7.0.11-rc1 review

Greg Kroah-Hartman ceph-devel dri-devel intel-wired-lan linux-arm-msm linux-cifs linux-fsdevel linux-patches lkml netfs stable 1 version May 28 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest May 28461 patches 33 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/461	iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs`drivers/iommu/amd/debugfs.c`	+19 ~~-23~~	0 replies
2/461	iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs`drivers/iommu/amd/debugfs.c`	+5 -4	0 replies
3/461	ksmbd: close durable scavenger races against m_fp_list lookups`fs/smb/server/vfs_cache.c`	+76 ~~-26~~	0 replies
4/461	smb: client: reject userspace cifs.spnego descriptions`fs/smb/client/cifs_spnego.c`	+16 -0	0 replies
5/461	ata: libata-scsi: improve readability of ata_scsi_qc_issue()`drivers/ata/libata-scsi.c`	+21 ~~-22~~	0 replies
6/461	ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT`drivers/ata/libata-scsi.c`	+3 -2	0 replies
7/461	ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS`drivers/ata/libata-pmp.c` `drivers/ata/libata-scsi.c` `drivers/ata/sata_sil24.c` +1 more	+26 -2	0 replies
8/461	ata: libata-scsi: do not needlessly defer commands when using PMP with FBS`drivers/ata/libata-core.c` `drivers/ata/libata-eh.c` `drivers/ata/libata-pmp.c` +2 more	+47 ~~-35~~	0 replies
9/461	sysfs: dont remove existing directory on update failure`fs/sysfs/group.c`	+1 -1	0 replies
10/461	mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()`mm/damon/sysfs-schemes.c`	+1 -0	0 replies
11/461	ksmbd: fix null pointer dereference in compare_guid_key()`fs/smb/server/oplock.c`	+5 -1	0 replies
12/461	ksmbd: fix null pointer dereference in proc_show_files()`fs/smb/server/vfs_cache.c`	+1 -1	0 replies
13/461	ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow`fs/smb/server/smbacl.c`	+9 -3	0 replies
14/461	ksmbd: validate SID in parent security descriptor during ACL inheritance`fs/smb/server/smbacl.c`	+50 ~~-16~~	0 replies
15/461	regulator: tps65219: fix irq_data.rdev not being assigned`drivers/regulator/tps65219-regulator.c`	+95 ~~-40~~	0 replies
16/461	x86/mm: Disable broadcast TLB flush when PCID is disabled`arch/x86/kernel/cpu/cpuid-deps.c`	+1 -0	0 replies
17/461	scripts/gdb: mm: cast untyped symbols in x86_page_ops`scripts/gdb/linux/mm.py`	+3 -3	0 replies
18/461	smb: client: require net admin for CIFS SWN netlink`fs/smb/client/netlink.c`	+5 -1	0 replies
19/461	smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()`fs/smb/client/smb2transport.c`	+2 -0	0 replies
20/461	smb: client: use data_len for SMB2 READ encrypted folioq copy`fs/smb/client/smb2ops.c`	+2 -2	0 replies
21/461	smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close`fs/smb/server/vfs_cache.c`	+12 -4	0 replies
22/461	hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX`drivers/hwmon/pmbus/adm1266.c`	+1 -1	0 replies
23/461	ALSA: ua101: Reject too-short USB descriptors`sound/usb/misc/ua101.c`	+3 -2	0 replies
24/461	ALSA: pcm: Dont setup bogus iov_iter for silencing`sound/core/pcm_lib.c`	+3 -0	0 replies
25/461	ALSA: asihpi: Fix potential OOB array access at reading cache`sound/pci/asihpi/hpicmn.c`	+6 -0	0 replies
26/461	ALSA: scarlett2: Allow flash writes ending at segment boundary`sound/usb/mixer_scarlett2.c`	+5 -2	0 replies
27/461	ACPI: battery: Fix system wakeup on critical battery status`drivers/acpi/battery.c`	+3 -1	0 replies
28/461	efi: Allocate runtime workqueue before ACPI init`drivers/firmware/efi/efi.c`	+16 ~~-12~~	0 replies
29/461	spi: amd: Set correct bus number in ACPI probe path`drivers/spi/spi-amd.c`	+1 -1	0 replies
30/461	io_uring/waitid: clear waitid info before copying it to userspace`io_uring/waitid.c`	+1 -0	0 replies
31/461	drivers/base/memory: fix memory block reference leak in poison accounting`drivers/base/memory.c`	+6 -2	0 replies
32/461	ipv6: ioam: refresh hdr pointer before ioam6_event()`net/ipv6/exthdrs.c`	+3 -3	0 replies
33/461	mm/memory: fix spurious warning when unmapping device-private/exclusive pages`mm/memory.c` `tools/testing/selftests/mm/hmm-tests.c`	+51 -1	0 replies
34/461	mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special()`mm/memory.c`	+19 -3	0 replies
35/461	mm/memory_hotplug: fix memory block reference leak on remove`mm/memory_hotplug.c`	+2 -0	0 replies
36/461	mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free`arch/arm64/include/asm/page.h` `arch/arm64/mm/fault.c` `include/linux/gfp_types.h` +2 more	+21 ~~-17~~	0 replies
37/461	mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page`mm/migrate_device.c`	+1 -1	0 replies
38/461	selftests/mm: run_vmtests.sh: fix destructive tests invocation`tools/testing/selftests/mm/run_vmtests.sh`	+1 -1	0 replies
39/461	mm/damon: fix damos_stat tracepoint format for sz_applied`include/trace/events/damon.h`	+1 -1	0 replies
40/461	net: wwan: iosm: fix potential memory leaks in ipc_imem_init()`drivers/net/wwan/iosm/iosm_ipc_imem.c`	+2 -0	0 replies
41/461	Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()`net/bluetooth/af_bluetooth.c` `net/bluetooth/iso.c` `net/bluetooth/l2cap_sock.c` +2 more	+78 ~~-10~~	0 replies
42/461	Bluetooth: ISO: drop ISO_END frames received without prior ISO_START`net/bluetooth/iso.c`	+5 -0	0 replies
43/461	Bluetooth: bnep: Fix UAF read of dev->name`net/bluetooth/bnep/core.c`	+1 -1	0 replies
44/461	Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths`drivers/bluetooth/hci_ldisc.c`	+40 -8	0 replies
45/461	Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer`net/bluetooth/l2cap_core.c`	+1 -1	0 replies
46/461	Bluetooth: hci_qca: Convert timeout from jiffies to ms`drivers/bluetooth/hci_qca.c`	+16 ~~-17~~	0 replies
47/461	Bluetooth: MGMT: validate Add Extended Advertising Data length`net/bluetooth/mgmt.c`	+6 -0	0 replies
48/461	Bluetooth: serialize accept_q access`include/net/bluetooth/bluetooth.h` `net/bluetooth/af_bluetooth.c`	+66 ~~-22~~	0 replies
49/461	phonet/pep: disable BH around forwarded sk_receive_skb()`net/phonet/pep.c`	+17 -2	0 replies
50/461	net: bcmgenet: keep RBUF EEE/PM disabled`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+4 -5	0 replies
51/461	net: devmem: reject dma-buf bind with non-page-aligned size or SG length`net/core/devmem.c`	+11 -0	0 replies
52/461	net: phy: skip EEE advertisement write when autoneg is disabled`drivers/net/phy/phy-c45.c`	+8 -0	0 replies
53/461	net: hsr: defer node table free until after RCU readers`net/hsr/hsr_framereg.c`	+2 -2	0 replies
54/461	net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover`drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c`	+3 -3	0 replies
55/461	net: ifb: report ethtool stats over num_tx_queues`drivers/net/ifb.c`	+5 -6	0 replies
56/461	net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis()`drivers/net/pse-pd/pse_core.c`	+1 -1	0 replies
57/461	netfilter: ip6t_hbh: reject oversized option lists`net/ipv6/netfilter/ip6t_hbh.c`	+4 -0	0 replies
58/461	netfilter: nf_queue: hold bridge skb->dev while queued`include/net/netfilter/nf_queue.h` `net/netfilter/nf_queue.c` `net/netfilter/nfnetlink_queue.c`	+6 -1	0 replies
59/461	netfilter: ipset: stop hash:* range iteration at end`net/netfilter/ipset/ip_set_hash_ipmark.c` `net/netfilter/ipset/ip_set_hash_ipport.c` `net/netfilter/ipset/ip_set_hash_ipportip.c` +1 more	+17 -4	0 replies
60/461	netfilter: nft_inner: Fix IPv6 inner_thoff desync`net/netfilter/nft_inner.c`	+0 -1	0 replies
61/461	net: ethtool: fix NULL pointer dereference in phy_reply_size`net/ethtool/phy.c`	+30 -2	0 replies
62/461	net: ethtool: phy: avoid NULL deref when PHY driver is unbound`net/ethtool/phy.c`	+6 -4	0 replies
63/461	ACPI: driver: Check ACPI_COMPANION() against NULL during probe`drivers/acpi/ac.c` `drivers/acpi/acpi_pad.c` `drivers/acpi/acpi_tad.c` +11 more	+68 ~~-15~~	0 replies
64/461	sched_ext: Fix missing warning in scx_set_task_state() default case`kernel/sched/ext.c`	+2 -1	0 replies
65/461	sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path`kernel/sched/ext.c`	+1 -1	0 replies
66/461	l2tp: use list_del_rcu in l2tp_session_unhash`net/l2tp/l2tp_core.c`	+1 -1	0 replies
67/461	qed: fix double free in qed_cxt_tables_alloc()`drivers/net/ethernet/qlogic/qed/qed_cxt.c`	+2 -0	0 replies
68/461	ring-buffer: Fix reporting of missed events in iterator`kernel/trace/ring_buffer.c`	+3 -5	0 replies
69/461	ring-buffer: Flush and stop persistent ring buffer on panic`arch/alpha/include/asm/Kbuild` `arch/arc/include/asm/Kbuild` `arch/arm/include/asm/Kbuild` +20 more	+65 -0	0 replies
70/461	wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb`net/mac80211/rx.c`	+5 -1	0 replies
71/461	ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()`net/ipv6/exthdrs.c`	+13 -2	0 replies
72/461	selftests: mptcp: drop nanoseconds width specifier`tools/testing/selftests/net/mptcp/mptcp_connect.sh` `tools/testing/selftests/net/mptcp/mptcp_lib.sh`	+8 -8	0 replies
73/461	mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient`net/mptcp/pm.c`	+46 ~~-10~~	0 replies
74/461	vsock/vmci: fix UAF when peer resets connection during handshake`net/vmw_vsock/vmci_transport.c`	+1 -1	0 replies
75/461	vsock/virtio: reset connection on receiving queue overflow`net/vmw_vsock/virtio_transport_common.c`	+15 -5	0 replies
76/461	ice: fix VF queue configuration with low MTU values`drivers/net/ethernet/intel/ice/virt/queues.c`	+1 -1	0 replies
77/461	wifi: ath11k: clear shared SRNG pointer state on restart`drivers/net/wireless/ath/ath11k/hal.c`	+11 -3	0 replies
78/461	wifi: iwlwifi: mvm: fix driver-set TX rates on old devices`drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c` `drivers/net/wireless/intel/iwlwifi/mvm/utils.c`	+22 ~~-19~~	0 replies
79/461	wifi: iwlwifi: mld: stop TX during firmware restart`drivers/net/wireless/intel/iwlwifi/mld/tx.c`	+10 -0	0 replies
80/461	ipv4: raw: reject IP_HDRINCL packets with ihl < 5`net/ipv4/raw.c`	+1 -1	0 replies
81/461	ixgbevf: fix use-after-free in VEPA multicast source pruning`drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c`	+1 -0	0 replies
82/461	rbd: eliminate a race in lock_dwork draining on unmap`drivers/block/rbd.c`	+8 ~~-12~~	0 replies
83/461	mptcp: do not drop partial packets`net/mptcp/protocol.c`	+19 -5	0 replies
84/461	mptcp: reset rcv wnd on disconnect`net/mptcp/protocol.c`	+1 -0	0 replies
85/461	lsm: hold cred_guard_mutex for lsm_set_self_attr()`security/lsm_syscalls.c`	+8 -1	0 replies
86/461	octeontx2-af: CGX: add bounds check to cgx_speed_mbps index`drivers/net/ethernet/marvell/octeontx2/af/cgx.c`	+6 -1	0 replies
87/461	octeontx2-pf: fix double free in rvu_rep_rsrc_init()`drivers/net/ethernet/marvell/octeontx2/nic/rep.c`	+2 -1	0 replies
88/461	igc: fix potential skb leak in igc_fpe_xmit_smd_frame()`drivers/net/ethernet/intel/igc/igc_tsn.c`	+7 -1	0 replies
89/461	ice: fix locking around wait_event_interruptible_locked_irq`drivers/net/ethernet/intel/ice/ice_ptp_hw.c`	+4 -5	0 replies
90/461	ice: fix setting promisc mode while adding VID filter`drivers/net/ethernet/intel/ice/ice_main.c`	+1 -1	0 replies
91/461	ice: restore PTP Rx timestamp config after ethtool set-channels`drivers/net/ethernet/intel/ice/ice_main.c`	+6 -0	0 replies
92/461	wifi: cfg80211: advance loop vars in cfg80211_merge_profile()`net/wireless/scan.c`	+3 -0	0 replies
93/461	af_unix: Fix UAF read of tail->len in unix_stream_data_wait()`net/unix/af_unix.c`	+2 -9	0 replies
94/461	wifi: mac80211: consume only present negotiated TTLM maps`net/mac80211/mlme.c`	+1 -1	0 replies
95/461	octeontx2-pf: avoid double free of pool->stack on AQ init failure`drivers/net/ethernet/marvell/octeontx2/nic/cn20k.c` `drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c`	+4 -0	0 replies
96/461	cifs: Fix busy dentry used after unmounting`fs/smb/client/cifsfs.c`	+2 -0	0 replies
97/461	tracing: Do not call map->ops->elt_free() if elt_alloc() fails`kernel/trace/tracing_map.c`	+13 -4	0 replies
98/461	ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put()`sound/soc/codecs/pcm512x.c`	+3 -3	0 replies
99/461	arm64: probes: Handle probes on hinted conditional branch instructions`arch/arm64/include/asm/insn.h`	+1 -1	0 replies
100/461	KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits`arch/arm64/kvm/vgic/vgic-its.c`	+4 -0	0 replies
101/461	KVM: arm64: vgic: Free private_irqs when init fails after allocation`arch/arm64/kvm/arm.c`	+3 -1	0 replies
102/461	KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)`arch/x86/kvm/svm/avic.c`	+7 -5	0 replies
103/461	riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM`arch/riscv/kvm/vcpu_pmu.c`	+4 -2	0 replies
104/461	riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when OOM`arch/riscv/kvm/vcpu_pmu.c`	+4 -2	0 replies
105/461	virt: sev-guest: Explicitly leak pages in unknown state`drivers/virt/coco/sev-guest/sev-guest.c`	+7 -3	0 replies
106/461	i2c: tegra: fix pm_runtime leak on mutex_lock failure`drivers/i2c/busses/i2c-tegra.c`	+3 -1	0 replies
107/461	drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe`drivers/gpu/drm/bridge/chipone-icn6211.c`	+3 -1	0 replies
108/461	spi: qup: fix error pointer deref after DMA setup failure`drivers/spi/spi-qup.c`	+3 -0	0 replies
109/461	phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for Exynos7870`drivers/phy/samsung/phy-exynos5-usbdrd.c`	+4 -3	0 replies
110/461	phy: tegra: xusb: Fix per-pad high-speed termination calibration`drivers/phy/tegra/xusb-tegra186.c` `drivers/phy/tegra/xusb.h`	+27 -7	0 replies
111/461	phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after SM8650 G4 fix`drivers/phy/qualcomm/phy-qcom-qmp-ufs.c`	+1 -0	0 replies
112/461	phy: qcom: edp: Unify generic DP/eDP swing and pre-emphasis tables`drivers/phy/qualcomm/phy-qcom-edp.c`	+10 ~~-31~~	0 replies
113/461	phy: qcom: edp: Add eDP/DP mode switch support`drivers/phy/qualcomm/phy-qcom-edp.c`	+34 ~~-12~~	0 replies
114/461	phy: qcom: edp: Fix AUX_CFG8 programming for DP mode`drivers/phy/qualcomm/phy-qcom-edp.c`	+1 -6	0 replies
115/461	scsi: isci: Fix use-after-free in device removal path`drivers/scsi/isci/host.c`	+3 -0	0 replies
116/461	spi: ep93xx: fix error pointer deref after DMA setup failure`drivers/spi/spi-ep93xx.c`	+2 -0	0 replies
117/461	spi: sprd: fix error pointer deref after DMA setup failure`drivers/spi/spi-sprd.c`	+2 -1	0 replies
118/461	spi: ti-qspi: fix use-after-free after DMA setup failure`drivers/spi/spi-ti-qspi.c`	+1 -0	0 replies
119/461	mm/slub: hold cpus_read_lock around flush_rcu_sheaves_on_cache()`mm/slab_common.c` `mm/slub.c`	+3 -0	0 replies
120/461	RDMA/siw: Reject MPA FPDU length underflow before signed receive math`drivers/infiniband/sw/siw/siw_qp_rx.c`	+15 -0	0 replies
121/461	s390/cio: Restore GFP_DMA for CHSC allocation`drivers/s390/cio/chsc.c` `drivers/s390/cio/chsc_sch.c` `drivers/s390/cio/scm.c`	+13 ~~-13~~	0 replies
122/461	s390/pai: Disable duplicate read of kernel PAI counter value`arch/s390/kernel/perf_pai.c`	+1 -1	0 replies
123/461	s390/pai: Fix missing PAI counter increments under heavy load`arch/s390/kernel/perf_pai.c`	+20 -9	0 replies
124/461	fwctl: pds: Validate RPC input size before parsing`drivers/fwctl/pds/main.c`	+3 -0	0 replies
125/461	LoongArch: kprobes: Use larch_insn_text_copy() to patch instructions`arch/loongarch/kernel/kprobes.c`	+6 -4	0 replies
126/461	LoongArch: Remove unused code to avoid build warning`arch/loongarch/mm/init.c`	+0 -4	0 replies
127/461	cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E`drivers/cpufreq/intel_pstate.c`	+1 -1	0 replies
128/461	device property: set fwnode->secondary to NULL in fwnode_init()`include/linux/fwnode.h`	+1 -0	0 replies
129/461	drm/i915/display: Copy color pipeline from plane in the primary joiner pipe`drivers/gpu/drm/i915/display/intel_plane.c`	+1 -1	0 replies
130/461	drm/msm: Fix shrinker deadlock`drivers/gpu/drm/msm/msm_gem_shrinker.c`	+16 ~~-24~~	0 replies
131/461	drm/v3d: Fix use-after-free of CPU job query arrays on error path`drivers/gpu/drm/v3d/v3d_sched.c` `drivers/gpu/drm/v3d/v3d_submit.c`	+17 ~~-18~~	0 replies
132/461	drm/v3d: Release indirect CSD GEM reference on CPU job free`drivers/gpu/drm/v3d/v3d_submit.c`	+3 -0	0 replies
133/461	drm/virtio: use uninterruptible resv lock for plane updates`drivers/gpu/drm/virtio/virtgpu_drv.h` `drivers/gpu/drm/virtio/virtgpu_gem.c` `drivers/gpu/drm/virtio/virtgpu_plane.c`	+26 -2	0 replies
134/461	drm/xe/multi_queue: Fix secondary queue error case`drivers/gpu/drm/xe/xe_guc_submit.c`	+8 -8	0 replies
135/461	drm/amdgpu/vpe: Force collaborate sync after TRAP`drivers/gpu/drm/amd/amdgpu/amdgpu_vpe.c`	+6 -1	0 replies
136/461	drm/bridge: it66121: acquire reset GPIO in probe`drivers/gpu/drm/bridge/ite-it66121.c`	+5 -0	0 replies
137/461	drm/bridge: megachips: remove bridge when irq request fails`drivers/gpu/drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c`	+10 -6	0 replies
138/461	drm/amd/display: Fix integer overflow in bios_get_image()`drivers/gpu/drm/amd/display/dc/bios/bios_parser_helper.c`	+6 -3	0 replies
139/461	drm/amd/display: Validate GPIO pin LUT table size before iterating`drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c`	+9 -0	0 replies
140/461	drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async`drivers/gpu/drm/amd/display/dc/core/dc.c`	+5 -1	0 replies
141/461	batman-adv: v: stop OGMv2 on disabled interface`net/batman-adv/bat_v_ogm.c`	+21 ~~-12~~	0 replies
142/461	batman-adv: tvlv: abort OGM send on tvlv append failure`net/batman-adv/bat_iv_ogm.c` `net/batman-adv/bat_v_ogm.c` `net/batman-adv/tvlv.c` +1 more	+40 ~~-21~~	0 replies
143/461	batman-adv: tvlv: reject oversized TVLV packets`net/batman-adv/tvlv.c`	+8 -3	0 replies
144/461	batman-adv: iv: recover OGM scheduling after forward packet error`net/batman-adv/bat_iv_ogm.c` `net/batman-adv/types.h`	+60 ~~-19~~	0 replies
145/461	batman-adv: mcast: fix use-after-free in orig_node RCU release`net/batman-adv/originator.c`	+2 -2	0 replies
146/461	batman-adv: clear current gateway during teardown`net/batman-adv/gateway_client.c`	+4 -0	0 replies
147/461	batman-adv: dat: handle forward allocation error`net/batman-adv/distributed-arp-table.c`	+3 -0	0 replies
148/461	batman-adv: fix fragment reassembly length accounting`net/batman-adv/fragmentation.c` `net/batman-adv/types.h`	+18 -7	0 replies
149/461	batman-adv: fix tp_meter counter underflow during shutdown`net/batman-adv/tp_meter.c`	+2 -2	0 replies
150/461	batman-adv: frag: disallow unicast fragment in fragment`net/batman-adv/fragmentation.c`	+35 -0	0 replies
151/461	batman-adv: bla: fix report_work leak on backbone_gw purge`net/batman-adv/bridge_loop_avoidance.c`	+38 ~~-22~~	0 replies
152/461	batman-adv: bla: avoid double decrement of bla.num_requests`net/batman-adv/bridge_loop_avoidance.c` `net/batman-adv/mesh-interface.c` `net/batman-adv/types.h`	+67 ~~-24~~	0 replies
153/461	batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface`net/batman-adv/bridge_loop_avoidance.c`	+4 -2	0 replies
154/461	batman-adv: tp_meter: avoid use of uninit sender vars`net/batman-adv/tp_meter.c`	+9 -2	0 replies
155/461	batman-adv: tp_meter: directly shut down timer on cleanup`net/batman-adv/tp_meter.c`	+1 -7	0 replies
156/461	batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown`net/batman-adv/tp_meter.c` `net/batman-adv/types.h`	+14 -2	0 replies
157/461	batman-adv: tp_meter: fix race condition in send error reporting`net/batman-adv/tp_meter.c` `net/batman-adv/types.h`	+30 ~~-20~~	0 replies
158/461	batman-adv: tp_meter: avoid role confusion in tp_list`net/batman-adv/tp_meter.c`	+36 ~~-23~~	0 replies
159/461	batman-adv: tt: fix TOCTOU race for reported vlans`net/batman-adv/translation-table.c`	+9 -4	0 replies
160/461	batman-adv: tt: reject oversized local TVLV buffers`net/batman-adv/translation-table.c`	+5 -3	0 replies
161/461	batman-adv: tt: avoid empty VLAN responses`net/batman-adv/translation-table.c`	+17 -3	0 replies
162/461	batman-adv: tt: fix negative last_changeset_len`net/batman-adv/types.h`	+1 -1	0 replies
163/461	batman-adv: tt: fix negative tt_buff_len`net/batman-adv/types.h`	+1 -1	0 replies
164/461	batman-adv: tt: prevent TVLV entry number overflow`net/batman-adv/translation-table.c`	+17 -3	0 replies
165/461	hwmon: (pmbus/adm1266) seed timestamp from the real-time clock`drivers/hwmon/pmbus/adm1266.c`	+1 -1	0 replies
166/461	hwmon: (pmbus/adm1266) reject implausible blackbox record_count`drivers/hwmon/pmbus/adm1266.c`	+3 -0	0 replies
167/461	hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer`drivers/hwmon/pmbus/adm1266.c`	+1 -1	0 replies
168/461	hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer`drivers/hwmon/pmbus/adm1266.c`	+3 -1	0 replies
169/461	hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR`drivers/hwmon/pmbus/adm1266.c`	+1 -1	0 replies
170/461	hwmon: (pmbus/adm1266) dont clobber GPIO bits before PDIO read in get_multiple`drivers/hwmon/pmbus/adm1266.c`	+0 -1	0 replies
171/461	hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe()`drivers/hwmon/pmbus/adm1266.c`	+4 -4	0 replies
172/461	hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe()`drivers/hwmon/pmbus/adm1266.c`	+4 -4	0 replies
173/461	hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors`drivers/hwmon/pmbus/adm1266.c`	+6 -0	0 replies
174/461	pinctrl: mediatek: moore: implement gpio_chip::get_direction()`drivers/pinctrl/mediatek/pinctrl-moore.c`	+18 -0	0 replies
175/461	pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function`drivers/pinctrl/qcom/pinctrl-ipq4019.c` `drivers/pinctrl/qcom/pinctrl-msm.h`	+6 -1	0 replies
176/461	arm64: dts: renesas: r8a78000: Fix SCIF brg_int clocks`arch/arm64/boot/dts/renesas/r8a78000.dtsi`	+4 -4	0 replies
177/461	ARM: dts: renesas: genmai: Drop superfluous cells`arch/arm/boot/dts/renesas/r7s72100-genmai.dts`	+0 -3	0 replies
178/461	ARM: dts: renesas: rskrza1: Drop superfluous cells`arch/arm/boot/dts/renesas/r7s72100-rskrza1.dts`	+0 -2	0 replies
179/461	pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for high pins during suspend/resume`drivers/pinctrl/renesas/pinctrl-rzg2l.c`	+1 -1	0 replies
180/461	pinctrl: renesas: rzg2l: Fix SMT register cache handling`drivers/pinctrl/renesas/pinctrl-rzg2l.c`	+14 -7	0 replies
181/461	pinctrl: meson: amlogic-a4: fix deadlock issue`drivers/pinctrl/meson/pinctrl-amlogic-a4.c`	+3 -3	0 replies
182/461	pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615`drivers/pinctrl/qcom/pinctrl-qcs615.c`	+3 -3	0 replies
183/461	kho: skip KHO for crash kernel`kernel/liveupdate/kexec_handover.c`	+1 -1	0 replies
184/461	mm/memfd_luo: report error when restoring a folio fails mid-loop`mm/memfd_luo.c`	+1 -0	0 replies
185/461	HID: intel-thc-hid: Intel-quickspi: Fix some error codes`drivers/hid/intel-thc-hid/intel-quickspi/quickspi-protocol.c`	+2 -2	0 replies
186/461	HID: uclogic: Fix regression of input name assignment`drivers/hid/hid-uclogic-core.c`	+3 -1	0 replies
187/461	firmware: arm_ffa: Check for NULL FF-A ID table while driver registration`drivers/firmware/arm_ffa/bus.c`	+3 -1	0 replies
188/461	firmware: arm_ffa: Skip free_pages on RX buffer alloc failure`drivers/firmware/arm_ffa/driver.c`	+1 -1	0 replies
189/461	firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue`drivers/firmware/arm_ffa/driver.c`	+1 -1	0 replies
190/461	firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0`drivers/firmware/arm_ffa/driver.c`	+15 -0	0 replies
191/461	riscv: errata: Fix bitwise vs logical AND in MIPS errata patching`arch/riscv/errata/mips/errata.c`	+1 -1	0 replies
192/461	riscv: Fix register corruption from uninitialized cregs on error`arch/riscv/kernel/compat_signal.c` `arch/riscv/kernel/ptrace.c`	+4 -2	0 replies
193/461	riscv: mm: Fixup no5lvl failure when vaddr is invalid`arch/riscv/mm/init.c`	+25 -0	0 replies
194/461	kunit: config: Enable KUNIT_DEBUGFS by default`lib/kunit/Kconfig`	+2 -2	0 replies
195/461	kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS`lib/kunit/Kconfig`	+1 -0	0 replies
196/461	pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150`drivers/pinctrl/qcom/pinctrl-sm8150.c`	+4 -4	0 replies
197/461	firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies`drivers/firmware/arm_ffa/driver.c`	+23 -6	0 replies
198/461	firmware: arm_ffa: Keep framework RX release under lock`drivers/firmware/arm_ffa/driver.c`	+13 ~~-16~~	0 replies
199/461	firmware: arm_ffa: Validate framework notification message layout`drivers/firmware/arm_ffa/driver.c`	+16 -2	0 replies
200/461	firmware: arm_ffa: Align RxTx buffer size before mapping`drivers/firmware/arm_ffa/driver.c`	+2 -1	0 replies
201/461	firmware: arm_ffa: Snapshot notifier callbacks under lock`drivers/firmware/arm_ffa/driver.c`	+23 ~~-12~~	0 replies
202/461	firmware: arm_ffa: Fix sched-recv callback partition lookup`drivers/firmware/arm_ffa/driver.c`	+3 -3	0 replies
203/461	ARM: integrator: Fix early initialization`arch/arm/mach-versatile/integrator_cp.c`	+4 -9	0 replies
204/461	ALSA: hda: cs35l56: Put ACPI device after setting companion`sound/hda/codecs/side-codecs/cs35l56_hda.c`	+1 -0	0 replies
205/461	ALSA: hda: cs35l41: Put ACPI device on missing physical node`sound/hda/codecs/side-codecs/cs35l41_hda.c`	+3 -1	0 replies
206/461	btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()`include/trace/events/btrfs.h`	+1 -3	0 replies
207/461	netfilter: x_tables: allow initial table replace without emitting audit log message`net/netfilter/x_tables.c`	+20 -9	0 replies
208/461	netfilter: x_tables: allocate hook ops while under mutex`include/linux/netfilter/x_tables.h` `net/ipv4/netfilter/arp_tables.c` `net/ipv4/netfilter/ip_tables.c` +2 more	+55 ~~-110~~	0 replies
209/461	netfilter: x_tables: unregister the templates first`net/ipv4/netfilter/arptable_filter.c` `net/ipv4/netfilter/iptable_filter.c` `net/ipv4/netfilter/iptable_mangle.c` +6 more	+9 -9	0 replies
210/461	netfilter: x_tables: add and use xt_unregister_table_pre_exit`include/linux/netfilter/x_tables.h` `include/linux/netfilter_arp/arp_tables.h` `include/linux/netfilter_ipv4/ip_tables.h` +16 more	+41 ~~-39~~	0 replies
211/461	netfilter: x_tables: add and use xtables_unregister_table_exit`include/linux/netfilter/x_tables.h` `net/ipv4/netfilter/arp_tables.c` `net/ipv4/netfilter/ip_tables.c` +4 more	+83 ~~-37~~	0 replies
212/461	netfilter: ebtables: move to two-stage removal scheme`net/bridge/netfilter/ebtable_broute.c` `net/bridge/netfilter/ebtable_filter.c` `net/bridge/netfilter/ebtable_nat.c` +1 more	+40 ~~-26~~	0 replies
213/461	netfilter: ebtables: close dangling table module init race`net/bridge/netfilter/ebtable_broute.c` `net/bridge/netfilter/ebtable_filter.c` `net/bridge/netfilter/ebtable_nat.c`	+14 ~~-20~~	0 replies
214/461	netfilter: x_tables: close dangling table module init race`net/ipv4/netfilter/arptable_filter.c` `net/ipv4/netfilter/iptable_filter.c` `net/ipv4/netfilter/iptable_mangle.c` +6 more	+105 ~~-99~~	0 replies
215/461	netfilter: bridge: eb_tables: close module init race`net/bridge/netfilter/ebtables.c`	+6 -5	0 replies
216/461	netfilter: nf_conntrack_expect: restore helper propagation via expectation`include/net/netfilter/nf_conntrack_expect.h` `net/netfilter/nf_conntrack_broadcast.c` `net/netfilter/nf_conntrack_core.c` +5 more	+39 ~~-12~~	0 replies
217/461	kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist()`include/asm-generic/kprobes.h`	+1 -1	0 replies
218/461	test_kprobes: clear kprobes between test runs`lib/tests/test_kprobes.c`	+18 ~~-11~~	0 replies
219/461	tcp: Fix imbalanced icsk_accept_queue count.`net/ipv4/inet_connection_sock.c`	+1 -1	0 replies
220/461	net: napi: Avoid gro timer misfiring at end of busypoll`net/core/dev.c`	+12 -9	0 replies
221/461	net: shaper: Reject reparenting of existing nodes`net/shaper/shaper.c`	+23 -7	0 replies
222/461	idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()`drivers/net/ethernet/intel/idpf/idpf_ptp.c`	+2 -2	0 replies
223/461	ice: fix setting RSS VSI hash for E830`drivers/net/ethernet/intel/ice/ice_main.c`	+1 -1	0 replies
224/461	ice: fix locking in ice_dcb_rebuild()`drivers/net/ethernet/intel/ice/ice_dcb_lib.c`	+2 -2	0 replies
225/461	ice: dpll: fix rclk pin state get for E810`drivers/net/ethernet/intel/ice/ice_dpll.c`	+5 -0	0 replies
226/461	ice: dpll: fix misplaced header macros`drivers/net/ethernet/intel/ice/ice_dpll.h`	+16 ~~-16~~	0 replies
227/461	net: lan966x: avoid unregistering netdev on register failure`drivers/net/ethernet/microchip/lan966x/lan966x_main.c`	+5 -3	0 replies
228/461	net: ti: icssm-prueth: fix eth_ports_node leak in probe`drivers/net/ethernet/ti/icssm/icssm_prueth.c`	+1 -0	0 replies
229/461	phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access`drivers/phy/marvell/phy-mvebu-a3700-utmi.c`	+2 -3	0 replies
230/461	phy: spacemit: Remove incorrect clk_disable() in spacemit_usb2phy_init()`drivers/phy/spacemit/phy-k1-usb2.c`	+0 -1	0 replies
231/461	NFSD: Fix infinite loop in layout state revocation`fs/nfsd/nfs4state.c`	+7 -0	0 replies
232/461	ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC`sound/soc/sdw_utils/soc_sdw_utils.c`	+2 -0	0 replies
233/461	ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC`sound/soc/sdw_utils/soc_sdw_utils.c`	+2 -0	0 replies
234/461	fprobe: Fix unregister_fprobe() to wait for RCU grace period`include/linux/fprobe.h` `kernel/trace/bpf_trace.c` `kernel/trace/fprobe.c`	+28 -3	0 replies
235/461	fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap`fs/mnt_idmapping.c`	+2 -0	0 replies
236/461	fs: Fix return in jfs_mkdir and orangefs_mkdir`fs/jfs/namei.c` `fs/orangefs/namei.c`	+2 -2	0 replies
237/461	irqchip/ath79-cpu: Remove unused function`drivers/irqchip/irq-ath79-cpu.c`	+0 -7	0 replies
238/461	fs: fix forced iversion increment on lazytime timestamp updates`fs/inode.c`	+7 -1	0 replies
239/461	ublk: reject max_sectors smaller than PAGE_SECTORS in parameter validation`drivers/block/ublk_drv.c`	+3 -0	0 replies
240/461	nsfs: fix wrong error code returned for pidns ioctls`fs/nsfs.c`	+1 -1	0 replies
241/461	irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT`kernel/irq_work.c`	+7 -0	0 replies
242/461	nvme: fix bio leak on mapping failure`drivers/nvme/host/ioctl.c`	+2 -3	0 replies
243/461	nvme-pci: fix use-after-free in nvme_free_host_mem()`drivers/nvme/host/pci.c`	+4 -2	0 replies
244/461	zonefs: handle integer overflow in zonefs_fname_to_fno`fs/zonefs/super.c`	+5 -1	0 replies
245/461	tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().`net/ipv4/tcp_ao.c`	+2 -1	0 replies
246/461	ASoC: SOF: amd: Fix error code handling in psp_send_cmd()`sound/soc/sof/amd/acp.c`	+1 -1	0 replies
247/461	powerpc: 82xx: fix uninitialized pointers with free attribute`arch/powerpc/platforms/82xx/km82xx.c`	+2 -2	0 replies
248/461	powerpc: fix dead default for GUEST_STATE_BUFFER_TEST`arch/powerpc/Kconfig.debug`	+1 -2	0 replies
249/461	powerpc/hv-gpci: fix preempt count leak in sysfs show paths`arch/powerpc/perf/hv-gpci.c`	+16 -8	0 replies
250/461	netfs: Fix cancellation of a DIO and single read subrequests`fs/netfs/buffered_read.c` `fs/netfs/direct_read.c` `fs/netfs/internal.h` +2 more	+50 ~~-63~~	0 replies
251/461	netfs: Fix missing locking around retry adding new subreqs`fs/netfs/read_retry.c` `fs/netfs/write_retry.c`	+10 -2	0 replies
252/461	netfs: Fix missing barriers when accessing stream->subrequests locklessly`fs/netfs/buffered_read.c` `fs/netfs/misc.c` `fs/netfs/read_collect.c` +3 more	+50 -6	0 replies
253/461	netfs: Fix netfs_read_to_pagecache() to pause on subreq failure`fs/netfs/buffered_read.c`	+5 -0	0 replies
254/461	netfs: Fix potential for tearing in ->remote_i_size and ->zero_point`fs/9p/v9fs_vfs.h` `fs/9p/vfs_inode.c` `fs/9p/vfs_inode_dotl.c` +17 more	+450 ~~-113~~	0 replies
255/461	netfs: Fix zeropoint update where i_size > remote_i_size`fs/netfs/misc.c`	+2 -2	0 replies
256/461	netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call`fs/netfs/read_retry.c`	+9 -2	0 replies
257/461	netfs: Fix overrun check in netfs_extract_user_iter()`fs/netfs/iterator.c`	+17 -9	0 replies
258/461	netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone`fs/netfs/misc.c` `include/trace/events/netfs.h`	+9 -1	0 replies
259/461	netfs: Defer the emission of trace_netfs_folio()`fs/netfs/buffered_write.c`	+10 -8	0 replies
260/461	netfs: Fix streaming write being overwritten`fs/netfs/buffered_write.c` `include/trace/events/netfs.h`	+37 ~~-13~~	0 replies
261/461	netfs: Fix potential deadlock in write-through mode`fs/netfs/write_issue.c`	+25 ~~-14~~	0 replies
262/461	netfs: Fix read-gaps to remove netfs_folio from filled folio`fs/netfs/buffered_read.c`	+8 -3	0 replies
263/461	netfs: Fix write streaming disablement if fd open O_RDWR`fs/netfs/buffered_write.c`	+7 ~~-10~~	0 replies
264/461	netfs: Fix early put of sink folio in netfs_read_gaps()`fs/netfs/buffered_read.c`	+3 -3	0 replies
265/461	netfs: Fix leak of request in netfs_write_begin() error handling`fs/netfs/buffered_read.c`	+1 -1	0 replies
266/461	netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()`fs/netfs/buffered_read.c` `fs/netfs/read_collect.c` `fs/netfs/read_retry.c` +1 more	+5 -5	0 replies
267/461	netfs: Fix partial invalidation of streaming-write folio`fs/netfs/misc.c`	+1 -1	0 replies
268/461	netfs: Fix folio->private handling in netfs_perform_write()`fs/netfs/buffered_write.c` `include/trace/events/netfs.h`	+82 ~~-53~~	0 replies
269/461	netfs: Fix netfs_read_folio() to wait on writeback`fs/netfs/buffered_read.c`	+2 -0	0 replies
270/461	netfs, afs: Fix write skipping in dir/link writepages`fs/afs/dir.c` `fs/netfs/write_issue.c`	+16 -2	0 replies
271/461	afs: Fix the locking used by afs_get_link()`fs/afs/Makefile` `fs/afs/dir.c` `fs/afs/fsclient.c` +5 more	+357 ~~-142~~	0 replies
272/461	net: ethernet: cortina: Make RX SKB per-port`drivers/net/ethernet/cortina/gemini.c`	+6 -1	0 replies
273/461	net: ethernet: cortina: Drop half-assembled SKB`drivers/net/ethernet/cortina/gemini.c`	+5 -0	0 replies
274/461	net: ethernet: cortina: Carry over frag counter`drivers/net/ethernet/cortina/gemini.c`	+8 -1	0 replies
275/461	net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference`drivers/net/ethernet/cirrus/cs89x0.c`	+0 -2	0 replies
276/461	wifi: ath11k: fix error path leaks in some WMI WOW calls`drivers/net/wireless/ath/ath11k/wmi.c`	+16 -3	0 replies
277/461	wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()`drivers/net/wireless/ath/ath11k/testmode.c`	+1 -0	0 replies
278/461	wifi: ath10k: skip WMI and beacon transmission when device is wedged`drivers/net/wireless/ath/ath10k/wmi.c`	+7 -8	0 replies
279/461	net: shaper: flip the polarity of the valid flag`net/shaper/shaper.c`	+17 ~~-17~~	0 replies
280/461	net: shaper: fix trivial ordering issue in net_shaper_commit()`net/shaper/shaper.c`	+10 -1	0 replies
281/461	net: shaper: reject duplicate leaves in GROUP request`net/shaper/shaper.c`	+45 ~~-15~~	0 replies
282/461	net: shaper: set ret to -ENOMEM when genlmsg_new() fails in group_doit`net/shaper/shaper.c`	+3 -1	0 replies
283/461	net: shaper: fix undersized reply skb allocation in GROUP command`net/shaper/shaper.c`	+8 -2	0 replies
284/461	net: shaper: reject handle IDs exceeding internal bit-width`Documentation/netlink/specs/net_shaper.yaml` `net/shaper/shaper.c` `net/shaper/shaper_nl_gen.c` +1 more	+18 -2	2 replies
285/461	net: shaper: enforce singleton NETDEV scope with id 0`net/shaper/shaper.c`	+6 -0	0 replies
286/461	net: shaper: reject QUEUE scope handle with missing id`net/shaper/shaper.c`	+7 -2	0 replies
287/461	block: dont overwrite bip_vcnt in bio_integrity_copy_user()`block/bio-integrity.c`	+0 -1	0 replies
288/461	block: recompute nr_integrity_segments in blk_insert_cloned_request`block/blk-mq.c`	+19 -0	0 replies
289/461	HID: quirks: really enable the intended work around for appledisplay`drivers/hid/hid-quirks.c`	+1 -1	0 replies
290/461	block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()`block/bio-integrity.c`	+18 -0	0 replies
291/461	accel/qaic: Add overflow check to remap_pfn_range during mmap`drivers/accel/qaic/qaic_data.c`	+21 -2	0 replies
292/461	net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint`net/smc/smc_tracepoint.h`	+1 -1	0 replies
293/461	ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics`net/ethtool/bitset.c`	+4 -4	0 replies
294/461	drm/msm/dpu: fix UV scanlines calculation for YUV UBWC formats`drivers/gpu/drm/msm/disp/dpu1/dpu_formats.c`	+7 -5	0 replies
295/461	drm/msm/dpu: Fix Kaanapali CWB register configuration`drivers/gpu/drm/msm/disp/dpu1/catalog/dpu_13_0_kaanapali.h`	+1 -1	0 replies
296/461	drm/msm/dsi: dont dump registers past the mapped region`drivers/gpu/drm/msm/dsi/dsi_host.c`	+1 -0	0 replies
297/461	drm/msm/dpu: dont mix devm and drmm functions`drivers/gpu/drm/msm/disp/dpu1/dpu_writeback.c`	+2 -1	0 replies
298/461	block: rename struct gendisk zone_wplugs_lock field`block/blk-zoned.c` `include/linux/blkdev.h`	+13 ~~-12~~	0 replies
299/461	block: allow submitting all zone writes from a single context`block/blk-mq-debugfs.c` `block/blk-sysfs.c` `block/blk-zoned.c` +1 more	+212 ~~-22~~	0 replies
300/461	block: fix handling of dead zone write plugs`block/blk-zoned.c`	+27 -5	0 replies
301/461	selftests: ublk: cap nthreads to kernels actual nr_hw_queues`tools/testing/selftests/ublk/kublk.c`	+11 -0	0 replies
302/461	x86/mce: Restore MCA polling interval halving`arch/x86/kernel/cpu/mce/core.c`	+5 ~~-28~~	0 replies
303/461	Documentation: intel_pstate: Fix description of asymmetric packing with SMT`Documentation/admin-guide/pm/intel_pstate.rst`	+6 -5	0 replies
304/461	drm/msm: Fix GMEM_BASE for A650`drivers/gpu/drm/msm/adreno/adreno_gpu.c`	+1 -1	0 replies
305/461	drm/msm/a6xx: Add soft fuse detection support`drivers/gpu/drm/msm/adreno/a5xx_gpu.c` `drivers/gpu/drm/msm/adreno/a6xx_gpu.c` `drivers/gpu/drm/msm/adreno/adreno_gpu.c` +2 more	+45 ~~-12~~	0 replies
306/461	drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()`drivers/gpu/drm/msm/adreno/a6xx_gpu.c`	+2 -3	0 replies
307/461	drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx`drivers/gpu/drm/msm/adreno/adreno_gpu.c`	+6 -0	0 replies
308/461	drm/msm/a6xx: Restore sysprof_active`drivers/gpu/drm/msm/adreno/a6xx_gpu.c`	+2 -0	0 replies
309/461	drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN`drivers/gpu/drm/msm/msm_iommu.c`	+3 -2	0 replies
310/461	drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table`drivers/gpu/drm/msm/adreno/a6xx_hfi.c`	+2 -0	0 replies
311/461	ASoC: intel: sof_sdw: Prepare for configuration without a jack`sound/soc/sdw_utils/soc_sdw_cs42l43.c`	+9 -1	0 replies
312/461	ASoC: sdw_utils: cs42l43: allow spk component names to be combined`sound/soc/sdw_utils/soc_sdw_bridge_cs35l56.c` `sound/soc/sdw_utils/soc_sdw_cs42l43.c` `sound/soc/sdw_utils/soc_sdw_utils.c`	+17 ~~-21~~	0 replies
313/461	ASoC: sdw_utils: Check speaker component string allocation`sound/soc/sdw_utils/soc_sdw_utils.c`	+6 -4	0 replies
314/461	riscv: Docs: fix unmatched quote warning`Documentation/arch/riscv/zicfilp.rst`	+1 -1	0 replies
315/461	powerpc/time: Remove redundant preempt_disable\|enable() calls from arch_irq_work_raise()`arch/powerpc/kernel/time.c`	+4 -2	0 replies
316/461	net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot`net/smc/af_smc.c`	+2 -1	0 replies
317/461	net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring`net/tls/tls_sw.c`	+2 -4	0 replies
318/461	net: tls: prevent chain-after-chain in plain text SG`net/tls/tls_sw.c`	+18 -6	0 replies
319/461	net: phy: DP83TC811: add reading of abilities`drivers/net/phy/dp83tc811.c`	+1 -0	0 replies
320/461	ovpn: tcp - use cached peer pointer in ovpn_tcp_close()`drivers/net/ovpn/tcp.c`	+7 -2	0 replies
321/461	ovpn: respect peer refcount in CMD_NEW_PEER error path`drivers/net/ovpn/netlink.c` `drivers/net/ovpn/peer.c` `drivers/net/ovpn/peer.h`	+6 -5	0 replies
322/461	ovpn: fix race between deleting interface and adding new peer`drivers/net/ovpn/main.c` `drivers/net/ovpn/peer.c`	+20 ~~-13~~	0 replies
323/461	cifs: client: stage smb3_reconfigure() updates and restore ctx on failure`fs/smb/client/fs_context.c`	+108 ~~-53~~	0 replies
324/461	phy: apple: atc: Fix typec switch/mux leak on unbind`drivers/phy/apple/atc.c`	+22 -5	0 replies
325/461	gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE`scripts/gcc-plugins/gcc-common.h`	+3 -1	0 replies
326/461	x86/xen: Fix xen_e820_swap_entry_with_ram()`arch/x86/xen/setup.c`	+1 -1	0 replies
327/461	vfio/pci: Check BAR resources before exporting a DMABUF`drivers/vfio/pci/vfio_pci_dmabuf.c`	+4 -2	0 replies
328/461	ovpn: disable BHs when updating device stats`drivers/net/ovpn/io.c` `drivers/net/ovpn/stats.h` `drivers/net/ovpn/tcp.c` +1 more	+28 ~~-12~~	0 replies
329/461	tls: Preserve sk_err across recvmsg() when data has been copied`net/tls/tls_sw.c`	+14 -6	0 replies
330/461	net/mlx5: Do not restore destination-less TC rules`drivers/net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c`	+2 -1	0 replies
331/461	net/mlx5: Skip disabled vports when setting max TX speed`drivers/net/ethernet/mellanox/mlx5/core/eswitch.c` `drivers/net/ethernet/mellanox/mlx5/core/eswitch.h` `drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c`	+27 -0	0 replies
332/461	scsi: sd: Fix return code handling in sd_spinup_disk()`drivers/scsi/sd.c`	+1 -2	0 replies
333/461	ASoC: codecs: fs210x: fix possible buffer overflow`sound/soc/codecs/fs210x.c`	+1 -1	0 replies
334/461	iommupt: Directly call iommupts unmap_range()`drivers/iommu/generic_pt/iommu_pt.h` `drivers/iommu/iommu.c` `include/linux/generic_pt/iommu.h` +1 more	+57 ~~-37~~	0 replies
335/461	iommupt: Avoid rewalking during map`drivers/iommu/generic_pt/iommu_pt.h` `drivers/iommu/generic_pt/kunit_generic_pt.h` `drivers/iommu/generic_pt/pt_iter.h` +2 more	+175 ~~-65~~	0 replies
336/461	iommu: Fix loss of errno on map failure for classic ops`drivers/iommu/iommu.c`	+1 -1	0 replies
337/461	iommu: Fix up map/unmap debugging for iommupt domains`drivers/iommu/iommu.c`	+22 ~~-21~~	0 replies
338/461	iommu: Handle unmap error when iommu_debug is enabled`drivers/iommu/iommu.c`	+19 ~~-30~~	0 replies
339/461	iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap`drivers/iommu/generic_pt/iommu_pt.h`	+2 -2	0 replies
340/461	iommupt: Fix the end_index calculation in __map_range_leaf()`drivers/iommu/generic_pt/iommu_pt.h`	+13 -7	0 replies
341/461	ALSA: scarlett2: Add missing error check when initialise Autogain Status`sound/usb/mixer_scarlett2.c`	+2 -0	0 replies
342/461	ALSA: hda/ca0132: Disable auto-detect on manual output select`sound/hda/codecs/ca0132.c`	+31 ~~-13~~	0 replies
343/461	cachefiles: Fix error return when vfs_mkdir() fails`fs/cachefiles/namei.c`	+2 -0	0 replies
344/461	io_uring/net: punt IORING_OP_BIND async if it needs file create`io_uring/net.c`	+25 -1	0 replies
345/461	vsock/virtio: fix zerocopy completion for multi-skb sends`net/vmw_vsock/virtio_transport_common.c`	+34 ~~-49~~	13 replies
346/461	btrfs: check for subvolume before deleting squota qgroup`fs/btrfs/qgroup.c`	+25 ~~-25~~	0 replies
347/461	btrfs: fix squota accounting during enable generation`fs/btrfs/fs.h` `fs/btrfs/qgroup.c`	+28 -4	0 replies
348/461	ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging`sound/soc/amd/acp/acp-sdw-legacy-mach.c`	+1 -1	0 replies
349/461	spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()`drivers/spi/spi-mtk-snfi.c`	+1 -1	0 replies
350/461	netfilter: nft_inner: release local_lock before re-enabling softirqs`net/netfilter/nft_inner.c`	+1 -1	0 replies
351/461	ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5`sound/hda/codecs/realtek/alc269.c`	+6 -6	0 replies
352/461	drm/msm/snapshot: fix dumping of the unaligned regions`drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c`	+18 -6	0 replies
353/461	hwmon: (lm90) Stop work before releasing hwmon device`drivers/hwmon/lm90.c`	+20 -4	0 replies
354/461	hwmon: (lm90) Add lock protection to lm90_alert`drivers/hwmon/lm90.c`	+2 -0	0 replies
355/461	wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled`drivers/net/wireless/intel/iwlwifi/mld/tx.c`	+4 -1	0 replies
356/461	wifi: iwlwifi: mld: dont dereference a pointer before NULL checking it`drivers/net/wireless/intel/iwlwifi/mld/link.c`	+6 -7	0 replies
357/461	dma-mapping: move dma_map_resource() sanity check into debug code`kernel/dma/debug.c` `kernel/dma/mapping.c`	+8 -5	0 replies
358/461	drm/gem: Make the GEM LRU lock part of drm_device`drivers/gpu/drm/drm_drv.c` `drivers/gpu/drm/drm_gem.c` `drivers/gpu/drm/msm/msm_drv.c` +8 more	+69 ~~-75~~	0 replies
359/461	drm/xe/gsc: Fix double-free of managed BO in error path`drivers/gpu/drm/xe/xe_gsc.c`	+1 -4	0 replies
360/461	drm/xe/vf: Fix signature of print functions`drivers/gpu/drm/xe/xe_gt_sriov_vf.c` `drivers/gpu/drm/xe/xe_gt_sriov_vf.h`	+21 -9	0 replies
361/461	drm/xe/pf: Fix CFI failure in debugfs access`drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.c` `drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.h`	+6 -2	0 replies
362/461	drm/xe: Consolidate workaround entries for Wa_14019988906`drivers/gpu/drm/xe/xe_wa.c`	+4 -8	0 replies
363/461	drm/xe: Consolidate workaround entries for Wa_18033852989`drivers/gpu/drm/xe/xe_wa.c`	+4 -8	0 replies
364/461	drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1`drivers/gpu/drm/xe/regs/xe_gt_regs.h` `drivers/gpu/drm/xe/xe_wa.c`	+2 -1	0 replies
365/461	drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p`drivers/gpu/drm/xe/regs/xe_gt_regs.h` `drivers/gpu/drm/xe/xe_tuning.c`	+6 -0	0 replies
366/461	drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4`drivers/gpu/drm/xe/regs/xe_gt_regs.h` `drivers/gpu/drm/xe/xe_tuning.c` `drivers/gpu/drm/xe/xe_wa.c`	+4 -3	0 replies
367/461	wifi: ath11k: fix peer resolution on rx path when peer_id=0`drivers/net/wireless/ath/ath11k/dp_rx.c` `drivers/net/wireless/ath/ath11k/hal_rx.c`	+2 -6	0 replies
368/461	wifi: ath12k: fix EHT TX MCS limitation due to wrong 20 MHz-only parsing`drivers/net/wireless/ath/ath12k/mac.c`	+6 -2	0 replies
369/461	drm/mediatek: mtk_hdmi_ddc_v2: Fix non-static global variable`drivers/gpu/drm/mediatek/mtk_hdmi_ddc_v2.c`	+1 -1	0 replies
370/461	drm/mediatek: mtk_hdmi_v2: Fix non-static global variable`drivers/gpu/drm/mediatek/mtk_hdmi_v2.c`	+1 -1	0 replies
371/461	drm/mediatek: mtk_cec: Fix non-static global variable`drivers/gpu/drm/mediatek/mtk_cec.c`	+1 -1	0 replies
372/461	drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable`drivers/gpu/drm/mediatek/mtk_hdmi_ddc.c`	+1 -1	0 replies
373/461	io_uring: propagate array_index_nospec opcode into req->opcode`io_uring/io_uring.c`	+4 -5	0 replies
374/461	srcu: Dont queue workqueue handlers to never-online CPUs`kernel/rcu/srcutree.c`	+6 -6	0 replies
375/461	cgroup/rstat: validate cpu before css_rstat_cpu() access`block/blk-cgroup.c` `include/linux/cgroup.h` `kernel/cgroup/rstat.c` +1 more	+25 ~~-14~~	0 replies
376/461	net/mlx5e: xsk: Fix unlocked writing to ICOSQ`drivers/net/ethernet/mellanox/mlx5/core/en_txrx.c`	+1 -1	0 replies
377/461	cifs: Fix undefined variables`fs/smb/client/cifsfs.c`	+3 -3	0 replies
378/461	ice: ptp: serialize E825 PHY timer start with PTP lock`drivers/net/ethernet/intel/ice/ice_ptp_hw.c`	+13 -2	0 replies
379/461	ice: ptp: use primary NAC semaphore on E825`drivers/net/ethernet/intel/ice/ice_ptp_hw.c`	+9 -0	0 replies
380/461	igc: set tx buffer type for SMD frames`drivers/net/ethernet/intel/igc/igc_tsn.c`	+1 -0	0 replies
381/461	drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP`drivers/gpu/drm/i915/display/intel_dp.c`	+1 -1	0 replies
382/461	phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config`drivers/phy/qualcomm/phy-qcom-qmp-usbc.c`	+1 -1	0 replies
383/461	kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme`scripts/package/PKGBUILD`	+1 -1	0 replies
384/461	net: dsa: mt7530: fix FDB entries not aging out with short timeout`drivers/net/dsa/mt7530.c`	+14 -6	0 replies
385/461	net: dsa: mt7530: preserve VLAN tags on trapped link-local frames`drivers/net/dsa/mt7530.c`	+15 ~~-12~~	0 replies
386/461	net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer`drivers/net/ethernet/microsoft/mana/hw_channel.c`	+13 ~~-10~~	0 replies
387/461	platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7`drivers/platform/surface/surface_aggregator_registry.c`	+0 -2	0 replies
388/461	platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL`drivers/platform/x86/adv_swbutton.c`	+5 -1	0 replies
389/461	platform/x86: hp_accel: Check ACPI_COMPANION() against NULL`drivers/platform/x86/hp/hp_accel.c`	+3 -0	0 replies
390/461	platform/x86: intel-hid: Check ACPI_HANDLE() against NULL`drivers/platform/x86/intel/hid.c`	+5 -1	0 replies
391/461	platform/x86: intel_sar: Check ACPI_HANDLE() against NULL`drivers/platform/x86/intel/int1092/intel_sar.c`	+6 -1	0 replies
392/461	platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL`drivers/platform/x86/intel/vbtn.c`	+5 -1	0 replies
393/461	platform/x86: uniwill-laptop: Properly initialize charging threshold`drivers/platform/x86/uniwill/uniwill-acpi.c`	+34 -1	0 replies
394/461	platform/x86: uniwill-laptop: Accept charging threshold of 0`drivers/platform/x86/uniwill/uniwill-acpi.c`	+2 -2	0 replies
395/461	platform/x86: uniwill-laptop: Fix behavior of "force" module param`drivers/platform/x86/uniwill/uniwill-acpi.c`	+6 -2	0 replies
396/461	platform/x86: asus-armoury: fix mini-LED mode get/set on MODE2 devices`drivers/platform/x86/asus-armoury.c`	+12 -4	0 replies
397/461	ASoC: soc-utils: Add missing va_end in snd_soc_ret()`sound/soc/soc-utils.c`	+1 -0	0 replies
398/461	drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2)`drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c`	+8 -1	0 replies
399/461	drm/amdgpu/vce1: Check that the GPU address is < 128 MiB`drivers/gpu/drm/amd/amdgpu/vce_v1_0.c`	+8 -4	0 replies
400/461	drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets`drivers/gpu/drm/amd/amdgpu/vce_v1_0.c`	+15 -4	0 replies
401/461	RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port`drivers/infiniband/hw/mana/main.c`	+1 -0	0 replies
402/461	RDMA/rtrs: Fix use-after-free in path file creation cleanup`drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c`	+1 -1	0 replies
403/461	bridge: mcast: Fix a possible use-after-free when removing a bridge port`net/bridge/br_multicast.c`	+17 -5	0 replies
404/461	net: phy: honor eee_disabled_modes in phy_support_eee()`drivers/net/phy/phy_device.c`	+2 -1	0 replies
405/461	net: phy: honor eee_disabled_modes in phy_advertise_eee_all()`drivers/net/phy/phy_device.c`	+2 -1	0 replies
406/461	net: airoha: Fix NPU RX DMA descriptor bits`include/linux/soc/airoha/airoha_offload.h`	+3 -3	0 replies
407/461	pds_core: fix error handling in pdsc_devcmd_wait`drivers/net/ethernet/amd/pds_core/dev.c`	+9 -2	0 replies
408/461	pds_core: fix debugfs_lookup dentry leak and error handling`drivers/net/ethernet/amd/pds_core/debugfs.c`	+6 -1	0 replies
409/461	erofs: fix managed cache race for unaligned extents`fs/erofs/zdata.c`	+8 -7	0 replies
410/461	erofs: harden h_shared_count in erofs_init_inode_xattrs()`fs/erofs/xattr.c`	+8 -0	0 replies
411/461	erofs: fix metabuf leak in inode xattr initialization`fs/erofs/xattr.c`	+1 -3	0 replies
412/461	wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs`net/mac80211/mlme.c`	+3 -0	0 replies
413/461	wifi: mac80211: fix MLE defragmentation`net/mac80211/parse.c`	+31 ~~-40~~	0 replies
414/461	wifi: mac80211: fix multi-link element inheritance`net/mac80211/parse.c`	+33 -3	0 replies
415/461	wifi: wilc1000: fix dma_buffer leak on bus acquire failure`drivers/net/wireless/microchip/wilc1000/wlan.c`	+1 -1	0 replies
416/461	ALSA: seq: Serialize UMP output teardown with event_input`sound/core/seq/seq_ump_client.c`	+18 -4	0 replies
417/461	cgroup: rstat: relax NMI guard after switch to try_cmpxchg`kernel/cgroup/rstat.c`	+3 -4	0 replies
418/461	tracing: Avoid NULL return from hist_field_name() on truncation`kernel/trace/trace_events_hist.c`	+2 -4	0 replies
419/461	Bluetooth: hci_sync: Fix not setting mask for HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE`net/bluetooth/hci_sync.c`	+3 -3	0 replies
420/461	Bluetooth: btintel_pcie: Fix incorrect MAC access programming`drivers/bluetooth/btintel_pcie.c` `drivers/bluetooth/btintel_pcie.h`	+6 ~~-17~~	0 replies
421/461	Bluetooth: btmtk: fix urb->setup_packet leak in error paths`drivers/bluetooth/btmtk.c`	+2 -0	0 replies
422/461	udp: gso: Fix handling checksum in __udp_gso_segment`net/ipv4/udp_offload.c`	+2 ~~-11~~	0 replies
423/461	udp: Fix UDP length on last GSO_PARTIAL segment`net/ipv4/udp_offload.c`	+6 -3	0 replies
424/461	net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA`drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c`	+4 -3	0 replies
425/461	net: shaper: annotate the data races`net/shaper/shaper.c`	+38 ~~-15~~	0 replies
426/461	net: shaper: rework the VALID marking (again)`include/net/net_shaper.h` `net/shaper/shaper.c`	+19 ~~-27~~	0 replies
427/461	crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks`Documentation/crypto/krb5.rst` `crypto/krb5/krb5_api.c` `include/crypto/krb5.h` +2 more	+81 ~~-15~~	0 replies
428/461	rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg`net/rxrpc/ar-internal.h` `net/rxrpc/call_event.c` `net/rxrpc/call_object.c` +5 more	+201 ~~-120~~	0 replies
429/461	net: ag71xx: check error for platform_get_irq`drivers/net/ethernet/atheros/ag71xx.c`	+3 -0	0 replies
430/461	bpf, skmsg: fix verdict sk_data_ready racing with ktls rx`net/core/skmsg.c`	+7 -2	0 replies
431/461	tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction`include/net/tcp.h` `net/ipv4/tcp.c` `net/ipv4/tcp_input.c` +2 more	+14 ~~-17~~	0 replies
432/461	net: stmmac: eswin: fix HSP CSR init ordering after clock enable`drivers/net/ethernet/stmicro/stmmac/dwmac-eic7700.c`	+41 ~~-32~~	0 replies
433/461	net: stmmac: eswin: clear TXD and RXD delay registers during initialization`drivers/net/ethernet/stmicro/stmmac/dwmac-eic7700.c`	+22 -0	0 replies
434/461	net: stmmac: eswin: correct RGMII delay granularity to 20 ps`drivers/net/ethernet/stmicro/stmmac/dwmac-eic7700.c`	+4 -4	0 replies
435/461	net: stmmac: eswin: validate RGMII delay values`drivers/net/ethernet/stmicro/stmmac/dwmac-eic7700.c`	+25 -4	0 replies
436/461	gpio: cdev: check if uAPI v2 config attributes are correctly zeroed`drivers/gpio/gpiolib-cdev.c`	+13 -0	0 replies
437/461	gpio: aggregator: fix a potential use-after-free`drivers/gpio/gpio-aggregator.c`	+1 -1	0 replies
438/461	gpio: aggregator: stop using dev-sync-probe`drivers/gpio/Kconfig` `drivers/gpio/gpio-aggregator.c`	+21 ~~-18~~	0 replies
439/461	gpio: aggregator: remove the software node when deactivating the aggregator`drivers/gpio/gpio-aggregator.c`	+4 -0	0 replies
440/461	gpio: aggregator: lock device when calling device_is_bound()`drivers/gpio/gpio-aggregator.c`	+6 -3	0 replies
441/461	ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()`sound/soc/codecs/cs35l56-sdw.c`	+2 -1	0 replies
442/461	drm/xe/oa: Fix exec_queue leak on width check in stream open`drivers/gpu/drm/xe/xe_oa.c`	+4 -2	0 replies
443/461	ASoC: cs-amp-lib: Fix wrong sizeof() in _cs_amp_set_efi_calibration_data()`sound/soc/codecs/cs-amp-lib.c`	+1 -1	0 replies
444/461	ASoC: cs-amp-lib: Fix missing dput() after debugfs_lookup()`sound/soc/codecs/cs-amp-lib.c`	+10 -3	0 replies
445/461	selftests: net: Fix checksums in xdp_native`tools/testing/selftests/net/lib/xdp_native.bpf.c`	+30 ~~-25~~	0 replies
446/461	nvme-pci: fix dma_vecs leak on p2p memory`drivers/nvme/host/pci.c`	+2 -1	0 replies
447/461	nvme-pci: fix dma mapping leak on data setup error`drivers/nvme/host/pci.c`	+28 -3	0 replies
448/461	octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs`drivers/net/ethernet/marvell/octeontx2/af/rvu_npc.c`	+1 -1	0 replies
449/461	net: mana: validate rx_req_idx to prevent out-of-bounds array access`drivers/net/ethernet/microsoft/mana/hw_channel.c`	+6 -0	0 replies
450/461	tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR`drivers/net/tap.c`	+1 -1	0 replies
451/461	net: airoha: Disable GDM2 forwarding before configuring GDM2 loopback`drivers/net/ethernet/airoha/airoha_eth.c`	+6 -4	0 replies
452/461	pds_core: ensure null-termination for firmware version strings`drivers/net/ethernet/amd/pds_core/devlink.c`	+4 -2	0 replies
453/461	net: gro: dont merge zcopy skbs`net/core/gro.c`	+3 -0	0 replies
454/461	net: enetc: fix missing error code when pf->vf_state allocation fails`drivers/net/ethernet/freescale/enetc/enetc_pf.c`	+3 -1	0 replies
455/461	io_uring/nop: pass all errors to userspace`io_uring/nop.c`	+2 -2	0 replies
456/461	blk-mq: pop cached request if it is usable`block/blk-mq.c`	+9 ~~-25~~	0 replies
457/461	ksmbd: fix durable reconnect error path file lifetime`fs/smb/server/smb2pdu.c`	+13 -2	0 replies
458/461	LoongArch: kprobes: Fix handling of fatal unrecoverable recursions`arch/loongarch/kernel/kprobes.c`	+2 -2	0 replies
459/461	block: avoid use-after-free in disk_free_zone_resources()`block/blk-zoned.c`	+3 -4	0 replies
460/461	Documentation: laptops: Update documentation for uniwill laptops`Documentation/ABI/testing/sysfs-driver-uniwill-laptop` `Documentation/admin-guide/laptops/uniwill-laptop.rst`	+39 -0	0 replies
461/461	platform/x86: uniwill-laptop: Do not enable the charging limit even when forced`Documentation/admin-guide/laptops/uniwill-laptop.rst` `drivers/platform/x86/uniwill/uniwill-acpi.c`	+12 -2	0 replies

Reviews trailers per patch

253 of 461 patches have a Reviewed-by or Acked-by.

Patch	Namjae Jeon	Rik van Riel	Shyam Prasad N	David Howells	Steve French	Rafael J. Wysocki (Intel)	Miaohe Lin	Oscar Salvador	David Hildenbrand (Arm)	Ido Schimmel	Balbir Singh	Hugh Dickins	Lance Yang	Bibo Mao	Baolin Wang	Lorenzo Stoakes	Tommy Kelly	Damien Le Moal	Danilo Krummrich	Andrew Morton	Zi Yan	Paul Menzel	Bartosz Golaszewski	Jann Horn	Rémi Denis-Courmont	Eric Dumazet	Florian Fainelli	Bobby Eshleman	Stanislav Fomichev	Mina Almasry	Nicolai Buchwitz	Cosmin Ratiu	Tariq Toukan	Mike Rapoport (Microsoft)	SeongJae Park	Oleksij Rempel	Fernando Fernandez Mancera	Maxime Chevallier	Hans de Goede	Andy Shevchenko	Andrea Righi	Masami Hiramatsu (Google)	Catalin Marinas	Geert Uytterhoeven	Matthieu Baerts (NGI0)	Bryan Tan	Siwei Zhang	Jacob Keller	Michal Swiatkowski	Rafal Romanowski	Casey Schaufler	Geetha sowjanya	Simon Horman	Faizal Rahim	Avigail Dahan	Rinitha S	Aleksandr Loktionov	Alexander Nowlin	Kuniyuki Iwashima	Rameshkumar Sundaram	Baochen Qiang	Yuan Yao	Anup Patel	Jon Hunter	Thierry Reding	Luca Ceresoli	Kaustabh Chakraborty	Krzysztof Kozlowski	Abel Vesa	Konrad Dybcio	Manivannan Sadhasivam	Dmitry Baryshkov	Viacheslav Dubeyko	Dave Jiang	Guo Ren	Sakari Ailus	Vidya Srinivas	Uma Shankar	Iago Toral Quiroga	Nikita Shubin	Matthew Auld	Mario Limonciello (AMD)	Javier Martinez Canillas	Ian Ray	Alex Hung	Dan Wheeler	Yuan Tan	Linus Lüssing	Ren Wei	Simon Wunderlich	Bernard Metzler	Heiko Carstens	Sumanth Korikkar	Linus Walleij	Frank Wunderlich	Neil Armstrong	Pratyush Yadav	Even Xu	Mark Pearson	Fangyu Yu	Simon Trimmer	Boris Burkov	David Sterba	Tristan Madani	Ilya Maximets	Joe Damato	Madhu Chittim	Samuel Salin	Przemek Kitszel	Arpana Arland	Miquel Raynal	Ze Huang	Jeff Layton	Dai Ngo	Sebastian Ene	Christophe Leroy (CS GROUP)	Gautam Menghani	Amit Machhiwal	Harsh Prateek Bora	Ritesh Harjani (IBM)	Paulo Alcantara (Red Hat)	Jori Koolstra	Christoph Hellwig	Carlos Maiolino	Yang Erkun	Sebastian Andrzej Siewior	Sagi Grimberg	John Garry	Alexander Lobakin	Chao Shi	Weidong Zhu	Dave Tian	Shin'ichiro Kawasaki	Karol Wachowski	Jeff Hugo	Dust Li	Sidraya Jayagond	[email protected]	Hannes Reinecke	Johannes Thumshirn	Bart Van Assche	Qiuxu Zhuo	Akhil P Oommen	Rob Clark	Bard Liao	Aaron Ma	Sabrina Dubroca	Henrique Carvalho	Vladimir Oltean	Joshua Peisach	Ivan Bulatovic	Christopher Cradock	Jan Beulich	Jianbo Liu	Mark Bloch	Samiullah Khawaja	Kevin Tian	Lu Baolu	Pranjal Shrivastava	Mostafa Saleh	Josua Mayer	Gabriel Krisman Bertazi	Michael S. Tsirkin	Arseniy Krasnov	Qu Wenruo	Shrikanth Hegde	Andrew Lunn	Michal Wajdeczko	Shuicheng Lin	Matt Roper	P Praneesh	CK Hu	Vasily Gorbik	Samir	Arkadiusz Kubalewski	Ville Syrjälä	Thomas Weißschuh	Nathan Chancellor	Chester A. Unal	Ilpo Järvinen	Johannes Berg	Robin Murphy	Leon Romanovsky	Liviu Dudau	Steven Price	Chia-I Wu	Daniele Ceraolo Spurio	Christian König	Long Li	Nikolay Aleksandrov	Lorenzo Bianconi	Gao Xiang	Chao Yu	Miriam Rachel Korenblit	Ilan Peer	Benjamin Berg	Werner Sembach	Willem de Bruijn	Matthew Schwartz	Dragos Tatulea	Jeffrey Altman	Marc Dionne	Denis Benato	Ashutosh Dixit	Carolina Jubran	Haiyang Zhang	Madhur Agrawal	Harshitha Ramamurthy	Armin Wolf	Shuah Khan	Kent Gibson	Ronald Warsow	Takeshi Ogasawara	Ron Economos	Luna Jernberg	Miguel Ojeda	Brett A C Sheffield	Pavel Machek (CIP)	Jeffrin Jose T	Peter Schneider	Masoud Aghasi	Mark Brown	Markus Reichelt	Barry K. Nathan	Kalden Elphick
Series																											T-b																																																																																																																																																																																									T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/461
2/461
3/461	A-b
4/461				R-b
5/461																	T-b	R-b
6/461																	T-b	R-b
7/461																	T-b	R-b
8/461																	T-b	R-b
9/461						R-b													R-b
10/461
11/461	A-b
12/461	A-b
13/461	A-b
14/461
15/461
16/461		A-b
17/461
18/461
19/461			R-b
20/461				A-b
21/461	A-b				T-b
22/461
23/461
24/461
25/461
26/461
27/461
28/461						R-b
29/461
30/461
31/461							R-b	A-b	A-b
32/461										R-b
33/461											R-b
34/461								R-b				Debugged-by	R-b	T-b	R-b	R-b
35/461								A-b	A-b
36/461													T-b																														R-b
37/461									A-b		A-b									R-b	A-b
38/461																																		R-b	R-b
39/461
40/461
41/461																																															R-b
42/461
43/461
44/461
45/461
46/461																						R-b	A-b
47/461
48/461																								R-b
49/461																									A-b	R-b
50/461																											R-b
51/461																												R-b	A-b	R-b
52/461																															R-b T-b
53/461
54/461																																R-b	R-b
55/461
56/461																																				A-b
57/461
58/461
59/461
60/461																																					R-b
61/461																																						R-b
62/461																																						R-b T-b
63/461																																							R-b	R-b
64/461																																									R-b
65/461
66/461
67/461
68/461																																										A-b
69/461																																											A-b	A-b
70/461
71/461										R-b
72/461
73/461																																													R-b
74/461																																														A-b
75/461
76/461																						R-b																										R-b	R-b	T-b
77/461																																																												R-b	R-b
78/461
79/461
80/461
81/461																																																		T-b			R-b
82/461																																																																									R-b
83/461																																													R-b
84/461																																													R-b
85/461																																																			A-b
86/461
87/461																																																				R-b
88/461																																																					R-b	R-b	T-b
89/461																																																					R-b			T-b
90/461																																																					R-b			T-b
91/461																																																					R-b				R-b	T-b
92/461
93/461																																																											R-b
94/461
95/461																																																					R-b
96/461			R-b
97/461
98/461
99/461
100/461
101/461																																																														R-b
102/461
103/461																																																															R-b
104/461																																																															R-b
105/461
106/461																																																																R-b	A-b
107/461																																																																		R-b
108/461
109/461																																																																			T-b	R-b
110/461																																																																R-b T-b
111/461																																																																					R-b	R-b	R-b
112/461																																																																						R-b		R-b
113/461																																																																						R-b
114/461																																																																						R-b		R-b
115/461
116/461																																																																																A-b
117/461
118/461
119/461
120/461																																																																																											A-b
121/461																																																																																												R-b
122/461																																																																																													R-b
123/461																																																																																													R-b
124/461																																																																										R-b
125/461
126/461																																																																											R-b
127/461
128/461						R-b																																		R-b																																				R-b
129/461																																																																													T-b	R-b
130/461
131/461																																																																															R-b
132/461																																																																															R-b
133/461
134/461																																																																																	R-b
135/461																																																																																		R-b
136/461																																																																																			R-b T-b
137/461																																																																		R-b																		T-b
138/461																																																																																					R-b	T-b
139/461																																																																																					R-b	T-b
140/461																																																																																					R-b	T-b
141/461																																																																																							R-b
142/461
143/461																																																																																							R-b
144/461
145/461																																																																																								A-b
146/461
147/461																																																																																							R-b
148/461																																																																																									T-b
149/461
150/461																																																																																							R-b
151/461																																																																																										R-b
152/461
153/461
154/461																																																																																							R-b
155/461
156/461
157/461
158/461
159/461
160/461
161/461
162/461
163/461
164/461
165/461
166/461
167/461
168/461
169/461																							R-b																																																																							R-b
170/461																							R-b																																																																							R-b
171/461																							R-b
172/461
173/461																							R-b
174/461																																																																																															T-b
175/461																																																																								R-b
176/461
177/461																																												R-b
178/461																																												R-b
179/461																																												R-b
180/461																																												R-b
181/461																																																																																																R-b
182/461																																																																						R-b
183/461																																		R-b
184/461																																																																																																	R-b
185/461																																																																																																		R-b	R-b
186/461
187/461
188/461
189/461
190/461
191/461
192/461
193/461																																																																																																				T-b
194/461
195/461
196/461																																																																						R-b
197/461
198/461
199/461
200/461																																																																																																																			R-b
201/461
202/461
203/461
204/461																																																																																																					T-b
205/461																																																																																																					T-b
206/461																																																																																																						R-b	R-b
207/461
208/461
209/461																																																																																																								R-b
210/461																																																																																																								R-b
211/461																																																																																																								R-b
212/461																																																																																																								R-b
213/461																																																																																																								R-b
214/461
215/461
216/461																																																																																																									T-b
217/461
218/461
219/461
220/461																																R-b	R-b																																																																									R-b
221/461
222/461																																																					R-b				R-b																																																		R-b	T-b
223/461																																																									R-b																																																				R-b
224/461																																																									R-b																																																				R-b	T-b
225/461																																																									R-b
226/461																																																									R-b
227/461
228/461
229/461																																																																																																															R-b
230/461																																																																																																																R-b
231/461																																																																																																																	R-b	T-b
232/461
233/461
234/461
235/461
236/461																																																																																																																										R-b
237/461
238/461																																																																																																																	R-b										R-b	R-b
239/461
240/461																																																																																																																													R-b
241/461																																																																																																																														R-b
242/461																																																																																																																											R-b				R-b	R-b
243/461
244/461
245/461																										R-b
246/461
247/461																																																																				R-b																																																R-b
248/461																																																																																																																					T-b	R-b	R-b
249/461																																																																																																																								R-b
250/461
251/461
252/461
253/461
254/461
255/461
256/461																																																																																																																									R-b
257/461
258/461
259/461
260/461
261/461
262/461
263/461
264/461																																																																																																																									R-b
265/461
266/461
267/461
268/461
269/461
270/461
271/461
272/461
273/461																																																																																																																																	R-b
274/461
275/461
276/461																																																												R-b	R-b
277/461																																																												R-b	R-b
278/461																																																												R-b	R-b
279/461
280/461
281/461
282/461
283/461
284/461
285/461
286/461
287/461																																																																																																																											R-b
288/461																																																																																																																											R-b
289/461
290/461																																																																																																																																		A-b	A-b	A-b	T-b
291/461																																																																																																																																						R-b	R-b
292/461																																																																																																																																								R-b	R-b
293/461
294/461																																																																								R-b
295/461																																																																						R-b		R-b
296/461																																																																						R-b
297/461																																																																																																																																										R-b
298/461																																																																																																																											R-b																R-b	R-b	R-b
299/461																																																																																																																											R-b																	R-b	R-b
300/461																																																																																																																																					T-b
301/461
302/461																																																																																																																																														R-b T-b
303/461
304/461																																																																						R-b		R-b																																																																							R-b
305/461
306/461
307/461																																																																																																																																																R-b
308/461																																																																																																																																															R-b
309/461
310/461																																																																								R-b																																																																							R-b
311/461
312/461																																																																																																																																																	R-b	T-b
313/461
314/461
315/461																																																																																																																								R-b																																														A-b
316/461
317/461																																																																																																																																																			R-b
318/461
319/461																																																																																																																																																																							R-b
320/461																																																																																																																																																			R-b
321/461																																																																																																																																																			R-b
322/461																																																																																																																																																			R-b
323/461																																																																																																																																																				R-b
324/461																																																																																																																																																					R-b	T-b
325/461																																																																																																																																																							T-b	T-b
326/461																																																																																																																																																									R-b
327/461
328/461
329/461
330/461																																R-b																																																																																																																										R-b
331/461																																																																																																																																																											R-b
332/461																																																																																																																																													R-b
333/461
334/461																																																																																																																																																												R-b	R-b	R-b
335/461																																																																																																																																																												R-b	R-b	R-b
336/461																																																																																																																																																												R-b			R-b	R-b	T-b
337/461																																																																																																																																																												R-b			R-b	R-b	T-b
338/461																																																																																																																																																												R-b			R-b	R-b	T-b
339/461																																																																																																																																																												R-b			R-b		T-b
340/461																																																																																																																																																												R-b			Reviewd-by		T-b
341/461
342/461
343/461
344/461																																																																																																																																																																		R-b
345/461																																																																																																																																																																			A-b	A-b
346/461																																																																																																							R-b																																																														R-b
347/461																																																																																																							R-b																																																														R-b
348/461
349/461
350/461																																					R-b
351/461
352/461
353/461
354/461
355/461
356/461																																																																																																																																																																																					R-b
357/461																																																																																																																																																																																						R-b	R-b
358/461																																																																																																																																																R-b																																								R-b	R-b	R-b
359/461																																																																																																																																																																																											R-b
360/461																																																																																																																																																																									R-b
361/461																																																																																																																																																																								R-b
362/461																																																																																																																																																																									R-b
363/461																																																																																																																																																																									R-b
364/461																																																																																																																																																																										R-b
365/461																																																																																																																																																																									R-b
366/461																																																																																																																																																																										R-b
367/461																																																													R-b																																																																																																														R-b
368/461																																																												R-b
369/461																																																																																																																																																																												R-b
370/461																																																																																																																																																																												R-b
371/461																																																																																																																																																																												R-b
372/461																																																																																																																																																																												R-b
373/461
374/461																																																																																																																																																																						R-b							T-b	T-b
375/461
376/461																																																					R-b
377/461
378/461																																																									R-b	T-b																																																																																																																					R-b
379/461																																																									R-b	T-b																																																																																																																					R-b
380/461																																																					R-b		T-b		R-b
381/461																																																																																																																																																																																R-b
382/461																																																																						R-b		R-b
383/461																																																																																																																																																																																	A-b	R-b T-b
384/461
385/461																																																																																																																																																																																			A-b
386/461
387/461																																																																																																																																																																																				R-b
388/461																																								R-b																																																																																																																																												R-b
389/461																																								R-b																																																																																																																																												R-b
390/461																																								R-b																																																																																																																																												R-b
391/461																																								R-b																																																																																																																																												R-b
392/461																																								R-b																																																																																																																																												R-b
393/461																																																																																																																																																																																				R-b																	R-b
394/461																																																																																																																																																																																				R-b																	R-b
395/461																																																																																																																																																																																				R-b																	R-b
396/461																																																																																																																																																																																				R-b																							R-b
397/461
398/461																																																																																																																																																																																												R-b
399/461																																																																																																																																																																																												R-b
400/461																																																																																																																																																																																												R-b
401/461																																																																																																																																																																																													R-b
402/461
403/461																																																																																																																																																																																														A-b
404/461																																																																																																																																																																							R-b
405/461																																																																																																																																																																							R-b
406/461																																																																																																																																																																																															A-b
407/461
408/461
409/461																																																																																																																																																																				T-b
410/461																																																																																																																																																																																																R-b	R-b
411/461																																																																																																																																																																																																R-b
412/461
413/461																																																																																																																																																																																																		R-b	R-b
414/461																																																																																																																																																																																																			R-b	R-b
415/461																																																					R-b
416/461
417/461
418/461
419/461
420/461
421/461
422/461																																																																																																																																																																																																						R-b
423/461																																																																																																																																																																																																							T-b	R-b
424/461																																	R-b																				R-b
425/461																																																					R-b
426/461																																																					R-b
427/461																																																																																																																																																																																																									R-b	T-b
428/461																																																																																																																																																																																																									R-b	T-b
429/461																																				R-b
430/461
431/461																																																											R-b
432/461
433/461
434/461
435/461
436/461																																																																																																																																																																																																																			R-b
437/461																																												R-b
438/461																																																																																														R-b
439/461
440/461
441/461
442/461																																																																																																																																																																																																												R-b
443/461
444/461
445/461																																																																																																																																																																																																								R-b					R-b
446/461																																																																																																																											R-b
447/461																																																																																																																											R-b
448/461
449/461																																																																																																																																																																																																														R-b
450/461																																																																																																																																																																																																						R-b
451/461																																																																																																																																																																																																															T-b
452/461
453/461																																																																																																																																																																																																						R-b
454/461																																																																																																																																																																																																																R-b
455/461
456/461
457/461	A-b
458/461
459/461																																																																																																																											R-b
460/461																																																																																																																																																																																				R-b																													R-b	R-b
461/461																																																																																																																																																																																				R-b																	R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 225 reviewers.

Read the v1 thread

Cover letter [PATCH 7.0 000/461] 7.0.11-rc1 review

This is the start of the stable review cycle for the 7.0.11 release. There are 461 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 30 May 2026 19:45:49 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.0.11-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.0.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 7.0.11-rc1

Armin Wolf <[email protected]>
platform/x86: uniwill-laptop: Do not enable the charging limit even when forced

Werner Sembach <[email protected]>
Documentation: laptops: Update documentation for uniwill laptops

Damien Le Moal <[email protected]>
block: avoid use-after-free in disk_free_zone_resources()

Tiezhu Yang <[email protected]>
LoongArch: kprobes: Fix handling of fatal unrecoverable recursions

Junyi Liu <[email protected]>
ksmbd: fix durable reconnect error path file lifetime

Keith Busch <[email protected]>
blk-mq: pop cached request if it is usable

Alexander A. Klimov <[email protected]>
io_uring/nop: pass all errors to userspace

Wei Fang <[email protected]>

    net: enetc: fix missing error code when pf->vf_state allocation fails

Sabrina Dubroca <[email protected]>
net: gro: don't merge zcopy skbs

Nikhil P. Rao <[email protected]>
pds_core: ensure null-termination for firmware version strings

Lorenzo Bianconi <[email protected]>
net: airoha: Disable GDM2 forwarding before configuring GDM2 loopback

Weiming Shi <[email protected]>
tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR

Aditya Garg <[email protected]>
net: mana: validate rx_req_idx to prevent out-of-bounds array access

Ratheesh Kannoth <[email protected]>
octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs

Keith Busch <[email protected]>
nvme-pci: fix dma mapping leak on data setup error

Keith Busch <[email protected]>
nvme-pci: fix dma_vecs leak on p2p memory

Nimrod Oren <[email protected]>
selftests: net: Fix checksums in xdp_native

Richard Fitzgerald <[email protected]>
ASoC: cs-amp-lib: Fix missing dput() after debugfs_lookup()

Richard Fitzgerald <[email protected]>
ASoC: cs-amp-lib: Fix wrong sizeof() in _cs_amp_set_efi_calibration_data()

Shuicheng Lin <[email protected]>
drm/xe/oa: Fix exec_queue leak on width check in stream open

Richard Fitzgerald <[email protected]>
ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()

Bartosz Golaszewski <[email protected]>
gpio: aggregator: lock device when calling device_is_bound()

Bartosz Golaszewski <[email protected]>
gpio: aggregator: remove the software node when deactivating the aggregator

Bartosz Golaszewski <[email protected]>
gpio: aggregator: stop using dev-sync-probe

Bartosz Golaszewski <[email protected]>
gpio: aggregator: fix a potential use-after-free

Bartosz Golaszewski <[email protected]>
gpio: cdev: check if uAPI v2 config attributes are correctly zeroed

Zhi Li <[email protected]>
net: stmmac: eswin: validate RGMII delay values

Zhi Li <[email protected]>
net: stmmac: eswin: correct RGMII delay granularity to 20 ps

Zhi Li <[email protected]>
net: stmmac: eswin: clear TXD and RXD delay registers during initialization

Zhi Li <[email protected]>
net: stmmac: eswin: fix HSP CSR init ordering after clock enable

Eric Dumazet <[email protected]>
tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction

Xingwang Xiang <[email protected]>
bpf, skmsg: fix verdict sk_data_ready racing with ktls rx

Rosen Penev <[email protected]>
net: ag71xx: check error for platform_get_irq

David Howells <[email protected]>
rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg

David Howells <[email protected]>
crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks

Jakub Kicinski <[email protected]>
net: shaper: rework the VALID marking (again)

Jakub Kicinski <[email protected]>
net: shaper: annotate the data races

Prathamesh Deshpande <[email protected]>
net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA

Gal Pressman <[email protected]>
udp: Fix UDP length on last GSO_PARTIAL segment

Alice Mikityanska <[email protected]>
udp: gso: Fix handling checksum in __udp_gso_segment

Jiajia Liu <[email protected]>

    Bluetooth: btmtk: fix urb->setup_packet leak in error paths

Kiran K <[email protected]>
Bluetooth: btintel_pcie: Fix incorrect MAC access programming

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Fix not setting mask for HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE

David Carlier <[email protected]>
tracing: Avoid NULL return from hist_field_name() on truncation

Cunlong Li <[email protected]>
cgroup: rstat: relax NMI guard after switch to try_cmpxchg

Zhang Cen <[email protected]>
ALSA: seq: Serialize UMP output teardown with event_input

Shitalkumar Gandhi <[email protected]>
wifi: wilc1000: fix dma_buffer leak on bus acquire failure

Johannes Berg <[email protected]>
wifi: mac80211: fix multi-link element inheritance

Johannes Berg <[email protected]>
wifi: mac80211: fix MLE defragmentation

Alexandru Hossu <[email protected]>

    wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs

Jia Zhu <[email protected]>
erofs: fix metabuf leak in inode xattr initialization

Utkal Singh <[email protected]>
erofs: harden h_shared_count in erofs_init_inode_xattrs()

Gao Xiang <[email protected]>
erofs: fix managed cache race for unaligned extents

Nikhil P. Rao <[email protected]>
pds_core: fix debugfs_lookup dentry leak and error handling

Nikhil P. Rao <[email protected]>
pds_core: fix error handling in pdsc_devcmd_wait

Christian Marangi <[email protected]>
net: airoha: Fix NPU RX DMA descriptor bits

Nicolai Buchwitz <[email protected]>
net: phy: honor eee_disabled_modes in phy_advertise_eee_all()

Nicolai Buchwitz <[email protected]>
net: phy: honor eee_disabled_modes in phy_support_eee()

Ido Schimmel <[email protected]>
bridge: mcast: Fix a possible use-after-free when removing a bridge port

Guangshuo Li <[email protected]>
RDMA/rtrs: Fix use-after-free in path file creation cleanup

Shiraz Saleem <[email protected]>
RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port

Timur Kristóf <[email protected]>
drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets

Timur Kristóf <[email protected]>
drm/amdgpu/vce1: Check that the GPU address is < 128 MiB

Timur Kristóf <[email protected]>
drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2)

Robertus Diawan Chris <[email protected]>
ASoC: soc-utils: Add missing va_end in snd_soc_ret()

Ahmed Yaseen <[email protected]>
platform/x86: asus-armoury: fix mini-LED mode get/set on MODE2 devices

Armin Wolf <[email protected]>
platform/x86: uniwill-laptop: Fix behavior of "force" module param

Armin Wolf <[email protected]>
platform/x86: uniwill-laptop: Accept charging threshold of 0

Armin Wolf <[email protected]>
platform/x86: uniwill-laptop: Properly initialize charging threshold

Rafael J. Wysocki <[email protected]>
platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL

Rafael J. Wysocki <[email protected]>
platform/x86: intel_sar: Check ACPI_HANDLE() against NULL

Rafael J. Wysocki <[email protected]>
platform/x86: intel-hid: Check ACPI_HANDLE() against NULL

Rafael J. Wysocki <[email protected]>
platform/x86: hp_accel: Check ACPI_COMPANION() against NULL

Rafael J. Wysocki <[email protected]>
platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL

Oliver White <[email protected]>
platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7

Erni Sri Satya Vennela <[email protected]>
net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

Daniel Golle <[email protected]>
net: dsa: mt7530: preserve VLAN tags on trapped link-local frames

Daniel Golle <[email protected]>
net: dsa: mt7530: fix FDB entries not aging out with short timeout

Viktor Jägersküpper <[email protected]>
kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme

Xiangxu Yin <[email protected]>
phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config

Ankit Nautiyal <[email protected]>
drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP

Kohei Enju <[email protected]>
igc: set tx buffer type for SMD frames

Grzegorz Nitka <[email protected]>
ice: ptp: use primary NAC semaphore on E825

Grzegorz Nitka <[email protected]>
ice: ptp: serialize E825 PHY timer start with PTP lock

David Howells <[email protected]>
cifs: Fix undefined variables

Dragos Tatulea <[email protected]>
net/mlx5e: xsk: Fix unlocked writing to ICOSQ

Qing Ming <[email protected]>
cgroup/rstat: validate cpu before css_rstat_cpu() access

Paul E. McKenney <[email protected]>
srcu: Don't queue workqueue handlers to never-online CPUs

Michael Bommarito <[email protected]>

    io_uring: propagate array_index_nospec opcode into req->opcode

Louis-Alexis Eyraud <[email protected]>
drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable

Louis-Alexis Eyraud <[email protected]>
drm/mediatek: mtk_cec: Fix non-static global variable

Louis-Alexis Eyraud <[email protected]>
drm/mediatek: mtk_hdmi_v2: Fix non-static global variable

Louis-Alexis Eyraud <[email protected]>
drm/mediatek: mtk_hdmi_ddc_v2: Fix non-static global variable

Baochen Qiang <[email protected]>
wifi: ath12k: fix EHT TX MCS limitation due to wrong 20 MHz-only parsing

Matthew Leach <[email protected]>
wifi: ath11k: fix peer resolution on rx path when peer_id=0

Gustavo Sousa <[email protected]>
drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4

Matt Roper <[email protected]>
drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p

Gustavo Sousa <[email protected]>
drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1

Matt Roper <[email protected]>
drm/xe: Consolidate workaround entries for Wa_18033852989

Matt Roper <[email protected]>
drm/xe: Consolidate workaround entries for Wa_14019988906

Mohanram Meenakshisundaram <[email protected]>
drm/xe/pf: Fix CFI failure in debugfs access

Michal Wajdeczko <[email protected]>
drm/xe/vf: Fix signature of print functions

Shuicheng Lin <[email protected]>
drm/xe/gsc: Fix double-free of managed BO in error path

Boris Brezillon <[email protected]>
drm/gem: Make the GEM LRU lock part of drm_device

Jianpeng Chang <[email protected]>
dma-mapping: move dma_map_resource() sanity check into debug code

Miri Korenblit <[email protected]>
wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it

Cole Leavitt <[email protected]>
wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled

Guenter Roeck <[email protected]>
hwmon: (lm90) Add lock protection to lm90_alert

Guenter Roeck <[email protected]>
hwmon: (lm90) Stop work before releasing hwmon device

Dmitry Baryshkov <[email protected]>
drm/msm/snapshot: fix dumping of the unaligned regions

Eric Naim <[email protected]>
ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5

Florian Westphal <[email protected]>
netfilter: nft_inner: release local_lock before re-enabling softirqs

Felix Gu <[email protected]>
spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()

Cássio Gabriel <[email protected]>
ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging

Boris Burkov <[email protected]>
btrfs: fix squota accounting during enable generation

Boris Burkov <[email protected]>
btrfs: check for subvolume before deleting squota qgroup

Stefano Garzarella <[email protected]>
vsock/virtio: fix zerocopy completion for multi-skb sends

Jens Axboe <[email protected]>
io_uring/net: punt IORING_OP_BIND async if it needs file create

Hongling Zeng <[email protected]>
cachefiles: Fix error return when vfs_mkdir() fails

Matt DeVillier <[email protected]>
ALSA: hda/ca0132: Disable auto-detect on manual output select

Robertus Diawan Chris <[email protected]>
ALSA: scarlett2: Add missing error check when initialise Autogain Status

Jason Gunthorpe <[email protected]>
iommupt: Fix the end_index calculation in __map_range_leaf()

Jason Gunthorpe <[email protected]>
iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap

Jason Gunthorpe <[email protected]>
iommu: Handle unmap error when iommu_debug is enabled

Jason Gunthorpe <[email protected]>
iommu: Fix up map/unmap debugging for iommupt domains

Jason Gunthorpe <[email protected]>
iommu: Fix loss of errno on map failure for classic ops

Jason Gunthorpe <[email protected]>
iommupt: Avoid rewalking during map

Jason Gunthorpe <[email protected]>
iommupt: Directly call iommupt's unmap_range()

Alexander A. Klimov <[email protected]>

    ASoC: codecs: fs210x: fix possible buffer overflow

Mike Christie <[email protected]>
scsi: sd: Fix return code handling in sd_spinup_disk()

Or Har-Toov <[email protected]>
net/mlx5: Skip disabled vports when setting max TX speed

Jeroen Massar <[email protected]>
net/mlx5: Do not restore destination-less TC rules

Chuck Lever <[email protected]>
tls: Preserve sk_err across recvmsg() when data has been copied

Ralf Lici <[email protected]>
ovpn: disable BHs when updating device stats

Matt Evans <[email protected]>
vfio/pci: Check BAR resources before exporting a DMABUF

Juergen Gross <[email protected]>

    x86/xen: Fix xen_e820_swap_entry_with_ram()

Kees Cook <[email protected]>
gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE

David Carlier <[email protected]>
phy: apple: atc: Fix typec switch/mux leak on unbind

DaeMyung Kang <[email protected]>
cifs: client: stage smb3_reconfigure() updates and restore ctx on failure

Antonio Quartulli <[email protected]>
ovpn: fix race between deleting interface and adding new peer

David Carlier <[email protected]>
ovpn: respect peer refcount in CMD_NEW_PEER error path

David Carlier <[email protected]>
ovpn: tcp - use cached peer pointer in ovpn_tcp_close()

Sven Schuchmann <[email protected]>
net: phy: DP83TC811: add reading of abilities

Jakub Kicinski <[email protected]>
net: tls: prevent chain-after-chain in plain text SG

Jakub Kicinski <[email protected]>
net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring

Xiang Mei <[email protected]>
net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot

Sayali Patil <[email protected]>
powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()

Randy Dunlap <[email protected]>
riscv: Docs: fix unmatched quote warning

Cássio Gabriel <[email protected]>
ASoC: sdw_utils: Check speaker component string allocation

Maciej Strozek <[email protected]>
ASoC: sdw_utils: cs42l43: allow spk component names to be combined

Maciej Strozek <[email protected]>
ASoC: intel: sof_sdw: Prepare for configuration without a jack

Chen Ni <[email protected]>
drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table

Mikko Perttunen <[email protected]>
drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN

Rob Clark <[email protected]>
drm/msm/a6xx: Restore sysprof_active

Dmitry Baryshkov <[email protected]>
drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx

Felix Gu <[email protected]>
drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()

Akhil P Oommen <[email protected]>
drm/msm/a6xx: Add soft fuse detection support

Alexander Koskovich <[email protected]>
drm/msm: Fix GMEM_BASE for A650

Ricardo Neri <[email protected]>
Documentation: intel_pstate: Fix description of asymmetric packing with SMT

Borislav Petkov (AMD) <[email protected]>
x86/mce: Restore MCA polling interval halving

Ming Lei <[email protected]>
selftests: ublk: cap nthreads to kernel's actual nr_hw_queues

Damien Le Moal <[email protected]>
block: fix handling of dead zone write plugs

Damien Le Moal <[email protected]>
block: allow submitting all zone writes from a single context

Damien Le Moal <[email protected]>
block: rename struct gendisk zone_wplugs_lock field

Dmitry Baryshkov <[email protected]>
drm/msm/dpu: don't mix devm and drmm functions

Dmitry Baryshkov <[email protected]>
drm/msm/dsi: don't dump registers past the mapped region

Mahadevan P <[email protected]>
drm/msm/dpu: Fix Kaanapali CWB register configuration

Neil Armstrong <[email protected]>
drm/msm/dpu: fix UV scanlines calculation for YUV UBWC formats

Chenguang Zhao <[email protected]>
ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics

Xiang Mei <[email protected]>

    net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint

Zack McKevitt <[email protected]>
accel/qaic: Add overflow check to remap_pfn_range during mmap

Sungwoo Kim <[email protected]>
block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()

Lukas Bulwahn <[email protected]>
HID: quirks: really enable the intended work around for appledisplay

Casey Chen <[email protected]>
block: recompute nr_integrity_segments in blk_insert_cloned_request

David Carlier <[email protected]>
block: don't overwrite bip_vcnt in bio_integrity_copy_user()

Jakub Kicinski <[email protected]>
net: shaper: reject QUEUE scope handle with missing id

Jakub Kicinski <[email protected]>
net: shaper: enforce singleton NETDEV scope with id 0

Jakub Kicinski <[email protected]>
net: shaper: reject handle IDs exceeding internal bit-width

Jakub Kicinski <[email protected]>
net: shaper: fix undersized reply skb allocation in GROUP command

Jakub Kicinski <[email protected]>
net: shaper: set ret to -ENOMEM when genlmsg_new() fails in group_doit

Jakub Kicinski <[email protected]>
net: shaper: reject duplicate leaves in GROUP request

Jakub Kicinski <[email protected]>
net: shaper: fix trivial ordering issue in net_shaper_commit()

Jakub Kicinski <[email protected]>
net: shaper: flip the polarity of the valid flag

Kang Yang <[email protected]>
wifi: ath10k: skip WMI and beacon transmission when device is wedged

Nicolas Escande <[email protected]>
wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()

Nicolas Escande <[email protected]>
wifi: ath11k: fix error path leaks in some WMI WOW calls

Ethan Nelson-Moore <[email protected]>
net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference

Linus Walleij <[email protected]>
net: ethernet: cortina: Carry over frag counter

Andreas Haarmann-Thiemann <[email protected]>
net: ethernet: cortina: Drop half-assembled SKB

Linus Walleij <[email protected]>
net: ethernet: cortina: Make RX SKB per-port

David Howells <[email protected]>
afs: Fix the locking used by afs_get_link()

David Howells <[email protected]>
netfs, afs: Fix write skipping in dir/link writepages

David Howells <[email protected]>
netfs: Fix netfs_read_folio() to wait on writeback

David Howells <[email protected]>

    netfs: Fix folio->private handling in netfs_perform_write()

David Howells <[email protected]>
netfs: Fix partial invalidation of streaming-write folio

David Howells <[email protected]>
netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()

David Howells <[email protected]>
netfs: Fix leak of request in netfs_write_begin() error handling

David Howells <[email protected]>
netfs: Fix early put of sink folio in netfs_read_gaps()

David Howells <[email protected]>
netfs: Fix write streaming disablement if fd open O_RDWR

David Howells <[email protected]>
netfs: Fix read-gaps to remove netfs_folio from filled folio

David Howells <[email protected]>
netfs: Fix potential deadlock in write-through mode

David Howells <[email protected]>
netfs: Fix streaming write being overwritten

David Howells <[email protected]>
netfs: Defer the emission of trace_netfs_folio()

David Howells <[email protected]>
netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone

David Howells <[email protected]>
netfs: Fix overrun check in netfs_extract_user_iter()

Viacheslav Dubeyko <[email protected]>
netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call

David Howells <[email protected]>
netfs: Fix zeropoint update where i_size > remote_i_size

David Howells <[email protected]>

    netfs: Fix potential for tearing in ->remote_i_size and ->zero_point

David Howells <[email protected]>
netfs: Fix netfs_read_to_pagecache() to pause on subreq failure

David Howells <[email protected]>

    netfs: Fix missing barriers when accessing stream->subrequests locklessly

David Howells <[email protected]>
netfs: Fix missing locking around retry adding new subreqs

David Howells <[email protected]>
netfs: Fix cancellation of a DIO and single read subrequests

Aboorva Devarajan <[email protected]>
powerpc/hv-gpci: fix preempt count leak in sysfs show paths

Julian Braha <[email protected]>
powerpc: fix dead default for GUEST_STATE_BUFFER_TEST

Ally Heev <[email protected]>
powerpc: 82xx: fix uninitialized pointers with free attribute

Mario Limonciello <[email protected]>
ASoC: SOF: amd: Fix error code handling in psp_send_cmd()

Kuniyuki Iwashima <[email protected]>
tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().

Johannes Thumshirn <[email protected]>
zonefs: handle integer overflow in zonefs_fname_to_fno

Chia-Lin Kao (AceLan) <[email protected]>
nvme-pci: fix use-after-free in nvme_free_host_mem()

Keith Busch <[email protected]>
nvme: fix bio leak on mapping failure

Jiayuan Chen <[email protected]>
irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT

Zhihao Cheng <[email protected]>
nsfs: fix wrong error code returned for pidns ioctls

Ming Lei <[email protected]>
ublk: reject max_sectors smaller than PAGE_SECTORS in parameter validation

Pankaj Raghav <[email protected]>
fs: fix forced iversion increment on lazytime timestamp updates

Rosen Penev <[email protected]>
irqchip/ath79-cpu: Remove unused function

Hongling Zeng <[email protected]>
fs: Fix return in jfs_mkdir and orangefs_mkdir

Junyoung Jang <[email protected]>
fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap

Masami Hiramatsu (Google) <[email protected]>
fprobe: Fix unregister_fprobe() to wait for RCU grace period

Mac Chiang <[email protected]>
ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC

Mac Chiang <[email protected]>
ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC

Chuck Lever <[email protected]>
NFSD: Fix infinite loop in layout state revocation

Felix Gu <[email protected]>
phy: spacemit: Remove incorrect clk_disable() in spacemit_usb2phy_init()

Gabor Juhos <[email protected]>
phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access

Shitalkumar Gandhi <[email protected]>
net: ti: icssm-prueth: fix eth_ports_node leak in probe

Myeonghun Pak <[email protected]>
net: lan966x: avoid unregistering netdev on register failure

Ivan Vecera <[email protected]>
ice: dpll: fix misplaced header macros

Ivan Vecera <[email protected]>
ice: dpll: fix rclk pin state get for E810

Bart Van Assche <[email protected]>
ice: fix locking in ice_dcb_rebuild()

Marcin Szycik <[email protected]>
ice: fix setting RSS VSI hash for E830

Emil Tantilov <[email protected]>
idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()

Mohsin Bashir <[email protected]>
net: shaper: Reject reparenting of existing nodes

Dragos Tatulea <[email protected]>
net: napi: Avoid gro timer misfiring at end of busypoll

Kuniyuki Iwashima <[email protected]>
tcp: Fix imbalanced icsk_accept_queue count.

Martin Kaiser <[email protected]>
test_kprobes: clear kprobes between test runs

Jianpeng Chang <[email protected]>
kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist()

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: restore helper propagation via expectation

Florian Westphal <[email protected]>
netfilter: bridge: eb_tables: close module init race

Florian Westphal <[email protected]>
netfilter: x_tables: close dangling table module init race

Florian Westphal <[email protected]>
netfilter: ebtables: close dangling table module init race

Florian Westphal <[email protected]>
netfilter: ebtables: move to two-stage removal scheme

Florian Westphal <[email protected]>
netfilter: x_tables: add and use xtables_unregister_table_exit

Florian Westphal <[email protected]>
netfilter: x_tables: add and use xt_unregister_table_pre_exit

Florian Westphal <[email protected]>
netfilter: x_tables: unregister the templates first

Florian Westphal <[email protected]>
netfilter: x_tables: allocate hook ops while under mutex

Florian Westphal <[email protected]>
netfilter: x_tables: allow initial table replace without emitting audit log message

Filipe Manana <[email protected]>
btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()

Shuhao Fu <[email protected]>
ALSA: hda: cs35l41: Put ACPI device on missing physical node

Shuhao Fu <[email protected]>
ALSA: hda: cs35l56: Put ACPI device after setting companion

Guenter Roeck <[email protected]>
ARM: integrator: Fix early initialization

Sudeep Holla <[email protected]>
firmware: arm_ffa: Fix sched-recv callback partition lookup

Sudeep Holla <[email protected]>
firmware: arm_ffa: Snapshot notifier callbacks under lock

Sudeep Holla <[email protected]>
firmware: arm_ffa: Align RxTx buffer size before mapping

Sudeep Holla <[email protected]>
firmware: arm_ffa: Validate framework notification message layout

Sudeep Holla <[email protected]>
firmware: arm_ffa: Keep framework RX release under lock

Sudeep Holla <[email protected]>
firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies

Maulik Shah <[email protected]>
pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150

David Gow <[email protected]>
kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS

David Gow <[email protected]>
kunit: config: Enable KUNIT_DEBUGFS by default

Guo Ren (Alibaba DAMO Academy) <[email protected]>
riscv: mm: Fixup no5lvl failure when vaddr is invalid

Michael Neuling <[email protected]>
riscv: Fix register corruption from uninitialized cregs on error

Michael Neuling <[email protected]>
riscv: errata: Fix bitwise vs logical AND in MIPS errata patching

Sudeep Holla <[email protected]>
firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0

Sudeep Holla <[email protected]>
firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue

Sudeep Holla <[email protected]>
firmware: arm_ffa: Skip free_pages on RX buffer alloc failure

Sudeep Holla <[email protected]>
firmware: arm_ffa: Check for NULL FF-A ID table while driver registration

Takashi Iwai <[email protected]>
HID: uclogic: Fix regression of input name assignment

Dan Carpenter <[email protected]>
HID: intel-thc-hid: Intel-quickspi: Fix some error codes

David Carlier <[email protected]>
mm/memfd_luo: report error when restoring a folio fails mid-loop

Evangelos Petrongonas <[email protected]>
kho: skip KHO for crash kernel

Maulik Shah <[email protected]>
pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615

Xianwei Zhao <[email protected]>
pinctrl: meson: amlogic-a4: fix deadlock issue

Lad Prabhakar <[email protected]>
pinctrl: renesas: rzg2l: Fix SMT register cache handling

Biju Das <[email protected]>
pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for high pins during suspend/resume

Marek Vasut <[email protected]>
ARM: dts: renesas: rskrza1: Drop superfluous cells

Marek Vasut <[email protected]>
ARM: dts: renesas: genmai: Drop superfluous cells

Geert Uytterhoeven <[email protected]>
arm64: dts: renesas: r8a78000: Fix SCIF brg_int clocks

Til Kaiser <[email protected]>
pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function

Bartosz Golaszewski <[email protected]>
pinctrl: mediatek: moore: implement gpio_chip::get_direction()

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe()

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe()

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) reject implausible blackbox record_count

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) seed timestamp from the real-time clock

Sven Eckelmann <[email protected]>
batman-adv: tt: prevent TVLV entry number overflow

Sven Eckelmann <[email protected]>
batman-adv: tt: fix negative tt_buff_len

Sven Eckelmann <[email protected]>
batman-adv: tt: fix negative last_changeset_len

Sven Eckelmann <[email protected]>
batman-adv: tt: avoid empty VLAN responses

Sven Eckelmann <[email protected]>
batman-adv: tt: reject oversized local TVLV buffers

Sven Eckelmann <[email protected]>
batman-adv: tt: fix TOCTOU race for reported vlans

Sven Eckelmann <[email protected]>
batman-adv: tp_meter: avoid role confusion in tp_list

Sven Eckelmann <[email protected]>
batman-adv: tp_meter: fix race condition in send error reporting

Sven Eckelmann <[email protected]>
batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown

Sven Eckelmann <[email protected]>
batman-adv: tp_meter: directly shut down timer on cleanup

Sven Eckelmann <[email protected]>
batman-adv: tp_meter: avoid use of uninit sender vars

Sven Eckelmann <[email protected]>
batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface

Sven Eckelmann <[email protected]>
batman-adv: bla: avoid double decrement of bla.num_requests

Sven Eckelmann <[email protected]>
batman-adv: bla: fix report_work leak on backbone_gw purge

Sven Eckelmann <[email protected]>
batman-adv: frag: disallow unicast fragment in fragment

Luxiao Xu <[email protected]>
batman-adv: fix tp_meter counter underflow during shutdown

Ruide Cao <[email protected]>
batman-adv: fix fragment reassembly length accounting

Sven Eckelmann <[email protected]>
batman-adv: dat: handle forward allocation error

Ruijie Li <[email protected]>
batman-adv: clear current gateway during teardown

Sven Eckelmann <[email protected]>
batman-adv: mcast: fix use-after-free in orig_node RCU release

Sven Eckelmann <[email protected]>
batman-adv: iv: recover OGM scheduling after forward packet error

Sven Eckelmann <[email protected]>
batman-adv: tvlv: reject oversized TVLV packets

Sven Eckelmann <[email protected]>
batman-adv: tvlv: abort OGM send on tvlv append failure

Sven Eckelmann <[email protected]>
batman-adv: v: stop OGMv2 on disabled interface

Harry Wentland <[email protected]>
drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

Harry Wentland <[email protected]>
drm/amd/display: Validate GPIO pin LUT table size before iterating

Harry Wentland <[email protected]>
drm/amd/display: Fix integer overflow in bios_get_image()

Osama Abdelkader <[email protected]>
drm/bridge: megachips: remove bridge when irq request fails

Julien Chauveau <[email protected]>
drm/bridge: it66121: acquire reset GPIO in probe

Alan Liu <[email protected]>
drm/amdgpu/vpe: Force collaborate sync after TRAP

Niranjana Vishwanathapura <[email protected]>
drm/xe/multi_queue: Fix secondary queue error case

Deepanshu Kartikey <[email protected]>
drm/virtio: use uninterruptible resv lock for plane updates

Maíra Canal <[email protected]>
drm/v3d: Release indirect CSD GEM reference on CPU job free

Maíra Canal <[email protected]>
drm/v3d: Fix use-after-free of CPU job query arrays on error path

Daniel J Blueman <[email protected]>
drm/msm: Fix shrinker deadlock

Chaitanya Kumar Borah <[email protected]>
drm/i915/display: Copy color pipeline from plane in the primary joiner pipe

Bartosz Golaszewski <[email protected]>

    device property: set fwnode->secondary to NULL in fwnode_init()

Rafael J. Wysocki <[email protected]>
cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E

Huacai Chen <[email protected]>
LoongArch: Remove unused code to avoid build warning

Tiezhu Yang <[email protected]>
LoongArch: kprobes: Use larch_insn_text_copy() to patch instructions

Heechan Kang <[email protected]>
fwctl: pds: Validate RPC input size before parsing

Thomas Richter <[email protected]>
s390/pai: Fix missing PAI counter increments under heavy load

Thomas Richter <[email protected]>
s390/pai: Disable duplicate read of kernel PAI counter value

Peter Oberparleiter <[email protected]>
s390/cio: Restore GFP_DMA for CHSC allocation

Michael Bommarito <[email protected]>
RDMA/siw: Reject MPA FPDU length underflow before signed receive math

Qing Wang <[email protected]>
mm/slub: hold cpus_read_lock around flush_rcu_sheaves_on_cache()

Johan Hovold <[email protected]>
spi: ti-qspi: fix use-after-free after DMA setup failure

Johan Hovold <[email protected]>
spi: sprd: fix error pointer deref after DMA setup failure

Johan Hovold <[email protected]>
spi: ep93xx: fix error pointer deref after DMA setup failure

Michael Bommarito <[email protected]>
scsi: isci: Fix use-after-free in device removal path

Yongxing Mou <[email protected]>
phy: qcom: edp: Fix AUX_CFG8 programming for DP mode

Yongxing Mou <[email protected]>
phy: qcom: edp: Add eDP/DP mode switch support

Yongxing Mou <[email protected]>
phy: qcom: edp: Unify generic DP/eDP swing and pre-emphasis tables

Nitin Rawat <[email protected]>
phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after SM8650 G4 fix

Wayne Chang <[email protected]>
phy: tegra: xusb: Fix per-pad high-speed termination calibration

Łukasz Lebiedziński <[email protected]>
phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for Exynos7870

Johan Hovold <[email protected]>
spi: qup: fix error pointer deref after DMA setup failure

Osama Abdelkader <[email protected]>
drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe

Saurav Sachidanand <[email protected]>
i2c: tegra: fix pm_runtime leak on mutex_lock failure

Carlos López <[email protected]>
virt: sev-guest: Explicitly leak pages in unknown state

Osama Abdelkader <[email protected]>
riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when OOM

Osama Abdelkader <[email protected]>
riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM

Tina Zhang <[email protected]>
KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)

Michael Bommarito <[email protected]>
KVM: arm64: vgic: Free private_irqs when init fails after allocation

Michael Bommarito <[email protected]>
KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits

Vladimir Murzin <[email protected]>
arm64: probes: Handle probes on hinted conditional branch instructions

Jeongjun Park <[email protected]>
ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put()

Masami Hiramatsu (Google) <[email protected]>

    tracing: Do not call map->ops->elt_free() if elt_alloc() fails

Zhihao Cheng <[email protected]>
cifs: Fix busy dentry used after unmounting

Dawei Feng <[email protected]>

    octeontx2-pf: avoid double free of pool->stack on AQ init failure

Michael Bommarito <[email protected]>
wifi: mac80211: consume only present negotiated TTLM maps

Jann Horn <[email protected]>

    af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

John Walker <[email protected]>

    wifi: cfg80211: advance loop vars in cfg80211_merge_profile()

Grzegorz Nitka <[email protected]>
ice: restore PTP Rx timestamp config after ethtool set-channels

Marcin Szycik <[email protected]>
ice: fix setting promisc mode while adding VID filter

Jacob Keller <[email protected]>
ice: fix locking around wait_event_interruptible_locked_irq

Kohei Enju <[email protected]>
igc: fix potential skb leak in igc_fpe_xmit_smd_frame()

Dawei Feng <[email protected]>
octeontx2-pf: fix double free in rvu_rep_rsrc_init()

Sam Daly <[email protected]>
octeontx2-af: CGX: add bounds check to cgx_speed_mbps index

Stephen Smalley <[email protected]>
lsm: hold cred_guard_mutex for lsm_set_self_attr()

Paolo Abeni <[email protected]>
mptcp: reset rcv wnd on disconnect

Shardul Bankar <[email protected]>
mptcp: do not drop partial packets

Ilya Dryomov <[email protected]>
rbd: eliminate a race in lock_dwork draining on unmap

Michael Bommarito <[email protected]>
ixgbevf: fix use-after-free in VEPA multicast source pruning

Michael Bommarito <[email protected]>
ipv4: raw: reject IP_HDRINCL packets with ihl < 5

Sheroz Juraev <[email protected]>
wifi: iwlwifi: mld: stop TX during firmware restart

Johannes Berg <[email protected]>
wifi: iwlwifi: mvm: fix driver-set TX rates on old devices

Kyle Farnung <[email protected]>
wifi: ath11k: clear shared SRNG pointer state on restart

Jose Ignacio Tornos Martinez <[email protected]>
ice: fix VF queue configuration with low MTU values

Stefano Garzarella <[email protected]>
vsock/virtio: reset connection on receiving queue overflow

Minh Nguyen <[email protected]>
vsock/vmci: fix UAF when peer resets connection during handshake

Li Xiasong <[email protected]>
mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient

Matthieu Baerts (NGI0) <[email protected]>
selftests: mptcp: drop nanoseconds width specifier

Justin Iurman <[email protected]>
ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()

Zhao Li <[email protected]>

    wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb

Masami Hiramatsu (Google) <[email protected]>
ring-buffer: Flush and stop persistent ring buffer on panic

Steven Rostedt <[email protected]>
ring-buffer: Fix reporting of missed events in iterator

Dawei Feng <[email protected]>
qed: fix double free in qed_cxt_tables_alloc()

Michael Bommarito <[email protected]>
l2tp: use list_del_rcu in l2tp_session_unhash

Tejun Heo <[email protected]>
sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path

Samuele Mariotti <[email protected]>
sched_ext: Fix missing warning in scx_set_task_state() default case

Rafael J. Wysocki <[email protected]>
ACPI: driver: Check ACPI_COMPANION() against NULL during probe

David Carlier <[email protected]>
net: ethtool: phy: avoid NULL deref when PHY driver is unbound

Quan Sun <[email protected]>
net: ethtool: fix NULL pointer dereference in phy_reply_size

Yizhou Zhao <[email protected]>
netfilter: nft_inner: Fix IPv6 inner_thoff desync

Nan Li <[email protected]>
netfilter: ipset: stop hash:* range iteration at end

Haoze Xie <[email protected]>

    netfilter: nf_queue: hold bridge skb->dev while queued

Zhengchuan Liang <[email protected]>
netfilter: ip6t_hbh: reject oversized option lists

Jonas Jelonek <[email protected]>
net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis()

Michael Bommarito <[email protected]>
net: ifb: report ethtool stats over num_tx_queues

Matt Fleming <[email protected]>
net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover

Michael Bommarito <[email protected]>
net: hsr: defer node table free until after RCU readers

Nerijus Bendžiūnas <[email protected]>
net: phy: skip EEE advertisement write when autoneg is disabled

David Carlier <[email protected]>
net: devmem: reject dma-buf bind with non-page-aligned size or SG length

Nicolai Buchwitz <[email protected]>
net: bcmgenet: keep RBUF EEE/PM disabled

Zijing Yin <[email protected]>
phonet/pep: disable BH around forwarded sk_receive_skb()

Jiexun Wang <[email protected]>
Bluetooth: serialize accept_q access

Michael Bommarito <[email protected]>
Bluetooth: MGMT: validate Add Extended Advertising Data length

Shuai Zhang <[email protected]>
Bluetooth: hci_qca: Convert timeout from jiffies to ms

Michael Bommarito <[email protected]>
Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer

Mingyu Wang <[email protected]>
Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths

Jann Horn <[email protected]>

    Bluetooth: bnep: Fix UAF read of dev->name

David Carlier <[email protected]>
Bluetooth: ISO: drop ISO_END frames received without prior ISO_START

Safa Karakuş <[email protected]>
Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()

Abdun Nihaal <[email protected]>
net: wwan: iosm: fix potential memory leaks in ipc_imem_init()

SeongJae Park <[email protected]>
mm/damon: fix damos_stat tracepoint format for sz_applied

Luiz Capitulino <[email protected]>
selftests/mm: run_vmtests.sh: fix destructive tests invocation

Sunny Patel <[email protected]>
mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page

David Hildenbrand (Arm) <[email protected]>
mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free

Muchun Song <[email protected]>
mm/memory_hotplug: fix memory block reference leak on remove

David Hildenbrand (Arm) <[email protected]>
mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special()

Alistair Popple <[email protected]>
mm/memory: fix spurious warning when unmapping device-private/exclusive pages

Justin Iurman <[email protected]>
ipv6: ioam: refresh hdr pointer before ioam6_event()

Muchun Song <[email protected]>
drivers/base/memory: fix memory block reference leak in poison accounting

Heechan Kang <[email protected]>
io_uring/waitid: clear waitid info before copying it to userspace

Krishnamoorthi M <[email protected]>
spi: amd: Set correct bus number in ACPI probe path

Ard Biesheuvel <[email protected]>
efi: Allocate runtime workqueue before ACPI init

Rafael J. Wysocki <[email protected]>
ACPI: battery: Fix system wakeup on critical battery status

Cássio Gabriel <[email protected]>
ALSA: scarlett2: Allow flash writes ending at segment boundary

Takashi Iwai <[email protected]>
ALSA: asihpi: Fix potential OOB array access at reading cache

Takashi Iwai <[email protected]>
ALSA: pcm: Don't setup bogus iov_iter for silencing

Cássio Gabriel <[email protected]>
ALSA: ua101: Reject too-short USB descriptors

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX

ChenXiaoSong <[email protected]>
smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close

Jeremy Erazo <[email protected]>
smb: client: use data_len for SMB2 READ encrypted folioq copy

Henrique Carvalho <[email protected]>
smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

Michael Bommarito <[email protected]>
smb: client: require net admin for CIFS SWN netlink

Illia Ostapyshyn <[email protected]>
scripts/gdb: mm: cast untyped symbols in x86_page_ops

Tom Lendacky <[email protected]>
x86/mm: Disable broadcast TLB flush when PCID is disabled

Alexander Sverdlin <[email protected]>
regulator: tps65219: fix irq_data.rdev not being assigned

Junyi Liu <[email protected]>
ksmbd: validate SID in parent security descriptor during ACL inheritance

Ferry Meng <[email protected]>
ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow

Jeremy Laratro <[email protected]>
ksmbd: fix null pointer dereference in proc_show_files()

Jeremy Laratro <[email protected]>
ksmbd: fix null pointer dereference in compare_guid_key()

SeongJae Park <[email protected]>
mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()

Greg Kroah-Hartman <[email protected]>
sysfs: don't remove existing directory on update failure

Niklas Cassel <[email protected]>
ata: libata-scsi: do not needlessly defer commands when using PMP with FBS

Niklas Cassel <[email protected]>
ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS

Niklas Cassel <[email protected]>
ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT

Niklas Cassel <[email protected]>
ata: libata-scsi: improve readability of ata_scsi_qc_issue()

Asim Viladi Oglu Manizada <[email protected]>
smb: client: reject userspace cifs.spnego descriptions

DaeMyung Kang <[email protected]>
ksmbd: close durable scavenger races against m_fp_list lookups

Eder Zulian <[email protected]>
iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs

Guanghui Feng <[email protected]>
iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs

-------------

Diffstat:

 .../ABI/testing/sysfs-driver-uniwill-laptop        |  27 ++
 .../admin-guide/laptops/uniwill-laptop.rst         |  22 ++
 Documentation/admin-guide/pm/intel_pstate.rst      |  11 +-
 Documentation/arch/riscv/zicfilp.rst               |   2 +-
 Documentation/crypto/krb5.rst                      |  17 +-
 Documentation/netlink/specs/net_shaper.yaml        |   7 +
 Makefile                                           |   4 +-
 arch/alpha/include/asm/Kbuild                      |   1 +
 arch/arc/include/asm/Kbuild                        |   1 +
 arch/arm/boot/dts/renesas/r7s72100-genmai.dts      |   3 -
 arch/arm/boot/dts/renesas/r7s72100-rskrza1.dts     |   2 -
 arch/arm/include/asm/Kbuild                        |   1 +
 arch/arm/mach-versatile/integrator_cp.c            |  13 +-
 arch/arm64/boot/dts/renesas/r8a78000.dtsi          |   8 +-
 arch/arm64/include/asm/insn.h                      |   2 +-
 arch/arm64/include/asm/page.h                      |   2 +-
 arch/arm64/include/asm/ring_buffer.h               |  10 +
 arch/arm64/kvm/arm.c                               |   4 +-
 arch/arm64/kvm/vgic/vgic-its.c                     |   4 +
 arch/arm64/mm/fault.c                              |  11 +-
 arch/csky/include/asm/Kbuild                       |   1 +
 arch/hexagon/include/asm/Kbuild                    |   1 +
 arch/loongarch/include/asm/Kbuild                  |   1 +
 arch/loongarch/kernel/kprobes.c                    |  14 +-
 arch/loongarch/mm/init.c                           |   4 -
 arch/m68k/include/asm/Kbuild                       |   1 +
 arch/microblaze/include/asm/Kbuild                 |   1 +
 arch/mips/include/asm/Kbuild                       |   1 +
 arch/nios2/include/asm/Kbuild                      |   1 +
 arch/openrisc/include/asm/Kbuild                   |   1 +
 arch/parisc/include/asm/Kbuild                     |   1 +
 arch/powerpc/Kconfig.debug                         |   3 +-
 arch/powerpc/include/asm/Kbuild                    |   1 +
 arch/powerpc/kernel/time.c                         |   6 +-
 arch/powerpc/perf/hv-gpci.c                        |  24 +-
 arch/powerpc/platforms/82xx/km82xx.c               |   4 +-
 arch/riscv/errata/mips/errata.c                    |   2 +-
 arch/riscv/include/asm/Kbuild                      |   1 +
 arch/riscv/kernel/compat_signal.c                  |   2 +
 arch/riscv/kernel/ptrace.c                         |   4 +-
 arch/riscv/kvm/vcpu_pmu.c                          |  12 +-
 arch/riscv/mm/init.c                               |  25 ++
 arch/s390/include/asm/Kbuild                       |   1 +
 arch/s390/kernel/perf_pai.c                        |  31 ++-
 arch/sh/include/asm/Kbuild                         |   1 +
 arch/sparc/include/asm/Kbuild                      |   1 +
 arch/um/include/asm/Kbuild                         |   1 +
 arch/x86/include/asm/Kbuild                        |   1 +
 arch/x86/kernel/cpu/cpuid-deps.c                   |   1 +
 arch/x86/kernel/cpu/mce/core.c                     |  33 +--
 arch/x86/kvm/svm/avic.c                            |  12 +-
 arch/x86/xen/setup.c                               |   2 +-
 arch/xtensa/include/asm/Kbuild                     |   1 +
 block/bio-integrity.c                              |  19 +-
 block/blk-cgroup.c                                 |   2 +-
 block/blk-mq-debugfs.c                             |   1 +
 block/blk-mq.c                                     |  53 ++--
 block/blk-sysfs.c                                  |  35 ++-
 block/blk-zoned.c                                  | 250 ++++++++++++++---
 crypto/krb5/krb5_api.c                             |  54 +++-
 drivers/accel/qaic/qaic_data.c                     |  23 +-
 drivers/acpi/ac.c                                  |   6 +-
 drivers/acpi/acpi_pad.c                            |   6 +-
 drivers/acpi/acpi_tad.c                            |   6 +-
 drivers/acpi/battery.c                             |  10 +-
 drivers/acpi/button.c                              |   9 +-
 drivers/acpi/ec.c                                  |   6 +-
 drivers/acpi/hed.c                                 |   6 +-
 drivers/acpi/nfit/core.c                           |   6 +-
 drivers/acpi/pfr_telemetry.c                       |   6 +-
 drivers/acpi/pfr_update.c                          |   6 +-
 drivers/acpi/sbs.c                                 |   6 +-
 drivers/acpi/sbshc.c                               |   6 +-
 drivers/acpi/thermal.c                             |   2 +-
 drivers/acpi/tiny-power-button.c                   |   6 +-
 drivers/ata/libata-core.c                          |   9 +-
 drivers/ata/libata-eh.c                            |   8 +-
 drivers/ata/libata-pmp.c                           |  18 +-
 drivers/ata/libata-scsi.c                          | 102 ++++---
 drivers/ata/sata_sil24.c                           |   6 +-
 drivers/base/memory.c                              |   8 +-
 drivers/block/rbd.c                                |  20 +-
 drivers/block/ublk_drv.c                           |   3 +
 drivers/bluetooth/btintel_pcie.c                   |  20 +-
 drivers/bluetooth/btintel_pcie.h                   |   3 -
 drivers/bluetooth/btmtk.c                          |   2 +
 drivers/bluetooth/hci_ldisc.c                      |  48 +++-
 drivers/bluetooth/hci_qca.c                        |  33 ++-
 drivers/cpufreq/intel_pstate.c                     |   2 +-
 drivers/firmware/arm_ffa/bus.c                     |   4 +-
 drivers/firmware/arm_ffa/driver.c                  | 133 +++++++---
 drivers/firmware/efi/efi.c                         |  28 +-
 drivers/fwctl/pds/main.c                           |   3 +
 drivers/gpio/Kconfig                               |   1 -
 drivers/gpio/gpio-aggregator.c                     |  47 ++--
 drivers/gpio/gpiolib-cdev.c                        |  13 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c        |   9 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vpe.c            |   7 +-
 drivers/gpu/drm/amd/amdgpu/vce_v1_0.c              |  31 ++-
 drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c |   9 +
 .../drm/amd/display/dc/bios/bios_parser_helper.c   |   9 +-
 drivers/gpu/drm/amd/display/dc/core/dc.c           |   6 +-
 drivers/gpu/drm/bridge/chipone-icn6211.c           |   4 +-
 drivers/gpu/drm/bridge/ite-it66121.c               |   5 +
 .../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c   |  16 +-
 drivers/gpu/drm/drm_drv.c                          |   2 +
 drivers/gpu/drm/drm_gem.c                          |  36 ++-
 drivers/gpu/drm/i915/display/intel_dp.c            |   2 +-
 drivers/gpu/drm/i915/display/intel_plane.c         |   2 +-
 drivers/gpu/drm/mediatek/mtk_cec.c                 |   2 +-
 drivers/gpu/drm/mediatek/mtk_hdmi_ddc.c            |   2 +-
 drivers/gpu/drm/mediatek/mtk_hdmi_ddc_v2.c         |   2 +-
 drivers/gpu/drm/mediatek/mtk_hdmi_v2.c             |   2 +-
 drivers/gpu/drm/msm/adreno/a5xx_gpu.c              |   6 +
 drivers/gpu/drm/msm/adreno/a6xx_gpu.c              |  48 +++-
 drivers/gpu/drm/msm/adreno/a6xx_hfi.c              |   2 +
 drivers/gpu/drm/msm/adreno/adreno_gpu.c            |  13 +-
 drivers/gpu/drm/msm/adreno/adreno_gpu.h            |   1 +
 .../drm/msm/disp/dpu1/catalog/dpu_13_0_kaanapali.h |   2 +-
 drivers/gpu/drm/msm/disp/dpu1/dpu_formats.c        |  12 +-
 drivers/gpu/drm/msm/disp/dpu1/dpu_writeback.c      |   3 +-
 drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c  |  24 +-
 drivers/gpu/drm/msm/dsi/dsi_host.c                 |   1 +
 drivers/gpu/drm/msm/msm_drv.c                      |  11 +-
 drivers/gpu/drm/msm/msm_drv.h                      |   7 -
 drivers/gpu/drm/msm/msm_gem.c                      |  33 ++-
 drivers/gpu/drm/msm/msm_gem_shrinker.c             |  44 ++-
 drivers/gpu/drm/msm/msm_gem_submit.c               |   6 +-
 drivers/gpu/drm/msm/msm_gem_vma.c                  |  12 +-
 drivers/gpu/drm/msm/msm_iommu.c                    |   5 +-
 drivers/gpu/drm/msm/msm_ringbuffer.c               |   6 +-
 drivers/gpu/drm/msm/registers/adreno/a6xx.xml      |   4 +
 drivers/gpu/drm/v3d/v3d_sched.c                    |  16 +-
 drivers/gpu/drm/v3d/v3d_submit.c                   |  22 +-
 drivers/gpu/drm/virtio/virtgpu_drv.h               |   1 +
 drivers/gpu/drm/virtio/virtgpu_gem.c               |  17 ++
 drivers/gpu/drm/virtio/virtgpu_plane.c             |  10 +-
 drivers/gpu/drm/xe/regs/xe_gt_regs.h               |   3 +
 drivers/gpu/drm/xe/xe_gsc.c                        |   5 +-
 drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.c        |   6 +-
 drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.h        |   2 +-
 drivers/gpu/drm/xe/xe_gt_sriov_vf.c                |  24 +-
 drivers/gpu/drm/xe/xe_gt_sriov_vf.h                |   6 +-
 drivers/gpu/drm/xe/xe_guc_submit.c                 |  16 +-
 drivers/gpu/drm/xe/xe_oa.c                         |   6 +-
 drivers/gpu/drm/xe/xe_tuning.c                     |   5 +
 drivers/gpu/drm/xe/xe_wa.c                         |  28 +-
 drivers/hid/hid-quirks.c                           |   2 +-
 drivers/hid/hid-uclogic-core.c                     |   4 +-
 .../intel-quickspi/quickspi-protocol.c             |   4 +-
 drivers/hwmon/lm90.c                               |  26 +-
 drivers/hwmon/pmbus/adm1266.c                      |  32 ++-
 drivers/i2c/busses/i2c-tegra.c                     |   4 +-
 drivers/infiniband/hw/mana/main.c                  |   1 +
 drivers/infiniband/sw/siw/siw_qp_rx.c              |  15 ++
 drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c       |   2 +-
 drivers/iommu/amd/debugfs.c                        |  43 ++-
 drivers/iommu/generic_pt/iommu_pt.h                | 176 ++++++------
 drivers/iommu/generic_pt/kunit_generic_pt.h        |  12 +
 drivers/iommu/generic_pt/pt_iter.h                 |  22 ++
 drivers/iommu/iommu.c                              | 118 +++++----
 drivers/irqchip/irq-ath79-cpu.c                    |   7 -
 drivers/net/dsa/mt7530.c                           |  47 ++--
 drivers/net/ethernet/airoha/airoha_eth.c           |  10 +-
 drivers/net/ethernet/amd/pds_core/debugfs.c        |   7 +-
 drivers/net/ethernet/amd/pds_core/dev.c            |  11 +-
 drivers/net/ethernet/amd/pds_core/devlink.c        |   6 +-
 drivers/net/ethernet/atheros/ag71xx.c              |   3 +
 drivers/net/ethernet/broadcom/genet/bcmgenet.c     |   9 +-
 drivers/net/ethernet/cirrus/cs89x0.c               |   2 -
 drivers/net/ethernet/cortina/gemini.c              |  21 +-
 drivers/net/ethernet/freescale/enetc/enetc_pf.c    |   4 +-
 drivers/net/ethernet/intel/ice/ice_dcb_lib.c       |   4 +-
 drivers/net/ethernet/intel/ice/ice_dpll.c          |   5 +
 drivers/net/ethernet/intel/ice/ice_dpll.h          |  32 +--
 drivers/net/ethernet/intel/ice/ice_main.c          |  10 +-
 drivers/net/ethernet/intel/ice/ice_ptp_hw.c        |  33 ++-
 drivers/net/ethernet/intel/ice/virt/queues.c       |   2 +-
 drivers/net/ethernet/intel/idpf/idpf_ptp.c         |   4 +-
 drivers/net/ethernet/intel/igc/igc_tsn.c           |   9 +-
 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c  |   1 +
 drivers/net/ethernet/marvell/octeontx2/af/cgx.c    |   7 +-
 .../net/ethernet/marvell/octeontx2/af/rvu_npc.c    |   2 +-
 drivers/net/ethernet/marvell/octeontx2/nic/cn20k.c |   2 +
 .../ethernet/marvell/octeontx2/nic/otx2_common.c   |   2 +
 drivers/net/ethernet/marvell/octeontx2/nic/rep.c   |   3 +-
 .../ethernet/mellanox/mlx5/core/en/reporter_tx.c   |   6 +-
 .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c   |   7 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_txrx.c  |   2 +-
 .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c |   3 +-
 drivers/net/ethernet/mellanox/mlx5/core/eswitch.c  |  21 ++
 drivers/net/ethernet/mellanox/mlx5/core/eswitch.h  |   1 +
 drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c  |   5 +
 .../net/ethernet/microchip/lan966x/lan966x_main.c  |   8 +-
 drivers/net/ethernet/microsoft/mana/hw_channel.c   |  35 ++-
 drivers/net/ethernet/qlogic/qed/qed_cxt.c          |   2 +
 .../net/ethernet/stmicro/stmmac/dwmac-eic7700.c    | 128 ++++++---
 drivers/net/ethernet/ti/icssm/icssm_prueth.c       |   1 +
 drivers/net/ifb.c                                  |  11 +-
 drivers/net/ovpn/io.c                              |  12 +-
 drivers/net/ovpn/main.c                            |  12 +-
 drivers/net/ovpn/netlink.c                         |   8 +-
 drivers/net/ovpn/peer.c                            |  23 +-
 drivers/net/ovpn/peer.h                            |   1 -
 drivers/net/ovpn/stats.h                           |  16 ++
 drivers/net/ovpn/tcp.c                             |  19 +-
 drivers/net/ovpn/udp.c                             |   2 +-
 drivers/net/phy/dp83tc811.c                        |   1 +
 drivers/net/phy/phy-c45.c                          |   8 +
 drivers/net/phy/phy_device.c                       |   6 +-
 drivers/net/pse-pd/pse_core.c                      |   2 +-
 drivers/net/tap.c                                  |   2 +-
 drivers/net/wireless/ath/ath10k/wmi.c              |  17 +-
 drivers/net/wireless/ath/ath11k/dp_rx.c            |   3 +-
 drivers/net/wireless/ath/ath11k/hal.c              |  14 +-
 drivers/net/wireless/ath/ath11k/hal_rx.c           |   5 +-
 drivers/net/wireless/ath/ath11k/testmode.c         |   1 +
 drivers/net/wireless/ath/ath11k/wmi.c              |  19 +-
 drivers/net/wireless/ath/ath12k/mac.c              |   8 +-
 drivers/net/wireless/intel/iwlwifi/mld/link.c      |  13 +-
 drivers/net/wireless/intel/iwlwifi/mld/tx.c        |  15 +-
 drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c  |  27 +-
 drivers/net/wireless/intel/iwlwifi/mvm/utils.c     |  14 +-
 drivers/net/wireless/microchip/wilc1000/wlan.c     |   2 +-
 drivers/net/wwan/iosm/iosm_ipc_imem.c              |   2 +
 drivers/nvme/host/ioctl.c                          |   5 +-
 drivers/nvme/host/pci.c                            |  40 ++-
 drivers/phy/apple/atc.c                            |  27 +-
 drivers/phy/marvell/phy-mvebu-a3700-utmi.c         |   5 +-
 drivers/phy/qualcomm/phy-qcom-edp.c                |  88 +++---
 drivers/phy/qualcomm/phy-qcom-qmp-ufs.c            |   1 +
 drivers/phy/qualcomm/phy-qcom-qmp-usbc.c           |   2 +-
 drivers/phy/samsung/phy-exynos5-usbdrd.c           |   7 +-
 drivers/phy/spacemit/phy-k1-usb2.c                 |   1 -
 drivers/phy/tegra/xusb-tegra186.c                  |  33 ++-
 drivers/phy/tegra/xusb.h                           |   1 +
 drivers/pinctrl/mediatek/pinctrl-moore.c           |  18 ++
 drivers/pinctrl/meson/pinctrl-amlogic-a4.c         |   6 +-
 drivers/pinctrl/qcom/pinctrl-ipq4019.c             |   2 +-
 drivers/pinctrl/qcom/pinctrl-msm.h                 |   5 +
 drivers/pinctrl/qcom/pinctrl-qcs615.c              |   6 +-
 drivers/pinctrl/qcom/pinctrl-sm8150.c              |   8 +-
 drivers/pinctrl/renesas/pinctrl-rzg2l.c            |  23 +-
 .../platform/surface/surface_aggregator_registry.c |   2 -
 drivers/platform/x86/adv_swbutton.c                |   6 +-
 drivers/platform/x86/asus-armoury.c                |  16 +-
 drivers/platform/x86/hp/hp_accel.c                 |   3 +
 drivers/platform/x86/intel/hid.c                   |   6 +-
 drivers/platform/x86/intel/int1092/intel_sar.c     |   7 +-
 drivers/platform/x86/intel/vbtn.c                  |   6 +-
 drivers/platform/x86/uniwill/uniwill-acpi.c        |  47 +++-
 drivers/regulator/tps65219-regulator.c             | 135 +++++++---
 drivers/s390/cio/chsc.c                            |   4 +-
 drivers/s390/cio/chsc_sch.c                        |  20 +-
 drivers/s390/cio/scm.c                             |   2 +-
 drivers/scsi/isci/host.c                           |   3 +
 drivers/scsi/sd.c                                  |   3 +-
 drivers/spi/spi-amd.c                              |   2 +-
 drivers/spi/spi-ep93xx.c                           |   2 +
 drivers/spi/spi-mtk-snfi.c                         |   2 +-
 drivers/spi/spi-qup.c                              |   3 +
 drivers/spi/spi-sprd.c                             |   3 +-
 drivers/spi/spi-ti-qspi.c                          |   1 +
 drivers/vfio/pci/vfio_pci_dmabuf.c                 |   6 +-
 drivers/virt/coco/sev-guest/sev-guest.c            |  10 +-
 fs/9p/v9fs_vfs.h                                   |  13 -
 fs/9p/vfs_inode.c                                  |   6 +-
 fs/9p/vfs_inode_dotl.c                             |  12 +-
 fs/afs/Makefile                                    |   1 +
 fs/afs/dir.c                                       |  79 +++---
 fs/afs/file.c                                      |  24 +-
 fs/afs/fsclient.c                                  |   4 +-
 fs/afs/inode.c                                     | 127 ++-------
 fs/afs/internal.h                                  |  45 ++--
 fs/afs/symlink.c                                   | 278 +++++++++++++++++++
 fs/afs/validation.c                                |  14 +-
 fs/afs/write.c                                     |   2 +-
 fs/afs/yfsclient.c                                 |   4 +-
 fs/btrfs/fs.h                                      |   1 +
 fs/btrfs/qgroup.c                                  |  81 ++++--
 fs/cachefiles/namei.c                              |   2 +
 fs/erofs/xattr.c                                   |  10 +-
 fs/erofs/zdata.c                                   |  15 +-
 fs/inode.c                                         |   8 +-
 fs/jfs/namei.c                                     |   2 +-
 fs/mnt_idmapping.c                                 |   2 +
 fs/netfs/buffered_read.c                           |  73 ++---
 fs/netfs/buffered_write.c                          | 174 +++++++-----
 fs/netfs/direct_read.c                             |  42 +--
 fs/netfs/direct_write.c                            |   6 +-
 fs/netfs/internal.h                                |   3 +
 fs/netfs/iterator.c                                |  26 +-
 fs/netfs/misc.c                                    |  41 ++-
 fs/netfs/read_collect.c                            |  19 +-
 fs/netfs/read_retry.c                              |  17 +-
 fs/netfs/read_single.c                             |  23 +-
 fs/netfs/write_collect.c                           |  15 +-
 fs/netfs/write_issue.c                             |  51 ++--
 fs/netfs/write_retry.c                             |   6 +-
 fs/nfsd/nfs4state.c                                |   7 +
 fs/nsfs.c                                          |   2 +-
 fs/orangefs/namei.c                                |   2 +-
 fs/smb/client/cifs_spnego.c                        |  16 ++
 fs/smb/client/cifsfs.c                             |  42 ++-
 fs/smb/client/cifssmb.c                            |   3 +-
 fs/smb/client/file.c                               |  13 +-
 fs/smb/client/fs_context.c                         | 163 ++++++++----
 fs/smb/client/inode.c                              |  14 +-
 fs/smb/client/netlink.c                            |   6 +-
 fs/smb/client/readdir.c                            |   3 +-
 fs/smb/client/smb2ops.c                            |  46 ++--
 fs/smb/client/smb2pdu.c                            |   3 +-
 fs/smb/client/smb2transport.c                      |   2 +
 fs/smb/server/oplock.c                             |   6 +-
 fs/smb/server/smb2pdu.c                            |  15 +-
 fs/smb/server/smbacl.c                             |  78 ++++--
 fs/smb/server/vfs_cache.c                          | 120 ++++++---
 fs/sysfs/group.c                                   |   2 +-
 fs/zonefs/super.c                                  |   6 +-
 include/asm-generic/kprobes.h                      |   2 +-
 include/asm-generic/ring_buffer.h                  |  13 +
 include/crypto/krb5.h                              |   9 +-
 include/drm/drm_device.h                           |   7 +
 include/drm/drm_gem.h                              |  20 +-
 include/linux/blkdev.h                             |  10 +-
 include/linux/cgroup.h                             |   1 +
 include/linux/fprobe.h                             |   5 +
 include/linux/fwnode.h                             |   1 +
 include/linux/generic_pt/iommu.h                   |  69 ++++-
 include/linux/gfp_types.h                          |  10 +-
 include/linux/highmem.h                            |   7 +-
 include/linux/iommu.h                              |   1 +
 include/linux/libata.h                             |   7 +-
 include/linux/list.h                               |  37 +++
 include/linux/netfilter/x_tables.h                 |   4 +-
 include/linux/netfilter_arp/arp_tables.h           |   1 -
 include/linux/netfilter_ipv4/ip_tables.h           |   1 -
 include/linux/netfilter_ipv6/ip6_tables.h          |   1 -
 include/linux/netfs.h                              | 295 ++++++++++++++++++++-
 include/linux/soc/airoha/airoha_offload.h          |   6 +-
 include/net/bluetooth/bluetooth.h                  |   1 +
 include/net/net_shaper.h                           |   1 +
 include/net/netfilter/nf_conntrack_expect.h        |   5 +-
 include/net/netfilter/nf_queue.h                   |   1 +
 include/net/tcp.h                                  |   7 +-
 include/trace/events/btrfs.h                       |   4 +-
 include/trace/events/damon.h                       |   2 +-
 include/trace/events/netfs.h                       |   8 +
 include/trace/events/rxrpc.h                       |   1 +
 io_uring/io_uring.c                                |   9 +-
 io_uring/net.c                                     |  26 +-
 io_uring/nop.c                                     |   4 +-
 io_uring/waitid.c                                  |   1 +
 kernel/cgroup/rstat.c                              |  37 ++-
 kernel/dma/debug.c                                 |   9 +-
 kernel/dma/mapping.c                               |   4 -
 kernel/irq_work.c                                  |   7 +
 kernel/liveupdate/kexec_handover.c                 |   2 +-
 kernel/rcu/srcutree.c                              |  12 +-
 kernel/sched/ext.c                                 |   5 +-
 kernel/trace/bpf_trace.c                           |   3 +-
 kernel/trace/fprobe.c                              |  23 +-
 kernel/trace/ring_buffer.c                         |  30 ++-
 kernel/trace/trace_events_hist.c                   |   6 +-
 kernel/trace/tracing_map.c                         |  17 +-
 lib/kunit/Kconfig                                  |   5 +-
 lib/tests/test_kprobes.c                           |  29 +-
 mm/damon/sysfs-schemes.c                           |   1 +
 mm/memcontrol.c                                    |   6 +-
 mm/memfd_luo.c                                     |   1 +
 mm/memory.c                                        |  24 +-
 mm/memory_hotplug.c                                |   2 +
 mm/migrate_device.c                                |   2 +-
 mm/page_alloc.c                                    |   8 +-
 mm/slab_common.c                                   |   2 +
 mm/slub.c                                          |   1 +
 net/batman-adv/bat_iv_ogm.c                        |  82 ++++--
 net/batman-adv/bat_v_ogm.c                         |  59 +++--
 net/batman-adv/bridge_loop_avoidance.c             | 109 +++++---
 net/batman-adv/distributed-arp-table.c             |   3 +
 net/batman-adv/fragmentation.c                     |  58 +++-
 net/batman-adv/gateway_client.c                    |   4 +
 net/batman-adv/mesh-interface.c                    |   1 +
 net/batman-adv/originator.c                        |   4 +-
 net/batman-adv/tp_meter.c                          | 117 +++++---
 net/batman-adv/translation-table.c                 |  55 +++-
 net/batman-adv/tvlv.c                              |  28 +-
 net/batman-adv/tvlv.h                              |   2 +-
 net/batman-adv/types.h                             |  59 +++--
 net/bluetooth/af_bluetooth.c                       |  99 +++++--
 net/bluetooth/bnep/core.c                          |   2 +-
 net/bluetooth/hci_sync.c                           |   6 +-
 net/bluetooth/iso.c                                |  14 +-
 net/bluetooth/l2cap_core.c                         |   2 +-
 net/bluetooth/l2cap_sock.c                         |  51 +++-
 net/bluetooth/mgmt.c                               |   6 +
 net/bluetooth/rfcomm/sock.c                        |   9 +-
 net/bluetooth/sco.c                                |   9 +-
 net/bridge/br_multicast.c                          |  22 +-
 net/bridge/netfilter/ebtable_broute.c              |  14 +-
 net/bridge/netfilter/ebtable_filter.c              |  14 +-
 net/bridge/netfilter/ebtable_nat.c                 |  12 +-
 net/bridge/netfilter/ebtables.c                    |  71 +++--
 net/core/dev.c                                     |  21 +-
 net/core/devmem.c                                  |  11 +
 net/core/gro.c                                     |   3 +
 net/core/skmsg.c                                   |   9 +-
 net/ethtool/bitset.c                               |   8 +-
 net/ethtool/phy.c                                  |  36 ++-
 net/hsr/hsr_framereg.c                             |   4 +-
 net/ipv4/inet_connection_sock.c                    |   2 +-
 net/ipv4/netfilter/arp_tables.c                    |  53 +---
 net/ipv4/netfilter/arptable_filter.c               |  27 +-
 net/ipv4/netfilter/ip_tables.c                     |  59 +----
 net/ipv4/netfilter/iptable_filter.c                |  27 +-
 net/ipv4/netfilter/iptable_mangle.c                |  29 +-
 net/ipv4/netfilter/iptable_nat.c                   |   6 +-
 net/ipv4/netfilter/iptable_raw.c                   |  26 +-
 net/ipv4/netfilter/iptable_security.c              |  27 +-
 net/ipv4/raw.c                                     |   2 +-
 net/ipv4/tcp.c                                     |   3 -
 net/ipv4/tcp_ao.c                                  |   3 +-
 net/ipv4/tcp_input.c                               |  15 +-
 net/ipv4/tcp_ipv4.c                                |   3 +-
 net/ipv4/udp_offload.c                             |  22 +-
 net/ipv6/exthdrs.c                                 |  21 +-
 net/ipv6/netfilter/ip6_tables.c                    |  56 +---
 net/ipv6/netfilter/ip6t_hbh.c                      |   4 +
 net/ipv6/netfilter/ip6table_filter.c               |  26 +-
 net/ipv6/netfilter/ip6table_mangle.c               |  27 +-
 net/ipv6/netfilter/ip6table_nat.c                  |   6 +-
 net/ipv6/netfilter/ip6table_raw.c                  |  24 +-
 net/ipv6/netfilter/ip6table_security.c             |  27 +-
 net/ipv6/tcp_ipv6.c                                |   3 +-
 net/l2tp/l2tp_core.c                               |   2 +-
 net/mac80211/mlme.c                                |   5 +-
 net/mac80211/parse.c                               | 107 +++++---
 net/mac80211/rx.c                                  |   6 +-
 net/mptcp/pm.c                                     |  56 +++-
 net/mptcp/protocol.c                               |  25 +-
 net/netfilter/ipset/ip_set_hash_ipmark.c           |   6 +-
 net/netfilter/ipset/ip_set_hash_ipport.c           |   5 +-
 net/netfilter/ipset/ip_set_hash_ipportip.c         |   5 +-
 net/netfilter/ipset/ip_set_hash_ipportnet.c        |   5 +-
 net/netfilter/nf_conntrack_broadcast.c             |   1 +
 net/netfilter/nf_conntrack_core.c                  |   7 +-
 net/netfilter/nf_conntrack_expect.c                |   1 +
 net/netfilter/nf_conntrack_h323_main.c             |  12 +-
 net/netfilter/nf_conntrack_helper.c                |   5 +
 net/netfilter/nf_conntrack_netlink.c               |  18 +-
 net/netfilter/nf_conntrack_sip.c                   |   2 +-
 net/netfilter/nf_queue.c                           |   4 +-
 net/netfilter/nfnetlink_queue.c                    |   2 +
 net/netfilter/nft_inner.c                          |   3 +-
 net/netfilter/x_tables.c                           | 177 ++++++++++---
 net/phonet/pep.c                                   |  19 +-
 net/rxrpc/ar-internal.h                            |   7 +-
 net/rxrpc/call_event.c                             |  22 +-
 net/rxrpc/call_object.c                            |   2 +
 net/rxrpc/insecure.c                               |   3 -
 net/rxrpc/recvmsg.c                                |  68 ++++-
 net/rxrpc/rxgk.c                                   |  62 +++--
 net/rxrpc/rxgk_common.h                            |  82 ++++++
 net/rxrpc/rxkad.c                                  |  86 +++---
 net/shaper/shaper.c                                | 224 +++++++++++-----
 net/shaper/shaper_nl_gen.c                         |   7 +-
 net/shaper/shaper_nl_gen.h                         |   2 +
 net/smc/af_smc.c                                   |   3 +-
 net/smc/smc_tracepoint.h                           |   2 +-
 net/tls/tls_sw.c                                   |  46 +++-
 net/unix/af_unix.c                                 |  11 +-
 net/vmw_vsock/virtio_transport_common.c            | 103 ++++---
 net/vmw_vsock/vmci_transport.c                     |   2 +-
 net/wireless/scan.c                                |   3 +
 scripts/gcc-plugins/gcc-common.h                   |   4 +-
 scripts/gdb/linux/mm.py                            |   6 +-
 scripts/package/PKGBUILD                           |   2 +-
 security/lsm_syscalls.c                            |   9 +-
 sound/core/pcm_lib.c                               |   3 +
 sound/core/seq/seq_ump_client.c                    |  22 +-
 sound/hda/codecs/ca0132.c                          |  44 ++-
 sound/hda/codecs/realtek/alc269.c                  |  12 +-
 sound/hda/codecs/side-codecs/cs35l41_hda.c         |   4 +-
 sound/hda/codecs/side-codecs/cs35l56_hda.c         |   1 +
 sound/pci/asihpi/hpicmn.c                          |   6 +
 sound/soc/amd/acp/acp-sdw-legacy-mach.c            |   2 +-
 sound/soc/codecs/cs-amp-lib.c                      |  15 +-
 sound/soc/codecs/cs35l56-sdw.c                     |   3 +-
 sound/soc/codecs/fs210x.c                          |   2 +-
 sound/soc/codecs/pcm512x.c                         |   6 +-
 sound/soc/sdw_utils/soc_sdw_bridge_cs35l56.c       |   6 -
 sound/soc/sdw_utils/soc_sdw_cs42l43.c              |  20 +-
 sound/soc/sdw_utils/soc_sdw_utils.c                |  34 ++-
 sound/soc/soc-utils.c                              |   1 +
 sound/soc/sof/amd/acp.c                            |   2 +-
 sound/usb/misc/ua101.c                             |   5 +-
 sound/usb/mixer_scarlett2.c                        |   9 +-
 tools/testing/selftests/mm/hmm-tests.c             |  50 ++++
 tools/testing/selftests/mm/run_vmtests.sh          |   2 +-
 tools/testing/selftests/net/lib/xdp_native.bpf.c   |  55 ++--
 tools/testing/selftests/net/mptcp/mptcp_connect.sh |   6 +-
 tools/testing/selftests/net/mptcp/mptcp_lib.sh     |  10 +-
 tools/testing/selftests/ublk/kublk.c               |  11 +
 503 files changed, 6399 insertions(+), 2940 deletions(-)

Read the cover letter in its thread