6.18.46-rc1 review

Greg Kroah-Hartman dri-devel linux-patches lkml stable 1 version Aug 20 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Aug 20217 patches 10 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/217	ALSA: hda/realtek: Add quirk for HP Dragonfly Folio G3 2-in-1 (103c:8a05)`sound/hda/codecs/realtek/alc269.c`	+1 -0	0 replies
2/217	block: stop the timeout timer when releasing a never added disk`block/genhd.c`	+8 -4	0 replies
3/217	mtd: ubi: skip programming unused bits in ubi headers`drivers/mtd/ubi/io.c`	+10 -0	0 replies
4/217	ubi: fastmap: fix ubi->fm memory leak`drivers/mtd/ubi/attach.c` `drivers/mtd/ubi/fastmap-wl.c` `drivers/mtd/ubi/ubi.h`	+16 -8	0 replies
5/217	ipvs: separate destination availability state`include/net/ip_vs.h` `include/uapi/linux/ip_vs.h` `net/netfilter/ipvs/ip_vs_conn.c` +5 more	+21 ~~-20~~	0 replies
6/217	selinux: require every boolean value to be defined`security/selinux/ss/policydb.c`	+19 -0	0 replies
7/217	selinux: reject a class permission count below its inherited common`security/selinux/ss/policydb.c`	+12 -0	0 replies
8/217	selinux: do not cancel a policy conversion that never started`security/selinux/ss/services.c`	+3 -1	0 replies
9/217	selinux: reject an unclaimed class value in security_get_classes()`security/selinux/ss/services.c`	+19 -5	0 replies
10/217	selinux: reject a permission value exceeding the class permission count`security/selinux/ss/policydb.c`	+3 -0	0 replies
11/217	mptcp: reclaim forward-allocated memory on RX path errors`net/mptcp/protocol.c`	+6 -0	0 replies
12/217	selftests: mptcp: join: mark tests with data corruption as failed`tools/testing/selftests/net/mptcp/mptcp_join.sh`	+2 -2	0 replies
13/217	mptcp: avoid combining some incoming suboptions`net/mptcp/options.c` `net/mptcp/protocol.h`	+59 -1	0 replies
14/217	mptcp: options: reset DSS fields in case of unexpected size`net/mptcp/options.c`	+7 -1	0 replies
15/217	mptcp: pm: fix data race in add_addr timer callback`net/mptcp/pm.c`	+4 -2	0 replies
16/217	mptcp: fastopen: only mark MPTFO subflows with SYN data`net/mptcp/fastopen.c`	+4 -3	0 replies
17/217	s390/qeth: validate user buffer length in SNMP and ARP query ioctls`drivers/s390/net/qeth_core_main.c` `drivers/s390/net/qeth_l3_main.c`	+8 -0	0 replies
18/217	ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()`sound/soc/sof/sof-audio.c`	+4 -5	0 replies
19/217	ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout`sound/soc/sof/ipc4-pcm.c`	+19 -6	0 replies
20/217	ASoC: cs4265: sort the register default table`sound/soc/codecs/cs4265.c`	+2 -2	0 replies
21/217	ASoC: cs35l45: sort the register default table`sound/soc/codecs/cs35l45-tables.c`	+16 ~~-16~~	0 replies
22/217	ASoC: cs35l41: sort the register default table`sound/soc/codecs/cs35l41-lib.c`	+1 -1	0 replies
23/217	ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses`sound/soc/codecs/lpass-wsa-macro.c`	+4 -4	0 replies
24/217	fbdev: core: Fix pointer desynchronization in fb_io_read()`drivers/video/fbdev/core/fb_io_fops.c`	+8 -0	0 replies
25/217	drm/panthor: skip zero-sized firmware sections`drivers/gpu/drm/panthor/panthor_fw.c`	+3 -0	0 replies
26/217	drm/amdgpu: reject oversized IBs with per-ring packet limits`drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c`	+26 -1	0 replies
27/217	drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12`drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c`	+5 -0	0 replies
28/217	drm/amdgpu: fix JPEG v5.0.0 queue reset failure in DPG mode`drivers/gpu/drm/amd/amdgpu/jpeg_v5_0_0.c`	+17 -4	0 replies
29/217	drm/amdgpu: fix JPEG v4.0.5 queue reset failure in DPG mode`drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_5.c`	+17 -4	0 replies
30/217	drm/amdgpu: fix aperture iounmap skipped on device removal`drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c`	+2 -8	0 replies
31/217	ASoC: SOF: topology: Use acpi mach from the machine driver`sound/soc/intel/common/sof-function-topology-lib.c`	+6 -1	0 replies
32/217	Input: xpad - add support for ZENAIM LEVERLESS`drivers/input/joystick/xpad.c`	+2 -0	0 replies
33/217	Input: cs40l50-vibra - validate custom data from user space`drivers/input/misc/cs40l50-vibra.c`	+8 -2	0 replies
34/217	powerpc/pseries: pci - logic bug`arch/powerpc/platforms/pseries/pci.c`	+1 -1	0 replies
35/217	Input: synaptics-rmi4 - fix F55 transmitter electrode count typo`drivers/input/rmi4/rmi_f55.c`	+2 -2	0 replies
36/217	Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet`drivers/input/mouse/focaltech.c`	+1 -1	0 replies
37/217	Input: psxpad-spi - set driver data before use`drivers/input/joystick/psxpad-spi.c`	+1 -0	0 replies
38/217	Input: atkbd - skip deactivate for Xiaomi Book Pro 14s internal keyboard`drivers/input/keyboard/atkbd.c`	+8 -0	0 replies
39/217	Input: iforce - validate input packet lengths`drivers/input/joystick/iforce/iforce-packets.c` `drivers/input/joystick/iforce/iforce-usb.c`	+13 -1	0 replies
40/217	Input: byd - synchronize timer deletion before freeing private data`drivers/input/mouse/byd.c`	+1 -1	0 replies
41/217	powerpc/pseries: lparcfg - fix kbuf[] underflow`arch/powerpc/platforms/pseries/lparcfg.c`	+1 -1	0 replies
42/217	powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak`arch/powerpc/platforms/pseries/papr-phy-attest.c`	+11 -1	0 replies
43/217	Input: synaptics-rmi4 - zero report size on F54 work error`drivers/input/rmi4/rmi_f54.c`	+8 -8	0 replies
44/217	Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer`drivers/input/rmi4/rmi_f54.c`	+10 -2	0 replies
45/217	Input: synaptics-rmi4 - block s_input when F54 queue is busy`drivers/input/rmi4/rmi_f54.c`	+6 -1	0 replies
46/217	Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue`drivers/input/rmi4/rmi_f54.c`	+8 -0	0 replies
47/217	Input: hynitron_cstxxx - validate touch count and finger IDs`drivers/input/touchscreen/hynitron_cstxxx.c`	+10 -3	0 replies
48/217	crypto: starfive - use scatterlist length before DMA mapping`drivers/crypto/starfive/jh7110-aes.c`	+1 -1	0 replies
49/217	crypto: qce - fix error path in devm_qce_register_algs`drivers/crypto/qce/core.c`	+1 -1	0 replies
50/217	gve: fix NULL dereference due to missing ptp adjfine`drivers/net/ethernet/google/gve/gve_ptp.c`	+6 -0	0 replies
51/217	gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind`drivers/gpio/gpio-sloppy-logic-analyzer.c`	+1 -1	0 replies
52/217	selftests/ftrace: Convert ELF entry point to file offset in uprobe test`tools/testing/selftests/ftrace/test.d/dynevent/add_remove_uprobe.tc`	+25 -2	0 replies
53/217	gve: fix zero-length skb frag with header-split`drivers/net/ethernet/google/gve/gve_rx_dqo.c`	+5 -0	0 replies
54/217	gpio: ml-ioh: use raw_spinlock_t for the register lock`drivers/gpio/gpio-ml-ioh.c`	+18 ~~-18~~	0 replies
55/217	pmdomain: arm: Fix -EINVAL from scmi_pd_set_perf_state() on state 0`drivers/pmdomain/arm/scmi_perf_domain.c`	+1 -1	0 replies
56/217	libceph: fix multiple unsafe decodes in decode_locker()`net/ceph/cls_lock_client.c`	+9 -4	0 replies
57/217	ftrace: Protect direct_functions in ftrace_find_rec_direct`kernel/trace/ftrace.c`	+2 -1	0 replies
58/217	ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()`kernel/trace/ftrace.c`	+5 -1	0 replies
59/217	openrisc: signal: do not restore privileged SR bits on sigreturn`arch/openrisc/include/asm/processor.h` `arch/openrisc/kernel/signal.c`	+5 -2	0 replies
60/217	Input: sur40 - fix input device registration ordering`drivers/input/touchscreen/sur40.c`	+11 ~~-10~~	0 replies
61/217	Input: sur40 - fix V4L error path cleanup`drivers/input/touchscreen/sur40.c`	+3 -1	0 replies
62/217	libceph: Avoid using invalid osd indices from primary_temp`net/ceph/osdmap.c`	+3 -2	0 replies
63/217	ceph: fix MDS random selection readiness predicate`fs/ceph/mdsmap.c`	+1 -1	0 replies
64/217	libceph: tolerate addrvecs with multiple entries of the same type`net/ceph/decode.c`	+9 -9	0 replies
65/217	mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit`drivers/mmc/host/omap_hsmmc.c`	+1 -1	0 replies
66/217	mmc: sdhci: unmap the bounce buffer before device release`drivers/mmc/host/sdhci.c`	+16 -0	0 replies
67/217	pmdomain: mediatek: fix remaining %pOF after of_node_put()`drivers/pmdomain/mediatek/mtk-pm-domains.c`	+15 -7	0 replies
68/217	mmc: sdhci: make tuning_err a signed int`drivers/mmc/host/sdhci.h`	+1 -1	0 replies
69/217	pmdomains: mediatek: Avoid setting RTFFs CLK_DIS before NRESTORE`drivers/pmdomain/mediatek/mtk-pm-domains.c`	+0 -8	0 replies
70/217	mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition`drivers/mmc/host/atmel-mci.c`	+2 -0	0 replies
71/217	drm/connector/hdmi: Fix out of bounds memory read`drivers/gpu/drm/display/drm_hdmi_state_helper.c`	+2 -1	0 replies
72/217	mmc: loongson2: Fix sg iteration in data reorder functions`drivers/mmc/host/loongson2-mmc.c`	+4 -4	0 replies
73/217	pmdomain: mediatek: Fix mt8183 hang on boot`drivers/pmdomain/mediatek/mt8183-pm-domains.h`	+5 -2	0 replies
74/217	drm/xe: Order ring writes before ring tail updates`drivers/gpu/drm/xe/xe_lrc.c`	+7 -0	0 replies
75/217	drm/xe: Fix xe_device_probe() failure`drivers/gpu/drm/xe/xe_device.c`	+5 -1	0 replies
76/217	drm/radeon: fix autosuspend cleanup during teardown`drivers/gpu/drm/radeon/radeon_kms.c`	+1 -0	0 replies
77/217	eth: bnxt: always set the queue mgmt ops`drivers/net/ethernet/broadcom/bnxt/bnxt.c`	+5 -1	0 replies
78/217	eth: bnxt: make sure we populate the qcfg defaults on old FW/HW`drivers/net/ethernet/broadcom/bnxt/bnxt.c`	+1 -0	0 replies
79/217	s390/vfio_ccw: Free all memory if cp_init() fails`drivers/s390/cio/vfio_ccw_cp.c`	+18 -4	0 replies
80/217	s390/vfio_ccw: Limit the number of channel program segments`drivers/s390/cio/vfio_ccw_cp.c` `drivers/s390/cio/vfio_ccw_cp.h`	+14 -0	0 replies
81/217	s390/vfio_ccw: Cancel existing workqueues`drivers/s390/cio/vfio_ccw_ops.c`	+15 -0	0 replies
82/217	s390/vfio_ccw: Ensure index for read/write regions are within range`drivers/s390/cio/vfio_ccw_async.c` `drivers/s390/cio/vfio_ccw_chp.c` `drivers/s390/cio/vfio_ccw_ops.c`	+34 -4	0 replies
83/217	s390/vfio_ccw: Ensure first IDAW remains constant`drivers/s390/cio/vfio_ccw_cp.c` `drivers/s390/cio/vfio_ccw_cp.h`	+18 -0	0 replies
84/217	s390/vfio_ccw: Fix out of bounds check on CCW array`drivers/s390/cio/vfio_ccw_cp.c`	+5 ~~-12~~	0 replies
85/217	s390/vfio_ccw: Move cp cleanup out of not operational`drivers/s390/cio/vfio_ccw_drv.c` `drivers/s390/cio/vfio_ccw_fsm.c` `drivers/s390/cio/vfio_ccw_ops.c` +1 more	+26 -2	0 replies
86/217	s390/vfio_ccw: Selectively expand io_mutex`drivers/s390/cio/vfio_ccw_chp.c` `drivers/s390/cio/vfio_ccw_cp.c` `drivers/s390/cio/vfio_ccw_drv.c` +2 more	+19 -5	0 replies
87/217	s390/vfio_ccw: Calculate idal length based on idaw type`drivers/s390/cio/vfio_ccw_cp.c`	+3 -2	0 replies
88/217	s390/vfio_ccw: Implement a crw lock`drivers/s390/cio/vfio_ccw_chp.c` `drivers/s390/cio/vfio_ccw_drv.c` `drivers/s390/cio/vfio_ccw_ops.c` +1 more	+30 ~~-10~~	0 replies
89/217	s390/zcrypt: Fix CPRB memory allocation in zcrypt misc code`drivers/s390/crypto/zcrypt_ccamisc.c` `drivers/s390/crypto/zcrypt_ep11misc.c`	+25 ~~-11~~	0 replies
90/217	drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c`	+1 -1	0 replies
91/217	drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix`drivers/gpu/drm/amd/display/dc/core/dc_hw_sequencer.c`	+20 ~~-11~~	0 replies
92/217	drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE`drivers/gpu/drm/amd/display/dc/dce/dce_transform.c` `drivers/gpu/drm/amd/display/dc/dce110/dce110_opp_csc_v.c`	+8 -6	0 replies
93/217	drm/amdgpu: Reject UVD message with invalid number of h265 refs`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+3 -0	0 replies
94/217	drm/amdgpu: fix nbif 6.3.1 l1 low power not functional`drivers/gpu/drm/amd/amdgpu/nbif_v6_3_1.c`	+17 ~~-25~~	0 replies
95/217	drm/amdgpu: check ASPM on the dGPU host link`drivers/gpu/drm/amd/amdgpu/amdgpu_device.c`	+49 -1	0 replies
96/217	drm/amdgpu: validate GEM_CREATE domain combinations`drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c`	+21 -0	0 replies
97/217	drm/amdgpu: Reject UVD message with dimensions above 4096`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+2 -2	0 replies
98/217	drm/amdgpu: Implement insert_end for VCE 3`drivers/gpu/drm/amd/amdgpu/vce_v3_0.c`	+22 -4	0 replies
99/217	drm/amdgpu: Fix UVD min buffer sizes`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+7 -5	0 replies
100/217	drm/amdgpu: Fix UVD dpb min size calculation for H264`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+4 ~~-58~~	0 replies
101/217	drm/amdgpu: Fix UVD decode image min size calculation`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+2 -2	0 replies
102/217	drm/amdgpu: disallow multiple FENCE chunks in one submit`drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c`	+4 -0	0 replies
103/217	xfs: propagate errors from xfs_rtginode_load`fs/xfs/xfs_rtalloc.c`	+1 -1	0 replies
104/217	xfs: fix off-by-one in rtrefcount btree root level validation`fs/xfs/libxfs/xfs_rtrefcount_btree.c`	+2 -2	0 replies
105/217	xfs: bounds-check buffer log items dirty bitmap`fs/xfs/xfs_buf_item_recover.c`	+41 ~~-16~~	0 replies
106/217	xfs: mark nonzero sb_gquotino as corrupt on metadir filesystems`fs/xfs/scrub/agheader.c`	+1 -1	0 replies
107/217	xfs: clear zapped attr fork state when bmap repair finds no attr fork`fs/xfs/scrub/bmap.c`	+5 -0	0 replies
108/217	xfs: check cowextsize in xrep_inode_cowextsize`fs/xfs/scrub/inode_repair.c`	+1 -1	0 replies
109/217	xfs: fix transaction block reservation in xrep_rtbitmap`fs/xfs/scrub/rtbitmap_repair.c`	+28 ~~-18~~	0 replies
110/217	xfs: zero i_nlink before repair puts inode on unlinked list`fs/xfs/scrub/nlinks_repair.c`	+6 -1	0 replies
111/217	xfs: only check mergeability of bnobt records`fs/xfs/scrub/alloc.c`	+3 -2	0 replies
112/217	xfs: dont double-lock when deleting a self-referential directory`fs/xfs/scrub/dirtree_repair.c`	+18 -4	0 replies
113/217	xfs: set the prev pointer when reinserting an inode on the unlinked list`fs/xfs/scrub/agheader_repair.c`	+4 -0	0 replies
114/217	xfs: pass runtime errors from xrep_iunlink_mark_ondisk_rec up to callers`fs/xfs/scrub/agheader_repair.c`	+12 -2	0 replies
115/217	xfs: nlink scrub must take IOLOCK before determining ILOCK state`fs/xfs/scrub/nlinks.c`	+7 -6	0 replies
116/217	xfs: load next_agino from the correct xfarray in xrep_iunlink_relink_prev`fs/xfs/scrub/agheader_repair.c`	+1 -1	0 replies
117/217	xfs: fix ilock leak on error in xfs_dq_get_next_id`fs/xfs/xfs_dquot.c`	+2 -1	0 replies
118/217	xfs: dont zap the attr fork on repair when there are queued pptr updates`fs/xfs/scrub/attr_repair.c`	+2 -1	0 replies
119/217	xfs: dont walk off the end of a null sc->sa.agi_bp in AGI repair`fs/xfs/scrub/agheader_repair.c`	+1 -1	0 replies
120/217	xfs: fix allocated inodes that show up in the unlinked list`fs/xfs/scrub/agheader_repair.c` `fs/xfs/scrub/trace.h`	+57 -7	0 replies
121/217	xfs: fix another iunlink infinite loop bug in online fsck`fs/xfs/scrub/agheader_repair.c` `fs/xfs/scrub/trace.h`	+29 -9	0 replies
122/217	xfs: dont return EFSCORRUPTED when scrubbing corrupt parent pointers`fs/xfs/scrub/parent.c`	+1 -1	0 replies
123/217	xfs: avoid UAF on sc->tempip in xrep_tempfile_create`fs/xfs/scrub/tempfile.c`	+1 -0	0 replies
124/217	xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN`fs/xfs/libxfs/xfs_exchmaps.c`	+10 -0	0 replies
125/217	xfs: dont swallow dquot recovery verification errors`fs/xfs/xfs_dquot_item_recover.c`	+1 -1	0 replies
126/217	xfs: dont ignore runtime errors in xrep_iunlink_reload_next`fs/xfs/scrub/agheader_repair.c`	+22 ~~-10~~	0 replies
127/217	xfs: check xfarray iteration errors when committing unlinked inode lists`fs/xfs/scrub/agheader_repair.c`	+4 -0	0 replies
128/217	xfs: check v5 superblock features early`fs/xfs/libxfs/xfs_sb.c`	+2 -2	0 replies
129/217	ceph: avoid fs reclaim while using current->journal_info`fs/ceph/mds_client.c`	+11 -0	0 replies
130/217	ceph: fix hanging __ceph_get_caps() with stale mds_wanted`fs/ceph/caps.c` `fs/ceph/file.c` `fs/ceph/mds_client.h`	+21 -6	0 replies
131/217	libceph: Amend checking to fix `make W=1` build breakage`net/ceph/osdmap.c`	+2 -2	0 replies
132/217	libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE`net/ceph/osdmap.c`	+2 -2	0 replies
133/217	libceph: fix two unsafe bare decodes in decode_lockers()`net/ceph/cls_lock_client.c`	+6 -2	0 replies
134/217	net/sched: serialize qdisc_rtab_list against concurrent get/put`net/sched/sch_api.c`	+19 -5	0 replies
135/217	smb: move get_rfc1002_len() to common/smbglob.h`fs/smb/client/cifsglob.h` `fs/smb/client/cifssmb.c` `fs/smb/client/connect.c` +3 more	+13 ~~-19~~	0 replies
136/217	smb/server: rename include guard in smb_common.h`fs/smb/server/smb_common.h`	+3 -3	0 replies
137/217	ksmbd: Fix to handle removal of rfc1002 header from smb_hdr`fs/smb/server/server.c` `fs/smb/server/smb_common.c`	+11 ~~-11~~	0 replies
138/217	ksmbd: rename smb2_get_msg to smb_get_msg`fs/smb/server/auth.c` `fs/smb/server/connection.c` `fs/smb/server/oplock.c` +5 more	+61 ~~-61~~	0 replies
139/217	smb/server: fix minimum SMB1 PDU size`fs/smb/server/connection.c`	+3 -2	0 replies
140/217	smb/server: fix minimum SMB2 PDU size`fs/smb/server/connection.c`	+2 -2	0 replies
141/217	ksmbd: validate minimum PDU size for transform requests`fs/smb/server/connection.c`	+11 -5	0 replies
142/217	btrfs: remove fs_info argument from btrfs_zoned_activate_one_bg()`fs/btrfs/block-group.c` `fs/btrfs/zoned.c` `fs/btrfs/zoned.h`	+6 -9	0 replies
143/217	btrfs: zoned: fix missing chunk metadata reservation`fs/btrfs/block-group.c`	+19 ~~-15~~	0 replies
144/217	fs/proc/task_mmu: refactor pagemap_pmd_range()`fs/proc/task_mmu.c`	+78 ~~-70~~	0 replies
145/217	mm: replace pmd_to_swp_entry() with softleaf_from_pmd()`fs/proc/task_mmu.c` `include/linux/swapops.h` `mm/hmm.c` +9 more	+23 ~~-23~~	0 replies
146/217	userfaultfd: wait on source PMD during UFFDIO_MOVE`mm/huge_memory.c`	+1 -1	0 replies
147/217	KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs`arch/x86/kvm/x86.c`	+6 -0	0 replies
148/217	ASoC: tas2562: Validate values for volume writes`sound/soc/codecs/tas2562.c`	+7 -2	0 replies
149/217	ata: libata-scsi: terminate deferred commands on time out`drivers/ata/libata-eh.c` `drivers/ata/libata-scsi.c` `drivers/ata/libata.h` +1 more	+110 ~~-39~~	0 replies
150/217	binfmt_misc: dont leak the user namespace when the mount fails`fs/binfmt_misc.c`	+15 ~~-17~~	0 replies
151/217	can: rcar_canfd: Invert reset assert order`drivers/net/can/rcar/rcar_canfd.c`	+2 -2	0 replies
152/217	can: rcar_canfd: Invert global vs. channel teardown`drivers/net/can/rcar/rcar_canfd.c`	+3 -3	0 replies
153/217	can: rcar_canfd: Use devm_clk_get_optional() for RAM clk`drivers/net/can/rcar/rcar_canfd.c`	+17 -6	0 replies
154/217	can: rcar_canfd: Extract rcar_canfd_global_{,de}init()`drivers/net/can/rcar/rcar_canfd.c`	+104 ~~-78~~	0 replies
155/217	can: rcar_canfd: change the initializing flow for clocks and resets`drivers/net/can/rcar/rcar_canfd.c`	+16 ~~-16~~	0 replies
156/217	futex: Fix race in futex_pivot_pending() during private hash resize`kernel/futex/core.c`	+2 -2	0 replies
157/217	sched_ext: Update p->scx.disallow warning in scx_init_task()`kernel/sched/ext.c`	+4 -4	0 replies
158/217	sched_ext: Reorganize enable/disable path for multi-scheduler support`kernel/sched/ext.c`	+43 ~~-35~~	0 replies
159/217	sched_ext: Take cgroup_lock() first in scx_cgroup_lock()`kernel/sched/ext.c`	+7 -2	0 replies
160/217	ring-buffer: Add helper functions for allocations`kernel/trace/ring_buffer.c`	+53 ~~-44~~	0 replies
161/217	ring-buffer: Store bpage pointers into subbuf_ids`kernel/trace/ring_buffer.c`	+11 -8	0 replies
162/217	ring-buffer: Prevent resizing of persistent ring buffer`kernel/trace/ring_buffer.c`	+2 -0	0 replies
163/217	mm/page_table_check: skip special zero mappings`mm/page_table_check.c`	+16 -4	0 replies
164/217	drm/amd/pm: adjust the visibility of pp_table sysfs node`drivers/gpu/drm/amd/pm/amdgpu_dpm.c` `drivers/gpu/drm/amd/pm/amdgpu_pm.c` `drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c` +1 more	+24 -6	0 replies
165/217	drm/amd/pm: fix pptable use-after-free`drivers/gpu/drm/amd/pm/amdgpu_dpm.c` `drivers/gpu/drm/amd/pm/amdgpu_pm.c` `drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h`	+16 ~~-14~~	0 replies
166/217	ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup`sound/soc/sof/ipc4-topology.c`	+33 -0	0 replies
167/217	net: ntb_netdev: Introduce per-queue context`drivers/net/ntb_netdev.c`	+187 ~~-88~~	0 replies
168/217	NTB: ntb_netdev: Preserve RX queue depth on allocation failure`drivers/net/ntb_netdev.c`	+8 -7	0 replies
169/217	arm64: tegra: Add EL2 virtual timer interrupt for Tegra194`arch/arm64/boot/dts/nvidia/tegra194.dtsi`	+2 -0	0 replies
170/217	crypto: ccm - Set rfc4309 maxauthsize from child`crypto/ccm.c`	+1 -1	0 replies
171/217	crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()`drivers/crypto/tegra/tegra-se-aes.c`	+3 ~~-19~~	0 replies
172/217	ovpn: fix NULL dereference when killing missing key`drivers/net/ovpn/crypto.c`	+10 -6	0 replies
173/217	ovpn: finish crypto callback cleanup before peer release`drivers/net/ovpn/io.c`	+5 -5	0 replies
174/217	riscv: ftrace: Fix ftrace_modify_call failure on kprobed functions`arch/riscv/kernel/ftrace.c`	+4 -1	0 replies
175/217	perf: Reject exited events as group leaders`kernel/events/core.c`	+7 -1	0 replies
176/217	gpio: ml-ioh: share the register lock across channels`drivers/gpio/gpio-ml-ioh.c`	+37 ~~-32~~	0 replies
177/217	ASoC: tas2781: fix clang build error for goto bypassing cleanup variable`sound/soc/codecs/tas2781-i2c.c`	+9 -9	0 replies
178/217	netfilter: ipset: fix refcount race between list:set GC and swap`net/netfilter/ipset/ip_set_core.c`	+13 -6	0 replies
179/217	netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path`net/netfilter/nf_tables_offload.c`	+1 -1	0 replies
180/217	netfilter: flowtable: publish GC-visible tuple last`net/netfilter/nf_flow_table_core.c`	+4 -3	0 replies
181/217	netfilter: ipset: fix list type element drift bug`net/netfilter/ipset/ip_set_list_set.c`	+5 -2	0 replies
182/217	netfilter: ipset: let destroy callbacks adjust ext mem size`net/netfilter/ipset/ip_set_bitmap_gen.h` `net/netfilter/ipset/ip_set_list_set.c`	+2 -3	0 replies
183/217	eth: bnxt: cancel IRQ notifier before freeing affinity mask`drivers/net/ethernet/broadcom/bnxt/bnxt.c`	+2 -2	0 replies
184/217	eth: bnxt: keep the aRFS rmap updated when TPH is enabled`drivers/net/ethernet/broadcom/bnxt/bnxt.c`	+15 -4	0 replies
185/217	ipvlan: inherit needed_headroom and needed_tailroom from phy_dev`drivers/net/ipvlan/ipvlan_main.c`	+4 -0	0 replies
186/217	macvlan: inherit needed_headroom and needed_tailroom from lowerdev`drivers/net/macvlan.c`	+4 -0	0 replies
187/217	veth: fix queue index used to wake the peer txq in veth_poll`drivers/net/veth.c`	+1 -1	0 replies
188/217	tcp: fix icsk_ack.ato bitfield overflow`net/ipv4/tcp_input.c` `net/ipv4/tcp_timer.c`	+6 -4	0 replies
189/217	net: phy: realtek: fix EEE advertisement write on the internal PHY MMD path`drivers/net/phy/realtek/realtek_main.c`	+1 -1	0 replies
190/217	net: packet: fix wrong transport_header when sending VLAN-tagged frame`net/packet/af_packet.c`	+2 -2	0 replies
191/217	net: tap: fix wrong transport_header when sending VLAN-tagged frame`drivers/net/tap.c`	+2 -1	0 replies
192/217	net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling`drivers/net/ethernet/wangxun/ngbe/ngbe_main.c`	+3 -1	0 replies
193/217	net/tls: Fail tls_sw_splice_read() after a failed async decrypt`net/tls/tls_sw.c`	+5 -0	0 replies
194/217	ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers`sound/soc/xilinx/xlnx_formatter_pcm.c`	+4 -6	0 replies
195/217	regmap: sdw-mbq: Fix swap of timeout and retry times`drivers/base/regmap/regmap-sdw-mbq.c`	+1 -1	0 replies
196/217	af_packet: Dont send zero-byte data in tpacket_snd().`net/packet/af_packet.c`	+3 -0	0 replies
197/217	net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain`net/sched/act_api.c`	+5 -5	0 replies
198/217	net/sched: cls_u32: skip hash tables in u32_bind_class()`net/sched/cls_u32.c`	+3 -0	0 replies
199/217	m68k: Define NR_CPUS to 1`arch/m68k/Kconfig.cpu`	+4 -0	0 replies
200/217	regmap: sdw-mbq: dont call an unset readable_reg callback`drivers/base/regmap/regmap-sdw-mbq.c`	+1 -1	0 replies
201/217	net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG`drivers/net/ethernet/ti/am65-cpsw-nuss.c`	+2 -0	0 replies
202/217	accel/amdxdna: Skip unmapped range in aie2_populate_range()`drivers/accel/amdxdna/aie2_ctx.c`	+16 -0	0 replies
203/217	net/sched: cls_bpf: reject dev-bound programs bound to a different device`net/sched/cls_bpf.c`	+16 -2	0 replies
204/217	firewire: ohci: split page allocation from dma mapping`drivers/firewire/ohci.c`	+51 ~~-26~~	0 replies
205/217	firewire: ohci: fix NULL pointer dereference in ar_context_release`drivers/firewire/ohci.c`	+3 -1	0 replies
206/217	drm/xe/oa: Fix sync entry leak on OA config emit failure`drivers/gpu/drm/xe/xe_oa.c`	+4 -0	0 replies
207/217	drm/log: Fix out-of-bounds read on empty message length`drivers/gpu/drm/clients/drm_log.c`	+3 -0	0 replies
208/217	drm/client: Remove pitch from struct drm_client_buffer`drivers/gpu/drm/drm_client.c` `include/drm/drm_client.h`	+7 ~~-12~~	0 replies
209/217	drm/client: Move dumb-buffer handling to drm_client_framebuffer_create()`drivers/gpu/drm/drm_client.c`	+29 ~~-27~~	0 replies
210/217	drm/client: Inline drm_client_buffer_addfb() and _rmfb()`drivers/gpu/drm/drm_client.c`	+40 ~~-53~~	0 replies
211/217	drm/client: Deprecate struct drm_client_buffer.gem`drivers/gpu/drm/drm_client.c` `include/drm/drm_client.h`	+15 ~~-14~~	0 replies
212/217	drm/client: Remove drm_client_framebuffer_delete()`drivers/gpu/drm/clients/drm_log.c` `drivers/gpu/drm/drm_client.c` `drivers/gpu/drm/drm_fbdev_dma.c` +3 more	+24 ~~-28~~	0 replies
213/217	drm/log: Fix infinite loop when scale is too large for display`drivers/gpu/drm/clients/drm_log.c`	+6 -0	0 replies
214/217	spi: virtio: mark device ready before registering the controller`drivers/spi/spi-virtio.c`	+2 -0	0 replies
215/217	erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms`fs/erofs/Kconfig`	+2 -1	0 replies
216/217	drm/vmwgfx: Set surface-framebuffer GEM objects`drivers/gpu/drm/vmwgfx/vmwgfx_kms.c`	+3 -0	0 replies
217/217	firewire: ohci: initialize page array to use alloc_pages_bulk() correctly`drivers/firewire/ohci.c`	+1 -1	0 replies

Reviews trailers per patch

159 of 217 patches have a Reviewed-by or Acked-by.

Patch	Stephen Smalley	Matthieu Baerts (NGI0)	Alexandra Winter	Joe Damato	Bard Liao	Kai Vehmanen	Weidong Zhu	Christoph Hellwig	Charles Keepax	Richard Fitzgerald	Srinivas Kandagatla	Liviu Dudau	Steven Price	Alex Deucher	Marek Olšák	Miquel Raynal	Zhihao Cheng	Lijo Lazar	Hawking Zhang	Péter Ujfalusi	Ranjani Sridharan	Julian Anastasov	Hans Verkuil	Bartosz Golaszewski	Vadim Fedorenko	Wolfram Sang	Linus Walleij	Ilya Dryomov	Jiri Olsa	Masami Hiramatsu (Google)	Viacheslav Dubeyko	Frank Li	AngeloGioacchino Del Regno	Andrew Zhou	Stuart Summers	Rodrigo Vivi	Nayna Jain	R Nageswara Sastry	Haren Myneni	Subbaraya Sundeep	Matthew Rosato	Farhan Ali	Holger Dengler	Melissa Wen	Igor Paunovic	Satyajit Roy	Leo Liu	Kenneth Feng	Michael Chan	Christian König	Ruijing Dong	Darrick J. Wong	Brian Foster	Xiubo Li	Alex Markuze	Jamal Hadi Salim	Eric Dumazet	Namjae Jeon	David Howells	Johannes Thumshirn	David Sterba	Vlastimil Babka	SeongJae Park	Rik van Riel	Baolin Wang	Lance Yang	David Hildenbrand (Arm)	Lorenzo Stoakes	Cezary Rojewski	Igor Pylypiv	Niklas Cassel	Martin K. Petersen	Vincent Mailhol	Biju Das	Geert Uytterhoeven	Claudiu Beznea	Andrea Righi	Steven Rostedt (Google)	Jozsef Kadlecsik	Hangbin Liu	Jesper Dangaard Brouer	Neal Cardwell	Andrew Lunn	Nicolai Buchwitz	Willem de Bruijn	Breno Leitao	Simon Horman	Jakub Kicinski	Sabrina Dubroca	Michal Simek	Jiayuan Chen	Victor Nogueira	Davide Caratti	Chintan Vankar	Liam Girdwood	Dave Jiang	Daniel Borkmann	Jocelyn Falempe	Francesco Valla	Ian Forbes	Zack Rusin	Harald Arnesen	David Gow	Ashutosh Dixit	Max Zhen	Pavel Machek (CIP)	Brett A C Sheffield	Florian Fainelli	Barry K. Nathan	Miguel Ojeda	Peter Schneider	Shuah Khan	Ron Economos	Wentao Guan	Mark Brown
Series																																																																																																										T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/217
2/217							A-b	R-b
3/217																R-b	R-b
4/217																	R-b
5/217																						A-b
6/217	A-b
7/217	A-b
8/217	A-b
9/217	A-b
10/217	A-b
11/217		R-b
12/217		R-b
13/217
14/217
15/217		R-b
16/217		R-b
17/217			R-b	R-b
18/217					R-b
19/217						R-b
20/217									R-b	R-b
21/217									R-b	R-b
22/217									R-b	R-b
23/217											R-b
24/217
25/217												R-b	R-b
26/217														R-b
27/217														R-b	R-b
28/217														A-b
29/217														A-b
30/217																		R-b	R-b
31/217																				R-b	R-b
32/217
33/217
34/217																																					A-b	T-b
35/217
36/217
37/217
38/217																																		R-b
39/217
40/217
41/217																																					A-b	T-b
42/217																																					A-b	T-b	A-b
43/217
44/217
45/217																							R-b
46/217
47/217
48/217
49/217																								R-b
50/217																									R-b
51/217																										R-b
52/217
53/217
54/217																											R-b
55/217
56/217																												R-b
57/217																													A-b
58/217																														A-b
59/217
60/217
61/217
62/217																												R-b
63/217																															R-b
64/217																												R-b
65/217
66/217																											R-b
67/217
68/217																																R-b
69/217
70/217
71/217
72/217
73/217																																	R-b
74/217																																			R-b
75/217																																				R-b
76/217
77/217																																								R-b
78/217																																																	R-b
79/217																																									R-b	R-b
80/217																																									R-b
81/217																																									R-b
82/217																																									R-b
83/217																																									R-b
84/217																																									R-b
85/217																																									R-b
86/217																																									R-b
87/217																																									R-b
88/217																																									R-b	R-b
89/217																																											R-b
90/217																																												R-b
91/217																																													T-b	T-b
92/217																																													T-b	T-b
93/217																																															R-b
94/217																																																R-b
95/217																			R-b																													R-b
96/217																																																		R-b
97/217																																															A-b				R-b
98/217														A-b
99/217																																															A-b				R-b
100/217																																															A-b				R-b
101/217																																															A-b				R-b
102/217																																																		R-b
103/217								R-b																																												R-b
104/217								R-b																																												R-b
105/217																																																				R-b	R-b
106/217								R-b
107/217								R-b																																												R-b
108/217								R-b
109/217								R-b
110/217								R-b
111/217								R-b
112/217								R-b
113/217								R-b
114/217								R-b
115/217								R-b
116/217								R-b
117/217								R-b																																												R-b
118/217								R-b
119/217								R-b
120/217								R-b
121/217								R-b
122/217								R-b
123/217								R-b
124/217								R-b																																												R-b
125/217								R-b																																												R-b
126/217								R-b
127/217								R-b
128/217																																																				R-b
129/217																															R-b																							R-b
130/217																																																							R-b
131/217																															R-b
132/217																																																							R-b
133/217																															R-b
134/217																																																								A-b	R-b
135/217																																																										A-b
136/217																																																										A-b
137/217
138/217
139/217																																																										A-b	R-b
140/217																																																										A-b	R-b
141/217
142/217																																																												R-b	R-b
143/217																																																												R-b
144/217																																																														R-b
145/217																																																														R-b	R-b
146/217																																																																R-b	R-b	R-b R-b	A-b	R-b
147/217
148/217																																																																					R-b
149/217																																																																						R-b T-b	R-b	R-b
150/217
151/217																																																																									R-b	R-b
152/217																																																																									R-b	R-b
153/217																																																																											R-b
154/217
155/217																																																																									R-b		R-b	T-b
156/217
157/217																																																																													R-b
158/217																																																																													R-b
159/217																																																																													R-b
160/217
161/217																																																																														R-b
162/217
163/217
164/217																		R-b
165/217																																																R-b
166/217						R-b																																																																																									R-b
167/217
168/217																																																																																																R-b
169/217
170/217
171/217
172/217
173/217
174/217
175/217
176/217																											R-b
177/217
178/217																																																																															A-b
179/217
180/217
181/217																																																																															A-b
182/217																																																																															A-b
183/217																																																	R-b
184/217																																																	R-b
185/217																																																																																R-b
186/217																																																																																R-b
187/217																																																																																	T-b A-b
188/217																																																																																		R-b
189/217																																																																																			R-b	R-b
190/217																																																																																					R-b
191/217																																																																																					R-b
192/217																																																																																						R-b	R-b
193/217																																																																																								R-b	R-b
194/217																																																																																										R-b
195/217
196/217																																																																																					R-b						R-b
197/217																																																																																												T-b	R-b
198/217																																																								A-b
199/217																																																																											R-b
200/217									R-b
201/217																																																																																							R-b							R-b
202/217																																																																																																									R-b
203/217																																																																																												T-b					A-b
204/217
205/217
206/217																																																																																																								R-b
207/217																																																																																																		R-b
208/217																																																																																																		R-b	T-b
209/217																																																																																																		R-b	T-b
210/217																																																																																																		R-b	T-b
211/217																																																																																																		R-b	T-b
212/217																																																																																																		R-b	T-b
213/217																																																																																																		R-b
214/217
215/217																																																															T-b												T-b
216/217																																																																																																		R-b		T-b	R-b
217/217																																																																																																						Reported-and-tested-by	Reported-and-tested-by

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 115 reviewers.

Read the v1 thread

Cover letter [PATCH 6.18 000/217] 6.18.46-rc1 review

This is the start of the stable review cycle for the 6.18.46 release. There are 217 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 22 Aug 2026 14:51:11 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.46-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.18.46-rc1

Takashi Sakamoto <[email protected]>
firewire: ohci: initialize page array to use alloc_pages_bulk() correctly

Thomas Zimmermann <[email protected]>
drm/vmwgfx: Set surface-framebuffer GEM objects

Gao Xiang <[email protected]>
erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms

Jasper Wise <[email protected]>
spi: virtio: mark device ready before registering the controller

Shixiong Ou <[email protected]>
drm/log: Fix infinite loop when scale is too large for display

Thomas Zimmermann <[email protected]>
drm/client: Remove drm_client_framebuffer_delete()

Thomas Zimmermann <[email protected]>
drm/client: Deprecate struct drm_client_buffer.gem

Thomas Zimmermann <[email protected]>
drm/client: Inline drm_client_buffer_addfb() and _rmfb()

Thomas Zimmermann <[email protected]>
drm/client: Move dumb-buffer handling to drm_client_framebuffer_create()

Thomas Zimmermann <[email protected]>
drm/client: Remove pitch from struct drm_client_buffer

Shixiong Ou <[email protected]>
drm/log: Fix out-of-bounds read on empty message length

Linmao Li <[email protected]>
drm/xe/oa: Fix sync entry leak on OA config emit failure

Aleksandr Nogikh <[email protected]>
firewire: ohci: fix NULL pointer dereference in ar_context_release

Takashi Sakamoto <[email protected]>
firewire: ohci: split page allocation from dma mapping

Jamal Hadi Salim <[email protected]>
net/sched: cls_bpf: reject dev-bound programs bound to a different device

Lizhi Hou <[email protected]>
accel/amdxdna: Skip unmapped range in aie2_populate_range()

Siddharth Vadapalli <[email protected]>
net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

Andrey Golovko <[email protected]>
regmap: sdw-mbq: don't call an unset readable_reg callback

Uwe Kleine-König <[email protected]>
m68k: Define NR_CPUS to 1

Zhang Changzhong <[email protected]>
net/sched: cls_u32: skip hash tables in u32_bind_class()

Jamal Hadi Salim <[email protected]>

    net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain

Eric Dumazet <[email protected]>
af_packet: Don't send zero-byte data in tpacket_snd().

Charles Keepax <[email protected]>
regmap: sdw-mbq: Fix swap of timeout and retry times

Rosen Penev <[email protected]>
ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

Chuck Lever <[email protected]>
net/tls: Fail tls_sw_splice_read() after a failed async decrypt

Jiawen Wu <[email protected]>
net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling

Wei Fang <[email protected]>
net: tap: fix wrong transport_header when sending VLAN-tagged frame

Wei Fang <[email protected]>
net: packet: fix wrong transport_header when sending VLAN-tagged frame

Oleksij Rempel <[email protected]>
net: phy: realtek: fix EEE advertisement write on the internal PHY MMD path

Jiayuan Chen <[email protected]>
tcp: fix icsk_ack.ato bitfield overflow

Jonas Köppeler <[email protected]>
veth: fix queue index used to wake the peer txq in veth_poll

Eric Dumazet <[email protected]>
macvlan: inherit needed_headroom and needed_tailroom from lowerdev

Eric Dumazet <[email protected]>
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

Jakub Kicinski <[email protected]>
eth: bnxt: keep the aRFS rmap updated when TPH is enabled

Jakub Kicinski <[email protected]>
eth: bnxt: cancel IRQ notifier before freeing affinity mask

Florian Westphal <[email protected]>
netfilter: ipset: let destroy callbacks adjust ext mem size

Florian Westphal <[email protected]>
netfilter: ipset: fix list type element drift bug

Jérémy Jean <[email protected]>
netfilter: flowtable: publish GC-visible tuple last

Alexey Velichayshiy <[email protected]>
netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path

Xiang Mei (Microsoft) <[email protected]>
netfilter: ipset: fix refcount race between list:set GC and swap

Shenghao Ding <[email protected]>
ASoC: tas2781: fix clang build error for goto bypassing cleanup variable

Junjie Cao <[email protected]>
gpio: ml-ioh: share the register lock across channels

Kyle Zeng <[email protected]>
perf: Reject exited events as group leaders

Pu Lehui <[email protected]>
riscv: ftrace: Fix ftrace_modify_call failure on kprobed functions

Ralf Lici <[email protected]>
ovpn: finish crypto callback cleanup before peer release

Ralf Lici <[email protected]>
ovpn: fix NULL dereference when killing missing key

Vladislav Dronov <[email protected]>

    crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

Herbert Xu <[email protected]>
crypto: ccm - Set rfc4309 maxauthsize from child

Jon Hunter <[email protected]>
arm64: tegra: Add EL2 virtual timer interrupt for Tegra194

Koichiro Den <[email protected]>
NTB: ntb_netdev: Preserve RX queue depth on allocation failure

Koichiro Den <[email protected]>
net: ntb_netdev: Introduce per-queue context

Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup

Yang Wang <[email protected]>
drm/amd/pm: fix pptable use-after-free

Yang Wang <[email protected]>
drm/amd/pm: adjust the visibility of pp_table sysfs node

Zhiling Zou <[email protected]>
mm/page_table_check: skip special zero mappings

Vincent Donnefort <[email protected]>
ring-buffer: Prevent resizing of persistent ring buffer

Vincent Donnefort <[email protected]>
ring-buffer: Store bpage pointers into subbuf_ids

Steven Rostedt <[email protected]>
ring-buffer: Add helper functions for allocations

Tejun Heo <[email protected]>
sched_ext: Take cgroup_lock() first in scx_cgroup_lock()

Tejun Heo <[email protected]>
sched_ext: Reorganize enable/disable path for multi-scheduler support

Tejun Heo <[email protected]>

    sched_ext: Update p->scx.disallow warning in scx_init_task()

Yao Kai <[email protected]>
futex: Fix race in futex_pivot_pending() during private hash resize

Tu Nguyen <[email protected]>
can: rcar_canfd: change the initializing flow for clocks and resets

Geert Uytterhoeven <[email protected]>
can: rcar_canfd: Extract rcar_canfd_global_{,de}init()

Biju Das <[email protected]>
can: rcar_canfd: Use devm_clk_get_optional() for RAM clk

Geert Uytterhoeven <[email protected]>
can: rcar_canfd: Invert global vs. channel teardown

Geert Uytterhoeven <[email protected]>
can: rcar_canfd: Invert reset assert order

Christian Brauner <[email protected]>
binfmt_misc: don't leak the user namespace when the mount fails

Damien Le Moal <[email protected]>
ata: libata-scsi: terminate deferred commands on time out

Mark Brown <[email protected]>
ASoC: tas2562: Validate values for volume writes

Weiming Shi <[email protected]>
KVM: x86: Cancel delayed I/O APIC EOI handling before destroying vCPUs

Usama Arif <[email protected]>
userfaultfd: wait on source PMD during UFFDIO_MOVE

Lorenzo Stoakes <[email protected]>
mm: replace pmd_to_swp_entry() with softleaf_from_pmd()

Lorenzo Stoakes <[email protected]>
fs/proc/task_mmu: refactor pagemap_pmd_range()

Guanghui Yang <[email protected]>
btrfs: zoned: fix missing chunk metadata reservation

Filipe Manana <[email protected]>
btrfs: remove fs_info argument from btrfs_zoned_activate_one_bg()

Namjae Jeon <[email protected]>
ksmbd: validate minimum PDU size for transform requests

ChenXiaoSong <[email protected]>
smb/server: fix minimum SMB2 PDU size

ChenXiaoSong <[email protected]>
smb/server: fix minimum SMB1 PDU size

Namjae Jeon <[email protected]>
ksmbd: rename smb2_get_msg to smb_get_msg

David Howells <[email protected]>
ksmbd: Fix to handle removal of rfc1002 header from smb_hdr

ChenXiaoSong <[email protected]>
smb/server: rename include guard in smb_common.h

ZhangGuoDong <[email protected]>
smb: move get_rfc1002_len() to common/smbglob.h

Aldo Ariel Panzardo <[email protected]>
net/sched: serialize qdisc_rtab_list against concurrent get/put

Pavitra Jha <[email protected]>
libceph: fix two unsafe bare decodes in decode_lockers()

Xiang Mei <[email protected]>
libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE

Andy Shevchenko <[email protected]>
libceph: Amend checking to fix make W=1 build breakage

Max Kellermann <[email protected]>
ceph: fix hanging __ceph_get_caps() with stale mds_wanted

Max Kellermann <[email protected]>

    ceph: avoid fs reclaim while using current->journal_info

Christoph Hellwig <[email protected]>
xfs: check v5 superblock features early

Darrick J. Wong <[email protected]>
xfs: check xfarray iteration errors when committing unlinked inode lists

Darrick J. Wong <[email protected]>
xfs: don't ignore runtime errors in xrep_iunlink_reload_next

Long Li <[email protected]>
xfs: don't swallow dquot recovery verification errors

Lin Jiapeng <[email protected]>
xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN

Darrick J. Wong <[email protected]>

    xfs: avoid UAF on sc->tempip in xrep_tempfile_create

Darrick J. Wong <[email protected]>
xfs: don't return EFSCORRUPTED when scrubbing corrupt parent pointers

Darrick J. Wong <[email protected]>
xfs: fix another iunlink infinite loop bug in online fsck

Darrick J. Wong <[email protected]>
xfs: fix allocated inodes that show up in the unlinked list

Darrick J. Wong <[email protected]>

    xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair

Darrick J. Wong <[email protected]>
xfs: don't zap the attr fork on repair when there are queued pptr updates

Long Li <[email protected]>
xfs: fix ilock leak on error in xfs_dq_get_next_id

Darrick J. Wong <[email protected]>
xfs: load next_agino from the correct xfarray in xrep_iunlink_relink_prev

Darrick J. Wong <[email protected]>
xfs: nlink scrub must take IOLOCK before determining ILOCK state

Darrick J. Wong <[email protected]>
xfs: pass runtime errors from xrep_iunlink_mark_ondisk_rec up to callers

Darrick J. Wong <[email protected]>
xfs: set the prev pointer when reinserting an inode on the unlinked list

Darrick J. Wong <[email protected]>
xfs: don't double-lock when deleting a self-referential directory

Darrick J. Wong <[email protected]>
xfs: only check mergeability of bnobt records

Darrick J. Wong <[email protected]>
xfs: zero i_nlink before repair puts inode on unlinked list

Darrick J. Wong <[email protected]>
xfs: fix transaction block reservation in xrep_rtbitmap

Darrick J. Wong <[email protected]>
xfs: check cowextsize in xrep_inode_cowextsize

Qiang Ma <[email protected]>
xfs: clear zapped attr fork state when bmap repair finds no attr fork

Darrick J. Wong <[email protected]>
xfs: mark nonzero sb_gquotino as corrupt on metadir filesystems

Ibrahim Hashimov <[email protected]>
xfs: bounds-check buffer log item's dirty bitmap

Xiang Mei <[email protected]>
xfs: fix off-by-one in rtrefcount btree root level validation

Guanghui Yang <[email protected]>
xfs: propagate errors from xfs_rtginode_load

Junrui Luo <[email protected]>
drm/amdgpu: disallow multiple FENCE chunks in one submit

David Rosca <[email protected]>
drm/amdgpu: Fix UVD decode image min size calculation

David Rosca <[email protected]>
drm/amdgpu: Fix UVD dpb min size calculation for H264

David Rosca <[email protected]>
drm/amdgpu: Fix UVD min buffer sizes

David Rosca <[email protected]>
drm/amdgpu: Implement insert_end for VCE 3

David Rosca <[email protected]>
drm/amdgpu: Reject UVD message with dimensions above 4096

Candice Li <[email protected]>
drm/amdgpu: validate GEM_CREATE domain combinations

Yang Wang <[email protected]>
drm/amdgpu: check ASPM on the dGPU host link

Yang Wang <[email protected]>
drm/amdgpu: fix nbif 6.3.1 l1 low power not functional

David Rosca <[email protected]>
drm/amdgpu: Reject UVD message with invalid number of h265 refs

Nathan Lucas <[email protected]>
drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE

Nathan Lucas <[email protected]>
drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix

Samuel Pitoiset <[email protected]>
drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()

Harald Freudenberger <[email protected]>
s390/zcrypt: Fix CPRB memory allocation in zcrypt misc code

Eric Farman <[email protected]>
s390/vfio_ccw: Implement a crw lock

Eric Farman <[email protected]>
s390/vfio_ccw: Calculate idal length based on idaw type

Eric Farman <[email protected]>
s390/vfio_ccw: Selectively expand io_mutex

Eric Farman <[email protected]>
s390/vfio_ccw: Move cp cleanup out of not operational

Eric Farman <[email protected]>
s390/vfio_ccw: Fix out of bounds check on CCW array

Eric Farman <[email protected]>
s390/vfio_ccw: Ensure first IDAW remains constant

Eric Farman <[email protected]>
s390/vfio_ccw: Ensure index for read/write regions are within range

Eric Farman <[email protected]>
s390/vfio_ccw: Cancel existing workqueues

Eric Farman <[email protected]>
s390/vfio_ccw: Limit the number of channel program segments

Eric Farman <[email protected]>
s390/vfio_ccw: Free all memory if cp_init() fails

Jakub Kicinski <[email protected]>
eth: bnxt: make sure we populate the qcfg defaults on old FW/HW

Jakub Kicinski <[email protected]>
eth: bnxt: always set the queue mgmt ops

Guangshuo Li <[email protected]>
drm/radeon: fix autosuspend cleanup during teardown

Raag Jadav <[email protected]>
drm/xe: Fix xe_device_probe() failure

Matthew Brost <[email protected]>
drm/xe: Order ring writes before ring tail updates

Dmitry Osipenko <[email protected]>
pmdomain: mediatek: Fix mt8183 hang on boot

Binbin Zhou <[email protected]>
mmc: loongson2: Fix sg iteration in data reorder functions

John Harrison <[email protected]>
drm/connector/hdmi: Fix out of bounds memory read

Pei Xiao <[email protected]>
mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition

AngeloGioacchino Del Regno <[email protected]>
pmdomains: mediatek: Avoid setting RTFF's CLK_DIS before NRESTORE

Haibo Chen <[email protected]>
mmc: sdhci: make tuning_err a signed int

Guangshuo Li <[email protected]>
pmdomain: mediatek: fix remaining %pOF after of_node_put()

Myeonghun Pak <[email protected]>
mmc: sdhci: unmap the bounce buffer before device release

Zhan Xusheng <[email protected]>
mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit

Kefu Chai <[email protected]>
libceph: tolerate addrvecs with multiple entries of the same type

Yiming Zhu <[email protected]>
ceph: fix MDS random selection readiness predicate

Raphael Zimmer <[email protected]>
libceph: Avoid using invalid osd indices from primary_temp

Dmitry Torokhov <[email protected]>
Input: sur40 - fix V4L error path cleanup

Dmitry Torokhov <[email protected]>
Input: sur40 - fix input device registration ordering

Ali Ahmet Memis <[email protected]>
openrisc: signal: do not restore privileged SR bits on sigreturn

Josh Poimboeuf <[email protected]>
ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()

Leon Hwang <[email protected]>
ftrace: Protect direct_functions in ftrace_find_rec_direct

Pavitra Jha <[email protected]>
libceph: fix multiple unsafe decodes in decode_locker()

Praveen Talari <[email protected]>
pmdomain: arm: Fix -EINVAL from scmi_pd_set_perf_state() on state 0

Junjie Cao <[email protected]>
gpio: ml-ioh: use raw_spinlock_t for the register lock

Jordan Rhee <[email protected]>
gve: fix zero-length skb frag with header-split

Rui Qi <[email protected]>
selftests/ftrace: Convert ELF entry point to file offset in uprobe test

Cengiz Can <[email protected]>
gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind

Jordan Rhee <[email protected]>
gve: fix NULL dereference due to missing ptp adjfine

Thorsten Blum <[email protected]>
crypto: qce - fix error path in devm_qce_register_algs

Thorsten Blum <[email protected]>
crypto: starfive - use scatterlist length before DMA mapping

Jianing Li <[email protected]>
Input: hynitron_cstxxx - validate touch count and finger IDs

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - block s_input when F54 queue is busy

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - zero report size on F54 work error

George Wilson <[email protected]>
powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

George Wilson <[email protected]>

    powerpc/pseries: lparcfg - fix kbuf[] underflow

Linmao Li <[email protected]>
Input: byd - synchronize timer deletion before freeing private data

Pengpeng Hou <[email protected]>
Input: iforce - validate input packet lengths

Zhefu Zhang <[email protected]>
Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard

Linmao Li <[email protected]>
Input: psxpad-spi - set driver data before use

Richard Davies <[email protected]>
Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

George Wilson <[email protected]>
powerpc/pseries: pci - logic bug

HyeongJun An <[email protected]>
Input: cs40l50-vibra - validate custom data from user space

Kyohei Kadota <[email protected]>
Input: xpad - add support for ZENAIM LEVERLESS

Bard Liao <[email protected]>
ASoC: SOF: topology: Use acpi mach from the machine driver

Asad Kamal <[email protected]>
drm/amdgpu: fix aperture iounmap skipped on device removal

Jesse Zhang <[email protected]>
drm/amdgpu: fix JPEG v4.0.5 queue reset failure in DPG mode

Jesse Zhang <[email protected]>
drm/amdgpu: fix JPEG v5.0.0 queue reset failure in DPG mode

Qiang Yu <[email protected]>
drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12

Candice Li <[email protected]>
drm/amdgpu: reject oversized IBs with per-ring packet limits

Osama Abdelkader <[email protected]>
drm/panthor: skip zero-sized firmware sections

Mingyu Wang <[email protected]>
fbdev: core: Fix pointer desynchronization in fb_io_read()

Dawid Wróbel <[email protected]>
ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses

Peter Ujfalusi <[email protected]>
ASoC: cs35l41: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: cs35l45: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: cs4265: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout

Peter Ujfalusi <[email protected]>
ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()

Hidayath Khan <[email protected]>
s390/qeth: validate user buffer length in SNMP and ARP query ioctls

Wyatt Feng <[email protected]>
mptcp: fastopen: only mark MPTFO subflows with SYN data

Qing Luo <[email protected]>
mptcp: pm: fix data race in add_addr timer callback

Matthieu Baerts (NGI0) <[email protected]>
mptcp: options: reset DSS fields in case of unexpected size

Matthieu Baerts (NGI0) <[email protected]>
mptcp: avoid combining some incoming suboptions

Gang Yan <[email protected]>
selftests: mptcp: join: mark tests with data corruption as failed

Paolo Abeni <[email protected]>
mptcp: reclaim forward-allocated memory on RX path errors

Bryam Vargas <[email protected]>
selinux: reject a permission value exceeding the class permission count

Bryam Vargas <[email protected]>
selinux: reject an unclaimed class value in security_get_classes()

Bryam Vargas <[email protected]>
selinux: do not cancel a policy conversion that never started

Bryam Vargas <[email protected]>
selinux: reject a class permission count below its inherited common

Bryam Vargas <[email protected]>
selinux: require every boolean value to be defined

Yizhou Zhao <[email protected]>
ipvs: separate destination availability state

Liyuan Pang <[email protected]>

    ubi: fastmap: fix ubi->fm memory leak

Cheng Ming Lin <[email protected]>
mtd: ubi: skip programming unused bits in ubi headers

Chao Shi <[email protected]>
block: stop the timeout timer when releasing a never added disk

Michael Diesen <[email protected]>
ALSA: hda/realtek: Add quirk for HP Dragonfly Folio G3 2-in-1 (103c:8a05)

-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm64/boot/dts/nvidia/tegra194.dtsi           |   2 +
 arch/m68k/Kconfig.cpu                              |   4 +
 arch/openrisc/include/asm/processor.h              |   2 +
 arch/openrisc/kernel/signal.c                      |   5 +-
 arch/powerpc/platforms/pseries/lparcfg.c           |   2 +-
 arch/powerpc/platforms/pseries/papr-phy-attest.c   |  12 +-
 arch/powerpc/platforms/pseries/pci.c               |   2 +-
 arch/riscv/kernel/ftrace.c                         |   5 +-
 arch/x86/kvm/x86.c                                 |   6 +
 block/genhd.c                                      |  12 +-
 crypto/ccm.c                                       |   2 +-
 drivers/accel/amdxdna/aie2_ctx.c                   |  16 ++
 drivers/ata/libata-eh.c                            |  29 +-
 drivers/ata/libata-scsi.c                          | 115 ++++++--
 drivers/ata/libata.h                               |   3 +-
 drivers/base/regmap/regmap-sdw-mbq.c               |   4 +-
 drivers/crypto/qce/core.c                          |   2 +-
 drivers/crypto/starfive/jh7110-aes.c               |   2 +-
 drivers/crypto/tegra/tegra-se-aes.c                |  22 +-
 drivers/firewire/ohci.c                            |  83 ++++--
 drivers/gpio/gpio-ml-ioh.c                         |  71 ++---
 drivers/gpio/gpio-sloppy-logic-analyzer.c          |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c             |  31 ++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |  50 +++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c            |  21 ++
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |  10 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c            |  85 ++----
 drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c             |   5 +
 drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_5.c           |  21 +-
 drivers/gpu/drm/amd/amdgpu/jpeg_v5_0_0.c           |  21 +-
 drivers/gpu/drm/amd/amdgpu/nbif_v6_3_1.c           |  42 ++-
 drivers/gpu/drm/amd/amdgpu/vce_v3_0.c              |  26 +-
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c |   2 +-
 .../gpu/drm/amd/display/dc/core/dc_hw_sequencer.c  |  31 ++-
 drivers/gpu/drm/amd/display/dc/dce/dce_transform.c |   7 +-
 .../drm/amd/display/dc/dce110/dce110_opp_csc_v.c   |   7 +-
 drivers/gpu/drm/amd/pm/amdgpu_dpm.c                |  24 +-
 drivers/gpu/drm/amd/pm/amdgpu_pm.c                 |  18 +-
 drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h            |   3 +-
 drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c   |   5 +-
 drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c          |   2 +-
 drivers/gpu/drm/clients/drm_log.c                  |  13 +-
 drivers/gpu/drm/display/drm_hdmi_state_helper.c    |   3 +-
 drivers/gpu/drm/drm_client.c                       | 181 ++++++-------
 drivers/gpu/drm/drm_fbdev_dma.c                    |   6 +-
 drivers/gpu/drm/drm_fbdev_shmem.c                  |   4 +-
 drivers/gpu/drm/drm_fbdev_ttm.c                    |   8 +-
 drivers/gpu/drm/panthor/panthor_fw.c               |   3 +
 drivers/gpu/drm/radeon/radeon_kms.c                |   1 +
 drivers/gpu/drm/vmwgfx/vmwgfx_kms.c                |   3 +
 drivers/gpu/drm/xe/xe_device.c                     |   6 +-
 drivers/gpu/drm/xe/xe_lrc.c                        |   7 +
 drivers/gpu/drm/xe/xe_oa.c                         |   4 +
 drivers/input/joystick/iforce/iforce-packets.c     |  11 +-
 drivers/input/joystick/iforce/iforce-usb.c         |   3 +
 drivers/input/joystick/psxpad-spi.c                |   1 +
 drivers/input/joystick/xpad.c                      |   2 +
 drivers/input/keyboard/atkbd.c                     |   8 +
 drivers/input/misc/cs40l50-vibra.c                 |  10 +-
 drivers/input/mouse/byd.c                          |   2 +-
 drivers/input/mouse/focaltech.c                    |   2 +-
 drivers/input/rmi4/rmi_f54.c                       |  43 ++-
 drivers/input/rmi4/rmi_f55.c                       |   4 +-
 drivers/input/touchscreen/hynitron_cstxxx.c        |  13 +-
 drivers/input/touchscreen/sur40.c                  |  23 +-
 drivers/mmc/host/atmel-mci.c                       |   2 +
 drivers/mmc/host/loongson2-mmc.c                   |   8 +-
 drivers/mmc/host/omap_hsmmc.c                      |   2 +-
 drivers/mmc/host/sdhci.c                           |  16 ++
 drivers/mmc/host/sdhci.h                           |   2 +-
 drivers/mtd/ubi/attach.c                           |   4 +-
 drivers/mtd/ubi/fastmap-wl.c                       |   8 +-
 drivers/mtd/ubi/io.c                               |  10 +
 drivers/mtd/ubi/ubi.h                              |  12 +
 drivers/net/can/rcar/rcar_canfd.c                  | 181 ++++++++-----
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |  30 ++-
 drivers/net/ethernet/google/gve/gve_ptp.c          |   6 +
 drivers/net/ethernet/google/gve/gve_rx_dqo.c       |   5 +
 drivers/net/ethernet/ti/am65-cpsw-nuss.c           |   2 +
 drivers/net/ethernet/wangxun/ngbe/ngbe_main.c      |   4 +-
 drivers/net/ipvlan/ipvlan_main.c                   |   4 +
 drivers/net/macvlan.c                              |   4 +
 drivers/net/ntb_netdev.c                           | 294 ++++++++++++++-------
 drivers/net/ovpn/crypto.c                          |  16 +-
 drivers/net/ovpn/io.c                              |  10 +-
 drivers/net/phy/realtek/realtek_main.c             |   2 +-
 drivers/net/tap.c                                  |   3 +-
 drivers/net/veth.c                                 |   2 +-
 drivers/pmdomain/arm/scmi_perf_domain.c            |   2 +-
 drivers/pmdomain/mediatek/mt8183-pm-domains.h      |   7 +-
 drivers/pmdomain/mediatek/mtk-pm-domains.c         |  30 +--
 drivers/s390/cio/vfio_ccw_async.c                  |  16 ++
 drivers/s390/cio/vfio_ccw_chp.c                    |  31 ++-
 drivers/s390/cio/vfio_ccw_cp.c                     |  74 ++++--
 drivers/s390/cio/vfio_ccw_cp.h                     |  10 +
 drivers/s390/cio/vfio_ccw_drv.c                    |  21 +-
 drivers/s390/cio/vfio_ccw_fsm.c                    |   8 +-
 drivers/s390/cio/vfio_ccw_ops.c                    |  39 ++-
 drivers/s390/cio/vfio_ccw_private.h                |  10 +-
 drivers/s390/crypto/zcrypt_ccamisc.c               |  20 +-
 drivers/s390/crypto/zcrypt_ep11misc.c              |  16 +-
 drivers/s390/net/qeth_core_main.c                  |   3 +
 drivers/s390/net/qeth_l3_main.c                    |   5 +
 drivers/spi/spi-virtio.c                           |   2 +
 drivers/video/fbdev/core/fb_io_fops.c              |   8 +
 fs/binfmt_misc.c                                   |  32 ++-
 fs/btrfs/block-group.c                             |  36 +--
 fs/btrfs/zoned.c                                   |   5 +-
 fs/btrfs/zoned.h                                   |   6 +-
 fs/ceph/caps.c                                     |  17 +-
 fs/ceph/file.c                                     |   9 +-
 fs/ceph/mds_client.c                               |  11 +
 fs/ceph/mds_client.h                               |   1 +
 fs/ceph/mdsmap.c                                   |   2 +-
 fs/erofs/Kconfig                                   |   3 +-
 fs/proc/task_mmu.c                                 | 148 ++++++-----
 fs/smb/client/cifsglob.h                           |   6 -
 fs/smb/client/cifssmb.c                            |   6 +-
 fs/smb/client/connect.c                            |   2 +-
 fs/smb/client/smb1transport.c                      |   8 +-
 fs/smb/common/cifsglob.h                           |   5 +
 fs/smb/server/auth.c                               |   4 +-
 fs/smb/server/connection.c                         |  23 +-
 fs/smb/server/oplock.c                             |   8 +-
 fs/smb/server/server.c                             |   2 +-
 fs/smb/server/smb2pdu.c                            |  70 ++---
 fs/smb/server/smb2pdu.h                            |   9 -
 fs/smb/server/smb_common.c                         |  26 +-
 fs/smb/server/smb_common.h                         |  14 +-
 fs/xfs/libxfs/xfs_exchmaps.c                       |  10 +
 fs/xfs/libxfs/xfs_rtrefcount_btree.c               |   4 +-
 fs/xfs/libxfs/xfs_sb.c                             |   4 +-
 fs/xfs/scrub/agheader.c                            |   2 +-
 fs/xfs/scrub/agheader_repair.c                     | 152 +++++++++--
 fs/xfs/scrub/alloc.c                               |   5 +-
 fs/xfs/scrub/attr_repair.c                         |   3 +-
 fs/xfs/scrub/bmap.c                                |   5 +
 fs/xfs/scrub/dirtree_repair.c                      |  22 +-
 fs/xfs/scrub/inode_repair.c                        |   2 +-
 fs/xfs/scrub/nlinks.c                              |  13 +-
 fs/xfs/scrub/nlinks_repair.c                       |   7 +-
 fs/xfs/scrub/parent.c                              |   2 +-
 fs/xfs/scrub/rtbitmap_repair.c                     |  46 ++--
 fs/xfs/scrub/tempfile.c                            |   1 +
 fs/xfs/scrub/trace.h                               |   2 +
 fs/xfs/xfs_buf_item_recover.c                      |  57 ++--
 fs/xfs/xfs_dquot.c                                 |   3 +-
 fs/xfs/xfs_dquot_item_recover.c                    |   2 +-
 fs/xfs/xfs_rtalloc.c                               |   2 +-
 include/drm/drm_client.h                           |  16 +-
 include/linux/libata.h                             |   2 +
 include/linux/swapops.h                            |   4 +-
 include/net/ip_vs.h                                |   7 +
 include/uapi/linux/ip_vs.h                         |   6 -
 kernel/events/core.c                               |   8 +-
 kernel/futex/core.c                                |   4 +-
 kernel/sched/ext.c                                 |  97 ++++---
 kernel/trace/ftrace.c                              |   9 +-
 kernel/trace/ring_buffer.c                         | 118 +++++----
 mm/hmm.c                                           |   2 +-
 mm/huge_memory.c                                   |  22 +-
 mm/khugepaged.c                                    |   2 +-
 mm/madvise.c                                       |   2 +-
 mm/memory.c                                        |   4 +-
 mm/mempolicy.c                                     |   2 +-
 mm/migrate.c                                       |   2 +-
 mm/page_table_check.c                              |  20 +-
 mm/page_vma_mapped.c                               |   2 +-
 mm/pagewalk.c                                      |   2 +-
 mm/pgtable-generic.c                               |   2 +-
 net/ceph/cls_lock_client.c                         |  21 +-
 net/ceph/decode.c                                  |  18 +-
 net/ceph/osdmap.c                                  |   9 +-
 net/ipv4/tcp_input.c                               |   6 +-
 net/ipv4/tcp_timer.c                               |   4 +-
 net/mptcp/fastopen.c                               |   7 +-
 net/mptcp/options.c                                |  67 ++++-
 net/mptcp/pm.c                                     |   6 +-
 net/mptcp/protocol.c                               |   6 +
 net/mptcp/protocol.h                               |   1 +
 net/netfilter/ipset/ip_set_bitmap_gen.h            |   2 +-
 net/netfilter/ipset/ip_set_core.c                  |  19 +-
 net/netfilter/ipset/ip_set_list_set.c              |  10 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |   4 +-
 net/netfilter/ipvs/ip_vs_core.c                    |   6 +-
 net/netfilter/ipvs/ip_vs_ctl.c                     |   4 +-
 net/netfilter/ipvs/ip_vs_dh.c                      |   4 +-
 net/netfilter/ipvs/ip_vs_lblc.c                    |   2 +-
 net/netfilter/ipvs/ip_vs_lblcr.c                   |   8 +-
 net/netfilter/nf_flow_table_core.c                 |   7 +-
 net/netfilter/nf_tables_offload.c                  |   2 +-
 net/packet/af_packet.c                             |   7 +-
 net/sched/act_api.c                                |  10 +-
 net/sched/cls_bpf.c                                |  18 +-
 net/sched/cls_u32.c                                |   3 +
 net/sched/sch_api.c                                |  24 +-
 net/tls/tls_sw.c                                   |   5 +
 security/selinux/ss/policydb.c                     |  34 +++
 security/selinux/ss/services.c                     |  28 +-
 sound/hda/codecs/realtek/alc269.c                  |   1 +
 sound/soc/codecs/cs35l41-lib.c                     |   2 +-
 sound/soc/codecs/cs35l45-tables.c                  |  32 +--
 sound/soc/codecs/cs4265.c                          |   4 +-
 sound/soc/codecs/lpass-wsa-macro.c                 |   8 +-
 sound/soc/codecs/tas2562.c                         |   9 +-
 sound/soc/codecs/tas2781-i2c.c                     |  18 +-
 sound/soc/intel/common/sof-function-topology-lib.c |   7 +-
 sound/soc/sof/ipc4-pcm.c                           |  25 +-
 sound/soc/sof/ipc4-topology.c                      |  33 +++
 sound/soc/sof/sof-audio.c                          |   9 +-
 sound/soc/xilinx/xlnx_formatter_pcm.c              |  10 +-
 .../ftrace/test.d/dynevent/add_remove_uprobe.tc    |  27 +-
 tools/testing/selftests/net/mptcp/mptcp_join.sh    |   4 +-
 214 files changed, 2504 insertions(+), 1265 deletions(-)

Read the cover letter in its thread