7.0.7-rc1 review

Greg Kroah-Hartman linux-hyperv linux-patches lkml stable 1 version May 12 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest May 12307 patches 15 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/307	scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()`drivers/target/target_core_configfs.c`	+1 -1	0 replies
2/307	ipmi: Add limits to event and receive message requests`drivers/char/ipmi/ipmi_si_intf.c` `drivers/char/ipmi/ipmi_ssif.c`	+64 ~~-13~~	0 replies
3/307	ipmi: Check event message buffer response for bad data`drivers/char/ipmi/ipmi_si_intf.c`	+7 -1	0 replies
4/307	ipmi:si: Return state to normal if message allocation fails`drivers/char/ipmi/ipmi_si_intf.c`	+6 -2	0 replies
5/307	fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free`drivers/video/fbdev/udlfb.c` `include/video/udlfb.h`	+31 -1	0 replies
6/307	ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states`drivers/acpi/arm64/cpuidle.c`	+3 -7	0 replies
7/307	ACPI: scan: Use acpi_dev_put() in object add error paths`drivers/acpi/power.c` `drivers/acpi/scan.c`	+2 -2	0 replies
8/307	ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770 AIO`drivers/acpi/video_detect.c`	+8 -0	0 replies
9/307	ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug`drivers/acpi/cppc_acpi.c`	+3 -3	0 replies
10/307	ACPI: video: force native backlight on HP OMEN 16 (8A44)`drivers/acpi/video_detect.c`	+8 -0	0 replies
11/307	tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()`kernel/tracepoint.c`	+2 -0	0 replies
12/307	iommufd: Fix a race with concurrent allocation and unmap`drivers/iommu/iommufd/io_pagetable.c`	+10 -0	0 replies
13/307	ASoC: SOF: Dont allow pointer operations on unconfigured streams`sound/soc/sof/compress.c`	+3 -0	0 replies
14/307	wifi: mt76: mt7925: fix incorrect TLV length in CLC command`drivers/net/wireless/mediatek/mt76/mt7925/mcu.c`	+1 -1	0 replies
15/307	spi: rockchip: fix controller deregistration`drivers/spi/spi-rockchip.c`	+3 -1	0 replies
16/307	ksmbd: rewrite stop_sessions() with restartable iteration`fs/smb/server/connection.c` `fs/smb/server/connection.h`	+39 -8	0 replies
17/307	KVM: x86: Fix shadow paging use-after-free due to unexpected GFN`arch/x86/kvm/mmu/mmu.c`	+14 ~~-21~~	0 replies
18/307	flow_dissector: do not dissect PPPoE PFC frames`net/core/flow_dissector.c`	+5 -8	0 replies
19/307	smb: client/smbdirect: fix MR registration for coalesced SG lists`fs/smb/client/smbdirect.c`	+12 -9	0 replies
20/307	net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked`net/sched/sch_red.c`	+1 -1	0 replies
21/307	exit: prevent preemption of oopsing TASK_DEAD task`kernel/exit.c`	+1 -0	0 replies
22/307	wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr`drivers/net/wireless/mediatek/mt76/mt7925/mac.c`	+4 -2	0 replies
23/307	wifi: mt76: mt7925: fix incorrect length field in txpower command`drivers/net/wireless/mediatek/mt76/mt7925/mcu.c`	+1 -1	0 replies
24/307	wifi: mt76: mt7921: fix a potential clc buffer length underflow`drivers/net/wireless/mediatek/mt76/mt7921/mcu.c`	+3 -0	0 replies
25/307	wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work`drivers/net/wireless/mediatek/mt76/mt7921/main.c`	+4 -3	0 replies
26/307	wifi: b43legacy: enforce bounds check on firmware key index in RX path`drivers/net/wireless/broadcom/b43legacy/xmit.c`	+2 -1	0 replies
27/307	wifi: mac80211: drop stray static from fast-RX rx_result`net/mac80211/rx.c`	+1 -1	0 replies
28/307	wifi: rsi: fix kthread lifetime race between self-exit and external-stop`drivers/net/wireless/rsi/rsi_common.h`	+2 -3	0 replies
29/307	wifi: mac80211: use safe list iteration in radar detect work`net/mac80211/util.c`	+2 -2	0 replies
30/307	wifi: ath5k: do not access array OOB`drivers/net/wireless/ath/ath5k/base.c`	+2 -1	0 replies
31/307	wifi: mac80211: remove station if connection prep fails`net/mac80211/mlme.c`	+4 -5	0 replies
32/307	wifi: b43: enforce bounds check on firmware key index in b43_rx()`drivers/net/wireless/broadcom/b43/xmit.c`	+2 -1	0 replies
33/307	wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task`drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c`	+4 -2	0 replies
34/307	usb: usblp: fix heap leak in IEEE 1284 device ID via short response`drivers/usb/class/usblp.c`	+1 -0	0 replies
35/307	usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl`drivers/usb/class/usblp.c`	+1 -1	0 replies
36/307	ALSA: usb-audio: midi2: Restart output URBs on resume`sound/usb/midi2.c`	+5 -4	0 replies
37/307	ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()`sound/usb/stream.c`	+2 -0	0 replies
38/307	ALSA: usb-audio: Fix UAC3 cluster descriptor size check`sound/usb/stream.c`	+1 -1	0 replies
39/307	usb: dwc3: Move GUID programming after PHY initialization`drivers/usb/dwc3/core.c`	+6 -6	0 replies
40/307	usb: typec: tcpm: reset internal port states on soft reset AMS`drivers/usb/typec/tcpm/tcpm.c`	+2 -0	1 reply
41/307	USB: omap_udc: DMA: Dont enable burst 4 mode`drivers/usb/gadget/udc/omap_udc.c`	+0 -4	0 replies
42/307	USB: serial: option: add Telit Cinterion LE910Cx compositions`drivers/usb/serial/option.c`	+4 -0	0 replies
43/307	usb: ulpi: fix memory leak on ulpi_register() error paths`drivers/usb/common/ulpi.c`	+4 -1	0 replies
44/307	usb: typec: tcpm: fix debug accessory mode detection for sink ports`drivers/usb/typec/tcpm/tcpm.c`	+16 -9	0 replies
45/307	ALSA: hda: cs35l56: Propagate ASP TX source control errors`sound/hda/codecs/side-codecs/cs35l56_hda.c`	+14 -5	0 replies
46/307	ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger`sound/core/oss/pcm_oss.c`	+23 -6	0 replies
47/307	ALSA: hda/realtek: Fix speaker silence after S3 resume on Xiaomi Mi Laptop Pro 15`sound/hda/codecs/realtek/alc269.c`	+19 -0	0 replies
48/307	ALSA: firewire-tascam: Do not drop unread control events`sound/firewire/tascam/tascam-hwdep.c`	+1 -0	0 replies
49/307	ALSA: core: Serialize deferred fasync state checks`sound/core/misc.c`	+6 -2	0 replies
50/307	ALSA: seq: Fix UMP group 16 filtering`sound/core/seq/seq_clientmgr.c` `sound/core/seq/seq_clientmgr.h` `sound/core/seq/seq_ump_client.c`	+6 -3	0 replies
51/307	powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o`arch/powerpc/kexec/Makefile`	+1 -1	0 replies
52/307	x86/efi: Restore IRQ state in EFI page fault handler`arch/x86/include/asm/efi.h` `arch/x86/mm/fault.c` `arch/x86/platform/efi/quirks.c`	+13 -3	0 replies
53/307	sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters`kernel/sched/ext.c`	+6 -3	0 replies
54/307	xfrm: provide message size for XFRM_MSG_MAPPING`net/xfrm/xfrm_user.c`	+1 -0	0 replies
55/307	xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete`net/xfrm/xfrm_state.c`	+6 -6	0 replies
56/307	ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()`net/ipv6/xfrm6_protocol.c`	+3 -1	0 replies
57/307	xfrm: ah: account for ESN high bits in async callbacks`net/ipv4/ah4.c` `net/ipv6/ah6.c`	+24 -4	0 replies
58/307	selinux: fix avdcache auditing`security/selinux/hooks.c` `security/selinux/include/objsec.h`	+14 ~~-21~~	0 replies
59/307	selinux: use sk blob accessor in socket permission helpers`security/selinux/hooks.c`	+2 -2	0 replies
60/307	selinux: dont reserve xattr slot when we wont fill it`security/selinux/hooks.c`	+2 -1	0 replies
61/307	selinux: shrink critical section in sel_write_load()`security/selinux/selinuxfs.c`	+8 ~~-10~~	0 replies
62/307	selinux: prune /sys/fs/selinux/checkreqprot`security/selinux/selinuxfs.c`	+7 ~~-40~~	0 replies
63/307	selinux: prune /sys/fs/selinux/disable`security/selinux/selinuxfs.c`	+7 ~~-29~~	0 replies
64/307	selinux: prune /sys/fs/selinux/user`Documentation/ABI/obsolete/sysfs-selinux-user` `Documentation/ABI/removed/sysfs-selinux-user` `security/selinux/include/security.h` +2 more	+17 ~~-202~~	0 replies
65/307	selinux: allow multiple opens of /sys/fs/selinux/policy`security/selinux/selinuxfs.c`	+4 ~~-23~~	0 replies
66/307	io_uring/kbuf: support min length left for incremental buffers`include/uapi/linux/io_uring.h` `io_uring/kbuf.c` `io_uring/kbuf.h`	+16 -2	0 replies
67/307	io_uring/tw: serialize ctx->retry_llist with ->uring_lock`io_uring/tw.c`	+11 -1	0 replies
68/307	LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read()`arch/loongarch/kvm/exit.c`	+1 -0	0 replies
69/307	Bluetooth: virtio_bt: clamp rx length before skb_put`drivers/bluetooth/virtio_bt.c`	+12 -4	0 replies
70/307	Bluetooth: virtio_bt: validate rx pkt_type header length`drivers/bluetooth/virtio_bt.c`	+20 -3	0 replies
71/307	Bluetooth: btmtk: validate WMT event SKB length before struct access`drivers/bluetooth/btmtk.c`	+13 -2	0 replies
72/307	Bluetooth: hci_conn: fix potential UAF in create_big_sync`net/bluetooth/hci_conn.c`	+18 -1	0 replies
73/307	Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt`net/bluetooth/hci_event.c`	+25 -2	0 replies
74/307	Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()`net/bluetooth/l2cap_sock.c`	+3 -0	0 replies
75/307	Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()`net/bluetooth/l2cap_sock.c`	+3 -0	0 replies
76/307	Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()`net/bluetooth/l2cap_sock.c`	+3 -0	0 replies
77/307	rust: drm: gem: clean up GEM state in init failure case`rust/kernel/drm/gem/mod.rs`	+11 -2	0 replies
78/307	rust: allow `clippy::collapsible_match` globally`Makefile`	+1 -0	0 replies
79/307	rust: allow `clippy::collapsible_if` globally`Makefile` `drivers/android/binder/range_alloc/array.rs`	+1 -1	0 replies
80/307	rust: pin-init: internal: move alignment check to `make_field_check``rust/pin-init/internal/src/init.rs`	+37 ~~-41~~	0 replies
81/307	spi: syncuacer: fix controller deregistration`drivers/spi/spi-synquacer.c`	+7 -1	0 replies
82/307	spi: sun4i: fix controller deregistration`drivers/spi/spi-sun4i.c`	+9 -1	0 replies
83/307	spi: zynq-qspi: fix controller deregistration`drivers/spi/spi-zynq-qspi.c`	+11 -4	0 replies
84/307	spi: ti-qspi: fix controller deregistration`drivers/spi/spi-ti-qspi.c`	+6 -8	0 replies
85/307	spi: sun6i: fix controller deregistration`drivers/spi/spi-sun6i.c`	+7 -1	0 replies
86/307	spi: tegra114: fix controller deregistration`drivers/spi/spi-tegra114.c`	+7 -1	0 replies
87/307	spi: zynqmp-gqspi: fix controller deregistration`drivers/spi/spi-zynqmp-gqspi.c`	+3 -1	0 replies
88/307	spi: tegra20-sflash: fix controller deregistration`drivers/spi/spi-tegra20-sflash.c`	+7 -1	0 replies
89/307	spi: s3c64xx: fix NULL-deref on driver unbind`drivers/spi/spi-s3c64xx.c`	+0 -5	0 replies
90/307	staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc`drivers/staging/rtl8723bs/os_dep/osdep_service.c`	+2 -1	0 replies
91/307	staging: vme_user: fix root device leak on init failure`drivers/staging/vme_user/vme_fake.c`	+2 -0	0 replies
92/307	fanotify: fix false positive on permission events`fs/notify/fsnotify.c` `fs/notify/mark.c` `include/linux/fsnotify_backend.h`	+13 -8	0 replies
93/307	KVM: arm64: Fix kvm_vcpu_initialized() macro parameter`arch/arm64/include/asm/kvm_host.h`	+1 -1	0 replies
94/307	mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()`drivers/mtd/spi-nor/debugfs.c`	+3 -1	0 replies
95/307	arm64: signal: Preserve POR_EL0 if poe_context is missing`arch/arm64/kernel/signal.c`	+43 ~~-11~~	0 replies
96/307	mm/hugetlb_cma: round up per_node before logging it`mm/hugetlb_cma.c`	+1 -0	0 replies
97/307	LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT`arch/loongarch/include/asm/linkage.h`	+1 -1	0 replies
98/307	LoongArch: KVM: Compile switch.S directly into the kernel`arch/loongarch/Kbuild` `arch/loongarch/include/asm/asm-prototypes.h` `arch/loongarch/include/asm/kvm_host.h` +3 more	+41 ~~-42~~	0 replies
99/307	net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo`net/core/rtnetlink.c`	+1 -0	0 replies
100/307	mptcp: pm: ADD_ADDR rtx: skip inactive subflows`net/mptcp/pm.c`	+14 -4	0 replies
101/307	perf/x86/intel: Improve validation and configuration of ACR masks`arch/x86/events/intel/core.c`	+25 -7	0 replies
102/307	selftests/rseq: Dont run tests with runner scripts outside of the scripts`tools/testing/selftests/rseq/Makefile`	+8 -5	0 replies
103/307	rseq: Set rseq::cpu_id_start to 0 on unregistration`kernel/rseq.c`	+9 ~~-11~~	0 replies
104/307	rseq: Protect rseq_reset() against interrupts`include/linux/rseq.h`	+2 -0	0 replies
105/307	rseq: Dont advertise time slice extensions if disabled`include/uapi/linux/rseq.h` `kernel/rseq.c`	+9 -5	0 replies
106/307	selftests/rseq: Make registration flexible for legacy and optimized mode`tools/testing/selftests/rseq/rseq-abi.h` `tools/testing/selftests/rseq/rseq.c` `tools/testing/selftests/rseq/rseq.h`	+31 ~~-23~~	0 replies
107/307	selftests/rseq: Skip tests if time slice extensions are not available`tools/testing/selftests/rseq/slice_test.c`	+7 -5	0 replies
108/307	selftests/rseq: Validate legacy behavior`tools/testing/selftests/rseq/Makefile` `tools/testing/selftests/rseq/legacy_check.c` `tools/testing/selftests/rseq/run_legacy_check.sh`	+72 -2	0 replies
109/307	selftests/rseq: Expand for optimized RSEQ ABI v2`tools/testing/selftests/rseq/Makefile` `tools/testing/selftests/rseq/check_optimized.c` `tools/testing/selftests/rseq/param_test.c` +3 more	+95 ~~-13~~	0 replies
110/307	accel/ivpu: Disallow re-exporting imported GEM objects`drivers/accel/ivpu/ivpu_drv.c`	+21 -0	0 replies
111/307	sound: ua101: fix division by zero at probe`sound/usb/misc/ua101.c`	+7 -0	0 replies
112/307	pseries/papr-hvpipe: Fix race with interrupt handler`arch/powerpc/platforms/pseries/papr-hvpipe.c`	+11 -9	0 replies
113/307	pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace`arch/powerpc/platforms/pseries/papr-hvpipe.c`	+1 -1	0 replies
114/307	pseries/papr-hvpipe: Fix null ptr deref in papr_hvpipe_dev_create_handle()`arch/powerpc/platforms/pseries/papr-hvpipe.c`	+30 ~~-27~~	0 replies
115/307	pseries/papr-hvpipe: Fix & simplify error handling in papr_hvpipe_init()`arch/powerpc/platforms/pseries/papr-hvpipe.c`	+17 ~~-11~~	0 replies
116/307	pseries/papr-hvpipe: Fix the usage of copy_to_user()`arch/powerpc/platforms/pseries/papr-hvpipe.c`	+14 -9	0 replies
117/307	net: libwx: fix VF illegal register access`drivers/net/ethernet/wangxun/libwx/wx_hw.c`	+5 -2	0 replies
118/307	ip6_gre: Use cached t->net in ip6erspan_changelink().`net/ipv6/ip6_gre.c`	+3 -2	0 replies
119/307	net: libwx: use request_irq for VF misc interrupt`drivers/net/ethernet/wangxun/libwx/wx_vf_common.c`	+2 -2	0 replies
120/307	netpoll: pass buffer size to egress_dev() to avoid MAC truncation`net/core/netpoll.c`	+13 ~~-10~~	0 replies
121/307	net/rds: handle zerocopy send cleanup before the message is queued`net/rds/message.c`	+15 -5	0 replies
122/307	net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler`drivers/net/wwan/t7xx/t7xx_modem_ops.c` `drivers/net/wwan/t7xx/t7xx_port_ctrl_msg.c` `drivers/net/wwan/t7xx/t7xx_port_proxy.h`	+34 -6	0 replies
123/307	ovl: fix verity lazy-load guard broken by fsverity_active() semantic change`fs/overlayfs/util.c`	+1 -1	0 replies
124/307	platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration`drivers/platform/chrome/cros_typec_altmode.c`	+1 -0	0 replies
125/307	parisc: Fix IRQ leak in LASI driver`drivers/parisc/lasi.c`	+8 -4	0 replies
126/307	x86/efi: Fix graceful fault handling after FPU softirq changes`arch/x86/platform/efi/quirks.c`	+1 -1	0 replies
127/307	hwmon: (ltc2992) Clamp threshold writes to hardware range`drivers/hwmon/ltc2992.c`	+28 -7	0 replies
128/307	hwmon: (ltc2992) Fix u32 overflow in power read path`drivers/hwmon/ltc2992.c`	+4 -2	0 replies
129/307	clk: rk808: fix OF node reference imbalance`drivers/clk/clk-rk808.c`	+1 -1	0 replies
130/307	hwmon: (corsair-psu) Close HID device on probe errors`drivers/hwmon/corsair-psu.c`	+2 -2	0 replies
131/307	af_unix: Reject SIOCATMARK on non-stream sockets`net/unix/af_unix.c`	+3 -0	0 replies
132/307	arm64/fpsimd: ptrace: zero targets fpsimd_state, not the tracers`arch/arm64/kernel/ptrace.c`	+2 -2	0 replies
133/307	pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy()`drivers/pmdomain/mediatek/mtk-pm-domains.c`	+7 -3	0 replies
134/307	block: add pgmap check to biovec_phys_mergeable`block/blk.h`	+2 -0	0 replies
135/307	block: fix zone write plug removal`block/blk-zoned.c`	+57 ~~-94~~	0 replies
136/307	block: only read from sqe on initial invocation of blkdev_uring_cmd()`block/ioctl.c`	+15 -9	0 replies
137/307	cifs: abort open_cached_dir if we dont request leases`fs/smb/client/cached_dir.c`	+8 -0	0 replies
138/307	cifs: change_conf needs to be called for session setup`fs/smb/client/smb2ops.c`	+11 -0	0 replies
139/307	extcon: ptn5150: handle pending IRQ events during system resume`drivers/extcon/extcon-ptn5150.c`	+14 -0	0 replies
140/307	fbcon: Avoid OOB font access if console rotation fails`drivers/video/fbdev/core/fbcon_rotate.c`	+4 -1	0 replies
141/307	gpio: of: clear OF_POPULATED on hog nodes in remove path`drivers/gpio/gpiolib-of.c`	+8 -1	0 replies
142/307	hv: Select CONFIG_SYSFB only for CONFIG_HYPERV_VMBUS`drivers/hv/Kconfig`	+1 -1	0 replies
143/307	hv_sock: fix ARM64 support`net/vmw_vsock/hyperv_transport.c`	+2 -2	0 replies
144/307	hv_sock: Report EOF instead of -EIO for FIN`net/vmw_vsock/hyperv_transport.c`	+16 -4	0 replies
145/307	hv_sock: Return -EIO for malformed/short packets`net/vmw_vsock/hyperv_transport.c`	+18 -9	0 replies
146/307	ibmveth: Disable GSO for packets with small MSS`drivers/net/ethernet/ibm/ibmveth.c` `drivers/net/ethernet/ibm/ibmveth.h`	+23 -0	0 replies
147/307	ice: fix double free in ice_sf_eth_activate() error path`drivers/net/ethernet/intel/ice/ice_sf_eth.c`	+2 -0	0 replies
148/307	spi: microchip-core-qspi: fix controller deregistration`drivers/spi/spi-microchip-core-qspi.c`	+8 -4	0 replies
149/307	spi: microchip-core-spi: fix controller deregistration`drivers/spi/spi-microchip-core-spi.c`	+3 -1	0 replies
150/307	spi: microchip-core-qspi: dont attempt to transmit during emulated read-only dual/quad operations`drivers/spi/spi-microchip-core-qspi.c`	+11 -1	0 replies
151/307	spi: microchip-core-qspi: control built-in cs manually`drivers/spi/spi-microchip-core-qspi.c`	+64 ~~-15~~	0 replies
152/307	tracefs: Fix default permissions not being applied on initial mount`fs/tracefs/inode.c`	+1 -0	0 replies
153/307	udf: reject descriptors with oversized CRC length`fs/udf/misc.c`	+6 -2	0 replies
154/307	x86/boot/e820: Re-enable BIOS fallback if e820 table is empty`arch/x86/kernel/e820.c`	+5 -1	0 replies
155/307	thermal: core: Free thermal zone ID later during removal`drivers/thermal/thermal_core.c`	+4 -2	0 replies
156/307	thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata`drivers/thermal/sprd_thermal.c`	+1 -1	0 replies
157/307	thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp`drivers/thermal/sprd_thermal.c`	+1 -1	0 replies
158/307	spi: topcliff-pch: fix controller deregistration`drivers/spi/spi-topcliff-pch.c`	+6 -1	0 replies
159/307	spi: topcliff-pch: fix use-after-free on unbind`drivers/spi/spi-topcliff-pch.c`	+3 -3	0 replies
160/307	tracing/fprobe: Avoid kcalloc() in rcu_read_lock section`kernel/trace/fprobe.c`	+45 ~~-47~~	0 replies
161/307	tracing/fprobe: Remove fprobe from hash in failure path`kernel/trace/fprobe.c`	+47 ~~-43~~	0 replies
162/307	tracing/fprobe: Unregister fprobe even if memory allocation fails`kernel/trace/fprobe.c`	+15 ~~-10~~	0 replies
163/307	tracing/probes: Limit size of event probe to 3K`kernel/trace/trace_probe.c` `kernel/trace/trace_probe.h`	+9 -1	0 replies
164/307	tracing/fprobe: Check the same type fprobe on table as the unregistered one`kernel/trace/fprobe.c`	+65 ~~-17~~	0 replies
165/307	clk: imx: imx8-acm: fix flags for acm clocks`drivers/clk/imx/clk-imx8-acm.c`	+2 -1	0 replies
166/307	clk: microchip: mpfs-ccc: fix out of bounds access during output registration`drivers/clk/microchip/clk-mpfs-ccc.c`	+5 -1	0 replies
167/307	cpuidle: powerpc: avoid double clear when breaking snooze`drivers/cpuidle/cpuidle-powernv.c` `drivers/cpuidle/cpuidle-pseries.c`	+8 -2	0 replies
168/307	ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table`sound/soc/amd/yc/acp6x-mach.c`	+14 -0	0 replies
169/307	ASoC: ES8389: convert to devm_clk_get_optional() to get clock`sound/soc/codecs/es8389.c`	+1 -1	0 replies
170/307	ASoC: fsl_easrc: fix comment typo`sound/soc/fsl/fsl_easrc.c`	+1 -1	0 replies
171/307	ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error`sound/soc/intel/boards/bytcr_wm5102.c`	+1 -0	0 replies
172/307	ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop`sound/soc/qcom/qdsp6/q6apm-dai.c` `sound/soc/qcom/qdsp6/q6apm.c`	+3 -0	0 replies
173/307	ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens`sound/soc/qcom/qdsp6/q6apm-lpass-dais.c`	+1 -1	0 replies
174/307	ASoC: qcom: q6apm: remove child devices when apm is removed`sound/soc/qcom/qdsp6/q6apm.c`	+1 -0	0 replies
175/307	btrfs: do not mark inode incompressible after inline attempt fails`fs/btrfs/inode.c`	+6 -0	0 replies
176/307	btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak`fs/btrfs/ioctl.c`	+3 -2	0 replies
177/307	btrfs: fix double free in create_space_info() error path`fs/btrfs/space-info.c`	+1 -1	0 replies
178/307	btrfs: fix double free in create_space_info_sub_group() error path`fs/btrfs/space-info.c`	+1 -3	0 replies
179/307	btrfs: fix missing last_unlink_trans update when removing a directory`fs/btrfs/inode.c`	+2 -0	0 replies
180/307	dm-thin: fix metadata refcount underflow`drivers/md/persistent-data/dm-btree-remove.c`	+8 -0	0 replies
181/307	dm: dont report warning when doing deferred remove`drivers/md/dm-ioctl.c`	+1 -1	0 replies
182/307	dm: fix a buffer overflow in ioctl processing`drivers/md/dm-ioctl.c`	+4 -0	0 replies
183/307	eventfs: Hold eventfs_mutex and SRCU when remount walks events`fs/tracefs/event_inode.c` `fs/tracefs/inode.c` `fs/tracefs/internal.h`	+21 -1	0 replies
184/307	dm-verity-fec: correctly reject too-small FEC devices`drivers/md/dm-verity-fec.c`	+2 -3	0 replies
185/307	dm-verity-fec: correctly reject too-small hash devices`drivers/md/dm-verity-fec.c`	+2 -1	0 replies
186/307	dm-verity-fec: fix corrected block count stat`drivers/md/dm-verity-fec.c`	+2 -3	0 replies
187/307	dm-verity-fec: fix reading parity bytes split across blocks (take 3)`drivers/md/dm-verity-fec.c`	+44 ~~-56~~	0 replies
188/307	dm-verity-fec: fix the size of dm_verity_fec_io::erasures`drivers/md/dm-verity-fec.h`	+2 -1	0 replies
189/307	isofs: validate Rock Ridge CE continuation extent against volume size`fs/isofs/rock.c`	+9 -0	0 replies
190/307	isofs: validate block number from NFS file handle in isofs_export_iget`fs/isofs/export.c`	+1 -1	0 replies
191/307	iommufd: Fix return value of iommufd_fault_fops_write()`drivers/iommu/iommufd/eventq.c`	+3 -2	0 replies
192/307	iommu/vt-d: Block PASID attachment to nested domain with dirty tracking`drivers/iommu/intel/nested.c`	+5 -1	0 replies
193/307	iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update`drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c`	+7 -0	0 replies
194/307	lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()`lib/crypto/mpi/mpicoder.c`	+1 -1	0 replies
195/307	lib/crc: tests: Make crc_kunit test only the enabled CRC variants`lib/crc/Kconfig` `lib/crc/tests/crc_kunit.c`	+23 ~~-12~~	0 replies
196/307	lib/scatterlist: fix length calculations in extract_kvec_to_sg`lib/scatterlist.c`	+3 -2	0 replies
197/307	lib/scatterlist: fix temp buffer in extract_user_to_sg()`lib/scatterlist.c`	+1 -2	0 replies
198/307	libceph: Fix slab-out-of-bounds access in auth message processing`net/ceph/auth.c` `net/ceph/mon_client.c`	+3 -1	0 replies
199/307	md/raid10: fix divide-by-zero in setup_geo() with zero far_copies`drivers/md/raid10.c`	+2 -0	0 replies
200/307	nvme-apple: drop invalid put of admin queue reference count`drivers/nvme/host/apple.c`	+1 -5	0 replies
201/307	nvmet-tcp: fix race between ICReq handling and queue teardown`drivers/nvme/target/tcp.c`	+26 -0	0 replies
202/307	nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free`drivers/nvme/target/core.c`	+1 -1	0 replies
203/307	openvswitch: vport: fix self-deadlock on release of tunnel ports`net/openvswitch/vport-netdev.c`	+5 -1	0 replies
204/307	pmdomain: core: Fix detach procedure for virtual devices in genpd`drivers/pmdomain/core.c`	+9 -1	0 replies
205/307	psp: strip variable-length PSP header in psp_dev_rcv()`net/psp/psp_main.c`	+31 ~~-11~~	0 replies
206/307	RDMA/hns: Fix unlocked call to hns_roce_qp_remove()`drivers/infiniband/hw/hns/hns_roce_qp.c`	+7 -0	0 replies
207/307	riscv: kvm: fix vector context allocation leak`arch/riscv/kvm/vcpu_vector.c`	+4 -1	0 replies
208/307	s390/debug: Reject zero-length input in debug_input_flush_fn()`arch/s390/kernel/debug.c`	+5 -0	0 replies
209/307	s390/debug: Reject zero-length input before trimming a newline`arch/s390/kernel/debug.c`	+3 -0	0 replies
210/307	scsi: mpt3sas: Limit NVMe request size to 2 MiB`drivers/scsi/mpt3sas/mpt3sas_scsih.c`	+13 -1	0 replies
211/307	smb/client: fix out-of-bounds read in smb2_compound_op()`fs/smb/client/smb2inode.c`	+8 -4	0 replies
212/307	smb/client: fix out-of-bounds read in symlink_data()`fs/smb/client/smb2misc.c`	+2 -1	0 replies
213/307	smb: client: use kzalloc to zero-initialize security descriptor buffer`fs/smb/client/cifsacl.c`	+1 -1	0 replies
214/307	smb: client: validate dacloffset before building DACL pointers`fs/smb/client/cifsacl.c`	+32 -3	0 replies
215/307	KVM: x86: check for nEPT/nNPT in slow flush hypercalls`arch/x86/kvm/hyperv.c`	+1 -1	0 replies
216/307	KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty`arch/x86/kvm/lapic.c`	+5 -3	0 replies
217/307	mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values`mm/damon/lru_sort.c`	+55 ~~-30~~	0 replies
218/307	mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values`mm/damon/reclaim.c`	+55 ~~-30~~	0 replies
219/307	mm/damon/stat: detect and use fresh enabled value`mm/damon/stat.c`	+20 ~~-10~~	0 replies
220/307	mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock`mm/damon/sysfs-schemes.c`	+11 -1	0 replies
221/307	mm/damon/sysfs-schemes: protect path kfree() with damon_sysfs_lock`mm/damon/sysfs-schemes.c`	+11 -1	0 replies
222/307	PCI: Update saved_config_space upon resource assignment`drivers/pci/setup-res.c`	+2 -0	0 replies
223/307	PCI/AER: Clear only error bits in PCIe Device Status`drivers/pci/pci.c`	+3 -4	0 replies
224/307	PCI/AER: Stop ruling out unbound devices as error source`drivers/pci/pcie/aer.c`	+0 -2	0 replies
225/307	PCI/ASPM: Fix pci_clear_and_set_config_dword() usage`drivers/pci/pcie/aspm.c`	+12 -5	0 replies
226/307	power: supply: max17042: avoid overflow when determining health`drivers/power/supply/max17042_battery.c`	+1 -1	0 replies
227/307	powerpc/xive: fix kmemleak caused by incorrect chip_data lookup`arch/powerpc/sysdev/xive/common.c`	+11 -5	0 replies
228/307	perf/x86/intel: Always reprogram ACR events to prevent stale masks`arch/x86/events/core.c`	+8 -5	0 replies
229/307	perf/x86/intel: Disable PMI for self-reloaded ACR events`arch/x86/events/intel/core.c` `arch/x86/events/perf_event.h`	+23 -4	0 replies
230/307	perf/x86/intel: Enable auto counter reload for DMR`arch/x86/events/intel/core.c`	+1 -0	0 replies
231/307	RDMA/ionic: bound node_desc sysfs read with %.64s`drivers/infiniband/hw/ionic/ionic_ibdev.c`	+1 -1	0 replies
232/307	RDMA/ionic: Fix typo in format string`drivers/infiniband/hw/ionic/ionic_ibdev.c`	+1 -1	0 replies
233/307	RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()`drivers/infiniband/hw/mana/qp.c`	+3 -1	0 replies
234/307	RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()`drivers/infiniband/hw/mana/qp.c`	+4 -5	0 replies
235/307	RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()`drivers/infiniband/hw/mana/cq.c`	+3 -2	0 replies
236/307	RDMA/mana: Validate rx_hash_key_len`drivers/infiniband/hw/mana/qp.c`	+3 -0	0 replies
237/307	RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()`drivers/net/ethernet/mellanox/mlx4/srq.c`	+7 -6	0 replies
238/307	RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()`drivers/infiniband/hw/mlx4/srq.c`	+3 -1	0 replies
239/307	RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()`drivers/infiniband/hw/mlx5/main.c`	+1 -0	0 replies
240/307	RDMA/ocrdma: Dont NULL deref uctx on errors in ocrdma_copy_pd_uresp()`drivers/infiniband/hw/ocrdma/ocrdma_verbs.c`	+2 -2	0 replies
241/307	RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads`drivers/infiniband/sw/rxe/rxe_resp.c`	+13 -1	0 replies
242/307	RDMA/rxe: Reject unknown opcodes before ICRC processing`drivers/infiniband/sw/rxe/rxe_recv.c`	+11 -0	0 replies
243/307	RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path`drivers/infiniband/hw/vmw_pvrdma/pvrdma_verbs.c`	+1 -1	0 replies
244/307	remoteproc: imx_rproc: Fix NULL vs IS_ERR() bug in imx_rproc_addr_init()`drivers/remoteproc/imx_rproc.c`	+1 -1	0 replies
245/307	remoteproc: k3: Fix NULL vs IS_ERR() bug in k3_reserved_mem_init()`drivers/remoteproc/ti_k3_common.c`	+1 -1	0 replies
246/307	sched_ext: idle: Recheck prev_cpu after narrowing allowed mask`kernel/sched/ext_idle.c`	+6 -6	0 replies
247/307	sched_ext: Skip tasks with stale task_rq in bypass_lb_cpu()`kernel/sched/ext.c`	+9 -0	6 replies
248/307	sched_ext: Use dsq->first_task instead of list_empty() in dispatch_enqueue() FIFO-tail`kernel/sched/ext.c`	+6 -4	0 replies
249/307	selftests: mptcp: check output: catch cmd errors`tools/testing/selftests/net/mptcp/mptcp_lib.sh` `tools/testing/selftests/net/mptcp/pm_netlink.sh`	+16 ~~-10~~	0 replies
250/307	selftests: mptcp: pm: restrict unknown check to pm_nl_ctl`tools/testing/selftests/net/mptcp/pm_netlink.sh`	+7 -3	0 replies
251/307	mptcp: fastclose msk when linger time is 0`net/mptcp/protocol.c`	+2 -1	0 replies
252/307	mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure`net/mptcp/subflow.c`	+1 -1	0 replies
253/307	mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure`net/mptcp/subflow.c`	+1 -1	0 replies
254/307	mptcp: sockopt: set timestamp flags on subflow socket, not msk`net/mptcp/sockopt.c`	+2 -2	0 replies
255/307	mptcp: sockopt: increase seq in mptcp_setsockopt_all_sf`net/mptcp/sockopt.c`	+4 -0	0 replies
256/307	mptcp: fix rx timestamp corruption on fastopen`net/mptcp/fastopen.c`	+3 -1	0 replies
257/307	mptcp: fix scheduling with atomic in timestamp sockopt`net/mptcp/sockopt.c`	+4 -4	0 replies
258/307	mptcp: pm: prio: skip closed subflows`net/mptcp/pm.c`	+3 -0	0 replies
259/307	mptcp: pm: kernel: reset fullmesh counter after flush`net/mptcp/pm_kernel.c`	+1 -0	0 replies
260/307	mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0`net/mptcp/pm_kernel.c`	+8 -5	0 replies
261/307	mptcp: pm: ADD_ADDR rtx: allow ID 0`net/mptcp/pm.c`	+0 -3	0 replies
262/307	mptcp: pm: ADD_ADDR rtx: fix potential data-race`net/mptcp/pm.c`	+8 -0	0 replies
263/307	mptcp: pm: ADD_ADDR rtx: always decrease sk refcount`net/mptcp/pm.c`	+3 -5	0 replies
264/307	mptcp: pm: ADD_ADDR rtx: free sk if last`net/mptcp/pm.c`	+18 ~~-10~~	0 replies
265/307	mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker`net/mptcp/pm.c`	+1 -6	0 replies
266/307	mptcp: pm: ADD_ADDR rtx: return early if no retrans`net/mptcp/pm.c`	+3 -0	0 replies
267/307	f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode()`fs/f2fs/inode.c`	+1 -1	0 replies
268/307	f2fs: fix false alarm of lockdep on cp_global_sem lock`fs/f2fs/f2fs.h` `fs/f2fs/super.c`	+14 -0	0 replies
269/307	f2fs: fix fiemap boundary handling when read extent cache is incomplete`fs/f2fs/data.c`	+22 -3	0 replies
270/307	f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage`fs/f2fs/node.c`	+5 -9	0 replies
271/307	f2fs: fix incorrect file address mapping when inline inode is unwritten`fs/f2fs/inline.c`	+9 -4	0 replies
272/307	f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks()`fs/f2fs/data.c`	+2 -1	0 replies
273/307	f2fs: fix node_cnt race between extent node destroy and writeback`fs/f2fs/extent_cache.c`	+10 -7	0 replies
274/307	f2fs: fix uninitialized kobject put in f2fs_init_sysfs()`fs/f2fs/sysfs.c`	+6 -4	0 replies
275/307	f2fs: refactor f2fs_move_node_folio function`fs/f2fs/node.c`	+32 ~~-22~~	0 replies
276/307	f2fs: fix inline data not being written to disk in writeback path`fs/f2fs/f2fs.h` `fs/f2fs/inline.c` `fs/f2fs/node.c`	+12 -1	0 replies
277/307	f2fs: fix fsck inconsistency caused by FGGC of node block`fs/f2fs/node.c`	+13 ~~-14~~	0 replies
278/307	KVM: arm64: Wake-up from WFI when iqrchip is in userspace`arch/arm64/kvm/arm.c`	+4 -0	0 replies
279/307	KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value`arch/arm64/kvm/vgic/vgic-mmio-v2.c` `arch/arm64/kvm/vgic/vgic-mmio-v3.c`	+2 -2	0 replies
280/307	KVM: arm64: Fix initialisation order in __pkvm_init_finalise()`arch/arm64/kvm/hyp/nvhe/setup.c`	+3 -3	0 replies
281/307	KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer`arch/arm64/kvm/config.c`	+12 -3	0 replies
282/307	KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer`arch/arm64/kvm/config.c`	+1 -1	0 replies
283/307	KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()`arch/arm64/kvm/hyp/nvhe/pkvm.c`	+25 ~~-13~~	0 replies
284/307	LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()`arch/loongarch/pci/pci.c`	+3 -0	0 replies
285/307	LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS`arch/loongarch/kvm/vm.c`	+1 -1	0 replies
286/307	LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry`arch/loongarch/kvm/switch.S`	+1 -1	0 replies
287/307	LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software`arch/loongarch/kvm/interrupt.c`	+14 -0	0 replies
288/307	LoongArch: KVM: Move unconditional delay into timer clear scenery`arch/loongarch/kvm/timer.c`	+8 -2	0 replies
289/307	LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte()`arch/loongarch/kvm/mmu.c`	+1 -1	0 replies
290/307	LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup`arch/loongarch/pci/acpi.c`	+5 -0	0 replies
291/307	bpf: Fix use-after-free in arena_vm_close on fork`kernel/bpf/arena.c`	+16 -3	0 replies
292/307	octeon_ep_vf: add NULL check for napi_build_skb()`drivers/net/ethernet/marvell/octeon_ep_vf/octep_vf_rx.c`	+34 -2	0 replies
293/307	mmc: core: Adjust MDT beyond 2025`drivers/mmc/core/mmc.c`	+7 -0	0 replies
294/307	mmc: core: Add quirk for incorrect manufacturing date`drivers/mmc/core/card.h` `drivers/mmc/core/mmc.c` `drivers/mmc/core/quirks.h` +1 more	+15 -0	0 replies
295/307	mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs`drivers/mmc/core/card.h` `drivers/mmc/core/queue.c` `drivers/mmc/core/quirks.h` +1 more	+22 -2	0 replies
296/307	crypto: qat - fix indentation of macros in qat_hal.c`drivers/crypto/intel/qat/qat_common/qat_hal.c`	+11 ~~-11~~	0 replies
297/307	crypto: qat - fix firmware loading failure for GEN6 devices`drivers/crypto/intel/qat/qat_common/adf_accel_engine.c` `drivers/crypto/intel/qat/qat_common/icp_qat_fw_loader_handle.h` `drivers/crypto/intel/qat/qat_common/qat_hal.c`	+12 -1	0 replies
298/307	hfsplus: fix uninit-value by validating catalog record size`fs/hfsplus/bfind.c` `fs/hfsplus/catalog.c` `fs/hfsplus/dir.c` +2 more	+64 -4	0 replies
299/307	hfsplus: fix held lock freed on hfsplus_fill_super()`fs/hfsplus/super.c`	+3 -1	0 replies
300/307	8021q: use RCU for egress QoS mappings`include/linux/if_vlan.h` `net/8021q/vlan_dev.c` `net/8021q/vlan_netlink.c` +1 more	+46 ~~-32~~	0 replies
301/307	8021q: delete cleared egress QoS mappings`net/8021q/vlan_dev.c` `net/8021q/vlan_netlink.c`	+14 ~~-10~~	0 replies
302/307	printk: add print_hex_dump_devel()`include/linux/printk.h`	+13 -0	0 replies
303/307	crypto: caam - guard HMAC key hex dumps in hash_digest_key`drivers/crypto/caam/caamalg_qi2.c` `drivers/crypto/caam/caamhash.c`	+4 -4	0 replies
304/307	net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()`drivers/net/ethernet/stmicro/stmmac/chain_mode.c` `drivers/net/ethernet/stmicro/stmmac/common.h` `drivers/net/ethernet/stmicro/stmmac/ring_mode.c` +1 more	+16 ~~-16~~	0 replies
305/307	net: stmmac: Prevent NULL deref when RX memory exhausted`drivers/net/ethernet/stmicro/stmmac/stmmac_main.c`	+12 -7	0 replies
306/307	rust: pin-init: fix incorrect accessor reference lifetime`rust/pin-init/internal/src/init.rs` `rust/pin-init/src/__internal.rs`	+66 ~~-68~~	0 replies
307/307	x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2s op cache`arch/x86/include/asm/msr-index.h` `arch/x86/kernel/cpu/amd.c` `tools/arch/x86/include/asm/msr-index.h`	+7 -2	0 replies

Reviews trailers per patch

144 of 307 patches have a Reviewed-by or Acked-by of their own; the series has one for all of them.

Patch	Kevin Tian	Sean Wang	Namjae Jeon	Stefan Metzmacher	Eric Dumazet	Peter Zijlstra	Greg Kroah-Hartman	Sudeep Holla	Hans de Goede	Arend van Spriel	Thinh Nguyen	Badhri Jagan Sridharan	Heikki Krogerus	Amit Sunil Dhamne	Richard Fitzgerald	Jaeyoung Chung	Yuriy Padlyak	Takashi Sakamoto	Ritesh Harjani (IBM)	Venkat Rao Bagalkote	Mahesh Salgaonkar	Aboorva Devarajan	Eric Biggers	Andrea Righi	Michal Kosiorek	Ruide Cao	Simon Horman	Gabriel Krisman Bertazi	Miriam Rachel Korenblit	Michael Büsch	Gary Guo	Alice Ryhl	Dan Carpenter	Takahiro Kuwano	Michael Walle	Pratyush Yadav	Muchun Song	Mat Martineau	Dmitry Vyukov	Andrzej Kacprowski	Onur Özkan	Bibo Mao	Amir Goldstein	Benson Leung	Abhishek Pandit-Subedi	Sebastian Reichel	Brian Masney	Heiko Stuebner	Wilken Gottwalt	Kuniyuki Iwashima	Mark Rutland	Christoph Hellwig	Johannes Thumshirn	Bharath SM	Krzysztof Kozlowski	MyungJoo Ham	Linus Walleij	Andy Shevchenko	Saurabh Sengar	Dexuan Cui	Stefano Garzarella	Brian King	Shaik Abdulla	Naveed Ahmed	Aleksandr Loktionov	Conor Dooley	Baolin Wang	Allison Henderson	Mukesh Kumar Chaurasiya (IBM)	Cezary Rojewski	Filipe Manana	David Sterba	Qu Wenruo	Bryn M. Reeves	Lu Baolu	Pranjal Shrivastava	Shuai Xue	Yi Liu	Ignat Korchagin	Jarkko Sakkinen	Ilya Dryomov	Masami Hiramatsu (Google)	Peng Fan	ChenXiaoSong	Sean Christopherson	Chenyi Qiang	Eelco Chaudron	Aaron Conole	Bernd Schumacher	Alexandre N.	Kuppuswamy Sathyanarayanan	Lukas Wunner	Stefan Roese	Adrià Vilanova Martínez	Nam Cao	Geert Uytterhoeven	Long Li	Willem de Bruijn	Daniel Zahka	Zhu Yanjun	Junxian Huang	Andy Chiu	Heiko Carstens	Benjamin Block	Vasily Gorbik	Mira Limbeck	Shivam Kumar	Matthieu Baerts (NGI0)	Chao Yu	Shin'ichiro Kawasaki	Emil Tsalapatis	John Ogness	Shawn Lin	Giovanni Cabiddu	[email protected]	Viacheslav Dubeyko	Dongyan Qian	Ronald Warsow	Takeshi Ogasawara	Brett A C Sheffield	Mark Brown	Shuah Khan
Series												R-b	A-b																																																																																																									T-b	T-b	T-b	T-b	T-b
1/307
2/307
3/307
4/307
5/307							A-b
6/307								R-b
7/307
8/307									R-b
9/307
10/307
11/307
12/307	R-b
13/307
14/307		A-b
15/307
16/307			A-b
17/307
18/307
19/307			A-b	R-b
20/307					R-b
21/307						A-b
22/307		R-b
23/307
24/307
25/307		R-b
26/307
27/307
28/307
29/307
30/307
31/307																													R-b
32/307																														A-b
33/307										A-b
34/307
35/307
36/307
37/307
38/307
39/307											A-b
40/307												R-b	A-b
41/307
42/307
43/307													R-b
44/307													A-b	R-b
45/307															R-b
46/307																Reported-and-tested-by
47/307																	T-b
48/307																		R-b
49/307
50/307
51/307																			R-b	T-b	A-b	R-b T-b
52/307																							R-b
53/307																								R-b
54/307
55/307																									T-b
56/307																										T-b	R-b
57/307
58/307
59/307
60/307
61/307
62/307
63/307
64/307
65/307
66/307																												R-b
67/307
68/307																																										R-b
69/307
70/307
71/307
72/307
73/307
74/307
75/307
76/307
77/307																																R-b									R-b
78/307																															R-b
79/307																															R-b
80/307																																R-b
81/307
82/307
83/307
84/307
85/307
86/307
87/307
88/307
89/307
90/307																																	R-b
91/307
92/307
93/307
94/307																																		R-b	R-b	R-b
95/307
96/307																																					R-b
97/307
98/307
99/307
100/307																																						R-b
101/307
102/307
103/307																																							R-b T-b
104/307																																							R-b T-b
105/307																																							R-b T-b
106/307																																							R-b T-b
107/307																																							R-b T-b
108/307																																							R-b T-b
109/307																																							R-b T-b
110/307																																								R-b
111/307
112/307
113/307
114/307
115/307
116/307
117/307
118/307					R-b																																													R-b
119/307
120/307
121/307																																																																				R-b
122/307
123/307																																											A-b
124/307																																												R-b	R-b
125/307
126/307
127/307
128/307
129/307																																														R-b	R-b	R-b
130/307																																																	R-b
131/307																																																		R-b
132/307																																																			A-b
133/307
134/307																																																				R-b
135/307																																																				R-b	R-b
136/307
137/307																																																						R-b
138/307																																																						R-b
139/307																																																							R-b	A-b
140/307
141/307																																																									A-b	R-b
142/307																																																											R-b
143/307																																																												T-b R-b	A-b
144/307																																																													A-b
145/307																																																													A-b
146/307																																																														R-b	T-b	T-b
147/307																											R-b																																						R-b
148/307																																																																		A-b
149/307																																																																		A-b
150/307
151/307
152/307
153/307
154/307																																																										R-b
155/307
156/307																																																																			R-b
157/307																																																																			R-b
158/307
159/307
160/307
161/307
162/307
163/307																																																																																		A-b
164/307
165/307																																																																																			R-b
166/307																																															R-b
167/307																																																																					R-b
168/307
169/307
170/307
171/307									R-b																																																													R-b
172/307
173/307
174/307
175/307																																																																							R-b
176/307																																																																								R-b
177/307																																																																									R-b
178/307																																																																									R-b
179/307
180/307
181/307
182/307																																																																										R-b
183/307
184/307
185/307
186/307
187/307
188/307
189/307
190/307
191/307	R-b																																																																										R-b	R-b	R-b
192/307	R-b																																																																													R-b
193/307
194/307																																																																															R-b	R-b
195/307
196/307
197/307
198/307																																																																																	R-b
199/307
200/307																																																				R-b
201/307																																																																																																											T-b
202/307																																																				R-b
203/307																																																																																							A-b	A-b
204/307																																																																																																T-b
205/307																																																																																																		R-b	R-b
206/307																																																																																																					R-b
207/307																																																																																																						R-b
208/307																																																																																																							A-b
209/307																																																																																																								R-b	R-b T-b
210/307																																																																																																										T-b
211/307																																																																																				R-b
212/307																																																																																				R-b
213/307
214/307
215/307																																																																																					R-b
216/307																																																																																					R-b	Analyzed-by
217/307
218/307
219/307
220/307
221/307
222/307																																																																																									T-b	T-b
223/307																																																																																											R-b	R-b
224/307																																																																																													R-b
225/307																																																																																														T-b
226/307
227/307																				T-b																																																																											R-b
228/307
229/307
230/307
231/307
232/307
233/307																																																																																																	R-b
234/307																																																																																																	R-b
235/307																																																																																																	R-b
236/307																																																																																																	R-b
237/307
238/307
239/307
240/307
241/307																																																																																																				R-b
242/307																																																																																																				R-b
243/307
244/307																																																																																			R-b
245/307																																																																																			R-b
246/307																								R-b
247/307																								R-b
248/307																								R-b
249/307																																						R-b
250/307																																						R-b
251/307																																						R-b
252/307																																																																																																												R-b
253/307																																																																																																												R-b
254/307																																																																																																												R-b
255/307																																						R-b
256/307																																																																																																												R-b
257/307																																																																																																												R-b
258/307																																						R-b
259/307																																						R-b
260/307																																						R-b
261/307																																						R-b
262/307																																						R-b
263/307																																						R-b
264/307																																						R-b
265/307																																						R-b
266/307																																						R-b
267/307																																																																																																													R-b
268/307																																																																																																														Reported-and-tested-by
269/307																																																																																																													R-b
270/307																																																																																																													R-b
271/307																																																																																																													R-b
272/307																																																																																																													R-b
273/307																																																																																																													R-b
274/307																																																																																																													R-b
275/307																																																																																																													R-b
276/307																																																																																																													R-b
277/307																																																																																																													R-b
278/307
279/307
280/307
281/307
282/307
283/307
284/307
285/307																																										R-b
286/307
287/307
288/307
289/307																																										R-b
290/307																																																																																																																					T-b
291/307																																																																																																															R-b
292/307
293/307																																																																																																																	R-b
294/307
295/307
296/307																																																																																																																		R-b
297/307																																																										R-b																																																								R-b
298/307																																																																																																																			T-b	R-b T-b
299/307																																																																																																																				R-b T-b
300/307
301/307
302/307																																																																																																																R-b
303/307
304/307
305/307
306/307
307/307

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 122 reviewers.

Read the v1 thread

Cover letter [PATCH 7.0 000/307] 7.0.7-rc1 review

This is the start of the stable review cycle for the 7.0.7 release. There are 307 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 14 May 2026 17:38:03 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.0.7-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.0.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 7.0.7-rc1

Prathyushi Nangia <[email protected]>
x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache

Gary Guo <[email protected]>
rust: pin-init: fix incorrect accessor reference lifetime

Sam Edwards <[email protected]>
net: stmmac: Prevent NULL deref when RX memory exhausted

Russell King (Oracle) <[email protected]>

    net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()

Thorsten Blum <[email protected]>
crypto: caam - guard HMAC key hex dumps in hash_digest_key

Thorsten Blum <[email protected]>
printk: add print_hex_dump_devel()

Longxuan Yu <[email protected]>
8021q: delete cleared egress QoS mappings

Longxuan Yu <[email protected]>
8021q: use RCU for egress QoS mappings

Zilin Guan <[email protected]>
hfsplus: fix held lock freed on hfsplus_fill_super()

Deepanshu Kartikey <[email protected]>
hfsplus: fix uninit-value by validating catalog record size

Suman Kumar Chakraborty <[email protected]>
crypto: qat - fix firmware loading failure for GEN6 devices

Suman Kumar Chakraborty <[email protected]>
crypto: qat - fix indentation of macros in qat_hal.c

Luke Wang <[email protected]>
mmc: core: Optimize time for secure erase/trim for some Kingston eMMCs

Avri Altman <[email protected]>
mmc: core: Add quirk for incorrect manufacturing date

Avri Altman <[email protected]>
mmc: core: Adjust MDT beyond 2025

David Carlier <[email protected]>
octeon_ep_vf: add NULL check for napi_build_skb()

Alexei Starovoitov <[email protected]>
bpf: Fix use-after-free in arena_vm_close on fork

Huacai Chen <[email protected]>
LoongArch: Use per-root-bridge PCIH flag to skip mem resource fixup

Tao Cui <[email protected]>
LoongArch: KVM: Use kvm_set_pte() in kvm_flush_pte()

Bibo Mao <[email protected]>
LoongArch: KVM: Move unconditional delay into timer clear scenery

Bibo Mao <[email protected]>
LoongArch: KVM: Fix HW timer interrupt lost when inject interrupt by software

Xianglai Li <[email protected]>
LoongArch: KVM: Fix "unreliable stack" for kvm_exc_entry

Qiang Ma <[email protected]>
LoongArch: KVM: Cap KVM_CAP_NR_VCPUS by KVM_CAP_MAX_VCPUS

Wentao Guan <[email protected]>
LoongArch: Fix potential ADE in loongson_gpu_fixup_dma_hang()

Fuad Tabba <[email protected]>
KVM: arm64: Fix pin leak and publication ordering in __pkvm_init_vcpu()

Fuad Tabba <[email protected]>
KVM: arm64: Fix FEAT_Debugv8p9 to check DebugVer, not PMUVer

Fuad Tabba <[email protected]>
KVM: arm64: Fix FEAT_SPE_FnE to use PMSIDR_EL1.FnE, not PMSVer

Quentin Perret <[email protected]>
KVM: arm64: Fix initialisation order in __pkvm_init_finalise()

David Woodhouse <[email protected]>
KVM: arm64: vgic: Fix IIDR revision field extracted from wrong value

Marc Zyngier <[email protected]>
KVM: arm64: Wake-up from WFI when iqrchip is in userspace

Yongpeng Yang <[email protected]>
f2fs: fix fsck inconsistency caused by FGGC of node block

Yongpeng Yang <[email protected]>
f2fs: fix inline data not being written to disk in writeback path

Yongpeng Yang <[email protected]>
f2fs: refactor f2fs_move_node_folio function

Guangshuo Li <[email protected]>
f2fs: fix uninitialized kobject put in f2fs_init_sysfs()

Yongpeng Yang <[email protected]>
f2fs: fix node_cnt race between extent node destroy and writeback

Yongpeng Yang <[email protected]>
f2fs: fix incorrect multidevice info in trace_f2fs_map_blocks()

Yongpeng Yang <[email protected]>
f2fs: fix incorrect file address mapping when inline inode is unwritten

Yongpeng Yang <[email protected]>
f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage

Yongpeng Yang <[email protected]>
f2fs: fix fiemap boundary handling when read extent cache is incomplete

Chao Yu <[email protected]>
f2fs: fix false alarm of lockdep on cp_global_sem lock

Cen Zhang <[email protected]>
f2fs: add READ_ONCE() for i_blocks in f2fs_update_inode()

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: ADD_ADDR rtx: return early if no retrans

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: ADD_ADDR rtx: free sk if last

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: ADD_ADDR rtx: always decrease sk refcount

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: ADD_ADDR rtx: fix potential data-race

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: ADD_ADDR rtx: allow ID 0

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: kernel: reset fullmesh counter after flush

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: prio: skip closed subflows

Gang Yan <[email protected]>
mptcp: fix scheduling with atomic in timestamp sockopt

Paolo Abeni <[email protected]>
mptcp: fix rx timestamp corruption on fastopen

Matthieu Baerts (NGI0) <[email protected]>
mptcp: sockopt: increase seq in mptcp_setsockopt_all_sf

Gang Yan <[email protected]>
mptcp: sockopt: set timestamp flags on subflow socket, not msk

Shardul Bankar <[email protected]>
mptcp: use MPTCP_RST_EMPTCP for ACK HMAC validation failure

Shardul Bankar <[email protected]>
mptcp: use MPJoinSynAckHMacFailure for SynAck HMAC failure

Matthieu Baerts (NGI0) <[email protected]>
mptcp: fastclose msk when linger time is 0

Matthieu Baerts (NGI0) <[email protected]>
selftests: mptcp: pm: restrict 'unknown' check to pm_nl_ctl

Matthieu Baerts (NGI0) <[email protected]>
selftests: mptcp: check output: catch cmd errors

Tejun Heo <[email protected]>

    sched_ext: Use dsq->first_task instead of list_empty() in dispatch_enqueue() FIFO-tail

Tejun Heo <[email protected]>
sched_ext: Skip tasks with stale task_rq in bypass_lb_cpu()

David Carlier <[email protected]>
sched_ext: idle: Recheck prev_cpu after narrowing allowed mask

Chen Ni <[email protected]>
remoteproc: k3: Fix NULL vs IS_ERR() bug in k3_reserved_mem_init()

Chen Ni <[email protected]>
remoteproc: imx_rproc: Fix NULL vs IS_ERR() bug in imx_rproc_addr_init()

Jason Gunthorpe <[email protected]>
RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path

Michael Bommarito <[email protected]>
RDMA/rxe: Reject unknown opcodes before ICRC processing

Michael Bommarito <[email protected]>
RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads

Jason Gunthorpe <[email protected]>
RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp()

Junrui Luo <[email protected]>
RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init()

Jason Gunthorpe <[email protected]>
RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq()

Jason Gunthorpe <[email protected]>
RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

Jason Gunthorpe <[email protected]>
RDMA/mana: Validate rx_hash_key_len

Jason Gunthorpe <[email protected]>
RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss()

Jason Gunthorpe <[email protected]>
RDMA/mana: Fix mana_destroy_wq_obj() cleanup in mana_ib_create_qp_rss()

Jason Gunthorpe <[email protected]>
RDMA/mana: Fix error unwind in mana_ib_create_qp_rss()

Jason Gunthorpe <[email protected]>
RDMA/ionic: Fix typo in format string

Kai Zen <[email protected]>
RDMA/ionic: bound node_desc sysfs read with %.64s

Dapeng Mi <[email protected]>
perf/x86/intel: Enable auto counter reload for DMR

Dapeng Mi <[email protected]>
perf/x86/intel: Disable PMI for self-reloaded ACR events

Dapeng Mi <[email protected]>
perf/x86/intel: Always reprogram ACR events to prevent stale masks

Nilay Shroff <[email protected]>
powerpc/xive: fix kmemleak caused by incorrect chip_data lookup

André Draszik <[email protected]>
power: supply: max17042: avoid overflow when determining health

Lukas Wunner <[email protected]>
PCI/ASPM: Fix pci_clear_and_set_config_dword() usage

Lukas Wunner <[email protected]>
PCI/AER: Stop ruling out unbound devices as error source

Shuai Xue <[email protected]>
PCI/AER: Clear only error bits in PCIe Device Status

Lukas Wunner <[email protected]>
PCI: Update saved_config_space upon resource assignment

SeongJae Park <[email protected]>
mm/damon/sysfs-schemes: protect path kfree() with damon_sysfs_lock

SeongJae Park <[email protected]>
mm/damon/sysfs-schemes: protect memcg_path kfree() with damon_sysfs_lock

SeongJae Park <[email protected]>
mm/damon/stat: detect and use fresh enabled value

SeongJae Park <[email protected]>
mm/damon/reclaim: detect and use fresh enabled and kdamond_pid values

SeongJae Park <[email protected]>
mm/damon/lru_sort: detect and use fresh enabled and kdamond_pid values

Paolo Bonzini <[email protected]>
KVM: x86: Do IRR scan in __kvm_apic_update_irr even if PIR is empty

Paolo Bonzini <[email protected]>
KVM: x86: check for nEPT/nNPT in slow flush hypercalls

Michael Bommarito <[email protected]>
smb: client: validate dacloffset before building DACL pointers

Bjoern Doebel <[email protected]>
smb: client: use kzalloc to zero-initialize security descriptor buffer

Zisen Ye <[email protected]>
smb/client: fix out-of-bounds read in symlink_data()

Zisen Ye <[email protected]>
smb/client: fix out-of-bounds read in smb2_compound_op()

Ranjan Kumar <[email protected]>
scsi: mpt3sas: Limit NVMe request size to 2 MiB

Pengpeng Hou <[email protected]>
s390/debug: Reject zero-length input before trimming a newline

Vasily Gorbik <[email protected]>
s390/debug: Reject zero-length input in debug_input_flush_fn()

Osama Abdelkader <[email protected]>
riscv: kvm: fix vector context allocation leak

Jason Gunthorpe <[email protected]>
RDMA/hns: Fix unlocked call to hns_roce_qp_remove()

David Carlier <[email protected]>
psp: strip variable-length PSP header in psp_dev_rcv()

Ulf Hansson <[email protected]>
pmdomain: core: Fix detach procedure for virtual devices in genpd

Ilya Maximets <[email protected]>
openvswitch: vport: fix self-deadlock on release of tunnel ports

Chaitanya Kulkarni <[email protected]>
nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free

Chaitanya Kulkarni <[email protected]>
nvmet-tcp: fix race between ICReq handling and queue teardown

Fedor Pchelkin <[email protected]>
nvme-apple: drop invalid put of admin queue reference count

Junrui Luo <[email protected]>
md/raid10: fix divide-by-zero in setup_geo() with zero far_copies

Raphael Zimmer <[email protected]>
libceph: Fix slab-out-of-bounds access in auth message processing

Christian A. Ehrhardt <[email protected]>
lib/scatterlist: fix temp buffer in extract_user_to_sg()

Christian A. Ehrhardt <[email protected]>
lib/scatterlist: fix length calculations in extract_kvec_to_sg

Eric Biggers <[email protected]>
lib/crc: tests: Make crc_kunit test only the enabled CRC variants

Lukas Wunner <[email protected]>
lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()

Nicolin Chen <[email protected]>
iommu/arm-smmu-v3: Add a missing dma_wmb() for hitless STE update

Zhenzhong Duan <[email protected]>
iommu/vt-d: Block PASID attachment to nested domain with dirty tracking

Zhenzhong Duan <[email protected]>
iommufd: Fix return value of iommufd_fault_fops_write()

Michael Bommarito <[email protected]>
isofs: validate block number from NFS file handle in isofs_export_iget

Michael Bommarito <[email protected]>
isofs: validate Rock Ridge CE continuation extent against volume size

Eric Biggers <[email protected]>
dm-verity-fec: fix the size of dm_verity_fec_io::erasures

Eric Biggers <[email protected]>
dm-verity-fec: fix reading parity bytes split across blocks (take 3)

Eric Biggers <[email protected]>
dm-verity-fec: fix corrected block count stat

Eric Biggers <[email protected]>
dm-verity-fec: correctly reject too-small hash devices

Eric Biggers <[email protected]>
dm-verity-fec: correctly reject too-small FEC devices

David Carlier <[email protected]>
eventfs: Hold eventfs_mutex and SRCU when remount walks events

Mikulas Patocka <[email protected]>
dm: fix a buffer overflow in ioctl processing

Mikulas Patocka <[email protected]>
dm: don't report warning when doing deferred remove

Mikulas Patocka <[email protected]>
dm-thin: fix metadata refcount underflow

Filipe Manana <[email protected]>
btrfs: fix missing last_unlink_trans update when removing a directory

Guangshuo Li <[email protected]>
btrfs: fix double free in create_space_info_sub_group() error path

Guangshuo Li <[email protected]>
btrfs: fix double free in create_space_info() error path

Yochai Eisenrich <[email protected]>
btrfs: fix btrfs_ioctl_space_info() slot_count TOCTOU which can lead to info-leak

Qu Wenruo <[email protected]>
btrfs: do not mark inode incompressible after inline attempt fails

Srinivas Kandagatla <[email protected]>
ASoC: qcom: q6apm: remove child devices when apm is removed

Srinivas Kandagatla <[email protected]>
ASoC: qcom: q6apm-lpass-dai: Fix multiple graph opens

Srinivas Kandagatla <[email protected]>
ASoC: qcom: q6apm-dai: reset queue ptr on trigger stop

Cássio Gabriel <[email protected]>
ASoC: Intel: bytcr_wm5102: Fix MCLK leak on platform_clock_control error

Joseph Salisbury <[email protected]>
ASoC: fsl_easrc: fix comment typo

Li Jian <[email protected]>
ASoC: ES8389: convert to devm_clk_get_optional() to get clock

Tommaso Soncin <[email protected]>

    ASoC: amd: yc: Add HP OMEN Gaming Laptop 16-ap0xxx product line in quirk table

Shrikanth Hegde <[email protected]>
cpuidle: powerpc: avoid double clear when breaking snooze

Conor Dooley <[email protected]>
clk: microchip: mpfs-ccc: fix out of bounds access during output registration

Stefan Eichenberger <[email protected]>
clk: imx: imx8-acm: fix flags for acm clocks

Masami Hiramatsu (Google) <[email protected]>
tracing/fprobe: Check the same type fprobe on table as the unregistered one

Steven Rostedt <[email protected]>
tracing/probes: Limit size of event probe to 3K

Masami Hiramatsu (Google) <[email protected]>
tracing/fprobe: Unregister fprobe even if memory allocation fails

Masami Hiramatsu (Google) <[email protected]>
tracing/fprobe: Remove fprobe from hash in failure path

Masami Hiramatsu (Google) <[email protected]>
tracing/fprobe: Avoid kcalloc() in rcu_read_lock section

Johan Hovold <[email protected]>
spi: topcliff-pch: fix use-after-free on unbind

Johan Hovold <[email protected]>
spi: topcliff-pch: fix controller deregistration

Thorsten Blum <[email protected]>
thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp

Thorsten Blum <[email protected]>
thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata

Rafael J. Wysocki <[email protected]>
thermal: core: Free thermal zone ID later during removal

David Gow <[email protected]>
x86/boot/e820: Re-enable BIOS fallback if e820 table is empty

Michael Bommarito <[email protected]>
udf: reject descriptors with oversized CRC length

David Carlier <[email protected]>
tracefs: Fix default permissions not being applied on initial mount

Conor Dooley <[email protected]>
spi: microchip-core-qspi: control built-in cs manually

Conor Dooley <[email protected]>
spi: microchip-core-qspi: don't attempt to transmit during emulated read-only dual/quad operations

Johan Hovold <[email protected]>
spi: microchip-core-spi: fix controller deregistration

Johan Hovold <[email protected]>
spi: microchip-core-qspi: fix controller deregistration

Guangshuo Li <[email protected]>
ice: fix double free in ice_sf_eth_activate() error path

Mingming Cao <[email protected]>
ibmveth: Disable GSO for packets with small MSS

Dexuan Cui <[email protected]>
hv_sock: Return -EIO for malformed/short packets

Dexuan Cui <[email protected]>
hv_sock: Report EOF instead of -EIO for FIN

Hamza Mahfooz <[email protected]>
hv_sock: fix ARM64 support

Thomas Zimmermann <[email protected]>
hv: Select CONFIG_SYSFB only for CONFIG_HYPERV_VMBUS

Bartosz Golaszewski <[email protected]>
gpio: of: clear OF_POPULATED on hog nodes in remove path

Thomas Zimmermann <[email protected]>
fbcon: Avoid OOB font access if console rotation fails

Xu Yang <[email protected]>
extcon: ptn5150: handle pending IRQ events during system resume

Shyam Prasad N <[email protected]>
cifs: change_conf needs to be called for session setup

Shyam Prasad N <[email protected]>
cifs: abort open_cached_dir if we don't request leases

Jens Axboe <[email protected]>
block: only read from sqe on initial invocation of blkdev_uring_cmd()

Damien Le Moal <[email protected]>
block: fix zone write plug removal

Naman Jain <[email protected]>
block: add pgmap check to biovec_phys_mergeable

Wentao Liang <[email protected]>
pmdomain: mediatek: fix use-after-free in scpsys_get_bus_protection_legacy()

Breno Leitao <[email protected]>
arm64/fpsimd: ptrace: zero target's fpsimd_state, not the tracer's

Jiexun Wang <[email protected]>
af_unix: Reject SIOCATMARK on non-stream sockets

Myeonghun Pak <[email protected]>
hwmon: (corsair-psu) Close HID device on probe errors

Johan Hovold <[email protected]>
clk: rk808: fix OF node reference imbalance

Sanman Pradhan <[email protected]>
hwmon: (ltc2992) Fix u32 overflow in power read path

Sanman Pradhan <[email protected]>
hwmon: (ltc2992) Clamp threshold writes to hardware range

Ivan Hu <[email protected]>
x86/efi: Fix graceful fault handling after FPU softirq changes

Hongling Zeng <[email protected]>
parisc: Fix IRQ leak in LASI driver

Tzung-Bi Shih <[email protected]>
platform/chrome: cros_ec_typec: Init mutex in Thunderbolt registration

Colin Walters <[email protected]>
ovl: fix verity lazy-load guard broken by fsverity_active() semantic change

Pavitra Jha <[email protected]>
net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler

Nan Li <[email protected]>
net/rds: handle zerocopy send cleanup before the message is queued

Breno Leitao <[email protected]>
netpoll: pass buffer size to egress_dev() to avoid MAC truncation

Jiawen Wu <[email protected]>
net: libwx: use request_irq for VF misc interrupt

Maoyi Xie <[email protected]>

    ip6_gre: Use cached t->net in ip6erspan_changelink().

Jiawen Wu <[email protected]>
net: libwx: fix VF illegal register access

Ritesh Harjani (IBM) <[email protected]>
pseries/papr-hvpipe: Fix the usage of copy_to_user()

Ritesh Harjani (IBM) <[email protected]>
pseries/papr-hvpipe: Fix & simplify error handling in papr_hvpipe_init()

Ritesh Harjani (IBM) <[email protected]>
pseries/papr-hvpipe: Fix null ptr deref in papr_hvpipe_dev_create_handle()

Ritesh Harjani (IBM) <[email protected]>
pseries/papr-hvpipe: Prevent kernel stack memory leak to userspace

Ritesh Harjani (IBM) <[email protected]>
pseries/papr-hvpipe: Fix race with interrupt handler

SeungJu Cheon <[email protected]>
sound: ua101: fix division by zero at probe

Karol Wachowski <[email protected]>
accel/ivpu: Disallow re-exporting imported GEM objects

Thomas Gleixner <[email protected]>
selftests/rseq: Expand for optimized RSEQ ABI v2

Thomas Gleixner <[email protected]>
selftests/rseq: Validate legacy behavior

Thomas Gleixner <[email protected]>
selftests/rseq: Skip tests if time slice extensions are not available

Thomas Gleixner <[email protected]>
selftests/rseq: Make registration flexible for legacy and optimized mode

Thomas Gleixner <[email protected]>
rseq: Don't advertise time slice extensions if disabled

Thomas Gleixner <[email protected]>
rseq: Protect rseq_reset() against interrupts

Thomas Gleixner <[email protected]>
rseq: Set rseq::cpu_id_start to 0 on unregistration

Mark Brown <[email protected]>
selftests/rseq: Don't run tests with runner scripts outside of the scripts

Dapeng Mi <[email protected]>
perf/x86/intel: Improve validation and configuration of ACR masks

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: ADD_ADDR rtx: skip inactive subflows

Kai Zen <[email protected]>
net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo

Xianglai Li <[email protected]>
LoongArch: KVM: Compile switch.S directly into the kernel

Huacai Chen <[email protected]>
LoongArch: Fix SYM_SIGFUNC_START definition for 32BIT

Sang-Heon Jeon <[email protected]>
mm/hugetlb_cma: round up per_node before logging it

Kevin Brodsky <[email protected]>
arm64: signal: Preserve POR_EL0 if poe_context is missing

Tudor Ambarus <[email protected]>
mtd: spi-nor: debugfs: fix out-of-bounds read in spi_nor_params_show()

Fuad Tabba <[email protected]>
KVM: arm64: Fix kvm_vcpu_initialized() macro parameter

Miklos Szeredi <[email protected]>
fanotify: fix false positive on permission events

Johan Hovold <[email protected]>
staging: vme_user: fix root device leak on init failure

Shyam Sunder Reddy Padira <[email protected]>
staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc

Johan Hovold <[email protected]>
spi: s3c64xx: fix NULL-deref on driver unbind

Johan Hovold <[email protected]>
spi: tegra20-sflash: fix controller deregistration

Johan Hovold <[email protected]>
spi: zynqmp-gqspi: fix controller deregistration

Johan Hovold <[email protected]>
spi: tegra114: fix controller deregistration

Johan Hovold <[email protected]>
spi: sun6i: fix controller deregistration

Johan Hovold <[email protected]>
spi: ti-qspi: fix controller deregistration

Johan Hovold <[email protected]>
spi: zynq-qspi: fix controller deregistration

Johan Hovold <[email protected]>
spi: sun4i: fix controller deregistration

Johan Hovold <[email protected]>
spi: syncuacer: fix controller deregistration

Gary Guo <[email protected]>
rust: pin-init: internal: move alignment check to make_field_check

Miguel Ojeda <[email protected]>
rust: allow clippy::collapsible_if globally

Miguel Ojeda <[email protected]>
rust: allow clippy::collapsible_match globally

Eliot Courtney <[email protected]>
rust: drm: gem: clean up GEM state in init failure case

Siwei Zhang <[email protected]>
Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb()

Siwei Zhang <[email protected]>
Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb()

Siwei Zhang <[email protected]>
Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb()

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_event: Fix OOB read and infinite loop in hci_le_create_big_complete_evt

David Carlier <[email protected]>
Bluetooth: hci_conn: fix potential UAF in create_big_sync

Tristan Madani <[email protected]>
Bluetooth: btmtk: validate WMT event SKB length before struct access

Michael Bommarito <[email protected]>
Bluetooth: virtio_bt: validate rx pkt_type header length

Michael Bommarito <[email protected]>
Bluetooth: virtio_bt: clamp rx length before skb_put

Tao Cui <[email protected]>
LoongArch: KVM: Fix missing EMULATE_FAIL in kvm_emu_mmio_read()

Jens Axboe <[email protected]>

    io_uring/tw: serialize ctx->retry_llist with ->uring_lock

Martin Michaelis <[email protected]>
io_uring/kbuf: support min length left for incremental buffers

Stephen Smalley <[email protected]>
selinux: allow multiple opens of /sys/fs/selinux/policy

Stephen Smalley <[email protected]>
selinux: prune /sys/fs/selinux/user

Stephen Smalley <[email protected]>
selinux: prune /sys/fs/selinux/disable

Stephen Smalley <[email protected]>
selinux: prune /sys/fs/selinux/checkreqprot

Stephen Smalley <[email protected]>
selinux: shrink critical section in sel_write_load()

David Windsor <[email protected]>
selinux: don't reserve xattr slot when we won't fill it

Zongyao Chen <[email protected]>
selinux: use sk blob accessor in socket permission helpers

Stephen Smalley <[email protected]>
selinux: fix avdcache auditing

Michael Bommarito <[email protected]>
xfrm: ah: account for ESN high bits in async callbacks

Yilin Zhu <[email protected]>
ipv6: xfrm6: release dst on error in xfrm6_rcv_encap()

Michal Kosiorek <[email protected]>
xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

Ruijie Li <[email protected]>
xfrm: provide message size for XFRM_MSG_MAPPING

Tejun Heo <[email protected]>
sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters

Ard Biesheuvel <[email protected]>
x86/efi: Restore IRQ state in EFI page fault handler

Sourabh Jain <[email protected]>

    powerpc/kdump: fix KASAN sanitization flag for core_$(BITS).o

Cássio Gabriel <[email protected]>
ALSA: seq: Fix UMP group 16 filtering

Cássio Gabriel <[email protected]>
ALSA: core: Serialize deferred fasync state checks

Cássio Gabriel <[email protected]>
ALSA: firewire-tascam: Do not drop unread control events

Yuriy Padlyak <[email protected]>
ALSA: hda/realtek: Fix speaker silence after S3 resume on Xiaomi Mi Laptop Pro 15

Takashi Iwai <[email protected]>
ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger

Cássio Gabriel <[email protected]>
ALSA: hda: cs35l56: Propagate ASP TX source control errors

Xu Yang <[email protected]>
usb: typec: tcpm: fix debug accessory mode detection for sink ports

Felix Gu <[email protected]>
usb: ulpi: fix memory leak on ulpi_register() error paths

Fabio Porcedda <[email protected]>
USB: serial: option: add Telit Cinterion LE910Cx compositions

Aaro Koskinen <[email protected]>
USB: omap_udc: DMA: Don't enable burst 4 mode

Amit Sunil Dhamne <[email protected]>
usb: typec: tcpm: reset internal port states on soft reset AMS

Selvarasu Ganesan <[email protected]>
usb: dwc3: Move GUID programming after PHY initialization

Cássio Gabriel <[email protected]>
ALSA: usb-audio: Fix UAC3 cluster descriptor size check

Takashi Iwai <[email protected]>
ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3()

Cássio Gabriel <[email protected]>
ALSA: usb-audio: midi2: Restart output URBs on resume

Greg Kroah-Hartman <[email protected]>
usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl

Greg Kroah-Hartman <[email protected]>
usb: usblp: fix heap leak in IEEE 1284 device ID via short response

Marek Szyprowski <[email protected]>
wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task

Tristan Madani <[email protected]>
wifi: b43: enforce bounds check on firmware key index in b43_rx()

Johannes Berg <[email protected]>
wifi: mac80211: remove station if connection prep fails

Jiri Slaby (SUSE) <[email protected]>
wifi: ath5k: do not access array OOB

Benjamin Berg <[email protected]>
wifi: mac80211: use safe list iteration in radar detect work

Jeongjun Park <[email protected]>
wifi: rsi: fix kthread lifetime race between self-exit and external-stop

Catherine <[email protected]>
wifi: mac80211: drop stray 'static' from fast-RX rx_result

Tristan Madani <[email protected]>
wifi: b43legacy: enforce bounds check on firmware key index in RX path

Quan Zhou <[email protected]>
wifi: mt76: mt7921: fix ROC abort flow interruption in mt7921_roc_work

Leon Yen <[email protected]>
wifi: mt76: mt7921: fix a potential clc buffer length underflow

Ming Yen Hsieh <[email protected]>
wifi: mt76: mt7925: fix incorrect length field in txpower command

Quan Zhou <[email protected]>
wifi: mt76: mt7925: fix AMPDU state handling in mt7925_tx_check_aggr

Jann Horn <[email protected]>
exit: prevent preemption of oopsing TASK_DEAD task

Jamal Hadi Salim <[email protected]>
net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked

Yi Kuo <[email protected]>
smb: client/smbdirect: fix MR registration for coalesced SG lists

Qingfang Deng <[email protected]>
flow_dissector: do not dissect PPPoE PFC frames

Sean Christopherson <[email protected]>
KVM: x86: Fix shadow paging use-after-free due to unexpected GFN

DaeMyung Kang <[email protected]>
ksmbd: rewrite stop_sessions() with restartable iteration

Johan Hovold <[email protected]>
spi: rockchip: fix controller deregistration

Quan Zhou <[email protected]>
wifi: mt76: mt7925: fix incorrect TLV length in CLC command

Mark Brown <[email protected]>
ASoC: SOF: Don't allow pointer operations on unconfigured streams

Sina Hassani <[email protected]>
iommufd: Fix a race with concurrent allocation and unmap

David Carlier <[email protected]>
tracepoint: balance regfunc() on func_add() failure in tracepoint_add_func()

Shivam Kalra <[email protected]>
ACPI: video: force native backlight on HP OMEN 16 (8A44)

Jinjie Ruan <[email protected]>
ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug

Jan Schär <[email protected]>
ACPI: video: Add backlight=native quirk for Dell OptiPlex 7770 AIO

Guangshuo Li <[email protected]>
ACPI: scan: Use acpi_dev_put() in object add error paths

Breno Leitao <[email protected]>
ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states

Rajat Gupta <[email protected]>
fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free

Corey Minyard <[email protected]>
ipmi:si: Return state to normal if message allocation fails

Corey Minyard <[email protected]>
ipmi: Check event message buffer response for bad data

Corey Minyard <[email protected]>
ipmi: Add limits to event and receive message requests

Greg Kroah-Hartman <[email protected]>
scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()

-------------

Diffstat:

 .../ABI/{obsolete => removed}/sysfs-selinux-user   |   0
 Makefile                                           |   6 +-
 arch/arm64/include/asm/kvm_host.h                  |   2 +-
 arch/arm64/kernel/ptrace.c                         |   4 +-
 arch/arm64/kernel/signal.c                         |  54 +++-
 arch/arm64/kvm/arm.c                               |   4 +
 arch/arm64/kvm/config.c                            |  17 +-
 arch/arm64/kvm/hyp/nvhe/pkvm.c                     |  38 ++-
 arch/arm64/kvm/hyp/nvhe/setup.c                    |   8 +-
 arch/arm64/kvm/vgic/vgic-mmio-v2.c                 |   2 +-
 arch/arm64/kvm/vgic/vgic-mmio-v3.c                 |   2 +-
 arch/loongarch/Kbuild                              |   2 +-
 arch/loongarch/include/asm/asm-prototypes.h        |  20 ++
 arch/loongarch/include/asm/kvm_host.h              |   3 -
 arch/loongarch/include/asm/linkage.h               |   2 +-
 arch/loongarch/kvm/Makefile                        |   3 +-
 arch/loongarch/kvm/exit.c                          |   1 +
 arch/loongarch/kvm/interrupt.c                     |  14 ++
 arch/loongarch/kvm/main.c                          |  35 +--
 arch/loongarch/kvm/mmu.c                           |   2 +-
 arch/loongarch/kvm/switch.S                        |  22 +-
 arch/loongarch/kvm/timer.c                         |  10 +-
 arch/loongarch/kvm/vm.c                            |   2 +-
 arch/loongarch/pci/acpi.c                          |   5 +
 arch/loongarch/pci/pci.c                           |   3 +
 arch/powerpc/kexec/Makefile                        |   2 +-
 arch/powerpc/platforms/pseries/papr-hvpipe.c       | 122 +++++----
 arch/powerpc/sysdev/xive/common.c                  |  16 +-
 arch/riscv/kvm/vcpu_vector.c                       |   5 +-
 arch/s390/kernel/debug.c                           |   8 +
 arch/x86/events/core.c                             |  13 +-
 arch/x86/events/intel/core.c                       |  50 +++-
 arch/x86/events/perf_event.h                       |  10 +
 arch/x86/include/asm/efi.h                         |   3 +-
 arch/x86/include/asm/msr-index.h                   |   3 +-
 arch/x86/kernel/cpu/amd.c                          |   3 +
 arch/x86/kernel/e820.c                             |   6 +-
 arch/x86/kvm/hyperv.c                              |   2 +-
 arch/x86/kvm/lapic.c                               |   8 +-
 arch/x86/kvm/mmu/mmu.c                             |  35 ++-
 arch/x86/mm/fault.c                                |   2 +-
 arch/x86/platform/efi/quirks.c                     |  13 +-
 block/blk-zoned.c                                  | 151 +++++------
 block/blk.h                                        |   2 +
 block/ioctl.c                                      |  24 +-
 drivers/accel/ivpu/ivpu_drv.c                      |  21 ++
 drivers/acpi/arm64/cpuidle.c                       |  10 +-
 drivers/acpi/cppc_acpi.c                           |   6 +-
 drivers/acpi/power.c                               |   2 +-
 drivers/acpi/scan.c                                |   2 +-
 drivers/acpi/video_detect.c                        |  16 ++
 drivers/android/binder/range_alloc/array.rs        |   1 -
 drivers/bluetooth/btmtk.c                          |  15 +-
 drivers/bluetooth/virtio_bt.c                      |  39 ++-
 drivers/char/ipmi/ipmi_si_intf.c                   |  70 ++++--
 drivers/char/ipmi/ipmi_ssif.c                      |  23 +-
 drivers/clk/clk-rk808.c                            |   2 +-
 drivers/clk/imx/clk-imx8-acm.c                     |   3 +-
 drivers/clk/microchip/clk-mpfs-ccc.c               |   6 +-
 drivers/cpuidle/cpuidle-powernv.c                  |   5 +-
 drivers/cpuidle/cpuidle-pseries.c                  |   5 +-
 drivers/crypto/caam/caamalg_qi2.c                  |   4 +-
 drivers/crypto/caam/caamhash.c                     |   4 +-
 .../crypto/intel/qat/qat_common/adf_accel_engine.c |   7 +
 .../qat/qat_common/icp_qat_fw_loader_handle.h      |   1 +
 drivers/crypto/intel/qat/qat_common/qat_hal.c      |  27 +-
 drivers/extcon/extcon-ptn5150.c                    |  14 ++
 drivers/gpio/gpiolib-of.c                          |   9 +-
 drivers/hv/Kconfig                                 |   2 +-
 drivers/hwmon/corsair-psu.c                        |   4 +-
 drivers/hwmon/ltc2992.c                            |  41 ++-
 drivers/infiniband/hw/hns/hns_roce_qp.c            |   7 +
 drivers/infiniband/hw/ionic/ionic_ibdev.c          |   2 +-
 drivers/infiniband/hw/mana/cq.c                    |   5 +-
 drivers/infiniband/hw/mana/qp.c                    |  16 +-
 drivers/infiniband/hw/mlx4/srq.c                   |   4 +-
 drivers/infiniband/hw/mlx5/main.c                  |   1 +
 drivers/infiniband/hw/ocrdma/ocrdma_verbs.c        |   4 +-
 drivers/infiniband/hw/vmw_pvrdma/pvrdma_verbs.c    |   2 +-
 drivers/infiniband/sw/rxe/rxe_recv.c               |  11 +
 drivers/infiniband/sw/rxe/rxe_resp.c               |  14 +-
 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c        |   7 +
 drivers/iommu/intel/nested.c                       |   6 +-
 drivers/iommu/iommufd/eventq.c                     |   5 +-
 drivers/iommu/iommufd/io_pagetable.c               |  10 +
 drivers/md/dm-ioctl.c                              |   6 +-
 drivers/md/dm-verity-fec.c                         | 113 ++++-----
 drivers/md/dm-verity-fec.h                         |   3 +-
 drivers/md/persistent-data/dm-btree-remove.c       |   8 +
 drivers/md/raid10.c                                |   2 +
 drivers/mmc/core/card.h                            |  11 +
 drivers/mmc/core/mmc.c                             |  12 +
 drivers/mmc/core/queue.c                           |   9 +-
 drivers/mmc/core/quirks.h                          |  12 +
 drivers/mtd/spi-nor/debugfs.c                      |   4 +-
 drivers/net/ethernet/ibm/ibmveth.c                 |  22 ++
 drivers/net/ethernet/ibm/ibmveth.h                 |   1 +
 drivers/net/ethernet/intel/ice/ice_sf_eth.c        |   2 +
 .../ethernet/marvell/octeon_ep_vf/octep_vf_rx.c    |  36 ++-
 drivers/net/ethernet/mellanox/mlx4/srq.c           |  13 +-
 drivers/net/ethernet/stmicro/stmmac/chain_mode.c   |   2 +-
 drivers/net/ethernet/stmicro/stmmac/common.h       |   2 +-
 drivers/net/ethernet/stmicro/stmmac/ring_mode.c    |   2 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  41 +--
 drivers/net/ethernet/wangxun/libwx/wx_hw.c         |   7 +-
 drivers/net/ethernet/wangxun/libwx/wx_vf_common.c  |   4 +-
 drivers/net/wireless/ath/ath5k/base.c              |   3 +-
 drivers/net/wireless/broadcom/b43/xmit.c           |   3 +-
 drivers/net/wireless/broadcom/b43legacy/xmit.c     |   3 +-
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.c    |   6 +-
 drivers/net/wireless/mediatek/mt76/mt7921/main.c   |   7 +-
 drivers/net/wireless/mediatek/mt76/mt7921/mcu.c    |   3 +
 drivers/net/wireless/mediatek/mt76/mt7925/mac.c    |   6 +-
 drivers/net/wireless/mediatek/mt76/mt7925/mcu.c    |   4 +-
 drivers/net/wireless/rsi/rsi_common.h              |   5 +-
 drivers/net/wwan/t7xx/t7xx_modem_ops.c             |  20 +-
 drivers/net/wwan/t7xx/t7xx_port_ctrl_msg.c         |  18 +-
 drivers/net/wwan/t7xx/t7xx_port_proxy.h            |   2 +-
 drivers/nvme/host/apple.c                          |   6 +-
 drivers/nvme/target/core.c                         |   2 +-
 drivers/nvme/target/tcp.c                          |  26 ++
 drivers/parisc/lasi.c                              |  12 +-
 drivers/pci/pci.c                                  |   7 +-
 drivers/pci/pcie/aer.c                             |   2 -
 drivers/pci/pcie/aspm.c                            |  17 +-
 drivers/pci/setup-res.c                            |   2 +
 drivers/platform/chrome/cros_typec_altmode.c       |   1 +
 drivers/pmdomain/core.c                            |  10 +-
 drivers/pmdomain/mediatek/mtk-pm-domains.c         |  10 +-
 drivers/power/supply/max17042_battery.c            |   2 +-
 drivers/remoteproc/imx_rproc.c                     |   2 +-
 drivers/remoteproc/ti_k3_common.c                  |   2 +-
 drivers/scsi/mpt3sas/mpt3sas_scsih.c               |  14 +-
 drivers/spi/spi-microchip-core-qspi.c              | 103 ++++++--
 drivers/spi/spi-microchip-core-spi.c               |   4 +-
 drivers/spi/spi-rockchip.c                         |   4 +-
 drivers/spi/spi-s3c64xx.c                          |   5 -
 drivers/spi/spi-sun4i.c                            |  10 +-
 drivers/spi/spi-sun6i.c                            |   8 +-
 drivers/spi/spi-synquacer.c                        |   8 +-
 drivers/spi/spi-tegra114.c                         |   8 +-
 drivers/spi/spi-tegra20-sflash.c                   |   8 +-
 drivers/spi/spi-ti-qspi.c                          |  14 +-
 drivers/spi/spi-topcliff-pch.c                     |  11 +-
 drivers/spi/spi-zynq-qspi.c                        |  15 +-
 drivers/spi/spi-zynqmp-gqspi.c                     |   4 +-
 drivers/staging/rtl8723bs/os_dep/osdep_service.c   |   3 +-
 drivers/staging/vme_user/vme_fake.c                |   2 +
 drivers/target/target_core_configfs.c              |   2 +-
 drivers/thermal/sprd_thermal.c                     |   4 +-
 drivers/thermal/thermal_core.c                     |   6 +-
 drivers/usb/class/usblp.c                          |   3 +-
 drivers/usb/common/ulpi.c                          |   5 +-
 drivers/usb/dwc3/core.c                            |  12 +-
 drivers/usb/gadget/udc/omap_udc.c                  |   4 -
 drivers/usb/serial/option.c                        |   4 +
 drivers/usb/typec/tcpm/tcpm.c                      |  27 +-
 drivers/video/fbdev/core/fbcon_rotate.c            |   5 +-
 drivers/video/fbdev/udlfb.c                        |  31 ++-
 fs/btrfs/inode.c                                   |   8 +
 fs/btrfs/ioctl.c                                   |   5 +-
 fs/btrfs/space-info.c                              |   6 +-
 fs/f2fs/data.c                                     |  28 ++-
 fs/f2fs/extent_cache.c                             |  17 +-
 fs/f2fs/f2fs.h                                     |   5 +
 fs/f2fs/inline.c                                   |  22 +-
 fs/f2fs/inode.c                                    |   2 +-
 fs/f2fs/node.c                                     |  95 +++----
 fs/f2fs/super.c                                    |  11 +
 fs/f2fs/sysfs.c                                    |  10 +-
 fs/hfsplus/bfind.c                                 |  51 ++++
 fs/hfsplus/catalog.c                               |   4 +-
 fs/hfsplus/dir.c                                   |   2 +-
 fs/hfsplus/hfsplus_fs.h                            |   9 +
 fs/hfsplus/super.c                                 |   6 +-
 fs/isofs/export.c                                  |   2 +-
 fs/isofs/rock.c                                    |   9 +
 fs/notify/fsnotify.c                               |   2 +-
 fs/notify/mark.c                                   |  18 +-
 fs/overlayfs/util.c                                |   2 +-
 fs/smb/client/cached_dir.c                         |   8 +
 fs/smb/client/cifsacl.c                            |  37 ++-
 fs/smb/client/smb2inode.c                          |  12 +-
 fs/smb/client/smb2misc.c                           |   3 +-
 fs/smb/client/smb2ops.c                            |  11 +
 fs/smb/client/smbdirect.c                          |  21 +-
 fs/smb/server/connection.c                         |  48 +++-
 fs/smb/server/connection.h                         |   1 +
 fs/tracefs/event_inode.c                           |  14 ++
 fs/tracefs/inode.c                                 |   6 +-
 fs/tracefs/internal.h                              |   3 +
 fs/udf/misc.c                                      |   8 +-
 include/linux/fsnotify_backend.h                   |   1 +
 include/linux/if_vlan.h                            |  25 +-
 include/linux/mmc/card.h                           |   2 +
 include/linux/printk.h                             |  13 +
 include/linux/rseq.h                               |   2 +
 include/uapi/linux/io_uring.h                      |   3 +-
 include/uapi/linux/rseq.h                          |   5 +-
 include/video/udlfb.h                              |   1 +
 io_uring/kbuf.c                                    |   8 +-
 io_uring/kbuf.h                                    |   7 +
 io_uring/tw.c                                      |  12 +-
 kernel/bpf/arena.c                                 |  19 +-
 kernel/exit.c                                      |   1 +
 kernel/rseq.c                                      |  29 ++-
 kernel/sched/ext.c                                 |  28 ++-
 kernel/sched/ext_idle.c                            |  12 +-
 kernel/trace/fprobe.c                              | 279 ++++++++++++---------
 kernel/trace/trace_probe.c                         |   6 +
 kernel/trace/trace_probe.h                         |   4 +-
 kernel/tracepoint.c                                |   2 +
 lib/crc/Kconfig                                    |   7 +-
 lib/crc/tests/crc_kunit.c                          |  28 ++-
 lib/crypto/mpi/mpicoder.c                          |   2 +-
 lib/scatterlist.c                                  |   8 +-
 mm/damon/lru_sort.c                                |  85 ++++---
 mm/damon/reclaim.c                                 |  85 ++++---
 mm/damon/stat.c                                    |  30 ++-
 mm/damon/sysfs-schemes.c                           |  24 +-
 mm/hugetlb_cma.c                                   |   1 +
 net/8021q/vlan_dev.c                               |  45 ++--
 net/8021q/vlan_netlink.c                           |  10 +-
 net/8021q/vlanproc.c                               |  12 +-
 net/bluetooth/hci_conn.c                           |  19 +-
 net/bluetooth/hci_event.c                          |  29 ++-
 net/bluetooth/l2cap_sock.c                         |   9 +
 net/ceph/auth.c                                    |   2 +-
 net/ceph/mon_client.c                              |   2 +
 net/core/flow_dissector.c                          |  13 +-
 net/core/netpoll.c                                 |  23 +-
 net/core/rtnetlink.c                               |   1 +
 net/ipv4/ah4.c                                     |  14 +-
 net/ipv6/ah6.c                                     |  14 +-
 net/ipv6/ip6_gre.c                                 |   5 +-
 net/ipv6/xfrm6_protocol.c                          |   4 +-
 net/mac80211/mlme.c                                |   9 +-
 net/mac80211/rx.c                                  |   2 +-
 net/mac80211/util.c                                |   4 +-
 net/mptcp/fastopen.c                               |   4 +-
 net/mptcp/pm.c                                     |  62 +++--
 net/mptcp/pm_kernel.c                              |  14 +-
 net/mptcp/protocol.c                               |   3 +-
 net/mptcp/sockopt.c                                |  16 +-
 net/mptcp/subflow.c                                |   4 +-
 net/openvswitch/vport-netdev.c                     |   6 +-
 net/psp/psp_main.c                                 |  42 +++-
 net/rds/message.c                                  |  20 +-
 net/sched/sch_red.c                                |   2 +-
 net/unix/af_unix.c                                 |   3 +
 net/vmw_vsock/hyperv_transport.c                   |  33 ++-
 net/xfrm/xfrm_state.c                              |  12 +-
 net/xfrm/xfrm_user.c                               |   1 +
 rust/kernel/drm/gem/mod.rs                         |  13 +-
 rust/pin-init/internal/src/init.rs                 | 184 +++++++-------
 rust/pin-init/src/__internal.rs                    |  28 ++-
 security/selinux/hooks.c                           |  38 ++-
 security/selinux/include/objsec.h                  |   4 +-
 security/selinux/include/security.h                |   2 -
 security/selinux/selinuxfs.c                       | 196 +++------------
 security/selinux/ss/services.c                     | 125 ---------
 sound/core/misc.c                                  |   8 +-
 sound/core/oss/pcm_oss.c                           |  29 ++-
 sound/core/seq/seq_clientmgr.c                     |   2 +-
 sound/core/seq/seq_clientmgr.h                     |   5 +-
 sound/core/seq/seq_ump_client.c                    |   2 +-
 sound/firewire/tascam/tascam-hwdep.c               |   1 +
 sound/hda/codecs/realtek/alc269.c                  |  19 ++
 sound/hda/codecs/side-codecs/cs35l56_hda.c         |  19 +-
 sound/soc/amd/yc/acp6x-mach.c                      |  14 ++
 sound/soc/codecs/es8389.c                          |   2 +-
 sound/soc/fsl/fsl_easrc.c                          |   2 +-
 sound/soc/intel/boards/bytcr_wm5102.c              |   1 +
 sound/soc/qcom/qdsp6/q6apm-dai.c                   |   1 +
 sound/soc/qcom/qdsp6/q6apm-lpass-dais.c            |   2 +-
 sound/soc/qcom/qdsp6/q6apm.c                       |   3 +
 sound/soc/sof/compress.c                           |   3 +
 sound/usb/midi2.c                                  |   9 +-
 sound/usb/misc/ua101.c                             |   7 +
 sound/usb/stream.c                                 |   4 +-
 tools/arch/x86/include/asm/msr-index.h             |   3 +-
 tools/testing/selftests/net/mptcp/mptcp_lib.sh     |  16 +-
 tools/testing/selftests/net/mptcp/pm_netlink.sh    |  20 +-
 tools/testing/selftests/rseq/Makefile              |  21 +-
 tools/testing/selftests/rseq/check_optimized.c     |  17 ++
 tools/testing/selftests/rseq/legacy_check.c        |  65 +++++
 tools/testing/selftests/rseq/param_test.c          |  25 +-
 tools/testing/selftests/rseq/rseq-abi.h            |   7 +-
 tools/testing/selftests/rseq/rseq.c                |  39 ++-
 tools/testing/selftests/rseq/rseq.h                |   8 +-
 tools/testing/selftests/rseq/run_legacy_check.sh   |   4 +
 tools/testing/selftests/rseq/run_param_test.sh     |  39 +++
 tools/testing/selftests/rseq/run_timeslice_test.sh |  14 ++
 tools/testing/selftests/rseq/slice_test.c          |  12 +-
 294 files changed, 3041 insertions(+), 1615 deletions(-)

Read the cover letter in its thread