6.18.34-rc1 review

Greg Kroah-Hartman ceph-devel dri-devel intel-wired-lan linux-fsdevel linux-patches lkml netfs stable 1 version May 28 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest May 28377 patches 11 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/377	drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()`drivers/gpu/drm/xe/display/xe_hdcp_gsc.c`	+10 -2	0 replies
2/377	iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs`drivers/iommu/amd/debugfs.c`	+19 ~~-23~~	0 replies
3/377	iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs`drivers/iommu/amd/debugfs.c`	+5 -4	0 replies
4/377	fuse: fix uninit-value in fuse_dentry_revalidate()`fs/fuse/dir.c`	+15 -5	0 replies
5/377	cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()`drivers/cxl/core/mbox.c`	+9 -2	0 replies
6/377	sched: Employ sched_change guards`include/linux/cleanup.h` `kernel/sched/core.c` `kernel/sched/ext.c` +2 more	+131 ~~-170~~	0 replies
7/377	sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting`kernel/sched/syscalls.c`	+30 -0	0 replies
8/377	bridge: mrp: reject zero test interval to avoid OOM panic`net/bridge/br_mrp_netlink.c`	+2 -2	0 replies
9/377	spi: spi-dw-dma: fix print error log when wait finish transaction`drivers/spi/spi-dw-dma.c`	+1 -1	0 replies
10/377	ksmbd: close durable scavenger races against m_fp_list lookups`fs/smb/server/vfs_cache.c`	+77 ~~-27~~	0 replies
11/377	smb: client: reject userspace cifs.spnego descriptions`fs/smb/client/cifs_spnego.c`	+16 -0	0 replies
12/377	dt-bindings: soc: bcm: Add bcm2712 compatible`Documentation/devicetree/bindings/soc/bcm/brcm,bcm2835-pm.yaml`	+32 -6	0 replies
13/377	arm64: dts: broadcom: bcm2712: Add watchdog DT node`arch/arm64/boot/dts/broadcom/bcm2712.dtsi`	+9 -0	0 replies
14/377	mfd: bcm2835-pm: Add support for BCM2712`drivers/mfd/bcm2835-pm.c`	+1 -0	0 replies
15/377	ata: libata-scsi: improve readability of ata_scsi_qc_issue()`drivers/ata/libata-scsi.c`	+21 ~~-22~~	0 replies
16/377	ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT`drivers/ata/libata-scsi.c`	+3 -2	0 replies
17/377	ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS`drivers/ata/libata-pmp.c` `drivers/ata/libata-scsi.c` `drivers/ata/sata_sil24.c` +1 more	+26 -2	0 replies
18/377	ata: libata-scsi: do not needlessly defer commands when using PMP with FBS`drivers/ata/libata-core.c` `drivers/ata/libata-eh.c` `drivers/ata/libata-pmp.c` +2 more	+47 ~~-35~~	0 replies
19/377	Revert "ice: fix double-free of tx_buf skb"`drivers/net/ethernet/intel/ice/ice_txrx.c`	+2 -4	0 replies
20/377	Revert "ice: Remove jumbo_remove step from TX path"`drivers/net/ethernet/intel/ice/ice_txrx.c`	+3 -0	0 replies
21/377	drm/vblank: Add vblank timer`Documentation/gpu/drm-kms-helpers.rst` `drivers/gpu/drm/Makefile` `drivers/gpu/drm/drm_vblank.c` +4 more	+357 -3	0 replies
22/377	drm/vblank: Add CRTC helpers for simple use cases`drivers/gpu/drm/drm_vblank_helper.c` `include/drm/drm_vblank_helper.h`	+103 -0	0 replies
23/377	drm/vkms: Convert to DRMs vblank timer`drivers/gpu/drm/vkms/vkms_crtc.c` `drivers/gpu/drm/vkms/vkms_drv.h`	+7 ~~-78~~	0 replies
24/377	drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks()`drivers/gpu/drm/drm_atomic_helper.c`	+1 -1	0 replies
25/377	drm/vblank: Fix kernel docs for vblank timer`drivers/gpu/drm/drm_vblank.c`	+1 -1	0 replies
26/377	sysfs: dont remove existing directory on update failure`fs/sysfs/group.c`	+1 -1	0 replies
27/377	mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()`mm/damon/sysfs-schemes.c`	+1 -0	0 replies
28/377	ksmbd: fix null pointer dereference in compare_guid_key()`fs/smb/server/oplock.c`	+5 -1	0 replies
29/377	ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow`fs/smb/server/smbacl.c`	+9 -3	0 replies
30/377	ksmbd: validate SID in parent security descriptor during ACL inheritance`fs/smb/server/smbacl.c`	+50 ~~-16~~	0 replies
31/377	regulator: tps65219: fix irq_data.rdev not being assigned`drivers/regulator/tps65219-regulator.c`	+95 ~~-40~~	0 replies
32/377	smb: client: require net admin for CIFS SWN netlink`fs/smb/client/netlink.c`	+5 -1	0 replies
33/377	smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()`fs/smb/client/smb2transport.c`	+2 -0	0 replies
34/377	smb: client: use data_len for SMB2 READ encrypted folioq copy`fs/smb/client/smb2ops.c`	+2 -2	0 replies
35/377	smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close`fs/smb/server/vfs_cache.c`	+12 -4	0 replies
36/377	hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX`drivers/hwmon/pmbus/adm1266.c`	+1 -1	0 replies
37/377	ALSA: ua101: Reject too-short USB descriptors`sound/usb/misc/ua101.c`	+3 -2	0 replies
38/377	ALSA: pcm: Dont setup bogus iov_iter for silencing`sound/core/pcm_lib.c`	+3 -0	0 replies
39/377	ALSA: asihpi: Fix potential OOB array access at reading cache`sound/pci/asihpi/hpicmn.c`	+6 -0	0 replies
40/377	ALSA: scarlett2: Allow flash writes ending at segment boundary`sound/usb/mixer_scarlett2.c`	+5 -2	0 replies
41/377	efi: Allocate runtime workqueue before ACPI init`drivers/firmware/efi/efi.c`	+16 ~~-12~~	0 replies
42/377	spi: amd: Set correct bus number in ACPI probe path`drivers/spi/spi-amd.c`	+1 -1	0 replies
43/377	io_uring/waitid: clear waitid info before copying it to userspace`io_uring/waitid.c`	+1 -0	0 replies
44/377	drivers/base/memory: fix memory block reference leak in poison accounting`drivers/base/memory.c`	+6 -2	0 replies
45/377	ipv6: ioam: refresh hdr pointer before ioam6_event()`net/ipv6/exthdrs.c`	+3 -3	0 replies
46/377	mm/memory: fix spurious warning when unmapping device-private/exclusive pages`mm/memory.c` `tools/testing/selftests/mm/hmm-tests.c`	+51 -1	0 replies
47/377	mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special()`mm/memory.c`	+19 -3	0 replies
48/377	mm/memory_hotplug: fix memory block reference leak on remove`mm/memory_hotplug.c`	+2 -0	0 replies
49/377	mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free`arch/arm64/include/asm/page.h` `arch/arm64/mm/fault.c` `include/linux/gfp_types.h` +2 more	+21 ~~-17~~	0 replies
50/377	selftests/mm: run_vmtests.sh: fix destructive tests invocation`tools/testing/selftests/mm/run_vmtests.sh`	+1 -1	0 replies
51/377	net: wwan: iosm: fix potential memory leaks in ipc_imem_init()`drivers/net/wwan/iosm/iosm_ipc_imem.c`	+2 -0	0 replies
52/377	Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()`net/bluetooth/af_bluetooth.c` `net/bluetooth/iso.c` `net/bluetooth/l2cap_sock.c` +2 more	+78 ~~-10~~	0 replies
53/377	Bluetooth: ISO: drop ISO_END frames received without prior ISO_START`net/bluetooth/iso.c`	+5 -0	0 replies
54/377	Bluetooth: bnep: Fix UAF read of dev->name`net/bluetooth/bnep/core.c`	+1 -1	0 replies
55/377	Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths`drivers/bluetooth/hci_ldisc.c`	+40 -8	0 replies
56/377	Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer`net/bluetooth/l2cap_core.c`	+1 -1	0 replies
57/377	Bluetooth: MGMT: validate Add Extended Advertising Data length`net/bluetooth/mgmt.c`	+6 -0	0 replies
58/377	Bluetooth: serialize accept_q access`include/net/bluetooth/bluetooth.h` `net/bluetooth/af_bluetooth.c`	+66 ~~-22~~	0 replies
59/377	phonet/pep: disable BH around forwarded sk_receive_skb()`net/phonet/pep.c`	+17 -2	0 replies
60/377	net: bcmgenet: keep RBUF EEE/PM disabled`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+4 -5	0 replies
61/377	net: phy: skip EEE advertisement write when autoneg is disabled`drivers/net/phy/phy-c45.c`	+8 -0	0 replies
62/377	net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover`drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c`	+3 -3	0 replies
63/377	net: ifb: report ethtool stats over num_tx_queues`drivers/net/ifb.c`	+5 -6	0 replies
64/377	net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis()`drivers/net/pse-pd/pse_core.c`	+1 -1	0 replies
65/377	netfilter: ip6t_hbh: reject oversized option lists`net/ipv6/netfilter/ip6t_hbh.c`	+4 -0	0 replies
66/377	netfilter: nf_queue: hold bridge skb->dev while queued`include/net/netfilter/nf_queue.h` `net/netfilter/nf_queue.c` `net/netfilter/nfnetlink_queue.c`	+6 -1	0 replies
67/377	netfilter: ipset: stop hash:* range iteration at end`net/netfilter/ipset/ip_set_hash_ipmark.c` `net/netfilter/ipset/ip_set_hash_ipport.c` `net/netfilter/ipset/ip_set_hash_ipportip.c` +1 more	+17 -4	0 replies
68/377	netfilter: nft_inner: Fix IPv6 inner_thoff desync`net/netfilter/nft_inner.c`	+0 -1	0 replies
69/377	sched_ext: Fix missing warning in scx_set_task_state() default case`kernel/sched/ext.c`	+2 -1	0 replies
70/377	sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path`kernel/sched/ext.c`	+1 -1	0 replies
71/377	tracing: fprobe: Remove unused local variable`kernel/trace/fprobe.c`	+1 -4	0 replies
72/377	tracing: fprobe: use ftrace if CONFIG_DYNAMIC_FTRACE_WITH_ARGS`kernel/trace/fprobe.c`	+22 ~~-10~~	0 replies
73/377	tracing/fprobe: Avoid kcalloc() in rcu_read_lock section`kernel/trace/fprobe.c`	+45 ~~-47~~	0 replies
74/377	tracing/fprobe: Check the same type fprobe on table as the unregistered one`kernel/trace/fprobe.c`	+65 ~~-17~~	0 replies
75/377	cgroup/cpuset: Reset DL migration state on can_attach() failure`kernel/cgroup/cpuset.c`	+4 -4	0 replies
76/377	net: ethtool: fix NULL pointer dereference in phy_reply_size`net/ethtool/phy.c`	+30 -2	0 replies
77/377	net: ethtool: phy: avoid NULL deref when PHY driver is unbound`net/ethtool/phy.c`	+6 -4	0 replies
78/377	fs/ntfs3: handle attr_set_size() errors when truncating files`fs/ntfs3/file.c`	+4 -8	0 replies
79/377	l2tp: use list_del_rcu in l2tp_session_unhash`net/l2tp/l2tp_core.c`	+1 -1	0 replies
80/377	qed: fix double free in qed_cxt_tables_alloc()`drivers/net/ethernet/qlogic/qed/qed_cxt.c`	+2 -0	0 replies
81/377	ring-buffer: Fix reporting of missed events in iterator`kernel/trace/ring_buffer.c`	+3 -5	0 replies
82/377	ring-buffer: Flush and stop persistent ring buffer on panic`arch/alpha/include/asm/Kbuild` `arch/arc/include/asm/Kbuild` `arch/arm/include/asm/Kbuild` +20 more	+65 -0	0 replies
83/377	ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()`net/ipv6/exthdrs.c`	+13 -2	0 replies
84/377	mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient`net/mptcp/pm.c`	+46 ~~-10~~	0 replies
85/377	vsock/vmci: fix UAF when peer resets connection during handshake`net/vmw_vsock/vmci_transport.c`	+1 -1	0 replies
86/377	vsock/virtio: reset connection on receiving queue overflow`net/vmw_vsock/virtio_transport_common.c`	+15 -5	0 replies
87/377	ice: fix VF queue configuration with low MTU values`drivers/net/ethernet/intel/ice/virt/queues.c`	+1 -1	0 replies
88/377	wifi: ath11k: clear shared SRNG pointer state on restart`drivers/net/wireless/ath/ath11k/hal.c`	+11 -3	0 replies
89/377	wifi: iwlwifi: mvm: fix driver-set TX rates on old devices`drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c` `drivers/net/wireless/intel/iwlwifi/mvm/utils.c`	+22 ~~-19~~	0 replies
90/377	wifi: iwlwifi: mld: stop TX during firmware restart`drivers/net/wireless/intel/iwlwifi/mld/tx.c`	+10 -0	0 replies
91/377	ipv4: raw: reject IP_HDRINCL packets with ihl < 5`net/ipv4/raw.c`	+1 -1	0 replies
92/377	ixgbevf: fix use-after-free in VEPA multicast source pruning`drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c`	+1 -0	0 replies
93/377	rbd: eliminate a race in lock_dwork draining on unmap`drivers/block/rbd.c`	+8 ~~-12~~	0 replies
94/377	lsm: hold cred_guard_mutex for lsm_set_self_attr()`security/lsm_syscalls.c`	+8 -1	0 replies
95/377	octeontx2-af: CGX: add bounds check to cgx_speed_mbps index`drivers/net/ethernet/marvell/octeontx2/af/cgx.c`	+6 -1	0 replies
96/377	octeontx2-pf: fix double free in rvu_rep_rsrc_init()`drivers/net/ethernet/marvell/octeontx2/nic/rep.c`	+2 -1	0 replies
97/377	igc: fix potential skb leak in igc_fpe_xmit_smd_frame()`drivers/net/ethernet/intel/igc/igc_tsn.c`	+7 -1	0 replies
98/377	ice: fix locking around wait_event_interruptible_locked_irq`drivers/net/ethernet/intel/ice/ice_ptp_hw.c`	+4 -5	0 replies
99/377	ice: fix setting promisc mode while adding VID filter`drivers/net/ethernet/intel/ice/ice_main.c`	+1 -1	0 replies
100/377	ice: restore PTP Rx timestamp config after ethtool set-channels`drivers/net/ethernet/intel/ice/ice_main.c`	+6 -0	0 replies
101/377	wifi: cfg80211: advance loop vars in cfg80211_merge_profile()`net/wireless/scan.c`	+3 -0	0 replies
102/377	af_unix: Fix UAF read of tail->len in unix_stream_data_wait()`net/unix/af_unix.c`	+2 -9	0 replies
103/377	wifi: mac80211: consume only present negotiated TTLM maps`net/mac80211/mlme.c`	+1 -1	0 replies
104/377	cifs: Fix busy dentry used after unmounting`fs/smb/client/cifsfs.c`	+2 -0	0 replies
105/377	tracing: Do not call map->ops->elt_free() if elt_alloc() fails`kernel/trace/tracing_map.c`	+13 -4	0 replies
106/377	arm64: probes: Handle probes on hinted conditional branch instructions`arch/arm64/include/asm/insn.h`	+1 -1	0 replies
107/377	KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits`arch/arm64/kvm/vgic/vgic-its.c`	+4 -0	0 replies
108/377	KVM: arm64: vgic: Free private_irqs when init fails after allocation`arch/arm64/kvm/arm.c`	+3 -1	0 replies
109/377	KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)`arch/x86/kvm/svm/avic.c`	+7 -5	0 replies
110/377	riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM`arch/riscv/kvm/vcpu_pmu.c`	+4 -2	0 replies
111/377	riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when OOM`arch/riscv/kvm/vcpu_pmu.c`	+4 -2	0 replies
112/377	virt: sev-guest: Explicitly leak pages in unknown state`drivers/virt/coco/sev-guest/sev-guest.c`	+7 -3	0 replies
113/377	drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe`drivers/gpu/drm/bridge/chipone-icn6211.c`	+3 -1	0 replies
114/377	spi: qup: fix error pointer deref after DMA setup failure`drivers/spi/spi-qup.c`	+3 -0	0 replies
115/377	phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for Exynos7870`drivers/phy/samsung/phy-exynos5-usbdrd.c`	+4 -3	0 replies
116/377	phy: tegra: xusb: Fix per-pad high-speed termination calibration`drivers/phy/tegra/xusb-tegra186.c` `drivers/phy/tegra/xusb.h`	+27 -7	0 replies
117/377	phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after SM8650 G4 fix`drivers/phy/qualcomm/phy-qcom-qmp-ufs.c`	+1 -0	0 replies
118/377	scsi: isci: Fix use-after-free in device removal path`drivers/scsi/isci/host.c`	+3 -0	0 replies
119/377	spi: ep93xx: fix error pointer deref after DMA setup failure`drivers/spi/spi-ep93xx.c`	+2 -0	0 replies
120/377	spi: sprd: fix error pointer deref after DMA setup failure`drivers/spi/spi-sprd.c`	+2 -1	0 replies
121/377	spi: ti-qspi: fix use-after-free after DMA setup failure`drivers/spi/spi-ti-qspi.c`	+1 -0	0 replies
122/377	RDMA/siw: Reject MPA FPDU length underflow before signed receive math`drivers/infiniband/sw/siw/siw_qp_rx.c`	+15 -0	0 replies
123/377	fwctl: pds: Validate RPC input size before parsing`drivers/fwctl/pds/main.c`	+3 -0	0 replies
124/377	LoongArch: kprobes: Use larch_insn_text_copy() to patch instructions`arch/loongarch/kernel/kprobes.c`	+6 -4	0 replies
125/377	LoongArch: Remove unused code to avoid build warning`arch/loongarch/mm/init.c`	+0 -4	0 replies
126/377	device property: set fwnode->secondary to NULL in fwnode_init()`include/linux/fwnode.h`	+1 -0	0 replies
127/377	drm/msm: Fix shrinker deadlock`drivers/gpu/drm/msm/msm_gem_shrinker.c`	+16 ~~-24~~	0 replies
128/377	drm/v3d: Fix use-after-free of CPU job query arrays on error path`drivers/gpu/drm/v3d/v3d_sched.c` `drivers/gpu/drm/v3d/v3d_submit.c`	+17 ~~-18~~	0 replies
129/377	drm/v3d: Release indirect CSD GEM reference on CPU job free`drivers/gpu/drm/v3d/v3d_submit.c`	+3 -0	0 replies
130/377	drm/virtio: use uninterruptible resv lock for plane updates`drivers/gpu/drm/virtio/virtgpu_drv.h` `drivers/gpu/drm/virtio/virtgpu_gem.c` `drivers/gpu/drm/virtio/virtgpu_plane.c`	+26 -2	0 replies
131/377	drm/amdgpu/vpe: Force collaborate sync after TRAP`drivers/gpu/drm/amd/amdgpu/amdgpu_vpe.c`	+6 -1	0 replies
132/377	drm/bridge: it66121: acquire reset GPIO in probe`drivers/gpu/drm/bridge/ite-it66121.c`	+5 -0	0 replies
133/377	drm/bridge: megachips: remove bridge when irq request fails`drivers/gpu/drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c`	+10 -6	0 replies
134/377	drm/amd/display: Fix integer overflow in bios_get_image()`drivers/gpu/drm/amd/display/dc/bios/bios_parser_helper.c`	+6 -3	0 replies
135/377	drm/amd/display: Validate GPIO pin LUT table size before iterating`drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c`	+9 -0	0 replies
136/377	drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async`drivers/gpu/drm/amd/display/dc/core/dc.c`	+5 -1	0 replies
137/377	batman-adv: v: stop OGMv2 on disabled interface`net/batman-adv/bat_v_ogm.c`	+21 ~~-12~~	0 replies
138/377	batman-adv: tvlv: abort OGM send on tvlv append failure`net/batman-adv/bat_iv_ogm.c` `net/batman-adv/bat_v_ogm.c` `net/batman-adv/tvlv.c` +1 more	+40 ~~-21~~	0 replies
139/377	batman-adv: tvlv: reject oversized TVLV packets`net/batman-adv/tvlv.c`	+8 -3	0 replies
140/377	batman-adv: iv: recover OGM scheduling after forward packet error`net/batman-adv/bat_iv_ogm.c` `net/batman-adv/types.h`	+60 ~~-19~~	0 replies
141/377	batman-adv: mcast: fix use-after-free in orig_node RCU release`net/batman-adv/originator.c`	+2 -2	0 replies
142/377	batman-adv: clear current gateway during teardown`net/batman-adv/gateway_client.c`	+4 -0	0 replies
143/377	batman-adv: dat: handle forward allocation error`net/batman-adv/distributed-arp-table.c`	+3 -0	0 replies
144/377	batman-adv: fix fragment reassembly length accounting`net/batman-adv/fragmentation.c` `net/batman-adv/types.h`	+18 -7	0 replies
145/377	batman-adv: fix tp_meter counter underflow during shutdown`net/batman-adv/tp_meter.c`	+2 -2	0 replies
146/377	batman-adv: frag: disallow unicast fragment in fragment`net/batman-adv/fragmentation.c`	+35 -0	0 replies
147/377	batman-adv: bla: fix report_work leak on backbone_gw purge`net/batman-adv/bridge_loop_avoidance.c`	+38 ~~-22~~	0 replies
148/377	batman-adv: bla: avoid double decrement of bla.num_requests`net/batman-adv/bridge_loop_avoidance.c` `net/batman-adv/mesh-interface.c` `net/batman-adv/types.h`	+67 ~~-24~~	0 replies
149/377	batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface`net/batman-adv/bridge_loop_avoidance.c`	+4 -2	0 replies
150/377	batman-adv: tp_meter: avoid use of uninit sender vars`net/batman-adv/tp_meter.c`	+9 -2	0 replies
151/377	batman-adv: tp_meter: directly shut down timer on cleanup`net/batman-adv/tp_meter.c`	+1 -7	0 replies
152/377	batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown`net/batman-adv/tp_meter.c` `net/batman-adv/types.h`	+14 -2	0 replies
153/377	batman-adv: tp_meter: fix race condition in send error reporting`net/batman-adv/tp_meter.c` `net/batman-adv/types.h`	+30 ~~-20~~	0 replies
154/377	batman-adv: tp_meter: avoid role confusion in tp_list`net/batman-adv/tp_meter.c`	+36 ~~-23~~	0 replies
155/377	batman-adv: tt: fix TOCTOU race for reported vlans`net/batman-adv/translation-table.c`	+9 -4	0 replies
156/377	batman-adv: tt: reject oversized local TVLV buffers`net/batman-adv/translation-table.c`	+5 -3	0 replies
157/377	batman-adv: tt: avoid empty VLAN responses`net/batman-adv/translation-table.c`	+17 -3	0 replies
158/377	batman-adv: tt: fix negative last_changeset_len`net/batman-adv/types.h`	+1 -1	0 replies
159/377	batman-adv: tt: fix negative tt_buff_len`net/batman-adv/types.h`	+1 -1	0 replies
160/377	batman-adv: tt: prevent TVLV entry number overflow`net/batman-adv/translation-table.c`	+17 -3	0 replies
161/377	hwmon: (pmbus/adm1266) seed timestamp from the real-time clock`drivers/hwmon/pmbus/adm1266.c`	+1 -1	0 replies
162/377	hwmon: (pmbus/adm1266) reject implausible blackbox record_count`drivers/hwmon/pmbus/adm1266.c`	+3 -0	0 replies
163/377	hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer`drivers/hwmon/pmbus/adm1266.c`	+1 -1	0 replies
164/377	hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer`drivers/hwmon/pmbus/adm1266.c`	+3 -1	0 replies
165/377	hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR`drivers/hwmon/pmbus/adm1266.c`	+1 -1	0 replies
166/377	hwmon: (pmbus/adm1266) dont clobber GPIO bits before PDIO read in get_multiple`drivers/hwmon/pmbus/adm1266.c`	+0 -1	0 replies
167/377	hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe()`drivers/hwmon/pmbus/adm1266.c`	+4 -4	0 replies
168/377	hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe()`drivers/hwmon/pmbus/adm1266.c`	+4 -4	0 replies
169/377	hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors`drivers/hwmon/pmbus/adm1266.c`	+6 -0	0 replies
170/377	pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function`drivers/pinctrl/qcom/pinctrl-ipq4019.c` `drivers/pinctrl/qcom/pinctrl-msm.h`	+6 -1	0 replies
171/377	ARM: dts: renesas: genmai: Drop superfluous cells`arch/arm/boot/dts/renesas/r7s72100-genmai.dts`	+0 -3	0 replies
172/377	ARM: dts: renesas: rskrza1: Drop superfluous cells`arch/arm/boot/dts/renesas/r7s72100-rskrza1.dts`	+0 -2	0 replies
173/377	pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for high pins during suspend/resume`drivers/pinctrl/renesas/pinctrl-rzg2l.c`	+1 -1	0 replies
174/377	pinctrl: renesas: rzg2l: Fix SMT register cache handling`drivers/pinctrl/renesas/pinctrl-rzg2l.c`	+14 -7	0 replies
175/377	pinctrl: meson: amlogic-a4: fix deadlock issue`drivers/pinctrl/meson/pinctrl-amlogic-a4.c`	+3 -3	0 replies
176/377	pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615`drivers/pinctrl/qcom/pinctrl-qcs615.c`	+3 -3	0 replies
177/377	HID: intel-thc-hid: Intel-quickspi: Fix some error codes`drivers/hid/intel-thc-hid/intel-quickspi/quickspi-protocol.c`	+2 -2	0 replies
178/377	HID: uclogic: Fix regression of input name assignment`drivers/hid/hid-uclogic-core.c`	+3 -1	0 replies
179/377	firmware: arm_ffa: Check for NULL FF-A ID table while driver registration`drivers/firmware/arm_ffa/bus.c`	+3 -1	0 replies
180/377	firmware: arm_ffa: Skip free_pages on RX buffer alloc failure`drivers/firmware/arm_ffa/driver.c`	+1 -1	0 replies
181/377	firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue`drivers/firmware/arm_ffa/driver.c`	+1 -1	0 replies
182/377	firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0`drivers/firmware/arm_ffa/driver.c`	+15 -0	0 replies
183/377	riscv: errata: Fix bitwise vs logical AND in MIPS errata patching`arch/riscv/errata/mips/errata.c`	+1 -1	0 replies
184/377	riscv: mm: Fixup no5lvl failure when vaddr is invalid`arch/riscv/mm/init.c`	+25 -0	0 replies
185/377	kunit: config: Enable KUNIT_DEBUGFS by default`lib/kunit/Kconfig`	+2 -2	0 replies
186/377	kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS`lib/kunit/Kconfig`	+1 -0	0 replies
187/377	pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150`drivers/pinctrl/qcom/pinctrl-sm8150.c`	+4 -4	0 replies
188/377	firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies`drivers/firmware/arm_ffa/driver.c`	+23 -6	0 replies
189/377	firmware: arm_ffa: Keep framework RX release under lock`drivers/firmware/arm_ffa/driver.c`	+13 ~~-16~~	0 replies
190/377	firmware: arm_ffa: Validate framework notification message layout`drivers/firmware/arm_ffa/driver.c`	+16 -2	0 replies
191/377	firmware: arm_ffa: Align RxTx buffer size before mapping`drivers/firmware/arm_ffa/driver.c`	+2 -1	0 replies
192/377	firmware: arm_ffa: Snapshot notifier callbacks under lock`drivers/firmware/arm_ffa/driver.c`	+23 ~~-12~~	0 replies
193/377	firmware: arm_ffa: Fix sched-recv callback partition lookup`drivers/firmware/arm_ffa/driver.c`	+3 -3	0 replies
194/377	ARM: integrator: Fix early initialization`arch/arm/mach-versatile/integrator_cp.c`	+4 -9	0 replies
195/377	ALSA: hda: cs35l56: Put ACPI device after setting companion`sound/hda/codecs/side-codecs/cs35l56_hda.c`	+1 -0	0 replies
196/377	ALSA: hda: cs35l41: Put ACPI device on missing physical node`sound/hda/codecs/side-codecs/cs35l41_hda.c`	+3 -1	0 replies
197/377	btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()`include/trace/events/btrfs.h`	+1 -3	0 replies
198/377	netfilter: x_tables: unregister the templates first`net/ipv4/netfilter/arptable_filter.c` `net/ipv4/netfilter/iptable_filter.c` `net/ipv4/netfilter/iptable_mangle.c` +6 more	+9 -9	0 replies
199/377	netfilter: x_tables: add and use xt_unregister_table_pre_exit`include/linux/netfilter/x_tables.h` `include/linux/netfilter_arp/arp_tables.h` `include/linux/netfilter_ipv4/ip_tables.h` +16 more	+41 ~~-39~~	0 replies
200/377	netfilter: x_tables: add and use xtables_unregister_table_exit`include/linux/netfilter/x_tables.h` `net/ipv4/netfilter/arp_tables.c` `net/ipv4/netfilter/ip_tables.c` +4 more	+83 ~~-37~~	0 replies
201/377	netfilter: ebtables: move to two-stage removal scheme`net/bridge/netfilter/ebtable_broute.c` `net/bridge/netfilter/ebtable_filter.c` `net/bridge/netfilter/ebtable_nat.c` +1 more	+40 ~~-26~~	0 replies
202/377	netfilter: ebtables: close dangling table module init race`net/bridge/netfilter/ebtable_broute.c` `net/bridge/netfilter/ebtable_filter.c` `net/bridge/netfilter/ebtable_nat.c`	+14 ~~-20~~	0 replies
203/377	netfilter: x_tables: close dangling table module init race`net/ipv4/netfilter/arptable_filter.c` `net/ipv4/netfilter/iptable_filter.c` `net/ipv4/netfilter/iptable_mangle.c` +6 more	+105 ~~-99~~	0 replies
204/377	netfilter: bridge: eb_tables: close module init race`net/bridge/netfilter/ebtables.c`	+6 -5	0 replies
205/377	kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist()`include/asm-generic/kprobes.h`	+1 -1	0 replies
206/377	test_kprobes: clear kprobes between test runs`lib/tests/test_kprobes.c`	+18 ~~-11~~	0 replies
207/377	tcp: Fix imbalanced icsk_accept_queue count.`net/ipv4/inet_connection_sock.c`	+1 -1	0 replies
208/377	net: napi: Avoid gro timer misfiring at end of busypoll`net/core/dev.c`	+12 -9	0 replies
209/377	net: shaper: Reject reparenting of existing nodes`net/shaper/shaper.c`	+23 -7	0 replies
210/377	idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()`drivers/net/ethernet/intel/idpf/idpf_ptp.c`	+2 -2	0 replies
211/377	ice: fix setting RSS VSI hash for E830`drivers/net/ethernet/intel/ice/ice_main.c`	+1 -1	0 replies
212/377	ice: fix locking in ice_dcb_rebuild()`drivers/net/ethernet/intel/ice/ice_dcb_lib.c`	+2 -2	0 replies
213/377	net: lan966x: avoid unregistering netdev on register failure`drivers/net/ethernet/microchip/lan966x/lan966x_main.c`	+5 -3	0 replies
214/377	net: ti: icssm-prueth: fix eth_ports_node leak in probe`drivers/net/ethernet/ti/icssm/icssm_prueth.c`	+1 -0	0 replies
215/377	phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access`drivers/phy/marvell/phy-mvebu-a3700-utmi.c`	+2 -3	0 replies
216/377	NFSD: Fix infinite loop in layout state revocation`fs/nfsd/nfs4state.c`	+7 -0	0 replies
217/377	ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC`sound/soc/sdw_utils/soc_sdw_utils.c`	+2 -0	0 replies
218/377	ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC`sound/soc/sdw_utils/soc_sdw_utils.c`	+2 -0	0 replies
219/377	fprobe: Fix unregister_fprobe() to wait for RCU grace period`include/linux/fprobe.h` `kernel/trace/bpf_trace.c` `kernel/trace/fprobe.c`	+28 -3	0 replies
220/377	fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap`fs/mnt_idmapping.c`	+2 -0	0 replies
221/377	fs: Fix return in jfs_mkdir and orangefs_mkdir`fs/jfs/namei.c` `fs/orangefs/namei.c`	+2 -2	0 replies
222/377	irqchip/ath79-cpu: Remove unused function`drivers/irqchip/irq-ath79-cpu.c`	+0 -7	0 replies
223/377	ublk: reject max_sectors smaller than PAGE_SECTORS in parameter validation`drivers/block/ublk_drv.c`	+3 -0	0 replies
224/377	nsfs: fix wrong error code returned for pidns ioctls`fs/nsfs.c`	+1 -1	0 replies
225/377	irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT`kernel/irq_work.c`	+7 -0	0 replies
226/377	nvme: fix bio leak on mapping failure`drivers/nvme/host/ioctl.c`	+2 -3	0 replies
227/377	nvme-pci: fix use-after-free in nvme_free_host_mem()`drivers/nvme/host/pci.c`	+4 -2	0 replies
228/377	zonefs: handle integer overflow in zonefs_fname_to_fno`fs/zonefs/super.c`	+5 -1	0 replies
229/377	tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().`net/ipv4/tcp_ao.c`	+2 -1	0 replies
230/377	ASoC: SOF: amd: Fix error code handling in psp_send_cmd()`sound/soc/sof/amd/acp.c`	+1 -1	0 replies
231/377	powerpc: 82xx: fix uninitialized pointers with free attribute`arch/powerpc/platforms/82xx/km82xx.c`	+2 -2	0 replies
232/377	powerpc: fix dead default for GUEST_STATE_BUFFER_TEST`arch/powerpc/Kconfig.debug`	+1 -2	0 replies
233/377	netfs: Fix cancellation of a DIO and single read subrequests`fs/netfs/buffered_read.c` `fs/netfs/direct_read.c` `fs/netfs/internal.h` +2 more	+50 ~~-63~~	0 replies
234/377	netfs: Fix netfs_read_to_pagecache() to pause on subreq failure`fs/netfs/buffered_read.c`	+5 -0	0 replies
235/377	netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call`fs/netfs/read_retry.c`	+9 -2	0 replies
236/377	netfs: Fix overrun check in netfs_extract_user_iter()`fs/netfs/iterator.c`	+17 -9	0 replies
237/377	netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone`fs/netfs/misc.c` `include/trace/events/netfs.h`	+9 -1	0 replies
238/377	netfs: Defer the emission of trace_netfs_folio()`fs/netfs/buffered_write.c`	+10 -8	0 replies
239/377	netfs: Fix streaming write being overwritten`fs/netfs/buffered_write.c` `include/trace/events/netfs.h`	+37 ~~-13~~	0 replies
240/377	netfs: Fix potential deadlock in write-through mode`fs/netfs/write_issue.c`	+25 ~~-14~~	0 replies
241/377	netfs: Fix read-gaps to remove netfs_folio from filled folio`fs/netfs/buffered_read.c`	+8 -3	0 replies
242/377	netfs: Fix write streaming disablement if fd open O_RDWR`fs/netfs/buffered_write.c`	+7 ~~-10~~	0 replies
243/377	netfs: Fix early put of sink folio in netfs_read_gaps()`fs/netfs/buffered_read.c`	+3 -3	0 replies
244/377	netfs: Fix leak of request in netfs_write_begin() error handling`fs/netfs/buffered_read.c`	+1 -1	0 replies
245/377	netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()`fs/netfs/buffered_read.c` `fs/netfs/read_collect.c` `fs/netfs/read_retry.c` +1 more	+5 -5	0 replies
246/377	netfs: Fix partial invalidation of streaming-write folio`fs/netfs/misc.c`	+1 -1	0 replies
247/377	netfs: Fix folio->private handling in netfs_perform_write()`fs/netfs/buffered_write.c` `include/trace/events/netfs.h`	+82 ~~-53~~	0 replies
248/377	netfs: Fix netfs_read_folio() to wait on writeback`fs/netfs/buffered_read.c`	+2 -0	0 replies
249/377	netfs, afs: Fix write skipping in dir/link writepages`fs/afs/dir.c` `fs/netfs/write_issue.c`	+16 -2	0 replies
250/377	net: ethernet: cortina: Make RX SKB per-port`drivers/net/ethernet/cortina/gemini.c`	+6 -1	0 replies
251/377	net: ethernet: cortina: Drop half-assembled SKB`drivers/net/ethernet/cortina/gemini.c`	+5 -0	0 replies
252/377	net: ethernet: cortina: Carry over frag counter`drivers/net/ethernet/cortina/gemini.c`	+8 -1	0 replies
253/377	net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference`drivers/net/ethernet/cirrus/cs89x0.c`	+0 -2	0 replies
254/377	wifi: ath11k: fix error path leaks in some WMI WOW calls`drivers/net/wireless/ath/ath11k/wmi.c`	+16 -3	0 replies
255/377	wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()`drivers/net/wireless/ath/ath11k/testmode.c`	+1 -0	0 replies
256/377	wifi: ath10k: skip WMI and beacon transmission when device is wedged`drivers/net/wireless/ath/ath10k/wmi.c`	+7 -8	0 replies
257/377	net: shaper: flip the polarity of the valid flag`net/shaper/shaper.c`	+17 ~~-17~~	0 replies
258/377	net: shaper: fix trivial ordering issue in net_shaper_commit()`net/shaper/shaper.c`	+10 -1	0 replies
259/377	net: shaper: reject duplicate leaves in GROUP request`net/shaper/shaper.c`	+45 ~~-15~~	0 replies
260/377	net: shaper: set ret to -ENOMEM when genlmsg_new() fails in group_doit`net/shaper/shaper.c`	+3 -1	0 replies
261/377	net: shaper: fix undersized reply skb allocation in GROUP command`net/shaper/shaper.c`	+8 -2	0 replies
262/377	net: shaper: reject handle IDs exceeding internal bit-width`Documentation/netlink/specs/net_shaper.yaml` `net/shaper/shaper.c` `net/shaper/shaper_nl_gen.c` +1 more	+18 -2	0 replies
263/377	net: shaper: enforce singleton NETDEV scope with id 0`net/shaper/shaper.c`	+6 -0	0 replies
264/377	net: shaper: reject QUEUE scope handle with missing id`net/shaper/shaper.c`	+7 -2	0 replies
265/377	block: dont overwrite bip_vcnt in bio_integrity_copy_user()`block/bio-integrity.c`	+0 -1	0 replies
266/377	block: recompute nr_integrity_segments in blk_insert_cloned_request`block/blk-mq.c`	+19 -0	0 replies
267/377	HID: quirks: really enable the intended work around for appledisplay`drivers/hid/hid-quirks.c`	+1 -1	0 replies
268/377	block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()`block/bio-integrity.c`	+18 -0	0 replies
269/377	accel/qaic: Add overflow check to remap_pfn_range during mmap`drivers/accel/qaic/qaic_data.c`	+21 -2	0 replies
270/377	net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint`net/smc/smc_tracepoint.h`	+1 -1	0 replies
271/377	ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics`net/ethtool/bitset.c`	+4 -4	0 replies
272/377	drm/msm/dsi: dont dump registers past the mapped region`drivers/gpu/drm/msm/dsi/dsi_host.c`	+1 -0	0 replies
273/377	drm/msm/dpu: dont mix devm and drmm functions`drivers/gpu/drm/msm/disp/dpu1/dpu_writeback.c`	+2 -1	0 replies
274/377	selftests: ublk: cap nthreads to kernels actual nr_hw_queues`tools/testing/selftests/ublk/kublk.c`	+11 -0	0 replies
275/377	x86/mce: Restore MCA polling interval halving`arch/x86/kernel/cpu/mce/core.c`	+5 ~~-28~~	0 replies
276/377	Documentation: intel_pstate: Fix description of asymmetric packing with SMT`Documentation/admin-guide/pm/intel_pstate.rst`	+6 -5	0 replies
277/377	drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx`drivers/gpu/drm/msm/adreno/adreno_gpu.c`	+6 -0	0 replies
278/377	drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN`drivers/gpu/drm/msm/msm_iommu.c`	+3 -2	0 replies
279/377	powerpc/time: Remove redundant preempt_disable\|enable() calls from arch_irq_work_raise()`arch/powerpc/kernel/time.c`	+4 -2	0 replies
280/377	net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot`net/smc/af_smc.c`	+2 -1	0 replies
281/377	net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring`net/tls/tls_sw.c`	+2 -4	0 replies
282/377	net: tls: prevent chain-after-chain in plain text SG`net/tls/tls_sw.c`	+18 -6	0 replies
283/377	net: phy: DP83TC811: add reading of abilities`drivers/net/phy/dp83tc811.c`	+1 -0	0 replies
284/377	ovpn: tcp - use cached peer pointer in ovpn_tcp_close()`drivers/net/ovpn/tcp.c`	+7 -2	0 replies
285/377	ovpn: respect peer refcount in CMD_NEW_PEER error path`drivers/net/ovpn/netlink.c` `drivers/net/ovpn/peer.c` `drivers/net/ovpn/peer.h`	+6 -5	0 replies
286/377	ovpn: fix race between deleting interface and adding new peer`drivers/net/ovpn/main.c` `drivers/net/ovpn/peer.c`	+20 ~~-13~~	0 replies
287/377	gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE`scripts/gcc-plugins/gcc-common.h`	+3 -1	0 replies
288/377	x86/xen: Fix xen_e820_swap_entry_with_ram()`arch/x86/xen/setup.c`	+1 -1	0 replies
289/377	ovpn: disable BHs when updating device stats`drivers/net/ovpn/io.c` `drivers/net/ovpn/stats.h` `drivers/net/ovpn/tcp.c` +1 more	+28 ~~-12~~	0 replies
290/377	tls: Preserve sk_err across recvmsg() when data has been copied`net/tls/tls_sw.c`	+14 -6	0 replies
291/377	net/mlx5: Do not restore destination-less TC rules`drivers/net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c`	+2 -1	0 replies
292/377	scsi: sd: Fix return code handling in sd_spinup_disk()`drivers/scsi/sd.c`	+1 -2	0 replies
293/377	ASoC: codecs: fs210x: fix possible buffer overflow`sound/soc/codecs/fs210x.c`	+1 -1	0 replies
294/377	ALSA: scarlett2: Add missing error check when initialise Autogain Status`sound/usb/mixer_scarlett2.c`	+2 -0	0 replies
295/377	io_uring/net: punt IORING_OP_BIND async if it needs file create`io_uring/net.c`	+25 -1	0 replies
296/377	vsock/virtio: fix zerocopy completion for multi-skb sends`net/vmw_vsock/virtio_transport_common.c`	+34 ~~-49~~	0 replies
297/377	btrfs: add macros to facilitate printing of keys`fs/btrfs/fs.h`	+3 -0	0 replies
298/377	btrfs: use the key format macros when printing keys`fs/btrfs/backref.c` `fs/btrfs/ctree.c` `fs/btrfs/extent-tree.c` +8 more	+64 ~~-79~~	0 replies
299/377	btrfs: dont search back for dir inode item in INO_LOOKUP_USER`fs/btrfs/ioctl.c`	+3 ~~-20~~	3 replies
300/377	btrfs: remaining BTRFS_PATH_AUTO_FREE conversions`fs/btrfs/block-group.c` `fs/btrfs/dir-item.c` `fs/btrfs/extent-tree.c` +9 more	+105 ~~-176~~	0 replies
301/377	btrfs: check squota parent usage on membership change`fs/btrfs/qgroup.c`	+39 -0	0 replies
302/377	btrfs: relax squota parent qgroup deletion rule`fs/btrfs/qgroup.c`	+35 ~~-15~~	0 replies
303/377	btrfs: check for subvolume before deleting squota qgroup`fs/btrfs/qgroup.c`	+25 ~~-25~~	0 replies
304/377	btrfs: fix squota accounting during enable generation`fs/btrfs/fs.h` `fs/btrfs/qgroup.c`	+28 -4	0 replies
305/377	ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging`sound/soc/amd/acp/acp-sdw-legacy-mach.c`	+1 -1	0 replies
306/377	spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()`drivers/spi/spi-mtk-snfi.c`	+1 -1	0 replies
307/377	netfilter: nft_inner: release local_lock before re-enabling softirqs`net/netfilter/nft_inner.c`	+1 -1	0 replies
308/377	ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5`sound/hda/codecs/realtek/alc269.c`	+6 -6	0 replies
309/377	drm/msm/snapshot: fix dumping of the unaligned regions`drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c`	+18 -6	0 replies
310/377	hwmon: (lm90) Stop work before releasing hwmon device`drivers/hwmon/lm90.c`	+20 -4	0 replies
311/377	hwmon: (lm90) Add lock protection to lm90_alert`drivers/hwmon/lm90.c`	+2 -0	0 replies
312/377	wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled`drivers/net/wireless/intel/iwlwifi/mld/tx.c`	+4 -1	0 replies
313/377	wifi: iwlwifi: mld: dont dereference a pointer before NULL checking it`drivers/net/wireless/intel/iwlwifi/mld/link.c`	+6 -7	0 replies
314/377	dma-mapping: move dma_map_resource() sanity check into debug code`kernel/dma/debug.c` `kernel/dma/mapping.c`	+8 -5	0 replies
315/377	drm/xe/gsc: Fix double-free of managed BO in error path`drivers/gpu/drm/xe/xe_gsc.c`	+1 -4	0 replies
316/377	drm/xe/vf: Fix signature of print functions`drivers/gpu/drm/xe/xe_gt_sriov_vf.c` `drivers/gpu/drm/xe/xe_gt_sriov_vf.h`	+21 -9	0 replies
317/377	drm/xe/pf: Fix CFI failure in debugfs access`drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.c` `drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.h`	+6 -2	0 replies
318/377	wifi: ath11k: fix peer resolution on rx path when peer_id=0`drivers/net/wireless/ath/ath11k/dp_rx.c` `drivers/net/wireless/ath/ath11k/hal_rx.c`	+2 -6	0 replies
319/377	drm/mediatek: mtk_cec: Fix non-static global variable`drivers/gpu/drm/mediatek/mtk_cec.c`	+1 -1	0 replies
320/377	drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable`drivers/gpu/drm/mediatek/mtk_hdmi_ddc.c`	+1 -1	0 replies
321/377	cgroup/rstat: validate cpu before css_rstat_cpu() access`block/blk-cgroup.c` `include/linux/cgroup.h` `kernel/cgroup/rstat.c` +1 more	+25 ~~-14~~	0 replies
322/377	ice: ptp: serialize E825 PHY timer start with PTP lock`drivers/net/ethernet/intel/ice/ice_ptp_hw.c`	+13 -2	0 replies
323/377	ice: ptp: use primary NAC semaphore on E825`drivers/net/ethernet/intel/ice/ice_ptp_hw.c`	+9 -0	0 replies
324/377	igc: set tx buffer type for SMD frames`drivers/net/ethernet/intel/igc/igc_tsn.c`	+1 -0	0 replies
325/377	drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP`drivers/gpu/drm/i915/display/intel_dp.c`	+1 -1	0 replies
326/377	kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme`scripts/package/PKGBUILD`	+1 -1	0 replies
327/377	net: dsa: mt7530: fix FDB entries not aging out with short timeout`drivers/net/dsa/mt7530.c`	+14 -6	0 replies
328/377	net: dsa: mt7530: preserve VLAN tags on trapped link-local frames`drivers/net/dsa/mt7530.c`	+15 ~~-12~~	0 replies
329/377	net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer`drivers/net/ethernet/microsoft/mana/hw_channel.c`	+13 ~~-10~~	0 replies
330/377	platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7`drivers/platform/surface/surface_aggregator_registry.c`	+0 -2	0 replies
331/377	platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL`drivers/platform/x86/adv_swbutton.c`	+5 -1	0 replies
332/377	platform/x86: hp_accel: Check ACPI_COMPANION() against NULL`drivers/platform/x86/hp/hp_accel.c`	+3 -0	0 replies
333/377	platform/x86: intel-hid: Check ACPI_HANDLE() against NULL`drivers/platform/x86/intel/hid.c`	+5 -1	0 replies
334/377	platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL`drivers/platform/x86/intel/vbtn.c`	+5 -1	0 replies
335/377	ASoC: soc-utils: Add missing va_end in snd_soc_ret()`sound/soc/soc-utils.c`	+1 -0	0 replies
336/377	RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port`drivers/infiniband/hw/mana/main.c`	+1 -0	0 replies
337/377	RDMA/rtrs: Fix use-after-free in path file creation cleanup`drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c`	+1 -1	0 replies
338/377	net: bridge: Flush multicast groups when snooping is disabled`net/bridge/br_multicast.c`	+9 -0	0 replies
339/377	bridge: mcast: Fix a possible use-after-free when removing a bridge port`net/bridge/br_multicast.c`	+17 -5	0 replies
340/377	net: phy: honor eee_disabled_modes in phy_support_eee()`drivers/net/phy/phy_device.c`	+2 -1	0 replies
341/377	net: phy: honor eee_disabled_modes in phy_advertise_eee_all()`drivers/net/phy/phy_device.c`	+2 -1	0 replies
342/377	net: airoha: Fix NPU RX DMA descriptor bits`include/linux/soc/airoha/airoha_offload.h`	+3 -3	0 replies
343/377	pds_core: fix error handling in pdsc_devcmd_wait`drivers/net/ethernet/amd/pds_core/dev.c`	+9 -2	0 replies
344/377	pds_core: fix debugfs_lookup dentry leak and error handling`drivers/net/ethernet/amd/pds_core/debugfs.c`	+6 -1	0 replies
345/377	erofs: fix managed cache race for unaligned extents`fs/erofs/zdata.c`	+8 -7	0 replies
346/377	wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs`net/mac80211/mlme.c`	+3 -0	0 replies
347/377	wifi: mac80211: fix MLE defragmentation`net/mac80211/parse.c`	+31 ~~-40~~	0 replies
348/377	wifi: wilc1000: fix dma_buffer leak on bus acquire failure`drivers/net/wireless/microchip/wilc1000/wlan.c`	+1 -1	0 replies
349/377	ALSA: seq: Serialize UMP output teardown with event_input`sound/core/seq/seq_ump_client.c`	+18 -4	0 replies
350/377	cgroup: rstat: relax NMI guard after switch to try_cmpxchg`kernel/cgroup/rstat.c`	+3 -4	0 replies
351/377	tracing: Avoid NULL return from hist_field_name() on truncation`kernel/trace/trace_events_hist.c`	+2 -4	0 replies
352/377	Bluetooth: btintel_pcie: Fix incorrect MAC access programming`drivers/bluetooth/btintel_pcie.c` `drivers/bluetooth/btintel_pcie.h`	+6 ~~-17~~	0 replies
353/377	Bluetooth: btmtk: fix urb->setup_packet leak in error paths`drivers/bluetooth/btmtk.c`	+2 -0	0 replies
354/377	net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA`drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c`	+4 -3	0 replies
355/377	net: shaper: annotate the data races`net/shaper/shaper.c`	+38 ~~-15~~	0 replies
356/377	net: shaper: rework the VALID marking (again)`include/net/net_shaper.h` `net/shaper/shaper.c`	+19 ~~-27~~	0 replies
357/377	crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks`Documentation/crypto/krb5.rst` `crypto/krb5/krb5_api.c` `include/crypto/krb5.h` +2 more	+81 ~~-15~~	0 replies
358/377	net: ag71xx: check error for platform_get_irq`drivers/net/ethernet/atheros/ag71xx.c`	+3 -0	0 replies
359/377	bpf, skmsg: fix verdict sk_data_ready racing with ktls rx`net/core/skmsg.c`	+7 -2	0 replies
360/377	tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction`include/net/tcp.h` `net/ipv4/tcp.c` `net/ipv4/tcp_input.c` +2 more	+14 ~~-17~~	0 replies
361/377	gpio: cdev: check if uAPI v2 config attributes are correctly zeroed`drivers/gpio/gpiolib-cdev.c`	+13 -0	0 replies
362/377	gpio: aggregator: fix a potential use-after-free`drivers/gpio/gpio-aggregator.c`	+1 -1	0 replies
363/377	gpio: aggregator: stop using dev-sync-probe`drivers/gpio/Kconfig` `drivers/gpio/gpio-aggregator.c`	+21 ~~-18~~	0 replies
364/377	gpio: aggregator: remove the software node when deactivating the aggregator`drivers/gpio/gpio-aggregator.c`	+4 -0	0 replies
365/377	gpio: aggregator: lock device when calling device_is_bound()`drivers/gpio/gpio-aggregator.c`	+6 -3	0 replies
366/377	ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()`sound/soc/codecs/cs35l56-sdw.c`	+2 -1	0 replies
367/377	drm/xe/oa: Fix exec_queue leak on width check in stream open`drivers/gpu/drm/xe/xe_oa.c`	+4 -2	0 replies
368/377	selftests: net: Fix checksums in xdp_native`tools/testing/selftests/net/lib/xdp_native.bpf.c`	+30 ~~-25~~	0 replies
369/377	octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs`drivers/net/ethernet/marvell/octeontx2/af/rvu_npc.c`	+1 -1	0 replies
370/377	net: mana: validate rx_req_idx to prevent out-of-bounds array access`drivers/net/ethernet/microsoft/mana/hw_channel.c`	+6 -0	0 replies
371/377	tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR`drivers/net/tap.c`	+1 -1	0 replies
372/377	net: airoha: Disable GDM2 forwarding before configuring GDM2 loopback`drivers/net/ethernet/airoha/airoha_eth.c`	+6 -4	0 replies
373/377	pds_core: ensure null-termination for firmware version strings`drivers/net/ethernet/amd/pds_core/devlink.c`	+4 -2	0 replies
374/377	net: gro: dont merge zcopy skbs`net/core/gro.c`	+3 -0	0 replies
375/377	io_uring/nop: pass all errors to userspace`io_uring/nop.c`	+2 -2	0 replies
376/377	ksmbd: fix durable reconnect error path file lifetime`fs/smb/server/smb2pdu.c`	+13 -2	0 replies
377/377	LoongArch: kprobes: Fix handling of fatal unrecoverable recursions`arch/loongarch/kernel/kprobes.c`	+2 -2	0 replies

Reviews trailers per patch

197 of 377 patches have a Reviewed-by or Acked-by.

Patch	Matt Roper	Shuicheng Lin	Namjae Jeon	David Howells	Florian Fainelli	Conor Dooley	Tommy Kelly	Damien Le Moal	Louis Chauvet	Javier Martinez Canillas	Michael Kelley	Ville Syrjälä	Rafael J. Wysocki (Intel)	Danilo Krummrich	Alison Schofield	Dave Jiang	Juri Lelli	Tejun Heo	Vincent Guittot	Nikolay Aleksandrov	Ido Schimmel	Miaohe Lin	Oscar Salvador	David Hildenbrand (Arm)	Balbir Singh	Hugh Dickins	Lance Yang	Bibo Mao	Baolin Wang	Lorenzo Stoakes	Catalin Marinas	Mike Rapoport (Microsoft)	SeongJae Park	Siwei Zhang	Steve French	Jann Horn	Rémi Denis-Courmont	Eric Dumazet	Nicolai Buchwitz	Cosmin Ratiu	Tariq Toukan	Oleksij Rempel	Fernando Fernandez Mancera	Andrea Righi	Menglong Dong	Shyam Prasad N	Geert Uytterhoeven	Matthieu Baerts (NGI0)	Bryan Tan	Jacob Keller	Michal Swiatkowski	Paul Menzel	Rafal Romanowski	Rameshkumar Sundaram	Baochen Qiang	Simon Horman	Viacheslav Dubeyko	Casey Schaufler	Geetha sowjanya	Faizal Rahim	Avigail Dahan	Rinitha S	Aleksandr Loktionov	Alexander Nowlin	Chen Ridong	Waiman Long	Kuniyuki Iwashima	Yuan Yao	Anup Patel	Maxime Chevallier	Masami Hiramatsu (Google)	Luca Ceresoli	Bernard Metzler	Guo Ren	Andy Shevchenko	Sakari Ailus	Iago Toral Quiroga	Mario Limonciello (AMD)	Ian Ray	Alex Hung	Dan Wheeler	Yuan Tan	Linus Lüssing	Kaustabh Chakraborty	Krzysztof Kozlowski	Ren Wei	Simon Wunderlich	Jon Hunter	Abel Vesa	Konrad Dybcio	Manivannan Sadhasivam	Nikita Shubin	Bartosz Golaszewski	Linus Walleij	Dmitry Baryshkov	Neil Armstrong	Even Xu	Mark Pearson	Fangyu Yu	Sebastian Ene	Tristan Madani	Joe Damato	Madhu Chittim	Samuel Salin	Przemek Kitszel	Arpana Arland	Miquel Raynal	Jeff Layton	Dai Ngo	Jori Koolstra	Yang Erkun	Sebastian Andrzej Siewior	Sagi Grimberg	John Garry	Christoph Hellwig	Simon Trimmer	Boris Burkov	David Sterba	Paulo Alcantara (Red Hat)	Christophe Leroy (CS GROUP)	Alexander Lobakin	Gautam Menghani	Amit Machhiwal	Harsh Prateek Bora	Chao Shi	Weidong Zhu	Dave Tian	Shin'ichiro Kawasaki	Dust Li	Sidraya Jayagond	Shrikanth Hegde	Ritesh Harjani (IBM)	Sabrina Dubroca	Andrew Lunn	Ivan Bulatovic	Christopher Cradock	Jan Beulich	Jianbo Liu	Bart Van Assche	Gabriel Krisman Bertazi	Michael S. Tsirkin	Arseniy Krasnov	Qu Wenruo	Johannes Thumshirn	[email protected]	Qiuxu Zhuo	Rob Clark	Karol Wachowski	Jeff Hugo	CK Hu	Arkadiusz Kubalewski	Thomas Weißschuh	Nathan Chancellor	Chester A. Unal	Ilpo Järvinen	Long Li	Lorenzo Bianconi	Miriam Rachel Korenblit	Ilan Peer	Johannes Berg	Robin Murphy	Leon Romanovsky	Daniele Ceraolo Spurio	Michal Wajdeczko	P Praneesh	Kent Gibson	Ashutosh Dixit	Carolina Jubran	Dragos Tatulea	Haiyang Zhang	Willem de Bruijn	Madhur Agrawal	Jeffrey Altman	Marc Dionne	Ron Economos	Miguel Ojeda	Brett A C Sheffield	Pavel Machek (CIP)	Peter Schneider	Wentao Guan	Mark Brown
Series					T-b																																																																																																																																																																										T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/377	R-b	R-b
2/377
3/377
4/377
5/377															R-b	R-b
6/377																	R-b	A-b	A-b
7/377
8/377																				A-b	R-b
9/377
10/377			A-b
11/377				R-b
12/377					R-b	A-b
13/377
14/377					R-b
15/377							T-b	R-b
16/377							T-b	R-b
17/377							T-b	R-b
18/377							T-b	R-b
19/377
20/377
21/377									T-b R-b	R-b	T-b
22/377										R-b	T-b
23/377									T-b R-b	R-b
24/377												R-b
25/377									R-b
26/377													R-b	R-b
27/377
28/377			A-b
29/377			A-b
30/377
31/377
32/377
33/377																																														R-b
34/377				A-b
35/377			A-b																																T-b
36/377
37/377
38/377
39/377
40/377
41/377													R-b
42/377
43/377
44/377																						R-b	A-b	A-b
45/377																					R-b
46/377																									R-b
47/377																							R-b			Debugged-by	R-b	T-b	R-b	R-b
48/377																							A-b	A-b
49/377																											T-b				R-b
50/377																																R-b	R-b
51/377
52/377																																		R-b
53/377
54/377
55/377
56/377
57/377
58/377																																				R-b
59/377																																					A-b	R-b
60/377					R-b
61/377																																							R-b T-b
62/377																																								R-b	R-b
63/377
64/377																																										A-b
65/377
66/377
67/377
68/377																																											R-b
69/377																																												R-b
70/377
71/377																																													A-b
72/377
73/377
74/377
75/377																																																																	R-b	R-b
76/377																																																																						R-b
77/377																																																																						R-b T-b
78/377
79/377
80/377
81/377																																																																							A-b
82/377																															A-b																A-b
83/377																					R-b
84/377																																																R-b
85/377																																																	A-b
86/377
87/377																																																		R-b	R-b	R-b	T-b
88/377																																																						R-b	R-b
89/377
90/377
91/377
92/377																																																					T-b			R-b
93/377																																																									R-b
94/377																																																										A-b
95/377
96/377																																																											R-b
97/377																																																								R-b				R-b	T-b
98/377																																																								R-b						T-b
99/377																																																								R-b						T-b
100/377																																																								R-b							R-b	T-b
101/377
102/377																																																																			R-b
103/377
104/377																																														R-b
105/377
106/377
107/377
108/377																																																																				R-b
109/377
110/377																																																																					R-b
111/377																																																																					R-b
112/377
113/377																																																																								R-b
114/377
115/377																																																																																				T-b	R-b
116/377																																																																																								R-b T-b
117/377																																																																																									R-b	R-b	R-b
118/377
119/377																																																																																												A-b
120/377
121/377
122/377																																																																									A-b
123/377																R-b
124/377
125/377																																																																										R-b
126/377													R-b																																																														R-b	R-b
127/377
128/377																																																																													R-b
129/377																																																																													R-b
130/377
131/377																																																																														R-b
132/377										R-b T-b
133/377																																																																								R-b							T-b
134/377																																																																																R-b	T-b
135/377																																																																																R-b	T-b
136/377																																																																																R-b	T-b
137/377																																																																																		R-b
138/377
139/377																																																																																		R-b
140/377
141/377																																																																																			A-b
142/377
143/377																																																																																		R-b
144/377																																																																																						T-b
145/377
146/377																																																																																		R-b
147/377																																																																																							R-b
148/377
149/377
150/377																																																																																		R-b
151/377
152/377
153/377
154/377
155/377
156/377
157/377
158/377
159/377
160/377
161/377
162/377
163/377
164/377
165/377																																																																																													R-b	R-b
166/377																																																																																													R-b	R-b
167/377																																																																																													R-b
168/377
169/377																																																																																													R-b
170/377																																																																																															R-b
171/377																																															R-b
172/377																																															R-b
173/377																																															R-b
174/377																																															R-b
175/377																																																																																																R-b
176/377																																																																																										R-b
177/377																																																																																																	R-b	R-b
178/377
179/377
180/377
181/377
182/377
183/377
184/377																																																																																																			T-b
185/377
186/377
187/377																																																																																										R-b
188/377
189/377
190/377
191/377																																																																																																				R-b
192/377
193/377
194/377
195/377																																																																																																																				T-b
196/377																																																																																																																				T-b
197/377																																																																																																																					R-b	R-b
198/377																																																																																																					R-b
199/377																																																																																																					R-b
200/377																																																																																																					R-b
201/377																																																																																																					R-b
202/377																																																																																																					R-b
203/377
204/377
205/377
206/377
207/377
208/377																																								R-b	R-b																																																													R-b
209/377
210/377																																																								R-b							R-b																																								R-b	T-b
211/377																																																															R-b																																										R-b
212/377																																																															R-b																																										R-b	T-b
213/377
214/377
215/377																																																																																																											R-b
216/377																																																																																																												R-b	T-b
217/377
218/377
219/377
220/377
221/377																																																																																																														R-b
222/377
223/377
224/377																																																																																																															R-b
225/377																																																																																																																R-b
226/377																																																																																																																	R-b	R-b	R-b
227/377
228/377
229/377																																						R-b
230/377
231/377																																																																																					R-b																																			R-b
232/377																																																																																																																										T-b	R-b	R-b
233/377
234/377
235/377																																																																																																																							R-b
236/377
237/377
238/377
239/377
240/377
241/377
242/377
243/377																																																																																																																							R-b
244/377
245/377
246/377
247/377
248/377
249/377
250/377
251/377																																																																																																																									R-b
252/377
253/377
254/377																																																						R-b	R-b
255/377																																																						R-b	R-b
256/377																																																						R-b	R-b
257/377
258/377
259/377
260/377
261/377
262/377
263/377
264/377
265/377																																																																																																																			R-b
266/377																																																																																																																			R-b
267/377
268/377																																																																																																																													A-b	A-b	A-b	T-b
269/377																																																																																																																																																				R-b	R-b
270/377																																																																																																																																	R-b	R-b
271/377
272/377																																																																																										R-b
273/377																																																																																																																																																	R-b
274/377
275/377																																																																																																																																																		R-b T-b
276/377
277/377																																																																																																																																																			R-b
278/377
279/377																																																																																																																																			A-b	R-b
280/377
281/377																																																																																																																																					R-b
282/377
283/377																																																																																																																																						R-b
284/377																																																																																																																																					R-b
285/377																																																																																																																																					R-b
286/377																																																																																																																																					R-b
287/377																																																																																																																																							T-b	T-b
288/377																																																																																																																																									R-b
289/377
290/377
291/377																																								R-b																																																																																																		R-b
292/377																																																																																																																																											R-b
293/377
294/377
295/377																																																																																																																																												R-b
296/377																																																																																																																																													A-b	A-b
297/377																																																																																																																						R-b																									R-b
298/377																																																																																																																						R-b																									R-b
299/377																																																																																																																						R-b																										R-b
300/377
301/377																																																																																																																																															R-b
302/377																																																																																																																																															R-b
303/377																																																																																																																						R-b																									R-b
304/377																																																																																																																						R-b																									R-b
305/377
306/377
307/377																																											R-b
308/377
309/377
310/377
311/377
312/377
313/377																																																																																																																																																																R-b
314/377																																																																																																																																																																	R-b	R-b
315/377																																																																																																																																																																			R-b
316/377		R-b
317/377																																																																																																																																																																				R-b
318/377																																																							R-b																																																																																																														R-b
319/377																																																																																																																																																						R-b
320/377																																																																																																																																																						R-b
321/377
322/377																																																															R-b	T-b																																																																																							R-b
323/377																																																															R-b	T-b																																																																																							R-b
324/377																																																								R-b					T-b		R-b
325/377												R-b
326/377																																																																																																																																																								A-b	R-b T-b
327/377
328/377																																																																																																																																																										A-b
329/377
330/377																																																																																																																																																											R-b
331/377																																																																											R-b																																																																																R-b
332/377																																																																											R-b																																																																																R-b
333/377																																																																											R-b																																																																																R-b
334/377																																																																											R-b																																																																																R-b
335/377
336/377																																																																																																																																																												R-b
337/377
338/377																				A-b	R-b
339/377																				A-b
340/377																																																																																																																																						R-b
341/377																																																																																																																																						R-b
342/377																																																																																																																																																													A-b
343/377
344/377
345/377																																																																																																																																														T-b
346/377
347/377																																																																																																																																																														R-b	R-b
348/377																																																								R-b
349/377
350/377
351/377
352/377
353/377
354/377																																									R-b															R-b
355/377																																																								R-b
356/377																																																								R-b
357/377																																																																																																																																																																													R-b	T-b
358/377																																										R-b
359/377
360/377																																																																			R-b
361/377																																																																																																																																																																						R-b
362/377																																															R-b
363/377																																																																																														R-b
364/377
365/377
366/377
367/377																																																																																																																																																																							R-b
368/377																																																																																																																																																																								R-b	R-b
369/377
370/377																																																																																																																																																																										R-b
371/377																																																																																																																																																																											R-b
372/377																																																																																																																																																																												T-b
373/377
374/377																																																																																																																																																																											R-b
375/377
376/377			A-b
377/377

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 181 reviewers.

Read the v1 thread

Cover letter [PATCH 6.18 000/377] 6.18.34-rc1 review

This is the start of the stable review cycle for the 6.18.34 release. There are 377 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 30 May 2026 19:45:50 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.34-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.18.34-rc1

Tiezhu Yang <[email protected]>
LoongArch: kprobes: Fix handling of fatal unrecoverable recursions

Junyi Liu <[email protected]>
ksmbd: fix durable reconnect error path file lifetime

Alexander A. Klimov <[email protected]>
io_uring/nop: pass all errors to userspace

Sabrina Dubroca <[email protected]>
net: gro: don't merge zcopy skbs

Nikhil P. Rao <[email protected]>
pds_core: ensure null-termination for firmware version strings

Lorenzo Bianconi <[email protected]>
net: airoha: Disable GDM2 forwarding before configuring GDM2 loopback

Weiming Shi <[email protected]>
tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR

Aditya Garg <[email protected]>
net: mana: validate rx_req_idx to prevent out-of-bounds array access

Ratheesh Kannoth <[email protected]>
octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs

Nimrod Oren <[email protected]>
selftests: net: Fix checksums in xdp_native

Shuicheng Lin <[email protected]>
drm/xe/oa: Fix exec_queue leak on width check in stream open

Richard Fitzgerald <[email protected]>
ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()

Bartosz Golaszewski <[email protected]>
gpio: aggregator: lock device when calling device_is_bound()

Bartosz Golaszewski <[email protected]>
gpio: aggregator: remove the software node when deactivating the aggregator

Bartosz Golaszewski <[email protected]>
gpio: aggregator: stop using dev-sync-probe

Bartosz Golaszewski <[email protected]>
gpio: aggregator: fix a potential use-after-free

Bartosz Golaszewski <[email protected]>
gpio: cdev: check if uAPI v2 config attributes are correctly zeroed

Eric Dumazet <[email protected]>
tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction

Xingwang Xiang <[email protected]>
bpf, skmsg: fix verdict sk_data_ready racing with ktls rx

Rosen Penev <[email protected]>
net: ag71xx: check error for platform_get_irq

David Howells <[email protected]>
crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks

Jakub Kicinski <[email protected]>
net: shaper: rework the VALID marking (again)

Jakub Kicinski <[email protected]>
net: shaper: annotate the data races

Prathamesh Deshpande <[email protected]>
net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA

Jiajia Liu <[email protected]>

    Bluetooth: btmtk: fix urb->setup_packet leak in error paths

Kiran K <[email protected]>
Bluetooth: btintel_pcie: Fix incorrect MAC access programming

David Carlier <[email protected]>
tracing: Avoid NULL return from hist_field_name() on truncation

Cunlong Li <[email protected]>
cgroup: rstat: relax NMI guard after switch to try_cmpxchg

Zhang Cen <[email protected]>
ALSA: seq: Serialize UMP output teardown with event_input

Shitalkumar Gandhi <[email protected]>
wifi: wilc1000: fix dma_buffer leak on bus acquire failure

Johannes Berg <[email protected]>
wifi: mac80211: fix MLE defragmentation

Alexandru Hossu <[email protected]>

    wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs

Gao Xiang <[email protected]>
erofs: fix managed cache race for unaligned extents

Nikhil P. Rao <[email protected]>
pds_core: fix debugfs_lookup dentry leak and error handling

Nikhil P. Rao <[email protected]>
pds_core: fix error handling in pdsc_devcmd_wait

Christian Marangi <[email protected]>
net: airoha: Fix NPU RX DMA descriptor bits

Nicolai Buchwitz <[email protected]>
net: phy: honor eee_disabled_modes in phy_advertise_eee_all()

Nicolai Buchwitz <[email protected]>
net: phy: honor eee_disabled_modes in phy_support_eee()

Ido Schimmel <[email protected]>
bridge: mcast: Fix a possible use-after-free when removing a bridge port

Petr Machata <[email protected]>
net: bridge: Flush multicast groups when snooping is disabled

Guangshuo Li <[email protected]>
RDMA/rtrs: Fix use-after-free in path file creation cleanup

Shiraz Saleem <[email protected]>
RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port

Robertus Diawan Chris <[email protected]>
ASoC: soc-utils: Add missing va_end in snd_soc_ret()

Rafael J. Wysocki <[email protected]>
platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL

Rafael J. Wysocki <[email protected]>
platform/x86: intel-hid: Check ACPI_HANDLE() against NULL

Rafael J. Wysocki <[email protected]>
platform/x86: hp_accel: Check ACPI_COMPANION() against NULL

Rafael J. Wysocki <[email protected]>
platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL

Oliver White <[email protected]>
platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7

Erni Sri Satya Vennela <[email protected]>
net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

Daniel Golle <[email protected]>
net: dsa: mt7530: preserve VLAN tags on trapped link-local frames

Daniel Golle <[email protected]>
net: dsa: mt7530: fix FDB entries not aging out with short timeout

Viktor Jägersküpper <[email protected]>
kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme

Ankit Nautiyal <[email protected]>
drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP

Kohei Enju <[email protected]>
igc: set tx buffer type for SMD frames

Grzegorz Nitka <[email protected]>
ice: ptp: use primary NAC semaphore on E825

Grzegorz Nitka <[email protected]>
ice: ptp: serialize E825 PHY timer start with PTP lock

Qing Ming <[email protected]>
cgroup/rstat: validate cpu before css_rstat_cpu() access

Louis-Alexis Eyraud <[email protected]>
drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable

Louis-Alexis Eyraud <[email protected]>
drm/mediatek: mtk_cec: Fix non-static global variable

Matthew Leach <[email protected]>
wifi: ath11k: fix peer resolution on rx path when peer_id=0

Mohanram Meenakshisundaram <[email protected]>
drm/xe/pf: Fix CFI failure in debugfs access

Michal Wajdeczko <[email protected]>
drm/xe/vf: Fix signature of print functions

Shuicheng Lin <[email protected]>
drm/xe/gsc: Fix double-free of managed BO in error path

Jianpeng Chang <[email protected]>
dma-mapping: move dma_map_resource() sanity check into debug code

Miri Korenblit <[email protected]>
wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it

Cole Leavitt <[email protected]>
wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled

Guenter Roeck <[email protected]>
hwmon: (lm90) Add lock protection to lm90_alert

Guenter Roeck <[email protected]>
hwmon: (lm90) Stop work before releasing hwmon device

Dmitry Baryshkov <[email protected]>
drm/msm/snapshot: fix dumping of the unaligned regions

Eric Naim <[email protected]>
ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5

Florian Westphal <[email protected]>
netfilter: nft_inner: release local_lock before re-enabling softirqs

Felix Gu <[email protected]>
spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()

Cássio Gabriel <[email protected]>
ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging

Boris Burkov <[email protected]>
btrfs: fix squota accounting during enable generation

Boris Burkov <[email protected]>
btrfs: check for subvolume before deleting squota qgroup

Boris Burkov <[email protected]>
btrfs: relax squota parent qgroup deletion rule

Boris Burkov <[email protected]>
btrfs: check squota parent usage on membership change

David Sterba <[email protected]>
btrfs: remaining BTRFS_PATH_AUTO_FREE conversions

Josef Bacik <[email protected]>
btrfs: don't search back for dir inode item in INO_LOOKUP_USER

Filipe Manana <[email protected]>
btrfs: use the key format macros when printing keys

Filipe Manana <[email protected]>
btrfs: add macros to facilitate printing of keys

Stefano Garzarella <[email protected]>
vsock/virtio: fix zerocopy completion for multi-skb sends

Jens Axboe <[email protected]>
io_uring/net: punt IORING_OP_BIND async if it needs file create

Robertus Diawan Chris <[email protected]>
ALSA: scarlett2: Add missing error check when initialise Autogain Status

Alexander A. Klimov <[email protected]>

    ASoC: codecs: fs210x: fix possible buffer overflow

Mike Christie <[email protected]>
scsi: sd: Fix return code handling in sd_spinup_disk()

Jeroen Massar <[email protected]>
net/mlx5: Do not restore destination-less TC rules

Chuck Lever <[email protected]>
tls: Preserve sk_err across recvmsg() when data has been copied

Ralf Lici <[email protected]>
ovpn: disable BHs when updating device stats

Juergen Gross <[email protected]>

    x86/xen: Fix xen_e820_swap_entry_with_ram()

Kees Cook <[email protected]>
gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE

Antonio Quartulli <[email protected]>
ovpn: fix race between deleting interface and adding new peer

David Carlier <[email protected]>
ovpn: respect peer refcount in CMD_NEW_PEER error path

David Carlier <[email protected]>
ovpn: tcp - use cached peer pointer in ovpn_tcp_close()

Sven Schuchmann <[email protected]>
net: phy: DP83TC811: add reading of abilities

Jakub Kicinski <[email protected]>
net: tls: prevent chain-after-chain in plain text SG

Jakub Kicinski <[email protected]>
net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring

Xiang Mei <[email protected]>
net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot

Sayali Patil <[email protected]>
powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()

Mikko Perttunen <[email protected]>
drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN

Dmitry Baryshkov <[email protected]>
drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx

Ricardo Neri <[email protected]>
Documentation: intel_pstate: Fix description of asymmetric packing with SMT

Borislav Petkov (AMD) <[email protected]>
x86/mce: Restore MCA polling interval halving

Ming Lei <[email protected]>
selftests: ublk: cap nthreads to kernel's actual nr_hw_queues

Dmitry Baryshkov <[email protected]>
drm/msm/dpu: don't mix devm and drmm functions

Dmitry Baryshkov <[email protected]>
drm/msm/dsi: don't dump registers past the mapped region

Chenguang Zhao <[email protected]>
ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics

Xiang Mei <[email protected]>

    net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint

Zack McKevitt <[email protected]>
accel/qaic: Add overflow check to remap_pfn_range during mmap

Sungwoo Kim <[email protected]>
block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()

Lukas Bulwahn <[email protected]>
HID: quirks: really enable the intended work around for appledisplay

Casey Chen <[email protected]>
block: recompute nr_integrity_segments in blk_insert_cloned_request

David Carlier <[email protected]>
block: don't overwrite bip_vcnt in bio_integrity_copy_user()

Jakub Kicinski <[email protected]>
net: shaper: reject QUEUE scope handle with missing id

Jakub Kicinski <[email protected]>
net: shaper: enforce singleton NETDEV scope with id 0

Jakub Kicinski <[email protected]>
net: shaper: reject handle IDs exceeding internal bit-width

Jakub Kicinski <[email protected]>
net: shaper: fix undersized reply skb allocation in GROUP command

Jakub Kicinski <[email protected]>
net: shaper: set ret to -ENOMEM when genlmsg_new() fails in group_doit

Jakub Kicinski <[email protected]>
net: shaper: reject duplicate leaves in GROUP request

Jakub Kicinski <[email protected]>
net: shaper: fix trivial ordering issue in net_shaper_commit()

Jakub Kicinski <[email protected]>
net: shaper: flip the polarity of the valid flag

Kang Yang <[email protected]>
wifi: ath10k: skip WMI and beacon transmission when device is wedged

Nicolas Escande <[email protected]>
wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()

Nicolas Escande <[email protected]>
wifi: ath11k: fix error path leaks in some WMI WOW calls

Ethan Nelson-Moore <[email protected]>
net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference

Linus Walleij <[email protected]>
net: ethernet: cortina: Carry over frag counter

Andreas Haarmann-Thiemann <[email protected]>
net: ethernet: cortina: Drop half-assembled SKB

Linus Walleij <[email protected]>
net: ethernet: cortina: Make RX SKB per-port

David Howells <[email protected]>
netfs, afs: Fix write skipping in dir/link writepages

David Howells <[email protected]>
netfs: Fix netfs_read_folio() to wait on writeback

David Howells <[email protected]>

    netfs: Fix folio->private handling in netfs_perform_write()

David Howells <[email protected]>
netfs: Fix partial invalidation of streaming-write folio

David Howells <[email protected]>
netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()

David Howells <[email protected]>
netfs: Fix leak of request in netfs_write_begin() error handling

David Howells <[email protected]>
netfs: Fix early put of sink folio in netfs_read_gaps()

David Howells <[email protected]>
netfs: Fix write streaming disablement if fd open O_RDWR

David Howells <[email protected]>
netfs: Fix read-gaps to remove netfs_folio from filled folio

David Howells <[email protected]>
netfs: Fix potential deadlock in write-through mode

David Howells <[email protected]>
netfs: Fix streaming write being overwritten

David Howells <[email protected]>
netfs: Defer the emission of trace_netfs_folio()

David Howells <[email protected]>
netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone

David Howells <[email protected]>
netfs: Fix overrun check in netfs_extract_user_iter()

Viacheslav Dubeyko <[email protected]>
netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call

David Howells <[email protected]>
netfs: Fix netfs_read_to_pagecache() to pause on subreq failure

David Howells <[email protected]>
netfs: Fix cancellation of a DIO and single read subrequests

Julian Braha <[email protected]>
powerpc: fix dead default for GUEST_STATE_BUFFER_TEST

Ally Heev <[email protected]>
powerpc: 82xx: fix uninitialized pointers with free attribute

Mario Limonciello <[email protected]>
ASoC: SOF: amd: Fix error code handling in psp_send_cmd()

Kuniyuki Iwashima <[email protected]>
tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().

Johannes Thumshirn <[email protected]>
zonefs: handle integer overflow in zonefs_fname_to_fno

Chia-Lin Kao (AceLan) <[email protected]>
nvme-pci: fix use-after-free in nvme_free_host_mem()

Keith Busch <[email protected]>
nvme: fix bio leak on mapping failure

Jiayuan Chen <[email protected]>
irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT

Zhihao Cheng <[email protected]>
nsfs: fix wrong error code returned for pidns ioctls

Ming Lei <[email protected]>
ublk: reject max_sectors smaller than PAGE_SECTORS in parameter validation

Rosen Penev <[email protected]>
irqchip/ath79-cpu: Remove unused function

Hongling Zeng <[email protected]>
fs: Fix return in jfs_mkdir and orangefs_mkdir

Junyoung Jang <[email protected]>
fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap

Masami Hiramatsu (Google) <[email protected]>
fprobe: Fix unregister_fprobe() to wait for RCU grace period

Mac Chiang <[email protected]>
ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC

Mac Chiang <[email protected]>
ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC

Chuck Lever <[email protected]>
NFSD: Fix infinite loop in layout state revocation

Gabor Juhos <[email protected]>
phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access

Shitalkumar Gandhi <[email protected]>
net: ti: icssm-prueth: fix eth_ports_node leak in probe

Myeonghun Pak <[email protected]>
net: lan966x: avoid unregistering netdev on register failure

Bart Van Assche <[email protected]>
ice: fix locking in ice_dcb_rebuild()

Marcin Szycik <[email protected]>
ice: fix setting RSS VSI hash for E830

Emil Tantilov <[email protected]>
idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()

Mohsin Bashir <[email protected]>
net: shaper: Reject reparenting of existing nodes

Dragos Tatulea <[email protected]>
net: napi: Avoid gro timer misfiring at end of busypoll

Kuniyuki Iwashima <[email protected]>
tcp: Fix imbalanced icsk_accept_queue count.

Martin Kaiser <[email protected]>
test_kprobes: clear kprobes between test runs

Jianpeng Chang <[email protected]>
kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist()

Florian Westphal <[email protected]>
netfilter: bridge: eb_tables: close module init race

Florian Westphal <[email protected]>
netfilter: x_tables: close dangling table module init race

Florian Westphal <[email protected]>
netfilter: ebtables: close dangling table module init race

Florian Westphal <[email protected]>
netfilter: ebtables: move to two-stage removal scheme

Florian Westphal <[email protected]>
netfilter: x_tables: add and use xtables_unregister_table_exit

Florian Westphal <[email protected]>
netfilter: x_tables: add and use xt_unregister_table_pre_exit

Florian Westphal <[email protected]>
netfilter: x_tables: unregister the templates first

Filipe Manana <[email protected]>
btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()

Shuhao Fu <[email protected]>
ALSA: hda: cs35l41: Put ACPI device on missing physical node

Shuhao Fu <[email protected]>
ALSA: hda: cs35l56: Put ACPI device after setting companion

Guenter Roeck <[email protected]>
ARM: integrator: Fix early initialization

Sudeep Holla <[email protected]>
firmware: arm_ffa: Fix sched-recv callback partition lookup

Sudeep Holla <[email protected]>
firmware: arm_ffa: Snapshot notifier callbacks under lock

Sudeep Holla <[email protected]>
firmware: arm_ffa: Align RxTx buffer size before mapping

Sudeep Holla <[email protected]>
firmware: arm_ffa: Validate framework notification message layout

Sudeep Holla <[email protected]>
firmware: arm_ffa: Keep framework RX release under lock

Sudeep Holla <[email protected]>
firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies

Maulik Shah <[email protected]>
pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150

David Gow <[email protected]>
kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS

David Gow <[email protected]>
kunit: config: Enable KUNIT_DEBUGFS by default

Guo Ren (Alibaba DAMO Academy) <[email protected]>
riscv: mm: Fixup no5lvl failure when vaddr is invalid

Michael Neuling <[email protected]>
riscv: errata: Fix bitwise vs logical AND in MIPS errata patching

Sudeep Holla <[email protected]>
firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0

Sudeep Holla <[email protected]>
firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue

Sudeep Holla <[email protected]>
firmware: arm_ffa: Skip free_pages on RX buffer alloc failure

Sudeep Holla <[email protected]>
firmware: arm_ffa: Check for NULL FF-A ID table while driver registration

Takashi Iwai <[email protected]>
HID: uclogic: Fix regression of input name assignment

Dan Carpenter <[email protected]>
HID: intel-thc-hid: Intel-quickspi: Fix some error codes

Maulik Shah <[email protected]>
pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615

Xianwei Zhao <[email protected]>
pinctrl: meson: amlogic-a4: fix deadlock issue

Lad Prabhakar <[email protected]>
pinctrl: renesas: rzg2l: Fix SMT register cache handling

Biju Das <[email protected]>
pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for high pins during suspend/resume

Marek Vasut <[email protected]>
ARM: dts: renesas: rskrza1: Drop superfluous cells

Marek Vasut <[email protected]>
ARM: dts: renesas: genmai: Drop superfluous cells

Til Kaiser <[email protected]>
pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe()

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe()

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) reject implausible blackbox record_count

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) seed timestamp from the real-time clock

Sven Eckelmann <[email protected]>
batman-adv: tt: prevent TVLV entry number overflow

Sven Eckelmann <[email protected]>
batman-adv: tt: fix negative tt_buff_len

Sven Eckelmann <[email protected]>
batman-adv: tt: fix negative last_changeset_len

Sven Eckelmann <[email protected]>
batman-adv: tt: avoid empty VLAN responses

Sven Eckelmann <[email protected]>
batman-adv: tt: reject oversized local TVLV buffers

Sven Eckelmann <[email protected]>
batman-adv: tt: fix TOCTOU race for reported vlans

Sven Eckelmann <[email protected]>
batman-adv: tp_meter: avoid role confusion in tp_list

Sven Eckelmann <[email protected]>
batman-adv: tp_meter: fix race condition in send error reporting

Sven Eckelmann <[email protected]>
batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown

Sven Eckelmann <[email protected]>
batman-adv: tp_meter: directly shut down timer on cleanup

Sven Eckelmann <[email protected]>
batman-adv: tp_meter: avoid use of uninit sender vars

Sven Eckelmann <[email protected]>
batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface

Sven Eckelmann <[email protected]>
batman-adv: bla: avoid double decrement of bla.num_requests

Sven Eckelmann <[email protected]>
batman-adv: bla: fix report_work leak on backbone_gw purge

Sven Eckelmann <[email protected]>
batman-adv: frag: disallow unicast fragment in fragment

Luxiao Xu <[email protected]>
batman-adv: fix tp_meter counter underflow during shutdown

Ruide Cao <[email protected]>
batman-adv: fix fragment reassembly length accounting

Sven Eckelmann <[email protected]>
batman-adv: dat: handle forward allocation error

Ruijie Li <[email protected]>
batman-adv: clear current gateway during teardown

Sven Eckelmann <[email protected]>
batman-adv: mcast: fix use-after-free in orig_node RCU release

Sven Eckelmann <[email protected]>
batman-adv: iv: recover OGM scheduling after forward packet error

Sven Eckelmann <[email protected]>
batman-adv: tvlv: reject oversized TVLV packets

Sven Eckelmann <[email protected]>
batman-adv: tvlv: abort OGM send on tvlv append failure

Sven Eckelmann <[email protected]>
batman-adv: v: stop OGMv2 on disabled interface

Harry Wentland <[email protected]>
drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

Harry Wentland <[email protected]>
drm/amd/display: Validate GPIO pin LUT table size before iterating

Harry Wentland <[email protected]>
drm/amd/display: Fix integer overflow in bios_get_image()

Osama Abdelkader <[email protected]>
drm/bridge: megachips: remove bridge when irq request fails

Julien Chauveau <[email protected]>
drm/bridge: it66121: acquire reset GPIO in probe

Alan Liu <[email protected]>
drm/amdgpu/vpe: Force collaborate sync after TRAP

Deepanshu Kartikey <[email protected]>
drm/virtio: use uninterruptible resv lock for plane updates

Maíra Canal <[email protected]>
drm/v3d: Release indirect CSD GEM reference on CPU job free

Maíra Canal <[email protected]>
drm/v3d: Fix use-after-free of CPU job query arrays on error path

Daniel J Blueman <[email protected]>
drm/msm: Fix shrinker deadlock

Bartosz Golaszewski <[email protected]>

    device property: set fwnode->secondary to NULL in fwnode_init()

Huacai Chen <[email protected]>
LoongArch: Remove unused code to avoid build warning

Tiezhu Yang <[email protected]>
LoongArch: kprobes: Use larch_insn_text_copy() to patch instructions

Heechan Kang <[email protected]>
fwctl: pds: Validate RPC input size before parsing

Michael Bommarito <[email protected]>
RDMA/siw: Reject MPA FPDU length underflow before signed receive math

Johan Hovold <[email protected]>
spi: ti-qspi: fix use-after-free after DMA setup failure

Johan Hovold <[email protected]>
spi: sprd: fix error pointer deref after DMA setup failure

Johan Hovold <[email protected]>
spi: ep93xx: fix error pointer deref after DMA setup failure

Michael Bommarito <[email protected]>
scsi: isci: Fix use-after-free in device removal path

Nitin Rawat <[email protected]>
phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after SM8650 G4 fix

Wayne Chang <[email protected]>
phy: tegra: xusb: Fix per-pad high-speed termination calibration

Łukasz Lebiedziński <[email protected]>
phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for Exynos7870

Johan Hovold <[email protected]>
spi: qup: fix error pointer deref after DMA setup failure

Osama Abdelkader <[email protected]>
drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe

Carlos López <[email protected]>
virt: sev-guest: Explicitly leak pages in unknown state

Osama Abdelkader <[email protected]>
riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when OOM

Osama Abdelkader <[email protected]>
riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM

Tina Zhang <[email protected]>
KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)

Michael Bommarito <[email protected]>
KVM: arm64: vgic: Free private_irqs when init fails after allocation

Michael Bommarito <[email protected]>
KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits

Vladimir Murzin <[email protected]>
arm64: probes: Handle probes on hinted conditional branch instructions

Masami Hiramatsu (Google) <[email protected]>

    tracing: Do not call map->ops->elt_free() if elt_alloc() fails

Zhihao Cheng <[email protected]>
cifs: Fix busy dentry used after unmounting

Michael Bommarito <[email protected]>
wifi: mac80211: consume only present negotiated TTLM maps

Jann Horn <[email protected]>

    af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

John Walker <[email protected]>

    wifi: cfg80211: advance loop vars in cfg80211_merge_profile()

Grzegorz Nitka <[email protected]>
ice: restore PTP Rx timestamp config after ethtool set-channels

Marcin Szycik <[email protected]>
ice: fix setting promisc mode while adding VID filter

Jacob Keller <[email protected]>
ice: fix locking around wait_event_interruptible_locked_irq

Kohei Enju <[email protected]>
igc: fix potential skb leak in igc_fpe_xmit_smd_frame()

Dawei Feng <[email protected]>
octeontx2-pf: fix double free in rvu_rep_rsrc_init()

Sam Daly <[email protected]>
octeontx2-af: CGX: add bounds check to cgx_speed_mbps index

Stephen Smalley <[email protected]>
lsm: hold cred_guard_mutex for lsm_set_self_attr()

Ilya Dryomov <[email protected]>
rbd: eliminate a race in lock_dwork draining on unmap

Michael Bommarito <[email protected]>
ixgbevf: fix use-after-free in VEPA multicast source pruning

Michael Bommarito <[email protected]>
ipv4: raw: reject IP_HDRINCL packets with ihl < 5

Sheroz Juraev <[email protected]>
wifi: iwlwifi: mld: stop TX during firmware restart

Johannes Berg <[email protected]>
wifi: iwlwifi: mvm: fix driver-set TX rates on old devices

Kyle Farnung <[email protected]>
wifi: ath11k: clear shared SRNG pointer state on restart

Jose Ignacio Tornos Martinez <[email protected]>
ice: fix VF queue configuration with low MTU values

Stefano Garzarella <[email protected]>
vsock/virtio: reset connection on receiving queue overflow

Minh Nguyen <[email protected]>
vsock/vmci: fix UAF when peer resets connection during handshake

Li Xiasong <[email protected]>
mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient

Justin Iurman <[email protected]>
ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()

Masami Hiramatsu (Google) <[email protected]>
ring-buffer: Flush and stop persistent ring buffer on panic

Steven Rostedt <[email protected]>
ring-buffer: Fix reporting of missed events in iterator

Dawei Feng <[email protected]>
qed: fix double free in qed_cxt_tables_alloc()

Michael Bommarito <[email protected]>
l2tp: use list_del_rcu in l2tp_session_unhash

Konstantin Komarov <[email protected]>
fs/ntfs3: handle attr_set_size() errors when truncating files

David Carlier <[email protected]>
net: ethtool: phy: avoid NULL deref when PHY driver is unbound

Quan Sun <[email protected]>
net: ethtool: fix NULL pointer dereference in phy_reply_size

Guopeng Zhang <[email protected]>
cgroup/cpuset: Reset DL migration state on can_attach() failure

Masami Hiramatsu (Google) <[email protected]>
tracing/fprobe: Check the same type fprobe on table as the unregistered one

Masami Hiramatsu (Google) <[email protected]>
tracing/fprobe: Avoid kcalloc() in rcu_read_lock section

Menglong Dong <[email protected]>
tracing: fprobe: use ftrace if CONFIG_DYNAMIC_FTRACE_WITH_ARGS

Masami Hiramatsu (Google) <[email protected]>
tracing: fprobe: Remove unused local variable

Tejun Heo <[email protected]>
sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path

Samuele Mariotti <[email protected]>
sched_ext: Fix missing warning in scx_set_task_state() default case

Yizhou Zhao <[email protected]>
netfilter: nft_inner: Fix IPv6 inner_thoff desync

Nan Li <[email protected]>
netfilter: ipset: stop hash:* range iteration at end

Haoze Xie <[email protected]>

    netfilter: nf_queue: hold bridge skb->dev while queued

Zhengchuan Liang <[email protected]>
netfilter: ip6t_hbh: reject oversized option lists

Jonas Jelonek <[email protected]>
net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis()

Michael Bommarito <[email protected]>
net: ifb: report ethtool stats over num_tx_queues

Matt Fleming <[email protected]>
net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover

Nerijus Bendžiūnas <[email protected]>
net: phy: skip EEE advertisement write when autoneg is disabled

Nicolai Buchwitz <[email protected]>
net: bcmgenet: keep RBUF EEE/PM disabled

Zijing Yin <[email protected]>
phonet/pep: disable BH around forwarded sk_receive_skb()

Jiexun Wang <[email protected]>
Bluetooth: serialize accept_q access

Michael Bommarito <[email protected]>
Bluetooth: MGMT: validate Add Extended Advertising Data length

Michael Bommarito <[email protected]>
Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer

Mingyu Wang <[email protected]>
Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths

Jann Horn <[email protected]>

    Bluetooth: bnep: Fix UAF read of dev->name

David Carlier <[email protected]>
Bluetooth: ISO: drop ISO_END frames received without prior ISO_START

Safa Karakuş <[email protected]>
Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()

Abdun Nihaal <[email protected]>
net: wwan: iosm: fix potential memory leaks in ipc_imem_init()

Luiz Capitulino <[email protected]>
selftests/mm: run_vmtests.sh: fix destructive tests invocation

David Hildenbrand (Arm) <[email protected]>
mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free

Muchun Song <[email protected]>
mm/memory_hotplug: fix memory block reference leak on remove

David Hildenbrand (Arm) <[email protected]>
mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special()

Alistair Popple <[email protected]>
mm/memory: fix spurious warning when unmapping device-private/exclusive pages

Justin Iurman <[email protected]>
ipv6: ioam: refresh hdr pointer before ioam6_event()

Muchun Song <[email protected]>
drivers/base/memory: fix memory block reference leak in poison accounting

Heechan Kang <[email protected]>
io_uring/waitid: clear waitid info before copying it to userspace

Krishnamoorthi M <[email protected]>
spi: amd: Set correct bus number in ACPI probe path

Ard Biesheuvel <[email protected]>
efi: Allocate runtime workqueue before ACPI init

Cássio Gabriel <[email protected]>
ALSA: scarlett2: Allow flash writes ending at segment boundary

Takashi Iwai <[email protected]>
ALSA: asihpi: Fix potential OOB array access at reading cache

Takashi Iwai <[email protected]>
ALSA: pcm: Don't setup bogus iov_iter for silencing

Cássio Gabriel <[email protected]>
ALSA: ua101: Reject too-short USB descriptors

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX

ChenXiaoSong <[email protected]>
smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close

Jeremy Erazo <[email protected]>
smb: client: use data_len for SMB2 READ encrypted folioq copy

Henrique Carvalho <[email protected]>
smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

Michael Bommarito <[email protected]>
smb: client: require net admin for CIFS SWN netlink

Alexander Sverdlin <[email protected]>
regulator: tps65219: fix irq_data.rdev not being assigned

Junyi Liu <[email protected]>
ksmbd: validate SID in parent security descriptor during ACL inheritance

Ferry Meng <[email protected]>
ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow

Jeremy Laratro <[email protected]>
ksmbd: fix null pointer dereference in compare_guid_key()

SeongJae Park <[email protected]>
mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()

Greg Kroah-Hartman <[email protected]>
sysfs: don't remove existing directory on update failure

Thomas Zimmermann <[email protected]>
drm/vblank: Fix kernel docs for vblank timer

Thomas Zimmermann <[email protected]>
drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks()

Thomas Zimmermann <[email protected]>
drm/vkms: Convert to DRM's vblank timer

Thomas Zimmermann <[email protected]>
drm/vblank: Add CRTC helpers for simple use cases

Thomas Zimmermann <[email protected]>
drm/vblank: Add vblank timer

Sasha Levin <[email protected]>
Revert "ice: Remove jumbo_remove step from TX path"

Sasha Levin <[email protected]>
Revert "ice: fix double-free of tx_buf skb"

Niklas Cassel <[email protected]>
ata: libata-scsi: do not needlessly defer commands when using PMP with FBS

Niklas Cassel <[email protected]>
ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS

Niklas Cassel <[email protected]>
ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT

Niklas Cassel <[email protected]>
ata: libata-scsi: improve readability of ata_scsi_qc_issue()

Stanimir Varbanov <[email protected]>

    mfd: bcm2835-pm: Add support for BCM2712

Stanimir Varbanov <[email protected]>
arm64: dts: broadcom: bcm2712: Add watchdog DT node

Stanimir Varbanov <[email protected]>
dt-bindings: soc: bcm: Add bcm2712 compatible

Asim Viladi Oglu Manizada <[email protected]>
smb: client: reject userspace cifs.spnego descriptions

DaeMyung Kang <[email protected]>
ksmbd: close durable scavenger races against m_fp_list lookups

Vladimir Yakovlev <[email protected]>
spi: spi-dw-dma: fix print error log when wait finish transaction

Xiang Mei <[email protected]>
bridge: mrp: reject zero test interval to avoid OOM panic

Juri Lelli <[email protected]>
sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting

Peter Zijlstra <[email protected]>
sched: Employ sched_change guards

Davidlohr Bueso <[email protected]>
cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()

Luis Henriques <[email protected]>
fuse: fix uninit-value in fuse_dentry_revalidate()

Eder Zulian <[email protected]>
iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs

Guanghui Feng <[email protected]>
iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs

Gustavo Sousa <[email protected]>
drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status()

-------------

Diffstat:

 Documentation/admin-guide/pm/intel_pstate.rst      |  11 +-
 Documentation/crypto/krb5.rst                      |  17 +-
 .../bindings/soc/bcm/brcm,bcm2835-pm.yaml          |  38 ++-
 Documentation/gpu/drm-kms-helpers.rst              |  12 +
 Documentation/netlink/specs/net_shaper.yaml        |   7 +
 Makefile                                           |   4 +-
 arch/alpha/include/asm/Kbuild                      |   1 +
 arch/arc/include/asm/Kbuild                        |   1 +
 arch/arm/boot/dts/renesas/r7s72100-genmai.dts      |   3 -
 arch/arm/boot/dts/renesas/r7s72100-rskrza1.dts     |   2 -
 arch/arm/include/asm/Kbuild                        |   1 +
 arch/arm/mach-versatile/integrator_cp.c            |  13 +-
 arch/arm64/boot/dts/broadcom/bcm2712.dtsi          |   9 +
 arch/arm64/include/asm/insn.h                      |   2 +-
 arch/arm64/include/asm/page.h                      |   2 +-
 arch/arm64/include/asm/ring_buffer.h               |  10 +
 arch/arm64/kvm/arm.c                               |   4 +-
 arch/arm64/kvm/vgic/vgic-its.c                     |   4 +
 arch/arm64/mm/fault.c                              |  11 +-
 arch/csky/include/asm/Kbuild                       |   1 +
 arch/hexagon/include/asm/Kbuild                    |   1 +
 arch/loongarch/include/asm/Kbuild                  |   1 +
 arch/loongarch/kernel/kprobes.c                    |  14 +-
 arch/loongarch/mm/init.c                           |   4 -
 arch/m68k/include/asm/Kbuild                       |   1 +
 arch/microblaze/include/asm/Kbuild                 |   1 +
 arch/mips/include/asm/Kbuild                       |   1 +
 arch/nios2/include/asm/Kbuild                      |   1 +
 arch/openrisc/include/asm/Kbuild                   |   1 +
 arch/parisc/include/asm/Kbuild                     |   1 +
 arch/powerpc/Kconfig.debug                         |   3 +-
 arch/powerpc/include/asm/Kbuild                    |   1 +
 arch/powerpc/kernel/time.c                         |   6 +-
 arch/powerpc/platforms/82xx/km82xx.c               |   4 +-
 arch/riscv/errata/mips/errata.c                    |   2 +-
 arch/riscv/include/asm/Kbuild                      |   1 +
 arch/riscv/kvm/vcpu_pmu.c                          |  12 +-
 arch/riscv/mm/init.c                               |  25 ++
 arch/s390/include/asm/Kbuild                       |   1 +
 arch/sh/include/asm/Kbuild                         |   1 +
 arch/sparc/include/asm/Kbuild                      |   1 +
 arch/um/include/asm/Kbuild                         |   1 +
 arch/x86/include/asm/Kbuild                        |   1 +
 arch/x86/kernel/cpu/mce/core.c                     |  33 +--
 arch/x86/kvm/svm/avic.c                            |  12 +-
 arch/x86/xen/setup.c                               |   2 +-
 arch/xtensa/include/asm/Kbuild                     |   1 +
 block/bio-integrity.c                              |  19 +-
 block/blk-cgroup.c                                 |   2 +-
 block/blk-mq.c                                     |  19 ++
 crypto/krb5/krb5_api.c                             |  54 +++-
 drivers/accel/qaic/qaic_data.c                     |  23 +-
 drivers/ata/libata-core.c                          |   9 +-
 drivers/ata/libata-eh.c                            |   8 +-
 drivers/ata/libata-pmp.c                           |  18 +-
 drivers/ata/libata-scsi.c                          | 102 ++++----
 drivers/ata/sata_sil24.c                           |   6 +-
 drivers/base/memory.c                              |   8 +-
 drivers/block/rbd.c                                |  20 +-
 drivers/block/ublk_drv.c                           |   3 +
 drivers/bluetooth/btintel_pcie.c                   |  20 +-
 drivers/bluetooth/btintel_pcie.h                   |   3 -
 drivers/bluetooth/btmtk.c                          |   2 +
 drivers/bluetooth/hci_ldisc.c                      |  48 +++-
 drivers/cxl/core/mbox.c                            |  11 +-
 drivers/firmware/arm_ffa/bus.c                     |   4 +-
 drivers/firmware/arm_ffa/driver.c                  | 133 +++++++---
 drivers/firmware/efi/efi.c                         |  28 ++-
 drivers/fwctl/pds/main.c                           |   3 +
 drivers/gpio/Kconfig                               |   1 -
 drivers/gpio/gpio-aggregator.c                     |  47 ++--
 drivers/gpio/gpiolib-cdev.c                        |  13 +
 drivers/gpu/drm/Makefile                           |   3 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vpe.c            |   7 +-
 drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c |   9 +
 .../drm/amd/display/dc/bios/bios_parser_helper.c   |   9 +-
 drivers/gpu/drm/amd/display/dc/core/dc.c           |   6 +-
 drivers/gpu/drm/bridge/chipone-icn6211.c           |   4 +-
 drivers/gpu/drm/bridge/ite-it66121.c               |   5 +
 .../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c   |  16 +-
 drivers/gpu/drm/drm_atomic_helper.c                |   2 +-
 drivers/gpu/drm/drm_vblank.c                       | 172 ++++++++++++-
 drivers/gpu/drm/drm_vblank_helper.c                | 176 +++++++++++++
 drivers/gpu/drm/i915/display/intel_dp.c            |   2 +-
 drivers/gpu/drm/mediatek/mtk_cec.c                 |   2 +-
 drivers/gpu/drm/mediatek/mtk_hdmi_ddc.c            |   2 +-
 drivers/gpu/drm/msm/adreno/adreno_gpu.c            |   6 +
 drivers/gpu/drm/msm/disp/dpu1/dpu_writeback.c      |   3 +-
 drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c  |  24 +-
 drivers/gpu/drm/msm/dsi/dsi_host.c                 |   1 +
 drivers/gpu/drm/msm/msm_gem_shrinker.c             |  40 ++-
 drivers/gpu/drm/msm/msm_iommu.c                    |   5 +-
 drivers/gpu/drm/v3d/v3d_sched.c                    |  16 +-
 drivers/gpu/drm/v3d/v3d_submit.c                   |  22 +-
 drivers/gpu/drm/virtio/virtgpu_drv.h               |   1 +
 drivers/gpu/drm/virtio/virtgpu_gem.c               |  17 ++
 drivers/gpu/drm/virtio/virtgpu_plane.c             |  10 +-
 drivers/gpu/drm/vkms/vkms_crtc.c                   |  83 +------
 drivers/gpu/drm/vkms/vkms_drv.h                    |   2 -
 drivers/gpu/drm/xe/display/xe_hdcp_gsc.c           |  12 +-
 drivers/gpu/drm/xe/xe_gsc.c                        |   5 +-
 drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.c        |   6 +-
 drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.h        |   2 +-
 drivers/gpu/drm/xe/xe_gt_sriov_vf.c                |  24 +-
 drivers/gpu/drm/xe/xe_gt_sriov_vf.h                |   6 +-
 drivers/gpu/drm/xe/xe_oa.c                         |   6 +-
 drivers/hid/hid-quirks.c                           |   2 +-
 drivers/hid/hid-uclogic-core.c                     |   4 +-
 .../intel-quickspi/quickspi-protocol.c             |   4 +-
 drivers/hwmon/lm90.c                               |  26 +-
 drivers/hwmon/pmbus/adm1266.c                      |  32 ++-
 drivers/infiniband/hw/mana/main.c                  |   1 +
 drivers/infiniband/sw/siw/siw_qp_rx.c              |  15 ++
 drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c       |   2 +-
 drivers/iommu/amd/debugfs.c                        |  43 ++--
 drivers/irqchip/irq-ath79-cpu.c                    |   7 -
 drivers/mfd/bcm2835-pm.c                           |   1 +
 drivers/net/dsa/mt7530.c                           |  47 ++--
 drivers/net/ethernet/airoha/airoha_eth.c           |  10 +-
 drivers/net/ethernet/amd/pds_core/debugfs.c        |   7 +-
 drivers/net/ethernet/amd/pds_core/dev.c            |  11 +-
 drivers/net/ethernet/amd/pds_core/devlink.c        |   6 +-
 drivers/net/ethernet/atheros/ag71xx.c              |   3 +
 drivers/net/ethernet/broadcom/genet/bcmgenet.c     |   9 +-
 drivers/net/ethernet/cirrus/cs89x0.c               |   2 -
 drivers/net/ethernet/cortina/gemini.c              |  21 +-
 drivers/net/ethernet/intel/ice/ice_dcb_lib.c       |   4 +-
 drivers/net/ethernet/intel/ice/ice_main.c          |  10 +-
 drivers/net/ethernet/intel/ice/ice_ptp_hw.c        |  33 ++-
 drivers/net/ethernet/intel/ice/ice_txrx.c          |   7 +-
 drivers/net/ethernet/intel/ice/virt/queues.c       |   2 +-
 drivers/net/ethernet/intel/idpf/idpf_ptp.c         |   4 +-
 drivers/net/ethernet/intel/igc/igc_tsn.c           |   9 +-
 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c  |   1 +
 drivers/net/ethernet/marvell/octeontx2/af/cgx.c    |   7 +-
 .../net/ethernet/marvell/octeontx2/af/rvu_npc.c    |   2 +-
 drivers/net/ethernet/marvell/octeontx2/nic/rep.c   |   3 +-
 .../ethernet/mellanox/mlx5/core/en/reporter_tx.c   |   6 +-
 .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c   |   7 +-
 .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c |   3 +-
 .../net/ethernet/microchip/lan966x/lan966x_main.c  |   8 +-
 drivers/net/ethernet/microsoft/mana/hw_channel.c   |  35 ++-
 drivers/net/ethernet/qlogic/qed/qed_cxt.c          |   2 +
 drivers/net/ethernet/ti/icssm/icssm_prueth.c       |   1 +
 drivers/net/ifb.c                                  |  11 +-
 drivers/net/ovpn/io.c                              |  12 +-
 drivers/net/ovpn/main.c                            |  12 +-
 drivers/net/ovpn/netlink.c                         |   8 +-
 drivers/net/ovpn/peer.c                            |  23 +-
 drivers/net/ovpn/peer.h                            |   1 -
 drivers/net/ovpn/stats.h                           |  16 ++
 drivers/net/ovpn/tcp.c                             |  19 +-
 drivers/net/ovpn/udp.c                             |   2 +-
 drivers/net/phy/dp83tc811.c                        |   1 +
 drivers/net/phy/phy-c45.c                          |   8 +
 drivers/net/phy/phy_device.c                       |   6 +-
 drivers/net/pse-pd/pse_core.c                      |   2 +-
 drivers/net/tap.c                                  |   2 +-
 drivers/net/wireless/ath/ath10k/wmi.c              |  17 +-
 drivers/net/wireless/ath/ath11k/dp_rx.c            |   3 +-
 drivers/net/wireless/ath/ath11k/hal.c              |  14 +-
 drivers/net/wireless/ath/ath11k/hal_rx.c           |   5 +-
 drivers/net/wireless/ath/ath11k/testmode.c         |   1 +
 drivers/net/wireless/ath/ath11k/wmi.c              |  19 +-
 drivers/net/wireless/intel/iwlwifi/mld/link.c      |  13 +-
 drivers/net/wireless/intel/iwlwifi/mld/tx.c        |  15 +-
 drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c  |  27 +-
 drivers/net/wireless/intel/iwlwifi/mvm/utils.c     |  14 +-
 drivers/net/wireless/microchip/wilc1000/wlan.c     |   2 +-
 drivers/net/wwan/iosm/iosm_ipc_imem.c              |   2 +
 drivers/nvme/host/ioctl.c                          |   5 +-
 drivers/nvme/host/pci.c                            |   6 +-
 drivers/phy/marvell/phy-mvebu-a3700-utmi.c         |   5 +-
 drivers/phy/qualcomm/phy-qcom-qmp-ufs.c            |   1 +
 drivers/phy/samsung/phy-exynos5-usbdrd.c           |   7 +-
 drivers/phy/tegra/xusb-tegra186.c                  |  33 ++-
 drivers/phy/tegra/xusb.h                           |   1 +
 drivers/pinctrl/meson/pinctrl-amlogic-a4.c         |   6 +-
 drivers/pinctrl/qcom/pinctrl-ipq4019.c             |   2 +-
 drivers/pinctrl/qcom/pinctrl-msm.h                 |   5 +
 drivers/pinctrl/qcom/pinctrl-qcs615.c              |   6 +-
 drivers/pinctrl/qcom/pinctrl-sm8150.c              |   8 +-
 drivers/pinctrl/renesas/pinctrl-rzg2l.c            |  23 +-
 .../platform/surface/surface_aggregator_registry.c |   2 -
 drivers/platform/x86/adv_swbutton.c                |   6 +-
 drivers/platform/x86/hp/hp_accel.c                 |   3 +
 drivers/platform/x86/intel/hid.c                   |   6 +-
 drivers/platform/x86/intel/vbtn.c                  |   6 +-
 drivers/regulator/tps65219-regulator.c             | 135 +++++++---
 drivers/scsi/isci/host.c                           |   3 +
 drivers/scsi/sd.c                                  |   3 +-
 drivers/spi/spi-amd.c                              |   2 +-
 drivers/spi/spi-dw-dma.c                           |   2 +-
 drivers/spi/spi-ep93xx.c                           |   2 +
 drivers/spi/spi-mtk-snfi.c                         |   2 +-
 drivers/spi/spi-qup.c                              |   3 +
 drivers/spi/spi-sprd.c                             |   3 +-
 drivers/spi/spi-ti-qspi.c                          |   1 +
 drivers/virt/coco/sev-guest/sev-guest.c            |  10 +-
 fs/afs/dir.c                                       |  11 +-
 fs/btrfs/backref.c                                 |  11 +-
 fs/btrfs/block-group.c                             |   3 +-
 fs/btrfs/ctree.c                                   |  17 +-
 fs/btrfs/dir-item.c                                |   3 +-
 fs/btrfs/extent-tree.c                             |  55 ++---
 fs/btrfs/free-space-tree.c                         |  29 +--
 fs/btrfs/fs.h                                      |   4 +
 fs/btrfs/inode-item.c                              |   3 +-
 fs/btrfs/inode.c                                   |   7 +-
 fs/btrfs/ioctl.c                                   |  60 ++---
 fs/btrfs/print-tree.c                              |  14 +-
 fs/btrfs/qgroup.c                                  | 272 ++++++++++++---------
 fs/btrfs/relocation.c                              |   4 +-
 fs/btrfs/root-tree.c                               |   4 +-
 fs/btrfs/send.c                                    |  10 +-
 fs/btrfs/super.c                                   |  10 +-
 fs/btrfs/tree-checker.c                            |  21 +-
 fs/btrfs/tree-log.c                                |  42 ++--
 fs/btrfs/volumes.c                                 |   3 +-
 fs/btrfs/xattr.c                                   |   3 +-
 fs/erofs/zdata.c                                   |  15 +-
 fs/fuse/dir.c                                      |  20 +-
 fs/jfs/namei.c                                     |   2 +-
 fs/mnt_idmapping.c                                 |   2 +
 fs/netfs/buffered_read.c                           |  64 ++---
 fs/netfs/buffered_write.c                          | 172 ++++++++-----
 fs/netfs/direct_read.c                             |  42 +---
 fs/netfs/internal.h                                |   3 +
 fs/netfs/iterator.c                                |  26 +-
 fs/netfs/misc.c                                    |   8 +-
 fs/netfs/read_collect.c                            |  13 +-
 fs/netfs/read_retry.c                              |  11 +-
 fs/netfs/read_single.c                             |  23 +-
 fs/netfs/write_issue.c                             |  48 ++--
 fs/nfsd/nfs4state.c                                |   7 +
 fs/nsfs.c                                          |   2 +-
 fs/ntfs3/file.c                                    |  12 +-
 fs/orangefs/namei.c                                |   2 +-
 fs/smb/client/cifs_spnego.c                        |  16 ++
 fs/smb/client/cifsfs.c                             |   2 +
 fs/smb/client/netlink.c                            |   6 +-
 fs/smb/client/smb2ops.c                            |   4 +-
 fs/smb/client/smb2transport.c                      |   2 +
 fs/smb/server/oplock.c                             |   6 +-
 fs/smb/server/smb2pdu.c                            |  15 +-
 fs/smb/server/smbacl.c                             |  78 ++++--
 fs/smb/server/vfs_cache.c                          | 118 ++++++---
 fs/sysfs/group.c                                   |   2 +-
 fs/zonefs/super.c                                  |   6 +-
 include/asm-generic/kprobes.h                      |   2 +-
 include/asm-generic/ring_buffer.h                  |  13 +
 include/crypto/krb5.h                              |   9 +-
 include/drm/drm_modeset_helper_vtables.h           |  12 +
 include/drm/drm_vblank.h                           |  32 +++
 include/drm/drm_vblank_helper.h                    |  56 +++++
 include/linux/cgroup.h                             |   1 +
 include/linux/cleanup.h                            |   5 +
 include/linux/fprobe.h                             |   5 +
 include/linux/fwnode.h                             |   1 +
 include/linux/gfp_types.h                          |  10 +-
 include/linux/highmem.h                            |   7 +-
 include/linux/libata.h                             |   7 +-
 include/linux/netfilter/x_tables.h                 |   3 +-
 include/linux/netfilter_arp/arp_tables.h           |   1 -
 include/linux/netfilter_ipv4/ip_tables.h           |   1 -
 include/linux/netfilter_ipv6/ip6_tables.h          |   1 -
 include/linux/netfs.h                              |   2 +-
 include/linux/soc/airoha/airoha_offload.h          |   6 +-
 include/net/bluetooth/bluetooth.h                  |   1 +
 include/net/net_shaper.h                           |   1 +
 include/net/netfilter/nf_queue.h                   |   1 +
 include/net/tcp.h                                  |   7 +-
 include/trace/events/btrfs.h                       |   4 +-
 include/trace/events/netfs.h                       |   8 +
 include/trace/events/rxrpc.h                       |   1 +
 io_uring/net.c                                     |  26 +-
 io_uring/nop.c                                     |   4 +-
 io_uring/waitid.c                                  |   1 +
 kernel/cgroup/cpuset.c                             |   8 +-
 kernel/cgroup/rstat.c                              |  37 +--
 kernel/dma/debug.c                                 |   9 +-
 kernel/dma/mapping.c                               |   4 -
 kernel/irq_work.c                                  |   7 +
 kernel/sched/core.c                                | 163 +++++-------
 kernel/sched/ext.c                                 |  44 ++--
 kernel/sched/sched.h                               |  33 ++-
 kernel/sched/syscalls.c                            |  97 ++++----
 kernel/trace/bpf_trace.c                           |   3 +-
 kernel/trace/fprobe.c                              | 200 ++++++++++-----
 kernel/trace/ring_buffer.c                         |  30 ++-
 kernel/trace/trace_events_hist.c                   |   6 +-
 kernel/trace/tracing_map.c                         |  17 +-
 lib/kunit/Kconfig                                  |   5 +-
 lib/tests/test_kprobes.c                           |  29 ++-
 mm/damon/sysfs-schemes.c                           |   1 +
 mm/memcontrol.c                                    |   6 +-
 mm/memory.c                                        |  24 +-
 mm/memory_hotplug.c                                |   2 +
 mm/page_alloc.c                                    |   8 +-
 net/batman-adv/bat_iv_ogm.c                        |  82 +++++--
 net/batman-adv/bat_v_ogm.c                         |  59 +++--
 net/batman-adv/bridge_loop_avoidance.c             | 109 ++++++---
 net/batman-adv/distributed-arp-table.c             |   3 +
 net/batman-adv/fragmentation.c                     |  58 ++++-
 net/batman-adv/gateway_client.c                    |   4 +
 net/batman-adv/mesh-interface.c                    |   1 +
 net/batman-adv/originator.c                        |   4 +-
 net/batman-adv/tp_meter.c                          | 117 +++++----
 net/batman-adv/translation-table.c                 |  55 ++++-
 net/batman-adv/tvlv.c                              |  28 ++-
 net/batman-adv/tvlv.h                              |   2 +-
 net/batman-adv/types.h                             |  59 +++--
 net/bluetooth/af_bluetooth.c                       |  99 ++++++--
 net/bluetooth/bnep/core.c                          |   2 +-
 net/bluetooth/iso.c                                |  14 +-
 net/bluetooth/l2cap_core.c                         |   2 +-
 net/bluetooth/l2cap_sock.c                         |  51 +++-
 net/bluetooth/mgmt.c                               |   6 +
 net/bluetooth/rfcomm/sock.c                        |   9 +-
 net/bluetooth/sco.c                                |   9 +-
 net/bridge/br_mrp_netlink.c                        |   4 +-
 net/bridge/br_multicast.c                          |  27 +-
 net/bridge/netfilter/ebtable_broute.c              |  14 +-
 net/bridge/netfilter/ebtable_filter.c              |  14 +-
 net/bridge/netfilter/ebtable_nat.c                 |  12 +-
 net/bridge/netfilter/ebtables.c                    |  71 +++---
 net/core/dev.c                                     |  21 +-
 net/core/gro.c                                     |   3 +
 net/core/skmsg.c                                   |   9 +-
 net/ethtool/bitset.c                               |   8 +-
 net/ethtool/phy.c                                  |  36 ++-
 net/ipv4/inet_connection_sock.c                    |   2 +-
 net/ipv4/netfilter/arp_tables.c                    |  18 +-
 net/ipv4/netfilter/arptable_filter.c               |  27 +-
 net/ipv4/netfilter/ip_tables.c                     |  18 +-
 net/ipv4/netfilter/iptable_filter.c                |  27 +-
 net/ipv4/netfilter/iptable_mangle.c                |  29 +--
 net/ipv4/netfilter/iptable_nat.c                   |   6 +-
 net/ipv4/netfilter/iptable_raw.c                   |  26 +-
 net/ipv4/netfilter/iptable_security.c              |  27 +-
 net/ipv4/raw.c                                     |   2 +-
 net/ipv4/tcp.c                                     |   3 -
 net/ipv4/tcp_ao.c                                  |   3 +-
 net/ipv4/tcp_input.c                               |  15 +-
 net/ipv4/tcp_ipv4.c                                |   3 +-
 net/ipv6/exthdrs.c                                 |  21 +-
 net/ipv6/netfilter/ip6_tables.c                    |  18 +-
 net/ipv6/netfilter/ip6t_hbh.c                      |   4 +
 net/ipv6/netfilter/ip6table_filter.c               |  26 +-
 net/ipv6/netfilter/ip6table_mangle.c               |  27 +-
 net/ipv6/netfilter/ip6table_nat.c                  |   6 +-
 net/ipv6/netfilter/ip6table_raw.c                  |  24 +-
 net/ipv6/netfilter/ip6table_security.c             |  27 +-
 net/ipv6/tcp_ipv6.c                                |   3 +-
 net/l2tp/l2tp_core.c                               |   2 +-
 net/mac80211/mlme.c                                |   5 +-
 net/mac80211/parse.c                               |  71 +++---
 net/mptcp/pm.c                                     |  56 ++++-
 net/netfilter/ipset/ip_set_hash_ipmark.c           |   6 +-
 net/netfilter/ipset/ip_set_hash_ipport.c           |   5 +-
 net/netfilter/ipset/ip_set_hash_ipportip.c         |   5 +-
 net/netfilter/ipset/ip_set_hash_ipportnet.c        |   5 +-
 net/netfilter/nf_queue.c                           |   4 +-
 net/netfilter/nfnetlink_queue.c                    |   2 +
 net/netfilter/nft_inner.c                          |   3 +-
 net/netfilter/x_tables.c                           | 100 ++++++--
 net/phonet/pep.c                                   |  19 +-
 net/rxrpc/rxgk.c                                   |  15 +-
 net/shaper/shaper.c                                | 224 ++++++++++++-----
 net/shaper/shaper_nl_gen.c                         |   7 +-
 net/shaper/shaper_nl_gen.h                         |   2 +
 net/smc/af_smc.c                                   |   3 +-
 net/smc/smc_tracepoint.h                           |   2 +-
 net/tls/tls_sw.c                                   |  46 ++--
 net/unix/af_unix.c                                 |  11 +-
 net/vmw_vsock/virtio_transport_common.c            | 103 ++++----
 net/vmw_vsock/vmci_transport.c                     |   2 +-
 net/wireless/scan.c                                |   3 +
 scripts/gcc-plugins/gcc-common.h                   |   4 +-
 scripts/package/PKGBUILD                           |   2 +-
 security/lsm_syscalls.c                            |   9 +-
 sound/core/pcm_lib.c                               |   3 +
 sound/core/seq/seq_ump_client.c                    |  22 +-
 sound/hda/codecs/realtek/alc269.c                  |  12 +-
 sound/hda/codecs/side-codecs/cs35l41_hda.c         |   4 +-
 sound/hda/codecs/side-codecs/cs35l56_hda.c         |   1 +
 sound/pci/asihpi/hpicmn.c                          |   6 +
 sound/soc/amd/acp/acp-sdw-legacy-mach.c            |   2 +-
 sound/soc/codecs/cs35l56-sdw.c                     |   3 +-
 sound/soc/codecs/fs210x.c                          |   2 +-
 sound/soc/sdw_utils/soc_sdw_utils.c                |   4 +
 sound/soc/soc-utils.c                              |   1 +
 sound/soc/sof/amd/acp.c                            |   2 +-
 sound/usb/misc/ua101.c                             |   5 +-
 sound/usb/mixer_scarlett2.c                        |   9 +-
 tools/testing/selftests/mm/hmm-tests.c             |  50 ++++
 tools/testing/selftests/mm/run_vmtests.sh          |   2 +-
 tools/testing/selftests/net/lib/xdp_native.bpf.c   |  55 +++--
 tools/testing/selftests/ublk/kublk.c               |  11 +
 399 files changed, 4735 insertions(+), 2348 deletions(-)

Read the cover letter in its thread