7.2.8-rc1 review

Greg Kroah-Hartman linux-iommu linux-patches lkml stable 1 version Sep 23 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Sep 23438 patches 15 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/438	selftests/landlock: Use an actual chardev for MAKE_CHAR audit test`tools/testing/selftests/landlock/fs_test.c`	+1 -1	0 replies
2/438	selftests/landlock: Add tests for whiteout object creation`tools/testing/selftests/landlock/fs_test.c`	+176 -0	0 replies
3/438	selftests/landlock: Add audit test for whiteout object creation`tools/testing/selftests/landlock/fs_test.c`	+19 -0	0 replies
4/438	sunvdc: fix -EIO issue due to lack of retries`drivers/block/sunvdc.c`	+8 -1	0 replies
5/438	xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()`net/xfrm/xfrm_iptfs.c`	+8 -0	0 replies
6/438	xfrm: add missing RCU read lock in xfrm_send_migrate_state()`net/xfrm/xfrm_user.c`	+5 -1	0 replies
7/438	xfrm: iptfs: fix runt reassembly panic from short inner tot_len`net/xfrm/xfrm_iptfs.c`	+2 -2	0 replies
8/438	xfrm: fix compat ALLOCSPI request use-after-free`net/xfrm/xfrm_user.c`	+0 ~~-12~~	0 replies
9/438	xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()`net/xfrm/xfrm_input.c`	+11 -0	0 replies
10/438	esp: downgrade zerocopy managed frags before mutating skb frags`net/ipv4/esp4.c` `net/ipv6/esp6.c`	+12 -0	0 replies
11/438	arm64: dts: amlogic: t7: use the real UART pclk`arch/arm64/boot/dts/amlogic/amlogic-t7-a311d2-an400.dts` `arch/arm64/boot/dts/amlogic/amlogic-t7-a311d2-khadas-vim4.dts`	+2 -2	0 replies
12/438	arm64: dts: amlogic: t7: khadas-vim4: allow the SD card to be power cycled`arch/arm64/boot/dts/amlogic/amlogic-t7-a311d2-khadas-vim4.dts`	+0 -1	0 replies
13/438	arm64: dts: amlogic: t7: fix the pin groups of two PWM outputs`arch/arm64/boot/dts/amlogic/amlogic-t7.dtsi`	+28 -4	0 replies
14/438	arm64: dts: amlogic: t7: khadas-vim4: add the PWM-driven supplies`arch/arm64/boot/dts/amlogic/amlogic-t7-a311d2-khadas-vim4.dts`	+109 -1	0 replies
15/438	arm64: dts: amlogic: t7: fix the pin groups of the vsync PWM`arch/arm64/boot/dts/amlogic/amlogic-t7.dtsi`	+10 -2	0 replies
16/438	ARM: socfpga: select the PL310 erratum 753970 workaround`arch/arm/mach-socfpga/Kconfig`	+1 -1	0 replies
17/438	RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept`drivers/infiniband/sw/siw/siw_cm.c`	+5 -2	0 replies
18/438	RDMA/rxe: validate access flags before swapping the MRs PD`drivers/infiniband/sw/rxe/rxe_verbs.c`	+7 -6	0 replies
19/438	RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access`drivers/infiniband/sw/rxe/rxe_mr.c`	+2 -1	0 replies
20/438	xfrm: hold net_device reference under RCU in bundle creation`net/xfrm/xfrm_policy.c`	+15 -5	0 replies
21/438	firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS`drivers/firmware/arm_scpi.c`	+2 -2	0 replies
22/438	clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate`drivers/clk/clk-scpi.c`	+1 -1	0 replies
23/438	clk: scpi: register scpi-cpufreq once and clear on failure`drivers/clk/clk-scpi.c`	+5 -1	0 replies
24/438	RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths`drivers/infiniband/sw/rxe/rxe_odp.c`	+11 -5	0 replies
25/438	RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds`drivers/infiniband/sw/rxe/rxe_mcast.c`	+36 ~~-14~~	0 replies
26/438	RDMA/mlx5: Remove warn on missing representor in query_port_speed`drivers/infiniband/hw/mlx5/main.c`	+2 -5	0 replies
27/438	RDMA/core: Reject unregistering netdevs in ib_get_eth_speed`drivers/infiniband/core/verbs.c`	+8 -4	0 replies
28/438	RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency`drivers/infiniband/core/rdma_core.c` `drivers/infiniband/core/uverbs_main.c` `include/rdma/uverbs_types.h`	+11 ~~-17~~	0 replies
29/438	power: sequencing: Fix build issue with COMPILE_TEST`drivers/power/sequencing/Kconfig`	+2 -1	0 replies
30/438	arm64: dts: renesas: r9a09g057: Switch GBETH TX queue scheduling to WRR`arch/arm64/boot/dts/renesas/r9a09g057.dtsi`	+10 -0	0 replies
31/438	arm64: dts: renesas: r9a09g056: Switch GBETH TX queue scheduling to WRR`arch/arm64/boot/dts/renesas/r9a09g056.dtsi`	+10 -0	0 replies
32/438	arm64: dts: renesas: r9a09g047: Switch GBETH TX queue scheduling to WRR`arch/arm64/boot/dts/renesas/r9a09g047.dtsi`	+10 -0	0 replies
33/438	arm64: dts: renesas: r9a09g077: Switch GBETH TX queue scheduling to WRR`arch/arm64/boot/dts/renesas/r9a09g077.dtsi`	+27 -0	0 replies
34/438	arm64: dts: renesas: r9a09g087: Switch GBETH TX queue scheduling to WRR`arch/arm64/boot/dts/renesas/r9a09g087.dtsi`	+27 -0	0 replies
35/438	IB/iser: reject a remote invalidation of an unregistered direction`drivers/infiniband/ulp/iser/iser_initiator.c`	+11 -5	0 replies
36/438	IB/isert: wait for deferred control PDU completions before releasing the connection`drivers/infiniband/ulp/isert/ib_isert.c` `drivers/infiniband/ulp/isert/ib_isert.h`	+24 -0	0 replies
37/438	RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup`drivers/infiniband/hw/bnxt_re/main.c`	+8 -2	0 replies
38/438	RDMA/rtrs: guard against null kobj name`drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h` `drivers/infiniband/ulp/rtrs/rtrs-srv-trace.h`	+2 -2	0 replies
39/438	RDMA/bnxt_re: Avoid exposing umdbr to userspace`drivers/infiniband/hw/bnxt_re/uapi.c` `include/uapi/rdma/bnxt_re-abi.h`	+3 -5	0 replies
40/438	RDMA/uverbs: Fix potential leak of resources->collection in flow_resources_alloc()`drivers/infiniband/core/uverbs_flow.c`	+1 -0	0 replies
41/438	RDMA/mad: Fix receive buffer leak when PKey enforcement fails`drivers/infiniband/core/mad.c`	+2 -1	0 replies
42/438	RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables`drivers/infiniband/hw/erdma/erdma_main.c` `drivers/infiniband/hw/erdma/erdma_verbs.c`	+11 ~~-11~~	0 replies
43/438	RDMA/irdma: Enforce local fence for IB_WR_REG_MR`drivers/infiniband/hw/irdma/verbs.c`	+1 -1	0 replies
44/438	RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted`drivers/infiniband/ulp/rtrs/rtrs-clt.c` `drivers/infiniband/ulp/rtrs/rtrs-clt.h`	+10 -0	0 replies
45/438	dmaengine: mmp_pdma: fix wrong extended DRCMR base for SpacemiT K3`drivers/dma/mmp_pdma.c`	+1 -2	0 replies
46/438	dmaengine: sprd: Fix runtime PM reference leak in probe`drivers/dma/sprd-dma.c`	+1 -2	0 replies
47/438	wifi: mac80211: include TIM bitmap control for buffered S1G mcast traffic`net/mac80211/tx.c`	+22 ~~-19~~	0 replies
48/438	wifi: virt_wifi: free skb when disconnected`drivers/net/wireless/virtual/virt_wifi.c`	+1 -0	0 replies
49/438	wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path`drivers/net/wireless/marvell/mwifiex/pcie.c`	+1 -1	0 replies
50/438	wifi: brcmfmac: cyw: pass PMKID to firmware if present`drivers/net/wireless/broadcom/brcm80211/brcmfmac/cyw/core.c`	+4 -1	0 replies
51/438	wifi: libipw: reject too-short beacon and probe responses`drivers/net/wireless/intel/ipw2x00/libipw_rx.c`	+3 -0	0 replies
52/438	wifi: libipw: reject too-short association responses`drivers/net/wireless/intel/ipw2x00/libipw_rx.c`	+3 -0	0 replies
53/438	IB/IPoIB: Avoid restoring OPER_UP after multicast flush`drivers/infiniband/ulp/ipoib/ipoib.h` `drivers/infiniband/ulp/ipoib/ipoib_ib.c` `drivers/infiniband/ulp/ipoib/ipoib_multicast.c`	+22 ~~-13~~	0 replies
54/438	wifi: cfg80211: dont get the radio mask for netdev-less wdevs`net/wireless/util.c`	+4 -5	0 replies
55/438	wifi: cfg80211: check IP header size in cfg80211_classify8021d()`net/wireless/util.c`	+22 -4	0 replies
56/438	soundwire: cadence_master: wait and cancel cdns->work before clock stop`drivers/soundwire/cadence_master.c`	+7 -0	0 replies
57/438	mips: econet: fix unmet dependencies for ECONET`arch/mips/Kconfig`	+0 -3	0 replies
58/438	MIPS: Octeon: apply USB FDT fixups also when USB is modular`arch/mips/cavium-octeon/octeon-platform.c`	+2 -2	0 replies
59/438	dma-coherent: report a failed reserved memory assignment`kernel/dma/coherent.c`	+1 -2	0 replies
60/438	dma-mapping: dont trace the DMA address when the allocation fails`include/trace/events/dma.h`	+1 -1	0 replies
61/438	dmaengine: Fix device kref underflow in dma_chan_put()`drivers/dma/dmaengine.c`	+3 -1	0 replies
62/438	dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()`drivers/dma/dmaengine.c`	+4 -1	0 replies
63/438	dmaengine: wait for RCU readers before releasing dma_device`drivers/dma/dmaengine.c`	+1 -0	0 replies
64/438	wifi: cfg80211: dont free driver-owned scan requests`net/wireless/core.c` `net/wireless/core.h` `net/wireless/rdev-ops.h` +1 more	+47 -8	0 replies
65/438	wifi: cfg80211: only group hidden BSSes with beacon entries`net/wireless/scan.c`	+7 -0	0 replies
66/438	wifi: cfg80211: dont filter by BSS type when removing stale entries`net/wireless/scan.c`	+0 -5	0 replies
67/438	wifi: cfg80211: ibss: ref BSS entry for joined event`net/wireless/core.h` `net/wireless/ibss.c` `net/wireless/util.c`	+23 ~~-22~~	0 replies
68/438	wifi: cfg80211: fix NAN regulatory enforcement`net/wireless/reg.c`	+1 -1	0 replies
69/438	wifi: mac80211: dont start a ROC while scanning`net/mac80211/offchannel.c`	+7 -0	0 replies
70/438	wifi: mac80211: dont warn when an IBSS has no channel to scan`net/mac80211/scan.c`	+1 -1	0 replies
71/438	wifi: mac80211: dont offload TC setup on AP_VLAN interfaces`net/mac80211/iface.c`	+3 -0	0 replies
72/438	wifi: mac80211: suppress chanctx warning for debugfs reset`net/mac80211/cfg.c` `net/mac80211/debugfs.c` `net/mac80211/ieee80211_i.h` +1 more	+8 -6	0 replies
73/438	wifi: mac80211: abort chanswitch when leaving a mesh`net/mac80211/mesh.c`	+4 -0	0 replies
74/438	wifi: mac80211: reset state when starting AP fails`net/mac80211/cfg.c`	+3 -0	0 replies
75/438	wifi: mac80211: reset the LED state when ifup fails`net/mac80211/iface.c`	+5 -1	0 replies
76/438	wifi: mac80211: only operate on TDLS peers in the TDLS code`net/mac80211/tdls.c`	+9 ~~-12~~	0 replies
77/438	wifi: cfg80211: restore netns_immutable on failures`net/wireless/core.c`	+1 -1	0 replies
78/438	wifi: cfg80211: undo netns switch if renaming the wiphy fails`net/wireless/core.c`	+50 ~~-38~~	0 replies
79/438	wifi: mac80211: unlist vifs when their netdev is unregistered`net/mac80211/iface.c`	+25 -1	0 replies
80/438	wifi: cfg80211: get the wiphy out of a dying network namespace`net/wireless/core.c`	+25 ~~-12~~	0 replies
81/438	wifi: mac80211_hwsim: dont hand frames to mac80211 while stopping`drivers/net/wireless/virtual/mac80211_hwsim_main.c`	+24 ~~-15~~	0 replies
82/438	wifi: mac80211: dont allow injecting frames wider than the chanctx`include/net/mac80211.h` `net/mac80211/iface.c` `net/mac80211/tx.c`	+31 -4	0 replies
83/438	wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown`net/mac80211/iface.c`	+2 -0	0 replies
84/438	wifi: mac80211: require a peer station for TDLS setup confirm`net/mac80211/tdls.c`	+18 -1	0 replies
85/438	wifi: mac80211: dont allow link changes when iface is down`net/mac80211/debugfs_netdev.c`	+3 -0	0 replies
86/438	wifi: mac80211: dont RCU-dereference the mesh CSA settings we just set`net/mac80211/mesh.c`	+0 -1	0 replies
87/438	wifi: mac80211: dont access the TSF of a down interface`net/mac80211/debugfs_netdev.c`	+6 -0	0 replies
88/438	wifi: mac80211: add HE 6 GHz capability in the scan elems len`net/mac80211/main.c`	+4 -0	0 replies
89/438	wifi: mac80211: mesh: reset the CSA state when leaving`net/mac80211/mesh.c`	+18 ~~-11~~	0 replies
90/438	wifi: mac80211: mesh: release the channel if start fails`net/mac80211/cfg.c`	+5 -1	0 replies
91/438	wifi: mac80211: set up the TX info early to fix failure paths`net/mac80211/tx.c`	+20 ~~-18~~	0 replies
92/438	mm: memblock: show all region flags in debugfs`mm/memblock.c`	+11 -7	0 replies
93/438	scsi: pm80xx: Fix the use_msix, use_tasklet and read_wwn parameter descriptions`drivers/scsi/pm8001/pm8001_init.c`	+3 -3	0 replies
94/438	scsi: qla2xxx: Fix the ql2xfc2target parameter description`drivers/scsi/qla2xxx/qla_os.c`	+1 -1	0 replies
95/438	dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order`drivers/dma/xilinx/xilinx_dma.c`	+1 -1	0 replies
96/438	dmaengine: pxa: fix double counting of the hw descriptors`drivers/dma/pxa_dma.c`	+2 -1	0 replies
97/438	dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA`drivers/dma/xilinx/xilinx_dma.c`	+17 -7	0 replies
98/438	RDMA/efa: Keep admin queues alive while IRQ is registered`drivers/infiniband/hw/efa/efa_com.c` `drivers/infiniband/hw/efa/efa_main.c`	+10 -9	0 replies
99/438	RDMA/efa: Keep EQ resources alive while IRQ is registered`drivers/infiniband/hw/efa/efa_com.c` `drivers/infiniband/hw/efa/efa_com.h` `drivers/infiniband/hw/efa/efa_main.c`	+12 ~~-10~~	0 replies
100/438	RDMA/siw: Bound fragmented header copies by the remaining length`drivers/infiniband/sw/siw/siw_qp_rx.c`	+1 -1	0 replies
101/438	x86/div64: Fix addition of large constants in mul_u64_add_u64_div_u64()`arch/x86/include/asm/div64.h`	+1 -1	0 replies
102/438	drm/msm: Fix the separate_gpu_kms parameter description`drivers/gpu/drm/msm/msm_drv.c`	+1 -1	0 replies
103/438	drm/msm/adreno: Fix the skip_gpu parameter description`drivers/gpu/drm/msm/adreno/adreno_device.c`	+1 -1	0 replies
104/438	dma-buf: Make DMABUF_DEBUG default to y on DEBUG_KERNEL kernels`drivers/dma-buf/Kconfig`	+1 -1	3 replies
105/438	netfilter: nft_nat: fully initialise new_addr in netmap setup`net/netfilter/nft_nat.c`	+1 -1	0 replies
106/438	netfilter: nf_tables: fix device name and prefix match in hook lookup`net/netfilter/nf_tables_api.c`	+13 -9	0 replies
107/438	netfilter: nf_nat: unregister and release hooks on error`net/netfilter/nf_nat_core.c`	+30 ~~-16~~	0 replies
108/438	netfilter: flowtable: hold reference on ct until flow is released`net/netfilter/nf_flow_table_core.c`	+10 -2	0 replies
109/438	perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations`drivers/perf/arm-cmn.c`	+7 -3	0 replies
110/438	arm64: hibernate: clone only the linear map that exists at runtime`arch/arm64/kernel/hibernate.c`	+2 -2	0 replies
111/438	arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation`Documentation/arch/arm64/memory-tagging-extension.rst` `arch/arm64/kernel/mte.c`	+3 -4	0 replies
112/438	drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr`drivers/gpu/drm/drm_atomic_uapi.c`	+10 -3	0 replies
113/438	smb: client: validate absolute native symlink targets before NT fixups`fs/smb/client/reparse.c`	+17 -7	0 replies
114/438	keys: fix lost wakeup when reaping a dead key type`security/keys/gc.c`	+1 -3	0 replies
115/438	neighbour: Add missing RCU annotation for neightbl_dump_info().`net/core/neighbour.c`	+5 -2	0 replies
116/438	neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.`Documentation/netlink/specs/rt-neigh.yaml` `Documentation/networking/ip-sysctl.rst` `net/core/neighbour.c`	+17 -5	0 replies
117/438	neighbour: Dont render blackhole_netdev via RTM_GETNEIGHTBL.`net/core/neighbour.c`	+1 -1	0 replies
118/438	neighbour: Skip default parms when resumed in neightbl_dump_info().`net/core/neighbour.c`	+8 -3	0 replies
119/438	ALSA: bcd2000: Fix race between rawmidi and disconnect`sound/usb/bcd2000/bcd2000.c`	+26 -7	0 replies
120/438	ntfs: use dynamic MFT tail reservation`fs/ntfs/attrib.c` `fs/ntfs/mft.c` `fs/ntfs/mft.h` +2 more	+349 ~~-92~~	0 replies
121/438	ntfs: repack $MFT/$ATTRIBUTE LIST`fs/ntfs/attrib.c` `fs/ntfs/attrlist.c` `fs/ntfs/inode.c`	+236 ~~-23~~	0 replies
122/438	ntfs: account for MFT records added during allocation`fs/ntfs/mft.c` `fs/ntfs/super.c` `fs/ntfs/volume.h`	+17 ~~-12~~	0 replies
123/438	ntfs: protect runlist updates with the runlist lock`fs/ntfs/attrib.c` `fs/ntfs/attrib.h` `fs/ntfs/attrlist.c` +5 more	+216 ~~-66~~	0 replies
124/438	ntfs: propagate folio errors`fs/ntfs/inode.c`	+1 -1	0 replies
125/438	ntfs: ignore interrupted inode reads as corruption`fs/ntfs/inode.c` `fs/ntfs/mft.c`	+15 -9	0 replies
126/438	phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow`drivers/phy/mediatek/phy-mtk-hdmi-mt8195.c`	+1 -1	0 replies
127/438	phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting`drivers/phy/mediatek/phy-mtk-hdmi-mt8195.c` `drivers/phy/mediatek/phy-mtk-hdmi-mt8195.h`	+4 -1	0 replies
128/438	ALSA: pcm: set timer->private_data before registering the PCM timer`sound/core/pcm_timer.c`	+5 -2	0 replies
129/438	drm/msm/dp: skip PUSH_IDLE when the link was never enabled`drivers/gpu/drm/msm/dp/dp_display.c`	+14 -0	0 replies
130/438	drm/msm/dp: fix link bandwidth check when wide bus is enabled`drivers/gpu/drm/msm/dp/dp_display.c`	+5 -2	0 replies
131/438	ASoC: Rename snd_soc_dai_link_ch_map.ch_mask to cpu_ch_mask`include/sound/soc.h` `sound/soc/sdw_utils/soc_sdw_utils.c` `sound/soc/soc-pcm.c`	+3 -3	0 replies
132/438	ASoC: Add codec_ch_mask to snd_soc_dai_link_ch_map`include/sound/soc.h`	+1 -0	0 replies
133/438	ASoC: soc-pcm: Apply snd_soc_dai_link_ch_map.codec_ch_mask to codec params`sound/soc/soc-pcm.c`	+12 -4	0 replies
134/438	spi: spi-qpic-snand: avoid writing QPIC_EBI2_ECC_BUF_CFG register`drivers/spi/spi-qpic-snand.c`	+0 -4	0 replies
135/438	Input: trackpoint - fix the inertia attribute name in the ABI document`Documentation/ABI/testing/sysfs-devices-platform-trackpoint`	+1 -1	0 replies
136/438	objtool: Validate disassembler headers in libopcodes probe`tools/objtool/Makefile`	+5 -3	0 replies
137/438	gpio: virtuser: skip free_irq when no IRQ is installed`drivers/gpio/gpio-virtuser.c`	+2 -1	0 replies
138/438	ALSA: usb: 6fire: Avoid embedded URBs`sound/usb/6fire/comm.c` `sound/usb/6fire/comm.h` `sound/usb/6fire/midi.c` +3 more	+136 ~~-86~~	0 replies
139/438	ALSA: 6fire: fix OOB write from device-reported iso length`sound/usb/6fire/pcm.c`	+10 -2	0 replies
140/438	ksmbd: fix malformed procfs status output`fs/smb/server/connection.c` `fs/smb/server/mgmt/user_session.c` `fs/smb/server/misc.h` +3 more	+89 ~~-63~~	0 replies
141/438	ksmbd: extend procfs server statistics`fs/smb/server/proc.c` `fs/smb/server/server.c` `fs/smb/server/smb_common.h` +3 more	+176 ~~-18~~	0 replies
142/438	ksmbd: follow SMB2 session expiration semantics`fs/smb/server/connection.c` `fs/smb/server/connection.h` `fs/smb/server/mgmt/user_session.c` +6 more	+227 ~~-24~~	0 replies
143/438	wifi: virt_wifi: dont transfer operstate before register`drivers/net/wireless/virtual/virt_wifi.c`	+2 -1	0 replies
144/438	drm/xe/mmio_gem: forbid VMA split`drivers/gpu/drm/xe/xe_mmio_gem.c`	+10 -0	0 replies
145/438	drm/xe/mmio_gem: use write-back mapping for dummy page`drivers/gpu/drm/xe/xe_mmio_gem.c`	+5 ~~-14~~	0 replies
146/438	drm/xe/mmio_gem: Revoke drm_vma_node on xe_mmio_gem destroy`drivers/gpu/drm/xe/xe_mmio_gem.c` `drivers/gpu/drm/xe/xe_mmio_gem.h`	+4 -2	0 replies
147/438	drm/xe/shrinker: Return the freed page count through a parameter`drivers/gpu/drm/xe/xe_shrinker.c`	+26 ~~-36~~	0 replies
148/438	drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory`drivers/gpu/drm/xe/xe_shrinker.c`	+51 ~~-27~~	0 replies
149/438	drm/vc4: Use managed KMS polling to fix UAF on unbind`drivers/gpu/drm/vc4/vc4_kms.c`	+1 -1	0 replies
150/438	ALSA: hda: trace PCM open only after assigning a stream`sound/hda/common/controller.c`	+1 -1	0 replies
151/438	wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()`drivers/net/wireless/ath/ath11k/mac.c`	+18 -7	0 replies
152/438	btrfs: tree-checker: print dev extent offset in error message`fs/btrfs/tree-checker.c`	+1 -1	0 replies
153/438	drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL`drivers/gpu/drm/msm/dsi/dsi_host.c`	+19 ~~-17~~	0 replies
154/438	seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation`net/ipv6/seg6_local.c`	+3 -0	0 replies
155/438	net: dsa: mxl862xx: disable the stats poll on teardown`drivers/net/dsa/mxl862xx/mxl862xx.c`	+16 -7	0 replies
156/438	net: bcmgenet: restore the hardware filters on open`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+13 -6	0 replies
157/438	sysctl: Check range in proc_dointvec_ms_jiffies_minmax`kernel/time/jiffies.c`	+1 -1	0 replies
158/438	ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup`net/ipv4/icmp.c`	+10 -7	0 replies
159/438	net: fddi: skfp: fix NULL deref when setting the MAC address while down`drivers/net/fddi/skfp/skfddi.c`	+2 -1	0 replies
160/438	wifi: brcmfmac: fix lost 802.1x TX completion wakeup`drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c`	+2 -0	0 replies
161/438	net: bridge: mst: move switchdev call outside rcu`net/bridge/br_mst.c`	+12 -8	0 replies
162/438	tcp: Dont call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().`net/ipv6/tcp_ipv6.c`	+2 -1	0 replies
163/438	tcp: do not let tcp_rmem be set below 4096`Documentation/networking/ip-sysctl.rst` `net/ipv4/sysctl_net_ipv4.c`	+5 -1	0 replies
164/438	ksmbd: return buffer overflow for partial filesystem info`fs/smb/server/smb2pdu.c`	+25 -1	0 replies
165/438	ksmbd: fix partial file information responses`fs/smb/server/smb2pdu.c`	+20 ~~-11~~	0 replies
166/438	ksmbd: keep compound responses on query info errors`fs/smb/server/smb2pdu.c`	+12 ~~-19~~	0 replies
167/438	dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()`drivers/dma/mmp_pdma.c`	+1 -1	0 replies
168/438	Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained`net/bluetooth/hci_core.c`	+14 -3	0 replies
169/438	Bluetooth: btintel_pcie: validate TX skb length in send_sync`drivers/bluetooth/btintel_pcie.c`	+6 -0	0 replies
170/438	Bluetooth: coredump: Quiesce dump work on unregister`include/net/bluetooth/coredump.h` `net/bluetooth/coredump.c` `net/bluetooth/hci_core.c`	+47 ~~-21~~	0 replies
171/438	Bluetooth: put the peers on-air address on air when we cannot resolve`net/bluetooth/hci_conn.c`	+13 -0	0 replies
172/438	Bluetooth: hci_qca: Do not write to the serial port after it is closed`drivers/bluetooth/hci_qca.c`	+10 -4	0 replies
173/438	Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()`net/bluetooth/iso.c`	+1 -0	0 replies
174/438	Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync`net/bluetooth/iso.c`	+41 ~~-11~~	0 replies
175/438	Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events`drivers/bluetooth/btmtk.c`	+6 -1	0 replies
176/438	Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access`drivers/bluetooth/btmtksdio.c` `drivers/bluetooth/btmtkuart.c`	+38 -2	0 replies
177/438	Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown`drivers/bluetooth/btmtksdio.c`	+1 -3	0 replies
178/438	Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit`drivers/bluetooth/btintel_pcie.c`	+1 -1	0 replies
179/438	Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup`net/bluetooth/rfcomm/sock.c`	+10 -3	0 replies
180/438	af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().`net/unix/garbage.c`	+10 -7	0 replies
181/438	net: stmmac: fix TSO header length truncation`drivers/net/ethernet/stmicro/stmmac/stmmac_main.c`	+3 -3	0 replies
182/438	pppoatm: ensure a writable skb header and linear data`net/atm/pppoatm.c`	+17 ~~-25~~	0 replies
183/438	drop_monitor: synchronize tracepoint unregistration on error path`net/core/drop_monitor.c`	+1 -0	0 replies
184/438	drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown`net/core/drop_monitor.c`	+4 -4	0 replies
185/438	drop_monitor: use raw_cpu_ptr() in tracepoint probes`net/core/drop_monitor.c`	+3 -3	0 replies
186/438	drop_monitor: fix out-of-bounds write in reset_per_cpu_data()`net/core/drop_monitor.c`	+1 -2	0 replies
187/438	net: stmmac: do not overwrite phc_index when no PTP clock is registered`drivers/net/ethernet/stmicro/stmmac/stmmac_ethtool.c`	+0 -2	0 replies
188/438	net: bridge: vlan: fix bugs caused by switchdev deletion errors`net/bridge/br_vlan.c`	+14 ~~-17~~	0 replies
189/438	netlink: do not free nlk->groups while lockless readers can use it`net/netlink/af_netlink.c` `net/netlink/diag.c`	+50 ~~-12~~	0 replies
190/438	KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()`arch/powerpc/kvm/book3s_hv_nested.c`	+2 -0	0 replies
191/438	KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure`arch/powerpc/kvm/book3s_hv_uvmem.c`	+4 -1	0 replies
192/438	powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba`arch/powerpc/kernel/iommu.c`	+1 -1	0 replies
193/438	Revert "drm/i915/display: Clear SEL_FETCH_PLANE_CTL on plane disable"`drivers/gpu/drm/i915/display/intel_cursor.c` `drivers/gpu/drm/i915/display/skl_universal_plane.c`	+10 ~~-20~~	0 replies
194/438	futex: Also allocate private hash on vfork()`kernel/fork.c`	+2 -2	0 replies
195/438	drm/xe/i2c: Disable IRQ on unbind`drivers/gpu/drm/xe/xe_i2c.c`	+3 -0	0 replies
196/438	btrfs: handle lack of space when cleaning up verity items`fs/btrfs/inode.c` `fs/btrfs/verity.c`	+18 -3	0 replies
197/438	ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments`sound/soc/ux500/ux500_msp_i2s.h`	+2 -2	0 replies
198/438	ASoC: hdmi-codec: Report a change when the channel status moves`sound/soc/codecs/hdmi-codec.c`	+5 -1	0 replies
199/438	ASoC: cs-amp-lib: Prevent NULL pointer if efi variable is zero length`sound/soc/codecs/cs-amp-lib.c`	+2 -0	0 replies
200/438	ASoC: amd: acp: bounds-check SoundWire link ID in machine drivers`sound/soc/amd/acp/acp-sdw-legacy-mach.c` `sound/soc/amd/acp/acp-sdw-sof-mach.c`	+19 -0	0 replies
201/438	ASoC: sdw_utils: tidyup .count_sidecar`include/sound/soc_sdw_utils.h` `sound/soc/sdw_utils/soc_sdw_bridge_cs35l56.c` `sound/soc/sdw_utils/soc_sdw_utils.c`	+16 ~~-18~~	0 replies
202/438	ASoC: sdw_utils: tidyup asoc_sdw_parse_sdw_endpoints()`include/sound/soc_sdw_utils.h` `sound/soc/amd/acp/acp-sdw-legacy-mach.c` `sound/soc/amd/acp/acp-sdw-sof-mach.c` +2 more	+7 -7	0 replies
203/438	ASoC: amd: acp: refactor codec config count in SOF SoundWire machine driver`sound/soc/amd/acp/acp-sdw-sof-mach.c`	+5 -3	0 replies
204/438	ASoC: amd: acp: fix ffs() operator precedence for SoundWire link ID`sound/soc/amd/acp/acp-sdw-legacy-mach.c` `sound/soc/amd/acp/acp-sdw-sof-mach.c`	+4 -4	0 replies
205/438	net/sched: codel: bound the dropping loop per dequeue call`include/net/codel.h` `include/net/codel_impl.h`	+20 -1	0 replies
206/438	net: do not advance stack index from dev_fwd_path()`net/core/dev.c`	+4 -4	0 replies
207/438	net: pass dst via net_device_path in dev_fill_forward_path()`drivers/net/ethernet/airoha/airoha_ppe.c` `drivers/net/ethernet/mediatek/mtk_ppe_offload.c` `include/linux/netdevice.h` +1 more	+47 ~~-11~~	0 replies
208/438	net: pass net_device_path_ctx to dev_fill_forward_path()`drivers/net/ethernet/airoha/airoha_ppe.c` `drivers/net/ethernet/mediatek/mtk_ppe_offload.c` `include/linux/netdevice.h` +2 more	+26 ~~-15~~	0 replies
209/438	net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check`net/core/dev.c`	+1 -1	0 replies
210/438	net: netsec: fix device_node reference leak on phy_np`drivers/net/ethernet/socionext/netsec.c`	+2 -0	0 replies
211/438	eth: fbnic: ring the doorbell if a burst ends in a drop`drivers/net/ethernet/meta/fbnic/fbnic_txrx.c` `drivers/net/ethernet/meta/fbnic/fbnic_txrx.h`	+40 ~~-11~~	0 replies
212/438	net: lock the socket in sock_gettstamp()`net/core/sock.c`	+8 -1	0 replies
213/438	net: ethernet: cortina: Ack RX overrun interrupt correctly`drivers/net/ethernet/cortina/gemini.c`	+1 -1	0 replies
214/438	net: stmmac: propagate FPE preemption-class mapping errors`drivers/net/ethernet/stmicro/stmmac/hwif.h` `drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c`	+10 ~~-11~~	0 replies
215/438	net: prevent torn reads in netdev_tc_txq`drivers/net/ethernet/intel/igc/igc_tsn.c` `drivers/net/ethernet/intel/ixgbe/ixgbe_main.c` `drivers/net/ethernet/mellanox/mlx5/core/en_main.c` +8 more	+94 ~~-43~~	0 replies
216/438	net: stmmac: preserve real_num_tx_queues on mqprio setup failure`drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c`	+62 ~~-20~~	0 replies
217/438	net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()`include/net/sock.h` `net/core/sock.c` `net/ipv4/tcp_ulp.c` +1 more	+17 -0	0 replies
218/438	x86/kprobes: Fix crash when probing CS CALL instructions`arch/x86/include/asm/text-patching.h` `arch/x86/kernel/alternative.c` `arch/x86/kernel/kprobes/core.c`	+8 -7	0 replies
219/438	net: macb: fix ordering around PTP timestamp read`drivers/net/ethernet/cadence/macb_ptp.c`	+9 -0	0 replies
220/438	net: mvpp2: prevent buffer overflow in page_pool allocation`drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c`	+2 -1	0 replies
221/438	net: skbuff: do not leave stale header offsets after pskb_carve()`net/core/skbuff.c`	+30 -2	0 replies
222/438	drm/amdgpu: check ras and obj before dereference`drivers/gpu/drm/amd/amdgpu/nbio_v7_9.c`	+1 -1	0 replies
223/438	drm/amd/display: fix MALL hysteresis timer underflow at high refresh rates`drivers/gpu/drm/amd/display/dc/hwss/dcn30/dcn30_hwseq.c`	+7 -6	0 replies
224/438	btrfs: abort transaction on failure to update inode for hole punching and reflinking`fs/btrfs/file.c`	+3 -1	0 replies
225/438	btrfs: check if there is space for chunk item when validating sys chunk array`fs/btrfs/disk-io.c`	+4 -0	0 replies
226/438	perf: Fix null pointer access in is_include_guest_event()`kernel/events/core.c`	+4 -0	0 replies
227/438	sched/core: Avoid false migration warning for proxy donors`kernel/sched/core.c`	+8 -1	0 replies
228/438	x86/fred: Reconstruct the #GP context for rejected INT instructions`arch/x86/entry/entry_fred.c`	+10 -1	0 replies
229/438	Input: eeti_ts - publish the OF module alias`drivers/input/touchscreen/eeti_ts.c`	+1 -0	0 replies
230/438	hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler`drivers/hwmon/gpio-fan.c`	+2 -2	0 replies
231/438	hwmon: (hp-wmi-sensors) Improve raw WMI string handling`drivers/hwmon/hp-wmi-sensors.c`	+22 -8	0 replies
232/438	watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog`drivers/watchdog/da9062_wdt.c`	+2 -2	0 replies
233/438	Input: xpad - add support for Victrix Pro BFG Controller`drivers/input/joystick/xpad.c`	+1 -0	0 replies
234/438	Input: xpad - add support for Azeron devices`drivers/input/joystick/xpad.c`	+7 -0	0 replies
235/438	Input: xpad - fix PDP Marvel Xbox 360 controller`drivers/input/joystick/xpad.c`	+1 -1	0 replies
236/438	9p: Fix v9fs_issue_write() to update i_size and remote_i_size`fs/9p/vfs_addr.c`	+27 -1	0 replies
237/438	ALSA: core: Fix potential UAF after asynchronous card release`sound/core/init.c`	+2 -1	0 replies
238/438	ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity`sound/usb/card.h` `sound/usb/endpoint.c`	+8 -5	0 replies
239/438	ALSA: virtio: reset device before deleting virtqueues`sound/virtio/virtio_card.c`	+2 -2	0 replies
240/438	ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type`sound/soc/codecs/rt712-sdca-dmic.c`	+5 -9	0 replies
241/438	cgroup: Avoid iteration of dying tasks with zero refcount`kernel/cgroup/cgroup.c`	+5 -2	0 replies
242/438	ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY`drivers/ata/libahci.c`	+14 -1	0 replies
243/438	ata: libahci_platform: Fix device reference leak in ahci_platform_get_resources()`drivers/ata/libahci_platform.c`	+1 -1	0 replies
244/438	cifs: Fix server use-after-free in cifs_chan_skip_or_disable()`fs/smb/client/smb2pdu.c`	+7 -6	0 replies
245/438	exec: Cleanup POSIX timers right after de_thread()`fs/exec.c`	+21 -8	0 replies
246/438	fs/dax: check zero or empty entry before converting xarray entry`fs/dax.c`	+6 -3	0 replies
247/438	PCI: imx6: Move clock enable after core reset assertion`drivers/pci/controller/dwc/pci-imx6.c`	+6 -6	0 replies
248/438	phy: renesas: rcar-gen3-usb2: Avoid long delay in atomic context`drivers/phy/renesas/phy-rcar-gen3-usb2.c`	+265 ~~-45~~	0 replies
249/438	posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list`kernel/time/posix-cpu-timers.c`	+22 ~~-18~~	0 replies
250/438	rds: ib: use rds_conn_drop() on protocol version mismatch`net/rds/ib_cm.c`	+1 -1	0 replies
251/438	signal: Prevent exec() race`kernel/exit.c` `kernel/signal.c`	+92 ~~-36~~	0 replies
252/438	rust: net: phy: fix off-by-one bit positions in device status accessors`rust/kernel/net/phy.rs`	+18 ~~-20~~	0 replies
253/438	Revert "nouveau/gsp: fix suspend/resume regression on r570 firmware"`drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/fbsr.c` `drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/gsp.c` `drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/fbsr.c` +1 more	+7 -7	0 replies
254/438	drm/nouveau/gsp: Increase delay for magic sleep in r535_gsp_fini()`drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/gsp.c`	+5 -1	0 replies
255/438	drm/nouveau/gsp/r570: Set GcOff = 0 in fbsr`drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/fbsr.c`	+1 -1	0 replies
256/438	drm/nouveau/gsp/r570: Enable S/R Display workaround in GSP`drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/gsp.c` `drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/nvrm/gsp.h`	+10 -1	0 replies
257/438	x86/build/64: Prevent native builds from generating EGPR use`arch/x86/Kconfig.cpu` `arch/x86/Makefile` `scripts/generate_rust_target.rs`	+21 -0	0 replies
258/438	x86/microcode/intel: Reject problematic loading on Granite Rapids systems`arch/x86/kernel/cpu/microcode/intel.c`	+26 -0	0 replies
259/438	tcp: exclude old ACKs from tcp fast path`net/ipv4/tcp_input.c`	+2 -1	0 replies
260/438	swiotlb: use the adjusted address for the highmem page lookup`kernel/dma/swiotlb.c`	+2 -2	0 replies
261/438	soundwire: dmi-quirks: Disable ghost Realtek on Asus GX651AX`drivers/soundwire/dmi-quirks.c`	+7 -0	0 replies
262/438	spi: fsl-qspi: Reprogram the clock rate when the operation frequency changes`drivers/spi/spi-fsl-qspi.c`	+4 -1	0 replies
263/438	spi: spi-zynqmp-gqspi: stop the controller on shutdown`drivers/spi/spi-zynqmp-gqspi.c`	+34 -0	0 replies
264/438	spi: virtio: Use the per-transfer bits per word`drivers/spi/spi-virtio.c`	+1 -1	0 replies
265/438	RDMA/ucma: Serialize join and leave on copy_to_user failure`drivers/infiniband/core/ucma.c`	+4 -3	0 replies
266/438	RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()`drivers/infiniband/core/iwpm_util.c`	+5 -4	0 replies
267/438	openvswitch: avoid reallocating confirmed conntrack labels`net/openvswitch/conntrack.c`	+1 -1	0 replies
268/438	nfsd: fix handling of NFSEXP_PNFS in the netlink codepath`fs/nfsd/export.c`	+2 -1	0 replies
269/438	net: xfrm: reject unrepresentable espintcp transport headers`net/xfrm/espintcp.c`	+5 -1	0 replies
270/438	kselftest/arm64: Fix size of thread_data values for pthread_join()`tools/testing/selftests/arm64/mte/check_gcr_el1_cswitch.c`	+1 -1	0 replies
271/438	arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc`arch/arm64/kernel/hibernate-asm.S`	+2 -0	0 replies
272/438	arm64: dts: renesas: r8a779f0: Set UFS lane count`arch/arm64/boot/dts/renesas/r8a779f0.dtsi`	+1 -0	0 replies
273/438	arm64: dts: socfpga: change access permission from 755 to 644`arch/arm64/boot/dts/altera/socfpga_stratix10_socdk.dtsi` `arch/arm64/boot/dts/altera/socfpga_stratix10_socdk_emmc.dts`	+0 -0	0 replies
274/438	arm64: percpu: Fix this_cpu_write() casting`arch/arm64/include/asm/percpu.h`	+4 -4	0 replies
275/438	arm64: percpu: Fix this_cpu_and() mask generation`arch/arm64/include/asm/percpu.h`	+4 -4	0 replies
276/438	arm64: percpu: Fix LSE operations on {8,16}-bit types`arch/arm64/include/asm/percpu.h`	+2 -2	0 replies
277/438	Bluetooth: btusb: fix NXP IW610 composite device handling`drivers/bluetooth/btusb.c`	+17 -0	0 replies
278/438	Bluetooth: eir: validate service data length before reading UUID`net/bluetooth/eir.c`	+9 -1	0 replies
279/438	Bluetooth: hci_codec: validate vendor codec count length`net/bluetooth/hci_codec.c`	+18 ~~-18~~	0 replies
280/438	Bluetooth: hci_sync: Serialize local codec list cleanup`net/bluetooth/hci_sync.c`	+2 -0	0 replies
281/438	Bluetooth: keep dst_type with dst when reusing an LE connection`net/bluetooth/hci_conn.c`	+8 -0	0 replies
282/438	btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()`fs/btrfs/dev-replace.c`	+1 -0	0 replies
283/438	btrfs: fix creation of compressed inline extents that dont save space`fs/btrfs/inode.c`	+15 -0	0 replies
284/438	btrfs: derive f_fsid with dev_t only when temp_fsid is active`fs/btrfs/super.c`	+6 -2	0 replies
285/438	btrfs: clear free space tree creation state on rebuild failure`fs/btrfs/free-space-tree.c`	+10 -4	0 replies
286/438	gpiolib: Put fwnode reference on failure`drivers/gpio/gpiolib-shared.c`	+6 -3	0 replies
287/438	gpiolib: of: dont mark hog nodes OF_POPULATED before a chip is found`drivers/gpio/gpiolib-of.c`	+3 -3	0 replies
288/438	dmaengine: sun6i: fix non-atomic read of DMA position registers`drivers/dma/sun6i-dma.c`	+4 -2	0 replies
289/438	dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status`drivers/dma/sun6i-dma.c`	+1 -2	0 replies
290/438	dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()`drivers/dma/ti/k3-udma-glue.c`	+3 -2	0 replies
291/438	dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3`drivers/dma-buf/dma-fence.c` `include/linux/dma-fence.h`	+18 -2	0 replies
292/438	dma-buf: Fix silent overflow for phys vec to sgt`drivers/dma-buf/dma-buf-mapping.c`	+12 -4	0 replies
293/438	dma-buf: Split sgl by largest page-aligned chunk`drivers/dma-buf/dma-buf-mapping.c`	+11 -8	0 replies
294/438	ipv6: xfrm: use full sockets in local error paths`net/ipv6/xfrm6_output.c`	+8 -2	0 replies
295/438	net: ip_tunnel: initialize `options_len` before referencing options`net/ipv4/ip_tunnel_core.c`	+11 -5	0 replies
296/438	net: lan743x: fix RX checksum use-after-free`drivers/net/ethernet/microchip/lan743x_main.c`	+1 -1	0 replies
297/438	net: phy: mediatek: do not report link and per-speed LED rules together`drivers/net/phy/mediatek/mtk-phy-lib.c`	+20 ~~-13~~	0 replies
298/438	net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()`drivers/net/wwan/t7xx/t7xx_netdev.c`	+4 -0	0 replies
299/438	net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain`drivers/net/wwan/mhi_wwan_mbim.c`	+7 -3	0 replies
300/438	net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value`drivers/net/wwan/mhi_wwan_mbim.c`	+13 -5	0 replies
301/438	net/sched: act_api: release tail references on DELACTION failure`net/sched/act_api.c`	+8 -3	0 replies
302/438	net/sched: hhf: cap hh_flows_limit at change time`net/sched/sch_hhf.c`	+5 -4	0 replies
303/438	net/packet: clear RX owner on VNET header error`net/packet/af_packet.c`	+3 -1	0 replies
304/438	net/packet: avoid truncating TPACKET_V3 private size`net/packet/internal.h`	+1 -1	0 replies
305/438	scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()`drivers/scsi/scsi.c`	+19 -5	0 replies
306/438	xfrm: serialize state GC with device state flush`net/xfrm/xfrm_state.c`	+5 -0	0 replies
307/438	xfrm: use hlist_del_init_rcu for state_cache and state_cache_input`net/xfrm/xfrm_state.c`	+2 -2	0 replies
308/438	xfrm: save input state data before secpath resets`net/xfrm/xfrm_input.c`	+8 -3	0 replies
309/438	soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node`drivers/soc/samsung/exynos-pmu.c`	+2 -5	0 replies
310/438	mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ`arch/mips/Kconfig`	+1 -0	0 replies
311/438	memcg: avoid charging the root memcg from obj_cgroup_charge_pages()`mm/memcontrol.c`	+1 -1	0 replies
312/438	memstick: ms_block: destroy io_queue workqueue on removal`drivers/memstick/core/ms_block.c`	+2 -0	0 replies
313/438	mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count`mm/swapfile.c`	+1 -1	0 replies
314/438	mm/huge_memory: bypass THP tuneables for huge pfnmap mappings`mm/huge_memory.c`	+64 ~~-22~~	0 replies
315/438	mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio()`mm/mlock.c`	+1 -1	0 replies
316/438	mm/mremap: account mm->locked_vm correctly for MREMAP_DONTUNMAP`mm/mremap.c`	+4 -5	0 replies
317/438	mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem`mm/shrinker.c`	+2 -0	0 replies
318/438	mm/vma: correctly unaccount on mmap_prepare() failure`mm/vma.c`	+4 -2	0 replies
319/438	mm: filemap: retain mapped dropbehind folios`mm/filemap.c`	+1 -1	0 replies
320/438	KEYS: encrypted: fix integer overflow of datablob_len`security/keys/encrypted-keys/encrypted.c`	+14 -6	0 replies
321/438	keys: translate request_key_auth pid for the reading procfs instance`include/keys/request_key_auth-type.h` `security/keys/request_key_auth.c`	+10 -4	0 replies
322/438	KEYS: trusted: Fix tpm2_load_cmd() boundary check`security/keys/trusted-keys/trusted_tpm2.c`	+7 -5	0 replies
323/438	sched_ext: Fix NULL sched deref in kfunc sub-sched error paths`kernel/sched/ext/ext.c` `kernel/sched/ext/idle.c`	+18 -4	0 replies
324/438	sched_ext: Close the pre-enable ops error claim window`kernel/sched/ext/ext.c`	+9 -7	0 replies
325/438	i2c: at91: release DMA channels on remove and probe error`drivers/i2c/busses/i2c-at91-core.c` `drivers/i2c/busses/i2c-at91-master.c` `drivers/i2c/busses/i2c-at91.h`	+15 -1	0 replies
326/438	i2c: atr: fix dangling adapter pointer on add failure`drivers/i2c/i2c-atr.c`	+1 -0	0 replies
327/438	i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove()`drivers/i2c/busses/i2c-qcom-cci.c`	+11 -9	0 replies
328/438	i2c: imx: release DMA channels on probe error`drivers/i2c/busses/i2c-imx.c`	+2 -0	0 replies
329/438	i2c: imx: disable autosuspend on remove`drivers/i2c/busses/i2c-imx.c`	+1 -0	0 replies
330/438	IB/mlx4: Fix use-after-free on pkey sysfs registration failure`drivers/infiniband/hw/mlx4/sysfs.c`	+4 -0	0 replies
331/438	IB/hfi1: Resolve the credit-return buffer through the send contexts node`drivers/infiniband/hw/hfi1/file_ops.c`	+4 -4	0 replies
332/438	IB/hfi1: Fix the PIO_CRED credit-return mmap`drivers/infiniband/hw/hfi1/file_ops.c`	+16 -5	0 replies
333/438	selinux: preserve user SID across nested backing files`security/selinux/hooks.c` `security/selinux/include/objsec.h`	+9 -2	0 replies
334/438	selinux: recheck intermediate backing files on mprotect()`security/selinux/hooks.c` `security/selinux/include/objsec.h`	+133 ~~-16~~	0 replies
335/438	selinux: always fill AVC decision in avc_has_perm_noaudit()`security/selinux/avc.c`	+4 -1	0 replies
336/438	power: sequencing: dont call .post_enable() if pwrseq_unit_enable() failed`drivers/power/sequencing/core.c`	+2 -0	0 replies
337/438	power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()`drivers/power/sequencing/core.c`	+1 -0	0 replies
338/438	power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()`drivers/power/sequencing/core.c`	+4 -4	0 replies
339/438	mmc: core: Cancel SDIO IRQ work before freeing host`drivers/mmc/core/host.c`	+1 -0	0 replies
340/438	mmc: core: Fix OF node reference leak on card add failure`drivers/mmc/core/bus.c`	+1 -1	0 replies
341/438	mmc: hsq: Fix use-after-free in retry work`drivers/mmc/host/mmc_hsq.c`	+7 -1	0 replies
342/438	mmc: mmci: Fix use-after-free in busy-timeout work`drivers/mmc/host/mmci.c`	+3 -0	0 replies
343/438	mmc: mxcmmc: cancel data work and watchdog on remove`drivers/mmc/host/mxcmmc.c`	+4 -0	0 replies
344/438	mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260`drivers/mmc/host/rtsx_pci_sdmmc.c`	+5 -0	0 replies
345/438	mmc: sdhci-of-aspeed: Remove children before releasing SDC resources`drivers/mmc/host/sdhci-of-aspeed.c`	+4 -1	0 replies
346/438	mmc: sdio_uart: fix xmit_fifo leak when the port table is full`drivers/mmc/core/sdio_uart.c`	+3 -0	0 replies
347/438	mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt`drivers/mmc/host/sh_mmcif.c`	+1 -2	0 replies
348/438	mmc: spi: reset bytes_xfered before retrying CRC failures`drivers/mmc/host/mmc_spi.c`	+1 -0	0 replies
349/438	mmc: sdhci_am654: Move tuning_loop to local variable`drivers/mmc/host/sdhci_am654.c`	+2 -5	0 replies
350/438	mmc: sdhci_am654: Reset command and data lines on failed tuning`drivers/mmc/host/sdhci_am654.c`	+1 -3	0 replies
351/438	mmc: sdhci_am654: Clear ITAPDLY on tuning failure`drivers/mmc/host/sdhci_am654.c`	+7 -5	0 replies
352/438	mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure`drivers/mmc/host/sdhci_am654.c`	+21 -5	0 replies
353/438	Input: adp5588-keys - cache GPIO state before registering the gpiochip`drivers/input/keyboard/adp5588-keys.c`	+6 -6	0 replies
354/438	Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026`drivers/input/keyboard/atkbd.c`	+8 -0	0 replies
355/438	Input: cyttsp5 - clamp the HID report size before memcpy`drivers/input/touchscreen/cyttsp5.c`	+1 -0	0 replies
356/438	Input: evdev - zero absinfo before partial copy in EVIOCSABS`drivers/input/evdev.c`	+2 -0	0 replies
357/438	Input: hp_sdc - shut down kicker timer on module exit`drivers/input/serio/hp_sdc.c`	+1 -1	0 replies
358/438	Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P`drivers/input/serio/i8042-acpipnpio.h`	+7 -0	0 replies
359/438	Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()`drivers/input/rmi4/rmi_smbus.c`	+5 -5	0 replies
360/438	Input: soc_button_array - fix MS Surface Pro 11 probe failure`drivers/input/misc/soc_button_array.c`	+11 -3	0 replies
361/438	Input: soc_button_array - check btns_desc->package.count`drivers/input/misc/soc_button_array.c`	+1 -1	0 replies
362/438	Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722)`drivers/input/mouse/synaptics.c`	+8 -0	0 replies
363/438	Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound`drivers/input/rmi4/rmi_driver.c`	+13 -0	0 replies
364/438	Input: zero ff_effect before compat copy in input_ff_effect_from_user`drivers/input/input-compat.c`	+2 -0	0 replies
365/438	hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()`drivers/hwmon/hp-wmi-sensors.c`	+2 -0	0 replies
366/438	hwmon: (pmbus/core) increase number of phases and add new mask`drivers/hwmon/pmbus/pmbus.h`	+2 -1	0 replies
367/438	hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding`drivers/hwmon/pmbus/tps53679.c`	+1 -1	0 replies
368/438	hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676`drivers/hwmon/pmbus/tps53679.c`	+9 -0	0 replies
369/438	hwmon: (pwm-fan) Stop RPM timer before freeing tach data`drivers/hwmon/pwm-fan.c`	+12 -1	0 replies
370/438	hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove`drivers/hwmon/w83791d.c`	+1 -0	0 replies
371/438	hwmon: (w83793) release probe data through kref`drivers/hwmon/w83793.c`	+3 -1	0 replies
372/438	hwmon: (cgbc-hwmon) Fix current sensors ID lookup`drivers/hwmon/cgbc-hwmon.c`	+54 ~~-39~~	0 replies
373/438	hwmon: (cgbc-hwmon) Add missing sensors`Documentation/hwmon/cgbc-hwmon.rst` `drivers/hwmon/cgbc-hwmon.c`	+60 ~~-34~~	0 replies
374/438	watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog`drivers/watchdog/da9063_wdt.c`	+2 -2	0 replies
375/438	watchdog: digicolor: Avoid division by zero`drivers/watchdog/digicolor_wdt.c`	+9 -4	0 replies
376/438	watchdog: msc313e: Fix premature reset during timeout update`drivers/watchdog/msc313e_wdt.c`	+6 -0	0 replies
377/438	watchdog: msc313e: Propagate error code in resume()`drivers/watchdog/msc313e_wdt.c`	+7 -3	0 replies
378/438	watchdog: rtd119x: Avoid division by zero`drivers/watchdog/rtd119x_wdt.c`	+6 -1	0 replies
379/438	watchdog: rzv2h: Avoid division by zero`drivers/watchdog/rzv2h_wdt.c`	+6 -1	0 replies
380/438	watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init()`drivers/watchdog/sp5100_tco.c`	+5 -1	0 replies
381/438	watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start()`drivers/watchdog/starfive-wdt.c`	+1 -1	0 replies
382/438	wifi: brcmsmac: fix UAF in brcms_free_timer()`drivers/net/wireless/broadcom/brcm80211/brcmsmac/mac80211_if.c`	+4 -0	0 replies
383/438	wifi: iwlegacy: fix broadcast stations deallocation`drivers/net/wireless/intel/iwlegacy/common.c`	+1 -1	0 replies
384/438	wifi: libertas_tf: fix UAF in lbtf_free_adapter()`drivers/net/wireless/marvell/libertas_tf/main.c`	+1 -1	0 replies
385/438	wifi: libipw: reject TKIP frames without a full MIC`drivers/net/wireless/intel/ipw2x00/libipw_crypto_tkip.c`	+7 -5	0 replies
386/438	wifi: rsi: fix heap OOB write on key removal`drivers/net/wireless/rsi/rsi_91x_mgmt.c`	+0 -2	0 replies
387/438	wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown`drivers/net/wireless/ath/wcn36xx/dxe.c`	+1 -1	0 replies
388/438	wifi: wlcore: release runtime PM ref on regdomain config failure`drivers/net/wireless/ti/wlcore/main.c`	+1 -3	0 replies
389/438	wifi: wilc1000: fix out-of-bounds read in P2P public action frames`drivers/net/wireless/microchip/wilc1000/cfg80211.c`	+14 -0	0 replies
390/438	wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()`drivers/net/wireless/microchip/wilc1000/wlan.c`	+9 -0	0 replies
391/438	wifi: p54: validate curve data length in the calibration curve converters`drivers/net/wireless/intersil/p54/eeprom.c`	+15 -4	0 replies
392/438	wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST`drivers/net/wireless/intersil/p54/eeprom.c`	+2 -1	0 replies
393/438	wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length`drivers/net/wireless/marvell/mwifiex/scan.c`	+22 -3	0 replies
394/438	wifi: mwifiex: validate scan response extents`drivers/net/wireless/marvell/mwifiex/scan.c`	+19 ~~-10~~	0 replies
395/438	wifi: mwifiex: prevent authentication frame length truncation`drivers/net/wireless/marvell/mwifiex/cfg80211.c`	+10 -2	0 replies
396/438	wifi: mwifiex: validate action frame fixed fields`drivers/net/wireless/marvell/mwifiex/util.c`	+8 -2	0 replies
397/438	wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver`net/mac80211/cfg.c`	+3 -0	0 replies
398/438	wifi: mac80211: avoid out-of-bounds read for empty PREQ elements`include/linux/ieee80211-mesh.h`	+2 -2	0 replies
399/438	wifi: mac80211: refuse to make a monitor active when it has no queue`net/mac80211/cfg.c`	+4 -0	0 replies
400/438	drm/gud: fix out-of-bounds write in gud_plane_atomic_check()`drivers/gpu/drm/gud/gud_pipe.c`	+2 -2	0 replies
401/438	drm/gud: Ignore damage clips in full update mode`drivers/gpu/drm/gud/gud_pipe.c`	+3 -0	0 replies
402/438	drm/msm/adreno: fix autosuspend cleanup during teardown`drivers/gpu/drm/msm/adreno/adreno_gpu.c`	+2 -0	0 replies
403/438	drm/msm/dpu: clear pending peripheral flush state`drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c`	+1 -0	0 replies
404/438	drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure`drivers/gpu/drm/msm/hdmi/hdmi_phy.c`	+6 -2	0 replies
405/438	drm/msm: RCU-free the scheduler-containing ring and VM objects`drivers/gpu/drm/msm/msm_gem.h` `drivers/gpu/drm/msm/msm_gem_vma.c` `drivers/gpu/drm/msm/msm_ringbuffer.c` +1 more	+6 -2	0 replies
406/438	drm/sched: Fix virtual runtime race`drivers/gpu/drm/scheduler/sched_entity.c` `drivers/gpu/drm/scheduler/sched_rq.c`	+16 ~~-12~~	0 replies
407/438	drm/amdgpu: fix rmmio iounmap skipped on device removal`drivers/gpu/drm/amd/amdgpu/amdgpu_device.c`	+2 -4	0 replies
408/438	drm/amdgpu: hold a runtime PM reference for P2P dma-buf attachments`drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c`	+42 -1	0 replies
409/438	drm/amdgpu: Skip KFD mapping clear before initialization`drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c`	+1 -1	0 replies
410/438	drm/amdkfd: Avoid integer underflow in EOP ring size calculation.`drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c` `drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_vi.c`	+9 -2	0 replies
411/438	drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc`drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v10.c` `drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v11.c` `drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12.c` +1 more	+4 -4	0 replies
412/438	drm/amdkfd: implement restore_mqd callbacks for GFX12/12.1`drivers/gpu/drm/amd/amdkfd/kfd_device_queue_manager.c` `drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12.c` `drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c`	+132 -2	0 replies
413/438	smb: client: cancel reconnect work in clean_demultiplex_info()`fs/smb/client/connect.c`	+1 -0	0 replies
414/438	smb/client: send lease break ACKs thru correct session for multiuser mounts`fs/smb/client/file.c`	+2 -2	0 replies
415/438	smb: client: fix rlist race and missing initialization`fs/smb/client/connect.c`	+7 -0	0 replies
416/438	smb: client: fix use-after-free of iface in cifs_try_adding_channels()`fs/smb/client/sess.c`	+64 ~~-42~~	0 replies
417/438	smb: client: reject short Next offsets in parse_server_interfaces()`fs/smb/client/smb2ops.c`	+3 -3	0 replies
418/438	smb: client: fix smbd_connection leak on cifs_get_tcp_session() error`fs/smb/client/connect.c`	+1 -0	0 replies
419/438	smb: client: fix unaligned access in WSL reparse point parser`fs/smb/client/reparse.c` `fs/smb/client/reparse.h`	+6 -5	0 replies
420/438	smb: client: fix fattr leaking on wsl_to_fattr() failure`fs/smb/client/reparse.c`	+19 ~~-15~~	0 replies
421/438	smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs`fs/smb/client/smb2ops.c`	+10 -1	0 replies
422/438	smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()`fs/smb/client/smb2ops.c` `fs/smb/client/trace.h`	+18 -8	0 replies
423/438	smb: client: fix potential OOB read in smb3_enum_snapshots()`fs/smb/client/smb2ops.c`	+7 -1	0 replies
424/438	smb: client: fix reparse buffer bounds in cifs_query_reparse_point()`fs/smb/client/cifssmb.c`	+1 -1	0 replies
425/438	smb: client: fix server->total_read for compound encrypted PDUs`fs/smb/client/smb2ops.c`	+1 -0	0 replies
426/438	smb: client: fix missing lower-bound check on DFS referral string offsets`fs/smb/client/misc.c`	+10 -2	0 replies
427/438	smb: client: fix missing iov bounds check in parse_posix_sids()`fs/smb/client/smb2inode.c`	+11 -0	0 replies
428/438	fs/super: skip non-memcg-aware nr_cached_objects in memcg slab shrink`fs/super.c`	+17 -2	0 replies
429/438	fs: fix missed removal of super_fs_objects_eligible()`fs/super.c`	+2 ~~-16~~	0 replies
430/438	scsi: fnic: Make debug logging protocol independent`drivers/scsi/fnic/fdls_disc.c` `drivers/scsi/fnic/fip.c` `drivers/scsi/fnic/fip.h` +5 more	+675 ~~-664~~	0 replies
431/438	scsi: fnic: Bump up version number`drivers/scsi/fnic/fnic.h`	+1 -1	0 replies
432/438	scsi: fnic: Fix missed link-up when critical IRQ targets offline CPU`drivers/scsi/fnic/fnic.h` `drivers/scsi/fnic/fnic_isr.c` `drivers/scsi/fnic/fnic_main.c`	+43 -5	0 replies
433/438	drm/amdgpu: reduce early full GPU access during SR-IOV init`drivers/gpu/drm/amd/amdgpu/amdgpu_device.c` `drivers/gpu/drm/amd/amdgpu/mxgpu_ai.c`	+88 -7	0 replies
434/438	drm/amdgpu: Fix GPU PCIe link capability reporting`drivers/gpu/drm/amd/amdgpu/amdgpu.h` `drivers/gpu/drm/amd/amdgpu/amdgpu_device.c`	+20 ~~-31~~	0 replies
435/438	ntsync: reject wait ioctls with zero owner`drivers/misc/ntsync.c`	+3 -0	0 replies
436/438	drm/ttm: fix swapped-out resources never leaving their bulk_move range`drivers/gpu/drm/ttm/ttm_bo.c`	+1 -1	0 replies
437/438	drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only`drivers/gpu/drm/amd/amdgpu/amdgpu_device.c`	+3 -0	0 replies
438/438	ksmbd: fix partial normalized name responses`fs/smb/server/smb2pdu.c` `fs/smb/server/smb2pdu.h`	+4 -0	0 replies

Reviews trailers per patch

229 of 438 patches have a Reviewed-by or Acked-by.

Patch	Neil Armstrong	Zhu Yanjun	Hongqiang Luo	Xinyu Ma	Zhanbo Ye	Shay Drory	Junxian Huang	Geert Uytterhoeven	Tommaso Merciai	Max Gurtovoy	Jack Wang	Selvin Xavier	Bernard Metzler	Shukai Ni	Cosmin Ratiu	David Lin	Shuming Fan	Pierre-Louis Bossart	Caleb James DeLisle	Sean Anderson	Frank Li	Logan Gunthorpe	Baolin Wang	Arend van Spriel	Damien Le Moal	Suraj Gupta	Michael Margolin	H. Peter Anvin	Christian König	Robin Murphy	Hyunchul Lee	Manivannan Sadhasivam	Dmitry Baryshkov	Melissa Wen	Md Sadre Alam	Linus Walleij	Namjae Jeon	Matthew Auld	Jarkko Sakkinen	Ido Schimmel	Ard Biesheuvel	Ilia Levi	Justin Chen	Florian Fainelli	Jiayuan Chen	Xuanqiang Luo	Eric Dumazet	Simon Horman	Thomas Hellström	ChenXiaoSong	Hans de Goede	Maxime Chevallier	Maíra Canal	Rameshkumar Sundaram	Baochen Qiang	Qu Wenruo	David Sterba	Konrad Dybcio	Abel Vesa	David Ahern	Hangbin Liu	Ritesh Harjani (IBM)	R Nageswara Sastry	Jouni Högander	Heikki Krogerus	Mario Limonciello (AMD)	Cezary Rojewski	Vijendar Mukunda	Victor Nogueira	Toke Høiland-Jørgensen	Lorenzo Bianconi	Alexander Duyck	Willem de Bruijn	Masami Hiramatsu (Google)	Yafang Shao	Borislav Petkov	Rahul Rameshbabu	Gal Pressman	Salvatore Bonaccorso	Kijo Park	Oleg Nesterov	Frederic Weisbecker	Jan Kara	Alistair Popple	Tao Zhou	Allison Henderson	Hyunwoo Kim	FUJITA Tomonori	Dave Airlie	Leo Li	Dapeng Mi	John Stultz	Nicolai Buchwitz	Théo Lebrun	Ilya Maximets	Aaron Conole	Christoph Hellwig	Vladimir Murzin	Mark Rutland	David Laight	Jinjie Ruan	Muhammad Usama Anjum	Christopher Lameter (Ampere)	Lorenzo Stoakes (ARM)	Nathan Chancellor	Miguel Ojeda	Johannes Thumshirn	Dave Hansen	Boris Burkov	Daniel Drake	Jonghyuk Kim(MalHyuk)	Philipp Stanner	Michael Kelley	Charles Keepax	Han Xu	Leon Romanovsky	hybris	Jiaxun Yang	Muchun Song	Johannes Weiner	Andrew Morton	Kairui Song	Zi Yan	Saravanan D	Lance Yang	SJ Park	Hugh Dickins	Vlastimil Babka (SUSE)	Kunwu Chan	Shakeel Butt	Matthew Wilcox (Oracle)	Tal Zussman	Gustavo A. R. Silva	Stefano Garzarella	Srish Srinivasan	Mukesh Kumar Savaliya	Andy Shevchenko	Vladimir Zapolskiy	Chenguang Zhao	Andrew Lunn	Pranjal Shrivastava	Kevin Tian	Shawn Lin	Judith Mendez	Adrian Hunter	Nuno Sá	Helge Deller	Sergey Lebedev	Raphaël Larocque	James Seo	Amir Goldstein	Stephen Smalley	Martin-Éric Racine	Loic Poulain	Christian Lamparter	Ruben Wauters	Baruch Siach	Kent Russell	Alex Deucher	Bharath S M	Shyam Prasad N	David Howells	Usama Arif	Sesidhar Baddela	Arulprabhu Ponnusamy	Gian Carlo Boffa	Arun Easi	Hannes Reinecke	Lee Duncan	Krzysztof Kozlowski	Karan Tilak Kumar	Laurence Oberman	[email protected]	Asad Kamal	Thomas Zimmermann	Elizabeth Figura	Brett A C Sheffield	Ronald Warsow	Peter Schneider	Ron Economos	Pavel Machek (CIP)	Takeshi Ogasawara	Markus Reichelt	Justin M. Forbes	Wentao Guan	Benjamin Boortz	Barry K. Nathan
Series																																												T-b																																																																																																																																					T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/438
2/438
3/438
4/438
5/438
6/438
7/438
8/438
9/438
10/438
11/438	R-b
12/438	R-b
13/438	R-b
14/438	R-b
15/438	R-b
16/438
17/438													A-b
18/438		R-b
19/438		R-b												R-b T-b
20/438
21/438
22/438
23/438
24/438		R-b	T-b	T-b	T-b
25/438		R-b
26/438						R-b
27/438
28/438							A-b
29/438
30/438								R-b
31/438								R-b
32/438								R-b	T-b
33/438								R-b
34/438								R-b
35/438										R-b
36/438
37/438
38/438											R-b
39/438												R-b
40/438
41/438
42/438
43/438
44/438											R-b
45/438																					R-b
46/438																					R-b		R-b
47/438
48/438
49/438
50/438																								A-b
51/438
52/438
53/438															R-b
54/438
55/438
56/438																R-b	R-b	R-b
57/438																			T-b
58/438
59/438
60/438																				R-b
61/438																					R-b	R-b
62/438																					R-b	R-b
63/438																					R-b	R-b
64/438
65/438
66/438
67/438
68/438
69/438
70/438
71/438
72/438
73/438
74/438
75/438
76/438
77/438
78/438
79/438
80/438
81/438
82/438
83/438
84/438
85/438
86/438
87/438
88/438
89/438
90/438
91/438
92/438
93/438																									R-b
94/438
95/438																					R-b					R-b
96/438																					R-b
97/438																					R-b					R-b
98/438																											R-b
99/438																											R-b
100/438													A-b
101/438																												R-b
102/438
103/438
104/438																													R-b
105/438
106/438
107/438
108/438
109/438																														R-b
110/438																																									R-b
111/438
112/438																																		R-b
113/438																																					R-b
114/438																																							R-b
115/438																																								R-b
116/438																																								R-b
117/438																																								R-b
118/438																																								R-b
119/438
120/438																															R-b
121/438																															R-b
122/438																															R-b
123/438																															R-b
124/438																															R-b
125/438																															R-b
126/438																																R-b
127/438																																R-b
128/438
129/438																																	R-b
130/438																																	R-b
131/438
132/438
133/438
134/438																																			R-b
135/438
136/438
137/438																																				R-b
138/438
139/438
140/438
141/438
142/438
143/438
144/438																																						R-b
145/438																																						R-b
146/438																																										R-b
147/438																																																	R-b
148/438																																																	R-b
149/438																																																					R-b
150/438
151/438																																																						R-b	R-b
152/438																																																								R-b	R-b
153/438																																																										R-b T-b	T-b R-b
154/438																																																												R-b	R-b
155/438
156/438																																											R-b	R-b
157/438
158/438																																								R-b					R-b
159/438
160/438																								A-b
161/438																																								R-b
162/438																																														R-b	R-b
163/438																																																R-b
164/438
165/438
166/438																																																		R-b
167/438																					R-b
168/438
169/438
170/438
171/438
172/438																																																			R-b
173/438
174/438
175/438
176/438
177/438
178/438
179/438
180/438																																																R-b
181/438																																																				R-b
182/438																																																R-b
183/438																																																													R-b
184/438
185/438
186/438																																																													R-b
187/438																																																				R-b																									R-b	R-b
188/438																																								R-b
189/438
190/438																																																														R-b	T-b
191/438																																																														R-b	T-b
192/438																																																														R-b	T-b
193/438																																																																R-b
194/438
195/438																																																																	R-b
196/438																																																								R-b
197/438																																				R-b
198/438
199/438
200/438																																																																		R-b
201/438																																																																			R-b
202/438																																																																			R-b	R-b
203/438																																																																		R-b
204/438																																																																		R-b
205/438																																															R-b																						T-b	R-b
206/438																																																																							A-b
207/438																																																																							A-b
208/438																																																R-b
209/438																																														R-b
210/438																																																R-b
211/438																																																R-b																								R-b
212/438																																																R-b
213/438
214/438
215/438
216/438
217/438																																																																									R-b
218/438																																																																										R-b	A-b	A-b
219/438																																																																																													T-b R-b	R-b
220/438
221/438																																														R-b
222/438																																																																																					R-b
223/438																																																																																										R-b
224/438																																																								R-b
225/438																																																								R-b	R-b
226/438																																																																																											R-b
227/438																																																																																												A-b
228/438																												R-b
229/438
230/438
231/438
232/438
233/438
234/438
235/438
236/438
237/438
238/438
239/438
240/438																		R-b
241/438																																																																															T-b
242/438																									R-b
243/438																									R-b
244/438
245/438																																																																																T-b	R-b	R-b
246/438																																																																																			R-b	R-b
247/438
248/438																																R-b
249/438																																																																																Debugged-by T-b		R-b
250/438																																																																																						R-b
251/438																																																																																T-b	R-b	R-b					Debugged-by
252/438																																																																																								R-b
253/438																																																																																									R-b
254/438																																																																																									R-b
255/438																																																																																									R-b
256/438																																																																																									R-b
257/438																																																																																																									R-b	A-b
258/438																																																																																																												R-b
259/438																																															R-b
260/438																																																																																																																	R-b
261/438																																																																																																																		R-b
262/438																																																																																																																			A-b
263/438
264/438
265/438
266/438
267/438																																																																																															R-b	R-b
268/438																																																																																																	R-b
269/438
270/438
271/438																																																																																																		R-b T-b	A-b
272/438								R-b T-b
273/438
274/438																																																																																																				R-b	R-b	T-b	A-b	R-b
275/438																																																																																																					R-b	T-b	A-b
276/438																																																																																																		R-b			R-b
277/438
278/438
279/438
280/438
281/438
282/438																																																									R-b																																																		R-b
283/438																																																								R-b
284/438																																																									R-b
285/438																																																								R-b																																																					R-b
286/438
287/438																																																																																																														R-b
288/438																					R-b
289/438																					R-b
290/438																					R-b
291/438																																																																																																															T-b	R-b
292/438																																																																																																																				R-b																									R-b	R-b
293/438																																																																																																																				R-b
294/438
295/438																																																													R-b																																																																								R-b
296/438																																																																																																																																											R-b
297/438																																																																																																																																												R-b
298/438
299/438
300/438
301/438
302/438																																																R-b																					R-b																																																T-b
303/438																																																																									R-b
304/438																																																																									R-b
305/438																									R-b
306/438
307/438
308/438
309/438
310/438																																																																																																																						R-b
311/438																																																																																																																							R-b	R-b
312/438
313/438																																																																																																																									R-b	A-b
314/438																							R-b																																																																																																				R-b	T-b	T-b	R-b
315/438																																																																																																																															A-b
316/438																																																																																																																																A-b	T-b R-b
317/438																																																																																																																																		A-b
318/438
319/438																																																																																																																																			R-b	R-b T-b
320/438																																							R-b																								T-b
321/438																																							R-b
322/438																																																																																																																																						R-b	T-b
323/438
324/438
325/438																																																																																																																																								A-b
326/438																																																																																																																																									R-b
327/438																																																										R-b																																																																																R-b
328/438																					R-b
329/438																					R-b
330/438
331/438
332/438
333/438																																																																																																																																																							R-b	R-b
334/438																																																																																																																																																								R-b
335/438																																																																																																																																																								R-b
336/438
337/438
338/438
339/438
340/438																																																																																																																																															R-b
341/438
342/438																																				R-b
343/438
344/438
345/438
346/438
347/438
348/438
349/438																																																																																																																																																R-b	A-b
350/438																																																																																																																																																R-b	A-b
351/438																																																																																																																																																R-b	A-b
352/438																																																																																																																																																R-b	A-b
353/438																																																																																																																																																		R-b
354/438
355/438
356/438
357/438																																																																																																																																																			A-b
358/438
359/438
360/438																																																																																																																																																				T-b
361/438
362/438																																																																																																																																																					T-b
363/438
364/438
365/438																																																																																																																																																						A-b
366/438
367/438
368/438
369/438
370/438
371/438
372/438
373/438
374/438
375/438																																																																																																																																																													A-b
376/438
377/438
378/438
379/438
380/438
381/438
382/438																								A-b
383/438																																																																																																																																																									Reported-and-tested-by
384/438
385/438
386/438
387/438																																																																																																																																																										R-b
388/438
389/438
390/438
391/438
392/438																																																																																																																																																											A-b
393/438
394/438
395/438
396/438
397/438
398/438
399/438
400/438																																																																																																																																																												A-b
401/438																																																																																																																																																												A-b																			R-b
402/438																																	R-b
403/438
404/438																																	R-b																																																																																																																																									R-b
405/438
406/438																																																																																																																																																																													T-b
407/438																																																																																																																																																																														R-b
408/438																													R-b
409/438																																																																																																																																																															R-b
410/438																																																																																																																																																														R-b
411/438																																																																																																																																																														R-b
412/438																																																																																																																																																															R-b
413/438																																					R-b
414/438																																					R-b																																																																																																																											R-b
415/438																																					R-b
416/438																																																																																																																																																																	A-b
417/438																																																																																																																																																																		R-b
418/438																																					R-b
419/438																																					R-b
420/438																																					R-b
421/438																																																																																																																																																																		R-b
422/438																																																																																																																																																																		R-b
423/438																																																																																																																																																																		R-b
424/438																																																																																																																																																																		R-b
425/438																																																																																																																																																																		R-b
426/438																																																																																																																																																																		R-b
427/438																																																																																																																																																																		R-b
428/438
429/438																																																																																																																																																																			A-b
430/438																																																																																																																																																																				R-b	R-b	R-b	R-b	R-b	R-b
431/438																																																																																																																																																																				R-b	R-b	R-b	R-b	R-b	R-b		T-b
432/438																																																																																																																																																																				R-b	R-b	R-b					R-b	R-b
433/438																																																																																																																																																															R-b
434/438																																																																																																																																																															R-b
435/438																																																																																																																																																																																R-b
436/438																													R-b																				R-b
437/438																																																																																																																																																															A-b
438/438																																																		R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 187 reviewers.

Read the v1 thread

Cover letter [PATCH 7.2 000/438] 7.2.8-rc1 review

This is the start of the stable review cycle for the 7.2.8 release. There are 438 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 25 Sep 2026 14:05:46 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.8-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 7.2.8-rc1

Namjae Jeon <[email protected]>
ksmbd: fix partial normalized name responses

Mario Limonciello <[email protected]>
drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only

Vadim Nikitushkin <[email protected]>
drm/ttm: fix swapped-out resources never leaving their bulk_move range

Iván Ezequiel Rodriguez <[email protected]>
ntsync: reject wait ioctls with zero owner

Mario Limonciello <[email protected]>
drm/amdgpu: Fix GPU PCIe link capability reporting

chong li <[email protected]>
drm/amdgpu: reduce early full GPU access during SR-IOV init

Arun Easi <[email protected]>
scsi: fnic: Fix missed link-up when critical IRQ targets offline CPU

Karan Tilak Kumar <[email protected]>
scsi: fnic: Bump up version number

Karan Tilak Kumar <[email protected]>
scsi: fnic: Make debug logging protocol independent

Qi Zheng <[email protected]>
fs: fix missed removal of super_fs_objects_eligible()

Usama Arif <[email protected]>
fs/super: skip non-memcg-aware nr_cached_objects in memcg slab shrink

Frank Sorenson <[email protected]>
smb: client: fix missing iov bounds check in parse_posix_sids()

Frank Sorenson <[email protected]>
smb: client: fix missing lower-bound check on DFS referral string offsets

Frank Sorenson <[email protected]>

    smb: client: fix server->total_read for compound encrypted PDUs

Frank Sorenson <[email protected]>
smb: client: fix reparse buffer bounds in cifs_query_reparse_point()

Frank Sorenson <[email protected]>
smb: client: fix potential OOB read in smb3_enum_snapshots()

Frank Sorenson <[email protected]>
smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()

Frank Sorenson <[email protected]>
smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs

Paulo Alcantara <[email protected]>
smb: client: fix fattr leaking on wsl_to_fattr() failure

Paulo Alcantara <[email protected]>
smb: client: fix unaligned access in WSL reparse point parser

Paulo Alcantara <[email protected]>
smb: client: fix smbd_connection leak on cifs_get_tcp_session() error

Frank Sorenson <[email protected]>
smb: client: reject short Next offsets in parse_server_interfaces()

Joseph Qi <[email protected]>
smb: client: fix use-after-free of iface in cifs_try_adding_channels()

Paulo Alcantara <[email protected]>
smb: client: fix rlist race and missing initialization

April Cardenas <[email protected]>
smb/client: send lease break ACKs thru correct session for multiuser mounts

Paulo Alcantara <[email protected]>
smb: client: cancel reconnect work in clean_demultiplex_info()

Vladimir Marioukhine <[email protected]>
drm/amdkfd: implement restore_mqd callbacks for GFX12/12.1

David Francis <[email protected]>
drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc

David Francis <[email protected]>
drm/amdkfd: Avoid integer underflow in EOP ring size calculation.

Mario Limonciello <[email protected]>
drm/amdgpu: Skip KFD mapping clear before initialization

Mike Lothian <[email protected]>
drm/amdgpu: hold a runtime PM reference for P2P dma-buf attachments

Chengjun Yao <[email protected]>
drm/amdgpu: fix rmmio iounmap skipped on device removal

Tvrtko Ursulin <[email protected]>
drm/sched: Fix virtual runtime race

Jonghyuk Kim(MalHyuk) <[email protected]>
drm/msm: RCU-free the scheduler-containing ring and VM objects

Guangshuo Li <[email protected]>
drm/msm/hdmi_phy: fix runtime PM cleanup on probe failure

Saim Shujah <[email protected]>
drm/msm/dpu: clear pending peripheral flush state

Guangshuo Li <[email protected]>
drm/msm/adreno: fix autosuspend cleanup during teardown

Sophie D <[email protected]>
drm/gud: Ignore damage clips in full update mode

Sajal Gupta <[email protected]>
drm/gud: fix out-of-bounds write in gud_plane_atomic_check()

Devin Wittmayer <[email protected]>
wifi: mac80211: refuse to make a monitor active when it has no queue

Ivan Pustogarov <[email protected]>
wifi: mac80211: avoid out-of-bounds read for empty PREQ elements

Rik van Riel <[email protected]>
wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver

Zhao Li <[email protected]>
wifi: mwifiex: validate action frame fixed fields

Linmao Li <[email protected]>
wifi: mwifiex: prevent authentication frame length truncation

Pengpeng Hou <[email protected]>
wifi: mwifiex: validate scan response extents

Doruk Tan Ozturk <[email protected]>
wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length

Shengzhuo Wei <[email protected]>
wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST

Shengzhuo Wei <[email protected]>
wifi: p54: validate curve data length in the calibration curve converters

Tianchu Chen <[email protected]>
wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()

Ali Ahmet Memis <[email protected]>
wifi: wilc1000: fix out-of-bounds read in P2P public action frames

Runyu Xiao <[email protected]>
wifi: wlcore: release runtime PM ref on regdomain config failure

Fan Wu <[email protected]>
wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown

Tianchu Chen <[email protected]>
wifi: rsi: fix heap OOB write on key removal

Daehyeon Ko <[email protected]>
wifi: libipw: reject TKIP frames without a full MIC

Jiangshan Yi <[email protected]>
wifi: libertas_tf: fix UAF in lbtf_free_adapter()

Stanislaw Gruszka <[email protected]>
wifi: iwlegacy: fix broadcast stations deallocation

Jiangshan Yi <[email protected]>
wifi: brcmsmac: fix UAF in brcms_free_timer()

Wentao Liang <[email protected]>
watchdog: starfive-wdt: Fix runtime PM leak in starfive_wdt_pm_start()

Wentao Liang <[email protected]>
watchdog: sp5100_tco: Fix pci_dev reference leak in sp5100_tco_init()

Tzung-Bi Shih <[email protected]>
watchdog: rzv2h: Avoid division by zero

Tzung-Bi Shih <[email protected]>
watchdog: rtd119x: Avoid division by zero

Tzung-Bi Shih <[email protected]>
watchdog: msc313e: Propagate error code in resume()

Tzung-Bi Shih <[email protected]>
watchdog: msc313e: Fix premature reset during timeout update

Tzung-Bi Shih <[email protected]>
watchdog: digicolor: Avoid division by zero

Li Jun <[email protected]>
watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog

Thomas Richard (congatec GmbH) <[email protected]>
hwmon: (cgbc-hwmon) Add missing sensors

Thomas Richard (congatec GmbH) <[email protected]>
hwmon: (cgbc-hwmon) Fix current sensors ID lookup

Guangshuo Li <[email protected]>
hwmon: (w83793) release probe data through kref

Guangshuo Li <[email protected]>
hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove

Yibo Tan <[email protected]>
hwmon: (pwm-fan) Stop RPM timer before freeing tach data

Sanman Pradhan <[email protected]>

    hwmon: (pmbus/tps53679) Select page 0 for single-page TPS53676

Sanman Pradhan <[email protected]>
hwmon: (pmbus/tps53679) Fix TPS53676 phase page decoding

Nuno Sá <[email protected]>
hwmon: (pmbus/core) increase number of phases and add new mask

Muhammad Bilal <[email protected]>
hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()

Iván Ezequiel Rodriguez <[email protected]>
Input: zero ff_effect before compat copy in input_ff_effect_from_user

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound

Raphaël Larocque <[email protected]>
Input: synaptics - disable InterTouch on ThinkPad T440p (board id 2722)

Hans de Goede <[email protected]>

    Input: soc_button_array - check btns_desc->package.count

Hans de Goede <[email protected]>
Input: soc_button_array - fix MS Surface Pro 11 probe failure

Dmitry Torokhov <[email protected]>
Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()

Chris Sommers <[email protected]>
Input: i8042 - add quirk for Acer Aspire Go 15 AG15-42P

Runyu Xiao <[email protected]>
Input: hp_sdc - shut down kicker timer on module exit

Iván Ezequiel Rodriguez <[email protected]>
Input: evdev - zero absinfo before partial copy in EVIOCSABS

Linkai Gong <[email protected]>
Input: cyttsp5 - clamp the HID report size before memcpy

Alexei Turtanov <[email protected]>
Input: atkbd - skip deactivate for Xiaomi Redmi Book Pro 16 2026

Alvin Šipraga <[email protected]>
Input: adp5588-keys - cache GPIO state before registering the gpiochip

Diogo Ivo (Schneider Electric) <[email protected]>
mmc: sdhci_am654: Fallback to DT-provided itap delay on DDR50 tuning failure

Diogo Ivo (Schneider Electric) <[email protected]>
mmc: sdhci_am654: Clear ITAPDLY on tuning failure

Diogo Ivo (Schneider Electric) <[email protected]>
mmc: sdhci_am654: Reset command and data lines on failed tuning

Diogo Ivo (Schneider Electric) <[email protected]>
mmc: sdhci_am654: Move tuning_loop to local variable

Xu Rao <[email protected]>
mmc: spi: reset bytes_xfered before retrying CRC failures

Runyu Xiao <[email protected]>
mmc: sh_mmcif: initialize IRQ-thread mutex before requesting interrupt

Felix Gu <[email protected]>
mmc: sdio_uart: fix xmit_fifo leak when the port table is full

Myeonghun Pak <[email protected]>
mmc: sdhci-of-aspeed: Remove children before releasing SDC resources

Florian Maillard <[email protected]>
mmc: rtsx_pci_sdmmc: ignore broken write-protect on ThinkPad X260

Fan Wu <[email protected]>
mmc: mxcmmc: cancel data work and watchdog on remove

Fan Wu <[email protected]>
mmc: mmci: Fix use-after-free in busy-timeout work

Fan Wu <[email protected]>
mmc: hsq: Fix use-after-free in retry work

Zhu Ling <[email protected]>
mmc: core: Fix OF node reference leak on card add failure

Fan Wu <[email protected]>
mmc: core: Cancel SDIO IRQ work before freeing host

Bartosz Golaszewski <[email protected]>
power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()

Bartosz Golaszewski <[email protected]>
power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()

Bartosz Golaszewski <[email protected]>
power: sequencing: don't call .post_enable() if pwrseq_unit_enable() failed

Christian Göttsche <[email protected]>
selinux: always fill AVC decision in avc_has_perm_noaudit()

Karl Mehltretter <[email protected]>
selinux: recheck intermediate backing files on mprotect()

Karl Mehltretter <[email protected]>
selinux: preserve user SID across nested backing files

Shuhei Takeshita <[email protected]>
IB/hfi1: Fix the PIO_CRED credit-return mmap

Shuhei Takeshita <[email protected]>
IB/hfi1: Resolve the credit-return buffer through the send context's node

Shuangpeng Bai <[email protected]>
IB/mlx4: Fix use-after-free on pkey sysfs registration failure

Guangshuo Li <[email protected]>
i2c: imx: disable autosuspend on remove

Shengzhuo Wei <[email protected]>
i2c: imx: release DMA channels on probe error

Liu Zhenlong <[email protected]>
i2c: qcom-cci: fix device_node refcount leak in cci_probe()/cci_remove()

Linkai Gong <[email protected]>
i2c: atr: fix dangling adapter pointer on add failure

Shengzhuo Wei <[email protected]>
i2c: at91: release DMA channels on remove and probe error

fangqiurong <[email protected]>
sched_ext: Close the pre-enable ops error claim window

Wanwu Li <[email protected]>
sched_ext: Fix NULL sched deref in kfunc sub-sched error paths

Jarkko Sakkinen <[email protected]>
KEYS: trusted: Fix tpm2_load_cmd() boundary check

Maoyi Xie <[email protected]>
keys: translate request_key_auth pid for the reading procfs instance

Cen Zhang <[email protected]>
KEYS: encrypted: fix integer overflow of datablob_len

Wenjie Qi <[email protected]>
mm: filemap: retain mapped dropbehind folios

Lorenzo Stoakes (ARM) <[email protected]>
mm/vma: correctly unaccount on mmap_prepare() failure

Jiayuan Chen <[email protected]>
mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem

Lorenzo Stoakes (ARM) <[email protected]>

    mm/mremap: account mm->locked_vm correctly for MREMAP_DONTUNMAP

Shakeel Butt <[email protected]>
mm/mlock: use the IRQ-safe accessor for NR_MLOCK in __munlock_folio()

Lorenzo Stoakes (ARM) <[email protected]>
mm/huge_memory: bypass THP tuneables for huge pfnmap mappings

Nhat Pham <[email protected]>
mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count

Yifei Gao <[email protected]>
memstick: ms_block: destroy io_queue workqueue on removal

Shakeel Butt <[email protected]>
memcg: avoid charging the root memcg from obj_cgroup_charge_pages()

Théo Lebrun <[email protected]>
mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ

Alexey Klimov <[email protected]>
soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node

Zhiling Zou <[email protected]>
xfrm: save input state data before secpath resets

Siwei Zhang <[email protected]>
xfrm: use hlist_del_init_rcu for state_cache and state_cache_input

Chengfeng Ye <[email protected]>
xfrm: serialize state GC with device state flush

Alberto Carboneri <[email protected]>
scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()

Mark Amirkan <[email protected]>
net/packet: avoid truncating TPACKET_V3 private size

Mark Amirkan <[email protected]>
net/packet: clear RX owner on VNET header error

Jamal Hadi Salim <[email protected]>
net/sched: hhf: cap hh_flows_limit at change time

Xuanqiang Luo <[email protected]>
net/sched: act_api: release tail references on DELACTION failure

Guanglei Zhu <[email protected]>
net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value

Guanglei Zhu <[email protected]>
net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain

Guanglei Zhu <[email protected]>
net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()

Ahmed Naseef <[email protected]>
net: phy: mediatek: do not report link and per-speed LED rules together

Mark Amirkan <[email protected]>
net: lan743x: fix RX checksum use-after-free

Gris Ge <[email protected]>
net: ip_tunnel: initialize options_len before referencing options

Zhiling Zou <[email protected]>
ipv6: xfrm: use full sockets in local error paths

David Hu <[email protected]>
dma-buf: Split sgl by largest page-aligned chunk

David Hu <[email protected]>
dma-buf: Fix silent overflow for phys vec to sgt

Christian König <[email protected]>
dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3

Alexander Chesnokov <[email protected]>
dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()

Christian Lugnberg <[email protected]>
dmaengine: sun6i: fix undefined behaviour in sun6i_dma_tx_status

Christian Lugnberg <[email protected]>
dmaengine: sun6i: fix non-atomic read of DMA position registers

Abdurrahman Hussain <[email protected]>
gpiolib: of: don't mark hog nodes OF_POPULATED before a chip is found

Michail Tatas <[email protected]>
gpiolib: Put fwnode reference on failure

Guanghui Yang <[email protected]>
btrfs: clear free space tree creation state on rebuild failure

Anand Jain <[email protected]>
btrfs: derive f_fsid with dev_t only when temp_fsid is active

Filipe Manana <[email protected]>
btrfs: fix creation of compressed inline extents that don't save space

Hongling Zeng <[email protected]>
btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()

Radek Podgorny <[email protected]>
Bluetooth: keep dst_type with dst when reusing an LE connection

Chengfeng Ye <[email protected]>
Bluetooth: hci_sync: Serialize local codec list cleanup

Laxman Acharya Padhya <[email protected]>
Bluetooth: hci_codec: validate vendor codec count length

Aamir Ahmed <[email protected]>
Bluetooth: eir: validate service data length before reading UUID

Nicolas Thibert <[email protected]>
Bluetooth: btusb: fix NXP IW610 composite device handling

Mark Rutland <[email protected]>
arm64: percpu: Fix LSE operations on {8,16}-bit types

Mark Rutland <[email protected]>
arm64: percpu: Fix this_cpu_and() mask generation

Mark Rutland <[email protected]>
arm64: percpu: Fix this_cpu_write() casting

Dinh Nguyen <[email protected]>
arm64: dts: socfpga: change access permission from 755 to 644

Koichiro Den <[email protected]>
arm64: dts: renesas: r8a779f0: Set UFS lane count

Bradley Morgan <[email protected]>
arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc

Thomas Huth <[email protected]>
kselftest/arm64: Fix size of thread_data values for pthread_join()

Wyatt Feng <[email protected]>
net: xfrm: reject unrepresentable espintcp transport headers

Jeff Layton <[email protected]>
nfsd: fix handling of NFSEXP_PNFS in the netlink codepath

Zhiling Zou <[email protected]>
openvswitch: avoid reallocating confirmed conntrack labels

Jeffin Philip <[email protected]>
RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()

Quanye Yang <[email protected]>
RDMA/ucma: Serialize join and leave on copy_to_user failure

Hao-Qun Huang <[email protected]>
spi: virtio: Use the per-transfer bits per word

Itai Handler <[email protected]>
spi: spi-zynqmp-gqspi: stop the controller on shutdown

Frieder Schrempf <[email protected]>
spi: fsl-qspi: Reprogram the clock rate when the operation frequency changes

Ian Luites <[email protected]>
soundwire: dmi-quirks: Disable ghost Realtek on Asus GX651AX

Donggeun Yoo <[email protected]>
swiotlb: use the adjusted address for the highmem page lookup

Inbal Schussheim <[email protected]>
tcp: exclude old ACKs from tcp fast path

Chang S. Bae <[email protected]>
x86/microcode/intel: Reject problematic loading on Granite Rapids systems

Chang S. Bae <[email protected]>
x86/build/64: Prevent native builds from generating EGPR use

Lyude Paul <[email protected]>
drm/nouveau/gsp/r570: Enable S/R Display workaround in GSP

Lyude Paul <[email protected]>
drm/nouveau/gsp/r570: Set GcOff = 0 in fbsr

Lyude Paul <[email protected]>
drm/nouveau/gsp: Increase delay for magic sleep in r535_gsp_fini()

Lyude Paul <[email protected]>
Revert "nouveau/gsp: fix suspend/resume regression on r570 firmware"

Chunfeng Song <[email protected]>
rust: net: phy: fix off-by-one bit positions in device status accessors

Thomas Gleixner <[email protected]>
signal: Prevent exec() race

Aohan Mei <[email protected]>
rds: ib: use rds_conn_drop() on protocol version mismatch

Thomas Gleixner <[email protected]>
posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list

Claudiu Beznea <[email protected]>
phy: renesas: rcar-gen3-usb2: Avoid long delay in atomic context

Richard Zhu <[email protected]>
PCI: imx6: Move clock enable after core reset assertion

Seunguk Shin <[email protected]>
fs/dax: check zero or empty entry before converting xarray entry

Hyunwoo Kim <[email protected]>
exec: Cleanup POSIX timers right after de_thread()

Wentao Liang <[email protected]>
cifs: Fix server use-after-free in cifs_chan_skip_or_disable()

Wentao Liang <[email protected]>
ata: libahci_platform: Fix device reference leak in ahci_platform_get_resources()

Niklas Cassel <[email protected]>
ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY

Michal Koutný <[email protected]>
cgroup: Avoid iteration of dying tasks with zero refcount

Jiangshan Yi <[email protected]>

    ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type

Yuho Choi <[email protected]>
ALSA: virtio: reset device before deleting virtqueues

Xiang Mei <[email protected]>
ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity

Takashi Iwai <[email protected]>
ALSA: core: Fix potential UAF after asynchronous card release

David Howells <[email protected]>
9p: Fix v9fs_issue_write() to update i_size and remote_i_size

Jeremy Nyberg <[email protected]>
Input: xpad - fix PDP Marvel Xbox 360 controller

Roberts Kursitis <[email protected]>
Input: xpad - add support for Azeron devices

Erich Sartison <[email protected]>
Input: xpad - add support for Victrix Pro BFG Controller

Li Jun <[email protected]>
watchdog: da9062: fix suspend/resume handling of HW_RUNNING watchdog

James Seo <[email protected]>
hwmon: (hp-wmi-sensors) Improve raw WMI string handling

Cong Nguyen <[email protected]>
hwmon: (gpio-fan) return IRQ_HANDLED from the shared alarm IRQ handler

hpp.iscas <[email protected]>
Input: eeti_ts - publish the OF module alias

Matthew Schwartz <[email protected]>
x86/fred: Reconstruct the #GP context for rejected INT instructions

Andrea Righi <[email protected]>
sched/core: Avoid false migration warning for proxy donors

Vinay Belgaumkar <[email protected]>
perf: Fix null pointer access in is_include_guest_event()

Filipe Manana <[email protected]>
btrfs: check if there is space for chunk item when validating sys chunk array

Filipe Manana <[email protected]>
btrfs: abort transaction on failure to update inode for hole punching and reflinking

Francis Marlou Pacaro <[email protected]>
drm/amd/display: fix MALL hysteresis timer underflow at high refresh rates

Dmitriy Chumachenko <[email protected]>
drm/amdgpu: check ras and obj before dereference

Eric Dumazet <[email protected]>
net: skbuff: do not leave stale header offsets after pskb_carve()

Dmitriy Okunev <[email protected]>
net: mvpp2: prevent buffer overflow in page_pool allocation

James Clark <[email protected]>
net: macb: fix ordering around PTP timestamp read

Jinke Han <[email protected]>
x86/kprobes: Fix crash when probing CS CALL instructions

Daniel Zahka <[email protected]>

    net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()

Lorenzo Bianconi <[email protected]>
net: stmmac: preserve real_num_tx_queues on mqprio setup failure

Eric Dumazet <[email protected]>
net: prevent torn reads in netdev_tc_txq

Lorenzo Bianconi <[email protected]>
net: stmmac: propagate FPE preemption-class mapping errors

Linus Walleij <[email protected]>
net: ethernet: cortina: Ack RX overrun interrupt correctly

Eric Dumazet <[email protected]>
net: lock the socket in sock_gettstamp()

Jakub Kicinski <[email protected]>
eth: fbnic: ring the doorbell if a burst ends in a drop

Yige Jiang <[email protected]>
net: netsec: fix device_node reference leak on phy_np

Farhad Alemi <[email protected]>
net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check

Lorenzo Bianconi <[email protected]>
net: pass net_device_path_ctx to dev_fill_forward_path()

Pablo Neira Ayuso <[email protected]>
net: pass dst via net_device_path in dev_fill_forward_path()

Pablo Neira Ayuso <[email protected]>
net: do not advance stack index from dev_fwd_path()

Jamal Hadi Salim <[email protected]>
net/sched: codel: bound the dropping loop per dequeue call

Vijendar Mukunda <[email protected]>
ASoC: amd: acp: fix ffs() operator precedence for SoundWire link ID

Vijendar Mukunda <[email protected]>
ASoC: amd: acp: refactor codec config count in SOF SoundWire machine driver

Kuninori Morimoto <[email protected]>
ASoC: sdw_utils: tidyup asoc_sdw_parse_sdw_endpoints()

Kuninori Morimoto <[email protected]>
ASoC: sdw_utils: tidyup .count_sidecar

Vijendar Mukunda <[email protected]>
ASoC: amd: acp: bounds-check SoundWire link ID in machine drivers

Richard Fitzgerald <[email protected]>
ASoC: cs-amp-lib: Prevent NULL pointer if efi variable is zero length

HyeongJun An <[email protected]>
ASoC: hdmi-codec: Report a change when the channel status moves

Sasha Levin <[email protected]>
ASoC: ux500: Parenthesize MSP_{RX,TX}_CLKPOL_BIT() arguments

Daniel Linjama <[email protected]>
btrfs: handle lack of space when cleaning up verity items

Raag Jadav <[email protected]>
drm/xe/i2c: Disable IRQ on unbind

Peter Zijlstra <[email protected]>
futex: Also allocate private hash on vfork()

Nemesa Garg <[email protected]>
Revert "drm/i915/display: Clear SEL_FETCH_PLANE_CTL on plane disable"

Shivaprasad G Bhat <[email protected]>
powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba

Amit Machhiwal <[email protected]>
KVM: PPC: Book3S HV: fix secure device page leak on uv_page_in() failure

Amit Machhiwal <[email protected]>
KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()

Eric Dumazet <[email protected]>

    netlink: do not free nlk->groups while lockless readers can use it

Nikolay Aleksandrov <[email protected]>
net: bridge: vlan: fix bugs caused by switchdev deletion errors

Lorenzo Bianconi <[email protected]>
net: stmmac: do not overwrite phc_index when no PTP clock is registered

Eric Dumazet <[email protected]>
drop_monitor: fix out-of-bounds write in reset_per_cpu_data()

Eric Dumazet <[email protected]>
drop_monitor: use raw_cpu_ptr() in tracepoint probes

Eric Dumazet <[email protected]>
drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown

Eric Dumazet <[email protected]>
drop_monitor: synchronize tracepoint unregistration on error path

Eric Dumazet <[email protected]>
pppoatm: ensure a writable skb header and linear data

Lorenzo Bianconi <[email protected]>
net: stmmac: fix TSO header length truncation

Kuniyuki Iwashima <[email protected]>
af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().

Juan Perdomo <[email protected]>
Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup

Sai Teja Aluvala <[email protected]>
Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit

Tzung-Bi Shih <[email protected]>
Bluetooth: btmtksdio: Fix PM runtime reference leak in shutdown

Chris Lu <[email protected]>
Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access

Chris Lu <[email protected]>
Bluetooth: btmtk: fix wrong status for short WMT FUNC_CTRL events

Luiz Augusto von Dentz <[email protected]>
Bluetooth: ISO: set BT_LISTEN before requesting a BIG sync

Luiz Augusto von Dentz <[email protected]>
Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()

Ibrahim Abdelkader <[email protected]>
Bluetooth: hci_qca: Do not write to the serial port after it is closed

Radek Podgorny <[email protected]>
Bluetooth: put the peer's on-air address on air when we cannot resolve

Weiming Shi <[email protected]>
Bluetooth: coredump: Quiesce dump work on unregister

Chandrashekar Devegowda <[email protected]>
Bluetooth: btintel_pcie: validate TX skb length in send_sync

ThangNN99 <[email protected]>
Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained

Baineng Shou <[email protected]>
dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()

Namjae Jeon <[email protected]>
ksmbd: keep compound responses on query info errors

Namjae Jeon <[email protected]>
ksmbd: fix partial file information responses

Namjae Jeon <[email protected]>
ksmbd: return buffer overflow for partial filesystem info

Eric Dumazet <[email protected]>
tcp: do not let tcp_rmem be set below 4096

Kuniyuki Iwashima <[email protected]>
tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().

Nikolay Aleksandrov <[email protected]>
net: bridge: mst: move switchdev call outside rcu

Karl Mehltretter <[email protected]>
wifi: brcmfmac: fix lost 802.1x TX completion wakeup

Hohyun Sim <[email protected]>
net: fddi: skfp: fix NULL deref when setting the MAC address while down

Dong Chenchen <[email protected]>
ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup

Kuniyuki Iwashima <[email protected]>
sysctl: Check range in proc_dointvec_ms_jiffies_minmax

Nicolai Buchwitz <[email protected]>
net: bcmgenet: restore the hardware filters on open

Daniel Golle <[email protected]>
net: dsa: mxl862xx: disable the stats poll on teardown

Andrea Mayer <[email protected]>
seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation

Dmitry Baryshkov <[email protected]>
drm/msm/dsi: round the byte clock rate after reparenting to the PHY PLL

Filipe Manana <[email protected]>
btrfs: tree-checker: print dev extent offset in error message

Nicolas Escande <[email protected]>
wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()

Slavin Liu <[email protected]>
ALSA: hda: trace PCM open only after assigning a stream

Karl Mehltretter <[email protected]>
drm/vc4: Use managed KMS polling to fix UAF on unbind

Shuicheng Lin <[email protected]>
drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory

Shuicheng Lin <[email protected]>
drm/xe/shrinker: Return the freed page count through a parameter

Shuicheng Lin <[email protected]>
drm/xe/mmio_gem: Revoke drm_vma_node on xe_mmio_gem destroy

Ilia Levi <[email protected]>
drm/xe/mmio_gem: use write-back mapping for dummy page

Ilia Levi <[email protected]>
drm/xe/mmio_gem: forbid VMA split

Zihan Xi <[email protected]>
wifi: virt_wifi: don't transfer operstate before register

Namjae Jeon <[email protected]>
ksmbd: follow SMB2 session expiration semantics

Namjae Jeon <[email protected]>
ksmbd: extend procfs server statistics

Namjae Jeon <[email protected]>
ksmbd: fix malformed procfs status output

Xiang Mei <[email protected]>
ALSA: 6fire: fix OOB write from device-reported iso length

Takashi Iwai <[email protected]>
ALSA: usb: 6fire: Avoid embedded URBs

Runyu Xiao <[email protected]>
gpio: virtuser: skip free_irq when no IRQ is installed

Ulises Mendez Martinez <[email protected]>
objtool: Validate disassembler headers in libopcodes probe

Karl Mehltretter <[email protected]>
Input: trackpoint - fix the inertia attribute name in the ABI document

Gabor Juhos <[email protected]>
spi: spi-qpic-snand: avoid writing QPIC_EBI2_ECC_BUF_CFG register

Richard Fitzgerald <[email protected]>
ASoC: soc-pcm: Apply snd_soc_dai_link_ch_map.codec_ch_mask to codec params

Richard Fitzgerald <[email protected]>
ASoC: Add codec_ch_mask to snd_soc_dai_link_ch_map

Richard Fitzgerald <[email protected]>
ASoC: Rename snd_soc_dai_link_ch_map.ch_mask to cpu_ch_mask

William Bright <[email protected]>
drm/msm/dp: fix link bandwidth check when wide bus is enabled

Jesse Casco <[email protected]>
drm/msm/dp: skip PUSH_IDLE when the link was never enabled

Nguyen Ngoc Thang <[email protected]>

    ALSA: pcm: set timer->private_data before registering the PCM timer

AngeloGioacchino Del Regno <[email protected]>
phy: mediatek: phy-mtk-hdmi-mt8195: Fix TMDS clk bit ratio setting

AngeloGioacchino Del Regno <[email protected]>
phy: mediatek: phy-mtk-hdmi-mt8195: Fix PLL calc divisor overflow

Namjae Jeon <[email protected]>
ntfs: ignore interrupted inode reads as corruption

Namjae Jeon <[email protected]>
ntfs: propagate folio errors

Namjae Jeon <[email protected]>
ntfs: protect runlist updates with the runlist lock

Namjae Jeon <[email protected]>
ntfs: account for MFT records added during allocation

Namjae Jeon <[email protected]>
ntfs: repack $MFT/$ATTRIBUTE LIST

Namjae Jeon <[email protected]>
ntfs: use dynamic MFT tail reservation

Takashi Iwai <[email protected]>
ALSA: bcd2000: Fix race between rawmidi and disconnect

Kuniyuki Iwashima <[email protected]>
neighbour: Skip default parms when resumed in neightbl_dump_info().

Kuniyuki Iwashima <[email protected]>
neighbour: Don't render blackhole_netdev via RTM_GETNEIGHTBL.

Kuniyuki Iwashima <[email protected]>
neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.

Kuniyuki Iwashima <[email protected]>
neighbour: Add missing RCU annotation for neightbl_dump_info().

Karl Mehltretter <[email protected]>
keys: fix lost wakeup when reaping a dead key type

Jérémy Jean <[email protected]>
smb: client: validate absolute native symlink targets before NT fixups

Thadeu Lima de Souza Cascardo <[email protected]>
drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr

Catalin Marinas <[email protected]>
arm64: mte: Fix PTRACE_{PEEK,POKE}MTETAGS error documentation

Breno Leitao <[email protected]>
arm64: hibernate: clone only the linear map that exists at runtime

Shouping Wang <[email protected]>
perf/arm-cmn: Fix wp_dev_sel2 setting for multi-DTM configurations

Pablo Neira Ayuso <[email protected]>
netfilter: flowtable: hold reference on ct until flow is released

Pablo Neira Ayuso <[email protected]>
netfilter: nf_nat: unregister and release hooks on error

Fernando Fernandez Mancera <[email protected]>
netfilter: nf_tables: fix device name and prefix match in hook lookup

Theodor Arsenij Larionov Trichkine <[email protected]>
netfilter: nft_nat: fully initialise new_addr in netmap setup

Karl Mehltretter <[email protected]>
dma-buf: Make DMABUF_DEBUG default to y on DEBUG_KERNEL kernels

Karl Mehltretter <[email protected]>
drm/msm/adreno: Fix the skip_gpu parameter description

Karl Mehltretter <[email protected]>
drm/msm: Fix the separate_gpu_kms parameter description

David Laight <[email protected]>

    x86/div64: Fix addition of large constants in mul_u64_add_u64_div_u64()

Jérémy Jean <[email protected]>
RDMA/siw: Bound fragmented header copies by the remaining length

Leon Romanovsky <[email protected]>
RDMA/efa: Keep EQ resources alive while IRQ is registered

Leon Romanovsky <[email protected]>
RDMA/efa: Keep admin queues alive while IRQ is registered

Alex Bereza <[email protected]>
dmaengine: xilinx_dma: Fix hardware buffer descriptor chain after cyclic DMA

Sascha Hauer <[email protected]>
dmaengine: pxa: fix double counting of the hw descriptors

Alex Bereza <[email protected]>
dmaengine: xilinx_dma: Fix hardware buffer descriptor reuse order

Karl Mehltretter <[email protected]>
scsi: qla2xxx: Fix the ql2xfc2target parameter description

Karl Mehltretter <[email protected]>

    scsi: pm80xx: Fix the use_msix, use_tasklet and read_wwn parameter descriptions

Meijing Zhao <[email protected]>
mm: memblock: show all region flags in debugfs

Johannes Berg <[email protected]>
wifi: mac80211: set up the TX info early to fix failure paths

Johannes Berg <[email protected]>
wifi: mac80211: mesh: release the channel if start fails

Johannes Berg <[email protected]>
wifi: mac80211: mesh: reset the CSA state when leaving

Johannes Berg <[email protected]>
wifi: mac80211: add HE 6 GHz capability in the scan elems len

Johannes Berg <[email protected]>
wifi: mac80211: don't access the TSF of a down interface

Johannes Berg <[email protected]>
wifi: mac80211: don't RCU-dereference the mesh CSA settings we just set

Johannes Berg <[email protected]>
wifi: mac80211: don't allow link changes when iface is down

Johannes Berg <[email protected]>
wifi: mac80211: require a peer station for TDLS setup confirm

Johannes Berg <[email protected]>
wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown

Johannes Berg <[email protected]>
wifi: mac80211: don't allow injecting frames wider than the chanctx

Johannes Berg <[email protected]>
wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping

Johannes Berg <[email protected]>
wifi: cfg80211: get the wiphy out of a dying network namespace

Johannes Berg <[email protected]>
wifi: mac80211: unlist vifs when their netdev is unregistered

Johannes Berg <[email protected]>
wifi: cfg80211: undo netns switch if renaming the wiphy fails

Johannes Berg <[email protected]>
wifi: cfg80211: restore netns_immutable on failures

Johannes Berg <[email protected]>
wifi: mac80211: only operate on TDLS peers in the TDLS code

Johannes Berg <[email protected]>
wifi: mac80211: reset the LED state when ifup fails

Johannes Berg <[email protected]>
wifi: mac80211: reset state when starting AP fails

Johannes Berg <[email protected]>
wifi: mac80211: abort chanswitch when leaving a mesh

Johannes Berg <[email protected]>
wifi: mac80211: suppress chanctx warning for debugfs reset

Johannes Berg <[email protected]>
wifi: mac80211: don't offload TC setup on AP_VLAN interfaces

Johannes Berg <[email protected]>
wifi: mac80211: don't warn when an IBSS has no channel to scan

Johannes Berg <[email protected]>
wifi: mac80211: don't start a ROC while scanning

Johannes Berg <[email protected]>
wifi: cfg80211: fix NAN regulatory enforcement

Johannes Berg <[email protected]>
wifi: cfg80211: ibss: ref BSS entry for joined event

Johannes Berg <[email protected]>
wifi: cfg80211: don't filter by BSS type when removing stale entries

Johannes Berg <[email protected]>
wifi: cfg80211: only group hidden BSSes with beacon entries

Johannes Berg <[email protected]>
wifi: cfg80211: don't free driver-owned scan requests

Shivank Garg <[email protected]>
dmaengine: wait for RCU readers before releasing dma_device

Shivank Garg <[email protected]>
dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()

Shivank Garg <[email protected]>
dmaengine: Fix device kref underflow in dma_chan_put()

Donggeun Yoo <[email protected]>
dma-mapping: don't trace the DMA address when the allocation fails

Donggeun Yoo <[email protected]>
dma-coherent: report a failed reserved memory assignment

Orgad Shaneh <[email protected]>
MIPS: Octeon: apply USB FDT fixups also when USB is modular

Julian Braha <[email protected]>
mips: econet: fix unmet dependencies for ECONET

Bard Liao <[email protected]>

    soundwire: cadence_master: wait and cancel cdns->work before clock stop

Johannes Berg <[email protected]>

    wifi: cfg80211: check IP header size in cfg80211_classify8021d()

Johannes Berg <[email protected]>
wifi: cfg80211: don't get the radio mask for netdev-less wdevs

Carolina Jubran <[email protected]>
IB/IPoIB: Avoid restoring OPER_UP after multicast flush

Shmulik Cohen <[email protected]>
wifi: libipw: reject too-short association responses

Shmulik Cohen <[email protected]>
wifi: libipw: reject too-short beacon and probe responses

Bogdan Nicolae <[email protected]>
wifi: brcmfmac: cyw: pass PMKID to firmware if present

Peng Hao <[email protected]>
wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path

Mariano Baragiola <[email protected]>
wifi: virt_wifi: free skb when disconnected

Lachlan Hodges <[email protected]>
wifi: mac80211: include TIM bitmap control for buffered S1G mcast traffic

Ruoyu Wang <[email protected]>
dmaengine: sprd: Fix runtime PM reference leak in probe

Troy Mitchell <[email protected]>
dmaengine: mmp_pdma: fix wrong extended DRCMR base for SpacemiT K3

Quanye Yang <[email protected]>
RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted

Jacob Moroni <[email protected]>
RDMA/irdma: Enforce local fence for IB_WR_REG_MR

Cheng Xu <[email protected]>
RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables

Li RongQing <[email protected]>
RDMA/mad: Fix receive buffer leak when PKey enforcement fails

Li RongQing <[email protected]>

    RDMA/uverbs: Fix potential leak of resources->collection in flow_resources_alloc()

Sriharsha Basavapatna <[email protected]>
RDMA/bnxt_re: Avoid exposing umdbr to userspace

Ryan Mehri <[email protected]>
RDMA/rtrs: guard against null kobj name

Linkai Gong <[email protected]>
RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup

Yehyeong Lee <[email protected]>
IB/isert: wait for deferred control PDU completions before releasing the connection

Yehyeong Lee <[email protected]>
IB/iser: reject a remote invalidation of an unregistered direction

Ovidiu Panait <[email protected]>
arm64: dts: renesas: r9a09g087: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait <[email protected]>
arm64: dts: renesas: r9a09g077: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait <[email protected]>
arm64: dts: renesas: r9a09g047: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait <[email protected]>
arm64: dts: renesas: r9a09g056: Switch GBETH TX queue scheduling to WRR

Ovidiu Panait <[email protected]>
arm64: dts: renesas: r9a09g057: Switch GBETH TX queue scheduling to WRR

Biju Das <[email protected]>
power: sequencing: Fix build issue with COMPILE_TEST

Or Har-Toov <[email protected]>
RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency

Krystian Kaniewski <[email protected]>
RDMA/core: Reject unregistering netdevs in ib_get_eth_speed

Or Har-Toov <[email protected]>
RDMA/mlx5: Remove warn on missing representor in query_port_speed

Michael Bommarito <[email protected]>
RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds

Weiming Shi <[email protected]>
RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths

Xixin Liu <[email protected]>
clk: scpi: register scpi-cpufreq once and clear on failure

Xixin Liu <[email protected]>
clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate

Xixin Liu <[email protected]>
firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS

Cen Zhang (Microsoft Security FORGE Labs) <[email protected]>
xfrm: hold net_device reference under RCU in bundle creation

Gang Yan <[email protected]>
RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access

Norbert Szetei <[email protected]>
RDMA/rxe: validate access flags before swapping the MR's PD

Guoqing Jiang <[email protected]>
RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept

Pengpeng Hou <[email protected]>
ARM: socfpga: select the PL310 erratum 753970 workaround

Lucas Tanure <[email protected]>
arm64: dts: amlogic: t7: fix the pin groups of the vsync PWM

Lucas Tanure <[email protected]>
arm64: dts: amlogic: t7: khadas-vim4: add the PWM-driven supplies

Lucas Tanure <[email protected]>
arm64: dts: amlogic: t7: fix the pin groups of two PWM outputs

Lucas Tanure <[email protected]>
arm64: dts: amlogic: t7: khadas-vim4: allow the SD card to be power cycled

Lucas Tanure <[email protected]>
arm64: dts: amlogic: t7: use the real UART pclk

Maher Azzouzi <[email protected]>
esp: downgrade zerocopy managed frags before mutating skb frags

Eric Dumazet <[email protected]>
xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()

Kyle Zeng <[email protected]>
xfrm: fix compat ALLOCSPI request use-after-free

Henry Martin <[email protected]>
xfrm: iptfs: fix runt reassembly panic from short inner tot_len

Aleksandr Nogikh <[email protected]>
xfrm: add missing RCU read lock in xfrm_send_migrate_state()

Roshan Kumar <[email protected]>
xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()

Jens Axboe <[email protected]>
sunvdc: fix -EIO issue due to lack of retries

Günther Noack <[email protected]>
selftests/landlock: Add audit test for whiteout object creation

Günther Noack <[email protected]>
selftests/landlock: Add tests for whiteout object creation

Günther Noack <[email protected]>
selftests/landlock: Use an actual chardev for MAKE_CHAR audit test

-------------

Diffstat:

 .../ABI/testing/sysfs-devices-platform-trackpoint  |   2 +-
 .../arch/arm64/memory-tagging-extension.rst        |   5 +-
 Documentation/hwmon/cgbc-hwmon.rst                 |  42 +-
 Documentation/netlink/specs/rt-neigh.yaml          |   3 +
 Documentation/networking/ip-sysctl.rst             |   4 +-
 Makefile                                           |   4 +-
 arch/arm/mach-socfpga/Kconfig                      |   2 +-
 .../boot/dts/altera/socfpga_stratix10_socdk.dtsi   |   0
 .../dts/altera/socfpga_stratix10_socdk_emmc.dts    |   0
 .../boot/dts/amlogic/amlogic-t7-a311d2-an400.dts   |   2 +-
 .../dts/amlogic/amlogic-t7-a311d2-khadas-vim4.dts  | 113 +++-
 arch/arm64/boot/dts/amlogic/amlogic-t7.dtsi        |  44 +-
 arch/arm64/boot/dts/renesas/r8a779f0.dtsi          |   1 +
 arch/arm64/boot/dts/renesas/r9a09g047.dtsi         |  10 +
 arch/arm64/boot/dts/renesas/r9a09g056.dtsi         |  10 +
 arch/arm64/boot/dts/renesas/r9a09g057.dtsi         |  10 +
 arch/arm64/boot/dts/renesas/r9a09g077.dtsi         |  27 +
 arch/arm64/boot/dts/renesas/r9a09g087.dtsi         |  27 +
 arch/arm64/include/asm/percpu.h                    |  20 +-
 arch/arm64/kernel/hibernate-asm.S                  |   2 +
 arch/arm64/kernel/hibernate.c                      |   4 +-
 arch/arm64/kernel/mte.c                            |   2 +-
 arch/mips/Kconfig                                  |   4 +-
 arch/mips/cavium-octeon/octeon-platform.c          |   4 +-
 arch/powerpc/kernel/iommu.c                        |   2 +-
 arch/powerpc/kvm/book3s_hv_nested.c                |   2 +
 arch/powerpc/kvm/book3s_hv_uvmem.c                 |   5 +-
 arch/x86/Kconfig.cpu                               |  11 +
 arch/x86/Makefile                                  |   5 +
 arch/x86/entry/entry_fred.c                        |  11 +-
 arch/x86/include/asm/div64.h                       |   2 +-
 arch/x86/include/asm/text-patching.h               |   4 +-
 arch/x86/kernel/alternative.c                      |   6 +-
 arch/x86/kernel/cpu/microcode/intel.c              |  26 +
 arch/x86/kernel/kprobes/core.c                     |   5 +-
 drivers/ata/libahci.c                              |  15 +-
 drivers/ata/libahci_platform.c                     |   2 +-
 drivers/block/sunvdc.c                             |   9 +-
 drivers/bluetooth/btintel_pcie.c                   |   8 +-
 drivers/bluetooth/btmtk.c                          |   7 +-
 drivers/bluetooth/btmtksdio.c                      |  24 +-
 drivers/bluetooth/btmtkuart.c                      |  20 +-
 drivers/bluetooth/btusb.c                          |  17 +
 drivers/bluetooth/hci_qca.c                        |  14 +-
 drivers/clk/clk-scpi.c                             |   8 +-
 drivers/dma-buf/Kconfig                            |   2 +-
 drivers/dma-buf/dma-buf-mapping.c                  |  31 +-
 drivers/dma-buf/dma-fence.c                        |  14 +-
 drivers/dma/dmaengine.c                            |  10 +-
 drivers/dma/mmp_pdma.c                             |   5 +-
 drivers/dma/pxa_dma.c                              |   3 +-
 drivers/dma/sprd-dma.c                             |   3 +-
 drivers/dma/sun6i-dma.c                            |   9 +-
 drivers/dma/ti/k3-udma-glue.c                      |   5 +-
 drivers/dma/xilinx/xilinx_dma.c                    |  26 +-
 drivers/firmware/arm_scpi.c                        |   4 +-
 drivers/gpio/gpio-virtuser.c                       |   3 +-
 drivers/gpio/gpiolib-of.c                          |   6 +-
 drivers/gpio/gpiolib-shared.c                      |   9 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu.h                |   3 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c         |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         | 145 ++--
 drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c        |  43 +-
 drivers/gpu/drm/amd/amdgpu/mxgpu_ai.c              |   7 +-
 drivers/gpu/drm/amd/amdgpu/nbio_v7_9.c             |   2 +-
 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c  |   7 +-
 drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v10.c   |   2 +-
 drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v11.c   |   2 +-
 drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12.c   |  61 +-
 drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c |  70 +-
 drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c    |   6 +-
 drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_vi.c    |   5 +-
 .../drm/amd/display/dc/hwss/dcn30/dcn30_hwseq.c    |  13 +-
 drivers/gpu/drm/drm_atomic_uapi.c                  |  13 +-
 drivers/gpu/drm/gud/gud_pipe.c                     |   7 +-
 drivers/gpu/drm/i915/display/intel_cursor.c        |  15 +-
 drivers/gpu/drm/i915/display/skl_universal_plane.c |  15 +-
 drivers/gpu/drm/msm/adreno/adreno_device.c         |   2 +-
 drivers/gpu/drm/msm/adreno/adreno_gpu.c            |   2 +
 drivers/gpu/drm/msm/disp/dpu1/dpu_hw_ctl.c         |   1 +
 drivers/gpu/drm/msm/dp/dp_display.c                |  21 +-
 drivers/gpu/drm/msm/dsi/dsi_host.c                 |  36 +-
 drivers/gpu/drm/msm/hdmi/hdmi_phy.c                |   8 +-
 drivers/gpu/drm/msm/msm_drv.c                      |   2 +-
 drivers/gpu/drm/msm/msm_gem.h                      |   3 +
 drivers/gpu/drm/msm/msm_gem_vma.c                  |   2 +-
 drivers/gpu/drm/msm/msm_ringbuffer.c               |   2 +-
 drivers/gpu/drm/msm/msm_ringbuffer.h               |   1 +
 .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/fbsr.c |   2 +-
 .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/gsp.c  |   8 +-
 .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/fbsr.c |   8 +-
 .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/gsp.c  |   3 +-
 .../drm/nouveau/nvkm/subdev/gsp/rm/r570/nvrm/gsp.h |   8 +
 drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/rm.h    |   2 +-
 drivers/gpu/drm/scheduler/sched_entity.c           |   8 +-
 drivers/gpu/drm/scheduler/sched_rq.c               |  20 +-
 drivers/gpu/drm/ttm/ttm_bo.c                       |   2 +-
 drivers/gpu/drm/vc4/vc4_kms.c                      |   2 +-
 drivers/gpu/drm/xe/xe_i2c.c                        |   3 +
 drivers/gpu/drm/xe/xe_mmio_gem.c                   |  33 +-
 drivers/gpu/drm/xe/xe_mmio_gem.h                   |   2 +-
 drivers/gpu/drm/xe/xe_shrinker.c                   | 124 ++--
 drivers/hwmon/cgbc-hwmon.c                         | 129 ++--
 drivers/hwmon/gpio-fan.c                           |   4 +-
 drivers/hwmon/hp-wmi-sensors.c                     |  32 +-
 drivers/hwmon/pmbus/pmbus.h                        |   3 +-
 drivers/hwmon/pmbus/tps53679.c                     |  11 +-
 drivers/hwmon/pwm-fan.c                            |  13 +-
 drivers/hwmon/w83791d.c                            |   1 +
 drivers/hwmon/w83793.c                             |   4 +-
 drivers/i2c/busses/i2c-at91-core.c                 |   3 +
 drivers/i2c/busses/i2c-at91-master.c               |  12 +-
 drivers/i2c/busses/i2c-at91.h                      |   1 +
 drivers/i2c/busses/i2c-imx.c                       |   3 +
 drivers/i2c/busses/i2c-qcom-cci.c                  |  20 +-
 drivers/i2c/i2c-atr.c                              |   1 +
 drivers/infiniband/core/iwpm_util.c                |   9 +-
 drivers/infiniband/core/mad.c                      |   3 +-
 drivers/infiniband/core/rdma_core.c                |   1 -
 drivers/infiniband/core/ucma.c                     |   7 +-
 drivers/infiniband/core/uverbs_flow.c              |   1 +
 drivers/infiniband/core/uverbs_main.c              |  25 +-
 drivers/infiniband/core/verbs.c                    |  12 +-
 drivers/infiniband/hw/bnxt_re/main.c               |  10 +-
 drivers/infiniband/hw/bnxt_re/uapi.c               |   6 +-
 drivers/infiniband/hw/efa/efa_com.c                |   7 +-
 drivers/infiniband/hw/efa/efa_com.h                |   1 +
 drivers/infiniband/hw/efa/efa_main.c               |  35 +-
 drivers/infiniband/hw/erdma/erdma_main.c           |   4 +-
 drivers/infiniband/hw/erdma/erdma_verbs.c          |  18 +-
 drivers/infiniband/hw/hfi1/file_ops.c              |  23 +-
 drivers/infiniband/hw/irdma/verbs.c                |   2 +-
 drivers/infiniband/hw/mlx4/sysfs.c                 |   4 +
 drivers/infiniband/hw/mlx5/main.c                  |   7 +-
 drivers/infiniband/sw/rxe/rxe_mcast.c              |  50 +-
 drivers/infiniband/sw/rxe/rxe_mr.c                 |   3 +-
 drivers/infiniband/sw/rxe/rxe_odp.c                |  16 +-
 drivers/infiniband/sw/rxe/rxe_verbs.c              |  13 +-
 drivers/infiniband/sw/siw/siw_cm.c                 |   7 +-
 drivers/infiniband/sw/siw/siw_qp_rx.c              |   2 +-
 drivers/infiniband/ulp/ipoib/ipoib.h               |   7 +
 drivers/infiniband/ulp/ipoib/ipoib_ib.c            |  12 +-
 drivers/infiniband/ulp/ipoib/ipoib_multicast.c     |  16 +-
 drivers/infiniband/ulp/iser/iser_initiator.c       |  16 +-
 drivers/infiniband/ulp/isert/ib_isert.c            |  22 +
 drivers/infiniband/ulp/isert/ib_isert.h            |   2 +
 drivers/infiniband/ulp/rtrs/rtrs-clt-trace.h       |   2 +-
 drivers/infiniband/ulp/rtrs/rtrs-clt.c             |   8 +
 drivers/infiniband/ulp/rtrs/rtrs-clt.h             |   2 +
 drivers/infiniband/ulp/rtrs/rtrs-srv-trace.h       |   2 +-
 drivers/input/evdev.c                              |   2 +
 drivers/input/input-compat.c                       |   2 +
 drivers/input/joystick/xpad.c                      |  10 +-
 drivers/input/keyboard/adp5588-keys.c              |  12 +-
 drivers/input/keyboard/atkbd.c                     |   8 +
 drivers/input/misc/soc_button_array.c              |  16 +-
 drivers/input/mouse/synaptics.c                    |   8 +
 drivers/input/rmi4/rmi_driver.c                    |  13 +
 drivers/input/rmi4/rmi_smbus.c                     |  10 +-
 drivers/input/serio/hp_sdc.c                       |   2 +-
 drivers/input/serio/i8042-acpipnpio.h              |   7 +
 drivers/input/touchscreen/cyttsp5.c                |   1 +
 drivers/input/touchscreen/eeti_ts.c                |   1 +
 drivers/memstick/core/ms_block.c                   |   2 +
 drivers/misc/ntsync.c                              |   3 +
 drivers/mmc/core/bus.c                             |   2 +-
 drivers/mmc/core/host.c                            |   1 +
 drivers/mmc/core/sdio_uart.c                       |   3 +
 drivers/mmc/host/mmc_hsq.c                         |   8 +-
 drivers/mmc/host/mmc_spi.c                         |   1 +
 drivers/mmc/host/mmci.c                            |   3 +
 drivers/mmc/host/mxcmmc.c                          |   4 +
 drivers/mmc/host/rtsx_pci_sdmmc.c                  |   5 +
 drivers/mmc/host/sdhci-of-aspeed.c                 |   5 +-
 drivers/mmc/host/sdhci_am654.c                     |  43 +-
 drivers/mmc/host/sh_mmcif.c                        |   3 +-
 drivers/net/dsa/mxl862xx/mxl862xx.c                |  23 +-
 drivers/net/ethernet/airoha/airoha_ppe.c           |  17 +-
 drivers/net/ethernet/broadcom/genet/bcmgenet.c     |  19 +-
 drivers/net/ethernet/cadence/macb_ptp.c            |   9 +
 drivers/net/ethernet/cortina/gemini.c              |   2 +-
 drivers/net/ethernet/intel/igc/igc_tsn.c           |   6 +-
 drivers/net/ethernet/intel/ixgbe/ixgbe_main.c      |   7 +-
 drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c    |   3 +-
 drivers/net/ethernet/mediatek/mtk_ppe_offload.c    |  17 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |   2 +-
 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c       |  42 +-
 drivers/net/ethernet/meta/fbnic/fbnic_txrx.h       |   9 +-
 drivers/net/ethernet/microchip/lan743x_main.c      |   2 +-
 drivers/net/ethernet/sfc/falcon/tx.c               |   8 +-
 drivers/net/ethernet/sfc/siena/tx.c                |   8 +-
 drivers/net/ethernet/socionext/netsec.c            |   2 +
 drivers/net/ethernet/stmicro/stmmac/hwif.h         |   2 +-
 .../net/ethernet/stmicro/stmmac/stmmac_ethtool.c   |   2 -
 drivers/net/ethernet/stmicro/stmmac/stmmac_fpe.c   |  14 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |   6 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c    |  99 ++-
 drivers/net/fddi/skfp/skfddi.c                     |   3 +-
 drivers/net/phy/mediatek/mtk-phy-lib.c             |  27 +-
 drivers/net/wireless/ath/ath11k/mac.c              |  25 +-
 drivers/net/wireless/ath/wcn36xx/dxe.c             |   2 +-
 .../wireless/broadcom/brcm80211/brcmfmac/core.c    |   2 +
 .../broadcom/brcm80211/brcmfmac/cyw/core.c         |   5 +-
 .../broadcom/brcm80211/brcmsmac/mac80211_if.c      |   4 +
 .../wireless/intel/ipw2x00/libipw_crypto_tkip.c    |  12 +-
 drivers/net/wireless/intel/ipw2x00/libipw_rx.c     |   6 +
 drivers/net/wireless/intel/iwlegacy/common.c       |   2 +-
 drivers/net/wireless/intersil/p54/eeprom.c         |  22 +-
 drivers/net/wireless/marvell/libertas_tf/main.c    |   2 +-
 drivers/net/wireless/marvell/mwifiex/cfg80211.c    |  12 +-
 drivers/net/wireless/marvell/mwifiex/pcie.c        |   2 +-
 drivers/net/wireless/marvell/mwifiex/scan.c        |  54 +-
 drivers/net/wireless/marvell/mwifiex/util.c        |  10 +-
 drivers/net/wireless/microchip/wilc1000/cfg80211.c |  14 +
 drivers/net/wireless/microchip/wilc1000/wlan.c     |   9 +
 drivers/net/wireless/rsi/rsi_91x_mgmt.c            |   2 -
 drivers/net/wireless/ti/wlcore/main.c              |   4 +-
 drivers/net/wireless/virtual/mac80211_hwsim_main.c |  39 +-
 drivers/net/wireless/virtual/virt_wifi.c           |   4 +-
 drivers/net/wwan/mhi_wwan_mbim.c                   |  28 +-
 drivers/net/wwan/t7xx/t7xx_netdev.c                |   4 +
 drivers/pci/controller/dwc/pci-imx6.c              |  12 +-
 drivers/perf/arm-cmn.c                             |  10 +-
 drivers/phy/mediatek/phy-mtk-hdmi-mt8195.c         |   4 +-
 drivers/phy/mediatek/phy-mtk-hdmi-mt8195.h         |   3 +
 drivers/phy/renesas/phy-rcar-gen3-usb2.c           | 310 +++++++--
 drivers/power/sequencing/Kconfig                   |   3 +-
 drivers/power/sequencing/core.c                    |  11 +-
 drivers/scsi/fnic/fdls_disc.c                      | 726 +++++++++++----------
 drivers/scsi/fnic/fip.c                            | 117 ++--
 drivers/scsi/fnic/fip.h                            |   2 +-
 drivers/scsi/fnic/fnic.h                           |  68 +-
 drivers/scsi/fnic/fnic_fcs.c                       | 126 ++--
 drivers/scsi/fnic/fnic_isr.c                       |  41 +-
 drivers/scsi/fnic/fnic_main.c                      |  89 ++-
 drivers/scsi/fnic/fnic_scsi.c                      | 210 +++---
 drivers/scsi/pm8001/pm8001_init.c                  |   6 +-
 drivers/scsi/qla2xxx/qla_os.c                      |   2 +-
 drivers/scsi/scsi.c                                |  24 +-
 drivers/soc/samsung/exynos-pmu.c                   |   7 +-
 drivers/soundwire/cadence_master.c                 |   7 +
 drivers/soundwire/dmi-quirks.c                     |   7 +
 drivers/spi/spi-fsl-qspi.c                         |   5 +-
 drivers/spi/spi-qpic-snand.c                       |   4 -
 drivers/spi/spi-virtio.c                           |   2 +-
 drivers/spi/spi-zynqmp-gqspi.c                     |  34 +
 drivers/watchdog/da9062_wdt.c                      |   4 +-
 drivers/watchdog/da9063_wdt.c                      |   4 +-
 drivers/watchdog/digicolor_wdt.c                   |  13 +-
 drivers/watchdog/msc313e_wdt.c                     |  16 +-
 drivers/watchdog/rtd119x_wdt.c                     |   7 +-
 drivers/watchdog/rzv2h_wdt.c                       |   7 +-
 drivers/watchdog/sp5100_tco.c                      |   6 +-
 drivers/watchdog/starfive-wdt.c                    |   2 +-
 fs/9p/vfs_addr.c                                   |  28 +-
 fs/btrfs/dev-replace.c                             |   1 +
 fs/btrfs/disk-io.c                                 |   4 +
 fs/btrfs/file.c                                    |   4 +-
 fs/btrfs/free-space-tree.c                         |  14 +-
 fs/btrfs/inode.c                                   |  18 +-
 fs/btrfs/super.c                                   |   8 +-
 fs/btrfs/tree-checker.c                            |   2 +-
 fs/btrfs/verity.c                                  |  18 +-
 fs/dax.c                                           |   9 +-
 fs/exec.c                                          |  29 +-
 fs/nfsd/export.c                                   |   3 +-
 fs/ntfs/attrib.c                                   | 259 ++++++--
 fs/ntfs/attrib.h                                   |   9 +
 fs/ntfs/attrlist.c                                 | 224 ++++++-
 fs/ntfs/attrlist.h                                 |   2 +
 fs/ntfs/compress.c                                 |   2 +-
 fs/ntfs/file.c                                     |   3 +-
 fs/ntfs/inode.c                                    |  35 +-
 fs/ntfs/mft.c                                      | 445 ++++++++++---
 fs/ntfs/mft.h                                      |   2 +-
 fs/ntfs/namei.c                                    |   2 +-
 fs/ntfs/super.c                                    |  12 +-
 fs/ntfs/volume.h                                   |  12 +-
 fs/smb/client/cifssmb.c                            |   2 +-
 fs/smb/client/connect.c                            |   9 +
 fs/smb/client/file.c                               |   4 +-
 fs/smb/client/misc.c                               |  12 +-
 fs/smb/client/reparse.c                            |  58 +-
 fs/smb/client/reparse.h                            |   7 +-
 fs/smb/client/sess.c                               | 104 +--
 fs/smb/client/smb2inode.c                          |  11 +
 fs/smb/client/smb2ops.c                            |  51 +-
 fs/smb/client/smb2pdu.c                            |  13 +-
 fs/smb/client/trace.h                              |   1 +
 fs/smb/server/connection.c                         |  84 ++-
 fs/smb/server/connection.h                         |   3 +
 fs/smb/server/mgmt/user_session.c                  | 199 ++++--
 fs/smb/server/mgmt/user_session.h                  |   8 +-
 fs/smb/server/misc.h                               |   7 +-
 fs/smb/server/proc.c                               | 159 ++++-
 fs/smb/server/server.c                             |   9 +-
 fs/smb/server/smb2pdu.c                            | 126 ++--
 fs/smb/server/smb2pdu.h                            |   3 +-
 fs/smb/server/smb_common.h                         |   2 +-
 fs/smb/server/stats.h                              |  58 +-
 fs/smb/server/vfs_cache.c                          |  26 +-
 fs/smb/server/vfs_cache.h                          |   1 +
 fs/super.c                                         |   1 +
 include/keys/request_key_auth-type.h               |   2 +-
 include/linux/dma-fence.h                          |   6 +
 include/linux/ieee80211-mesh.h                     |   4 +-
 include/linux/netdevice.h                          |  13 +-
 include/net/bluetooth/coredump.h                   |   2 +
 include/net/codel.h                                |   5 +
 include/net/codel_impl.h                           |  16 +-
 include/net/mac80211.h                             |   5 +-
 include/net/sock.h                                 |   2 +
 include/rdma/uverbs_types.h                        |   2 -
 include/sound/soc.h                                |   3 +-
 include/sound/soc_sdw_utils.h                      |  31 +-
 include/trace/events/dma.h                         |   2 +-
 include/uapi/rdma/bnxt_re-abi.h                    |   2 +-
 kernel/cgroup/cgroup.c                             |   7 +-
 kernel/dma/coherent.c                              |   3 +-
 kernel/dma/swiotlb.c                               |   4 +-
 kernel/events/core.c                               |   4 +
 kernel/exit.c                                      |  11 +-
 kernel/fork.c                                      |   4 +-
 kernel/sched/core.c                                |   9 +-
 kernel/sched/ext/ext.c                             |  27 +-
 kernel/sched/ext/idle.c                            |  11 +-
 kernel/signal.c                                    | 117 +++-
 kernel/time/jiffies.c                              |   2 +-
 kernel/time/posix-cpu-timers.c                     |  40 +-
 mm/filemap.c                                       |   2 +-
 mm/huge_memory.c                                   |  86 ++-
 mm/memblock.c                                      |  18 +-
 mm/memcontrol.c                                    |   2 +-
 mm/mlock.c                                         |   2 +-
 mm/mremap.c                                        |   9 +-
 mm/shrinker.c                                      |   2 +
 mm/swapfile.c                                      |   2 +-
 mm/vma.c                                           |   6 +-
 net/atm/pppoatm.c                                  |  42 +-
 net/bluetooth/coredump.c                           |  65 +-
 net/bluetooth/eir.c                                |  10 +-
 net/bluetooth/hci_codec.c                          |  36 +-
 net/bluetooth/hci_conn.c                           |  21 +
 net/bluetooth/hci_core.c                           |  18 +-
 net/bluetooth/hci_sync.c                           |   2 +
 net/bluetooth/iso.c                                |  53 +-
 net/bluetooth/rfcomm/sock.c                        |  13 +-
 net/bridge/br_mst.c                                |  20 +-
 net/bridge/br_vlan.c                               |  31 +-
 net/core/dev.c                                     | 110 +++-
 net/core/drop_monitor.c                            |  18 +-
 net/core/neighbour.c                               |  35 +-
 net/core/skbuff.c                                  |  32 +-
 net/core/sock.c                                    |  16 +-
 net/ipv4/esp4.c                                    |   6 +
 net/ipv4/icmp.c                                    |  17 +-
 net/ipv4/ip_tunnel_core.c                          |  16 +-
 net/ipv4/sysctl_net_ipv4.c                         |   4 +-
 net/ipv4/tcp_input.c                               |   3 +-
 net/ipv4/tcp_ulp.c                                 |   4 +
 net/ipv6/esp6.c                                    |   6 +
 net/ipv6/seg6_local.c                              |   3 +
 net/ipv6/tcp_ipv6.c                                |   3 +-
 net/ipv6/xfrm6_output.c                            |  10 +-
 net/mac80211/cfg.c                                 |  18 +-
 net/mac80211/debugfs.c                             |   2 +-
 net/mac80211/debugfs_netdev.c                      |   9 +
 net/mac80211/ieee80211_i.h                         |   2 +-
 net/mac80211/iface.c                               |  39 +-
 net/mac80211/main.c                                |   4 +
 net/mac80211/mesh.c                                |  34 +-
 net/mac80211/offchannel.c                          |   7 +
 net/mac80211/pm.c                                  |   8 +-
 net/mac80211/scan.c                                |   2 +-
 net/mac80211/tdls.c                                |  40 +-
 net/mac80211/tx.c                                  | 107 +--
 net/netfilter/nf_flow_table_core.c                 |  12 +-
 net/netfilter/nf_flow_table_path.c                 |   7 +-
 net/netfilter/nf_nat_core.c                        |  46 +-
 net/netfilter/nf_tables_api.c                      |  22 +-
 net/netfilter/nft_nat.c                            |   2 +-
 net/netlink/af_netlink.c                           |  42 +-
 net/netlink/diag.c                                 |  18 +-
 net/openvswitch/conntrack.c                        |   2 +-
 net/packet/af_packet.c                             |   4 +-
 net/packet/internal.h                              |   2 +-
 net/psp/psp_sock.c                                 |   4 +
 net/rds/ib_cm.c                                    |   2 +-
 net/sched/act_api.c                                |  11 +-
 net/sched/sch_hhf.c                                |   9 +-
 net/sched/sch_mqprio.c                             |   4 +-
 net/sched/sch_mqprio_lib.c                         |   7 +-
 net/sched/sch_taprio.c                             |  26 +-
 net/unix/garbage.c                                 |  17 +-
 net/wireless/core.c                                | 150 +++--
 net/wireless/core.h                                |  16 +-
 net/wireless/ibss.c                                |  38 +-
 net/wireless/rdev-ops.h                            |   3 +
 net/wireless/reg.c                                 |   2 +-
 net/wireless/scan.c                                |  43 +-
 net/wireless/util.c                                |  38 +-
 net/xfrm/espintcp.c                                |   6 +-
 net/xfrm/xfrm_input.c                              |  22 +-
 net/xfrm/xfrm_iptfs.c                              |  12 +-
 net/xfrm/xfrm_policy.c                             |  20 +-
 net/xfrm/xfrm_state.c                              |   9 +-
 net/xfrm/xfrm_user.c                               |  18 +-
 rust/kernel/net/phy.rs                             |  38 +-
 scripts/generate_rust_target.rs                    |   5 +
 security/keys/encrypted-keys/encrypted.c           |  20 +-
 security/keys/gc.c                                 |   4 +-
 security/keys/request_key_auth.c                   |  12 +-
 security/keys/trusted-keys/trusted_tpm2.c          |  12 +-
 security/selinux/avc.c                             |   5 +-
 security/selinux/hooks.c                           | 158 ++++-
 security/selinux/include/objsec.h                  |  10 +-
 sound/core/init.c                                  |   3 +-
 sound/core/pcm_timer.c                             |   7 +-
 sound/hda/common/controller.c                      |   2 +-
 sound/soc/amd/acp/acp-sdw-legacy-mach.c            |  16 +-
 sound/soc/amd/acp/acp-sdw-sof-mach.c               |  21 +-
 sound/soc/codecs/cs-amp-lib.c                      |   2 +
 sound/soc/codecs/hdmi-codec.c                      |   6 +-
 sound/soc/codecs/rt712-sdca-dmic.c                 |  14 +-
 sound/soc/intel/boards/sof_sdw.c                   |   2 +-
 sound/soc/sdw_utils/soc_sdw_bridge_cs35l56.c       |   4 +-
 sound/soc/sdw_utils/soc_sdw_utils.c                |   9 +-
 sound/soc/soc-pcm.c                                |  18 +-
 sound/soc/ux500/ux500_msp_i2s.h                    |   4 +-
 sound/usb/6fire/comm.c                             |  42 +-
 sound/usb/6fire/comm.h                             |   2 +-
 sound/usb/6fire/midi.c                             |  43 +-
 sound/usb/6fire/midi.h                             |   2 +-
 sound/usb/6fire/pcm.c                              | 138 ++--
 sound/usb/6fire/pcm.h                              |   5 +-
 sound/usb/bcd2000/bcd2000.c                        |  33 +-
 sound/usb/card.h                                   |   1 +
 sound/usb/endpoint.c                               |  12 +-
 sound/virtio/virtio_card.c                         |   4 +-
 tools/objtool/Makefile                             |   8 +-
 .../selftests/arm64/mte/check_gcr_el1_cswitch.c    |   2 +-
 tools/testing/selftests/landlock/fs_test.c         | 197 +++++-
 442 files changed, 6831 insertions(+), 2723 deletions(-)

Read the cover letter in its thread