6.1.184-rc1 review

Greg Kroah-Hartman dri-devel linux-patches linux-tegra lkml netdev stable 1 version Aug 20 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Aug 20303 patches 11 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/303	block: stop the timeout timer when releasing a never added disk`block/genhd.c`	+8 -4	0 replies
2/303	kernel/user: Allow user_struct::locked_vm to be usable for iommufd`include/linux/sched/user.h` `kernel/user.c`	+2 -1	0 replies
3/303	KVM: s390: pci: Fix memory accounting for pinned/unpinned pages`arch/s390/kvm/pci.c` `arch/s390/kvm/pci.h`	+36 ~~-14~~	0 replies
4/303	KVM: s390: pci: Fix missing error codes and memory unaccounting`arch/s390/kvm/pci.c`	+7 -2	0 replies
5/303	KVM: s390: pci: Fix resource leak on IRQ registration failure`arch/s390/kvm/pci.c`	+21 -8	0 replies
6/303	KVM: s390: pci: Fix aisb calculation`arch/s390/kvm/pci.c`	+1 -1	0 replies
7/303	f2fs: fix UAF issue in f2fs_merge_page_bio()`fs/f2fs/data.c`	+1 -1	0 replies
8/303	fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()`fs/crypto/policy.c`	+1 -1	0 replies
9/303	ipvs: separate destination availability state`include/net/ip_vs.h` `include/uapi/linux/ip_vs.h` `net/netfilter/ipvs/ip_vs_conn.c` +5 more	+21 ~~-20~~	0 replies
10/303	selinux: require every boolean value to be defined`security/selinux/ss/policydb.c`	+19 -0	0 replies
11/303	selinux: reject a class permission count below its inherited common`security/selinux/ss/policydb.c`	+12 -0	0 replies
12/303	selinux: do not cancel a policy conversion that never started`security/selinux/ss/services.c`	+3 -1	0 replies
13/303	selftests: mptcp: join: mark tests with data corruption as failed`tools/testing/selftests/net/mptcp/mptcp_join.sh`	+2 -2	0 replies
14/303	mptcp: options: reset DSS fields in case of unexpected size`net/mptcp/options.c`	+7 -1	0 replies
15/303	s390/qeth: validate user buffer length in SNMP and ARP query ioctls`drivers/s390/net/qeth_core_main.c` `drivers/s390/net/qeth_l3_main.c`	+8 -0	0 replies
16/303	ASoC: cs4265: sort the register default table`sound/soc/codecs/cs4265.c`	+2 -2	0 replies
17/303	ASoC: cs35l41: sort the register default table`sound/soc/codecs/cs35l41-lib.c`	+1 -1	0 replies
18/303	ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses`sound/soc/codecs/lpass-wsa-macro.c`	+4 -4	0 replies
19/303	powerpc/pseries: pci - logic bug`arch/powerpc/platforms/pseries/pci.c`	+1 -1	0 replies
20/303	Input: synaptics-rmi4 - fix F55 transmitter electrode count typo`drivers/input/rmi4/rmi_f55.c`	+2 -2	0 replies
21/303	Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet`drivers/input/mouse/focaltech.c`	+1 -1	0 replies
22/303	Input: psxpad-spi - set driver data before use`drivers/input/joystick/psxpad-spi.c`	+1 -0	0 replies
23/303	Input: atkbd - skip deactivate for Xiaomi Book Pro 14s internal keyboard`drivers/input/keyboard/atkbd.c`	+8 -0	0 replies
24/303	Input: iforce - validate input packet lengths`drivers/input/joystick/iforce/iforce-packets.c` `drivers/input/joystick/iforce/iforce-usb.c`	+13 -1	0 replies
25/303	powerpc/pseries: lparcfg - fix kbuf[] underflow`arch/powerpc/platforms/pseries/lparcfg.c`	+1 -1	0 replies
26/303	Input: synaptics-rmi4 - zero report size on F54 work error`drivers/input/rmi4/rmi_f54.c`	+8 -8	0 replies
27/303	Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer`drivers/input/rmi4/rmi_f54.c`	+10 -2	0 replies
28/303	Input: synaptics-rmi4 - block s_input when F54 queue is busy`drivers/input/rmi4/rmi_f54.c`	+6 -1	0 replies
29/303	Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue`drivers/input/rmi4/rmi_f54.c`	+8 -0	0 replies
30/303	crypto: qce - fix error path in devm_qce_register_algs`drivers/crypto/qce/core.c`	+1 -1	0 replies
31/303	libceph: fix multiple unsafe decodes in decode_locker()`net/ceph/cls_lock_client.c`	+9 -4	0 replies
32/303	ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()`kernel/trace/ftrace.c`	+5 -1	0 replies
33/303	openrisc: signal: do not restore privileged SR bits on sigreturn`arch/openrisc/include/asm/processor.h` `arch/openrisc/kernel/signal.c`	+5 -2	0 replies
34/303	Input: sur40 - fix input device registration ordering`drivers/input/touchscreen/sur40.c`	+11 ~~-10~~	0 replies
35/303	Input: sur40 - fix V4L error path cleanup`drivers/input/touchscreen/sur40.c`	+3 -1	0 replies
36/303	libceph: Avoid using invalid osd indices from primary_temp`net/ceph/osdmap.c`	+3 -2	0 replies
37/303	ceph: fix MDS random selection readiness predicate`fs/ceph/mdsmap.c`	+1 -1	0 replies
38/303	libceph: tolerate addrvecs with multiple entries of the same type`net/ceph/decode.c`	+9 -9	0 replies
39/303	mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit`drivers/mmc/host/omap_hsmmc.c`	+1 -1	0 replies
40/303	mmc: sdhci: unmap the bounce buffer before device release`drivers/mmc/host/sdhci.c`	+16 -0	0 replies
41/303	mmc: sdhci: make tuning_err a signed int`drivers/mmc/host/sdhci.h`	+1 -1	0 replies
42/303	mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition`drivers/mmc/host/atmel-mci.c`	+2 -0	0 replies
43/303	drm/radeon: fix autosuspend cleanup during teardown`drivers/gpu/drm/radeon/radeon_kms.c`	+1 -0	0 replies
44/303	s390/vfio_ccw: Ensure index for read/write regions are within range`drivers/s390/cio/vfio_ccw_async.c` `drivers/s390/cio/vfio_ccw_chp.c` `drivers/s390/cio/vfio_ccw_ops.c`	+34 -4	0 replies
45/303	s390/vfio_ccw: Fix out of bounds check on CCW array`drivers/s390/cio/vfio_ccw_cp.c`	+5 ~~-12~~	0 replies
46/303	drm/amdgpu: Reject UVD message with invalid number of h265 refs`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+3 -0	0 replies
47/303	drm/amdgpu: validate GEM_CREATE domain combinations`drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c`	+21 -0	0 replies
48/303	drm/amdgpu: Reject UVD message with dimensions above 4096`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+2 -2	0 replies
49/303	drm/amdgpu: Implement insert_end for VCE 3`drivers/gpu/drm/amd/amdgpu/vce_v3_0.c`	+22 -4	0 replies
50/303	drm/amdgpu: Fix UVD decode image min size calculation`drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c`	+2 -2	0 replies
51/303	xfs: fix ilock leak on error in xfs_dq_get_next_id`fs/xfs/xfs_dquot.c`	+2 -1	0 replies
52/303	xfs: dont swallow dquot recovery verification errors`fs/xfs/xfs_dquot_item_recover.c`	+1 -1	0 replies
53/303	xfs: check v5 superblock features early`fs/xfs/libxfs/xfs_sb.c`	+2 -2	0 replies
54/303	RISC-V: Provide pgtable_l5_enabled on rv32`arch/riscv/include/asm/pgtable-32.h` `arch/riscv/include/asm/pgtable.h` `arch/riscv/mm/init.c`	+5 -1	0 replies
55/303	net: bonding: fix use-after-free in bond_xmit_broadcast()`drivers/net/bonding/bond_main.c`	+1 -1	0 replies
56/303	riscv: Dont use PGD entries for the linear mapping`arch/riscv/mm/init.c`	+7 -2	0 replies
57/303	mm: do file ownership checks with the proper mount idmap`include/linux/fs.h` `mm/madvise.c` `mm/mincore.c`	+7 -4	0 replies
58/303	bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized`include/linux/bpf_lsm.h` `kernel/bpf/bpf_inode_storage.c` `security/bpf/hooks.c`	+16 -0	0 replies
59/303	iommu/amd: Dont split flush for amd_iommu_domain_flush_all()`drivers/iommu/amd/iommu.c`	+2 -1	0 replies
60/303	udmabuf: Do not create malformed scatterlists`drivers/dma-buf/udmabuf.c`	+5 -3	0 replies
61/303	dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning`drivers/dma-buf/udmabuf.c`	+2 -2	0 replies
62/303	fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()`drivers/fpga/dfl-afu-main.c`	+3 -0	0 replies
63/303	i2c: davinci: Unregister cpufreq notifier on probe failure`drivers/i2c/busses/i2c-davinci.c`	+3 -1	0 replies
64/303	Input: mms114 - fix touch indexing for MMS134S and MMS136`drivers/input/touchscreen/mms114.c`	+11 -4	0 replies
65/303	Input: mms114 - reject an oversized device packet size`drivers/input/touchscreen/mms114.c`	+6 -0	0 replies
66/303	VFS/audit: introduce kern_path_parent() for audit`fs/namei.c` `include/linux/namei.h` `kernel/audit.h` +2 more	+55 ~~-11~~	0 replies
67/303	audit: widen ino fields to u64`include/linux/audit.h` `kernel/audit.h` `kernel/audit_fsnotify.c` +2 more	+13 ~~-14~~	0 replies
68/303	audit: use unsigned int instead of unsigned`include/linux/audit.h` `include/linux/audit_arch.h` `kernel/audit.c` +5 more	+22 ~~-22~~	0 replies
69/303	audit: fix recursive locking deadlock in audit_dupe_exe()`kernel/audit.h` `kernel/audit_fsnotify.c` `kernel/audit_watch.c` +1 more	+57 ~~-26~~	0 replies
70/303	ALSA: hda: conexant: Remove mic bias threshold override`sound/pci/hda/patch_conexant.c`	+0 -3	0 replies
71/303	ALSA: hda: Fix cached processing coefficient verbs`sound/hda/hdac_regmap.c`	+2 -2	0 replies
72/303	serial: max310x: replace bare use of unsigned with unsigned int (checkpatch)`drivers/tty/serial/max310x.c`	+4 -4	0 replies
73/303	serial: max310x: implement gpio_chip::get_direction()`drivers/tty/serial/max310x.c`	+12 -0	0 replies
74/303	rxrpc: serialize kernel accept preallocation with socket teardown`net/rxrpc/call_accept.c`	+20 -7	0 replies
75/303	fbcon: Rename struct fbcon_ops to struct fbcon_par`drivers/video/fbdev/core/bitblit.c` `drivers/video/fbdev/core/fbcon.c` `drivers/video/fbdev/core/fbcon.h` +7 more	+547 ~~-556~~	0 replies
76/303	fbcon: Use correct type for vc_resize() return value`drivers/video/fbdev/core/fbcon.c`	+1 -2	0 replies
77/303	tipc: restrict socket queue dumps in enqueue tracepoints`net/tipc/socket.c`	+3 -3	0 replies
78/303	vduse: Use fixed 4KB bounce pages for non-4KB page size`drivers/vdpa/vdpa_user/iova_domain.c` `drivers/vdpa/vdpa_user/iova_domain.h`	+101 ~~-38~~	0 replies
79/303	vduse: remove unused vaddr parameter of vduse_domain_free_coherent`drivers/vdpa/vdpa_user/iova_domain.c` `drivers/vdpa/vdpa_user/iova_domain.h` `drivers/vdpa/vdpa_user/vduse_dev.c`	+3 -5	0 replies
80/303	vduse: take out allocations from vduse_dev_alloc_coherent`drivers/vdpa/vdpa_user/iova_domain.c` `drivers/vdpa/vdpa_user/iova_domain.h` `drivers/vdpa/vdpa_user/vduse_dev.c`	+19 ~~-24~~	0 replies
81/303	VDUSE: avoid leaking information to userspace`drivers/vdpa/vdpa_user/iova_domain.c` `drivers/vdpa/vdpa_user/vduse_dev.c`	+2 -2	0 replies
82/303	mlxsw: spectrum: On port enslavement to a LAG, join uppers bridges`drivers/net/ethernet/mellanox/mlxsw/spectrum.c`	+90 -0	0 replies
83/303	mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()`drivers/net/ethernet/mellanox/mlxsw/spectrum.c`	+1 -1	0 replies
84/303	octeontx2: Annotate mmio regions as __iomem`drivers/net/ethernet/marvell/octeontx2/af/rvu.c` `drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c`	+7 -8	0 replies
85/303	octeontx2-pf: clear stale mailbox IRQ state before request_irq()`drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c`	+4 -4	0 replies
86/303	octeontx2-vf: clear stale mailbox IRQ state before request_irq()`drivers/net/ethernet/marvell/octeontx2/nic/otx2_vf.c`	+8 -5	0 replies
87/303	ASoC: mediatek: mt8183: Check runtime resume during probe`sound/soc/mediatek/mt8183/mt8183-afe-pcm.c`	+8 -4	0 replies
88/303	ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get`sound/soc/sof/ipc3-control.c`	+24 ~~-10~~	0 replies
89/303	ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable()`sound/soc/mediatek/mt8192/mt8192-afe-pcm.c`	+17 ~~-29~~	0 replies
90/303	ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe()`sound/soc/mediatek/mt8192/mt8192-afe-pcm.c`	+22 ~~-43~~	0 replies
91/303	ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb`sound/soc/mediatek/mt8192/mt8192-afe-pcm.c`	+2 -2	0 replies
92/303	ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable`sound/soc/mediatek/mt8192/mt8192-afe-pcm.c`	+8 -9	0 replies
93/303	ASoC: mediatek: mt8192: Check runtime resume during probe`sound/soc/mediatek/mt8192/mt8192-afe-pcm.c`	+8 -4	0 replies
94/303	s390/cpum_cf: move cpum_cf_ctrset_size()`arch/s390/include/asm/cpu_mcf.h` `arch/s390/kernel/perf_cpum_cf.c` `arch/s390/kernel/perf_cpum_cf_common.c`	+47 ~~-48~~	0 replies
95/303	s390/cpum_cf: move stccm_avail()`arch/s390/include/asm/cpu_mcf.h` `arch/s390/kernel/perf_cpum_cf.c`	+6 -6	0 replies
96/303	s390/cpum_cf: remove in-kernel counting facility interface`arch/s390/include/asm/cpu_mcf.h` `arch/s390/kernel/perf_cpum_cf.c` `arch/s390/kernel/perf_cpum_cf_common.c`	+1 ~~-42~~	0 replies
97/303	s390/cpum_cf: merge source files for CPU Measurement counter facility`arch/s390/include/asm/cpu_mcf.h` `arch/s390/kernel/Makefile` `arch/s390/kernel/perf_cpum_cf.c` +2 more	+208 ~~-260~~	0 replies
98/303	s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()`arch/s390/kernel/perf_cpum_cf.c`	+3 -0	0 replies
99/303	netfilter: nft_set_pipapo: use GFP_KERNEL for insertions`net/netfilter/nft_set_pipapo.c`	+10 -7	0 replies
100/303	netfilter: nft_set_pipapo: move prove_locking helper around`net/netfilter/nft_set_pipapo.c`	+11 ~~-11~~	0 replies
101/303	netfilter: nft_set_pipapo: make pipapo_clone helper return NULL`net/netfilter/nft_set_pipapo.c`	+7 -7	0 replies
102/303	netfilter: nft_set_pipapo: prepare walk function for on-demand clone`net/netfilter/nft_set_pipapo.c`	+39 ~~-21~~	0 replies
103/303	netfilter: nft_set_pipapo: merge deactivate helper into caller`net/netfilter/nft_set_pipapo.c`	+9 ~~-30~~	0 replies
104/303	netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone`net/netfilter/nft_set_pipapo.c`	+15 ~~-10~~	0 replies
105/303	netfilter: nft_set_pipapo: move cloning of match info to insert/removal path`net/netfilter/nft_set_pipapo.c`	+49 ~~-21~~	0 replies
106/303	netfilter: nft_set_pipapo: dont leak bad clone into future transaction`net/netfilter/nft_set_pipapo.c` `net/netfilter/nft_set_pipapo.h`	+37 -5	0 replies
107/303	netfilter: nf_conntrack_sip: remove net variable shadowing`net/netfilter/nf_conntrack_sip.c`	+1 -2	0 replies
108/303	netfilter: nf_conntrack_sip: validate skb_dst() before accessing it`net/netfilter/nf_conntrack_sip.c`	+5 -2	0 replies
109/303	lsm: infrastructure management of the sock security`include/linux/lsm_hooks.h` `security/apparmor/include/net.h` `security/apparmor/lsm.c` +8 more	+155 ~~-122~~	0 replies
110/303	selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()`security/selinux/hooks.c`	+10 -9	0 replies
111/303	remoteproc: qcom: replace kstrdup with kstrndup`drivers/remoteproc/qcom_common.c`	+1 -1	0 replies
112/303	remoteproc: qcom: fix sparse warnings`drivers/remoteproc/qcom_common.c`	+2 -2	0 replies
113/303	remoteproc: qcom: pas: Adjust the phys addr wrt the mem region`drivers/remoteproc/qcom_common.c` `drivers/remoteproc/qcom_common.h` `drivers/remoteproc/qcom_q6v5_pas.c`	+32 -6	0 replies
114/303	remoteproc: qcom: Fix leak when custom dump_segments addition fails`drivers/remoteproc/qcom_common.c`	+10 -4	0 replies
115/303	netfilter: nf_tables: pass context structure to nft_parse_register_load`include/net/netfilter/nf_tables.h` `net/ipv4/netfilter/nft_dup_ipv4.c` `net/ipv6/netfilter/nft_dup_ipv6.c` +20 more	+39 ~~-37~~	0 replies
116/303	netfilter: nf_tables: drop unused 3rd argument from validate callback ops`include/net/netfilter/nf_tables.h` `include/net/netfilter/nft_fib.h` `include/net/netfilter/nft_meta.h` +23 more	+28 ~~-57~~	0 replies
117/303	netfilter: bitwise: rename some boolean operation functions`include/uapi/linux/netfilter/nf_tables.h` `net/netfilter/nft_bitwise.c`	+24 ~~-20~~	0 replies
118/303	netfilter: nf_tables: Remove unused nft_reduce_is_readonly()`include/net/netfilter/nf_tables.h`	+0 -5	0 replies
119/303	netfilter: nft_objref: validate objref and objrefmap expressions`net/netfilter/nft_objref.c`	+39 -0	0 replies
120/303	fs/ntfs3: Undo critial modificatins to keep directory consistency`fs/ntfs3/index.c`	+20 ~~-10~~	0 replies
121/303	ntfs3: validate split-point offset in indx_insert_into_buffer`fs/ntfs3/index.c`	+14 -0	0 replies
122/303	mm: move most of core MM initialization to mm/mm_init.c`mm/internal.h` `mm/mm_init.c` `mm/page_alloc.c`	+162 ~~-140~~	0 replies
123/303	mm/vmemmap/devdax: fix kernel crash when probing devdax devices`include/linux/mm.h` `mm/mm_init.c` `mm/sparse-vmemmap.c`	+13 ~~-13~~	0 replies
124/303	mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE`mm/mm_init.c`	+10 -3	0 replies
125/303	9p: skip nlink update in cacheless mode to fix WARN_ON`fs/9p/vfs_inode.c`	+9 -0	0 replies
126/303	mtd: maps: vmu-flash: fix fault in unaligned fixup`drivers/mtd/maps/vmu-flash.c`	+3 -5	0 replies
127/303	net: thunderbolt: Fix frags[] overflow by bounding frame_count`drivers/net/thunderbolt.c`	+6 -2	0 replies
128/303	taskstats: fill_stats_for_tgid: use for_each_thread()`kernel/taskstats.c`	+2 -3	0 replies
129/303	taskstats: retain dead thread stats in TGID queries`kernel/taskstats.c`	+33 ~~-29~~	0 replies
130/303	thunderbolt: Prevent XDomain delayed work use-after-free on disconnect`drivers/thunderbolt/xdomain.c` `include/linux/thunderbolt.h`	+33 ~~-10~~	0 replies
131/303	i2c: imx: separate atomic, dma and non-dma use case`drivers/i2c/busses/i2c-imx.c`	+70 ~~-37~~	0 replies
132/303	i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)`drivers/i2c/busses/i2c-imx.c`	+16 -3	0 replies
133/303	bpf,fork: wipe ->bpf_storage before bailouts that access it`kernel/fork.c`	+4 -4	0 replies
134/303	ovl: use linked upper dentry in copy-up tmpfile`fs/overlayfs/copy_up.c`	+10 -2	0 replies
135/303	dm-verity: avoid double increment of &use_bh_wq_enabled`drivers/md/dm-verity-target.c`	+2 -0	0 replies
136/303	dm: fix trailing statements`drivers/md/dm-flakey.c` `drivers/md/dm-integrity.c` `drivers/md/dm-io.c` +5 more	+65 ~~-60~~	0 replies
137/303	dm crypt: correct foo* to foo *`drivers/md/dm-crypt.c`	+9 -9	0 replies
138/303	dm: add missing empty lines`drivers/md/dm-bufio.c` `drivers/md/dm-cache-metadata.c` `drivers/md/dm-cache-policy-internal.h` +30 more	+239 ~~-27~~	0 replies
139/303	dm: remove unnecessary braces from single statement blocks`drivers/md/dm-integrity.c` `drivers/md/dm-stats.c` `drivers/md/dm-stripe.c` +4 more	+37 ~~-56~~	0 replies
140/303	dm-integrity: dont increment hash_offset twice`drivers/md/dm-integrity.c`	+0 -3	0 replies
141/303	dm-verity: make error counter atomic`drivers/md/dm-verity-target.c` `drivers/md/dm-verity.h`	+8 -6	0 replies
142/303	firmware_loader: introduce __free() cleanup hanler`include/linux/firmware.h`	+3 -0	0 replies
143/303	Input: ims-pcu - fix firmware leak in async update`drivers/input/misc/ims-pcu.c`	+2 -3	0 replies
144/303	wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()`drivers/net/wireless/marvell/libertas_tf/main.c`	+1 -1	0 replies
145/303	mmc: vub300: fix use-after-free on disconnect`drivers/mmc/host/vub300.c`	+6 -6	0 replies
146/303	mmc: vub300: rename probe error labels`drivers/mmc/host/vub300.c`	+11 -9	0 replies
147/303	mmc: vub300: fix use-after-free on probe failure`drivers/mmc/host/vub300.c`	+7 -3	0 replies
148/303	locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()`kernel/locking/spinlock_rt.c`	+24 -3	0 replies
149/303	net: mana: Validate the packet length reported by the NIC`drivers/net/ethernet/microsoft/mana/mana_en.c`	+13 -0	0 replies
150/303	net/sched: act_ct: preserve tc_skb_cb across defragmentation`net/sched/act_ct.c`	+5 -5	0 replies
151/303	net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink`net/ipv6/ip6_tunnel.c`	+3 -0	0 replies
152/303	treewide: rename pinctrl_gpio_direction_input_new()`drivers/gpio/gpio-mvebu.c` `drivers/gpio/gpio-pxa.c` `drivers/gpio/gpio-tegra.c` +20 more	+64 ~~-51~~	0 replies
153/303	gpio: tegra: do not call pinctrl for GPIO direction`drivers/gpio/gpio-tegra.c`	+2 ~~-16~~	0 replies
154/303	gpio: mt7621: avoid corruption of shared interrupt trigger state`drivers/gpio/gpio-mt7621.c`	+2 -0	0 replies
155/303	octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF`drivers/net/ethernet/marvell/octeontx2/af/rvu.c` `drivers/net/ethernet/marvell/octeontx2/af/rvu.h` `drivers/net/ethernet/marvell/octeontx2/af/rvu_cn10k.c`	+11 -1	0 replies
156/303	net/sched: taprio: avoid calling child->ops->dequeue(child) twice`net/sched/sch_taprio.c`	+3 -7	0 replies
157/303	net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked`net/sched/sch_taprio.c`	+1 -1	0 replies
158/303	tcp_bpf: Inline do_tcp_sendpages as its now a wrapper around tcp_sendmsg`net/ipv4/tcp_bpf.c`	+12 -8	0 replies
159/303	espintcp: Inline do_tcp_sendpages()`net/xfrm/espintcp.c`	+7 -3	0 replies
160/303	siw: Inline do_tcp_sendpages()`drivers/infiniband/sw/siw/siw_qp_tx.c`	+12 -5	0 replies
161/303	tcp_bpf, smc, tls, espintcp, siw: Reduce MSG_SENDPAGE_NOTLAST usage`drivers/infiniband/sw/siw/siw_qp_tx.c` `net/ipv4/tcp_bpf.c` `net/smc/smc_tx.c` +2 more	+17 ~~-13~~	0 replies
162/303	espintcp: use sk_msg_free_partial to fix partial send`net/xfrm/espintcp.c`	+7 ~~-27~~	0 replies
163/303	bootconfig: do not put quotes on cmdline items unless necessary`init/main.c`	+9 -3	0 replies
164/303	bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c`include/linux/bootconfig.h` `init/main.c` `lib/bootconfig.c`	+59 ~~-45~~	0 replies
165/303	bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()`lib/bootconfig.c`	+16 -7	0 replies
166/303	ipmi: fix refcount leak in i_ipmi_request()`drivers/char/ipmi/ipmi_msghandler.c`	+8 -0	0 replies
167/303	net: macb: drop in-flight Tx SKBs on close`drivers/net/ethernet/cadence/macb_main.c`	+20 -2	0 replies
168/303	tracing: Rename kvfree_rcu() to kvfree_rcu_mightsleep()`kernel/trace/trace_osnoise.c` `kernel/trace/trace_probe.c`	+2 -2	0 replies
169/303	tracing/osnoise: Call synchronize_rcu() when unregistering`kernel/trace/trace_osnoise.c`	+3 -1	0 replies
170/303	net: ipa: fix SMEM state handle leaks in SMP2P init`drivers/net/ipa/ipa_smp2p.c`	+22 -8	0 replies
171/303	octeontx2-pf: fix SQB pointer leak on init failure`drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c`	+1 -2	0 replies
172/303	ata: libata-core: Reject an invalid concurrent positioning ranges count`drivers/ata/libata-core.c` `drivers/ata/libata-scsi.c` `drivers/ata/libata.h`	+27 -2	0 replies
173/303	pmdomain: imx: Fix i.MX8MP power notifier`drivers/soc/imx/imx8m-blk-ctrl.c`	+26 -1	0 replies
174/303	fs/resctrl: Fix double-add of pseudo-locked regions RMID to free list`arch/x86/kernel/cpu/resctrl/rdtgroup.c`	+7 -5	0 replies
175/303	Bluetooth: Remove usage of the deprecated ida_simple_xx() API`net/bluetooth/hci_core.c` `net/bluetooth/hci_sock.c`	+7 -6	0 replies
176/303	Bluetooth: HCI: Remove HCI_AMP support`drivers/bluetooth/btmrvl_main.c` `drivers/bluetooth/btrsi.c` `drivers/bluetooth/btsdio.c` +16 more	+56 ~~-679~~	0 replies
177/303	vfio/pci: Fix racy bitfields and tighten struct layout`include/linux/vfio_pci_core.h`	+8 -5	0 replies
178/303	KVM: Introduce vcpu->wants_to_run`arch/arm64/kvm/arm.c` `arch/mips/kvm/mips.c` `arch/powerpc/kvm/powerpc.c` +5 more	+11 -7	0 replies
179/303	KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN`arch/x86/kvm/lapic.c`	+1 -1	0 replies
180/303	usb: musb: omap2430: clean up probe error handling`drivers/usb/musb/omap2430.c`	+10 ~~-13~~	0 replies
181/303	usb: musb: omap2430: Do not put borrowed of_node in probe`drivers/usb/musb/omap2430.c`	+0 -2	0 replies
182/303	drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()`drivers/gpu/drm/bridge/cdns-dsi.c`	+6 -5	0 replies
183/303	usb: gadget: f_tcm: synchronize delayed set_alt with teardown`drivers/usb/gadget/function/f_tcm.c` `drivers/usb/gadget/function/tcm.h`	+177 ~~-28~~	0 replies
184/303	usb: typec: ucsi: Only enable supported notifications`drivers/usb/typec/ucsi/ucsi.c`	+23 -2	0 replies
185/303	usb: typec: ucsi: split connector lock classes`drivers/usb/typec/ucsi/ucsi.c` `drivers/usb/typec/ucsi/ucsi.h`	+9 -0	0 replies
186/303	usb: typec: ucsi: Fix race condition and ordering in port unregistration`drivers/usb/typec/ucsi/ucsi.c`	+33 ~~-29~~	0 replies
187/303	drm/displayid: fix Tiled Display Topology ID size`drivers/gpu/drm/drm_connector.c` `include/drm/drm_connector.h` `include/drm/drm_displayid.h`	+10 ~~-10~~	0 replies
188/303	drm/tegra: fbdev: Remove offset into framebuffer memory`drivers/gpu/drm/tegra/fb.c`	+2 -6	0 replies
189/303	drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr functions`drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c`	+28 -2	0 replies
190/303	drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable()`drivers/gpu/drm/i915/display/intel_vrr.c`	+4 -2	0 replies
191/303	drm/i915/vrr: require valid min/max vfreq for VRR`drivers/gpu/drm/i915/display/intel_vrr.c`	+4 -0	0 replies
192/303	drm/i915/hdcp: Move to using intel_display in intel_hdcp`drivers/gpu/drm/i915/display/intel_display_core.h` `drivers/gpu/drm/i915/display/intel_hdcp.c` `drivers/gpu/drm/i915/i915_driver.c`	+12 -6	0 replies
193/303	drm/i915/hdcp: require monotonically increasing seq_num_v`drivers/gpu/drm/i915/display/intel_hdcp.c`	+4 -3	0 replies
194/303	drm/i915/hdcp: check streams[] bounds before overflow`drivers/gpu/drm/i915/display/intel_hdcp.c`	+4 -1	0 replies
195/303	media: i2c: imx219: Drop IMX219_VTS_* macros`drivers/media/i2c/imx219.c`	+7 ~~-17~~	0 replies
196/303	media: i2c: imx219: Correct the minimum vblanking value`drivers/media/i2c/imx219.c`	+1 -1	0 replies
197/303	media: i2c: imx219: Rename VTS to FRM_LENGTH`drivers/media/i2c/imx219.c`	+16 ~~-17~~	0 replies
198/303	media: imx219: Fix maximum frame length in lines`drivers/media/i2c/imx219.c`	+1 -1	0 replies
199/303	wifi: ath6kl: fix use-after-free in aggr_reset_state()`drivers/net/wireless/ath/ath6kl/txrx.c`	+1 -1	0 replies
200/303	wifi: brcmfmac: drain bus_reset work on device removal`drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c` `drivers/net/wireless/broadcom/brcm80211/brcmfmac/bus.h` `drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c` +4 more	+77 -3	0 replies
201/303	wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW)`drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c` `drivers/net/wireless/broadcom/brcm80211/brcmfmac/sdio.c` `include/linux/mmc/sdio_ids.h`	+3 -3	0 replies
202/303	wifi: brcmfmac: set F2 blocksize to 256 for BCM43752`drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c`	+1 -0	0 replies
203/303	ALSA: hda: codecs: hdmi: disable keep-alive before audio format change`sound/pci/hda/patch_hdmi.c`	+42 -6	0 replies
204/303	mei: bus: access mei_device under device_lock on cleanup`drivers/misc/mei/bus.c`	+9 -7	0 replies
205/303	mptcp: pm: avoid code duplication to lookup endp`net/mptcp/pm_netlink.c`	+6 ~~-14~~	0 replies
206/303	mptcp: add mptcp_userspace_pm_lookup_addr helper`net/mptcp/pm_userspace.c`	+36 ~~-35~~	0 replies
207/303	mptcp: pm: use addr entry for get_local_id`net/mptcp/pm.c` `net/mptcp/pm_netlink.c` `net/mptcp/pm_userspace.c` +1 more	+20 ~~-23~~	0 replies
208/303	mptcp: pm: userspace: fix use-after-free in get_local_id`net/mptcp/pm_userspace.c`	+5 -2	0 replies
209/303	sctp: avoid auth_enable sysctl UAF during netns teardown`net/sctp/protocol.c` `net/sctp/sysctl.c`	+19 ~~-10~~	0 replies
210/303	ceph: avoid fs reclaim while using current->journal_info`fs/ceph/mds_client.c`	+11 -0	0 replies
211/303	libceph: Amend checking to fix `make W=1` build breakage`net/ceph/osdmap.c`	+2 -2	0 replies
212/303	libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE`net/ceph/osdmap.c`	+2 -2	0 replies
213/303	libceph: add doutc and *_client debug macros support`include/linux/ceph/ceph_debug.h`	+38 -0	0 replies
214/303	ceph: pass the mdsc to several helpers`fs/ceph/caps.c` `fs/ceph/debugfs.c` `fs/ceph/dir.c` +7 more	+54 ~~-37~~	0 replies
215/303	ceph: rename _to_client() to _to_fs_client()`fs/ceph/addr.c` `fs/ceph/cache.c` `fs/ceph/caps.c` +10 more	+94 ~~-94~~	0 replies
216/303	ceph: fix hanging __ceph_get_caps() with stale mds_wanted`fs/ceph/caps.c` `fs/ceph/file.c` `fs/ceph/mds_client.h`	+22 -6	0 replies
217/303	ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP`sound/soc/fsl/fsl_sai.c`	+25 -4	0 replies
218/303	libceph: fix two unsafe bare decodes in decode_lockers()`net/ceph/cls_lock_client.c`	+6 -2	0 replies
219/303	net: move skb_gro_receive_list from udp to core`include/net/gro.h` `net/core/gro.c` `net/ipv4/udp_offload.c`	+30 ~~-29~~	0 replies
220/303	net: gro: fix double aggregation of flush-marked skbs`net/core/gro.c`	+3 -1	0 replies
221/303	net/sched: serialize qdisc_rtab_list against concurrent get/put`net/sched/sch_api.c`	+19 -5	0 replies
222/303	ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow`fs/smb/server/smbacl.c`	+9 -3	0 replies
223/303	ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl`fs/smb/server/smbacl.c`	+7 -1	0 replies
224/303	ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL`fs/smb/server/smbacl.c`	+6 -1	0 replies
225/303	super: fix emergency thaw deadlock on frozen block devices`fs/super.c`	+15 -4	0 replies
226/303	smb/server: rename include guard in smb_common.h`fs/smb/server/smb_common.h`	+3 -3	0 replies
227/303	ksmbd: rename smb2_get_msg to smb_get_msg`fs/smb/server/auth.c` `fs/smb/server/connection.c` `fs/smb/server/oplock.c` +4 more	+54 ~~-54~~	0 replies
228/303	smb/server: fix minimum SMB1 PDU size`fs/smb/server/connection.c`	+3 -2	0 replies
229/303	smb/server: fix minimum SMB2 PDU size`fs/smb/server/connection.c`	+2 -2	0 replies
230/303	ksmbd: validate minimum PDU size for transform requests`fs/smb/server/connection.c`	+11 -5	0 replies
231/303	mm/migrate_device: page_remove_rmap() -> folio_remove_rmap_pte()`mm/migrate_device.c`	+21 ~~-18~~	0 replies
232/303	mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE`mm/migrate_device.c`	+3 -2	0 replies
233/303	erofs: tidy up internal.h`fs/erofs/internal.h`	+28 ~~-55~~	0 replies
234/303	erofs: maintain cookies of share domain in self-contained list`fs/erofs/fscache.c` `fs/erofs/internal.h`	+24 ~~-24~~	0 replies
235/303	erofs: cap LZMA stream pool size`fs/erofs/Kconfig` `fs/erofs/decompressor_lzma.c`	+16 -1	0 replies
236/303	Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once`include/net/bluetooth/hci_sync.h` `net/bluetooth/hci_sync.c`	+44 -2	0 replies
237/303	Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT`net/bluetooth/mgmt.c`	+42 ~~-42~~	0 replies
238/303	Bluetooth: MGMT: Remove unused mgmt_pending_find_data`net/bluetooth/mgmt_util.c` `net/bluetooth/mgmt_util.h`	+0 ~~-21~~	0 replies
239/303	Bluetooth: MGMT: Protect mgmt_pending list with its own lock`include/net/bluetooth/hci_core.h` `net/bluetooth/hci_core.c` `net/bluetooth/mgmt.c` +2 more	+80 ~~-59~~	0 replies
240/303	Bluetooth: mgmt: fix UAF in pair command cancellation`net/bluetooth/mgmt.c`	+46 ~~-18~~	0 replies
241/303	mm/vmstat: fold stranded per-cpu node stats when a node comes online`mm/page_alloc.c`	+12 -4	0 replies
242/303	overflow: Change DEFINE_FLEX to take __counted_by member`include/linux/overflow.h`	+68 -0	0 replies
243/303	Bluetooth: hci_conn, hci_sync: Use __counted_by() to avoid -Wfamnae warnings`net/bluetooth/hci_event.c` `net/bluetooth/hci_sync.c`	+27 ~~-38~~	0 replies
244/303	Bluetooth: hci_core: Fix not handling hdev->le_num_of_adv_sets=1`include/net/bluetooth/hci_core.h` `net/bluetooth/hci_core.c` `net/bluetooth/hci_sync.c`	+18 -9	0 replies
245/303	Bluetooth: hci_sync: Fix advertising data UAFs`net/bluetooth/hci_sync.c`	+97 ~~-34~~	0 replies
246/303	ksmbd: conn lock to serialize smb2 negotiate`fs/smb/server/smb2pdu.c`	+2 -0	0 replies
247/303	ksmbd: reject repeated SMB2 NEGOTIATE requests`fs/smb/server/connection.h` `fs/smb/server/smb2pdu.c` `fs/smb/server/smb_common.c`	+37 ~~-15~~	0 replies
248/303	igc: remove napi_synchronize() in igc_down()`drivers/net/ethernet/intel/igc/igc_main.c`	+0 -1	0 replies
249/303	net: pktgen: fix code style (WARNING: Block comments)`net/core/pktgen.c`	+23 ~~-16~~	0 replies
250/303	net: pktgen: fix proc entry use-after-free`net/core/pktgen.c`	+1 -3	0 replies
251/303	veth: convert frag_list skbs before running XDP`drivers/net/veth.c`	+2 -2	0 replies
252/303	ice: fix VF interrupts cleanup`drivers/net/ethernet/intel/ice/ice_vf_lib.c` `drivers/net/ethernet/intel/ice/ice_vf_lib_private.h` `drivers/net/ethernet/intel/ice/ice_virtchnl.c`	+49 -0	0 replies
253/303	ice: fix memory leak in ice_lbtest_prepare_rings()`drivers/net/ethernet/intel/ice/ice_ethtool.c`	+5 -5	0 replies
254/303	fsnotify: opt-in for permission events at file open time`include/linux/fs.h`	+6 -0	0 replies
255/303	fs: dont block write during exec on pre-content watched files`fs/binfmt_elf.c` `fs/binfmt_elf_fdpic.c` `fs/exec.c` +2 more	+35 ~~-13~~	0 replies
256/303	binfmt_misc: restore write access when removing an entry`fs/binfmt_misc.c`	+3 -1	0 replies
257/303	i2c: bcm-iproc: remove printout on handled timeouts`drivers/i2c/busses/i2c-bcm-iproc.c`	+0 -2	0 replies
258/303	i2c: iproc: reset bus after timeout if START_BUSY is stuck`drivers/i2c/busses/i2c-bcm-iproc.c`	+11 -0	0 replies
259/303	can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure`drivers/net/can/usb/gs_usb.c`	+2 -2	0 replies
260/303	drm/amd/pm: fix torn gpu metrics reads`drivers/gpu/drm/amd/pm/amdgpu_dpm.c` `drivers/gpu/drm/amd/pm/amdgpu_pm.c` `drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h`	+12 ~~-11~~	0 replies
261/303	drm/amd/pm: fix pptable use-after-free`drivers/gpu/drm/amd/pm/amdgpu_dpm.c` `drivers/gpu/drm/amd/pm/amdgpu_pm.c` `drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h`	+16 ~~-10~~	0 replies
262/303	can: rcar_canfd: Invert reset assert order`drivers/net/can/rcar/rcar_canfd.c`	+2 -2	0 replies
263/303	can: rcar_canfd: Use devm_clk_get_optional() for RAM clk`drivers/net/can/rcar/rcar_canfd.c`	+18 -1	0 replies
264/303	can: rcar_canfd: Extract rcar_canfd_global_{,de}init()`drivers/net/can/rcar/rcar_canfd.c`	+104 ~~-78~~	0 replies
265/303	can: rcar_canfd: change the initializing flow for clocks and resets`drivers/net/can/rcar/rcar_canfd.c`	+16 ~~-16~~	0 replies
266/303	drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini`drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c`	+16 ~~-14~~	0 replies
267/303	mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF`mm/pagewalk.c` `mm/vmalloc.c`	+74 -7	0 replies
268/303	veth: Introduce veth_xdp_buff wrapper for xdp_buff`drivers/net/veth.c`	+31 ~~-25~~	0 replies
269/303	veth: fix skb length accounting after XDP frag adjustment`drivers/net/veth.c`	+14 -8	0 replies
270/303	KVM: SVM: Serialize accesses to the owner and mirror list with separate lock`arch/x86/kvm/svm/sev.c` `arch/x86/kvm/svm/svm.h`	+26 -9	0 replies
271/303	openvswitch: use skb_ip_totlen in conntrack`net/openvswitch/conntrack.c`	+1 -1	0 replies
272/303	net: sched: use skb_ip_totlen and iph_totlen`net/sched/act_ct.c` `net/sched/sch_cake.c`	+2 -2	0 replies
273/303	openvswitch: move key and ovs_cb update out of handle_fragments`net/openvswitch/conntrack.c`	+25 ~~-12~~	0 replies
274/303	net/sched: act_ct: fix sk_buff leak when the header checks reject a packet`net/sched/act_ct.c`	+25 -4	0 replies
275/303	netfilter: conntrack: sctp: use nf log infrastructure for invalid packets`net/netfilter/nf_conntrack_proto_sctp.c`	+15 ~~-29~~	0 replies
276/303	netfilter: nf_conntrack: defer invalid log until after unlock`net/netfilter/nf_conntrack_proto.c` `net/netfilter/nf_conntrack_proto_sctp.c` `net/netfilter/nf_conntrack_proto_tcp.c`	+102 ~~-48~~	0 replies
277/303	arm64: tegra: Add EL2 virtual timer interrupt for Tegra194`arch/arm64/boot/dts/nvidia/tegra194.dtsi`	+2 -0	0 replies
278/303	crypto: ccm - Set rfc4309 maxauthsize from child`crypto/ccm.c`	+1 -1	0 replies
279/303	netfilter: ipset: fix refcount race between list:set GC and swap`net/netfilter/ipset/ip_set_core.c`	+13 -6	0 replies
280/303	netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path`net/netfilter/nf_tables_offload.c`	+1 -1	0 replies
281/303	netfilter: flowtable: publish GC-visible tuple last`net/netfilter/nf_flow_table_core.c`	+4 -3	0 replies
282/303	netfilter: ipset: fix list type element drift bug`net/netfilter/ipset/ip_set_list_set.c`	+5 -2	0 replies
283/303	netfilter: ipset: let destroy callbacks adjust ext mem size`net/netfilter/ipset/ip_set_bitmap_gen.h` `net/netfilter/ipset/ip_set_list_set.c`	+2 -3	0 replies
284/303	ipvlan: inherit needed_headroom and needed_tailroom from phy_dev`drivers/net/ipvlan/ipvlan_main.c`	+4 -0	0 replies
285/303	macvlan: inherit needed_headroom and needed_tailroom from lowerdev`drivers/net/macvlan.c`	+4 -0	0 replies
286/303	net: packet: fix wrong transport_header when sending VLAN-tagged frame`net/packet/af_packet.c`	+2 -2	0 replies
287/303	net/tls: Fail tls_sw_splice_read() after a failed async decrypt`net/tls/tls_sw.c`	+5 -0	0 replies
288/303	ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers`sound/soc/xilinx/xlnx_formatter_pcm.c`	+4 -6	0 replies
289/303	af_packet: Dont send zero-byte data in tpacket_snd().`net/packet/af_packet.c`	+3 -0	0 replies
290/303	net/sched: cls_u32: skip hash tables in u32_bind_class()`net/sched/cls_u32.c`	+3 -0	0 replies
291/303	net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG`drivers/net/ethernet/ti/am65-cpsw-nuss.c`	+2 -0	0 replies
292/303	net/x25: fix use-after-free of the socket by its timers`net/x25/af_x25.c` `net/x25/x25_timer.c`	+18 ~~-11~~	0 replies
293/303	mm/huge_memory: fix huge_zero_pfn race`mm/huge_memory.c`	+29 ~~-14~~	0 replies
294/303	binfmt_misc: use exe_file_deny_write_access() for the interpreter clone`fs/binfmt_misc.c`	+8 -2	0 replies
295/303	Bluetooth: hci_sync: Fix not using correct handle`net/bluetooth/hci_sync.c`	+1 -1	0 replies
296/303	RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages`drivers/infiniband/sw/siw/siw_qp_tx.c`	+2 -3	0 replies
297/303	usb: typec: ucsi: Correct teardown ordering in ucsi_init() error path`drivers/usb/typec/ucsi/ucsi.c`	+2 -2	0 replies
298/303	erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms`fs/erofs/Kconfig`	+2 -1	0 replies
299/303	udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()`drivers/dma-buf/udmabuf.c`	+5 -4	0 replies
300/303	Bluetooth: hci_sock: Prevent race in socket write iter and sock bind`net/bluetooth/hci_sock.c`	+2 -0	0 replies
301/303	Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate`net/bluetooth/hci_sync.c`	+9 -2	0 replies
302/303	Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync`net/bluetooth/mgmt.c`	+16 -0	0 replies
303/303	Bluetooth: mgmt: fix pending command UAF in EIR updates`net/bluetooth/mgmt.c`	+18 -2	0 replies

Reviews trailers per patch

190 of 303 patches have a Reviewed-by or Acked-by.

Patch	Florian Westphal	Jozsef Kadlecsik	Weidong Zhu	Christoph Hellwig	Stephen Smalley	Matthieu Baerts (NGI0)	Alexandra Winter	Joe Damato	Charles Keepax	Richard Fitzgerald	Kevin Tian	Eric Auger	Nicolin Chen	Yi Liu	Lixiao Yang	Matthew Rosato	Christian Borntraeger	Niklas Schnelle	Julian Anastasov	Srinivas Kandagatla	Hans Verkuil	Bartosz Golaszewski	Ilya Dryomov	Masami Hiramatsu (Google)	Nayna Jain	R Nageswara Sastry	Viacheslav Dubeyko	Linus Walleij	Frank Li	Leo Liu	Christian König	Ruijing Dong	Alex Deucher	Darrick J. Wong	Jan Kara	Christian Brauner (Amutable)	David Hildenbrand (Arm)	Emil Tsalapatis	Amery Hung	Wei Wang	Jason Gunthorpe	Samiullah Khawaja	Suravee Suthikulpanit	Vasant Hegde	Andrew Zhou	Vivek Kasireddy	Andy Shevchenko	Hugo Villeneuve	Sam Ravnborg	Thomas Zimmermann	Tung Nguyen	Xu Yilun	Jason Wang	Xie Yongji	Eugenio Pérez	Danielle Ratson	Ido Schimmel	Simon Horman	Ratheesh Kannoth	Liam Girdwood	Bard Liao	Chen-Yu Tsai	Alexandre Mergnat	Hendrik Brueckner	Ilya Leoshkevich	Thomas Richter	Bryam Vargas	Stefano Brivio	Paul Moore	Waiman Long	Richard Guy Briggs	Sibi Sankar	Mukesh Ojha	Pablo Neira Ayuso	David Hildenbrand	Vlastimil Babka	Joao Martins	Mike Rapoport (Microsoft)	Liam R. Howlett	Mika Westerberg	Balbir Singh	Oleksij Rempel	Carlos Song	Stefan Eichenberger	Amir Goldstein	Miklos Szeredi	Seesee	Luis Chamberalin	Kees Cook	John Johansen	Kurt Kanzenbach	Victor Nogueira	Jamal Hadi Salim	Bernard Metzler	Tom Talpey	Nicolai Buchwitz	Daniel Bristot de Oliveira	Paul E. McKenney	Larysa Zaremba	Alex Elder	Niklas Cassel	Johan Hovold	David Matlack	Sean Christopherson	Jim Mattson	James Houghton	Chao Gao	Tomi Valkeinen	Luca Ceresoli	Jann Horn	Sebastian Andrzej Siewior	Al Viro	Heikki Krogerus	Haiyang Zhang	Kuniyuki Iwashima	Dave Airlie	Jacopo Mondi	Dave Stevenson	Laurent Pinchart	Vasanthakumar Thiagarajan	Arend van Spriel	Alexander Kaplan	Menachem Adin	Xuanqiang Luo	Xin Long	Xiubo Li	Alex Markuze	Patrick Donnelly	Milind Changire	Shengjiu Wang	Paolo Abeni	Eric Dumazet	David Ahern	Willem de Bruijn	Namjae Jeon	ChenXiaoSong	Ankit Nautiyal	Jani Nikula	Suraj Kandpal	Benson Leung	David Howells	[email protected]	[email protected]	Ren Wei	Gustavo A. R. Silva	Przemek Kitszel	Maciej Fijalkowski	Dima Ruinskiy	Moriya Kadosh	Toke Høiland-Jørgensen	Lorenzo Bianconi	Aleksandr Loktionov	Patryk Holda	Jacob Keller	Rinitha S	Ray Jui	Kenneth Feng	Vincent Mailhol	Biju Das	Geert Uytterhoeven	Claudiu Beznea	Dev Jain	Kiryl Shutsemau	Zi Yan	Yue Hu	Jingbo Xu	Chao Yu	Jia Zhu	Gao Xiang	Aaron Conole	Hangbin Liu	Jakub Kicinski	Sabrina Dubroca	Michal Simek	Jiayuan Chen	Chintan Vankar	Chaitanya Kumar Borah	SJ Park	Mikhail Gavrilov	[email protected]	Florian Fainelli	Brett A C Sheffield	Miguel Ojeda	Peter Schneider	Francesco Dolcini	Shuah Khan	Ron Economos	Mark Brown
Series																																																																																																																																																																																					T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/303			A-b	R-b
2/303											R-b	R-b	T-b	T-b	T-b	T-b
3/303																R-b T-b	R-b
4/303																R-b T-b	R-b
5/303																R-b T-b	R-b
6/303																		R-b
7/303
8/303
9/303																			A-b
10/303					A-b
11/303					A-b
12/303					A-b
13/303						R-b
14/303
15/303							R-b	R-b
16/303									R-b	R-b
17/303									R-b	R-b
18/303																				R-b
19/303																									A-b	T-b
20/303
21/303
22/303
23/303																																													R-b
24/303
25/303																									A-b	T-b
26/303
27/303
28/303																					R-b
29/303
30/303																						R-b
31/303																							R-b
32/303																								A-b
33/303
34/303
35/303
36/303																							R-b
37/303																											R-b
38/303																							R-b
39/303
40/303																												R-b
41/303																													R-b
42/303
43/303
44/303																R-b
45/303																R-b
46/303																														R-b
47/303																															R-b
48/303																														A-b		R-b
49/303																																	A-b
50/303																														A-b		R-b
51/303				R-b																														R-b
52/303				R-b																														R-b
53/303																																		R-b
54/303
55/303
56/303
57/303																																			R-b	R-b	A-b
58/303																																						R-b	R-b
59/303																																								R-b	R-b	R-b	R-b	R-b
60/303																																														R-b
61/303																																														A-b
62/303																																																				R-b
63/303																						R-b
64/303																																																																			R-b
65/303
66/303
67/303																																																																					A-b
68/303
69/303																																																																						A-b	A-b
70/303
71/303
72/303																																															R-b
73/303																						R-b						R-b																				R-b
74/303
75/303																																																	R-b
76/303																																																		R-b
77/303																																																			R-b
78/303
79/303
80/303																																																					A-b
81/303																																																						R-b	R-b
82/303																																																								R-b
83/303																																																									R-b
84/303
85/303																																																										R-b	R-b
86/303																																																										R-b	R-b
87/303
88/303																																																												R-b	R-b
89/303																																																														R-b
90/303																																																														R-b
91/303																																																															R-b
92/303
93/303
94/303																																																																A-b
95/303																																																																A-b
96/303
97/303																																																																A-b
98/303																																																																	R-b	A-b
99/303
100/303																																																																				R-b
101/303																																																																				R-b
102/303																																																																				R-b
103/303																																																																				R-b
104/303																																																																				R-b
105/303																																																																				R-b
106/303																																																																				R-b																			Reported-and-tested-by
107/303
108/303
109/303					A-b																																																																A-b																				R-b	R-b
110/303					R-b T-b
111/303
112/303
113/303																																																																								R-b
114/303																																																																									R-b
115/303
116/303
117/303
118/303																																																										R-b
119/303																																																																										R-b
120/303
121/303
122/303																																																																											A-b	A-b
123/303																																																																													R-b
124/303																																					A-b																																									A-b	A-b
125/303
126/303
127/303																																																																																A-b
128/303
129/303																																																																																	A-b
130/303
131/303																													R-b																																																					A-b
132/303																																																																																		A-b	A-b	R-b
133/303
134/303																																																																																					R-b	R-b
135/303
136/303
137/303
138/303
139/303
140/303
141/303
142/303																																																																																								A-b
143/303
144/303
145/303
146/303
147/303																																																																																																						R-b
148/303																																																																																																														Decoded-by	R-b	A-b
149/303																																																																																																																		R-b
150/303
151/303																																																																																																																			R-b
152/303																												A-b
153/303
154/303
155/303
156/303																																																																																											R-b
157/303																																																																																												R-b	A-b
158/303
159/303
160/303																																																																																														R-b	R-b
161/303
162/303
163/303
164/303
165/303
166/303
167/303																																																																																																R-b
168/303																																																																																																	A-b	A-b
169/303
170/303																																																																																																			R-b	R-b
171/303																																																											R-b
172/303																																																																																																					R-b
173/303																													R-b
174/303
175/303
176/303
177/303											R-b
178/303
179/303																																																																																																							Debugged-by	Debugged-by	Debugged-by	Debugged-by R-b	R-b
180/303
181/303																																																																																																						R-b
182/303																																																																																																												R-b	R-b
183/303
184/303																																																																																																																	R-b
185/303																																																																																																																	R-b
186/303																																																																																																																																												R-b
187/303																																																																																																																				R-b
188/303
189/303																															R-b
190/303																																																																																																																																									R-b
191/303																																																																																																																																									R-b
192/303																																																																																																																																										R-b
193/303																																																																																																																																											R-b
194/303																																																																																																																																											R-b
195/303																																																																																																																					R-b	R-b
196/303																																																																																																																					R-b	R-b
197/303																																																																																																																						R-b
198/303																																																																																																																						R-b	R-b
199/303																																																																																																																								R-b
200/303																																																																																																																									A-b
201/303																																																																																																																									A-b
202/303																																																																																																																									A-b
203/303																																																																																																																										T-b
204/303																																																																																																																											R-b
205/303
206/303						R-b
207/303						R-b
208/303						R-b																																																																																																																						T-b
209/303																																																																																																																													A-b
210/303																											R-b																																																																																																			R-b
211/303																											R-b
212/303																																																																																																																															R-b
213/303																																																																																																																																R-b	R-b
214/303																																																																																																																																R-b	R-b
215/303																																																																																																																																R-b	R-b
216/303																																																																																																																															R-b
217/303																																																																																																																																		R-b
218/303																											R-b
219/303																																																																																																																																			A-b	R-b	R-b	R-b
220/303																																																																																																																																						R-b
221/303																																																																																													A-b																																							R-b
222/303																																																																																																																																							A-b
223/303																																																																																																																																							A-b	R-b
224/303																																																																																																																																							A-b
225/303
226/303																																																																																																																																							A-b
227/303
228/303																																																																																																																																							A-b						R-b
229/303																																																																																																																																							A-b						R-b
230/303
231/303
232/303																																																																																	R-b																																																																																			A-b
233/303																																																																																																																																																																					R-b	R-b	R-b
234/303																																																																																																																																																																								R-b
235/303																																																																																																																																																																									R-b
236/303
237/303
238/303																																																										R-b
239/303																																																																																																																																														T-b	T-b
240/303																																																																																																																																																R-b
241/303
242/303																																																																																																																																																	R-b	R-b
243/303
244/303
245/303
246/303
247/303
248/303																																																																																																																																																			R-b	R-b	T-b
249/303																																																																																																																																																						R-b
250/303																																																										R-b
251/303																																																																																																																																																						R-b	A-b
252/303																																																										R-b																																																																																														R-b	T-b
253/303																																																																																																																																																										R-b	T-b
254/303
255/303																																				A-b
256/303
257/303
258/303																																																																																																																																																												A-b
259/303
260/303																																																																																																																																																													R-b
261/303																																																																																																																																																													R-b
262/303																																																																																																																																																														R-b	R-b
263/303																																																																																																																																																																R-b
264/303
265/303																																																																																																																																																														R-b		R-b	T-b
266/303																															R-b
267/303																																					A-b																																									R-b																																																																																				R-b	R-b
268/303
269/303																																																																																																																																																							A-b
270/303
271/303																																																																																																																																				R-b																																						R-b
272/303																																																																																																																																				R-b
273/303	A-b																																																									R-b																																																																																																																R-b
274/303																																																																																													A-b
275/303
276/303	R-b
277/303
278/303
279/303		A-b
280/303
281/303
282/303		A-b
283/303		A-b
284/303																																																																																																																																																																											R-b
285/303																																																																																																																																																																											R-b
286/303																																																																																																																																						R-b
287/303																																																																																																																																																																												R-b	R-b
288/303																																																																																																																																																																														R-b
289/303																																																																																																																																						R-b																																									R-b
290/303																																																																																													A-b
291/303																																																										R-b																																																																																																																						R-b
292/303
293/303																																					A-b
294/303
295/303
296/303																																																																																														A-b																																															R-b
297/303																																																																																																																	R-b																																																																T-b
298/303																																																																																																																																																																T-b																		T-b
299/303																																																																																																																																																																																			R-b
300/303																																																																																																																																																																																				T-b
301/303
302/303
303/303

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 188 reviewers.

Read the v1 thread

Cover letter [PATCH 6.1 000/303] 6.1.184-rc1 review

This is the start of the stable review cycle for the 6.1.184 release. There are 303 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 22 Aug 2026 14:51:11 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.184-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.1.184-rc1

Zihan Xi <[email protected]>
Bluetooth: mgmt: fix pending command UAF in EIR updates

Pauli Virtanen <[email protected]>
Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync

Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate

Edward Adam Davis <[email protected]>
Bluetooth: hci_sock: Prevent race in socket write iter and sock bind

Robert Mader <[email protected]>
udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()

Gao Xiang <[email protected]>
erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms

Andrei Kuchynski <[email protected]>
usb: typec: ucsi: Correct teardown ordering in ucsi_init() error path

Pedro Falcato <[email protected]>
RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Fix not using correct handle

Christian Brauner <[email protected]>
binfmt_misc: use exe_file_deny_write_access() for the interpreter clone

Lorenzo Stoakes (ARM) <[email protected]>
mm/huge_memory: fix huge_zero_pfn race

Baul Lee <[email protected]>
net/x25: fix use-after-free of the socket by its timers

Siddharth Vadapalli <[email protected]>
net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

Zhang Changzhong <[email protected]>
net/sched: cls_u32: skip hash tables in u32_bind_class()

Eric Dumazet <[email protected]>
af_packet: Don't send zero-byte data in tpacket_snd().

Rosen Penev <[email protected]>
ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

Chuck Lever <[email protected]>
net/tls: Fail tls_sw_splice_read() after a failed async decrypt

Wei Fang <[email protected]>
net: packet: fix wrong transport_header when sending VLAN-tagged frame

Eric Dumazet <[email protected]>
macvlan: inherit needed_headroom and needed_tailroom from lowerdev

Eric Dumazet <[email protected]>
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

Florian Westphal <[email protected]>
netfilter: ipset: let destroy callbacks adjust ext mem size

Florian Westphal <[email protected]>
netfilter: ipset: fix list type element drift bug

Jérémy Jean <[email protected]>
netfilter: flowtable: publish GC-visible tuple last

Alexey Velichayshiy <[email protected]>
netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path

Xiang Mei (Microsoft) <[email protected]>
netfilter: ipset: fix refcount race between list:set GC and swap

Herbert Xu <[email protected]>
crypto: ccm - Set rfc4309 maxauthsize from child

Jon Hunter <[email protected]>
arm64: tegra: Add EL2 virtual timer interrupt for Tegra194

Zihan Xi <[email protected]>
netfilter: nf_conntrack: defer invalid log until after unlock

Florian Westphal <[email protected]>
netfilter: conntrack: sctp: use nf log infrastructure for invalid packets

Hyunjung Ko <[email protected]>
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet

Xin Long <[email protected]>
openvswitch: move key and ovs_cb update out of handle_fragments

Xin Long <[email protected]>
net: sched: use skb_ip_totlen and iph_totlen

Xin Long <[email protected]>
openvswitch: use skb_ip_totlen in conntrack

Paolo Bonzini <[email protected]>
KVM: SVM: Serialize accesses to the owner and mirror list with separate lock

Sun Jian <[email protected]>
veth: fix skb length accounting after XDP frag adjustment

Stanislav Fomichev <[email protected]>
veth: Introduce veth_xdp_buff wrapper for xdp_buff

Lorenzo Stoakes (ARM) <[email protected]>
mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF

Pierre-Eric Pelloux-Prayer <[email protected]>
drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini

Tu Nguyen <[email protected]>
can: rcar_canfd: change the initializing flow for clocks and resets

Geert Uytterhoeven <[email protected]>
can: rcar_canfd: Extract rcar_canfd_global_{,de}init()

Biju Das <[email protected]>
can: rcar_canfd: Use devm_clk_get_optional() for RAM clk

Geert Uytterhoeven <[email protected]>
can: rcar_canfd: Invert reset assert order

Yang Wang <[email protected]>
drm/amd/pm: fix pptable use-after-free

Yang Wang <[email protected]>
drm/amd/pm: fix torn gpu metrics reads

Marc Kleine-Budde <[email protected]>
can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure

Jonas Gorski <[email protected]>
i2c: iproc: reset bus after timeout if START_BUSY is stuck

Wolfram Sang <[email protected]>
i2c: bcm-iproc: remove printout on handled timeouts

Christian Brauner <[email protected]>
binfmt_misc: restore write access when removing an entry

Amir Goldstein <[email protected]>
fs: don't block write during exec on pre-content watched files

Amir Goldstein <[email protected]>
fsnotify: opt-in for permission events at file open time

Dawei Feng <[email protected]>
ice: fix memory leak in ice_lbtest_prepare_rings()

Dawid Osuchowski <[email protected]>
ice: fix VF interrupts cleanup

Matt Fleming <[email protected]>
veth: convert frag_list skbs before running XDP

Chengfeng Ye <[email protected]>
net: pktgen: fix proc entry use-after-free

Peter Seiderer <[email protected]>
net: pktgen: fix code style (WARNING: Block comments)

David Carlier <[email protected]>
igc: remove napi_synchronize() in igc_down()

Namjae Jeon <[email protected]>
ksmbd: reject repeated SMB2 NEGOTIATE requests

Namjae Jeon <[email protected]>
ksmbd: conn lock to serialize smb2 negotiate

Chengfeng Ye <[email protected]>
Bluetooth: hci_sync: Fix advertising data UAFs

Luiz Augusto von Dentz <[email protected]>

    Bluetooth: hci_core: Fix not handling hdev->le_num_of_adv_sets=1

Gustavo A. R. Silva <[email protected]>
Bluetooth: hci_conn, hci_sync: Use __counted_by() to avoid -Wfamnae warnings

Kees Cook <[email protected]>
overflow: Change DEFINE_FLEX to take __counted_by member

Gregory Price <[email protected]>
mm/vmstat: fold stranded per-cpu node stats when a node comes online

Zihan Xi <[email protected]>
Bluetooth: mgmt: fix UAF in pair command cancellation

Luiz Augusto von Dentz <[email protected]>
Bluetooth: MGMT: Protect mgmt_pending list with its own lock

Dr. David Alan Gilbert <[email protected]>
Bluetooth: MGMT: Remove unused mgmt_pending_find_data

Luiz Augusto von Dentz <[email protected]>
Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once

Michael Bommarito <[email protected]>
erofs: cap LZMA stream pool size

Jingbo Xu <[email protected]>
erofs: maintain cookies of share domain in self-contained list

Gao Xiang <[email protected]>
erofs: tidy up internal.h

Kefeng Wang <[email protected]>
mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE

David Hildenbrand <[email protected]>

    mm/migrate_device: page_remove_rmap() -> folio_remove_rmap_pte()

Namjae Jeon <[email protected]>
ksmbd: validate minimum PDU size for transform requests

ChenXiaoSong <[email protected]>
smb/server: fix minimum SMB2 PDU size

ChenXiaoSong <[email protected]>
smb/server: fix minimum SMB1 PDU size

Namjae Jeon <[email protected]>
ksmbd: rename smb2_get_msg to smb_get_msg

ChenXiaoSong <[email protected]>
smb/server: rename include guard in smb_common.h

Christian Brauner <[email protected]>
super: fix emergency thaw deadlock on frozen block devices

Wentao Guan <[email protected]>
ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL

Haofeng Li <[email protected]>
ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl

Ferry Meng <[email protected]>
ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow

Aldo Ariel Panzardo <[email protected]>
net/sched: serialize qdisc_rtab_list against concurrent get/put

Shiming Cheng <[email protected]>
net: gro: fix double aggregation of flush-marked skbs

Felix Fietkau <[email protected]>
net: move skb_gro_receive_list from udp to core

Pavitra Jha <[email protected]>
libceph: fix two unsafe bare decodes in decode_lockers()

Chancel Liu <[email protected]>
ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP

Max Kellermann <[email protected]>
ceph: fix hanging __ceph_get_caps() with stale mds_wanted

Xiubo Li <[email protected]>
ceph: rename _to_client() to _to_fs_client()

Xiubo Li <[email protected]>
ceph: pass the mdsc to several helpers

Xiubo Li <[email protected]>
libceph: add doutc and *_client debug macros support

Xiang Mei <[email protected]>
libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE

Andy Shevchenko <[email protected]>
libceph: Amend checking to fix make W=1 build breakage

Max Kellermann <[email protected]>

    ceph: avoid fs reclaim while using current->journal_info

Zhiling Zou <[email protected]>
sctp: avoid auth_enable sysctl UAF during netns teardown

Geliang Tang <[email protected]>
mptcp: pm: userspace: fix use-after-free in get_local_id

Geliang Tang <[email protected]>
mptcp: pm: use addr entry for get_local_id

Geliang Tang <[email protected]>
mptcp: add mptcp_userspace_pm_lookup_addr helper

Geliang Tang <[email protected]>
mptcp: pm: avoid code duplication to lookup endp

Alexander Usyskin <[email protected]>
mei: bus: access mei_device under device_lock on cleanup

Kai Vehmanen <[email protected]>
ALSA: hda: codecs: hdmi: disable keep-alive before audio format change

LiangCheng Wang <[email protected]>
wifi: brcmfmac: set F2 blocksize to 256 for BCM43752

Gokul Sivakumar <[email protected]>
wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW)

Fan Wu <[email protected]>
wifi: brcmfmac: drain bus_reset work on device removal

Daniel Hodges <[email protected]>
wifi: ath6kl: fix use-after-free in aggr_reset_state()

Sakari Ailus <[email protected]>
media: imx219: Fix maximum frame length in lines

Jai Luthra <[email protected]>
media: i2c: imx219: Rename VTS to FRM_LENGTH

David Plowman <[email protected]>
media: i2c: imx219: Correct the minimum vblanking value

Laurent Pinchart <[email protected]>

    media: i2c: imx219: Drop IMX219_VTS_* macros

Jani Nikula <[email protected]>

    drm/i915/hdcp: check streams[] bounds before overflow

Jani Nikula <[email protected]>
drm/i915/hdcp: require monotonically increasing seq_num_v

Suraj Kandpal <[email protected]>
drm/i915/hdcp: Move to using intel_display in intel_hdcp

Jani Nikula <[email protected]>
drm/i915/vrr: require valid min/max vfreq for VRR

Ville Syrjälä <[email protected]>
drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable()

Timur Kristóf <[email protected]>
drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr functions

Thomas Zimmermann <[email protected]>
drm/tegra: fbdev: Remove offset into framebuffer memory

Jani Nikula <[email protected]>
drm/displayid: fix Tiled Display Topology ID size

Andrei Kuchynski <[email protected]>
usb: typec: ucsi: Fix race condition and ordering in port unregistration

Sergey Senozhatsky <[email protected]>
usb: typec: ucsi: split connector lock classes

Diogo Ivo <[email protected]>
usb: typec: ucsi: Only enable supported notifications

Cen Zhang <[email protected]>
usb: gadget: f_tcm: synchronize delayed set_alt with teardown

Vitor Soares <[email protected]>
drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()

Guangshuo Li <[email protected]>
usb: musb: omap2430: Do not put borrowed of_node in probe

Johan Hovold <[email protected]>
usb: musb: omap2430: clean up probe error handling

Venkatesh Srinivas <[email protected]>
KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN

David Matlack <[email protected]>

    KVM: Introduce vcpu->wants_to_run

Alex Williamson <[email protected]>
vfio/pci: Fix racy bitfields and tighten struct layout

Luiz Augusto von Dentz <[email protected]>
Bluetooth: HCI: Remove HCI_AMP support

Christophe JAILLET <[email protected]>
Bluetooth: Remove usage of the deprecated ida_simple_xx() API

Reinette Chatre <[email protected]>
fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list

Peng Fan <[email protected]>
pmdomain: imx: Fix i.MX8MP power notifier

Bryam Vargas <[email protected]>
ata: libata-core: Reject an invalid concurrent positioning ranges count

Dawei Feng <[email protected]>
octeontx2-pf: fix SQB pointer leak on init failure

Haoxiang Li <[email protected]>
net: ipa: fix SMEM state handle leaks in SMP2P init

Crystal Wood <[email protected]>
tracing/osnoise: Call synchronize_rcu() when unregistering

Uladzislau Rezki (Sony) <[email protected]>
tracing: Rename kvfree_rcu() to kvfree_rcu_mightsleep()

Théo Lebrun <[email protected]>
net: macb: drop in-flight Tx SKBs on close

Wentao Liang <[email protected]>
ipmi: fix refcount leak in i_ipmi_request()

Breno Leitao <[email protected]>
bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()

Breno Leitao <[email protected]>
bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c

Rasmus Villemoes <[email protected]>
bootconfig: do not put quotes on cmdline items unless necessary

Sabrina Dubroca <[email protected]>
espintcp: use sk_msg_free_partial to fix partial send

David Howells <[email protected]>
tcp_bpf, smc, tls, espintcp, siw: Reduce MSG_SENDPAGE_NOTLAST usage

David Howells <[email protected]>
siw: Inline do_tcp_sendpages()

David Howells <[email protected]>
espintcp: Inline do_tcp_sendpages()

David Howells <[email protected]>
tcp_bpf: Inline do_tcp_sendpages as it's now a wrapper around tcp_sendmsg

Bryam Vargas <[email protected]>
net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked

Vladimir Oltean <[email protected]>

    net/sched: taprio: avoid calling child->ops->dequeue(child) twice

Junrui Luo <[email protected]>
octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF

Sergio Paracuellos <[email protected]>
gpio: mt7621: avoid corruption of shared interrupt trigger state

Runyu Xiao <[email protected]>
gpio: tegra: do not call pinctrl for GPIO direction

Bartosz Golaszewski <[email protected]>
treewide: rename pinctrl_gpio_direction_input_new()

Maoyi Xie <[email protected]>
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink

Zihan Xi <[email protected]>
net/sched: act_ct: preserve tc_skb_cb across defragmentation

Dexuan Cui <[email protected]>
net: mana: Validate the packet length reported by the NIC

Thomas Gleixner <[email protected]>
locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()

Guangshuo Li <[email protected]>
mmc: vub300: fix use-after-free on probe failure

Johan Hovold <[email protected]>
mmc: vub300: rename probe error labels

Johan Hovold <[email protected]>
mmc: vub300: fix use-after-free on disconnect

Maoyi Xie <[email protected]>
wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix firmware leak in async update

Dmitry Torokhov <[email protected]>
firmware_loader: introduce __free() cleanup hanler

Mikulas Patocka <[email protected]>
dm-verity: make error counter atomic

Mikulas Patocka <[email protected]>
dm-integrity: don't increment hash_offset twice

Heinz Mauelshagen <[email protected]>
dm: remove unnecessary braces from single statement blocks

Heinz Mauelshagen <[email protected]>
dm: add missing empty lines

Heinz Mauelshagen <[email protected]>
dm crypt: correct 'foo*' to 'foo *'

Heinz Mauelshagen <[email protected]>
dm: fix trailing statements

Mikulas Patocka <[email protected]>
dm-verity: avoid double increment of &use_bh_wq_enabled

Souvik Banerjee <[email protected]>
ovl: use linked upper dentry in copy-up tmpfile

Jann Horn <[email protected]>

    bpf,fork: wipe ->bpf_storage before bailouts that access it

Vincent Jardin <[email protected]>
i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)

Stefan Eichenberger <[email protected]>
i2c: imx: separate atomic, dma and non-dma use case

Michael Bommarito <[email protected]>
thunderbolt: Prevent XDomain delayed work use-after-free on disconnect

Yiyang Chen <[email protected]>
taskstats: retain dead thread stats in TGID queries

Oleg Nesterov <[email protected]>
taskstats: fill_stats_for_tgid: use for_each_thread()

Maoyi Xie <[email protected]>

    net: thunderbolt: Fix frags[] overflow by bounding frame_count

Florian Fuchs <[email protected]>
mtd: maps: vmu-flash: fix fault in unaligned fixup

Breno Leitao <[email protected]>
9p: skip nlink update in cacheless mode to fix WARN_ON

Muchun Song <[email protected]>
mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE

Aneesh Kumar K.V <[email protected]>
mm/vmemmap/devdax: fix kernel crash when probing devdax devices

Mike Rapoport (IBM) <[email protected]>
mm: move most of core MM initialization to mm/mm_init.c

Michael Bommarito <[email protected]>
ntfs3: validate split-point offset in indx_insert_into_buffer

Konstantin Komarov <[email protected]>
fs/ntfs3: Undo critial modificatins to keep directory consistency

Fernando Fernandez Mancera <[email protected]>
netfilter: nft_objref: validate objref and objrefmap expressions

Yue Haibing <[email protected]>
netfilter: nf_tables: Remove unused nft_reduce_is_readonly()

Jeremy Sowden <[email protected]>
netfilter: bitwise: rename some boolean operation functions

Florian Westphal <[email protected]>
netfilter: nf_tables: drop unused 3rd argument from validate callback ops

Florian Westphal <[email protected]>
netfilter: nf_tables: pass context structure to nft_parse_register_load

Wasim Nazir <[email protected]>
remoteproc: qcom: Fix leak when custom dump_segments addition fails

Yogesh Lal <[email protected]>
remoteproc: qcom: pas: Adjust the phys addr wrt the mem region

Mukesh Ojha <[email protected]>
remoteproc: qcom: fix sparse warnings

Mukesh Ojha <[email protected]>
remoteproc: qcom: replace kstrdup with kstrndup

Tristan Madani <[email protected]>
selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()

Casey Schaufler <[email protected]>
lsm: infrastructure management of the sock security

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_sip: validate skb_dst() before accessing it

Florian Westphal <[email protected]>
netfilter: nf_conntrack_sip: remove net variable shadowing

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: don't leak bad clone into future transaction

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: move cloning of match info to insert/removal path

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: merge deactivate helper into caller

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: prepare walk function for on-demand clone

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: make pipapo_clone helper return NULL

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: move prove_locking helper around

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: use GFP_KERNEL for insertions

Sumanth Korikkar <[email protected]>
s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()

Thomas Richter <[email protected]>
s390/cpum_cf: merge source files for CPU Measurement counter facility

Thomas Richter <[email protected]>
s390/cpum_cf: remove in-kernel counting facility interface

Thomas Richter <[email protected]>

    s390/cpum_cf: move stccm_avail()

Thomas Richter <[email protected]>

    s390/cpum_cf: move cpum_cf_ctrset_size()

Cássio Gabriel <[email protected]>
ASoC: mediatek: mt8192: Check runtime resume during probe

Tang Bin <[email protected]>
ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable

AngeloGioacchino Del Regno <[email protected]>
ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb

AngeloGioacchino Del Regno <[email protected]>
ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe()

AngeloGioacchino Del Regno <[email protected]>
ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable()

Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get

Cássio Gabriel <[email protected]>
ASoC: mediatek: mt8183: Check runtime resume during probe

Runyu Xiao <[email protected]>
octeontx2-vf: clear stale mailbox IRQ state before request_irq()

Runyu Xiao <[email protected]>
octeontx2-pf: clear stale mailbox IRQ state before request_irq()

Subbaraya Sundeep <[email protected]>
octeontx2: Annotate mmio regions as __iomem

Wentao Liang <[email protected]>
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()

Petr Machata <[email protected]>
mlxsw: spectrum: On port enslavement to a LAG, join upper's bridges

Jason Wang <[email protected]>
VDUSE: avoid leaking information to userspace

Eugenio Pérez <[email protected]>
vduse: take out allocations from vduse_dev_alloc_coherent

Eugenio Pérez <[email protected]>
vduse: remove unused vaddr parameter of vduse_domain_free_coherent

Sheng Zhao <[email protected]>
vduse: Use fixed 4KB bounce pages for non-4KB page size

Li Xiasong <[email protected]>
tipc: restrict socket queue dumps in enqueue tracepoints

Jiacheng Yu <[email protected]>
fbcon: Use correct type for vc_resize() return value

Thomas Zimmermann <[email protected]>
fbcon: Rename struct fbcon_ops to struct fbcon_par

Li Daming <[email protected]>
rxrpc: serialize kernel accept preallocation with socket teardown

Tapio Reijonen <[email protected]>

    serial: max310x: implement gpio_chip::get_direction()

Hugo Villeneuve <[email protected]>

    serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch)

Xu Rao <[email protected]>
ALSA: hda: Fix cached processing coefficient verbs

Zhang Heng <[email protected]>
ALSA: hda: conexant: Remove mic bias threshold override

Ricardo Robaina <[email protected]>
audit: fix recursive locking deadlock in audit_dupe_exe()

Ricardo Robaina <[email protected]>
audit: use 'unsigned int' instead of 'unsigned'

Jeff Layton <[email protected]>
audit: widen ino fields to u64

NeilBrown <[email protected]>
VFS/audit: introduce kern_path_parent() for audit

Bryam Vargas <[email protected]>
Input: mms114 - reject an oversized device packet size

Dmitry Torokhov <[email protected]>
Input: mms114 - fix touch indexing for MMS134S and MMS136

Haoxiang Li <[email protected]>
i2c: davinci: Unregister cpufreq notifier on probe failure

Sebastian Alba Vives <[email protected]>
fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()

Mikhail Gavrilov <[email protected]>
dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning

Jason Gunthorpe <[email protected]>
udmabuf: Do not create malformed scatterlists

Weinan Liu <[email protected]>
iommu/amd: Don't split flush for amd_iommu_domain_flush_all()

Matt Bobrowski <[email protected]>
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

Pedro Falcato <[email protected]>
mm: do file ownership checks with the proper mount idmap

Alexandre Ghiti <[email protected]>
riscv: Don't use PGD entries for the linear mapping

Xiang Mei <[email protected]>
net: bonding: fix use-after-free in bond_xmit_broadcast()

Palmer Dabbelt <[email protected]>
RISC-V: Provide pgtable_l5_enabled on rv32

Christoph Hellwig <[email protected]>
xfs: check v5 superblock features early

Long Li <[email protected]>
xfs: don't swallow dquot recovery verification errors

Long Li <[email protected]>
xfs: fix ilock leak on error in xfs_dq_get_next_id

David Rosca <[email protected]>
drm/amdgpu: Fix UVD decode image min size calculation

David Rosca <[email protected]>
drm/amdgpu: Implement insert_end for VCE 3

David Rosca <[email protected]>
drm/amdgpu: Reject UVD message with dimensions above 4096

Candice Li <[email protected]>
drm/amdgpu: validate GEM_CREATE domain combinations

David Rosca <[email protected]>
drm/amdgpu: Reject UVD message with invalid number of h265 refs

Eric Farman <[email protected]>
s390/vfio_ccw: Fix out of bounds check on CCW array

Eric Farman <[email protected]>
s390/vfio_ccw: Ensure index for read/write regions are within range

Guangshuo Li <[email protected]>
drm/radeon: fix autosuspend cleanup during teardown

Pei Xiao <[email protected]>
mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition

Haibo Chen <[email protected]>
mmc: sdhci: make tuning_err a signed int

Myeonghun Pak <[email protected]>
mmc: sdhci: unmap the bounce buffer before device release

Zhan Xusheng <[email protected]>
mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit

Kefu Chai <[email protected]>
libceph: tolerate addrvecs with multiple entries of the same type

Yiming Zhu <[email protected]>
ceph: fix MDS random selection readiness predicate

Raphael Zimmer <[email protected]>
libceph: Avoid using invalid osd indices from primary_temp

Dmitry Torokhov <[email protected]>
Input: sur40 - fix V4L error path cleanup

Dmitry Torokhov <[email protected]>
Input: sur40 - fix input device registration ordering

Ali Ahmet Memis <[email protected]>
openrisc: signal: do not restore privileged SR bits on sigreturn

Josh Poimboeuf <[email protected]>
ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()

Pavitra Jha <[email protected]>
libceph: fix multiple unsafe decodes in decode_locker()

Thorsten Blum <[email protected]>
crypto: qce - fix error path in devm_qce_register_algs

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - block s_input when F54 queue is busy

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - zero report size on F54 work error

George Wilson <[email protected]>

    powerpc/pseries: lparcfg - fix kbuf[] underflow

Pengpeng Hou <[email protected]>
Input: iforce - validate input packet lengths

Zhefu Zhang <[email protected]>
Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard

Linmao Li <[email protected]>
Input: psxpad-spi - set driver data before use

Richard Davies <[email protected]>
Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

George Wilson <[email protected]>
powerpc/pseries: pci - logic bug

Dawid Wróbel <[email protected]>
ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses

Peter Ujfalusi <[email protected]>
ASoC: cs35l41: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: cs4265: sort the register default table

Hidayath Khan <[email protected]>
s390/qeth: validate user buffer length in SNMP and ARP query ioctls

Matthieu Baerts (NGI0) <[email protected]>
mptcp: options: reset DSS fields in case of unexpected size

Gang Yan <[email protected]>
selftests: mptcp: join: mark tests with data corruption as failed

Bryam Vargas <[email protected]>
selinux: do not cancel a policy conversion that never started

Bryam Vargas <[email protected]>
selinux: reject a class permission count below its inherited common

Bryam Vargas <[email protected]>
selinux: require every boolean value to be defined

Yizhou Zhao <[email protected]>
ipvs: separate destination availability state

Zhan Xusheng <[email protected]>
fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()

Chao Yu <[email protected]>
f2fs: fix UAF issue in f2fs_merge_page_bio()

Matthew Rosato <[email protected]>
KVM: s390: pci: Fix aisb calculation

Farhan Ali <[email protected]>
KVM: s390: pci: Fix resource leak on IRQ registration failure

Farhan Ali <[email protected]>
KVM: s390: pci: Fix missing error codes and memory unaccounting

Farhan Ali <[email protected]>
KVM: s390: pci: Fix memory accounting for pinned/unpinned pages

Jason Gunthorpe <[email protected]>
kernel/user: Allow user_struct::locked_vm to be usable for iommufd

Chao Shi <[email protected]>
block: stop the timeout timer when releasing a never added disk

-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm64/boot/dts/nvidia/tegra194.dtsi           |   2 +
 arch/arm64/kvm/arm.c                               |   2 +-
 arch/mips/kvm/mips.c                               |   2 +-
 arch/openrisc/include/asm/processor.h              |   2 +
 arch/openrisc/kernel/signal.c                      |   5 +-
 arch/powerpc/kvm/powerpc.c                         |   2 +-
 arch/powerpc/platforms/pseries/lparcfg.c           |   2 +-
 arch/powerpc/platforms/pseries/pci.c               |   2 +-
 arch/riscv/include/asm/pgtable-32.h                |   3 +
 arch/riscv/include/asm/pgtable.h                   |   1 -
 arch/riscv/kvm/vcpu.c                              |   2 +-
 arch/riscv/mm/init.c                               |  11 +-
 arch/s390/include/asm/cpu_mcf.h                    | 112 ------
 arch/s390/kernel/Makefile                          |   2 +-
 arch/s390/kernel/perf_cpum_cf.c                    | 272 ++++++++++++-
 arch/s390/kernel/perf_cpum_cf_common.c             | 233 ------------
 arch/s390/kernel/perf_pai_ext.c                    |   2 +-
 arch/s390/kvm/kvm-s390.c                           |   2 +-
 arch/s390/kvm/pci.c                                |  86 +++--
 arch/s390/kvm/pci.h                                |   2 +
 arch/x86/kernel/cpu/resctrl/rdtgroup.c             |  12 +-
 arch/x86/kvm/lapic.c                               |   2 +-
 arch/x86/kvm/svm/sev.c                             |  34 +-
 arch/x86/kvm/svm/svm.h                             |   1 +
 arch/x86/kvm/x86.c                                 |   4 +-
 block/genhd.c                                      |  12 +-
 crypto/ccm.c                                       |   2 +-
 drivers/ata/libata-core.c                          |  18 +
 drivers/ata/libata-scsi.c                          |   2 -
 drivers/ata/libata.h                               |   9 +
 drivers/bluetooth/btmrvl_main.c                    |   9 -
 drivers/bluetooth/btrsi.c                          |   1 -
 drivers/bluetooth/btsdio.c                         |   8 -
 drivers/bluetooth/btusb.c                          |   5 -
 drivers/bluetooth/hci_ldisc.c                      |   6 -
 drivers/bluetooth/hci_serdev.c                     |   5 -
 drivers/bluetooth/hci_uart.h                       |   1 -
 drivers/bluetooth/hci_vhci.c                       |  10 +-
 drivers/bluetooth/virtio_bt.c                      |   2 -
 drivers/char/ipmi/ipmi_msghandler.c                |   8 +
 drivers/crypto/qce/core.c                          |   2 +-
 drivers/dma-buf/udmabuf.c                          |  21 +-
 drivers/fpga/dfl-afu-main.c                        |   3 +
 drivers/gpio/gpio-mt7621.c                         |   2 +
 drivers/gpio/gpio-mvebu.c                          |   4 +-
 drivers/gpio/gpio-pxa.c                            |   4 +-
 drivers/gpio/gpio-tegra.c                          |  18 +-
 drivers/gpio/gpio-vf610.c                          |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c             |  30 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c            |  21 ++
 drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c        |  30 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c            |  11 +-
 drivers/gpu/drm/amd/amdgpu/vce_v3_0.c              |  26 +-
 drivers/gpu/drm/amd/pm/amdgpu_dpm.c                |  27 +-
 drivers/gpu/drm/amd/pm/amdgpu_pm.c                 |  16 +-
 drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h            |   6 +-
 drivers/gpu/drm/bridge/cdns-dsi.c                  |  11 +-
 drivers/gpu/drm/drm_connector.c                    |  12 +-
 drivers/gpu/drm/i915/display/intel_display_core.h  |   3 +
 drivers/gpu/drm/i915/display/intel_hdcp.c          |  22 +-
 drivers/gpu/drm/i915/display/intel_vrr.c           |  10 +-
 drivers/gpu/drm/i915/i915_driver.c                 |   3 +
 drivers/gpu/drm/radeon/radeon_kms.c                |   1 +
 drivers/gpu/drm/tegra/fb.c                         |   8 +-
 drivers/i2c/busses/i2c-bcm-iproc.c                 |  11 +-
 drivers/i2c/busses/i2c-davinci.c                   |   4 +-
 drivers/i2c/busses/i2c-imx.c                       | 126 +++++--
 drivers/infiniband/sw/siw/siw_qp_tx.c              |  17 +-
 drivers/input/joystick/iforce/iforce-packets.c     |  11 +-
 drivers/input/joystick/iforce/iforce-usb.c         |   3 +
 drivers/input/joystick/psxpad-spi.c                |   1 +
 drivers/input/keyboard/atkbd.c                     |   8 +
 drivers/input/misc/ims-pcu.c                       |   5 +-
 drivers/input/mouse/focaltech.c                    |   2 +-
 drivers/input/rmi4/rmi_f54.c                       |  43 ++-
 drivers/input/rmi4/rmi_f55.c                       |   4 +-
 drivers/input/touchscreen/mms114.c                 |  21 +-
 drivers/input/touchscreen/sur40.c                  |  23 +-
 drivers/iommu/amd/iommu.c                          |   3 +-
 drivers/md/dm-bufio.c                              |   9 +
 drivers/md/dm-cache-metadata.c                     |   6 +
 drivers/md/dm-cache-policy-internal.h              |   3 +
 drivers/md/dm-cache-policy-smq.c                   |   2 +
 drivers/md/dm-cache-target.c                       |  12 +-
 drivers/md/dm-crypt.c                              |  20 +-
 drivers/md/dm-era-target.c                         |  10 +-
 drivers/md/dm-flakey.c                             |   4 +-
 drivers/md/dm-integrity.c                          | 182 +++++----
 drivers/md/dm-io.c                                 |  25 +-
 drivers/md/dm-ioctl.c                              |  18 +-
 drivers/md/dm-kcopyd.c                             |   2 +
 drivers/md/dm-log.c                                |   6 +
 drivers/md/dm-mpath.c                              |   3 +
 drivers/md/dm-rq.c                                 |   2 +
 drivers/md/dm-snap-persistent.c                    |  23 +-
 drivers/md/dm-snap.c                               |  10 +-
 drivers/md/dm-stats.c                              |  24 +-
 drivers/md/dm-stripe.c                             |  10 +-
 drivers/md/dm-sysfs.c                              |   1 +
 drivers/md/dm-table.c                              |   3 +-
 drivers/md/dm-thin-metadata.c                      |   5 +-
 drivers/md/dm-thin.c                               |   5 +
 drivers/md/dm-verity-target.c                      |  24 +-
 drivers/md/dm-verity.h                             |   2 +-
 drivers/md/dm-writecache.c                         |  54 ++-
 drivers/md/persistent-data/dm-array.c              |   4 +
 drivers/md/persistent-data/dm-bitset.c             |   1 +
 drivers/md/persistent-data/dm-block-manager.c      |   7 +-
 drivers/md/persistent-data/dm-btree-internal.h     |   1 +
 drivers/md/persistent-data/dm-btree-remove.c       |   5 +
 drivers/md/persistent-data/dm-btree-spine.c        |   6 +-
 drivers/md/persistent-data/dm-btree.c              |  10 +
 drivers/md/persistent-data/dm-space-map-common.c   |   6 +
 drivers/md/persistent-data/dm-space-map-disk.c     |  12 +-
 drivers/md/persistent-data/dm-space-map-metadata.c |   3 +
 .../md/persistent-data/dm-transaction-manager.c    |   1 +
 drivers/media/i2c/imx219.c                         |  47 +--
 drivers/misc/mei/bus.c                             |  16 +-
 drivers/mmc/host/atmel-mci.c                       |   2 +
 drivers/mmc/host/omap_hsmmc.c                      |   2 +-
 drivers/mmc/host/sdhci.c                           |  16 +
 drivers/mmc/host/sdhci.h                           |   2 +-
 drivers/mmc/host/vub300.c                          |  36 +-
 drivers/mtd/maps/vmu-flash.c                       |   8 +-
 drivers/net/bonding/bond_main.c                    |   2 +-
 drivers/net/can/rcar/rcar_canfd.c                  | 177 +++++----
 drivers/net/can/usb/gs_usb.c                       |   4 +-
 drivers/net/ethernet/cadence/macb_main.c           |  22 +-
 drivers/net/ethernet/intel/ice/ice_ethtool.c       |  10 +-
 drivers/net/ethernet/intel/ice/ice_vf_lib.c        |  27 ++
 .../net/ethernet/intel/ice/ice_vf_lib_private.h    |   1 +
 drivers/net/ethernet/intel/ice/ice_virtchnl.c      |  21 ++
 drivers/net/ethernet/intel/igc/igc_main.c          |   1 -
 drivers/net/ethernet/marvell/octeontx2/af/rvu.c    |  14 +-
 drivers/net/ethernet/marvell/octeontx2/af/rvu.h    |   1 +
 .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c  |   9 +
 .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c   |  14 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c   |  13 +-
 drivers/net/ethernet/mellanox/mlxsw/spectrum.c     |  92 ++++-
 drivers/net/ethernet/microsoft/mana/mana_en.c      |  13 +
 drivers/net/ethernet/ti/am65-cpsw-nuss.c           |   2 +
 drivers/net/ipa/ipa_smp2p.c                        |  30 +-
 drivers/net/ipvlan/ipvlan_main.c                   |   4 +
 drivers/net/macvlan.c                              |   4 +
 drivers/net/thunderbolt.c                          |   8 +-
 drivers/net/veth.c                                 |  78 ++--
 drivers/net/wireless/ath/ath6kl/txrx.c             |   2 +-
 .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c  |  16 +-
 .../net/wireless/broadcom/brcm80211/brcmfmac/bus.h |   6 +
 .../wireless/broadcom/brcm80211/brcmfmac/core.c    |  45 ++-
 .../wireless/broadcom/brcm80211/brcmfmac/pcie.c    |   6 +
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.c    |   8 +-
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.h    |   1 +
 .../net/wireless/broadcom/brcm80211/brcmfmac/usb.c |   3 +
 drivers/net/wireless/marvell/libertas_tf/main.c    |   2 +-
 drivers/pinctrl/cirrus/pinctrl-lochnagar.c         |   2 +-
 drivers/pinctrl/core.c                             |  15 +-
 drivers/pinctrl/intel/pinctrl-cherryview.c         |   4 +-
 drivers/pinctrl/intel/pinctrl-intel.c              |   4 +-
 drivers/pinctrl/intel/pinctrl-lynxpoint.c          |   4 +-
 drivers/pinctrl/mediatek/pinctrl-moore.c           |   4 +-
 drivers/pinctrl/mediatek/pinctrl-mtk-common.c      |   4 +-
 drivers/pinctrl/mediatek/pinctrl-paris.c           |   4 +-
 drivers/pinctrl/nuvoton/pinctrl-npcm7xx.c          |   4 +-
 drivers/pinctrl/pinctrl-as3722.c                   |   4 +-
 drivers/pinctrl/pinctrl-axp209.c                   |   2 +-
 drivers/pinctrl/pinctrl-ingenic.c                  |  11 +-
 drivers/pinctrl/pinctrl-ocelot.c                   |   4 +-
 drivers/pinctrl/pinctrl-rk805.c                    |   4 +-
 drivers/pinctrl/pinctrl-st.c                       |   4 +-
 drivers/pinctrl/renesas/gpio.c                     |   4 +-
 drivers/pinctrl/stm32/pinctrl-stm32.c              |   4 +-
 drivers/pinctrl/vt8500/pinctrl-wmt.c               |   4 +-
 drivers/remoteproc/qcom_common.c                   |  31 +-
 drivers/remoteproc/qcom_common.h                   |   5 +-
 drivers/remoteproc/qcom_q6v5_pas.c                 |  20 +-
 drivers/s390/cio/vfio_ccw_async.c                  |  16 +
 drivers/s390/cio/vfio_ccw_chp.c                    |  15 +
 drivers/s390/cio/vfio_ccw_cp.c                     |  17 +-
 drivers/s390/cio/vfio_ccw_ops.c                    |   7 +-
 drivers/s390/net/qeth_core_main.c                  |   3 +
 drivers/s390/net/qeth_l3_main.c                    |   5 +
 drivers/soc/imx/imx8m-blk-ctrl.c                   |  27 +-
 drivers/thunderbolt/xdomain.c                      |  40 +-
 drivers/tty/serial/max310x.c                       |  20 +-
 drivers/usb/gadget/function/f_tcm.c                | 192 ++++++++--
 drivers/usb/gadget/function/tcm.h                  |  13 +
 drivers/usb/musb/omap2430.c                        |  25 +-
 drivers/usb/typec/ucsi/ucsi.c                      |  95 +++--
 drivers/usb/typec/ucsi/ucsi.h                      |   1 +
 drivers/vdpa/vdpa_user/iova_domain.c               | 161 +++++---
 drivers/vdpa/vdpa_user/iova_domain.h               |  13 +-
 drivers/vdpa/vdpa_user/vduse_dev.c                 |  16 +-
 drivers/video/fbdev/core/bitblit.c                 | 122 +++---
 drivers/video/fbdev/core/fbcon.c                   | 420 ++++++++++-----------
 drivers/video/fbdev/core/fbcon.h                   |   6 +-
 drivers/video/fbdev/core/fbcon_ccw.c               | 148 ++++----
 drivers/video/fbdev/core/fbcon_cw.c                | 148 ++++----
 drivers/video/fbdev/core/fbcon_rotate.c            |  44 +--
 drivers/video/fbdev/core/fbcon_rotate.h            |   6 +-
 drivers/video/fbdev/core/fbcon_ud.c                | 164 ++++----
 drivers/video/fbdev/core/softcursor.c              |  18 +-
 drivers/video/fbdev/core/tileblit.c                |  28 +-
 fs/9p/vfs_inode.c                                  |   9 +
 fs/binfmt_elf.c                                    |   4 +-
 fs/binfmt_elf_fdpic.c                              |   4 +-
 fs/binfmt_misc.c                                   |  14 +-
 fs/ceph/addr.c                                     |  20 +-
 fs/ceph/cache.c                                    |   2 +-
 fs/ceph/caps.c                                     |  70 ++--
 fs/ceph/debugfs.c                                  |   4 +-
 fs/ceph/dir.c                                      |  24 +-
 fs/ceph/export.c                                   |  10 +-
 fs/ceph/file.c                                     |  35 +-
 fs/ceph/inode.c                                    |  14 +-
 fs/ceph/ioctl.c                                    |   8 +-
 fs/ceph/mds_client.c                               |  51 ++-
 fs/ceph/mds_client.h                               |   5 +-
 fs/ceph/mdsmap.c                                   |   5 +-
 fs/ceph/snap.c                                     |  18 +-
 fs/ceph/super.c                                    |  22 +-
 fs/ceph/super.h                                    |  13 +-
 fs/ceph/xattr.c                                    |  12 +-
 fs/crypto/policy.c                                 |   2 +-
 fs/erofs/Kconfig                                   |  15 +
 fs/erofs/decompressor_lzma.c                       |   3 +-
 fs/erofs/fscache.c                                 |  44 +--
 fs/erofs/internal.h                                |  87 ++---
 fs/exec.c                                          |   6 +-
 fs/f2fs/data.c                                     |   2 +-
 fs/namei.c                                         |  43 +++
 fs/ntfs3/index.c                                   |  44 ++-
 fs/overlayfs/copy_up.c                             |  12 +-
 fs/smb/server/auth.c                               |   4 +-
 fs/smb/server/connection.c                         |  23 +-
 fs/smb/server/connection.h                         |   5 +
 fs/smb/server/oplock.c                             |   8 +-
 fs/smb/server/smb2pdu.c                            |  78 ++--
 fs/smb/server/smb2pdu.h                            |   9 -
 fs/smb/server/smb_common.c                         |  43 ++-
 fs/smb/server/smb_common.h                         |  15 +-
 fs/smb/server/smbacl.c                             |  27 +-
 fs/super.c                                         |  19 +-
 fs/xfs/libxfs/xfs_sb.c                             |   4 +-
 fs/xfs/xfs_dquot.c                                 |   3 +-
 fs/xfs/xfs_dquot_item_recover.c                    |   2 +-
 include/drm/drm_connector.h                        |   6 +-
 include/drm/drm_displayid.h                        |   2 +-
 include/linux/audit.h                              |   6 +-
 include/linux/audit_arch.h                         |  12 +-
 include/linux/bootconfig.h                         |   3 +
 include/linux/bpf_lsm.h                            |   4 +
 include/linux/ceph/ceph_debug.h                    |  38 ++
 include/linux/ceph/mdsmap.h                        |   5 +-
 include/linux/firmware.h                           |   3 +
 include/linux/fs.h                                 |  33 ++
 include/linux/kvm_host.h                           |   1 +
 include/linux/lsm_hooks.h                          |   1 +
 include/linux/mm.h                                 |  12 +
 include/linux/mmc/sdio_ids.h                       |   2 +-
 include/linux/namei.h                              |   1 +
 include/linux/overflow.h                           |  68 ++++
 include/linux/pinctrl/consumer.h                   |  13 +-
 include/linux/sched/user.h                         |   2 +-
 include/linux/thunderbolt.h                        |   3 +
 include/linux/vfio_pci_core.h                      |  13 +-
 include/net/bluetooth/hci.h                        | 114 ------
 include/net/bluetooth/hci_core.h                   |  48 +--
 include/net/bluetooth/hci_sync.h                   |   4 +
 include/net/gro.h                                  |   1 +
 include/net/ip_vs.h                                |   7 +
 include/net/netfilter/nf_tables.h                  |  11 +-
 include/net/netfilter/nft_fib.h                    |   4 +-
 include/net/netfilter/nft_meta.h                   |   3 +-
 include/net/netfilter/nft_reject.h                 |   3 +-
 include/uapi/linux/ip_vs.h                         |   6 -
 include/uapi/linux/netfilter/nf_tables.h           |  10 +-
 include/uapi/linux/virtio_bt.h                     |   1 -
 init/main.c                                        |  39 --
 kernel/audit.c                                     |   2 +-
 kernel/audit.h                                     |  32 +-
 kernel/audit_fsnotify.c                            |  39 +-
 kernel/audit_tree.c                                |   2 +-
 kernel/audit_watch.c                               |  42 ++-
 kernel/auditfilter.c                               |  17 +-
 kernel/auditsc.c                                   |   6 +-
 kernel/bpf/bpf_inode_storage.c                     |   9 +
 kernel/fork.c                                      |  20 +-
 kernel/locking/spinlock_rt.c                       |  27 +-
 kernel/taskstats.c                                 |  67 ++--
 kernel/trace/ftrace.c                              |   6 +-
 kernel/trace/trace_osnoise.c                       |   4 +-
 kernel/trace/trace_probe.c                         |   2 +-
 kernel/user.c                                      |   1 +
 lib/bootconfig.c                                   |  65 ++++
 lib/compat_audit.c                                 |  12 +-
 mm/huge_memory.c                                   |  49 ++-
 mm/internal.h                                      |   4 +
 mm/madvise.c                                       |   3 +-
 mm/migrate_device.c                                |  42 ++-
 mm/mincore.c                                       |   3 +-
 mm/mm_init.c                                       | 150 ++++++++
 mm/page_alloc.c                                    | 160 +-------
 mm/pagewalk.c                                      |  10 +
 mm/sparse-vmemmap.c                                |   3 +-
 mm/vmalloc.c                                       |  75 +++-
 net/bluetooth/hci_conn.c                           |  24 +-
 net/bluetooth/hci_core.c                           | 145 ++-----
 net/bluetooth/hci_event.c                          | 150 +-------
 net/bluetooth/hci_sock.c                           |  11 +-
 net/bluetooth/hci_sync.c                           | 373 +++++++++---------
 net/bluetooth/l2cap_core.c                         |  21 +-
 net/bluetooth/mgmt.c                               | 367 +++++++++---------
 net/bluetooth/mgmt_util.c                          |  49 +--
 net/bluetooth/mgmt_util.h                          |   8 +-
 net/bridge/netfilter/nft_reject_bridge.c           |   3 +-
 net/ceph/cls_lock_client.c                         |  21 +-
 net/ceph/decode.c                                  |  18 +-
 net/ceph/osdmap.c                                  |   9 +-
 net/core/gro.c                                     |  31 ++
 net/core/pktgen.c                                  |  43 ++-
 net/ipv4/netfilter/nft_dup_ipv4.c                  |   4 +-
 net/ipv4/tcp_bpf.c                                 |  21 +-
 net/ipv4/udp_offload.c                             |  29 --
 net/ipv6/ip6_tunnel.c                              |   3 +
 net/ipv6/netfilter/nft_dup_ipv6.c                  |   4 +-
 net/mptcp/options.c                                |   8 +-
 net/mptcp/pm.c                                     |   9 +-
 net/mptcp/pm_netlink.c                             |  29 +-
 net/mptcp/pm_userspace.c                           |  87 +++--
 net/mptcp/protocol.h                               |   6 +-
 net/netfilter/ipset/ip_set_bitmap_gen.h            |   2 +-
 net/netfilter/ipset/ip_set_core.c                  |  19 +-
 net/netfilter/ipset/ip_set_list_set.c              |  10 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |   4 +-
 net/netfilter/ipvs/ip_vs_core.c                    |   6 +-
 net/netfilter/ipvs/ip_vs_ctl.c                     |   4 +-
 net/netfilter/ipvs/ip_vs_dh.c                      |   4 +-
 net/netfilter/ipvs/ip_vs_lblc.c                    |   2 +-
 net/netfilter/ipvs/ip_vs_lblcr.c                   |   8 +-
 net/netfilter/nf_conntrack_proto.c                 |   6 +
 net/netfilter/nf_conntrack_proto_sctp.c            |  48 +--
 net/netfilter/nf_conntrack_proto_tcp.c             | 132 ++++---
 net/netfilter/nf_conntrack_sip.c                   |  10 +-
 net/netfilter/nf_flow_table_core.c                 |   7 +-
 net/netfilter/nf_tables_api.c                      |   6 +-
 net/netfilter/nf_tables_offload.c                  |   2 +-
 net/netfilter/nft_bitwise.c                        |  38 +-
 net/netfilter/nft_byteorder.c                      |   2 +-
 net/netfilter/nft_cmp.c                            |   6 +-
 net/netfilter/nft_compat.c                         |   6 +-
 net/netfilter/nft_ct.c                             |   2 +-
 net/netfilter/nft_dup_netdev.c                     |   2 +-
 net/netfilter/nft_dynset.c                         |   4 +-
 net/netfilter/nft_exthdr.c                         |   2 +-
 net/netfilter/nft_fib.c                            |   3 +-
 net/netfilter/nft_flow_offload.c                   |   3 +-
 net/netfilter/nft_fwd_netdev.c                     |   9 +-
 net/netfilter/nft_hash.c                           |   2 +-
 net/netfilter/nft_immediate.c                      |   3 +-
 net/netfilter/nft_lookup.c                         |   5 +-
 net/netfilter/nft_masq.c                           |   7 +-
 net/netfilter/nft_meta.c                           |   8 +-
 net/netfilter/nft_nat.c                            |  11 +-
 net/netfilter/nft_objref.c                         |  41 +-
 net/netfilter/nft_osf.c                            |   3 +-
 net/netfilter/nft_payload.c                        |   2 +-
 net/netfilter/nft_queue.c                          |   5 +-
 net/netfilter/nft_range.c                          |   2 +-
 net/netfilter/nft_redir.c                          |   7 +-
 net/netfilter/nft_reject.c                         |   3 +-
 net/netfilter/nft_reject_inet.c                    |   3 +-
 net/netfilter/nft_reject_netdev.c                  |   3 +-
 net/netfilter/nft_rt.c                             |   3 +-
 net/netfilter/nft_set_pipapo.c                     | 259 ++++++++-----
 net/netfilter/nft_set_pipapo.h                     |   8 +
 net/netfilter/nft_socket.c                         |   3 +-
 net/netfilter/nft_synproxy.c                       |   3 +-
 net/netfilter/nft_tproxy.c                         |   7 +-
 net/netfilter/nft_xfrm.c                           |   3 +-
 net/openvswitch/conntrack.c                        |  39 +-
 net/packet/af_packet.c                             |   7 +-
 net/rxrpc/call_accept.c                            |  27 +-
 net/sched/act_ct.c                                 |  41 +-
 net/sched/cls_u32.c                                |   3 +
 net/sched/sch_api.c                                |  24 +-
 net/sched/sch_cake.c                               |   2 +-
 net/sched/sch_taprio.c                             |  12 +-
 net/sctp/protocol.c                                |  20 +-
 net/sctp/sysctl.c                                  |   9 +-
 net/smc/smc_tx.c                                   |   6 +-
 net/tipc/socket.c                                  |   6 +-
 net/tls/tls_device.c                               |   4 +-
 net/tls/tls_sw.c                                   |   5 +
 net/x25/af_x25.c                                   |   4 +-
 net/x25/x25_timer.c                                |  25 +-
 net/xfrm/espintcp.c                                |  42 +--
 security/apparmor/include/net.h                    |   6 +-
 security/apparmor/lsm.c                            |  38 +-
 security/apparmor/net.c                            |   2 +-
 security/bpf/hooks.c                               |   3 +
 security/security.c                                |  47 ++-
 security/selinux/hooks.c                           |  95 +++--
 security/selinux/include/objsec.h                  |   5 +
 security/selinux/netlabel.c                        |  23 +-
 security/selinux/ss/policydb.c                     |  31 ++
 security/selinux/ss/services.c                     |   4 +-
 security/smack/smack.h                             |   5 +
 security/smack/smack_lsm.c                         |  70 ++--
 security/smack/smack_netfilter.c                   |   4 +-
 sound/hda/hdac_regmap.c                            |   4 +-
 sound/pci/hda/patch_conexant.c                     |   3 -
 sound/pci/hda/patch_hdmi.c                         |  48 ++-
 sound/soc/codecs/cs35l41-lib.c                     |   2 +-
 sound/soc/codecs/cs4265.c                          |   4 +-
 sound/soc/codecs/lpass-wsa-macro.c                 |   8 +-
 sound/soc/fsl/fsl_sai.c                            |  29 +-
 sound/soc/mediatek/mt8183/mt8183-afe-pcm.c         |  12 +-
 sound/soc/mediatek/mt8192/mt8192-afe-pcm.c         | 118 +++---
 sound/soc/sof/ipc3-control.c                       |  34 +-
 sound/soc/xilinx/xlnx_formatter_pcm.c              |  10 +-
 tools/testing/selftests/net/mptcp/mptcp_join.sh    |   4 +-
 virt/kvm/kvm_main.c                                |   3 +
 424 files changed, 5764 insertions(+), 4185 deletions(-)

Read the cover letter in its thread