6.18.51-rc1 review

Greg Kroah-Hartman amd-gfx dri-devel driver-core linux-cifs linux-fsdevel linux-patches lkml stable 1 version Sep 9 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Sep 9583 patches 14 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/583	net: skbuff: dont skb_tx_error() the source skb in skb_zerocopy()`net/core/skbuff.c`	+2 -3	0 replies
2/583	openvswitch: Fix CT limit teardown use-after-free`net/openvswitch/conntrack.c` `net/openvswitch/conntrack.h` `net/openvswitch/datapath.c` +1 more	+98 ~~-47~~	0 replies
3/583	mm/page_vma_mapped: use huge_ptep_get() for hugetlb`mm/page_vma_mapped.c`	+7 -1	0 replies
4/583	entry: Fix seccomp bypass after ptrace with TSYNC`kernel/entry/syscall-common.c`	+3 -0	0 replies
5/583	fsnotify: Fix stale object mask after concurrent mark updates`fs/notify/fanotify/fanotify_user.c` `fs/notify/inotify/inotify_user.c`	+8 ~~-19~~	0 replies
6/583	objtool/rust: add one more `noreturn` Rust function`tools/objtool/check.c`	+2 -1	0 replies
7/583	mfd: qnap-mcu: keep the reply buffer alive past a command timeout`drivers/mfd/qnap-mcu.c`	+7 -6	0 replies
8/583	drm/amd: Drop calls to restore power limit and clock from smu_resume()`drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c`	+0 ~~-13~~	0 replies
9/583	fsnotify: inotify: pass mark connector to fsnotify_recalc_mask()`fs/notify/inotify/inotify_user.c`	+1 -1	0 replies
10/583	drm/xe: Dont hand out the flat CCS storage as usable VRAM`drivers/gpu/drm/xe/xe_vram.c`	+18 -5	0 replies
11/583	bpf: fix the return value of push_stack`kernel/bpf/verifier.c`	+41 ~~-40~~	0 replies
12/583	drm/amd/display: fix division by zero in get_estimated_bw()`drivers/gpu/drm/amd/display/dc/link/protocols/link_dp_dpia_bw.c`	+5 -0	0 replies
13/583	usb: image: mdc800: change kmalloc() to kzalloc()`drivers/usb/image/mdc800.c`	+2 -2	0 replies
14/583	ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()`sound/usb/midi.c`	+2 -0	0 replies
15/583	clk: qcom: gcc-mdm9607: Increase delay for USB PHY reset`drivers/clk/qcom/gcc-mdm9607.c`	+1 -1	0 replies
16/583	media: usbtv: keep device alive while ALSA card exists`drivers/media/usb/usbtv/usbtv-audio.c`	+11 -0	0 replies
17/583	usb-storage: ene_ub6250: fix race between scan work and probe`drivers/usb/storage/ene_ub6250.c`	+2 -0	0 replies
18/583	usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns()`drivers/usb/gadget/function/f_mass_storage.c`	+1 -1	0 replies
19/583	usb: dwc3: clear forceRM when issuing EndTransfer`drivers/usb/dwc3/ep0.c` `drivers/usb/dwc3/gadget.c`	+14 -9	0 replies
20/583	usb: storage: realtek_cr: fix use-after-free on disconnect`drivers/usb/storage/realtek_cr.c`	+4 -5	0 replies
21/583	usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop`drivers/usb/typec/tcpm/qcom/qcom_pmic_typec_port.c`	+2 -0	0 replies
22/583	usb: typec: qcom-pmic-typec: drain cc_debounce_dwork if port_start() fails`drivers/usb/typec/tcpm/qcom/qcom_pmic_typec_port.c`	+3 -0	0 replies
23/583	usb: typec: qcom-pmic: cancel reset_work on stop`drivers/usb/typec/tcpm/qcom/qcom_pmic_typec_pdphy.c`	+2 -0	0 replies
24/583	usb: typec: tcpm: constrain TCPM_SOURCING_VBUS event handling`drivers/usb/typec/tcpm/tcpm.c`	+22 -6	0 replies
25/583	usb: typec: tipd: Fix Thunderbolt altmode VDOs for cd321x`drivers/usb/typec/tipd/core.c` `drivers/usb/typec/tipd/tps6598x.h`	+15 -6	0 replies
26/583	usb: typec: ucsi: displayport: Fix OOB altmode array index`drivers/usb/typec/ucsi/displayport.c`	+1 -1	0 replies
27/583	usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs`drivers/usb/gadget/function/f_midi2.c`	+2 -3	0 replies
28/583	usb: gadget: f_midi2: fix use-after-free in string attribute show path`drivers/usb/gadget/function/f_midi2.c`	+6 -6	0 replies
29/583	usb: gadget: f_midi: initialize work in f_midi_alloc()`drivers/usb/gadget/function/f_midi.c`	+1 -1	0 replies
30/583	USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()`drivers/usb/gadget/legacy/inode.c`	+2 -1	0 replies
31/583	usb: gadget: fix null pointer dereference in usb_put_function_instance()`drivers/usb/gadget/functions.c`	+1 -1	0 replies
32/583	staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()`drivers/staging/rtl8723bs/core/rtw_ieee80211.c`	+4 -0	0 replies
33/583	staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()`drivers/staging/rtl8723bs/core/rtw_ieee80211.c`	+3 -0	0 replies
34/583	xhci: fix lost bounce buffers on TDs spanning several ring segments`drivers/usb/host/xhci-ring.c`	+24 -8	0 replies
35/583	thermal/drivers/imx: Disable clock on runtime resume failure`drivers/thermal/imx_thermal.c`	+7 -2	0 replies
36/583	thermal/drivers/qoriq: Disable clock on resume failure`drivers/thermal/qoriq_thermal.c`	+11 -2	0 replies
37/583	userfaultfd: reset err to be 0 when move_pages_ptes succeeded`mm/userfaultfd.c`	+3 -1	0 replies
38/583	ublk: clear VM_MAYWRITE on read-only ublk char device mmap`drivers/block/ublk_drv.c`	+6 -0	0 replies
39/583	soc: qcom: geni-se: Use HW PROG_RAM_DEPTH to validate firmware size`drivers/soc/qcom/qcom-geni-se.c` `include/linux/soc/qcom/geni-se.h`	+17 ~~-11~~	0 replies
40/583	spi: bcm63xx-hsspi: disable clocks on resume failure`drivers/spi/spi-bcm63xx-hsspi.c`	+7 -1	0 replies
41/583	spi: bcm63xx: disable clock on resume failure`drivers/spi/spi-bcm63xx.c`	+5 -1	0 replies
42/583	spi: bcmbca-hsspi: disable clocks on resume failure`drivers/spi/spi-bcmbca-hsspi.c`	+7 -1	0 replies
43/583	spi: Fix DMA mapping ownership on partial map failure`drivers/spi/spi.c`	+18 ~~-16~~	0 replies
44/583	scsi: target: iscsi: Reserve a terminator byte for the login payload`drivers/target/iscsi/iscsi_target_login.c`	+1 -1	0 replies
45/583	scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame`drivers/scsi/megaraid/megaraid_sas_base.c`	+12 -1	0 replies
46/583	scsi: pm8001: Use rollback index when freeing MSI-X vectors`drivers/scsi/pm8001/pm8001_init.c`	+2 -2	0 replies
47/583	mm/damon/vaddr-kunit: check region count in three_regions test`mm/damon/tests/vaddr-kunit.h`	+5 -0	0 replies
48/583	samples/damon/mtier: handle damon_start() failure`samples/damon/mtier.c`	+10 -1	0 replies
49/583	samples/damon/mtier: handle damon_stop() failure`samples/damon/mtier.c`	+2 -1	0 replies
50/583	samples/damon/prcl: handle damon_start() failure`samples/damon/prcl.c`	+3 -1	0 replies
51/583	samples/damon/prcl: stop and free damon ctx when damon_call() fails`samples/damon/prcl.c`	+6 -1	0 replies
52/583	samples/damon/wsse: handle damon_start() failure`samples/damon/wsse.c`	+3 -1	0 replies
53/583	samples/damon/wsse: stop and free damon ctx when damon_call() fails`samples/damon/wsse.c`	+6 -1	0 replies
54/583	mm/damon/sysfs-schemes: kobject_del() scheme action destination dirs`mm/damon/sysfs-schemes.c`	+3 -1	0 replies
55/583	mm/damon/sysfs-schemes: kobject_del() scheme dirs`mm/damon/sysfs-schemes.c`	+4 -1	0 replies
56/583	mm/damon/sysfs-schemes: kobject_del() scheme filter dirs`mm/damon/sysfs-schemes.c`	+3 -1	0 replies
57/583	mm/damon/sysfs-schemes: kobject_del() scheme quota goal dirs`mm/damon/sysfs-schemes.c`	+3 -1	0 replies
58/583	mm/damon/sysfs-schemes: kobject_del() scheme region dirs`mm/damon/sysfs-schemes.c`	+1 -0	0 replies
59/583	mm/damon/sysfs: kobject_del() region and target (error) dirs`mm/damon/sysfs.c`	+6 -2	0 replies
60/583	mm/damon/sysfs: kobject_del() target (normal), context and kdamond dirs`mm/damon/sysfs.c`	+9 -2	0 replies
61/583	mm/damon/core-kunit: check region count before testing in split_at()`mm/damon/tests/core-kunit.h`	+5 -0	0 replies
62/583	futex: Prevent rcuwait use-after-free during requeue PI`kernel/futex/requeue.c`	+10 -2	0 replies
63/583	ftrace: Synchronize the initialization of ftrace_ops`kernel/trace/ftrace.c`	+11 -2	0 replies
64/583	HID: bpf: serialize device reference release in struct_ops destroy path`drivers/hid/bpf/hid_bpf_struct_ops.c`	+13 -4	0 replies
65/583	HID: rmi: fix OOB access with undersized RMI reports`drivers/hid/hid-rmi.c`	+43 -3	0 replies
66/583	HID: wacom: validate report length in wacom_intuos_pro2_bt_irq`drivers/hid/wacom_wac.c`	+13 -0	0 replies
67/583	dm: fix race when loading and unloading a table`drivers/md/dm.c`	+8 -4	0 replies
68/583	dm: fix resume-vs-remove race`drivers/md/dm.c`	+1 -1	0 replies
69/583	dma-direct: return struct page from dma_direct_alloc_from_pool()`kernel/dma/direct.c`	+10 -8	0 replies
70/583	dmaengine: fsl-edma: tracing: no ptr dereference during log output`drivers/dma/fsl-edma-trace.h`	+3 -1	0 replies
71/583	dmaengine: dw-edma: Fix HDMA channel status register access`drivers/dma/dw-edma/dw-hdma-v0-core.c`	+1 -1	0 replies
72/583	dmaengine: dw-edma: Complete descriptors before pausing`drivers/dma/dw-edma/dw-edma-core.c`	+14 -6	0 replies
73/583	dmaengine: dw-edma: Initialize IRQ data before requesting IRQs`drivers/dma/dw-edma/dw-edma-core.c`	+2 -1	0 replies
74/583	cpuidle: dt_idle_genpd: kfree() the original name allocation`drivers/cpuidle/dt_idle_genpd.c`	+1 -2	0 replies
75/583	cpuidle: psci: Fix support for probe deferral by dropping the faux device`drivers/cpuidle/cpuidle-psci.c`	+16 ~~-26~~	0 replies
76/583	block: flag zoned disks with GENHD_FL_NO_PART`block/genhd.c`	+7 -0	0 replies
77/583	bpf: Fix infinite loop in pcpu_freelist push with one possible CPU`kernel/bpf/percpu_freelist.c` `kernel/bpf/percpu_freelist.h`	+28 -8	0 replies
78/583	ceph: lock mutex in ceph_mds_check_access()`fs/ceph/mds_client.c` `fs/ceph/mds_client.h`	+5 -0	0 replies
79/583	ata: ahci: work around lost interrupts on Marvell 88SE61xx`drivers/ata/ahci.c`	+49 -0	0 replies
80/583	ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()`security/integrity/ima/ima_appraise.c`	+2 -0	0 replies
81/583	irqchip/stm32mp-exti: Fix the unit of the hwspinlock timeout`drivers/irqchip/irq-stm32mp-exti.c`	+2 -2	0 replies
82/583	kprobes: Protect kprobe_blacklist with RCU`include/linux/kprobes.h` `kernel/kprobes.c`	+11 -4	0 replies
83/583	mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()`mm/mempolicy.c`	+1 -1	0 replies
84/583	fs/ntfs3: fix KMSAN uninit-value in ni_create_attr_list`fs/ntfs3/frecord.c`	+1 -1	0 replies
85/583	fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()`fs/ntfs3/frecord.c`	+16 -4	0 replies
86/583	Input: aiptek - validate raw macro indices before updating state`drivers/input/tablet/aiptek.c`	+9 -4	0 replies
87/583	memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done`mm/memcontrol.c`	+13 -0	0 replies
88/583	memcg: make the v1 soft limit knob inert`Documentation/admin-guide/cgroup-v1/memory.rst` `mm/memcontrol-v1.c`	+32 ~~-60~~	0 replies
89/583	rtc: rzn1: Handle EPROBE_DEFER for optional pps interrupt`drivers/rtc/rtc-rzn1.c`	+4 -0	0 replies
90/583	rtc: rzn1: Fix weekday underflow when alarm crosses month boundary`drivers/rtc/rtc-rzn1.c`	+1 -6	0 replies
91/583	rtc: rzn1: Handle unset alarm weekday in rzn1_rtc_read_alarm`drivers/rtc/rtc-rzn1.c`	+12 -4	0 replies
92/583	rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers`drivers/rtc/rtc-rzn1.c`	+5 -0	0 replies
93/583	perf/x86/intel: Fix kernel address leakages in LBR stack`arch/x86/events/intel/lbr.c`	+9 -3	0 replies
94/583	perf trace: Factor out BPF loop body`tools/perf/util/bpf_skel/augmented_raw_syscalls.bpf.c`	+73 ~~-55~~	0 replies
95/583	perf trace: Refactor augmented_raw_syscalls using bpf_for`tools/perf/util/bpf_skel/augmented_raw_syscalls.bpf.c`	+35 ~~-12~~	0 replies
96/583	perf hisi-ptt: Fix PTT trace TLP header parsing`Documentation/trace/hisi-ptt.rst` `tools/perf/util/hisi-ptt-decoder/hisi-ptt-pkt-decoder.c` `tools/perf/util/hisi-ptt-decoder/hisi-ptt-pkt-decoder.h`	+50 ~~-37~~	0 replies
97/583	i2c: designware: Enable interrupt mask workaround for HJMC3001`drivers/i2c/busses/i2c-designware-platdrv.c`	+1 -1	0 replies
98/583	i2c: qcom-geni: update frequency table to fix timing parameters`drivers/i2c/busses/i2c-qcom-geni.c`	+2 -2	0 replies
99/583	i2c: core: fix debugfs UAF on adapter removal`drivers/i2c/i2c-core-base.c`	+6 -0	0 replies
100/583	i2c: mux: Fix channel node leak on adapter add failure`drivers/i2c/i2c-mux.c`	+1 -0	0 replies
101/583	arm64: mm: Fix the lockless page-table walk in show_pte()`arch/arm64/mm/fault.c`	+8 -4	0 replies
102/583	arm64: errata: pass REVIDR when matching target implementation CPUs`arch/arm64/kernel/cpu_errata.c`	+1 -1	0 replies
103/583	ALSA: rawmidi: Return the error from snd_rawmidi_input_params()`sound/core/rawmidi.c`	+1 -1	0 replies
104/583	ALSA: harmony: initialize locks before requesting IRQ`sound/parisc/harmony.c`	+3 -3	0 replies
105/583	ALSA: pcm: Fix race between non-atomic ops and trigger-start`sound/core/pcm_native.c`	+2 -0	0 replies
106/583	nvme-fabrics: fix DHCHAP secret leak on parse failure`drivers/nvme/host/fabrics.c`	+2 -0	0 replies
107/583	nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails`drivers/nvme/host/fc.c`	+20 -6	0 replies
108/583	nvme-tcp: check the data direction of a C2HData PDU`drivers/nvme/host/tcp.c`	+7 -0	0 replies
109/583	nvme: add missing SRCU grace period in error path`drivers/nvme/host/core.c`	+3 -0	0 replies
110/583	nvmet-auth: Synchronize timeout work during SQ teardown`drivers/nvme/target/auth.c` `drivers/nvme/target/core.c` `drivers/nvme/target/nvmet.h`	+9 -1	0 replies
111/583	nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU`drivers/nvme/target/tcp.c`	+2 -0	0 replies
112/583	nvmet-tcp: reject unsolicited H2CData PDUs`drivers/nvme/target/tcp.c`	+8 -0	0 replies
113/583	pmdomain: airoha: fix unselectable AIROHA_CPU_PM_DOMAIN kconfig`drivers/pmdomain/mediatek/Kconfig`	+3 -2	0 replies
114/583	Revert "irqchip/mbigen: Fix mbigen node address layout"`drivers/irqchip/irq-mbigen.c`	+4 ~~-16~~	0 replies
115/583	mm/hugetlb: fix missing migratable flag on same-node hugetlb migration`mm/hugetlb.c`	+7 -7	0 replies
116/583	mm/hugetlb: keep max_huge_pages when dissolving surplus folios`mm/hugetlb.c`	+4 -2	0 replies
117/583	mm/hugetlb_cgroup: call page_counter_set_max() outside VM_BUG_ON()`mm/hugetlb_cgroup.c`	+5 -2	0 replies
118/583	nvdimm/btt: reject an arena whose nfree is below the lane count`drivers/nvdimm/btt.c`	+8 -0	0 replies
119/583	parisc: eisa: Fix infinite loop when parsing invalid IRQ value`drivers/parisc/eisa.c`	+5 -0	0 replies
120/583	parisc: Fix alignment of asm statements in head.S`arch/parisc/kernel/head.S`	+1 -0	0 replies
121/583	powerpc/kexec_file: Fix null-ptr-def in extra size calculation`arch/powerpc/kexec/file_load_64.c`	+1 -1	0 replies
122/583	powerpc/kexec_file: Prevent kexec range truncation`arch/powerpc/kexec/ranges.c`	+5 -7	0 replies
123/583	powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population`arch/powerpc/mm/book3s64/radix_pgtable.c`	+1 -6	0 replies
124/583	powerpc/pseries: Handle and log pseries-wdt registration failures`arch/powerpc/platforms/pseries/setup.c`	+12 -2	0 replies
125/583	powerpc/pseries: Move H_WATCHDOG definitions to a common header`arch/powerpc/include/asm/papr-watchdog.h` `drivers/watchdog/pseries-wdt.c`	+59 ~~-52~~	0 replies
126/583	powerpc/crash: stop watchdogs before booting kdump kernel`arch/powerpc/include/asm/papr-watchdog.h` `arch/powerpc/platforms/pseries/setup.c`	+20 -0	0 replies
127/583	s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()`drivers/s390/crypto/vfio_ap_ops.c`	+20 ~~-25~~	0 replies
128/583	s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove`drivers/s390/crypto/vfio_ap_ops.c`	+4 -4	0 replies
129/583	s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove`drivers/s390/crypto/vfio_ap_ops.c`	+3 -3	0 replies
130/583	s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL`drivers/s390/crypto/vfio_ap_ops.c`	+30 -9	0 replies
131/583	s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed`drivers/s390/crypto/vfio_ap_ops.c`	+17 ~~-13~~	0 replies
132/583	s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects`drivers/s390/crypto/vfio_ap_ops.c`	+23 -4	0 replies
133/583	s390/vfio-ap: Fix NULL deref in status_show() during queue probe`drivers/s390/crypto/vfio_ap_ops.c`	+29 -4	0 replies
134/583	s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap`drivers/s390/crypto/vfio_ap_ops.c`	+9 -0	0 replies
135/583	s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object`drivers/s390/crypto/vfio_ap_ops.c`	+8 -0	0 replies
136/583	mtd: afs: validate v2 image info bounds`drivers/mtd/parsers/afs.c`	+7 -0	0 replies
137/583	mtd: mtdoops: free page bitmap when the backing MTD is removed`drivers/mtd/mtdoops.c`	+3 -0	0 replies
138/583	mtd: nand: realtek-ecc: add missing MODULE_DEVICE_TABLE()`drivers/mtd/nand/ecc-realtek.c`	+1 -0	0 replies
139/583	mtd: rawnand: validate ONFI extended parameter page sections`drivers/mtd/nand/raw/nand_onfi.c`	+25 -2	0 replies
140/583	batman-adv: fix stale receive device on merged fragments`net/batman-adv/main.c`	+4 -0	0 replies
141/583	batman-adv: mcast: ensure unshared skb for multicast packets`net/batman-adv/multicast_forw.c`	+1 -2	0 replies
142/583	batman-adv: mcast: linearize skbuff for packet generation`net/batman-adv/multicast_forw.c`	+4 -0	0 replies
143/583	batman-adv: dat: avoid unaligned fault in IP extraction`net/batman-adv/distributed-arp-table.c`	+6 -2	0 replies
144/583	batman-adv: bla: fix freeing of claims on meshif deletion`net/batman-adv/bridge_loop_avoidance.c`	+1 -9	0 replies
145/583	batman-adv: bla: prevent CRC corruptions after claim flush`net/batman-adv/bridge_loop_avoidance.c`	+0 -5	0 replies
146/583	clk: clocking-wizard: fix integer overflow in rate calculation`drivers/clk/xilinx/clk-xlnx-clock-wizard.c`	+2 -2	0 replies
147/583	clk: mediatek: mt8196: Select REGMAP_MMIO for vlpckgen`drivers/clk/mediatek/Kconfig`	+1 -0	0 replies
148/583	clk: meson: align gxbb_32k_clk_sel number of parents with actual count`drivers/clk/meson/gxbb.c`	+1 -1	0 replies
149/583	clk: qcom: gcc-msm8916: Fix enable_reg for gcc_blsp1_sleep_clk`drivers/clk/qcom/gcc-msm8916.c`	+3 -2	0 replies
150/583	clk: qcom: gcc-msm8939: Fix enable_reg for gcc_blsp1_sleep_clk`drivers/clk/qcom/gcc-msm8939.c`	+3 -2	0 replies
151/583	clk: rockchip: rk3588: Dont change PLL rates when setting dclk_vop2_src`drivers/clk/rockchip/clk-rk3588.c`	+1 -1	0 replies
152/583	clk: qcom: gcc-mdm9607: Drop incorrect apss_tcu_clk_src`drivers/clk/qcom/gcc-mdm9607.c`	+0 ~~-35~~	0 replies
153/583	clk: qcom: gcc-mdm9607: Drop incorrect system_noc_bfdcd_clk_src`drivers/clk/qcom/gcc-mdm9607.c`	+0 ~~-13~~	0 replies
154/583	clk: qcom: gcc-mdm9607: Fix enable_reg for gcc_blsp1_sleep_clk`drivers/clk/qcom/gcc-mdm9607.c`	+3 -2	0 replies
155/583	clk: qcom: gcc-mdm9607: Fix halt_reg for gcc_apss_axi_clk`drivers/clk/qcom/gcc-mdm9607.c`	+1 -1	0 replies
156/583	clk: qcom: gcc-mdm9607: Drop incorrect BIMC PLL and related clocks`drivers/clk/qcom/gcc-mdm9607.c`	+1 ~~-124~~	0 replies
157/583	i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure`drivers/i2c/muxes/i2c-demux-pinctrl.c`	+1 -0	0 replies
158/583	ASoC: adau1761: sort the register default table`sound/soc/codecs/adau1761.c`	+17 ~~-17~~	0 replies
159/583	ASoC: cs35l33: drain threaded IRQ before runtime suspend`sound/soc/codecs/cs35l33.c`	+12 -2	0 replies
160/583	ASoC: cs35l34: drain threaded IRQ before runtime suspend`sound/soc/codecs/cs35l34.c`	+12 -2	0 replies
161/583	ASoC: cx2072x: sort the register default table`sound/soc/codecs/cx2072x.c`	+61 ~~-61~~	0 replies
162/583	ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure`sound/soc/fsl/mpc5200_psc_i2s.c`	+1 -0	0 replies
163/583	ASoC: fsl_easrc: Use div64_u64 for 64-by-64 division`sound/soc/fsl/fsl_easrc.c`	+1 -1	0 replies
164/583	ASoC: fsl_easrc: sort the register default table`sound/soc/fsl/fsl_easrc.c`	+3 -3	0 replies
165/583	ASoC: hdac_hda: Fix hlink refcount leak on component registration failure`sound/soc/codecs/hdac_hda.c`	+1 -3	0 replies
166/583	AsoC: intel: sst: fix PCI device reference leak on probe failure`sound/soc/intel/atom/sst/sst_pci.c`	+3 -1	0 replies
167/583	ASoC: loongson: Fix error handling in ACPI property parsing`sound/soc/loongson/loongson_card.c`	+4 -2	0 replies
168/583	ASoC: max9860: sort the register default table`sound/soc/codecs/max9860.c`	+1 -1	0 replies
169/583	ASoC: ml26124: sort the register default table`sound/soc/codecs/ml26124.c`	+3 -1	0 replies
170/583	ASoC: pcm512x: sort the register default table`sound/soc/codecs/pcm512x.c`	+20 ~~-20~~	0 replies
171/583	ASoC: pm4125-sdw: sort the register default table`sound/soc/codecs/pm4125-sdw.c`	+1 -1	0 replies
172/583	ASoC: rt1017-sdca-sdw: sort the register default table`sound/soc/codecs/rt1017-sdca-sdw.h`	+5 -5	0 replies
173/583	ASoC: rt1316-sdw: sort the register default table`sound/soc/codecs/rt1316-sdw.c`	+1 -1	0 replies
174/583	ASoC: rt1318-sdw: sort the register default table`sound/soc/codecs/rt1318-sdw.c`	+1 -1	0 replies
175/583	ASoC: rt1318: sort the register default table`sound/soc/codecs/rt1318.c`	+2 -2	0 replies
176/583	ASoC: rt274: sort the register default table`sound/soc/codecs/rt274.c`	+4 -4	0 replies
177/583	ASoC: rt286: sort the register default table`sound/soc/codecs/rt286.c`	+6 -6	0 replies
178/583	ASoC: rt298: sort the register default table`sound/soc/codecs/rt298.c`	+6 -6	0 replies
179/583	ASoC: rt700: drop duplicate reg_default entry`sound/soc/codecs/rt700-sdw.h`	+0 -1	0 replies
180/583	ASoC: rt700: sort the register default table`sound/soc/codecs/rt700-sdw.h`	+5 -5	0 replies
181/583	ASoC: rt711-sdca: sort the register default tables`sound/soc/codecs/rt711-sdca-sdw.h`	+3 -3	0 replies
182/583	ASoC: rt711: sort the register default table`sound/soc/codecs/rt711-sdw.h`	+5 -5	0 replies
183/583	ASoC: rt712-sdca-dmic: sort the register default table`sound/soc/codecs/rt712-sdca-dmic.h`	+4 -2	0 replies
184/583	ASoC: rt712-sdca-sdw: sort the register default table`sound/soc/codecs/rt712-sdca-sdw.h`	+6 -5	0 replies
185/583	ASoC: rt715-sdca: drop duplicate reg_default entries`sound/soc/codecs/rt715-sdca-sdw.h`	+0 -4	0 replies
186/583	ASoC: rt715-sdca: sort the register default tables`sound/soc/codecs/rt715-sdca-sdw.h`	+4 -4	0 replies
187/583	ASoC: rt715: sort the register default table`sound/soc/codecs/rt715-sdw.h`	+16 ~~-16~~	0 replies
188/583	ASoC: rt721-sdca-sdw: sort the register default table`sound/soc/codecs/rt721-sdca-sdw.h`	+14 ~~-14~~	0 replies
189/583	ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get`sound/soc/samsung/aries_wm8994.c`	+1 -0	0 replies
190/583	ASoC: sgtl5000: sort the register default table`sound/soc/codecs/sgtl5000.c`	+1 -1	0 replies
191/583	ASoC: sti-sas: sort the register default table`sound/soc/codecs/sti-sas.c`	+1 -1	0 replies
192/583	ASoC: tas2552: sort the register default table`sound/soc/codecs/tas2552.c`	+7 -7	0 replies
193/583	ASoC: tas2764: sort the register default table`sound/soc/codecs/tas2764.c`	+1 -1	0 replies
194/583	ASoC: tas2780: sort the register default table`sound/soc/codecs/tas2780.c`	+1 -1	0 replies
195/583	ASoC: tas2783-sdw: drop duplicate reg_default entry`sound/soc/codecs/tas2783-sdw.c`	+0 -1	0 replies
196/583	ASoC: tas2783-sdw: sort the register default table`sound/soc/codecs/tas2783-sdw.c`	+85 ~~-85~~	0 replies
197/583	ASoC: tegra210_mixer: sort the register default table`sound/soc/tegra/tegra210_mixer.c`	+1 -1	0 replies
198/583	ASoC: tegra: Sort MBDRC register defaults`sound/soc/tegra/tegra210_mbdrc.c`	+21 ~~-21~~	0 replies
199/583	ASoC: tegra: Sort ADMAIF register defaults`sound/soc/tegra/tegra210_admaif.c`	+138 ~~-70~~	0 replies
200/583	ASoC: tegra: Fix the MIXER enable default value`sound/soc/tegra/tegra210_mixer.c`	+7 -3	0 replies
201/583	ASoC: tegra210_i2s: sort the Tegra264 register default table`sound/soc/tegra/tegra210_i2s.c`	+3 -3	0 replies
202/583	ASoC: tegra210_i2s: sort the register default table`sound/soc/tegra/tegra210_i2s.c`	+1 -1	0 replies
203/583	iio: adc: adi-axi-adc: add data size support for AD408X backend`drivers/iio/adc/adi-axi-adc.c`	+30 -0	0 replies
204/583	iio: adc: max34408: add missing select REGMAP_I2C to Kconfig`drivers/iio/adc/Kconfig`	+1 -0	0 replies
205/583	iio: adc: pac1921: fix wrong channel used in trigger handler read`drivers/iio/adc/pac1921.c`	+1 -1	0 replies
206/583	iio: buffer: Fix potential use-after-free in anonymous buffer release`drivers/iio/industrialio-buffer.c`	+10 -6	0 replies
207/583	iio: buffer: Make IIO DMA fence release RCU-safe`drivers/iio/industrialio-buffer.c`	+4 -9	0 replies
208/583	iio: buffer: Tie IIO dma fence lock lifetime to the fence`drivers/iio/industrialio-buffer.c`	+4 -5	0 replies
209/583	iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable`drivers/iio/chemical/atlas-sensor.c`	+5 -1	0 replies
210/583	iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF`drivers/iio/chemical/atlas-sensor.c`	+1 ~~-12~~	0 replies
211/583	iio: chemical: sgp30: Handle IAQ thread creation failure`drivers/iio/chemical/sgp30.c`	+3 -0	0 replies
212/583	iio: dac: ad3552r-hs: fix scnprintf() buffer bound in data source show`drivers/iio/dac/ad3552r-hs.c`	+1 -1	0 replies
213/583	iio: dac: m62332: Fix regulator reference count imbalance`drivers/iio/dac/m62332.c`	+12 -5	0 replies
214/583	iio: gyro: mpu3050: fix sign of raw angular velocity readings`drivers/iio/gyro/mpu3050-core.c`	+1 -1	0 replies
215/583	iio: light: cm32181: return zero after writing calibscale`drivers/iio/light/cm32181.c`	+1 -1	0 replies
216/583	iio: light: gp2ap002: Disable regulators on resume failure`drivers/iio/light/gp2ap002.c`	+8 -2	0 replies
217/583	iio: light: ltrf216a: fix runtime PM reference leak in error path`drivers/iio/light/ltrf216a.c`	+1 -2	0 replies
218/583	iio: pressure: dps310: fix NULL pointer dereference on ACPI probe`drivers/iio/pressure/dps310.c`	+1 -2	0 replies
219/583	iio: pressure: mpl115: Fix runtime PM cleanup`drivers/iio/pressure/mpl115.c`	+7 -4	0 replies
220/583	iio: srf04: fix pm_runtime handling on probe error path`drivers/iio/proximity/srf04.c`	+1 -0	0 replies
221/583	iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register()`drivers/iio/temperature/hid-sensor-temperature.c`	+2 -1	0 replies
222/583	iio: ti-ads7138: Disable STATS_EN bit while reading conversion results`drivers/iio/adc/ti-ads7138.c`	+33 -9	0 replies
223/583	iio: light: opt4060: Reject integration times with a non-zero seconds part`drivers/iio/light/opt4060.c`	+3 -0	0 replies
224/583	iio: light: opt4060: Fix incorrect register name in threshold read error message`drivers/iio/light/opt4060.c`	+1 -1	0 replies
225/583	iio: light: opt4001: Fix power down clearing bits of the wrong register`drivers/iio/light/opt4001.c`	+4 ~~-23~~	0 replies
226/583	iio: light: opt4001: Fix incompatible pointer type passed to div_u64_rem()`drivers/iio/light/opt4001.c`	+3 -2	0 replies
227/583	iio: light: opt4001: Reject integration times with a non-zero seconds part`drivers/iio/light/opt4001.c`	+3 -0	0 replies
228/583	iio: light: opt4001: Fix reversed GENMASK() arguments in fault count mask`drivers/iio/light/opt4001.c`	+1 -1	0 replies
229/583	KVM: PPC: Book3S HV: Validate arch_compat against host compatibility mode`arch/powerpc/include/asm/reg.h` `arch/powerpc/kvm/book3s_hv.c` `arch/powerpc/kvm/powerpc.c`	+32 -1	0 replies
230/583	KVM: nVMX: Always flush vpid02 on first use`arch/x86/kvm/vmx/nested.c`	+10 -0	0 replies
231/583	KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02`arch/x86/kvm/vmx/nested.c`	+13 ~~-30~~	0 replies
232/583	KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit`arch/x86/kvm/vmx/nested.c`	+3 -2	0 replies
233/583	KVM: nVMX: Service local TLB flushes on failed nested VM-Enter`arch/x86/kvm/vmx/nested.c`	+8 -0	0 replies
234/583	KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU`arch/x86/kvm/vmx/nested.c`	+10 -1	0 replies
235/583	KVM: x86/mmu: Fold kvm_mmu_zap_memslot() into kvm_arch_flush_shadow_memslot()`arch/x86/kvm/mmu/mmu.c`	+15 ~~-20~~	0 replies
236/583	KVM: x86/mmu: Split kvm_mmu_zap_all_fast() into "front" and "back" halves`arch/x86/kvm/mmu/mmu.c`	+25 ~~-12~~	0 replies
237/583	KVM: x86/mmu: Use CMPXCHG when clearing Accessed bit in TDP MMU`arch/x86/kvm/mmu/tdp_iter.h` `arch/x86/kvm/mmu/tdp_mmu.c`	+16 ~~-11~~	0 replies
238/583	KVM: x86/mmu: Use split "zap all fast" helpers when invalidating memslot`arch/x86/kvm/mmu/mmu.c`	+11 ~~-10~~	0 replies
239/583	KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk`arch/x86/kvm/mmu/mmu.c`	+19 ~~-14~~	0 replies
240/583	KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock`arch/x86/kvm/hyperv.c`	+18 -7	0 replies
241/583	KVM: x86: Serialize writes to disabled_quirks using kvm->lock`arch/x86/kvm/x86.c`	+2 -0	0 replies
242/583	KVM: x86: Ensure runtime reads of disabled_quirks are resolved once`arch/x86/kvm/x86.c` `arch/x86/kvm/x86.h`	+3 -2	0 replies
243/583	KVM: s390: Fix length check __import_wp_info()`arch/s390/kvm/guestdbg.c`	+1 -1	0 replies
244/583	KVM: s390: Fix memory leak in guest debug handling`arch/s390/kvm/guestdbg.c`	+1 -0	0 replies
245/583	KVM: s390: Fix old_data leak in guest debug error path`arch/s390/kvm/guestdbg.c`	+5 -1	0 replies
246/583	KVM: s390: Free guest debug data on vcpu destroy`arch/s390/kvm/kvm-s390.c`	+1 -0	0 replies
247/583	KVM: s390: Take srcu when importing watchpoint data`arch/s390/kvm/kvm-s390.c`	+4 -2	0 replies
248/583	KVM: s390: Zero initialize irq in reinject_machine_check`arch/s390/kvm/interrupt.c`	+1 -1	0 replies
249/583	KVM: s390: Fix memory corruption by not reinjecting CK machine checks`arch/s390/include/asm/nmi.h` `arch/s390/kernel/nmi.c` `arch/s390/kvm/interrupt.c`	+12 ~~-20~~	0 replies
250/583	KVM: s390: pv: Fix rc/rrc offset for PVM_DUMP`arch/s390/kvm/kvm-s390.c`	+1 -1	0 replies
251/583	KVM: s390: Restore sigset on error path`arch/s390/kvm/kvm-s390.c`	+4 -2	0 replies
252/583	KVM: arm64: Consider SCTLR_EL2.M when mapping the L1 VNCR page`arch/arm64/include/asm/kvm_nested.h` `arch/arm64/kvm/at.c` `arch/arm64/kvm/nested.c`	+11 -2	0 replies
253/583	KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation`arch/arm64/kvm/nested.c`	+19 -7	0 replies
254/583	KVM: arm64: Correctly handle end of VA space TLBI invalidation`arch/arm64/kvm/nested.c`	+19 ~~-24~~	0 replies
255/583	KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry`arch/arm64/kvm/nested.c`	+18 -3	0 replies
256/583	KVM: arm64: Sign-extend VA for range-based TLBI invalidation`arch/arm64/include/asm/kvm_nested.h` `arch/arm64/kvm/sys_regs.c`	+18 -0	0 replies
257/583	KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables`arch/arm64/kvm/vgic/vgic-v3.c`	+9 -3	0 replies
258/583	KVM: arm64: vgic: Fix detection of MI on no pending LR`arch/arm64/kvm/vgic/vgic-v3-nested.c`	+1 -1	0 replies
259/583	KVM: arm64: vgic: Reset in_kernel on private IRQ allocation failure`arch/arm64/kvm/vgic/vgic-init.c`	+1 -0	0 replies
260/583	KVM: arm64: vgic-its: Dont dereference a NULL collection on ITT save`arch/arm64/kvm/vgic/vgic-its.c`	+8 -0	0 replies
261/583	KVM: arm64: Correctly cap TLBI Range to the architural limit`arch/arm64/include/asm/kvm_nested.h`	+6 -0	0 replies
262/583	LoongArch: KVM: Fix PC double advance in kernel MMIO read fast path`arch/loongarch/kvm/exit.c`	+0 -1	0 replies
263/583	LoongArch: KVM: Fix TOCTOU race on pv_features`arch/loongarch/include/asm/kvm_host.h` `arch/loongarch/kvm/vcpu.c` `arch/loongarch/kvm/vm.c`	+7 -1	0 replies
264/583	LoongArch: KVM: Free init resources if kvm_init() fails`arch/loongarch/kvm/main.c`	+5 -1	0 replies
265/583	LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY`arch/loongarch/kvm/mmu.c`	+10 -0	0 replies
266/583	LoongArch: Add DIRECT_MAP_PHYSMEM_END definition`arch/loongarch/include/asm/pgtable.h`	+7 -0	0 replies
267/583	LoongArch: BPF: Optimize redundant TCC loads in epilogue`arch/loongarch/net/bpf_jit.c`	+2 -8	0 replies
268/583	LoongArch: BPF: Refactor jump offset calculation in tail call`arch/loongarch/net/bpf_jit.c`	+4 -8	0 replies
269/583	LoongArch: Fix acpi_package_ids[] array overflow`arch/loongarch/kernel/acpi.c`	+2 -1	0 replies
270/583	LoongArch: Do not select HAVE_RUST when KASAN is enabled`arch/loongarch/Kconfig`	+1 -1	0 replies
271/583	LoongArch: Do not save/restore percpu base register in rethook trampoline`arch/loongarch/kernel/rethook_trampoline.S`	+0 -2	0 replies
272/583	LoongArch: Avoid preempt count underflow without probe`arch/loongarch/kernel/kprobes.c`	+3 -0	0 replies
273/583	rust: drm: ioctl: fix unbounded lifetimes in ioctl handler arguments`rust/kernel/drm/ioctl.rs`	+6 -0	0 replies
274/583	media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref`drivers/media/usb/airspy/airspy.c`	+12 -5	0 replies
275/583	media: amphion: Remove obsolete frame_count check in venc_start_session`drivers/media/platform/amphion/venc.c`	+0 -2	0 replies
276/583	media: cec: core: Fix kmemleak due to missed rc_free_device() call`drivers/media/cec/core/cec-core.c`	+0 -2	0 replies
277/583	media: cec: disable delayed work before freeing an interrupted transmit`drivers/media/cec/core/cec-adap.c`	+1 -1	0 replies
278/583	media: cec: extron-da-hd-4k-plus: add sanity check`drivers/media/cec/usb/extron-da-hd-4k-plus/extron-da-hd-4k-plus.c`	+2 -1	0 replies
279/583	media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash`drivers/media/cec/platform/meson/ao-cec-g12a.c`	+1 -0	0 replies
280/583	media: cec: Serialize exclusive follower delivery`drivers/media/cec/core/cec-adap.c`	+7 -1	0 replies
281/583	media: cedrus: fix memory leak in cedrus_init_ctrls()`drivers/staging/media/sunxi/cedrus/cedrus.c`	+3 -1	0 replies
282/583	media: cobalt: Avoid freeing ALSA private data twice`drivers/media/pci/cobalt/cobalt-alsa-main.c`	+0 -1	0 replies
283/583	media: cx231xx: reject geometry changes while the VBI queue is busy`drivers/media/usb/cx231xx/cx231xx-video.c`	+2 -2	0 replies
284/583	media: cx23885: cancel NetUP CI work before teardown`drivers/media/pci/cx23885/cimax2.c`	+1 -0	0 replies
285/583	media: em28xx: defer audio-only extension registration`drivers/media/usb/em28xx/em28xx-cards.c`	+1 -2	0 replies
286/583	media: em28xx: fix use-after-free of dev_next->devlist on disconnect`drivers/media/usb/em28xx/em28xx-core.c`	+2 -0	0 replies
287/583	media: go7007: defer the ALSA v4l2 put until card release`drivers/media/usb/go7007/snd-go7007.c`	+9 -1	0 replies
288/583	media: i2c: alvium: Fix: Correct name of register in alvium_set_ctrl_auto_exposure`drivers/media/i2c/alvium-csi2.c`	+1 -1	0 replies
289/583	media: i2c: imx415: Release runtime PM reference on VBLANK error`drivers/media/i2c/imx415.c`	+1 -1	0 replies
290/583	media: i2c: imx415: Return test pattern write errors`drivers/media/i2c/imx415.c`	+1 -1	0 replies
291/583	media: i2c: ov02a10: fix endpoint parsing use-after-free`drivers/media/i2c/ov02a10.c`	+5 -7	0 replies
292/583	media: i2c: ov7740: fix use-after-destroy in remove`drivers/media/i2c/ov7740.c`	+1 -3	0 replies
293/583	media: imx355: Avoid calling imx355_power_off twice in error path`drivers/media/i2c/imx355.c`	+2 -1	0 replies
294/583	media: intel/ipu6: fix async notifier cleanup leak on parse error`drivers/media/pci/intel/ipu6/ipu6-isys.c`	+1 -0	0 replies
295/583	media: iris: Enumerate cap->bus_info to differentiate between encoder and decoder`drivers/media/platform/qcom/iris/iris_vidc.c`	+9 -2	0 replies
296/583	media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common`drivers/staging/media/meson/vdec/vdec.c`	+2 -2	0 replies
297/583	media: platform: mtk-mdp3: Fix SCP device refcounting`drivers/media/platform/mediatek/mdp3/mtk-mdp3-core.c`	+0 -1	0 replies
298/583	media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup`drivers/media/platform/mediatek/mdp3/mtk-mdp3-core.c`	+5 -0	0 replies
299/583	media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing`drivers/media/platform/nxp/imx8-isi/imx8-isi-crossbar.c`	+1 -1	0 replies
300/583	media: nxp: imx8-isi: Correct color map between V4L2 and ISI`drivers/media/platform/nxp/imx8-isi/imx8-isi-video.c`	+1 -1	0 replies
301/583	media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks`drivers/media/platform/nxp/imx8-isi/imx8-isi-crossbar.c`	+2 -2	0 replies
302/583	media: rc: sunxi-cir: Unregister rc device on probe failure`drivers/media/rc/sunxi-cir.c`	+6 -3	0 replies
303/583	media: rkvdec: Propagate platform_get_irq() errors`drivers/media/platform/rockchip/rkvdec/rkvdec.c`	+2 -2	0 replies
304/583	media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak`drivers/media/dvb-frontends/rtl2832_sdr.c`	+13 -5	0 replies
305/583	media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure`drivers/media/dvb-frontends/rtl2832_sdr.c`	+3 -0	0 replies
306/583	media: rzg2l-cru: Align bytesperline to hardware DMA stride requirement`drivers/media/platform/renesas/rzg2l-cru/rzg2l-video.c`	+5 -0	0 replies
307/583	media: s2255: bound JPEG frame size before copying into the buffer`drivers/media/usb/s2255/s2255drv.c`	+6 -0	0 replies
308/583	media: s2255: check firmware size before reading trailing marker`drivers/media/usb/s2255/s2255drv.c`	+5 -0	0 replies
309/583	media: saa7164: fix cleanup on resource allocation failure`drivers/media/pci/saa7164/saa7164-core.c`	+5 -3	0 replies
310/583	media: tda18250: fix possible integer overflow`drivers/media/tuners/tda18250.c`	+2 -2	0 replies
311/583	media: v4l2-async: avoid deleting unlinked ASC entry on link error`drivers/media/v4l2-core/v4l2-async.c`	+0 -1	0 replies
312/583	media: v4l2-ctrls: Allow unknown HDR10 white point and luminance`Documentation/userspace-api/media/v4l/ext-ctrls-colorimetry.rst` `drivers/media/v4l2-core/v4l2-ctrls-core.c`	+44 ~~-17~~	0 replies
313/583	media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link`drivers/media/v4l2-core/v4l2-fwnode.c`	+2 -0	0 replies
314/583	media: venus: fix payload size returned by parse_caps() and parse_alloc_mode()`drivers/media/platform/qcom/venus/hfi_parser.c`	+2 -2	0 replies
315/583	media: venus: fix payload size calculation in parse_raw_formats()`drivers/media/platform/qcom/venus/hfi_parser.c`	+2 -3	0 replies
316/583	media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure`drivers/media/i2c/video-i2c.c`	+6 -2	0 replies
317/583	media: vimc: fix pixel format lookup in enum_framesizes`drivers/media/test-drivers/vimc/vimc-capture.c`	+2 -2	0 replies
318/583	media: zoran: Avoid freeing a registered video_device twice`drivers/media/pci/zoran/zoran_card.c`	+1 -1	0 replies
319/583	media: qcom: iris: fix state-change debug log printing stale value`drivers/media/platform/qcom/iris/iris_state.c`	+1 -1	0 replies
320/583	media: qcom: iris: use disable_irq() during power-off`drivers/media/platform/qcom/iris/iris_vpu_common.c`	+1 -1	0 replies
321/583	media: chips-media: wave5: Guard bit depth check with initial_info_obtained`drivers/media/platform/chips-media/wave5/wave5-vpu-dec.c`	+2 -1	0 replies
322/583	media: chips-media: wave5: Set inst->std during default format initialization`drivers/media/platform/chips-media/wave5/wave5-vpu-enc.c`	+4 -2	0 replies
323/583	scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers`drivers/scsi/qla2xxx/qla_bsg.c`	+5 -5	0 replies
324/583	scsi: qla2xxx: Bound i2c->length in I2C bsg handlers`drivers/scsi/qla2xxx/qla_bsg.c`	+12 -0	0 replies
325/583	scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check`drivers/scsi/qla2xxx/qla_edif.c`	+3 -0	0 replies
326/583	scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters`drivers/scsi/qla2xxx/qla_gs.c`	+2 -2	0 replies
327/583	scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()`drivers/scsi/qla2xxx/qla_mbx.c`	+3 -0	0 replies
328/583	scsi: qla2xxx: Initialize NVMe abort_work once at submission`drivers/scsi/qla2xxx/qla_nvme.c`	+2 -2	0 replies
329/583	scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config()`drivers/scsi/qla2xxx/qla_mbx.c`	+2 -2	0 replies
330/583	scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()`drivers/scsi/qla2xxx/qla_bsg.c`	+7 -0	0 replies
331/583	scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject`drivers/scsi/qla2xxx/qla_nvme.c`	+10 -0	0 replies
332/583	scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation`drivers/scsi/qla2xxx/qla_inline.h` `drivers/scsi/qla2xxx/qla_isr.c` `drivers/scsi/qla2xxx/qla_os.c`	+18 -5	0 replies
333/583	scsi: qla2xxx: Serialize flash version read in reset handler`drivers/scsi/qla2xxx/qla_attr.c`	+2 -0	0 replies
334/583	scsi: qla2xxx: Fix cs84xx use-after-free on host teardown`drivers/scsi/qla2xxx/qla_os.c`	+4 -4	0 replies
335/583	scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump`drivers/scsi/qla2xxx/qla_init.c`	+18 -2	0 replies
336/583	scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()`drivers/scsi/qla2xxx/qla_mbx.c`	+2 -0	0 replies
337/583	scsi: qla2xxx: Fix FCE trace enable parsing in debugfs`drivers/scsi/qla2xxx/qla_dfs.c`	+3 -1	0 replies
338/583	scsi: qla2xxx: Dont query firmware state while chip is down`drivers/scsi/qla2xxx/qla_attr.c`	+1 -3	0 replies
339/583	scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path`drivers/scsi/qla2xxx/qla_dbg.c` `drivers/scsi/qla2xxx/qla_isr.c`	+9 -1	0 replies
340/583	scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()`drivers/scsi/qla2xxx/qla_isr.c`	+11 -0	0 replies
341/583	scsi: qla2xxx: Quiesce response IRQ before freeing request queue`drivers/scsi/qla2xxx/qla_init.c`	+17 -0	0 replies
342/583	scsi: qla2xxx: Avoid double completion in async IOCB timeout`drivers/scsi/qla2xxx/qla_init.c`	+21 -3	0 replies
343/583	scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read`drivers/scsi/qla2xxx/qla_isr.c`	+12 -0	0 replies
344/583	scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()`drivers/scsi/qla2xxx/qla_isr.c`	+3 -1	0 replies
345/583	scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort`drivers/scsi/qla2xxx/qla_nvme.c`	+4 -2	0 replies
346/583	scsi: qla2xxx: Drop vport reference under lock in report ID acquisition`drivers/scsi/qla2xxx/qla_mbx.c`	+2 -0	0 replies
347/583	scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition`drivers/scsi/qla2xxx/qla_mbx.c`	+2 -0	0 replies
348/583	scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics`drivers/scsi/qla2xxx/qla_mbx.c`	+7 -8	0 replies
349/583	scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak`drivers/scsi/qla2xxx/qla_bsg.c`	+5 -5	0 replies
350/583	scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started`drivers/scsi/qla2xxx/qla_nvme.c`	+13 -6	0 replies
351/583	f2fs: return symlink writeback errors`fs/f2fs/namei.c`	+6 -5	0 replies
352/583	f2fs: reject overlapping move range after len expansion`fs/f2fs/file.c`	+2 -2	0 replies
353/583	f2fs: only redirty pinned folios in redirty_blocks`fs/f2fs/file.c`	+2 -2	0 replies
354/583	f2fs: fix to avoid move_range and defragment on device_alias file`fs/f2fs/file.c`	+5 -1	0 replies
355/583	f2fs: dirty directory inodes on mtime/ctime update`fs/f2fs/dir.c` `fs/f2fs/inline.c` `fs/f2fs/namei.c`	+7 -7	0 replies
356/583	f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()`fs/f2fs/xattr.c`	+1 -1	0 replies
357/583	f2fs: return writeback error from collapse range`fs/f2fs/file.c`	+4 -1	0 replies
358/583	f2fs: fix to avoid potential section-unaligned pinfile`fs/f2fs/file.c`	+17 ~~-11~~	0 replies
359/583	f2fs: fix dentry folio leak in find_in_level`fs/f2fs/dir.c`	+1 -0	0 replies
360/583	f2fs: avoid NULL checkpoint thread access in sysfs`fs/f2fs/sysfs.c`	+4 -3	0 replies
361/583	f2fs: fix to migrate all curseg types during free_segment_range`fs/f2fs/gc.c`	+1 -1	0 replies
362/583	f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()`fs/f2fs/node.c`	+5 -0	0 replies
363/583	f2fs: fix i_size when pinned fallocate partially fails`fs/f2fs/file.c`	+3 -2	0 replies
364/583	f2fs: fix to off-by-one issue in f2fs_zero_post_eof_page()`fs/f2fs/file.c`	+1 -1	0 replies
365/583	f2fs: fix to clear dirty flag on folio in error path`fs/f2fs/node.c`	+1 -1	0 replies
366/583	f2fs: fix valid block count leak on data block allocation failure`fs/f2fs/data.c`	+4 -1	0 replies
367/583	f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()`fs/f2fs/node.c`	+1 -1	0 replies
368/583	f2fs: fix to zero post-EOF data when extending file size`fs/f2fs/file.c`	+84 ~~-16~~	0 replies
369/583	drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()`drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c`	+4 -3	0 replies
370/583	drm/xe/vram: report FLAT_CCS base misalignment`drivers/gpu/drm/xe/xe_vram.c`	+3 -0	0 replies
371/583	drm/panthor: harden firmware build-info bounds checks`drivers/gpu/drm/panthor/panthor_fw.c`	+2 -1	0 replies
372/583	drm/panthor: fix firmware control interface bounds checks`drivers/gpu/drm/panthor/panthor_fw.c`	+13 -6	0 replies
373/583	drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure`drivers/gpu/drm/bridge/synopsys/dw-hdmi.c`	+2 -1	0 replies
374/583	drm/panel-edp: fix i2c adapter leak on probe failure`drivers/gpu/drm/panel/panel-edp.c`	+13 -6	0 replies
375/583	drm: fix race between partial drm_dev_register() failure and ioctl`drivers/gpu/drm/drm_drv.c`	+25 -9	0 replies
376/583	drm/i915: Guard against NULL driver_data in i915_pci_probe()`drivers/gpu/drm/i915/i915_pci.c`	+3 -0	0 replies
377/583	drm/ssd130x: fix column and row end address in partial updates for ssd132x`drivers/gpu/drm/solomon/ssd130x.c`	+3 -2	0 replies
378/583	drm/sun4i: fix refcount leak in sun4i_backend_init_sat()`drivers/gpu/drm/sun4i/sun4i_backend.c`	+1 -1	0 replies
379/583	drm/ssd130x: fix column and row end address in partial updates in ssd133x`drivers/gpu/drm/solomon/ssd130x.c`	+2 -2	0 replies
380/583	drm/nouveau/disp/r535: Add scanline position support + head state support`drivers/gpu/drm/nouveau/nvkm/engine/disp/gv100.c` `drivers/gpu/drm/nouveau/nvkm/engine/disp/head.h` `drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/disp.c`	+6 -8	0 replies
381/583	drm/hibmc: Fix list of formats on the primary plane`drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c`	+2 -4	0 replies
382/583	drm/hibmc: Use drm_atomic_helper_check_plane_state()`drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c`	+16 ~~-34~~	0 replies
383/583	drm/amd/display: avoid divide-by-zero in __is_lut_linear()`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_color.c`	+6 -0	0 replies
384/583	drm/amd/display: fix dc_lock leak on GPU reset error paths`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c`	+6 -0	0 replies
385/583	drm/amd/display: validate plane degamma LUT size for private color prop`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_color.c`	+7 -0	0 replies
386/583	drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check`drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c` `drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c`	+14 -6	0 replies
387/583	drm/gud: NUL-terminate TV mode names read from the device`drivers/gpu/drm/gud/gud_connector.c`	+7 -2	0 replies
388/583	drm/gud: validate TV mode names before creating enum property`drivers/gpu/drm/gud/gud_connector.c`	+5 -2	0 replies
389/583	drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value`drivers/gpu/drm/msm/dsi/dsi_host.c`	+12 -0	0 replies
390/583	drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used`drivers/gpu/drm/drm_atomic_uapi.c`	+2 -0	0 replies
391/583	drm/amdgpu: check thunderbolt before switcheroo registration`drivers/gpu/drm/amd/amdgpu/amdgpu_device.c`	+10 -4	0 replies
392/583	drm/amdgpu: clamp the isolation index for rings outside a partition`drivers/gpu/drm/amd/amdgpu/amdgpu_device.c` `drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c`	+7 -2	0 replies
393/583	drm/amdgpu: Disable runtime PM for externally attached dGPUs`drivers/gpu/drm/amd/amdgpu/amdgpu_device.c`	+7 -0	0 replies
394/583	drm/amdgpu: fix autosuspend cleanup during removal`drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c`	+1 -0	0 replies
395/583	drm/amdgpu: Skip accessing psp rum time db for APUs`drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c`	+6 -0	0 replies
396/583	drm/amdgpu: update the fw version for gfx11 userqueues`drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c`	+4 -4	0 replies
397/583	drm/amdgpu: update the fw version for gfx12 userqueues`drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c`	+4 -4	0 replies
398/583	drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT`drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c`	+1 -1	0 replies
399/583	drm/amdkfd: Add TLB flush after MES queue eviction/suspension`drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c`	+12 -1	0 replies
400/583	drm/amdkfd: Fix error path at svm_migrate_copy_to_ram`drivers/gpu/drm/amd/amdkfd/kfd_migrate.c`	+30 ~~-15~~	0 replies
401/583	drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram`drivers/gpu/drm/amd/amdkfd/kfd_migrate.c`	+7 -4	0 replies
402/583	drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore`drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c`	+10 -0	0 replies
403/583	drm/amdkfd: Reject zero-sized AQL queue allocations after size halving`drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c` `drivers/gpu/drm/amd/amdkfd/kfd_chardev.c`	+9 -1	0 replies
404/583	drm/sysfb: simpledrm: Improve framebuffer-size validation`drivers/gpu/drm/sysfb/simpledrm.c`	+4 ~~-11~~	0 replies
405/583	drm/sysfb: simpledrm: Improve panel-size validation`drivers/gpu/drm/sysfb/simpledrm.c`	+46 -3	0 replies
406/583	drm/sysfb: simpledrm: Improve stride validation`drivers/gpu/drm/sysfb/simpledrm.c`	+8 -2	0 replies
407/583	drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation`drivers/gpu/drm/sysfb/ofdrm.c`	+5 -1	0 replies
408/583	drm/sysfb: ofdrm: Fix is_avivo() constant comparison bug`drivers/gpu/drm/sysfb/ofdrm.c`	+1 -1	0 replies
409/583	drm/nouveau/gsp: use per-version DP_CONFIG_STREAM params on r570 firmware`drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/disp.c` `drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/disp.c` `drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/nvrm/disp.h` +1 more	+97 -7	0 replies
410/583	drm/nouveau: unsubscribe the channel-kill event before the fence context`drivers/gpu/drm/nouveau/nouveau_chan.c`	+8 -1	0 replies
411/583	drm/nouveau: Use write-combined maps for coherent`drivers/gpu/drm/nouveau/nouveau_sgdma.c`	+1 -3	0 replies
412/583	drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op`drivers/gpu/drm/nouveau/nouveau_uvmm.c`	+2 -1	0 replies
413/583	drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE`drivers/gpu/drm/nouveau/nouveau_uvmm.c`	+2 -0	0 replies
414/583	drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE`drivers/gpu/drm/nouveau/nouveau_uvmm.c`	+1 -0	0 replies
415/583	drm/nouveau/disp: move GSP head-timing ISR and vblank helpers to tu102.c`drivers/gpu/drm/nouveau/nvkm/engine/disp/head.h` `drivers/gpu/drm/nouveau/nvkm/engine/disp/priv.h` `drivers/gpu/drm/nouveau/nvkm/engine/disp/tu102.c` +1 more	+57 ~~-49~~	0 replies
416/583	drm/nouveau/disp: move the GSP HDMI GCP AVMute write to engine/disp`drivers/gpu/drm/nouveau/nvkm/engine/disp/ior.h` `drivers/gpu/drm/nouveau/nvkm/engine/disp/tu102.c` `drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/disp.c`	+17 -8	0 replies
417/583	drm/nouveau/disp: route GSP-RM display MMIO through nvkm_disp_func hooks`drivers/gpu/drm/nouveau/nvkm/engine/disp/ga102.c` `drivers/gpu/drm/nouveau/nvkm/engine/disp/head.h` `drivers/gpu/drm/nouveau/nvkm/engine/disp/priv.h` +2 more	+65 ~~-15~~	0 replies
418/583	drm/nouveau/disp: fix HDMI vendor infoframes on GB20x`drivers/gpu/drm/nouveau/include/nvkm/engine/disp.h` `drivers/gpu/drm/nouveau/nvkm/engine/device/base.c` `drivers/gpu/drm/nouveau/nvkm/engine/disp/Kbuild` +1 more	+95 -5	0 replies
419/583	drm/nouveau/disp: fix HDMI GCP AVMute register offsets on GB20x`drivers/gpu/drm/nouveau/nvkm/engine/disp/gb202.c`	+19 -1	0 replies
420/583	drm/nouveau/disp: fix head state readback on GB20x`drivers/gpu/drm/nouveau/nvkm/engine/disp/gb202.c`	+50 -1	0 replies
421/583	drm/nouveau/gsp: fix vblank interrupts on GB20x`drivers/gpu/drm/nouveau/nvkm/engine/disp/gb202.c` `drivers/gpu/drm/nouveau/nvkm/engine/disp/head.h` `drivers/gpu/drm/nouveau/nvkm/engine/disp/priv.h` +3 more	+61 -8	0 replies
422/583	ksmbd: fix use-after-free in oplock break notification`fs/smb/server/oplock.c`	+49 ~~-12~~	0 replies
423/583	afs: Fix leak of ungot volume`fs/afs/callback.c`	+1 -0	0 replies
424/583	usb: xhci: add tracing for PORTSC register writes`drivers/usb/host/xhci-debugfs.c` `drivers/usb/host/xhci-hub.c` `drivers/usb/host/xhci-pci.c` +3 more	+32 ~~-20~~	0 replies
425/583	usb: xhci: add helper to read PORTSC register`drivers/usb/host/xhci-debugfs.c` `drivers/usb/host/xhci-hub.c` `drivers/usb/host/xhci-pci.c` +4 more	+55 ~~-48~~	0 replies
426/583	usb: xhci: add USB Port Register Set struct`drivers/usb/host/xhci-mem.c` `drivers/usb/host/xhci.h`	+17 ~~-22~~	0 replies
427/583	usb: xhci: implement USB Port Register Set struct`drivers/usb/host/xhci-hub.c` `drivers/usb/host/xhci-mem.c` `drivers/usb/host/xhci.c` +1 more	+24 ~~-30~~	0 replies
428/583	usb: xhci: use cached HCSPARAMS1 value`drivers/usb/host/xhci.c`	+1 -2	0 replies
429/583	usb: xhci: simplify handling of Structural Parameters 1 values`drivers/usb/host/xhci-debugfs.c` `drivers/usb/host/xhci-hub.c` `drivers/usb/host/xhci-mem.c` +4 more	+33 ~~-47~~	0 replies
430/583	usb: xhci: bail out of setup if the controller is inaccessible`drivers/usb/host/xhci.c`	+8 -3	0 replies
431/583	fuse: publish io-uring queues with release semantics`fs/fuse/dev_uring.c`	+11 -9	0 replies
432/583	fuse: split off fuse_args and related definitions into a separate header`fs/fuse/args.h` `fs/fuse/fuse_i.h`	+66 ~~-52~~	0 replies
433/583	fuse: remove fm arg of args->end callback`fs/fuse/args.h` `fs/fuse/cuse.c` `fs/fuse/dev.c` +2 more	+23 ~~-25~~	0 replies
434/583	fuse: fix race between interrupt and resend`fs/fuse/dev.c`	+14 ~~-13~~	0 replies
435/583	net/packet: defer vmalloc TX_RING free until skbs finish`net/packet/af_packet.c`	+87 -9	0 replies
436/583	vlan: fix skb_under_panic and races when toggling HW VLAN offload`net/8021q/vlan.c` `net/8021q/vlan_dev.c`	+7 ~~-32~~	0 replies
437/583	crypto: iaa - fall back to software for multi-entry scatterlists`drivers/crypto/intel/iaa/iaa_crypto_main.c` `drivers/crypto/intel/iaa/iaa_crypto_stats.c` `drivers/crypto/intel/iaa/iaa_crypto_stats.h`	+71 ~~-51~~	0 replies
438/583	crypto: iaa - unmap dst before software fallback on decompress`drivers/crypto/intel/iaa/iaa_crypto_main.c`	+12 ~~-15~~	0 replies
439/583	crypto: atmel-ecc - replace min_t with min`drivers/crypto/atmel-ecc.c`	+2 -2	0 replies
440/583	crypto: atmel-ecc - clean up and improve ECDH comments`drivers/crypto/atmel-ecc.c`	+14 ~~-24~~	0 replies
441/583	crypto: atmel-ecc - avoid stale fallback key after set_secret failure`drivers/crypto/atmel-ecc.c`	+4 -4	0 replies
442/583	ovl: fix double end_creating() on the casefold-mismatch path`fs/overlayfs/dir.c`	+0 -1	0 replies
443/583	pidfs: simplify PIDFD_GET_<type>_NAMESPACE ioctls`fs/pidfs.c`	+36 ~~-39~~	0 replies
444/583	pidfd: hold exec_update_lock around namespace ioctl`fs/pidfs.c`	+31 ~~-12~~	0 replies
445/583	rust: devres: fix race condition due to nesting`rust/kernel/devres.rs`	+55 ~~-102~~	2 replies
446/583	rust: devres: fix race between concurrent revokers`rust/kernel/devres.rs`	+16 -2	0 replies
447/583	rust: bug: prevent dead_code warning from warn_on!s flags constant`rust/kernel/bug.rs`	+9 -1	0 replies
448/583	mm/hugetlb: defer vmemmap population for bootmem hugepages`include/linux/mm.h` `mm/hugetlb_vmemmap.c` `mm/sparse-vmemmap.c`	+18 ~~-74~~	0 replies
449/583	mm/hugetlb: refactor code around vmemmap_walk`mm/hugetlb_vmemmap.c`	+89 ~~-135~~	0 replies
450/583	mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier`include/linux/hugetlb.h` `mm/hugetlb.c` `mm/mm_init.c`	+8 -3	0 replies
451/583	mm/mglru: use the common routine for dirty/writeback reactivation`mm/vmscan.c`	+0 ~~-19~~	0 replies
452/583	mm/mglru: fix and remove redundant unevictable folio handling`mm/vmscan.c`	+5 ~~-14~~	0 replies
453/583	mm/rmap: use huge_ptep_get() in try_to_migrate_one()`mm/rmap.c`	+9 -6	0 replies
454/583	mm/slab: move and refactor __kmem_cache_alias()`mm/slab.h` `mm/slab_common.c` `mm/slub.c`	+41 ~~-41~~	0 replies
455/583	mm/slub: fix missing debugfs entries for caches created before sysfs init`mm/slub.c`	+48 ~~-28~~	0 replies
456/583	xen/balloon: improve accuracy of initial balloon target for dom0`drivers/xen/balloon.c`	+17 ~~-10~~	0 replies
457/583	x86/xen: fix init of balloon stats again`drivers/xen/balloon.c`	+19 ~~-10~~	0 replies
458/583	mm/page_alloc: dont spin_trylock() in NMI on UP`mm/page_alloc.c`	+4 -2	0 replies
459/583	USB: gadget: ffs: fix mm lifetime handling`drivers/usb/gadget/function/f_fs.c`	+20 -7	0 replies
460/583	usb: gadget: f_fs: Fix Use-After-Free in AIO error path`drivers/usb/gadget/function/f_fs.c`	+4 -0	0 replies
461/583	cxl/pci: Move CXL drivers RCH error handling into core/ras_rch.c`drivers/cxl/core/Makefile` `drivers/cxl/core/core.h` `drivers/cxl/core/pci.c` +2 more	+126 ~~-123~~	0 replies
462/583	cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read`drivers/cxl/core/ras_rch.c`	+16 -1	0 replies
463/583	ceph: cap delegated inode count in ceph_parse_deleg_inos()`fs/ceph/mds_client.c` `fs/ceph/mds_client.h` `fs/ceph/super.h`	+63 -6	0 replies
464/583	ceph: force a cap message when a deferred revoke cant be acked immediately`fs/ceph/caps.c` `fs/ceph/super.h`	+60 -7	0 replies
465/583	NFSD: Guard admin state-revocation walks with NFSD_NET_UP`fs/nfsd/nfsctl.c`	+1 -1	0 replies
466/583	ceph: properly decrypt filenames in vmalloc() buffers`fs/ceph/crypto.c` `fs/ceph/mds_client.c`	+43 ~~-11~~	0 replies
467/583	smb: move some definitions from common/smb2pdu.h into common/fscc.h`fs/smb/client/cifsfs.h` `fs/smb/client/smb2ops.c`	+80 ~~-14~~	0 replies
468/583	smb/client: reduce fallocate zero buffer allocation`fs/smb/client/smb2ops.c`	+4 -3	0 replies
469/583	smb/client: emulate small EOF-extending mode 0 fallocate ranges`fs/smb/client/smb2ops.c`	+1 -1	0 replies
470/583	cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem`fs/smb/client/cifsfs.h` `fs/smb/client/inode.c` `fs/smb/client/smb2ops.c`	+23 ~~-11~~	0 replies
471/583	HID: sony: use guard() and scoped_guard()`drivers/hid/hid-sony.c`	+22 ~~-31~~	0 replies
472/583	HID: sony: clean up device list on probe failure`drivers/hid/hid-sony.c`	+17 ~~-16~~	0 replies
473/583	HID: mcp2221: fix OOB write in mcp2221_raw_event()`drivers/hid/hid-mcp2221.c`	+7 -0	0 replies
474/583	HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes`drivers/hid/hid-mcp2221.c`	+6 -2	0 replies
475/583	erofs: skip sufficiently large global buffers when resizing`fs/erofs/zutil.c`	+2 -0	0 replies
476/583	ACPI: CPPC: Reject desired_perf reads on _CPC revision 4+`drivers/acpi/cppc_acpi.c` `drivers/cpufreq/cppc_cpufreq.c`	+12 -3	0 replies
477/583	ACPI: x86: cmos_rtc: Create a CMOS RTC platform device`arch/x86/kernel/rtc.c` `drivers/acpi/x86/cmos_rtc.c` `include/linux/acpi.h`	+16 -0	0 replies
478/583	ACPI: x86/rtc-cmos: Use platform device for driver binding`drivers/acpi/acpi_pnp.c` `drivers/acpi/x86/cmos_rtc.c` `drivers/rtc/rtc-cmos.c` +1 more	+18 -5	0 replies
479/583	ACPI: TAD: Rearrange RT data validation checking`drivers/acpi/acpi_tad.c` `include/linux/acpi.h`	+101 ~~-45~~	0 replies
480/583	ACPI: TAD: Add locking around AML evaluations`drivers/acpi/acpi_tad.c`	+29 ~~-19~~	0 replies
481/583	cpufreq: apple-soc: Fix OPP table cleanup`drivers/cpufreq/apple-soc-cpufreq.c`	+14 ~~-22~~	0 replies
482/583	bpf: Factor stackid_init function from __bpf_get_stackid`kernel/bpf/stackmap.c`	+59 ~~-36~~	0 replies
483/583	bpf: Factor stackid_fastpath function from __bpf_get_stackid`kernel/bpf/stackmap.c`	+28 ~~-15~~	0 replies
484/583	bpf: Factor stackid_new_bucket from __bpf_get_stackid`kernel/bpf/stackmap.c`	+30 ~~-18~~	0 replies
485/583	bpf: Use stack id functions instead of __bpf_get_stackid`kernel/bpf/stackmap.c`	+27 ~~-16~~	0 replies
486/583	bpf: Disable preemption in bpf_get_stackid`kernel/bpf/stackmap.c`	+13 ~~-11~~	0 replies
487/583	cxl/ras: Fix cxl_rch_get_aer_severity() wrong severity register`drivers/cxl/core/ras_rch.c`	+5 -5	0 replies
488/583	dax/cxl, hmem: Initialize hmem early and defer dax_cxl binding`drivers/dax/Makefile` `drivers/dax/cxl.c`	+27 -3	0 replies
489/583	cxl/region: Add helper to check Soft Reserved containment by CXL regions`drivers/cxl/core/region.c` `drivers/cxl/cxl.h`	+63 ~~-25~~	0 replies
490/583	cxl/mce: Make the MCE notifier per-region`drivers/cxl/core/mbox.c` `drivers/cxl/core/mce.c` `drivers/cxl/core/region.c` +2 more	+30 ~~-58~~	0 replies
491/583	SUNRPC: fix gssx_dec_option_array error path bugs`net/sunrpc/auth_gss/gss_rpc_xdr.c`	+6 -3	0 replies
492/583	svcrdma: Release transport resources synchronously`net/sunrpc/xprtrdma/svc_rdma_transport.c`	+8 ~~-11~~	0 replies
493/583	svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id`net/sunrpc/xprtrdma/svc_rdma_transport.c`	+10 -3	0 replies
494/583	rpcrdma: arm rn_done before publishing the notification`net/sunrpc/xprtrdma/ib_client.c`	+18 -6	0 replies
495/583	svcrdma: Reject oversized Read segments at decode time`net/sunrpc/xprtrdma/svc_rdma_recvfrom.c` `net/sunrpc/xprtrdma/svc_rdma_rw.c`	+5 -2	0 replies
496/583	svcrdma: Reject Read lists that exceed the page budget`net/sunrpc/xprtrdma/svc_rdma_recvfrom.c`	+9 -3	0 replies
497/583	sched_ext: Fix exit_task leak on fork failure during enable`kernel/sched/ext.c`	+1 -1	0 replies
498/583	RDMA/ionic: Embed counter driver data in rdma_counter allocation`drivers/infiniband/hw/ionic/ionic_hw_stats.c` `drivers/infiniband/hw/ionic/ionic_ibdev.h`	+54 ~~-58~~	0 replies
499/583	scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock`drivers/scsi/fnic/fip.c`	+1 -1	0 replies
500/583	sched_ext: Fix inverted ops.core_sched_before() invocation`kernel/sched/ext.c` `tools/sched_ext/scx_qmap.bpf.c`	+9 -3	0 replies
501/583	sched: Add assert_balance_callbacks_empty helper`kernel/sched/core.c` `kernel/sched/sched.h`	+9 -1	0 replies
502/583	sched: Rework prev_balance() to avoid stale prev references`kernel/sched/core.c` `kernel/sched/deadline.c` `kernel/sched/ext.c` +5 more	+40 ~~-28~~	0 replies
503/583	sched/core: Make core-sched flips wait for in-flight selections`kernel/sched/core.c` `kernel/sched/sched.h`	+23 -0	0 replies
504/583	firmware: qcom_scm: Rename peripheral as pas_id`drivers/firmware/qcom/qcom_scm.c` `include/linux/firmware/qcom/qcom_scm.h`	+20 ~~-20~~	0 replies
505/583	remoteproc: qcom: pas: Guard dtb metadata release with dtb_pas_id check`drivers/remoteproc/qcom_q6v5_pas.c`	+4 -5	0 replies
506/583	ASoC: codecs: aw88261: reduce log spam`sound/soc/codecs/aw88261.c`	+14 ~~-10~~	0 replies
507/583	ASoC: codecs: aw88261: only check PLL and clock state at power-up`sound/soc/codecs/aw88261.c` `sound/soc/codecs/aw88261.h`	+3 -9	0 replies
508/583	ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page`kernel/trace/ring_buffer.c`	+10 ~~-10~~	0 replies
509/583	ocfs2: validate dx_root extent list fields during block read`fs/ocfs2/dir.c`	+25 -1	0 replies
510/583	ocfs2: validate directory-index entry counts when reading metadata`fs/ocfs2/dir.c`	+41 -4	0 replies
511/583	lockd: fix swapped arguments in nlmsvc_match_ip()`fs/lockd/svcsubs.c` `include/linux/lockd/lockd.h`	+2 -2	0 replies
512/583	PCI: starfive: Use regulator APIs to control the 3v3 power supply of PCIe slots`drivers/pci/controller/plda/pcie-starfive.c`	+15 ~~-10~~	0 replies
513/583	PCI: starfive: Fix resource leaks on error paths in host_init()`drivers/pci/controller/plda/pcie-starfive.c`	+11 -2	0 replies
514/583	fuse: fix missing barrier when checking io-uring readiness`fs/fuse/dev.c`	+7 -3	0 replies
515/583	fuse-uring: refactor io-uring header copying to ring`fs/fuse/dev_uring.c`	+21 ~~-18~~	0 replies
516/583	fuse-uring: refactor io-uring header copying from ring`fs/fuse/dev_uring.c`	+17 -5	0 replies
517/583	fuse-uring: use enum types for header copying`fs/fuse/dev_uring.c`	+53 ~~-13~~	0 replies
518/583	fuse-uring: refactor setting up copy state for payload copying`fs/fuse/dev_uring.c`	+24 ~~-14~~	0 replies
519/583	fuse-uring: use named constants for io-uring iovec indices`fs/fuse/dev_uring.c`	+13 ~~-11~~	0 replies
520/583	fuse: copy request headers via a stack buffer for io-uring`fs/fuse/dev_uring.c`	+8 -4	0 replies
521/583	ipv6: pass proto by value to ipv6_push_nfrag_opts() and ipv6_push_frag_opts()`include/net/ipv6.h` `net/ipv6/exthdrs.c` `net/ipv6/ip6_output.c` +1 more	+46 ~~-40~~	0 replies
522/583	ipv6: add some unlikely()/likely() clauses in ip6_output.c`net/ipv6/ip6_output.c`	+12 ~~-12~~	0 replies
523/583	inet: add dst4_mtu() and dst6_mtu() helpers`include/net/dst.h` `include/net/ip6_route.h`	+12 -0	0 replies
524/583	ipv6: use dst6_mtu() instead of dst_mtu()`net/ipv6/ip6_gre.c` `net/ipv6/ip6_output.c` `net/ipv6/ip6_tunnel.c` +3 more	+19 ~~-16~~	0 replies
525/583	ipv4: use dst4_mtu() instead of dst_mtu()`net/ipv4/icmp.c` `net/ipv4/ip_output.c` `net/ipv4/ip_sockglue.c` +4 more	+13 ~~-14~~	0 replies
526/583	tcp: clamp route advmss to TCP_MIN_MSS`include/net/tcp.h` `net/ipv4/tcp_ipv4.c` `net/ipv4/tcp_minisocks.c` +2 more	+11 -6	0 replies
527/583	net: advertise TCP MSS from the configured MTU, not the learned PMTU`include/net/ip.h` `include/net/ip6_route.h` `net/ipv4/route.c` +1 more	+65 -3	0 replies
528/583	nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()`fs/nfsd/nfs4proc.c`	+17 -0	0 replies
529/583	nfsd: move struct nfsd_genl_rqstp to nfsctl.c`fs/nfsd/nfsctl.c` `fs/nfsd/nfsd.h`	+15 ~~-15~~	0 replies
530/583	nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage`fs/nfsd/nfsctl.c`	+6 -6	0 replies
531/583	nfsd: fix clock domain mismatch in clients_still_reclaiming()`fs/nfsd/netns.h` `fs/nfsd/nfs4state.c`	+3 -1	0 replies
532/583	nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net`fs/nfsd/filecache.c` `fs/nfsd/netns.h`	+24 ~~-56~~	0 replies
533/583	nfsd: fix UAF in async copy cancel and shutdown`fs/nfsd/nfs4proc.c`	+97 ~~-25~~	0 replies
534/583	nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache`fs/nfsd/filecache.c`	+29 -9	0 replies
535/583	nfsd: convert global state_lock to per-net deleg_lock`fs/nfsd/netns.h` `fs/nfsd/nfs4state.c` `fs/nfsd/state.h`	+31 ~~-27~~	0 replies
536/583	NFSD: Prevent client use-after-free during delegation revoke`fs/nfsd/netns.h` `fs/nfsd/nfs4state.c`	+27 -2	0 replies
537/583	NFSD: Prevent client use-after-free during admin state revocation`fs/nfsd/nfs4state.c`	+20 -2	0 replies
538/583	cifs: Scripted clean up fs/smb/client/cifs_unicode.h`fs/smb/client/inode.c`	+2 -1	0 replies
539/583	cifs: Scripted clean up fs/smb/client/fscache.h`fs/smb/client/fscache.h`	+5 -5	0 replies
540/583	cifs: Scripted clean up fs/smb/client/fs_context.h`fs/smb/client/fs_context.h`	+9 -7	0 replies
541/583	cifs: Scripted clean up fs/smb/client/smb2proto.h`fs/smb/client/inode.c`	+3 -3	0 replies
542/583	smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions`fs/smb/client/inode.c`	+24 -5	0 replies
543/583	cifs: Remove dead function prototypes`fs/smb/client/cifsproto.h` `fs/smb/client/smb2proto.h`	+0 ~~-18~~	0 replies
544/583	cifs: SMB1 split: Create smb1proto.h for SMB1 declarations`fs/smb/client/cifsglob.h` `fs/smb/client/cifsproto.h` `fs/smb/client/smb1proto.h`	+39 ~~-12~~	0 replies
545/583	cifs: SMB1 split: Separate out SMB1 decls into smb1proto.h`fs/smb/client/smb1ops.c` `fs/smb/client/smb1proto.h` `fs/smb/client/smb1transport.c`	+173 ~~-171~~	0 replies
546/583	smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2`fs/smb/client/smb1transport.c`	+11 -3	0 replies
547/583	smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()`fs/smb/client/smb1transport.c`	+20 -1	0 replies
548/583	cifs: Do some preparation prior to organising the function declarations`fs/smb/client/cifs_debug.c` `fs/smb/client/cifs_spnego.h` `fs/smb/client/cifs_unicode.h` +19 more	+342 ~~-193~~	0 replies
549/583	smb: client: reject a tree connect response whose byte count is too small`fs/smb/client/cifssmb.c` `fs/smb/client/trace.h`	+8 -1	0 replies
550/583	NFSD: Consolidate the revocation-path client unpin`fs/nfsd/nfs4state.c`	+40 ~~-25~~	0 replies
551/583	NFSD: Prevent client use-after-free during blocked-lock reaping`fs/nfsd/nfs4state.c`	+20 -3	0 replies
552/583	NFSD: Prevent client use-after-free during close_lru reaping`fs/nfsd/nfs4state.c`	+5 -0	0 replies
553/583	zram: fixup read_block_state()`drivers/block/zram/zram_drv.c`	+1 -1	0 replies
554/583	zram: fix out-of-bounds access in read_block_state()`drivers/block/zram/zram_drv.c`	+3 -1	0 replies
555/583	zram: take write lock in wb limit store handlers`drivers/block/zram/zram_drv.c`	+10 -7	0 replies
556/583	zram: drop wb_limit_lock`drivers/block/zram/zram_drv.c` `drivers/block/zram/zram_drv.h`	+4 ~~-20~~	0 replies
557/583	zram: read slot block idx under slot lock`drivers/block/zram/zram_drv.c`	+3 -3	0 replies
558/583	zram: fix the issue that the write - back limits might overflow`drivers/block/zram/zram_drv.c`	+10 -0	0 replies
559/583	zram: set default primary compressor in zram_destroy_comps()`drivers/block/zram/zram_drv.c`	+1 -2	0 replies
560/583	mm: rework compound_head() for power-of-2 sizeof(struct page)`mm/hugetlb_vmemmap.c`	+2 -1	0 replies
561/583	hugetlb: remove VMEMMAP_SYNCHRONIZE_RCU`mm/hugetlb_vmemmap.c`	+4 ~~-16~~	0 replies
562/583	mm/hugetlb_vmemmap: fix __hugetlb_vmemmap_optimize_folios()`mm/hugetlb_vmemmap.c`	+3 -3	0 replies
563/583	Docs/ABI/damon: fix typo in intervals_goal sysfs path`Documentation/ABI/testing/sysfs-kernel-mm-damon`	+4 -4	0 replies
564/583	power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe()`drivers/power/supply/ab8500_fg.c`	+0 -2	0 replies
565/583	power: supply: ab8500_fg: fix use-after-free on remove`drivers/power/supply/ab8500_fg.c`	+21 -9	0 replies
566/583	iommu/arm-smmu-v3: Add HAFT support for SVA`drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c` `drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c` `drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h`	+25 -1	0 replies
567/583	mm/damon/tests/core-kunit: catch test failure in test_merge_regions_of()`mm/damon/tests/core-kunit.h`	+3 -0	0 replies
568/583	mm/damon/vaddr: drop last same folio access check optimization`mm/damon/vaddr.c`	+6 ~~-28~~	0 replies
569/583	mm/damon/paddr: drop last same folio access check reuse optimization`mm/damon/paddr.c`	+4 ~~-16~~	0 replies
570/583	mm/damon/ops-common: use nr_accesses moving sum for quota score`mm/damon/ops-common.c`	+3 -2	0 replies
571/583	mm/damon/core: skip aging from repeated aggressive merging`mm/damon/core.c` `mm/damon/tests/core-kunit.h`	+14 -9	0 replies
572/583	mm/damon/sysfs: read addr_unit only once in damon_sysfs_apply_inputs()`mm/damon/sysfs.c`	+2 -2	0 replies
573/583	mm/damon/core-kunit: handle region split failure in filter_out()`mm/damon/tests/core-kunit.h`	+5 -0	0 replies
574/583	mm/damon/core: initialize damos->last_applied`mm/damon/core.c`	+1 -0	0 replies
575/583	mm: thp: introduce folio_split_queue_lock and its variants`include/linux/memcontrol.h` `mm/huge_memory.c`	+94 ~~-35~~	0 replies
576/583	mm: thp: use folio_batch to handle THP splitting in deferred_split_scan()`mm/huge_memory.c`	+68 ~~-66~~	0 replies
577/583	mm/huge_memory: change folio_split_supported() to folio_check_splittable()`include/linux/huge_mm.h` `mm/huge_memory.c`	+43 ~~-35~~	0 replies
578/583	mm/huge_memory: replace can_split_folio() with direct refcount calculation`include/linux/huge_mm.h` `mm/huge_memory.c` `mm/vmscan.c`	+14 ~~-25~~	0 replies
579/583	migrate: replace RMP_ flags with TTU_ flags`include/linux/rmap.h` `mm/huge_memory.c` `mm/migrate.c`	+12 ~~-15~~	0 replies
580/583	mm/huge_memory: use folios memcg inside __folio_split()`mm/huge_memory.c`	+16 -4	0 replies
581/583	pidfs: protect PIDFD_GET_* ioctls() via ifdef`fs/pidfs.c`	+18 -0	0 replies
582/583	mm/hugetlb_vmemmap: fix incorrect vmemmap restore in rollback`mm/hugetlb_vmemmap.c`	+18 ~~-18~~	0 replies
583/583	cifs: add fscache_resize_cookie() to cifs_setsize()`fs/smb/client/inode.c`	+1 -0	0 replies

Reviews trailers per patch

326 of 583 patches have a Reviewed-by or Acked-by.

Patch	Ilya Maximets	Willem de Bruijn	Eduard Zingerman	Alex Hung	Konrad Dybcio	Alan Stern	Thinh Nguyen	Ren Wei	Heikki Krogerus	Bryan O'Donoghue	Badhri Jagan Sridharan	Rafay	Benson Leung	Takashi Iwai	David Hildenbrand (Arm)	Muchun Song	Alice Ryhl	Lijo Lazar	Andy Shevchenko	Jack Wang	Zenghui Yu	Frank Li	Sebastian Andrzej Siewior	Jason Gerecke	Michael Kelley	Mostafa Saleh	Jason Gunthorpe	Steven Rostedt	Suren Baghdasaryan	Mike Rapoport (Microsoft)	Ming Lei	Kursad Oney	Bart Van Assche	Hannes Reinecke	Christoph Hellwig	Johannes Weiner	Michal Hocko	Wolfram Sang	James Clark	Mika Westerberg	Mukesh Savaliya	[email protected]	Peter Rosin	Marc Zyngier	Shameer Kolothum	Alex Markuze	Rihyeon Kim	Sagi Grimberg	John Garry	Abel Vesa	Yipeng Zou	Damien Le Moal	Pali Rohar	Radu Rendec	Antonio Borneo	Andrew Morton	Gregory Price (Meta)	Ritesh Harjani (IBM)	Christian Borntraeger	Matthew Rosato	Alison Schofield	Linus Walleij	Brian Masney	AngeloGioacchino Del Regno	Christian Hewitt	Quentin Schulz	Chris Morgan	Taniya Das	Nuno Sá	Sourabh Jain	Oscar Salvador	David Lechner	Matteo Martelli	Joshua Crofts	Maxwell Doose	Srinivas Pandruvada	Kai Huang	Michael Roth	James Houghton	Vitaly Kuznetsov	Claudio Imbrenda	Heiko Carstens	Yuan Yao	Wei-Lin Chang	Bibo Mao	Tao Cui	Vaibhav Jain	Anushree Mathur	Gautam Menghani	Mukesh Kumar Chaurasiya (IBM)	Jim Mattson	Yosry Ahmed	Miguel Ojeda	Neil Armstrong	Jernej Skrabec	Dan Carpenter	Michael Riesch	Vladimir Zapolskiy	Dmitry Baryshkov	Nicolas Dufresne	Johan Hovold	Laurent Pinchart	Loic Poulain	Detlev Casanova	Jacopo Mondi	Alexandre Courbot	Lyude Paul	Deborah Brouwer	Sean Young	Chao Yu	Arunpravin Paneer Selvam	Maarten Lankhorst	Thadeu Lima de Souza Cascardo	Christian König	Matthew Brost	Steven Price	Liviu Dudau	Luca Ceresoli	Douglas Anderson	[email protected]	Javier Martinez Canillas	Yongbang Shi	Melissa Wen	Daniel Wheeler	Mario Limonciello	Leo Liu	[email protected]	Ruben Wauters	Kenneth Feng	Candice Li	Alex Deucher	Thierry Reding	Maxime Ripard	Thomas Zimmermann	Mario Limonciello (AMD)	Peter Chen	Bernd Schubert	Felix Kuehling	Hawking Zhang	Greg Kroah-Hartman	Boris Brezillon	Gary Guo	Axel Rasmussen	Barry Song	Baolin Wang	Harry Yoo	Liam R. Howlett	Harry Yoo (Oracle)	Juergen Gross	Matthias Goergens	Vlastimil Babka (SUSE)	Jonathan Cameron	Dave Jiang	Viacheslav Dubeyko	Jeff Layton	ChenXiaoSong	Steve French	Namjae Jeon	David Laight	Amir Goldstein	Richard Cheng	Tomasz Wolski	Dan Williams	Ben Cheatham	Gao Xiang	Karan Tilak Kumar	K Prateek Nayak	Peter Zijlstra (Intel)	Luca Weiss	Heming Zhao	Joseph Qi	Kevin Xie	Dave Hansen	Alexandre Belloni	Baokun Li	Kuniyuki Iwashima	Eric Dumazet	NeilBrown	Enzo Matsumiya	Paulo Alcantara (Red Hat)	Sergey Senozhatsky	Brian Geffon	Joanne Koong	Zi Yan	Shakeel Butt	David Hildenbrand	Wei Yang	Balbir Singh	Lorenzo Stoakes	Lorenzo Stoakes (ARM)	Kiryl Shutsemau	Oscar Salvador (SUSE)	Usama Arif	Vlastimil Babka	Frank van der Linden	SJ Park	Brett A C Sheffield	Pavel Machek (CIP)	Florian Fainelli	Wentao Guan	Shuah Khan	Ron Economos	Peter Schneider	Brendan Jackman	Eric Biggers
Series																																																																																																																																																																																																					T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/583	R-b	R-b
2/583	R-b							R-b
3/583															A-b	R-b
4/583
5/583
6/583																	R-b T-b
7/583
8/583																		R-b
9/583
10/583
11/583			A-b
12/583				R-b
13/583
14/583
15/583					R-b
16/583
17/583						A-b
18/583						A-b
19/583							A-b
20/583
21/583									A-b
22/583									A-b
23/583					R-b				R-b	R-b
24/583									A-b		R-b
25/583									A-b			T-b
26/583													R-b
27/583														R-b
28/583														R-b
29/583														R-b
30/583						R-b
31/583
32/583
33/583
34/583
35/583																						R-b
36/583
37/583																													R-b	A-b
38/583																															R-b
39/583					R-b
40/583																																R-b
41/583
42/583																																R-b
43/583																			R-b
44/583
45/583
46/583																				A-b
47/583
48/583																					R-b
49/583																					R-b
50/583																					R-b
51/583																					R-b
52/583																					R-b
53/583																					R-b
54/583
55/583
56/583
57/583
58/583
59/583
60/583
61/583
62/583																							R-b
63/583
64/583
65/583
66/583																								A-b
67/583
68/583
69/583																									T-b	T-b R-b	R-b
70/583																						R-b						R-b
71/583																						R-b
72/583																						R-b
73/583																						R-b
74/583
75/583																																																		R-b
76/583																																	R-b	R-b R-b	R-b
77/583
78/583																																														R-b
79/583																																																				R-b	A-b
80/583
81/583																																																						R-b	R-b
82/583
83/583															A-b																																									R-b	R-b
84/583
85/583
86/583
87/583																																				A-b	A-b
88/583																																					A-b
89/583																																						R-b T-b
90/583																																						R-b T-b
91/583																																						R-b T-b
92/583																																						R-b T-b
93/583
94/583
95/583
96/583																																							R-b
97/583																																								A-b
98/583					R-b																																				R-b
99/583																																										T-b
100/583																																											A-b
101/583
102/583																					R-b																							A-b	R-b
103/583
104/583
105/583
106/583																																			R-b
107/583																																		R-b													T-b
108/583																																			R-b
109/583																																			R-b													R-b	R-b
110/583																																			R-b													R-b
111/583																																																R-b
112/583																																																R-b
113/583																																																		R-b
114/583																																																			A-b
115/583															A-b
116/583																R-b
117/583																R-b
118/583																																																													R-b T-b
119/583
120/583
121/583																																																																						R-b
122/583																																																																						R-b
123/583																																																										R-b													A-b
124/583																																																										R-b
125/583
126/583																																																										R-b
127/583																																																											A-b
128/583																																																												R-b
129/583																																																												R-b
130/583																																																												R-b
131/583																																																												R-b
132/583																																																												R-b
133/583																																																												R-b
134/583																																																												R-b
135/583																																																												R-b
136/583																																																														A-b
137/583
138/583
139/583
140/583
141/583
142/583
143/583
144/583
145/583
146/583																																																															R-b
147/583																																																															R-b	R-b
148/583																																																																	T-b
149/583					R-b
150/583					R-b
151/583																																																																		T-b R-b	T-b
152/583					R-b
153/583					R-b
154/583					R-b
155/583					R-b																																																															R-b
156/583					R-b
157/583
158/583																																																																					A-b
159/583
160/583
161/583
162/583
163/583
164/583
165/583
166/583
167/583
168/583
169/583
170/583
171/583
172/583
173/583
174/583
175/583
176/583
177/583
178/583
179/583
180/583
181/583
182/583
183/583
184/583
185/583
186/583
187/583
188/583
189/583
190/583
191/583
192/583
193/583
194/583
195/583
196/583
197/583
198/583
199/583
200/583
201/583
202/583
203/583																																																																								R-b
204/583																			R-b
205/583																																																																								R-b	A-b
206/583																			R-b
207/583
208/583
209/583
210/583
211/583																																																																										R-b
212/583
213/583
214/583																																																														R-b										R-b		R-b
215/583																																																																										R-b
216/583																																																														R-b
217/583																																																																										R-b
218/583
219/583
220/583
221/583																			R-b																																																								R-b	A-b
222/583																																																																								R-b
223/583
224/583
225/583																			R-b
226/583																			R-b
227/583																			R-b
228/583																			R-b
229/583																																																										R-b																													R-b	T-b	A-b	R-b
230/583																																																																													R-b														R-b
231/583																																																																													R-b
232/583																																																																																												R-b
233/583
234/583																																																																													R-b
235/583																																																																														R-b
236/583																																																																														R-b
237/583																																																																													R-b		R-b
238/583																																																																														R-b
239/583
240/583																																																																																R-b
241/583																																																																														R-b
242/583																																																																														R-b
243/583																																																																																	R-b
244/583																																																												R-b																					R-b
245/583																																																												R-b																					R-b
246/583																																																												R-b																					R-b
247/583																																																																																	R-b
248/583																																																												R-b																					R-b
249/583																																																																																	A-b	A-b
250/583																																																																																	R-b
251/583																																																																																	R-b
252/583
253/583
254/583																																																																																			R-b
255/583
256/583
257/583																																												R-b
258/583																																												R-b
259/583																																												A-b
260/583
261/583																																																																																				R-b
262/583																																																																																					R-b	R-b
263/583																																																																																					R-b
264/583																																																																																					R-b
265/583																																																																																					R-b	T-b R-b
266/583
267/583
268/583
269/583																																																																																						R-b
270/583																																																																																													A-b
271/583
272/583
273/583																																																																																																										R-b	R-b	T-b
274/583
275/583																						R-b
276/583
277/583
278/583																																																																																																													R-b
279/583																																																																																														R-b
280/583
281/583																																																																																															A-b	R-b
282/583
283/583
284/583
285/583
286/583
287/583
288/583
289/583																																																																																																	R-b
290/583																																																																																																	R-b
291/583																																																																																																		R-b
292/583
293/583
294/583
295/583																																																																																																			R-b
296/583																																																																																																				R-b
297/583																																																																																																					R-b
298/583
299/583																						R-b																																																																																R-b
300/583																						R-b																																																																																T-b R-b
301/583																						R-b																																																																																R-b	R-b
302/583
303/583																																																																																																								R-b
304/583
305/583
306/583																																																																																																									R-b
307/583
308/583
309/583
310/583
311/583
312/583
313/583
314/583																																																																																																			R-b
315/583																																																																																																			R-b
316/583
317/583
318/583
319/583					R-b					R-b
320/583					R-b					R-b																																																																																									R-b
321/583																																																																																																				R-b
322/583																																																																																																				R-b
323/583
324/583
325/583																																		R-b
326/583																																		R-b
327/583																																		R-b
328/583																																		R-b
329/583																																		R-b
330/583																																		R-b
331/583																																		R-b
332/583
333/583
334/583
335/583
336/583
337/583
338/583
339/583
340/583
341/583
342/583
343/583
344/583
345/583
346/583
347/583
348/583
349/583
350/583
351/583																																																																																																														R-b
352/583																																																																																																														R-b
353/583																																																																																																														R-b
354/583
355/583																																																																																																														R-b
356/583																																																																																																														R-b
357/583																																																																																																														R-b
358/583
359/583																																																																																																														R-b
360/583																																																																																																														R-b
361/583																																																																																																														R-b
362/583
363/583																																																																																																														R-b
364/583
365/583
366/583																																																																																																														R-b
367/583
368/583
369/583																																																																																																															R-b	R-b	T-b	A-b
370/583																																																																																																																			R-b
371/583																																																																																																																				R-b
372/583																																																																																																																				R-b	R-b
373/583																																																																																																						R-b																R-b
374/583																																																																																																																							R-b
375/583																																																																																																										R-b	R-b	T-b
376/583																																																																																																																								T-b
377/583																																																																																																																									R-b
378/583																																																																																															R-b
379/583																																																																																																																									R-b
380/583
381/583																																																																																																																										R-b
382/583																																																																																																																										R-b
383/583																																																																																																																											R-b	T-b
384/583																																																																																																																													R-b
385/583																																																																																																																											R-b	T-b
386/583																																																																																																																														R-b
387/583																																																																																																																															T-b	A-b
388/583																																																																																																																																R-b
389/583																																																																																																			R-b
390/583																																																																																																																											R-b
391/583																																																																																																																																	R-b
392/583																																																																																																																																											R-b
393/583																																																																																																																																	R-b	R-b
394/583																																																																																																																																							R-b
395/583																																																																																																																																			A-b
396/583																																																																																																																																			A-b
397/583																																																																																																																																			A-b
398/583																																																																																																																																			R-b
399/583																																																																																																																																										R-b
400/583																																																																																																																																										R-b
401/583																																																																																																																																										R-b
402/583																																																																																																																																			R-b
403/583																																																																																																																																			R-b
404/583																																																																																																																									R-b											R-b	R-b
405/583																																																																																																																									R-b											R-b	R-b
406/583																																																																																																																									R-b											R-b	R-b
407/583																																																																																																																																						R-b
408/583																																																																																																																																						R-b
409/583																																																																																																											R-b
410/583																																																																																																											R-b
411/583
412/583																																																																																																											R-b
413/583																																																																																																											R-b
414/583																																																																																																											R-b
415/583																																																																																																											R-b
416/583																																																																																																											R-b
417/583																																																																																																											R-b
418/583																																																																																																											R-b
419/583																																																																																																											R-b
420/583																																																																																																											R-b
421/583																																																																																																											R-b
422/583
423/583
424/583
425/583																																																																																																																																								R-b
426/583
427/583
428/583
429/583
430/583
431/583																																																																																																																																									R-b
432/583
433/583
434/583
435/583		R-b
436/583
437/583
438/583
439/583																																																																																																																																																															R-b
440/583
441/583
442/583																																																																																																																																																																R-b
443/583
444/583
445/583																	R-b																																																																																																																											R-b	T-b
446/583																	R-b																																																																																																																													R-b
447/583
448/583															A-b
449/583																R-b
450/583																														A-b																																									A-b
451/583																																																																																																																																															R-b	R-b	R-b
452/583																																																																																																																																																R-b	R-b
453/583															A-b	A-b
454/583																													R-b																																																																																																																					R-b	R-b
455/583																																																																																																																																																				R-b
456/583																																																																																																																																																					R-b
457/583																																																																																																																																																					R-b	T-b
458/583																																																																																																																																																				R-b			R-b
459/583
460/583
461/583																																																																																																																																																								R-b	R-b
462/583																																																													R-b
463/583																																																																																																																																																										R-b
464/583																																														R-b
465/583																																																																																																																																																											R-b
466/583																																														R-b
467/583																																																																																																																																																												R-b	R-b	A-b
468/583																																																																																																																																																												R-b
469/583																																																																																																																																																												R-b
470/583
471/583
472/583
473/583
474/583
475/583																																																																																																														R-b																																																							R-b
476/583
477/583																																																																																																																																																																													A-b
478/583																																																																																																																																																																														A-b
479/583
480/583
481/583
482/583
483/583
484/583
485/583
486/583
487/583																																																													R-b																																																																																											R-b	R-b								R-b
488/583																																																																																																																																																								R-b	R-b									T-b
489/583																																																																																																																																																								R-b	R-b										R-b
490/583																																																													R-b																																																																																																							R-b
491/583																																																																																																																																																											R-b
492/583
493/583																																																																																																																																																											A-b
494/583
495/583																																																																																																																																																											A-b
496/583
497/583
498/583
499/583																																																																																																																																																																						R-b
500/583
501/583																																																																																																																																																																							R-b
502/583
503/583																																																																																																																																																																								A-b
504/583					R-b					R-b
505/583					R-b																																																																																														R-b
506/583																																																																																																																																																																									T-b
507/583
508/583
509/583																																																																																																																																																																										R-b
510/583																																																																																																																																																																											R-b
511/583
512/583																																																																																																																																																																												A-b
513/583
514/583																																																																																																																																									R-b
515/583																																																																																																																																									R-b																		R-b																				R-b
516/583																																																																																																																																									R-b																		R-b																				R-b
517/583																																																																																																																																									R-b																		R-b																				R-b
518/583																																																																																																																																									R-b																		R-b																				R-b
519/583																																																																																																																																									R-b																		R-b																				R-b
520/583																																																																																																																																									R-b																																														R-b
521/583																																																																																																																																																																																R-b
522/583																																																																																																																																																																																R-b
523/583																																																																																																																																																																																R-b
524/583																																																																																																																																																																																R-b
525/583																																																																																																																																																																																R-b
526/583
527/583																																																																																																																																																																																	R-b
528/583
529/583
530/583
531/583
532/583
533/583
534/583
535/583
536/583																																																																																																																																																											R-b																							R-b
537/583																																																																																																																																																											R-b																							R-b
538/583																																																																																																																																																																																			A-b
539/583																																																																																																																																																																																			A-b
540/583																																																																																																																																																																																			A-b
541/583																																																																																																																																																																																			A-b
542/583
543/583																																																																																																																																																																																				R-b
544/583																																																																																																																																																																																			A-b
545/583																																																																																																																																																																																			A-b
546/583
547/583
548/583																																																																																																																																																																																				R-b
549/583																																																																																																																																																														R-b
550/583																																																																																																																																																											R-b																							R-b
551/583																																																																																																																																																											R-b
552/583																																																																																																																																																											R-b
553/583
554/583																																																																																																																																																																																					R-b
555/583																																																																																																																																																																																						R-b
556/583																																																																																																																																																																																						R-b
557/583
558/583																																																																																																																																																																																					A-b
559/583
560/583															A-b	R-b																																																																																																																																																																								R-b									A-b	R-b
561/583															R-b	R-b
562/583																																																																							A-b																																																																																																																												R-b
563/583																																																																																																																																																																																																				R-b
564/583																																																														R-b
565/583																																																														R-b
566/583																											R-b
567/583
568/583
569/583
570/583
571/583
572/583
573/583
574/583
575/583																																				A-b																																																																																																														R-b																																						R-b	A-b	A-b
576/583																																																																																																																																																		R-b																																						R-b	A-b	A-b	R-b
577/583															A-b																																																																																																																																																																												R-b	A-b
578/583															A-b																																																																																																																																																																												R-b
579/583															A-b																																																																																																																																																																									R-b					R-b
580/583																																				A-b																																																																																																													R-b																																													A-b
581/583																																																																																																																																																																																																												T-b	T-b
582/583																																																																																																																																																																																															A-b	A-b
583/583																																																																																																																																																																																				R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 205 reviewers.

Read the v1 thread

Cover letter [PATCH 6.18 000/583] 6.18.51-rc1 review

This is the start of the stable review cycle for the 6.18.51 release. There are 583 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 11 Sep 2026 13:40:31 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.51-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.18.51-rc1

Frank Sorenson <[email protected]>
cifs: add fscache_resize_cookie() to cifs_setsize()

Muchun Song <[email protected]>
mm/hugetlb_vmemmap: fix incorrect vmemmap restore in rollback

Christian Brauner <[email protected]>
pidfs: protect PIDFD_GET_* ioctls() via ifdef

Zi Yan <[email protected]>
mm/huge_memory: use folio's memcg inside __folio_split()

Matthew Wilcox (Oracle) <[email protected]>
migrate: replace RMP_ flags with TTU_ flags

Zi Yan <[email protected]>
mm/huge_memory: replace can_split_folio() with direct refcount calculation

Zi Yan <[email protected]>
mm/huge_memory: change folio_split_supported() to folio_check_splittable()

Muchun Song <[email protected]>
mm: thp: use folio_batch to handle THP splitting in deferred_split_scan()

Muchun Song <[email protected]>
mm: thp: introduce folio_split_queue_lock and its variants

SJ Park <[email protected]>

    mm/damon/core: initialize damos->last_applied

SJ Park <[email protected]>
mm/damon/core-kunit: handle region split failure in filter_out()

SJ Park <[email protected]>
mm/damon/sysfs: read addr_unit only once in damon_sysfs_apply_inputs()

SJ Park <[email protected]>
mm/damon/core: skip aging from repeated aggressive merging

SJ Park <[email protected]>
mm/damon/ops-common: use nr_accesses moving sum for quota score

SJ Park <[email protected]>
mm/damon/paddr: drop last same folio access check reuse optimization

SJ Park <[email protected]>
mm/damon/vaddr: drop last same folio access check optimization

SJ Park <[email protected]>
mm/damon/tests/core-kunit: catch test failure in test_merge_regions_of()

Robin Murphy <[email protected]>
iommu/arm-smmu-v3: Add HAFT support for SVA

Fan Wu <[email protected]>
power: supply: ab8500_fg: fix use-after-free on remove

Pan Chuang <[email protected]>
power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe()

Song Hu <[email protected]>
Docs/ABI/damon: fix typo in intervals_goal sysfs path

Muchun Song <[email protected]>
mm/hugetlb_vmemmap: fix __hugetlb_vmemmap_optimize_folios()

Kiryl Shutsemau <[email protected]>
hugetlb: remove VMEMMAP_SYNCHRONIZE_RCU

Kiryl Shutsemau <[email protected]>
mm: rework compound_head() for power-of-2 sizeof(struct page)

Sergey Senozhatsky <[email protected]>
zram: set default primary compressor in zram_destroy_comps()

Yuwen Chen <[email protected]>
zram: fix the issue that the write - back limits might overflow

Sergey Senozhatsky <[email protected]>
zram: read slot block idx under slot lock

Sergey Senozhatsky <[email protected]>
zram: drop wb_limit_lock

Sergey Senozhatsky <[email protected]>
zram: take write lock in wb limit store handlers

Longlong Xia <[email protected]>
zram: fix out-of-bounds access in read_block_state()

Sergey Senozhatsky <[email protected]>
zram: fixup read_block_state()

Chuck Lever <[email protected]>
NFSD: Prevent client use-after-free during close_lru reaping

Chuck Lever <[email protected]>
NFSD: Prevent client use-after-free during blocked-lock reaping

Chuck Lever <[email protected]>
NFSD: Consolidate the revocation-path client unpin

Bryam Vargas <[email protected]>
smb: client: reject a tree connect response whose byte count is too small

David Howells <[email protected]>
cifs: Do some preparation prior to organising the function declarations

Frank Sorenson <[email protected]>
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()

Frank Sorenson <[email protected]>
smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2

David Howells <[email protected]>
cifs: SMB1 split: Separate out SMB1 decls into smb1proto.h

David Howells <[email protected]>
cifs: SMB1 split: Create smb1proto.h for SMB1 declarations

David Howells <[email protected]>
cifs: Remove dead function prototypes

Jiangshan Yi <[email protected]>
smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions

David Howells <[email protected]>
cifs: Scripted clean up fs/smb/client/smb2proto.h

David Howells <[email protected]>
cifs: Scripted clean up fs/smb/client/fs_context.h

David Howells <[email protected]>
cifs: Scripted clean up fs/smb/client/fscache.h

David Howells <[email protected]>
cifs: Scripted clean up fs/smb/client/cifs_unicode.h

Chuck Lever <[email protected]>
NFSD: Prevent client use-after-free during admin state revocation

Chuck Lever <[email protected]>
NFSD: Prevent client use-after-free during delegation revoke

Jeff Layton <[email protected]>
nfsd: convert global state_lock to per-net deleg_lock

Jeff Layton <[email protected]>
nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache

Jeff Layton <[email protected]>
nfsd: fix UAF in async copy cancel and shutdown

Jeff Layton <[email protected]>
nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net

Jeff Layton <[email protected]>
nfsd: fix clock domain mismatch in clients_still_reclaiming()

Jeff Layton <[email protected]>
nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage

Jeff Layton <[email protected]>
nfsd: move struct nfsd_genl_rqstp to nfsctl.c

Jeff Layton <[email protected]>
nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()

Jiayuan Chen <[email protected]>
net: advertise TCP MSS from the configured MTU, not the learned PMTU

Yong Wang <[email protected]>
tcp: clamp route advmss to TCP_MIN_MSS

Eric Dumazet <[email protected]>
ipv4: use dst4_mtu() instead of dst_mtu()

Eric Dumazet <[email protected]>
ipv6: use dst6_mtu() instead of dst_mtu()

Eric Dumazet <[email protected]>
inet: add dst4_mtu() and dst6_mtu() helpers

Eric Dumazet <[email protected]>
ipv6: add some unlikely()/likely() clauses in ip6_output.c

Eric Dumazet <[email protected]>
ipv6: pass proto by value to ipv6_push_nfrag_opts() and ipv6_push_frag_opts()

Xiang Mei <[email protected]>
fuse: copy request headers via a stack buffer for io-uring

Joanne Koong <[email protected]>
fuse-uring: use named constants for io-uring iovec indices

Joanne Koong <[email protected]>
fuse-uring: refactor setting up copy state for payload copying

Joanne Koong <[email protected]>
fuse-uring: use enum types for header copying

Joanne Koong <[email protected]>
fuse-uring: refactor io-uring header copying from ring

Joanne Koong <[email protected]>
fuse-uring: refactor io-uring header copying to ring

Joanne Koong <[email protected]>
fuse: fix missing barrier when checking io-uring readiness

Ali Tariq <[email protected]>
PCI: starfive: Fix resource leaks on error paths in host_init()

Hal Feng <[email protected]>
PCI: starfive: Use regulator APIs to control the 3v3 power supply of PCIe slots

Oscar Ou <[email protected]>
lockd: fix swapped arguments in nlmsvc_match_ip()

Doruk Tan Ozturk <[email protected]>
ocfs2: validate directory-index entry counts when reading metadata

Joseph Qi <[email protected]>
ocfs2: validate dx_root extent list fields during block read

Vincent Donnefort <[email protected]>
ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page

Jorijn van der Graaf <[email protected]>
ASoC: codecs: aw88261: only check PLL and clock state at power-up

Val Packett <[email protected]>
ASoC: codecs: aw88261: reduce log spam

Mukesh Ojha <[email protected]>
remoteproc: qcom: pas: Guard dtb metadata release with dtb_pas_id check

Mukesh Ojha <[email protected]>
firmware: qcom_scm: Rename peripheral as pas_id

Tejun Heo <[email protected]>
sched/core: Make core-sched flips wait for in-flight selections

John Stultz <[email protected]>
sched: Rework prev_balance() to avoid stale prev references

John Stultz <[email protected]>
sched: Add assert_balance_callbacks_empty helper

Tejun Heo <[email protected]>
sched_ext: Fix inverted ops.core_sched_before() invocation

Linkai Gong <[email protected]>
scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock

Abhijit Gangurde <[email protected]>
RDMA/ionic: Embed counter driver data in rdma_counter allocation

fangqiurong <[email protected]>
sched_ext: Fix exit_task leak on fork failure during enable

Chuck Lever <[email protected]>
svcrdma: Reject Read lists that exceed the page budget

Chuck Lever <[email protected]>
svcrdma: Reject oversized Read segments at decode time

Chuck Lever <[email protected]>
rpcrdma: arm rn_done before publishing the notification

Chuck Lever <[email protected]>
svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id

Chuck Lever <[email protected]>
svcrdma: Release transport resources synchronously

Chris Mason <[email protected]>
SUNRPC: fix gssx_dec_option_array error path bugs

Dave Jiang <[email protected]>
cxl/mce: Make the MCE notifier per-region

Smita Koralahalli <[email protected]>
cxl/region: Add helper to check Soft Reserved containment by CXL regions

Dan Williams <[email protected]>
dax/cxl, hmem: Initialize hmem early and defer dax_cxl binding

Terry Bowman <[email protected]>
cxl/ras: Fix cxl_rch_get_aer_severity() wrong severity register

Jiri Olsa <[email protected]>
bpf: Disable preemption in bpf_get_stackid

Jiri Olsa <[email protected]>
bpf: Use stack id functions instead of __bpf_get_stackid

Jiri Olsa <[email protected]>
bpf: Factor stackid_new_bucket from __bpf_get_stackid

Jiri Olsa <[email protected]>
bpf: Factor stackid_fastpath function from __bpf_get_stackid

Jiri Olsa <[email protected]>
bpf: Factor stackid_init function from __bpf_get_stackid

Haoxiang Li <[email protected]>
cpufreq: apple-soc: Fix OPP table cleanup

Rafael J. Wysocki <[email protected]>
ACPI: TAD: Add locking around AML evaluations

Rafael J. Wysocki <[email protected]>
ACPI: TAD: Rearrange RT data validation checking

Rafael J. Wysocki <[email protected]>
ACPI: x86/rtc-cmos: Use platform device for driver binding

Rafael J. Wysocki <[email protected]>
ACPI: x86: cmos_rtc: Create a CMOS RTC platform device

Christian Loehle <[email protected]>
ACPI: CPPC: Reject desired_perf reads on _CPC revision 4+

Nikhil Gurudasani <[email protected]>
erofs: skip sufficiently large global buffers when resizing

Jiangshan Yi <[email protected]>
HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes

Florian Pradines <[email protected]>

    HID: mcp2221: fix OOB write in mcp2221_raw_event()

Doruk Tan Ozturk <[email protected]>
HID: sony: clean up device list on probe failure

Rosalie Wanders <[email protected]>
HID: sony: use guard() and scoped_guard()

Frank Sorenson <[email protected]>
cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem

Huiwen He <[email protected]>
smb/client: emulate small EOF-extending mode 0 fallocate ranges

Huiwen He <[email protected]>
smb/client: reduce fallocate zero buffer allocation

ZhangGuoDong <[email protected]>
smb: move some definitions from common/smb2pdu.h into common/fscc.h

Sam Edwards <[email protected]>
ceph: properly decrypt filenames in vmalloc() buffers

Chuck Lever <[email protected]>
NFSD: Guard admin state-revocation walks with NFSD_NET_UP

Max Kellermann <[email protected]>
ceph: force a cap message when a deferred revoke can't be acked immediately

Michael Bommarito <[email protected]>
ceph: cap delegated inode count in ceph_parse_deleg_inos()

Terry Bowman <[email protected]>
cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read

Terry Bowman <[email protected]>
cxl/pci: Move CXL driver's RCH error handling into core/ras_rch.c

Neill Kapron <[email protected]>
usb: gadget: f_fs: Fix Use-After-Free in AIO error path

Gabriel Prostitis <[email protected]>
USB: gadget: ffs: fix mm lifetime handling

Brendan Jackman <[email protected]>
mm/page_alloc: don't spin_trylock() in NMI on UP

Roger Pau Monne <[email protected]>
x86/xen: fix init of balloon stats again

Roger Pau Monne <[email protected]>
xen/balloon: improve accuracy of initial balloon target for dom0

Li Xiasong <[email protected]>
mm/slub: fix missing debugfs entries for caches created before sysfs init

Vlastimil Babka <[email protected]>
mm/slab: move and refactor __kmem_cache_alias()

Dev Jain <[email protected]>
mm/rmap: use huge_ptep_get() in try_to_migrate_one()

Kairui Song <[email protected]>
mm/mglru: fix and remove redundant unevictable folio handling

Kairui Song <[email protected]>
mm/mglru: use the common routine for dirty/writeback reactivation

Muchun Song <[email protected]>
mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier

Kiryl Shutsemau <[email protected]>
mm/hugetlb: refactor code around vmemmap_walk

Kiryl Shutsemau (Meta) <[email protected]>
mm/hugetlb: defer vmemmap population for bootmem hugepages

FUJITA Tomonori <[email protected]>
rust: bug: prevent dead_code warning from warn_on!'s flags constant

Danilo Krummrich <[email protected]>
rust: devres: fix race between concurrent revokers

Danilo Krummrich <[email protected]>
rust: devres: fix race condition due to nesting

Chen Linxuan <[email protected]>
pidfd: hold exec_update_lock around namespace ioctl

Christian Brauner <[email protected]>
pidfs: simplify PIDFD_GET_<type>_NAMESPACE ioctls

Vivek Parikh <[email protected]>
ovl: fix double end_creating() on the casefold-mismatch path

Thorsten Blum <[email protected]>
crypto: atmel-ecc - avoid stale fallback key after set_secret failure

Thorsten Blum <[email protected]>
crypto: atmel-ecc - clean up and improve ECDH comments

Thorsten Blum <[email protected]>
crypto: atmel-ecc - replace min_t with min

Vinicius Costa Gomes <[email protected]>
crypto: iaa - unmap dst before software fallback on decompress

Giovanni Cabiddu <[email protected]>
crypto: iaa - fall back to software for multi-entry scatterlists

Eric Dumazet <[email protected]>
vlan: fix skb_under_panic and races when toggling HW VLAN offload

Kyle Zeng <[email protected]>
net/packet: defer vmalloc TX_RING free until skbs finish

Miklos Szeredi <[email protected]>
fuse: fix race between interrupt and resend

Miklos Szeredi <[email protected]>

    fuse: remove fm arg of args->end callback

Miklos Szeredi <[email protected]>
fuse: split off fuse_args and related definitions into a separate header

Joanne Koong <[email protected]>
fuse: publish io-uring queues with release semantics

Breno Leitao <[email protected]>
usb: xhci: bail out of setup if the controller is inaccessible

Niklas Neronin <[email protected]>
usb: xhci: simplify handling of Structural Parameters 1 values

Niklas Neronin <[email protected]>
usb: xhci: use cached HCSPARAMS1 value

Niklas Neronin <[email protected]>
usb: xhci: implement USB Port Register Set struct

Niklas Neronin <[email protected]>
usb: xhci: add USB Port Register Set struct

Niklas Neronin <[email protected]>
usb: xhci: add helper to read PORTSC register

Niklas Neronin <[email protected]>
usb: xhci: add tracing for PORTSC register writes

David Howells <[email protected]>
afs: Fix leak of ungot volume

Abdifatah Suruur <[email protected]>
ksmbd: fix use-after-free in oplock break notification

Mohamed Ahmed <[email protected]>

    drm/nouveau/gsp: fix vblank interrupts on GB20x

Mohamed Ahmed <[email protected]>

    drm/nouveau/disp: fix head state readback on GB20x

Mohamed Ahmed <[email protected]>

    drm/nouveau/disp: fix HDMI GCP AVMute register offsets on GB20x

Mohamed Ahmed <[email protected]>

    drm/nouveau/disp: fix HDMI vendor infoframes on GB20x

Mohamed Ahmed <[email protected]>
drm/nouveau/disp: route GSP-RM display MMIO through nvkm_disp_func hooks

Mohamed Ahmed <[email protected]>
drm/nouveau/disp: move the GSP HDMI GCP AVMute write to engine/disp

Mohamed Ahmed <[email protected]>
drm/nouveau/disp: move GSP head-timing ISR and vblank helpers to tu102.c

Zhenhao Wan <[email protected]>
drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE

Zhenhao Wan <[email protected]>
drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE

Zhenhao Wan <[email protected]>
drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op

Faith Ekstrand <[email protected]>
drm/nouveau: Use write-combined maps for coherent

Marek Czernohous <[email protected]>
drm/nouveau: unsubscribe the channel-kill event before the fence context

Mohamed Ahmed <[email protected]>
drm/nouveau/gsp: use per-version DP_CONFIG_STREAM params on r570 firmware

Shixiong Ou <[email protected]>
drm/sysfb: ofdrm: Fix is_avivo() constant comparison bug

Shixiong Ou <[email protected]>
drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation

Thomas Zimmermann <[email protected]>
drm/sysfb: simpledrm: Improve stride validation

Thomas Zimmermann <[email protected]>
drm/sysfb: simpledrm: Improve panel-size validation

Thomas Zimmermann <[email protected]>
drm/sysfb: simpledrm: Improve framebuffer-size validation

Sunday Clement <[email protected]>
drm/amdkfd: Reject zero-sized AQL queue allocations after size halving

Vladimir Marioukhine <[email protected]>
drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore

Xiaogang Chen <[email protected]>
drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram

Xiaogang Chen <[email protected]>
drm/amdkfd: Fix error path at svm_migrate_copy_to_ram

Priya Hosur <[email protected]>
drm/amdkfd: Add TLB flush after MES queue eviction/suspension

Sunil Khatri <[email protected]>
drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT

Sunil Khatri <[email protected]>
drm/amdgpu: update the fw version for gfx12 userqueues

Sunil Khatri <[email protected]>
drm/amdgpu: update the fw version for gfx11 userqueues

Kanala Ramalingeswara Reddy <[email protected]>
drm/amdgpu: Skip accessing psp rum time db for APUs

Guangshuo Li <[email protected]>
drm/amdgpu: fix autosuspend cleanup during removal

Yang Wang <[email protected]>
drm/amdgpu: Disable runtime PM for externally attached dGPUs

Xiang Liu <[email protected]>
drm/amdgpu: clamp the isolation index for rings outside a partition

Yang Wang <[email protected]>
drm/amdgpu: check thunderbolt before switcheroo registration

Thadeu Lima de Souza Cascardo <[email protected]>
drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used

Kavan Smith <[email protected]>
drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value

Tao Yu <[email protected]>
drm/gud: validate TV mode names before creating enum property

Deepanshu Kartikey <[email protected]>
drm/gud: NUL-terminate TV mode names read from the device

David (Ming Qiang) Wu <[email protected]>
drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check

Harry Wentland <[email protected]>
drm/amd/display: validate plane degamma LUT size for private color prop

Linkai Gong <[email protected]>
drm/amd/display: fix dc_lock leak on GPU reset error paths

Harry Wentland <[email protected]>
drm/amd/display: avoid divide-by-zero in __is_lut_linear()

Thomas Zimmermann <[email protected]>
drm/hibmc: Use drm_atomic_helper_check_plane_state()

Thomas Zimmermann <[email protected]>
drm/hibmc: Fix list of formats on the primary plane

Lyude Paul <[email protected]>
drm/nouveau/disp/r535: Add scanline position support + head state support

Amit Barzilai <[email protected]>

    drm/ssd130x: fix column and row end address in partial updates in ssd133x

Wentao Liang <[email protected]>
drm/sun4i: fix refcount leak in sun4i_backend_init_sat()

Amit Barzilai <[email protected]>

    drm/ssd130x: fix column and row end address in partial updates for ssd132x

Deepanshu Kartikey <[email protected]>
drm/i915: Guard against NULL driver_data in i915_pci_probe()

Danilo Krummrich <[email protected]>
drm: fix race between partial drm_dev_register() failure and ioctl

Johan Hovold <[email protected]>
drm/panel-edp: fix i2c adapter leak on probe failure

Johan Hovold <[email protected]>
drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure

Osama Abdelkader <[email protected]>
drm/panthor: fix firmware control interface bounds checks

Osama Abdelkader <[email protected]>
drm/panthor: harden firmware build-info bounds checks

Matthew Auld <[email protected]>
drm/xe/vram: report FLAT_CCS base misalignment

Thomas Hellström <[email protected]>
drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()

Chao Yu <[email protected]>
f2fs: fix to zero post-EOF data when extending file size

Chao Yu <[email protected]>

    f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()

Chen Changcheng <[email protected]>
f2fs: fix valid block count leak on data block allocation failure

Chao Yu <[email protected]>
f2fs: fix to clear dirty flag on folio in error path

Chao Yu <[email protected]>
f2fs: fix to off-by-one issue in f2fs_zero_post_eof_page()

Zhan Xusheng <[email protected]>
f2fs: fix i_size when pinned fallocate partially fails

Chao Yu <[email protected]>
f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()

Daeho Jeong <[email protected]>
f2fs: fix to migrate all curseg types during free_segment_range

Wenjie Qi <[email protected]>
f2fs: avoid NULL checkpoint thread access in sysfs

Guanghui Yang <[email protected]>
f2fs: fix dentry folio leak in find_in_level

Chao Yu <[email protected]>
f2fs: fix to avoid potential section-unaligned pinfile

Wenjie Qi <[email protected]>
f2fs: return writeback error from collapse range

Zhan Xusheng <[email protected]>
f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()

Joanne Chang <[email protected]>
f2fs: dirty directory inodes on mtime/ctime update

Chao Yu <[email protected]>
f2fs: fix to avoid move_range and defragment on device_alias file

Wenjie Qi <[email protected]>
f2fs: only redirty pinned folios in redirty_blocks

Hao-Qun Huang <[email protected]>
f2fs: reject overlapping move range after len expansion

Wenjie Qi <[email protected]>
f2fs: return symlink writeback errors

Nilesh Javali <[email protected]>
scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started

Nilesh Javali <[email protected]>
scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak

Nilesh Javali <[email protected]>
scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics

Nilesh Javali <[email protected]>
scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition

Nilesh Javali <[email protected]>
scsi: qla2xxx: Drop vport reference under lock in report ID acquisition

Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort

Nilesh Javali <[email protected]>
scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()

Nilesh Javali <[email protected]>
scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read

Nilesh Javali <[email protected]>
scsi: qla2xxx: Avoid double completion in async IOCB timeout

Nilesh Javali <[email protected]>
scsi: qla2xxx: Quiesce response IRQ before freeing request queue

Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()

Nilesh Javali <[email protected]>
scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path

Nilesh Javali <[email protected]>
scsi: qla2xxx: Don't query firmware state while chip is down

Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix FCE trace enable parsing in debugfs

Nilesh Javali <[email protected]>
scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()

Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump

Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix cs84xx use-after-free on host teardown

Nilesh Javali <[email protected]>
scsi: qla2xxx: Serialize flash version read in reset handler

Nilesh Javali <[email protected]>
scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation

Nilesh Javali <[email protected]>
scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject

Nilesh Javali <[email protected]>
scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()

Nilesh Javali <[email protected]>
scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config()

Nilesh Javali <[email protected]>
scsi: qla2xxx: Initialize NVMe abort_work once at submission

Nilesh Javali <[email protected]>
scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()

Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters

Nilesh Javali <[email protected]>
scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check

Nilesh Javali <[email protected]>

    scsi: qla2xxx: Bound i2c->length in I2C bsg handlers

Nilesh Javali <[email protected]>
scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers

Jackson Lee <[email protected]>

    media: chips-media: wave5: Set inst->std during default format initialization

Jackson Lee <[email protected]>
media: chips-media: wave5: Guard bit depth check with initial_info_obtained

Hungyu Lin <[email protected]>
media: qcom: iris: use disable_irq() during power-off

Dikshita Agarwal <[email protected]>
media: qcom: iris: fix state-change debug log printing stale value

Ruoyu Wang <[email protected]>
media: zoran: Avoid freeing a registered video_device twice

Arash Golgol <[email protected]>
media: vimc: fix pixel format lookup in enum_framesizes

Uday Khare <[email protected]>
media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure

Mohammed EL Kadiri <[email protected]>
media: venus: fix payload size calculation in parse_raw_formats()

Mohammed EL Kadiri <[email protected]>
media: venus: fix payload size returned by parse_caps() and parse_alloc_mode()

Biren Pandya <[email protected]>
media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link

Ming Qian <[email protected]>
media: v4l2-ctrls: Allow unknown HDR10 white point and luminance

Xu Rao <[email protected]>
media: v4l2-async: avoid deleting unlinked ASC entry on link error

Ilya Krutskih <[email protected]>
media: tda18250: fix possible integer overflow

Guangshuo Li <[email protected]>
media: saa7164: fix cleanup on resource allocation failure

Lei Huang <[email protected]>
media: s2255: check firmware size before reading trailing marker

HyeongJun An <[email protected]>
media: s2255: bound JPEG frame size before copying into the buffer

Tommaso Merciai <[email protected]>
media: rzg2l-cru: Align bytesperline to hardware DMA stride requirement

Valery Borovsky <[email protected]>
media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure

Valery Borovsky <[email protected]>
media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak

Narasimharao Vadlamudi <[email protected]>
media: rkvdec: Propagate platform_get_irq() errors

Myeonghun Pak <[email protected]>
media: rc: sunxi-cir: Unregister rc device on probe failure

Guoniu Zhou <[email protected]>
media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks

Guoniu Zhou <[email protected]>
media: nxp: imx8-isi: Correct color map between V4L2 and ISI

Guoniu Zhou <[email protected]>
media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing

Johan Hovold <[email protected]>
media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup

Guangshuo Li <[email protected]>
media: platform: mtk-mdp3: Fix SCP device refcounting

Christian Hewitt <[email protected]>
media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common

Bryan O'Donoghue <[email protected]>

    media: iris: Enumerate cap->bus_info to differentiate between encoder and decoder

Cong Nguyen <[email protected]>
media: intel/ipu6: fix async notifier cleanup leak on parse error

Dave Stevenson <[email protected]>
media: imx355: Avoid calling imx355_power_off twice in error path

Biren Pandya <[email protected]>
media: i2c: ov7740: fix use-after-destroy in remove

Biren Pandya <[email protected]>
media: i2c: ov02a10: fix endpoint parsing use-after-free

Narasimharao Vadlamudi <[email protected]>
media: i2c: imx415: Return test pattern write errors

Narasimharao Vadlamudi <[email protected]>
media: i2c: imx415: Release runtime PM reference on VBLANK error

Martin Hecht <[email protected]>
media: i2c: alvium: Fix: Correct name of register in alvium_set_ctrl_auto_exposure

Shuangpeng Bai <[email protected]>
media: go7007: defer the ALSA v4l2 put until card release

Jiangong.Han <[email protected]>

    media: em28xx: fix use-after-free of dev_next->devlist on disconnect

Diego Fernando Mancera Gomez <[email protected]>
media: em28xx: defer audio-only extension registration

Fan Wu <[email protected]>
media: cx23885: cancel NetUP CI work before teardown

Bryam Vargas <[email protected]>
media: cx231xx: reject geometry changes while the VBI queue is busy

Ruoyu Wang <[email protected]>
media: cobalt: Avoid freeing ALSA private data twice

Dawei Feng <[email protected]>
media: cedrus: fix memory leak in cedrus_init_ctrls()

Ruoyu Wang <[email protected]>
media: cec: Serialize exclusive follower delivery

Yi Ding <[email protected]>
media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash

Hans Verkuil <[email protected]>
media: cec: extron-da-hd-4k-plus: add sanity check

Biren Pandya <[email protected]>
media: cec: disable delayed work before freeing an interrupted transmit

Jonas Karlman <[email protected]>
media: cec: core: Fix kmemleak due to missed rc_free_device() call

Ming Qian <[email protected]>
media: amphion: Remove obsolete frame_count check in venc_start_session

Valery Borovsky <[email protected]>
media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref

Danilo Krummrich <[email protected]>
rust: drm: ioctl: fix unbounded lifetimes in ioctl handler arguments

Jérémy Jean <[email protected]>
LoongArch: Avoid preempt count underflow without probe

Wentao Guan <[email protected]>
LoongArch: Do not save/restore percpu base register in rethook trampoline

Nathan Chancellor <[email protected]>
LoongArch: Do not select HAVE_RUST when KASAN is enabled

Bibo Mao <[email protected]>

    LoongArch: Fix acpi_package_ids[] array overflow

Tiezhu Yang <[email protected]>
LoongArch: BPF: Refactor jump offset calculation in tail call

Tiezhu Yang <[email protected]>
LoongArch: BPF: Optimize redundant TCC loads in epilogue

Han Gao <[email protected]>
LoongArch: Add DIRECT_MAP_PHYSMEM_END definition

Zeng Chi <[email protected]>
LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY

Chaithanya Lagisetty <[email protected]>
LoongArch: KVM: Free init resources if kvm_init() fails

Tao Cui <[email protected]>
LoongArch: KVM: Fix TOCTOU race on pv_features

Zeng Chi <[email protected]>
LoongArch: KVM: Fix PC double advance in kernel MMIO read fast path

Marc Zyngier <[email protected]>
KVM: arm64: Correctly cap TLBI Range to the architural limit

Fuad Tabba <[email protected]>
KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save

Fuad Tabba <[email protected]>
KVM: arm64: vgic: Reset in_kernel on private IRQ allocation failure

Kajetan Puchalski <[email protected]>
KVM: arm64: vgic: Fix detection of MI on no pending LR

Qihang <[email protected]>
KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables

Marc Zyngier <[email protected]>
KVM: arm64: Sign-extend VA for range-based TLBI invalidation

Marc Zyngier <[email protected]>
KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry

Marc Zyngier <[email protected]>
KVM: arm64: Correctly handle end of VA space TLBI invalidation

Marc Zyngier <[email protected]>
KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation

Marc Zyngier <[email protected]>
KVM: arm64: Consider SCTLR_EL2.M when mapping the L1 VNCR page

Christian Borntraeger <[email protected]>
KVM: s390: Restore sigset on error path

Christian Borntraeger <[email protected]>
KVM: s390: pv: Fix rc/rrc offset for PVM_DUMP

Christian Borntraeger <[email protected]>
KVM: s390: Fix memory corruption by not reinjecting CK machine checks

Christian Borntraeger <[email protected]>
KVM: s390: Zero initialize irq in reinject_machine_check

Christian Borntraeger <[email protected]>
KVM: s390: Take srcu when importing watchpoint data

Christian Borntraeger <[email protected]>
KVM: s390: Free guest debug data on vcpu destroy

Christian Borntraeger <[email protected]>
KVM: s390: Fix old_data leak in guest debug error path

Christian Borntraeger <[email protected]>
KVM: s390: Fix memory leak in guest debug handling

Christian Borntraeger <[email protected]>
KVM: s390: Fix length check __import_wp_info()

Sean Christopherson <[email protected]>
KVM: x86: Ensure runtime reads of disabled_quirks are resolved once

Sean Christopherson <[email protected]>

    KVM: x86: Serialize writes to disabled_quirks using kvm->lock

Carlos López <[email protected]>
KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock

Phil Rosenthal <[email protected]>
KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk

Sean Christopherson <[email protected]>
KVM: x86/mmu: Use split "zap all fast" helpers when invalidating memslot

Sean Christopherson <[email protected]>
KVM: x86/mmu: Use CMPXCHG when clearing Accessed bit in TDP MMU

Sean Christopherson <[email protected]>
KVM: x86/mmu: Split kvm_mmu_zap_all_fast() into "front" and "back" halves

Sean Christopherson <[email protected]>
KVM: x86/mmu: Fold kvm_mmu_zap_memslot() into kvm_arch_flush_shadow_memslot()

Yosry Ahmed <[email protected]>
KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU

Yosry Ahmed <[email protected]>
KVM: nVMX: Service local TLB flushes on failed nested VM-Enter

Sean Christopherson <[email protected]>
KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit

Sean Christopherson <[email protected]>
KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02

Yosry Ahmed <[email protected]>
KVM: nVMX: Always flush vpid02 on first use

Amit Machhiwal <[email protected]>
KVM: PPC: Book3S HV: Validate arch_compat against host compatibility mode

Nikhil Gautam <[email protected]>
iio: light: opt4001: Fix reversed GENMASK() arguments in fault count mask

Nikhil Gautam <[email protected]>
iio: light: opt4001: Reject integration times with a non-zero seconds part

Nikhil Gautam <[email protected]>
iio: light: opt4001: Fix incompatible pointer type passed to div_u64_rem()

Nikhil Gautam <[email protected]>
iio: light: opt4001: Fix power down clearing bits of the wrong register

Vidhu Sarwal <[email protected]>
iio: light: opt4060: Fix incorrect register name in threshold read error message

Vidhu Sarwal <[email protected]>
iio: light: opt4060: Reject integration times with a non-zero seconds part

Paul Geurts <[email protected]>
iio: ti-ads7138: Disable STATS_EN bit while reading conversion results

Sanjay Chitroda <[email protected]>
iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register()

Cong Nguyen <[email protected]>
iio: srf04: fix pm_runtime handling on probe error path

Can Peng <[email protected]>
iio: pressure: mpl115: Fix runtime PM cleanup

Rupesh Majhi <[email protected]>
iio: pressure: dps310: fix NULL pointer dereference on ACPI probe

Vidhu Sarwal <[email protected]>
iio: light: ltrf216a: fix runtime PM reference leak in error path

Laxman Acharya Padhya <[email protected]>
iio: light: gp2ap002: Disable regulators on resume failure

Giorgi Tchankvetadze <[email protected]>
iio: light: cm32181: return zero after writing calibscale

Cong Nguyen <[email protected]>
iio: gyro: mpu3050: fix sign of raw angular velocity readings

Erick Henrique <[email protected]>
iio: dac: m62332: Fix regulator reference count imbalance

Babanpreet Singh <[email protected]>
iio: dac: ad3552r-hs: fix scnprintf() buffer bound in data source show

Linmao Li <[email protected]>
iio: chemical: sgp30: Handle IAQ thread creation failure

Fan Wu <[email protected]>
iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF

Moksh Panicker <[email protected]>
iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable

Lars-Peter Clausen <[email protected]>
iio: buffer: Tie IIO dma fence lock lifetime to the fence

Lars-Peter Clausen <[email protected]>
iio: buffer: Make IIO DMA fence release RCU-safe

Lars-Peter Clausen <[email protected]>
iio: buffer: Fix potential use-after-free in anonymous buffer release

Cong Nguyen <[email protected]>
iio: adc: pac1921: fix wrong channel used in trigger handler read

Joshua Crofts <[email protected]>
iio: adc: max34408: add missing 'select REGMAP_I2C' to Kconfig

Antoniu Miclaus <[email protected]>
iio: adc: adi-axi-adc: add data size support for AD408X backend

Peter Ujfalusi <[email protected]>
ASoC: tegra210_i2s: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: tegra210_i2s: sort the Tegra264 register default table

Jon Hunter <[email protected]>
ASoC: tegra: Fix the MIXER enable default value

Jon Hunter <[email protected]>
ASoC: tegra: Sort ADMAIF register defaults

Jon Hunter <[email protected]>
ASoC: tegra: Sort MBDRC register defaults

Peter Ujfalusi <[email protected]>
ASoC: tegra210_mixer: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: tas2783-sdw: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: tas2783-sdw: drop duplicate reg_default entry

Peter Ujfalusi <[email protected]>
ASoC: tas2780: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: tas2764: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: tas2552: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: sti-sas: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: sgtl5000: sort the register default table

WenTao Liang <[email protected]>
ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get

Peter Ujfalusi <[email protected]>
ASoC: rt721-sdca-sdw: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: rt715: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: rt715-sdca: sort the register default tables

Peter Ujfalusi <[email protected]>
ASoC: rt715-sdca: drop duplicate reg_default entries

Peter Ujfalusi <[email protected]>
ASoC: rt712-sdca-sdw: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: rt712-sdca-dmic: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: rt711: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: rt711-sdca: sort the register default tables

Peter Ujfalusi <[email protected]>
ASoC: rt700: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: rt700: drop duplicate reg_default entry

Peter Ujfalusi <[email protected]>
ASoC: rt298: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: rt286: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: rt274: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: rt1318: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: rt1318-sdw: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: rt1316-sdw: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: rt1017-sdca-sdw: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: pm4125-sdw: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: pcm512x: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: ml26124: sort the register default table

Peter Ujfalusi <[email protected]>
ASoC: max9860: sort the register default table

Binbin Zhou <[email protected]>
ASoC: loongson: Fix error handling in ACPI property parsing

Haoxiang Li <[email protected]>
AsoC: intel: sst: fix PCI device reference leak on probe failure

Haoxiang Li <[email protected]>
ASoC: hdac_hda: Fix hlink refcount leak on component registration failure

Peter Ujfalusi <[email protected]>
ASoC: fsl_easrc: sort the register default table

wangdicheng <[email protected]>

    ASoC: fsl_easrc: Use div64_u64 for 64-by-64 division

Haoxiang Li <[email protected]>
ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure

Peter Ujfalusi <[email protected]>
ASoC: cx2072x: sort the register default table

Runyu Xiao <[email protected]>
ASoC: cs35l34: drain threaded IRQ before runtime suspend

Runyu Xiao <[email protected]>
ASoC: cs35l33: drain threaded IRQ before runtime suspend

Peter Ujfalusi <[email protected]>
ASoC: adau1761: sort the register default table

Linkai Gong <[email protected]>
i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure

Stephan Gerhold <[email protected]>
clk: qcom: gcc-mdm9607: Drop incorrect BIMC PLL and related clocks

Stephan Gerhold <[email protected]>
clk: qcom: gcc-mdm9607: Fix halt_reg for gcc_apss_axi_clk

Stephan Gerhold <[email protected]>
clk: qcom: gcc-mdm9607: Fix enable_reg for gcc_blsp1_sleep_clk

Stephan Gerhold <[email protected]>
clk: qcom: gcc-mdm9607: Drop incorrect system_noc_bfdcd_clk_src

Stephan Gerhold <[email protected]>
clk: qcom: gcc-mdm9607: Drop incorrect apss_tcu_clk_src

Heiko Stuebner <[email protected]>
clk: rockchip: rk3588: Don't change PLL rates when setting dclk_vop2_src

Stephan Gerhold <[email protected]>
clk: qcom: gcc-msm8939: Fix enable_reg for gcc_blsp1_sleep_clk

Stephan Gerhold <[email protected]>
clk: qcom: gcc-msm8916: Fix enable_reg for gcc_blsp1_sleep_clk

Martin Blumenstingl <[email protected]>
clk: meson: align gxbb_32k_clk_sel number of parents with actual count

Akari Tsuyukusa <[email protected]>
clk: mediatek: mt8196: Select REGMAP_MMIO for vlpckgen

Pavel Löbl <[email protected]>
clk: clocking-wizard: fix integer overflow in rate calculation

Sven Eckelmann <[email protected]>
batman-adv: bla: prevent CRC corruptions after claim flush

Sven Eckelmann <[email protected]>
batman-adv: bla: fix freeing of claims on meshif deletion

Sven Eckelmann <[email protected]>
batman-adv: dat: avoid unaligned fault in IP extraction

Sven Eckelmann <[email protected]>
batman-adv: mcast: linearize skbuff for packet generation

Sven Eckelmann <[email protected]>
batman-adv: mcast: ensure unshared skb for multicast packets

Zhiling Zou <[email protected]>
batman-adv: fix stale receive device on merged fragments

Pengpeng Hou <[email protected]>
mtd: rawnand: validate ONFI extended parameter page sections

Pengpeng Hou <[email protected]>
mtd: nand: realtek-ecc: add missing MODULE_DEVICE_TABLE()

Xu Rao <[email protected]>
mtd: mtdoops: free page bitmap when the backing MTD is removed

Pengpeng Hou <[email protected]>
mtd: afs: validate v2 image info bounds

Anthony Krowiak <[email protected]>
s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object

Anthony Krowiak <[email protected]>
s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap

Anthony Krowiak <[email protected]>
s390/vfio-ap: Fix NULL deref in status_show() during queue probe

Anthony Krowiak <[email protected]>
s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects

Anthony Krowiak <[email protected]>
s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed

Anthony Krowiak <[email protected]>

    s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL

Anthony Krowiak <[email protected]>
s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove

Anthony Krowiak <[email protected]>
s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove

Anthony Krowiak <[email protected]>
s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()

Sourabh Jain <[email protected]>
powerpc/crash: stop watchdogs before booting kdump kernel

Sourabh Jain <[email protected]>
powerpc/pseries: Move H_WATCHDOG definitions to a common header

Sourabh Jain <[email protected]>
powerpc/pseries: Handle and log pseries-wdt registration failures

Muchun Song <[email protected]>
powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population

Jinjie Ruan <[email protected]>
powerpc/kexec_file: Prevent kexec range truncation

Jinjie Ruan <[email protected]>
powerpc/kexec_file: Fix null-ptr-def in extra size calculation

Helge Deller <[email protected]>
parisc: Fix alignment of asm statements in head.S

Pei Xiao <[email protected]>
parisc: eisa: Fix infinite loop when parsing invalid IRQ value

Bryam Vargas <[email protected]>
nvdimm/btt: reject an arena whose nfree is below the lane count

Narek Jilavyan <[email protected]>
mm/hugetlb_cgroup: call page_counter_set_max() outside VM_BUG_ON()

Longlong Xia <[email protected]>
mm/hugetlb: keep max_huge_pages when dissolving surplus folios

Wupeng Ma <[email protected]>
mm/hugetlb: fix missing migratable flag on same-node hugetlb migration

caina <[email protected]>
Revert "irqchip/mbigen: Fix mbigen node address layout"

Christian Marangi <[email protected]>
pmdomain: airoha: fix unselectable AIROHA_CPU_PM_DOMAIN kconfig

Shivam Kumar <[email protected]>
nvmet-tcp: reject unsolicited H2CData PDUs

Shivam Kumar <[email protected]>
nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU

Kazuki Hanai <[email protected]>
nvmet-auth: Synchronize timeout work during SQ teardown

Tristan Madani <[email protected]>
nvme: add missing SRCU grace period in error path

Yehyeong Lee <[email protected]>
nvme-tcp: check the data direction of a C2HData PDU

Niklas Cassel <[email protected]>
nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails

Xu Rao <[email protected]>
nvme-fabrics: fix DHCHAP secret leak on parse failure

Takashi Iwai <[email protected]>
ALSA: pcm: Fix race between non-atomic ops and trigger-start

Runyu Xiao <[email protected]>
ALSA: harmony: initialize locks before requesting IRQ

HyeongJun An <[email protected]>
ALSA: rawmidi: Return the error from snd_rawmidi_input_params()

Khushit Shah <[email protected]>
arm64: errata: pass REVIDR when matching target implementation CPUs

Karl Mehltretter <[email protected]>
arm64: mm: Fix the lockless page-table walk in show_pte()

Ahmad Byagowi <[email protected]>
i2c: mux: Fix channel node leak on adapter add failure

Vasileios Almpanis <[email protected]>
i2c: core: fix debugfs UAF on adapter removal

Kathiravan Thirumoorthy <[email protected]>
i2c: qcom-geni: update frequency table to fix timing parameters

Hongbo Yao <[email protected]>
i2c: designware: Enable interrupt mask workaround for HJMC3001

Sizhe Liu <[email protected]>
perf hisi-ptt: Fix PTT trace TLP header parsing

Viktor Malik <[email protected]>
perf trace: Refactor augmented_raw_syscalls using bpf_for

Viktor Malik <[email protected]>
perf trace: Factor out BPF loop body

Dapeng Mi <[email protected]>
perf/x86/intel: Fix kernel address leakages in LBR stack

Lad Prabhakar <[email protected]>
rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers

Lad Prabhakar <[email protected]>
rtc: rzn1: Handle unset alarm weekday in rzn1_rtc_read_alarm

Lad Prabhakar <[email protected]>
rtc: rzn1: Fix weekday underflow when alarm crosses month boundary

Lad Prabhakar <[email protected]>
rtc: rzn1: Handle EPROBE_DEFER for optional pps interrupt

Shakeel Butt <[email protected]>
memcg: make the v1 soft limit knob inert

Shakeel Butt <[email protected]>
memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done

Pengpeng Hou <[email protected]>
Input: aiptek - validate raw macro indices before updating state

HE WEI（ギカク） <[email protected]>
fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()

Nirbhay Sharma <[email protected]>
fs/ntfs3: fix KMSAN uninit-value in ni_create_attr_list

Eric Dumazet <[email protected]>
mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()

Masami Hiramatsu (Google) <[email protected]>
kprobes: Protect kprobe_blacklist with RCU

Ju Nan <[email protected]>
irqchip/stm32mp-exti: Fix the unit of the hwspinlock timeout

Bradley Morgan <[email protected]>
ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()

Hajo Noerenberg <[email protected]>
ata: ahci: work around lost interrupts on Marvell 88SE61xx

Max Kellermann <[email protected]>
ceph: lock mutex in ceph_mds_check_access()

Hui Su <[email protected]>
bpf: Fix infinite loop in pcpu_freelist push with one possible CPU

Damien Le Moal <[email protected]>
block: flag zoned disks with GENHD_FL_NO_PART

Ulf Hansson <[email protected]>
cpuidle: psci: Fix support for probe deferral by dropping the faux device

Linkai Gong <[email protected]>
cpuidle: dt_idle_genpd: kfree() the original name allocation

Koichiro Den <[email protected]>
dmaengine: dw-edma: Initialize IRQ data before requesting IRQs

Koichiro Den <[email protected]>
dmaengine: dw-edma: Complete descriptors before pausing

Koichiro Den <[email protected]>
dmaengine: dw-edma: Fix HDMA channel status register access

Martin Kaiser <[email protected]>
dmaengine: fsl-edma: tracing: no ptr dereference during log output

Aneesh Kumar K.V (Arm) <[email protected]>
dma-direct: return struct page from dma_direct_alloc_from_pool()

Mikulas Patocka <[email protected]>
dm: fix resume-vs-remove race

Mikulas Patocka <[email protected]>
dm: fix race when loading and unloading a table

Ibrahim Hashimov <[email protected]>
HID: wacom: validate report length in wacom_intuos_pro2_bt_irq

Wei Jie Law <[email protected]>
HID: rmi: fix OOB access with undersized RMI reports

Shen Yongchao <[email protected]>
HID: bpf: serialize device reference release in struct_ops destroy path

Steven Rostedt <[email protected]>
ftrace: Synchronize the initialization of ftrace_ops

Yao Kai <[email protected]>
futex: Prevent rcuwait use-after-free during requeue PI

SJ Park <[email protected]>
mm/damon/core-kunit: check region count before testing in split_at()

SJ Park <[email protected]>
mm/damon/sysfs: kobject_del() target (normal), context and kdamond dirs

SJ Park <[email protected]>
mm/damon/sysfs: kobject_del() region and target (error) dirs

SJ Park <[email protected]>
mm/damon/sysfs-schemes: kobject_del() scheme region dirs

SJ Park <[email protected]>
mm/damon/sysfs-schemes: kobject_del() scheme quota goal dirs

SJ Park <[email protected]>
mm/damon/sysfs-schemes: kobject_del() scheme filter dirs

SJ Park <[email protected]>
mm/damon/sysfs-schemes: kobject_del() scheme dirs

SJ Park <[email protected]>
mm/damon/sysfs-schemes: kobject_del() scheme action destination dirs

SJ Park <[email protected]>
samples/damon/wsse: stop and free damon ctx when damon_call() fails

SJ Park <[email protected]>
samples/damon/wsse: handle damon_start() failure

SJ Park <[email protected]>
samples/damon/prcl: stop and free damon ctx when damon_call() fails

SJ Park <[email protected]>
samples/damon/prcl: handle damon_start() failure

SJ Park <[email protected]>
samples/damon/mtier: handle damon_stop() failure

SJ Park <[email protected]>
samples/damon/mtier: handle damon_start() failure

SJ Park <[email protected]>
mm/damon/vaddr-kunit: check region count in three_regions test

Runyu Xiao <[email protected]>
scsi: pm8001: Use rollback index when freeing MSI-X vectors

Thomas Lamprecht <[email protected]>
scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame

Sujal Tuladhar <[email protected]>
scsi: target: iscsi: Reserve a terminator byte for the login payload

Honghui Jiang <[email protected]>
spi: Fix DMA mapping ownership on partial map failure

Can Peng <[email protected]>
spi: bcmbca-hsspi: disable clocks on resume failure

Can Peng <[email protected]>
spi: bcm63xx: disable clock on resume failure

Can Peng <[email protected]>
spi: bcm63xx-hsspi: disable clocks on resume failure

Viken Dadhaniya <[email protected]>
soc: qcom: geni-se: Use HW PROG_RAM_DEPTH to validate firmware size

Kanishka De Silva <[email protected]>
ublk: clear VM_MAYWRITE on read-only ublk char device mmap

Bryan Lim <[email protected]>
userfaultfd: reset err to be 0 when move_pages_ptes succeeded

Can Peng <[email protected]>
thermal/drivers/qoriq: Disable clock on resume failure

Can Peng <[email protected]>
thermal/drivers/imx: Disable clock on runtime resume failure

Arthur Gautier <[email protected]>
xhci: fix lost bounce buffers on TDs spanning several ring segments

Muhammad Bilal <[email protected]>
staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()

Muhammad Bilal <[email protected]>
staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()

Jeffin Philip <[email protected]>
usb: gadget: fix null pointer dereference in usb_put_function_instance()

Lovekesh Solanki <[email protected]>
USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()

Jeffin Philip <[email protected]>
usb: gadget: f_midi: initialize work in f_midi_alloc()

Ivy Lopez <[email protected]>
usb: gadget: f_midi2: fix use-after-free in string attribute show path

Aleksandr Nogikh <[email protected]>
usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs

Jameson Thies <[email protected]>
usb: typec: ucsi: displayport: Fix OOB altmode array index

Sven Peter <[email protected]>
usb: typec: tipd: Fix Thunderbolt altmode VDOs for cd321x

Amit Sunil Dhamne <[email protected]>
usb: typec: tcpm: constrain TCPM_SOURCING_VBUS event handling

Fan Wu <[email protected]>
usb: typec: qcom-pmic: cancel reset_work on stop

Fan Wu <[email protected]>
usb: typec: qcom-pmic-typec: drain cc_debounce_dwork if port_start() fails

Fan Wu <[email protected]>
usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop

Myeonghun Pak <[email protected]>
usb: storage: realtek_cr: fix use-after-free on disconnect

Elson Serrao <[email protected]>
usb: dwc3: clear forceRM when issuing EndTransfer

Andy Shevchenko <[email protected]>
usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns()

Liu Qi <[email protected]>
usb-storage: ene_ub6250: fix race between scan work and probe

Shuangpeng Bai <[email protected]>
media: usbtv: keep device alive while ALSA card exists

Stephan Gerhold <[email protected]>
clk: qcom: gcc-mdm9607: Increase delay for USB PHY reset

HyeongJun An <[email protected]>
ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()

Griffin Kroah-Hartman <[email protected]>
usb: image: mdc800: change kmalloc() to kzalloc()

Hari Mishal <[email protected]>
drm/amd/display: fix division by zero in get_estimated_bw()

Anton Protopopov <[email protected]>
bpf: fix the return value of push_stack

Linus Torvalds <[email protected]>
drm/xe: Don't hand out the flat CCS storage as usable VRAM

Sun Jian <[email protected]>
fsnotify: inotify: pass mark connector to fsnotify_recalc_mask()

Mario Limonciello <[email protected]>
drm/amd: Drop calls to restore power limit and clock from smu_resume()

Ali Ahmet Memis <[email protected]>
mfd: qnap-mcu: keep the reply buffer alive past a command timeout

FUJITA Tomonori <[email protected]>
objtool/rust: add one more noreturn Rust function

Youngjae Kwon <[email protected]>
fsnotify: Fix stale object mask after concurrent mark updates

Jinjie Ruan <[email protected]>
entry: Fix seccomp bypass after ptrace with TSYNC

Dev Jain <[email protected]>
mm/page_vma_mapped: use huge_ptep_get() for hugetlb

Yuqi Xu <[email protected]>
openvswitch: Fix CT limit teardown use-after-free

Norbert Szetei <[email protected]>
net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()

-------------

Diffstat:

 Documentation/ABI/testing/sysfs-kernel-mm-damon    |   8 +-
 Documentation/admin-guide/cgroup-v1/memory.rst     |  49 +--
 Documentation/trace/hisi-ptt.rst                   |  28 +-
 .../media/v4l/ext-ctrls-colorimetry.rst            |  12 +-
 Makefile                                           |   4 +-
 arch/arm64/include/asm/kvm_nested.h                |  20 ++
 arch/arm64/kernel/cpu_errata.c                     |   2 +-
 arch/arm64/kvm/at.c                                |   2 -
 arch/arm64/kvm/nested.c                            |  94 ++++--
 arch/arm64/kvm/sys_regs.c                          |  11 +
 arch/arm64/kvm/vgic/vgic-init.c                    |   1 +
 arch/arm64/kvm/vgic/vgic-its.c                     |   8 +
 arch/arm64/kvm/vgic/vgic-v3-nested.c               |   2 +-
 arch/arm64/kvm/vgic/vgic-v3.c                      |  12 +-
 arch/arm64/mm/fault.c                              |  12 +-
 arch/loongarch/Kconfig                             |   2 +-
 arch/loongarch/include/asm/kvm_host.h              |   1 +
 arch/loongarch/include/asm/pgtable.h               |   7 +
 arch/loongarch/kernel/acpi.c                       |   3 +-
 arch/loongarch/kernel/kprobes.c                    |   3 +
 arch/loongarch/kernel/rethook_trampoline.S         |   2 -
 arch/loongarch/kvm/exit.c                          |   1 -
 arch/loongarch/kvm/main.c                          |   6 +-
 arch/loongarch/kvm/mmu.c                           |  10 +
 arch/loongarch/kvm/vcpu.c                          |   6 +-
 arch/loongarch/kvm/vm.c                            |   1 +
 arch/loongarch/net/bpf_jit.c                       |  22 +-
 arch/parisc/kernel/head.S                          |   1 +
 arch/powerpc/include/asm/papr-watchdog.h           |  64 ++++
 arch/powerpc/include/asm/reg.h                     |  12 +
 arch/powerpc/kexec/file_load_64.c                  |   2 +-
 arch/powerpc/kexec/ranges.c                        |  12 +-
 arch/powerpc/kvm/book3s_hv.c                       |  15 +-
 arch/powerpc/kvm/powerpc.c                         |   6 +
 arch/powerpc/mm/book3s64/radix_pgtable.c           |   7 +-
 arch/powerpc/platforms/pseries/setup.c             |  28 +-
 arch/s390/include/asm/nmi.h                        |   3 +
 arch/s390/kernel/nmi.c                             |   5 +-
 arch/s390/kvm/guestdbg.c                           |   9 +-
 arch/s390/kvm/interrupt.c                          |  26 +-
 arch/s390/kvm/kvm-s390.c                           |  15 +-
 arch/x86/events/intel/lbr.c                        |  12 +-
 arch/x86/kernel/rtc.c                              |   4 +
 arch/x86/kvm/hyperv.c                              |  25 +-
 arch/x86/kvm/mmu/mmu.c                             | 102 +++---
 arch/x86/kvm/mmu/tdp_iter.h                        |   7 +
 arch/x86/kvm/mmu/tdp_mmu.c                         |  20 +-
 arch/x86/kvm/vmx/nested.c                          |  75 +++--
 arch/x86/kvm/x86.c                                 |   5 +-
 arch/x86/kvm/x86.h                                 |   2 +-
 block/genhd.c                                      |   7 +
 drivers/acpi/acpi_pnp.c                            |   2 +-
 drivers/acpi/acpi_tad.c                            | 186 +++++++----
 drivers/acpi/cppc_acpi.c                           |  13 +-
 drivers/acpi/x86/cmos_rtc.c                        |  13 +-
 drivers/ata/ahci.c                                 |  49 +++
 drivers/block/ublk_drv.c                           |   6 +
 drivers/block/zram/zram_drv.c                      |  65 ++--
 drivers/block/zram/zram_drv.h                      |   1 -
 drivers/clk/mediatek/Kconfig                       |   1 +
 drivers/clk/meson/gxbb.c                           |   2 +-
 drivers/clk/qcom/gcc-mdm9607.c                     | 182 +----------
 drivers/clk/qcom/gcc-msm8916.c                     |   5 +-
 drivers/clk/qcom/gcc-msm8939.c                     |   5 +-
 drivers/clk/rockchip/clk-rk3588.c                  |   2 +-
 drivers/clk/xilinx/clk-xlnx-clock-wizard.c         |   4 +-
 drivers/cpufreq/apple-soc-cpufreq.c                |  36 +--
 drivers/cpufreq/cppc_cpufreq.c                     |   2 +-
 drivers/cpuidle/cpuidle-psci.c                     |  42 +--
 drivers/cpuidle/dt_idle_genpd.c                    |   3 +-
 drivers/crypto/atmel-ecc.c                         |  50 ++-
 drivers/crypto/intel/iaa/iaa_crypto_main.c         | 138 ++++----
 drivers/crypto/intel/iaa/iaa_crypto_stats.c        |   9 +
 drivers/crypto/intel/iaa/iaa_crypto_stats.h        |   2 +
 drivers/cxl/core/Makefile                          |   1 +
 drivers/cxl/core/core.h                            |  11 +-
 drivers/cxl/core/mbox.c                            |   8 -
 drivers/cxl/core/mce.c                             |  27 +-
 drivers/cxl/core/pci.c                             | 115 -------
 drivers/cxl/core/ras_rch.c                         | 136 ++++++++
 drivers/cxl/core/region.c                          | 122 ++++---
 drivers/cxl/cxl.h                                  |   9 +-
 drivers/cxl/cxlmem.h                               |   2 -
 drivers/dax/Makefile                               |   3 +-
 drivers/dax/cxl.c                                  |  27 +-
 drivers/dma/dw-edma/dw-edma-core.c                 |  23 +-
 drivers/dma/dw-edma/dw-hdma-v0-core.c              |   2 +-
 drivers/dma/fsl-edma-trace.h                       |   4 +-
 drivers/firmware/qcom/qcom_scm.c                   |  30 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c   |   7 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |  26 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c            |   1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c            |   6 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c             |   6 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c       |   7 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c             |   8 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c             |   8 +-
 drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c              |  10 +-
 drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c              |  10 +-
 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c           |   3 +-
 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c  |  23 +-
 drivers/gpu/drm/amd/amdkfd/kfd_migrate.c           |  56 ++--
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   6 +
 .../drm/amd/display/amdgpu_dm/amdgpu_dm_color.c    |  13 +
 .../display/dc/link/protocols/link_dp_dpia_bw.c    |   5 +
 drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c          |  13 -
 drivers/gpu/drm/bridge/synopsys/dw-hdmi.c          |   3 +-
 drivers/gpu/drm/drm_atomic_uapi.c                  |   2 +
 drivers/gpu/drm/drm_drv.c                          |  34 +-
 drivers/gpu/drm/gud/gud_connector.c                |  12 +-
 drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c     |  54 +---
 drivers/gpu/drm/i915/i915_pci.c                    |   3 +
 drivers/gpu/drm/msm/dsi/dsi_host.c                 |  12 +
 drivers/gpu/drm/nouveau/include/nvkm/engine/disp.h |   1 +
 drivers/gpu/drm/nouveau/nouveau_chan.c             |   9 +-
 drivers/gpu/drm/nouveau/nouveau_sgdma.c            |   4 +-
 drivers/gpu/drm/nouveau/nouveau_uvmm.c             |   6 +-
 drivers/gpu/drm/nouveau/nvkm/engine/device/base.c  |  10 +-
 drivers/gpu/drm/nouveau/nvkm/engine/disp/Kbuild    |   1 +
 drivers/gpu/drm/nouveau/nvkm/engine/disp/ga102.c   |  13 +-
 drivers/gpu/drm/nouveau/nvkm/engine/disp/gb202.c   | 191 +++++++++++
 drivers/gpu/drm/nouveau/nvkm/engine/disp/gv100.c   |   4 +-
 drivers/gpu/drm/nouveau/nvkm/engine/disp/head.h    |   4 +
 drivers/gpu/drm/nouveau/nvkm/engine/disp/ior.h     |   1 +
 drivers/gpu/drm/nouveau/nvkm/engine/disp/priv.h    |  17 +
 drivers/gpu/drm/nouveau/nvkm/engine/disp/tu102.c   |  86 ++++-
 .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/disp.c | 129 +++-----
 .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/disp.c |  64 ++++
 .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/gsp.c  |   9 +
 .../nouveau/nvkm/subdev/gsp/rm/r570/nvrm/disp.h    |   2 +
 drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/rm.h    |   5 +
 drivers/gpu/drm/panel/panel-edp.c                  |  19 +-
 drivers/gpu/drm/panthor/panthor_fw.c               |  22 +-
 drivers/gpu/drm/solomon/ssd130x.c                  |   9 +-
 drivers/gpu/drm/sun4i/sun4i_backend.c              |   2 +-
 drivers/gpu/drm/sysfb/ofdrm.c                      |   8 +-
 drivers/gpu/drm/sysfb/simpledrm.c                  |  74 ++++-
 drivers/gpu/drm/xe/xe_vram.c                       |  26 +-
 drivers/hid/bpf/hid_bpf_struct_ops.c               |  17 +-
 drivers/hid/hid-mcp2221.c                          |  15 +-
 drivers/hid/hid-rmi.c                              |  46 ++-
 drivers/hid/hid-sony.c                             |  78 ++---
 drivers/hid/wacom_wac.c                            |  13 +
 drivers/i2c/busses/i2c-designware-platdrv.c        |   2 +-
 drivers/i2c/busses/i2c-qcom-geni.c                 |   4 +-
 drivers/i2c/i2c-core-base.c                        |   6 +
 drivers/i2c/i2c-mux.c                              |   1 +
 drivers/i2c/muxes/i2c-demux-pinctrl.c              |   1 +
 drivers/iio/adc/Kconfig                            |   1 +
 drivers/iio/adc/adi-axi-adc.c                      |  30 ++
 drivers/iio/adc/pac1921.c                          |   2 +-
 drivers/iio/adc/ti-ads7138.c                       |  42 ++-
 drivers/iio/chemical/atlas-sensor.c                |  19 +-
 drivers/iio/chemical/sgp30.c                       |   3 +
 drivers/iio/dac/ad3552r-hs.c                       |   2 +-
 drivers/iio/dac/m62332.c                           |  17 +-
 drivers/iio/gyro/mpu3050-core.c                    |   2 +-
 drivers/iio/industrialio-buffer.c                  |  38 ++-
 drivers/iio/light/cm32181.c                        |   2 +-
 drivers/iio/light/gp2ap002.c                       |  10 +-
 drivers/iio/light/ltrf216a.c                       |   3 +-
 drivers/iio/light/opt4001.c                        |  37 +--
 drivers/iio/light/opt4060.c                        |   5 +-
 drivers/iio/pressure/dps310.c                      |   3 +-
 drivers/iio/pressure/mpl115.c                      |  11 +-
 drivers/iio/proximity/srf04.c                      |   1 +
 drivers/iio/temperature/hid-sensor-temperature.c   |   3 +-
 drivers/infiniband/hw/ionic/ionic_hw_stats.c       |  95 +++---
 drivers/infiniband/hw/ionic/ionic_ibdev.h          |  11 +-
 drivers/input/tablet/aiptek.c                      |  13 +-
 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c    |  14 +
 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c        |   9 +-
 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h        |   3 +
 drivers/irqchip/irq-mbigen.c                       |  20 +-
 drivers/irqchip/irq-stm32mp-exti.c                 |   4 +-
 drivers/md/dm.c                                    |  14 +-
 drivers/media/cec/core/cec-adap.c                  |  10 +-
 drivers/media/cec/core/cec-core.c                  |   2 -
 drivers/media/cec/platform/meson/ao-cec-g12a.c     |   1 +
 .../extron-da-hd-4k-plus/extron-da-hd-4k-plus.c    |   3 +-
 drivers/media/dvb-frontends/rtl2832_sdr.c          |  23 +-
 drivers/media/i2c/alvium-csi2.c                    |   2 +-
 drivers/media/i2c/imx355.c                         |   3 +-
 drivers/media/i2c/imx415.c                         |   4 +-
 drivers/media/i2c/ov02a10.c                        |  12 +-
 drivers/media/i2c/ov7740.c                         |   4 +-
 drivers/media/i2c/video-i2c.c                      |   8 +-
 drivers/media/pci/cobalt/cobalt-alsa-main.c        |   1 -
 drivers/media/pci/cx23885/cimax2.c                 |   1 +
 drivers/media/pci/intel/ipu6/ipu6-isys.c           |   1 +
 drivers/media/pci/saa7164/saa7164-core.c           |   8 +-
 drivers/media/pci/zoran/zoran_card.c               |   2 +-
 drivers/media/platform/amphion/venc.c              |   2 -
 .../platform/chips-media/wave5/wave5-vpu-dec.c     |   3 +-
 .../platform/chips-media/wave5/wave5-vpu-enc.c     |   6 +-
 .../media/platform/mediatek/mdp3/mtk-mdp3-core.c   |   6 +-
 .../platform/nxp/imx8-isi/imx8-isi-crossbar.c      |   6 +-
 .../media/platform/nxp/imx8-isi/imx8-isi-video.c   |   2 +-
 drivers/media/platform/qcom/iris/iris_state.c      |   2 +-
 drivers/media/platform/qcom/iris/iris_vidc.c       |  11 +-
 drivers/media/platform/qcom/iris/iris_vpu_common.c |   2 +-
 drivers/media/platform/qcom/venus/hfi_parser.c     |   9 +-
 .../media/platform/renesas/rzg2l-cru/rzg2l-video.c |   5 +
 drivers/media/platform/rockchip/rkvdec/rkvdec.c    |   4 +-
 drivers/media/rc/sunxi-cir.c                       |   9 +-
 drivers/media/test-drivers/vimc/vimc-capture.c     |   4 +-
 drivers/media/tuners/tda18250.c                    |   4 +-
 drivers/media/usb/airspy/airspy.c                  |  19 +-
 drivers/media/usb/cx231xx/cx231xx-video.c          |   4 +-
 drivers/media/usb/em28xx/em28xx-cards.c            |   3 +-
 drivers/media/usb/em28xx/em28xx-core.c             |   2 +
 drivers/media/usb/go7007/snd-go7007.c              |  10 +-
 drivers/media/usb/s2255/s2255drv.c                 |  11 +
 drivers/media/usb/usbtv/usbtv-audio.c              |  11 +
 drivers/media/v4l2-core/v4l2-async.c               |   1 -
 drivers/media/v4l2-core/v4l2-ctrls-core.c          |  49 ++-
 drivers/media/v4l2-core/v4l2-fwnode.c              |   2 +
 drivers/mfd/qnap-mcu.c                             |  13 +-
 drivers/mtd/mtdoops.c                              |   3 +
 drivers/mtd/nand/ecc-realtek.c                     |   1 +
 drivers/mtd/nand/raw/nand_onfi.c                   |  27 +-
 drivers/mtd/parsers/afs.c                          |   7 +
 drivers/nvdimm/btt.c                               |   8 +
 drivers/nvme/host/core.c                           |   3 +
 drivers/nvme/host/fabrics.c                        |   2 +
 drivers/nvme/host/fc.c                             |  26 +-
 drivers/nvme/host/tcp.c                            |   7 +
 drivers/nvme/target/auth.c                         |   6 +
 drivers/nvme/target/core.c                         |   2 +-
 drivers/nvme/target/nvmet.h                        |   2 +
 drivers/nvme/target/tcp.c                          |  10 +
 drivers/parisc/eisa.c                              |   5 +
 drivers/pci/controller/plda/pcie-starfive.c        |  36 ++-
 drivers/pmdomain/mediatek/Kconfig                  |   5 +-
 drivers/power/supply/ab8500_fg.c                   |  32 +-
 drivers/remoteproc/qcom_q6v5_pas.c                 |   9 +-
 drivers/rtc/rtc-cmos.c                             |  10 +
 drivers/rtc/rtc-rzn1.c                             |  30 +-
 drivers/s390/crypto/vfio_ap_ops.c                  | 203 ++++++++----
 drivers/scsi/fnic/fip.c                            |   2 +-
 drivers/scsi/megaraid/megaraid_sas_base.c          |  13 +-
 drivers/scsi/pm8001/pm8001_init.c                  |   4 +-
 drivers/scsi/qla2xxx/qla_attr.c                    |   6 +-
 drivers/scsi/qla2xxx/qla_bsg.c                     |  39 ++-
 drivers/scsi/qla2xxx/qla_dbg.c                     |   2 +-
 drivers/scsi/qla2xxx/qla_dfs.c                     |   4 +-
 drivers/scsi/qla2xxx/qla_edif.c                    |   3 +
 drivers/scsi/qla2xxx/qla_gs.c                      |   4 +-
 drivers/scsi/qla2xxx/qla_init.c                    |  61 +++-
 drivers/scsi/qla2xxx/qla_inline.h                  |  13 +
 drivers/scsi/qla2xxx/qla_isr.c                     |  39 ++-
 drivers/scsi/qla2xxx/qla_mbx.c                     |  28 +-
 drivers/scsi/qla2xxx/qla_nvme.c                    |  31 +-
 drivers/scsi/qla2xxx/qla_os.c                      |  14 +-
 drivers/soc/qcom/qcom-geni-se.c                    |  24 +-
 drivers/spi/spi-bcm63xx-hsspi.c                    |   8 +-
 drivers/spi/spi-bcm63xx.c                          |   6 +-
 drivers/spi/spi-bcmbca-hsspi.c                     |   8 +-
 drivers/spi/spi.c                                  |  34 +-
 drivers/staging/media/meson/vdec/vdec.c            |   4 +-
 drivers/staging/media/sunxi/cedrus/cedrus.c        |   4 +-
 drivers/staging/rtl8723bs/core/rtw_ieee80211.c     |   7 +
 drivers/target/iscsi/iscsi_target_login.c          |   2 +-
 drivers/thermal/imx_thermal.c                      |   9 +-
 drivers/thermal/qoriq_thermal.c                    |  13 +-
 drivers/usb/dwc3/ep0.c                             |   2 +-
 drivers/usb/dwc3/gadget.c                          |  21 +-
 drivers/usb/gadget/function/f_fs.c                 |  31 +-
 drivers/usb/gadget/function/f_mass_storage.c       |   2 +-
 drivers/usb/gadget/function/f_midi.c               |   2 +-
 drivers/usb/gadget/function/f_midi2.c              |  17 +-
 drivers/usb/gadget/functions.c                     |   2 +-
 drivers/usb/gadget/legacy/inode.c                  |   3 +-
 drivers/usb/host/xhci-debugfs.c                    |  21 +-
 drivers/usb/host/xhci-hub.c                        | 117 ++++---
 drivers/usb/host/xhci-mem.c                        |  34 +-
 drivers/usb/host/xhci-pci.c                        |   6 +-
 drivers/usb/host/xhci-ring.c                       |  40 ++-
 drivers/usb/host/xhci-tegra.c                      |  12 +-
 drivers/usb/host/xhci-trace.h                      |   5 +
 drivers/usb/host/xhci.c                            |  81 +++--
 drivers/usb/host/xhci.h                            |  46 ++-
 drivers/usb/image/mdc800.c                         |   4 +-
 drivers/usb/storage/ene_ub6250.c                   |   2 +
 drivers/usb/storage/realtek_cr.c                   |   9 +-
 .../usb/typec/tcpm/qcom/qcom_pmic_typec_pdphy.c    |   2 +
 drivers/usb/typec/tcpm/qcom/qcom_pmic_typec_port.c |   5 +
 drivers/usb/typec/tcpm/tcpm.c                      |  28 +-
 drivers/usb/typec/tipd/core.c                      |  17 +-
 drivers/usb/typec/tipd/tps6598x.h                  |   4 +-
 drivers/usb/typec/ucsi/displayport.c               |   2 +-
 drivers/watchdog/pseries-wdt.c                     |  53 +--
 drivers/xen/balloon.c                              |  56 ++--
 fs/afs/callback.c                                  |   1 +
 fs/ceph/caps.c                                     |  63 +++-
 fs/ceph/crypto.c                                   |  46 ++-
 fs/ceph/mds_client.c                               |  71 +++-
 fs/ceph/mds_client.h                               |   2 +
 fs/ceph/super.h                                    |  13 +
 fs/erofs/zutil.c                                   |   2 +
 fs/f2fs/data.c                                     |   5 +-
 fs/f2fs/dir.c                                      |   7 +-
 fs/f2fs/file.c                                     | 154 ++++++---
 fs/f2fs/gc.c                                       |   2 +-
 fs/f2fs/inline.c                                   |   2 +-
 fs/f2fs/namei.c                                    |  17 +-
 fs/f2fs/node.c                                     |   9 +-
 fs/f2fs/sysfs.c                                    |   7 +-
 fs/f2fs/xattr.c                                    |   2 +-
 fs/fuse/args.h                                     |  65 ++++
 fs/fuse/cuse.c                                     |   7 +-
 fs/fuse/dev.c                                      |  44 +--
 fs/fuse/dev_uring.c                                | 189 +++++++----
 fs/fuse/file.c                                     |  22 +-
 fs/fuse/fuse_i.h                                   |  53 +--
 fs/fuse/inode.c                                    |  10 +-
 fs/lockd/svcsubs.c                                 |   2 +-
 fs/nfsd/filecache.c                                | 115 +++----
 fs/nfsd/netns.h                                    |  11 +-
 fs/nfsd/nfs4proc.c                                 | 139 ++++++--
 fs/nfsd/nfs4state.c                                | 170 +++++++---
 fs/nfsd/nfsctl.c                                   |  25 +-
 fs/nfsd/nfsd.h                                     |  15 -
 fs/nfsd/state.h                                    |   2 +-
 fs/notify/fanotify/fanotify_user.c                 |  12 +-
 fs/notify/inotify/inotify_user.c                   |  15 +-
 fs/ntfs3/frecord.c                                 |  20 +-
 fs/ocfs2/dir.c                                     |  71 +++-
 fs/overlayfs/dir.c                                 |   1 -
 fs/pidfs.c                                         | 136 +++++---
 fs/smb/client/cifs_debug.c                         |   4 +-
 fs/smb/client/cifs_spnego.h                        |   2 -
 fs/smb/client/cifs_unicode.h                       |   3 -
 fs/smb/client/cifsfs.c                             |   5 +-
 fs/smb/client/cifsfs.h                             |   6 +-
 fs/smb/client/cifsglob.h                           |  10 +-
 fs/smb/client/cifsproto.h                          |  29 +-
 fs/smb/client/cifssmb.c                            | 146 +++++++++
 fs/smb/client/compress.c                           |  21 +-
 fs/smb/client/compress.h                           |  19 +-
 fs/smb/client/connect.c                            | 142 --------
 fs/smb/client/dir.c                                |   2 +-
 fs/smb/client/dns_resolve.h                        |   4 -
 fs/smb/client/fs_context.c                         |   2 +-
 fs/smb/client/fs_context.h                         |  16 +-
 fs/smb/client/fscache.h                            |  10 +-
 fs/smb/client/inode.c                              |  61 +++-
 fs/smb/client/misc.c                               |   1 +
 fs/smb/client/netmisc.c                            |   2 +-
 fs/smb/client/smb1ops.c                            | 171 ----------
 fs/smb/client/smb1proto.h                          |  40 +++
 fs/smb/client/smb1transport.c                      | 198 ++++++++++++
 fs/smb/client/smb2file.c                           |   3 +-
 fs/smb/client/smb2inode.c                          |   1 -
 fs/smb/client/smb2maperror.c                       |   3 +-
 fs/smb/client/smb2ops.c                            |  99 ++++--
 fs/smb/client/smb2pdu.c                            |   5 +-
 fs/smb/client/smb2proto.h                          |  14 +-
 fs/smb/client/trace.h                              | 151 +++++++++
 fs/smb/server/oplock.c                             |  61 +++-
 include/linux/acpi.h                               |  14 +
 include/linux/firmware/qcom/qcom_scm.h             |  10 +-
 include/linux/huge_mm.h                            |   7 +-
 include/linux/hugetlb.h                            |   5 +
 include/linux/kprobes.h                            |   1 +
 include/linux/lockd/lockd.h                        |   2 +-
 include/linux/memcontrol.h                         |  10 +
 include/linux/mm.h                                 |   2 -
 include/linux/rmap.h                               |   9 +-
 include/linux/soc/qcom/geni-se.h                   |   4 +
 include/net/dst.h                                  |   6 +
 include/net/ip.h                                   |  25 ++
 include/net/ip6_route.h                            |  43 +++
 include/net/ipv6.h                                 |  10 +-
 include/net/tcp.h                                  |   5 +
 kernel/bpf/percpu_freelist.c                       |  35 +-
 kernel/bpf/percpu_freelist.h                       |   1 +
 kernel/bpf/stackmap.c                              | 173 ++++++----
 kernel/bpf/verifier.c                              |  81 ++---
 kernel/dma/direct.c                                |  18 +-
 kernel/entry/syscall-common.c                      |   3 +
 kernel/futex/requeue.c                             |  12 +-
 kernel/kprobes.c                                   |  14 +-
 kernel/sched/core.c                                |  60 ++--
 kernel/sched/deadline.c                            |   8 +-
 kernel/sched/ext.c                                 |  17 +-
 kernel/sched/fair.c                                |   4 +-
 kernel/sched/idle.c                                |   2 +-
 kernel/sched/rt.c                                  |   8 +-
 kernel/sched/sched.h                               |  12 +-
 kernel/sched/stop_task.c                           |   2 +-
 kernel/trace/ftrace.c                              |  13 +-
 kernel/trace/ring_buffer.c                         |  20 +-
 mm/damon/core.c                                    |  22 +-
 mm/damon/ops-common.c                              |   5 +-
 mm/damon/paddr.c                                   |  20 +-
 mm/damon/sysfs-schemes.c                           |  18 +-
 mm/damon/sysfs.c                                   |  23 +-
 mm/damon/tests/core-kunit.h                        |  15 +-
 mm/damon/tests/vaddr-kunit.h                       |   5 +
 mm/damon/vaddr.c                                   |  34 +-
 mm/huge_memory.c                                   | 358 ++++++++++++---------
 mm/hugetlb.c                                       |  25 +-
 mm/hugetlb_cgroup.c                                |   7 +-
 mm/hugetlb_vmemmap.c                               | 298 +++++++----------
 mm/memcontrol-v1.c                                 |  43 ++-
 mm/memcontrol.c                                    |  13 +
 mm/mempolicy.c                                     |   2 +-
 mm/migrate.c                                       |  12 +-
 mm/mm_init.c                                       |   1 +
 mm/page_alloc.c                                    |   6 +-
 mm/page_vma_mapped.c                               |   8 +-
 mm/rmap.c                                          |  15 +-
 mm/slab.h                                          |   8 +-
 mm/slab_common.c                                   |  44 ++-
 mm/slub.c                                          | 108 +++----
 mm/sparse-vmemmap.c                                |  53 ---
 mm/userfaultfd.c                                   |   4 +-
 mm/vmscan.c                                        |  41 +--
 net/8021q/vlan.c                                   |   7 +-
 net/8021q/vlan_dev.c                               |  32 +-
 net/batman-adv/bridge_loop_avoidance.c             |  15 +-
 net/batman-adv/distributed-arp-table.c             |   8 +-
 net/batman-adv/main.c                              |   4 +
 net/batman-adv/multicast_forw.c                    |   7 +-
 net/core/skbuff.c                                  |   5 +-
 net/ipv4/icmp.c                                    |   2 +-
 net/ipv4/ip_output.c                               |   4 +-
 net/ipv4/ip_sockglue.c                             |   2 +-
 net/ipv4/ipmr.c                                    |   2 +-
 net/ipv4/netfilter/nf_reject_ipv4.c                |   2 +-
 net/ipv4/route.c                                   |   4 +-
 net/ipv4/tcp_ipv4.c                                |  15 +-
 net/ipv4/tcp_minisocks.c                           |   2 +-
 net/ipv4/tcp_output.c                              |   6 +-
 net/ipv6/exthdrs.c                                 |  55 ++--
 net/ipv6/ip6_gre.c                                 |   2 +-
 net/ipv6/ip6_output.c                              |  47 +--
 net/ipv6/ip6_tunnel.c                              |   6 +-
 net/ipv6/ipv6_sockglue.c                           |   4 +-
 net/ipv6/route.c                                   |  10 +-
 net/ipv6/sit.c                                     |   2 +-
 net/ipv6/tcp_ipv6.c                                |  11 +-
 net/openvswitch/conntrack.c                        | 121 ++++---
 net/openvswitch/conntrack.h                        |   6 +-
 net/openvswitch/datapath.c                         |  10 +-
 net/openvswitch/datapath.h                         |   8 +-
 net/packet/af_packet.c                             |  96 +++++-
 net/sunrpc/auth_gss/gss_rpc_xdr.c                  |   9 +-
 net/sunrpc/xprtrdma/ib_client.c                    |  26 +-
 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c            |  12 +-
 net/sunrpc/xprtrdma/svc_rdma_rw.c                  |   5 +-
 net/sunrpc/xprtrdma/svc_rdma_transport.c           |  32 +-
 rust/kernel/bug.rs                                 |  10 +-
 rust/kernel/devres.rs                              | 163 ++++------
 rust/kernel/drm/ioctl.rs                           |   6 +
 samples/damon/mtier.c                              |  14 +-
 samples/damon/prcl.c                               |  11 +-
 samples/damon/wsse.c                               |  11 +-
 security/integrity/ima/ima_appraise.c              |   2 +
 sound/core/pcm_native.c                            |   2 +
 sound/core/rawmidi.c                               |   2 +-
 sound/parisc/harmony.c                             |   6 +-
 sound/soc/codecs/adau1761.c                        |  34 +-
 sound/soc/codecs/aw88261.c                         |  30 +-
 sound/soc/codecs/aw88261.h                         |   6 -
 sound/soc/codecs/cs35l33.c                         |  14 +-
 sound/soc/codecs/cs35l34.c                         |  14 +-
 sound/soc/codecs/cx2072x.c                         | 134 ++++----
 sound/soc/codecs/hdac_hda.c                        |   4 +-
 sound/soc/codecs/max9860.c                         |   2 +-
 sound/soc/codecs/ml26124.c                         |   4 +-
 sound/soc/codecs/pcm512x.c                         |  40 +--
 sound/soc/codecs/pm4125-sdw.c                      |   2 +-
 sound/soc/codecs/rt1017-sdca-sdw.h                 |  10 +-
 sound/soc/codecs/rt1316-sdw.c                      |   2 +-
 sound/soc/codecs/rt1318-sdw.c                      |   2 +-
 sound/soc/codecs/rt1318.c                          |   4 +-
 sound/soc/codecs/rt274.c                           |   8 +-
 sound/soc/codecs/rt286.c                           |  14 +-
 sound/soc/codecs/rt298.c                           |  14 +-
 sound/soc/codecs/rt700-sdw.h                       |  11 +-
 sound/soc/codecs/rt711-sdca-sdw.h                  |   6 +-
 sound/soc/codecs/rt711-sdw.h                       |  10 +-
 sound/soc/codecs/rt712-sdca-dmic.h                 |   6 +-
 sound/soc/codecs/rt712-sdca-sdw.h                  |  11 +-
 sound/soc/codecs/rt715-sdca-sdw.h                  |  48 ++-
 sound/soc/codecs/rt715-sdw.h                       |  32 +-
 sound/soc/codecs/rt721-sdca-sdw.h                  |  44 +--
 sound/soc/codecs/sgtl5000.c                        |   2 +-
 sound/soc/codecs/sti-sas.c                         |   2 +-
 sound/soc/codecs/tas2552.c                         |  14 +-
 sound/soc/codecs/tas2764.c                         |   2 +-
 sound/soc/codecs/tas2780.c                         |   2 +-
 sound/soc/codecs/tas2783-sdw.c                     | 177 +++++-----
 sound/soc/fsl/fsl_easrc.c                          |   8 +-
 sound/soc/fsl/mpc5200_psc_i2s.c                    |   1 +
 sound/soc/intel/atom/sst/sst_pci.c                 |   4 +-
 sound/soc/loongson/loongson_card.c                 |   6 +-
 sound/soc/samsung/aries_wm8994.c                   |   1 +
 sound/soc/tegra/tegra210_admaif.c                  | 210 ++++++++----
 sound/soc/tegra/tegra210_i2s.c                     |   8 +-
 sound/soc/tegra/tegra210_mbdrc.c                   |  42 +--
 sound/soc/tegra/tegra210_mixer.c                   |  10 +-
 sound/usb/midi.c                                   |   2 +
 tools/objtool/check.c                              |   3 +-
 .../util/bpf_skel/augmented_raw_syscalls.bpf.c     | 155 +++++----
 .../util/hisi-ptt-decoder/hisi-ptt-pkt-decoder.c   |  47 +--
 .../util/hisi-ptt-decoder/hisi-ptt-pkt-decoder.h   |  12 +
 tools/sched_ext/scx_qmap.bpf.c                     |   2 +-
 tools/testing/cxl/Kbuild                           |   1 +
 511 files changed, 7548 insertions(+), 4554 deletions(-)

Read the cover letter in its thread