Shengzhuo Wei <me(a)cherr.cc> i2c: at91: release DMA channels on remove and probe error fangqiurong <fangqiurong(a)kylinos.cn> sched_ext: Close the pre-enable ops error claim window Wanwu Li <liwanwu(a)kylinos.cn> sched_ext: Fix NULL sched deref in kfunc sub-sched error paths Jarkko Sakkinen <jarkko(a)kernel.org> KEYS: trusted: Fix tpm2_load_cmd() boundary check Maoyi Xie <maoyixie.tju(a)gmail.com> keys: translate request_key_auth pid for the reading procfs instance Cen Zhang <cenzhang(a)linux.microsoft.com> KEYS: encrypted: fix integer overflow of datablob_len Wenjie Qi <qiwenjie(a)xiaomi.com> mm: filemap: retain mapped dropbehind folios Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/vma: correctly unaccount on mmap_prepare() failure Jiayuan Chen <jiayuan.chen(a)linux.dev> mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: account mm->locked_vm correctly for MREMAP_DONTUNMAP Shakeel Butt <shakeel.butt(a)linux.dev> mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio() Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/huge_memory: bypass THP tuneables for huge pfnmap mappings Nhat Pham <nphamcs(a)gmail.com> mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count Yifei Gao <gyf161023(a)gmail.com> memstick: ms_block: destroy io_queue workqueue on removal Shakeel Butt <shakeel.butt(a)linux.dev> memcg: avoid charging the root memcg from obj_cgroup_charge_pages() Théo Lebrun <theo.lebrun(a)bootlin.com> mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ Alexey Klimov <alexey.klimov(a)linaro.org> soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node Zhiling Zou <zhilinz(a)nebusec.ai> xfrm: save input state data before secpath resets Siwei Zhang <fourdizhang(a)tencent.com> xfrm: use hlist_del_init_rcu for state_cache and state_cache_input Chengfeng Ye <nicoyip.dev(a)gmail.com> xfrm: serialize state GC with device state flush Alberto Carboneri <acarboneri(a)drivesec.com> scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable() Mark Amirkan <markdamirkan(a)gmail.com> net/packet: avoid truncating TPACKET_V3 private size Mark Amirkan <markdamirkan(a)gmail.com> net/packet: clear RX owner on VNET header error Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: hhf: cap hh_flows_limit at change time Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> net/sched: act_api: release tail references on DELACTION failure Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain Guanglei Zhu <zhugl3(a)xiaopeng.com> net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb() Ahmed Naseef <naseefkm(a)gmail.com> net: phy: mediatek: do not report link and per-speed LED rules together Mark Amirkan <markdamirkan(a)gmail.com> net: lan743x: fix RX checksum use-after-free Gris Ge <cnfourt(a)gmail.com> net: ip_tunnel: initialize `options_len` before referencing options Zhiling Zou <zhilinz(a)nebusec.ai> ipv6: xfrm: use full sockets in local error paths David Hu <xuehaohu(a)google.com> dma-buf: Split sgl by largest page-aligned chunk David Hu <xuehaohu(a)google.com> dma-buf: Fix silent overflow for phys vec to sgt Christian König <christian.koenig(a)amd.com> dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3 Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status Christian Lugnberg <christian.lugnberg(a)soundtrack.io> dmaengine: sun6i: fix non-atomic read of DMA position registers Abdurrahman Hussain <abdurrahman(a)nexthop.ai> gpiolib: of: don't mark hog nodes OF_POPULATED before a chip is found Michail Tatas <michail.tatas(a)gmail.com> gpiolib: Put fwnode reference on failure Guanghui Yang <3497809730(a)qq.com> btrfs: clear free space tree creation state on rebuild failure Anand Jain <asj(a)kernel.org> btrfs: derive f_fsid with dev_t only when temp_fsid is active Filipe Manana <fdmanana(a)suse.com> btrfs: fix creation of compressed inline extents that don't save space Hongling Zeng <zenghongling(a)kylinos.cn> btrfs: take commit root semaphore when iterating in mark_block_group_to_copy() Radek Podgorny <radek(a)podgorny.cz> Bluetooth: keep dst_type with dst when reusing an LE connection Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Serialize local codec list cleanup Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: hci_codec: validate vendor codec count length Aamir Ahmed <elb12345(a)hotmail.co.uk> Bluetooth: eir: validate service data length before reading UUID Nicolas Thibert <nithibert(a)gmail.com> Bluetooth: btusb: fix NXP IW610 composite device handling Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix LSE operations on {8,16}-bit types Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_and() mask generation Mark Rutland <mark.rutland(a)arm.com> arm64: percpu: Fix this_cpu_write() casting Dinh Nguyen <dinguyen(a)kernel.org> arm64: dts: socfpga: change access permission from 755 to 644 Koichiro Den <den(a)valinux.co.jp> arm64: dts: renesas: r8a779f0: Set UFS lane count Bradley Morgan <include(a)grrlz.net> arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc Thomas Huth <thuth(a)redhat.com> kselftest/arm64: Fix size of thread_data values for pthread_join() Wyatt Feng <wf.kernel.dev(a)gmail.com> net: xfrm: reject unrepresentable espintcp transport headers Jeff Layton <jlayton(a)kernel.org> nfsd: fix handling of NFSEXP_PNFS in the netlink codepath Zhiling Zou <zhilinz(a)nebusec.ai> openvswitch: avoid reallocating confirmed conntrack labels Jeffin Philip <jeffinphilip14(a)gmail.com> RDMA/core: fix refcount bug in iwpm_get_nlmsg_request() Quanye Yang <quanyeyang(a)proton.me> RDMA/ucma: Serialize join and leave on copy_to_user failure Hao-Qun Huang <alvinhuang0603(a)gmail.com> spi: virtio: Use the per-transfer bits per word Itai Handler <itai.handler(a)gmail.com> spi: spi-zynqmp-gqspi: stop the controller on shutdown Frieder Schrempf <frieder.schrempf(a)kontron.de> spi: fsl-qspi: Reprogram the clock rate when the operation frequency changes Ian Luites <ian(a)luites.com> soundwire: dmi-quirks: Disable ghost Realtek on Asus GX651AX Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> swiotlb: use the adjusted address for the highmem page lookup Inbal Schussheim <inbal.lipshtat(a)mail.huji.ac.il> tcp: exclude old ACKs from tcp fast path Chang S. Bae <chang.seok.bae(a)intel.com> x86/microcode/intel: Reject problematic loading on Granite Rapids systems Chang S. Bae <chang.seok.bae(a)intel.com> x86/build/64: Prevent native builds from generating EGPR use Lyude Paul <lyude(a)redhat.com> drm/nouveau/gsp/r570: Enable S/R Display workaround in GSP Lyude Paul <lyude(a)redhat.com> drm/nouveau/gsp/r570: Set GcOff = 0 in fbsr Lyude Paul <lyude(a)redhat.com> drm/nouveau/gsp: Increase delay for magic sleep in r535_gsp_fini() Lyude Paul <lyude(a)redhat.com> Revert "nouveau/gsp: fix suspend/resume regression on r570 firmware" Chunfeng Song <springbreeze(a)stu.pku.edu.cn> rust: net: phy: fix off-by-one bit positions in device status accessors Thomas Gleixner <tglx(a)kernel.org> signal: Prevent exec() race Aohan Mei <henrymei(a)tencent.com> rds: ib: use rds_conn_drop() on protocol version mismatch Thomas Gleixner <tglx(a)kernel.org> posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> phy: renesas: rcar-gen3-usb2: Avoid long delay in atomic context Richard Zhu <hongxing.zhu(a)nxp.com> PCI: imx6: Move clock enable after core reset assertion Seunguk Shin <seunguk.shin(a)arm.com> fs/dax: check zero or empty entry before converting xarray entry Hyunwoo Kim <imv4bel(a)gmail.com> exec: Cleanup POSIX timers right after de_thread() Wentao Liang <vulab(a)iscas.ac.cn> cifs: Fix server use-after-free in cifs_chan_skip_or_disable() Wentao Liang <vulab(a)iscas.ac.cn> ata: libahci_platform: Fix device reference leak in ahci_platform_get_resources() Niklas Cassel <cassel(a)kernel.org> ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY Michal Koutný <mkoutny(a)suse.com> cgroup: Avoid iteration of dying tasks with zero refcount Jiangshan Yi <yijiangshan(a)kylinos.cn> ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type Yuho Choi <oss.patchbox(a)gmail.com> ALSA: virtio: reset device before deleting virtqueues Xiang Mei <xmei5(a)asu.edu> ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix potential UAF after asynchronous card release David Howells <dhowells(a)redhat.com> 9p: Fix v9fs_issue_write() to update i_size and remote_i_size Jeremy Nyberg <slickstretch3.0(a)gmail.com> Input: xpad - fix PDP Marvel Xbox 360 controller Roberts Kursitis <roberts.kursitis(a)azeron.eu> Input: xpad - add support for Azeron devices Erich Sartison <byt.es(a)mailbox.org> Input: xpad - add support for Victrix Pro BFG Controller Li Jun <lijun01(a)kylinos.cn> watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog James Seo <james(a)equiv.tech> hwmon: (hp-wmi-sensors) Improve raw WMI string handling Cong Nguyen <congnt264(a)gmail.com> hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler hpp.iscas <hppiscas(a)163.com> Input: eeti_ts - publish the OF module alias Matthew Schwartz <matthew.schwartz(a)linux.dev> x86/fred: Reconstruct the #GP context for rejected INT instructions Andrea Righi <arighi(a)nvidia.com> sched/core: Avoid false migration warning for proxy donors Vinay Belgaumkar <vinay.belgaumkar(a)intel.com> perf: Fix null pointer access in is_include_guest_event() Filipe Manana <fdmanana(a)suse.com> btrfs: check if there is space for chunk item when validating sys chunk array Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update inode for hole punching and reflinking Francis Marlou Pacaro <pacaro.francis.marlou.n(a)gmail.com> drm/amd/display: fix MALL hysteresis timer underflow at high refresh rates Dmitriy Chumachenko <Dmitry.Chumachenko(a)cyberprotect.ru> drm/amdgpu: check ras and obj before dereference Eric Dumazet <edumazet(a)google.com> net: skbuff: do not leave stale header offsets after pskb_carve() Dmitriy Okunev <dokunevdmitriy(a)gmail.com> net: mvpp2: prevent buffer overflow in page_pool allocation James Clark <jjc(a)jclark.com> net: macb: fix ordering around PTP timestamp read Jinke Han <jinkehan(a)didiglobal.com> x86/kprobes: Fix crash when probing CS CALL instructions Daniel Zahka <daniel.zahka(a)gmail.com> net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb() Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: preserve real_num_tx_queues on mqprio setup failure Eric Dumazet <edumazet(a)google.com> net: prevent torn reads in netdev_tc_txq Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: propagate FPE preemption-class mapping errors Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Ack RX overrun interrupt correctly Eric Dumazet <edumazet(a)google.com> net: lock the socket in sock_gettstamp() Jakub Kicinski <kuba(a)kernel.org> eth: fbnic: ring the doorbell if a burst ends in a drop Yige Jiang <yigejiang86(a)gmail.com> net: netsec: fix device_node reference leak on phy_np Farhad Alemi <farhad.alemi(a)berkeley.edu> net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: pass net_device_path_ctx to dev_fill_forward_path() Pablo Neira Ayuso <pablo(a)netfilter.org> net: pass dst via net_device_path in dev_fill_forward_path() Pablo Neira Ayuso <pablo(a)netfilter.org> net: do not advance stack index from dev_fwd_path() Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: codel: bound the dropping loop per dequeue call Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: acp: fix ffs() operator precedence for SoundWire link ID Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: acp: refactor codec config count in SOF SoundWire machine driver Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: sdw_utils: tidyup asoc_sdw_parse_sdw_endpoints() Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: sdw_utils: tidyup .count_sidecar Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: acp: bounds-check SoundWire link ID in machine drivers Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs-amp-lib: Prevent NULL pointer if efi variable is zero length HyeongJun An <sammiee5311(a)gmail.com> ASoC: hdmi-codec: Report a change when the channel status moves Sasha Levin <sashal(a)kernel.org> ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments Daniel Linjama <daniel(a)dev.linjama.com> btrfs: handle lack of space when cleaning up verity items Raag Jadav <raag.jadav(a)intel.com> drm/xe/i2c: Disable IRQ on unbind Peter Zijlstra <peterz(a)infradead.org> futex: Also allocate private hash on vfork() Nemesa Garg <nemesa.garg(a)intel.com> Revert "drm/i915/display: Clear SEL_FETCH_PLANE_CTL on plane disable" Shivaprasad G Bhat <sbhat(a)linux.ibm.com> powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid() Eric Dumazet <edumazet(a)google.com> netlink: do not free nlk->groups while lockless readers can use it Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: vlan: fix bugs caused by switchdev deletion errors Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: do not overwrite phc_index when no PTP clock is registered Eric Dumazet <edumazet(a)google.com> drop_monitor: fix out-of-bounds write in reset_per_cpu_data() Eric Dumazet <edumazet(a)google.com> drop_monitor: use raw_cpu_ptr() in tracepoint probes Eric Dumazet <edumazet(a)google.com> drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown Eric Dumazet <edumazet(a)google.com> drop_monitor: synchronize tracepoint unregistration on error path Eric Dumazet <edumazet(a)google.com> pppoatm: ensure a writable skb header and linear data Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: fix TSO header length truncation Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Unify scc_index when finalising SCC in __unix_walk_scc(). Juan Perdomo <jcperdomo100(a)gmail.com> Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit Tzung-Bi Shih <tzungbi(a)kernel.org> Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: Fix parent socket leak in iso_conn_ready() Ibrahim Abdelkader <iabdelka(a)qti.qualcomm.com> Bluetooth: hci_qca: Do not write to the serial port after it is closed Radek Podgorny <radek(a)podgorny.cz> Bluetooth: put the peer's on-air address on air when we cannot resolve Weiming Shi <bestswngs(a)gmail.com> Bluetooth: coredump: Quiesce dump work on unregister Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel_pcie: validate TX skb length in send_sync ThangNN99 <ngocthang2710.1999(a)gmail.com> Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained Baineng Shou <shoubaineng(a)gmail.com> dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: keep compound responses on query info errors Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix partial file information responses Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: return buffer overflow for partial filesystem info Eric Dumazet <edumazet(a)google.com> tcp: do not let tcp_rmem be set below 4096 Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv(). Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: mst: move switchdev call outside rcu Karl Mehltretter <kmehltretter(a)gmail.com> wifi: brcmfmac: fix lost 802.1x TX completion wakeup Hohyun Sim <tlaghgus0425(a)korea.ac.kr> net: fddi: skfp: fix NULL deref when setting the MAC address while down Dong Chenchen <dongchenchen2(a)huawei.com> ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup Kuniyuki Iwashima <kuniyu(a)google.com> sysctl: Check range in proc_dointvec_ms_jiffies_minmax Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: restore the hardware filters on open Daniel Golle <daniel(a)makrotopia.org> net: dsa: mxl862xx: disable the stats poll on teardown Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL Filipe Manana <fdmanana(a)suse.com> btrfs: tree-checker: print dev extent offset in error message Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all() Slavin Liu <bolin.liu(a)seu.edu.cn> ALSA: hda: trace PCM open only after assigning a stream Karl Mehltretter <kmehltretter(a)gmail.com> drm/vc4: Use managed KMS polling to fix UAF on unbind Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/shrinker: Return the freed page count through a parameter Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/mmio_gem: Revoke drm_vma_node on xe_mmio_gem destroy Ilia Levi <ilia.levi(a)intel.com> drm/xe/mmio_gem: use write-back mapping for dummy page Ilia Levi <ilia.levi(a)intel.com> drm/xe/mmio_gem: forbid VMA split Zihan Xi <zihanx(a)nebusec.ai> wifi: virt_wifi: don't transfer operstate before register Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: follow SMB2 session expiration semantics Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: extend procfs server statistics Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix malformed procfs status output Xiang Mei <xmei5(a)asu.edu> ALSA: 6fire: fix OOB write from device-reported iso length Takashi Iwai <tiwai(a)suse.de> ALSA: usb: 6fire: Avoid embedded URBs Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: virtuser: skip free_irq when no IRQ is installed Ulises Mendez Martinez <umendez(a)google.com> objtool: Validate disassembler headers in libopcodes probe Karl Mehltretter <kmehltretter(a)gmail.com> Input: trackpoint - fix the inertia attribute name in the ABI document Gabor Juhos <j4g8y7(a)gmail.com> spi: spi-qpic-snand: avoid writing QPIC_EBI2_ECC_BUF_CFG register Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: soc-pcm: Apply snd_soc_dai_link_ch_map.codec_ch_mask to codec params Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: Add codec_ch_mask to snd_soc_dai_link_ch_map Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: Rename snd_soc_dai_link_ch_map.ch_mask to cpu_ch_mask William Bright <william.bright(a)imd-tec.com> drm/msm/dp: fix link bandwidth check when wide bus is enabled Jesse Casco <jesse.casco(a)gmail.com> drm/msm/dp: skip PUSH_IDLE when the link was never enabled Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> ALSA: pcm: set timer->private_data before registering the PCM timer AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow Namjae Jeon <linkinjeon(a)kernel.org> ntfs: ignore interrupted inode reads as corruption Namjae Jeon <linkinjeon(a)kernel.org> ntfs: propagate folio errors Namjae Jeon <linkinjeon(a)kernel.org> ntfs: protect runlist updates with the runlist lock Namjae Jeon <linkinjeon(a)kernel.org> ntfs: account for MFT records added during allocation Namjae Jeon <linkinjeon(a)kernel.org> ntfs: repack $MFT/$ATTRIBUTE LIST Namjae Jeon <linkinjeon(a)kernel.org> ntfs: use dynamic MFT tail reservation Takashi Iwai <tiwai(a)suse.de> ALSA: bcd2000: Fix race between rawmidi and disconnect Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Skip default parms when resumed in neightbl_dump_info(). Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Don't render blackhole_netdev via RTM_GETNEIGHTBL. Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS. Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Add missing RCU annotation for neightbl_dump_info(). Karl Mehltretter <kmehltretter(a)gmail.com> keys: fix lost wakeup when reaping a dead key type Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> smb: client: validate absolute native symlink targets before NT fixups Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr Catalin Marinas <catalin.marinas(a)arm.com> arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation Breno Leitao <leitao(a)debian.org> arm64: hibernate: clone only the linear map that exists at runtime Shouping Wang <allen.wang(a)hj-micro.com> perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: hold reference on ct until flow is released Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_nat: unregister and release hooks on error Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_tables: fix device name and prefix match in hook lookup Theodor Arsenij Larionov Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_nat: fully initialise new_addr in netmap setup Karl Mehltretter <kmehltretter(a)gmail.com> dma-buf: Make DMABUF_DEBUG default to y on DEBUG_KERNEL kernels Karl Mehltretter <kmehltretter(a)gmail.com> drm/msm/adreno: Fix the skip_gpu parameter description Karl Mehltretter <kmehltretter(a)gmail.com> drm/msm: Fix the separate_gpu_kms parameter description David Laight <david.laight.linux(a)gmail.com> x86/div64: Fix addition of large constants in mul_u64_add_u64_div_u64() Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> RDMA/siw: Bound fragmented header copies by the remaining length Leon Romanovsky <leon(a)kernel.org> RDMA/efa: Keep EQ resources alive while IRQ is registered Leon Romanovsky <leon(a)kernel.org> RDMA/efa: Keep admin queues alive while IRQ is registered Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA Sascha Hauer <s.hauer(a)pengutronix.de> dmaengine: pxa: fix double counting of the hw descriptors Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order Karl Mehltretter <kmehltretter(a)gmail.com> scsi: qla2xxx: Fix the ql2xfc2target parameter description Karl Mehltretter <kmehltretter(a)gmail.com> scsi: pm80xx: Fix the use_msix, use_tasklet and read_wwn parameter descriptions Meijing Zhao <zhaomeijing(a)lixiang.com> mm: memblock: show all region flags in debugfs Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: set up the TX info early to fix failure paths Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: mesh: release the channel if start fails Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: mesh: reset the CSA state when leaving Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: add HE 6 GHz capability in the scan elems len Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't access the TSF of a down interface Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't allow link changes when iface is down Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: require a peer station for TDLS setup confirm Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't allow injecting frames wider than the chanctx Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: get the wiphy out of a dying network namespace Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: unlist vifs when their netdev is unregistered Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: undo netns switch if renaming the wiphy fails Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: restore netns_immutable on failures Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: only operate on TDLS peers in the TDLS code Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: reset the LED state when ifup fails Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: reset state when starting AP fails Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: abort chanswitch when leaving a mesh Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: suppress chanctx warning for debugfs reset Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't offload TC setup on AP_VLAN interfaces Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't warn when an IBSS has no channel to scan Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't start a ROC while scanning Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: fix NAN regulatory enforcement Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: ibss: ref BSS entry for joined event Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't filter by BSS type when removing stale entries Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: only group hidden BSSes with beacon entries Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't free driver-owned scan requests Shivank Garg <shivankg(a)amd.com> dmaengine: wait for RCU readers before releasing dma_device Shivank Garg <shivankg(a)amd.com> dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel() Shivank Garg <shivankg(a)amd.com> dmaengine: Fix device kref underflow in dma_chan_put() Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> dma-mapping: don't trace the DMA address when the allocation fails Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> dma-coherent: report a failed reserved memory assignment Orgad Shaneh <orgads(a)gmail.com> MIPS: Octeon: apply USB FDT fixups also when USB is modular Julian Braha <julianbraha(a)gmail.com> mips: econet: fix unmet dependencies for ECONET Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: cadence_master: wait and cancel cdns->work before clock stop Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: check IP header size in cfg80211_classify8021d() Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: don't get the radio mask for netdev-less wdevs Carolina Jubran <cjubran(a)nvidia.com> IB/IPoIB: Avoid restoring OPER_UP after multicast flush Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short association responses Shmulik Cohen <anuk909(a)gmail.com> wifi: libipw: reject too-short beacon and probe responses Bogdan Nicolae <bogdan.nicolae(a)gmail.com> wifi: brcmfmac: cyw: pass PMKID to firmware if present Peng Hao <flyingpenghao(a)gmail.com> wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path Mariano Baragiola <mbaragiola(a)linux.com> wifi: virt_wifi: free skb when disconnected Lachlan Hodges <lachlan.hodges(a)morsemicro.com> wifi: mac80211: include TIM bitmap control for buffered S1G mcast traffic Ruoyu Wang <ruoyuw560(a)gmail.com> dmaengine: sprd: Fix runtime PM reference leak in probe Troy Mitchell <troy.mitchell(a)linux.spacemit.com> dmaengine: mmp_pdma: fix wrong extended DRCMR base for SpacemiT K3 Quanye Yang <quanyeyang(a)proton.me> RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Enforce local fence for IB_WR_REG_MR Cheng Xu <chengyou(a)linux.alibaba.com> RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables Li RongQing <lirongqing(a)baidu.com> RDMA/mad: Fix receive buffer leak when PKey enforcement fails Li RongQing <lirongqing(a)baidu.com> RDMA/uverbs: Fix potential leak of resources->collection in flow_resources_alloc() Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Avoid exposing umdbr to userspace Ryan Mehri <ryan.mehri1(a)gmail.com> RDMA/rtrs: guard against null kobj name Linkai Gong <gonglinkai(a)kylinos.cn> RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/isert: wait for deferred control PDU completions before releasing the connection Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> IB/iser: reject a remote invalidation of an unregistered direction Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> arm64: dts: renesas: r9a09g087: Switch GBETH TX queue scheduling to WRR Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> arm64: dts: renesas: r9a09g077: Switch GBETH TX queue scheduling to WRR Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> arm64: dts: renesas: r9a09g047: Switch GBETH TX queue scheduling to WRR Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> arm64: dts: renesas: r9a09g056: Switch GBETH TX queue scheduling to WRR Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> arm64: dts: renesas: r9a09g057: Switch GBETH TX queue scheduling to WRR Biju Das <biju.das.jz(a)bp.renesas.com> power: sequencing: Fix build issue with COMPILE_TEST Or Har-Toov <ohartoov(a)nvidia.com> RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency Krystian Kaniewski <krystianmkaniewski(a)gmail.com> RDMA/core: Reject unregistering netdevs in ib_get_eth_speed Or Har-Toov <ohartoov(a)nvidia.com> RDMA/mlx5: Remove warn on missing representor in query_port_speed Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds Weiming Shi <bestswngs(a)gmail.com> RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths Xixin Liu <liuxixin(a)kylinos.cn> clk: scpi: register scpi-cpufreq once and clear on failure Xixin Liu <liuxixin(a)kylinos.cn> clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate Xixin Liu <liuxixin(a)kylinos.cn> firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS Cen Zhang (Microsoft Security FORGE Labs) <blbllhy(a)gmail.com> xfrm: hold net_device reference under RCU in bundle creation Gang Yan <yangang(a)kylinos.cn> RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access Norbert Szetei <norbert(a)doyensec.com> RDMA/rxe: validate access flags before swapping the MR's PD Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept Pengpeng Hou <pengpeng(a)iscas.ac.cn> ARM: socfpga: select the PL310 erratum 753970 workaround Lucas Tanure <tanure(a)linux.com> arm64: dts: amlogic: t7: fix the pin groups of the vsync PWM Lucas Tanure <tanure(a)linux.com> arm64: dts: amlogic: t7: khadas-vim4: add the PWM-driven supplies Lucas Tanure <tanure(a)linux.com> arm64: dts: amlogic: t7: fix the pin groups of two PWM outputs Lucas Tanure <tanure(a)linux.com> arm64: dts: amlogic: t7: khadas-vim4: allow the SD card to be power cycled Lucas Tanure <tanure(a)linux.com> arm64: dts: amlogic: t7: use the real UART pclk Maher Azzouzi <maherazz04(a)gmail.com> esp: downgrade zerocopy managed frags before mutating skb frags Eric Dumazet <edumazet(a)google.com> xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject() Kyle Zeng <kylebot(a)openai.com> xfrm: fix compat ALLOCSPI request use-after-free Henry Martin <bsdhenrymartin(a)gmail.com> xfrm: iptfs: fix runt reassembly panic from short inner tot_len Aleksandr Nogikh <nogikh(a)google.com> xfrm: add missing RCU read lock in xfrm_send_migrate_state() Roshan Kumar <roshaen09(a)gmail.com> xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk() Jens Axboe <axboe(a)kernel.dk> sunvdc: fix -EIO issue due to lack of retries Günther Noack <gnoack(a)google.com> selftests/landlock: Add audit test for whiteout object creation Günther Noack <gnoack(a)google.com> selftests/landlock: Add tests for whiteout object creation Günther Noack <gnoack(a)google.com> selftests/landlock: Use an actual chardev for MAKE_CHAR audit test ------------- Diffstat: .../ABI/testing/sysfs-devices-platform-trackpoint | 2 +- .../arch/arm64/memory-tagging-extension.rst | 5 +- Documentation/hwmon/cgbc-hwmon.rst | 42 +- Documentation/netlink/specs/rt-neigh.yaml | 3 + Documentation/networking/ip-sysctl.rst | 4 +- Makefile | 4 +- arch/arm/mach-socfpga/Kconfig | 2 +- .../boot/dts/altera/socfpga_stratix10_socdk.dtsi | 0 .../dts/altera/socfpga_stratix10_socdk_emmc.dts | 0 .../boot/dts/amlogic/amlogic-t7-a311d2-an400.dts | 2 +- .../dts/amlogic/amlogic-t7-a311d2-khadas-vim4.dts | 113 +++- arch/arm64/boot/dts/amlogic/amlogic-t7.dtsi | 44 +- arch/arm64/boot/dts/renesas/r8a779f0.dtsi | 1 + arch/arm64/boot/dts/renesas/r9a09g047.dtsi | 10 + arch/arm64/boot/dts/renesas/r9a09g056.dtsi | 10 + arch/arm64/boot/dts/renesas/r9a09g057.dtsi | 10 + arch/arm64/boot/dts/renesas/r9a09g077.dtsi | 27 + arch/arm64/boot/dts/renesas/r9a09g087.dtsi | 27 + arch/arm64/include/asm/percpu.h | 20 +- arch/arm64/kernel/hibernate-asm.S | 2 + arch/arm64/kernel/hibernate.c | 4 +- arch/arm64/kernel/mte.c | 2 +- arch/mips/Kconfig | 4 +- arch/mips/cavium-octeon/octeon-platform.c | 4 +- arch/powerpc/kernel/iommu.c | 2 +- arch/powerpc/kvm/book3s_hv_nested.c | 2 + arch/powerpc/kvm/book3s_hv_uvmem.c | 5 +- arch/x86/Kconfig.cpu | 11 + arch/x86/Makefile | 5 + arch/x86/entry/entry_fred.c | 11 +- arch/x86/include/asm/div64.h | 2 +- arch/x86/include/asm/text-patching.h | 4 +- arch/x86/kernel/alternative.c | 6 +- arch/x86/kernel/cpu/microcode/intel.c | 26 + arch/x86/kernel/kprobes/core.c | 5 +- drivers/ata/libahci.c | 15 +- drivers/ata/libahci_platform.c | 2 +- drivers/block/sunvdc.c | 9 +- drivers/bluetooth/btintel_pcie.c | 8 +- drivers/bluetooth/btmtk.c | 7 +- drivers/bluetooth/btmtksdio.c | 24 +- drivers/bluetooth/btmtkuart.c | 20 +- drivers/bluetooth/btusb.c | 17 + drivers/bluetooth/hci_qca.c | 14 +- drivers/clk/clk-scpi.c | 8 +- drivers/dma-buf/Kconfig | 2 +- drivers/dma-buf/dma-buf-mapping.c | 31 +- drivers/dma-buf/dma-fence.c | 14 +- drivers/dma/dmaengine.c | 10 +- drivers/dma/mmp_pdma.c | 5 +- drivers/dma/pxa_dma.c | 3 +- drivers/dma/sprd-dma.c | 3 +- drivers/dma/sun6i-dma.c | 9 +- drivers/dma/ti/k3-udma-glue.c | 5 +- drivers/dma/xilinx/xilinx_dma.c | 26 +- drivers/firmware/arm_scpi.c | 4 +- drivers/gpio/gpio-virtuser.c | 3 +- drivers/gpio/gpiolib-of.c | 6 +- drivers/gpio/gpiolib-shared.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu.h | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 145 ++-- drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 43 +- drivers/gpu/drm/amd/amdgpu/mxgpu_ai.c | 7 +- drivers/gpu/drm/amd/amdgpu/nbio_v7_9.c | 2 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 7 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v10.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v11.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12.c | 61 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c | 70 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_vi.c | 5 +- .../drm/amd/display/dc/hwss/dcn30/dcn30_hwseq.c | 13 +- drivers/gpu/drm/drm_atomic_uapi.c | 13 +- drivers/gpu/drm/gud/gud_pipe.c | 7 +- drivers/gpu/drm/i915/display/intel_cursor.c | 15 +- drivers/gpu/drm/i915/display/skl_universal_plane.c | 15 +- drivers/gpu/drm/msm/adreno/adreno_device.c | 2 +- drivers/gpu/drm/msm/adreno/adreno_gpu.c | 2 + drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c | 1 + drivers/gpu/drm/msm/dp/dp_display.c | 21 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 36 +- drivers/gpu/drm/msm/hdmi/hdmi_phy.c | 8 +- drivers/gpu/drm/msm/msm_drv.c | 2 +- drivers/gpu/drm/msm/msm_gem.h | 3 + drivers/gpu/drm/msm/msm_gem_vma.c | 2 +- drivers/gpu/drm/msm/msm_ringbuffer.c | 2 +- drivers/gpu/drm/msm/msm_ringbuffer.h | 1 + .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/fbsr.c | 2 +- .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/gsp.c | 8 +- .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/fbsr.c | 8 +- .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/gsp.c | 3 +- .../drm/nouveau/nvkm/subdev/gsp/rm/r570/nvrm/gsp.h | 8 + drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/rm.h | 2 +- drivers/gpu/drm/scheduler/sched_entity.c | 8 +- drivers/gpu/drm/scheduler/sched_rq.c | 20 +- drivers/gpu/drm/ttm/ttm_bo.c | 2 +- drivers/gpu/drm/vc4/vc4_kms.c | 2 +- drivers/gpu/drm/xe/xe_i2c.c | 3 + drivers/gpu/drm/xe/xe_mmio_gem.c | 33 +- drivers/gpu/drm/xe/xe_mmio_gem.h | 2 +- drivers/gpu/drm/xe/xe_shrinker.c | 124 ++-- drivers/hwmon/cgbc-hwmon.c | 129 ++-- drivers/hwmon/gpio-fan.c | 4 +- drivers/hwmon/hp-wmi-sensors.c | 32 +- drivers/hwmon/pmbus/pmbus.h | 3 +- drivers/hwmon/pmbus/tps53679.c | 11 +- drivers/hwmon/pwm-fan.c | 13 +- drivers/hwmon/w83791d.c | 1 + drivers/hwmon/w83793.c | 4 +- drivers/i2c/busses/i2c-at91-core.c | 3 + drivers/i2c/busses/i2c-at91-master.c | 12 +- drivers/i2c/busses/i2c-at91.h | 1 + drivers/i2c/busses/i2c-imx.c | 3 + drivers/i2c/busses/i2c-qcom-cci.c | 20 +- drivers/i2c/i2c-atr.c | 1 + drivers/infiniband/core/iwpm_util.c | 9 +- drivers/infiniband/core/mad.c | 3 +- drivers/infiniband/core/rdma_core.c | 1 - drivers/infiniband/core/ucma.c | 7 +- drivers/infiniband/core/uverbs_flow.c | 1 + drivers/infiniband/core/uverbs_main.c | 25 +- drivers/infiniband/core/verbs.c | 12 +- drivers/infiniband/hw/bnxt_re/main.c | 10 +- drivers/infiniband/hw/bnxt_re/uapi.c | 6 +- drivers/infiniband/hw/efa/efa_com.c | 7 +- drivers/infiniband/hw/efa/efa_com.h | 1 + drivers/infiniband/hw/efa/efa_main.c | 35 +- drivers/infiniband/hw/erdma/erdma_main.c | 4 +- drivers/infiniband/hw/erdma/erdma_verbs.c | 18 +- drivers/infiniband/hw/hfi1/file_ops.c | 23 +- drivers/infiniband/hw/irdma/verbs.c | 2 +- drivers/infiniband/hw/mlx4/sysfs.c | 4 + drivers/infiniband/hw/mlx5/main.c | 7 +- drivers/infiniband/sw/rxe/rxe_mcast.c | 50 +- drivers/infiniband/sw/rxe/rxe_mr.c | 3 +- drivers/infiniband/sw/rxe/rxe_odp.c | 16 +- drivers/infiniband/sw/rxe/rxe_verbs.c | 13 +- drivers/infiniband/sw/siw/siw_cm.c | 7 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 2 +- drivers/infiniband/ulp/ipoib/ipoib.h | 7 + drivers/infiniband/ulp/ipoib/ipoib_ib.c | 12 +- drivers/infiniband/ulp/ipoib/ipoib_multicast.c | 16 +- drivers/infiniband/ulp/iser/iser_initiator.c | 16 +- drivers/infiniband/ulp/isert/ib_isert.c | 22 + drivers/infiniband/ulp/isert/ib_isert.h | 2 + drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h | 2 +- drivers/infiniband/ulp/rtrs/rtrs-clt.c | 8 + drivers/infiniband/ulp/rtrs/rtrs-clt.h | 2 + drivers/infiniband/ulp/rtrs/rtrs-srv-trace.h | 2 +- drivers/input/evdev.c | 2 + drivers/input/input-compat.c | 2 + drivers/input/joystick/xpad.c | 10 +- drivers/input/keyboard/adp5588-keys.c | 12 +- drivers/input/keyboard/atkbd.c | 8 + drivers/input/misc/soc_button_array.c | 16 +- drivers/input/mouse/synaptics.c | 8 + drivers/input/rmi4/rmi_driver.c | 13 + drivers/input/rmi4/rmi_smbus.c | 10 +- drivers/input/serio/hp_sdc.c | 2 +- drivers/input/serio/i8042-acpipnpio.h | 7 + drivers/input/touchscreen/cyttsp5.c | 1 + drivers/input/touchscreen/eeti_ts.c | 1 + drivers/memstick/core/ms_block.c | 2 + drivers/misc/ntsync.c | 3 + drivers/mmc/core/bus.c | 2 +- drivers/mmc/core/host.c | 1 + drivers/mmc/core/sdio_uart.c | 3 + drivers/mmc/host/mmc_hsq.c | 8 +- drivers/mmc/host/mmc_spi.c | 1 + drivers/mmc/host/mmci.c | 3 + drivers/mmc/host/mxcmmc.c | 4 + drivers/mmc/host/rtsx_pci_sdmmc.c | 5 + drivers/mmc/host/sdhci-of-aspeed.c | 5 +- drivers/mmc/host/sdhci_am654.c | 43 +- drivers/mmc/host/sh_mmcif.c | 3 +- drivers/net/dsa/mxl862xx/mxl862xx.c | 23 +- drivers/net/ethernet/airoha/airoha_ppe.c | 17 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 19 +- drivers/net/ethernet/cadence/macb_ptp.c | 9 + drivers/net/ethernet/cortina/gemini.c | 2 +- drivers/net/ethernet/intel/igc/igc_tsn.c | 6 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 7 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 3 +- drivers/net/ethernet/mediatek/mtk_ppe_offload.c | 17 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 2 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 42 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.h | 9 +- drivers/net/ethernet/microchip/lan743x_main.c | 2 +- drivers/net/ethernet/sfc/falcon/tx.c | 8 +- drivers/net/ethernet/sfc/siena/tx.c | 8 +- drivers/net/ethernet/socionext/netsec.c | 2 + drivers/net/ethernet/stmicro/stmmac/hwif.h | 2 +- .../net/ethernet/stmicro/stmmac/stmmac_ethtool.c | 2 - drivers/net/ethernet/stmicro/stmmac/stmmac_fpe.c | 14 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 6 +- drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 99 ++- drivers/net/fddi/skfp/skfddi.c | 3 +- drivers/net/phy/mediatek/mtk-phy-lib.c | 27 +- drivers/net/wireless/ath/ath11k/mac.c | 25 +- drivers/net/wireless/ath/wcn36xx/dxe.c | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 2 + .../broadcom/brcm80211/brcmfmac/cyw/core.c | 5 +- .../broadcom/brcm80211/brcmsmac/mac80211_if.c | 4 + .../wireless/intel/ipw2x00/libipw_crypto_tkip.c | 12 +- drivers/net/wireless/intel/ipw2x00/libipw_rx.c | 6 + drivers/net/wireless/intel/iwlegacy/common.c | 2 +- drivers/net/wireless/intersil/p54/eeprom.c | 22 +- drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 12 +- drivers/net/wireless/marvell/mwifiex/pcie.c | 2 +- drivers/net/wireless/marvell/mwifiex/scan.c | 54 +- drivers/net/wireless/marvell/mwifiex/util.c | 10 +- drivers/net/wireless/microchip/wilc1000/cfg80211.c | 14 + drivers/net/wireless/microchip/wilc1000/wlan.c | 9 + drivers/net/wireless/rsi/rsi_91x_mgmt.c | 2 - drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/virtual/mac80211_hwsim_main.c | 39 +- drivers/net/wireless/virtual/virt_wifi.c | 4 +- drivers/net/wwan/mhi_wwan_mbim.c | 28 +- drivers/net/wwan/t7xx/t7xx_netdev.c | 4 + drivers/pci/controller/dwc/pci-imx6.c | 12 +- drivers/perf/arm-cmn.c | 10 +- drivers/phy/mediatek/phy-mtk-hdmi-mt8195.c | 4 +- drivers/phy/mediatek/phy-mtk-hdmi-mt8195.h | 3 + drivers/phy/renesas/phy-rcar-gen3-usb2.c | 310 +++++++-- drivers/power/sequencing/Kconfig | 3 +- drivers/power/sequencing/core.c | 11 +- drivers/scsi/fnic/fdls_disc.c | 726 +++++++++++---------- drivers/scsi/fnic/fip.c | 117 ++-- drivers/scsi/fnic/fip.h | 2 +- drivers/scsi/fnic/fnic.h | 68 +- drivers/scsi/fnic/fnic_fcs.c | 126 ++-- drivers/scsi/fnic/fnic_isr.c | 41 +- drivers/scsi/fnic/fnic_main.c | 89 ++- drivers/scsi/fnic/fnic_scsi.c | 210 +++--- drivers/scsi/pm8001/pm8001_init.c | 6 +- drivers/scsi/qla2xxx/qla_os.c | 2 +- drivers/scsi/scsi.c | 24 +- drivers/soc/samsung/exynos-pmu.c | 7 +- drivers/soundwire/cadence_master.c | 7 + drivers/soundwire/dmi-quirks.c | 7 + drivers/spi/spi-fsl-qspi.c | 5 +- drivers/spi/spi-qpic-snand.c | 4 - drivers/spi/spi-virtio.c | 2 +- drivers/spi/spi-zynqmp-gqspi.c | 34 + drivers/watchdog/da9062_wdt.c | 4 +- drivers/watchdog/da9063_wdt.c | 4 +- drivers/watchdog/digicolor_wdt.c | 13 +- drivers/watchdog/msc313e_wdt.c | 16 +- drivers/watchdog/rtd119x_wdt.c | 7 +- drivers/watchdog/rzv2h_wdt.c | 7 +- drivers/watchdog/sp5100_tco.c | 6 +- drivers/watchdog/starfive-wdt.c | 2 +- fs/9p/vfs_addr.c | 28 +- fs/btrfs/dev-replace.c | 1 + fs/btrfs/disk-io.c | 4 + fs/btrfs/file.c | 4 +- fs/btrfs/free-space-tree.c | 14 +- fs/btrfs/inode.c | 18 +- fs/btrfs/super.c | 8 +- fs/btrfs/tree-checker.c | 2 +- fs/btrfs/verity.c | 18 +- fs/dax.c | 9 +- fs/exec.c | 29 +- fs/nfsd/export.c | 3 +- fs/ntfs/attrib.c | 259 ++++++-- fs/ntfs/attrib.h | 9 + fs/ntfs/attrlist.c | 224 ++++++- fs/ntfs/attrlist.h | 2 + fs/ntfs/compress.c | 2 +- fs/ntfs/file.c | 3 +- fs/ntfs/inode.c | 35 +- fs/ntfs/mft.c | 445 ++++++++++--- fs/ntfs/mft.h | 2 +- fs/ntfs/namei.c | 2 +- fs/ntfs/super.c | 12 +- fs/ntfs/volume.h | 12 +- fs/smb/client/cifssmb.c | 2 +- fs/smb/client/connect.c | 9 + fs/smb/client/file.c | 4 +- fs/smb/client/misc.c | 12 +- fs/smb/client/reparse.c | 58 +- fs/smb/client/reparse.h | 7 +- fs/smb/client/sess.c | 104 +-- fs/smb/client/smb2inode.c | 11 + fs/smb/client/smb2ops.c | 51 +- fs/smb/client/smb2pdu.c | 13 +- fs/smb/client/trace.h | 1 + fs/smb/server/connection.c | 84 ++- fs/smb/server/connection.h | 3 + fs/smb/server/mgmt/user_session.c | 199 ++++-- fs/smb/server/mgmt/user_session.h | 8 +- fs/smb/server/misc.h | 7 +- fs/smb/server/proc.c | 159 ++++- fs/smb/server/server.c | 9 +- fs/smb/server/smb2pdu.c | 126 ++-- fs/smb/server/smb2pdu.h | 3 +- fs/smb/server/smb_common.h | 2 +- fs/smb/server/stats.h | 58 +- fs/smb/server/vfs_cache.c | 26 +- fs/smb/server/vfs_cache.h | 1 + fs/super.c | 1 + include/keys/request_key_auth-type.h | 2 +- include/linux/dma-fence.h | 6 + include/linux/ieee80211-mesh.h | 4 +- include/linux/netdevice.h | 13 +- include/net/bluetooth/coredump.h | 2 + include/net/codel.h | 5 + include/net/codel_impl.h | 16 +- include/net/mac80211.h | 5 +- include/net/sock.h | 2 + include/rdma/uverbs_types.h | 2 - include/sound/soc.h | 3 +- include/sound/soc_sdw_utils.h | 31 +- include/trace/events/dma.h | 2 +- include/uapi/rdma/bnxt_re-abi.h | 2 +- kernel/cgroup/cgroup.c | 7 +- kernel/dma/coherent.c | 3 +- kernel/dma/swiotlb.c | 4 +- kernel/events/core.c | 4 + kernel/exit.c | 11 +- kernel/fork.c | 4 +- kernel/sched/core.c | 9 +- kernel/sched/ext/ext.c | 27 +- kernel/sched/ext/idle.c | 11 +- kernel/signal.c | 117 +++- kernel/time/jiffies.c | 2 +- kernel/time/posix-cpu-timers.c | 40 +- mm/filemap.c | 2 +- mm/huge_memory.c | 86 ++- mm/memblock.c | 18 +- mm/memcontrol.c | 2 +- mm/mlock.c | 2 +- mm/mremap.c | 9 +- mm/shrinker.c | 2 + mm/swapfile.c | 2 +- mm/vma.c | 6 +- net/atm/pppoatm.c | 42 +- net/bluetooth/coredump.c | 65 +- net/bluetooth/eir.c | 10 +- net/bluetooth/hci_codec.c | 36 +- net/bluetooth/hci_conn.c | 21 + net/bluetooth/hci_core.c | 18 +- net/bluetooth/hci_sync.c | 2 + net/bluetooth/iso.c | 53 +- net/bluetooth/rfcomm/sock.c | 13 +- net/bridge/br_mst.c | 20 +- net/bridge/br_vlan.c | 31 +- net/core/dev.c | 110 +++- net/core/drop_monitor.c | 18 +- net/core/neighbour.c | 35 +- net/core/skbuff.c | 32 +- net/core/sock.c | 16 +- net/ipv4/esp4.c | 6 + net/ipv4/icmp.c | 17 +- net/ipv4/ip_tunnel_core.c | 16 +- net/ipv4/sysctl_net_ipv4.c | 4 +- net/ipv4/tcp_input.c | 3 +- net/ipv4/tcp_ulp.c | 4 + net/ipv6/esp6.c | 6 + net/ipv6/seg6_local.c | 3 + net/ipv6/tcp_ipv6.c | 3 +- net/ipv6/xfrm6_output.c | 10 +- net/mac80211/cfg.c | 18 +- net/mac80211/debugfs.c | 2 +- net/mac80211/debugfs_netdev.c | 9 + net/mac80211/ieee80211_i.h | 2 +- net/mac80211/iface.c | 39 +- net/mac80211/main.c | 4 + net/mac80211/mesh.c | 34 +- net/mac80211/offchannel.c | 7 + net/mac80211/pm.c | 8 +- net/mac80211/scan.c | 2 +- net/mac80211/tdls.c | 40 +- net/mac80211/tx.c | 107 +-- net/netfilter/nf_flow_table_core.c | 12 +- net/netfilter/nf_flow_table_path.c | 7 +- net/netfilter/nf_nat_core.c | 46 +- net/netfilter/nf_tables_api.c | 22 +- net/netfilter/nft_nat.c | 2 +- net/netlink/af_netlink.c | 42 +- net/netlink/diag.c | 18 +- net/openvswitch/conntrack.c | 2 +- net/packet/af_packet.c | 4 +- net/packet/internal.h | 2 +- net/psp/psp_sock.c | 4 + net/rds/ib_cm.c | 2 +- net/sched/act_api.c | 11 +- net/sched/sch_hhf.c | 9 +- net/sched/sch_mqprio.c | 4 +- net/sched/sch_mqprio_lib.c | 7 +- net/sched/sch_taprio.c | 26 +- net/unix/garbage.c | 17 +- net/wireless/core.c | 150 +++-- net/wireless/core.h | 16 +- net/wireless/ibss.c | 38 +- net/wireless/rdev-ops.h | 3 + net/wireless/reg.c | 2 +- net/wireless/scan.c | 43 +- net/wireless/util.c | 38 +- net/xfrm/espintcp.c | 6 +- net/xfrm/xfrm_input.c | 22 +- net/xfrm/xfrm_iptfs.c | 12 +- net/xfrm/xfrm_policy.c | 20 +- net/xfrm/xfrm_state.c | 9 +- net/xfrm/xfrm_user.c | 18 +- rust/kernel/net/phy.rs | 38 +- scripts/generate_rust_target.rs | 5 + security/keys/encrypted-keys/encrypted.c | 20 +- security/keys/gc.c | 4 +- security/keys/request_key_auth.c | 12 +- security/keys/trusted-keys/trusted_tpm2.c | 12 +- security/selinux/avc.c | 5 +- security/selinux/hooks.c | 158 ++++- security/selinux/include/objsec.h | 10 +- sound/core/init.c | 3 +- sound/core/pcm_timer.c | 7 +- sound/hda/common/controller.c | 2 +- sound/soc/amd/acp/acp-sdw-legacy-mach.c | 16 +- sound/soc/amd/acp/acp-sdw-sof-mach.c | 21 +- sound/soc/codecs/cs-amp-lib.c | 2 + sound/soc/codecs/hdmi-codec.c | 6 +- sound/soc/codecs/rt712-sdca-dmic.c | 14 +- sound/soc/intel/boards/sof_sdw.c | 2 +- sound/soc/sdw_utils/soc_sdw_bridge_cs35l56.c | 4 +- sound/soc/sdw_utils/soc_sdw_utils.c | 9 +- sound/soc/soc-pcm.c | 18 +- sound/soc/ux500/ux500_msp_i2s.h | 4 +- sound/usb/6fire/comm.c | 42 +- sound/usb/6fire/comm.h | 2 +- sound/usb/6fire/midi.c | 43 +- sound/usb/6fire/midi.h | 2 +- sound/usb/6fire/pcm.c | 138 ++-- sound/usb/6fire/pcm.h | 5 +- sound/usb/bcd2000/bcd2000.c | 33 +- sound/usb/card.h | 1 + sound/usb/endpoint.c | 12 +- sound/virtio/virtio_card.c | 4 +- tools/objtool/Makefile | 8 +- .../selftests/arm64/mte/check_gcr_el1_cswitch.c | 2 +- tools/testing/selftests/landlock/fs_test.c | 197 +++++- 442 files changed, 6831 insertions(+), 2723 deletions(-)

3 weeks, 2 days

[PATCH 6.12 0000/1102] 6.12.111-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.111 release. There are 1102 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 19 Sep 2026 15:13:49 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.111-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.111-rc1 Vincent Guittot <vincent.guittot(a)linaro.org> sched/eevdf: Fix augmented max_slice Ameer Hamza <ameer.hamza(a)truenas.com> SUNRPC: Restore NUMA_NO_NODE for svc thread allocations in global mode Mallesh Koujalagi <mallesh.koujalagi(a)intel.com> workqueue: Update documentation as per system_percpu_wq naming Kevin Hao <haokexin(a)gmail.com> net: cpsw: Execute ndo_set_rx_mode callback in a work queue Oscar Salvador <osalvador(a)suse.de> mm, hugetlb: increment the number of pages to be reset on HVO Doruk Tan Ozturk <doruk(a)0sec.ai> ocfs2: validate directory-index entry counts when reading metadata Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: validate dx_root extent list fields during block read Tejun Heo <tj(a)kernel.org> sched_ext: Fix inverted ops.core_sched_before() invocation Chris Mason <clm(a)meta.com> svcrdma: Reject Write/Reply chunks with segcount 0 Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Adjust the number of entries in svc_rdma_recv_ctxt::rc_pages Chuck Lever <chuck.lever(a)oracle.com> sunrpc: Add a helper to derive maxpages from sv_max_mesg Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Release transport resources synchronously Chuck Lever <chuck.lever(a)oracle.com> rpcrdma: arm rn_done before publishing the notification Luxiao Xu <rakukuip(a)gmail.com> sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir Al Viro <viro(a)zeniv.linux.org.uk> rpc_pipe: don't overdo directory locking Al Viro <viro(a)zeniv.linux.org.uk> rpc_mkpipe_dentry(): saner calling conventions Al Viro <viro(a)zeniv.linux.org.uk> rpc_populate(): lift cleanup into callers Chris Mason <clm(a)meta.com> SUNRPC: fix gssx_dec_option_array error path bugs Jeff Layton <jlayton(a)kernel.org> sunrpc: defer rq_argp and rq_resp free until after RCU grace period Anna Schumaker <anna.schumaker(a)oracle.com> SUNRPC: Update svcxdr_init_decode() to call xdr_set_scratch_folio() Anna Schumaker <anna.schumaker(a)oracle.com> SUNRPC: Introduce xdr_set_scratch_folio() Zhiling Zou <zhilinz(a)nebusec.ai> ip: orphan prefetched skbs before multicast forwarding Eric Dumazet <edumazet(a)google.com> ipv6: ip6_mc_input() and ip6_mr_input() cleanups Eric Dumazet <edumazet(a)google.com> ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers Andrea Mayer <andrea.mayer(a)uniroma2.it> ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv() Yue Haibing <yuehaibing(a)huawei.com> ipv6: annotate data-races around devconf->rpl_seg_enabled Terry Bowman <terry.bowman(a)amd.com> cxl/ras: Fix cxl_rch_get_aer_severity() wrong severity register Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: TAD: Add locking around AML evaluations Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: TAD: Split three functions to untangle runtime PM handling Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: TAD: Rearrange RT data validation checking Jiri Olsa <jolsa(a)kernel.org> bpf: Disable preemption in bpf_get_stackid Jiri Olsa <jolsa(a)kernel.org> bpf: Use stack id functions instead of __bpf_get_stackid Jiri Olsa <jolsa(a)kernel.org> bpf: Factor stackid_new_bucket from __bpf_get_stackid Jiri Olsa <jolsa(a)kernel.org> bpf: Factor stackid_fastpath function from __bpf_get_stackid Jiri Olsa <jolsa(a)kernel.org> bpf: Factor stackid_init function from __bpf_get_stackid Haoxiang Li <haoxiang_li2024(a)163.com> cpufreq: apple-soc: Fix OPP table cleanup Terry Bowman <terry.bowman(a)amd.com> acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks Smita Koralahalli <Smita.KoralahalliChannabasappa(a)amd.com> efi/cper, cxl: Make definitions and structures global Smita Koralahalli <Smita.KoralahalliChannabasappa(a)amd.com> efi/cper, cxl: Prefix protocol error struct and function names with cxl_ Nikhil Gurudasani <nikhilgurudasani314(a)gmail.com> erofs: skip sufficiently large global buffers when resizing Chuck Lever <chuck.lever(a)oracle.com> NFSD: Prevent client use-after-free during close_lru reaping Chuck Lever <chuck.lever(a)oracle.com> NFSD: Prevent client use-after-free during blocked-lock reaping Chuck Lever <chuck.lever(a)oracle.com> NFSD: Consolidate the revocation-path client unpin Jiangshan Yi <yijiangshan(a)kylinos.cn> HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes Florian Pradines <florian.pradines(a)gmail.com> HID: mcp2221: fix OOB write in mcp2221_raw_event() Doruk Tan Ozturk <doruk(a)0sec.ai> HID: sony: clean up device list on probe failure Rosalie Wanders <rosalie(a)mailbox.org> HID: sony: use guard() and scoped_guard() Baul Lee <baul.lee(a)xbow.com> HID: universal-pidff: stop the device when force-feedback init fails Doruk Tan Ozturk <doruk(a)0sec.ai> HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind Qu Wenruo <wqu(a)suse.com> btrfs: do not overwrite NODATASUM flag when removing NODATACOW flag Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> btrfs: fix extent map leak in NOCOW direct I/O write Filipe Manana <fdmanana(a)suse.com> btrfs: rename extent map functions to get block start, end and check if in tree Filipe Manana <fdmanana(a)suse.com> btrfs: add btrfs prefix to main lock, try lock and unlock extent functions David Sterba <dsterba(a)suse.com> btrfs: use BTRFS_PATH_AUTO_FREE in can_nocow_extent() Qu Wenruo <wqu(a)suse.com> btrfs: prepare btrfs_punch_hole_lock_range() for large data folios David Sterba <dsterba(a)suse.com> btrfs: pass struct btrfs_inode to btrfs_sync_inode_flags_to_i_flags() David Sterba <dsterba(a)suse.com> btrfs: parameter constification in ioctl.c David Sterba <dsterba(a)suse.com> btrfs: update include and forward declarations in headers Qu Wenruo <wqu(a)suse.com> btrfs: expose per-inode stable writes flag Filipe Manana <fdmanana(a)suse.com> btrfs: move btrfs_alloc_write_mask() into fs.h Filipe Manana <fdmanana(a)suse.com> btrfs: move BTRFS_BYTES_TO_BLKS() into fs.h Filipe Manana <fdmanana(a)suse.com> btrfs: move btrfs_is_empty_uuid() from ioctl.c into fs.c Andre Eikmeyer <dev(a)deq.rocks> HID: apple: preserve keyboard backlight across T2 resume Sam Edwards <cfsworks(a)gmail.com> ceph: properly decrypt filenames in vmalloc() buffers Chuck Lever <chuck.lever(a)oracle.com> NFSD: Guard admin state-revocation walks with NFSD_NET_UP Max Kellermann <max.kellermann(a)ionos.com> ceph: force a cap message when a deferred revoke can't be acked immediately Dr. David Alan Gilbert <linux(a)treblig.org> ceph: Remove fs/ceph deadcode Chuck Lever <chuck.lever(a)oracle.com> NFSD: Prevent client use-after-free during delegation revoke Mike Snitzer <snitzer(a)kernel.org> nfsd: disallow file locking and delegations for NFSv4 reexport Chuck Lever <chuck.lever(a)oracle.com> NFSD: Prevent client use-after-free during admin state revocation Jeff Layton <jlayton(a)kernel.org> nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache Jeff Layton <jlayton(a)kernel.org> nfsd: fix stale s2s_cp_stateids IDR entry for async COPY Olga Kornievskaia <okorniev(a)redhat.com> nfsd: update mtime/ctime on COPY in presence of delegated attributes Jeff Layton <jlayton(a)kernel.org> nfsd: fix netlink dumpit error handling for rpc_status_get Jeff Layton <jlayton(a)kernel.org> nfsd: fix clock domain mismatch in clients_still_reclaiming() Jeff Layton <jlayton(a)kernel.org> nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown Jeff Layton <jlayton(a)kernel.org> nfsd: dedup nfs4_client_to_reclaim inserts Jeff Layton <jlayton(a)kernel.org> nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage Chuck Lever <chuck.lever(a)oracle.com> Revert "NFSD: Remove the cap on number of operations per NFSv4 COMPOUND" Chuck Lever <chuck.lever(a)oracle.com> NFSD: Make nfsd_genl_rqstp::rq_ops array best-effort Chuck Lever <chuck.lever(a)oracle.com> NFSD: Rename a function parameter Jeff Layton <jlayton(a)kernel.org> nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() Jeff Layton <jlayton(a)kernel.org> nfsd: validate sockaddr length per family in listener_set Carolina Jubran <cjubran(a)nvidia.com> netlink: introduce type-checking attribute iteration for nlmsg Sergey Senozhatsky <senozhatsky(a)chromium.org> zram: set default primary compressor in zram_destroy_comps() Sergey Senozhatsky <senozhatsky(a)chromium.org> zram: switch to guard() for init_lock Longlong Xia <xialonglong(a)kylinos.cn> zram: fix out-of-bounds access in writeback_store() Sergey Senozhatsky <senozhatsky(a)chromium.org> zram: use zram_read_from_zspool() in writeback Sergey Senozhatsky <senozhatsky(a)chromium.org> zram: remove entry element member Longlong Xia <xialonglong(a)kylinos.cn> zram: fix out-of-bounds access in read_block_state() Sergey Senozhatsky <senozhatsky(a)chromium.org> zram: fixup read_block_state() Neill Kapron <nkapron(a)google.com> usb: gadget: f_fs: Fix Use-After-Free in AIO error path Gabriel Prostitis <prostitisgabriel(a)gmail.com> USB: gadget: ffs: fix mm lifetime handling Terry Bowman <terry.bowman(a)amd.com> cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read Dave Jiang <dave.jiang(a)intel.com> cxl/pci: Remove CXL VH handling in CONFIG_PCIEAER_CXL conditional blocks from core/pci.c Terry Bowman <terry.bowman(a)amd.com> cxl/pci: Remove unnecessary CXL RCH handling helper functions Terry Bowman <terry.bowman(a)amd.com> cxl/pci: Remove unnecessary CXL Endpoint handling helper functions Roger Pau Monne <roger(a)xenproject.org> x86/xen: fix init of balloon stats again Roger Pau Monne <roger.pau(a)citrix.com> xen/balloon: improve accuracy of initial balloon target for dom0 Yao Zi <me(a)ziyao.cc> x86/locking: Use sfence for wmb() if SSE is available Uros Bizjak <ubizjak(a)gmail.com> x86/locking: Remove semicolon from "lock" prefix Li Xiasong <lixiasong1(a)huawei.com> mm/slub: fix missing debugfs entries for caches created before sysfs init Vlastimil Babka <vbabka(a)suse.cz> mm/slab: move and refactor __kmem_cache_alias() Arvind Yadav <arvind.yadav(a)intel.com> mm/migrate_device: clear stale mapping after freeing swapcache Kairui Song <kasong(a)tencent.com> mm/mglru: fix and remove redundant unevictable folio handling Kairui Song <kasong(a)tencent.com> mm/mglru: use the common routine for dirty/writeback reactivation Yu Zhao <yuzhao(a)google.com> mm/mglru: optimize deactivation Wei Xu <weixugc(a)google.com> mm/mglru: reset page lru tier bits when activating Muchun Song <muchun.song(a)linux.dev> mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier Chen Linxuan <me(a)black-desk.cn> pidfd: hold exec_update_lock around namespace ioctl Christian Brauner <brauner(a)kernel.org> nscommon: simplify initialization David Hildenbrand (Arm) <david(a)kernel.org> mm/gup: fix always draining LRU caches in collect_longterm_unpinnable_folios() David Hildenbrand <david(a)redhat.com> mm: move _pincount in folio to page[2] on 32bit David Hildenbrand <david(a)redhat.com> mm: move hugetlb specific things in folio to page[3] Chengfeng Ye <nicoyip.dev(a)gmail.com> KEYS: trusted: Fix TPM teardown ordering Breno Leitao <leitao(a)debian.org> mm, swap: ratelimit bad swap entry reports gao xu <gaoxu2(a)honor.com> mm: fix possible NULL pointer dereference in __swap_duplicate Vinicius Costa Gomes <vinicius.gomes(a)intel.com> crypto: iaa - unmap dst before software fallback on decompress Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-ecc - avoid stale fallback key after set_secret failure Sean Christopherson <seanjc(a)google.com> KVM: SEV: Track the GPA of the guest-controlled VMSA used for SNP guests Sean Christopherson <seanjc(a)google.com> KVM: SVM: Move SEV-ES VMSA allocation to a dedicated sev_vcpu_create() helper Ashish Kalra <ashish.kalra(a)amd.com> KVM: SEV: Disable SEV-SNP support on initialization failure Sean Christopherson <seanjc(a)google.com> KVM: SVM: Invalidate "next" SNP VMSA GPA even on failure Sean Christopherson <seanjc(a)google.com> KVM: SVM: Use guard(mutex) to simplify SNP vCPU state updates Sean Christopherson <seanjc(a)google.com> KVM: SVM: Mark VMCB dirty before processing incoming snp_vmsa_gpa Jiayuan Chen <jiayuan.chen(a)linux.dev> net: advertise TCP MSS from the configured MTU, not the learned PMTU Bryam Vargas <hexlabsecurity(a)proton.me> crypto: virtio - bound the akcipher result length Lukas Wunner <lukas(a)wunner.de> crypto: virtio - Drop superfluous [as]kcipher_req pointer Lukas Wunner <lukas(a)wunner.de> crypto: virtio - Drop superfluous [as]kcipher_ctx pointer Lukas Wunner <lukas(a)wunner.de> crypto: virtio - Drop sign/verify operations Eric Dumazet <edumazet(a)google.com> vlan: fix skb_under_panic and races when toggling HW VLAN offload Kyle Zeng <kylebot(a)openai.com> net/packet: defer vmalloc TX_RING free until skbs finish Yong Wang <edragain(a)163.com> tcp: clamp route advmss to TCP_MIN_MSS Eric Dumazet <edumazet(a)google.com> ipv4: use dst4_mtu() instead of dst_mtu() Eric Dumazet <edumazet(a)google.com> ipv6: use dst6_mtu() instead of dst_mtu() Eric Dumazet <edumazet(a)google.com> inet: add dst4_mtu() and dst6_mtu() helpers Eric Dumazet <edumazet(a)google.com> ipv6: add some unlikely()/likely() clauses in ip6_output.c Eric Dumazet <edumazet(a)google.com> ipv6: pass proto by value to ipv6_push_nfrag_opts() and ipv6_push_frag_opts() Sean Christopherson <seanjc(a)google.com> KVM: SEV: Add an anonymous "psc" struct to track current PSC metadata Sean Christopherson <seanjc(a)google.com> KVM: SEV: Make it more obvious when KVM is writing back the current PSC index Sean Christopherson <seanjc(a)google.com> KVM: SEV: Wire up kvm_x86_ops.gmem_xxx() if and only if CONFIG_KVM_AMD_SEV=y Miklos Szeredi <mszeredi(a)redhat.com> fuse: fix race between interrupt and resend Breno Leitao <leitao(a)debian.org> usb: xhci: bail out of setup if the controller is inaccessible Niklas Neronin <niklas.neronin(a)linux.intel.com> usb: xhci: simplify handling of Structural Parameters 1 values Niklas Neronin <niklas.neronin(a)linux.intel.com> usb: xhci: use cached HCSPARAMS1 value Niklas Neronin <niklas.neronin(a)linux.intel.com> usb: xhci: add USB Port Register Set struct Eric Biggers <ebiggers(a)kernel.org> netfilter: nft_set_pipapo_avx2: add missing vzeroupper Anton Protopopov <a.s.protopopov(a)gmail.com> bpf: fix the return value of push_stack Javier Tia <javier(a)peridio.com> xfs: initialise args->total for parent pointer updates Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> fou: Fix use-after-free in fou_create() Weiming Shi <bestswngs(a)gmail.com> net: appletalk: fix NULL pointer dereference in aarp_send_ddp() Weiming Shi <bestswngs(a)gmail.com> i2c: smbus: reject oversized block transfers in the common path Kazuki Hanai <hnkz.64(a)gmail.com> ALSA: us122l: Prevent write upgrades for read mappings Gary Guo <gary(a)garyguo.net> net: usb: pegasus: don't rely on id table pointer arithmetic Gary Guo <gary(a)garyguo.net> media: as102: do not rely on id table address comparison Gary Guo <gary(a)garyguo.net> usb: serial: spcp8x5: don't store usb_device_id Gary Guo <gary(a)garyguo.net> usb: usbtmc: don't store usb_device_id Gary Guo <gary(a)garyguo.net> wifi: ath9k_htc: don't store usb_device_id Gary Guo <gary(a)garyguo.net> usb: xusbatm: don't rely on id table pointer arithmetic Chuck Lever <chuck.lever(a)oracle.com> xdrgen: Fix union declarations Ian Rogers <irogers(a)google.com> perf evsel: Add per-thread warning for EOPNOTSUPP open failues Sasha Levin <sashal(a)kernel.org> Revert "perf tests: Fix flakiness in BPF counters test on hybrid systems" Sasha Levin <sashal(a)kernel.org> Revert "slab: reset slab->obj_ext when freeing and it is OBJEXTS_ALLOC_FAIL" Sasha Levin <sashal(a)kernel.org> Revert "selftests/mm: report unique test names for each cow test" Sasha Levin <sashal(a)kernel.org> Revert "selftests/mm: skip COW tmpfile cases when fallocate() is unsupported" Sasha Levin <sashal(a)kernel.org> Revert "selftests: harness: Mark test fixture objects __maybe_unused" Sasha Levin <sashal(a)kernel.org> Revert "nvme: apple: Add Apple A11 support" Sasha Levin <sashal(a)kernel.org> Revert "nvme-apple: Drop the PRP null check chicken bit" Sasha Levin <sashal(a)kernel.org> Revert "nvme-apple: Prevent shared tags across queues on Apple A11" Sasha Levin <sashal(a)kernel.org> Revert "nvme-apple: Reset q->sq_tail during queue init" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sc8180x: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sdm845: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8150: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8250: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8350: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8450: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8550: Fix the PCIe iommu-map entries" Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sm8650: Fix the PCIe iommu-map entries" Nicolin Chen <nicolinc(a)nvidia.com> iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized Atish Patra <atishp(a)meta.com> crypto: ccp - Fix possible deadlock in SEV init failure path Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix UBSAN array-index-out-of-bounds in smb2_copychunk_range Darrick J. Wong <djwong(a)kernel.org> xfs: actually recover intended file sizes in xfs_xmi_item_recover_intent Darrick J. Wong <djwong(a)kernel.org> xfs: advance the findparent inode scan cursor while holding ILOCK Darrick J. Wong <djwong(a)kernel.org> xfs: bail out on bitmap errors in xrep_agfl_fill Darrick J. Wong <djwong(a)kernel.org> xfs: compute dquot checksum after resetting dd_lsn in repair Darrick J. Wong <djwong(a)kernel.org> xfs: count escaped corruption errors in scrub stats Darrick J. Wong <djwong(a)kernel.org> xfs: destroy seen inode bitmap when we fail to add a dirpath Darrick J. Wong <djwong(a)kernel.org> xfs: don't leak dqacct if rhashtable insertion fails Darrick J. Wong <djwong(a)kernel.org> xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails Darrick J. Wong <djwong(a)kernel.org> xfs: don't modify file attributes or poke fsnotify for dry runs Darrick J. Wong <djwong(a)kernel.org> xfs: don't spin forever on zero-length dirents when salvaging them Darrick J. Wong <djwong(a)kernel.org> xfs: fix backwards skipping logic in xrep_quota_block Darrick J. Wong <djwong(a)kernel.org> xfs: fix bnobt repair space reservation disposal failure Lin Jiapeng <ljp1205831794(a)gmail.com> xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN Darrick J. Wong <djwong(a)kernel.org> xfs: fix name string recording in slowpath pptr tracepoints Darrick J. Wong <djwong(a)kernel.org> xfs: fix replaying dirent removals into the temporary directory Javier Tia <javier(a)peridio.com> xfs: initialise error in xfs_defer_finish_one() Darrick J. Wong <djwong(a)kernel.org> xfs: log the tempip after we convert it to extents format Darrick J. Wong <djwong(a)kernel.org> xfs: preserve owner on in-memory btree creation Darrick J. Wong <djwong(a)kernel.org> xfs: report nonexistent parents as a filesystem corruption Darrick J. Wong <djwong(a)kernel.org> xfs: reset parent pointer args before each dir tree unlink repair Darrick J. Wong <djwong(a)kernel.org> xfs: signal inode btree xref error if get_rec returns an error Darrick J. Wong <djwong(a)kernel.org> xfs: snapshot old AGFL before rewriting it Darrick J. Wong <djwong(a)kernel.org> xfs: snapshot scrub stats when rendering them Darrick J. Wong <djwong(a)kernel.org> xfs: truncate quota file correctly when repairing quota file Bjoern Doebel <doebel(a)amazon.de> smb: client: fix heap overflow in DACL owner/group rewrite Bjoern Doebel <doebel(a)amazon.de> smb: client: avoid leaking refcount when cifs_sb_tlink() fails Bjoern Doebel <doebel(a)amazon.de> smb: client: avoid leaking refcount in cifs_queue_oplock_break() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix file type corruption in wsl_to_fattr() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix file type corruption in cifs_reparse_point_to_fattr() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix one-byte OOB read in smb2_parse_native_symlink() Karl Mehltretter <kmehltretter(a)gmail.com> smb: client: pin DFS superblock in iterator callback Aohan Mei <henrymei(a)tencent.com> smb: client: reject userspace cifs.idmap descriptions Gang Yan <yangang(a)kylinos.cn> selftests: mptcp: fix an UAF in mptcp_connect.c Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: syncookies: remember the request backup flag Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: subflow: no need to copy thmac during ulp_clone Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: options: handle MPC data + csum reqd + no csum Joe Damato <joe(a)dama.to> bnxt_en: Propagate RX ring init failures in bnxt_init_nic() Joe Damato <joe(a)dama.to> bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset() Joe Damato <joe(a)dama.to> bnxt_en: Only restore LRO if the device supports TPA Michael Bommarito <michael.bommarito(a)gmail.com> media: v4l2-ctrls: validate AV1 tile counts Michael Bommarito <michael.bommarito(a)gmail.com> media: v4l2-ctrls: validate HEVC tile counts Michael Bommarito <michael.bommarito(a)gmail.com> media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity Michael Bommarito <michael.bommarito(a)gmail.com> media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer Haotian Zhang <vulab(a)iscas.ac.cn> media: v4l2-h264: Fix memcmp() size in B1 reference list comparison Michael Bommarito <michael.bommarito(a)gmail.com> media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity Michael Bommarito <michael.bommarito(a)gmail.com> media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity Michael Bommarito <michael.bommarito(a)gmail.com> media: hevc: add bounded tile-count helpers Vishnu Razdan <vrazdan(a)openai.com> hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS Fan Wu <fanwu01(a)zju.edu.cn> hwmon: (gpio-fan) Fix use-after-free in alarm work Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: (chipcap2) fix channels in humidity alarm notifications Cong Nguyen <congnt264(a)gmail.com> hwmon: (applesmc) fix key backlight workqueue leak on register failure Chengfeng Ye <nicoyip.dev(a)gmail.com> afs: Clear stale peer app data after address list changes David Howells <dhowells(a)redhat.com> afs: Fix incorrect free in candidate cleanup in afs_lookup_server() Xixin Liu <liuxixin(a)kylinos.cn> perf: RISC-V: use BIT_ULL for u64 overflow masks Xixin Liu <liuxixin(a)kylinos.cn> perf: RISC-V: store available counter mask as bitmap Harald Freudenberger <freude(a)linux.ibm.com> s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm Harald Freudenberger <freude(a)linux.ibm.com> s390/crypto: Fix use of mutex in atomic context Harald Freudenberger <freude(a)linux.ibm.com> s390/crypto: Fix skcipher_walk return code handling in aes_s390 Nagamani PV <nagamani(a)linux.ibm.com> s390/qeth: allow bridgeport queries despite OS_MISMATCH leixiang <leixiang(a)kylinos.cn> KVM: PPC: Book3S HV: Set irqfd->producer only on success Ibrahim Hashimov <security(a)auditcode.ai> mac802154: fix use-after-free of sdata via queued RX frames Kyle Zeng <kylebot(a)openai.com> ipvs: reject invalid states in connection template sync records Zihan Xi <zihanx(a)nebusec.ai> ipv4: fib: bound automatic table ID allocation David Carlier <devnexen(a)gmail.com> ieee802154: hwsim: serialize pib updates to fix double-free Fan Wu <fanwu01(a)zju.edu.cn> ieee802154: cc2520: fix FIFOP work use-after-free Zhiling Zou <zhilinz(a)nebusec.ai> ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink Yilin Zhang <yilinzhang(a)moonshot.ai> inet: frags: invalidate queues before flushing them Weiming Shi <bestswngs(a)gmail.com> fbdev: vfb: defer cleanup until the last reference Nikhil Gurudasani <nikhilgurudasani314(a)gmail.com> erofs: preserve LZMA decoders on resize failure Jeffin Philip <jeffinphilip14(a)gmail.com> fs: autofs: fix memory leak in autofs_fill_super() Nathan Chancellor <nathan(a)kernel.org> scripts/sorttable: Mark long_size as __maybe_unused Xiong Weimin <xiongweimin(a)kylinos.cn> vdpa: solidrun: Free IRQs after request failure Xiong Weimin <xiongweimin(a)kylinos.cn> vdpa: ifcvf: Put device on unsupported feature error Ilya Maximets <i.maximets(a)ovn.org> netfilter: report NLM_F_DUMP_FILTERED when all is filtered out Chengfeng Ye <nicoyip.dev(a)gmail.com> netfilter: nf_log: unregister loggers before per-net teardown Norbert Szetei <norbert(a)doyensec.com> net: openvswitch: fix use-after-free of the flow table mask array Fourie Zhang <littleddfu(a)gmail.com> net: mpls: clear inner_protocol when the last label is popped Sahil Chandna <sahilchandna(a)linux.microsoft.com> net: mana: Reserve extra CQ slot for the fence completion CQE Johan Hovold <johan(a)kernel.org> net: hso: fix TIOCMIWAIT race Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> net/sched: act_api: release all action references on NEWACTION failure David Carlier <devnexen(a)gmail.com> ring-buffer: Check resize_disabled before publishing the new subbuf order Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> ring-buffer: Acquire the lock with irqsave in rb_wake_up_waiters() Gabriel Krisman Bertazi <krisman(a)suse.de> io_uring/net: let io_recv_buf_select return the length of the buffer region Thorsten Blum <thorsten.blum(a)linux.dev> drm/i915: Fix memory leak in query_perf_config_list() Sunil Khatri <sunil.khatri(a)amd.com> drm/drm_exec: fix up contended obj when num_objects is 0 Moritz Tanner <moritz.tanner(a)linbit.com> fs: don't return -EINVAL for successful nested thaw Jann Horn <jannh(a)google.com> exec: do_close_on_exec() before taking exec_update_lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> cpufreq: initialize policy rwsem before sysfs publication Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: zero-initialize policy cpumask before sysfs publication Rong Zhang <i(a)rong.moe> Bluetooth: btrtl: Don't leak return code when parsing firmware format v2 Xu Rao <raoxu(a)uniontech.com> Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev Runyu Xiao <runyu.xiao(a)seu.edu.cn> ASoC: sti: initialize IRQ lock before requesting IRQ Tianchu Chen <flynnnchen(a)tencent.com> ASoC: sprd: validate compress buffer sizes against fixed allocations Dawid Osuchowski <dawid.osuchowski(a)linux.intel.com> accel/ivpu: Limit firmware log name prints to field size Magdalena Schulfer <magdalena.schulfer(a)intel.com> accel/ivpu: Validate firmware log buffer metadata Magdalena Schulfer <magdalena.schulfer(a)intel.com> accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Keep the entry count when the histogram stats allocation fails Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Let histogram values keep the percent and graph modifiers Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Free histogram the field rejected for a bad modifier Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Free histogram var refs regardless of how often they are referenced Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Free histogram the var ref when its initialization fails Henry Martin <bsdhenrymartin(a)gmail.com> tracing/user_events: Don't destroy fields when event removal fails Thomas Gleixner <tglx(a)linutronix.de> tick/broadcast: Plug clockevents replacement race Ido Schimmel <idosch(a)nvidia.com> tunnels: Drop stale dst when building an ICMP error for PMTUD Ali Ahmet Memis <ali(a)iusegentoo.com> ufs: validate cylinder group metadata before caching it Ali Ahmet Memis <ali(a)iusegentoo.com> ufs: create the root dentry after loading cylinder metadata James Hilliard <james.hilliard1(a)gmail.com> watchdog: sunxi_wdt: preserve boot-enabled watchdog Harry Wentland <harry.wentland(a)amd.com> dm/amdgpu: fix malformed link_settings debugfs output Tristan Madani <tristan(a)talencesecurity.com> ALSA: usbusx2y: validate URB actual_length in interrupt callback Tristan Madani <tristan(a)talencesecurity.com> ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf Roman Prucha <zorgan.roman(a)gmail.com> ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough Miguel Ojeda <ojeda(a)kernel.org> rust: allow `unknown_lints` in generated bindings for Rust < 1.88 Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Fix memory corruption from the histogram stacktrace modifier Zihan Xi <zihanx(a)nebusec.ai> ipv6: fix fib6 walker UAF on seq stop Vernon Yang <yanglincheng(a)kylinos.cn> x86/mm: Fix user-space data loss with MADV_FREE and THP Eric Biggers <ebiggers(a)kernel.org> crypto: x86/aria - add missing vzeroupper in AVX-512 code Eric Biggers <ebiggers(a)kernel.org> crypto: x86/aria - add missing vzeroupper in AVX2 code Shivaprasad G Bhat <sbhat(a)linux.ibm.com> powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/ps3: Fix repository.c build failure Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent out-of-bounds reads in share config responses Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands Lorenzo Stoakes (ARM) <ljs(a)kernel.org> scripts/mksysmap: fix escape of '$' in the __pi_ pattern Stian Halseth <stian(a)itx.no> sunvdc: unmap LDC cookies when the descriptor send fails Eelco Chaudron <echaudro(a)redhat.com> openvswitch: fix wrong flag value in get_ipv6_ext_hdrs() MD Danish Anwar <danishanwar(a)ti.com> net: hsr: enable promiscuous mode on interlink port with fwd offload Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: fix TX descriptor availability check for TSO traffic Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: add TSO check for header length Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: add stmmac_tso_header_size() Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: fix TSO support when some channels have TBS available Furong Xu <0x1207(a)gmail.com> net: stmmac: TSO: Simplify the code flow of DMA descriptor allocations Greg Marsden <greg.marsden(a)oracle.com> net/rds: fix tcp stream corruption with large pages Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: fix PF/CGX debugfs PCI bus lookup Vladislav Karmanov <vladislav.karmanov.dev(a)gmail.com> net: phy: mediatek-ge: disable EEE on the MT7530 PHY Heiner Kallweit <hkallweit1(a)gmail.com> net: phy: add phy_disable_eee SkyLake.Huang <skylake.huang(a)mediatek.com> net: phy: mediatek: Re-organize MediaTek ethernet phy drivers Colin Ian King <colin.i.king(a)gmail.com> cxgb4: clip_tbl: Fix spelling mistake "wont" -> "won't" Aamir Ahmed <elb12345(a)hotmail.co.uk> net: hinic: fix mailbox segment buffer overflow Li Youhong <liyouhong(a)kylinos.cn> net: sun4i-emac: fix missing of_node_put() for phy_node Kuniyuki Iwashima <kuniyu(a)google.com> net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain(). Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: Fix in-place replace Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: Reject handle aliasing Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: free emptied bucket on filter move Vincent Guittot <vincent.guittot(a)linaro.org> sched/eevdf: Fix rb augmented with multi fields Peter Zijlstra <peterz(a)infradead.org> sched/fair: Fix lag clamp Peter Zijlstra <peterz(a)infradead.org> sched/fair: Fix EEVDF entity placement bug causing scheduling lag Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Correct pt_regs->flags update for PEBS path Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel/ds: Factor out PEBS group processing code to functions Changbin Du <changbin.du(a)huawei.com> perf/x86/intel/ds: Remove redundant assignments to sample.period Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel/ds: Clarify adaptive PEBS processing Yabin Cui <yabinc(a)google.com> perf/core: Check sample_type in perf_sample_save_callchain Thomas Richter <tmricht(a)linux.ibm.com> perf/core: Allow list_del during perf_event_overflow() Kan Liang <kan.liang(a)linux.intel.com> perf: Supply task information to sched_task() Thibault Ferrante <thibault.ferrante(a)canonical.com> selftests/powerpc/tm: Fix tcheck() reading uninitialised CR value Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: initialize ptp_lock at probe time Qingfang Deng <qingfang.deng(a)linux.dev> ppp_synctty: ensure a writeable skb header Eric Dumazet <edumazet(a)google.com> vxlan: initialize _md in vxlan_xmit_one() Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: reset HTB scheduler topology before freeing queues Linmao Li <lilinmao(a)kylinos.cn> hwmon: (corsair-cpro) Remove debugfs entries when probe fails Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors Cong Nguyen <congnt264(a)gmail.com> hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown() Linmao Li <lilinmao(a)kylinos.cn> hwmon: (corsair-cpro) Create debugfs entries after hwmon registration Marek Vasut <marex(a)nabladev.com> net: ks8851: Fix receiver error in 100BASE-TX mode following software power-down Yicong Hui <yiconghui(a)gmail.com> net/micrel: Fix typos in micrel driver code comments Jan Havran (Advantech Czech) <havran.jan(a)email.cz> net: dsa: lantiq_gswip: fix GSWIP_MDIO_PHY_FCONTX_EN value Daniel Golle <daniel(a)makrotopia.org> net: dsa: lantiq_gswip: move definitions to header Daniel Golle <daniel(a)makrotopia.org> net: dsa: lantiq_gswip: prepare for more CPU port options Daniel Golle <daniel(a)makrotopia.org> net: dsa: lantiq_gswip: deduplicate dsa_switch_ops Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Sync timeout value if WDT was running at boot Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix undefined behavior Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix spurious reset on suspend Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Enable clock before accessing hardware registers Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix clock leak and spurious timer in settimeout() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Avoid division by zero David Arcari <darcari(a)redhat.com> watchdog: fix hrtimer start when pretimeout is zero Paolo Abeni <pabeni(a)redhat.com> mptcp: remove unneeded READ_ONCE() annotation Nicolai Buchwitz <nb(a)tipi-net.de> net: macb: destroy the phylink instance on the probe error path Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: btusb: Fix leaked runtime PM reference in btusb_reset Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: btusb: mediatek: Fix leaked runtime PM reference in reset Ivan Hu <ivan.hu(a)canonical.com> Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: validate packet_len before skb_put_data Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: btusb: Fix UAF of btusb_data by rx_work Jakub Kicinski <kuba(a)kernel.org> eth: ice: don't dereference pointers from TP_printk() Jacob Keller <jacob.e.keller(a)intel.com> ice: add missing xa_destroy for sched_node_ids Joshua Hay <joshua.a.hay(a)intel.com> idpf: account for VLAN header when parsing RSC packet header HyeongJun An <sammiee5311(a)gmail.com> ALSA: hda: Report a change when only the channel status bytes move Takashi Iwai <tiwai(a)suse.de> ALSA: hda/common: Use guard() for mutex locks Takashi Iwai <tiwai(a)suse.de> ALSA: hda/common: Use cleanup macros for PM controls Takashi Iwai <tiwai(a)suse.de> ALSA: hda: Introduce auto cleanup macros for PM Karl Mehltretter <kmehltretter(a)gmail.com> drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count RX descriptors for freeq refill Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count RX drops once per frame Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: No mapping is a dropped rx Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Count dropped frames as NAPI work Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Finish RX updates before NAPI completion Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Fix budget accounting Alice Mikityanska <alice(a)isovalent.com> net: ipv6: Clamp to IP6_MAX_MTU in ip6_dst_mtu_maybe_forward Alice Mikityanska <alice(a)isovalent.com> net: ipv6: Fix UDP length overflow with PMTU discover and big MTU Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer. Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Update last skb marker in manage_oob(). Karl Mehltretter <kmehltretter(a)gmail.com> virtio_input: stop callbacks before unregistering input device Xiong Weimin <xiongweimin(a)kylinos.cn> virtio_input: reset device if input_register_device() fails Andrew Stellman <astellman(a)stellman-greene.com> virtio-pci: return IRQ_HANDLED after non-zero ISR Linfeng Sun <linfeng.sun.dev(a)gmail.com> vdpa_sim_net: check TX pull result before RX copy Linfeng Sun <linfeng.sun.dev(a)gmail.com> vdpa_sim_blk: reject out-of-range sector starts Yu Zhang <yuz08559(a)gmail.com> vhost-vdpa: protect config_ctx from being freed under the config callback Yu Zhang <yuz08559(a)gmail.com> vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx Jia Jia <physicalmtea(a)gmail.com> vhost/vdpa: reject VRING_NUM larger than device max Jia Jia <physicalmtea(a)gmail.com> virtio_console: do not free control-out buffers on remove Karl Mehltretter <kmehltretter(a)gmail.com> virtio: fix use-after-free in unregister_virtio_device() hpp.iscas <hppiscas(a)163.com> ASoC: mt6351: Publish the OF module alias Florian Westphal <fw(a)strlen.de> netfilter: ip6_tables: set F_PROTO when proto value is nonzero Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: cope with concurrent instance destruction hpp.iscas <hppiscas(a)163.com> ASoC: Intel: SST: Publish the PCI module aliases hpp.iscas <hppiscas(a)163.com> ASoC: bcm: bcm63xx: Publish the OF module aliases Jared Kangas <jkangas(a)redhat.com> hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read() Guenter Roeck <linux(a)roeck-us.net> hwmon: Introduce 64-bit energy attribute support Zijun Hu <quic_zijuhu(a)quicinc.com> libnvdimm: Replace namespace_match() with device_find_child_by_name() Geert Uytterhoeven <geert+renesas(a)glider.be> hwmon: (ltc4282) Make sure clk_init_data is fully initialized Edward Adam Davis <eadavis(a)sina.com> ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Reject non-scalar bpf_loop iteration counts Vineeth Karumanchi <vineeth.karumanchi(a)amd.com> net: macb: fix NULL pointer dereference on unbind with fixed-link Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: rename bp->sgmii_phy field to bp->phy Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: ets: clamp quantum in parse and fallback paths Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: drr: clamp quantum in change class Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: pie: clamp psched_mtu in pie_drop_early Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: hhf: clamp quantum in change and init paths Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sfq: clamp quantum in change path Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: fq_pie: clamp quantum in change path Lama Kayal <lkayal(a)nvidia.com> net/mlx5: E-Switch, prevent mc_list repopulation during vport disable Yael Chemla <ychemla(a)nvidia.com> net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Fix use-after-free race in sample_restore_put() Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Fix ETS zero BW reporting when one TC holds 100% Shahar Shitrit <shshitrit(a)nvidia.com> net/mlx5e: Fix setting RS FEC after remapping Weiming Shi <bestswngs(a)gmail.com> net/sched: defer qdisc freeing after failed creation XingWang Xiang <v3rdant.xiang(a)gmail.com> net: mctp: i3c: serialize probe with bus removal Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/kexec_file: Use inclusive range checks in add_usable_mem() Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: don't release PCI regions for VFs on reset Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix cmd_regs access racing BAR unmap on reset Jamal Hadi Salim <jhs(a)mojatatu.com> net: reject oversized tx_queue_len at netlink parse time Jamal Hadi Salim <jhs(a)mojatatu.com> net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations Seungwon Bae <qotmddnjs(a)ajou.ac.kr> vxlan: reject dynamic fdb entries that reference a nexthop id Alexandra Winter <wintera(a)linux.ibm.com> s390/ism: folio_put() after error Jason Winter <jjx(a)live.nl> net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow Nikhil P. Rao <nikhil.rao(a)amd.com> ionic: use netif_txq_maybe_stop() in ionic_tx() Viswajith Murali <viswajithm(a)marvell.com> octeontx2-af: mcs: Clear stale X2P calibration state before calibration Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: mcast: properly convert mglist to rcu Jakub Kicinski <kuba(a)kernel.org> net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size Jakub Kicinski <kuba(a)kernel.org> eth: nfp: drop the replaced rule from the list when reprogramming fails Jakub Kicinski <kuba(a)kernel.org> eth: nfp: bound the ntuple rule dump by the caller's buffer size Jakub Kicinski <kuba(a)kernel.org> eth: nfp: migrate to new RXFH callbacks Jakub Kicinski <kuba(a)kernel.org> net: ethtool: add dedicated callbacks for getting and setting rxfh fields Jakub Kicinski <kuba(a)kernel.org> net: ethtool: require drivers to opt into the per-RSS ctx RXFH Jakub Kicinski <kuba(a)kernel.org> net: ethtool: remove the duplicated handling from rxfh and rxnfc Jakub Kicinski <kuba(a)kernel.org> net: ethtool: copy the rxfh flow handling Gal Pressman <gal(a)nvidia.com> ethtool: Block setting of symmetric RSS when non-symmetric rx-flow-hash is requested Gal Pressman <gal(a)nvidia.com> ethtool: Symmetric OR-XOR RSS hash Jakub Kicinski <kuba(a)kernel.org> net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size Eric Dumazet <edumazet(a)google.com> bonding: use skb_cow_head() in bond_do_alb_xmit() and rlb_arp_xmit() Ido Schimmel <idosch(a)nvidia.com> nexthop: Initialize extack in remove_nh_grp_entry() Jiayuan Chen <jiayuan.chen(a)linux.dev> selftests/bpf: Fix flaky bpf_nf test when random NAT port is 0 Ning Ding <dingning04(a)gmail.com> bpf: Reject untrusted allocated-object pointers Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Require MEM_PERCPU for percpu kptr stores Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> thermal: sysfs: switch to use scnprintf() to suppress truncation warning Eduard Zingerman <eddyz87(a)gmail.com> bpf: Don't predict JMP32 pointer vs zero comparisons Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Mark faultable stack helpers as sleepable Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Mark bpf_btf_find_by_name_kind() as sleepable Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: clear txcb->last before writing each descriptor Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: avs: Fix unbalanced module reference count Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: avs: Clean up streams if their initialization fails Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: avs: Clean up the bus when fetching ML caps fails Xixin Liu <liuxixin(a)kylinos.cn> nvme-tcp: defer TLS inline send to io_work Hannes Reinecke <hare(a)kernel.org> nvme-tcp: open-code nvme_tcp_queue_request() for R2T Mohamed Khalfella <mkhalfella(a)purestorage.com> nvme: remove stale namespaces by NSID range during scan Steven Rostedt <rostedt(a)goodmis.org> ring-buffer: Add checking nr_subbufs to persistent ring buffer validation Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Mark sched_process_wait argument as nullable Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix NULL-ptr-deref in btf_var_show() Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix NULL-ptr-deref when showing a void BTF type Takashi Iwai <tiwai(a)suse.de> ALSA: caiaq: Fix potential double-free at error path HyeongJun An <sammiee5311(a)gmail.com> selftests/alsa: Fix the step check for INTEGER controls Breno Leitao <leitao(a)debian.org> arm64: trans_pgd: clone only the linear map that exists at runtime HW He <hw.he(a)mediatek.com> net: gro: Fix nesting of TCP GSO SKBs in skb_gro_receive_list() Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: reconfigure RX packet parser table in stmmac_hw_setup() after reset Allison Henderson <achender(a)kernel.org> net/rds: don't let rds_conn_shutdown() consume a concurrent drop Håkon Bugge <haakon.bugge(a)oracle.com> net/rds: acquire the fastpath locks in rds_conn_shutdown() Allison Henderson <achender(a)kernel.org> net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks() Gerd Rausch <gerd.rausch(a)oracle.com> net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown Allison Henderson <achender(a)kernel.org> net/rds: clear cp_flags bits individually in rds_conn_path_reset() Allison Henderson <achender(a)kernel.org> net/rds: use clear_bit_unlock() in release_refill() Allison Henderson <achender(a)kernel.org> net/rds: use wq_has_sleeper() in release_in_xmit() Eric Dumazet <edumazet(a)google.com> bonding: do not clear curr_active_slave prematurely when releasing all slaves Eduard Zingerman <eddyz87(a)gmail.com> bpf: reject BPF_PSEUDO_FUNC reference to the main program Henry Martin <bsdhenrymartin(a)gmail.com> tracing/probes: Fix use-after-free on field name/type of events with multiple probes Joas Antonio dos Santos <joasantonio108(a)gmail.com> netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() Kyle Zeng <kylebot(a)openai.com> ipvs: fix reversed sequence option serialization Qu Wenruo <wqu(a)suse.com> btrfs: do not force reloc root creation during qgroup_account_snapshot() Avi Weiss <thnkslprpt(a)gmail.com> btrfs: send: fix lost error return value in will_overwrite_ref() Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: finish active block group cleanup if call_zone_finish() fails Qu Wenruo <wqu(a)suse.com> btrfs: return proper negative error code for update_raid_extent_item() Qu Wenruo <wqu(a)suse.com> btrfs: fix the possible bioc_list memory leak during error Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> btrfs: fix transaction use-after-free in raid stripe insertion Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Program the MSP FIFO watermarks Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Allow repeated MSP prepare calls Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Remove obsolete PRCMU QoS calls Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Request the MSP MMIO resource Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Deassert the MSP reset during probe Linus Walleij <linusw(a)kernel.org> mfd: db8500-prcmu: Fold dbx500 header into db8500 Kees Cook <kees(a)kernel.org> arm: Handle KCOV __init vs inline mismatches Zijun Hu <quic_zijuhu(a)quicinc.com> mfd: db8500-prcmu: Remove needless return in three void APIs Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Validate MSP DAI configuration Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Correct MSP frame and bit clock setup Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Propagate MSP setup errors Linus Walleij <linusw(a)kernel.org> ASoC: ux500: Fix MSP stream lifecycle handling John Ogness <john.ogness(a)linutronix.de> printk/nbcon: Change nbcon_irq_work to IRQ_WORK_LAZY Qingyu Zhang <usupergate(a)gmail.com> ALSA: ump: do not touch legacy_rmidi before it exists Takashi Iwai <tiwai(a)suse.de> ALSA: ump: Update rawmidi name per EP name update Takashi Iwai <tiwai(a)suse.de> ALSA: ump: Copy safe string name to rawmidi Takashi Iwai <tiwai(a)suse.de> ALSA: ump: Copy FB name string more safely Takashi Iwai <tiwai(a)suse.de> ALSA: rawmidi: Show substream activity in info ioctl Takashi Iwai <tiwai(a)suse.de> ALSA: rawmidi: Expose the tied device number in info ioctl Sunil Goutham <sgoutham(a)marvell.com> octeontx2-af: Fix limiting SRIOV VF count logic Eric Dumazet <edumazet(a)google.com> locking/lockdep: Invalidate stale class_cache entries for zapped classes Leo Yan <leo.yan(a)arm.com> perf/core: Skip empty AUX records with only format flags Ivy Lopez <skunkolee(a)gmail.com> scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues() Xixin Liu <liuxixin(a)kylinos.cn> perf: RISC-V: check cpu_hw_evt before dereference in overflow IRQ Eric Dumazet <edumazet(a)google.com> bonding: alb: fix uninitialized transport header access in alb_determine_nd() Guanghui Yang <3497809730(a)qq.com> btrfs: restore active device pointers after failed sprout Guanghui Yang <3497809730(a)qq.com> btrfs: detach failed sprout device from transaction update list Lu Yao <yaolu(a)kylinos.cn> drm/xe/oa: Remove sysfs entry on idr_alloc failure in xe_oa_add_config_ioctl() wangdicheng <wangdicheng(a)kylinos.cn> ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close() wangdicheng <wangdicheng(a)kylinos.cn> ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits Vasily Gorbik <gor(a)linux.ibm.com> s390/boot: Avoid IPL parameter append past command line Vasily Gorbik <gor(a)linux.ibm.com> s390/boot: Fix physical memory search range Xu Rao <raoxu(a)uniontech.com> ALSA: hda: restore MFG widget enumeration after core split Takashi Iwai <tiwai(a)suse.de> ALSA: hda/core: Use guard() for mutex locks Hui Su <sh_def(a)163.com> staging: fbtft: make dirty_lock IRQ-safe Kuniyuki Iwashima <kuniyu(a)google.com> af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header(). Eric Dumazet <edumazet(a)google.com> ipv6: sr: restore network header before routing and forwarding David Laight <david.laight.linux(a)gmail.com> tipc: Dont send random pad bytes in RESET/ACTIVATE messages Tung Nguyen <tung.quang.nguyen(a)est.tech> tipc: fix NULL deref in tipc_named_node_up() on empty publication list Eric Dumazet <edumazet(a)google.com> ip6_gre: check tunnel info before xmit in ip6gre_tunnel_xmit Eric Dumazet <edumazet(a)google.com> ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source() Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Don't hold RTNL for MCAST_ socket options. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Don't hold RTNL for IPV6_DROP_MEMBERSHIP and MCAST_LEAVE_GROUP. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Don't hold RTNL for IPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP. Eric Dumazet <edumazet(a)google.com> ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src() Qingfang Deng <qingfang.deng(a)linux.dev> ppp: ppp_synctty: simplify tty disc_data access Qingfang Deng <qingfang.deng(a)linux.dev> ppp: ppp_async: simplify tty disc_data access Eric Dumazet <edumazet(a)google.com> igmp: convert struct ip_sf_list to RCU Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: Fix for the wrong data type Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: Disable tx queues on fatal error Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: Improve the error recovery Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: Protect skb pointer used by two different kernel instances Ciprian Regus <ciprian.regus(a)analog.com> net: ethernet: oa_tc6: Add the OA_TC6_ prefix to standard registers Ciprian Regus <ciprian.regus(a)analog.com> net: ethernet: oa_tc6: Export standard defined registers Ciprian Regus <ciprian.regus(a)analog.com> net: ethernet: oa_tc6: Handle the OA TC6 SPI protected mode Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: Interrupt is active low, level triggered. Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Validate and program TDM slots correctly Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Correct digital interface format setup Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Repair the DAPM capture graph Linus Walleij <linusw(a)kernel.org> ASoC: ab8500: Reset the audio block before configuring it Gongwei Li <ligongwei(a)kylinos.cn> Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout() Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan Aleksandr Nogikh <nogikh(a)google.com> Bluetooth: hci_core: Fix race condition during device registration Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btintel: bound firmware ID by TLV length Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btintel: validate version TLV value lengths Jiacheng Xu <stitch(a)zju.edu.cn> workqueue: reject watchdog thresholds that overflow jiffies Marco Crivellari <marco.crivellari(a)suse.com> workqueue: replace use of system_wq with system_percpu_wq Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: Clear automask on spurious interrupts Wanwu Li <liwanwu(a)kylinos.cn> sched_ext: Fix timer pinning and return value in scx_central Vasily Gorbik <gor(a)linux.ibm.com> s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block Vasily Gorbik <gor(a)linux.ibm.com> s390/ipl: Fix NULL deref in kdump without re-IPL parm block Heiko Carstens <hca(a)linux.ibm.com> s390/time: Use jiffies instead of jiffies_64 Heiko Carstens <hca(a)linux.ibm.com> s390/vtime: Use __this_cpu_read() / get rid of READ_ONCE() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: rate limit unmapped SID errors Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: propagate DACL parsing errors Yilin Zhang <yilinzhang(a)moonshot.ai> ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF Colin Ian King <colin.i.king(a)gmail.com> OPP: of: Fix potential multiplication overflow when calculating freq Adrian Hunter <adrian.hunter(a)intel.com> perf symbol: Do not use debug file as the binary type Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: msc313e: Fix NULL pointer dereference in PM callbacks Baul Lee <baul.lee(a)xbow.com> vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del() James Nugraha <aslan.jnn(a)gmail.com> net: amd-xgbe: discard rx packets with bad FCS Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> raw: annotate disconnect-side IPv4 match writers Henry Martin <bsdhenrymartin(a)gmail.com> sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> smb: client: transport: Fix debug printing in __release_mid() Huiwen He <hehuiwen(a)kylinos.cn> smb/client: fix integer truncation in collapse range Huiwen He <hehuiwen(a)kylinos.cn> smb/client: fix data corruption in emulated insert range ZhangGuoDong <zhangguodong(a)kylinos.cn> smb: move copychunk definitions to common/smb2pdu.h Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: batch SRV_COPYCHUNK entries to cut round trips Huiwen He <hehuiwen(a)kylinos.cn> smb/client: mark file sparse before emulating insert range Huiwen He <hehuiwen(a)kylinos.cn> smb/client: validate new EOF for zero range Huiwen He <hehuiwen(a)kylinos.cn> smb/client: validate new EOF for insert range Milan P. Gandhi <mgandhi(a)redhat.com> scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add() Milan P. Gandhi <mgandhi(a)redhat.com> scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add() Xin Long <lucien.xin(a)gmail.com> sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: fix skb sizing and action leak on reoffload delete Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: size the RTM_GETACTION reply from the actions Victor Nogueira <victor(a)mojatatu.com> net/sched: act_api: budget all shared attributes in notify skbs Dong Chenchen <dongchenchen2(a)huawei.com> net: iptunnel: fix stale transport header during tunnel decapsulation Eric Dumazet <edumazet(a)google.com> tcp: use GFP_ATOMIC in tcp_send_active_reset() Eric Dumazet <edumazet(a)google.com> net: icmp: avoid invalid transport header access in icmp_send tracepoint Slawomir Stepien <sst(a)poczta.fm> drm/cirrus-qemu: Validate BAR0 size during probe Thomas Zimmermann <tzimmermann(a)suse.de> drm/cirrus: Use video aperture helpers Ali Ahmet Memis <ali(a)iusegentoo.com> ufs: do not treat unreadable directory blocks as empty Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic Hongfu Li <lihongfu(a)kylinos.cn> selftests/cgroup: Fix cg_run_in_subcgroups ignoring arg parameter Liang Luo <luoliang(a)kylinos.cn> sched_ext: Fix nonexistent field in sched-ext.rst example Xixin Liu <liuxixin(a)kylinos.cn> nvmet-rdma: fix queue leak when connect backlog is exceeded Xixin Liu <liuxixin(a)kylinos.cn> nvme-rdma: fix -EIO cleanup order in queue_rq Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> accel/qaic: Address potential out-of-bounds read in resp_worker() Dan Carpenter <error27(a)gmail.com> drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Jad Keskes <inasj268(a)gmail.com> EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix channel address decode for non-hash mode Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix channel selection hash Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix interleave boundary condition Yazen Ghannam <yazen.ghannam(a)amd.com> RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> ARM: ensure interrupts are enabled in __do_user_fault() Xie Yuanbin <xieyuanbin1(a)huawei.com> ARM: 9484/1: enable interrupts when unhandled user faults are triggered SJ Park <sj(a)kernel.org> mm/damon/core: avoid infinite kdamond_merge_regions() internal loop Max Chou <max.chou(a)realtek.com> Bluetooth: btrtl: Add the support for RTL8761CUV Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Unlink scc_entry in unix_del_edge(). Eric Dumazet <edumazet(a)google.com> l2tp: fix tunnel and session refcount leak on seq_file release Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use memcmp() to compare ClientGUIDs HyeongJun An <sammiee5311(a)gmail.com> ASoC: meson: aiu: Validate written enum values Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: topology: Check PCM and DAI name strings before use Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). Jiri Olsa <jolsa(a)kernel.org> bpf: Guard __get_user acesss with access_ok for uprobe_multi data Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Proper rollback if the ioremap fails Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: platform: defer connection counter increment until alloc succeeds Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid10: fix writes_pending and barrier reference leaks on discard failures Xin Long <lucien.xin(a)gmail.com> sctp: fix err_chunk memory leaks in INIT handling Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Mask pseudo pointer values in verifier logs Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix malformed ISO_END/CONT handling Daniel Borkmann <daniel(a)iogearbox.net> bpf: Reject redirect helpers without a bpf_net_context Gregor Herburger <gregor.herburger(a)linutronix.de> drm/vc4: hvs/v3d: Fix null dereference in unbind Cen Zhang (Microsoft) <blbllhy(a)gmail.com> tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD Eric Dumazet <edumazet(a)google.com> drop_monitor: fix size calculations for 64-bit attributes Eric Dumazet <edumazet(a)google.com> drop_monitor: perform u64_stats updates under IRQ-disabled section Vlatko Kosturjak <kost(a)linux.hr> ppp_async: drop the errored frame instead of resetting its headroom Saravana Kannan <saravanak(a)google.com> of: dynamic: Fix overlayed devices not probing because of fw_devlink Ulf Hansson <ulf.hansson(a)linaro.org> driver core: Export get_dev_from_fwnode() Brahmajit Das <listout(a)listout.xyz> drm/amd/display: clean-up dead code in dml2_mall_phantom Zi Yan <ziy(a)nvidia.com> mm/huge_memory: use folio's memcg inside __folio_split() Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> wifi: mt76: mt7921: skip unknown CLC firmware records Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> wifi: mt76: mt7921: validate CLC firmware records Sasha Levin <sashal(a)kernel.org> Revert "ARM: 9481/2: breakpoint: CFI breakpoints only on demand" Sasha Levin <sashal(a)kernel.org> Revert "bpf, s390: Clear fetch destination on faulting arena atomic" Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: remove stale channels from all sessions on teardown Andrii Nakryiko <andrii(a)kernel.org> bpftool: Strip all -Wformat* flags from bootstrap libbpf build Genevieve Chan <genevieve.chan(a)altera.com> firmware: stratix10-svc: fix FCS SMC call kernel-doc Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Revert "ACPI: processor: Update cpuidle driver check in __acpi_processor_start()" Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state Lin Xianglin <1021538027(a)qq.com> ASoC: amd: yc: Add DMI quirk for HyperX OMEN Gaming Laptop 16-ap1xxx Zizhi Wo <wozizhi(a)huawei.com> scsi: core: Do not block on tag allocation in scsi_eh_lock_door() Rudi Heitbaum <rudi(a)heitbaum.com> ASoC: rt5645: Perform the initial jack detect at probe Jisheng Zhang <jszhang(a)kernel.org> spi: dw: fix wrong RX_SAMPLE_DLY setting after resume Niklas Cassel <cassel(a)kernel.org> ata: libata-core: Disable LPM on WDC WD141KFGX-68FH9N0 Guenter Roeck <linux(a)roeck-us.net> hwmon: (corsair-psu) Fix linear11 calculation Jia Jia <physicalmtea(a)gmail.com> vhost-scsi: flush backend after device ioctls Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for HP Victus Laptop 16-e1xxx Hardik Garg <hargar(a)linux.microsoft.com> Drivers: hv: vmbus: add VTL2 redirect connection ID Niklas Cassel <cassel(a)kernel.org> ata: libata-core: Disable LPM on WD Green 2.5 480GB André Pragosa <pragosa512(a)gmail.com> ALSA: hda/realtek: Add mute LED quirk for HP Victus 16-e0xxx (MB 88ED) Niklas Cassel <cassel(a)kernel.org> ata: libata-core: Disable LPM on some WD drives Robert Abrahamse <denobyte2(a)gmail.com> ALSA: usb-audio: Add quirk for Corsair Virtuoso (later revision) Jiale Yao <yaojiale02(a)163.com> Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame Deepanshu Kartikey <kartikey406(a)gmail.com> wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie() Li Qiang <liqiang01(a)kylinos.cn> cifs: validate idmap key payload length Vaibhav Jain <vaibhav(a)linux.ibm.com> powerpc/pseries: Ensure vpa,slb_shadow & dtl are unregistered during crash Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> ice: pass the return value of skb_checksum_help() Madhavender Singh <madhav(a)disroot.org> ALSA: hda/realtek: Add mute LED quirk for HP Laptop 14s-dr1xxx Markus Lindner <lindner.markus(a)outlook.at> ALSA: usb-audio: Add dB map quirk for Razer Barracuda X 2.4 Minhong He <heminhong(a)kylinos.cn> phonet: check register_netdevice_notifier() error in phonet_device_init() Pengpeng Hou <pengpeng(a)iscas.ac.cn> drm/gma500: return errors from Oaktrail HDMI I2C reads Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: preserve VFS inherited POSIX ACL mask Ibrahim Hashimov <security(a)auditcode.ai> wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO Kamal Wadhwa <kamal.wadhwa(a)oss.qualcomm.com> regulator: core: clamp voltage constraints before applying apply_uV Jay Vadayath <jay(a)artiphishell.com> smb: client: bound dirent name against end of SMB response in cifs_filldir Georgi Valkov <gvalkov(a)gmail.com> wifi: mwifiex: replace one-element arrays with flexible array members Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add HDA_CODEC_QUIRK for Samsung 750XBE/730XBE Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: acpi: validate WGDS table revision index Daniel C. Ribeiro <dcoutinho.96(a)gmail.com> ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum650 Wireless Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: bound aligned TLV advance in FW parser Takashi Iwai <tiwai(a)suse.de> ALSA: hda/realtek: Add quirk for HP Pavilion x360 Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized Pu Hu <hupu(a)transsion.com> arm64: kprobes: Allow reentering kprobes while single-stepping Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: add a check on the tid coming from the firmware Yu Peng <pengyu(a)kylinos.cn> arm64: fixmap: Allow 256K early_ioremap() at any offset Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix a possible underflow Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: validate TX_CMD response layout Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: Intel: sof_sdw: Add quirks for new Dell laptops Huiwen He <hehuiwen(a)kylinos.cn> smb/client: flush dirty data before punching a hole Tao Cui <cuitao(a)kylinos.cn> blk-cgroup: fix leaks and online flag on radix_tree_insert failure Marcel Kłos <marcel(a)marmak.net.pl> ALSA: hda/realtek: Add quirk for HP EliteBook 830 G8 (8AB8) to enable mute LEDs Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: pcie: null RX pointers after free Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix sched scan IE sizing Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: parse beacon notif per layout Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: fix an off-by-1 boundary check Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: validate mac_link_id in session protect notif Filipe Manana <fdmanana(a)suse.com> btrfs: fix reloc root cleanup in merge_reloc_roots() Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: validate sta_id in BA window status notif Wang YuWei <1973615295(a)qq.com> spi: dw-dma: Wait for controller idle before completing Tx Filipe Manana <fdmanana(a)suse.com> btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol() Dave Chen <davechen(a)synology.com> btrfs: only account delalloc bytes for regular file inodes in btrfs_getattr() Pali Rohár <pali(a)kernel.org> cifs: Fix support for creating SFU fifo Richard Fitzgerald <rf(a)opensource.cirrus.com> ALSA: hda: cs35l56: Fail if wmfw file is missing Rohit Sinha <rohitsinha12043(a)gmail.com> ALSA: hda/realtek - Add quirk for HP Victus 15-fa0xxx (MB 8A50) Chen Bowen <hicbowen(a)gmail.com> ALSA: hda/realtek: Fix speakers on MECHREVO WUJIE Series ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/client: zero-initialize stack-allocated cifs_open_info_data Pali Rohár <pali(a)kernel.org> cifs: Fix support for creating SFU socket Huiwen He <hehuiwen(a)kylinos.cn> smb/client: reduce fallocate zero buffer allocation Tianze Shao <shaotianze(a)outlook.com> ASoC: rt712-sdca: reset codec at io_init to fix silent headphone Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: rsi: validate beacon length before fixed buffer copy Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: mark the rcu locked areas properly Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: libipw: fix key index receive bound checks Liang Hao <haohlliang(a)gmail.com> gpio: dwapb: Mask interrupts at hardware initialization Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com> wifi: mac80211: ibss: wait for in-flight TX on disconnect Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate rx/tx MLME callback frame lengths before access Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate SID namespace before mapping IDs Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: mark invalid session responses as signed Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: find bound sessions during reauthentication Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate assoc response length before status and IE access Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: libertas: reject short monitor TX frames Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate deauth frame length before reason access Corentin Labbe <clabbe(a)baylibre.com> wifi: ralink: RT2X00: init EEPROM properly Pengpeng Hou <pengpeng(a)iscas.ac.cn> ALSA: usb-audio: caiaq: validate EP1 reply lengths Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix credit charge calculation for SMB2 QUERY_INFO Perry Yuan <perry.yuan(a)amd.com> drm/amdgpu: flush pending RCU callbacks on module unload Jetha Chan <jethachan(a)gmail.com> ASoC: amd: yc: Add Alienware m15 R7 AMD to DMIC quirk table David Howells <dhowells(a)redhat.com> netfs: Fix decision whether to disallow write-streaming due to fscache use David Howells <dhowells(a)redhat.com> cachefiles: Fix double fput Yousef Alhouseen <alhouseenyousef(a)gmail.com> xen/gntalloc: validate grant count before allocation Farhad Alemi <farhad.alemi(a)berkeley.edu> freevxfs: don't BUG() on unknown typed-extent type Yousef Alhouseen <alhouseenyousef(a)gmail.com> xen/front-pgdir-shbuf: free grant reference head on errors Qiang Liu <liuqiang(a)kylinos.cn> ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling Qiang Liu <liuqiang(a)kylinos.cn> ksmbd: fix n.data memory leak in ksmbd_vfs_set_dos_attrib_xattr Gustavo Kenji Mendonça Kaneko <kaneko.dev(a)pm.me> drm/arm/komeda: fix error handling for clk_prepare_enable() and callers Shubham Nayak <shubhamnayak392reborn(a)gmail.com> ALSA: hda/realtek: Add quirk for HP Victus 16-e0xxx (88EE) to enable mute LED Qiang Liu <liuqiang(a)kylinos.cn> ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr Florian Westphal <fw(a)strlen.de> netfilter: nf_conntrack_expect: zero at allocation time Gustavo Kenji Mendonça Kaneko <kaneko.dev(a)pm.me> drm/arm/malidp: use clk_bulk API in runtime PM resume and suspend Weiming Shi <bestswngs(a)gmail.com> btrfs: tree-checker: validate INODE_REF's namelen Praveen Talari <praveen.talari(a)oss.qualcomm.com> spi: core: Abort active target transfer on controller suspend Baojun Xu <baojun.xu(a)ti.com> ASoC: tas2781: Update default register address to TAS2563 Haoxiang Li <haoxiang_li2024(a)163.com> fbdev: pm2fb: unwind WC setup on probe failure Kamlesh Chhetty <kamleshkc2002(a)gmail.com> ALSA: hda: Add Lenovo Legion 7i 16IAX7 17AA3874 quirk Arnd Bergmann <arnd(a)arndb.de> eth: mlx5: fix macsec dependency Adriana Stancu <adriana(a)arista.com> rtc: bq32000: add delay between RTC reads Yu Kuai <yukuai(a)fygo.io> blk-cgroup: protect iterating blkgs with blkcg->lock in blkcg_print_stat() Runyu Xiao <runyu.xiao(a)seu.edu.cn> net: au1000: move free_irq out of the close-time spinlocked section Pengpeng Hou <pengpeng(a)iscas.ac.cn> regulator: da9121: Use subvariant ids in the I2C table Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/sysfs: Use kstrtobool() to parse the ROM attribute input Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/proc: Fix race between pci_proc_init() and pci_bus_add_device() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: treat read-control opens as stat opens only for leases Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: break RH leases before delete-on-close Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: start file id allocation at 1 Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: deny renaming directory with open children Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: apply create security descriptor first Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: treat unnamed DATA stream as base file Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use connection ClientGUID for lease lookup Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: align SMB2 oplock break ack handling Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate SMB2 lease create contexts Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix lease break and ack state handling Alex Markuze <amarkuze(a)redhat.com> ceph: harden send_mds_reconnect and handle active-MDS peer reset Tommy Huang <tommy_huang(a)aspeedtech.com> rtc: aspeed: add AST2700 compatible Xue Lei <Xue.Lei(a)windriver.com> rtc: mv: add suspend/resume support for wakeup Samuel Moelius <sam.moelius(a)trailofbits.com> f2fs: validate inline dentry name lengths before conversion Chris Aherin <chrisaherin(a)gmail.com> ALSA: hda/realtek: Add quirk for Lenovo Yoga 7 16IAP7 Chen Cheng <chencheng(a)fnnas.com> md/raid5: let stripe batch bm_seq comparison wrap-safe Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> mailbox: imx: use devm_of_platform_populate() Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> mailbox: imx: Add a channel shutdown field Yu Kuai <yukuai(a)fygo.io> md/raid5: account discard IO Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> mailbox: imx: Use devm_pm_runtime_enable() Peter Zijlstra <peterz(a)infradead.org> perf: Fix addr_filter_ranges lifetime Hans Zhang <18255117159(a)163.com> PCI: plda: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: mediatek: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: rockchip: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: altera: Protect root bus removal with rescan lock Hans Zhang <18255117159(a)163.com> PCI: iproc: Protect root bus removal with rescan lock David Francis <David.Francis(a)amd.com> drm/amdkfd: Properly acquire queue buffers in CRIU restore Jean-Louis Colaco <jean-louis.colaco(a)orange.fr> ALSA: usb-audio: Add quirk for YAMAHA CDS3000 Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu: Use system unbound workqueue for soft IH ring Xiaogang Chen <xiaogang.chen(a)amd.com> drm/amdkfd: check find_first_zero_bit before __set_bit on kfd->doorbell_bitmap Xiaogang Chen <xiaogang.chen(a)amd.com> drm/amdkfd: Let driver decide buffer size at AMDKFD_IOC_GET_DMABUF_INFO ioctl Matthew Bystrin <dev.mbstr(a)gmail.com> mfd: rsmu: Add 8a34002 support Piotr Kubik <piotr(a)kubik.pl> leds: trigger: gpio: Use GPIOD_FLAGS_BIT_NONEXCLUSIVE Akashdeep Kaur <a-kaur(a)ti.com> mfd: tps65219: Make poweroff handler conditional on system-power-controller Tobias Deiminger <tobias.deiminger(a)linutronix.de> leds: pca9532: Don't stop blinking for non-zero brightness Yousef Alhouseen <alhouseenyousef(a)gmail.com> leds: uleds: Return -EFAULT on copy_to_user() failure Galen Hassen <rwekyes(a)gmail.com> ALSA: hda/conexant: Add pin config quirk for Lenovo IdeaPad Slim 5 16AKP10 Jakub Kicinski <kuba(a)kernel.org> tls: reject the combination of TLS and sockmap Ai Chao <aichao(a)kylinos.cn> ALSA: usb-audio: Add quirk flags for SC13A guoqi0226 <guoqi0226(a)163.com> spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data() Rob Herring (Arm) <robh(a)kernel.org> gpio: pisosr: Read "ngpios" as u32 Arnd Bergmann <arnd(a)arndb.de> scsi: bfa: Reduce kernel stack usage in bfa_fcs_lport_fdmi_build_portattr_block() Zhang Tianci <zhangtianci.1997(a)bytedance.com> fuse: set ff->flock only on success Jiri Kosina <jikos(a)kernel.org> HID: hidpp: fix potential UAF in hidpp_connect_event() Yung-Tse Cheng <mes900903(a)gmail.com> virtio-fs: avoid double-free on failed queue setup Viktor Menshin <ripeeerr(a)gmail.com> ALSA: hda/realtek: Add quirk for Lenovo Xiaoxin 14 GT David Timber <dxdt(a)dev.snart.me> exfat: fix handling of damaged volume in exfat_create_upcase_table() Rosen Penev <rosenp(a)gmail.com> sparc: Disable compat support with LLD Leo Yan <leo.yan(a)arm.com> bpftool: Pass host flags to bootstrap libbpf Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Tolerate i3c_master_add_i3c_dev_locked() failures in DAA Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: fix races in cifsd thread creation Alice Mikityanska <alice(a)isovalent.com> net/sched: act_csum: don't mangle UDP tunnel GSO packets Maxime Bélair <maxime.belair(a)canonical.com> apparmor: propagate -ENOMEM correctly in unpack_table Jijie Shao <shaojijie(a)huawei.com> net: hns3: improve the unused_tuple parameter setting Agalakov Daniil <ade(a)amicon.ru> e1000e: limit endianness conversion to boundary words Raf Dickson <rafdog35(a)gmail.com> vsock: use sk_acceptq_is_full() helper in all transports Ido Schimmel <idosch(a)nvidia.com> ipv6: Honor oif when choosing nexthop for locally generated traffic Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ptp: ocp: add shutdown callback Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Rosen Penev <rosenp(a)gmail.com> sparc64: uprobes: add missing break Chen Zhang <zhangchen01(a)kylinos.cn> Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d923 Nils Helmig <nils.helmig(a)web.de> Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: spdif: Restore regcache cache-only mode on sync failure bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: rockchip_pdm: Reorder clock enable sequence bui duc phuc <phucduc.bui(a)gmail.com> ASoC: rockchip: rockchip_pdm: Handle runtime PM resume failures in set_fmt Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: Add 50 ms delay before MAC init on BlazarIW Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: L2CAP: validate connectionless PSM length Cris <cxs1494089474(a)gmail.com> Bluetooth: btusb: Add support for TP-Link TL-UB250 Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btusb: MT7925: Add VID/PID 0e8d/8c38 Rong Zhang <i(a)rong.moe> Bluetooth: btmtk: Disable remote wakeup for MT7922/MT7925 Hrvoje Nuic <hrvoje.nuic(a)gmail.com> Bluetooth: btusb: Add Mercusys MA530 for Realtek RTL8761BUV Chen Zhang <zhangchen01(a)kylinos.cn> Bluetooth: btusb: Add Realtek RTL8922AE VID/PID 0bda/d922 Ravindra <ravindra(a)intel.com> Bluetooth: btusb: Add support for Intel Lizard Peak 2 (0x8087:0x0040) Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btusb: MT7922: Add VID/PID 0e8d/223c Vadim Fedorenko <vadim.fedorenko(a)linux.dev> spi: xilinx: let transfers timeout in case of no IRQ Potin Lai <potin.lai.pt(a)gmail.com> hwmon: (pmbus/lm25066) Fix PMBus coefficients for LM5064/5066/5066i Tze Yee Ng <tze.yee.ng(a)altera.com> dmaengine: dw-axi-dmac: fix PM for system sleep and channel alloc Adrian Ng Ho Yin <adrianhoyin.ng(a)altera.com> dmaengine: altera-msgdma: Use memcpy_toio for descriptor FIFO writes Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> PCI: Avoid SBR for Qualcomm WCN6855/WCN7850 WiFi, SDX62/SDX65 modems Armin Wolf <W_Armin(a)gmx.de> hwmon: (dell-smm) Add Dell Latitude 7530 to fan control whitelist Dave Carey <carvsdriver(a)gmail.com> HID: multitouch: Honor ContactCount for Yoga Book 9 to suppress ghost contacts Yuho Choi <dbgh9129(a)gmail.com> sctp: Unwind address notifier registration on failure Mohamed Khalfella <mkhalfella(a)purestorage.com> nvme-fc: Do not cancel requests in io target before it is initialized Nikolay Metchev <nikolaymetchev(a)gmail.com> platform/x86: intel-hid: Add HP ProBook x360 440 G1 to button_array_table Xu Rao <raoxu(a)uniontech.com> ata: libata-pmp: add JMicron JMS562 quirk Moritz Baron <moritz.baron(a)stud.uni-hannover.de> ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14IRH8 Furst Blumier <seal(a)furst.blue> ALSA: hda/realtek: Add quirk for HP 255 15.6 inch G9 Notebook PC Vamsi Attunuru <vattunuru(a)marvell.com> vdpa/octeon_ep: Use 4 bytes for mailbox signature Evgenii Burenchev <evg28bur(a)yandex.ru> vdpa/ifcvf: handle dev_set_name() failure in ifcvf_vdpa_dev_add() Guangshuo Li <lgs201920130244(a)gmail.com> net: lan966x: restore RX state on reload failure George Moussalem <george.moussalem(a)outlook.com> net: dsa: qca8k: Add support for force mode for fixed link topology Ben Maurer <bmaurer(a)meta.com> btrfs: use lockless read in nr_cached_objects shrinker callback Anand Jain <asj(a)kernel.org> btrfs: use on-disk uuid for s_uuid in temp_fsid mounts Kory Maincent <kory.maincent(a)bootlin.com> hwmon: (adt7462) Add of_match_table to support devicetree Shubham Chakraborty <chakrabortyshubham66(a)gmail.com> hwmon: (raspberrypi) Fix delayed-work teardown race Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> PCI: Avoid FLR for MediaTek MT7925 WiFi Lu Yao <yaolu(a)kylinos.cn> fbcon: don't suspend/resume when vc is graphics mode KangNing Liao <lkangn.kernel(a)gmail.com> btrfs: protect sb_write_pointer() with invalidate lock Breno Leitao <leitao(a)debian.org> netconsole: take target_cleanup_list_lock in drop_netconsole_target() Jiajia Liu <liujiajia(a)kylinos.cn> wifi: mt76: transform aspm_conf for pci_disable_link_state Javier Tia <floss(a)jetm.me> wifi: mt76: mt7925: add 320MHz bandwidth to bss_rlm_tlv Javier Tia <floss(a)jetm.me> wifi: mt76: mt7925: populate EHT 320MHz MCS map in sta_rec Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7925: add Netgear A8500 USB device ID Luis de Carlos <reskoldo73(a)gmail.com> platform/x86: msi-ec: Add support for MSI Pulse GL66 12th Gen Javier Tia <floss(a)jetm.me> wifi: mt76: mt7925: handle 320MHz bandwidth in RXV and TXS Gleb Sonichev <sonichev555(a)gmail.com> platform/x86: dell-laptop: add Inspiron N5110 to touchpad LED quirk table Chuck Lever <chuck.lever(a)oracle.com> tls: Flush backlog before waiting for a new record Rosen Penev <rosenp(a)gmail.com> net: ibm: emac: mal: fix potential system hang in mal_remove() Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: quiesce DMA before freeing resources Al Viro <viro(a)zeniv.linux.org.uk> configfs_depend_prep(): pass configfs_dirent instead of dentry Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/mlx5: Create ODP EQ for non-pinned dmabuf MRs Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Add request-pool slack for delayed recycling Aurelien DESBRIERES <aurelien(a)hackers.camp> RDMA/rtrs-srv: Fix integer underflow in process_read and process_write Tuo Li <islituo(a)gmail.com> ASoC: mediatek: mt8365-afe-pcm: fix possible NULL-pointer dereferences in mt8365_afe_suspend() Dai Ngo <dai.ngo(a)oracle.com> NFS: fix eof updates after NFSv4.2 fallocate/zero-range Zhang Cen <rollkingzzc(a)gmail.com> btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF ZhengYuan Huang <gality369(a)gmail.com> btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk() Osama Abdelkader <osama.abdelkader(a)gmail.com> riscv: panic if IRQ handler stacks cannot be allocated Rosen Penev <rosenp(a)gmail.com> netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() Ruoyu Wang <ruoyuw560(a)gmail.com> ALSA: es18xx: check control allocation before private data setup Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> net: microchip: sparx5: clean up PSFP resources on flower setup failure Maoyi Xie <maoyixie.tju(a)gmail.com> hsr: broadcast netlink notifications in the device's net namespace Guangshuo Li <lgs201920130244(a)gmail.com> net: cpsw_new: unregister devlink on port registration failure Dawei Feng <dawei.feng(a)seu.edu.cn> bpf: NUL-terminate replaced sysctl value Li RongQing <lirongqing(a)baidu.com> RDMA/mlx5: Fix state and counter desync on loopback enable failure Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz() Thiyagarajan Pandiyan <thiyagarajan(a)aerlync.com> wifi: nl80211: Increase ie_len size to prevent truncated IEs in new peer notifications Runyu Xiao <runyu.xiao(a)seu.edu.cn> ipv6: use READ_ONCE() for bindv6only default in inet6_create() Yongqiang Sun <Yongqiang.Sun(a)amd.com> drm/amdkfd: Unwind debug trap enable on copy_to_user failure Rosen Penev <rosenp(a)gmail.com> ipmi: si: Use platform_get_irq_optional() to retrieve interrupt Andrei Faleichyk <andrei.faleichyk(a)noogadev.com> ALSA: hda/realtek: Add quirk for ASUS VivoBook X509DAP Michael Walle <mwalle(a)kernel.org> clk: keystone: don't cache clock rate Shay Drory <shayd(a)nvidia.com> net/mlx5: E-Switch, align disable sequence with switchdev-to-legacy transition Cyrill Gorcunov <gorcunov(a)gmail.com> RDMA/irdma: Fix typo in SQ completions generation Shay Drory <shayd(a)nvidia.com> net/mlx5e: Verify unique vhca_id count instead of range Shiwu Zhang <shiwu.zhang(a)amd.com> drm/amdgpu: fix buffer overflow during vBIOS update Asad Kamal <asad.kamal(a)amd.com> drm/amd/pm: bound pp_dpm_set_pp_table() memcpy Stanley.Yang <Stanley.Yang(a)amd.com> drm/amdgpu: harden FRU PIA parsing with bounded helpers Alysa Liu <Alysa.Liu(a)amd.com> drm/amdkfd: fix UAF race in destroy_queue_cpsch Samson Tam <Samson.Tam(a)amd.com> drm/amd/display: Check for sharpening case when calculating max vtaps for scaler Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: Prevent queuing new commands if xhci is inaccessible Michal Pecio <michal.pecio(a)gmail.com> usb: xhci: Improve Soft Retries after short transfers Priyansh Jain <priyansh.jain(a)oss.qualcomm.com> thermal/drivers/qcom/tsens: Atomic temperature read with hardware-guided retries Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix handling of NAPI on the remove path David Yang <mmyangfl(a)gmail.com> net: dsa: sja1105: flower: reject cross-chip redirect Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix the error path in dpaa2_switch_rx() Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: rework FDB management on the bridge leave path Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: seq: oss: Reject reads that cannot fit the next event Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: codecs: rk3328: Use managed GPIO and clock helpers Alessandro Schino <7991aleschino(a)gmail.com> ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e() ZhengYuan Huang <gality369(a)gmail.com> fs/ntfs3: validate index entry key bounds Yao Sang <sangyao(a)kylinos.cn> nvme: refresh multipath head zoned limits from path limits ZhengYuan Huang <gality369(a)gmail.com> fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib Adriano Vero <adri.vero.dev(a)gmail.com> powerpc/fadump: Add timeout to RTAS busy-wait loops Simon Xue <xxm(a)rock-chips.com> iommu/rockchip: disable fetch dte time limit Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> net: wwan: t7xx: Add delay between MD and SAP suspend Wentao Liang <vulab(a)iscas.ac.cn> net: qrtr: fix node refcount leak on ctrl packet alloc failure Chen Pei <cp0613(a)linux.alibaba.com> ACPI: PCI: Clear _DEP dependencies after PCI root bridge attach Chen Pei <cp0613(a)linux.alibaba.com> ACPI: scan: Honor _DEP for ACPI0016 PCI/CXL host bridge liyouhong <liyouhong(a)kylinos.cn> ata: ahci: fail probe if BAR too small for claimed ports Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: pcm3168a: Drop CONFIG_PM-conditional preproc directive Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: return error code to consumers on failures Miaoqing Pan <miaoqing.pan(a)oss.qualcomm.com> wifi: ath11k: fix invalid data access in ath11k_dp_rx_h_undecap_nwifi Rosen Penev <rosenp(a)gmail.com> net: ibm: emac: Reserve VLAN header in MJS limit Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Also reset {insn,data}_cur on realloc failure Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: switch to non-devm request_threaded_irq() Rik van Riel <riel(a)surriel.com> perf/ftrace: Fix WARNING in __unregister_ftrace_function Miao Li <limiao(a)kylinos.cn> iio: light: stk3310: Deal with the ps interrupt issue in PM Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> mmc: renesas_sdhi: Add OF entry for RZ/G2E SoC Karl Mehltretter <kmehltretter(a)gmail.com> tracing: Disable KCOV instrumentation for trace_irqsoff.o Ion Agorria <ion(a)agorria.com> ARM: tegra: p880: Lower CPU thermal limit Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> mmc: renesas_sdhi: Add OF entry for RZ/G2N SoC Osama Abdelkader <osama.abdelkader(a)gmail.com> mmc: davinci: fix mmc_add_host order in probe Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: only handle alert events when the peripheral is attached Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: page poisoning fix Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: dmi-quirks: Disable ghost Realtek devices Kartik Rajput <kkartik(a)nvidia.com> soc/tegra: fuse: Register nvmem lookups at probe Tiezhu Yang <yangtiezhu(a)loongson.cn> libbpf: Add __NR_bpf definition for LoongArch Timur Tabi <ttabi(a)nvidia.com> drm/nouveau/bios: skip the IFR header if present Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Complete coredump handling Alexandre Courbot <acourbot(a)nvidia.com> scripts: modpost: detect and report truncated buf_printf() output shayderrr <darknessshayder(a)gmail.com> host1x: bus: Fix missing ops null check in error teardown Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> pinctrl: renesas: rzv2m: Use -ENOTSUPP instead of -EOPNOTSUPP Wei Qisen <weixiansen574(a)163.com> net: sfp: add quirk for OEM 2.5G optical modules Viacheslav Dubeyko <slava(a)dubeyko.com> hfs: rework hfsplus_readdir() logic ikaros <void0red(a)gmail.com> ACPICA: add boundary checks in two places ikaros <void0red(a)gmail.com> ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() Weiming Shi <bestswngs(a)gmail.com> ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package() ikaros <void0red(a)gmail.com> ACPICA: Enhance OEM ID and Table ID validation in acpi_ex_load_table_op() ikaros <void0red(a)gmail.com> ACPICA: Add validation for node in acpi_ns_build_normalized_path() ikaros <void0red(a)gmail.com> ACPICA: Add package limit checks in parser functions ikaros <void0red(a)gmail.com> ACPICA: validate handler object type in two places ikaros <void0red(a)gmail.com> ACPICA: Improve argument parsing in acpi_ps_get_next_simple_arg() ikaros <void0red(a)gmail.com> ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op) ikaros <void0red(a)gmail.com> ACPICA: Prevent adding invalid references ikaros <void0red(a)gmail.com> ACPICA: validate byte_count in acpi_ps_get_next_package_length() ikaros <void0red(a)gmail.com> ACPICA: add boundary checks in acpi_ps_get_next_field() ikaros <void0red(a)gmail.com> ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() ikaros <void0red(a)gmail.com> ACPICA: Fix condition check in acpi_ps_parse_loop() Ivan Lipski <ivan.lipski(a)amd.com> drm/amd/display: Initialize dsc_caps to 0 Jeremy Klarenbeek <jeremy.klarenbeek99(a)gmail.com> drm/amd/pm/si: Fix updating clock limits from power states Imre Deak <imre.deak(a)intel.com> drm/dp: Add DSC virtual DPCD quirk for Realtek MST branch device Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> net: thunderx: fix PTP device ref leak in nicvf_probe() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: addrconf: fix temp address generation after prefix deprecation Luka Gejak <luka.gejak(a)linux.dev> net: hsr: require valid EOT supervision TLV Uwe Küchler <uwe(a)kuechler.org> ALSA: usb-audio: Add quirk for Novation Mininova Mostafa Saleh <smostafa(a)google.com> irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed Stepan Ionichev <sozdayvek(a)gmail.com> iio: adc: qcom-spmi-iadc: balance enable_irq_wake() on driver unbind Rosen Penev <rosenp(a)gmail.com> mips: cps: Assemble jr.hb with an R2 ISA level Dario Binacchi <dario.binacchi(a)amarulasolutions.com> drm/panel: simple: Add AM-1280800W8TZQW-T00H Sumeet Pawnikar <sumeet4linux(a)gmail.com> powercap: intel_rapl: Fix memory leak in rapl_add_package_cpuslocked() Daniel Lezcano <daniel.lezcano(a)oss.qualcomm.com> thermal/drivers/tegra/soctherma: Switch to devm cooling device registration Adrian Ng Ho Yin <adrian.ho.yin.ng(a)altera.com> clk: socfpga: agilex: implement l3_main_free_clk Heiko Carstens <hca(a)linux.ibm.com> s390/zcore: Removed unused variables Jiayuan Chen <jiayuan.chen(a)linux.dev> rds: annotate data-race around rs_seen_congestion Maoyi Xie <maoyixie.tju(a)gmail.com> rds: filter RDS_INFO_* getsockopt by caller's netns Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: seq: Remove arbitrary prioq insertion limit Chenguang Zhao <zhaochenguang(a)kylinos.cn> netlabel: fix IPv6 unlabeled address add error handling Dian-Syuan Yang <dian_syuan0116(a)realtek.com> wifi: rtw89: pci: enable LTR based on pcie control register Zqiang <qiang.zhang(a)linux.dev> rcu-tasks: Fix possible boot-time tests failed for the call_rcu_tasks() Venkat Rao Bagalkote <venkat88(a)linux.ibm.com> char/nvram: Remove redundant nvram_mutex Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - remove sysfs group before hwrng Christian Marangi <ansuelsmth(a)gmail.com> usb: host: add ARCH_AIROHA in XHCI MTK dependency Marco Felsch <m.felsch(a)pengutronix.de> serial: 8250: fix possible ISR soft lockup Maoyi Xie <maoyixie.tju(a)gmail.com> usb: gadget: aspeed_udc: avoid past-the-end iterator in dequeue Dave Carey <carvsdriver(a)gmail.com> USB: cdc-acm: start bulk-IN polling when ALWAYS_POLL_CTRL is set Stepan Ionichev <sozdayvek(a)gmail.com> usb: gadget: goku_udc: avoid NULL deref of dev->driver in INT_USBRESET log Oliver Neukum <oneukum(a)suse.com> usb: core: hcd: fix possible deadlock in rh control transfers Adrian Wowk <dev(a)adrianwowk.com> usbip: vhci_hcd: fix NULL deref in status_show_vhci Nikhil Chatterjee <nikhilc1527(a)gmail.com> HID: bpf: Add Huion Inspiroy Frego M button quirk Christoph Hellwig <hch(a)lst.de> isofs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> omfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> hpfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> jfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> qnx4: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> minix: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> bfs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> affs: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> ntfs3: handle set_blocksize failures Christoph Hellwig <hch(a)lst.de> befs: handle set_blocksize failures Thomas Lin <thomas_lin(a)lecomputing.com> spi: dw-mmio: Add ACPI ID LECA0002 for LECARC SoCs Allison Henderson <achender(a)kernel.org> net/rds: Don't sleep inside rds_ib_conn_path_shutdown Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: make cl->quantum lockless Eric Dumazet <edumazet(a)google.com> net: bridge: remove stale rcu_barrier() in br_multicast_dev_del() Jan Volckaert <janvolck(a)gmail.com> net: usb: qmi_wwan: add MeiG SRM813Q Maurizio Lombardi <mlombard(a)redhat.com> nvme-core: align fabrics_q teardown with admin_q in nvme_free_ctrl Yury Norov <ynorov(a)nvidia.com> bitfield: wire __bf_shf to __builtin_ctzll Gil Fine <gil.fine(a)linux.intel.com> thunderbolt: Verify Router Ready bit is set after router enumeration Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed Gil Fine <gil.fine(a)linux.intel.com> thunderbolt: Increase timeout for Configuration Ready bit Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Validate SENSOR_UPDATE payload size Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> thunderbolt: Improve multi-display DisplayPort tunnel allocation Pooja Katiyar <pooja.katiyar(a)intel.com> thunderbolt: Don't access path config space on Lane 1 adapters in tb_switch_reset_host() Ido Schimmel <idosch(a)nvidia.com> bridge: Add missing READ_ONCE() annotations around FDB destination port Candice Li <candice.li(a)amd.com> drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw Pierre Barre <pierre(a)barre.sh> 9p: use kvzalloc for readdir buffer Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Populate FW common context ID before passing to the FW Leonardo Bras <leo.bras(a)arm.com> arm64/daifflags: Make local_daif_*() helpers __always_inline Pierre Barre <pierre(a)barre.sh> 9p: invalidate readdir buffer on seek Anna Maniscalco <anna.maniscalco2000(a)gmail.com> iommu: arm-smmu-qcom: Ensure smmu is powered up in set_ttbr0_cfg Andrea Righi <arighi(a)nvidia.com> sched/fair: Reject misfit pulls onto busy SMT siblings on asym-capacity Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usx2y: Drain pending US-428 pipe-4 output commands David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds on allocate_doorbell Sunday Clement <Sunday.Clement(a)amd.com> drm/amdkfd: Fix OOB memory exposure in get_wave_state() David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds for allocate_sdma_queue restore_sdma_id Bjorn Helgaas <helgaas(a)kernel.org> PCI: Wait for device readiness after D3hot -> D0uninitialized transition Joonwon Kang <joonwonkang(a)google.com> mailbox: Make mbox_send_message() return error code when tx fails Christoph Hellwig <hch(a)lst.de> iomap: don't make REQ_POLLED imply REQ_NOWAIT Luca Leonardo Scorcia <l.scorcia(a)gmail.com> drm/mediatek: dsi: Add compatible for mt8167-dsi Chenguang Zhao <zhaochenguang(a)kylinos.cn> RDMA/mlx5: Use QP port when decoding responder CQEs Alessandro Baldi <baldovic(a)virgilio.it> media: imon: Add iMON VFD HID OEM v1.2 key mappings Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-ecc - add support for atecc608b Bard Liao <yung-chuan.liao(a)linux.intel.com> ASoC: Intel: sof_sdw: append dai type to dai link name unconditionally Lukas Wunner <lukas(a)wunner.de> crypto: ecc - Unbreak the build on arm with CONFIG_KASAN_STACK=y Kumar Meiyappan <kumar.meiyappan(a)microchip.com> scsi: pm8001: Reject non-fatal dump when controller is crashed Kumar Meiyappan <kumar.meiyappan(a)microchip.com> scsi: pm8001: Reject firmware update in fatal error state Alexey Klimov <alexey.klimov(a)linaro.org> clk: samsung: exynos850: mark APM I3C clocks as critical Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> soundwire: intel: Move suspend tracking from trigger to pm suspend Pengpeng Hou <pengpeng(a)iscas.ac.cn> drivers/of: validate status properties in reconfig state changes Stefan Berger <stefanb(a)linux.ibm.com> integrity: Check for NULL returned by asymmetric_key_public_key Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: add support for RTL8367SB Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: phy: check length before parsing PHY status IE Dave Carey <carvsdriver(a)gmail.com> HID: multitouch: Fix Yoga Book 9 14IAH10 touchscreen misclassification Arash Golgol <arash.golgol(a)gmail.com> media: video-i2c: use vb2_video_unregister_device on driver removal Ricardo Ribalda <ribalda(a)chromium.org> media: chips-media: wave5: Add range checks for dec_output_info Sophie D <patches(a)scd31.com> drm/gud: Add RCade Display Adapter VID/PID pair chunzhi.lin <linchunzhi0(a)gmail.com> net: phy: motorcomm: use device properties for firmware tuning Viacheslav Dubeyko <slava(a)dubeyko.com> hfsplus: rework hfsplus_readdir() logic Florian Eckert <fe(a)dev.tdt.de> PCI: intel-gw: Enable clock before PHY init Tom Chung <chiahsuan.chung(a)amd.com> drm/amd/display: Fix CRC open failure during active rendering Brodie Abrew <brodie_abrew(a)selinc.com> platform/x86: sel3350-platform: Retain LED state on load and unload Stepan Ionichev <sozdayvek(a)gmail.com> mmc: davinci: avoid NULL deref of host->data in IRQ handler Shawn Lin <shawn.lin(a)rock-chips.com> mmc: core: Add validation for host-provided max_segs Tzung-Bi Shih <tzungbi(a)kernel.org> platform/chrome: Resolve kb_wake_angle visibility race Yevgeny Kliteynik <kliteyn(a)nvidia.com> net/mlx5: HWS, Handle destroying table that has a miss table Mark Pearson <mpearson-lenovo(a)squebb.ca> watchdog: lenovo_se10_wdt: Fix use-after-free and resource leak risk Ranjani Vaidyanathan <ranjani.vaidyanathan(a)nxp.com> watchdog: imx7ulp_wdt: Keep WDOG running until A55 enters WFI on i.MX94 Mark Pearson <mpearson-lenovo(a)squebb.ca> watchdog: lenovo_se10_wdt: Add support for SE10 Gen 2 platform Ethan Nelson-Moore <enelsonmoore(a)gmail.com> ASoC: ti: omap3pandora: update board check to use DT compatible Arnd Bergmann <arnd(a)arndb.de> media: qcom: camss: avoid format string warning Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store() Ziyi Guo <n7l8m4(a)u.northwestern.edu> dlm: add usercopy whitelist to dlm_cb cache Parth Pancholi <parth.pancholi(a)toradex.com> drm/bridge: tc358768: Set pre_enable_prev_first for reverse order Geert Uytterhoeven <geert+renesas(a)glider.be> clk: renesas: cpg-mssr: Add number of clock cells check Thorsten Blum <thorsten.blum(a)linux.dev> crypto: omap - add omap_des_unregister_algs helper Ruoyu Wang <ruoyuw560(a)gmail.com> crypto: ixp4xx - fix buffer chain unwind on allocation failure Justin Lai <justinlai0215(a)realtek.com> rtase: Fix flow control configuration Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: explicitly disable FTM responder on AP stop Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> media: em28xx-video: fix missing res_free() on init_usb_xfer failure Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: enable .rmu_disable() for 6320 family Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: define .pot_clear() for 6321 Ben Reed <Ben.Reed(a)microchip.com> PCI: switchtec: Add Gen6 Device IDs Marek Behún <kabel(a)kernel.org> net: dsa: mv88e6xxx: fix number of g1 interrupts for 6320 family Zhaoyang Yu <2426767509(a)qq.com> media: dm1105: fix missing error check for dma_alloc_coherent David Heidelberg <david(a)ixit.cz> drm/panel: Enable GPIOLIB for panels which uses functions from it Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Prefer ROM BAR for default VGA device Ovidiu Bunea <ovidiu.bunea(a)amd.com> drm/amd/display: Find link encoder for flexible DIG mapping cases Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> thunderbolt: Don't create multiple DMA tunnels on firmware connection manager Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Set tb->root_switch to NULL when domain is stopped Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Keep the domain reference while processing hotplug Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Keep XDomain reference during the lifetime of a service Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Release request if tb_cfg_request() fails in __tb_xdomain_response() Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Don't disable lane adapter if XDomain lane bonding isn't possible Gil Fine <gil.fine(a)linux.intel.com> thunderbolt: Avoid reserved fields in path config space for USB4 routers Vineeth Vijayan <vneethv(a)linux.ibm.com> s390/cio: Purge based on the cdev's online status Erni Sri Satya Vennela <ernis(a)linux.microsoft.com> net: mana: hardening: Reject zero max_num_queues from MANA_QUERY_VPORT_CONFIG Riccardo Boninsegna <rboninsegna2(a)gmail.com> media: rc: mceusb: Add support for 04eb:e033 Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> spi: spi-qcom-qspi: Fix incomplete error handling in runtime PM Brandon Brnich <b-brnich(a)ti.com> media: chips-media: wave5: Fix Reports from Kernel Lock Validator Pengpeng Hou <pengpeng(a)iscas.ac.cn> soundwire: validate DT compatible before parsing it Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: intel_auxdevice: Add cs42l43b to wake_capable_list Danielle Ratson <danieller(a)nvidia.com> bridge: Do not suppress ARP probes and DAD NS unconditionally Siew Chin Lim <elly.siew.chin.lim(a)intel.com> firmware: stratix10-svc: change get provision data to async SMC call Marco Elver <elver(a)google.com> kcsan: Silence -Wmaybe-uninitialized when calling __kcsan_check_access() Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl-asoc-card: reduce WM8904 PLL ratio to meet frequency limit Dian-Syuan Yang <dian_syuan0116(a)realtek.com> wifi: rtw89: disable CSI STBC for VHT 160MHz Panagiotis Petrakopoulos <npetrakopoulos2003(a)gmail.com> wifi: rtw88: Add NULL check for chip->edcca_th in rtw_fw_adaptivity_result() Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: always allow transmitting null-data on TXQs Johannes Berg <johannes.berg(a)intel.com> wifi: nl80211: reject beacons with bad HE operation Viacheslav Dubeyko <slava(a)dubeyko.com> hfsplus: fix issue of direct writes beyond end-of-file Yuqi Xu <xuyuqiabc(a)gmail.com> wifi: cfg80211: reject duplicate wiphy cipher suite entries Lukas Wunner <lukas(a)wunner.de> PCI: Stop setting cached power state to 'unknown' on unbind Thomas Weißschuh <linux(a)weissschuh.net> tools/nolibc: avoid call to wcslen() in _start_c() inserted by clang Hirokazu Honda <hiroh(a)chromium.org> tee: optee: Allow MT_NORMAL_TAGGED shared memory Xu Yang <xu.yang_2(a)nxp.com> usb: gadget: udc: skip pullup() if already connected Goldwyn Rodrigues <rgoldwyn(a)suse.de> ima: return error early if file xattr cannot be changed Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate write errors in generic mixer put callbacks Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> pinctrl: renesas: rzg2l: Handle RZ/V2H(P) IOLH configuration in PM cache Kevin Tung <kevin.tung.openbmc(a)gmail.com> iio: adc: rtq6056: add i2c_device_id support Jie Wang <jie.wang(a)intel.com> gfs2: move quota_init qc iterator increment Jie Wang <jie.wang(a)intel.com> gfs2: fix quota init duplicate scan Lijo Lazar <lijo.lazar(a)amd.com> drm/amd/pm: Check SMUv13.0.6/12 metrics integrity Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/panel: jadard-jd9365da-h3: set prepare_prev_first Dominik Kaszewski <dominik.kaszewski(a)amd.com> drm/amd/display: Fix DPMS using partially updated pipe context Tommaso Merciai <tommaso.merciai.xr(a)bp.renesas.com> drm: rz-du: Ensure correct suspend/resume ordering with VSP Ioana Ciornei <ioana.ciornei(a)nxp.com> bus: fsl-mc: wait for the MC firmware to complete its boot Boris Brezillon <boris.brezillon(a)collabora.com> drm/gem: Consider GEM object reclaimable if shrinking fails Abdifatah Suruur <suruurism(a)gmail.com> ksmbd: fix use-after-free in oplock break notification ------------- Diffstat: Documentation/filesystems/nfs/reexport.rst | 10 +- Documentation/hwmon/hwmon-kernel-api.rst | 3 + Documentation/netlink/specs/rt_link.yaml | 2 + Documentation/networking/ethtool-netlink.rst | 2 +- Documentation/networking/scaling.rst | 15 +- Documentation/scheduler/sched-ext.rst | 2 +- Documentation/sound/designs/midi-2.0.rst | 11 + MAINTAINERS | 4 +- Makefile | 4 +- arch/arm/boot/dts/nvidia/tegra30-lg-p880.dts | 13 + arch/arm/kernel/hw_breakpoint.c | 11 +- arch/arm/mach-ux500/cpu-db8500.c | 6 +- arch/arm/mm/cache-feroceon-l2.c | 2 +- arch/arm/mm/cache-tauros2.c | 2 +- arch/arm/mm/fault.c | 12 +- arch/arm64/boot/dts/qcom/sc8180x.dtsi | 16 +- arch/arm64/boot/dts/qcom/sdm845.dtsi | 64 +-- arch/arm64/boot/dts/qcom/sm8150.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8250.dtsi | 12 +- arch/arm64/boot/dts/qcom/sm8350.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8450.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8550.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8650.dtsi | 8 +- arch/arm64/include/asm/daifflags.h | 10 +- arch/arm64/include/asm/fixmap.h | 6 +- arch/arm64/include/asm/kprobes.h | 6 + arch/arm64/kernel/machine_kexec.c | 3 +- arch/arm64/kernel/probes/kprobes.c | 23 +- arch/mips/kernel/cps-vec.S | 6 + arch/powerpc/kernel/eeh_driver.c | 2 - arch/powerpc/kexec/file_load_64.c | 2 +- arch/powerpc/kvm/book3s_hv.c | 4 +- arch/powerpc/perf/core-book3s.c | 8 +- arch/powerpc/platforms/ps3/repository.c | 5 +- arch/powerpc/platforms/pseries/kexec.c | 13 +- arch/powerpc/platforms/pseries/rtas-fadump.c | 80 +-- arch/powerpc/platforms/pseries/rtas-fadump.h | 6 + arch/riscv/kernel/irq.c | 22 +- arch/s390/boot/ipl_parm.c | 26 +- arch/s390/boot/physmem_info.c | 2 +- arch/s390/crypto/aes_s390.c | 87 ++-- arch/s390/kernel/ipl.c | 12 +- arch/s390/kernel/perf_pai_crypto.c | 3 +- arch/s390/kernel/perf_pai_ext.c | 3 +- arch/s390/kernel/vtime.c | 25 +- arch/s390/net/bpf_jit_comp.c | 11 - arch/sparc/Kconfig | 1 + arch/sparc/kernel/uprobes.c | 1 + arch/x86/crypto/aria-aesni-avx2-asm_64.S | 6 + arch/x86/crypto/aria-gfni-avx512-asm_64.S | 3 + arch/x86/events/amd/brs.c | 3 +- arch/x86/events/amd/ibs.c | 3 +- arch/x86/events/amd/lbr.c | 3 +- arch/x86/events/core.c | 5 +- arch/x86/events/intel/core.c | 4 +- arch/x86/events/intel/ds.c | 208 +++++--- arch/x86/events/intel/lbr.c | 3 +- arch/x86/events/perf_event.h | 14 +- arch/x86/include/asm/alternative.h | 2 +- arch/x86/include/asm/barrier.h | 10 +- arch/x86/include/asm/cmpxchg.h | 4 +- arch/x86/include/asm/cmpxchg_32.h | 4 +- arch/x86/include/asm/edac.h | 2 +- arch/x86/include/asm/perf_event.h | 16 +- arch/x86/include/asm/pgtable.h | 2 +- arch/x86/include/asm/sync_bitops.h | 12 +- arch/x86/kvm/svm/sev.c | 243 +++++---- arch/x86/kvm/svm/svm.c | 33 +- arch/x86/kvm/svm/svm.h | 23 +- block/blk-cgroup.c | 13 +- crypto/Makefile | 5 + drivers/accel/ivpu/ivpu_fw_log.c | 87 ++-- drivers/accel/ivpu/ivpu_gem.h | 14 +- drivers/accel/ivpu/ivpu_ipc.c | 7 +- drivers/accel/qaic/qaic_control.c | 46 +- drivers/acpi/acpi_apd.c | 7 + drivers/acpi/acpi_tad.c | 188 ++++--- drivers/acpi/acpica/dsmethod.c | 43 ++ drivers/acpi/acpica/evhandler.c | 11 + drivers/acpi/acpica/exconfig.c | 26 +- drivers/acpi/acpica/exoparg3.c | 2 +- drivers/acpi/acpica/nsnames.c | 6 + drivers/acpi/acpica/nsprepkg.c | 7 + drivers/acpi/acpica/nsxfname.c | 4 + drivers/acpi/acpica/psargs.c | 134 ++++- drivers/acpi/acpica/psloop.c | 30 +- drivers/acpi/acpica/psparse.c | 14 + drivers/acpi/acpica/utcopy.c | 10 +- drivers/acpi/acpica/utresrc.c | 30 ++ drivers/acpi/apei/ghes.c | 24 +- drivers/acpi/pci_root.c | 4 + drivers/acpi/processor_driver.c | 2 +- drivers/acpi/scan.c | 1 + drivers/ata/ahci.c | 22 + drivers/ata/libata-core.c | 10 + drivers/ata/libata-pmp.c | 7 +- drivers/base/core.c | 91 +++- drivers/block/sunvdc.c | 17 + drivers/block/zram/zram_drv.c | 62 +-- drivers/block/zram/zram_drv.h | 5 +- drivers/bluetooth/btintel.c | 39 +- drivers/bluetooth/btintel_pcie.c | 22 +- drivers/bluetooth/btmtk.c | 11 + drivers/bluetooth/btmtk.h | 1 + drivers/bluetooth/btqcomsmd.c | 6 +- drivers/bluetooth/btrtl.c | 21 +- drivers/bluetooth/btusb.c | 47 +- drivers/bluetooth/hci_mrvl.c | 3 +- drivers/bus/fsl-mc/fsl-mc-bus.c | 46 ++ drivers/char/ipmi/ipmi_si_platform.c | 5 +- drivers/char/nvram.c | 16 +- drivers/char/virtio_console.c | 21 +- drivers/clk/keystone/sci-clk.c | 8 + drivers/clk/renesas/renesas-cpg-mssr.c | 3 + drivers/clk/samsung/clk-exynos850.c | 5 +- drivers/clk/socfpga/clk-agilex.c | 2 + drivers/clk/ux500/clk-prcmu.c | 20 +- drivers/clk/ux500/u8500_of_clk.c | 2 +- drivers/clocksource/timer-orion.c | 2 +- drivers/cpufreq/apple-soc-cpufreq.c | 36 +- drivers/cpufreq/cpufreq.c | 6 +- drivers/cpuidle/cpuidle-ux500.c | 6 +- drivers/crypto/atmel-ecc.c | 11 +- drivers/crypto/atmel-sha204a.c | 3 +- drivers/crypto/ccp/sev-dev.c | 2 +- drivers/crypto/intel/iaa/iaa_crypto_main.c | 36 +- drivers/crypto/intel/ixp4xx/ixp4xx_crypto.c | 25 +- drivers/crypto/omap-des.c | 26 +- .../crypto/virtio/virtio_crypto_akcipher_algs.c | 81 ++- .../crypto/virtio/virtio_crypto_skcipher_algs.c | 13 +- drivers/cxl/core/Makefile | 2 + drivers/cxl/core/core.h | 12 + drivers/cxl/core/pci.c | 318 ------------ drivers/cxl/core/ras.c | 186 +++++++ drivers/cxl/core/ras_rch.c | 136 +++++ drivers/cxl/pci.c | 1 - drivers/dma/altera-msgdma.c | 24 +- drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c | 11 +- drivers/edac/amd64_edac.c | 2 + drivers/edac/edac_device_sysfs.c | 11 +- drivers/edac/igen6_edac.c | 27 +- drivers/firmware/arm_scmi/base.c | 15 +- drivers/firmware/arm_scmi/sensors.c | 10 +- drivers/firmware/efi/cper.c | 5 +- drivers/firmware/efi/cper_cxl.c | 38 +- drivers/firmware/efi/cper_cxl.h | 54 +- drivers/firmware/stratix10-svc.c | 4 +- drivers/gpio/gpio-dwapb.c | 17 + drivers/gpio/gpio-pisosr.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 23 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 + drivers/gpu/drm/amd/amdgpu/amdgpu_fru_eeprom.c | 97 ++-- drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 34 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.h | 2 +- drivers/gpu/drm/amd/amdgpu/psp_v11_0.c | 8 +- drivers/gpu/drm/amd/amdgpu/psp_v12_0.c | 8 +- drivers/gpu/drm/amd/amdgpu/psp_v13_0.c | 14 +- drivers/gpu/drm/amd/amdgpu/psp_v13_0_4.c | 14 +- drivers/gpu/drm/amd/amdgpu/psp_v14_0.c | 14 +- drivers/gpu/drm/amd/amdgpu/psp_v3_1.c | 8 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 10 +- drivers/gpu/drm/amd/amdkfd/kfd_debug.c | 6 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 17 +- drivers/gpu/drm/amd/amdkfd/kfd_doorbell.c | 8 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 11 +- .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 12 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 2 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crc.c | 7 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 20 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 21 +- .../drm/amd/display/dc/dml2/dml2_mall_phantom.c | 6 +- .../gpu/drm/amd/display/dc/dpp/dcn401/dcn401_dpp.c | 8 +- .../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 12 +- drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 31 +- drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 3 + .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c | 4 + drivers/gpu/drm/arm/display/komeda/komeda_dev.c | 6 +- drivers/gpu/drm/arm/display/komeda/komeda_drv.c | 14 +- drivers/gpu/drm/arm/malidp_drv.c | 22 +- drivers/gpu/drm/bridge/tc358768.c | 2 + drivers/gpu/drm/display/drm_dp_helper.c | 2 + drivers/gpu/drm/drm_exec.c | 13 + drivers/gpu/drm/drm_gem.c | 10 + drivers/gpu/drm/gma500/oaktrail_hdmi_i2c.c | 21 +- drivers/gpu/drm/gud/gud_drv.c | 1 + drivers/gpu/drm/i915/i915_query.c | 4 +- drivers/gpu/drm/imagination/pvr_context.c | 32 +- drivers/gpu/drm/logicvc/Kconfig | 1 - drivers/gpu/drm/mediatek/mtk_dsi.c | 1 + .../gpu/drm/nouveau/nvkm/subdev/bios/shadowrom.c | 110 +++- drivers/gpu/drm/panel/Kconfig | 11 +- drivers/gpu/drm/panel/panel-jadard-jd9365da-h3.c | 2 + drivers/gpu/drm/panel/panel-simple.c | 28 + drivers/gpu/drm/renesas/rz-du/rzg2l_du_vsp.c | 16 + drivers/gpu/drm/renesas/rz-du/rzg2l_du_vsp.h | 2 + drivers/gpu/drm/tiny/cirrus.c | 7 +- drivers/gpu/drm/vc4/vc4_hvs.c | 2 +- drivers/gpu/drm/vc4/vc4_v3d.c | 2 +- drivers/gpu/drm/virtio/virtgpu_display.c | 2 +- drivers/gpu/drm/xe/xe_oa.c | 6 +- drivers/gpu/host1x/bus.c | 4 +- .../hid/bpf/progs/Huion__Inspiroy-Frego-M.bpf.c | 87 ++++ drivers/hid/hid-apple.c | 18 +- drivers/hid/hid-logitech-hidpp.c | 1 + drivers/hid/hid-mcp2221.c | 15 +- drivers/hid/hid-multitouch.c | 147 +++++- drivers/hid/hid-sony.c | 82 ++- drivers/hid/hid-universal-pidff.c | 4 +- drivers/hv/connection.c | 47 +- drivers/hv/hyperv_vmbus.h | 2 + drivers/hwmon/adt7462.c | 8 + drivers/hwmon/applesmc.c | 7 +- drivers/hwmon/aspeed-pwm-tacho.c | 4 +- drivers/hwmon/chipcap2.c | 9 +- drivers/hwmon/corsair-cpro.c | 24 +- drivers/hwmon/corsair-psu.c | 23 +- drivers/hwmon/dell-smm-hwmon.c | 8 + drivers/hwmon/gpio-fan.c | 13 +- drivers/hwmon/hwmon.c | 16 +- drivers/hwmon/ina2xx.c | 14 +- drivers/hwmon/ltc4282.c | 2 +- drivers/hwmon/pmbus/lm25066.c | 60 +-- drivers/hwmon/pmbus/pmbus_core.c | 4 +- drivers/hwmon/raspberrypi-hwmon.c | 12 +- drivers/hwtracing/coresight/coresight-platform.c | 12 +- drivers/i2c/i2c-core-smbus.c | 12 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 4 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 4 +- drivers/iio/accel/mma8452.c | 19 +- drivers/iio/adc/qcom-spmi-iadc.c | 18 +- drivers/iio/adc/rtq6056.c | 10 +- drivers/iio/light/stk3310.c | 76 ++- drivers/infiniband/core/umem.c | 18 +- drivers/infiniband/hw/bnxt_re/qplib_res.c | 11 + drivers/infiniband/hw/irdma/utils.c | 2 +- drivers/infiniband/hw/mlx5/cq.c | 3 +- drivers/infiniband/hw/mlx5/main.c | 11 + drivers/infiniband/hw/mlx5/mr.c | 4 + drivers/infiniband/hw/mlx5/odp.c | 3 + drivers/infiniband/ulp/rtrs/rtrs-srv.c | 12 +- drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c | 21 +- drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 9 + drivers/iommu/rockchip-iommu.c | 8 + drivers/irqchip/irq-gic-v3-its.c | 1 + drivers/leds/leds-pca9532.c | 8 +- drivers/leds/trigger/ledtrig-gpio.c | 3 +- drivers/leds/uleds.c | 11 +- drivers/mailbox/imx-mailbox.c | 64 ++- drivers/mailbox/mailbox.c | 6 +- drivers/md/raid10.c | 5 + drivers/md/raid5.c | 35 +- drivers/media/i2c/video-i2c.c | 2 +- drivers/media/pci/dm1105/dm1105.c | 7 +- .../platform/chips-media/wave5/wave5-vpu-dec.c | 47 +- .../platform/chips-media/wave5/wave5-vpuapi.c | 11 +- .../vcodec/decoder/vdec/vdec_av1_req_lat_if.c | 5 +- drivers/media/platform/qcom/camss/camss-csiphy.c | 10 +- .../platform/verisilicon/hantro_g2_hevc_dec.c | 6 +- .../verisilicon/rockchip_vpu981_hw_av1_dec.c | 57 +- drivers/media/rc/imon.c | 4 + drivers/media/rc/mceusb.c | 2 + drivers/media/usb/as102/as102_usb_drv.c | 75 ++- drivers/media/usb/em28xx/em28xx-video.c | 4 +- drivers/media/v4l2-core/v4l2-ctrls-core.c | 32 ++ drivers/media/v4l2-core/v4l2-h264.c | 3 +- drivers/mfd/ab8500-core.c | 2 +- drivers/mfd/db8500-prcmu.c | 6 +- drivers/mfd/rsmu_i2c.c | 2 + drivers/mfd/rsmu_spi.c | 2 + drivers/mfd/tps65219.c | 14 +- drivers/mmc/core/queue.c | 8 +- drivers/mmc/host/davinci_mmc.c | 16 +- drivers/mmc/host/renesas_sdhi_internal_dmac.c | 2 + drivers/net/bonding/bond_alb.c | 32 +- drivers/net/bonding/bond_main.c | 4 +- drivers/net/dsa/bcm_sf2_cfp.c | 2 + drivers/net/dsa/lantiq_gswip.c | 367 +++---------- drivers/net/dsa/lantiq_gswip.h | 252 +++++++++ drivers/net/dsa/mv88e6xxx/chip.c | 23 +- drivers/net/dsa/qca/qca8k-8xxx.c | 22 +- drivers/net/dsa/qca/qca8k.h | 1 + drivers/net/dsa/realtek/rtl8365mb.c | 14 + drivers/net/dsa/sja1105/sja1105_flower.c | 4 +- drivers/net/ethernet/allwinner/sun4i-emac.c | 2 + drivers/net/ethernet/amd/au1000_eth.c | 3 +- drivers/net/ethernet/amd/pds_core/core.c | 4 + drivers/net/ethernet/amd/pds_core/fw.c | 10 +- drivers/net/ethernet/amd/pds_core/main.c | 10 +- drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 3 +- drivers/net/ethernet/broadcom/asp2/bcmasp_intf.c | 4 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 19 +- drivers/net/ethernet/cadence/macb.h | 2 +- drivers/net/ethernet/cadence/macb_main.c | 39 +- drivers/net/ethernet/cavium/thunder/nicvf_main.c | 8 +- drivers/net/ethernet/chelsio/cxgb4/clip_tbl.c | 4 +- drivers/net/ethernet/cortina/gemini.c | 77 +-- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 69 ++- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 12 + drivers/net/ethernet/huawei/hinic/hinic_hw_mbox.c | 4 +- drivers/net/ethernet/ibm/emac/core.c | 3 +- drivers/net/ethernet/ibm/emac/mal.c | 6 +- drivers/net/ethernet/intel/e1000e/ethtool.c | 19 +- drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 2 +- drivers/net/ethernet/intel/ice/ice_common.c | 9 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 2 +- drivers/net/ethernet/intel/ice/ice_sched.c | 4 +- drivers/net/ethernet/intel/ice/ice_trace.h | 64 ++- drivers/net/ethernet/intel/ice/ice_txrx.c | 20 +- drivers/net/ethernet/intel/ice/ice_type.h | 2 +- drivers/net/ethernet/intel/idpf/idpf_txrx.c | 10 +- drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 10 + drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 33 +- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 10 +- drivers/net/ethernet/marvell/octeontx2/nic/qos.c | 60 ++- drivers/net/ethernet/mellanox/mlx5/core/Kconfig | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en/port.c | 15 +- drivers/net/ethernet/mellanox/mlx5/core/en/rqt.c | 27 +- .../net/ethernet/mellanox/mlx5/core/en/tc/sample.c | 7 +- drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 2 +- .../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 1 + drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 8 +- .../mellanox/mlx5/core/eswitch_offloads_termtbl.c | 7 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 3 +- .../mlx5/core/steering/hws/mlx5hws_table.c | 3 + drivers/net/ethernet/micrel/ks8842.c | 4 +- drivers/net/ethernet/micrel/ks8851_common.c | 10 +- drivers/net/ethernet/micrel/ks8851_spi.c | 4 +- drivers/net/ethernet/micrel/ksz884x.c | 4 +- .../net/ethernet/microchip/lan966x/lan966x_fdma.c | 20 + .../net/ethernet/microchip/sparx5/sparx5_psfp.c | 5 +- .../ethernet/microchip/sparx5/sparx5_tc_flower.c | 18 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 12 +- .../net/ethernet/netronome/nfp/nfp_net_ethtool.c | 36 +- drivers/net/ethernet/oa_tc6.c | 514 +++++++++++------- drivers/net/ethernet/pensando/ionic/ionic_txrx.c | 13 +- drivers/net/ethernet/realtek/rtase/rtase.h | 4 + drivers/net/ethernet/realtek/rtase/rtase_main.c | 3 + drivers/net/ethernet/sfc/ethtool.c | 1 + drivers/net/ethernet/stmicro/stmmac/dwxgmac2.h | 4 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 169 ++++-- drivers/net/ethernet/stmicro/stmmac/stmmac_ptp.c | 1 - drivers/net/ethernet/ti/cpsw.c | 41 +- drivers/net/ethernet/ti/cpsw_new.c | 4 +- drivers/net/gtp.c | 5 + drivers/net/ieee802154/cc2520.c | 5 +- drivers/net/ieee802154/mac802154_hwsim.c | 10 +- drivers/net/mctp/mctp-i3c.c | 9 +- drivers/net/netconsole.c | 2 + drivers/net/phy/Kconfig | 17 +- drivers/net/phy/Makefile | 3 +- drivers/net/phy/mediatek/Kconfig | 22 + drivers/net/phy/mediatek/Makefile | 3 + .../{mediatek-ge-soc.c => mediatek/mtk-ge-soc.c} | 0 .../net/phy/{mediatek-ge.c => mediatek/mtk-ge.c} | 29 ++ drivers/net/phy/motorcomm.c | 41 +- drivers/net/phy/phy_device.c | 16 + drivers/net/phy/sfp.c | 2 + drivers/net/ppp/ppp_async.c | 89 +--- drivers/net/ppp/ppp_synctty.c | 97 +--- drivers/net/usb/cx82310_eth.c | 1 + drivers/net/usb/hso.c | 2 +- drivers/net/usb/pegasus.c | 54 +- drivers/net/usb/pegasus.h | 3 - drivers/net/usb/qmi_wwan.c | 2 + drivers/net/vxlan/vxlan_core.c | 13 +- drivers/net/vxlan/vxlan_mdb.c | 8 + drivers/net/vxlan/vxlan_vnifilter.c | 13 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 50 +- drivers/net/wireless/ath/ath9k/hif_usb.c | 12 +- drivers/net/wireless/ath/ath9k/hif_usb.h | 2 +- drivers/net/wireless/intel/ipw2x00/libipw_rx.c | 4 +- drivers/net/wireless/intel/iwlwifi/fw/acpi.c | 5 + drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 13 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 19 +- drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 25 +- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 7 +- drivers/net/wireless/intel/iwlwifi/mvm/mvm.h | 3 - drivers/net/wireless/intel/iwlwifi/mvm/rx.c | 5 + drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 4 +- .../net/wireless/intel/iwlwifi/mvm/time-event.c | 5 + drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 45 +- drivers/net/wireless/intel/iwlwifi/pcie/rx.c | 9 +- drivers/net/wireless/marvell/libertas/tx.c | 7 + drivers/net/wireless/marvell/mwifiex/fw.h | 18 +- drivers/net/wireless/marvell/mwifiex/join.c | 8 +- drivers/net/wireless/marvell/mwifiex/sta_cmd.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 33 +- drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 9 + drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 5 + drivers/net/wireless/mediatek/mt76/mt7925/usb.c | 3 + drivers/net/wireless/mediatek/mt76/pci.c | 8 +- drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2800pci.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt61pci.c | 2 +- drivers/net/wireless/realtek/rtw88/fw.c | 3 + drivers/net/wireless/realtek/rtw89/core.c | 4 +- drivers/net/wireless/realtek/rtw89/mac_be.c | 4 + drivers/net/wireless/realtek/rtw89/pci.c | 16 +- drivers/net/wireless/rsi/rsi_91x_hal.c | 8 + drivers/net/wireless/rsi/rsi_91x_mgmt.c | 6 +- drivers/net/wireless/virtual/mac80211_hwsim.c | 6 +- drivers/net/wwan/t7xx/t7xx_pci.c | 3 + drivers/nvdimm/claim.c | 9 +- drivers/nvme/host/apple.c | 182 +++---- drivers/nvme/host/core.c | 34 +- drivers/nvme/host/fc.c | 7 +- drivers/nvme/host/rdma.c | 18 +- drivers/nvme/host/tcp.c | 17 +- drivers/nvme/target/rdma.c | 15 +- drivers/of/dynamic.c | 20 +- drivers/of/overlay.c | 15 + drivers/opp/of.c | 2 +- drivers/pci/controller/dwc/pcie-intel-gw.c | 19 +- drivers/pci/controller/pcie-altera.c | 2 + drivers/pci/controller/pcie-iproc.c | 2 + drivers/pci/controller/pcie-mediatek.c | 2 + drivers/pci/controller/pcie-rockchip-host.c | 2 + drivers/pci/controller/plda/pcie-plda-host.c | 2 + drivers/pci/pci-driver.c | 10 +- drivers/pci/pci-sysfs.c | 14 +- drivers/pci/pci.c | 24 +- drivers/pci/proc.c | 79 ++- drivers/pci/quirks.c | 5 + drivers/pci/switch/switchtec.c | 16 + drivers/perf/riscv_pmu_legacy.c | 5 +- drivers/perf/riscv_pmu_sbi.c | 98 ++-- drivers/pinctrl/renesas/pinctrl-rzg2l.c | 3 +- drivers/pinctrl/renesas/pinctrl-rzv2m.c | 4 +- drivers/platform/chrome/cros_ec_sensorhub.c | 6 +- drivers/platform/chrome/cros_ec_sysfs.c | 5 +- drivers/platform/x86/dell/dell-laptop.c | 9 + drivers/platform/x86/intel/hid.c | 7 + drivers/platform/x86/msi-ec.c | 1 + drivers/platform/x86/sel3350-platform.c | 136 +++-- drivers/powercap/intel_rapl_common.c | 3 +- drivers/ptp/ptp_ocp.c | 1 + drivers/ras/amd/atl/core.c | 1 - drivers/regulator/core.c | 163 +++--- drivers/regulator/da9121-regulator.c | 18 +- drivers/regulator/db8500-prcmu.c | 12 +- drivers/rtc/rtc-aspeed.c | 1 + drivers/rtc/rtc-bq32k.c | 9 + drivers/rtc/rtc-mv.c | 23 + drivers/s390/char/zcore.c | 8 +- drivers/s390/cio/device.c | 2 +- drivers/s390/net/ism_drv.c | 4 +- drivers/s390/net/qeth_l2.h | 3 +- drivers/s390/net/qeth_l2_main.c | 26 +- drivers/s390/net/qeth_l2_sys.c | 7 +- drivers/scsi/bfa/bfa_fcs_lport.c | 2 +- drivers/scsi/mpi3mr/mpi3mr_transport.c | 8 + drivers/scsi/mpt3sas/mpt3sas_base.c | 5 +- drivers/scsi/pm8001/pm8001_ctl.c | 8 + drivers/scsi/pm8001/pm80xx_hwi.c | 7 + drivers/scsi/scsi_error.c | 2 +- drivers/soc/tegra/fuse/fuse-tegra.c | 14 +- drivers/soc/ti/pm33xx.c | 2 +- drivers/soundwire/bus.c | 4 + drivers/soundwire/dmi-quirks.c | 35 ++ drivers/soundwire/intel.c | 31 +- drivers/soundwire/intel_ace2x.c | 39 +- drivers/soundwire/intel_auxdevice.c | 2 + drivers/soundwire/slave.c | 4 +- drivers/spi/spi-dw-dma.c | 3 +- drivers/spi/spi-dw-mmio.c | 7 +- drivers/spi/spi-dw.h | 1 + drivers/spi/spi-qcom-qspi.c | 44 +- drivers/spi/spi-xilinx.c | 6 +- drivers/spi/spi.c | 9 +- drivers/staging/fbtft/fbtft-core.c | 9 +- drivers/target/iscsi/iscsi_target.c | 4 +- drivers/tee/optee/call.c | 3 +- drivers/thermal/db8500_thermal.c | 10 +- drivers/thermal/qcom/tsens.c | 111 ++-- drivers/thermal/qcom/tsens.h | 1 + drivers/thermal/tegra/soctherm.c | 6 +- drivers/thermal/thermal_sysfs.c | 12 +- drivers/thunderbolt/icm.c | 10 + drivers/thunderbolt/path.c | 31 +- drivers/thunderbolt/switch.c | 6 + drivers/thunderbolt/tb.c | 9 +- drivers/thunderbolt/tb_regs.h | 1 + drivers/thunderbolt/usb4.c | 11 +- drivers/thunderbolt/xdomain.c | 49 +- drivers/tty/serial/8250/8250_port.c | 7 + drivers/usb/atm/xusbatm.c | 6 +- drivers/usb/class/cdc-acm.c | 6 + drivers/usb/class/usbtmc.c | 2 - drivers/usb/core/hcd.c | 14 +- drivers/usb/gadget/function/f_fs.c | 31 +- drivers/usb/gadget/udc/aspeed_udc.c | 7 +- drivers/usb/gadget/udc/core.c | 7 +- drivers/usb/gadget/udc/goku_udc.c | 3 +- drivers/usb/host/Kconfig | 2 +- drivers/usb/host/xhci-debugfs.c | 10 +- drivers/usb/host/xhci-hub.c | 2 +- drivers/usb/host/xhci-mem.c | 34 +- drivers/usb/host/xhci-pci.c | 9 +- drivers/usb/host/xhci-ring.c | 13 +- drivers/usb/host/xhci.c | 31 +- drivers/usb/host/xhci.h | 39 +- drivers/usb/serial/spcp8x5.c | 6 +- drivers/usb/usbip/vhci_sysfs.c | 52 +- drivers/vdpa/ifcvf/ifcvf_main.c | 14 +- drivers/vdpa/octeon_ep/octep_vdpa_main.c | 6 +- drivers/vdpa/solidrun/snet_main.c | 6 +- drivers/vdpa/vdpa_sim/vdpa_sim_blk.c | 3 +- drivers/vdpa/vdpa_sim/vdpa_sim_net.c | 7 +- drivers/vhost/scsi.c | 3 +- drivers/vhost/vdpa.c | 88 +++- drivers/video/fbdev/core/fbcon.c | 9 +- drivers/video/fbdev/pm2fb.c | 1 + drivers/video/fbdev/vfb.c | 11 +- drivers/virtio/virtio.c | 2 +- drivers/virtio/virtio_input.c | 9 +- drivers/virtio/virtio_pci_common.c | 4 +- drivers/watchdog/db8500_wdt.c | 22 +- drivers/watchdog/imx7ulp_wdt.c | 10 +- drivers/watchdog/lenovo_se10_wdt.c | 82 ++- drivers/watchdog/msc313e_wdt.c | 74 ++- drivers/watchdog/sunxi_wdt.c | 45 +- drivers/watchdog/watchdog_hrtimer_pretimeout.c | 1 + drivers/xen/balloon.c | 56 +- drivers/xen/gntalloc.c | 13 +- drivers/xen/xen-front-pgdir-shbuf.c | 12 +- fs/9p/vfs_dir.c | 14 +- fs/affs/affs.h | 5 - fs/affs/super.c | 6 +- fs/afs/addr_list.c | 5 +- fs/afs/fs_probe.c | 1 + fs/afs/server.c | 1 - fs/autofs/inode.c | 4 +- fs/befs/linuxvfs.c | 3 +- fs/bfs/inode.c | 3 +- fs/btrfs/accessors.h | 1 + fs/btrfs/acl.h | 2 + fs/btrfs/compression.c | 16 +- fs/btrfs/ctree.h | 11 +- fs/btrfs/defrag.c | 32 +- fs/btrfs/delayed-ref.h | 2 + fs/btrfs/dir-item.h | 1 + fs/btrfs/direct-io.c | 41 +- fs/btrfs/direct-io.h | 2 + fs/btrfs/discard.h | 1 + fs/btrfs/disk-io.c | 11 +- fs/btrfs/extent-io-tree.h | 6 +- fs/btrfs/extent-tree.h | 1 - fs/btrfs/extent_io.c | 53 +- fs/btrfs/extent_map.c | 94 ++-- fs/btrfs/extent_map.h | 8 +- fs/btrfs/fiemap.c | 4 +- fs/btrfs/file-item.h | 2 + fs/btrfs/file.c | 136 +++-- fs/btrfs/file.h | 2 + fs/btrfs/free-space-cache.c | 10 +- fs/btrfs/fs.c | 10 +- fs/btrfs/fs.h | 10 + fs/btrfs/inode.c | 181 +++---- fs/btrfs/ioctl.c | 171 +++--- fs/btrfs/ioctl.h | 5 +- fs/btrfs/locking.c | 1 - fs/btrfs/ordered-data.c | 8 +- fs/btrfs/ordered-data.h | 1 + fs/btrfs/print-tree.h | 2 + fs/btrfs/props.h | 1 + fs/btrfs/qgroup.h | 3 + fs/btrfs/raid-stripe-tree.c | 25 +- fs/btrfs/raid-stripe-tree.h | 2 + fs/btrfs/reflink.c | 8 +- fs/btrfs/relocation.c | 71 ++- fs/btrfs/send.c | 3 +- fs/btrfs/space-info.c | 2 +- fs/btrfs/subpage.c | 1 - fs/btrfs/super.c | 2 +- fs/btrfs/sysfs.h | 1 + fs/btrfs/tests/extent-io-tests.c | 6 +- fs/btrfs/tests/extent-map-tests.c | 56 +- fs/btrfs/tests/inode-tests.c | 67 +-- fs/btrfs/transaction.c | 13 +- fs/btrfs/tree-checker.c | 41 ++ fs/btrfs/tree-log.c | 12 +- fs/btrfs/verity.c | 4 +- fs/btrfs/volumes.c | 10 +- fs/btrfs/volumes.h | 4 + fs/btrfs/xattr.h | 2 + fs/btrfs/zoned.c | 15 +- fs/cachefiles/namei.c | 1 - fs/ceph/caps.c | 69 ++- fs/ceph/crypto.c | 46 +- fs/ceph/mds_client.c | 196 ++++++- fs/ceph/mds_client.h | 2 - fs/ceph/super.h | 5 +- fs/configfs/dir.c | 12 +- fs/dlm/memory.c | 4 +- fs/erofs/decompressor_lzma.c | 18 +- fs/erofs/zutil.c | 2 + fs/exec.c | 22 +- fs/exfat/nls.c | 19 +- fs/f2fs/inline.c | 7 + fs/freevxfs/vxfs_bmap.c | 3 +- fs/fuse/dev.c | 27 +- fs/fuse/file.c | 3 +- fs/fuse/virtio_fs.c | 2 + fs/gfs2/bmap.c | 19 + fs/gfs2/bmap.h | 1 + fs/gfs2/file.c | 10 + fs/gfs2/quota.c | 36 +- fs/hfs/catalog.c | 9 - fs/hfs/dir.c | 28 +- fs/hfs/hfs.h | 3 +- fs/hfs/hfs_fs.h | 2 - fs/hfs/inode.c | 4 - fs/hfsplus/catalog.c | 11 - fs/hfsplus/dir.c | 28 +- fs/hfsplus/hfsplus_fs.h | 5 +- fs/hfsplus/inode.c | 40 +- fs/hfsplus/super.c | 2 - fs/hpfs/super.c | 3 +- fs/iomap/direct-io.c | 2 +- fs/isofs/inode.c | 3 +- fs/jfs/super.c | 3 +- fs/minix/inode.c | 3 +- fs/netfs/buffered_read.c | 2 +- fs/netfs/buffered_write.c | 2 +- fs/netfs/internal.h | 12 + fs/nfs/blocklayout/rpc_pipefs.c | 41 +- fs/nfs/export.c | 3 +- fs/nfs/nfs42proc.c | 15 +- fs/nfs/nfs4idmap.c | 8 +- fs/nfsd/filecache.c | 34 +- fs/nfsd/netns.h | 14 +- fs/nfsd/nfs4callback.c | 78 ++- fs/nfsd/nfs4proc.c | 32 +- fs/nfsd/nfs4recover.c | 76 +-- fs/nfsd/nfs4state.c | 257 +++++++-- fs/nfsd/nfsctl.c | 199 ++++--- fs/nfsd/nfsd.h | 15 - fs/nfsd/state.h | 5 +- fs/nfsd/trace.h | 14 +- fs/nfsd/xdr4.h | 1 + fs/ntfs3/dir.c | 4 +- fs/ntfs3/fslog.c | 28 +- fs/ntfs3/index.c | 41 +- fs/ntfs3/super.c | 8 +- fs/ntfs3/xattr.c | 4 +- fs/ocfs2/dir.c | 71 ++- fs/omfs/inode.c | 6 +- fs/pidfs.c | 65 ++- fs/qnx4/inode.c | 3 +- fs/smb/client/cifsacl.c | 30 +- fs/smb/client/cifspdu.h | 8 - fs/smb/client/connect.c | 27 +- fs/smb/client/file.c | 5 +- fs/smb/client/link.c | 2 +- fs/smb/client/misc.c | 24 +- fs/smb/client/readdir.c | 9 +- fs/smb/client/reparse.c | 5 +- fs/smb/client/smb1ops.c | 2 +- fs/smb/client/smb2ops.c | 487 +++++++++++------ fs/smb/client/smb2pdu.h | 20 - fs/smb/client/trace.h | 2 +- fs/smb/client/transport.c | 11 +- fs/smb/common/smb2pdu.h | 29 ++ fs/smb/server/mgmt/share_config.c | 36 +- fs/smb/server/mgmt/user_session.c | 25 +- fs/smb/server/misc.c | 14 +- fs/smb/server/oplock.c | 221 ++++++-- fs/smb/server/oplock.h | 2 +- fs/smb/server/server.c | 6 + fs/smb/server/smb2misc.c | 9 +- fs/smb/server/smb2pdu.c | 281 +++++----- fs/smb/server/smb2pdu.h | 20 - fs/smb/server/smbacl.c | 88 ++-- fs/smb/server/transport_ipc.c | 21 +- fs/smb/server/vfs.c | 46 +- fs/smb/server/vfs_cache.c | 28 +- fs/smb/server/vfs_cache.h | 8 +- fs/super.c | 9 +- fs/ufs/cylinder.c | 10 + fs/ufs/dir.c | 2 +- fs/ufs/super.c | 17 +- fs/xfs/libxfs/xfs_btree_mem.c | 2 + fs/xfs/libxfs/xfs_btree_staging.c | 4 +- fs/xfs/libxfs/xfs_defer.c | 2 +- fs/xfs/libxfs/xfs_exchmaps.c | 10 + fs/xfs/libxfs/xfs_parent.c | 13 +- fs/xfs/scrub/agheader_repair.c | 39 +- fs/xfs/scrub/alloc_repair.c | 18 +- fs/xfs/scrub/dir_repair.c | 10 +- fs/xfs/scrub/dirtree.c | 31 +- fs/xfs/scrub/dirtree_repair.c | 2 + fs/xfs/scrub/findparent.c | 56 +- fs/xfs/scrub/ialloc.c | 4 + fs/xfs/scrub/quota_repair.c | 14 +- fs/xfs/scrub/quotacheck.c | 4 +- fs/xfs/scrub/scrub.c | 3 +- fs/xfs/scrub/stats.c | 60 ++- fs/xfs/scrub/stats.h | 4 +- fs/xfs/scrub/symlink_repair.c | 2 +- fs/xfs/scrub/trace.h | 35 +- fs/xfs/xfs_exchmaps_item.c | 19 +- fs/xfs/xfs_exchrange.c | 12 +- include/cxl/event.h | 80 +++ include/linux/bio.h | 14 - include/linux/bitfield.h | 2 +- include/linux/bpf.h | 1 + include/linux/bpf_verifier.h | 4 +- include/linux/cper.h | 4 + include/linux/device.h | 1 + include/linux/ethtool.h | 28 +- include/linux/exportfs.h | 1 + include/linux/firmware/intel/stratix10-smc.h | 18 +- include/linux/fwnode.h | 1 + include/linux/hugetlb.h | 5 + include/linux/hwmon.h | 1 + include/linux/igmp.h | 7 +- include/linux/kcsan-checks.h | 6 +- include/linux/mailbox_controller.h | 2 + include/linux/mfd/db8500-prcmu.h | 252 ++++++++- include/linux/mfd/dbx500-prcmu.h | 575 --------------------- include/linux/mm.h | 2 + include/linux/mm_inline.h | 15 +- include/linux/mm_types.h | 27 +- include/linux/mmzone.h | 2 + include/linux/oa_tc6.h | 50 ++ include/linux/perf/riscv_pmu.h | 2 +- include/linux/perf_event.h | 7 +- include/linux/phy.h | 1 + include/linux/platform_data/cros_ec_proto.h | 2 + include/linux/rbtree_augmented.h | 35 +- include/linux/sched.h | 1 + include/linux/skbuff.h | 5 + include/linux/sunrpc/rpc_pipe_fs.h | 4 +- include/linux/sunrpc/svc.h | 21 +- include/linux/sunrpc/svc_rdma.h | 3 +- include/linux/sunrpc/xdr.h | 13 + include/linux/switchtec.h | 1 + include/linux/thunderbolt.h | 2 + include/linux/workqueue.h | 38 +- include/media/v4l2-hevc.h | 41 ++ include/net/cfg80211.h | 2 +- include/net/cfg802154.h | 1 + include/net/dst.h | 6 + include/net/if_inet6.h | 2 - include/net/inet6_hashtables.h | 2 +- include/net/ip.h | 28 +- include/net/ip6_route.h | 45 ++ include/net/ip6_tunnel.h | 2 +- include/net/ip_fib.h | 5 + include/net/ipv6.h | 10 +- include/net/netlink.h | 14 + include/net/sch_generic.h | 2 +- include/net/tcp.h | 8 +- include/rdma/ib_umem.h | 4 +- include/sound/hda_codec.h | 30 ++ include/sound/rawmidi.h | 2 + include/sound/tas2781.h | 4 +- include/trace/events/hwmon.h | 10 +- include/trace/events/icmp.h | 13 +- include/uapi/linux/ethtool.h | 128 ++--- include/uapi/linux/virtio_crypto.h | 1 + include/uapi/sound/asound.h | 6 +- io_uring/net.c | 10 +- kernel/bpf/bpf_iter.c | 2 +- kernel/bpf/btf.c | 24 +- kernel/bpf/cgroup.c | 1 + kernel/bpf/disasm.c | 5 +- kernel/bpf/stackmap.c | 175 +++++-- kernel/bpf/verifier.c | 123 +++-- kernel/events/core.c | 27 +- kernel/events/ring_buffer.c | 9 +- kernel/locking/lockdep.c | 50 +- kernel/printk/nbcon.c | 2 +- kernel/rcu/tasks.h | 3 +- kernel/sched/ext.c | 10 +- kernel/sched/fair.c | 209 +++----- kernel/time/clockevents.c | 35 +- kernel/time/tick-broadcast.c | 36 +- kernel/time/tick-internal.h | 2 + kernel/trace/Makefile | 5 +- kernel/trace/bpf_trace.c | 11 + kernel/trace/ring_buffer.c | 26 +- kernel/trace/trace_event_perf.c | 12 +- kernel/trace/trace_events_hist.c | 42 +- kernel/trace/trace_events_user.c | 26 +- kernel/trace/trace_probe.c | 48 +- kernel/trace/trace_probe.h | 2 + kernel/workqueue.c | 5 +- mm/damon/core.c | 13 +- mm/gup.c | 10 +- mm/huge_memory.c | 10 + mm/hugetlb.c | 6 +- mm/hugetlb_vmemmap.c | 6 +- mm/migrate_device.c | 6 + mm/mm_init.c | 2 + mm/page_alloc.c | 5 + mm/slab.h | 8 +- mm/slab_common.c | 41 +- mm/slub.c | 116 ++--- mm/swap.c | 49 +- mm/swapfile.c | 8 +- mm/vmscan.c | 78 ++- net/8021q/vlan.c | 7 +- net/8021q/vlan_dev.c | 32 +- net/9p/client.c | 2 +- net/appletalk/aarp.c | 5 + net/bluetooth/hci_core.c | 4 +- net/bluetooth/iso.c | 31 +- net/bluetooth/l2cap_core.c | 38 +- net/bluetooth/msft.c | 2 +- net/bluetooth/rfcomm/core.c | 5 + net/bridge/br_arp_nd_proxy.c | 16 +- net/bridge/br_device.c | 2 +- net/bridge/br_fdb.c | 7 +- net/bridge/br_input.c | 2 +- net/bridge/br_multicast.c | 11 +- net/core/dev.c | 2 +- net/core/drop_monitor.c | 18 +- net/core/filter.c | 17 +- net/core/gro_cells.c | 2 + net/core/rtnetlink.c | 7 +- net/core/skbuff.c | 7 + net/ethtool/ioctl.c | 212 +++++++- net/hsr/hsr_forward.c | 2 +- net/hsr/hsr_netlink.c | 9 +- net/hsr/hsr_slave.c | 11 +- net/ieee802154/6lowpan/core.c | 2 +- net/ipv4/fib_rules.c | 4 +- net/ipv4/fib_trie.c | 4 + net/ipv4/fou_core.c | 2 +- net/ipv4/icmp.c | 2 +- net/ipv4/igmp.c | 210 +++++--- net/ipv4/inet_fragment.c | 6 + net/ipv4/ip_output.c | 4 +- net/ipv4/ip_sockglue.c | 2 +- net/ipv4/ip_tunnel_core.c | 6 + net/ipv4/ipmr.c | 5 +- net/ipv4/netfilter/nf_reject_ipv4.c | 2 +- net/ipv4/nexthop.c | 2 +- net/ipv4/route.c | 4 +- net/ipv4/tcp.c | 14 +- net/ipv4/tcp_ipv4.c | 15 +- net/ipv4/tcp_minisocks.c | 2 +- net/ipv4/tcp_offload.c | 22 +- net/ipv4/tcp_output.c | 10 +- net/ipv4/tcp_timer.c | 6 +- net/ipv4/udp.c | 4 +- net/ipv6/addrconf.c | 10 +- net/ipv6/af_inet6.c | 2 +- net/ipv6/exthdrs.c | 99 ++-- net/ipv6/ioam6.c | 17 +- net/ipv6/ip6_fib.c | 4 +- net/ipv6/ip6_gre.c | 8 +- net/ipv6/ip6_input.c | 34 +- net/ipv6/ip6_output.c | 54 +- net/ipv6/ip6_tunnel.c | 8 +- net/ipv6/ip6_vti.c | 2 +- net/ipv6/ip6mr.c | 9 +- net/ipv6/ipv6_sockglue.c | 13 +- net/ipv6/mcast.c | 257 +++++---- net/ipv6/netfilter.c | 4 +- net/ipv6/netfilter/ip6_tables.c | 5 + net/ipv6/netfilter/nf_reject_ipv6.c | 2 +- net/ipv6/output_core.c | 2 +- net/ipv6/reassembly.c | 10 +- net/ipv6/route.c | 19 +- net/ipv6/seg6_iptunnel.c | 6 +- net/ipv6/sit.c | 2 +- net/ipv6/tcp_ipv6.c | 15 +- net/ipv6/tcpv6_offload.c | 15 +- net/ipv6/xfrm6_output.c | 2 +- net/l2tp/l2tp_debugfs.c | 4 + net/l2tp/l2tp_ppp.c | 56 +- net/mac80211/cfg.c | 9 +- net/mac80211/ibss.c | 9 +- net/mac80211/mlme.c | 6 +- net/mac80211/tx.c | 2 +- net/mac80211/util.c | 6 +- net/mac802154/ieee802154_i.h | 8 + net/mac802154/iface.c | 6 + net/mac802154/main.c | 1 + net/mac802154/rx.c | 120 ++++- net/mac802154/scan.c | 10 +- net/mptcp/options.c | 7 +- net/mptcp/protocol.c | 5 +- net/mptcp/protocol.h | 2 +- net/mptcp/subflow.c | 1 - net/mptcp/syncookies.c | 5 +- net/netfilter/ipset/ip_set_hash_gen.h | 13 +- net/netfilter/ipvs/ip_vs_sync.c | 20 +- net/netfilter/nf_conntrack_expect.c | 3 +- net/netfilter/nf_conntrack_netlink.c | 13 +- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 2 +- net/netfilter/nf_log_syslog.c | 6 +- net/netfilter/nfnetlink_log.c | 28 +- net/netfilter/nft_set_pipapo_avx2.c | 1 + net/netlabel/netlabel_unlabeled.c | 2 +- net/openvswitch/flow.c | 4 +- net/openvswitch/flow_table.c | 4 +- net/packet/af_packet.c | 101 +++- net/phonet/pn_dev.c | 30 +- net/qrtr/af_qrtr.c | 4 +- net/rds/af_rds.c | 63 ++- net/rds/connection.c | 102 +++- net/rds/ib_cm.c | 25 +- net/rds/ib_recv.c | 9 +- net/rds/message.c | 4 +- net/rds/send.c | 16 +- net/rds/tcp.c | 164 ++++-- net/rds/tcp_listen.c | 6 +- net/sched/act_api.c | 46 +- net/sched/act_csum.c | 8 +- net/sched/cls_api.c | 8 +- net/sched/cls_route.c | 76 +-- net/sched/cls_u32.c | 32 +- net/sched/sch_api.c | 2 +- net/sched/sch_drr.c | 13 +- net/sched/sch_ets.c | 12 +- net/sched/sch_fq_pie.c | 3 +- net/sched/sch_generic.c | 24 +- net/sched/sch_hhf.c | 8 +- net/sched/sch_pie.c | 2 +- net/sched/sch_sfq.c | 7 +- net/sctp/ipv6.c | 12 +- net/sctp/protocol.c | 10 +- net/sctp/sm_make_chunk.c | 14 +- net/sctp/sm_sideeffect.c | 11 +- net/sctp/sm_statefuns.c | 5 + net/sunrpc/auth_gss/auth_gss.c | 7 +- net/sunrpc/auth_gss/gss_rpc_xdr.c | 9 +- net/sunrpc/clnt.c | 52 +- net/sunrpc/rpc_pipe.c | 80 +-- net/sunrpc/svc.c | 23 +- net/sunrpc/xprtrdma/ib_client.c | 26 +- net/sunrpc/xprtrdma/svc_rdma_pcl.c | 2 +- net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 15 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 32 +- net/sunrpc/xprtrdma/verbs.c | 21 +- net/tipc/link.c | 6 +- net/tipc/name_table.c | 32 +- net/tipc/socket.c | 4 +- net/tls/tls_main.c | 11 + net/tls/tls_sw.c | 12 + net/unix/af_unix.c | 12 +- net/unix/garbage.c | 1 + net/vmw_vsock/hyperv_transport.c | 2 +- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/core.c | 21 + net/wireless/mlme.c | 105 ++-- net/wireless/nl80211.c | 8 +- net/wireless/wext-sme.c | 9 + rust/bindings/lib.rs | 3 +- rust/uapi/lib.rs | 3 +- scripts/mksysmap | 2 +- scripts/mod/modpost.c | 11 +- scripts/sorttable.c | 2 +- security/apparmor/match.c | 22 +- security/integrity/digsig_asymmetric.c | 4 + security/integrity/ima/ima_appraise.c | 5 + security/keys/trusted-keys/trusted_tpm1.c | 2 +- sound/core/pcm_native.c | 35 +- sound/core/rawmidi.c | 4 + sound/core/seq/oss/seq_oss_rw.c | 3 +- sound/core/seq/seq_prioq.c | 14 +- sound/core/ump.c | 94 +++- sound/hda/ext/hdac_ext_controller.c | 6 +- sound/hda/hdac_bus.c | 8 +- sound/hda/hdac_component.c | 6 +- sound/hda/hdac_device.c | 28 +- sound/hda/hdac_regmap.c | 35 +- sound/isa/es18xx.c | 4 + sound/pci/ctxfi/cthw20k2.c | 1 + sound/pci/hda/cs35l41_hda_property.c | 2 + sound/pci/hda/cs35l56_hda.c | 30 +- sound/pci/hda/hda_codec.c | 119 ++--- sound/pci/hda/hda_controller.c | 24 +- sound/pci/hda/hda_proc.c | 4 +- sound/pci/hda/hda_sysfs.c | 77 ++- sound/pci/hda/patch_conexant.c | 12 + sound/pci/hda/patch_realtek.c | 40 ++ sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 +- sound/soc/amd/yc/acp6x-mach.c | 21 + sound/soc/amd/yc/acp6x-pdm-dma.c | 2 + sound/soc/bcm/bcm63xx-i2s-whistler.c | 1 + sound/soc/codecs/ab8500-codec.c | 543 ++++++++++--------- sound/soc/codecs/mt6351.c | 1 + sound/soc/codecs/pcm3168a.c | 20 +- sound/soc/codecs/rk3328_codec.c | 54 +- sound/soc/codecs/rt5645.c | 4 + sound/soc/codecs/rt712-sdca.c | 11 + sound/soc/fsl/fsl-asoc-card.c | 8 +- sound/soc/intel/atom/sst/sst_pci.c | 1 + sound/soc/intel/avs/core.c | 29 +- sound/soc/intel/avs/debugfs.c | 12 +- sound/soc/intel/avs/pcm.c | 34 +- sound/soc/intel/avs/topology.c | 2 +- sound/soc/intel/avs/topology.h | 1 + sound/soc/intel/boards/sof_sdw.c | 25 +- sound/soc/intel/catpt/ipc.c | 8 + sound/soc/intel/catpt/loader.c | 3 + sound/soc/intel/catpt/registers.h | 12 + sound/soc/mediatek/mt8365/mt8365-afe-pcm.c | 13 +- sound/soc/meson/aiu-acodec-ctrl.c | 3 + sound/soc/meson/aiu-codec-ctrl.c | 3 + sound/soc/qcom/qdsp6/q6apm.c | 10 +- sound/soc/rockchip/rockchip_pdm.c | 16 +- sound/soc/rockchip/rockchip_spdif.c | 1 + sound/soc/soc-topology.c | 37 +- sound/soc/sprd/sprd-pcm-compress.c | 15 +- sound/soc/sti/uniperif_reader.c | 4 +- sound/soc/ti/omap3pandora.c | 5 +- sound/soc/ux500/ux500_msp_dai.c | 189 +++---- sound/soc/ux500/ux500_msp_dai.h | 14 +- sound/soc/ux500/ux500_msp_i2s.c | 260 +++++++--- sound/soc/ux500/ux500_msp_i2s.h | 12 +- sound/usb/caiaq/audio.c | 10 +- sound/usb/caiaq/device.c | 53 +- sound/usb/caiaq/device.h | 4 +- sound/usb/caiaq/input.c | 6 + sound/usb/caiaq/midi.c | 6 +- sound/usb/mixer.c | 17 +- sound/usb/mixer_maps.c | 25 + sound/usb/quirks-table.h | 22 + sound/usb/quirks.c | 4 + sound/usb/usx2y/us122l.c | 9 +- sound/usb/usx2y/usbusx2y.c | 49 +- sound/usb/usx2y/usbusx2y.h | 4 +- tools/bpf/bpftool/Makefile | 6 +- tools/build/feature/test-bpf.c | 2 + tools/include/nolibc/crt.h | 2 +- tools/lib/bpf/bpf.c | 2 + tools/lib/bpf/gen_loader.c | 2 + .../xdrgen/templates/C/union/declaration/close.j2 | 4 + tools/perf/tests/shell/stat_bpf_counters.sh | 28 +- tools/perf/util/evsel.c | 4 + tools/perf/util/symbol.c | 11 +- tools/sched_ext/scx_central.bpf.c | 6 +- tools/sched_ext/scx_qmap.bpf.c | 2 +- tools/testing/cxl/Kbuild | 2 + tools/testing/selftests/alsa/mixer-test.c | 4 +- tools/testing/selftests/bpf/progs/test_bpf_nf.c | 8 +- tools/testing/selftests/cgroup/test_kmem.c | 2 +- tools/testing/selftests/kselftest_harness.h | 2 +- tools/testing/selftests/mm/cow.c | 338 +++++------- tools/testing/selftests/net/fib_nexthops.sh | 28 + tools/testing/selftests/net/mptcp/mptcp_connect.c | 4 +- tools/testing/selftests/net/pmtu.sh | 2 +- tools/testing/selftests/net/test_vxlan_mdb.sh | 6 + tools/testing/selftests/powerpc/tm/tm.h | 8 +- 1054 files changed, 15506 insertions(+), 8702 deletions(-)

3 weeks, 6 days

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage September 2026