6.18.22-rc1 review

Greg Kroah-Hartman dri-devel linux-cifs linux-patches linux-tegra lkml stable 1 version Apr 8 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Apr 8277 patches 7 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/277	arm64/scs: Fix handling of advance_loc4`arch/arm64/kernel/pi/patch-scs.c`	+8 -0	0 replies
2/277	HID: logitech-hidpp: Enable MX Master 4 over bluetooth`drivers/hid/hid-logitech-hidpp.c`	+2 -0	0 replies
3/277	wifi: mac80211: check tdls flag in ieee80211_tdls_oper`net/mac80211/tdls.c`	+1 -1	0 replies
4/277	HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq`drivers/hid/wacom_wac.c`	+10 -0	0 replies
5/277	atm: lec: fix use-after-free in sock_def_readable()`net/atm/lec.c` `net/atm/lec.h`	+48 ~~-26~~	0 replies
6/277	btrfs: dont take device_list_mutex when querying zone info`fs/btrfs/zoned.c`	+4 -2	0 replies
7/277	tg3: replace placeholder MAC address with device property`drivers/net/ethernet/broadcom/tg3.c`	+11 -0	0 replies
8/277	objtool: Fix Clang jump table detection`tools/objtool/check.c`	+2 -3	0 replies
9/277	HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure`drivers/hid/hid-logitech-hidpp.c`	+3 -1	0 replies
10/277	HID: core: Mitigate potential OOB by removing bogus memset()`drivers/hid/hid-core.c`	+4 -3	0 replies
11/277	HID: multitouch: Check to ensure report responses match the request`drivers/hid/hid-multitouch.c`	+7 -0	0 replies
12/277	btrfs: reserve enough transaction items for qgroup ioctls`fs/btrfs/ioctl.c`	+9 -3	0 replies
13/277	i2c: tegra: Dont mark devices with pins as IRQ safe`drivers/i2c/busses/Kconfig` `drivers/i2c/busses/i2c-tegra.c`	+6 -1	0 replies
14/277	btrfs: reject root items with drop_progress and zero drop_level`fs/btrfs/tree-checker.c`	+17 -0	0 replies
15/277	smb: client: fix generic/694 due to wrong ->i_blocks`fs/smb/client/cifsglob.h` `fs/smb/client/file.c` `fs/smb/client/inode.c` +1 more	+16 ~~-32~~	0 replies
16/277	spi: geni-qcom: Check DMA interrupts early in ISR`drivers/spi/spi-geni-qcom.c`	+5 -4	0 replies
17/277	dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning`Documentation/devicetree/bindings/auxdisplay/holtek,ht16k33.yaml`	+1 -1	0 replies
18/277	wifi: iwlwifi: fix remaining kernel-doc warnings`drivers/net/wireless/intel/iwlwifi/fw/acpi.h` `drivers/net/wireless/intel/iwlwifi/fw/api/cmdhdr.h` `drivers/net/wireless/intel/iwlwifi/fw/api/coex.h` +19 more	+194 ~~-118~~	0 replies
19/277	wifi: iwlwifi: mld: Fix MLO scan timing`drivers/net/wireless/intel/iwlwifi/fw/api/commands.h` `drivers/net/wireless/intel/iwlwifi/fw/api/scan.h` `drivers/net/wireless/intel/iwlwifi/mld/mld.c` +4 more	+56 -8	0 replies
20/277	wifi: iwlwifi: mvm: dont send a 6E related command when not supported`drivers/net/wireless/intel/iwlwifi/mvm/fw.c`	+2 -1	0 replies
21/277	wifi: iwlwifi: cfg: add new device names`drivers/net/wireless/intel/iwlwifi/cfg/rf-wh.c` `drivers/net/wireless/intel/iwlwifi/iwl-config.h` `drivers/net/wireless/intel/iwlwifi/pcie/drv.c`	+5 -0	0 replies
22/277	wifi: iwlwifi: disable EHT if the device doesnt allow it`drivers/net/wireless/intel/iwlwifi/cfg/rf-fm.c` `drivers/net/wireless/intel/iwlwifi/cfg/rf-wh.c` `drivers/net/wireless/intel/iwlwifi/iwl-config.h` +2 more	+33 -4	0 replies
23/277	wifi: iwlwifi: mld: correctly set wifi generation data`drivers/net/wireless/intel/iwlwifi/mld/iface.c` `drivers/net/wireless/intel/iwlwifi/mld/mac80211.c`	+88 ~~-32~~	0 replies
24/277	wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session`drivers/net/wireless/ath/ath11k/dp_rx.c`	+7 -8	0 replies
25/277	crypto: caam - fix DMA corruption on long hmac keys`drivers/crypto/caam/caamhash.c`	+2 -1	0 replies
26/277	crypto: caam - fix overflow on long hmac keys`drivers/crypto/caam/caamalg_qi2.c`	+2 -1	0 replies
27/277	crypto: deflate - fix spurious -ENOSPC`crypto/deflate.c`	+7 -4	0 replies
28/277	crypto: af-alg - fix NULL pointer dereference in scatterwalk`crypto/af_alg.c`	+3 -1	0 replies
29/277	net: mana: Fix RX skb truesize accounting`drivers/net/ethernet/microsoft/mana/mana_en.c`	+7 -0	0 replies
30/277	netdevsim: fix build if SKB_EXTENSIONS=n`include/linux/skbuff.h`	+1 -0	0 replies
31/277	net: fec: fix the PTP periodic output sysfs interface`drivers/net/ethernet/freescale/fec_ptp.c`	+0 -3	0 replies
32/277	net: enetc: reset PIR and CIR if they are not equal when initializing TX ring`drivers/net/ethernet/freescale/enetc/enetc.c`	+12 -1	0 replies
33/277	net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak`net/qrtr/af_qrtr.c`	+13 ~~-18~~	0 replies
34/277	net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak`net/ipv6/ndisc.c`	+3 -0	0 replies
35/277	net/ipv6: ioam6: prevent schema length wraparound in trace fill`net/ipv6/ioam6.c`	+2 -2	0 replies
36/277	tg3: Fix race for querying speed/duplex`drivers/net/ethernet/broadcom/tg3.c`	+1 -1	0 replies
37/277	ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()`net/ipv6/icmp.c`	+3 -0	0 replies
38/277	ip6_tunnel: clear skb2->cb[] in ip4ip6_err()`net/ipv6/ip6_tunnel.c`	+5 -0	0 replies
39/277	eth: fbnic: Account for page fragments when updating BDQ tail`drivers/net/ethernet/meta/fbnic/fbnic_txrx.c`	+3 -3	0 replies
40/277	bridge: br_nd_send: linearize skb before parsing ND options`net/bridge/br_arp_nd_proxy.c`	+7 -5	0 replies
41/277	net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()`net/sched/sch_hfsc.c`	+2 -2	0 replies
42/277	net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta`drivers/net/phy/sfp.c`	+6 -1	0 replies
43/277	net: enetc: check whether the RSS algorithm is Toeplitz`drivers/net/ethernet/freescale/enetc/enetc_ethtool.c`	+4 -0	0 replies
44/277	net: enetc: do not allow VF to configure the RSS key`drivers/net/ethernet/freescale/enetc/enetc_ethtool.c`	+5 -1	0 replies
45/277	ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP`sound/usb/quirks.c`	+1 -0	0 replies
46/277	ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure`sound/soc/cirrus/ep93xx-i2s.c`	+24 ~~-10~~	0 replies
47/277	ipv6: prevent possible UaF in addrconf_permanent_addr()`net/ipv6/addrconf.c`	+3 -3	0 replies
48/277	net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue()`drivers/net/ethernet/airoha/airoha_eth.c`	+17 -1	0 replies
49/277	net: introduce mangleid_features`include/linux/netdevice.h` `net/core/dev.c`	+7 -1	0 replies
50/277	net: use skb_header_pointer() for TCPv4 GSO frag_off check`net/core/dev.c`	+8 -3	0 replies
51/277	net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak`net/sched/cls_api.c`	+1 -0	0 replies
52/277	bnxt_en: set backing store type from query type`drivers/net/ethernet/broadcom/bnxt/bnxt.c`	+4 -4	0 replies
53/277	crypto: algif_aead - Revert to operating out-of-place`crypto/af_alg.c` `crypto/algif_aead.c` `crypto/algif_skcipher.c` +1 more	+34 ~~-126~~	0 replies
54/277	crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption`crypto/authencesn.c`	+29 ~~-19~~	0 replies
55/277	net: bonding: fix use-after-free in bond_xmit_broadcast()`drivers/net/bonding/bond_main.c`	+1 -1	0 replies
56/277	NFC: pn533: bound the UART receive buffer`drivers/nfc/pn533/uart.c`	+3 -0	0 replies
57/277	net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec`drivers/net/ethernet/xilinx/xilinx_axienet.h`	+2 -2	0 replies
58/277	net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets`drivers/net/ethernet/xilinx/xilinx_axienet_main.c`	+4 -5	0 replies
59/277	ASoC: Intel: boards: fix unmet dependency on PINCTRL`sound/soc/intel/boards/Kconfig`	+0 -2	0 replies
60/277	bpf: Fix regsafe() for pointers to packet`kernel/bpf/verifier.c`	+6 -1	0 replies
61/277	net: ipv6: flowlabel: defer exclusive option free until RCU teardown`net/ipv6/ip6_flowlabel.c`	+0 -5	0 replies
62/277	mptcp: add eat_recv_skb helper`net/mptcp/protocol.c`	+12 -7	0 replies
63/277	mptcp: fix soft lockup in mptcp_recvmsg()`net/mptcp/protocol.c`	+8 -3	0 replies
64/277	net: stmmac: skip VLAN restore when VLAN hash ops are missing`drivers/net/ethernet/stmicro/stmmac/stmmac_main.c`	+4 ~~-10~~	0 replies
65/277	ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP`sound/usb/quirks.c`	+1 -0	0 replies
66/277	netfilter: flowtable: strictly check for maximum number of actions`net/netfilter/nf_flow_table_offload.c`	+130 ~~-66~~	0 replies
67/277	netfilter: nfnetlink_log: account for netlink header size`net/netfilter/nfnetlink_log.c`	+1 -1	0 replies
68/277	netfilter: x_tables: ensure names are nul-terminated`net/netfilter/xt_cgroup.c` `net/netfilter/xt_rateest.c`	+11 -0	0 replies
69/277	netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr`include/linux/netfilter/ipset/ip_set.h` `net/netfilter/ipset/ip_set_core.c` `net/netfilter/ipset/ip_set_list_set.c`	+5 -5	0 replies
70/277	netfilter: nf_conntrack_helper: pass helper to expect cleanup`net/netfilter/nf_conntrack_helper.c`	+1 -1	0 replies
71/277	netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent`net/netfilter/nf_conntrack_netlink.c`	+6 -0	0 replies
72/277	netfilter: nf_conntrack_expect: honor expectation helper field`include/net/netfilter/nf_conntrack_expect.h` `net/netfilter/nf_conntrack_broadcast.c` `net/netfilter/nf_conntrack_expect.c` +4 more	+29 ~~-12~~	0 replies
73/277	netfilter: nf_conntrack_expect: use expect->helper`net/netfilter/nf_conntrack_expect.c` `net/netfilter/nf_conntrack_helper.c` `net/netfilter/nf_conntrack_netlink.c` +1 more	+13 ~~-21~~	0 replies
74/277	netfilter: nf_conntrack_expect: store netns and zone in expectation`include/net/netfilter/nf_conntrack_expect.h` `net/netfilter/nf_conntrack_broadcast.c` `net/netfilter/nf_conntrack_expect.c` +1 more	+34 -4	0 replies
75/277	netfilter: ctnetlink: ignore explicit helper on new expectations`net/netfilter/nf_conntrack_netlink.c`	+9 ~~-45~~	0 replies
76/277	netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP`net/netfilter/x_tables.c`	+23 -0	0 replies
77/277	netfilter: nf_tables: reject immediate NF_QUEUE verdict`net/netfilter/nf_tables_api.c`	+5 -2	0 replies
78/277	Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate`net/bluetooth/hci_sync.c`	+9 -2	0 replies
79/277	Bluetooth: SCO: fix race conditions in sco_sock_connect()`net/bluetooth/sco.c`	+21 -5	0 replies
80/277	Bluetooth: hci_h4: Fix race during initialization`drivers/bluetooth/hci_h4.c`	+0 -3	0 replies
81/277	Bluetooth: MGMT: validate LTK enc_size on load`net/bluetooth/mgmt.c`	+3 -0	0 replies
82/277	Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync`net/bluetooth/hci_conn.c`	+7 -1	0 replies
83/277	Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt`net/bluetooth/hci_event.c`	+20 ~~-13~~	0 replies
84/277	Bluetooth: MGMT: validate mesh send advertising payload length`net/bluetooth/mgmt.c`	+11 -3	0 replies
85/277	rds: ib: reject FRMR registration before IB connection is established`net/rds/ib_rdma.c`	+6 -1	0 replies
86/277	bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().`net/core/skmsg.c`	+8 -5	0 replies
87/277	net/sched: sch_netem: fix out-of-bounds access in packet corruption`net/sched/sch_netem.c`	+3 -2	0 replies
88/277	net: macb: fix clk handling on PCI glue driver removal`drivers/net/ethernet/cadence/macb_pci.c`	+4 -2	0 replies
89/277	net: macb: properly unregister fixed rate clocks`drivers/net/ethernet/cadence/macb_pci.c`	+4 -4	0 replies
90/277	net/mlx5: lag: Check for LAG device before creating debugfs`drivers/net/ethernet/mellanox/mlx5/core/lag/debugfs.c`	+3 -0	0 replies
91/277	net/mlx5: Avoid "No data available" when FW version queries fail`drivers/net/ethernet/mellanox/mlx5/core/devlink.c` `drivers/net/ethernet/mellanox/mlx5/core/fw.c` `drivers/net/ethernet/mellanox/mlx5/core/mlx5_core.h`	+37 ~~-24~~	0 replies
92/277	net/mlx5: Fix switchdev mode rollback in case of failure`drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c`	+2 -0	0 replies
93/277	bnxt_en: Restore default stat ctxs for ULP when resource is available`drivers/net/ethernet/broadcom/bnxt/bnxt.c`	+2 -0	0 replies
94/277	net/x25: Fix potential double free of skb`net/x25/x25_in.c`	+2 -3	0 replies
95/277	net/x25: Fix overflow when accumulating packets`net/x25/x25_in.c` `net/x25/x25_subr.c`	+5 -0	0 replies
96/277	net/sched: cls_fw: fix NULL pointer dereference on shared blocks`net/sched/cls_fw.c`	+12 -2	0 replies
97/277	net/sched: cls_flow: fix NULL pointer dereference on shared blocks`net/sched/cls_flow.c`	+9 -1	0 replies
98/277	net: hsr: fix VLAN add unwind on slave errors`net/hsr/hsr_device.c`	+17 ~~-15~~	0 replies
99/277	ipv6: avoid overflows in ip6_datagram_send_ctl()`net/ipv6/datagram.c`	+10 -0	0 replies
100/277	eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64`drivers/net/ethernet/meta/fbnic/fbnic_txrx.h`	+1 -1	0 replies
101/277	bpf: reject direct access to nullable PTR_TO_BUF pointers`kernel/bpf/verifier.c`	+2 -1	0 replies
102/277	bpf: Reject sleepable kprobe_multi programs at attach time`kernel/trace/bpf_trace.c`	+4 -0	0 replies
103/277	Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"`drivers/gpu/drm/drm_file.c` `drivers/gpu/drm/drm_mode_config.c`	+4 ~~-10~~	0 replies
104/277	iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one`drivers/iio/imu/bno055/bno055.c`	+1 -1	0 replies
105/277	gpio: rename gpio_chip_hwgpio() to gpiod_hwgpio()`drivers/gpio/gpio-aspeed.c` `drivers/gpio/gpiolib-cdev.c` `drivers/gpio/gpiolib-sysfs.c` +2 more	+40 ~~-40~~	0 replies
106/277	gpiolib: clear requested flag if line is invalid`drivers/gpio/gpiolib.c`	+4 -2	0 replies
107/277	accel/qaic: Handle DBC deactivation if the owner went away`drivers/accel/qaic/qaic_control.c`	+45 -2	0 replies
108/277	io_uring/rsrc: reject zero-length fixed buffer import`io_uring/rsrc.c`	+4 -0	0 replies
109/277	hwmon: (tps53679) Fix array access with zero-length block read`drivers/hwmon/pmbus/tps53679.c`	+3 -3	0 replies
110/277	hwmon: (pxe1610) Check return value of page-select write in probe`drivers/hwmon/pmbus/pxe1610.c`	+4 -1	0 replies
111/277	hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS")`drivers/hwmon/pmbus/ltc4286.c`	+1 -0	0 replies
112/277	dt-bindings: gpio: fix microchip #interrupt-cells`Documentation/devicetree/bindings/gpio/microchip,mpfs-gpio.yaml`	+2 -2	0 replies
113/277	spi: stm32-ospi: Fix resource leak in remove() callback`drivers/spi/spi-stm32-ospi.c`	+1 -4	0 replies
114/277	spi: stm32-ospi: Fix reset control leak on probe error`drivers/spi/spi-stm32-ospi.c`	+3 -1	0 replies
115/277	drm/xe/pxp: Clean up termination status on failure`drivers/gpu/drm/xe/xe_pxp.c`	+1 -0	0 replies
116/277	drm/xe/pxp: Remove incorrect handling of impossible state during suspend`drivers/gpu/drm/xe/xe_pxp.c`	+0 -6	0 replies
117/277	drm/xe/pxp: Clear restart flag in pxp_start after jumping back`drivers/gpu/drm/xe/xe_pxp.c`	+3 -1	0 replies
118/277	hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()`drivers/hwmon/pmbus/tps53679.c`	+2 -2	0 replies
119/277	spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback`drivers/spi/spi-amlogic-spifc-a4.c`	+12 -0	0 replies
120/277	hwmon: (occ) Fix missing newline in occ_show_extended()`drivers/hwmon/occ/common.c`	+1 -1	0 replies
121/277	drm/sysfb: Fix efidrm error handling and memory type mismatch`drivers/gpu/drm/sysfb/efidrm.c`	+31 ~~-15~~	0 replies
122/277	hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI`drivers/hwmon/asus-ec-sensors.c`	+6 -1	0 replies
123/277	mips: ralink: update CPU clock index`arch/mips/ralink/clk.c`	+4 -4	0 replies
124/277	sched/fair: Fix zero_vruntime tracking fix`kernel/sched/fair.c`	+3 -7	0 replies
125/277	perf/x86: Fix potential bad container_of in intel_pmu_hw_config`arch/x86/events/intel/core.c`	+4 -2	0 replies
126/277	riscv: kgdb: fix several debug register assignment bugs`arch/riscv/kernel/kgdb.c`	+4 -3	0 replies
127/277	riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set`arch/riscv/kernel/process.c`	+3 -1	0 replies
128/277	ACPI: RIMT: Add dependency between iommu and devices`drivers/acpi/riscv/rimt.c`	+7 -0	0 replies
129/277	drm/ioc32: stop speculation on the drm_compat_ioctl path`drivers/gpu/drm/drm_ioc32.c`	+2 -0	0 replies
130/277	rust_binder: use AssertSync for BINDER_VM_OPS`drivers/android/binder/page_range.rs` `drivers/android/binder/rust_binder_main.rs`	+6 -4	0 replies
131/277	wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation`drivers/net/wireless/microchip/wilc1000/hif.c`	+1 -1	0 replies
132/277	wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()`drivers/net/wireless/intel/iwlwifi/mvm/d3.c`	+1 -1	0 replies
133/277	USB: serial: option: add MeiG Smart SRM825WN`drivers/usb/serial/option.c`	+3 -0	0 replies
134/277	drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()`drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c`	+11 -6	0 replies
135/277	sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl()`kernel/sched/ext_idle.c`	+1 -1	0 replies
136/277	lib/crypto: chacha: Zeroize permuted_state before it leaves scope`lib/crypto/chacha-block-generic.c`	+4 -0	0 replies
137/277	ALSA: caiaq: fix stack out-of-bounds read in init_card`sound/usb/caiaq/device.c`	+1 -1	0 replies
138/277	ALSA: ctxfi: Fix missing SPDIFI1 index handling`sound/pci/ctxfi/ctdaio.c`	+1 -0	0 replies
139/277	ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15`sound/hda/codecs/realtek/alc269.c`	+1 -0	0 replies
140/277	ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx`sound/hda/codecs/realtek/alc269.c`	+1 -0	0 replies
141/277	io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()`io_uring/net.c`	+4 -0	0 replies
142/277	Bluetooth: SMP: derive legacy responder STK authentication from MITM state`net/bluetooth/smp.c`	+1 -4	0 replies
143/277	Bluetooth: SMP: force responder MITM requirements before building the pairing response`net/bluetooth/smp.c`	+5 -1	0 replies
144/277	Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync`net/bluetooth/hci_sync.c`	+2 -1	0 replies
145/277	ksmbd: fix OOB write in QUERY_INFO for compound requests`fs/smb/server/smb2pdu.c` `fs/smb/server/smbacl.c` `fs/smb/server/smbacl.h`	+134 ~~-32~~	0 replies
146/277	MIPS: SiByte: Bring back cache initialisation`arch/mips/mm/cache.c`	+2 -1	0 replies
147/277	MIPS: Fix the GCC version check for `__multi3 workaround`arch/mips/lib/multi3.c`	+3 -3	0 replies
148/277	hwmon: (occ) Fix division by zero in occ_show_power_1()`drivers/hwmon/occ/common.c`	+8 -9	0 replies
149/277	mips: mm: Allocate tlb_vpn array atomically`arch/mips/mm/tlb-r4k.c`	+1 -1	0 replies
150/277	x86/kexec: Disable KCOV instrumentation after load_segments()`arch/x86/kernel/Makefile` `arch/x86/mm/Makefile`	+16 -0	0 replies
151/277	drm/amdgpu: fix the idr allocation flags`drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c`	+4 -1	0 replies
152/277	gpib: fix use-after-free in IO ioctl handlers`drivers/staging/gpib/common/gpib_os.c` `drivers/staging/gpib/include/gpib_types.h`	+81 ~~-23~~	0 replies
153/277	iio: add IIO_DECLARE_QUATERNION() macro`include/linux/iio/iio.h`	+12 -0	0 replies
154/277	iio: orientation: hid-sensor-rotation: fix quaternion alignment`drivers/iio/orientation/hid-sensor-rotation.c`	+1 -1	0 replies
155/277	iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspace`drivers/iio/orientation/hid-sensor-rotation.c`	+19 -3	0 replies
156/277	iio: adc: ti-adc161s626: fix buffer read on big-endian`drivers/iio/adc/ti-adc161s626.c`	+12 -9	0 replies
157/277	iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()`drivers/iio/adc/ti-adc161s626.c`	+8 ~~-12~~	0 replies
158/277	iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion()`drivers/iio/adc/ti-ads1119.c`	+1 -1	0 replies
159/277	iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout()`drivers/iio/adc/ti-ads1119.c`	+3 -0	0 replies
160/277	iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD`drivers/iio/adc/ti-ads1119.c`	+2 -4	0 replies
161/277	drm/ast: dp501: Fix initialization of SCU2C`drivers/gpu/drm/ast/ast_dp501.c`	+1 -1	0 replies
162/277	drm/i915/dsi: Dont do DSC horizontal timing adjustments in command mode`drivers/gpu/drm/i915/display/icl_dsi.c`	+2 -2	0 replies
163/277	drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP`drivers/gpu/drm/i915/display/g4x_dp.c`	+1 -1	0 replies
164/277	drm/amdgpu: Fix wait after reset sequence in S4`drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c` `drivers/gpu/drm/amd/amdgpu/psp_v11_0.c`	+8 -3	0 replies
165/277	drm/amdgpu: validate doorbell_offset in user queue creation`drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c`	+7 -0	0 replies
166/277	drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB`drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h` `drivers/gpu/drm/amd/amdkfd/kfd_priv.h`	+3 -3	0 replies
167/277	drm/amdgpu/pm: drop SMU driver if version not matched messages`drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c` `drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c` `drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c`	+0 -3	0 replies
168/277	USB: serial: io_edgeport: add support for Blackbox IC135A`drivers/usb/serial/io_edgeport.c` `drivers/usb/serial/io_usbvend.h`	+4 -0	0 replies
169/277	USB: serial: option: add support for Rolling Wireless RW135R-GL`drivers/usb/serial/option.c`	+1 -0	0 replies
170/277	USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam`drivers/usb/core/quirks.c`	+2 -0	0 replies
171/277	Input: synaptics-rmi4 - fix a locking bug in an error path`drivers/input/rmi4/rmi_f54.c`	+2 -2	0 replies
172/277	Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table`drivers/input/serio/i8042-acpipnpio.h`	+7 -0	0 replies
173/277	Input: bcm5974 - recover from failed mode switch`drivers/input/mouse/bcm5974.c`	+41 -1	0 replies
174/277	Input: xpad - add support for BETOP BTP-KP50B/C controllers wireless mode`drivers/input/joystick/xpad.c`	+3 -0	0 replies
175/277	Input: xpad - add support for Razer Wolverine V3 Pro`drivers/input/joystick/xpad.c`	+2 -0	0 replies
176/277	iio: adc: ti-ads7950: normalize return value of gpio_get`drivers/iio/adc/ti-ads7950.c`	+1 -1	0 replies
177/277	iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get()`drivers/iio/adc/ti-ads7950.c`	+5 -3	0 replies
178/277	iio: adc: ade9000: fix wrong return type in streaming push`drivers/iio/adc/ade9000.c`	+1 -1	0 replies
179/277	iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power`drivers/iio/adc/ade9000.c`	+1 -1	0 replies
180/277	iio: adc: ade9000: move mutex init before IRQ registration`drivers/iio/adc/ade9000.c`	+4 -4	0 replies
181/277	iio: adc: aspeed: clear reference voltage bits before configuring vref`drivers/iio/adc/aspeed_adc.c`	+1 -0	0 replies
182/277	iio: accel: fix ADXL355 temperature signature value`drivers/iio/accel/adxl355_core.c`	+1 -1	0 replies
183/277	iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0`drivers/iio/accel/adxl380.c`	+1 -1	0 replies
184/277	iio: accel: adxl313: add missing error check in predisable`drivers/iio/accel/adxl313_core.c`	+2 -0	0 replies
185/277	iio: dac: ad5770r: fix error return in ad5770r_read_raw()`drivers/iio/dac/ad5770r.c`	+1 -1	0 replies
186/277	iio: imu: adis16550: fix swapped gyro/accel filter functions`drivers/iio/imu/adis16550.c`	+4 -4	0 replies
187/277	iio: light: vcnl4035: fix scan buffer on big-endian`drivers/iio/light/vcnl4035.c`	+12 -6	0 replies
188/277	iio: light: veml6070: fix veml6070_read() return value`drivers/iio/light/veml6070.c`	+1 -3	0 replies
189/277	iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()`drivers/iio/imu/bmi160/bmi160_core.c`	+5 ~~-10~~	0 replies
190/277	iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only`drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c`	+4 -0	0 replies
191/277	iio: gyro: mpu3050: Fix incorrect free_irq() variable`drivers/iio/gyro/mpu3050-core.c`	+1 -1	0 replies
192/277	iio: gyro: mpu3050: Fix irq resource leak`drivers/iio/gyro/mpu3050-core.c`	+6 -1	0 replies
193/277	iio: gyro: mpu3050: Move iio_device_register() to correct location`drivers/iio/gyro/mpu3050-core.c`	+13 -8	0 replies
194/277	iio: gyro: mpu3050: Fix out-of-sequence free_irq()`drivers/iio/gyro/mpu3050-core.c`	+1 -1	0 replies
195/277	mei: me: reduce the scope on unexpected reset`drivers/misc/mei/hw-me.c`	+4 ~~-10~~	0 replies
196/277	gpib: lpvo_usb: fix memory leak on disconnect`drivers/staging/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c`	+2 -2	0 replies
197/277	usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive`drivers/usb/core/quirks.c`	+1 -0	0 replies
198/277	usb: ulpi: fix double free in ulpi_register_interface() error path`drivers/usb/common/ulpi.c`	+2 -3	0 replies
199/277	usb: usbtmc: Flush anchored URBs in usbtmc_release`drivers/usb/class/usbtmc.c`	+3 -0	0 replies
200/277	usb: misc: usbio: Fix URB memory leak on submit failure`drivers/usb/misc/usbio.c`	+5 -2	0 replies
201/277	usb: host: xhci-sideband: delegate offload_usage tracking to class drivers`drivers/usb/host/xhci-sideband.c` `sound/usb/qcom/qc_audio_offload.c`	+10 ~~-14~~	0 replies
202/277	usb: ehci-brcm: fix sleep during atomic`drivers/usb/host/ehci-brcm.c`	+2 -2	0 replies
203/277	usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()`drivers/usb/dwc2/gadget.c`	+2 -0	0 replies
204/277	usb: core: phy: avoid double use of usb3-phy`drivers/usb/core/phy.c`	+11 -1	0 replies
205/277	usb: cdns3: gadget: fix NULL pointer dereference in ep_queue`drivers/usb/cdns3/cdns3-gadget.c`	+3 -0	0 replies
206/277	usb: cdns3: gadget: fix state inconsistency on gadget init failure`drivers/usb/cdns3/cdns3-gadget.c`	+1 -0	0 replies
207/277	usb: core: use dedicated spinlock for offload state`drivers/usb/core/driver.c` `drivers/usb/core/offload.c` `drivers/usb/core/usb.c` +2 more	+84 ~~-56~~	0 replies
208/277	x86/platform/geode: Fix on-stack property data use-after-return bug`arch/x86/platform/geode/geode-common.c`	+18 -6	0 replies
209/277	io_uring: protect remaining lockless ctx->rings accesses with RCU`io_uring/io_uring.c` `io_uring/io_uring.h`	+69 ~~-27~~	0 replies
210/277	ASoC: qcom: sc7280: make use of common helpers`sound/soc/qcom/sdw.c`	+11 -0	0 replies
211/277	bridge: br_nd_send: validate ND option lengths`net/bridge/br_arp_nd_proxy.c`	+4 -2	0 replies
212/277	cdc-acm: new quirk for EPSON HMD`drivers/usb/class/cdc-acm.c` `drivers/usb/class/cdc-acm.h`	+10 -0	0 replies
213/277	comedi: dt2815: add hardware detection to prevent crash`drivers/comedi/drivers/dt2815.c`	+12 -0	0 replies
214/277	comedi: Reinit dev->spinlock between attachments to low-level drivers`drivers/comedi/drivers.c`	+8 -0	0 replies
215/277	comedi: ni_atmio16d: Fix invalid clean-up after failed attach`drivers/comedi/drivers/ni_atmio16d.c`	+2 -1	0 replies
216/277	comedi: me_daq: Fix potential overrun of firmware buffer`drivers/comedi/drivers/me_daq.c`	+19 ~~-16~~	0 replies
217/277	comedi: me4000: Fix potential overrun of firmware buffer`drivers/comedi/drivers/me4000.c`	+12 -4	0 replies
218/277	firmware: microchip: fail auto-update probe if no flash found`drivers/firmware/microchip/mpfs-auto-update.c`	+6 -4	0 replies
219/277	dt-bindings: connector: add pd-disable dependency`Documentation/devicetree/bindings/connector/usb-connector.yaml`	+1 -0	0 replies
220/277	spi: cadence-qspi: Fix exec_mem_op error handling`drivers/spi/spi-cadence-quadspi.c`	+9 -8	0 replies
221/277	s390/zcrypt: Fix memory leak with CCA cards used as accelerator`drivers/s390/crypto/zcrypt_msgtype6.c`	+14 ~~-18~~	0 replies
222/277	s390/cpum_sf: Cap sampling rate to prevent lsctl exception`arch/s390/kernel/perf_cpum_sf.c`	+5 -1	0 replies
223/277	nvmem: imx: assign nvmem_cell_info::raw_len`drivers/nvmem/imx-ocotp-ele.c` `drivers/nvmem/imx-ocotp.c`	+2 -0	0 replies
224/277	nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy`drivers/nvmem/zynqmp_nvmem.c`	+4 -4	0 replies
225/277	netfilter: ipset: drop logically empty buckets in mtype_del`net/netfilter/ipset/ip_set_hash_gen.h`	+1 -1	0 replies
226/277	gpib: Fix fluke driver s390 compile issue`drivers/staging/gpib/Kconfig`	+1 -0	0 replies
227/277	vt: discard stale unicode buffer on alt screen exit after resize`drivers/tty/vt/vt.c`	+13 -1	0 replies
228/277	vt: resize saved unicode buffer on alt screen exit after resize`drivers/tty/vt/vt.c`	+15 -9	0 replies
229/277	counter: rz-mtu3-cnt: prevent counter from being toggled multiple times`drivers/counter/rz-mtu3-cnt.c`	+8 -4	0 replies
230/277	counter: rz-mtu3-cnt: do not use struct rz_mtu3_channels dev member`drivers/counter/rz-mtu3-cnt.c`	+27 ~~-28~~	0 replies
231/277	crypto: tegra - Add missing CRYPTO_ALG_ASYNC`drivers/crypto/tegra/tegra-se-aes.c` `drivers/crypto/tegra/tegra-se-hash.c`	+24 ~~-17~~	0 replies
232/277	vxlan: validate ND option lengths in vxlan_na_create`drivers/net/vxlan/vxlan_core.c`	+4 -2	0 replies
233/277	net: ftgmac100: fix ring allocation unwind on open failure`drivers/net/ethernet/faraday/ftgmac100.c`	+24 -4	0 replies
234/277	net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled`drivers/net/ethernet/mediatek/mtk_ppe_offload.c`	+20 -1	0 replies
235/277	virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN`drivers/net/virtio_net.c`	+9 ~~-11~~	0 replies
236/277	cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path`drivers/cpufreq/cpufreq_governor.c`	+3 -3	0 replies
237/277	sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU`kernel/sched/ext_idle.c`	+19 ~~-12~~	0 replies
238/277	gpio: mxc: map Both Edge pad wakeup to Rising Edge`drivers/gpio/gpio-mxc.c`	+9 -1	0 replies
239/277	gpio: Fix resource leaks on errors in gpiochip_add_data_with_key()`drivers/gpio/gpiolib.c`	+48 ~~-53~~	0 replies
240/277	thermal: core: Address thermal zone removal races with resume`drivers/thermal/thermal_core.c`	+26 -5	0 replies
241/277	thermal: core: Fix thermal zone device registration error path`drivers/thermal/thermal_core.c`	+1 -0	0 replies
242/277	misc: fastrpc: possible double-free of cctx->remote_heap`drivers/misc/fastrpc.c`	+1 -0	0 replies
243/277	misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe`drivers/misc/fastrpc.c`	+3 -1	0 replies
244/277	usb: typec: thunderbolt: Set enter_vdo during initialization`drivers/usb/typec/altmodes/thunderbolt.c`	+22 ~~-22~~	0 replies
245/277	thunderbolt: Fix property read in nhi_wake_supported()`drivers/thunderbolt/nhi.c`	+1 -1	0 replies
246/277	USB: dummy-hcd: Fix locking/synchronization error`drivers/usb/gadget/udc/dummy_hcd.c`	+6 -1	0 replies
247/277	USB: dummy-hcd: Fix interrupt synchronization error`drivers/usb/gadget/udc/dummy_hcd.c`	+14 ~~-15~~	0 replies
248/277	usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer`drivers/usb/gadget/udc/dummy_hcd.c`	+6 -0	0 replies
249/277	usb: typec: ucsi: validate connector number in ucsi_notify_common()`drivers/usb/typec/ucsi/ucsi.c`	+7 -2	0 replies
250/277	HID: appletb-kbd: add .resume method in PM`drivers/hid/hid-appletb-kbd.c`	+3 -2	0 replies
251/277	ice: Fix memory leak in ice_set_ringparam()`drivers/net/ethernet/intel/ice/ice_ethtool.c`	+9 -2	0 replies
252/277	usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop`drivers/usb/gadget/function/u_ether.c`	+5 -5	0 replies
253/277	usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo`drivers/usb/gadget/function/u_ether.c`	+4 -2	0 replies
254/277	usb: gadget: uvc: fix NULL pointer dereference during unbind race`drivers/usb/gadget/function/f_uvc.c` `drivers/usb/gadget/function/uvc.h` `drivers/usb/gadget/function/uvc_v4l2.c`	+43 -4	0 replies
255/277	usb: gadget: f_subset: Fix unbalanced refcnt in geth_free`drivers/usb/gadget/function/f_subset.c`	+6 -0	0 replies
256/277	usb: gadget: f_rndis: Protect RNDIS options with mutex`drivers/usb/gadget/function/f_rndis.c`	+6 -3	0 replies
257/277	usb: gadget: f_ecm: Fix net_device lifecycle with device_move`drivers/usb/gadget/function/f_ecm.c` `drivers/usb/gadget/function/u_ecm.h`	+39 ~~-19~~	0 replies
258/277	usb: gadget: f_eem: Fix net_device lifecycle with device_move`drivers/usb/gadget/function/f_eem.c` `drivers/usb/gadget/function/u_eem.h`	+46 ~~-34~~	0 replies
259/277	usb: gadget: f_subset: Fix net_device lifecycle with device_move`drivers/usb/gadget/function/f_subset.c` `drivers/usb/gadget/function/u_gether.h`	+44 ~~-35~~	0 replies
260/277	usb: gadget: f_rndis: Fix net_device lifecycle with device_move`drivers/usb/gadget/function/f_rndis.c` `drivers/usb/gadget/function/u_rndis.h`	+48 ~~-25~~	0 replies
261/277	usb: gadget: f_hid: move list and spinlock inits from bind to alloc`drivers/usb/gadget/function/f_hid.c`	+10 -9	0 replies
262/277	usb: gadget: f_uac1_legacy: validate control request size`drivers/usb/gadget/function/f_uac1_legacy.c`	+37 ~~-10~~	0 replies
263/277	kallsyms: clean up @namebuf initialization in kallsyms_lookup_buildid()`kernel/kallsyms.c`	+6 -1	0 replies
264/277	kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid()`kernel/kallsyms.c`	+8 -4	0 replies
265/277	kallsyms: cleanup code for appending the module buildid`kernel/kallsyms.c`	+33 -9	0 replies
266/277	kallsyms: prevent module removal when printing module name and buildid`kernel/kallsyms.c`	+3 -0	0 replies
267/277	wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free`drivers/net/wireless/virtual/virt_wifi.c`	+0 -1	0 replies
268/277	drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13`drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c` `drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c`	+64 -2	0 replies
269/277	drm/amd/display: Fix DCE LVDS handling`drivers/gpu/drm/amd/display/dc/resource/dce100/dce100_resource.c` `drivers/gpu/drm/amd/display/dc/resource/dce110/dce110_resource.c` `drivers/gpu/drm/amd/display/dc/resource/dce112/dce112_resource.c` +3 more	+22 ~~-16~~	0 replies
270/277	net: mana: fix use-after-free in add_adev() error path`drivers/net/ethernet/microsoft/mana/mana_en.c`	+4 -2	0 replies
271/277	net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback`net/core/dev.c`	+17 -5	0 replies
272/277	scsi: target: file: Use kzalloc_flex for aio_cmd`drivers/target/target_core_file.c`	+1 -1	0 replies
273/277	scsi: target: tcm_loop: Drain commands in target_reset handler`drivers/target/loopback/tcm_loop.c`	+46 -6	0 replies
274/277	mm: replace READ_ONCE() with standard page table accessors`mm/gup.c` `mm/hmm.c` `mm/memory.c` +3 more	+11 ~~-11~~	0 replies
275/277	mm/memory: fix PMD/PUD checks in follow_pfnmap_start()`mm/memory.c`	+15 -3	0 replies
276/277	sched_ext: Refactor do_enqueue_task() local and global DSQ paths`kernel/sched/ext.c`	+12 -9	0 replies
277/277	sched_ext: Fix stale direct dispatch state in ddsp_dsq_id`kernel/sched/ext.c`	+35 ~~-14~~	0 replies

Reviews trailers per patch

137 of 277 patches have a Reviewed-by or Acked-by.

Patch	[email protected]	Eric Dumazet	Qu Wenruo	Konrad Dybcio	Rob Herring (Arm)	Johannes Berg	Damien Le Moal	David Sterba	Baochen Qiang	Vasanthakumar Thiagarajan	Haiyang Zhang	Claudiu Manoil	Simon Horman	Rishon Jonathan R	Michael Chan	Justin Iurman	Pavan Chebbi	Ido Schimmel	Günther Noack	Boris Burkov	Jason Gerecke	Madhur Agrawal	[email protected]	Willem de Bruijn	Jamal Hadi Salim	Sean Anderson	Ao Zhou	Nikolay Aleksandrov	Arnd Bergmann	Daniel Borkmann	Amery Hung	Eduard Zingerman	Ren Wei	Mat Martineau	Matthieu Baerts (NGI0)	Phil Sutter	Russell King (Oracle)	Clark Wang	Dag Smedberg	Allison Henderson	Jiayuan Chen	Stephen Hemminger	Mark Bloch	Moshe Shemesh	Jianbo Liu	Kalesh AP	Kumar Kartikeya Dwivedi	Leon Hwang	Jiri Olsa	Guenter Roeck	Simona Vetter	Linus Walleij	Andrew Jeffery	Matti Vaittinen	Lizhi Hou	Jeff Hugo	Thomas Zimmermann	Sergio Paracuellos	Vincent Guittot	K Prateek Nayak	John Stultz	Thomas Falcon	Samuel Holland	Maxime Ripard	Gary Guo	Alex Hung	Andrea Righi	Ard Biesheuvel	Karsten Hohmeier	Patrice Chotard	Julia Filipchuk	Lixu Zhang	Andy Shevchenko	Nuno Sá	João Paulo Gonçalves	Francesco Dolcini	David Lechner	Jocelyn Falempe	Jani Nikula	Michał Grzelak	Alex Deucher	Christian König	Yang Wang	Lijo Lazar	Henrik Rydberg	David Laight	Bartosz Golaszewski	Antoniu Miclaus	Dmitry Vyukov	Borislav Petkov (AMD)	Dave Penkler	Paul Menzel	Rafael J. Wysocki (Intel)	Todd Brandt	Heikki Krogerus	Oliver Neukum	Hans de Goede	Hailong Liu	Mathias Nyman	Florian Fainelli	Peter Chen	Junxi Qian	Steev Klimaszewski	[email protected]	Ian Abbott	Robert Budai	Liav Mordouch	Nicolas Pitre	Michael S. Tsirkin	Zhongqiu Han	Viresh Kumar	Peng Fan	Mauricio Faria de Oliveira	Lukasz Luba	Dmitry Baryshkov	Madhu M	Benson Leung	[email protected]	Alan Stern	Conor Dooley	Ingo Franzki	Holger Dengler	Heiko Carstens	Sumanth Korikkar	Hendrik Brueckner	Aaron Tomlin	Greg Kroah-Hartman	Breno Leitao	Aleksandr Loktionov	Rinitha S	Roman Li	Srinivasan Shanmugam	Long Li	David Hildenbrand	Lance Yang	Wei Yang	Dev Jain	Mike Rapoport (Microsoft)	Lorenzo Stoakes (Oracle)	Emil Tsalapatis	Dileep Malepu	Shung-Hsi Yu	Pavel Machek (CIP)	Ron Economos	Wentao Guan	Jon Hunter	Shuah Khan
Series																																																																																																																																													T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/277
2/277
3/277	T-b
4/277																					R-b
5/277		R-b
6/277							R-b	R-b
7/277														T-b	R-b
8/277
9/277																			R-b
10/277
11/277
12/277			R-b																	R-b
13/277
14/277			R-b
15/277
16/277				R-b
17/277					A-b
18/277
19/277
20/277						R-b
21/277
22/277
23/277
24/277									R-b	R-b
25/277
26/277
27/277
28/277
29/277											R-b
30/277
31/277
32/277												R-b	R-b
33/277													R-b
34/277													R-b
35/277																R-b
36/277																	R-b
37/277																		R-b
38/277																		R-b
39/277
40/277																		R-b									T-b	A-b
41/277																									A-b
42/277																																					R-b
43/277												R-b																										R-b
44/277												R-b																										R-b
45/277																																							T-b
46/277
47/277
48/277																						T-b
49/277		R-b
50/277																							T-b	R-b
51/277																									A-b
52/277															R-b T-b
53/277
54/277
55/277
56/277
57/277																										R-b
58/277																										R-b
59/277																													A-b
60/277																														R-b	R-b	A-b
61/277		R-b																															T-b
62/277		R-b																																R-b
63/277																																			R-b
64/277
65/277
66/277
67/277
68/277
69/277
70/277																																				R-b
71/277
72/277
73/277
74/277
75/277
76/277
77/277
78/277
79/277
80/277
81/277
82/277
83/277
84/277
85/277																																								R-b
86/277																																									R-b
87/277																																										R-b
88/277
89/277
90/277																																											R-b
91/277																																												R-b
92/277																																													R-b
93/277																																														R-b
94/277
95/277
96/277																									A-b
97/277																									A-b
98/277
99/277
100/277
101/277																																															A-b
102/277																																															A-b	A-b	A-b
103/277																																																		T-b	A-b
104/277
105/277																																																				R-b	R-b
106/277																																																						R-b
107/277																																																							R-b	R-b
108/277
109/277
110/277
111/277
112/277
113/277																																																																						R-b
114/277																																																																						R-b
115/277																																																																							R-b
116/277																																																																							R-b
117/277																																																																							R-b
118/277
119/277
120/277
121/277																																																									R-b
122/277
123/277																																																										R-b
124/277																																																											R-b	T-b	T-b
125/277																																																														R-b
126/277
127/277																																																															R-b
128/277
129/277																																																			R-b						A-b							A-b
130/277																																																																	R-b
131/277
132/277
133/277
134/277																																																																		R-b
135/277																																																																			R-b
136/277																																																																				A-b
137/277
138/277																																																																					Reported-and-tested-by
139/277
140/277
141/277
142/277
143/277
144/277																																																																																												R-b
145/277
146/277
147/277																																																																																						R-b
148/277
149/277
150/277																																																																																									R-b
151/277																																																																																		R-b								T-b
152/277																																																																																											R-b T-b
153/277																																																																									R-b
154/277																																																																								T-b	R-b
155/277																																																																										R-b
156/277
157/277																																																																									R-b
158/277																																																																											R-b
159/277																																																																												R-b
160/277																																																																													R-b
161/277																																																																														R-b
162/277																																																																															R-b
163/277																																																																																R-b
164/277																																																																																	R-b
165/277
166/277																																																																																		R-b
167/277																																																																																			R-b	R-b
168/277
169/277
170/277
171/277
172/277
173/277																																																																																					A-b
174/277
175/277
176/277																																																				R-b																					R-b														R-b
177/277
178/277																																																																																								R-b
179/277																																																																																								R-b
180/277																																																																									R-b
181/277
182/277
183/277
184/277																																																																									R-b
185/277
186/277																																																																																																										A-b
187/277
188/277																																																																										R-b
189/277																																																																									R-b	R-b
190/277
191/277																																																				R-b																					R-b
192/277																																																				R-b																					R-b
193/277																																																				R-b																					R-b
194/277																																																				R-b																					R-b
195/277																																																																																													R-b	T-b
196/277
197/277
198/277																																																																																															R-b
199/277
200/277																																																																																																R-b	R-b
201/277																																																																																																		T-b T-b	A-b
202/277																																																																																																				R-b
203/277
204/277
205/277																																																																																																					A-b
206/277																																																																																																					A-b
207/277																																																																																																		T-b	A-b
208/277
209/277																																																																																																						R-b T-b
210/277																																																																																																							T-b
211/277																		R-b									T-b	A-b
212/277
213/277																																																																																																								T-b	R-b
214/277
215/277
216/277
217/277
218/277
219/277																																																																																																																								A-b
220/277
221/277																																																																																																																									R-b	R-b	A-b
222/277																																																																																																																												R-b	R-b
223/277
224/277
225/277																																				R-b
226/277
227/277																																																																																																											T-b	R-b
228/277
229/277
230/277
231/277
232/277																		R-b									T-b	A-b
233/277
234/277													R-b
235/277																																																																																																													A-b
236/277																																																																																																														R-b	A-b
237/277																																																																			R-b
238/277																																																																																																																R-b
239/277																																																				R-b
240/277																																																																																																																	R-b T-b	R-b
241/277																																																																																																																		R-b T-b
242/277																																																																																																																			R-b
243/277																																																																																																																			R-b
244/277																																																																																															R-b																					T-b	R-b
245/277
246/277																																																																																																																						T-b
247/277
248/277																																																																																																																							R-b
249/277																																																																																															R-b
250/277
251/277																																																																																												R-b																																					R-b	T-b
252/277
253/277
254/277
255/277
256/277
257/277
258/277
259/277
260/277
261/277
262/277
263/277																																																																																																																														R-b
264/277
265/277
266/277																																																																																																																														R-b
267/277																																																																																																																															A-b	R-b
268/277																																																																																	A-b
269/277																																																																																																																																			R-b	R-b
270/277																																																																																																																																					R-b
271/277
272/277
273/277
274/277																																																																																																																																						A-b	R-b	R-b	R-b
275/277																																																																																																																																										A-b	R-b
276/277																																																																			R-b																																																																									R-b
277/277

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 147 reviewers.

Read the v1 thread

Cover letter [PATCH 6.18 000/277] 6.18.22-rc1 review

This is the start of the stable review cycle for the 6.18.22 release. There are 277 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 10 Apr 2026 17:58:42 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.22-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.18.22-rc1

Andrea Righi <[email protected]>
sched_ext: Fix stale direct dispatch state in ddsp_dsq_id

Tejun Heo <[email protected]>
sched_ext: Refactor do_enqueue_task() local and global DSQ paths

David Hildenbrand (Arm) <[email protected]>
mm/memory: fix PMD/PUD checks in follow_pfnmap_start()

Anshuman Khandual <[email protected]>
mm: replace READ_ONCE() with standard page table accessors

Josef Bacik <[email protected]>
scsi: target: tcm_loop: Drain commands in target_reset handler

Thinh Nguyen <[email protected]>
scsi: target: file: Use kzalloc_flex for aio_cmd

Willem de Bruijn <[email protected]>
net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback

Guangshuo Li <[email protected]>
net: mana: fix use-after-free in add_adev() error path

Alex Deucher <[email protected]>
drm/amd/display: Fix DCE LVDS handling

Yang Wang <[email protected]>
drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13

Alexander Popov <[email protected]>
wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free

Petr Mladek <[email protected]>
kallsyms: prevent module removal when printing module name and buildid

Petr Mladek <[email protected]>
kallsyms: cleanup code for appending the module buildid

Petr Mladek <[email protected]>
kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid()

Petr Mladek <[email protected]>
kallsyms: clean up @namebuf initialization in kallsyms_lookup_buildid()

Taegu Ha <[email protected]>
usb: gadget: f_uac1_legacy: validate control request size

Michael Zimmermann <[email protected]>
usb: gadget: f_hid: move list and spinlock inits from bind to alloc

Kuen-Han Tsai <[email protected]>
usb: gadget: f_rndis: Fix net_device lifecycle with device_move

Kuen-Han Tsai <[email protected]>
usb: gadget: f_subset: Fix net_device lifecycle with device_move

Kuen-Han Tsai <[email protected]>
usb: gadget: f_eem: Fix net_device lifecycle with device_move

Kuen-Han Tsai <[email protected]>
usb: gadget: f_ecm: Fix net_device lifecycle with device_move

Kuen-Han Tsai <[email protected]>
usb: gadget: f_rndis: Protect RNDIS options with mutex

Kuen-Han Tsai <[email protected]>
usb: gadget: f_subset: Fix unbalanced refcnt in geth_free

Jimmy Hu <[email protected]>
usb: gadget: uvc: fix NULL pointer dereference during unbind race

Kuen-Han Tsai <[email protected]>
usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo

Kuen-Han Tsai <[email protected]>
usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop

Zilin Guan <[email protected]>
ice: Fix memory leak in ice_set_ringparam()

Aditya Garg <[email protected]>
HID: appletb-kbd: add .resume method in PM

Nathan Rebello <[email protected]>
usb: typec: ucsi: validate connector number in ucsi_notify_common()

Sebastian Urban <[email protected]>
usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer

Alan Stern <[email protected]>
USB: dummy-hcd: Fix interrupt synchronization error

Alan Stern <[email protected]>
USB: dummy-hcd: Fix locking/synchronization error

Konrad Dybcio <[email protected]>
thunderbolt: Fix property read in nhi_wake_supported()

Andrei Kuchynski <[email protected]>
usb: typec: thunderbolt: Set enter_vdo during initialization

Xingjing Deng <[email protected]>
misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe

Xingjing Deng <[email protected]>

    misc: fastrpc: possible double-free of cctx->remote_heap

Rafael J. Wysocki <[email protected]>
thermal: core: Fix thermal zone device registration error path

Rafael J. Wysocki <[email protected]>
thermal: core: Address thermal zone removal races with resume

Tzung-Bi Shih <[email protected]>
gpio: Fix resource leaks on errors in gpiochip_add_data_with_key()

Shenwei Wang <[email protected]>
gpio: mxc: map Both Edge pad wakeup to Rising Edge

Changwoo Min <[email protected]>
sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU

Guangshuo Li <[email protected]>
cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path

Srujana Challa <[email protected]>
virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN

Sven Eckelmann (Plasma Cloud) <[email protected]>
net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled

Yufan Chen <[email protected]>
net: ftgmac100: fix ring allocation unwind on open failure

Yang Yang <[email protected]>
vxlan: validate ND option lengths in vxlan_na_create

Eric Biggers <[email protected]>
crypto: tegra - Add missing CRYPTO_ALG_ASYNC

Cosmin Tanislav <[email protected]>
counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member

Cosmin Tanislav <[email protected]>
counter: rz-mtu3-cnt: prevent counter from being toggled multiple times

Nicolas Pitre <[email protected]>
vt: resize saved unicode buffer on alt screen exit after resize

Liav Mordouch <[email protected]>
vt: discard stale unicode buffer on alt screen exit after resize

Dave Penkler <[email protected]>
gpib: Fix fluke driver s390 compile issue

Yifan Wu <[email protected]>
netfilter: ipset: drop logically empty buckets in mtype_del

Ivan Vera <[email protected]>
nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy

Christian Eggers <[email protected]>
nvmem: imx: assign nvmem_cell_info::raw_len

Thomas Richter <[email protected]>
s390/cpum_sf: Cap sampling rate to prevent lsctl exception

Harald Freudenberger <[email protected]>
s390/zcrypt: Fix memory leak with CCA cards used as accelerator

Emanuele Ghidoli <[email protected]>
spi: cadence-qspi: Fix exec_mem_op error handling

Xu Yang <[email protected]>
dt-bindings: connector: add pd-disable dependency

Conor Dooley <[email protected]>
firmware: microchip: fail auto-update probe if no flash found

Ian Abbott <[email protected]>
comedi: me4000: Fix potential overrun of firmware buffer

Ian Abbott <[email protected]>
comedi: me_daq: Fix potential overrun of firmware buffer

Ian Abbott <[email protected]>
comedi: ni_atmio16d: Fix invalid clean-up after failed attach

Ian Abbott <[email protected]>

    comedi: Reinit dev->spinlock between attachments to low-level drivers

Deepanshu Kartikey <[email protected]>
comedi: dt2815: add hardware detection to prevent crash

Oliver Neukum <[email protected]>
cdc-acm: new quirk for EPSON HMD

Yang Yang <[email protected]>
bridge: br_nd_send: validate ND option lengths

Srinivas Kandagatla <[email protected]>
ASoC: qcom: sc7280: make use of common helpers

Jens Axboe <[email protected]>

    io_uring: protect remaining lockless ctx->rings accesses with RCU

Dmitry Torokhov <[email protected]>
x86/platform/geode: Fix on-stack property data use-after-return bug

Guan-Yu Lin <[email protected]>
usb: core: use dedicated spinlock for offload state

Yongchao Wu <[email protected]>
usb: cdns3: gadget: fix state inconsistency on gadget init failure

Yongchao Wu <[email protected]>
usb: cdns3: gadget: fix NULL pointer dereference in ep_queue

Gabor Juhos <[email protected]>
usb: core: phy: avoid double use of 'usb3-phy'

Juno Choi <[email protected]>
usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()

Justin Chen <[email protected]>
usb: ehci-brcm: fix sleep during atomic

Guan-Yu Lin <[email protected]>
usb: host: xhci-sideband: delegate offload_usage tracking to class drivers

Felix Gu <[email protected]>
usb: misc: usbio: Fix URB memory leak on submit failure

Heitor Alves de Siqueira <[email protected]>
usb: usbtmc: Flush anchored URBs in usbtmc_release

Guangshuo Li <[email protected]>
usb: ulpi: fix double free in ulpi_register_interface() error path

Miao Li <[email protected]>
usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive

Johan Hovold <[email protected]>
gpib: lpvo_usb: fix memory leak on disconnect

Alexander Usyskin <[email protected]>
mei: me: reduce the scope on unexpected reset

Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Fix out-of-sequence free_irq()

Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Move iio_device_register() to correct location

Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Fix irq resource leak

Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Fix incorrect free_irq() variable

Francesco Lavra <[email protected]>
iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only

Josh Poimboeuf <[email protected]>
iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()

Aldo Conte <[email protected]>

    iio: light: veml6070: fix veml6070_read() return value

David Lechner <[email protected]>
iio: light: vcnl4035: fix scan buffer on big-endian

Antoniu Miclaus <[email protected]>
iio: imu: adis16550: fix swapped gyro/accel filter functions

Antoniu Miclaus <[email protected]>

    iio: dac: ad5770r: fix error return in ad5770r_read_raw()

Antoniu Miclaus <[email protected]>
iio: accel: adxl313: add missing error check in predisable

Antoniu Miclaus <[email protected]>
iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0

Valek Andrej <[email protected]>
iio: accel: fix ADXL355 temperature signature value

Billy Tsai <[email protected]>
iio: adc: aspeed: clear reference voltage bits before configuring vref

Antoniu Miclaus <[email protected]>
iio: adc: ade9000: move mutex init before IRQ registration

Giorgi Tchankvetadze <[email protected]>
iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power

Giorgi Tchankvetadze <[email protected]>
iio: adc: ade9000: fix wrong return type in streaming push

Dmitry Torokhov <[email protected]>
iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get()

Dmitry Torokhov <[email protected]>
iio: adc: ti-ads7950: normalize return value of gpio_get

Zoltan Illes <[email protected]>
Input: xpad - add support for Razer Wolverine V3 Pro

Shengyu Qu <[email protected]>
Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode

Liam Mitchell <[email protected]>
Input: bcm5974 - recover from failed mode switch

Christoffer Sandberg <[email protected]>
Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table

Bart Van Assche <[email protected]>
Input: synaptics-rmi4 - fix a locking bug in an error path

JP Hein <[email protected]>
USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam

Wanquan Zhong <[email protected]>
USB: serial: option: add support for Rolling Wireless RW135R-GL

Frej Drejhammar <[email protected]>
USB: serial: io_edgeport: add support for Blackbox IC135A

Alex Deucher <[email protected]>
drm/amdgpu/pm: drop SMU driver if version not matched messages

Donet Tom <[email protected]>
drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB

Junrui Luo <[email protected]>
drm/amdgpu: validate doorbell_offset in user queue creation

Lijo Lazar <[email protected]>
drm/amdgpu: Fix wait after reset sequence in S4

Ville Syrjälä <[email protected]>

    drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP

Ville Syrjälä <[email protected]>
drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode

Thomas Zimmermann <[email protected]>
drm/ast: dp501: Fix initialization of SCU2C

Felix Gu <[email protected]>
iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD

Felix Gu <[email protected]>
iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout()

Felix Gu <[email protected]>
iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion()

David Lechner <[email protected]>
iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()

David Lechner <[email protected]>
iio: adc: ti-adc161s626: fix buffer read on big-endian

David Lechner <[email protected]>
iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspace

David Lechner <[email protected]>
iio: orientation: hid-sensor-rotation: fix quaternion alignment

David Lechner <[email protected]>
iio: add IIO_DECLARE_QUATERNION() macro

Adam Crosser <[email protected]>
gpib: fix use-after-free in IO ioctl handlers

Prike Liang <[email protected]>
drm/amdgpu: fix the idr allocation flags

Aleksandr Nogikh <[email protected]>
x86/kexec: Disable KCOV instrumentation after load_segments()

Stefan Wiehler <[email protected]>
mips: mm: Allocate tlb_vpn array atomically

Sanman Pradhan <[email protected]>
hwmon: (occ) Fix division by zero in occ_show_power_1()

Maciej W. Rozycki <[email protected]>
MIPS: Fix the GCC version check for `__multi3' workaround

Maciej W. Rozycki <[email protected]>
MIPS: SiByte: Bring back cache initialisation

Asim Viladi Oglu Manizada <[email protected]>
ksmbd: fix OOB write in QUERY_INFO for compound requests

hkbinbin <[email protected]>
Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync

Oleh Konko <[email protected]>
Bluetooth: SMP: force responder MITM requirements before building the pairing response

Oleh Konko <[email protected]>
Bluetooth: SMP: derive legacy responder STK authentication from MITM state

Junxi Qian <[email protected]>
io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs()

Sourav Nayak <[email protected]>

    ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx

Zhang Heng <[email protected]>
ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15

Takashi Iwai <[email protected]>
ALSA: ctxfi: Fix missing SPDIFI1 index handling

Berk Cem Goksel <[email protected]>
ALSA: caiaq: fix stack out-of-bounds read in init_card

Eric Biggers <[email protected]>
lib/crypto: chacha: Zeroize permuted_state before it leaves scope

Cheng-Yang Chou <[email protected]>
sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl()

Srinivasan Shanmugam <[email protected]>
drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw()

Ernestas Kulik <[email protected]>
USB: serial: option: add MeiG Smart SRM825WN

Alexey Velichayshiy <[email protected]>
wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()

Yasuaki Torimaru <[email protected]>
wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation

Alice Ryhl <[email protected]>
rust_binder: use AssertSync for BINDER_VM_OPS

Greg Kroah-Hartman <[email protected]>
drm/ioc32: stop speculation on the drm_compat_ioctl path

Sunil V L <[email protected]>
ACPI: RIMT: Add dependency between iommu and devices

Zishun Yi <[email protected]>
riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set

Paul Walmsley <[email protected]>
riscv: kgdb: fix several debug register assignment bugs

Ian Rogers <[email protected]>
perf/x86: Fix potential bad container_of in intel_pmu_hw_config

Peter Zijlstra <[email protected]>
sched/fair: Fix zero_vruntime tracking fix

Shiji Yang <[email protected]>
mips: ralink: update CPU clock index

Corey Hickey <[email protected]>
hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI

Chen Ni <[email protected]>
drm/sysfb: Fix efidrm error handling and memory type mismatch

Sanman Pradhan <[email protected]>
hwmon: (occ) Fix missing newline in occ_show_extended()

Felix Gu <[email protected]>
spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback

Sanman Pradhan <[email protected]>
hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()

Daniele Ceraolo Spurio <[email protected]>
drm/xe/pxp: Clear restart flag in pxp_start after jumping back

Daniele Ceraolo Spurio <[email protected]>
drm/xe/pxp: Remove incorrect handling of impossible state during suspend

Daniele Ceraolo Spurio <[email protected]>
drm/xe/pxp: Clean up termination status on failure

Felix Gu <[email protected]>
spi: stm32-ospi: Fix reset control leak on probe error

Felix Gu <[email protected]>
spi: stm32-ospi: Fix resource leak in remove() callback

Jamie Gibbons <[email protected]>
dt-bindings: gpio: fix microchip #interrupt-cells

Sanman Pradhan <[email protected]>
hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS")

Sanman Pradhan <[email protected]>
hwmon: (pxe1610) Check return value of page-select write in probe

Sanman Pradhan <[email protected]>
hwmon: (tps53679) Fix array access with zero-length block read

Qi Tang <[email protected]>
io_uring/rsrc: reject zero-length fixed buffer import

Youssef Samir <[email protected]>
accel/qaic: Handle DBC deactivation if the owner went away

Barnabás Pőcze <[email protected]>
gpiolib: clear requested flag if line is invalid

Bartosz Golaszewski <[email protected]>
gpio: rename gpio_chip_hwgpio() to gpiod_hwgpio()

David Lechner <[email protected]>
iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one

Maarten Lankhorst <[email protected]>
Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug"

Varun R Mallya <[email protected]>
bpf: Reject sleepable kprobe_multi programs at attach time

Qi Tang <[email protected]>
bpf: reject direct access to nullable PTR_TO_BUF pointers

Dimitri Daskalakis <[email protected]>
eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64

Eric Dumazet <[email protected]>
ipv6: avoid overflows in ip6_datagram_send_ctl()

Luka Gejak <[email protected]>
net: hsr: fix VLAN add unwind on slave errors

Xiang Mei <[email protected]>
net/sched: cls_flow: fix NULL pointer dereference on shared blocks

Xiang Mei <[email protected]>
net/sched: cls_fw: fix NULL pointer dereference on shared blocks

Martin Schiller <[email protected]>
net/x25: Fix overflow when accumulating packets

Martin Schiller <[email protected]>
net/x25: Fix potential double free of skb

Pavan Chebbi <[email protected]>
bnxt_en: Restore default stat ctxs for ULP when resource is available

Saeed Mahameed <[email protected]>
net/mlx5: Fix switchdev mode rollback in case of failure

Saeed Mahameed <[email protected]>
net/mlx5: Avoid "No data available" when FW version queries fail

Shay Drory <[email protected]>
net/mlx5: lag: Check for LAG device before creating debugfs

Fedor Pchelkin <[email protected]>
net: macb: properly unregister fixed rate clocks

Fedor Pchelkin <[email protected]>
net: macb: fix clk handling on PCI glue driver removal

Yucheng Lu <[email protected]>
net/sched: sch_netem: fix out-of-bounds access in packet corruption

Kuniyuki Iwashima <[email protected]>

    bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().

Weiming Shi <[email protected]>
rds: ib: reject FRMR registration before IB connection is established

Keenan Dong <[email protected]>
Bluetooth: MGMT: validate mesh send advertising payload length

Pauli Virtanen <[email protected]>
Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt

Pauli Virtanen <[email protected]>
Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync

Keenan Dong <[email protected]>
Bluetooth: MGMT: validate LTK enc_size on load

Jonathan Rissanen <[email protected]>
Bluetooth: hci_h4: Fix race during initialization

Cen Zhang <[email protected]>
Bluetooth: SCO: fix race conditions in sco_sock_connect()

Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate

Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: reject immediate NF_QUEUE verdict

Pablo Neira Ayuso <[email protected]>
netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP

Pablo Neira Ayuso <[email protected]>
netfilter: ctnetlink: ignore explicit helper on new expectations

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: store netns and zone in expectation

Pablo Neira Ayuso <[email protected]>

    netfilter: nf_conntrack_expect: use expect->helper

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: honor expectation helper field

Qi Tang <[email protected]>
netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent

Qi Tang <[email protected]>
netfilter: nf_conntrack_helper: pass helper to expect cleanup

Florian Westphal <[email protected]>
netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr

Florian Westphal <[email protected]>
netfilter: x_tables: ensure names are nul-terminated

Florian Westphal <[email protected]>
netfilter: nfnetlink_log: account for netlink header size

Pablo Neira Ayuso <[email protected]>
netfilter: flowtable: strictly check for maximum number of actions

Geoffrey D. Bennett <[email protected]>
ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP

Michal Piekos <[email protected]>
net: stmmac: skip VLAN restore when VLAN hash ops are missing

Li Xiasong <[email protected]>
mptcp: fix soft lockup in mptcp_recvmsg()

Geliang Tang <[email protected]>
mptcp: add eat_recv_skb helper

Zhengchuan Liang <[email protected]>
net: ipv6: flowlabel: defer exclusive option free until RCU teardown

Alexei Starovoitov <[email protected]>
bpf: Fix regsafe() for pointers to packet

Julian Braha <[email protected]>
ASoC: Intel: boards: fix unmet dependency on PINCTRL

Suraj Gupta <[email protected]>
net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets

Suraj Gupta <[email protected]>
net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec

Pengpeng Hou <[email protected]>
NFC: pn533: bound the UART receive buffer

Xiang Mei <[email protected]>
net: bonding: fix use-after-free in bond_xmit_broadcast()

Herbert Xu <[email protected]>
crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption

Herbert Xu <[email protected]>
crypto: algif_aead - Revert to operating out-of-place

Pengpeng Hou <[email protected]>
bnxt_en: set backing store type from query type

Yochai Eisenrich <[email protected]>
net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak

Guoyu Su <[email protected]>
net: use skb_header_pointer() for TCPv4 GSO frag_off check

Paolo Abeni <[email protected]>
net: introduce mangleid_features

Lorenzo Bianconi <[email protected]>
net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue()

Paolo Abeni <[email protected]>
ipv6: prevent possible UaF in addrconf_permanent_addr()

Jihed Chaibi <[email protected]>
ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure

Dag Smedberg <[email protected]>
ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP

Wei Fang <[email protected]>
net: enetc: do not allow VF to configure the RSS key

Wei Fang <[email protected]>
net: enetc: check whether the RSS algorithm is Toeplitz

Marek Behún <[email protected]>
net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta

Xiang Mei <[email protected]>
net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()

Yang Yang <[email protected]>
bridge: br_nd_send: linearize skb before parsing ND options

Dimitri Daskalakis <[email protected]>
eth: fbnic: Account for page fragments when updating BDQ tail

Eric Dumazet <[email protected]>

    ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

Eric Dumazet <[email protected]>

    ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

Thomas Bogendoerfer <[email protected]>
tg3: Fix race for querying speed/duplex

Pengpeng Hou <[email protected]>
net/ipv6: ioam6: prevent schema length wraparound in trace fill

Yochai Eisenrich <[email protected]>
net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak

Jiayuan Chen <[email protected]>
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak

Wei Fang <[email protected]>
net: enetc: reset PIR and CIR if they are not equal when initializing TX ring

Buday Csaba <[email protected]>
net: fec: fix the PTP periodic output sysfs interface

Qingfang Deng <[email protected]>
netdevsim: fix build if SKB_EXTENSIONS=n

Dipayaan Roy <[email protected]>
net: mana: Fix RX skb truesize accounting

Norbert Szetei <[email protected]>
crypto: af-alg - fix NULL pointer dereference in scatterwalk

Mikulas Patocka <[email protected]>
crypto: deflate - fix spurious -ENOSPC

Horia Geantă <[email protected]>
crypto: caam - fix overflow on long hmac keys

Horia Geantă <[email protected]>
crypto: caam - fix DMA corruption on long hmac keys

Reshma Immaculate Rajkumar <[email protected]>
wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session

Johannes Berg <[email protected]>
wifi: iwlwifi: mld: correctly set wifi generation data

Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: disable EHT if the device doesn't allow it

Johannes Berg <[email protected]>
wifi: iwlwifi: cfg: add new device names

Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: mvm: don't send a 6E related command when not supported

Pagadala Yesu Anjaneyulu <[email protected]>
wifi: iwlwifi: mld: Fix MLO scan timing

Johannes Berg <[email protected]>
wifi: iwlwifi: fix remaining kernel-doc warnings

Frank Li <[email protected]>
dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning

Praveen Talari <[email protected]>
spi: geni-qcom: Check DMA interrupts early in ISR

Paulo Alcantara <[email protected]>

    smb: client: fix generic/694 due to wrong ->i_blocks

ZhengYuan Huang <[email protected]>
btrfs: reject root items with drop_progress and zero drop_level

Mikko Perttunen <[email protected]>
i2c: tegra: Don't mark devices with pins as IRQ safe

Filipe Manana <[email protected]>
btrfs: reserve enough transaction items for qgroup ioctls

Lee Jones <[email protected]>
HID: multitouch: Check to ensure report responses match the request

Lee Jones <[email protected]>
HID: core: Mitigate potential OOB by removing bogus memset()

Lee Jones <[email protected]>
HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure

Josh Poimboeuf <[email protected]>
objtool: Fix Clang jump table detection

Paul SAGE <[email protected]>
tg3: replace placeholder MAC address with device property

Johannes Thumshirn <[email protected]>
btrfs: don't take device_list_mutex when querying zone info

Deepanshu Kartikey <[email protected]>
atm: lec: fix use-after-free in sock_def_readable()

Benoît Sevens <[email protected]>
HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

Deepanshu Kartikey <[email protected]>

    wifi: mac80211: check tdls flag in ieee80211_tdls_oper

Adrian Freund <[email protected]>
HID: logitech-hidpp: Enable MX Master 4 over bluetooth

Pepper Gray <[email protected]>
arm64/scs: Fix handling of advance_loc4

-------------

Diffstat:

 .../bindings/auxdisplay/holtek,ht16k33.yaml        |   2 +-
 .../bindings/connector/usb-connector.yaml          |   1 +
 .../bindings/gpio/microchip,mpfs-gpio.yaml         |   4 +-
 Makefile                                           |   4 +-
 arch/arm64/kernel/pi/patch-scs.c                   |   8 +
 arch/mips/lib/multi3.c                             |   6 +-
 arch/mips/mm/cache.c                               |   3 +-
 arch/mips/mm/tlb-r4k.c                             |   2 +-
 arch/mips/ralink/clk.c                             |   8 +-
 arch/riscv/kernel/kgdb.c                           |   7 +-
 arch/riscv/kernel/process.c                        |   4 +-
 arch/s390/kernel/perf_cpum_sf.c                    |   6 +-
 arch/x86/events/intel/core.c                       |   6 +-
 arch/x86/kernel/Makefile                           |  14 ++
 arch/x86/mm/Makefile                               |   2 +
 arch/x86/platform/geode/geode-common.c             |  24 ++-
 crypto/af_alg.c                                    |  53 ++----
 crypto/algif_aead.c                                | 100 ++---------
 crypto/algif_skcipher.c                            |   6 +-
 crypto/authencesn.c                                |  50 +++---
 crypto/deflate.c                                   |  11 +-
 drivers/accel/qaic/qaic_control.c                  |  47 ++++-
 drivers/acpi/riscv/rimt.c                          |   7 +
 drivers/android/binder/page_range.rs               |   8 +-
 drivers/android/binder/rust_binder_main.rs         |   2 +-
 drivers/bluetooth/hci_h4.c                         |   3 -
 drivers/comedi/drivers.c                           |   8 +
 drivers/comedi/drivers/dt2815.c                    |  12 ++
 drivers/comedi/drivers/me4000.c                    |  16 +-
 drivers/comedi/drivers/me_daq.c                    |  35 ++--
 drivers/comedi/drivers/ni_atmio16d.c               |   3 +-
 drivers/counter/rz-mtu3-cnt.c                      |  67 +++----
 drivers/cpufreq/cpufreq_governor.c                 |   6 +-
 drivers/crypto/caam/caamalg_qi2.c                  |   3 +-
 drivers/crypto/caam/caamhash.c                     |   3 +-
 drivers/crypto/tegra/tegra-se-aes.c                |  11 +-
 drivers/crypto/tegra/tegra-se-hash.c               |  30 ++--
 drivers/firmware/microchip/mpfs-auto-update.c      |  10 +-
 drivers/gpio/gpio-aspeed.c                         |   6 +-
 drivers/gpio/gpio-mxc.c                            |  10 +-
 drivers/gpio/gpiolib-cdev.c                        |  12 +-
 drivers/gpio/gpiolib-sysfs.c                       |  14 +-
 drivers/gpio/gpiolib.c                             | 175 +++++++++---------
 drivers/gpio/gpiolib.h                             |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c            |   8 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c            |   5 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c          |   7 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h             |   2 +-
 drivers/gpu/drm/amd/amdgpu/psp_v11_0.c             |   3 +-
 drivers/gpu/drm/amd/amdkfd/kfd_priv.h              |   4 +-
 .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c  |  17 +-
 .../display/dc/resource/dce100/dce100_resource.c   |   5 +-
 .../display/dc/resource/dce110/dce110_resource.c   |   5 +-
 .../display/dc/resource/dce112/dce112_resource.c   |   5 +-
 .../display/dc/resource/dce120/dce120_resource.c   |   5 +-
 .../amd/display/dc/resource/dce60/dce60_resource.c |  13 +-
 .../amd/display/dc/resource/dce80/dce80_resource.c |   5 +-
 drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c     |   1 -
 drivers/gpu/drm/amd/pm/swsmu/smu12/smu_v12_0.c     |   1 -
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c   |  33 +++-
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c   |  33 +++-
 drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c     |   1 -
 drivers/gpu/drm/ast/ast_dp501.c                    |   2 +-
 drivers/gpu/drm/drm_file.c                         |   5 +-
 drivers/gpu/drm/drm_ioc32.c                        |   2 +
 drivers/gpu/drm/drm_mode_config.c                  |   9 +-
 drivers/gpu/drm/i915/display/g4x_dp.c              |   2 +-
 drivers/gpu/drm/i915/display/icl_dsi.c             |   4 +-
 drivers/gpu/drm/sysfb/efidrm.c                     |  46 +++--
 drivers/gpu/drm/xe/xe_pxp.c                        |  11 +-
 drivers/hid/hid-appletb-kbd.c                      |   5 +-
 drivers/hid/hid-core.c                             |   7 +-
 drivers/hid/hid-logitech-hidpp.c                   |   6 +-
 drivers/hid/hid-multitouch.c                       |   7 +
 drivers/hid/wacom_wac.c                            |  10 ++
 drivers/hwmon/asus-ec-sensors.c                    |   7 +-
 drivers/hwmon/occ/common.c                         |  19 +-
 drivers/hwmon/pmbus/ltc4286.c                      |   1 +
 drivers/hwmon/pmbus/pxe1610.c                      |   5 +-
 drivers/hwmon/pmbus/tps53679.c                     |  10 +-
 drivers/i2c/busses/Kconfig                         |   2 +
 drivers/i2c/busses/i2c-tegra.c                     |   5 +-
 drivers/iio/accel/adxl313_core.c                   |   2 +
 drivers/iio/accel/adxl355_core.c                   |   2 +-
 drivers/iio/accel/adxl380.c                        |   2 +-
 drivers/iio/adc/ade9000.c                          |  12 +-
 drivers/iio/adc/aspeed_adc.c                       |   1 +
 drivers/iio/adc/ti-adc161s626.c                    |  41 +++--
 drivers/iio/adc/ti-ads1119.c                       |  11 +-
 drivers/iio/adc/ti-ads7950.c                       |   8 +-
 drivers/iio/dac/ad5770r.c                          |   2 +-
 drivers/iio/gyro/mpu3050-core.c                    |  32 ++--
 drivers/iio/imu/adis16550.c                        |   8 +-
 drivers/iio/imu/bmi160/bmi160_core.c               |  15 +-
 drivers/iio/imu/bno055/bno055.c                    |   2 +-
 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c     |   4 +
 drivers/iio/light/vcnl4035.c                       |  18 +-
 drivers/iio/light/veml6070.c                       |   4 +-
 drivers/iio/orientation/hid-sensor-rotation.c      |  24 ++-
 drivers/input/joystick/xpad.c                      |   5 +
 drivers/input/mouse/bcm5974.c                      |  42 ++++-
 drivers/input/rmi4/rmi_f54.c                       |   4 +-
 drivers/input/serio/i8042-acpipnpio.h              |   7 +
 drivers/misc/fastrpc.c                             |   5 +-
 drivers/misc/mei/hw-me.c                           |  14 +-
 drivers/net/bonding/bond_main.c                    |   2 +-
 drivers/net/ethernet/airoha/airoha_eth.c           |  18 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |  10 +-
 drivers/net/ethernet/broadcom/tg3.c                |  13 +-
 drivers/net/ethernet/cadence/macb_pci.c            |  10 +-
 drivers/net/ethernet/faraday/ftgmac100.c           |  28 ++-
 drivers/net/ethernet/freescale/enetc/enetc.c       |  13 +-
 .../net/ethernet/freescale/enetc/enetc_ethtool.c   |  10 +-
 drivers/net/ethernet/freescale/fec_ptp.c           |   3 -
 drivers/net/ethernet/intel/ice/ice_ethtool.c       |  11 +-
 drivers/net/ethernet/mediatek/mtk_ppe_offload.c    |  21 ++-
 drivers/net/ethernet/mellanox/mlx5/core/devlink.c  |   4 +-
 .../ethernet/mellanox/mlx5/core/eswitch_offloads.c |   2 +
 drivers/net/ethernet/mellanox/mlx5/core/fw.c       |  49 ++++--
 .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c  |   3 +
 .../net/ethernet/mellanox/mlx5/core/mlx5_core.h    |   4 +-
 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c       |   6 +-
 drivers/net/ethernet/meta/fbnic/fbnic_txrx.h       |   2 +-
 drivers/net/ethernet/microsoft/mana/mana_en.c      |  13 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  14 +-
 drivers/net/ethernet/xilinx/xilinx_axienet.h       |   4 +-
 drivers/net/ethernet/xilinx/xilinx_axienet_main.c  |   9 +-
 drivers/net/phy/sfp.c                              |   7 +-
 drivers/net/virtio_net.c                           |  20 +--
 drivers/net/vxlan/vxlan_core.c                     |   6 +-
 drivers/net/wireless/ath/ath11k/dp_rx.c            |  15 +-
 drivers/net/wireless/intel/iwlwifi/cfg/rf-fm.c     |   1 +
 drivers/net/wireless/intel/iwlwifi/cfg/rf-wh.c     |  24 +++
 drivers/net/wireless/intel/iwlwifi/fw/acpi.h       |   1 +
 drivers/net/wireless/intel/iwlwifi/fw/api/cmdhdr.h |   4 +-
 drivers/net/wireless/intel/iwlwifi/fw/api/coex.h   |   4 +-
 .../net/wireless/intel/iwlwifi/fw/api/commands.h   |   5 +
 .../net/wireless/intel/iwlwifi/fw/api/dbg-tlv.h    |  14 +-
 drivers/net/wireless/intel/iwlwifi/fw/api/debug.h  |   2 +-
 .../net/wireless/intel/iwlwifi/fw/api/location.h   |   8 +-
 drivers/net/wireless/intel/iwlwifi/fw/api/power.h  |   5 +-
 drivers/net/wireless/intel/iwlwifi/fw/api/scan.h   |  88 +++++----
 drivers/net/wireless/intel/iwlwifi/fw/api/sta.h    |   6 +-
 drivers/net/wireless/intel/iwlwifi/fw/api/stats.h  |  39 ++--
 drivers/net/wireless/intel/iwlwifi/fw/api/tx.h     |   2 +-
 drivers/net/wireless/intel/iwlwifi/fw/error-dump.h |   4 +-
 drivers/net/wireless/intel/iwlwifi/fw/file.h       |  74 ++++++--
 drivers/net/wireless/intel/iwlwifi/fw/img.h        |  12 +-
 drivers/net/wireless/intel/iwlwifi/fw/runtime.h    |  22 ++-
 drivers/net/wireless/intel/iwlwifi/iwl-config.h    |   8 +-
 drivers/net/wireless/intel/iwlwifi/iwl-dbg-tlv.h   |   4 +-
 drivers/net/wireless/intel/iwlwifi/iwl-drv.h       |   3 +-
 drivers/net/wireless/intel/iwlwifi/iwl-modparams.h |   4 +-
 drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.c |   2 +-
 drivers/net/wireless/intel/iwlwifi/iwl-nvm-parse.h |  17 +-
 drivers/net/wireless/intel/iwlwifi/iwl-op-mode.h   |   1 +
 drivers/net/wireless/intel/iwlwifi/iwl-trans.h     |   6 +-
 drivers/net/wireless/intel/iwlwifi/mld/iface.c     | 101 +++++++----
 drivers/net/wireless/intel/iwlwifi/mld/mac80211.c  |  19 ++
 drivers/net/wireless/intel/iwlwifi/mld/mld.c       |   1 +
 drivers/net/wireless/intel/iwlwifi/mld/mlo.c       |   4 +-
 drivers/net/wireless/intel/iwlwifi/mld/notif.c     |   5 +
 drivers/net/wireless/intel/iwlwifi/mld/scan.c      |  30 +++-
 drivers/net/wireless/intel/iwlwifi/mld/scan.h      |   9 +-
 drivers/net/wireless/intel/iwlwifi/mvm/d3.c        |   2 +-
 drivers/net/wireless/intel/iwlwifi/mvm/fw.c        |   3 +-
 drivers/net/wireless/intel/iwlwifi/pcie/drv.c      |   5 +
 drivers/net/wireless/microchip/wilc1000/hif.c      |   2 +-
 drivers/net/wireless/virtual/virt_wifi.c           |   1 -
 drivers/nfc/pn533/uart.c                           |   3 +
 drivers/nvmem/imx-ocotp-ele.c                      |   1 +
 drivers/nvmem/imx-ocotp.c                          |   1 +
 drivers/nvmem/zynqmp_nvmem.c                       |   8 +-
 drivers/s390/crypto/zcrypt_msgtype6.c              |  32 ++--
 drivers/spi/spi-amlogic-spifc-a4.c                 |  12 ++
 drivers/spi/spi-cadence-quadspi.c                  |  17 +-
 drivers/spi/spi-geni-qcom.c                        |   9 +-
 drivers/spi/spi-stm32-ospi.c                       |   9 +-
 drivers/staging/gpib/Kconfig                       |   1 +
 drivers/staging/gpib/common/gpib_os.c              |  96 +++++++---
 drivers/staging/gpib/include/gpib_types.h          |   8 +
 drivers/staging/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c |   4 +-
 drivers/target/loopback/tcm_loop.c                 |  52 +++++-
 drivers/target/target_core_file.c                  |   2 +-
 drivers/thermal/thermal_core.c                     |  32 +++-
 drivers/thunderbolt/nhi.c                          |   2 +-
 drivers/tty/vt/vt.c                                |  18 ++
 drivers/usb/cdns3/cdns3-gadget.c                   |   4 +
 drivers/usb/class/cdc-acm.c                        |   9 +
 drivers/usb/class/cdc-acm.h                        |   1 +
 drivers/usb/class/usbtmc.c                         |   3 +
 drivers/usb/common/ulpi.c                          |   5 +-
 drivers/usb/core/driver.c                          |  23 ++-
 drivers/usb/core/offload.c                         | 102 ++++++-----
 drivers/usb/core/phy.c                             |  12 +-
 drivers/usb/core/quirks.c                          |   3 +
 drivers/usb/core/usb.c                             |   1 +
 drivers/usb/dwc2/gadget.c                          |   2 +
 drivers/usb/gadget/function/f_ecm.c                |  35 ++--
 drivers/usb/gadget/function/f_eem.c                |  59 ++++---
 drivers/usb/gadget/function/f_hid.c                |  19 +-
 drivers/usb/gadget/function/f_rndis.c              |  49 ++++--
 drivers/usb/gadget/function/f_subset.c             |  63 ++++---
 drivers/usb/gadget/function/f_uac1_legacy.c        |  47 +++--
 drivers/usb/gadget/function/f_uvc.c                |  39 +++-
 drivers/usb/gadget/function/u_ecm.h                |  21 ++-
 drivers/usb/gadget/function/u_eem.h                |  21 ++-
 drivers/usb/gadget/function/u_ether.c              |  16 +-
 drivers/usb/gadget/function/u_gether.h             |  22 ++-
 drivers/usb/gadget/function/u_rndis.h              |  31 +++-
 drivers/usb/gadget/function/uvc.h                  |   3 +
 drivers/usb/gadget/function/uvc_v4l2.c             |   5 +-
 drivers/usb/gadget/udc/dummy_hcd.c                 |  42 +++--
 drivers/usb/host/ehci-brcm.c                       |   4 +-
 drivers/usb/host/xhci-sideband.c                   |  18 +-
 drivers/usb/misc/usbio.c                           |   7 +-
 drivers/usb/serial/io_edgeport.c                   |   3 +
 drivers/usb/serial/io_usbvend.h                    |   1 +
 drivers/usb/serial/option.c                        |   4 +
 drivers/usb/typec/altmodes/thunderbolt.c           |  44 ++---
 drivers/usb/typec/ucsi/ucsi.c                      |   9 +-
 fs/btrfs/ioctl.c                                   |  12 +-
 fs/btrfs/tree-checker.c                            |  17 ++
 fs/btrfs/zoned.c                                   |   6 +-
 fs/smb/client/cifsglob.h                           |   6 +
 fs/smb/client/file.c                               |   1 -
 fs/smb/client/inode.c                              |  21 +--
 fs/smb/client/smb2ops.c                            |  20 +--
 fs/smb/server/smb2pdu.c                            | 121 +++++++++----
 fs/smb/server/smbacl.c                             |  43 +++++
 fs/smb/server/smbacl.h                             |   2 +
 include/crypto/if_alg.h                            |   5 +-
 include/linux/iio/iio.h                            |  12 ++
 include/linux/netdevice.h                          |   3 +
 include/linux/netfilter/ipset/ip_set.h             |   2 +-
 include/linux/skbuff.h                             |   1 +
 include/linux/usb.h                                |  10 +-
 include/net/netfilter/nf_conntrack_expect.h        |  20 ++-
 io_uring/io_uring.c                                |  62 ++++---
 io_uring/io_uring.h                                |  34 +++-
 io_uring/net.c                                     |   4 +
 io_uring/rsrc.c                                    |   4 +
 kernel/bpf/verifier.c                              |  10 +-
 kernel/kallsyms.c                                  |  64 +++++--
 kernel/sched/ext.c                                 |  70 +++++---
 kernel/sched/ext_idle.c                            |  33 ++--
 kernel/sched/fair.c                                |  10 +-
 kernel/trace/bpf_trace.c                           |   4 +
 lib/crypto/chacha-block-generic.c                  |   4 +
 mm/gup.c                                           |  10 +-
 mm/hmm.c                                           |   2 +-
 mm/memory.c                                        |  22 ++-
 mm/mprotect.c                                      |   2 +-
 mm/sparse-vmemmap.c                                |   2 +-
 mm/vmscan.c                                        |   2 +-
 net/atm/lec.c                                      |  72 +++++---
 net/atm/lec.h                                      |   2 +-
 net/bluetooth/hci_conn.c                           |   8 +-
 net/bluetooth/hci_event.c                          |  33 ++--
 net/bluetooth/hci_sync.c                           |  14 +-
 net/bluetooth/mgmt.c                               |  17 +-
 net/bluetooth/sco.c                                |  30 +++-
 net/bluetooth/smp.c                                |  11 +-
 net/bridge/br_arp_nd_proxy.c                       |  18 +-
 net/core/dev.c                                     |  38 +++-
 net/core/skmsg.c                                   |  13 +-
 net/hsr/hsr_device.c                               |  32 ++--
 net/ipv6/addrconf.c                                |   6 +-
 net/ipv6/datagram.c                                |  10 ++
 net/ipv6/icmp.c                                    |   3 +
 net/ipv6/ioam6.c                                   |   4 +-
 net/ipv6/ip6_flowlabel.c                           |   5 -
 net/ipv6/ip6_tunnel.c                              |   5 +
 net/ipv6/ndisc.c                                   |   3 +
 net/mac80211/tdls.c                                |   2 +-
 net/mptcp/protocol.c                               |  30 ++--
 net/netfilter/ipset/ip_set_core.c                  |   4 +-
 net/netfilter/ipset/ip_set_hash_gen.h              |   2 +-
 net/netfilter/ipset/ip_set_list_set.c              |   4 +-
 net/netfilter/nf_conntrack_broadcast.c             |   8 +-
 net/netfilter/nf_conntrack_expect.c                |  25 ++-
 net/netfilter/nf_conntrack_h323_main.c             |  12 +-
 net/netfilter/nf_conntrack_helper.c                |  13 +-
 net/netfilter/nf_conntrack_netlink.c               |  87 +++------
 net/netfilter/nf_conntrack_sip.c                   |   4 +-
 net/netfilter/nf_flow_table_offload.c              | 196 ++++++++++++++-------
 net/netfilter/nf_tables_api.c                      |   7 +-
 net/netfilter/nfnetlink_log.c                      |   2 +-
 net/netfilter/x_tables.c                           |  23 +++
 net/netfilter/xt_cgroup.c                          |   6 +
 net/netfilter/xt_rateest.c                         |   5 +
 net/qrtr/af_qrtr.c                                 |  31 ++--
 net/rds/ib_rdma.c                                  |   7 +-
 net/sched/cls_api.c                                |   1 +
 net/sched/cls_flow.c                               |  10 +-
 net/sched/cls_fw.c                                 |  14 +-
 net/sched/sch_hfsc.c                               |   4 +-
 net/sched/sch_netem.c                              |   5 +-
 net/x25/x25_in.c                                   |   9 +-
 net/x25/x25_subr.c                                 |   1 +
 sound/hda/codecs/realtek/alc269.c                  |   2 +
 sound/pci/ctxfi/ctdaio.c                           |   1 +
 sound/soc/cirrus/ep93xx-i2s.c                      |  34 ++--
 sound/soc/intel/boards/Kconfig                     |   2 -
 sound/soc/qcom/sdw.c                               |  11 ++
 sound/usb/caiaq/device.c                           |   2 +-
 sound/usb/qcom/qc_audio_offload.c                  |  10 +-
 sound/usb/quirks.c                                 |   2 +
 tools/objtool/check.c                              |   5 +-
 309 files changed, 3178 insertions(+), 1635 deletions(-)

Read the cover letter in its thread