6.18.44-rc1 review

Greg Kroah-Hartman amd-gfx dri-devel linux-fsdevel linux-patches linux-tegra lkml netfs stable 1 version Aug 7 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Aug 7396 patches 9 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/396	netfilter: nf_conntrack_expect: restore helper propagation via expectation`include/net/netfilter/nf_conntrack_expect.h` `net/netfilter/nf_conntrack_broadcast.c` `net/netfilter/nf_conntrack_core.c` +5 more	+39 ~~-12~~	0 replies
2/396	kunit: tool: skip stty when stdin is not a tty`tools/testing/kunit/kunit_kernel.py` `tools/testing/kunit/kunit_tool_test.py`	+50 -2	0 replies
3/396	kunit: tool: Terminate kernel under test on SIGINT`tools/testing/kunit/kunit_kernel.py`	+19 -9	0 replies
4/396	netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge()`include/net/neighbour.h` `net/bridge/br_netfilter_hooks.c`	+11 -3	0 replies
5/396	net: mpls: initialize rtm_tos in mpls_getroute()`net/mpls/af_mpls.c`	+1 -0	0 replies
6/396	drm/gpusvm: publish dpagemap early to avoid device mapping leak on error`drivers/gpu/drm/drm_gpusvm.c`	+9 -3	0 replies
7/396	ALSA: hda/realtek: add quirk for HP Dragonfly Folio G3 2-in-1`sound/hda/codecs/realtek/alc269.c`	+1 -0	0 replies
8/396	HID: logitech-dj: Standardise hid_report_enum variable nomenclature`drivers/hid/hid-logitech-dj.c`	+6 -6	0 replies
9/396	HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write`drivers/hid/hid-logitech-dj.c`	+10 -0	0 replies
10/396	HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report`drivers/hid/hid-logitech-dj.c`	+2 -1	0 replies
11/396	lib/alloc_tag: introduce mem_alloc_profiling_permanently_disabled()`include/linux/alloc_tag.h` `lib/alloc_tag.c`	+12 -0	0 replies
12/396	mm/slab: prevent unbounded recursion in free path with new kmalloc type`include/linux/slab.h` `mm/slab.h` `mm/slab_common.c` +1 more	+70 ~~-55~~	0 replies
13/396	thunderbolt: Prevent XDomain delayed work use-after-free on disconnect`drivers/thunderbolt/xdomain.c` `include/linux/thunderbolt.h`	+33 ~~-10~~	0 replies
14/396	pinctrl: qcom: Unconditionally mark gpio as wakeup enable`drivers/pinctrl/qcom/pinctrl-msm.c`	+4 -4	0 replies
15/396	pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151`drivers/pinctrl/qcom/pinctrl-sc8280xp.c`	+11 ~~-10~~	0 replies
16/396	dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA`drivers/dma/sun6i-dma.c`	+4 -7	0 replies
17/396	dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()`drivers/dma/idxd/cdev.c`	+3 -1	0 replies
18/396	iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE`drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-iommufd.c`	+15 -0	0 replies
19/396	gpio: sloppy-logic-analyzer: Fix memory leak in gpio_la_poll_probe()`drivers/gpio/gpio-sloppy-logic-analyzer.c`	+10 -0	0 replies
20/396	selftests/lkdtm: rename STACKLEAK_ERASING to KSTACK_ERASE`tools/testing/selftests/lkdtm/tests.txt`	+1 -1	0 replies
21/396	selftests/seccomp: Fix pointer type mismatch build error`tools/testing/selftests/seccomp/seccomp_bpf.c`	+2 -1	0 replies
22/396	ata: sata_mv: accept 1 or 2 resources in platform probe`drivers/ata/sata_mv.c`	+1 -1	0 replies
23/396	ata: ahci_ceva: fix error paths in ceva_ahci_platform_enable_resources()`drivers/ata/ahci_ceva.c`	+14 -4	0 replies
24/396	phy: qcom: m31-eusb2: Fix return value of init call`drivers/phy/qualcomm/phy-qcom-m31-eusb2.c`	+1 -1	0 replies
25/396	ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup`sound/soc/codecs/max98095.c`	+3 -2	0 replies
26/396	ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup`sound/soc/codecs/max98090.c`	+3 -2	0 replies
27/396	of: reserved_mem: prevent OOB when too many dynamic regions are defined`drivers/of/of_reserved_mem.c`	+11 -3	0 replies
28/396	btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag`fs/btrfs/super.c`	+5 -3	0 replies
29/396	btrfs: zoned: fix deadlock between metadata writeback and transaction commit`fs/btrfs/zoned.c`	+5 -1	0 replies
30/396	btrfs: zoned: reset meta_write_pointer on zone reset`fs/btrfs/zoned.c`	+11 -0	0 replies
31/396	btrfs: raid56: fix an incorrect csum skip during scrub`fs/btrfs/raid56.c`	+3 -1	0 replies
32/396	phy: zynqmp: fix clock error handling in xpsgtr_phy_init()`drivers/phy/xilinx/phy-zynqmp.c`	+9 -4	0 replies
33/396	phy: zynqmp: fix runtime PM leak on probe allocation failure`drivers/phy/xilinx/phy-zynqmp.c`	+6 -6	0 replies
34/396	netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()`include/linux/netfilter/nf_conntrack_sip.h` `net/netfilter/nf_conntrack_sip.c` `net/netfilter/nf_nat_sip.c`	+3 -3	0 replies
35/396	drm/mediatek: Check CRTC state before freeing`drivers/gpu/drm/mediatek/mtk_crtc.c`	+3 -3	0 replies
36/396	arch/x86: mshyperv: Discover Confidential VMBus availability`arch/x86/kernel/cpu/mshyperv.c` `include/asm-generic/mshyperv.h`	+17 ~~-13~~	0 replies
37/396	Drivers: hv: Rename fields for SynIC message and event pages`drivers/hv/channel_mgmt.c` `drivers/hv/hv.c` `drivers/hv/hyperv_vmbus.h` +3 more	+45 ~~-45~~	0 replies
38/396	Drivers: hv: Allocate the paravisor SynIC pages when required`drivers/hv/hv.c` `drivers/hv/hyperv_vmbus.h`	+112 ~~-90~~	0 replies
39/396	Drivers: hv: vmbus: Replace lockdep_hardirq_threaded() with lockdep annotation`drivers/hv/vmbus_drv.c`	+12 -1	0 replies
40/396	mshv: Fix duplicate GSI detection for GSI 0`drivers/hv/mshv_irq.c`	+1 -1	0 replies
41/396	mshv: Fix sleeping under spinlock in mshv_portid_alloc`drivers/hv/mshv_portid_table.c`	+4 -2	0 replies
42/396	KVM: arm64: Reject guest_memfd memslots when the VM has MTE`Documentation/virt/kvm/api.rst` `arch/arm64/kvm/arm.c` `arch/arm64/kvm/mmu.c`	+29 -6	0 replies
43/396	KEYS: trusted: dcp: fix key_len validation and calc_blob_len() return type`security/keys/trusted-keys/trusted_dcp.c`	+11 -4	0 replies
44/396	keys: fix out-of-bounds read in keyring_get_key_chunk()`security/keys/keyring.c`	+5 -4	0 replies
45/396	keys: make keyring key-chunk byte order agree with keyring_diff_objects()`security/keys/keyring.c`	+3 -2	0 replies
46/396	assoc_array: trim the final shortcut word using the current chunk end`lib/assoc_array.c`	+2 -1	0 replies
47/396	netfilter: nf_tables: make nft_object rhltable per table`include/net/netfilter/nf_tables.h` `net/netfilter/nf_tables_api.c`	+19 ~~-19~~	0 replies
48/396	netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH`net/netfilter/xt_hashlimit.c`	+15 -1	0 replies
49/396	ipvs: fix the checksum validations`include/net/ip_vs.h` `net/netfilter/ipvs/ip_vs_core.c` `net/netfilter/ipvs/ip_vs_proto_sctp.c` +2 more	+74 ~~-86~~	0 replies
50/396	ipvs: fix places with wrong packet offsets`include/net/ip_vs.h` `net/netfilter/ipvs/ip_vs_app.c` `net/netfilter/ipvs/ip_vs_core.c` +4 more	+97 ~~-93~~	0 replies
51/396	ipvs: do not mangle ICMP replies for non-first fragments`include/net/ip_vs.h` `net/netfilter/ipvs/ip_vs_core.c` `net/netfilter/ipvs/ip_vs_xmit.c`	+48 ~~-52~~	0 replies
52/396	netfilter: nft_payload: fix mask build for partial field offload`net/netfilter/nft_payload.c`	+1 ~~-11~~	0 replies
53/396	ASoC: SDCA: Ensure that Control Range is large enough for header`sound/soc/sdca/sdca_functions.c`	+2 -0	0 replies
54/396	rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled`net/rds/ib.c` `net/rds/ib_cm.c` `net/rds/tcp.c`	+13 -3	0 replies
55/396	rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()`net/rds/tcp.c`	+5 -3	0 replies
56/396	af_unix: fix listen() succeeding on sockets in the wrong state`net/unix/af_unix.c`	+1 -0	0 replies
57/396	selftests: af_unix: Add tests for ECONNRESET and EOF semantics`tools/testing/selftests/net/.gitignore` `tools/testing/selftests/net/af_unix/Makefile` `tools/testing/selftests/net/af_unix/unix_connreset.c`	+179 -0	0 replies
58/396	selftest: af_unix: Create its own .gitignore.`tools/testing/selftests/net/.gitignore` `tools/testing/selftests/net/af_unix/.gitignore`	+8 -8	0 replies
59/396	selftests/net/af_unix: test listen() rejects wrong socket states`tools/testing/selftests/net/af_unix/.gitignore` `tools/testing/selftests/net/af_unix/Makefile` `tools/testing/selftests/net/af_unix/unix_listen.c`	+189 -0	0 replies
60/396	xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx`net/xdp/xsk.c`	+8 -5	0 replies
61/396	xsk: use a smaller new lock for shared pool case`include/net/xsk_buff_pool.h` `net/xdp/xsk.c` `net/xdp/xsk_buff_pool.c`	+17 ~~-14~~	0 replies
62/396	xsk: drain continuation descs after overflow in xsk_build_skb()`include/net/xdp_sock.h` `net/xdp/xsk.c`	+43 -3	0 replies
63/396	pinctrl-amd: Dont clear S4 wake bits at probe`drivers/pinctrl/pinctrl-amd.c`	+1 -2	0 replies
64/396	scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer`drivers/scsi/libiscsi.c`	+1 -1	0 replies
65/396	scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer`drivers/scsi/libiscsi_tcp.c`	+1 -7	0 replies
66/396	scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race`drivers/scsi/hisi_sas/hisi_sas_v3_hw.c` `drivers/scsi/libsas/sas_init.c` `include/scsi/libsas.h`	+19 ~~-29~~	0 replies
67/396	smb: client: fix buffer leaks in SMB1 read and write`fs/smb/client/cifssmb.c`	+9 -3	0 replies
68/396	ASoC: tas2781: Use correct calibration data for SINEGAIN2 register`sound/soc/codecs/tas2781-i2c.c`	+2 -2	0 replies
69/396	spi: spi-cadence: supports transmission with bits_per_word of 16 and 32`drivers/spi/spi-cadence.c`	+93 ~~-13~~	0 replies
70/396	spi: spi-cadence: Move TX FIFO full busy-wait into FIFO`drivers/spi/spi-cadence.c`	+16 ~~-10~~	0 replies
71/396	hwmon: (nct6775-core) Fix number of temperature registers for NCT6116`drivers/hwmon/nct6775-core.c`	+3 -5	0 replies
72/396	hwmon: (ina2xx) Make it easier to add more devices`Documentation/hwmon/ina2xx.rst` `drivers/hwmon/ina2xx.c`	+24 -6	0 replies
73/396	hwmon: (ina2xx) Add support for INA234`Documentation/hwmon/ina2xx.rst` `drivers/hwmon/Kconfig` `drivers/hwmon/ina2xx.c`	+31 -2	0 replies
74/396	hwmon: (ina2xx) Shift INA234 shunt and current registers`drivers/hwmon/ina2xx.c`	+19 -3	0 replies
75/396	hwmon: (ina2xx) Fix various overflow issues`drivers/hwmon/ina2xx.c`	+35 ~~-26~~	0 replies
76/396	hwmon: (ltc4282) Fix reading the minimum alarm voltage`drivers/hwmon/ltc4282.c`	+2 -2	0 replies
77/396	hwmon: (sht3x) Fix unaligned accesses`drivers/hwmon/sht3x.c`	+5 -4	0 replies
78/396	hwmon: (lm90) Only report alarms if driver is ready`drivers/hwmon/lm90.c`	+2 -2	0 replies
79/396	hwmon: (nzxt-smart2) DMA-align output buffer`drivers/hwmon/nzxt-smart2.c`	+1 -1	0 replies
80/396	net: do not send ICMP/NDISC Redirects when peer allocation fails`net/ipv4/route.c` `net/ipv6/ip6_output.c` `net/ipv6/ndisc.c`	+3 -3	0 replies
81/396	hwmon: (nct6775-core) Prevent access to unsupported weight registers`drivers/hwmon/nct6775-core.c`	+6 -6	0 replies
82/396	net: bridge: mrp: fix Option TLV length in MRP_Test frames`net/bridge/br_mrp.c`	+1 -1	0 replies
83/396	forcedeth: fix UAF of txrx_stats in nv_remove`drivers/net/ethernet/nvidia/forcedeth.c`	+2 -2	0 replies
84/396	hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors`drivers/hwmon/adt7470.c`	+29 ~~-11~~	0 replies
85/396	hwmon: (adt7470) Fix cache updated before hardware write on I2C error`drivers/hwmon/adt7470.c`	+9 -5	0 replies
86/396	hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread`drivers/hwmon/adt7470.c`	+1 -1	0 replies
87/396	hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read()`drivers/hwmon/adt7470.c`	+17 -2	0 replies
88/396	hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks`drivers/hwmon/adt7470.c`	+2 -2	0 replies
89/396	hwmon: (adt7470) Use cached PWM frequency value`drivers/hwmon/adt7470.c`	+18 -2	0 replies
90/396	hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read`drivers/hwmon/adt7470.c`	+10 ~~-13~~	0 replies
91/396	hwmon: (adt7470) Fix PWM auto temp state array and bounds check`drivers/hwmon/adt7470.c`	+6 -1	0 replies
92/396	rtase: fix double free of multi-frag skb on DMA map failure`drivers/net/ethernet/realtek/rtase/rtase_main.c`	+3 -0	0 replies
93/396	powerpc/boot: Fix simpleboot CPU node lookup check`arch/powerpc/boot/simpleboot.c`	+1 -1	0 replies
94/396	powerpc/boot: Fix treeboot-currituck CPU node lookup check`arch/powerpc/boot/treeboot-currituck.c`	+1 -1	0 replies
95/396	powerpc/boot: Fix treeboot-akebono CPU node lookup check`arch/powerpc/boot/treeboot-akebono.c`	+1 -1	0 replies
96/396	net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()`net/ipv4/udp_tunnel_nic.c`	+17 ~~-15~~	0 replies
97/396	wifi: mac80211: validate individual TWT params before driver setup`net/mac80211/s1g.c`	+4 -0	0 replies
98/396	netfs: clear PG_private_2 on copy-to-cache append failure`fs/netfs/read_pgpriv2.c`	+1 -0	0 replies
99/396	netfs: handle single writeback rolling buffer allocation failure`fs/netfs/write_issue.c`	+6 -1	0 replies
100/396	netfs: release readahead folios on iterator preparation failure`fs/netfs/buffered_read.c`	+3 -1	0 replies
101/396	net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller`drivers/net/ethernet/mediatek/mtk_eth_soc.c`	+1 -1	0 replies
102/396	hwmon: (pmbus) Fix return value from pmbus_update_byte_data()`drivers/hwmon/pmbus/pmbus_core.c`	+1 -1	0 replies
103/396	idpf: adjust TxQ ring count minimum`drivers/net/ethernet/intel/idpf/idpf_txrx.c` `drivers/net/ethernet/intel/idpf/idpf_txrx.h`	+2 -5	0 replies
104/396	idpf: Fix mailbox IRQ name leak on request failure`drivers/net/ethernet/intel/idpf/idpf_lib.c`	+1 -1	0 replies
105/396	ice: suppress DPLL errors during reset recovery`drivers/net/ethernet/intel/ice/ice_dpll.c`	+12 -7	0 replies
106/396	Bluetooth: ISO: clear iso_data always when detaching conn from hcon`net/bluetooth/iso.c`	+1 -0	0 replies
107/396	Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp`net/bluetooth/l2cap_core.c`	+5 -0	0 replies
108/396	Bluetooth: ISO: lock sk in iso_sock_getname`net/bluetooth/iso.c`	+4 -0	0 replies
109/396	Bluetooth: HCI: Add initial support for PAST`include/net/bluetooth/hci.h` `include/net/bluetooth/hci_core.h` `include/net/bluetooth/mgmt.h` +4 more	+177 ~~-10~~	0 replies
110/396	Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths`net/bluetooth/iso.c`	+30 ~~-24~~	0 replies
111/396	Bluetooth: ISO: lock sk in iso_connect_ind`net/bluetooth/iso.c`	+11 -8	0 replies
112/396	Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos`net/bluetooth/iso.c`	+1 -1	0 replies
113/396	Bluetooth: ISO: validate sockaddr_iso first in iso_sock_rebind_bis()`net/bluetooth/iso.c`	+3 -3	0 replies
114/396	Bluetooth: ISO: Fix not updating BIS sender source address`net/bluetooth/iso.c`	+19 -0	0 replies
115/396	Bluetooth: ISO: fix CONNECTED -> CLOSED transition on shutdown/release`net/bluetooth/iso.c`	+20 -6	0 replies
116/396	Bluetooth: ISO: hold sk properly in iso_conn_ready`net/bluetooth/iso.c`	+23 ~~-11~~	0 replies
117/396	Bluetooth: ISO: fix leaking sk after socket release`net/bluetooth/iso.c`	+18 -4	0 replies
118/396	Bluetooth: ISO: avoid deadlocks in iso_sock_timeout`net/bluetooth/iso.c`	+29 ~~-31~~	0 replies
119/396	Bluetooth: ISO: ensure no dangling hcon references in iso_conn`net/bluetooth/iso.c`	+21 -3	0 replies
120/396	Bluetooth: ISO: fix refcounting of iso_conn`net/bluetooth/iso.c`	+17 ~~-12~~	0 replies
121/396	Bluetooth: btintel: Validate length before parsing diagnostics TLV`drivers/bluetooth/btintel.c`	+3 -0	0 replies
122/396	Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists`net/bluetooth/hci_conn.c` `net/bluetooth/hci_sync.c`	+4 -2	0 replies
123/396	Bluetooth: hci_conn: hold conn reference in abort_conn_sync()`net/bluetooth/hci_conn.c`	+11 -1	0 replies
124/396	Bluetooth: hci_sync: fix hci_conn_del() use in hci_le_create_conn_sync`net/bluetooth/hci_sync.c`	+3 -1	0 replies
125/396	Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync`net/bluetooth/hci_sync.c`	+0 ~~-13~~	0 replies
126/396	x86/boot: Add volatile, clobbers and zero-length test in memcmp()`arch/x86/boot/string.c`	+9 -2	0 replies
127/396	net: phylink: put link_gpio if phylink_create fails`drivers/net/phy/phylink.c`	+15 ~~-14~~	0 replies
128/396	scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE`drivers/target/target_core_iblock.c`	+3 -3	0 replies
129/396	scsi: ufs: core: Cancel RTC work in active-active suspend`drivers/ufs/core/ufshcd.c`	+4 -2	0 replies
130/396	scsi: ufs: core: Avoid IRQ thread wakeup during active UIC command`drivers/ufs/core/ufshcd.c`	+6 -2	0 replies
131/396	scsi: ufs: core: Revert "Delegate the interrupt service routine to a threaded IRQ handler"`drivers/ufs/core/ufshcd.c`	+3 ~~-36~~	0 replies
132/396	scsi: zfcp: Fix memory leak during adapter release by destroying gid_pn_req`drivers/s390/scsi/zfcp_aux.c`	+1 -0	0 replies
133/396	scsi: target: Clear cmd_cnt when initial counter enrollment fails`drivers/target/target_core_transport.c`	+10 -2	0 replies
134/396	net: sxgbe: free TX rings on RX allocation failure`drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c`	+4 -5	0 replies
135/396	net: sxgbe: check descriptor ring allocation failures`drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c`	+4 -1	0 replies
136/396	can: isotp: check register_netdevice_notifier() error in module init`net/can/isotp.c`	+9 -4	0 replies
137/396	drm/i915/dp: Ignore the sinks DSC max FRL rate without a PCON DSC encoder`drivers/gpu/drm/i915/display/intel_dp.c`	+8 -1	0 replies
138/396	fprobe: Fix module reference count leak on error in register_fprobe()`kernel/trace/fprobe.c`	+2 -4	0 replies
139/396	tracing/mmiotrace: Reset dropped_count in mmio_reset_data()`kernel/trace/trace_mmiotrace.c`	+1 -0	0 replies
140/396	tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions`kernel/trace/trace_mmiotrace.c`	+10 -2	0 replies
141/396	riscv: drop __init from vec_check_unaligned_access_speed_all_cpus`arch/riscv/kernel/unaligned_access_speed.c`	+2 -2	0 replies
142/396	accel/qaic: use sizeof(*trans_hdr) for transaction length check`drivers/accel/qaic/qaic_control.c`	+1 -1	0 replies
143/396	riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove`arch/riscv/mm/init.c`	+2 -2	0 replies
144/396	net: dsa: mt7530: check bus->read() errors in the MDIO regmap backend`drivers/net/dsa/mt7530-mdio.c`	+9 -2	0 replies
145/396	net: dsa: mt7530: error out on failed reads in MT7531 PHY polling`drivers/net/dsa/mt7530.c`	+20 ~~-38~~	0 replies
146/396	ptp: netc: fix potential interrupt storm caused by incorrect unbind order`drivers/ptp/ptp_netc.c`	+12 -3	0 replies
147/396	net: libwx: fix FDIR ATR queue mismatch for software VLAN packets`drivers/net/ethernet/wangxun/libwx/wx_lib.c`	+2 -0	0 replies
148/396	octeontx2-pf: Set correct sequence for carrier off and tx queue stop`drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c`	+1 -1	0 replies
149/396	sched/deadline: Use revised wakeup rule only for running dl_server`kernel/sched/deadline.c`	+2 -1	0 replies
150/396	spi: spi-nxp-fspi: add per-SoC SDR/DTR clock rate limits for all supported SoCs`drivers/spi/spi-nxp-fspi.c`	+80 -3	0 replies
151/396	qede: sync udp_tunnel ports outside qede_lock in the recovery path`drivers/net/ethernet/qlogic/qede/qede_main.c`	+22 ~~-22~~	0 replies
152/396	drm/i915/hdmi: Poll for 200 msec for TMDS_Scrambler_Status`drivers/gpu/drm/i915/display/intel_ddi.c` `drivers/gpu/drm/i915/display/intel_hdmi.c` `drivers/gpu/drm/i915/display/intel_hdmi.h`	+30 -0	0 replies
153/396	ksmbd: return success for deferred final close`fs/smb/server/vfs_cache.c`	+3 -1	0 replies
154/396	ksmbd: fix use-after-free in __close_file_table_ids()`fs/smb/server/vfs_cache.c`	+2 -0	0 replies
155/396	iomap: add a separate bio_set for iomap_split_ioend`fs/iomap/ioend.c`	+19 -2	0 replies
156/396	mshv: Fix race in mshv_irqfd_deassign`drivers/hv/mshv_eventfd.c`	+3 -2	0 replies
157/396	mshv: adjust interrupt control structure for ARM64`drivers/hv/mshv_eventfd.c` `drivers/hv/mshv_irq.c` `drivers/hv/mshv_root_hv_call.c` +1 more	+22 -0	0 replies
158/396	mshv: Fix level-triggered check on uninitialized data`drivers/hv/mshv_eventfd.c`	+14 ~~-11~~	0 replies
159/396	mshv: Order pt_vp_array publish against irqfd assertion path`drivers/hv/mshv_eventfd.c` `drivers/hv/mshv_root_main.c`	+15 -2	0 replies
160/396	iommufd/viommu: Release the igroup lock on the vdevice_size error path`drivers/iommu/iommufd/viommu.c`	+1 -1	0 replies
161/396	iommufd/viommu: Publish a vDEVICE only after vdevice_init() succeeds`drivers/iommu/iommufd/viommu.c`	+15 -5	0 replies
162/396	iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace`drivers/iommu/iommufd/device.c`	+1 -1	0 replies
163/396	iommu/iommufd: Fix IOPF group ownership UAF`drivers/iommu/io-pgfault.c` `drivers/iommu/iommufd/eventq.c` `include/linux/iommu.h`	+26 -5	0 replies
164/396	pinctrl: microchip-sgpio: add missing select REGMAP_MMIO`drivers/pinctrl/Kconfig`	+1 -0	0 replies
165/396	pinctrl: devicetree: dont free uninitialized dev_name on error path`drivers/pinctrl/devicetree.c`	+4 -0	0 replies
166/396	erofs: cap LZMA stream pool size`fs/erofs/Kconfig` `fs/erofs/decompressor_lzma.c`	+16 -1	0 replies
167/396	pinctrl: bm1880: add missing select GENERIC_PINCONF`drivers/pinctrl/Kconfig`	+1 -0	0 replies
168/396	fortify: Disable -Wstringop-overread in tests`lib/test_fortify/Makefile`	+1 -0	0 replies
169/396	mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE`mm/migrate_device.c`	+3 -2	0 replies
170/396	mm/util: dont read __page_2 for order-1 folios in snapshot_page()`mm/util.c`	+1 -1	0 replies
171/396	selftest: fix headers in fclog.c`tools/testing/selftests/filesystems/fclog.c`	+1 -3	0 replies
172/396	fs/proc/task_mmu: fix PAGEMAP_SCAN written state for PMD holes`fs/proc/task_mmu.c`	+18 -2	0 replies
173/396	mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()`mm/percpu-km.c`	+1 -1	0 replies
174/396	mm/hugetlb: fix list corruption in allocate_file_region_entries()`mm/hugetlb.c`	+1 -1	0 replies
175/396	mm/vmstat: fold stranded per-cpu node stats when a node comes online`mm/mm_init.c`	+11 -4	0 replies
176/396	tracing/probes: Reject $arg0 in meta argument expansion`kernel/trace/trace_probe.c`	+5 -1	0 replies
177/396	tracing/fprobe: Roll back on enable_trace_fprobe() failure`kernel/trace/trace_fprobe.c`	+11 -1	0 replies
178/396	KVM: VMX: add memory clobber to asm for VMX instructions`arch/x86/kvm/vmx/vmx_ops.h`	+4 -4	0 replies
179/396	KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active`arch/x86/kvm/svm/avic.c`	+0 -8	0 replies
180/396	KVM: s390: pci: Reject adapter interrupt forwarding if already enabled`arch/s390/kvm/pci.c`	+4 -0	0 replies
181/396	KVM: s390: pci: Fix memory accounting for pinned/unpinned pages`arch/s390/kvm/pci.c` `arch/s390/kvm/pci.h`	+34 ~~-11~~	0 replies
182/396	KVM: s390: pci: Fix missing error codes and memory unaccounting`arch/s390/kvm/pci.c`	+7 -2	0 replies
183/396	KVM: s390: pci: Fix NULL dereference on AIBV allocation failure`arch/s390/kvm/pci.c`	+8 -0	0 replies
184/396	KVM: s390: pci: Validate AIBV and AISB before pinning guest pages`arch/s390/kvm/pci.c`	+15 -1	0 replies
185/396	dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister`drivers/dibs/dibs_loopback.c`	+24 ~~-23~~	0 replies
186/396	sctp: validate Adaptation Indication parameter length`net/sctp/sm_make_chunk.c`	+6 -0	0 replies
187/396	audit: fix potential integer overflow in audit_log_n_string()`kernel/audit.c`	+9 -2	0 replies
188/396	audit: fix potential use-after-free in audit_del_rule()`kernel/auditfilter.c`	+4 -2	0 replies
189/396	Bluetooth: btusb: Fix short read errors in btusb_qca_send_vendor_req()`drivers/bluetooth/btusb.c`	+9 ~~-21~~	0 replies
190/396	Bluetooth: btmtk: Fix short read errors in btmtk_usb_uhw_reg_read()`drivers/bluetooth/btmtk.c`	+22 ~~-28~~	0 replies
191/396	Bluetooth: mgmt: fix pending command UAF in EIR updates`net/bluetooth/mgmt.c`	+18 -2	0 replies
192/396	Bluetooth: SCO: give the socket its own sco_conn reference`net/bluetooth/sco.c`	+13 -9	0 replies
193/396	Bluetooth: mgmt: fix UAF in pair command cancellation`net/bluetooth/mgmt.c`	+46 ~~-18~~	0 replies
194/396	Bluetooth: hci_sync: Fix advertising data UAFs`net/bluetooth/hci_sync.c`	+97 ~~-34~~	0 replies
195/396	Bluetooth: HIDP: reject frames without a transaction header`net/bluetooth/hidp/core.c`	+15 ~~-10~~	0 replies
196/396	Bluetooth: HIDP: validate numbered report payloads`net/bluetooth/hidp/core.c`	+3 -2	0 replies
197/396	bpf: lwt: Fix dst reference leak on reroute failure`net/core/lwt_bpf.c`	+3 -1	0 replies
198/396	afs: Fix afs_fs_fetch_data() to set call->async`fs/afs/fsclient.c`	+3 -0	0 replies
199/396	afs: Fix afs_fs_fetch_data() to subtract transferred from len`fs/afs/fsclient.c`	+1 -1	0 replies
200/396	afs: Fix UAF when sending a message`fs/afs/internal.h`	+2 -1	0 replies
201/396	ALSA: 6fire: Fix UAF at error handling during probe`sound/usb/6fire/chip.c`	+4 -0	0 replies
202/396	ALSA: hda/realtek: Add quirk for TongFang X6SP45xU`sound/hda/codecs/realtek/alc269.c`	+2 -1	0 replies
203/396	ALSA: lx6464es: fix period byte count for 16-bit streams`sound/pci/lx6464es/lx6464es.c` `sound/pci/lx6464es/lx_core.c`	+2 -8	0 replies
204/396	ALSA: pcm: wake linked drain waiters on unlink`sound/core/pcm_native.c`	+7 -0	0 replies
205/396	ALSA: seq: Fix division by zero in initialize_timer()`sound/core/seq/seq_timer.c`	+4 -5	0 replies
206/396	ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes`sound/core/timer.c`	+2 -0	0 replies
207/396	ALSA: ump: fix double free of out_cvts on rawmidi error`sound/core/ump.c`	+1 -0	0 replies
208/396	ASoC: fsl_asrc: fix m2m_init error path to use goto instead of bare return`sound/soc/fsl/fsl_asrc.c`	+1 -1	0 replies
209/396	ASoC: fsl_easrc: fix m2m_init error path to use goto instead of bare return`sound/soc/fsl/fsl_easrc.c`	+1 -1	0 replies
210/396	ASoC: tas2562: fix DVC coefficient write order`sound/soc/codecs/tas2562.c`	+15 -8	0 replies
211/396	ASoC: tas2562: fix broken entries in the volume lookup table`sound/soc/codecs/tas2562.c`	+4 -3	0 replies
212/396	ata: libata-eh: Increase STANDBY IMMEDIATE timeout`drivers/ata/libata-eh.c` `include/linux/libata.h`	+9 -1	0 replies
213/396	ata: libata-sata: fix ata_scsi_lpm_supported() iteration`drivers/ata/libata-sata.c`	+1 -1	0 replies
214/396	ALSA: usb-audio: fix use-after-free in ump_to_endpoint()`sound/usb/midi2.c`	+3 -1	0 replies
215/396	ALSA: usb-audio: fix stack info leak in RME Digiface status`sound/usb/mixer_quirks.c`	+1 -1	0 replies
216/396	ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()`sound/usb/midi.c`	+2 -0	0 replies
217/396	ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set`sound/usb/endpoint.c`	+4 -2	0 replies
218/396	ALSA: usb-audio: Clamp frame size in implicit-feedback mode`sound/usb/endpoint.c`	+5 -3	0 replies
219/396	dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+`include/linux/dma/qcom_bam_dma.h`	+16 -5	0 replies
220/396	e1000: fix memory leak in e1000_probe()`drivers/net/ethernet/intel/e1000/e1000_main.c`	+1 -1	0 replies
221/396	igbvf: Fix leak in TX DMA error cleanup`drivers/net/ethernet/intel/igbvf/netdev.c`	+0 -2	0 replies
222/396	igc: remove napi_synchronize() in igc_down()`drivers/net/ethernet/intel/igc/igc_main.c`	+1 -2	0 replies
223/396	ipvs: do not propagate one-packet flag to synced conns`net/netfilter/ipvs/ip_vs_conn.c`	+3 -0	0 replies
224/396	ksmbd: reject repeated SMB2 NEGOTIATE requests`fs/smb/server/connection.h` `fs/smb/server/smb2pdu.c` `fs/smb/server/smb_common.c`	+37 ~~-15~~	0 replies
225/396	mshv: fix hv_input_get_system_property struct`include/hyperv/hvhdk_mini.h`	+2 -1	0 replies
226/396	net/smc: fix socket use-after-free during link group termination`net/smc/smc_core.c`	+1 -1	0 replies
227/396	netfilter: ipset: do not update comments from kernel-side hash adds`net/netfilter/ipset/ip_set_hash_gen.h`	+1 -1	0 replies
228/396	of/address: Fix NULL bus dereference in of_pci_range_parser_one()`drivers/of/address.c`	+16 -6	0 replies
229/396	tipc: avoid use-after-free in poll trace queue dumps`net/tipc/socket.c`	+1 -1	0 replies
230/396	wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames`drivers/net/wireless/marvell/mwifiex/11n_rxreorder.c`	+1 -1	0 replies
231/396	binfmt_misc: restore write access when removing an entry`fs/binfmt_misc.c`	+3 -1	0 replies
232/396	binfmt_misc: use exe_file_deny_write_access() for the interpreter clone`fs/binfmt_misc.c`	+8 -2	0 replies
233/396	binfmt_misc: reject a flag character as the field delimiter`fs/binfmt_misc.c`	+4 -0	0 replies
234/396	binfmt_misc: dont let an F entry pin its own instance`fs/binfmt_misc.c`	+4 -0	0 replies
235/396	io_uring/net: initialize mshot_len for send`io_uring/net.c`	+1 -0	0 replies
236/396	mm/page_reporting: use system_freezable_wq to fix UAF during suspend`mm/page_reporting.c`	+4 -2	0 replies
237/396	mm: memcg: initialize *locked in memcg1_oom_prepare() stub`mm/memcontrol-v1.h`	+5 -1	0 replies
238/396	net: bridge: stop fast-leave after deleting a port group`net/bridge/br_multicast.c`	+1 -0	0 replies
239/396	net: ipv6: clear suppressed fib6 rule result`net/ipv6/fib6_rules.c`	+1 -0	0 replies
240/396	net: pktgen: fix proc entry use-after-free`net/core/pktgen.c`	+1 -3	0 replies
241/396	powerpc/ps3: Fix map failure path in dma_ioc0_map_pages()`arch/powerpc/platforms/ps3/mm.c`	+1 -0	0 replies
242/396	um: vector: fix use-after-free in vector_mmsg_rx()`arch/um/drivers/vector_kern.c`	+3 -0	0 replies
243/396	uprobes: Fix NULL pointer dereference in hprobe_expire()`kernel/events/uprobes.c`	+1 -1	0 replies
244/396	veth: convert frag_list skbs before running XDP`drivers/net/veth.c` `net/core/skbuff.c`	+14 -8	0 replies
245/396	vxlan: re-fetch eth header after route_shortcircuit()`drivers/net/vxlan/vxlan_core.c`	+1 -0	0 replies
246/396	vxlan: unclone skb head before modifying eth header in route_shortcircuit()`drivers/net/vxlan/vxlan_core.c`	+4 -0	0 replies
247/396	vxlan: use neigh_ha_snapshot() in route_shortcircuit()`drivers/net/vxlan/vxlan_core.c`	+4 -2	0 replies
248/396	vxlan: use pskb_network_may_pull() for transmit path header pulls`drivers/net/vxlan/vxlan_core.c` `drivers/net/vxlan/vxlan_mdb.c`	+5 -5	0 replies
249/396	vxlan: use pskb_network_may_pull() in route_shortcircuit()`drivers/net/vxlan/vxlan_core.c`	+2 -2	0 replies
250/396	ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev()`drivers/block/ublk_drv.c`	+9 -0	0 replies
251/396	tracing: Check return value of __register_event() in trace_module_add_events()`kernel/trace/trace_events.c`	+2 -2	0 replies
252/396	tracing/filters: Fix false positive match in regex_match_full()`kernel/trace/trace_events_filter.c`	+3 -0	0 replies
253/396	spi: spi-qpic-snand: write the feature value before executing SET_FEATURE`drivers/spi/spi-qpic-snand.c`	+18 -4	0 replies
254/396	spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure`drivers/spi/spi-qcom-qspi.c`	+2 -1	0 replies
255/396	selftests/mm: fix potential wild pointer access of getline due to missing init`tools/testing/selftests/mm/mlock-random-test.c`	+1 -1	0 replies
256/396	selftests/clone3: fix wild pointer access of getline due to missing init`tools/testing/selftests/clone3/clone3_set_tid.c`	+1 -1	0 replies
257/396	scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write`drivers/scsi/scsi_debug.c`	+6 -2	0 replies
258/396	sctp: reject stale cookies with mismatched verification tags`net/sctp/sm_make_chunk.c`	+7 -4	0 replies
259/396	sctp: prevent peer transport count overflow`net/sctp/associola.c`	+3 -0	0 replies
260/396	hwmon: (npcm750-pwm-fan): stop fan timer on device detach`drivers/hwmon/npcm750-pwm-fan.c`	+11 -0	0 replies
261/396	hwmon: (pmbus/core) notify on the hwmon device, not the i2c client`drivers/hwmon/pmbus/pmbus_core.c`	+3 -2	0 replies
262/396	i2c: amd-mp2: Unregister callback on adapter add failure`drivers/i2c/busses/i2c-amd-mp2-plat.c`	+3 -1	0 replies
263/396	gpio: pca953x: fix cache_only and IRQ state on restore_context() failure`drivers/gpio/gpio-pca953x.c`	+13 -2	0 replies
264/396	gpio: pch: use raw_spinlock_t for the register lock`drivers/gpio/gpio-pch.c`	+14 ~~-14~~	0 replies
265/396	cifs: add fscache_resize_cookie() to cifs_setsize()`fs/smb/client/inode.c`	+1 -0	0 replies
266/396	cpufreq: powernow-k8: Fix possible memory leak in powernowk8_cpu_init()`drivers/cpufreq/powernow-k8.c`	+1 -0	0 replies
267/396	cpufreq: schedutil: Publish util hooks only after all sg_cpu are initialized`kernel/sched/cpufreq_schedutil.c`	+11 -0	0 replies
268/396	power: supply: bq25890: fix the -10 C NTC lookup entry`drivers/power/supply/bq25890_charger.c`	+1 -1	0 replies
269/396	power: supply: max17040: handle missing status supplier`drivers/power/supply/max17040_battery.c`	+5 -1	0 replies
270/396	s390/pci: Fix s390_pci_mmio_write syscall error return without MIO`arch/s390/pci/pci_mmio.c`	+1 -0	0 replies
271/396	s390/qeth: Check CAP_NET_ADMIN for private ioctls`drivers/s390/net/qeth_core_main.c`	+3 -0	0 replies
272/396	s390/dasd: Fix potential NULL pointer dereference`drivers/s390/block/dasd_ioctl.c`	+1 -1	0 replies
273/396	s390/dasd: Fix undersized format-check buffer`drivers/s390/block/dasd_eckd.c`	+7 -4	0 replies
274/396	s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs`drivers/s390/crypto/zcrypt_api.c`	+1 -1	0 replies
275/396	s390/zcrypt: Fix buffer over-read in cca_cipher2protkey`drivers/s390/crypto/pkey_cca.c` `drivers/s390/crypto/zcrypt_ccamisc.c` `drivers/s390/crypto/zcrypt_ccamisc.h`	+62 ~~-23~~	0 replies
276/396	s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()`drivers/s390/crypto/zcrypt_ccamisc.c`	+13 -6	0 replies
277/396	s390/zcrypt: Validate length for CCA AES cipher key requests`drivers/s390/crypto/zcrypt_ccamisc.c`	+3 -0	0 replies
278/396	s390/zcrypt: Validate length for CCA ECC private key requests`drivers/s390/crypto/zcrypt_ccamisc.c`	+3 -0	0 replies
279/396	phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask`drivers/phy/xilinx/phy-zynqmp.c`	+1 -1	0 replies
280/396	phy: zynqmp: use read-modify-write for SERDES scrambler bypass`drivers/phy/xilinx/phy-zynqmp.c`	+6 -2	0 replies
281/396	phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB`drivers/phy/xilinx/phy-zynqmp.c`	+29 ~~-10~~	0 replies
282/396	net: openvswitch: fix potential UAF on meter attach failure`net/openvswitch/meter.c`	+19 ~~-14~~	0 replies
283/396	net: openvswitch: fix skb leak on flow key update failure during recirculation`net/openvswitch/actions.c`	+9 -1	0 replies
284/396	net: openvswitch: fix skb leak on flow key update failure during ct`net/openvswitch/actions.c`	+1 -1	0 replies
285/396	ice: wait for reset completion in ice_resume()`drivers/net/ethernet/intel/ice/ice_main.c`	+10 -0	0 replies
286/396	ice: fix VF interrupts cleanup`drivers/net/ethernet/intel/ice/ice_vf_lib.c` `drivers/net/ethernet/intel/ice/ice_vf_lib_private.h` `drivers/net/ethernet/intel/ice/virt/queues.c`	+49 -0	0 replies
287/396	ice: fix memory leak in ice_lbtest_prepare_rings()`drivers/net/ethernet/intel/ice/ice_ethtool.c`	+5 -5	0 replies
288/396	i2c: spacemit: request IRQ after controller initialization`drivers/i2c/busses/i2c-k1.c`	+5 -5	0 replies
289/396	i2c: qcom-cci: drop custom suspend/resume and rely on runtime PM helpers`drivers/i2c/busses/i2c-qcom-cci.c`	+1 ~~-17~~	0 replies
290/396	i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock`drivers/i2c/busses/i2c-jz4780.c`	+4 -1	0 replies
291/396	i2c: iproc: reset bus after timeout if START_BUSY is stuck`drivers/i2c/busses/i2c-bcm-iproc.c`	+11 -0	0 replies
292/396	i2c: imx: mark I2C adapter when hardware is powered down`drivers/i2c/busses/i2c-imx.c`	+43 -2	0 replies
293/396	i2c: imx: Fix slave registration race and error handling`drivers/i2c/busses/i2c-imx.c`	+5 -3	0 replies
294/396	i2c: imx: Cancel hrtimer before clearing slave pointer`drivers/i2c/busses/i2c-imx.c`	+1 -0	0 replies
295/396	can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured`drivers/net/can/c_can/c_can_main.c`	+4 -4	0 replies
296/396	can: ems_usb: validate CPC message lengths`drivers/net/can/usb/ems_usb.c`	+43 -0	0 replies
297/396	can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure`drivers/net/can/usb/etas_es58x/es58x_core.c`	+0 -1	0 replies
298/396	can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure`drivers/net/can/usb/gs_usb.c`	+2 -2	0 replies
299/396	can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer`net/can/j1939/transport.c`	+1 -1	0 replies
300/396	can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking`net/can/j1939/bus.c` `net/can/j1939/j1939-priv.h` `net/can/j1939/main.c` +1 more	+11 -4	0 replies
301/396	can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams()`drivers/net/can/usb/kvaser_usb/kvaser_usb_hydra.c`	+1 -0	0 replies
302/396	can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents`drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c`	+11 -2	0 replies
303/396	can: softing: fw_parse(): validate firmware record spans`drivers/net/can/softing/softing_fw.c`	+32 ~~-14~~	0 replies
304/396	can: peak_usb: add bounds check for USB channel index`drivers/net/can/usb/peak_usb/pcan_usb_pro.c`	+16 -4	0 replies
305/396	can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error`drivers/net/can/usb/peak_usb/pcan_usb_core.c`	+0 -1	0 replies
306/396	can: peak_usb: validate uCAN receive record lengths`drivers/net/can/usb/peak_usb/pcan_usb_fd.c`	+39 -1	0 replies
307/396	can: ctucanfd: add missing MODULE_DEVICE_TABLE()`drivers/net/can/ctucanfd/ctucanfd_pci.c`	+1 -0	0 replies
308/396	can: ctucanfd: use self-test mode for PRESUME_ACK`drivers/net/can/ctucanfd/ctucanfd_base.c`	+2 -2	0 replies
309/396	can: ctucanfd: unmap BAR0 using base address`drivers/net/can/ctucanfd/ctucanfd_pci.c`	+1 -1	0 replies
310/396	can: ctucanfd: handle bus error interrupts`drivers/net/can/ctucanfd/ctucanfd_base.c`	+6 -2	0 replies
311/396	can: ctucanfd: mark error-active controller status valid`drivers/net/can/ctucanfd/ctucanfd_base.c`	+1 -1	0 replies
312/396	drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs`drivers/gpu/drm/display/drm_dp_helper.c`	+12 -0	0 replies
313/396	drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size`drivers/gpu/drm/vc4/vc4_irq.c`	+1 -1	0 replies
314/396	drm/vc4: Zero the tile state data array before each BIN job`drivers/gpu/drm/vc4/vc4_validate.c`	+23 -6	0 replies
315/396	drm/bridge: display-connector: Fix I2C adapter resource leak`drivers/gpu/drm/bridge/display-connector.c`	+8 -3	0 replies
316/396	drm/panthor: reject firmware sections with oversized data`drivers/gpu/drm/panthor/panthor_fw.c`	+9 -2	0 replies
317/396	drm/panthor: validate firmware interface structure sizes`drivers/gpu/drm/panthor/panthor_fw.c`	+24 ~~-12~~	0 replies
318/396	drm/mediatek: ovl_adaptor: balance component registrations`drivers/gpu/drm/mediatek/mtk_disp_ovl_adaptor.c`	+6 -1	0 replies
319/396	drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini`drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c`	+16 ~~-14~~	0 replies
320/396	drm/amdgpu: restore UMD profile pstate after runtime resume`drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c`	+15 -0	0 replies
321/396	drm/amdgpu: cap GTT size to physical RAM on APUs`drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c`	+12 -0	0 replies
322/396	drm/amd/pm: fix torn gpu metrics reads`drivers/gpu/drm/amd/pm/amdgpu_dpm.c` `drivers/gpu/drm/amd/pm/amdgpu_pm.c` `drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h`	+12 ~~-11~~	0 replies
323/396	drm/amd/display: Increase HDMI AV mute wait from 2 to 3 frames`drivers/gpu/drm/amd/display/dc/hwss/dcn30/dcn30_hwseq.c`	+11 -5	0 replies
324/396	drm/amd/display: use proper context for logging`drivers/gpu/drm/amd/display/dc/dce/dce_clock_source.c`	+9 ~~-11~~	0 replies
325/396	drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE`drivers/gpu/drm/amd/amdkfd/kfd_chardev.c`	+7 -3	0 replies
326/396	drm/amdkfd: fix QID bit leak in pqm_create_queue()`drivers/gpu/drm/amd/amdkfd/kfd_process_queue_manager.c`	+1 -1	0 replies
327/396	drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment`drivers/gpu/drm/amd/amdkfd/kfd_queue.c`	+1 -1	0 replies
328/396	drm/amdkfd: Handle invalid event type in CRIU event restore`drivers/gpu/drm/amd/amdkfd/kfd_events.c`	+3 -0	0 replies
329/396	drm/amdkfd: hold event_mutex while checkpointing CRIU events`drivers/gpu/drm/amd/amdkfd/kfd_events.c`	+18 -4	0 replies
330/396	drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size`drivers/gpu/drm/vmwgfx/vmwgfx_resource.c`	+2 -2	0 replies
331/396	drm/vmwgfx: reject DX_BIND_QUERY without a DX context`drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c`	+5 -1	0 replies
332/396	drm/vmwgfx: clamp dirty-page range with min, not max`drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c`	+2 -2	0 replies
333/396	drm/vmwgfx: take fman->lock around fence list mutation in fifo_down`drivers/gpu/drm/vmwgfx/vmwgfx_fence.c`	+12 -1	0 replies
334/396	drm/vmwgfx: drop dma_buf reference on foreign-fd prime import`drivers/gpu/drm/vmwgfx/ttm_object.c`	+5 -2	0 replies
335/396	drm/vmwgfx: validate DRAW_PRIMITIVES header size before division`drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c`	+7 -1	0 replies
336/396	drm/vmwgfx: bound DMA command body size against suffix pointer`drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c`	+6 -0	0 replies
337/396	drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure`drivers/gpu/drm/vmwgfx/vmwgfx_vkms.c`	+9 -8	0 replies
338/396	drm/vmwgfx: enforce cursor size limits for MOB cursors`drivers/gpu/drm/vmwgfx/vmwgfx_cursor_plane.c`	+44 -5	0 replies
339/396	drm/vmwgfx: use check_add_overflow for shader size+offset bound`drivers/gpu/drm/vmwgfx/vmwgfx_shader.c`	+9 -4	0 replies
340/396	drm/vmwgfx: validate external BO copy bounds for both stride paths`drivers/gpu/drm/vmwgfx/vmwgfx_blit.c`	+31 -8	0 replies
341/396	spi: spi-cadence: enable SPI_CONTROLLER_MUST_TX`drivers/spi/spi-cadence.c`	+1 -0	0 replies
342/396	HID: logitech-dj: Fix maxfield check in DJ short report validation`drivers/hid/hid-logitech-dj.c`	+7 -2	0 replies
343/396	drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting`drivers/gpu/drm/xe/xe_reg_whitelist.c`	+13 ~~-16~~	0 replies
344/396	drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists`drivers/gpu/drm/xe/xe_reg_whitelist.c`	+5 -3	0 replies
345/396	drm/xe/rtp: Maintain OA whitelists separately`drivers/gpu/drm/xe/xe_gt_debugfs.c` `drivers/gpu/drm/xe/xe_hw_engine.c` `drivers/gpu/drm/xe/xe_hw_engine_types.h` +1 more	+19 -1	0 replies
346/396	drm/xe/rtp: Keep track of non-OA nonpriv slots`drivers/gpu/drm/xe/xe_reg_whitelist.c`	+5 -2	0 replies
347/396	drm/xe/rtp: Generalize whitelist_apply_to_hwe`drivers/gpu/drm/xe/xe_reg_whitelist.c`	+6 -5	0 replies
348/396	drm/xe/rtp: Save OA nonpriv registers to register save/restore lists`drivers/gpu/drm/xe/xe_reg_whitelist.c`	+11 -0	0 replies
349/396	drm/xe/rtp: Toggle deny bit to (de-)whitelist OA regs`drivers/gpu/drm/xe/xe_reg_whitelist.c`	+15 -0	0 replies
350/396	drm/xe/rtp: (De-)whitelist OA registers for all hwes for a gt`drivers/gpu/drm/xe/xe_reg_whitelist.c` `drivers/gpu/drm/xe/xe_reg_whitelist.h`	+36 -2	0 replies
351/396	drm/xe/oa: (De-)whitelist OA registers on OA stream open/release`drivers/gpu/drm/xe/xe_oa.c`	+7 -0	0 replies
352/396	drm/xe/rtp: Ensure locking/ref counting for OA whitelists`drivers/gpu/drm/xe/xe_oa_types.h` `drivers/gpu/drm/xe/xe_reg_whitelist.c`	+13 -0	0 replies
353/396	mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()`mm/hugetlb.c`	+7 -3	0 replies
354/396	fs/proc/task_mmu: fix PAGEMAP_SCAN written state for unpopulated ptes`fs/proc/task_mmu.c`	+13 -0	0 replies
355/396	mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios`mm/huge_memory.c`	+12 -0	0 replies
356/396	file: add FD_{ADD,PREPARE}()`include/linux/cleanup.h` `include/linux/file.h`	+133 -0	0 replies
357/396	file: ensure cleanup`include/linux/file.h`	+6 -7	0 replies
358/396	net/handshake: convert handshake_nl_accept_doit() to FD_PREPARE()`net/handshake/netlink.c`	+18 ~~-20~~	0 replies
359/396	net/handshake: Fix null-ptr-deref in handshake_complete()`net/handshake/netlink.c`	+2 -1	0 replies
360/396	net/handshake: Take a long-lived file reference at submit`net/handshake/handshake.h` `net/handshake/netlink.c` `net/handshake/request.c`	+37 ~~-13~~	0 replies
361/396	net/handshake: hand off the pinned file reference to accept_doit`net/handshake/handshake-test.c` `net/handshake/netlink.c` `net/handshake/request.c`	+28 -5	0 replies
362/396	net/handshake: Close the submit-side sock_hold race`net/handshake/request.c`	+0 ~~-12~~	0 replies
363/396	net/handshake: Drain pending requests at net namespace exit`net/handshake/netlink.c` `net/handshake/request.c`	+12 -3	0 replies
364/396	usb: typec: ucsi: split connector lock classes`drivers/usb/typec/ucsi/ucsi.c` `drivers/usb/typec/ucsi/ucsi.h`	+9 -0	0 replies
365/396	usb: typec: ucsi: Fix race condition and ordering in port unregistration`drivers/usb/typec/ucsi/ucsi.c`	+39 ~~-43~~	0 replies
366/396	media: chips-media: wave5: Support CBP profile`drivers/media/platform/chips-media/wave5/wave5-hw.c` `drivers/media/platform/chips-media/wave5/wave5-vpu-enc.c` `drivers/media/platform/chips-media/wave5/wave5-vpuapi.h`	+8 -1	0 replies
367/396	media: qcom: camss: csid-340: Fix unused variables`drivers/media/platform/qcom/camss/camss-csid-340.c`	+3 -7	0 replies
368/396	media: qcom: camss: Fix RDI streaming for CSID 340`drivers/media/platform/qcom/camss/camss-csid-340.c`	+10 -8	0 replies
369/396	media: uapi: rkisp: Correct name version enum`include/uapi/linux/rkisp1-config.h`	+3 -3	0 replies
370/396	wifi: brcmfmac: drain bus_reset work on device removal`drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c` `drivers/net/wireless/broadcom/brcm80211/brcmfmac/bus.h` `drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c` +4 more	+77 -4	0 replies
371/396	userfaultfd: prevent registration of special VMAs`include/linux/userfaultfd_k.h`	+4 -1	0 replies
372/396	drm/fb-helper: Allocate and release fb_info in single place`drivers/gpu/drm/armada/armada_fbdev.c` `drivers/gpu/drm/drm_fb_helper.c` `drivers/gpu/drm/drm_fbdev_dma.c` +10 more	+26 ~~-143~~	0 replies
373/396	drm/tegra: fbdev: Remove offset into framebuffer memory`drivers/gpu/drm/tegra/fbdev.c`	+2 -6	0 replies
374/396	drm/amdgpu: Fix context pstate override handling`drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c`	+42 ~~-29~~	0 replies
375/396	drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr functions`drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c`	+28 -2	0 replies
376/396	drm/xe/guc: Fix buffer overflow in steered register list allocation`drivers/gpu/drm/xe/xe_guc_capture.c`	+9 -2	0 replies
377/396	drm/amd/display: check GRPH_FLIP status before sending event`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c` `drivers/gpu/drm/amd/display/dc/core/dc.c` `drivers/gpu/drm/amd/display/dc/dc.h`	+197 ~~-40~~	0 replies
378/396	drm/amd/display: Exit idle optimizations before programming`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c`	+46 ~~-32~~	0 replies
379/396	drm/xe/pat: Add helper to query compression enable status`drivers/gpu/drm/xe/xe_pat.c` `drivers/gpu/drm/xe/xe_pat.h`	+16 -0	0 replies
380/396	drm/xe: add xe_migrate_resolve wrapper and is_vram_resolve support`drivers/gpu/drm/xe/xe_migrate.c` `drivers/gpu/drm/xe/xe_migrate.h`	+67 ~~-27~~	0 replies
381/396	drm/xe/bo: Add purgeable bo state tracking and field madv to xe_bo`drivers/gpu/drm/xe/xe_bo.h` `drivers/gpu/drm/xe/xe_bo_types.h`	+62 -0	0 replies
382/396	drm/xe/vm: Prevent binding of purged buffer objects`drivers/gpu/drm/xe/xe_vm.c`	+68 ~~-11~~	0 replies
383/396	drm/xe/vm: Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC`drivers/gpu/drm/xe/xe_vm.c`	+20 -5	0 replies
384/396	drm/exec: Remove the index parameter from drm_exec_for_each_locked_obj[_reverse]`drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c` `drivers/gpu/drm/amd/amdgpu/amdgpu_eviction_fence.c` `drivers/gpu/drm/drm_exec.c` +3 more	+20 ~~-24~~	0 replies
385/396	drm/xe: Wait on external BO kernel fences in exec IOCTL`drivers/gpu/drm/xe/xe_exec.c`	+16 -6	0 replies
386/396	drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable()`drivers/gpu/drm/i915/display/intel_vrr.c`	+4 -2	0 replies
387/396	drm/i915/vrr: require valid min/max vfreq for VRR`drivers/gpu/drm/i915/display/intel_vrr.c`	+4 -0	0 replies
388/396	drm/xe: Use SVM range helpers in PT layer`drivers/gpu/drm/xe/xe_pt.c`	+14 ~~-14~~	0 replies
389/396	drm/xe: Stub out new pagefault layer`drivers/gpu/drm/xe/Makefile` `drivers/gpu/drm/xe/xe_pagefault.c` `drivers/gpu/drm/xe/xe_pagefault.h` +1 more	+221 -0	0 replies
390/396	drm/xe: Add page reclamation info to device info`drivers/gpu/drm/xe/xe_device_types.h` `drivers/gpu/drm/xe/xe_pci.c` `drivers/gpu/drm/xe/xe_pci_types.h`	+4 -0	0 replies
391/396	drm/xe/pt: Reset current_op in xe_pt_update_ops_init()`drivers/gpu/drm/xe/xe_pt.c`	+3 -0	0 replies
392/396	can: use skb hash instead of private variable in headroom`drivers/net/can/dev/skb.c` `include/linux/can/core.h` `include/linux/can/skb.h` +6 more	+15 ~~-19~~	0 replies
393/396	can: isotp: fix timer drain order, wakeup handling and tx_gen ordering`net/can/isotp.c`	+230 ~~-87~~	0 replies
394/396	usb: typec: ucsi: Correct teardown ordering in ucsi_init() error path`drivers/usb/typec/ucsi/ucsi.c`	+2 -2	0 replies
395/396	drm/fb-helper: Fix a locking bug in an error path`drivers/gpu/drm/drm_fb_helper.c`	+3 -1	0 replies
396/396	drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info`drivers/gpu/drm/tegra/fbdev.c`	+0 -1	0 replies

Reviews trailers per patch

230 of 396 patches have a Reviewed-by or Acked-by.

Patch	Ilya Maximets	Suren Baghdasaryan	Maulik Shah	Linus Walleij	Konrad Dybcio	Jernej Skrabec	Frank Li	Dave Jiang	Vinicius Costa Gomes	Kevin Tian	Pranjal Shrivastava	Wolfram Sang	David Gow	Jiri Olsa	Johannes Thumshirn	Naohiro Aota	Andy Shevchenko	Daniel Vacek	David Sterba	Michal Simek	CK Hu	Michael Kelley	Tianyu Lan	Ido Schimmel	Anirudh Rayabharam (Microsoft)	Fuad Tabba	David Gstir	Richard Weinberger	Jarkko Sakkinen	Matthew Brost	Allison Henderson	Maciej Fijalkowski	Stanislav Fomichev	Jason Xing	Chris Leech	John Garry	Radhey Shyam Pandey	Bence Csókás	Jens Almer	Jonas Rebmann	Nikolay Aleksandrov	Vadim Fedorenko	Zhu Yanjun	Talha Berk Arslan	Pierre-Louis Bossart	Ritesh Harjani (IBM)	Aleksandr Loktionov	Samuel Salin	Simon Horman	Rinitha S	Andrew Lunn	Mike Christie	Peter Wang	Bean Huo	Bart Van Assche	Sebastian Andrzej Siewior	André Draszik	M Nikhil	Chinmaya Kajagar	Nihar Panda	Ankit Nautiyal	Jacob Keller	Justin Lai	Juri Lelli	Andrea Righi	Arun R Murthy	Peiyang He	Gao Xiang	Jeff Hugo	Balbir Singh	Zi Yan	David Hildenbrand (Arm)	Lorenzo Stoakes	Matthew Wilcox (Oracle)	Luiz Capitulino	Muhammad Usama Anjum	Dennis Zhou	Muchun Song	Christian Borntraeger	Matthew Rosato	Alexandra Winter	Shuangpeng Bai	Lakshmi Sowjanya D	Dmitry Baryshkov	Dima Ruinskiy	Moriya Kadosh	Julian Anastasov	Mahanta Jambigi	Jozsef Kadlecsik	Tung Nguyen	Ren Wei	Xin Long	Gabriel Krisman Bertazi	Toke Høiland-Jørgensen	Lorenzo Bianconi	Caleb Sander Mateos	Md Sadre Alam	David Rientjes	Michael S. Tsirkin	Damien Le Moal	Joshua Hahn	Johannes Weiner	SeongJae Park	Shakeel Butt	Paulo Alcantara	Viresh Kumar	Zhongqiu Han	Christian Loehle	Julian Ruess	Farhan Ali	Eduard Shishkin	Stefan Haberland	Jan Höppner	Finn Callies	Ingo Franzki	Holger Dengler	Harald Freudenberger	Geert Uytterhoeven	Oleg Nesterov	Andrii Nakryiko	Eelco Chaudron	Ray Jui	Oleksij Rempel	Carlos Song	Vincent Mailhol	Aaron Conole	Pavel Pisa	Maíra Canal	Iago Toral Quiroga	Johan Hovold	Luca Ceresoli	Steven Price	Boris Brezillon	Christian König	Hawking Zhang	Yang Wang	Kohei Enju	Przemek Kitszel	Alexander Nowlin	David Francis	Kenneth Feng	Wayne Lin	Dan Wheeler	Bhawanpreet Lakha	Kent Russell	Alysa Liu	Patryk Holda	Troy Mitchell	Alex Elder	Vladimir Zapolskiy	Loic Poulain	Ian Forbes	Umesh Nerlige Ramappa	Baolin Wang	Miaohe Lin	Jeff Layton	Chuck Lever	Hannes Reinecke	Heikki Krogerus	Benson Leung	Brandon Brnich	Nicolas Dufresne	Bryan O'Donoghue	Laurent Pinchart	Arend van Spriel	Javier Martinez Canillas	Mario Limonciello (AMD)	Matt Roper	Nitin Gote	Matthew Auld	Sanjay Yadav	Thomas Hellström	Zhanjun Dong	Thomas Zimmermann	Himal Prasad Ghimiray	Lucas De Marchi	Francois Dugast	Shuicheng Lin	Chaitanya Kumar Borah	Pavel Machek (CIP)	Wentao Guan	Shuah Khan	Brett A C Sheffield	Peter Schneider	Ron Economos	Miguel Ojeda	Mark Brown	Florian Fainelli
Series																																																																																																																																																																																				T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/396	T-b
2/396													R-b
3/396																	R-b T-b
4/396																								R-b
5/396
6/396																														R-b
7/396
8/396
9/396
10/396
11/396		A-b
12/396		R-b
13/396
14/396			R-b	R-b	R-b
15/396
16/396						A-b	R-b
17/396								R-b	A-b
18/396										R-b	R-b
19/396												R-b
20/396
21/396														A-b
22/396
23/396
24/396
25/396
26/396
27/396
28/396															R-b
29/396																R-b
30/396																R-b
31/396																		R-b	R-b
32/396																				R-b
33/396																				R-b
34/396
35/396																					R-b
36/396																						R-b
37/396																						R-b	R-b
38/396																						R-b	R-b
39/396																						R-b
40/396																									R-b
41/396																									R-b
42/396																										T-b R-b
43/396																											R-b	R-b	R-b T-b
44/396																													R-b T-b
45/396																													R-b T-b
46/396																													R-b T-b
47/396
48/396																																												Reported-and-tested-by
49/396
50/396
51/396
52/396
53/396																																													R-b
54/396																															R-b
55/396																															R-b
56/396
57/396
58/396
59/396
60/396																																A-b	A-b
61/396																																A-b
62/396																																	A-b	R-b
63/396
64/396																																			A-b
65/396																																			A-b
66/396																																				R-b
67/396
68/396
69/396
70/396																																					R-b
71/396
72/396																																						R-b	T-b
73/396																																						R-b	T-b	T-b
74/396
75/396
76/396
77/396
78/396
79/396
80/396																								R-b
81/396
82/396																																									A-b
83/396																																										R-b	R-b
84/396
85/396
86/396
87/396
88/396
89/396
90/396
91/396
92/396																																																														R-b	R-b
93/396																																														R-b
94/396																																														R-b
95/396																																														R-b
96/396
97/396
98/396
99/396
100/396
101/396
102/396
103/396																																															R-b	T-b
104/396																																															R-b	T-b
105/396																																															R-b		R-b	T-b
106/396
107/396
108/396
109/396
110/396
111/396
112/396
113/396
114/396
115/396
116/396
117/396
118/396
119/396
120/396
121/396
122/396
123/396
124/396
125/396
126/396
127/396																																																			R-b
128/396																																																				R-b
129/396																																																					R-b	R-b	R-b
130/396																																																							R-b
131/396																																																								R-b	T-b R-b
132/396																																																										T-b A-b	R-b	R-b
133/396																																																				R-b
134/396																																										R-b
135/396																																										R-b
136/396
137/396																																																													R-b
138/396
139/396
140/396
141/396
142/396																																																																					R-b
143/396
144/396																																																			R-b
145/396																																																			R-b
146/396
147/396																																																	R-b
148/396																																																	R-b
149/396																																																																A-b	T-b
150/396
151/396																																																														R-b
152/396																																																																		R-b
153/396
154/396
155/396
156/396																									R-b
157/396
158/396																									R-b
159/396																									R-b
160/396										R-b	R-b
161/396										R-b	R-b
162/396										R-b
163/396										R-b																																																									T-b
164/396																	R-b
165/396
166/396																																																																				R-b
167/396
168/396
169/396																																																																						R-b	A-b
170/396																																																																								A-b	R-b	R-b	R-b
171/396
172/396																																																																								A-b				T-b
173/396																																																																													A-b
174/396																																																																														R-b
175/396
176/396
177/396
178/396
179/396
180/396																																																																															R-b	R-b T-b
181/396																																																																															R-b	R-b T-b
182/396																																																																															R-b	R-b T-b
183/396																																																																															R-b	R-b T-b
184/396																																																																															R-b	R-b T-b
185/396																																																																																	R-b
186/396																																																																																												A-b
187/396
188/396
189/396
190/396
191/396
192/396
193/396																																																																																											R-b
194/396
195/396
196/396
197/396
198/396
199/396
200/396
201/396																																																																																		Reported-and-tested-by
202/396
203/396
204/396
205/396
206/396
207/396
208/396
209/396
210/396
211/396
212/396
213/396
214/396
215/396
216/396
217/396
218/396
219/396							R-b																																																																												T-b	R-b
220/396																																																																																					R-b
221/396
222/396																																R-b																																																					R-b	T-b
223/396																																																																																							A-b
224/396
225/396
226/396																																																																																								R-b
227/396																																																																																									A-b
228/396
229/396																																																																																										R-b
230/396
231/396
232/396
233/396
234/396
235/396																																																																																													R-b
236/396																																																																								A-b																										A-b	A-b
237/396																																																																																																					R-b	A-b	R-b	A-b
238/396																																									A-b
239/396																								R-b
240/396																																																	R-b
241/396																																														R-b																																																																								R-b
242/396
243/396																																																																																																																							A-b	A-b
244/396																																																																																														R-b	A-b
245/396																																										R-b
246/396
247/396																																										R-b
248/396																								R-b																		R-b
249/396																																										R-b
250/396																																																																																																R-b
251/396
252/396
253/396																																																																																																	R-b
254/396
255/396																																																																								A-b	R-b
256/396																																																																								A-b	R-b
257/396																																																							R-b																																													R-b
258/396																																																																																												A-b
259/396																																																																																												A-b
260/396
261/396
262/396
263/396				R-b
264/396				R-b
265/396																																																																																																									R-b
266/396																																																																																																										A-b	R-b
267/396																																																																																																												R-b
268/396
269/396
270/396																																																																																																													R-b	R-b
271/396																																																																															R-b		R-b
272/396																																																																																																															A-b	R-b
273/396																																																																																																																	R-b
274/396																																																																																																																		R-b
275/396																																																																																																																			R-b
276/396																																																																																																																				R-b
277/396																																																																																																																					R-b
278/396																																																																																																																					R-b
279/396																				A-b
280/396																				A-b
281/396																				A-b
282/396																																																																																																																									R-b
283/396																																																																																																																														R-b
284/396																																																																																																																														R-b
285/396																																															R-b																																																																																										R-b	R-b	T-b
286/396																																															R-b		R-b																																																																																																		T-b
287/396																																																		T-b												R-b
288/396																																																																																																																																																				R-b	R-b
289/396					R-b																																																																																																																																																	R-b	R-b
290/396
291/396																																																																																																																										A-b
292/396							R-b																																																																																																																				A-b
293/396							R-b																																																																																																																					A-b
294/396							R-b																																																																																																																					A-b
295/396
296/396
297/396																																																																																																																													R-b
298/396
299/396
300/396																																																																																																																											A-b
301/396
302/396
303/396
304/396																																																																																																																													R-b
305/396																																																																																																																													R-b
306/396
307/396																																																																																																																															A-b
308/396																																																																																																																															A-b
309/396																																																																																																																															A-b
310/396																																																																																																																															A-b
311/396
312/396																																																													R-b
313/396																																																																																																																																R-b	R-b
314/396																																																																																																																																	R-b
315/396																																																																																																																																		R-b	R-b
316/396																																																																																																																																				R-b	R-b
317/396																																																																																																																																				R-b
318/396																					R-b
319/396																																																																																																																																						R-b
320/396																																																																																																																																							R-b	R-b
321/396																																																																																																																																												R-b
322/396																																																																																																																																													R-b
323/396																																																																																																																																														R-b	T-b
324/396																																																																																																																																																R-b
325/396																																																																																																																																																	R-b
326/396																																																																																																																																																	R-b
327/396																																																																																																																																																		R-b
328/396																																																																																																																																																	R-b
329/396																																																																																																																																																		R-b
330/396																																																																																																																																																								R-b
331/396																																																																																																																																																								R-b
332/396																																																																																																																																																								R-b
333/396																																																																																																																																																								R-b
334/396																																																																																																																																																								R-b
335/396																																																																																																																																																								R-b
336/396																																																																																																																																																								R-b
337/396																																																																																																																																																								R-b
338/396																																																																																																																																																								R-b
339/396																																																																																																																																																								R-b
340/396																																																																																																																																																								R-b
341/396
342/396
343/396																																																																																																																																																									R-b
344/396																																																																																																																																																									R-b
345/396																																																																																																																																																									R-b
346/396																																																																																																																																																									R-b
347/396																																																																																																																																																									R-b
348/396																																																																																																																																																									R-b
349/396																																																																																																																																																									R-b
350/396																																																																																																																																																									R-b
351/396																																																																																																																																																									R-b
352/396																																																																																																																																																									R-b
353/396																																																																								A-b
354/396
355/396																																																																							R-b	A-b																																																																																		R-b	R-b
356/396
357/396																																																																																																																																																												R-b
358/396
359/396																																																	R-b																																																																																																												R-b
360/396
361/396																																																																																																																																																														R-b
362/396																																																																																																																																																														R-b
363/396																																																																																																																																																														R-b
364/396																																																																																																																																																															R-b
365/396																																																																																																																																																																R-b
366/396																																																																																																																																																																	T-b	R-b
367/396																																																																																																																																																						R-b													R-b
368/396																																																																																																																																																						R-b	R-b
369/396																																																																																																																																																																				R-b
370/396																																																																																																																																																																					A-b
371/396																																																																								A-b	R-b
372/396																																																																																				A-b																																																		A-b																																A-b
373/396
374/396
375/396																																																																																																																																						R-b
376/396																																																																																																																																																																													R-b
377/396																																																																																																																																																																							T-b R-b
378/396																																																																																																																																																																							R-b
379/396																																																																																																																																																																								R-b	R-b	R-b	R-b
380/396																														R-b
381/396																														R-b
382/396																																																																																																																																																																												R-b
383/396																														R-b
384/396																																																																																																																																						R-b
385/396																																																																																																																																																																										R-b
386/396																																																													R-b
387/396																																																													R-b
388/396																																																																																																																																																																															R-b
389/396																																																																																																																																																																																R-b	T-b
390/396																														R-b																																																																																																																																																				R-b
391/396																														R-b
392/396
393/396
394/396																																																																																																																																																															R-b																				T-b
395/396																																																																																																																																																																														R-b
396/396

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 188 reviewers.

Read the v1 thread

Cover letter [PATCH 6.18 000/396] 6.18.44-rc1 review

This is the start of the stable review cycle for the 6.18.44 release. There are 396 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sun, 09 Aug 2026 14:33:46 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.44-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.18.44-rc1

Thomas Zimmermann <[email protected]>
drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info

Bart Van Assche <[email protected]>
drm/fb-helper: Fix a locking bug in an error path

Andrei Kuchynski <[email protected]>
usb: typec: ucsi: Correct teardown ordering in ucsi_init() error path

Oliver Hartkopp <[email protected]>
can: isotp: fix timer drain order, wakeup handling and tx_gen ordering

Oliver Hartkopp <[email protected]>
can: use skb hash instead of private variable in headroom

Zongyao Bai <[email protected]>
drm/xe/pt: Reset current_op in xe_pt_update_ops_init()

Oak Zeng <[email protected]>
drm/xe: Add page reclamation info to device info

Matthew Brost <[email protected]>
drm/xe: Stub out new pagefault layer

Matthew Brost <[email protected]>
drm/xe: Use SVM range helpers in PT layer

Jani Nikula <[email protected]>
drm/i915/vrr: require valid min/max vfreq for VRR

Ville Syrjälä <[email protected]>
drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable()

Matthew Brost <[email protected]>
drm/xe: Wait on external BO kernel fences in exec IOCTL

Thomas Hellström <[email protected]>
drm/exec: Remove the index parameter from drm_exec_for_each_locked_obj[_reverse]

Himal Prasad Ghimiray <[email protected]>
drm/xe/vm: Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC

Arvind Yadav <[email protected]>
drm/xe/vm: Prevent binding of purged buffer objects

Arvind Yadav <[email protected]>
drm/xe/bo: Add purgeable bo state tracking and field madv to xe_bo

Nitin Gote <[email protected]>
drm/xe: add xe_migrate_resolve wrapper and is_vram_resolve support

Xin Wang <[email protected]>
drm/xe/pat: Add helper to query compression enable status

Leo Li <[email protected]>
drm/amd/display: Exit idle optimizations before programming

Leo Li <[email protected]>
drm/amd/display: check GRPH_FLIP status before sending event

Tejas Upadhyay <[email protected]>
drm/xe/guc: Fix buffer overflow in steered register list allocation

Timur Kristóf <[email protected]>
drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr functions

Tvrtko Ursulin <[email protected]>
drm/amdgpu: Fix context pstate override handling

Thomas Zimmermann <[email protected]>
drm/tegra: fbdev: Remove offset into framebuffer memory

Thomas Zimmermann <[email protected]>
drm/fb-helper: Allocate and release fb_info in single place

Mike Rapoport (Microsoft) <[email protected]>
userfaultfd: prevent registration of special VMAs

Fan Wu <[email protected]>
wifi: brcmfmac: drain bus_reset work on device removal

Niklas Söderlund <[email protected]>
media: uapi: rkisp: Correct name version enum

Bryan O'Donoghue <[email protected]>
media: qcom: camss: Fix RDI streaming for CSID 340

Loic Poulain <[email protected]>
media: qcom: camss: csid-340: Fix unused variables

Jackson Lee <[email protected]>
media: chips-media: wave5: Support CBP profile

Andrei Kuchynski <[email protected]>
usb: typec: ucsi: Fix race condition and ordering in port unregistration

Sergey Senozhatsky <[email protected]>
usb: typec: ucsi: split connector lock classes

Chuck Lever <[email protected]>
net/handshake: Drain pending requests at net namespace exit

Chuck Lever <[email protected]>
net/handshake: Close the submit-side sock_hold race

Chuck Lever <[email protected]>
net/handshake: hand off the pinned file reference to accept_doit

Chuck Lever <[email protected]>
net/handshake: Take a long-lived file reference at submit

Wang Liang <[email protected]>
net/handshake: Fix null-ptr-deref in handshake_complete()

Christian Brauner <[email protected]>
net/handshake: convert handshake_nl_accept_doit() to FD_PREPARE()

Christian Brauner <[email protected]>
file: ensure cleanup

Christian Brauner <[email protected]>
file: add FD_{ADD,PREPARE}()

Kiryl Shutsemau (Meta) <[email protected]>
mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios

Kiryl Shutsemau (Meta) <[email protected]>
fs/proc/task_mmu: fix PAGEMAP_SCAN written state for unpopulated ptes

Kiryl Shutsemau (Meta) <[email protected]>
mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork()

Ashutosh Dixit <[email protected]>
drm/xe/rtp: Ensure locking/ref counting for OA whitelists

Ashutosh Dixit <[email protected]>
drm/xe/oa: (De-)whitelist OA registers on OA stream open/release

Ashutosh Dixit <[email protected]>
drm/xe/rtp: (De-)whitelist OA registers for all hwe's for a gt

Ashutosh Dixit <[email protected]>
drm/xe/rtp: Toggle 'deny' bit to (de-)whitelist OA regs

Ashutosh Dixit <[email protected]>
drm/xe/rtp: Save OA nonpriv registers to register save/restore lists

Ashutosh Dixit <[email protected]>
drm/xe/rtp: Generalize whitelist_apply_to_hwe

Ashutosh Dixit <[email protected]>
drm/xe/rtp: Keep track of non-OA nonpriv slots

Ashutosh Dixit <[email protected]>
drm/xe/rtp: Maintain OA whitelists separately

Ashutosh Dixit <[email protected]>
drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists

Ashutosh Dixit <[email protected]>
drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting

HyeongJun An <[email protected]>
HID: logitech-dj: Fix maxfield check in DJ short report validation

Jun Guo <[email protected]>
spi: spi-cadence: enable SPI_CONTROLLER_MUST_TX

Zack Rusin <[email protected]>
drm/vmwgfx: validate external BO copy bounds for both stride paths

Zack Rusin <[email protected]>
drm/vmwgfx: use check_add_overflow for shader size+offset bound

Zack Rusin <[email protected]>
drm/vmwgfx: enforce cursor size limits for MOB cursors

Zack Rusin <[email protected]>
drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure

Zack Rusin <[email protected]>
drm/vmwgfx: bound DMA command body size against suffix pointer

Zack Rusin <[email protected]>
drm/vmwgfx: validate DRAW_PRIMITIVES header size before division

Zack Rusin <[email protected]>
drm/vmwgfx: drop dma_buf reference on foreign-fd prime import

Zack Rusin <[email protected]>

    drm/vmwgfx: take fman->lock around fence list mutation in fifo_down

Zack Rusin <[email protected]>
drm/vmwgfx: clamp dirty-page range with min, not max

Zack Rusin <[email protected]>
drm/vmwgfx: reject DX_BIND_QUERY without a DX context

Zack Rusin <[email protected]>
drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size

William Palacek <[email protected]>
drm/amdkfd: hold event_mutex while checkpointing CRIU events

David Francis <[email protected]>
drm/amdkfd: Handle invalid event type in CRIU event restore

William Palacek <[email protected]>
drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment

Vladimir Marioukhine <[email protected]>
drm/amdkfd: fix QID bit leak in pqm_create_queue()

Gang Ba <[email protected]>
drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE

Jiri Slaby (SUSE) <[email protected]>
drm/amd/display: use proper context for logging

Ray Wu <[email protected]>
drm/amd/display: Increase HDMI AV mute wait from 2 to 3 frames

Yang Wang <[email protected]>
drm/amd/pm: fix torn gpu metrics reads

Harkirat Gill <[email protected]>
drm/amdgpu: cap GTT size to physical RAM on APUs

Candice Li <[email protected]>
drm/amdgpu: restore UMD profile pstate after runtime resume

Pierre-Eric Pelloux-Prayer <[email protected]>
drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini

Myeonghun Pak <[email protected]>
drm/mediatek: ovl_adaptor: balance component registrations

Osama Abdelkader <[email protected]>
drm/panthor: validate firmware interface structure sizes

Osama Abdelkader <[email protected]>
drm/panthor: reject firmware sections with oversized data

Laurent Pinchart <[email protected]>
drm/bridge: display-connector: Fix I2C adapter resource leak

Maíra Canal <[email protected]>
drm/vc4: Zero the tile state data array before each BIN job

Jose Maria Casanova Crespo <[email protected]>
drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size

Alexander Kaplan <[email protected]>
drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs

Avi Weiss <[email protected]>
can: ctucanfd: mark error-active controller status valid

Avi Weiss <[email protected]>
can: ctucanfd: handle bus error interrupts

Avi Weiss <[email protected]>
can: ctucanfd: unmap BAR0 using base address

Avi Weiss <[email protected]>
can: ctucanfd: use self-test mode for PRESUME_ACK

Pengpeng Hou <[email protected]>
can: ctucanfd: add missing MODULE_DEVICE_TABLE()

Pengpeng Hou <[email protected]>
can: peak_usb: validate uCAN receive record lengths

Maoyi Xie <[email protected]>
can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error

James Gao <[email protected]>
can: peak_usb: add bounds check for USB channel index

Pengpeng Hou <[email protected]>
can: softing: fw_parse(): validate firmware record spans

Pengpeng Hou <[email protected]>
can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents

Abdun Nihaal <[email protected]>
can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams()

Tetsuo Handa <[email protected]>
can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking

Oleksij Rempel <[email protected]>
can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer

Marc Kleine-Budde <[email protected]>
can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure

Guangshuo Li <[email protected]>
can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure

Pengpeng Hou <[email protected]>
can: ems_usb: validate CPC message lengths

Lucas Martins Alves <[email protected]>
can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured

Liem <[email protected]>
i2c: imx: Cancel hrtimer before clearing slave pointer

Liem <[email protected]>
i2c: imx: Fix slave registration race and error handling

Carlos Song <[email protected]>
i2c: imx: mark I2C adapter when hardware is powered down

Jonas Gorski <[email protected]>
i2c: iproc: reset bus after timeout if START_BUSY is stuck

H. Nikolaus Schaller <[email protected]>
i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock

Wenmeng Liu <[email protected]>
i2c: qcom-cci: drop custom suspend/resume and rely on runtime PM helpers

Linmao Li <[email protected]>
i2c: spacemit: request IRQ after controller initialization

Dawei Feng <[email protected]>
ice: fix memory leak in ice_lbtest_prepare_rings()

Dawid Osuchowski <[email protected]>
ice: fix VF interrupts cleanup

Aaron Ma <[email protected]>
ice: wait for reset completion in ice_resume()

Ilya Maximets <[email protected]>
net: openvswitch: fix skb leak on flow key update failure during ct

Ilya Maximets <[email protected]>
net: openvswitch: fix skb leak on flow key update failure during recirculation

Ilya Maximets <[email protected]>
net: openvswitch: fix potential UAF on meter attach failure

Nava kishore Manne <[email protected]>
phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB

Nava kishore Manne <[email protected]>
phy: zynqmp: use read-modify-write for SERDES scrambler bypass

Nava kishore Manne <[email protected]>
phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask

Holger Dengler <[email protected]>
s390/zcrypt: Validate length for CCA ECC private key requests

Holger Dengler <[email protected]>
s390/zcrypt: Validate length for CCA AES cipher key requests

Harald Freudenberger <[email protected]>
s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()

Harald Freudenberger <[email protected]>
s390/zcrypt: Fix buffer over-read in cca_cipher2protkey

Harald Freudenberger <[email protected]>
s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs

Stefan Haberland <[email protected]>
s390/dasd: Fix undersized format-check buffer

Jan Höppner <[email protected]>
s390/dasd: Fix potential NULL pointer dereference

Aswin Karuvally <[email protected]>
s390/qeth: Check CAP_NET_ADMIN for private ioctls

Niklas Schnelle <[email protected]>
s390/pci: Fix s390_pci_mmio_write syscall error return without MIO

Jianing Li <[email protected]>
power: supply: max17040: handle missing status supplier

Xu Rao <[email protected]>
power: supply: bq25890: fix the -10 C NTC lookup entry

Zhongqiu Han <[email protected]>
cpufreq: schedutil: Publish util hooks only after all sg_cpu are initialized

Abdun Nihaal <[email protected]>
cpufreq: powernow-k8: Fix possible memory leak in powernowk8_cpu_init()

Frank Sorenson <[email protected]>
cifs: add fscache_resize_cookie() to cifs_setsize()

Junjie Cao <[email protected]>
gpio: pch: use raw_spinlock_t for the register lock

bui duc phuc <[email protected]>
gpio: pca953x: fix cache_only and IRQ state on restore_context() failure

Myeonghun Pak <[email protected]>
i2c: amd-mp2: Unregister callback on adapter add failure

Vincent Jardin <[email protected]>
hwmon: (pmbus/core) notify on the hwmon device, not the i2c client

Hongyan Xu <[email protected]>
hwmon: (npcm750-pwm-fan): stop fan timer on device detach

Asim Viladi Oglu Manizada <[email protected]>
sctp: prevent peer transport count overflow

Yuxiang Yang <[email protected]>
sctp: reject stale cookies with mismatched verification tags

Ibrahim Hashimov <[email protected]>
scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write

Chris Gellermann <[email protected]>
selftests/clone3: fix wild pointer access of getline due to missing init

Chris Gellermann <[email protected]>
selftests/mm: fix potential wild pointer access of getline due to missing init

Vijaya Krishna Nivarthi <[email protected]>
spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure

Stanislaw Pal <[email protected]>
spi: spi-qpic-snand: write the feature value before executing SET_FEATURE

Masami Hiramatsu (Google) <[email protected]>
tracing/filters: Fix false positive match in regex_match_full()

Masami Hiramatsu (Google) <[email protected]>
tracing: Check return value of __register_event() in trace_module_add_events()

Ming Lei <[email protected]>
ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev()

Eric Dumazet <[email protected]>
vxlan: use pskb_network_may_pull() in route_shortcircuit()

Eric Dumazet <[email protected]>
vxlan: use pskb_network_may_pull() for transmit path header pulls

Eric Dumazet <[email protected]>
vxlan: use neigh_ha_snapshot() in route_shortcircuit()

Eric Dumazet <[email protected]>
vxlan: unclone skb head before modifying eth header in route_shortcircuit()

Eric Dumazet <[email protected]>
vxlan: re-fetch eth header after route_shortcircuit()

Matt Fleming <[email protected]>
veth: convert frag_list skbs before running XDP

Breno Leitao <[email protected]>
uprobes: Fix NULL pointer dereference in hprobe_expire()

Michael Bommarito <[email protected]>
um: vector: fix use-after-free in vector_mmsg_rx()

Thorsten Blum <[email protected]>
powerpc/ps3: Fix map failure path in dma_ioc0_map_pages()

Chengfeng Ye <[email protected]>
net: pktgen: fix proc entry use-after-free

Zhiling Zou <[email protected]>
net: ipv6: clear suppressed fib6 rule result

Zhiling Zou <[email protected]>
net: bridge: stop fast-leave after deleting a port group

Breno Leitao <[email protected]>
mm: memcg: initialize *locked in memcg1_oom_prepare() stub

Link Lin <[email protected]>
mm/page_reporting: use system_freezable_wq to fix UAF during suspend

Jens Axboe <[email protected]>
io_uring/net: initialize mshot_len for send

Christian Brauner <[email protected]>
binfmt_misc: don't let an 'F' entry pin its own instance

Christian Brauner <[email protected]>
binfmt_misc: reject a flag character as the field delimiter

Christian Brauner <[email protected]>
binfmt_misc: use exe_file_deny_write_access() for the interpreter clone

Christian Brauner <[email protected]>
binfmt_misc: restore write access when removing an entry

Zhao Li <[email protected]>
wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames

Zihan Xi <[email protected]>
tipc: avoid use-after-free in poll trace queue dumps

Carlo Caione <[email protected]>
of/address: Fix NULL bus dereference in of_pci_range_parser_one()

David Lee <[email protected]>
netfilter: ipset: do not update comments from kernel-side hash adds

Xuanqiang Luo <[email protected]>
net/smc: fix socket use-after-free during link group termination

Wei Liu <[email protected]>
mshv: fix hv_input_get_system_property struct

Namjae Jeon <[email protected]>
ksmbd: reject repeated SMB2 NEGOTIATE requests

Zhiling Zou <[email protected]>
ipvs: do not propagate one-packet flag to synced conns

David Carlier <[email protected]>
igc: remove napi_synchronize() in igc_down()

Matt Vollrath <[email protected]>
igbvf: Fix leak in TX DMA error cleanup

Dawei Feng <[email protected]>

    e1000: fix memory leak in e1000_probe()

Md Sadre Alam <[email protected]>
dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+

Sonali Pradhan <[email protected]>
ALSA: usb-audio: Clamp frame size in implicit-feedback mode

Sonali Pradhan <[email protected]>
ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set

Baul Lee <[email protected]>
ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output()

Baul Lee <[email protected]>
ALSA: usb-audio: fix stack info leak in RME Digiface status

Baul Lee <[email protected]>
ALSA: usb-audio: fix use-after-free in ump_to_endpoint()

Niklas Cassel <[email protected]>
ata: libata-sata: fix ata_scsi_lpm_supported() iteration

Matt Vollrath <[email protected]>
ata: libata-eh: Increase STANDBY IMMEDIATE timeout

Haidar Lee <[email protected]>
ASoC: tas2562: fix broken entries in the volume lookup table

Haidar Lee <[email protected]>
ASoC: tas2562: fix DVC coefficient write order

Shengjiu Wang <[email protected]>
ASoC: fsl_easrc: fix m2m_init error path to use goto instead of bare return

Shengjiu Wang <[email protected]>
ASoC: fsl_asrc: fix m2m_init error path to use goto instead of bare return

Baul Lee <[email protected]>
ALSA: ump: fix double free of out_cvts on rawmidi error

Norbert Szetei <[email protected]>
ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes

Norbert Szetei <[email protected]>
ALSA: seq: Fix division by zero in initialize_timer()

Norbert Szetei <[email protected]>
ALSA: pcm: wake linked drain waiters on unlink

Xu Rao <[email protected]>
ALSA: lx6464es: fix period byte count for 16-bit streams

Eckhart Mohr <[email protected]>
ALSA: hda/realtek: Add quirk for TongFang X6SP45xU

Takashi Iwai <[email protected]>
ALSA: 6fire: Fix UAF at error handling during probe

David Howells <[email protected]>
afs: Fix UAF when sending a message

David Howells <[email protected]>
afs: Fix afs_fs_fetch_data() to subtract transferred from len

David Howells <[email protected]>

    afs: Fix afs_fs_fetch_data() to set call->async

Xuanqiang Luo <[email protected]>
bpf: lwt: Fix dst reference leak on reroute failure

Sangho Lee <[email protected]>
Bluetooth: HIDP: validate numbered report payloads

Sangho Lee <[email protected]>
Bluetooth: HIDP: reject frames without a transaction header

Chengfeng Ye <[email protected]>
Bluetooth: hci_sync: Fix advertising data UAFs

Zihan Xi <[email protected]>
Bluetooth: mgmt: fix UAF in pair command cancellation

Aldo Ariel Panzardo <[email protected]>
Bluetooth: SCO: give the socket its own sco_conn reference

Zihan Xi <[email protected]>
Bluetooth: mgmt: fix pending command UAF in EIR updates

Greg Kroah-Hartman <[email protected]>
Bluetooth: btmtk: Fix short read errors in btmtk_usb_uhw_reg_read()

Greg Kroah-Hartman <[email protected]>
Bluetooth: btusb: Fix short read errors in btusb_qca_send_vendor_req()

Luxiao Xu <[email protected]>
audit: fix potential use-after-free in audit_del_rule()

Zhan Xusheng <[email protected]>
audit: fix potential integer overflow in audit_log_n_string()

Charles Vosburgh <[email protected]>
sctp: validate Adaptation Indication parameter length

Hidayath Khan <[email protected]>
dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister

Farhan Ali <[email protected]>
KVM: s390: pci: Validate AIBV and AISB before pinning guest pages

Farhan Ali <[email protected]>
KVM: s390: pci: Fix NULL dereference on AIBV allocation failure

Farhan Ali <[email protected]>
KVM: s390: pci: Fix missing error codes and memory unaccounting

Farhan Ali <[email protected]>
KVM: s390: pci: Fix memory accounting for pinned/unpinned pages

Farhan Ali <[email protected]>
KVM: s390: pci: Reject adapter interrupt forwarding if already enabled

Sean Christopherson <[email protected]>
KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active

Paolo Bonzini <[email protected]>
KVM: VMX: add memory clobber to asm for VMX instructions

Raushan Patel <[email protected]>
tracing/fprobe: Roll back on enable_trace_fprobe() failure

Raushan Patel <[email protected]>
tracing/probes: Reject $arg0 in meta argument expansion

Gregory Price <[email protected]>
mm/vmstat: fold stranded per-cpu node stats when a node comes online

Xiangfeng Cai <[email protected]>
mm/hugetlb: fix list corruption in allocate_file_region_entries()

Zi Yan <[email protected]>
mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk()

Kiryl Shutsemau (Meta) <[email protected]>
fs/proc/task_mmu: fix PAGEMAP_SCAN written state for PMD holes

Jori Koolstra <[email protected]>
selftest: fix headers in fclog.c

Aboorva Devarajan <[email protected]>
mm/util: don't read __page_2 for order-1 folios in snapshot_page()

Kefeng Wang <[email protected]>
mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE

Nathan Chancellor <[email protected]>
fortify: Disable -Wstringop-overread in tests

Benjamin Boortz <[email protected]>
pinctrl: bm1880: add missing select GENERIC_PINCONF

Michael Bommarito <[email protected]>
erofs: cap LZMA stream pool size

Karl Mehltretter <[email protected]>
pinctrl: devicetree: don't free uninitialized dev_name on error path

Benjamin Boortz <[email protected]>
pinctrl: microchip-sgpio: add missing select REGMAP_MMIO

Peiyang He <[email protected]>
iommu/iommufd: Fix IOPF group ownership UAF

Peiyang He <[email protected]>
iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace

Nicolin Chen <[email protected]>
iommufd/viommu: Publish a vDEVICE only after vdevice_init() succeeds

Nicolin Chen <[email protected]>
iommufd/viommu: Release the igroup lock on the vdevice_size error path

Stanislav Kinsburskii <[email protected]>
mshv: Order pt_vp_array publish against irqfd assertion path

Stanislav Kinsburskii <[email protected]>
mshv: Fix level-triggered check on uninitialized data

Jinank Jain <[email protected]>
mshv: adjust interrupt control structure for ARM64

Stanislav Kinsburskii <[email protected]>
mshv: Fix race in mshv_irqfd_deassign

Christoph Hellwig <[email protected]>
iomap: add a separate bio_set for iomap_split_ioend

Namjae Jeon <[email protected]>
ksmbd: fix use-after-free in __close_file_table_ids()

Namjae Jeon <[email protected]>
ksmbd: return success for deferred final close

Jerome Tollet <[email protected]>
drm/i915/hdmi: Poll for 200 msec for TMDS_Scrambler_Status

Denis V. Lunev <[email protected]>
qede: sync udp_tunnel ports outside qede_lock in the recovery path

Haibo Chen <[email protected]>
spi: spi-nxp-fspi: add per-SoC SDR/DTR clock rate limits for all supported SoCs

Gabriele Monaco <[email protected]>
sched/deadline: Use revised wakeup rule only for running dl_server

Suman Ghosh <[email protected]>
octeontx2-pf: Set correct sequence for carrier off and tx queue stop

Jiawen Wu <[email protected]>
net: libwx: fix FDIR ATR queue mismatch for software VLAN packets

Wei Fang <[email protected]>
ptp: netc: fix potential interrupt storm caused by incorrect unbind order

Daniel Golle <[email protected]>
net: dsa: mt7530: error out on failed reads in MT7531 PHY polling

Daniel Golle <[email protected]>

    net: dsa: mt7530: check bus->read() errors in the MDIO regmap backend

Karl Mehltretter <[email protected]>
riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove

Muhammad Bilal <[email protected]>
accel/qaic: use sizeof(*trans_hdr) for transaction length check

Anirudh Srinivasan <[email protected]>
riscv: drop __init from vec_check_unaligned_access_speed_all_cpus

Masami Hiramatsu (Google) <[email protected]>
tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions

Masami Hiramatsu (Google) <[email protected]>
tracing/mmiotrace: Reset dropped_count in mmio_reset_data()

Masami Hiramatsu (Google) <[email protected]>
fprobe: Fix module reference count leak on error in register_fprobe()

Alexander Kaplan <[email protected]>
drm/i915/dp: Ignore the sink's DSC max FRL rate without a PCON DSC encoder

Minhong He <[email protected]>
can: isotp: check register_netdevice_notifier() error in module init

Chenguang Zhao <[email protected]>
net: sxgbe: check descriptor ring allocation failures

Chenguang Zhao <[email protected]>
net: sxgbe: free TX rings on RX allocation failure

Leon Romanovsky <[email protected]>
scsi: target: Clear cmd_cnt when initial counter enrollment fails

Benjamin Block <[email protected]>
scsi: zfcp: Fix memory leak during adapter release by destroying gid_pn_req

Bart Van Assche <[email protected]>
scsi: ufs: core: Revert "Delegate the interrupt service routine to a threaded IRQ handler"

Peter Wang <[email protected]>
scsi: ufs: core: Avoid IRQ thread wakeup during active UIC command

Guangshuo Li <[email protected]>
scsi: ufs: core: Cancel RTC work in active-active suspend

TanZheng <[email protected]>
scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE

Christian Marangi <[email protected]>
net: phylink: put link_gpio if phylink_create fails

Mauricio Faria de Oliveira <[email protected]>
x86/boot: Add volatile, clobbers and zero-length test in memcmp()

Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync

Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: fix hci_conn_del() use in hci_le_create_conn_sync

Pauli Virtanen <[email protected]>
Bluetooth: hci_conn: hold conn reference in abort_conn_sync()

Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists

Zijun Hu <[email protected]>
Bluetooth: btintel: Validate length before parsing diagnostics TLV

Pauli Virtanen <[email protected]>
Bluetooth: ISO: fix refcounting of iso_conn

Pauli Virtanen <[email protected]>
Bluetooth: ISO: ensure no dangling hcon references in iso_conn

Pauli Virtanen <[email protected]>
Bluetooth: ISO: avoid deadlocks in iso_sock_timeout

Pauli Virtanen <[email protected]>
Bluetooth: ISO: fix leaking sk after socket release

Pauli Virtanen <[email protected]>
Bluetooth: ISO: hold sk properly in iso_conn_ready

Pauli Virtanen <[email protected]>

    Bluetooth: ISO: fix CONNECTED -> CLOSED transition on shutdown/release

Luiz Augusto von Dentz <[email protected]>
Bluetooth: ISO: Fix not updating BIS sender source address

Pauli Virtanen <[email protected]>
Bluetooth: ISO: validate sockaddr_iso first in iso_sock_rebind_bis()

Pauli Virtanen <[email protected]>
Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos

Pauli Virtanen <[email protected]>
Bluetooth: ISO: lock sk in iso_connect_ind

SeungJu Cheon <[email protected]>
Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths

Luiz Augusto von Dentz <[email protected]>
Bluetooth: HCI: Add initial support for PAST

Pauli Virtanen <[email protected]>
Bluetooth: ISO: lock sk in iso_sock_getname

Jiale Yao <[email protected]>
Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp

Pauli Virtanen <[email protected]>
Bluetooth: ISO: clear iso_data always when detaching conn from hcon

Przemyslaw Korba <[email protected]>
ice: suppress DPLL errors during reset recovery

Yuho Choi <[email protected]>
idpf: Fix mailbox IRQ name leak on request failure

Joshua Hay <[email protected]>
idpf: adjust TxQ ring count minimum

Guenter Roeck <[email protected]>
hwmon: (pmbus) Fix return value from pmbus_update_byte_data()

Chenguang Zhao <[email protected]>
net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller

Yichong Chen <[email protected]>
netfs: release readahead folios on iterator preparation failure

Yichong Chen <[email protected]>
netfs: handle single writeback rolling buffer allocation failure

Yichong Chen <[email protected]>
netfs: clear PG_private_2 on copy-to-cache append failure

Zhao Li <[email protected]>
wifi: mac80211: validate individual TWT params before driver setup

Eric Dumazet <[email protected]>
net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()

Thorsten Blum <[email protected]>
powerpc/boot: Fix treeboot-akebono CPU node lookup check

Thorsten Blum <[email protected]>
powerpc/boot: Fix treeboot-currituck CPU node lookup check

Thorsten Blum <[email protected]>
powerpc/boot: Fix simpleboot CPU node lookup check

Yun Lu <[email protected]>
rtase: fix double free of multi-frag skb on DMA map failure

Luiz Angelo Daros de Luca <[email protected]>
hwmon: (adt7470) Fix PWM auto temp state array and bounds check

Luiz Angelo Daros de Luca <[email protected]>
hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read

Luiz Angelo Daros de Luca <[email protected]>
hwmon: (adt7470) Use cached PWM frequency value

Luiz Angelo Daros de Luca <[email protected]>
hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks

Luiz Angelo Daros de Luca <[email protected]>
hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read()

Luiz Angelo Daros de Luca <[email protected]>
hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread

Luiz Angelo Daros de Luca <[email protected]>
hwmon: (adt7470) Fix cache updated before hardware write on I2C error

Luiz Angelo Daros de Luca <[email protected]>
hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors

Chenguang Zhao <[email protected]>
forcedeth: fix UAF of txrx_stats in nv_remove

David Corvaglia <[email protected]>
net: bridge: mrp: fix Option TLV length in MRP_Test frames

Guenter Roeck <[email protected]>
hwmon: (nct6775-core) Prevent access to unsupported weight registers

Eric Dumazet <[email protected]>
net: do not send ICMP/NDISC Redirects when peer allocation fails

Guenter Roeck <[email protected]>
hwmon: (nzxt-smart2) DMA-align output buffer

Guenter Roeck <[email protected]>
hwmon: (lm90) Only report alarms if driver is ready

Guenter Roeck <[email protected]>
hwmon: (sht3x) Fix unaligned accesses

Guenter Roeck <[email protected]>
hwmon: (ltc4282) Fix reading the minimum alarm voltage

Guenter Roeck <[email protected]>
hwmon: (ina2xx) Fix various overflow issues

Jonas Rebmann <[email protected]>
hwmon: (ina2xx) Shift INA234 shunt and current registers

Ian Ray <[email protected]>
hwmon: (ina2xx) Add support for INA234

Ian Ray <[email protected]>
hwmon: (ina2xx) Make it easier to add more devices

Guenter Roeck <[email protected]>
hwmon: (nct6775-core) Fix number of temperature registers for NCT6116

Srikanth Boyapally <[email protected]>
spi: spi-cadence: Move TX FIFO full busy-wait into FIFO

Jun Guo <[email protected]>
spi: spi-cadence: supports transmission with bits_per_word of 16 and 32

wangdicheng <[email protected]>
ASoC: tas2781: Use correct calibration data for SINEGAIN2 register

Dawei Feng <[email protected]>
smb: client: fix buffer leaks in SMB1 read and write

Xingui Yang <[email protected]>
scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race

HyeongJun An <[email protected]>
scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer

HyeongJun An <[email protected]>
scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer

Mario Limonciello <[email protected]>
pinctrl-amd: Don't clear S4 wake bits at probe

Jason Xing <[email protected]>
xsk: drain continuation descs after overflow in xsk_build_skb()

Jason Xing <[email protected]>
xsk: use a smaller new lock for shared pool case

Jason Xing <[email protected]>
xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx

John Ericson <[email protected]>
selftests/net/af_unix: test listen() rejects wrong socket states

Kuniyuki Iwashima <[email protected]>
selftest: af_unix: Create its own .gitignore.

Sunday Adelodun <[email protected]>
selftests: af_unix: Add tests for ECONNRESET and EOF semantics

John Ericson <[email protected]>
af_unix: fix listen() succeeding on sockets in the wrong state

Xiang Mei <[email protected]>
rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check()

Ilia Gavrilov <[email protected]>
rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled

Charles Keepax <[email protected]>
ASoC: SDCA: Ensure that Control Range is large enough for header

Xiang Mei (Microsoft) <[email protected]>
netfilter: nft_payload: fix mask build for partial field offload

Julian Anastasov <[email protected]>
ipvs: do not mangle ICMP replies for non-first fragments

Julian Anastasov <[email protected]>
ipvs: fix places with wrong packet offsets

Julian Anastasov <[email protected]>
ipvs: fix the checksum validations

Pablo Neira Ayuso <[email protected]>
netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH

Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: make nft_object rhltable per table

Michael Bommarito <[email protected]>
assoc_array: trim the final shortcut word using the current chunk end

Michael Bommarito <[email protected]>
keys: make keyring key-chunk byte order agree with keyring_diff_objects()

Michael Bommarito <[email protected]>
keys: fix out-of-bounds read in keyring_get_key_chunk()

Fabrice Derepas <[email protected]>
KEYS: trusted: dcp: fix key_len validation and calc_blob_len() return type

Alexandru Elisei <[email protected]>
KVM: arm64: Reject guest_memfd memslots when the VM has MTE

Stanislav Kinsburskii <[email protected]>
mshv: Fix sleeping under spinlock in mshv_portid_alloc

Stanislav Kinsburskii <[email protected]>
mshv: Fix duplicate GSI detection for GSI 0

Sebastian Andrzej Siewior <[email protected]>
Drivers: hv: vmbus: Replace lockdep_hardirq_threaded() with lockdep annotation

Roman Kisel <[email protected]>
Drivers: hv: Allocate the paravisor SynIC pages when required

Roman Kisel <[email protected]>
Drivers: hv: Rename fields for SynIC message and event pages

Roman Kisel <[email protected]>
arch/x86: mshyperv: Discover Confidential VMBus availability

Ruoyu Wang <[email protected]>
drm/mediatek: Check CRTC state before freeing

Xiang Mei <[email protected]>
netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp()

Radhey Shyam Pandey <[email protected]>
phy: zynqmp: fix runtime PM leak on probe allocation failure

Radhey Shyam Pandey <[email protected]>
phy: zynqmp: fix clock error handling in xpsgtr_phy_init()

Qu Wenruo <[email protected]>
btrfs: raid56: fix an incorrect csum skip during scrub

Johannes Thumshirn <[email protected]>
btrfs: zoned: reset meta_write_pointer on zone reset

Johannes Thumshirn <[email protected]>
btrfs: zoned: fix deadlock between metadata writeback and transaction commit

Qu Wenruo <[email protected]>
btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag

Sang-Heon Jeon <[email protected]>
of: reserved_mem: prevent OOB when too many dynamic regions are defined

Uday Khare <[email protected]>
ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup

Uday Khare <[email protected]>
ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup

Krishna Kurapati <[email protected]>
phy: qcom: m31-eusb2: Fix return value of init call

Radhey Shyam Pandey <[email protected]>
ata: ahci_ceva: fix error paths in ceva_ahci_platform_enable_resources()

Rosen Penev <[email protected]>
ata: sata_mv: accept 1 or 2 resources in platform probe

Kuan-Ying Lee <[email protected]>
selftests/seccomp: Fix pointer type mismatch build error

Haofeng Li <[email protected]>
selftests/lkdtm: rename STACKLEAK_ERASING to KSTACK_ERASE

Abdun Nihaal <[email protected]>
gpio: sloppy-logic-analyzer: Fix memory leak in gpio_la_poll_probe()

Nicolin Chen <[email protected]>
iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE

Yuho Choi <[email protected]>
dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()

Hongling Zeng <[email protected]>
dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA

Konrad Dybcio <[email protected]>

    pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151

Sneh Mankad <[email protected]>
pinctrl: qcom: Unconditionally mark gpio as wakeup enable

Michael Bommarito <[email protected]>
thunderbolt: Prevent XDomain delayed work use-after-free on disconnect

Harry Yoo (Oracle) <[email protected]>
mm/slab: prevent unbounded recursion in free path with new kmalloc type

Harry Yoo (Oracle) <[email protected]>
lib/alloc_tag: introduce mem_alloc_profiling_permanently_disabled()

Benjamin Tissoires <[email protected]>
HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report

Lee Jones <[email protected]>
HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write

Lee Jones <[email protected]>
HID: logitech-dj: Standardise hid_report_enum variable nomenclature

Fabian Lippold <[email protected]>
ALSA: hda/realtek: add quirk for HP Dragonfly Folio G3 2-in-1

Honglei Huang <[email protected]>
drm/gpusvm: publish dpagemap early to avoid device mapping leak on error

Yehyeong Lee <[email protected]>
net: mpls: initialize rtm_tos in mpls_getroute()

Lorenzo Bianconi <[email protected]>
netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge()

David Gow <[email protected]>
kunit: tool: Terminate kernel under test on SIGINT

Shuvam Pandey <[email protected]>
kunit: tool: skip stty when stdin is not a tty

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: restore helper propagation via expectation

-------------

Diffstat:

 Documentation/hwmon/ina2xx.rst                     |  25 +-
 Documentation/virt/kvm/api.rst                     |   6 +
 Makefile                                           |   4 +-
 arch/arm64/kvm/arm.c                               |  25 +-
 arch/arm64/kvm/mmu.c                               |   4 +
 arch/powerpc/boot/simpleboot.c                     |   2 +-
 arch/powerpc/boot/treeboot-akebono.c               |   2 +-
 arch/powerpc/boot/treeboot-currituck.c             |   2 +-
 arch/powerpc/platforms/ps3/mm.c                    |   1 +
 arch/riscv/kernel/unaligned_access_speed.c         |   4 +-
 arch/riscv/mm/init.c                               |   4 +-
 arch/s390/kvm/pci.c                                |  78 ++++-
 arch/s390/kvm/pci.h                                |   2 +
 arch/s390/pci/pci_mmio.c                           |   1 +
 arch/um/drivers/vector_kern.c                      |   3 +
 arch/x86/boot/string.c                             |  11 +-
 arch/x86/kernel/cpu/mshyperv.c                     |  28 +-
 arch/x86/kvm/svm/avic.c                            |   8 -
 arch/x86/kvm/vmx/vmx_ops.h                         |   8 +-
 drivers/accel/qaic/qaic_control.c                  |   2 +-
 drivers/ata/ahci_ceva.c                            |  18 +-
 drivers/ata/libata-eh.c                            |   8 +
 drivers/ata/libata-sata.c                          |   2 +-
 drivers/ata/sata_mv.c                              |   2 +-
 drivers/block/ublk_drv.c                           |   9 +
 drivers/bluetooth/btintel.c                        |   3 +
 drivers/bluetooth/btmtk.c                          |  50 ++-
 drivers/bluetooth/btusb.c                          |  30 +-
 drivers/cpufreq/powernow-k8.c                      |   1 +
 drivers/dibs/dibs_loopback.c                       |  47 +--
 drivers/dma/idxd/cdev.c                            |   4 +-
 drivers/dma/sun6i-dma.c                            |  11 +-
 drivers/gpio/gpio-pca953x.c                        |  15 +-
 drivers/gpio/gpio-pch.c                            |  28 +-
 drivers/gpio/gpio-sloppy-logic-analyzer.c          |  10 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c             |  39 ++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c            |  73 +++--
 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c            |  15 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_eviction_fence.c |   3 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c        |  30 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |  12 +
 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c           |  10 +-
 drivers/gpu/drm/amd/amdkfd/kfd_events.c            |  23 +-
 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c |   2 +-
 drivers/gpu/drm/amd/amdkfd/kfd_queue.c             |   2 +-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  | 243 +++++++++++----
 drivers/gpu/drm/amd/display/dc/core/dc.c           |  45 +++
 drivers/gpu/drm/amd/display/dc/dc.h                |   1 +
 .../gpu/drm/amd/display/dc/dce/dce_clock_source.c  |  20 +-
 .../drm/amd/display/dc/hwss/dcn30/dcn30_hwseq.c    |  16 +-
 drivers/gpu/drm/amd/pm/amdgpu_dpm.c                |  12 +-
 drivers/gpu/drm/amd/pm/amdgpu_pm.c                 |   8 +-
 drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h            |   3 +-
 drivers/gpu/drm/armada/armada_fbdev.c              |  12 +-
 drivers/gpu/drm/bridge/display-connector.c         |  11 +-
 drivers/gpu/drm/display/drm_dp_helper.c            |  12 +
 drivers/gpu/drm/drm_exec.c                         |   6 +-
 drivers/gpu/drm/drm_fb_helper.c                    |  41 +--
 drivers/gpu/drm/drm_fbdev_dma.c                    |  12 +-
 drivers/gpu/drm/drm_fbdev_shmem.c                  |  12 +-
 drivers/gpu/drm/drm_fbdev_ttm.c                    |  12 +-
 drivers/gpu/drm/drm_gpusvm.c                       |  12 +-
 drivers/gpu/drm/drm_gpuvm.c                        |   3 +-
 drivers/gpu/drm/exynos/exynos_drm_fbdev.c          |   9 +-
 drivers/gpu/drm/gma500/fbdev.c                     |  12 +-
 drivers/gpu/drm/i915/display/intel_ddi.c           |   2 +
 drivers/gpu/drm/i915/display/intel_dp.c            |   9 +-
 drivers/gpu/drm/i915/display/intel_fbdev.c         |   9 +-
 drivers/gpu/drm/i915/display/intel_hdmi.c          |  26 ++
 drivers/gpu/drm/i915/display/intel_hdmi.h          |   2 +
 drivers/gpu/drm/i915/display/intel_vrr.c           |  10 +-
 drivers/gpu/drm/mediatek/mtk_crtc.c                |   6 +-
 drivers/gpu/drm/mediatek/mtk_disp_ovl_adaptor.c    |   7 +-
 drivers/gpu/drm/msm/msm_fbdev.c                    |   9 +-
 drivers/gpu/drm/omapdrm/omap_fbdev.c               |   9 +-
 drivers/gpu/drm/panthor/panthor_fw.c               |  47 ++-
 drivers/gpu/drm/radeon/radeon_fbdev.c              |  13 +-
 drivers/gpu/drm/tegra/fbdev.c                      |  18 +-
 drivers/gpu/drm/vc4/vc4_irq.c                      |   2 +-
 drivers/gpu/drm/vc4/vc4_validate.c                 |  29 +-
 drivers/gpu/drm/vmwgfx/ttm_object.c                |   7 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_blit.c               |  39 ++-
 drivers/gpu/drm/vmwgfx/vmwgfx_cursor_plane.c       |  49 ++-
 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c            |  20 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_fence.c              |  13 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c         |   4 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_resource.c           |   4 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_shader.c             |  13 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_vkms.c               |  17 +-
 drivers/gpu/drm/xe/Makefile                        |   1 +
 drivers/gpu/drm/xe/xe_bo.h                         |  56 ++++
 drivers/gpu/drm/xe/xe_bo_types.h                   |   6 +
 drivers/gpu/drm/xe/xe_device_types.h               |   2 +
 drivers/gpu/drm/xe/xe_exec.c                       |  22 +-
 drivers/gpu/drm/xe/xe_gt_debugfs.c                 |   4 +-
 drivers/gpu/drm/xe/xe_guc_capture.c                |  11 +-
 drivers/gpu/drm/xe/xe_hw_engine.c                  |   2 +
 drivers/gpu/drm/xe/xe_hw_engine_types.h            |   8 +
 drivers/gpu/drm/xe/xe_migrate.c                    |  90 ++++--
 drivers/gpu/drm/xe/xe_migrate.h                    |   4 +
 drivers/gpu/drm/xe/xe_oa.c                         |   7 +
 drivers/gpu/drm/xe/xe_oa_types.h                   |   3 +
 drivers/gpu/drm/xe/xe_pagefault.c                  |  65 ++++
 drivers/gpu/drm/xe/xe_pagefault.h                  |  19 ++
 drivers/gpu/drm/xe/xe_pagefault_types.h            | 136 +++++++++
 drivers/gpu/drm/xe/xe_pat.c                        |   6 +
 drivers/gpu/drm/xe/xe_pat.h                        |  10 +
 drivers/gpu/drm/xe/xe_pci.c                        |   1 +
 drivers/gpu/drm/xe/xe_pci_types.h                  |   1 +
 drivers/gpu/drm/xe/xe_pt.c                         |  31 +-
 drivers/gpu/drm/xe/xe_reg_whitelist.c              | 119 ++++++--
 drivers/gpu/drm/xe/xe_reg_whitelist.h              |   4 +
 drivers/gpu/drm/xe/xe_vm.c                         | 107 +++++--
 drivers/hid/hid-logitech-dj.c                      |  28 +-
 drivers/hv/channel_mgmt.c                          |   6 +-
 drivers/hv/hv.c                                    | 206 +++++++------
 drivers/hv/hyperv_vmbus.h                          |  22 +-
 drivers/hv/mshv_eventfd.c                          |  43 ++-
 drivers/hv/mshv_irq.c                              |   6 +-
 drivers/hv/mshv_portid_table.c                     |   6 +-
 drivers/hv/mshv_root.h                             |   2 +-
 drivers/hv/mshv_root_hv_call.c                     |   6 +
 drivers/hv/mshv_root_main.c                        |   8 +-
 drivers/hv/mshv_synic.c                            |   6 +-
 drivers/hv/vmbus_drv.c                             |  19 +-
 drivers/hwmon/Kconfig                              |   2 +-
 drivers/hwmon/adt7470.c                            | 131 +++++---
 drivers/hwmon/ina2xx.c                             | 107 +++++--
 drivers/hwmon/lm90.c                               |   4 +-
 drivers/hwmon/ltc4282.c                            |   4 +-
 drivers/hwmon/nct6775-core.c                       |  20 +-
 drivers/hwmon/npcm750-pwm-fan.c                    |  11 +
 drivers/hwmon/nzxt-smart2.c                        |   2 +-
 drivers/hwmon/pmbus/pmbus_core.c                   |   7 +-
 drivers/hwmon/sht3x.c                              |   9 +-
 drivers/i2c/busses/i2c-amd-mp2-plat.c              |   4 +-
 drivers/i2c/busses/i2c-bcm-iproc.c                 |  11 +
 drivers/i2c/busses/i2c-imx.c                       |  54 +++-
 drivers/i2c/busses/i2c-jz4780.c                    |   5 +-
 drivers/i2c/busses/i2c-k1.c                        |  10 +-
 drivers/i2c/busses/i2c-qcom-cci.c                  |  18 +-
 .../iommu/arm/arm-smmu-v3/arm-smmu-v3-iommufd.c    |  15 +
 drivers/iommu/io-pgfault.c                         |  24 +-
 drivers/iommu/iommufd/device.c                     |   2 +-
 drivers/iommu/iommufd/eventq.c                     |   2 +
 drivers/iommu/iommufd/viommu.c                     |  22 +-
 .../media/platform/chips-media/wave5/wave5-hw.c    |   3 +
 .../platform/chips-media/wave5/wave5-vpu-enc.c     |   5 +-
 .../platform/chips-media/wave5/wave5-vpuapi.h      |   1 +
 drivers/media/platform/qcom/camss/camss-csid-340.c |  28 +-
 drivers/net/can/c_can/c_can_main.c                 |   8 +-
 drivers/net/can/ctucanfd/ctucanfd_base.c           |  14 +-
 drivers/net/can/ctucanfd/ctucanfd_pci.c            |   3 +-
 drivers/net/can/dev/skb.c                          |   2 -
 drivers/net/can/softing/softing_fw.c               |  46 ++-
 drivers/net/can/usb/ems_usb.c                      |  43 +++
 drivers/net/can/usb/etas_es58x/es58x_core.c        |   1 -
 drivers/net/can/usb/gs_usb.c                       |   4 +-
 drivers/net/can/usb/kvaser_usb/kvaser_usb_hydra.c  |   1 +
 drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c   |  13 +-
 drivers/net/can/usb/peak_usb/pcan_usb_core.c       |   1 -
 drivers/net/can/usb/peak_usb/pcan_usb_fd.c         |  40 ++-
 drivers/net/can/usb/peak_usb/pcan_usb_pro.c        |  20 +-
 drivers/net/dsa/mt7530-mdio.c                      |  11 +-
 drivers/net/dsa/mt7530.c                           |  58 ++--
 drivers/net/ethernet/intel/e1000/e1000_main.c      |   2 +-
 drivers/net/ethernet/intel/ice/ice_dpll.c          |  19 +-
 drivers/net/ethernet/intel/ice/ice_ethtool.c       |  10 +-
 drivers/net/ethernet/intel/ice/ice_main.c          |  10 +
 drivers/net/ethernet/intel/ice/ice_vf_lib.c        |  27 ++
 .../net/ethernet/intel/ice/ice_vf_lib_private.h    |   1 +
 drivers/net/ethernet/intel/ice/virt/queues.c       |  21 ++
 drivers/net/ethernet/intel/idpf/idpf_lib.c         |   2 +-
 drivers/net/ethernet/intel/idpf/idpf_txrx.c        |   5 +-
 drivers/net/ethernet/intel/idpf/idpf_txrx.h        |   2 +-
 drivers/net/ethernet/intel/igbvf/netdev.c          |   2 -
 drivers/net/ethernet/intel/igc/igc_main.c          |   3 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c   |   2 +-
 drivers/net/ethernet/mediatek/mtk_eth_soc.c        |   2 +-
 drivers/net/ethernet/nvidia/forcedeth.c            |   4 +-
 drivers/net/ethernet/qlogic/qede/qede_main.c       |  44 +--
 drivers/net/ethernet/realtek/rtase/rtase_main.c    |   3 +
 drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c    |  14 +-
 drivers/net/ethernet/wangxun/libwx/wx_lib.c        |   2 +
 drivers/net/phy/phylink.c                          |  29 +-
 drivers/net/veth.c                                 |   4 +-
 drivers/net/vxlan/vxlan_core.c                     |  21 +-
 drivers/net/vxlan/vxlan_mdb.c                      |   4 +-
 .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c  |  13 +
 .../net/wireless/broadcom/brcm80211/brcmfmac/bus.h |   6 +
 .../wireless/broadcom/brcm80211/brcmfmac/core.c    |  46 ++-
 .../wireless/broadcom/brcm80211/brcmfmac/pcie.c    |   6 +
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.c    |   6 +
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.h    |   1 +
 .../net/wireless/broadcom/brcm80211/brcmfmac/usb.c |   3 +
 .../net/wireless/marvell/mwifiex/11n_rxreorder.c   |   2 +-
 drivers/of/address.c                               |  22 +-
 drivers/of/of_reserved_mem.c                       |  14 +-
 drivers/phy/qualcomm/phy-qcom-m31-eusb2.c          |   2 +-
 drivers/phy/xilinx/phy-zynqmp.c                    |  62 ++--
 drivers/pinctrl/Kconfig                            |   2 +
 drivers/pinctrl/devicetree.c                       |   4 +
 drivers/pinctrl/pinctrl-amd.c                      |   3 +-
 drivers/pinctrl/qcom/pinctrl-msm.c                 |   8 +-
 drivers/pinctrl/qcom/pinctrl-sc8280xp.c            |  21 +-
 drivers/power/supply/bq25890_charger.c             |   2 +-
 drivers/power/supply/max17040_battery.c            |   6 +-
 drivers/ptp/ptp_netc.c                             |  15 +-
 drivers/s390/block/dasd_eckd.c                     |  11 +-
 drivers/s390/block/dasd_ioctl.c                    |   2 +-
 drivers/s390/crypto/pkey_cca.c                     |  15 +-
 drivers/s390/crypto/zcrypt_api.c                   |   2 +-
 drivers/s390/crypto/zcrypt_ccamisc.c               |  89 +++++-
 drivers/s390/crypto/zcrypt_ccamisc.h               |   6 +-
 drivers/s390/net/qeth_core_main.c                  |   3 +
 drivers/s390/scsi/zfcp_aux.c                       |   1 +
 drivers/scsi/hisi_sas/hisi_sas_v3_hw.c             |  10 +-
 drivers/scsi/libiscsi.c                            |   2 +-
 drivers/scsi/libiscsi_tcp.c                        |   8 +-
 drivers/scsi/libsas/sas_init.c                     |  37 ++-
 drivers/scsi/scsi_debug.c                          |   8 +-
 drivers/spi/spi-cadence.c                          | 129 ++++++--
 drivers/spi/spi-nxp-fspi.c                         |  83 ++++-
 drivers/spi/spi-qcom-qspi.c                        |   3 +-
 drivers/spi/spi-qpic-snand.c                       |  22 +-
 drivers/target/target_core_iblock.c                |   6 +-
 drivers/target/target_core_transport.c             |  12 +-
 drivers/thunderbolt/xdomain.c                      |  40 ++-
 drivers/ufs/core/ufshcd.c                          |  41 +--
 drivers/usb/typec/ucsi/ucsi.c                      |  88 +++---
 drivers/usb/typec/ucsi/ucsi.h                      |   1 +
 fs/afs/fsclient.c                                  |   5 +-
 fs/afs/internal.h                                  |   3 +-
 fs/binfmt_misc.c                                   |  22 +-
 fs/btrfs/raid56.c                                  |   4 +-
 fs/btrfs/super.c                                   |   8 +-
 fs/btrfs/zoned.c                                   |  17 +-
 fs/erofs/Kconfig                                   |  14 +
 fs/erofs/decompressor_lzma.c                       |   3 +-
 fs/iomap/ioend.c                                   |  21 +-
 fs/netfs/buffered_read.c                           |   4 +-
 fs/netfs/read_pgpriv2.c                            |   1 +
 fs/netfs/write_issue.c                             |   7 +-
 fs/proc/task_mmu.c                                 |  33 +-
 fs/smb/client/cifssmb.c                            |  12 +-
 fs/smb/client/inode.c                              |   1 +
 fs/smb/server/connection.h                         |   5 +
 fs/smb/server/smb2pdu.c                            |  10 +-
 fs/smb/server/smb_common.c                         |  37 ++-
 fs/smb/server/vfs_cache.c                          |   6 +-
 include/asm-generic/mshyperv.h                     |   2 +
 include/drm/drm_exec.h                             |  20 +-
 include/drm/drm_fb_helper.h                        |  12 -
 include/hyperv/hvhdk.h                             |   6 +
 include/hyperv/hvhdk_mini.h                        |   3 +-
 include/linux/alloc_tag.h                          |   3 +
 include/linux/can/core.h                           |   1 +
 include/linux/can/skb.h                            |   2 -
 include/linux/cleanup.h                            |   7 +
 include/linux/dma/qcom_bam_dma.h                   |  21 +-
 include/linux/file.h                               | 125 ++++++++
 include/linux/iommu.h                              |   5 +
 include/linux/libata.h                             |   2 +-
 include/linux/netfilter/nf_conntrack_sip.h         |   2 +-
 include/linux/slab.h                               |   8 +-
 include/linux/thunderbolt.h                        |   3 +
 include/linux/userfaultfd_k.h                      |   5 +-
 include/net/bluetooth/hci.h                        |  54 ++++
 include/net/bluetooth/hci_core.h                   |  12 +
 include/net/bluetooth/mgmt.h                       |   2 +
 include/net/ip_vs.h                                |  45 ++-
 include/net/neighbour.h                            |   8 +-
 include/net/netfilter/nf_conntrack_expect.h        |   5 +-
 include/net/netfilter/nf_tables.h                  |   4 +-
 include/net/xdp_sock.h                             |   1 +
 include/net/xsk_buff_pool.h                        |  13 +-
 include/scsi/libsas.h                              |   1 -
 include/uapi/linux/rkisp1-config.h                 |   6 +-
 io_uring/net.c                                     |   1 +
 kernel/audit.c                                     |  11 +-
 kernel/auditfilter.c                               |   6 +-
 kernel/events/uprobes.c                            |   2 +-
 kernel/sched/cpufreq_schedutil.c                   |  11 +
 kernel/sched/deadline.c                            |   3 +-
 kernel/trace/fprobe.c                              |   6 +-
 kernel/trace/trace_events.c                        |   4 +-
 kernel/trace/trace_events_filter.c                 |   3 +
 kernel/trace/trace_fprobe.c                        |  12 +-
 kernel/trace/trace_mmiotrace.c                     |  13 +-
 kernel/trace/trace_probe.c                         |   6 +-
 lib/alloc_tag.c                                    |   9 +
 lib/assoc_array.c                                  |   3 +-
 lib/test_fortify/Makefile                          |   1 +
 mm/huge_memory.c                                   |  12 +
 mm/hugetlb.c                                       |  12 +-
 mm/memcontrol-v1.h                                 |   6 +-
 mm/migrate_device.c                                |   5 +-
 mm/mm_init.c                                       |  15 +-
 mm/page_reporting.c                                |   6 +-
 mm/percpu-km.c                                     |   2 +-
 mm/slab.h                                          |  28 +-
 mm/slab_common.c                                   |  13 +
 mm/slub.c                                          |  76 ++---
 mm/util.c                                          |   2 +-
 net/bluetooth/hci_conn.c                           |  14 +-
 net/bluetooth/hci_event.c                          |  79 ++++-
 net/bluetooth/hci_sync.c                           | 157 ++++++----
 net/bluetooth/hidp/core.c                          |  30 +-
 net/bluetooth/iso.c                                | 301 ++++++++++++------
 net/bluetooth/l2cap_core.c                         |   5 +
 net/bluetooth/mgmt.c                               |  96 ++++--
 net/bluetooth/sco.c                                |  22 +-
 net/bridge/br_mrp.c                                |   2 +-
 net/bridge/br_multicast.c                          |   1 +
 net/bridge/br_netfilter_hooks.c                    |   6 +-
 net/can/af_can.c                                   |  14 +-
 net/can/bcm.c                                      |   2 -
 net/can/isotp.c                                    | 337 +++++++++++++++------
 net/can/j1939/bus.c                                |   2 +
 net/can/j1939/j1939-priv.h                         |   3 +
 net/can/j1939/main.c                               |   8 +-
 net/can/j1939/socket.c                             |   1 -
 net/can/j1939/transport.c                          |   6 +-
 net/can/raw.c                                      |   7 +-
 net/core/lwt_bpf.c                                 |   4 +-
 net/core/pktgen.c                                  |   4 +-
 net/core/skbuff.c                                  |  18 +-
 net/handshake/handshake-test.c                     |   8 +
 net/handshake/handshake.h                          |   2 +
 net/handshake/netlink.c                            |  54 ++--
 net/handshake/request.c                            |  65 +++-
 net/ipv4/route.c                                   |   2 -
 net/ipv4/udp_tunnel_nic.c                          |  32 +-
 net/ipv6/fib6_rules.c                              |   1 +
 net/ipv6/ip6_output.c                              |   2 +-
 net/ipv6/ndisc.c                                   |   2 +
 net/mac80211/s1g.c                                 |   4 +
 net/mpls/af_mpls.c                                 |   1 +
 net/netfilter/ipset/ip_set_hash_gen.h              |   2 +-
 net/netfilter/ipvs/ip_vs_app.c                     |   4 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |   3 +
 net/netfilter/ipvs/ip_vs_core.c                    | 180 ++++++-----
 net/netfilter/ipvs/ip_vs_proto_sctp.c              |  19 +-
 net/netfilter/ipvs/ip_vs_proto_tcp.c               |  48 +--
 net/netfilter/ipvs/ip_vs_proto_udp.c               |  54 +---
 net/netfilter/ipvs/ip_vs_xmit.c                    |  42 ++-
 net/netfilter/nf_conntrack_broadcast.c             |   1 +
 net/netfilter/nf_conntrack_core.c                  |   7 +-
 net/netfilter/nf_conntrack_expect.c                |   1 +
 net/netfilter/nf_conntrack_h323_main.c             |  12 +-
 net/netfilter/nf_conntrack_helper.c                |   5 +
 net/netfilter/nf_conntrack_netlink.c               |  18 +-
 net/netfilter/nf_conntrack_sip.c                   |   4 +-
 net/netfilter/nf_nat_sip.c                         |   2 +-
 net/netfilter/nf_tables_api.c                      |  34 +--
 net/netfilter/nft_payload.c                        |  12 +-
 net/netfilter/xt_hashlimit.c                       |  16 +-
 net/openvswitch/actions.c                          |  12 +-
 net/openvswitch/meter.c                            |  33 +-
 net/rds/ib.c                                       |   4 +
 net/rds/ib_cm.c                                    |   4 +
 net/rds/tcp.c                                      |  14 +-
 net/sctp/associola.c                               |   3 +
 net/sctp/sm_make_chunk.c                           |  17 +-
 net/smc/smc_core.c                                 |   2 +-
 net/tipc/socket.c                                  |   2 +-
 net/unix/af_unix.c                                 |   1 +
 net/xdp/xsk.c                                      |  73 +++--
 net/xdp/xsk_buff_pool.c                            |   3 +-
 security/keys/keyring.c                            |  14 +-
 security/keys/trusted-keys/trusted_dcp.c           |  15 +-
 sound/core/pcm_native.c                            |   7 +
 sound/core/seq/seq_timer.c                         |   9 +-
 sound/core/timer.c                                 |   2 +
 sound/core/ump.c                                   |   1 +
 sound/hda/codecs/realtek/alc269.c                  |   4 +-
 sound/pci/lx6464es/lx6464es.c                      |   5 +-
 sound/pci/lx6464es/lx_core.c                       |   5 +-
 sound/soc/codecs/max98090.c                        |   5 +-
 sound/soc/codecs/max98095.c                        |   5 +-
 sound/soc/codecs/tas2562.c                         |  30 +-
 sound/soc/codecs/tas2781-i2c.c                     |   4 +-
 sound/soc/fsl/fsl_asrc.c                           |   2 +-
 sound/soc/fsl/fsl_easrc.c                          |   2 +-
 sound/soc/sdca/sdca_functions.c                    |   2 +
 sound/usb/6fire/chip.c                             |   4 +
 sound/usb/endpoint.c                               |  14 +-
 sound/usb/midi.c                                   |   2 +
 sound/usb/midi2.c                                  |   4 +-
 sound/usb/mixer_quirks.c                           |   2 +-
 tools/testing/kunit/kunit_kernel.py                |  38 ++-
 tools/testing/kunit/kunit_tool_test.py             |  42 +++
 tools/testing/selftests/clone3/clone3_set_tid.c    |   2 +-
 tools/testing/selftests/filesystems/fclog.c        |   4 +-
 tools/testing/selftests/lkdtm/tests.txt            |   2 +-
 tools/testing/selftests/mm/mlock-random-test.c     |   2 +-
 tools/testing/selftests/net/.gitignore             |   7 -
 tools/testing/selftests/net/af_unix/.gitignore     |   9 +
 tools/testing/selftests/net/af_unix/Makefile       |   2 +
 .../testing/selftests/net/af_unix/unix_connreset.c | 177 +++++++++++
 tools/testing/selftests/net/af_unix/unix_listen.c  | 187 ++++++++++++
 tools/testing/selftests/seccomp/seccomp_bpf.c      |   3 +-
 402 files changed, 5655 insertions(+), 2209 deletions(-)

Read the cover letter in its thread