6.18.55-rc1 review

Greg Kroah-Hartman bridge linux-patches lkml stable 1 version Sep 30 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Sep 30395 patches 8 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/395	xfs: dont stash removename operations with unknown ftype`fs/xfs/scrub/dir_repair.c`	+17 -2	0 replies
2/395	erofs: fix large folio race in erofs_fscache_req_complete`fs/erofs/fscache.c`	+2 -0	0 replies
3/395	drm/amd/display: Atomize IRQ register read/modify/write ops`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c` `drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h` `drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c` +3 more	+82 ~~-30~~	0 replies
4/395	ALSA: hda/realtek: Limit Star Labs internal mic boost`sound/hda/codecs/realtek/alc269.c`	+6 -0	0 replies
5/395	ALSA: hda/realtek: Add StarFighter HDA SSID`sound/hda/codecs/realtek/alc269.c`	+3 -0	0 replies
6/395	remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage`drivers/remoteproc/qcom_q6v5_adsp.c`	+4 -4	0 replies
7/395	KVM: s390: Fix IRQ injection with SIGP Stop and Store Status`arch/s390/kvm/interrupt.c`	+38 ~~-32~~	0 replies
8/395	s390/uv: Fix loop condition in uv_find_secrets`arch/s390/kernel/uv.c`	+4 -2	0 replies
9/395	s390/uv: Prevent potential out-of-bounds read`arch/s390/kernel/uv.c`	+1 -1	0 replies
10/395	bpf: Fix bpf_skb_change_tail wrt csum partial skbs`net/core/filter.c`	+5 -6	0 replies
11/395	bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL`net/core/filter.c`	+2 -0	0 replies
12/395	selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc`tools/testing/selftests/ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc`	+1 -1	0 replies
13/395	bpf: Fix divide-by-zero in btf_struct_walk()`kernel/bpf/btf.c`	+1 -1	0 replies
14/395	bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()`net/core/filter.c`	+9 -4	0 replies
15/395	tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context`net/ipv4/inet_connection_sock.c`	+2 -1	0 replies
16/395	HID: multitouch: Add report ID mismatch quirk for ASUS ROG Z13 Folio`drivers/hid/hid-multitouch.c`	+27 -2	0 replies
17/395	HID: elecom: fix bus type for M-XGL20DLBK`drivers/hid/hid-quirks.c`	+1 -1	0 replies
18/395	KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr()`arch/x86/kvm/pmu.c` `arch/x86/kvm/vmx/pmu_intel.c`	+3 -8	0 replies
19/395	bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()`kernel/bpf/hashtab.c`	+21 -3	0 replies
20/395	bpf: Fix out-of-bounds read of rtt_min in sock_ops`net/core/filter.c`	+1 ~~-12~~	0 replies
21/395	bpf: Register dtor for freeing special fields`include/linux/bpf_mem_alloc.h` `kernel/bpf/hashtab.c` `kernel/bpf/memalloc.c`	+140 ~~-11~~	0 replies
22/395	bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk`kernel/bpf/memalloc.c`	+28 ~~-22~~	0 replies
23/395	bpf, sockmap: Fix self-redirect copied_seq double-counting`net/core/skmsg.c`	+4 -0	0 replies
24/395	bpf, arm64: set up the frame pointer for the exception callback`arch/arm64/net/bpf_jit_comp.c`	+2 -0	0 replies
25/395	pinctrl: meson: Fix typo in s4 group name`drivers/pinctrl/meson/pinctrl-meson-s4.c`	+1 -1	0 replies
26/395	HID: amd_sfh: Validate PCI BAR size before mapping`drivers/hid/amd-sfh-hid/amd_sfh_common.h` `drivers/hid/amd-sfh-hid/amd_sfh_pcie.c`	+14 -0	0 replies
27/395	HID: bpf: fix __hid_bpf_hw_check_params report length`drivers/hid/bpf/hid_bpf_dispatch.c`	+8 -4	0 replies
28/395	KVM: riscv: Fix NACL hfence entry update order`arch/riscv/kvm/nacl.c`	+16 -4	0 replies
29/395	RISC-V: KVM: Preserve firmware counter value across stop/start`arch/riscv/kvm/vcpu_pmu.c`	+6 -6	0 replies
30/395	RISC-V: KVM: Report snapshot write failure to the guest`arch/riscv/kvm/vcpu_pmu.c`	+4 -3	0 replies
31/395	RISC-V: KVM: Fix perf-backed counter accounting across stop and read`arch/riscv/kvm/vcpu_pmu.c`	+8 -8	0 replies
32/395	KVM: arm64: vgic-its: Free the caches when GITS_BASER changes`arch/arm64/kvm/vgic/vgic-its.c`	+8 -3	0 replies
33/395	KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save`arch/arm64/kvm/vgic/vgic-its.c`	+19 ~~-13~~	0 replies
34/395	KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()`arch/arm64/kvm/hyp/nvhe/pkvm.c`	+3 -2	0 replies
35/395	KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure`arch/arm64/kvm/hyp/nvhe/pkvm.c`	+4 -9	0 replies
36/395	KVM: arm64: vgic-v3: Fix GICv3 trapping in protected mode`arch/arm64/kvm/hyp/nvhe/pkvm.c` `arch/arm64/kvm/hyp/nvhe/sys_regs.c`	+8 -0	0 replies
37/395	KVM: arm64: Fix MTE flag initialization for protected VMs`arch/arm64/kvm/hyp/nvhe/pkvm.c`	+3 -3	0 replies
38/395	KVM: arm64: Include VM type when checking VM capabilities in pKVM`arch/arm64/include/asm/kvm_pkvm.h` `arch/arm64/kvm/arm.c` `arch/arm64/kvm/hyp/nvhe/pkvm.c`	+13 ~~-11~~	0 replies
39/395	KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2`arch/arm64/kvm/hyp/nvhe/pkvm.c`	+5 -4	0 replies
40/395	KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0`arch/arm64/kvm/hypercalls.c`	+2 -1	0 replies
41/395	KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP`arch/arm64/kvm/emulate-nested.c`	+1 -1	0 replies
42/395	squashfs: Add dictionary size range check to prevent shift-out-of-bounds`fs/squashfs/xz_wrapper.c`	+3 -3	0 replies
43/395	scsi: sd_zbc: Reject disks with too many zones`drivers/scsi/sd_zbc.c`	+7 -1	0 replies
44/395	pinctrl: sunxi: A523: fix voltage withstand encoding`drivers/pinctrl/sunxi/pinctrl-sun55i-a523-r.c` `drivers/pinctrl/sunxi/pinctrl-sun55i-a523.c` `drivers/pinctrl/sunxi/pinctrl-sunxi.c` +1 more	+10 -2	0 replies
45/395	Bluetooth: SMP: reject Security Request over BR/EDR`net/bluetooth/smp.c`	+17 -0	0 replies
46/395	Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()`drivers/bluetooth/btnxpuart.c`	+5 -3	0 replies
47/395	Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel`net/bluetooth/mgmt.c`	+15 -4	0 replies
48/395	selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode`tools/testing/selftests/cgroup/test_memcontrol.c`	+1 -1	0 replies
49/395	scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume()`drivers/scsi/megaraid/megaraid_sas_base.c`	+3 -1	0 replies
50/395	docs: s390/pci: Improve and update PCI documentation`Documentation/arch/s390/pci.rst`	+101 ~~-51~~	0 replies
51/395	s390/pci/docs: Fix sriov_numvfs attribute name`Documentation/arch/s390/pci.rst`	+1 -1	0 replies
52/395	s390/cio: Fix cio_update_schib() to not cache invalid schib`drivers/s390/cio/cio.c`	+7 -4	0 replies
53/395	s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points`drivers/s390/cio/device_ops.c`	+12 -0	0 replies
54/395	s390/cio: Guard PMCW field accesses with dnv check`drivers/s390/cio/chp.c` `drivers/s390/cio/device.c` `drivers/s390/cio/device_fsm.c` +2 more	+21 -5	0 replies
55/395	fs: avoid repeated scans in evict_inodes()`fs/inode.c`	+5 -6	0 replies
56/395	xsk: Use a 32-bit compare in xsk_map_gen_lookup`net/xdp/xskmap.c`	+1 -1	0 replies
57/395	bpf: Skip unsettled links in link iterator`kernel/bpf/syscall.c`	+4 -1	0 replies
58/395	eth: fbnic: Fix payload page pool error cleanup`drivers/net/ethernet/meta/fbnic/fbnic_txrx.c`	+1 -1	0 replies
59/395	net/sched: cls_u32: fix manual hash table handle IDR aliasing`net/sched/cls_u32.c`	+10 -2	0 replies
60/395	net: pcs: rzn1-miic: Fix config array initialization`drivers/net/pcs/pcs-rzn1-miic.c`	+2 -1	0 replies
61/395	octeontx2-af: use seq_file for rsrc_alloc debugfs`drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c`	+33 ~~-71~~	0 replies
62/395	net/mlx5: devcom, Base component size on linked devices`drivers/net/ethernet/mellanox/mlx5/core/lib/devcom.c`	+4 -1	0 replies
63/395	bpf: Restrict CO-RE poisoning to relocatable instructions`tools/lib/bpf/relo_core.c`	+31 ~~-27~~	0 replies
64/395	libbpf: Reject truncated ldimm64 CO-RE relocations`tools/lib/bpf/libbpf.c`	+7 -0	0 replies
65/395	ipv4: fib: fix data-race and stale genid check around nh->nh_saddr`net/ipv4/fib_semantics.c`	+12 -1	0 replies
66/395	netfilter: flowtable: publish HW_DEAD after worker is done`net/netfilter/nf_flow_table_offload.c`	+6 -1	0 replies
67/395	netfilter: nfnetlink_queue: hold nfnl mutex in event notifier`net/netfilter/nfnetlink_queue.c`	+5 -3	0 replies
68/395	netfilter: nft_synproxy: use the family-aware checksum helper`net/netfilter/nft_synproxy.c`	+2 -1	0 replies
69/395	ipvs: revalidate ihl before icmp_send`net/netfilter/ipvs/ip_vs_core.c`	+6 -0	0 replies
70/395	netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name`net/netfilter/nf_conntrack_netlink.c`	+2 -1	0 replies
71/395	arm64: io: Reject non-user protection in ioremap_prot()`arch/arm64/include/asm/io.h`	+2 -1	0 replies
72/395	ocfs2: make ocfs2_calc_xattr_init() return void`fs/ocfs2/namei.c` `fs/ocfs2/xattr.c` `fs/ocfs2/xattr.h`	+11 ~~-19~~	0 replies
73/395	drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update`drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c`	+5 -2	0 replies
74/395	drm/nouveau/clk: dont clobber reclock status when restoring volt/fan`drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c`	+9 -7	0 replies
75/395	drm/nouveau/disp: dont reject HDMI config on cards without SCDC`drivers/gpu/drm/nouveau/nvkm/engine/disp/uoutp.c`	+1 -2	0 replies
76/395	net/sched: act_ct: dont WARN on benign flow_offload_alloc() failure`net/sched/act_ct.c`	+2 -3	0 replies
77/395	net: gue: reject invalid REMCSUM offsets`include/net/gue.h`	+15 -4	0 replies
78/395	net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure`drivers/net/ethernet/mediatek/mtk_eth_soc.c`	+5 -1	0 replies
79/395	ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink().`net/ipv6/ip6_gre.c`	+1 -1	0 replies
80/395	eth: fbnic: Handle maximum standalone channels`drivers/net/ethernet/meta/fbnic/fbnic_txrx.c`	+1 -1	0 replies
81/395	eth: fbnic: reset num_napi when the napi vectors are freed`drivers/net/ethernet/meta/fbnic/fbnic_pci.c`	+14 -4	0 replies
82/395	eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox`drivers/net/ethernet/meta/fbnic/fbnic_csr.h` `drivers/net/ethernet/meta/fbnic/fbnic_fw.c`	+9 -1	0 replies
83/395	eth: fbnic: Reuse RX mailbox pages`drivers/net/ethernet/meta/fbnic/fbnic_fw.c`	+16 -9	0 replies
84/395	eth fbnic: Add debugfs hooks for firmware mailbox`drivers/net/ethernet/meta/fbnic/fbnic_debugfs.c` `drivers/net/ethernet/meta/fbnic/fbnic_fw.c` `drivers/net/ethernet/meta/fbnic/fbnic_fw.h`	+50 -1	0 replies
85/395	eth: fbnic: Handle FW mailbox completions flagged with an error`drivers/net/ethernet/meta/fbnic/fbnic_csr.h` `drivers/net/ethernet/meta/fbnic/fbnic_debugfs.c` `drivers/net/ethernet/meta/fbnic/fbnic_fw.c` +1 more	+44 -3	0 replies
86/395	sctp: avoid livelock while updating retransmit path`net/sctp/associola.c`	+8 -7	0 replies
87/395	bpf: Bound ownership depth through local kptrs and graph roots`kernel/bpf/btf.c` `tools/testing/selftests/bpf/prog_tests/linked_list.c`	+88 ~~-50~~	0 replies
88/395	net: usb: catc: bound the RX packet length in catc_rx_done()`drivers/net/usb/catc.c`	+12 -3	0 replies
89/395	bpf: Check params size before reading reserved fields`kernel/bpf/crypto.c`	+3 -2	0 replies
90/395	net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget`net/sched/sch_hfsc.c`	+22 -0	0 replies
91/395	drm/virtio: fix object leak when drm_gem_handle_create() fails`drivers/gpu/drm/virtio/virtgpu_gem.c`	+1 -1	0 replies
92/395	drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()`drivers/gpu/drm/virtio/virtgpu_ioctl.c`	+1 -1	0 replies
93/395	drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()`drivers/gpu/drm/virtio/virtgpu_ioctl.c`	+2 -2	0 replies
94/395	drm/virtio: release the GEM object on virtio_gpu_vram_create() errors`drivers/gpu/drm/virtio/virtgpu_vram.c`	+9 -8	0 replies
95/395	Revert "drm/virtio: Allow importing prime buffers when 3D is enabled"`drivers/gpu/drm/virtio/virtgpu_prime.c`	+1 -1	0 replies
96/395	drm/virtio: sync shmem backing on guest-bound transfers`drivers/gpu/drm/virtio/virtgpu_drv.h` `drivers/gpu/drm/virtio/virtgpu_ioctl.c` `drivers/gpu/drm/virtio/virtgpu_vq.c`	+94 -0	0 replies
97/395	drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach`drivers/gpu/drm/bridge/samsung-dsim.c`	+1 -1	0 replies
98/395	ovpn: preserve IPv6 scope id for netlink peer endpoints`drivers/net/ovpn/netlink.c`	+6 -0	0 replies
99/395	ovpn: skip UDP source validation for unspecified addresses`drivers/net/ovpn/udp.c`	+4 -3	0 replies
100/395	ovpn: track UDP socket route key for peer dst cache`drivers/net/ovpn/peer.c` `drivers/net/ovpn/peer.h` `drivers/net/ovpn/udp.c`	+95 ~~-15~~	0 replies
101/395	ovpn: validate peer state before caching UDP dst`drivers/net/ovpn/udp.c`	+31 -2	0 replies
102/395	ovpn: replace bind when learning local endpoint`drivers/net/ovpn/peer.c`	+23 ~~-20~~	0 replies
103/395	ovpn: replace bind when clearing stale local source`drivers/net/ovpn/udp.c`	+56 ~~-25~~	0 replies
104/395	ovpn: always unhash old VPN addresses before rehashing`drivers/net/ovpn/peer.c`	+4 -6	0 replies
105/395	ovpn: reject duplicate peer VPN addresses`drivers/net/ovpn/netlink.c` `drivers/net/ovpn/peer.c` `drivers/net/ovpn/peer.h`	+101 -9	0 replies
106/395	ovpn: reject multipeer peers without VPN addresses`drivers/net/ovpn/netlink.c`	+30 -6	0 replies
107/395	ovpn: reject invalid peer VPN addresses`drivers/net/ovpn/netlink.c`	+42 ~~-13~~	0 replies
108/395	Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough`net/bluetooth/bnep/core.c` `net/bluetooth/bnep/netdev.c`	+23 -2	0 replies
109/395	Bluetooth: btintel_pcie: validate device-supplied DMA indices`drivers/bluetooth/btintel_pcie.c`	+16 -0	0 replies
110/395	Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()`net/bluetooth/rfcomm/core.c`	+2 -1	0 replies
111/395	octeontx2-af: Fix memory scaling limitation in SR-IOV mode`drivers/net/ethernet/marvell/octeontx2/af/common.h`	+39 -6	0 replies
112/395	ipv6: Prevent rt6_insert_exception() for dying fib6_info.`net/ipv6/ip6_fib.c` `net/ipv6/route.c`	+6 -1	0 replies
113/395	dpll: use exact lookup for reference sync pin id`drivers/dpll/dpll_netlink.c`	+1 -2	0 replies
114/395	net: usb: sr9700: include receive overhead in the length check`drivers/net/usb/sr9700.c`	+2 -1	0 replies
115/395	ipv6: Fix dst leak for uncached routes.`include/net/ip6_route.h` `net/ipv6/route.c`	+6 -5	0 replies
116/395	udp: relocate a connected socket in the 4-tuple hash table on re-connect`net/ipv4/udp.c`	+14 -5	0 replies
117/395	udp: remove a disconnected socket from the 4-tuple hash table`net/ipv4/udp.c`	+23 -0	0 replies
118/395	tg3: clean up PHYLIB resources on probe failure`drivers/net/ethernet/broadcom/tg3.c`	+4 -0	0 replies
119/395	drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable`drivers/gpu/drm/i915/display/intel_cursor.c` `drivers/gpu/drm/i915/display/intel_display_types.h` `drivers/gpu/drm/i915/display/intel_psr.c` +1 more	+26 -7	0 replies
120/395	s390/debug: Do not register views for failed static debug areas`arch/s390/include/asm/debug.h` `arch/s390/kernel/debug.c`	+15 -5	0 replies
121/395	s390/debug: Fix NULL pointer dereference in debug_info_copy()`arch/s390/kernel/debug.c`	+2 -1	0 replies
122/395	net: spacemit: clear TX descriptor on fragment mapping failure`drivers/net/ethernet/spacemit/k1_emac.c`	+3 -0	0 replies
123/395	net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error`drivers/net/ethernet/ti/netcp_core.c`	+1 -1	0 replies
124/395	genetlink: report the real command id for dump-only ops in policy dumps`net/netlink/genetlink.c`	+5 -3	0 replies
125/395	net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure`drivers/net/pcs/pcs-xpcs.c`	+3 -1	0 replies
126/395	thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds`drivers/thermal/gov_step_wise.c`	+4 -6	0 replies
127/395	bpf: Fix bounds check for skb-backed dynptrs`include/linux/skbuff.h`	+4 -1	0 replies
128/395	bpf: Fix bpf_sock context code generation`net/core/filter.c`	+4 -3	0 replies
129/395	bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc`net/core/sock_map.c`	+1 -0	0 replies
130/395	net/mlx5: Bridge, dont fail switchdev events of sibling eswitch ports`drivers/net/ethernet/mellanox/mlx5/core/en/rep/bridge.c` `drivers/net/ethernet/mellanox/mlx5/core/esw/bridge.c` `drivers/net/ethernet/mellanox/mlx5/core/esw/bridge.h`	+44 -9	0 replies
131/395	net/mlx5: Bridge, dont fail unlink of untracked/unsupported peer ports`drivers/net/ethernet/mellanox/mlx5/core/esw/bridge.c`	+5 -4	0 replies
132/395	sctp: hold asoc or transport before mod_timer() in timer handlers`net/sctp/input.c` `net/sctp/sm_sideeffect.c`	+26 ~~-18~~	0 replies
133/395	net: stmmac: selftests: Support running selftests on DSA conduits`drivers/net/ethernet/stmicro/stmmac/stmmac_selftests.c`	+71 ~~-18~~	0 replies
134/395	net: stmmac: selftests: Check the dev->features for S-TAG offload testing`drivers/net/ethernet/stmicro/stmmac/stmmac_selftests.c`	+1 -1	0 replies
135/395	net: stmmac: selftests: Capture all packets for vlan checks`drivers/net/ethernet/stmicro/stmmac/stmmac_selftests.c`	+13 -6	0 replies
136/395	net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K`drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c` `drivers/net/ethernet/stmicro/stmmac/hwif.h` `drivers/net/ethernet/stmicro/stmmac/ring_mode.c`	+5 -5	0 replies
137/395	net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test`drivers/net/ethernet/stmicro/stmmac/stmmac_selftests.c`	+3 -0	0 replies
138/395	eth: fbnic: Avoid rounding zero ring sizes`drivers/net/ethernet/meta/fbnic/fbnic_ethtool.c`	+9 -4	0 replies
139/395	net/sched: fix potential stack infoleak in em_text_dump()`net/sched/em_text.c`	+1 -1	0 replies
140/395	bpf: Reject dev-bound-only programs on other devices`kernel/bpf/offload.c`	+2 -0	0 replies
141/395	nfc: nfcmrvl: validate helper command length before pull`drivers/nfc/nfcmrvl/fw_dnld.c`	+8 -3	0 replies
142/395	nfc: st21nfca: validate received frame size`drivers/nfc/st21nfca/i2c.c`	+19 ~~-10~~	0 replies
143/395	nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()`net/nfc/llcp_core.c`	+25 -0	0 replies
144/395	selftests: nci: Correct pthread_create return value check`tools/testing/selftests/nci/nci_dev.c`	+7 -5	0 replies
145/395	nfc: llcp: Fix race condition in accept_queue lifecycle`net/nfc/llcp.h` `net/nfc/llcp_core.c` `net/nfc/llcp_sock.c`	+116 ~~-59~~	0 replies
146/395	selftests: nci: Fix uninitialized family ID on missing attribute`tools/testing/selftests/nci/nci_dev.c`	+1 -1	0 replies
147/395	selftests/nci: Fix out-of-bounds store on thread join`tools/testing/selftests/nci/nci_dev.c`	+20 ~~-11~~	0 replies
148/395	nfc: virtual_ncidev: Add missing ioctl compat handler`drivers/nfc/virtual_ncidev.c`	+2 -1	0 replies
149/395	nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure`net/nfc/netlink.c`	+5 -2	0 replies
150/395	nfc: st21nfca: validate ISO15693 inventory length`drivers/nfc/st21nfca/core.c`	+1 -3	0 replies
151/395	nfc: llcp: fix -ENOMEM on connect with zero-length service name`net/nfc/llcp_sock.c`	+10 -6	0 replies
152/395	nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()`net/nfc/llcp_core.c`	+2 -1	0 replies
153/395	nfc: llcp: fix slab-out-of-bounds reads when logging service names`net/nfc/llcp_commands.c` `net/nfc/llcp_core.c`	+2 -2	0 replies
154/395	nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()`drivers/nfc/pn533/usb.c`	+3 -1	0 replies
155/395	net/sched: act_gate: budget the per-entry list in get_fill_size`net/sched/act_gate.c`	+29 -1	0 replies
156/395	net: bcmgenet: stop Tx NAPI before disabling the queues`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+4 -2	0 replies
157/395	veth: manage XDP program pointers during channel resize`drivers/net/veth.c`	+2 -0	0 replies
158/395	net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()`net/core/skbuff.c`	+6 -3	0 replies
159/395	vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets`drivers/net/vrf.c`	+0 -2	0 replies
160/395	bpf: Fix immediate JMP JEQ/JNE on MIPS32`arch/mips/net/bpf_jit_comp32.c`	+1 -1	0 replies
161/395	bpf: Fix BSWAP 32 and 16 on MIPS64`arch/mips/net/bpf_jit_comp64.c`	+1 -2	0 replies
162/395	tg3: use random MAC address when tg3_get_device_address fails`drivers/net/ethernet/broadcom/tg3.c`	+7 -4	0 replies
163/395	net: stmmac: clear stale buf->page after recycling on skb build failure`drivers/net/ethernet/stmicro/stmmac/stmmac_main.c`	+1 -0	0 replies
164/395	net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+2 -3	0 replies
165/395	net: bcmgenet: initialize u64 stats seq counter for all queues`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+2 -2	0 replies
166/395	net: bcmgenet: do not skip WoL power up on GENET V1`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+8 -5	0 replies
167/395	net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+3 -0	0 replies
168/395	net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+2 -1	0 replies
169/395	ip_gre: Reject enabling collect metadata through changelink`net/ipv4/ip_gre.c`	+12 -0	0 replies
170/395	vxlan: use one headroom snapshot for neighbour replies`drivers/net/vxlan/vxlan_core.c`	+4 -2	0 replies
171/395	net: xps: reject an out of range traffic class`net/core/dev.c`	+1 -1	0 replies
172/395	drm/imagination: clamp freelist reconstruction requests`drivers/gpu/drm/imagination/pvr_free_list.c`	+12 -3	0 replies
173/395	bonding: crypto offload enabled, non-offload slave failover, rekey failed`drivers/net/bonding/bond_main.c`	+1 -1	0 replies
174/395	macsec: initialize SecY before registering the netdevice`drivers/net/macsec.c`	+43 ~~-41~~	0 replies
175/395	net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621`drivers/net/dsa/mt7530-mdio.c`	+11 -9	0 replies
176/395	net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq`drivers/net/dsa/mt7530.c`	+0 -3	0 replies
177/395	tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()`net/ipv4/tcp_output.c`	+3 -0	0 replies
178/395	net: phylink: record the PHY only once bringup cannot fail`drivers/net/phy/phylink.c`	+17 -3	0 replies
179/395	nfp: hold IPsec RX state under the XArray lock`drivers/net/ethernet/netronome/nfp/crypto/ipsec.c`	+2 -1	0 replies
180/395	net/smc: fix UAF on lgr list traversal in smcr_port_err()`net/smc/smc_core.c` `net/smc/smc_ib.c`	+10 -2	0 replies
181/395	tipc: Fix a data race on mon->peer_cnt in mon_timeout()`net/tipc/monitor.c`	+2 -1	0 replies
182/395	net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails`drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c`	+4 -1	0 replies
183/395	gve: Consolidate and persist ethtool ring changes`drivers/net/ethernet/google/gve/gve.h` `drivers/net/ethernet/google/gve/gve_ethtool.c` `drivers/net/ethernet/google/gve/gve_main.c`	+51 ~~-55~~	0 replies
184/395	gve: Use extack to log xdp config verification errors`drivers/net/ethernet/google/gve/gve_main.c`	+15 -9	0 replies
185/395	gve: Allow ethtool to configure rx_buf_len`drivers/net/ethernet/google/gve/gve.h` `drivers/net/ethernet/google/gve/gve_ethtool.c` `drivers/net/ethernet/google/gve/gve_main.c`	+60 -1	0 replies
186/395	gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO`drivers/net/ethernet/google/gve/gve_adminq.c` `drivers/net/ethernet/google/gve/gve_main.c`	+11 ~~-10~~	0 replies
187/395	gve: Enable hw-gro by default if device supported`drivers/net/ethernet/google/gve/gve_adminq.c`	+3 -1	0 replies
188/395	gve: add support for UDP GSO for DQO format`drivers/net/ethernet/google/gve/gve_adminq.c` `drivers/net/ethernet/google/gve/gve_tx_dqo.c`	+29 ~~-12~~	0 replies
189/395	gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO`drivers/net/ethernet/google/gve/gve_tx_dqo.c`	+7 -1	0 replies
190/395	gve: fix TX drop when GSO MSS is too small for hw`drivers/net/ethernet/google/gve/gve_tx_dqo.c`	+3 ~~-11~~	0 replies
191/395	gve: DQO: reject TSO packets with an out of range MSS`drivers/net/ethernet/google/gve/gve_desc_dqo.h` `drivers/net/ethernet/google/gve/gve_tx_dqo.c`	+30 -1	0 replies
192/395	llc: fix skb UAF and leaks on llc_mac_hdr_init() failure`net/llc/llc_c_ac.c` `net/llc/llc_s_ac.c`	+5 -1	0 replies
193/395	bridge: check llc_mac_hdr_init() return value in br_send_bpdu()`net/bridge/br_stp_bpdu.c`	+4 -1	0 replies
194/395	net/sched: sch_teql: fix shadowed err in __teql_resolve()`net/sched/sch_teql.c`	+2 -5	0 replies
195/395	vlan: ensure sufficient headroom in vlan_dev_hard_header()`net/8021q/vlan_dev.c`	+5 -0	0 replies
196/395	autofs: fix sbi->pipe file reference leak in autofs_kill_sb()`fs/autofs/inode.c`	+4 -0	0 replies
197/395	perf/x86/intel: Ensure KVM guest PEBS path doesnt set unwanted PERF_GLOBAL_CTRL bits`arch/x86/events/intel/core.c`	+1 -1	0 replies
198/395	perf/x86/intel: Dont write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED`arch/x86/events/intel/core.c`	+37 ~~-18~~	0 replies
199/395	perf/x86/intel: Dont pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused`arch/x86/events/intel/core.c`	+25 ~~-14~~	0 replies
200/395	perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs()`arch/x86/events/intel/core.c`	+4 -4	0 replies
201/395	perf/core: Fix a refcount leak in attach_perf_ctx_data()`kernel/events/core.c`	+2 -0	0 replies
202/395	sched/core: Account PSI IRQ time to the execution context, not the scheduling context`kernel/sched/core.c`	+1 -1	0 replies
203/395	mptcp: return sk_wait_data() errors from recvmsg()`net/mptcp/protocol.c`	+1 -1	0 replies
204/395	rculist: add list_splice_rcu() for private lists`include/linux/rculist.h`	+29 -0	0 replies
205/395	netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase`net/netfilter/nf_tables_api.c`	+4 -4	0 replies
206/395	x86/mce: Fix hardware debug register corruption on task migration`arch/x86/kernel/cpu/mce/core.c`	+10 ~~-17~~	0 replies
207/395	x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11`arch/x86/pci/fixup.c`	+99 -0	0 replies
208/395	virtio_net: copy zerocopy frags in start_xmit without NAPI`drivers/net/virtio_net.c`	+9 -0	0 replies
209/395	tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow`net/tipc/group.c`	+2 -2	0 replies
210/395	tcp: prevent collapsing skbs across boundary in rtx queue`include/net/tcp.h`	+2 -2	0 replies
211/395	sctp: discard the rest of the packet on a stale-cookie error`net/sctp/sm_statefuns.c`	+2 -0	0 replies
212/395	af_packet: fix integer overflow in prb_calc_retire_blk_tmo()`net/packet/af_packet.c`	+1 -1	0 replies
213/395	arm64/boot: Disable trapping of PMZR_EL0 writes to EL2`Documentation/arch/arm64/booting.rst` `arch/arm64/include/asm/el2_setup.h`	+9 -1	0 replies
214/395	arm64: errata: match the target implementation CPUs own MIDR`arch/arm64/kernel/cpu_errata.c`	+9 -6	0 replies
215/395	ata: libata-scsi: bound the ATA passthru sense descriptor writes`drivers/ata/libata-scsi.c`	+8 -2	0 replies
216/395	bna: prevent IOC timer rearm during teardown`drivers/net/ethernet/brocade/bna/bnad.c`	+18 -6	0 replies
217/395	bpf: fs/xattr: dont assume the inode is locked in path_unlink/path_rmdir`fs/bpf_fs_kfuncs.c`	+0 -4	0 replies
218/395	crypto: s390/hmac - Generate intermediate CV for API partial block handling`arch/s390/crypto/hmac_s390.c`	+4 -1	0 replies
219/395	cgroup/pids: Restore pids.events notifications in local mode`kernel/cgroup/pids.c`	+5 -0	0 replies
220/395	fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT`net/ipv4/fou_core.c`	+4 -0	0 replies
221/395	fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbots "WARNING in do_new_mount" saga`fs/ntfs3/inode.c`	+2 -5	0 replies
222/395	writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes`fs/fs-writeback.c`	+20 -5	0 replies
223/395	workqueue: Fix NULL current_pwq deref in flush dependency check`kernel/workqueue.c`	+1 -1	0 replies
224/395	writeback: report a Tasks-RCU quiescent state per cgwb drain pass`mm/backing-dev.c`	+3 -2	0 replies
225/395	fsl/fman: Fix clk reference leak in read_dts_node()`drivers/net/ethernet/freescale/fman/fman.c`	+1 -0	0 replies
226/395	ipe: fix use-after-free when auditing a newly loaded policy`security/ipe/fs.c` `security/ipe/policy_fs.c`	+6 -5	0 replies
227/395	ipe: protect the dm-verity root hash with RCU`security/ipe/eval.c` `security/ipe/eval.h` `security/ipe/hooks.c`	+26 ~~-10~~	0 replies
228/395	ipv6: do not let ipv6_find_hdr() return an offset past the packet end`net/ipv6/exthdrs_core.c`	+3 -0	0 replies
229/395	ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST`net/ipv6/seg6.c`	+2 -2	0 replies
230/395	gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()`drivers/gpio/gpio-arizona.c`	+6 -2	0 replies
231/395	gpio: cdev: fix kernel stack leak to user-space in error path`drivers/gpio/gpiolib-cdev.c`	+25 -7	0 replies
232/395	gpio: zynq: fix runtime PM leak on request error path`drivers/gpio/gpio-zynq.c`	+1 -9	0 replies
233/395	llc: reserve device headroom for allocated frames`net/llc/llc_sap.c`	+4 -4	0 replies
234/395	mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()`net/mctp/route.c`	+1 -1	0 replies
235/395	rds: ib: Clear the sg list when mapping an MR fails`net/rds/ib_frmr.c`	+5 -6	0 replies
236/395	drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()`drivers/gpu/drm/imagination/pvr_mmu.c`	+4 -1	0 replies
237/395	drm/imagination: Fix page count for page table for map() interface`drivers/gpu/drm/imagination/pvr_mmu.c` `drivers/gpu/drm/imagination/pvr_mmu.h` `drivers/gpu/drm/imagination/pvr_vm.c`	+11 -9	0 replies
238/395	drm/i915: fix incorrect RCU teardown order`drivers/gpu/drm/i915/gem/i915_gem_object.c`	+1 -1	0 replies
239/395	drm/i915/dp_mst: Fix configuring FEC for a disconnected stream`drivers/gpu/drm/i915/display/intel_dp_mst.c`	+2 -1	0 replies
240/395	drm/i915/dp_mst: Fix configuring TUs for a disconnected stream`drivers/gpu/drm/i915/display/intel_dp_mst.c` `drivers/gpu/drm/i915/display/intel_dp_mst.h` `drivers/gpu/drm/i915/display/intel_link_bw.c`	+25 -1	0 replies
241/395	drm/amd/display: Fix dc stream excess put in dm_update_crtc_state()`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c`	+3 -1	0 replies
242/395	drm/amd/display: Bump frame warning limit for clang builds of dml`drivers/gpu/drm/amd/display/dc/dml/Makefile`	+5 -1	0 replies
243/395	drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init()`drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c`	+1 -0	0 replies
244/395	drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()`drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c`	+3 -1	0 replies
245/395	drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init()`drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c`	+1 -1	0 replies
246/395	drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM`drivers/gpu/drm/nouveau/nouveau_uvmm.c`	+11 -2	0 replies
247/395	drm/nouveau: fix autosuspend cleanup during teardown`drivers/gpu/drm/nouveau/nouveau_drm.c`	+1 -0	0 replies
248/395	drm/nouveau: Fix bridge reference leak in nv1a_ram_new()`drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c`	+2 -0	0 replies
249/395	drm/nouveau: fix double-free in nvif_vmm_dtor`drivers/gpu/drm/nouveau/nouveau_drm.c` `drivers/gpu/drm/nouveau/nvif/vmm.c`	+2 -3	0 replies
250/395	drm/nouveau: Fix gem reference leak in validate_init()`drivers/gpu/drm/nouveau/nouveau_gem.c`	+2 -0	0 replies
251/395	drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()`drivers/gpu/drm/nouveau/nouveau_connector.c`	+4 -1	0 replies
252/395	drm/nouveau: RCU-free the scheduler-containing nouveau_sched`drivers/gpu/drm/nouveau/nouveau_sched.c` `drivers/gpu/drm/nouveau/nouveau_sched.h`	+2 -1	0 replies
253/395	drm/nouveau: dont bump pin count on failed re-pin in nouveau_bo_pin_locked()`drivers/gpu/drm/nouveau/nouveau_bo.c`	+2 -1	0 replies
254/395	drm/xe/vm: nuke PTs only after unlinking contested VMAs`drivers/gpu/drm/xe/xe_vm.c`	+9 ~~-12~~	0 replies
255/395	drm/xe: harden adjust_idledly() against divide-by-zero and overflow`drivers/gpu/drm/xe/xe_hw_engine.c`	+21 -6	0 replies
256/395	drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV`drivers/gpu/drm/xe/xe_bo.h`	+19 -0	0 replies
257/395	drm/xe: Keep walking on SVM eviction failure`drivers/gpu/drm/xe/xe_bo.c`	+7 -0	0 replies
258/395	drm/virtio: fix memory leak of fence event on execbuffer failure`drivers/gpu/drm/virtio/virtgpu_submit.c`	+4 -0	0 replies
259/395	drm/virtio: fix NULL pointer dereference on fence allocation failure`drivers/gpu/drm/virtio/virtgpu_submit.c`	+5 -2	0 replies
260/395	gpio: tps65219: Fix GPIO input value reads`drivers/gpio/gpio-tps65219.c`	+1 -1	0 replies
261/395	gpio: tps65219: Use the variant-specific direction callback`drivers/gpio/gpio-tps65219.c`	+3 -3	0 replies
262/395	gpio: tps65219: Fix TPS65214 GPIO direction programming`drivers/gpio/gpio-tps65219.c`	+3 -1	0 replies
263/395	mm/hugetlb: preserve mremap address delta when skipping page tables`mm/hugetlb.c`	+7 -4	0 replies
264/395	mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()`mm/damon/vaddr.c`	+14 -7	0 replies
265/395	PCI: of_property: Omit bus properties without a subordinate bus`drivers/pci/of_property.c`	+9 -2	0 replies
266/395	packet: use ubuf_info completion for TX_RING packets`include/linux/skbuff.h` `net/packet/af_packet.c`	+65 ~~-56~~	0 replies
267/395	HID: alps: fix use-after-free on input2 registration failure`drivers/hid/hid-alps.c`	+4 -2	0 replies
268/395	HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard`drivers/hid/hid-ids.h` `drivers/hid/hid-quirks.c`	+4 -0	0 replies
269/395	HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()`drivers/hid/wacom_sys.c`	+3 -2	0 replies
270/395	net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()`drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c`	+3 -0	0 replies
271/395	net/mlx5e: advertise MACsec offload only when supported`drivers/net/ethernet/mellanox/mlx5/core/en_accel/macsec.c` `drivers/net/ethernet/mellanox/mlx5/core/en_main.c`	+2 -1	0 replies
272/395	net/mlx5e: fix swapped IPv6 IPsec policy masks`drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c`	+2 -2	0 replies
273/395	net/sched: reject IDR error pointers when deleting actions`net/sched/act_api.c`	+1 -1	0 replies
274/395	net: airoha: npu: cancel wdt_work after releasing the WDT IRQ`drivers/net/ethernet/airoha/airoha_npu.c`	+6 ~~-12~~	0 replies
275/395	net: arp: terminate device name before lookup`net/ipv4/arp.c`	+1 -0	0 replies
276/395	net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read`drivers/net/ethernet/atheros/atlx/atl1.c`	+3 -0	0 replies
277/395	net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy()`drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c`	+3 -0	0 replies
278/395	net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry`include/net/netfilter/nf_conntrack.h` `net/openvswitch/conntrack.c`	+17 -0	0 replies
279/395	net: openvswitch: conntrack: remove add_helper dead code`net/openvswitch/conntrack.c`	+2 -8	0 replies
280/395	net: openvswitch: conntrack: fix helper UAF due to extensions realloc`net/openvswitch/conntrack.c`	+15 -4	0 replies
281/395	net: atl1c: fix soft lockup on out-of-range tpd_cons read`drivers/net/ethernet/atheros/atl1c/atl1c_main.c`	+3 -0	0 replies
282/395	net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read`drivers/net/ethernet/atheros/atl1e/atl1e_main.c`	+3 -0	0 replies
283/395	net: bridge: mdb: restart port group walk after deletion`net/bridge/br_mdb.c`	+2 -0	0 replies
284/395	net: ena: fix PHC cleanup on probe failure`drivers/net/ethernet/amazon/ena/ena_netdev.c`	+1 -0	0 replies
285/395	net: ena: fix MMIO read buffer leak on probe failure`drivers/net/ethernet/amazon/ena/ena_netdev.c`	+1 -0	0 replies
286/395	net: phy: micrel: Advance register data pointer in write loop`drivers/net/phy/micrel.c`	+1 -0	0 replies
287/395	net: txgbe: fix FDIR filter restore for VF rules`drivers/net/ethernet/wangxun/txgbe/txgbe_fdir.c`	+11 -2	0 replies
288/395	net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist`drivers/net/usb/cdc_mbim.c`	+5 -0	0 replies
289/395	net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs()`drivers/net/usb/lan78xx.c`	+2 -0	0 replies
290/395	netfilter: ip6t_rpfilter: reject routes without inet6_dev`net/ipv6/netfilter/ip6t_rpfilter.c`	+1 -1	0 replies
291/395	netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read`net/ipv6/netfilter/ip6t_rt.c`	+8 -3	0 replies
292/395	netfilter: nf_tables: skip expired catchall elements on insert and delete`net/netfilter/nf_tables_api.c`	+8 -2	0 replies
293/395	nfc: fix use-after-free in nfc_get_local_general_bytes`drivers/nfc/microread/microread.c` `drivers/nfc/pn533/pn533.c` `drivers/nfc/pn533/pn533.h` +9 more	+55 ~~-42~~	0 replies
294/395	nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()`net/nfc/llcp_core.c`	+3 -0	0 replies
295/395	nfc: port100: reject frames whose declared length exceeds the received data`drivers/nfc/port100.c`	+7 -0	0 replies
296/395	nfc: trf7970a: power down on startup RX gain failure`drivers/nfc/trf7970a.c`	+3 -1	0 replies
297/395	scsi: libiscsi_tcp: Check the data direction of a Data-In PDU`drivers/scsi/libiscsi_tcp.c`	+3 -0	0 replies
298/395	parisc: Increase kernel stack size to 32kb`arch/parisc/include/asm/thread_info.h`	+1 -1	0 replies
299/395	perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()`kernel/events/core.c`	+1 -1	0 replies
300/395	perf/core: Run sched_task() for PMUs with only CPU-wide events`kernel/events/core.c`	+9 -4	0 replies
301/395	pinctrl: single: free the IRQ on domain creation failure`drivers/pinctrl/pinctrl-single.c`	+2 -1	0 replies
302/395	pinctrl: sunxi: keep a shadow copy of the data register output latches`drivers/pinctrl/sunxi/pinctrl-sunxi.c` `drivers/pinctrl/sunxi/pinctrl-sunxi.h`	+68 ~~-15~~	0 replies
303/395	s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()`drivers/s390/cio/device_ops.c`	+2 -0	0 replies
304/395	s390/cmf: Fix virtual vs physical address confusion`drivers/s390/cio/cio.h` `drivers/s390/cio/cmf.c`	+4 -3	0 replies
305/395	s390/pci: Fix leak of struct pci_dev reference in zpci_report_status()`arch/s390/pci/pci_event.c` `arch/s390/pci/pci_report.c` `arch/s390/pci/pci_report.h`	+9 -8	0 replies
306/395	s390/pci: Fix missing device lock in zpci_report_status()`arch/s390/pci/pci_event.c` `arch/s390/pci/pci_report.c`	+16 -7	0 replies
307/395	s390/pci: Report SCLP status on error events when no pdev is associated`arch/s390/pci/pci_event.c`	+3 -1	0 replies
308/395	s390/pci: Dont report recovery success on skipped recovery`arch/s390/pci/pci_event.c`	+1 -0	0 replies
309/395	s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config`drivers/s390/crypto/vfio_ap_ops.c`	+14 -4	0 replies
310/395	KVM: Ensure memory attributes xarray nodes are accounted to the callers memcg`virt/kvm/kvm_main.c`	+1 -1	0 replies
311/395	KVM: Dont treat reserved xarray entries as having memory attributes`virt/kvm/kvm_main.c`	+25 -3	0 replies
312/395	KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV`arch/x86/kvm/svm/sev.c`	+6 -2	0 replies
313/395	KVM: SEV: Do cache maintenance on the source VM during intra-host migration`arch/x86/kvm/svm/sev.c`	+10 -0	0 replies
314/395	KVM: arm64: Fix AArch32 DBGBXVR<n> handling`arch/arm64/kvm/sys_regs.c`	+1 -0	0 replies
315/395	KVM: arm64: Fix spurious warning for benign stage 2 teardown race`arch/arm64/kvm/mmu.c`	+12 -3	0 replies
316/395	KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race`arch/arm64/kvm/nested.c`	+13 -2	0 replies
317/395	KVM: arm64: Transfer the hyp stack pages out of the host stage-2`arch/arm64/kvm/hyp/nvhe/setup.c`	+10 -0	0 replies
318/395	RISC-V: KVM: Synchronize hrtimer callback during teardown`arch/riscv/kvm/vcpu_timer.c`	+4 -1	0 replies
319/395	RISC-V: KVM: Propagate interrupted G-stage faults`arch/riscv/kvm/mmu.c` `arch/riscv/kvm/vcpu_exit.c`	+3 -1	0 replies
320/395	RISC-V: KVM: Fix HSM hart status error propagation`arch/riscv/kvm/vcpu_sbi_hsm.c`	+2 -2	0 replies
321/395	Bluetooth: hci_conn: fix CIS hold ownership on reuse`net/bluetooth/hci_conn.c`	+8 -1	0 replies
322/395	Bluetooth: hci_sock: validate event length before filtering`net/bluetooth/hci_sock.c`	+14 -3	0 replies
323/395	Bluetooth: hci_sock: reject out-of-range OCF values`net/bluetooth/hci_sock.c`	+2 -1	0 replies
324/395	Bluetooth: ISO: balance the parent hold in hci_bind_bis()`net/bluetooth/hci_conn.c`	+4 -1	0 replies
325/395	Bluetooth: ISO: release unused CIS holds after channel attach`net/bluetooth/iso.c`	+7 -0	0 replies
326/395	Bluetooth: L2CAP: validate frame length before control and FCS access`net/bluetooth/l2cap_core.c`	+9 -1	0 replies
327/395	Bluetooth: mgmt: fix race in read_unconf_index_list()`net/bluetooth/mgmt.c`	+2 -6	0 replies
328/395	Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO`net/bluetooth/rfcomm/sock.c`	+4 -2	0 replies
329/395	smb: client: fix create context out-of-bounds reads`fs/smb/client/smb2ops.c` `fs/smb/client/smb2pdu.c`	+54 ~~-18~~	0 replies
330/395	smb: client: clean up failed cached directory opens`fs/smb/client/cached_dir.c`	+22 ~~-10~~	0 replies
331/395	smb: client: preserve create-context parsing errors`fs/smb/client/smb2inode.c`	+3 -1	0 replies
332/395	smb: client: validate POSIX create context length`fs/smb/client/smb2pdu.c`	+5 -2	0 replies
333/395	xfs: dont assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption`fs/xfs/scrub/health.c`	+3 -3	0 replies
334/395	xfs: fix attr fork block count checks in xrep_inode_blockcounts`fs/xfs/scrub/inode_repair.c`	+1 -1	0 replies
335/395	xfs: release orphanage dir inode if chown fails`fs/xfs/scrub/orphanage.c`	+5 -1	0 replies
336/395	xfs: use correct jiffies comparison function in xchk_maybe_relax`fs/xfs/scrub/scrub.h`	+1 -1	0 replies
337/395	xfs: check padding field in xfs_ioc_commit_range`fs/xfs/xfs_exchrange.c`	+1 -1	0 replies
338/395	xfs: dont call xfs_exchange_range_finish for a dry run`fs/xfs/xfs_exchrange.c`	+8 -3	0 replies
339/395	xfs: use the correct reservations for rtrmap/refcount recovery`fs/xfs/xfs_refcount_item.c` `fs/xfs/xfs_rmap_item.c`	+12 -4	0 replies
340/395	xfs: check di_forkoff correctly in scrub`fs/xfs/scrub/inode.c`	+1 -1	0 replies
341/395	xfs: fix rtgroup repair estimations`fs/xfs/scrub/repair.c` `fs/xfs/scrub/trace.h`	+25 -6	0 replies
342/395	xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots`fs/xfs/libxfs/xfs_rtrefcount_btree.c`	+2 -2	0 replies
343/395	xfs: call xfs_dquot_set_prealloc_limits if we installed default rtb limits`fs/xfs/xfs_dquot.c`	+6 -2	0 replies
344/395	xfs: dont let hidden_space go negative in xfs_metafile_resv_init`fs/xfs/libxfs/xfs_metafile.c`	+4 -4	0 replies
345/395	xfs: drop dquot flush lock when we cant find a buffer to flush`fs/xfs/xfs_qm.c`	+8 -2	0 replies
346/395	xfs: fix blockgc group quota scanning when usrquota isnt enforced`fs/xfs/xfs_icache.c`	+1 -1	0 replies
347/395	xfs: fix cursor and pointer handling when recovering iunlink buckets`fs/xfs/xfs_log_recover.c`	+8 -5	0 replies
348/395	net: tls: fix silent data drop under pipe back-pressure`net/tls/tls_sw.c`	+3 -3	0 replies
349/395	cgroup/cpuset: Move up prstate_housekeeping_conflict() helper`kernel/cgroup/cpuset.c`	+20 ~~-20~~	0 replies
350/395	cgroup/cpuset: Ensure domain isolated CPUs stay in root or isolated partition`kernel/cgroup/cpuset.c`	+6 -4	0 replies
351/395	cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict`kernel/cgroup/cpuset.c` `tools/testing/selftests/cgroup/test_cpuset_prs.sh`	+4 -1	0 replies
352/395	vlan: require the MAC header to be present in __vlan_insert_inner_tag()`include/linux/if_vlan.h`	+3 -0	0 replies
353/395	i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL`drivers/i2c/busses/i2c-qcom-geni.c`	+33 -5	0 replies
354/395	drm/i915/psr: Disable Panel Replay on Dell XPS 14 DA14260 as a quirk`drivers/gpu/drm/i915/display/intel_psr.c` `drivers/gpu/drm/i915/display/intel_quirks.c` `drivers/gpu/drm/i915/display/intel_quirks.h`	+24 -1	0 replies
355/395	drm/i915/psr: Fixes for Dell XPS DA14260 quirk`drivers/gpu/drm/i915/display/intel_psr.c` `drivers/gpu/drm/i915/display/intel_quirks.c` `drivers/gpu/drm/i915/display/intel_quirks.h`	+13 -8	0 replies
356/395	drm/i915/psr: Disable PSR2 on Xiaomi Book Pro 14 2026 as a quirk`drivers/gpu/drm/i915/display/intel_psr.c` `drivers/gpu/drm/i915/display/intel_quirks.c` `drivers/gpu/drm/i915/display/intel_quirks.h`	+13 -0	0 replies
357/395	drm/i915/quirks: Limit eDP rate to HBR2 on HP Pavilion Plus 14-ew1`drivers/gpu/drm/i915/display/intel_quirks.c`	+3 -0	0 replies
358/395	drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc()`drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c`	+1 -0	0 replies
359/395	drm/client: Remove holds_console_lock parameter from suspend/resume`drivers/gpu/drm/amd/amdgpu/amdgpu_device.c` `drivers/gpu/drm/clients/drm_fbdev_client.c` `drivers/gpu/drm/clients/drm_log.c` +8 more	+37 ~~-53~~	0 replies
360/395	drm/client: Pass force parameter to client restore`drivers/gpu/drm/clients/drm_fbdev_client.c` `drivers/gpu/drm/drm_client_event.c` `drivers/gpu/drm/drm_fb_helper.c` +4 more	+22 ~~-34~~	0 replies
361/395	drm/client: fix restore of partially initialized client`drivers/gpu/drm/clients/drm_fbdev_client.c`	+8 -0	0 replies
362/395	mm/rmap: allocate anon_vma_chain objects unlocked when possible`mm/rmap.c`	+10 -7	0 replies
363/395	mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish`mm/rmap.c` `mm/vma.c`	+13 -1	0 replies
364/395	mm/hugetlb: create hstate_is_gigantic_no_runtime helper`mm/hugetlb.c`	+16 -5	0 replies
365/395	mm/hugetlb: do not dissolve gigantic pages without runtime support`mm/hugetlb.c`	+9 -0	0 replies
366/395	super: make iterate_supers_type() deletion-safe`fs/kernfs/mount.c` `fs/super.c`	+25 ~~-22~~	0 replies
367/395	PCI: Fix BAR resize for devices on a root bus`drivers/pci/setup-bus.c`	+18 -7	0 replies
368/395	HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM`drivers/hid/hid-alps.c`	+2 -4	0 replies
369/395	HID: alps: unregister DualPoint Stick input device on remove`drivers/hid/hid-alps.c`	+19 -0	0 replies
370/395	net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths`drivers/net/ethernet/cadence/macb_main.c`	+12 -2	0 replies
371/395	net: ipconfig: Remove outdated comment and indent code block`net/ipv4/ipconfig.c`	+42 ~~-47~~	0 replies
372/395	net: ipconfig: bound DHCP option construction`net/ipv4/ipconfig.c`	+26 ~~-19~~	0 replies
373/395	perf/x86/intel: Update event constraints and cache_extra_regsfor ADL`arch/x86/events/intel/ds.c`	+1 -1	0 replies
374/395	perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification`arch/x86/events/intel/ds.c`	+13 -3	0 replies
375/395	perf/x86/intel: Update event constraints and cache_extra_regsfor LNL`arch/x86/events/intel/core.c` `arch/x86/events/intel/ds.c`	+10 -1	0 replies
376/395	perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints`arch/x86/events/intel/ds.c`	+5 ~~-17~~	0 replies
377/395	x86/sev: Move the internal header`arch/x86/boot/startup/sev-startup.c` `arch/x86/coco/sev/core.c` `arch/x86/coco/sev/internal.h` +3 more	+95 ~~-91~~	0 replies
378/395	x86/sev: Add internal header guards`arch/x86/coco/sev/internal.h`	+3 -0	0 replies
379/395	x86/sev: Carve out the SVSM code into a separate compilation unit`arch/x86/coco/sev/Makefile` `arch/x86/coco/sev/core.c` `arch/x86/coco/sev/internal.h` +1 more	+392 ~~-378~~	0 replies
380/395	x86/sev: Remove redundant ghcbs_initialized checks around __sev_{get,put}_ghcb()`arch/x86/coco/sev/core.c` `arch/x86/coco/sev/noinstr.c` `arch/x86/coco/sev/svsm.c`	+7 ~~-15~~	0 replies
381/395	x86/sev: Make vTPM SVSM calls preemption-safe`arch/x86/coco/sev/svsm.c`	+8 -2	0 replies
382/395	net/sched: act_ct: fix helper UAF due to extensions realloc`net/sched/act_ct.c`	+12 -6	0 replies
383/395	net/sched: act_ct: avoid modifying shared unconfirmed ct entry`net/sched/act_ct.c`	+16 -2	0 replies
384/395	RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_rw_attr()`arch/riscv/kvm/aia_imsic.c`	+3 -1	0 replies
385/395	RISC-V: KVM: Serialize IMSIC attributes with vCPU migration`arch/riscv/kvm/aia_imsic.c`	+9 -2	0 replies
386/395	Revert "rust: net: phy: fix off-by-one bit positions in device status accessors"`rust/kernel/net/phy.rs`	+20 ~~-18~~	0 replies
387/395	rust: net: phy: fix off-by-one bit positions in device status accessors`rust/kernel/net/phy.rs`	+3 -3	0 replies
388/395	mm/damon/core: fix unconditionally skip last region`mm/damon/core.c`	+14 ~~-10~~	0 replies
389/395	hfsplus: avoid double unload_nls() on mount failure`fs/hfsplus/super.c`	+0 -1	0 replies
390/395	sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags`kernel/sched/ext.c`	+6 -1	0 replies
391/395	rose: keep the route needed for routing loop detection`net/rose/rose_route.c`	+56 ~~-15~~	0 replies
392/395	rose: guard rose_transmit_link() against a NULL neighbour`net/rose/rose_link.c`	+5 -0	0 replies
393/395	rose: use timer_shutdown_sync() for t0timer teardown`include/net/rose.h` `net/rose/rose_route.c`	+26 ~~-12~~	0 replies
394/395	rose: dont warn on stray CALL_ACCEPTED/CLEAR_CONFIRMATION in state 3`net/rose/rose_in.c`	+12 -1	0 replies
395/395	bpf: Reject key-less BTF for hash maps`kernel/bpf/hashtab.c`	+3 -0	0 replies

Reviews trailers per patch

237 of 395 patches have a Reviewed-by or Acked-by.

Patch	Christoph Hellwig	Emil Tsalapatis	Steven Rostedt	Eduard Zingerman	Kuniyuki Iwashima	mayhemandcoffee	Like Xu	Sandipan Das	Rik van Riel	Gao Xiang	[email protected]	Hou Tao	Jiayuan Chen	Xu Kuohai	Neil Armstrong	Mario Limonciello	Daniel Wheeler	Claudio Imbrenda	Christoph Schlameuss	Fuad Tabba	Mark Brown	Ben Horgan	Steffen Eiden	Leonardo Bras	Lorenzo Stoakes (ARM)	Phillip Lougher	Zhihao Cheng	Damien Le Moal	Per Larsson	Juan Manuel Lopez Carrillo	Chen-Yu Tsai	Anup Patel	Farhan Ali	Randy Dunlap	Matthew Rosato	Gerd Bayer	Peter Oberparleiter	Jan Kara	Simon Horman	Victor Nogueira	hybris	Geert Uytterhoeven	Lad Prabhakar	Ratheesh Kannoth	Akiva Goldberger	Ido Schimmel	Eric Dumazet	Catalin Marinas	Lyude Paul	Marc Zyngier	Basavaraj Natikar	Tano Dzhinski	Xin Long	Ren Wei	Val Packett	Luca Ceresoli	Leon Romanovsky	Ethan Nelson-Moore	Hangbin Liu	Xuanqiang Luo	Jouni Högander	Heiko Carstens	Nicolai Buchwitz	Joe Damato	Jamal Hadi Salim	[email protected]	Stanislav Fomichev	Jason Xing	David Ahern	Andrea Mayer	Maxime Chevallier	Mark Bloch	Vivian Wang	Troy Mitchell	Mahanta Jambigi	Dust Li	Tung Nguyen	Heiko Stuebner	Lorenzo Bianconi	Harshitha Ramamurthy	Jordan Rhee	Willem de Bruijn	Ankit Garg	Alessio Belle	Nikolay Aleksandrov	Dapeng Mi	Jim Mattson	Matthieu Baerts (NGI0)	Paul E. McKenney	Peter Zijlstra (Intel)	Sabrina Dubroca	Daniel Zahka	Anshuman Khandual	Oliver Upton	Weiming Shi	Ilya Maximets	Justin Iurman	Charles Keepax	Kent Gibson	Allison Henderson	Alexandru Dadu	Tvrtko Ursulin	Luca Coelho	Thomas Hellström	Matthew Brost	Vinay Belgaumkar	Himal Prasad Ghimiray	Tejun Heo	Roman Gushchin	Jonathan Cormier	David Hildenbrand (Arm)	Harald Freudenberger	Aaron Conole	Andrew Lunn	Jason Gerecke	Paul Geurts	Mike Christie	Yifan Wu	Benjamin Block	Tariq Toukan	Halil Pasic	Yuan Yao	Frank Sorenson	Jonathan Davies	Vincent Donnefort	Chen Ridong	Waiman Long	Mukesh Kumar Savaliya	Mika Kahola	Jani Nikula	Annoy Cc	Nemesa Garg	Lijo Lazar	Rodrigo Vivi	Petr Vorel	Andi Shyti	Danilo Krummrich	Jocelyn Falempe	Thomas Zimmermann	Lance Yang	Vlastimil Babka (SUSE)	Tom Lendacky	Stefano Garzarella	Shakeel Butt	Kefeng Wang	David Hildenbrand	Oscar Salvador	Chunfeng Song	FUJITA Tomonori	SJ Park	Andrea Righi	Muchun Song	Ihor Solodrai	Karl Mehltretter	Ilpo Järvinen	Suren Baghdasaryan	Liam R. Howlett	Florian Fainelli	Peter Schneider	Pavel Machek (CIP)	Ron Economos	Miguel Ojeda	Brett A C Sheffield	Wentao Guan	Barry K. Nathan
Series																																																																																																																																																														T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/395	R-b
2/395										R-b
3/395																R-b	T-b
4/395
5/395
6/395
7/395
8/395																		A-b	R-b
9/395																			R-b
10/395
11/395		R-b
12/395			R-b
13/395				A-b
14/395					R-b
15/395
16/395						T-b
17/395
18/395							R-b	R-b
19/395									R-b
20/395		R-b
21/395											T-b
22/395												A-b
23/395		R-b											R-b
24/395														A-b
25/395															R-b
26/395																																																			A-b
27/395
28/395																																R-b
29/395																																R-b
30/395																																R-b
31/395																																R-b
32/395																																																		R-b
33/395																																																		R-b
34/395																																																		R-b
35/395
36/395																				T-b	T-b
37/395																						R-b
38/395
39/395
40/395																				R-b T-b			R-b
41/395																								R-b	R-b
42/395																										R-b	R-b
43/395																												R-b
44/395																													T-b	T-b	R-b T-b
45/395
46/395
47/395
48/395
49/395
50/395																																	R-b	A-b T-b	R-b	R-b
51/395																																		R-b
52/395																																					R-b
53/395																																					R-b
54/395																																					R-b
55/395																																						R-b
56/395		R-b
57/395
58/395																																							R-b
59/395																																							R-b	R-b	T-b
60/395																																										R-b	R-b
61/395																																												R-b
62/395																																													R-b
63/395				A-b
64/395
65/395																																														R-b	R-b
66/395
67/395
68/395
69/395
70/395
71/395																																																R-b
72/395
73/395																																																	R-b
74/395																																																	R-b
75/395																																																	R-b			Co-Authored-By T-b
76/395																																							R-b
77/395
78/395
79/395																																														R-b														R-b
80/395																																							R-b
81/395																																							R-b
82/395																																							R-b
83/395
84/395
85/395																																							R-b
86/395																																																					A-b
87/395
88/395																																							R-b
89/395																																																						R-b
90/395																																								R-b	T-b
91/395
92/395
93/395
94/395
95/395																																																							R-b
96/395
97/395																																																								R-b T-b
98/395
99/395
100/395
101/395
102/395
103/395
104/395
105/395
106/395
107/395
108/395
109/395
110/395
111/395																																																									R-b
112/395																																														R-b
113/395
114/395																																																										R-b T-b
115/395																																														R-b	R-b												R-b	R-b
116/395					R-b
117/395					R-b
118/395
119/395																																																													R-b
120/395																																																														R-b
121/395																																					R-b																									A-b
122/395																																																																									R-b	R-b
123/395																																							R-b
124/395
125/395																																							R-b
126/395
127/395													R-b
128/395													R-b
129/395
130/395																																																																								R-b
131/395																																																																								R-b
132/395
133/395																																																															R-b
134/395																																																															R-b
135/395																																																															R-b
136/395																																																															R-b
137/395																																																															R-b
138/395																																																																R-b
139/395																																																																	A-b
140/395
141/395
142/395
143/395
144/395
145/395
146/395																																																											R-b
147/395																																							R-b
148/395																																							R-b
149/395																																							R-b
150/395
151/395
152/395
153/395
154/395																																																																		T-b
155/395																																									T-b
156/395
157/395													R-b																																																						A-b	R-b
158/395
159/395																																															R-b																						R-b	R-b
160/395
161/395
162/395
163/395																																																																							R-b
164/395																																																															R-b
165/395																																																															R-b
166/395																																																															R-b
167/395																																																															R-b
168/395																																																															R-b
169/395																																														R-b													R-b
170/395
171/395
172/395																																																																																				R-b
173/395																																																											R-b
174/395																																																																																											R-b
175/395
176/395
177/395																																															R-b																																																T-b
178/395
179/395
180/395																																																																											R-b	R-b
181/395																																																																													R-b
182/395																																																																							R-b							R-b	A-b
183/395																																																																																R-b	R-b	R-b
184/395																																																																																R-b		R-b
185/395																																																																																R-b	R-b	R-b
186/395																																																																																R-b		R-b
187/395																																																																																R-b		R-b
188/395																																																																																		R-b
189/395																																																																																R-b			R-b
190/395																																																																																R-b
191/395																																																																																R-b
192/395
193/395																																																																																					A-b
194/395
195/395
196/395
197/395																																																																																						R-b
198/395																																																																																						R-b
199/395																																																																																						R-b	R-b
200/395																																																																																						R-b	R-b
201/395
202/395
203/395																																																																																								R-b
204/395																																																																																									R-b
205/395
206/395																																																																																										A-b
207/395
208/395
209/395
210/395																																															R-b																																													R-b
211/395																																																					A-b
212/395																																																																																		R-b
213/395																																																																																													R-b	R-b
214/395
215/395																												R-b
216/395
217/395
218/395																																																																																																																R-b
219/395
220/395																																																											R-b
221/395																																						R-b
222/395																																						R-b																																																																						A-b	A-b
223/395
224/395																									A-b													R-b																																																																						A-b	R-b
225/395																																							R-b
226/395
227/395
228/395																																														R-b																																																		R-b
229/395																																																											R-b											R-b																											R-b
230/395																																																																																																		R-b
231/395																																																																																																			R-b
232/395
233/395																																															R-b
234/395
235/395																																																																																																				R-b
236/395																																																																																				R-b																	R-b
237/395																																																																																				R-b																	R-b
238/395																																																																																																						R-b
239/395																																																																																																							R-b
240/395																																																																																																							R-b
241/395
242/395
243/395
244/395
245/395
246/395																																																	R-b
247/395																																																	R-b
248/395																																																	R-b
249/395																																																	R-b
250/395																																																	R-b
251/395																																																	R-b
252/395																																																	R-b
253/395																																																	R-b
254/395																																																																																																								R-b	R-b
255/395																																																																																																										R-b
256/395																																																																																																								R-b
257/395																																																																																																											R-b
258/395
259/395
260/395																																																																																																														R-b
261/395
262/395
263/395																																																																																																															A-b
264/395
265/395
266/395
267/395
268/395
269/395																																																																																																																			R-b
270/395																																																																																																																								R-b
271/395																																																																																																																								R-b
272/395																																																																																																																								R-b
273/395
274/395																																																																															A-b
275/395																																														R-b
276/395
277/395																																							R-b
278/395																																																																																																																	R-b
279/395																																																																																																																	R-b
280/395																																																																																																																	R-b
281/395
282/395
283/395																																																																																					A-b
284/395
285/395
286/395																																																																																																																		R-b
287/395
288/395
289/395
290/395
291/395
292/395
293/395																																							R-b
294/395																																							R-b
295/395																																							R-b
296/395																																																																																																																				R-b
297/395																																																																																																																					R-b
298/395
299/395																																																																																																																						T-b
300/395																																																																																																																						T-b
301/395
302/395
303/395																																					R-b
304/395																																																														R-b
305/395																																	R-b																																																																																						R-b
306/395																																	R-b																																																																																						R-b
307/395																																	R-b																																																																																						R-b
308/395																																	R-b																																																																																						R-b
309/395																																			R-b																																																																																						A-b
310/395
311/395
312/395
313/395
314/395																																																		R-b
315/395																																																		R-b																																																																								R-b
316/395																																																		R-b																																																																										T-b
317/395																																																		R-b																																																																											R-b T-b
318/395																																R-b
319/395																																R-b
320/395																																R-b
321/395
322/395
323/395
324/395
325/395
326/395
327/395
328/395
329/395																																																																																																																											T-b
330/395																																																																																																																											T-b
331/395																																																																																																																											T-b
332/395																																																																																																																											T-b
333/395	R-b
334/395	R-b
335/395	R-b
336/395	R-b
337/395	R-b
338/395	R-b
339/395	R-b
340/395	R-b
341/395	R-b
342/395	R-b
343/395	R-b
344/395	R-b
345/395	R-b
346/395	R-b
347/395	R-b
348/395
349/395																																																																																																																														R-b
350/395																																																																																																																														R-b
351/395																																																																																																																															R-b
352/395																																							R-b
353/395																																																																																																																																R-b
354/395																																																																																																																																	R-b
355/395																																																																																																																																	R-b
356/395																																																																																																																																	R-b	A-b
357/395																																																																																																																																			T-b	R-b
358/395																																																																																																																																					R-b
359/395																																																	R-b																																																																																					R-b A-b	R-b	R-b	A-b	R-b
360/395																																																																																																																																										R-b
361/395																																																																																																																																											R-b
362/395																																																																																																																																																												R-b	R-b
363/395																									R-b																																																																																						A-b																													R-b	A-b
364/395																																																																																																																																																R-b	R-b	A-b	A-b
365/395																																																																																																																																																								A-b
366/395																																						R-b																																																																																																																				T-b
367/395																																																																																																																																																											R-b
368/395
369/395
370/395																																																															R-b
371/395
372/395																																							R-b															R-b
373/395
374/395
375/395
376/395
377/395																																																																																																																																														R-b
378/395																																																																																																																																														R-b
379/395																																																																																																																																														R-b
380/395																																																																																																																																														R-b
381/395																																																																																																																																															R-b
382/395																																																					R-b												R-b																																																R-b
383/395																																																					R-b												R-b																																																R-b
384/395																																R-b
385/395																																R-b
386/395																																																																																																																																																				A-b
387/395																																																																																																																																																					R-b
388/395																																																																																																																																																						R-b
389/395
390/395																																																																																																																																																							R-b
391/395
392/395
393/395
394/395
395/395																																																																																																																																																									A-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 165 reviewers.

Read the v1 thread

Cover letter [PATCH 6.18 000/395] 6.18.55-rc1 review

This is the start of the stable review cycle for the 6.18.55 release. There are 395 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 02 Oct 2026 15:23:04 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.55-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.18.55-rc1

Jiayuan Chen <[email protected]>
bpf: Reject key-less BTF for hash maps

Bernard Pidoux <[email protected]>
rose: don't warn on stray CALL_ACCEPTED/CLEAR_CONFIRMATION in state 3

Bernard Pidoux <[email protected]>
rose: use timer_shutdown_sync() for t0timer teardown

Bernard Pidoux <[email protected]>
rose: guard rose_transmit_link() against a NULL neighbour

Bernard Pidoux <[email protected]>
rose: keep the route needed for routing loop detection

Tejun Heo <[email protected]>
sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags

Shardul Bankar <[email protected]>
hfsplus: avoid double unload_nls() on mount failure

Liew Rui Yan <[email protected]>
mm/damon/core: fix unconditionally skip last region

Chunfeng Song <[email protected]>
rust: net: phy: fix off-by-one bit positions in device status accessors

Greg Kroah-Hartman <[email protected]>
Revert "rust: net: phy: fix off-by-one bit positions in device status accessors"

Xie Bo <[email protected]>
RISC-V: KVM: Serialize IMSIC attributes with vCPU migration

Jiakai Xu <[email protected]>
RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_rw_attr()

Ilya Maximets <[email protected]>
net/sched: act_ct: avoid modifying shared unconfirmed ct entry

Ilya Maximets <[email protected]>
net/sched: act_ct: fix helper UAF due to extensions realloc

Melody Wang <[email protected]>
x86/sev: Make vTPM SVSM calls preemption-safe

Nikunj A Dadhania <[email protected]>
x86/sev: Remove redundant ghcbs_initialized checks around __sev_{get,put}_ghcb()

Borislav Petkov (AMD) <[email protected]>
x86/sev: Carve out the SVSM code into a separate compilation unit

Borislav Petkov (AMD) <[email protected]>
x86/sev: Add internal header guards

Borislav Petkov (AMD) <[email protected]>
x86/sev: Move the internal header

Dapeng Mi <[email protected]>
perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints

Dapeng Mi <[email protected]>
perf/x86/intel: Update event constraints and cache_extra_regsfor LNL

Dapeng Mi <[email protected]>
perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification

Dapeng Mi <[email protected]>
perf/x86/intel: Update event constraints and cache_extra_regsfor ADL

Yuqi Xu <[email protected]>
net: ipconfig: bound DHCP option construction

Thorsten Blum <[email protected]>
net: ipconfig: Remove outdated comment and indent code block

Théo Lebrun <[email protected]>
net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths

Chen Changcheng <[email protected]>
HID: alps: unregister DualPoint Stick input device on remove

Bastien Nocera <[email protected]>
HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM

Liz Fong-Jones <[email protected]>
PCI: Fix BAR resize for devices on a root bus

Christian Brauner <[email protected]>
super: make iterate_supers_type() deletion-safe

Longlong Xia <[email protected]>
mm/hugetlb: do not dissolve gigantic pages without runtime support

Usama Arif <[email protected]>
mm/hugetlb: create hstate_is_gigantic_no_runtime helper

Jinjiang Tu <[email protected]>

    mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish

Lorenzo Stoakes <[email protected]>
mm/rmap: allocate anon_vma_chain objects unlocked when possible

shechenglong <[email protected]>
drm/client: fix restore of partially initialized client

Thomas Zimmermann <[email protected]>
drm/client: Pass force parameter to client restore

Thomas Zimmermann <[email protected]>
drm/client: Remove holds_console_lock parameter from suspend/resume

Wentao Liang <[email protected]>
drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc()

Ankit Nautiyal <[email protected]>
drm/i915/quirks: Limit eDP rate to HBR2 on HP Pavilion Plus 14-ew1

Jouni Högander <[email protected]>
drm/i915/psr: Disable PSR2 on Xiaomi Book Pro 14 2026 as a quirk

Jouni Högander <[email protected]>
drm/i915/psr: Fixes for Dell XPS DA14260 quirk

Jouni Högander <[email protected]>
drm/i915/psr: Disable Panel Replay on Dell XPS 14 DA14260 as a quirk

Viken Dadhaniya <[email protected]>
i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL

Xiang Mei <[email protected]>
vlan: require the MAC header to be present in __vlan_insert_inner_tag()

Hui Peng <[email protected]>
cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict

Waiman Long <[email protected]>
cgroup/cpuset: Ensure domain isolated CPUs stay in root or isolated partition

Waiman Long <[email protected]>
cgroup/cpuset: Move up prstate_housekeeping_conflict() helper

Jakub Kicinski <[email protected]>
net: tls: fix silent data drop under pipe back-pressure

Darrick J. Wong <[email protected]>
xfs: fix cursor and pointer handling when recovering iunlink buckets

Darrick J. Wong <[email protected]>
xfs: fix blockgc group quota scanning when usrquota isn't enforced

Darrick J. Wong <[email protected]>
xfs: drop dquot flush lock when we can't find a buffer to flush

Darrick J. Wong <[email protected]>
xfs: don't let hidden_space go negative in xfs_metafile_resv_init

Darrick J. Wong <[email protected]>
xfs: call xfs_dquot_set_prealloc_limits if we installed default rtb limits

Darrick J. Wong <[email protected]>
xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots

Darrick J. Wong <[email protected]>
xfs: fix rtgroup repair estimations

Darrick J. Wong <[email protected]>
xfs: check di_forkoff correctly in scrub

Darrick J. Wong <[email protected]>
xfs: use the correct reservations for rtrmap/refcount recovery

Darrick J. Wong <[email protected]>
xfs: don't call xfs_exchange_range_finish for a dry run

Darrick J. Wong <[email protected]>
xfs: check padding field in xfs_ioc_commit_range

Darrick J. Wong <[email protected]>
xfs: use correct jiffies comparison function in xchk_maybe_relax

Darrick J. Wong <[email protected]>
xfs: release orphanage dir inode if chown fails

Darrick J. Wong <[email protected]>
xfs: fix attr fork block count checks in xrep_inode_blockcounts

Darrick J. Wong <[email protected]>
xfs: don't assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption

Zihan Xi <[email protected]>
smb: client: validate POSIX create context length

Zihan Xi <[email protected]>
smb: client: preserve create-context parsing errors

Zihan Xi <[email protected]>
smb: client: clean up failed cached directory opens

Zihan Xi <[email protected]>
smb: client: fix create context out-of-bounds reads

Hui Peng <[email protected]>

    Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO

Aldo Ariel Panzardo <[email protected]>
Bluetooth: mgmt: fix race in read_unconf_index_list()

Aldo Ariel Panzardo <[email protected]>
Bluetooth: L2CAP: validate frame length before control and FCS access

Aldo Ariel Panzardo <[email protected]>
Bluetooth: ISO: release unused CIS holds after channel attach

Aldo Ariel Panzardo <[email protected]>
Bluetooth: ISO: balance the parent hold in hci_bind_bis()

Aldo Ariel Panzardo <[email protected]>
Bluetooth: hci_sock: reject out-of-range OCF values

Aldo Ariel Panzardo <[email protected]>
Bluetooth: hci_sock: validate event length before filtering

Aldo Ariel Panzardo <[email protected]>
Bluetooth: hci_conn: fix CIS hold ownership on reuse

Tan Chi <[email protected]>
RISC-V: KVM: Fix HSM hart status error propagation

Xie Bo <[email protected]>
RISC-V: KVM: Propagate interrupted G-stage faults

Myeonghun Pak <[email protected]>
RISC-V: KVM: Synchronize hrtimer callback during teardown

Fuad Tabba <[email protected]>
KVM: arm64: Transfer the hyp stack pages out of the host stage-2

Lorenzo Stoakes (ARM) <[email protected]>
KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race

Lorenzo Stoakes (ARM) <[email protected]>
KVM: arm64: Fix spurious warning for benign stage 2 teardown race

Karl Mehltretter <[email protected]>
KVM: arm64: Fix AArch32 DBGBXVR<n> handling

Sean Christopherson <[email protected]>
KVM: SEV: Do cache maintenance on the source VM during intra-host migration

Sean Christopherson <[email protected]>
KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV

Zeng Chi <[email protected]>
KVM: Don't treat reserved xarray entries as having memory attributes

David Ballesteros <[email protected]>
KVM: Ensure memory attributes xarray nodes are accounted to the caller's memcg

Anthony Krowiak <[email protected]>
s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config

Niklas Schnelle <[email protected]>
s390/pci: Don't report recovery success on skipped recovery

Niklas Schnelle <[email protected]>
s390/pci: Report SCLP status on error events when no pdev is associated

Niklas Schnelle <[email protected]>
s390/pci: Fix missing device lock in zpci_report_status()

Niklas Schnelle <[email protected]>
s390/pci: Fix leak of struct pci_dev reference in zpci_report_status()

Peter Oberparleiter <[email protected]>
s390/cmf: Fix virtual vs physical address confusion

Vineeth Vijayan <[email protected]>
s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()

Ilya Titov <[email protected]>
pinctrl: sunxi: keep a shadow copy of the data register output latches

Myeonghun Pak <[email protected]>
pinctrl: single: free the IRQ on domain creation failure

Puranjay Mohan <[email protected]>
perf/core: Run sched_task() for PMUs with only CPU-wide events

Puranjay Mohan <[email protected]>

    perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()

Helge Deller <[email protected]>
parisc: Increase kernel stack size to 32kb

Yehyeong Lee <[email protected]>
scsi: libiscsi_tcp: Check the data direction of a Data-In PDU

Myeonghun Pak <[email protected]>
nfc: trf7970a: power down on startup RX gain failure

Doruk Tan Ozturk <[email protected]>
nfc: port100: reject frames whose declared length exceeds the received data

Aamir Ahmed <[email protected]>
nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()

Luxiao Xu <[email protected]>
nfc: fix use-after-free in nfc_get_local_general_bytes

Aohan Mei <[email protected]>
netfilter: nf_tables: skip expired catchall elements on insert and delete

Luxiao Xu <[email protected]>
netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read

Weiming Shi <[email protected]>
netfilter: ip6t_rpfilter: reject routes without inet6_dev

Wentao Liang <[email protected]>
net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs()

Ming Wang <[email protected]>
net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist

Zhang Yunfei <[email protected]>
net: txgbe: fix FDIR filter restore for VF rules

Abhishek Ojha <[email protected]>
net: phy: micrel: Advance register data pointer in write loop

Guangshuo Li <[email protected]>
net: ena: fix MMIO read buffer leak on probe failure

Guangshuo Li <[email protected]>
net: ena: fix PHC cleanup on probe failure

Fourie Zhang <[email protected]>
net: bridge: mdb: restart port group walk after deletion

Gajdos Tamás <[email protected]>
net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read

Gajdos Tamás <[email protected]>
net: atl1c: fix soft lockup on out-of-range tpd_cons read

Ilya Maximets <[email protected]>
net: openvswitch: conntrack: fix helper UAF due to extensions realloc

Ilya Maximets <[email protected]>
net: openvswitch: conntrack: remove 'add_helper' dead code

Ilya Maximets <[email protected]>
net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry

Wentao Liang <[email protected]>
net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy()

Gajdos Tamás <[email protected]>
net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read

Zijie Huang <[email protected]>
net: arp: terminate device name before lookup

Myeonghun Pak <[email protected]>
net: airoha: npu: cancel wdt_work after releasing the WDT IRQ

Weiming Shi <[email protected]>
net/sched: reject IDR error pointers when deleting actions

Andrea Parri <[email protected]>
net/mlx5e: fix swapped IPv6 IPsec policy masks

Ralf Lici <[email protected]>
net/mlx5e: advertise MACsec offload only when supported

Wentao Liang <[email protected]>
net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()

Wei Jie LAW <[email protected]>
HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()

Junjie Cao <[email protected]>
HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard

Chen Changcheng <[email protected]>
HID: alps: fix use-after-free on input2 registration failure

Willem de Bruijn <[email protected]>
packet: use ubuf_info completion for TX_RING packets

Angel J <[email protected]>
PCI: of_property: Omit bus properties without a subordinate bus

SJ Park <[email protected]>
mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()

Jaewook You <[email protected]>
mm/hugetlb: preserve mremap address delta when skipping page tables

Karl Mehltretter <[email protected]>
gpio: tps65219: Fix TPS65214 GPIO direction programming

Karl Mehltretter <[email protected]>
gpio: tps65219: Use the variant-specific direction callback

Karl Mehltretter <[email protected]>
gpio: tps65219: Fix GPIO input value reads

Peiyang He <[email protected]>
drm/virtio: fix NULL pointer dereference on fence allocation failure

Peiyang He <[email protected]>
drm/virtio: fix memory leak of fence event on execbuffer failure

Matthew Brost <[email protected]>
drm/xe: Keep walking on SVM eviction failure

Szymon Acedański <[email protected]>
drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV

Tangudu Tilak Tirumalesh <[email protected]>
drm/xe: harden adjust_idledly() against divide-by-zero and overflow

Matthew Auld <[email protected]>
drm/xe/vm: nuke PTs only after unlinking contested VMAs

Peiyang He <[email protected]>
drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()

Jonghyuk Kim(MalHyuk) <[email protected]>
drm/nouveau: RCU-free the scheduler-containing nouveau_sched

Wentao Liang <[email protected]>
drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()

Wentao Liang <[email protected]>
drm/nouveau: Fix gem reference leak in validate_init()

Peiyang He <[email protected]>
drm/nouveau: fix double-free in nvif_vmm_dtor

Wentao Liang <[email protected]>
drm/nouveau: Fix bridge reference leak in nv1a_ram_new()

Guangshuo Li <[email protected]>
drm/nouveau: fix autosuspend cleanup during teardown

Peiyang He <[email protected]>
drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM

Wentao Liang <[email protected]>
drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init()

Wentao Liang <[email protected]>
drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()

Wentao Liang <[email protected]>
drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init()

Ivan Lipski <[email protected]>
drm/amd/display: Bump frame warning limit for clang builds of dml

Wentao Liang <[email protected]>
drm/amd/display: Fix dc stream excess put in dm_update_crtc_state()

Imre Deak <[email protected]>
drm/i915/dp_mst: Fix configuring TUs for a disconnected stream

Imre Deak <[email protected]>
drm/i915/dp_mst: Fix configuring FEC for a disconnected stream

Christian König <[email protected]>
drm/i915: fix incorrect RCU teardown order

Brajesh Gupta <[email protected]>
drm/imagination: Fix page count for page table for map() interface

Brajesh Gupta <[email protected]>
drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()

Dongliang Qin <[email protected]>
rds: ib: Clear the sg list when mapping an MR fails

Hui Peng <[email protected]>
mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()

Zixuan Chai <[email protected]>
llc: reserve device headroom for allocated frames

Ridham Khurana <[email protected]>
gpio: zynq: fix runtime PM leak on request error path

Bartosz Golaszewski <[email protected]>
gpio: cdev: fix kernel stack leak to user-space in error path

Wentao Liang <[email protected]>
gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()

Hui Peng <[email protected]>
ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST

Norbert Szetei <[email protected]>
ipv6: do not let ipv6_find_hdr() return an offset past the packet end

Fan Wu <[email protected]>
ipe: protect the dm-verity root hash with RCU

Fan Wu <[email protected]>
ipe: fix use-after-free when auditing a newly loaded policy

Wentao Liang <[email protected]>
fsl/fman: Fix clk reference leak in read_dts_node()

Josef Bacik <[email protected]>
writeback: report a Tasks-RCU quiescent state per cgwb drain pass

Pavankumar Kondeti <[email protected]>
workqueue: Fix NULL current_pwq deref in flush dependency check

Patrick Lu (Anthropic) <[email protected]>
writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes

Christian Brauner <[email protected]>
fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga

Hui Peng <[email protected]>
fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT

Guopeng Zhang <[email protected]>
cgroup/pids: Restore pids.events notifications in local mode

Holger Dengler <[email protected]>
crypto: s390/hmac - Generate intermediate CV for API partial block handling

Andrea Parri <[email protected]>
bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir

Myeonghun Pak <[email protected]>
bna: prevent IOC timer rearm during teardown

Matthias Goergens <[email protected]>
ata: libata-scsi: bound the ATA passthru sense descriptor writes

David Carlier <[email protected]>
arm64: errata: match the target implementation CPU's own MIDR

Fuad Tabba <[email protected]>
arm64/boot: Disable trapping of PMZR_EL0 writes to EL2

Dairui Zhang <[email protected]>
af_packet: fix integer overflow in prb_calc_retire_blk_tmo()

Aohan Mei <[email protected]>
sctp: discard the rest of the packet on a stale-cookie error

Willem de Bruijn <[email protected]>
tcp: prevent collapsing skbs across boundary in rtx queue

Eric Dumazet <[email protected]>
tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow

Willem de Bruijn <[email protected]>
virtio_net: copy zerocopy frags in start_xmit without NAPI

Mario Limonciello <[email protected]>
x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11

Masami Hiramatsu (Google) <[email protected]>
x86/mce: Fix hardware debug register corruption on task migration

Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: join hook list via splice_list_rcu() in commit phase

Pablo Neira Ayuso <[email protected]>
rculist: add list_splice_rcu() for private lists

Mark Amirkan <[email protected]>
mptcp: return sk_wait_data() errors from recvmsg()

Zhan Xusheng <[email protected]>
sched/core: Account PSI IRQ time to the execution context, not the scheduling context

Namhyung Kim <[email protected]>
perf/core: Fix a refcount leak in attach_perf_ctx_data()

Sean Christopherson <[email protected]>
perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs()

Sean Christopherson <[email protected]>
perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused

Sean Christopherson <[email protected]>
perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED

Sean Christopherson <[email protected]>
perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits

Hui Peng <[email protected]>

    autofs: fix sbi->pipe file reference leak in autofs_kill_sb()

Eric Dumazet <[email protected]>
vlan: ensure sufficient headroom in vlan_dev_hard_header()

Eric Dumazet <[email protected]>
net/sched: sch_teql: fix shadowed err in __teql_resolve()

Eric Dumazet <[email protected]>
bridge: check llc_mac_hdr_init() return value in br_send_bpdu()

Eric Dumazet <[email protected]>
llc: fix skb UAF and leaks on llc_mac_hdr_init() failure

Eric Dumazet <[email protected]>
gve: DQO: reject TSO packets with an out of range MSS

Eddie Phillips <[email protected]>
gve: fix TX drop when GSO MSS is too small for hw

Eric Dumazet <[email protected]>
gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO

Ankit Garg <[email protected]>
gve: add support for UDP GSO for DQO format

Ankit Garg <[email protected]>
gve: Enable hw-gro by default if device supported

Ankit Garg <[email protected]>
gve: Advertise NETIF_F_GRO_HW instead of NETIF_F_LRO

Ankit Garg <[email protected]>
gve: Allow ethtool to configure rx_buf_len

Ankit Garg <[email protected]>
gve: Use extack to log xdp config verification errors

Ankit Garg <[email protected]>
gve: Consolidate and persist ethtool ring changes

Coia Prant <[email protected]>
net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails

Ginger Li <[email protected]>

    tipc: Fix a data race on mon->peer_cnt in mon_timeout()

Sidraya Jayagond <[email protected]>
net/smc: fix UAF on lgr list traversal in smcr_port_err()

Sang-Hoon Choi <[email protected]>
nfp: hold IPsec RX state under the XArray lock

Aleksei Sviridkin <[email protected]>
net: phylink: record the PHY only once bringup cannot fail

Yilin Zhang <[email protected]>
tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()

Aleksei Sviridkin <[email protected]>
net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq

Aleksei Sviridkin <[email protected]>
net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621

Haseeb Malik <[email protected]>
macsec: initialize SecY before registering the netdevice

David Dai <[email protected]>
bonding: crypto offload enabled, non-offload slave failover, rekey failed

Pengpeng Hou <[email protected]>
drm/imagination: clamp freelist reconstruction requests

Norbert Szetei <[email protected]>
net: xps: reject an out of range traffic class

Sanghyun Park <[email protected]>
vxlan: use one headroom snapshot for neighbour replies

Xuanqiang Luo <[email protected]>
ip_gre: Reject enabling collect metadata through changelink

Florian Fainelli <[email protected]>
net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT

Florian Fainelli <[email protected]>
net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr

Florian Fainelli <[email protected]>
net: bcmgenet: do not skip WoL power up on GENET V1

Florian Fainelli <[email protected]>
net: bcmgenet: initialize u64 stats seq counter for all queues

Florian Fainelli <[email protected]>
net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems

Lorenzo Bianconi <[email protected]>

    net: stmmac: clear stale buf->page after recycling on skb build failure

Ivan Delalande <[email protected]>
tg3: use random MAC address when tg3_get_device_address fails

Johan Almbladh <[email protected]>
bpf: Fix BSWAP 32 and 16 on MIPS64

Johan Almbladh <[email protected]>
bpf: Fix immediate JMP JEQ/JNE on MIPS32

Ido Schimmel <[email protected]>

    vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets

Shihuang Liu <[email protected]>
net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()

Jakub Kicinski <[email protected]>
veth: manage XDP program pointers during channel resize

Nicolai Buchwitz <[email protected]>
net: bcmgenet: stop Tx NAPI before disabling the queues

Victor Nogueira <[email protected]>
net/sched: act_gate: budget the per-entry list in get_fill_size

Deepanshu Kartikey <[email protected]>

    nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()

Ömer Mete Kaya <[email protected]>
nfc: llcp: fix slab-out-of-bounds reads when logging service names

Ömer Mete Kaya <[email protected]>
nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()

Ömer Mete Kaya <[email protected]>
nfc: llcp: fix -ENOMEM on connect with zero-length service name

Pengpeng Hou <[email protected]>
nfc: st21nfca: validate ISO15693 inventory length

Cong Nguyen <[email protected]>
nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure

Chris Gellermann <[email protected]>
nfc: virtual_ncidev: Add missing ioctl compat handler

Chris Gellermann <[email protected]>
selftests/nci: Fix out-of-bounds store on thread join

Chaithanya Lagisetty <[email protected]>
selftests: nci: Fix uninitialized family ID on missing attribute

Lee Jones <[email protected]>
nfc: llcp: Fix race condition in accept_queue lifecycle

Lei Zhu <[email protected]>
selftests: nci: Correct pthread_create return value check

Aldo Ariel Panzardo <[email protected]>
nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()

Pengpeng Hou <[email protected]>
nfc: st21nfca: validate received frame size

Pengpeng Hou <[email protected]>
nfc: nfcmrvl: validate helper command length before pull

Weiming Shi <[email protected]>
bpf: Reject dev-bound-only programs on other devices

Bernard Ladenthin <[email protected]>
net/sched: fix potential stack infoleak in em_text_dump()

Björn Töpel <[email protected]>
eth: fbnic: Avoid rounding zero ring sizes

Maxime Chevallier <[email protected]>
net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test

Maxime Chevallier <[email protected]>
net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K

Maxime Chevallier <[email protected]>
net: stmmac: selftests: Capture all packets for vlan checks

Maxime Chevallier <[email protected]>

    net: stmmac: selftests: Check the dev->features for S-TAG offload testing

Maxime Chevallier <[email protected]>
net: stmmac: selftests: Support running selftests on DSA conduits

Xin Long <[email protected]>
sctp: hold asoc or transport before mod_timer() in timer handlers

Bernardo Soares <[email protected]>
net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports

Bernardo Soares <[email protected]>
net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports

Zhao Gongyi <[email protected]>
bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc

Emil Tsalapatis <[email protected]>
bpf: Fix bpf_sock context code generation

Emil Tsalapatis <[email protected]>
bpf: Fix bounds check for skb-backed dynptrs

Manaf Meethalavalappu Pallikunhi <[email protected]>
thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds

Coia Prant <[email protected]>
net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure

Jakub Kicinski <[email protected]>
genetlink: report the real command id for dump-only ops in policy dumps

bui duc phuc <[email protected]>
net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error

Muhammad Bilal <[email protected]>
net: spacemit: clear TX descriptor on fragment mapping failure

Mikhail Zaslonko <[email protected]>
s390/debug: Fix NULL pointer dereference in debug_info_copy()

Mikhail Zaslonko <[email protected]>
s390/debug: Do not register views for failed static debug areas

Nemesa Garg <[email protected]>
drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable

Myeonghun Pak <[email protected]>
tg3: clean up PHYLIB resources on probe failure

Shardul Bankar <[email protected]>
udp: remove a disconnected socket from the 4-tuple hash table

Shardul Bankar <[email protected]>
udp: relocate a connected socket in the 4-tuple hash table on re-connect

Kuniyuki Iwashima <[email protected]>
ipv6: Fix dst leak for uncached routes.

Pengpeng Hou <[email protected]>
net: usb: sr9700: include receive overhead in the length check

Ivan Vecera <[email protected]>
dpll: use exact lookup for reference sync pin id

Kuniyuki Iwashima <[email protected]>
ipv6: Prevent rt6_insert_exception() for dying fib6_info.

Ratheesh Kannoth <[email protected]>
octeontx2-af: Fix memory scaling limitation in SR-IOV mode

Hui Peng <[email protected]>
Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()

Ravindra <[email protected]>
Bluetooth: btintel_pcie: validate device-supplied DMA indices

Hui Peng <[email protected]>
Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough

Ralf Lici <[email protected]>
ovpn: reject invalid peer VPN addresses

Ralf Lici <[email protected]>
ovpn: reject multipeer peers without VPN addresses

Ralf Lici <[email protected]>
ovpn: reject duplicate peer VPN addresses

Ralf Lici <[email protected]>
ovpn: always unhash old VPN addresses before rehashing

Ralf Lici <[email protected]>
ovpn: replace bind when clearing stale local source

Ralf Lici <[email protected]>
ovpn: replace bind when learning local endpoint

Ralf Lici <[email protected]>
ovpn: validate peer state before caching UDP dst

Ralf Lici <[email protected]>
ovpn: track UDP socket route key for peer dst cache

Ralf Lici <[email protected]>
ovpn: skip UDP source validation for unspecified addresses

Ralf Lici <[email protected]>
ovpn: preserve IPv6 scope id for netlink peer endpoints

Li Youhong <[email protected]>
drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach

Benjamin Leggett <[email protected]>
drm/virtio: sync shmem backing on guest-bound transfers

Dmitry Osipenko <[email protected]>
Revert "drm/virtio: Allow importing prime buffers when 3D is enabled"

Junrui Luo <[email protected]>
drm/virtio: release the GEM object on virtio_gpu_vram_create() errors

Junrui Luo <[email protected]>
drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()

Junrui Luo <[email protected]>
drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()

Junrui Luo <[email protected]>
drm/virtio: fix object leak when drm_gem_handle_create() fails

Jamal Hadi Salim <[email protected]>
net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget

Yuqi Xu <[email protected]>
bpf: Check params size before reading reserved fields

Aamir Ahmed <[email protected]>
net: usb: catc: bound the RX packet length in catc_rx_done()

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Bound ownership depth through local kptrs and graph roots

Yiqi Sun <[email protected]>
sctp: avoid livelock while updating retransmit path

Alexander Duyck <[email protected]>
eth: fbnic: Handle FW mailbox completions flagged with an error

Mike Marciniszyn (Meta) <[email protected]>
eth fbnic: Add debugfs hooks for firmware mailbox

Mohsin Bashir <[email protected]>
eth: fbnic: Reuse RX mailbox pages

Alexander Duyck <[email protected]>
eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox

Alexander Duyck <[email protected]>
eth: fbnic: reset num_napi when the napi vectors are freed

Björn Töpel <[email protected]>
eth: fbnic: Handle maximum standalone channels

Kuniyuki Iwashima <[email protected]>
ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink().

Lorenzo Bianconi <[email protected]>
net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure

Jérémy Jean <[email protected]>
net: gue: reject invalid REMCSUM offsets

Nguyen Ngoc Thang <[email protected]>
net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure

Giuseppe Ranieri <[email protected]>
drm/nouveau/disp: don't reject HDMI config on cards without SCDC

Francesco Magazzu <[email protected]>
drm/nouveau/clk: don't clobber reclock status when restoring volt/fan

Dan Carpenter <[email protected]>
drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update

Joseph Qi <[email protected]>
ocfs2: make ocfs2_calc_xattr_init() return void

Zeng Heng <[email protected]>
arm64: io: Reject non-user protection in ioremap_prot()

Naman Gulati <[email protected]>
netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name

Julian Anastasov <[email protected]>
ipvs: revalidate ihl before icmp_send

Karl Mehltretter <[email protected]>
netfilter: nft_synproxy: use the family-aware checksum helper

Florian Westphal <[email protected]>
netfilter: nfnetlink_queue: hold nfnl mutex in event notifier

Jérémy Jean <[email protected]>
netfilter: flowtable: publish HW_DEAD after worker is done

Linkui Xiao <[email protected]>

    ipv4: fib: fix data-race and stale genid check around nh->nh_saddr

Kumar Kartikeya Dwivedi <[email protected]>
libbpf: Reject truncated ldimm64 CO-RE relocations

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Restrict CO-RE poisoning to relocatable instructions

Shay Drory <[email protected]>
net/mlx5: devcom, Base component size on linked devices

Heyang Tan <[email protected]>
octeontx2-af: use seq_file for rsrc_alloc debugfs

Kyle Hendry <[email protected]>
net: pcs: rzn1-miic: Fix config array initialization

Jamal Hadi Salim <[email protected]>
net/sched: cls_u32: fix manual hash table handle IDR aliasing

Björn Töpel <[email protected]>
eth: fbnic: Fix payload page pool error cleanup

Weiming Shi <[email protected]>
bpf: Skip unsettled links in link iterator

Zhiling Zou <[email protected]>
xsk: Use a 32-bit compare in xsk_map_gen_lookup

Julian Sun <[email protected]>
fs: avoid repeated scans in evict_inodes()

Vineeth Vijayan <[email protected]>
s390/cio: Guard PMCW field accesses with dnv check

Vineeth Vijayan <[email protected]>
s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points

Vineeth Vijayan <[email protected]>
s390/cio: Fix cio_update_schib() to not cache invalid schib

Karl Mehltretter <[email protected]>
s390/pci/docs: Fix sriov_numvfs attribute name

Niklas Schnelle <[email protected]>
docs: s390/pci: Improve and update PCI documentation

Bart Van Assche <[email protected]>
scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume()

Eva Kurchatova <[email protected]>
selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode

Lee Jones <[email protected]>
Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel

Zijun Hu <[email protected]>
Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()

Christiano Amora <[email protected]>
Bluetooth: SMP: reject Security Request over BR/EDR

Andre Przywara <[email protected]>
pinctrl: sunxi: A523: fix voltage withstand encoding

ZHOU Jiaxiang <[email protected]>
scsi: sd_zbc: Reject disks with too many zones

Ran Hongyun <[email protected]>
squashfs: Add dictionary size range check to prevent shift-out-of-bounds

Mark Brown <[email protected]>
KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP

Karl Mehltretter <[email protected]>
KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0

Fuad Tabba <[email protected]>
KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2

Fuad Tabba <[email protected]>
KVM: arm64: Include VM type when checking VM capabilities in pKVM

Fuad Tabba <[email protected]>
KVM: arm64: Fix MTE flag initialization for protected VMs

Marc Zyngier <[email protected]>
KVM: arm64: vgic-v3: Fix GICv3 trapping in protected mode

Fuad Tabba <[email protected]>
KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure

Fuad Tabba <[email protected]>
KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()

Fuad Tabba <[email protected]>
KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save

Fuad Tabba <[email protected]>
KVM: arm64: vgic-its: Free the caches when GITS_BASER changes

SeungJu Cheon <[email protected]>
RISC-V: KVM: Fix perf-backed counter accounting across stop and read

SeungJu Cheon <[email protected]>
RISC-V: KVM: Report snapshot write failure to the guest

SeungJu Cheon <[email protected]>
RISC-V: KVM: Preserve firmware counter value across stop/start

Zongmin Zhou <[email protected]>
KVM: riscv: Fix NACL hfence entry update order

Benjamin Tissoires <[email protected]>
HID: bpf: fix __hid_bpf_hw_check_params report length

Slawomir Stepien <[email protected]>
HID: amd_sfh: Validate PCI BAR size before mapping

Sean Anderson <[email protected]>
pinctrl: meson: Fix typo in s4 group name

Donggeun Yoo <[email protected]>
bpf, arm64: set up the frame pointer for the exception callback

Geliang Tang <[email protected]>
bpf, sockmap: Fix self-redirect copied_seq double-counting

Pu Lehui <[email protected]>
bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Register dtor for freeing special fields

Jiayuan Chen <[email protected]>
bpf: Fix out-of-bounds read of rtt_min in sock_ops

Jose Fernandez (Anthropic) <[email protected]>
bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()

Jim Mattson <[email protected]>
KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr()

Oscar Priego Verdugo <[email protected]>
HID: elecom: fix bus type for M-XGL20DLBK

Lovekesh Solanki <[email protected]>
HID: multitouch: Add report ID mismatch quirk for ASUS ROG Z13 Folio

Jiayuan Chen <[email protected]>
tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context

Jiayuan Chen <[email protected]>
bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()

Jiayuan Chen <[email protected]>
bpf: Fix divide-by-zero in btf_struct_walk()

Sven Schnelle <[email protected]>
selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc

Weiming Shi <[email protected]>
bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL

Daniel Borkmann <[email protected]>
bpf: Fix bpf_skb_change_tail wrt csum partial skbs

Steffen Eiden <[email protected]>
s390/uv: Prevent potential out-of-bounds read

Steffen Eiden <[email protected]>
s390/uv: Fix loop condition in uv_find_secrets

Claudio Imbrenda <[email protected]>
KVM: s390: Fix IRQ injection with SIGP Stop and Store Status

Mostafa Saleh <[email protected]>
remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage

Sean Rhodes <[email protected]>
ALSA: hda/realtek: Add StarFighter HDA SSID

Sean Rhodes <[email protected]>
ALSA: hda/realtek: Limit Star Labs internal mic boost

Leo Li <[email protected]>
drm/amd/display: Atomize IRQ register read/modify/write ops

Wenwu Hou <[email protected]>
erofs: fix large folio race in erofs_fscache_req_complete

Darrick J. Wong <[email protected]>
xfs: don't stash removename operations with unknown ftype

-------------

Diffstat:

 Documentation/arch/arm64/booting.rst               |   1 +
 Documentation/arch/s390/pci.rst                    | 144 +++++---
 Makefile                                           |   4 +-
 arch/arm64/include/asm/el2_setup.h                 |   9 +-
 arch/arm64/include/asm/io.h                        |   3 +-
 arch/arm64/include/asm/kvm_pkvm.h                  |  10 +-
 arch/arm64/kernel/cpu_errata.c                     |  15 +-
 arch/arm64/kvm/arm.c                               |   4 +-
 arch/arm64/kvm/emulate-nested.c                    |   2 +-
 arch/arm64/kvm/hyp/nvhe/pkvm.c                     |  38 +-
 arch/arm64/kvm/hyp/nvhe/setup.c                    |  10 +
 arch/arm64/kvm/hyp/nvhe/sys_regs.c                 |   5 +
 arch/arm64/kvm/hypercalls.c                        |   3 +-
 arch/arm64/kvm/mmu.c                               |  15 +-
 arch/arm64/kvm/nested.c                            |  15 +-
 arch/arm64/kvm/sys_regs.c                          |   1 +
 arch/arm64/kvm/vgic/vgic-its.c                     |  43 ++-
 arch/arm64/net/bpf_jit_comp.c                      |   2 +
 arch/mips/net/bpf_jit_comp32.c                     |   2 +-
 arch/mips/net/bpf_jit_comp64.c                     |   3 +-
 arch/parisc/include/asm/thread_info.h              |   2 +-
 arch/riscv/kvm/aia_imsic.c                         |  11 +-
 arch/riscv/kvm/mmu.c                               |   2 +
 arch/riscv/kvm/nacl.c                              |  20 +-
 arch/riscv/kvm/vcpu_exit.c                         |   2 +-
 arch/riscv/kvm/vcpu_pmu.c                          |  33 +-
 arch/riscv/kvm/vcpu_sbi_hsm.c                      |   4 +-
 arch/riscv/kvm/vcpu_timer.c                        |   5 +-
 arch/s390/crypto/hmac_s390.c                       |   5 +-
 arch/s390/include/asm/debug.h                      |   8 +-
 arch/s390/kernel/debug.c                           |  15 +-
 arch/s390/kernel/uv.c                              |   8 +-
 arch/s390/kvm/interrupt.c                          |  72 ++--
 arch/s390/pci/pci_event.c                          |   7 +-
 arch/s390/pci/pci_report.c                         |  32 +-
 arch/s390/pci/pci_report.h                         |   4 +-
 arch/x86/boot/startup/sev-startup.c                |   3 +-
 arch/x86/coco/sev/Makefile                         |   2 +-
 arch/x86/coco/sev/core.c                           | 388 +--------------------
 .../asm/sev-internal.h => coco/sev/internal.h}     |  32 ++
 arch/x86/coco/sev/noinstr.c                        |   7 +-
 arch/x86/coco/sev/svsm.c                           | 362 +++++++++++++++++++
 arch/x86/coco/sev/vc-handle.c                      |   3 +-
 arch/x86/events/intel/core.c                       |  79 +++--
 arch/x86/events/intel/ds.c                         |  36 +-
 arch/x86/kernel/cpu/mce/core.c                     |  27 +-
 arch/x86/kvm/pmu.c                                 |   8 -
 arch/x86/kvm/svm/sev.c                             |  18 +-
 arch/x86/kvm/vmx/pmu_intel.c                       |   3 +
 arch/x86/pci/fixup.c                               |  99 ++++++
 drivers/ata/libata-scsi.c                          |  10 +-
 drivers/bluetooth/btintel_pcie.c                   |  16 +
 drivers/bluetooth/btnxpuart.c                      |   8 +-
 drivers/dpll/dpll_netlink.c                        |   3 +-
 drivers/gpio/gpio-arizona.c                        |   8 +-
 drivers/gpio/gpio-tps65219.c                       |  12 +-
 drivers/gpio/gpio-zynq.c                           |  10 +-
 drivers/gpio/gpiolib-cdev.c                        |  32 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c           |   1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c        |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |   8 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c           |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c             |   1 +
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   8 +-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h  |  12 +
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c |   3 +-
 .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c  |   3 +-
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c  |  62 ++--
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.h  |  28 ++
 drivers/gpu/drm/amd/display/dc/dml/Makefile        |   6 +-
 drivers/gpu/drm/bridge/samsung-dsim.c              |   2 +-
 drivers/gpu/drm/clients/drm_fbdev_client.c         |  28 +-
 drivers/gpu/drm/clients/drm_log.c                  |   4 +-
 drivers/gpu/drm/drm_client_event.c                 |  20 +-
 drivers/gpu/drm/drm_fb_helper.c                    |  24 +-
 drivers/gpu/drm/drm_file.c                         |   2 +-
 drivers/gpu/drm/drm_modeset_helper.c               |   6 +-
 drivers/gpu/drm/i915/display/intel_cursor.c        |   7 +-
 drivers/gpu/drm/i915/display/intel_display_types.h |   2 +
 drivers/gpu/drm/i915/display/intel_dp_mst.c        |  24 +-
 drivers/gpu/drm/i915/display/intel_dp_mst.h        |   2 +
 drivers/gpu/drm/i915/display/intel_link_bw.c       |   3 +-
 drivers/gpu/drm/i915/display/intel_psr.c           |  26 ++
 drivers/gpu/drm/i915/display/intel_quirks.c        |  37 +-
 drivers/gpu/drm/i915/display/intel_quirks.h        |   2 +
 drivers/gpu/drm/i915/display/skl_universal_plane.c |   9 +-
 drivers/gpu/drm/i915/gem/i915_gem_object.c         |   2 +-
 drivers/gpu/drm/i915/i915_driver.c                 |   6 +-
 drivers/gpu/drm/imagination/pvr_free_list.c        |  15 +-
 drivers/gpu/drm/imagination/pvr_mmu.c              |  19 +-
 drivers/gpu/drm/imagination/pvr_mmu.h              |   2 +-
 drivers/gpu/drm/imagination/pvr_vm.c               |   4 +-
 drivers/gpu/drm/nouveau/nouveau_bo.c               |   3 +-
 drivers/gpu/drm/nouveau/nouveau_connector.c        |   5 +-
 drivers/gpu/drm/nouveau/nouveau_display.c          |   4 +-
 drivers/gpu/drm/nouveau/nouveau_drm.c              |   5 +-
 drivers/gpu/drm/nouveau/nouveau_gem.c              |   2 +
 drivers/gpu/drm/nouveau/nouveau_sched.c            |   2 +-
 drivers/gpu/drm/nouveau/nouveau_sched.h            |   1 +
 drivers/gpu/drm/nouveau/nouveau_uvmm.c             |  13 +-
 drivers/gpu/drm/nouveau/nvif/vmm.c                 |   1 +
 drivers/gpu/drm/nouveau/nvkm/engine/disp/uoutp.c   |   3 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c     |  23 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c   |   2 +
 drivers/gpu/drm/radeon/radeon_device.c             |   4 +-
 drivers/gpu/drm/virtio/virtgpu_drv.h               |   5 +
 drivers/gpu/drm/virtio/virtgpu_gem.c               |   2 +-
 drivers/gpu/drm/virtio/virtgpu_ioctl.c             |  49 ++-
 drivers/gpu/drm/virtio/virtgpu_prime.c             |   2 +-
 drivers/gpu/drm/virtio/virtgpu_submit.c            |  11 +-
 drivers/gpu/drm/virtio/virtgpu_vq.c                |  46 +++
 drivers/gpu/drm/virtio/virtgpu_vram.c              |  17 +-
 drivers/gpu/drm/xe/display/xe_display.c            |   6 +-
 drivers/gpu/drm/xe/xe_bo.c                         |   7 +
 drivers/gpu/drm/xe/xe_bo.h                         |  19 +
 drivers/gpu/drm/xe/xe_hw_engine.c                  |  27 +-
 drivers/gpu/drm/xe/xe_vm.c                         |  21 +-
 drivers/hid/amd-sfh-hid/amd_sfh_common.h           |   4 +
 drivers/hid/amd-sfh-hid/amd_sfh_pcie.c             |  10 +
 drivers/hid/bpf/hid_bpf_dispatch.c                 |  12 +-
 drivers/hid/hid-alps.c                             |  31 +-
 drivers/hid/hid-ids.h                              |   3 +
 drivers/hid/hid-multitouch.c                       |  29 +-
 drivers/hid/hid-quirks.c                           |   3 +-
 drivers/hid/wacom_sys.c                            |   5 +-
 drivers/i2c/busses/i2c-qcom-geni.c                 |  38 +-
 drivers/net/bonding/bond_main.c                    |   2 +-
 drivers/net/dsa/mt7530-mdio.c                      |  18 +-
 drivers/net/dsa/mt7530.c                           |   3 -
 drivers/net/ethernet/airoha/airoha_npu.c           |  18 +-
 drivers/net/ethernet/amazon/ena/ena_netdev.c       |   2 +
 drivers/net/ethernet/atheros/atl1c/atl1c_main.c    |   3 +
 drivers/net/ethernet/atheros/atl1e/atl1e_main.c    |   3 +
 drivers/net/ethernet/atheros/atlx/atl1.c           |   3 +
 drivers/net/ethernet/broadcom/genet/bcmgenet.c     |  34 +-
 drivers/net/ethernet/broadcom/tg3.c                |  15 +-
 drivers/net/ethernet/brocade/bna/bnad.c            |  24 +-
 drivers/net/ethernet/cadence/macb_main.c           |  14 +-
 drivers/net/ethernet/freescale/fman/fman.c         |   1 +
 drivers/net/ethernet/google/gve/gve.h              |  12 +-
 drivers/net/ethernet/google/gve/gve_adminq.c       |  12 +-
 drivers/net/ethernet/google/gve/gve_desc_dqo.h     |   5 +
 drivers/net/ethernet/google/gve/gve_ethtool.c      | 105 +++---
 drivers/net/ethernet/google/gve/gve_main.c         |  93 +++--
 drivers/net/ethernet/google/gve/gve_tx_dqo.c       |  71 +++-
 drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c  |   3 +
 drivers/net/ethernet/marvell/octeontx2/af/common.h |  45 ++-
 .../ethernet/marvell/octeontx2/af/rvu_debugfs.c    | 104 ++----
 drivers/net/ethernet/mediatek/mtk_eth_soc.c        |   6 +-
 .../ethernet/mellanox/mlx5/core/en/rep/bridge.c    |  45 ++-
 drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c |   3 +
 .../mellanox/mlx5/core/en_accel/ipsec_fs.c         |   4 +-
 .../ethernet/mellanox/mlx5/core/en_accel/macsec.c  |   2 +
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |   1 -
 .../net/ethernet/mellanox/mlx5/core/esw/bridge.c   |  15 +-
 .../net/ethernet/mellanox/mlx5/core/esw/bridge.h   |   2 +
 .../net/ethernet/mellanox/mlx5/core/lib/devcom.c   |   5 +-
 drivers/net/ethernet/meta/fbnic/fbnic_csr.h        |   5 +
 drivers/net/ethernet/meta/fbnic/fbnic_debugfs.c    |  48 +++
 drivers/net/ethernet/meta/fbnic/fbnic_ethtool.c    |  13 +-
 drivers/net/ethernet/meta/fbnic/fbnic_fw.c         |  74 +++-
 drivers/net/ethernet/meta/fbnic/fbnic_fw.h         |   2 +
 drivers/net/ethernet/meta/fbnic/fbnic_pci.c        |  18 +-
 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c       |   4 +-
 drivers/net/ethernet/netronome/nfp/crypto/ipsec.c  |   3 +-
 drivers/net/ethernet/spacemit/k1_emac.c            |   3 +
 drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c     |   5 +-
 drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c |   4 +-
 drivers/net/ethernet/stmicro/stmmac/hwif.h         |   2 +-
 drivers/net/ethernet/stmicro/stmmac/ring_mode.c    |   4 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |   1 +
 .../net/ethernet/stmicro/stmmac/stmmac_selftests.c | 109 ++++--
 drivers/net/ethernet/ti/netcp_core.c               |   2 +-
 drivers/net/ethernet/wangxun/txgbe/txgbe_fdir.c    |  13 +-
 drivers/net/macsec.c                               |  84 ++---
 drivers/net/ovpn/netlink.c                         | 108 +++++-
 drivers/net/ovpn/peer.c                            | 121 +++++--
 drivers/net/ovpn/peer.h                            |  25 +-
 drivers/net/ovpn/udp.c                             | 193 ++++++++--
 drivers/net/pcs/pcs-rzn1-miic.c                    |   3 +-
 drivers/net/pcs/pcs-xpcs.c                         |   4 +-
 drivers/net/phy/micrel.c                           |   1 +
 drivers/net/phy/phylink.c                          |  20 +-
 drivers/net/usb/catc.c                             |  15 +-
 drivers/net/usb/cdc_mbim.c                         |   5 +
 drivers/net/usb/lan78xx.c                          |   2 +
 drivers/net/usb/sr9700.c                           |   3 +-
 drivers/net/veth.c                                 |   2 +
 drivers/net/virtio_net.c                           |   9 +
 drivers/net/vrf.c                                  |   2 -
 drivers/net/vxlan/vxlan_core.c                     |   6 +-
 drivers/nfc/microread/microread.c                  |   6 +-
 drivers/nfc/nfcmrvl/fw_dnld.c                      |  11 +-
 drivers/nfc/pn533/pn533.c                          |  14 +-
 drivers/nfc/pn533/pn533.h                          |   4 +-
 drivers/nfc/pn533/usb.c                            |   4 +-
 drivers/nfc/pn544/pn544.c                          |   7 +-
 drivers/nfc/port100.c                              |   7 +
 drivers/nfc/st21nfca/core.c                        |  12 +-
 drivers/nfc/st21nfca/i2c.c                         |  29 +-
 drivers/nfc/trf7970a.c                             |   4 +-
 drivers/nfc/virtual_ncidev.c                       |   3 +-
 drivers/pci/of_property.c                          |  11 +-
 drivers/pci/setup-bus.c                            |  23 +-
 drivers/pinctrl/meson/pinctrl-meson-s4.c           |   2 +-
 drivers/pinctrl/pinctrl-single.c                   |   3 +-
 drivers/pinctrl/sunxi/pinctrl-sun55i-a523-r.c      |   2 +-
 drivers/pinctrl/sunxi/pinctrl-sun55i-a523.c        |   2 +-
 drivers/pinctrl/sunxi/pinctrl-sunxi.c              |  82 ++++-
 drivers/pinctrl/sunxi/pinctrl-sunxi.h              |   9 +
 drivers/remoteproc/qcom_q6v5_adsp.c                |   8 +-
 drivers/s390/cio/chp.c                             |   3 +
 drivers/s390/cio/cio.c                             |  11 +-
 drivers/s390/cio/cio.h                             |   5 +-
 drivers/s390/cio/cmf.c                             |   2 +-
 drivers/s390/cio/device.c                          |   9 +-
 drivers/s390/cio/device_fsm.c                      |   3 +
 drivers/s390/cio/device_ops.c                      |  23 ++
 drivers/s390/cio/vfio_ccw_fsm.c                    |   2 +-
 drivers/s390/crypto/vfio_ap_ops.c                  |  18 +-
 drivers/scsi/libiscsi_tcp.c                        |   3 +
 drivers/scsi/megaraid/megaraid_sas_base.c          |   4 +-
 drivers/scsi/sd_zbc.c                              |   8 +-
 drivers/thermal/gov_step_wise.c                    |  10 +-
 fs/autofs/inode.c                                  |   4 +
 fs/bpf_fs_kfuncs.c                                 |   4 -
 fs/erofs/fscache.c                                 |   2 +
 fs/fs-writeback.c                                  |  25 +-
 fs/hfsplus/super.c                                 |   1 -
 fs/inode.c                                         |  11 +-
 fs/kernfs/mount.c                                  |   4 +-
 fs/ntfs3/inode.c                                   |   7 +-
 fs/ocfs2/namei.c                                   |   9 +-
 fs/ocfs2/xattr.c                                   |  13 +-
 fs/ocfs2/xattr.h                                   |   8 +-
 fs/smb/client/cached_dir.c                         |  32 +-
 fs/smb/client/smb2inode.c                          |   4 +-
 fs/smb/client/smb2ops.c                            |  28 +-
 fs/smb/client/smb2pdu.c                            |  51 ++-
 fs/squashfs/xz_wrapper.c                           |   6 +-
 fs/super.c                                         |  43 +--
 fs/xfs/libxfs/xfs_metafile.c                       |   8 +-
 fs/xfs/libxfs/xfs_rtrefcount_btree.c               |   4 +-
 fs/xfs/scrub/dir_repair.c                          |  19 +-
 fs/xfs/scrub/health.c                              |   6 +-
 fs/xfs/scrub/inode.c                               |   2 +-
 fs/xfs/scrub/inode_repair.c                        |   2 +-
 fs/xfs/scrub/orphanage.c                           |   6 +-
 fs/xfs/scrub/repair.c                              |  21 +-
 fs/xfs/scrub/scrub.h                               |   2 +-
 fs/xfs/scrub/trace.h                               |  12 +-
 fs/xfs/xfs_dquot.c                                 |   8 +-
 fs/xfs/xfs_exchrange.c                             |  13 +-
 fs/xfs/xfs_icache.c                                |   2 +-
 fs/xfs/xfs_log_recover.c                           |  13 +-
 fs/xfs/xfs_qm.c                                    |  10 +-
 fs/xfs/xfs_refcount_item.c                         |   8 +-
 fs/xfs/xfs_rmap_item.c                             |   8 +-
 include/drm/drm_client.h                           |  22 +-
 include/drm/drm_client_event.h                     |  12 +-
 include/drm/drm_fb_helper.h                        |   8 +-
 include/linux/bpf_mem_alloc.h                      |   6 +
 include/linux/if_vlan.h                            |   3 +
 include/linux/rculist.h                            |  29 ++
 include/linux/skbuff.h                             |  24 +-
 include/net/gue.h                                  |  19 +-
 include/net/ip6_route.h                            |   4 +-
 include/net/netfilter/nf_conntrack.h               |   5 +
 include/net/nfc/hci.h                              |   2 +-
 include/net/nfc/nfc.h                              |   3 +-
 include/net/rose.h                                 |  28 +-
 include/net/tcp.h                                  |   4 +-
 kernel/bpf/btf.c                                   | 140 +++++---
 kernel/bpf/crypto.c                                |   5 +-
 kernel/bpf/hashtab.c                               | 114 +++++-
 kernel/bpf/memalloc.c                              | 106 ++++--
 kernel/bpf/offload.c                               |   2 +
 kernel/bpf/syscall.c                               |   5 +-
 kernel/cgroup/cpuset.c                             |  53 +--
 kernel/cgroup/pids.c                               |   5 +
 kernel/events/core.c                               |  17 +-
 kernel/sched/core.c                                |   2 +-
 kernel/sched/ext.c                                 |   7 +-
 kernel/workqueue.c                                 |   2 +-
 mm/backing-dev.c                                   |   5 +-
 mm/damon/core.c                                    |  24 +-
 mm/damon/vaddr.c                                   |  21 +-
 mm/hugetlb.c                                       |  41 ++-
 mm/rmap.c                                          |  23 +-
 mm/vma.c                                           |   8 +
 net/8021q/vlan_dev.c                               |   5 +
 net/bluetooth/bnep/core.c                          |  17 +-
 net/bluetooth/bnep/netdev.c                        |   8 +-
 net/bluetooth/hci_conn.c                           |  14 +-
 net/bluetooth/hci_sock.c                           |  20 +-
 net/bluetooth/iso.c                                |   7 +
 net/bluetooth/l2cap_core.c                         |  10 +-
 net/bluetooth/mgmt.c                               |  27 +-
 net/bluetooth/rfcomm/core.c                        |   3 +-
 net/bluetooth/rfcomm/sock.c                        |   6 +-
 net/bluetooth/smp.c                                |  17 +
 net/bridge/br_mdb.c                                |   2 +
 net/bridge/br_stp_bpdu.c                           |   5 +-
 net/core/dev.c                                     |   2 +-
 net/core/filter.c                                  |  46 ++-
 net/core/skbuff.c                                  |   9 +-
 net/core/skmsg.c                                   |   4 +
 net/core/sock_map.c                                |   1 +
 net/ipv4/arp.c                                     |   1 +
 net/ipv4/fib_semantics.c                           |  13 +-
 net/ipv4/fou_core.c                                |   4 +
 net/ipv4/inet_connection_sock.c                    |   3 +-
 net/ipv4/ip_gre.c                                  |  12 +
 net/ipv4/ipconfig.c                                |  90 ++---
 net/ipv4/tcp_output.c                              |   3 +
 net/ipv4/udp.c                                     |  44 ++-
 net/ipv6/exthdrs_core.c                            |   3 +
 net/ipv6/ip6_fib.c                                 |   2 +-
 net/ipv6/ip6_gre.c                                 |   2 +-
 net/ipv6/netfilter/ip6t_rpfilter.c                 |   2 +-
 net/ipv6/netfilter/ip6t_rt.c                       |  11 +-
 net/ipv6/route.c                                   |  12 +-
 net/ipv6/seg6.c                                    |   4 +-
 net/llc/llc_c_ac.c                                 |   2 +-
 net/llc/llc_s_ac.c                                 |   4 +
 net/llc/llc_sap.c                                  |   8 +-
 net/mctp/route.c                                   |   2 +-
 net/mptcp/protocol.c                               |   2 +-
 net/netfilter/ipvs/ip_vs_core.c                    |   6 +
 net/netfilter/nf_conntrack_netlink.c               |   3 +-
 net/netfilter/nf_flow_table_offload.c              |   7 +-
 net/netfilter/nf_tables_api.c                      |  18 +-
 net/netfilter/nfnetlink_queue.c                    |   8 +-
 net/netfilter/nft_synproxy.c                       |   3 +-
 net/netlink/genetlink.c                            |   8 +-
 net/nfc/core.c                                     |  15 +-
 net/nfc/digital_dep.c                              |   8 +-
 net/nfc/llcp.h                                     |   1 +
 net/nfc/llcp_commands.c                            |   2 +-
 net/nfc/llcp_core.c                                | 173 ++++++---
 net/nfc/llcp_sock.c                                |  67 +++-
 net/nfc/nci/core.c                                 |  10 +-
 net/nfc/netlink.c                                  |   7 +-
 net/nfc/nfc.h                                      |   3 +-
 net/openvswitch/conntrack.c                        |  37 +-
 net/packet/af_packet.c                             | 104 +++---
 net/rds/ib_frmr.c                                  |  11 +-
 net/rose/rose_in.c                                 |  13 +-
 net/rose/rose_link.c                               |   5 +
 net/rose/rose_route.c                              |  81 ++++-
 net/sched/act_api.c                                |   2 +-
 net/sched/act_ct.c                                 |  41 ++-
 net/sched/act_gate.c                               |  30 +-
 net/sched/cls_u32.c                                |  12 +-
 net/sched/em_text.c                                |   2 +-
 net/sched/sch_hfsc.c                               |  22 ++
 net/sched/sch_teql.c                               |   7 +-
 net/sctp/associola.c                               |  15 +-
 net/sctp/input.c                                   |   7 +-
 net/sctp/sm_sideeffect.c                           |  37 +-
 net/sctp/sm_statefuns.c                            |   2 +
 net/smc/smc_core.c                                 |   2 +
 net/smc/smc_ib.c                                   |  10 +-
 net/tipc/group.c                                   |   4 +-
 net/tipc/monitor.c                                 |   3 +-
 net/tls/tls_sw.c                                   |   6 +-
 net/xdp/xskmap.c                                   |   2 +-
 rust/kernel/net/phy.rs                             |  38 +-
 security/ipe/eval.c                                |  12 +-
 security/ipe/eval.h                                |   2 +-
 security/ipe/fs.c                                  |   8 +-
 security/ipe/hooks.c                               |  22 +-
 security/ipe/policy_fs.c                           |   3 +
 sound/hda/codecs/realtek/alc269.c                  |   9 +
 tools/lib/bpf/libbpf.c                             |   7 +
 tools/lib/bpf/relo_core.c                          |  58 +--
 .../testing/selftests/bpf/prog_tests/linked_list.c |   4 +-
 tools/testing/selftests/cgroup/test_cpuset_prs.sh  |   2 +
 tools/testing/selftests/cgroup/test_memcontrol.c   |   2 +-
 .../ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc |   2 +-
 tools/testing/selftests/nci/nci_dev.c              |  45 ++-
 virt/kvm/kvm_main.c                                |  30 +-
 382 files changed, 4875 insertions(+), 2189 deletions(-)

Read the cover letter in its thread