Skip to content

6.12.81-rc1 review

Greg Kroah-Hartman dri-devel linux-patches linux-tegra lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest242 patches 13 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/242io_uring/kbuf: remove legacy kbuf bulk allocationio_uring/kbuf.c+5 -250 replies
2/242io_uring/kbuf: remove legacy kbuf kmem cacheio_uring/io_uring.c io_uring/io_uring.h io_uring/kbuf.c+3 -80 replies
3/242io_uring/kbuf: simplify __io_put_kbufio_uring/io_uring.c io_uring/kbuf.c io_uring/kbuf.h+8 -310 replies
4/242io_uring/kbuf: remove legacy kbuf cachinginclude/linux/io_uring_types.h io_uring/io_uring.c io_uring/kbuf.c +1 more+9 -590 replies
5/242io_uring/kbuf: open code __io_put_kbuf()io_uring/kbuf.c io_uring/kbuf.h+1 -80 replies
6/242io_uring/kbuf: introduce io_kbuf_drop_legacy()io_uring/io_uring.c io_uring/kbuf.c io_uring/kbuf.h+14 -250 replies
7/242io_uring/kbuf: uninline __io_put_kbufsio_uring/kbuf.c io_uring/kbuf.h+70 -632 replies
8/242io_uring/kbuf: drop issue_flags from io_put_kbuf(s)() argumentsio_uring/io_uring.c io_uring/kbuf.h io_uring/net.c +1 more+14 -170 replies
9/242io_uring/net: dont use io_net_kbuf_recyle() for non-provided casesio_uring/net.c+3 -30 replies
10/242io_uring/net: clarify io_recv_buf_select() return valueio_uring/net.c+1 -10 replies
11/242io_uring/kbuf: pass in struct io_buffer_list to commit/recycle helpersio_uring/io_uring.c io_uring/kbuf.c io_uring/kbuf.h +3 more+46 -450 replies
12/242io_uring/kbuf: introduce struct io_br_selio_uring/kbuf.c io_uring/kbuf.h io_uring/net.c +1 more+57 -370 replies
13/242io_uring/kbuf: use struct io_br_sel for multiple buffers pickingio_uring/kbuf.c io_uring/kbuf.h io_uring/net.c+23 -180 replies
14/242io_uring/net: use struct io_br_sel->val as the recv finish valueio_uring/net.c+17 -140 replies
15/242io_uring/net: use struct io_br_sel->val as the send finish valueio_uring/net.c+12 -100 replies
16/242io_uring/kbuf: switch to storing struct io_buffer_list locallyinclude/linux/io_uring_types.h io_uring/io_uring.c io_uring/kbuf.c +4 more+60 -740 replies
17/242io_uring: remove async/poll related provided buffer recyclesio_uring/io_uring.c io_uring/poll.c+0 -60 replies
18/242io_uring/net: correct type for min_not_zero() castio_uring/net.c+1 -10 replies
19/242io_uring/rw: check for NULL io_br_sel when putting a bufferio_uring/rw.c+5 -20 replies
20/242io_uring/kbuf: enable bundles for incrementally consumed buffersio_uring/kbuf.c+26 -300 replies
21/242io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengthsio_uring/kbuf.c+13 -70 replies
22/242io_uring/kbuf: use READ_ONCE() for userspace-mapped memoryio_uring/kbuf.c+5 -50 replies
23/242io_uring/kbuf: use WRITE_ONCE() for userspace-shared buffer ring fieldsio_uring/kbuf.c+4 -40 replies
24/242io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOFio_uring/kbuf.c+4 -00 replies
25/242io_uring/kbuf: propagate BUF_MORE through early buffer commit pathio_uring/kbuf.c+4 -10 replies
26/242arm64/scs: Fix handling of advance_loc4arch/arm64/kernel/pi/patch-scs.c+8 -00 replies
27/242HID: logitech-hidpp: Enable MX Master 4 over bluetoothdrivers/hid/hid-logitech-hidpp.c+2 -00 replies
28/242wifi: mac80211: check tdls flag in ieee80211_tdls_opernet/mac80211/tdls.c+1 -10 replies
29/242HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irqdrivers/hid/wacom_wac.c+10 -00 replies
30/242atm: lec: fix use-after-free in sock_def_readable()net/atm/lec.c net/atm/lec.h+48 -260 replies
31/242btrfs: dont take device_list_mutex when querying zone infofs/btrfs/zoned.c+4 -20 replies
32/242tg3: replace placeholder MAC address with device propertydrivers/net/ethernet/broadcom/tg3.c+11 -00 replies
33/242objtool: Fix Clang jump table detectiontools/objtool/check.c+2 -30 replies
34/242HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failuredrivers/hid/hid-logitech-hidpp.c+3 -10 replies
35/242HID: multitouch: Check to ensure report responses match the requestdrivers/hid/hid-multitouch.c+7 -00 replies
36/242btrfs: reserve enough transaction items for qgroup ioctlsfs/btrfs/ioctl.c+9 -30 replies
37/242i2c: tegra: Dont mark devices with pins as IRQ safedrivers/i2c/busses/Kconfig drivers/i2c/busses/i2c-tegra.c+6 -10 replies
38/242btrfs: reject root items with drop_progress and zero drop_levelfs/btrfs/tree-checker.c+17 -00 replies
39/242spi: geni-qcom: Check DMA interrupts early in ISRdrivers/spi/spi-geni-qcom.c+5 -40 replies
40/242dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warningDocumentation/devicetree/bindings/auxdisplay/holtek,ht16k33.yaml+1 -10 replies
41/242wifi: ath11k: Pass the correct value of each TID during a stop AMPDU sessiondrivers/net/wireless/ath/ath11k/dp_rx.c+7 -80 replies
42/242crypto: caam - fix DMA corruption on long hmac keysdrivers/crypto/caam/caamhash.c+2 -10 replies
43/242crypto: caam - fix overflow on long hmac keysdrivers/crypto/caam/caamalg_qi2.c+2 -10 replies
44/242crypto: af-alg - fix NULL pointer dereference in scatterwalkcrypto/af_alg.c+3 -10 replies
45/242net: fec: fix the PTP periodic output sysfs interfacedrivers/net/ethernet/freescale/fec_ptp.c+0 -30 replies
46/242net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leaknet/qrtr/af_qrtr.c+13 -180 replies
47/242net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leaknet/ipv6/ndisc.c+3 -00 replies
48/242net/ipv6: ioam6: prevent schema length wraparound in trace fillnet/ipv6/ioam6.c+2 -20 replies
49/242tg3: Fix race for querying speed/duplexdrivers/net/ethernet/broadcom/tg3.c+1 -10 replies
50/242ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()net/ipv6/icmp.c+3 -00 replies
51/242ip6_tunnel: clear skb2->cb[] in ip4ip6_err()net/ipv6/ip6_tunnel.c+5 -00 replies
52/242eth: fbnic: Account for page fragments when updating BDQ taildrivers/net/ethernet/meta/fbnic/fbnic_txrx.c+3 -30 replies
53/242bridge: br_nd_send: linearize skb before parsing ND optionsnet/bridge/br_arp_nd_proxy.c+7 -50 replies
54/242net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()net/sched/sch_hfsc.c+2 -20 replies
55/242net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvnetadrivers/net/phy/sfp.c+6 -10 replies
56/242net: enetc: check whether the RSS algorithm is Toeplitzdrivers/net/ethernet/freescale/enetc/enetc_ethtool.c+4 -00 replies
57/242ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failuresound/soc/cirrus/ep93xx-i2s.c+24 -100 replies
58/242ipv6: prevent possible UaF in addrconf_permanent_addr()net/ipv6/addrconf.c+3 -30 replies
59/242net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue()drivers/net/ethernet/mediatek/airoha_eth.c+17 -10 replies
60/242net: introduce mangleid_featuresinclude/linux/netdevice.h net/core/dev.c+7 -10 replies
61/242net: use skb_header_pointer() for TCPv4 GSO frag_off checknet/core/dev.c+8 -30 replies
62/242net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leaknet/sched/cls_api.c+1 -00 replies
63/242NFC: pn533: bound the UART receive bufferdrivers/nfc/pn533/uart.c+3 -00 replies
64/242net: xilinx: axienet: Correct BD length masks to match AXIDMA IP specdrivers/net/ethernet/xilinx/xilinx_axienet.h+2 -20 replies
65/242ASoC: Intel: boards: fix unmet dependency on PINCTRLsound/soc/intel/boards/Kconfig+0 -20 replies
66/242bpf: Fix regsafe() for pointers to packetkernel/bpf/verifier.c+6 -10 replies
67/242net: ipv6: flowlabel: defer exclusive option free until RCU teardownnet/ipv6/ip6_flowlabel.c+0 -50 replies
68/242netfilter: flowtable: strictly check for maximum number of actionsnet/netfilter/nf_flow_table_offload.c+130 -660 replies
69/242netfilter: nfnetlink_log: account for netlink header sizenet/netfilter/nfnetlink_log.c+1 -10 replies
70/242netfilter: x_tables: ensure names are nul-terminatednet/netfilter/xt_cgroup.c net/netfilter/xt_rateest.c+11 -00 replies
71/242netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attrinclude/linux/netfilter/ipset/ip_set.h net/netfilter/ipset/ip_set_core.c net/netfilter/ipset/ip_set_list_set.c+5 -50 replies
72/242netfilter: nf_conntrack_helper: pass helper to expect cleanupnet/netfilter/nf_conntrack_helper.c+1 -10 replies
73/242netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absentnet/netfilter/nf_conntrack_netlink.c+6 -00 replies
74/242netfilter: nf_conntrack_expect: honor expectation helper fieldinclude/net/netfilter/nf_conntrack_expect.h net/netfilter/nf_conntrack_broadcast.c net/netfilter/nf_conntrack_expect.c +4 more+29 -120 replies
75/242netfilter: nf_conntrack_expect: use expect->helpernet/netfilter/nf_conntrack_expect.c net/netfilter/nf_conntrack_helper.c net/netfilter/nf_conntrack_netlink.c +1 more+13 -210 replies
76/242netfilter: nf_conntrack_expect: store netns and zone in expectationinclude/net/netfilter/nf_conntrack_expect.h net/netfilter/nf_conntrack_broadcast.c net/netfilter/nf_conntrack_expect.c +1 more+34 -40 replies
77/242netfilter: ctnetlink: ignore explicit helper on new expectationsnet/netfilter/nf_conntrack_netlink.c+9 -450 replies
78/242netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARPnet/netfilter/x_tables.c+23 -00 replies
79/242netfilter: nf_tables: reject immediate NF_QUEUE verdictnet/netfilter/nf_tables_api.c+5 -20 replies
80/242Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediatenet/bluetooth/hci_sync.c+9 -20 replies
81/242Bluetooth: SCO: fix race conditions in sco_sock_connect()net/bluetooth/sco.c+21 -50 replies
82/242Bluetooth: MGMT: validate LTK enc_size on loadnet/bluetooth/mgmt.c+3 -00 replies
83/242Bluetooth: hci_conn: fix potential UAF in set_cig_params_syncnet/bluetooth/hci_conn.c+7 -10 replies
84/242Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evtnet/bluetooth/hci_event.c+20 -130 replies
85/242Bluetooth: MGMT: validate mesh send advertising payload lengthnet/bluetooth/mgmt.c+11 -30 replies
86/242rds: ib: reject FRMR registration before IB connection is establishednet/rds/ib_rdma.c+6 -10 replies
87/242bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().net/core/skmsg.c+8 -50 replies
88/242net/sched: sch_netem: fix out-of-bounds access in packet corruptionnet/sched/sch_netem.c+3 -20 replies
89/242net: macb: fix clk handling on PCI glue driver removaldrivers/net/ethernet/cadence/macb_pci.c+4 -20 replies
90/242net: macb: properly unregister fixed rate clocksdrivers/net/ethernet/cadence/macb_pci.c+4 -40 replies
91/242net/mlx5: lag: Check for LAG device before creating debugfsdrivers/net/ethernet/mellanox/mlx5/core/lag/debugfs.c+3 -00 replies
92/242net/mlx5: Avoid "No data available" when FW version queries faildrivers/net/ethernet/mellanox/mlx5/core/devlink.c drivers/net/ethernet/mellanox/mlx5/core/fw.c drivers/net/ethernet/mellanox/mlx5/core/mlx5_core.h+37 -240 replies
93/242net/mlx5: Fix switchdev mode rollback in case of failuredrivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c+2 -00 replies
94/242bnxt_en: Restore default stat ctxs for ULP when resource is availabledrivers/net/ethernet/broadcom/bnxt/bnxt.c+2 -00 replies
95/242net/x25: Fix potential double free of skbnet/x25/x25_in.c+2 -30 replies
96/242net/x25: Fix overflow when accumulating packetsnet/x25/x25_in.c net/x25/x25_subr.c+5 -00 replies
97/242net/sched: cls_fw: fix NULL pointer dereference on shared blocksnet/sched/cls_fw.c+12 -20 replies
98/242net/sched: cls_flow: fix NULL pointer dereference on shared blocksnet/sched/cls_flow.c+9 -10 replies
99/242net: hsr: fix VLAN add unwind on slave errorsnet/hsr/hsr_device.c+17 -150 replies
100/242ipv6: avoid overflows in ip6_datagram_send_ctl()net/ipv6/datagram.c+10 -00 replies
101/242bpf: reject direct access to nullable PTR_TO_BUF pointerskernel/bpf/verifier.c+2 -10 replies
102/242Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"drivers/gpu/drm/drm_file.c drivers/gpu/drm/drm_mode_config.c+4 -100 replies
103/242iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by onedrivers/iio/imu/bno055/bno055.c+1 -10 replies
104/242accel/qaic: Handle DBC deactivation if the owner went awaydrivers/accel/qaic/qaic_control.c+45 -20 replies
105/242hwmon: (pxe1610) Check return value of page-select write in probedrivers/hwmon/pmbus/pxe1610.c+4 -10 replies
106/242hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS")drivers/hwmon/pmbus/ltc4286.c+1 -00 replies
107/242dt-bindings: gpio: fix microchip #interrupt-cellsDocumentation/devicetree/bindings/gpio/microchip,mpfs-gpio.yaml+2 -20 replies
108/242hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()drivers/hwmon/pmbus/tps53679.c+2 -20 replies
109/242hwmon: (occ) Fix missing newline in occ_show_extended()drivers/hwmon/occ/common.c+1 -10 replies
110/242mips: ralink: update CPU clock indexarch/mips/ralink/clk.c+4 -40 replies
111/242sched/fair: Use protect_slice() instead of direct comparisonkernel/sched/fair.c+1 -10 replies
112/242sched/fair: Fix zero_vruntime tracking fixkernel/sched/fair.c+3 -70 replies
113/242riscv: kgdb: fix several debug register assignment bugsarch/riscv/kernel/kgdb.c+4 -30 replies
114/242drm/ioc32: stop speculation on the drm_compat_ioctl pathdrivers/gpu/drm/drm_ioc32.c+2 -00 replies
115/242wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculationdrivers/net/wireless/microchip/wilc1000/hif.c+1 -10 replies
116/242wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()drivers/net/wireless/intel/iwlwifi/mvm/d3.c+1 -10 replies
117/242USB: serial: option: add MeiG Smart SRM825WNdrivers/usb/serial/option.c+3 -00 replies
118/242ALSA: caiaq: fix stack out-of-bounds read in init_cardsound/usb/caiaq/device.c+1 -10 replies
119/242ALSA: ctxfi: Fix missing SPDIFI1 index handlingsound/pci/ctxfi/ctdaio.c+1 -00 replies
120/242io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()io_uring/net.c+4 -00 replies
121/242Bluetooth: SMP: derive legacy responder STK authentication from MITM statenet/bluetooth/smp.c+1 -40 replies
122/242Bluetooth: SMP: force responder MITM requirements before building the pairing responsenet/bluetooth/smp.c+5 -10 replies
123/242Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_syncnet/bluetooth/hci_sync.c+2 -10 replies
124/242ksmbd: fix OOB write in QUERY_INFO for compound requestsfs/smb/server/smb2pdu.c fs/smb/server/smbacl.c fs/smb/server/smbacl.h+134 -320 replies
125/242MIPS: SiByte: Bring back cache initialisationarch/mips/mm/cache.c+2 -10 replies
126/242MIPS: Fix the GCC version check for `__multi3 workaroundarch/mips/lib/multi3.c+3 -30 replies
127/242hwmon: (occ) Fix division by zero in occ_show_power_1()drivers/hwmon/occ/common.c+8 -90 replies
128/242mips: mm: Allocate tlb_vpn array atomicallyarch/mips/mm/tlb-r4k.c+1 -10 replies
129/242drm/amdgpu: fix the idr allocation flagsdrivers/gpu/drm/amd/amdgpu/amdgpu_ids.c+4 -10 replies
130/242iio: adc: ti-adc161s626: fix buffer read on big-endiandrivers/iio/adc/ti-adc161s626.c+12 -90 replies
131/242iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()drivers/iio/adc/ti-adc161s626.c+8 -120 replies
132/242iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion()drivers/iio/adc/ti-ads1119.c+1 -10 replies
133/242iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout()drivers/iio/adc/ti-ads1119.c+3 -00 replies
134/242iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREADdrivers/iio/adc/ti-ads1119.c+2 -40 replies
135/242drm/ast: dp501: Fix initialization of SCU2Cdrivers/gpu/drm/ast/ast_dp501.c+1 -10 replies
136/242drm/i915/dsi: Dont do DSC horizontal timing adjustments in command modedrivers/gpu/drm/i915/display/icl_dsi.c+2 -20 replies
137/242drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDPdrivers/gpu/drm/i915/display/g4x_dp.c+1 -10 replies
138/242drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KBdrivers/gpu/drm/amd/amdgpu/amdgpu_vm.h drivers/gpu/drm/amd/amdkfd/kfd_priv.h+3 -30 replies
139/242drm/amdgpu/pm: drop SMU driver if version not matched messagesdrivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c+0 -30 replies
140/242USB: serial: io_edgeport: add support for Blackbox IC135Adrivers/usb/serial/io_edgeport.c drivers/usb/serial/io_usbvend.h+4 -00 replies
141/242USB: serial: option: add support for Rolling Wireless RW135R-GLdrivers/usb/serial/option.c+1 -00 replies
142/242USB: core: add NO_LPM quirk for Razer Kiyo Pro webcamdrivers/usb/core/quirks.c+2 -00 replies
143/242Input: synaptics-rmi4 - fix a locking bug in an error pathdrivers/input/rmi4/rmi_f54.c+2 -20 replies
144/242Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk tabledrivers/input/serio/i8042-acpipnpio.h+7 -00 replies
145/242Input: bcm5974 - recover from failed mode switchdrivers/input/mouse/bcm5974.c+41 -10 replies
146/242Input: xpad - add support for BETOP BTP-KP50B/C controllers wireless modedrivers/input/joystick/xpad.c+3 -00 replies
147/242Input: xpad - add support for Razer Wolverine V3 Prodrivers/input/joystick/xpad.c+2 -00 replies
148/242iio: adc: aspeed: clear reference voltage bits before configuring vrefdrivers/iio/adc/aspeed_adc.c+1 -00 replies
149/242iio: accel: fix ADXL355 temperature signature valuedrivers/iio/accel/adxl355_core.c+1 -10 replies
150/242iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0drivers/iio/accel/adxl380.c+1 -10 replies
151/242iio: dac: ad5770r: fix error return in ad5770r_read_raw()drivers/iio/dac/ad5770r.c+1 -10 replies
152/242iio: light: vcnl4035: fix scan buffer on big-endiandrivers/iio/light/vcnl4035.c+12 -60 replies
153/242iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()drivers/iio/imu/bmi160/bmi160_core.c+5 -100 replies
154/242iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope onlydrivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c+4 -00 replies
155/242iio: gyro: mpu3050: Fix incorrect free_irq() variabledrivers/iio/gyro/mpu3050-core.c+1 -10 replies
156/242iio: gyro: mpu3050: Fix irq resource leakdrivers/iio/gyro/mpu3050-core.c+6 -10 replies
157/242iio: gyro: mpu3050: Move iio_device_register() to correct locationdrivers/iio/gyro/mpu3050-core.c+13 -80 replies
158/242iio: gyro: mpu3050: Fix out-of-sequence free_irq()drivers/iio/gyro/mpu3050-core.c+1 -10 replies
159/242usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drivedrivers/usb/core/quirks.c+1 -00 replies
160/242usb: ulpi: fix double free in ulpi_register_interface() error pathdrivers/usb/common/ulpi.c+2 -30 replies
161/242usb: usbtmc: Flush anchored URBs in usbtmc_releasedrivers/usb/class/usbtmc.c+3 -00 replies
162/242usb: ehci-brcm: fix sleep during atomicdrivers/usb/host/ehci-brcm.c+2 -20 replies
163/242usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()drivers/usb/dwc2/gadget.c+2 -00 replies
164/242usb: core: phy: avoid double use of usb3-phydrivers/usb/core/phy.c+11 -10 replies
165/242usb: cdns3: gadget: fix NULL pointer dereference in ep_queuedrivers/usb/cdns3/cdns3-gadget.c+3 -00 replies
166/242usb: cdns3: gadget: fix state inconsistency on gadget init failuredrivers/usb/cdns3/cdns3-gadget.c+1 -00 replies
167/242x86/platform/geode: Fix on-stack property data use-after-return bugarch/x86/platform/geode/geode-common.c+18 -60 replies
168/242Revert "LoongArch: Handle percpu handler address for ORC unwinder"arch/loongarch/include/asm/setup.h arch/loongarch/kernel/unwind_orc.c+1 -180 replies
169/242Revert "LoongArch: Remove unnecessary checks for ORC unwinder"arch/loongarch/kernel/unwind_orc.c+11 -50 replies
170/242Revert "LoongArch/orc: Use RCU in all users of __module_address()."arch/loongarch/kernel/unwind_orc.c+3 -10 replies
171/242bridge: br_nd_send: validate ND option lengthsnet/bridge/br_arp_nd_proxy.c+4 -20 replies
172/242cdc-acm: new quirk for EPSON HMDdrivers/usb/class/cdc-acm.c drivers/usb/class/cdc-acm.h+10 -00 replies
173/242comedi: dt2815: add hardware detection to prevent crashdrivers/comedi/drivers/dt2815.c+12 -00 replies
174/242comedi: Reinit dev->spinlock between attachments to low-level driversdrivers/comedi/drivers.c+8 -00 replies
175/242comedi: ni_atmio16d: Fix invalid clean-up after failed attachdrivers/comedi/drivers/ni_atmio16d.c+2 -10 replies
176/242comedi: me_daq: Fix potential overrun of firmware bufferdrivers/comedi/drivers/me_daq.c+19 -160 replies
177/242comedi: me4000: Fix potential overrun of firmware bufferdrivers/comedi/drivers/me4000.c+12 -40 replies
178/242firmware: microchip: fail auto-update probe if no flash founddrivers/firmware/microchip/mpfs-auto-update.c+6 -40 replies
179/242dt-bindings: connector: add pd-disable dependencyDocumentation/devicetree/bindings/connector/usb-connector.yaml+1 -00 replies
180/242nvmem: imx: assign nvmem_cell_info::raw_lendrivers/nvmem/imx-ocotp-ele.c drivers/nvmem/imx-ocotp.c+2 -00 replies
181/242nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpydrivers/nvmem/zynqmp_nvmem.c+4 -40 replies
182/242netfilter: ipset: drop logically empty buckets in mtype_delnet/netfilter/ipset/ip_set_hash_gen.h+1 -10 replies
183/242counter: rz-mtu3-cnt: prevent counter from being toggled multiple timesdrivers/counter/rz-mtu3-cnt.c+8 -40 replies
184/242counter: rz-mtu3-cnt: do not use struct rz_mtu3_channels dev memberdrivers/counter/rz-mtu3-cnt.c+27 -280 replies
185/242crypto: tegra - Add missing CRYPTO_ALG_ASYNCdrivers/crypto/tegra/tegra-se-aes.c drivers/crypto/tegra/tegra-se-hash.c+24 -170 replies
186/242vxlan: validate ND option lengths in vxlan_na_createdrivers/net/vxlan/vxlan_core.c+4 -20 replies
187/242net: ftgmac100: fix ring allocation unwind on open failuredrivers/net/ethernet/faraday/ftgmac100.c+24 -40 replies
188/242net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disableddrivers/net/ethernet/mediatek/mtk_ppe_offload.c+20 -10 replies
189/242cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error pathdrivers/cpufreq/cpufreq_governor.c+3 -30 replies
190/242gpio: mxc: map Both Edge pad wakeup to Rising Edgedrivers/gpio/gpio-mxc.c+9 -10 replies
191/242thermal: core: Fix thermal zone device registration error pathdrivers/thermal/thermal_core.c+1 -00 replies
192/242misc: fastrpc: possible double-free of cctx->remote_heapdrivers/misc/fastrpc.c+1 -00 replies
193/242thunderbolt: Fix property read in nhi_wake_supported()drivers/thunderbolt/nhi.c+1 -10 replies
194/242USB: dummy-hcd: Fix locking/synchronization errordrivers/usb/gadget/udc/dummy_hcd.c+6 -10 replies
195/242USB: dummy-hcd: Fix interrupt synchronization errordrivers/usb/gadget/udc/dummy_hcd.c+14 -150 replies
196/242usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transferdrivers/usb/gadget/udc/dummy_hcd.c+6 -00 replies
197/242usb: typec: ucsi: validate connector number in ucsi_notify_common()drivers/usb/typec/ucsi/ucsi.c+7 -20 replies
198/242ice: Fix memory leak in ice_set_ringparam()drivers/net/ethernet/intel/ice/ice_ethtool.c+9 -20 replies
199/242btrfs: fix the qgroup data free range for inline data extentsfs/btrfs/inode.c+1 -10 replies
200/242btrfs: do not free data reservation in fallback from inline due to -ENOSPCfs/btrfs/inode.c+5 -10 replies
201/242usb: gadget: u_ether: Fix race between gether_disconnect and eth_stopdrivers/usb/gadget/function/u_ether.c+5 -50 replies
202/242usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfodrivers/usb/gadget/function/u_ether.c+4 -20 replies
203/242usb: gadget: uvc: fix NULL pointer dereference during unbind racedrivers/usb/gadget/function/f_uvc.c drivers/usb/gadget/function/uvc.h drivers/usb/gadget/function/uvc_v4l2.c+43 -40 replies
204/242usb: gadget: f_subset: Fix unbalanced refcnt in geth_freedrivers/usb/gadget/function/f_subset.c+6 -00 replies
205/242usb: gadget: f_rndis: Protect RNDIS options with mutexdrivers/usb/gadget/function/f_rndis.c+6 -30 replies
206/242usb: gadget: f_ecm: Fix net_device lifecycle with device_movedrivers/usb/gadget/function/f_ecm.c drivers/usb/gadget/function/u_ecm.h+39 -190 replies
207/242usb: gadget: f_eem: Fix net_device lifecycle with device_movedrivers/usb/gadget/function/f_eem.c drivers/usb/gadget/function/u_eem.h+46 -340 replies
208/242usb: gadget: f_subset: Fix net_device lifecycle with device_movedrivers/usb/gadget/function/f_subset.c drivers/usb/gadget/function/u_gether.h+44 -350 replies
209/242usb: gadget: f_rndis: Fix net_device lifecycle with device_movedrivers/usb/gadget/function/f_rndis.c drivers/usb/gadget/function/u_rndis.h+48 -250 replies
210/242usb: gadget: f_hid: move list and spinlock inits from bind to allocdrivers/usb/gadget/function/f_hid.c+10 -90 replies
211/242usb: gadget: f_uac1_legacy: validate control request sizedrivers/usb/gadget/function/f_uac1_legacy.c+37 -100 replies
212/242wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-freedrivers/net/wireless/virtual/virt_wifi.c+0 -10 replies
213/242spi: cadence-qspi: Fix exec_mem_op error handlingdrivers/spi/spi-cadence-quadspi.c+7 -60 replies
214/242net: correctly handle tunneled traffic on IPV6_CSUM GSO fallbacknet/core/dev.c+17 -50 replies
215/242net: mana: fix use-after-free in add_adev() error pathdrivers/net/ethernet/microsoft/mana/mana_en.c+4 -20 replies
216/242scsi: target: tcm_loop: Drain commands in target_reset handlerdrivers/target/loopback/tcm_loop.c+46 -60 replies
217/242x86/fred: Fix early boot failures on SEV-ES/SNP guestsarch/x86/coco/sev/core.c arch/x86/entry/entry_fred.c+20 -00 replies
218/242mm/huge_memory: fix folio isnt locked in softleaf_to_folio()include/linux/swapops.h+19 -80 replies
219/242mm: replace READ_ONCE() with standard page table accessorsmm/gup.c mm/hmm.c mm/memory.c +3 more+11 -110 replies
220/242mm/memory: fix PMD/PUD checks in follow_pfnmap_start()mm/memory.c+15 -30 replies
221/242drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c+64 -20 replies
222/242ext4: publish jinode after initializationfs/ext4/fast_commit.c fs/ext4/inode.c+13 -60 replies
223/242s390/perf_cpum_sf: Convert to use try_cmpxchg128()arch/s390/kernel/perf_cpum_sf.c+9 -150 replies
224/242s390/cpum_sf: Cap sampling rate to prevent lsctl exceptionarch/s390/kernel/perf_cpum_sf.c+5 -10 replies
225/242MPTCP: fix lock class name family in pm_nl_create_listen_socketnet/mptcp/pm_netlink.c+1 -10 replies
226/242x86/CPU/AMD: Add additional fixed RDSEED microcode revisionsarch/x86/kernel/cpu/amd.c+7 -00 replies
227/242drm/amd/amdgpu: decouple ASPM with pcie dpmdrivers/gpu/drm/amd/amdgpu/amdgpu_device.c+0 -20 replies
228/242drm/amd/amdgpu: disable ASPM in some situationsdrivers/gpu/drm/amd/amdgpu/amdgpu_device.c+32 -00 replies
229/242drm/amd/display: Disable fastboot on DCE 6 toodrivers/gpu/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c+2 -40 replies
230/242drm/amd/display: Reject modes with too high pixel clock on DCE6-10drivers/gpu/drm/amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c drivers/gpu/drm/amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c drivers/gpu/drm/amd/display/dc/dce60/dce60_resource.c +2 more+35 -34 replies
231/242drm/amd/display: Keep PLL0 running on DCE 6.0 and 6.4drivers/gpu/drm/amd/display/dc/dce60/dce60_resource.c+10 -10 replies
232/242drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming.drivers/gpu/drm/amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c drivers/gpu/drm/amd/display/dc/dce60/dce60_resource.c+25 -140 replies
233/242drm/amd/display: Adjust DCE 8-10 clock, dont overclock by 15%drivers/gpu/drm/amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c+5 -70 replies
234/242drm/amd/display: Disable scaling on DCE6 for nowdrivers/gpu/drm/amd/display/dc/dce60/dce60_resource.c+2 -20 replies
235/242drm/amd: Disable ASPM on SIdrivers/gpu/drm/amd/amdgpu/amdgpu_device.c+7 -00 replies
236/242drm/amd/display: Correct logic check error for fastbootdrivers/gpu/drm/amd/display/dc/hwss/dce110/dce110_hwseq.c+2 -20 replies
237/242bpf: Improve bounds when s64 crosses sign boundarykernel/bpf/verifier.c+52 -00 replies
238/242selftests/bpf: Test cross-sign 64bits range refinementtools/testing/selftests/bpf/progs/verifier_bounds.c+118 -00 replies
239/242selftests/bpf: Test invariants on JSLT crossing signtools/testing/selftests/bpf/progs/verifier_bounds.c+1 -10 replies
240/242bpf: Add third round of bounds deductionkernel/bpf/verifier.c tools/testing/selftests/bpf/progs/verifier_bounds.c+2 -10 replies
241/242bpf: Fix u32/s32 bounds when ranges cross min/max boundarykernel/bpf/verifier.c tools/testing/selftests/bpf/prog_tests/reg_bounds.c+82 -40 replies
242/242selftests/bpf: test refining u32/s32 bounds when ranges cross min/max boundarytools/testing/selftests/bpf/progs/verifier_bounds.c+38 -10 replies

Reviews trailers per patch

108 of 242 patches have a Reviewed-by or Acked-by.

PatchDavid Howells[email protected]Jason GereckeEric DumazetDamien Le MoalDavid SterbaRishon Jonathan RMichael ChanPavel BegunkovSimon HormanJustin IurmanPavan ChebbiIdo SchimmelAo ZhouNikolay AleksandrovBoris BurkovQu WenruoJamal Hadi SalimRussell King (Oracle)Clark WangClaudiu ManoilMadhur Agrawal[email protected]Willem de BruijnSean AndersonArnd BergmannDaniel BorkmannAmery HungEduard ZingermanRen WeiKonrad DybcioRob Herring (Arm)Baochen QiangVasanthakumar ThiagarajanGünther NoackAllison HendersonJiayuan ChenStephen HemmingerMark BlochMoshe ShemeshJianbo LiuKalesh APPhil SutterKumar Kartikeya DwivediGuenter RoeckSimona VetterThomas ZimmermannMaxime RipardKarsten HohmeierPaul MenzelDavid LaightBorislav Petkov (AMD)Christian KönigAndy ShevchenkoJoão Paulo GonçalvesFrancesco DolciniDavid LechnerJocelyn FalempeJani NikulaMichał GrzelakSergio ParacuellosDhaval Giani (AMD)Vincent GuittotK Prateek NayakJohn StultzLizhi HouJeff HugoNuno SáLinus WalleijHeikki KrogerusFlorian FainelliPeter ChenHenrik RydbergYang WangLijo LazarZhongqiu HanViresh KumarPeng FanLukasz LubaDmitry Baryshkov[email protected]Alan SternAleksandr LoktionovRinitha SFilipe Manana[email protected]Ian AbbottConor DooleyLong LiTom LendackyDavid Hildenbrand (Arm)Lorenzo Stoakes (Oracle)David HildenbrandLance YangWei YangDev JainMike Rapoport (Microsoft)Alex DeucherJan KaraJuergen ChristSumanth KorikkarHendrik BruecknerMatthieu Baerts (NGI0)Rodrigo SiqueiraAlex HungMario LimoncielloOvidiu BuneaDaniel WheelerShung-Hsi YuGreg Kroah-HartmanBreno LeitaoEmil TsalapatisPaul ChaignonDileep MalepuPavel Machek (CIP)Ron EconomosJon HunterShuah Khan
SeriesT-b T-b T-b T-b T-b T-b T-b
1/242
2/242
3/242
4/242
5/242
6/242
7/242io_kbuf_commitSigned-off-by
8/242
9/242
10/242
11/242
12/242
13/242
14/242
15/242
16/242
17/242
18/242
19/242T-b
20/242
21/242
22/242
23/242
24/242
25/242
26/242
27/242
28/242T-b
29/242R-b
30/242R-b
31/242R-b R-b
32/242T-b R-b
33/242
34/242R-b
35/242
36/242R-b R-b
37/242
38/242R-b
39/242R-b
40/242A-b
41/242R-b R-b
42/242
43/242
44/242
45/242
46/242R-b
47/242R-b
48/242R-b
49/242R-b
50/242R-b
51/242R-b
52/242
53/242R-b T-b A-b
54/242A-b
55/242R-b
56/242R-b R-b
57/242
58/242
59/242T-b
60/242R-b
61/242T-b R-b
62/242A-b
63/242
64/242R-b
65/242A-b
66/242R-b R-b A-b
67/242R-b T-b
68/242
69/242
70/242
71/242
72/242R-b
73/242
74/242
75/242
76/242
77/242
78/242
79/242
80/242
81/242
82/242
83/242
84/242
85/242
86/242R-b
87/242R-b
88/242R-b
89/242
90/242
91/242R-b
92/242R-b
93/242R-b
94/242R-b
95/242
96/242
97/242A-b
98/242A-b
99/242
100/242
101/242A-b
102/242T-b A-b
103/242
104/242R-b R-b
105/242
106/242
107/242
108/242
109/242
110/242R-b
111/242R-b
112/242R-b T-b T-b
113/242
114/242R-b A-b A-b
115/242
116/242
117/242
118/242
119/242Reported-and-tested-by
120/242
121/242
122/242
123/242R-b
124/242
125/242
126/242R-b
127/242
128/242
129/242T-b R-b
130/242
131/242R-b
132/242R-b
133/242R-b
134/242R-b
135/242R-b
136/242R-b
137/242R-b
138/242R-b
139/242R-b R-b
140/242
141/242
142/242
143/242
144/242
145/242A-b
146/242
147/242
148/242
149/242
150/242
151/242
152/242
153/242R-b R-b
154/242
155/242R-b R-b
156/242R-b R-b
157/242R-b R-b
158/242R-b R-b
159/242
160/242R-b
161/242
162/242R-b
163/242
164/242
165/242A-b
166/242A-b
167/242
168/242
169/242
170/242
171/242R-b T-b A-b
172/242
173/242T-b R-b
174/242
175/242
176/242
177/242
178/242
179/242A-b
180/242
181/242
182/242R-b
183/242
184/242
185/242
186/242R-b T-b A-b
187/242
188/242R-b
189/242R-b A-b
190/242R-b
191/242R-b T-b
192/242R-b
193/242
194/242T-b
195/242
196/242R-b
197/242R-b
198/242R-b R-b T-b
199/242R-b R-b
200/242R-b R-b
201/242
202/242
203/242
204/242
205/242
206/242
207/242
208/242
209/242
210/242
211/242
212/242A-b R-b
213/242
214/242
215/242R-b
216/242
217/242R-b
218/242A-b R-b
219/242A-b R-b R-b R-b
220/242R-b A-b
221/242A-b
222/242R-b
223/242R-b
224/242R-b R-b
225/242R-b
226/242
227/242R-b
228/242R-b
229/242R-b R-b R-b
230/242R-b
231/242R-b R-b
232/242R-b R-b
233/242A-b R-b R-b
234/242R-b
235/242R-b
236/242R-b R-b T-b
237/242A-b A-b
238/242A-b
239/242A-b
240/242A-b
241/242A-b R-b
242/242A-b R-b R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 118 reviewers.

Read the v1 thread

Cover letter [PATCH 6.12 000/242] 6.12.81-rc1 review

This is the start of the stable review cycle for the 6.12.81 release. There are 242 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 10 Apr 2026 17:58:42 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.81-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.12.81-rc1

Eduard Zingerman <[email protected]>
selftests/bpf: test refining u32/s32 bounds when ranges cross min/max boundary

Eduard Zingerman <[email protected]>
bpf: Fix u32/s32 bounds when ranges cross min/max boundary

Paul Chaignon <[email protected]>
bpf: Add third round of bounds deduction

Paul Chaignon <[email protected]>
selftests/bpf: Test invariants on JSLT crossing sign

Paul Chaignon <[email protected]>
selftests/bpf: Test cross-sign 64bits range refinement

Paul Chaignon <[email protected]>
bpf: Improve bounds when s64 crosses sign boundary

Charlene Liu <[email protected]>
drm/amd/display: Correct logic check error for fastboot

Timur Kristóf <[email protected]>
drm/amd: Disable ASPM on SI

Timur Kristóf <[email protected]>
drm/amd/display: Disable scaling on DCE6 for now

Timur Kristóf <[email protected]>
drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15%

Timur Kristóf <[email protected]>
drm/amd/display: Fix DCE 6.0 and 6.4 PLL programming.

Timur Kristóf <[email protected]>
drm/amd/display: Keep PLL0 running on DCE 6.0 and 6.4

Timur Kristóf <[email protected]>
drm/amd/display: Reject modes with too high pixel clock on DCE6-10

Timur Kristóf <[email protected]>
drm/amd/display: Disable fastboot on DCE 6 too

Kenneth Feng <[email protected]>
drm/amd/amdgpu: disable ASPM in some situations

Kenneth Feng <[email protected]>
drm/amd/amdgpu: decouple ASPM with pcie dpm

Mario Limonciello <[email protected]>
x86/CPU/AMD: Add additional fixed RDSEED microcode revisions

Li Xiasong <[email protected]>
MPTCP: fix lock class name family in pm_nl_create_listen_socket

Thomas Richter <[email protected]>
s390/cpum_sf: Cap sampling rate to prevent lsctl exception

Heiko Carstens <[email protected]>

    s390/perf_cpum_sf: Convert to use try_cmpxchg128()

Li Chen <[email protected]>
ext4: publish jinode after initialization

Yang Wang <[email protected]>
drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13

David Hildenbrand (Arm) <[email protected]>
mm/memory: fix PMD/PUD checks in follow_pfnmap_start()

Anshuman Khandual <[email protected]>
mm: replace READ_ONCE() with standard page table accessors

Jinjiang Tu <[email protected]>
mm/huge_memory: fix folio isn't locked in softleaf_to_folio()

Nikunj A Dadhania <[email protected]>
x86/fred: Fix early boot failures on SEV-ES/SNP guests

Josef Bacik <[email protected]>
scsi: target: tcm_loop: Drain commands in target_reset handler

Guangshuo Li <[email protected]>
net: mana: fix use-after-free in add_adev() error path

Willem de Bruijn <[email protected]>
net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback

Emanuele Ghidoli <[email protected]>
spi: cadence-qspi: Fix exec_mem_op error handling

Alexander Popov <[email protected]>
wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free

Taegu Ha <[email protected]>
usb: gadget: f_uac1_legacy: validate control request size

Michael Zimmermann <[email protected]>
usb: gadget: f_hid: move list and spinlock inits from bind to alloc

Kuen-Han Tsai <[email protected]>
usb: gadget: f_rndis: Fix net_device lifecycle with device_move

Kuen-Han Tsai <[email protected]>
usb: gadget: f_subset: Fix net_device lifecycle with device_move

Kuen-Han Tsai <[email protected]>
usb: gadget: f_eem: Fix net_device lifecycle with device_move

Kuen-Han Tsai <[email protected]>
usb: gadget: f_ecm: Fix net_device lifecycle with device_move

Kuen-Han Tsai <[email protected]>
usb: gadget: f_rndis: Protect RNDIS options with mutex

Kuen-Han Tsai <[email protected]>
usb: gadget: f_subset: Fix unbalanced refcnt in geth_free

Jimmy Hu <[email protected]>
usb: gadget: uvc: fix NULL pointer dereference during unbind race

Kuen-Han Tsai <[email protected]>
usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo

Kuen-Han Tsai <[email protected]>
usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop

Filipe Manana <[email protected]>
btrfs: do not free data reservation in fallback from inline due to -ENOSPC

Qu Wenruo <[email protected]>
btrfs: fix the qgroup data free range for inline data extents

Zilin Guan <[email protected]>
ice: Fix memory leak in ice_set_ringparam()

Nathan Rebello <[email protected]>
usb: typec: ucsi: validate connector number in ucsi_notify_common()

Sebastian Urban <[email protected]>
usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer

Alan Stern <[email protected]>
USB: dummy-hcd: Fix interrupt synchronization error

Alan Stern <[email protected]>
USB: dummy-hcd: Fix locking/synchronization error

Konrad Dybcio <[email protected]>
thunderbolt: Fix property read in nhi_wake_supported()

Xingjing Deng <[email protected]>

    misc: fastrpc: possible double-free of cctx->remote_heap

Rafael J. Wysocki <[email protected]>
thermal: core: Fix thermal zone device registration error path

Shenwei Wang <[email protected]>
gpio: mxc: map Both Edge pad wakeup to Rising Edge

Guangshuo Li <[email protected]>
cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path

Sven Eckelmann (Plasma Cloud) <[email protected]>
net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled

Yufan Chen <[email protected]>
net: ftgmac100: fix ring allocation unwind on open failure

Yang Yang <[email protected]>
vxlan: validate ND option lengths in vxlan_na_create

Eric Biggers <[email protected]>
crypto: tegra - Add missing CRYPTO_ALG_ASYNC

Cosmin Tanislav <[email protected]>
counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member

Cosmin Tanislav <[email protected]>
counter: rz-mtu3-cnt: prevent counter from being toggled multiple times

Yifan Wu <[email protected]>
netfilter: ipset: drop logically empty buckets in mtype_del

Ivan Vera <[email protected]>
nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy

Christian Eggers <[email protected]>
nvmem: imx: assign nvmem_cell_info::raw_len

Xu Yang <[email protected]>
dt-bindings: connector: add pd-disable dependency

Conor Dooley <[email protected]>
firmware: microchip: fail auto-update probe if no flash found

Ian Abbott <[email protected]>
comedi: me4000: Fix potential overrun of firmware buffer

Ian Abbott <[email protected]>
comedi: me_daq: Fix potential overrun of firmware buffer

Ian Abbott <[email protected]>
comedi: ni_atmio16d: Fix invalid clean-up after failed attach

Ian Abbott <[email protected]>

    comedi: Reinit dev->spinlock between attachments to low-level drivers

Deepanshu Kartikey <[email protected]>
comedi: dt2815: add hardware detection to prevent crash

Oliver Neukum <[email protected]>
cdc-acm: new quirk for EPSON HMD

Yang Yang <[email protected]>
bridge: br_nd_send: validate ND option lengths

Sasha Levin <[email protected]>
Revert "LoongArch/orc: Use RCU in all users of __module_address()."

Sasha Levin <[email protected]>
Revert "LoongArch: Remove unnecessary checks for ORC unwinder"

Sasha Levin <[email protected]>
Revert "LoongArch: Handle percpu handler address for ORC unwinder"

Dmitry Torokhov <[email protected]>
x86/platform/geode: Fix on-stack property data use-after-return bug

Yongchao Wu <[email protected]>
usb: cdns3: gadget: fix state inconsistency on gadget init failure

Yongchao Wu <[email protected]>
usb: cdns3: gadget: fix NULL pointer dereference in ep_queue

Gabor Juhos <[email protected]>
usb: core: phy: avoid double use of 'usb3-phy'

Juno Choi <[email protected]>
usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()

Justin Chen <[email protected]>
usb: ehci-brcm: fix sleep during atomic

Heitor Alves de Siqueira <[email protected]>
usb: usbtmc: Flush anchored URBs in usbtmc_release

Guangshuo Li <[email protected]>
usb: ulpi: fix double free in ulpi_register_interface() error path

Miao Li <[email protected]>
usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive

Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Fix out-of-sequence free_irq()

Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Move iio_device_register() to correct location

Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Fix irq resource leak

Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Fix incorrect free_irq() variable

Francesco Lavra <[email protected]>
iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only

Josh Poimboeuf <[email protected]>
iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()

David Lechner <[email protected]>
iio: light: vcnl4035: fix scan buffer on big-endian

Antoniu Miclaus <[email protected]>

    iio: dac: ad5770r: fix error return in ad5770r_read_raw()

Antoniu Miclaus <[email protected]>
iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0

Valek Andrej <[email protected]>
iio: accel: fix ADXL355 temperature signature value

Billy Tsai <[email protected]>
iio: adc: aspeed: clear reference voltage bits before configuring vref

Zoltan Illes <[email protected]>
Input: xpad - add support for Razer Wolverine V3 Pro

Shengyu Qu <[email protected]>
Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode

Liam Mitchell <[email protected]>
Input: bcm5974 - recover from failed mode switch

Christoffer Sandberg <[email protected]>
Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table

Bart Van Assche <[email protected]>
Input: synaptics-rmi4 - fix a locking bug in an error path

JP Hein <[email protected]>
USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam

Wanquan Zhong <[email protected]>
USB: serial: option: add support for Rolling Wireless RW135R-GL

Frej Drejhammar <[email protected]>
USB: serial: io_edgeport: add support for Blackbox IC135A

Alex Deucher <[email protected]>
drm/amdgpu/pm: drop SMU driver if version not matched messages

Donet Tom <[email protected]>
drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB

Ville Syrjälä <[email protected]>

    drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP

Ville Syrjälä <[email protected]>
drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode

Thomas Zimmermann <[email protected]>
drm/ast: dp501: Fix initialization of SCU2C

Felix Gu <[email protected]>
iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD

Felix Gu <[email protected]>
iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout()

Felix Gu <[email protected]>
iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion()

David Lechner <[email protected]>
iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()

David Lechner <[email protected]>
iio: adc: ti-adc161s626: fix buffer read on big-endian

Prike Liang <[email protected]>
drm/amdgpu: fix the idr allocation flags

Stefan Wiehler <[email protected]>
mips: mm: Allocate tlb_vpn array atomically

Sanman Pradhan <[email protected]>
hwmon: (occ) Fix division by zero in occ_show_power_1()

Maciej W. Rozycki <[email protected]>
MIPS: Fix the GCC version check for `__multi3' workaround

Maciej W. Rozycki <[email protected]>
MIPS: SiByte: Bring back cache initialisation

Asim Viladi Oglu Manizada <[email protected]>
ksmbd: fix OOB write in QUERY_INFO for compound requests

hkbinbin <[email protected]>
Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync

Oleh Konko <[email protected]>
Bluetooth: SMP: force responder MITM requirements before building the pairing response

Oleh Konko <[email protected]>
Bluetooth: SMP: derive legacy responder STK authentication from MITM state

Junxi Qian <[email protected]>
io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()

Takashi Iwai <[email protected]>
ALSA: ctxfi: Fix missing SPDIFI1 index handling

Berk Cem Goksel <[email protected]>
ALSA: caiaq: fix stack out-of-bounds read in init_card

Ernestas Kulik <[email protected]>
USB: serial: option: add MeiG Smart SRM825WN

Alexey Velichayshiy <[email protected]>
wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()

Yasuaki Torimaru <[email protected]>
wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation

Greg Kroah-Hartman <[email protected]>
drm/ioc32: stop speculation on the drm_compat_ioctl path

Paul Walmsley <[email protected]>
riscv: kgdb: fix several debug register assignment bugs

Peter Zijlstra <[email protected]>
sched/fair: Fix zero_vruntime tracking fix

Vincent Guittot <[email protected]>
sched/fair: Use protect_slice() instead of direct comparison

Shiji Yang <[email protected]>
mips: ralink: update CPU clock index

Sanman Pradhan <[email protected]>
hwmon: (occ) Fix missing newline in occ_show_extended()

Sanman Pradhan <[email protected]>
hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()

Jamie Gibbons <[email protected]>
dt-bindings: gpio: fix microchip #interrupt-cells

Sanman Pradhan <[email protected]>
hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS")

Sanman Pradhan <[email protected]>
hwmon: (pxe1610) Check return value of page-select write in probe

Youssef Samir <[email protected]>
accel/qaic: Handle DBC deactivation if the owner went away

David Lechner <[email protected]>
iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one

Maarten Lankhorst <[email protected]>
Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"

Qi Tang <[email protected]>
bpf: reject direct access to nullable PTR_TO_BUF pointers

Eric Dumazet <[email protected]>
ipv6: avoid overflows in ip6_datagram_send_ctl()

Luka Gejak <[email protected]>
net: hsr: fix VLAN add unwind on slave errors

Xiang Mei <[email protected]>
net/sched: cls_flow: fix NULL pointer dereference on shared blocks

Xiang Mei <[email protected]>
net/sched: cls_fw: fix NULL pointer dereference on shared blocks

Martin Schiller <[email protected]>
net/x25: Fix overflow when accumulating packets

Martin Schiller <[email protected]>
net/x25: Fix potential double free of skb

Pavan Chebbi <[email protected]>
bnxt_en: Restore default stat ctxs for ULP when resource is available

Saeed Mahameed <[email protected]>
net/mlx5: Fix switchdev mode rollback in case of failure

Saeed Mahameed <[email protected]>
net/mlx5: Avoid "No data available" when FW version queries fail

Shay Drory <[email protected]>
net/mlx5: lag: Check for LAG device before creating debugfs

Fedor Pchelkin <[email protected]>
net: macb: properly unregister fixed rate clocks

Fedor Pchelkin <[email protected]>
net: macb: fix clk handling on PCI glue driver removal

Yucheng Lu <[email protected]>
net/sched: sch_netem: fix out-of-bounds access in packet corruption

Kuniyuki Iwashima <[email protected]>

    bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().

Weiming Shi <[email protected]>
rds: ib: reject FRMR registration before IB connection is established

Keenan Dong <[email protected]>
Bluetooth: MGMT: validate mesh send advertising payload length

Pauli Virtanen <[email protected]>
Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt

Pauli Virtanen <[email protected]>
Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync

Keenan Dong <[email protected]>
Bluetooth: MGMT: validate LTK enc_size on load

Cen Zhang <[email protected]>
Bluetooth: SCO: fix race conditions in sco_sock_connect()

Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate

Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: reject immediate NF_QUEUE verdict

Pablo Neira Ayuso <[email protected]>
netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP

Pablo Neira Ayuso <[email protected]>
netfilter: ctnetlink: ignore explicit helper on new expectations

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: store netns and zone in expectation

Pablo Neira Ayuso <[email protected]>

    netfilter: nf_conntrack_expect: use expect->helper

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: honor expectation helper field

Qi Tang <[email protected]>
netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent

Qi Tang <[email protected]>
netfilter: nf_conntrack_helper: pass helper to expect cleanup

Florian Westphal <[email protected]>
netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr

Florian Westphal <[email protected]>
netfilter: x_tables: ensure names are nul-terminated

Florian Westphal <[email protected]>
netfilter: nfnetlink_log: account for netlink header size

Pablo Neira Ayuso <[email protected]>
netfilter: flowtable: strictly check for maximum number of actions

Zhengchuan Liang <[email protected]>
net: ipv6: flowlabel: defer exclusive option free until RCU teardown

Alexei Starovoitov <[email protected]>
bpf: Fix regsafe() for pointers to packet

Julian Braha <[email protected]>
ASoC: Intel: boards: fix unmet dependency on PINCTRL

Suraj Gupta <[email protected]>
net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec

Pengpeng Hou <[email protected]>
NFC: pn533: bound the UART receive buffer

Yochai Eisenrich <[email protected]>
net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak

Guoyu Su <[email protected]>
net: use skb_header_pointer() for TCPv4 GSO frag_off check

Paolo Abeni <[email protected]>
net: introduce mangleid_features

Lorenzo Bianconi <[email protected]>
net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue()

Paolo Abeni <[email protected]>
ipv6: prevent possible UaF in addrconf_permanent_addr()

Jihed Chaibi <[email protected]>
ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure

Wei Fang <[email protected]>
net: enetc: check whether the RSS algorithm is Toeplitz

Marek Behún <[email protected]>
net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta

Xiang Mei <[email protected]>
net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()

Yang Yang <[email protected]>
bridge: br_nd_send: linearize skb before parsing ND options

Dimitri Daskalakis <[email protected]>
eth: fbnic: Account for page fragments when updating BDQ tail

Eric Dumazet <[email protected]>

    ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

Eric Dumazet <[email protected]>

    ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

Thomas Bogendoerfer <[email protected]>
tg3: Fix race for querying speed/duplex

Pengpeng Hou <[email protected]>
net/ipv6: ioam6: prevent schema length wraparound in trace fill

Yochai Eisenrich <[email protected]>
net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak

Jiayuan Chen <[email protected]>
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak

Buday Csaba <[email protected]>
net: fec: fix the PTP periodic output sysfs interface

Norbert Szetei <[email protected]>
crypto: af-alg - fix NULL pointer dereference in scatterwalk

Horia Geantă <[email protected]>
crypto: caam - fix overflow on long hmac keys

Horia Geantă <[email protected]>
crypto: caam - fix DMA corruption on long hmac keys

Reshma Immaculate Rajkumar <[email protected]>
wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session

Frank Li <[email protected]>
dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning

Praveen Talari <[email protected]>
spi: geni-qcom: Check DMA interrupts early in ISR

ZhengYuan Huang <[email protected]>
btrfs: reject root items with drop_progress and zero drop_level

Mikko Perttunen <[email protected]>
i2c: tegra: Don't mark devices with pins as IRQ safe

Filipe Manana <[email protected]>
btrfs: reserve enough transaction items for qgroup ioctls

Lee Jones <[email protected]>
HID: multitouch: Check to ensure report responses match the request

Lee Jones <[email protected]>
HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure

Josh Poimboeuf <[email protected]>
objtool: Fix Clang jump table detection

Paul SAGE <[email protected]>
tg3: replace placeholder MAC address with device property

Johannes Thumshirn <[email protected]>
btrfs: don't take device_list_mutex when querying zone info

Deepanshu Kartikey <[email protected]>
atm: lec: fix use-after-free in sock_def_readable()

Benoît Sevens <[email protected]>
HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

Deepanshu Kartikey <[email protected]>

    wifi: mac80211: check tdls flag in ieee80211_tdls_oper

Adrian Freund <[email protected]>
HID: logitech-hidpp: Enable MX Master 4 over bluetooth

Pepper Gray <[email protected]>
arm64/scs: Fix handling of advance_loc4

Jens Axboe <[email protected]>
io_uring/kbuf: propagate BUF_MORE through early buffer commit path

Jens Axboe <[email protected]>
io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF

Joanne Koong <[email protected]>
io_uring/kbuf: use WRITE_ONCE() for userspace-shared buffer ring fields

Caleb Sander Mateos <[email protected]>
io_uring/kbuf: use READ_ONCE() for userspace-mapped memory

Jens Axboe <[email protected]>
io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths

Jens Axboe <[email protected]>
io_uring/kbuf: enable bundles for incrementally consumed buffers

Jens Axboe <[email protected]>
io_uring/rw: check for NULL io_br_sel when putting a buffer

Jens Axboe <[email protected]>
io_uring/net: correct type for min_not_zero() cast

Jens Axboe <[email protected]>
io_uring: remove async/poll related provided buffer recycles

Jens Axboe <[email protected]>
io_uring/kbuf: switch to storing struct io_buffer_list locally

Jens Axboe <[email protected]>

    io_uring/net: use struct io_br_sel->val as the send finish value

Jens Axboe <[email protected]>

    io_uring/net: use struct io_br_sel->val as the recv finish value

Jens Axboe <[email protected]>
io_uring/kbuf: use struct io_br_sel for multiple buffers picking

Jens Axboe <[email protected]>
io_uring/kbuf: introduce struct io_br_sel

Jens Axboe <[email protected]>
io_uring/kbuf: pass in struct io_buffer_list to commit/recycle helpers

Jens Axboe <[email protected]>
io_uring/net: clarify io_recv_buf_select() return value

Jens Axboe <[email protected]>
io_uring/net: don't use io_net_kbuf_recyle() for non-provided cases

Jens Axboe <[email protected]>
io_uring/kbuf: drop 'issue_flags' from io_put_kbuf(s)() arguments

Pavel Begunkov <[email protected]>
io_uring/kbuf: uninline __io_put_kbufs

Pavel Begunkov <[email protected]>
io_uring/kbuf: introduce io_kbuf_drop_legacy()

Pavel Begunkov <[email protected]>
io_uring/kbuf: open code __io_put_kbuf()

Pavel Begunkov <[email protected]>
io_uring/kbuf: remove legacy kbuf caching

Pavel Begunkov <[email protected]>
io_uring/kbuf: simplify __io_put_kbuf

Pavel Begunkov <[email protected]>
io_uring/kbuf: remove legacy kbuf kmem cache

Pavel Begunkov <[email protected]>
io_uring/kbuf: remove legacy kbuf bulk allocation

-------------

Diffstat:

 .../bindings/auxdisplay/holtek,ht16k33.yaml        |   2 +-
 .../bindings/connector/usb-connector.yaml          |   1 +
 .../bindings/gpio/microchip,mpfs-gpio.yaml         |   4 +-
 Makefile                                           |   4 +-
 arch/arm64/kernel/pi/patch-scs.c                   |   8 +
 arch/loongarch/include/asm/setup.h                 |   3 -
 arch/loongarch/kernel/unwind_orc.c                 |  32 +--
 arch/mips/lib/multi3.c                             |   6 +-
 arch/mips/mm/cache.c                               |   3 +-
 arch/mips/mm/tlb-r4k.c                             |   2 +-
 arch/mips/ralink/clk.c                             |   8 +-
 arch/riscv/kernel/kgdb.c                           |   7 +-
 arch/s390/kernel/perf_cpum_sf.c                    |  30 +--
 arch/x86/coco/sev/core.c                           |   6 +
 arch/x86/entry/entry_fred.c                        |  14 +
 arch/x86/kernel/cpu/amd.c                          |   7 +
 arch/x86/platform/geode/geode-common.c             |  24 +-
 crypto/af_alg.c                                    |   4 +-
 drivers/accel/qaic/qaic_control.c                  |  47 +++-
 drivers/comedi/drivers.c                           |   8 +
 drivers/comedi/drivers/dt2815.c                    |  12 +
 drivers/comedi/drivers/me4000.c                    |  16 +-
 drivers/comedi/drivers/me_daq.c                    |  35 +--
 drivers/comedi/drivers/ni_atmio16d.c               |   3 +-
 drivers/counter/rz-mtu3-cnt.c                      |  67 ++---
 drivers/cpufreq/cpufreq_governor.c                 |   6 +-
 drivers/crypto/caam/caamalg_qi2.c                  |   3 +-
 drivers/crypto/caam/caamhash.c                     |   3 +-
 drivers/crypto/tegra/tegra-se-aes.c                |  11 +-
 drivers/crypto/tegra/tegra-se-hash.c               |  30 ++-
 drivers/firmware/microchip/mpfs-auto-update.c      |  10 +-
 drivers/gpio/gpio-mxc.c                            |  10 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |  39 ++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c            |   5 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h             |   2 +-
 drivers/gpu/drm/amd/amdkfd/kfd_priv.h              |   4 +-
 .../amd/display/dc/clk_mgr/dce100/dce_clk_mgr.c    |  20 +-
 .../amd/display/dc/clk_mgr/dce60/dce60_clk_mgr.c   |   5 +
 .../gpu/drm/amd/display/dc/dce60/dce60_resource.c  |  59 +++--
 .../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c  |   6 +-
 .../display/dc/resource/dce100/dce100_resource.c   |  10 +-
 .../amd/display/dc/resource/dce80/dce80_resource.c |  10 +-
 drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c     |   1 -
 drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c     |   1 -
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c   |  33 ++-
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c   |  33 ++-
 drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c     |   1 -
 drivers/gpu/drm/ast/ast_dp501.c                    |   2 +-
 drivers/gpu/drm/drm_file.c                         |   5 +-
 drivers/gpu/drm/drm_ioc32.c                        |   2 +
 drivers/gpu/drm/drm_mode_config.c                  |   9 +-
 drivers/gpu/drm/i915/display/g4x_dp.c              |   2 +-
 drivers/gpu/drm/i915/display/icl_dsi.c             |   4 +-
 drivers/hid/hid-logitech-hidpp.c                   |   6 +-
 drivers/hid/hid-multitouch.c                       |   7 +
 drivers/hid/wacom_wac.c                            |  10 +
 drivers/hwmon/occ/common.c                         |  19 +-
 drivers/hwmon/pmbus/ltc4286.c                      |   1 +
 drivers/hwmon/pmbus/pxe1610.c                      |   5 +-
 drivers/hwmon/pmbus/tps53679.c                     |   4 +-
 drivers/i2c/busses/Kconfig                         |   2 +
 drivers/i2c/busses/i2c-tegra.c                     |   5 +-
 drivers/iio/accel/adxl355_core.c                   |   2 +-
 drivers/iio/accel/adxl380.c                        |   2 +-
 drivers/iio/adc/aspeed_adc.c                       |   1 +
 drivers/iio/adc/ti-adc161s626.c                    |  41 ++-
 drivers/iio/adc/ti-ads1119.c                       |  11 +-
 drivers/iio/dac/ad5770r.c                          |   2 +-
 drivers/iio/gyro/mpu3050-core.c                    |  32 ++-
 drivers/iio/imu/bmi160/bmi160_core.c               |  15 +-
 drivers/iio/imu/bno055/bno055.c                    |   2 +-
 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c     |   4 +
 drivers/iio/light/vcnl4035.c                       |  18 +-
 drivers/input/joystick/xpad.c                      |   5 +
 drivers/input/mouse/bcm5974.c                      |  42 ++-
 drivers/input/rmi4/rmi_f54.c                       |   4 +-
 drivers/input/serio/i8042-acpipnpio.h              |   7 +
 drivers/misc/fastrpc.c                             |   1 +
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |   2 +
 drivers/net/ethernet/broadcom/tg3.c                |  13 +-
 drivers/net/ethernet/cadence/macb_pci.c            |  10 +-
 drivers/net/ethernet/faraday/ftgmac100.c           |  28 +-
 .../net/ethernet/freescale/enetc/enetc_ethtool.c   |   4 +
 drivers/net/ethernet/freescale/fec_ptp.c           |   3 -
 drivers/net/ethernet/intel/ice/ice_ethtool.c       |  11 +-
 drivers/net/ethernet/mediatek/airoha_eth.c         |  18 +-
 drivers/net/ethernet/mediatek/mtk_ppe_offload.c    |  21 +-
 drivers/net/ethernet/mellanox/mlx5/core/devlink.c  |   4 +-
 .../ethernet/mellanox/mlx5/core/eswitch_offloads.c |   2 +
 drivers/net/ethernet/mellanox/mlx5/core/fw.c       |  49 ++--
 .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c  |   3 +
 .../net/ethernet/mellanox/mlx5/core/mlx5_core.h    |   4 +-
 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c       |   6 +-
 drivers/net/ethernet/microsoft/mana/mana_en.c      |   6 +-
 drivers/net/ethernet/xilinx/xilinx_axienet.h       |   4 +-
 drivers/net/phy/sfp.c                              |   7 +-
 drivers/net/vxlan/vxlan_core.c                     |   6 +-
 drivers/net/wireless/ath/ath11k/dp_rx.c            |  15 +-
 drivers/net/wireless/intel/iwlwifi/mvm/d3.c        |   2 +-
 drivers/net/wireless/microchip/wilc1000/hif.c      |   2 +-
 drivers/net/wireless/virtual/virt_wifi.c           |   1 -
 drivers/nfc/pn533/uart.c                           |   3 +
 drivers/nvmem/imx-ocotp-ele.c                      |   1 +
 drivers/nvmem/imx-ocotp.c                          |   1 +
 drivers/nvmem/zynqmp_nvmem.c                       |   8 +-
 drivers/spi/spi-cadence-quadspi.c                  |  13 +-
 drivers/spi/spi-geni-qcom.c                        |   9 +-
 drivers/target/loopback/tcm_loop.c                 |  52 +++-
 drivers/thermal/thermal_core.c                     |   1 +
 drivers/thunderbolt/nhi.c                          |   2 +-
 drivers/usb/cdns3/cdns3-gadget.c                   |   4 +
 drivers/usb/class/cdc-acm.c                        |   9 +
 drivers/usb/class/cdc-acm.h                        |   1 +
 drivers/usb/class/usbtmc.c                         |   3 +
 drivers/usb/common/ulpi.c                          |   5 +-
 drivers/usb/core/phy.c                             |  12 +-
 drivers/usb/core/quirks.c                          |   3 +
 drivers/usb/dwc2/gadget.c                          |   2 +
 drivers/usb/gadget/function/f_ecm.c                |  35 ++-
 drivers/usb/gadget/function/f_eem.c                |  59 +++--
 drivers/usb/gadget/function/f_hid.c                |  19 +-
 drivers/usb/gadget/function/f_rndis.c              |  49 ++--
 drivers/usb/gadget/function/f_subset.c             |  63 +++--
 drivers/usb/gadget/function/f_uac1_legacy.c        |  47 +++-
 drivers/usb/gadget/function/f_uvc.c                |  39 ++-
 drivers/usb/gadget/function/u_ecm.h                |  21 +-
 drivers/usb/gadget/function/u_eem.h                |  21 +-
 drivers/usb/gadget/function/u_ether.c              |  16 +-
 drivers/usb/gadget/function/u_gether.h             |  22 +-
 drivers/usb/gadget/function/u_rndis.h              |  31 ++-
 drivers/usb/gadget/function/uvc.h                  |   3 +
 drivers/usb/gadget/function/uvc_v4l2.c             |   5 +-
 drivers/usb/gadget/udc/dummy_hcd.c                 |  42 +--
 drivers/usb/host/ehci-brcm.c                       |   4 +-
 drivers/usb/serial/io_edgeport.c                   |   3 +
 drivers/usb/serial/io_usbvend.h                    |   1 +
 drivers/usb/serial/option.c                        |   4 +
 drivers/usb/typec/ucsi/ucsi.c                      |   9 +-
 fs/btrfs/inode.c                                   |   6 +-
 fs/btrfs/ioctl.c                                   |  12 +-
 fs/btrfs/tree-checker.c                            |  17 ++
 fs/btrfs/zoned.c                                   |   6 +-
 fs/ext4/fast_commit.c                              |   4 +-
 fs/ext4/inode.c                                    |  15 +-
 fs/smb/server/smb2pdu.c                            | 121 ++++++---
 fs/smb/server/smbacl.c                             |  43 +++
 fs/smb/server/smbacl.h                             |   2 +
 include/linux/io_uring_types.h                     |   9 -
 include/linux/netdevice.h                          |   3 +
 include/linux/netfilter/ipset/ip_set.h             |   2 +-
 include/linux/swapops.h                            |  27 +-
 include/net/netfilter/nf_conntrack_expect.h        |  20 +-
 io_uring/io_uring.c                                |  15 +-
 io_uring/io_uring.h                                |   1 -
 io_uring/kbuf.c                                    | 289 ++++++++++-----------
 io_uring/kbuf.h                                    | 148 +++--------
 io_uring/net.c                                     | 149 ++++++-----
 io_uring/poll.c                                    |   4 -
 io_uring/rw.c                                      |  58 +++--
 kernel/bpf/verifier.c                              |  87 ++++++-
 kernel/sched/fair.c                                |  12 +-
 mm/gup.c                                           |  10 +-
 mm/hmm.c                                           |   2 +-
 mm/memory.c                                        |  22 +-
 mm/mprotect.c                                      |   2 +-
 mm/sparse-vmemmap.c                                |   2 +-
 mm/vmscan.c                                        |   2 +-
 net/atm/lec.c                                      |  72 +++--
 net/atm/lec.h                                      |   2 +-
 net/bluetooth/hci_conn.c                           |   8 +-
 net/bluetooth/hci_event.c                          |  33 ++-
 net/bluetooth/hci_sync.c                           |  14 +-
 net/bluetooth/mgmt.c                               |  17 +-
 net/bluetooth/sco.c                                |  30 ++-
 net/bluetooth/smp.c                                |  11 +-
 net/bridge/br_arp_nd_proxy.c                       |  18 +-
 net/core/dev.c                                     |  38 ++-
 net/core/skmsg.c                                   |  13 +-
 net/hsr/hsr_device.c                               |  32 +--
 net/ipv6/addrconf.c                                |   6 +-
 net/ipv6/datagram.c                                |  10 +
 net/ipv6/icmp.c                                    |   3 +
 net/ipv6/ioam6.c                                   |   4 +-
 net/ipv6/ip6_flowlabel.c                           |   5 -
 net/ipv6/ip6_tunnel.c                              |   5 +
 net/ipv6/ndisc.c                                   |   3 +
 net/mac80211/tdls.c                                |   2 +-
 net/mptcp/pm_netlink.c                             |   2 +-
 net/netfilter/ipset/ip_set_core.c                  |   4 +-
 net/netfilter/ipset/ip_set_hash_gen.h              |   2 +-
 net/netfilter/ipset/ip_set_list_set.c              |   4 +-
 net/netfilter/nf_conntrack_broadcast.c             |   8 +-
 net/netfilter/nf_conntrack_expect.c                |  25 +-
 net/netfilter/nf_conntrack_h323_main.c             |  12 +-
 net/netfilter/nf_conntrack_helper.c                |  13 +-
 net/netfilter/nf_conntrack_netlink.c               |  87 +++----
 net/netfilter/nf_conntrack_sip.c                   |   4 +-
 net/netfilter/nf_flow_table_offload.c              | 196 +++++++++-----
 net/netfilter/nf_tables_api.c                      |   7 +-
 net/netfilter/nfnetlink_log.c                      |   2 +-
 net/netfilter/x_tables.c                           |  23 ++
 net/netfilter/xt_cgroup.c                          |   6 +
 net/netfilter/xt_rateest.c                         |   5 +
 net/qrtr/af_qrtr.c                                 |  31 +--
 net/rds/ib_rdma.c                                  |   7 +-
 net/sched/cls_api.c                                |   1 +
 net/sched/cls_flow.c                               |  10 +-
 net/sched/cls_fw.c                                 |  14 +-
 net/sched/sch_hfsc.c                               |   4 +-
 net/sched/sch_netem.c                              |   5 +-
 net/x25/x25_in.c                                   |   9 +-
 net/x25/x25_subr.c                                 |   1 +
 sound/pci/ctxfi/ctdaio.c                           |   1 +
 sound/soc/cirrus/ep93xx-i2s.c                      |  34 ++-
 sound/soc/intel/boards/Kconfig                     |   2 -
 sound/usb/caiaq/device.c                           |   2 +-
 tools/objtool/check.c                              |   5 +-
 .../testing/selftests/bpf/prog_tests/reg_bounds.c  |  62 ++++-
 .../testing/selftests/bpf/progs/verifier_bounds.c  | 159 +++++++++++-
 219 files changed, 2644 insertions(+), 1289 deletions(-)