7.2.9-rc1 review

Greg Kroah-Hartman bridge dri-devel linux-cifs linux-fsdevel linux-patches lkml netfs stable 1 version Sep 30 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Sep 30457 patches 11 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/457	drm/amd/display: Atomize IRQ register read/modify/write ops`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c` `drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h` `drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c` +3 more	+82 ~~-30~~	0 replies
2/457	ALSA: hda/realtek: Limit Star Labs internal mic boost`sound/hda/codecs/realtek/alc269.c`	+6 -0	0 replies
3/457	ALSA: hda/realtek: Add StarFighter HDA SSID`sound/hda/codecs/realtek/alc269.c`	+3 -0	0 replies
4/457	drm/amd/display: Remove sink usage from DPMS`drivers/gpu/drm/amd/display/dc/link/link_dpms.c`	+90 ~~-88~~	0 replies
5/457	remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage`drivers/remoteproc/qcom_q6v5_adsp.c`	+4 -4	0 replies
6/457	KVM: s390: Fix dirty marking in adapter_indicators_set*()`arch/s390/kvm/interrupt.c`	+38 ~~-37~~	0 replies
7/457	KVM: s390: Fix _gaccess_shadow_fault()`arch/s390/kvm/gaccess.c`	+13 -0	0 replies
8/457	KVM: s390: Fix IRQ injection with SIGP Stop and Store Status`arch/s390/kvm/interrupt.c`	+38 ~~-32~~	0 replies
9/457	KVM: s390: Add missing srcu in kvm_s390_set_irq_state()`arch/s390/kvm/interrupt.c`	+2 -2	0 replies
10/457	KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()`arch/s390/kvm/dat.c`	+4 -1	0 replies
11/457	KVM: s390: Fix potential races in dat skey functions`arch/s390/kvm/dat.c`	+28 -8	0 replies
12/457	KVM: s390: Fix race in _destroy_pages_crste()`arch/s390/kvm/gmap.c`	+4 -2	0 replies
13/457	s390/uv: Fix loop condition in uv_find_secrets`arch/s390/kernel/uv.c`	+4 -2	0 replies
14/457	s390/uv: Prevent potential out-of-bounds read`arch/s390/kernel/uv.c`	+1 -1	0 replies
15/457	bpf: Fix bpf_skb_change_tail wrt csum partial skbs`net/core/filter.c`	+5 -6	0 replies
16/457	bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL`net/core/filter.c`	+2 -0	0 replies
17/457	selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc`tools/testing/selftests/ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc`	+1 -1	0 replies
18/457	bpf: Fix divide-by-zero in btf_struct_walk()`kernel/bpf/btf.c`	+1 -1	0 replies
19/457	bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()`net/core/filter.c`	+9 -4	0 replies
20/457	tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context`net/ipv4/inet_connection_sock.c`	+2 -1	0 replies
21/457	HID: multitouch: Add report ID mismatch quirk for ASUS ROG Z13 Folio`drivers/hid/hid-multitouch.c`	+27 -2	0 replies
22/457	HID: winwing: fix use-after-free in force feedback teardown`drivers/hid/hid-winwing.c`	+8 -2	0 replies
23/457	HID: elecom: fix bus type for M-XGL20DLBK`drivers/hid/hid-quirks.c`	+1 -1	0 replies
24/457	KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr()`arch/x86/kvm/pmu.c` `arch/x86/kvm/vmx/pmu_intel.c`	+3 -8	0 replies
25/457	bpf: Allow terminal gotox instructions`kernel/bpf/verifier.c`	+4 -1	0 replies
26/457	bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()`kernel/bpf/hashtab.c`	+21 -3	0 replies
27/457	bpf: Fix out-of-bounds read of rtt_min in sock_ops`net/core/filter.c`	+1 ~~-12~~	0 replies
28/457	bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk`kernel/bpf/memalloc.c`	+28 ~~-22~~	0 replies
29/457	bpf, sockmap: Fix self-redirect copied_seq double-counting`net/core/skmsg.c`	+4 -0	0 replies
30/457	bpf: Fix u32 overflow issue in map batch operations`kernel/bpf/hashtab.c` `kernel/bpf/syscall.c`	+9 -9	0 replies
31/457	bpf, arm64: set up the frame pointer for the exception callback`arch/arm64/net/bpf_jit_comp.c`	+2 -0	0 replies
32/457	pinctrl: meson: Fix typo in s4 group name`drivers/pinctrl/meson/pinctrl-meson-s4.c`	+1 -1	0 replies
33/457	pinctrl: generic: serialise pinctrl_generic_dt_node_to_map()`drivers/pinctrl/pinctrl-generic.c`	+4 -0	0 replies
34/457	HID: amd_sfh: Validate PCI BAR size before mapping`drivers/hid/amd-sfh-hid/amd_sfh_common.h` `drivers/hid/amd-sfh-hid/amd_sfh_pcie.c`	+14 -0	0 replies
35/457	HID: bpf: fix __hid_bpf_hw_check_params report length`drivers/hid/bpf/hid_bpf_dispatch.c`	+8 -4	0 replies
36/457	RISC-V: KVM: Fix the conversion between vsip and hvip`arch/riscv/include/asm/csr.h` `arch/riscv/kvm/vcpu.c` `arch/riscv/kvm/vcpu_onereg.c` +1 more	+36 ~~-15~~	0 replies
37/457	KVM: riscv: Fix NACL hfence entry update order`arch/riscv/kvm/nacl.c`	+16 -4	0 replies
38/457	RISC-V: KVM: Preserve firmware counter value across stop/start`arch/riscv/kvm/vcpu_pmu.c`	+6 -6	0 replies
39/457	RISC-V: KVM: Report snapshot write failure to the guest`arch/riscv/kvm/vcpu_pmu.c`	+4 -3	0 replies
40/457	RISC-V: KVM: Fix perf-backed counter accounting across stop and read`arch/riscv/kvm/vcpu_pmu.c`	+8 -8	0 replies
41/457	KVM: arm64: vgic-its: Free the caches when GITS_BASER changes`arch/arm64/kvm/vgic/vgic-its.c`	+8 -3	0 replies
42/457	KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save`arch/arm64/kvm/vgic/vgic-its.c`	+19 ~~-13~~	0 replies
43/457	KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()`arch/arm64/kvm/hyp/nvhe/pkvm.c`	+3 -2	0 replies
44/457	KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure`arch/arm64/kvm/hyp/nvhe/pkvm.c`	+4 -9	0 replies
45/457	KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2`arch/arm64/kvm/hyp/nvhe/pkvm.c`	+5 -4	0 replies
46/457	KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0`arch/arm64/kvm/hypercalls.c`	+2 -1	0 replies
47/457	KVM: arm64: Match hyp text by physical address in fix_host_ownership()`arch/arm64/kvm/hyp/include/nvhe/mem_protect.h` `arch/arm64/kvm/hyp/nvhe/mem_protect.c` `arch/arm64/kvm/hyp/nvhe/setup.c`	+10 -1	0 replies
48/457	KVM: selftests: fix steal_time for arm64 with host page size > 4K`tools/testing/selftests/kvm/steal_time.c`	+20 ~~-10~~	0 replies
49/457	KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP`arch/arm64/kvm/emulate-nested.c`	+1 -1	0 replies
50/457	squashfs: Add dictionary size range check to prevent shift-out-of-bounds`fs/squashfs/xz_wrapper.c`	+3 -3	0 replies
51/457	scsi: block: Fix zones_cond out-of-bounds write on zone report`block/blk-zoned.c`	+13 -2	0 replies
52/457	scsi: sd_zbc: Reject disks with too many zones`drivers/scsi/sd_zbc.c`	+7 -1	0 replies
53/457	pinctrl: sunxi: A523: fix voltage withstand encoding`drivers/pinctrl/sunxi/pinctrl-sun55i-a523-r.c` `drivers/pinctrl/sunxi/pinctrl-sun55i-a523.c` `drivers/pinctrl/sunxi/pinctrl-sunxi.c` +1 more	+10 -2	0 replies
54/457	Bluetooth: SMP: reject Security Request over BR/EDR`net/bluetooth/smp.c`	+17 -0	0 replies
55/457	Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()`drivers/bluetooth/btnxpuart.c`	+5 -3	0 replies
56/457	Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel`net/bluetooth/mgmt.c`	+15 -4	0 replies
57/457	selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode`tools/testing/selftests/cgroup/test_memcontrol.c`	+1 -1	0 replies
58/457	scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume()`drivers/scsi/megaraid/megaraid_sas_base.c`	+3 -1	0 replies
59/457	s390/pci/docs: Fix sriov_numvfs attribute name`Documentation/arch/s390/pci.rst`	+1 -1	0 replies
60/457	s390/cio: Fix cio_update_schib() to not cache invalid schib`drivers/s390/cio/cio.c`	+7 -4	0 replies
61/457	s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points`drivers/s390/cio/device_ops.c`	+12 -0	0 replies
62/457	s390/cio: Guard PMCW field accesses with dnv check`drivers/s390/cio/chp.c` `drivers/s390/cio/device.c` `drivers/s390/cio/device_fsm.c` +2 more	+21 -5	0 replies
63/457	netfs: Fix netfs_read_gaps() to use separate sink folios`fs/netfs/buffered_read.c`	+19 ~~-15~~	0 replies
64/457	netfs, afs: Fix symlink reading`fs/netfs/read_collect.c`	+5 -0	0 replies
65/457	fs: avoid repeated scans in evict_inodes()`fs/inode.c`	+5 -6	0 replies
66/457	xsk: Use a 32-bit compare in xsk_map_gen_lookup`net/xdp/xskmap.c`	+1 -1	0 replies
67/457	bpf: Skip unsettled links in link iterator`kernel/bpf/syscall.c`	+4 -1	0 replies
68/457	eth: fbnic: Fix payload page pool error cleanup`drivers/net/ethernet/meta/fbnic/fbnic_txrx.c`	+1 -1	0 replies
69/457	net/sched: cls_u32: fix manual hash table handle IDR aliasing`net/sched/cls_u32.c`	+10 -2	0 replies
70/457	net: pcs: rzn1-miic: Fix config array initialization`drivers/net/pcs/pcs-rzn1-miic.c`	+2 -1	0 replies
71/457	octeontx2-af: use seq_file for rsrc_alloc debugfs`drivers/net/ethernet/marvell/octeontx2/af/rvu_debugfs.c`	+33 ~~-71~~	0 replies
72/457	net/mlx5: devcom, Base component size on linked devices`drivers/net/ethernet/mellanox/mlx5/core/lib/devcom.c`	+4 -1	0 replies
73/457	net/mlx5: SD, unload reps on shared FDB create error path`drivers/net/ethernet/mellanox/mlx5/core/lag/shared_fdb.c`	+1 -0	0 replies
74/457	net/mlx5: LAG, reload IB reps of LAG master before the rest`drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c`	+32 ~~-12~~	0 replies
75/457	bpf: Make post-verification instruction rewrites killable`kernel/bpf/core.c` `kernel/bpf/fixups.c`	+39 -6	0 replies
76/457	bpf: Preserve packet pointer class displacement in regsafe()`kernel/bpf/states.c`	+3 -0	0 replies
77/457	bpf: Restrict CO-RE poisoning to relocatable instructions`tools/lib/bpf/relo_core.c`	+31 ~~-27~~	0 replies
78/457	libbpf: Reject truncated ldimm64 CO-RE relocations`tools/lib/bpf/libbpf.c`	+7 -0	0 replies
79/457	ipv4: fib: fix data-race and stale genid check around nh->nh_saddr`net/ipv4/fib_semantics.c`	+12 -1	0 replies
80/457	gpiolib: use of_node_name if line-name is missing`drivers/gpio/gpiolib.c`	+7 -0	0 replies
81/457	netfilter: flowtable: publish HW_DEAD after worker is done`net/netfilter/nf_flow_table_offload.c`	+6 -1	0 replies
82/457	netfilter: nfnetlink_queue: hold nfnl mutex in event notifier`net/netfilter/nfnetlink_queue.c`	+5 -3	0 replies
83/457	netfilter: nft_synproxy: use the family-aware checksum helper`net/netfilter/nft_synproxy.c`	+2 -1	0 replies
84/457	ipvs: revalidate ihl before icmp_send`net/netfilter/ipvs/ip_vs_core.c`	+6 -0	0 replies
85/457	netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name`net/netfilter/nf_conntrack_netlink.c`	+2 -1	0 replies
86/457	arm64: io: Reject non-user protection in ioremap_prot()`arch/arm64/include/asm/io.h`	+2 -1	0 replies
87/457	ocfs2: make ocfs2_calc_xattr_init() return void`fs/ocfs2/namei.c` `fs/ocfs2/xattr.c` `fs/ocfs2/xattr.h`	+11 ~~-19~~	0 replies
88/457	pinctrl: qcom: ipq5210: Publish the OF module alias`drivers/pinctrl/qcom/pinctrl-ipq5210.c`	+1 -0	0 replies
89/457	drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update`drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c`	+5 -2	0 replies
90/457	drm/nouveau/clk: dont clobber reclock status when restoring volt/fan`drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c`	+9 -7	0 replies
91/457	drm/nouveau/disp: dont reject HDMI config on cards without SCDC`drivers/gpu/drm/nouveau/nvkm/engine/disp/uoutp.c`	+1 -2	0 replies
92/457	net/sched: act_ct: dont WARN on benign flow_offload_alloc() failure`net/sched/act_ct.c`	+2 -3	0 replies
93/457	net: gue: reject invalid REMCSUM offsets`include/net/gue.h`	+15 -4	0 replies
94/457	net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure`drivers/net/ethernet/mediatek/mtk_eth_soc.c`	+5 -1	0 replies
95/457	ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink().`net/ipv6/ip6_gre.c`	+1 -1	0 replies
96/457	net: ethtool: keep rtnl_lock for the ioctl self test`drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c` `drivers/net/ethernet/meta/fbnic/fbnic_ethtool.c` `include/linux/ethtool.h` +1 more	+8 -2	0 replies
97/457	eth: fbnic: Handle maximum standalone channels`drivers/net/ethernet/meta/fbnic/fbnic_txrx.c`	+1 -1	0 replies
98/457	eth: fbnic: use the Rx queue napi pointer to find the napi vector`drivers/net/ethernet/meta/fbnic/fbnic_txrx.c`	+23 -3	0 replies
99/457	eth: fbnic: reset num_napi when the napi vectors are freed`drivers/net/ethernet/meta/fbnic/fbnic_pci.c`	+14 -4	0 replies
100/457	eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox`drivers/net/ethernet/meta/fbnic/fbnic_csr.h` `drivers/net/ethernet/meta/fbnic/fbnic_fw.c`	+9 -1	0 replies
101/457	eth: fbnic: Handle FW mailbox completions flagged with an error`drivers/net/ethernet/meta/fbnic/fbnic_csr.h` `drivers/net/ethernet/meta/fbnic/fbnic_debugfs.c` `drivers/net/ethernet/meta/fbnic/fbnic_fw.c` +1 more	+44 -3	0 replies
102/457	sctp: avoid livelock while updating retransmit path`net/sctp/associola.c`	+8 -7	0 replies
103/457	net: allow IFLA_INET_CONF messages when NLA_F_NESTED unset`net/ipv4/devinet.c`	+4 -3	0 replies
104/457	bpf: Bound ownership depth through local kptrs and graph roots`kernel/bpf/btf.c` `tools/testing/selftests/bpf/prog_tests/linked_list.c`	+88 ~~-50~~	0 replies
105/457	net: usb: catc: bound the RX packet length in catc_rx_done()`drivers/net/usb/catc.c`	+12 -3	0 replies
106/457	bpf: Check params size before reading reserved fields`kernel/bpf/crypto.c`	+3 -2	0 replies
107/457	net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget`net/sched/sch_hfsc.c`	+22 -0	0 replies
108/457	drm/virtio: fix object leak when drm_gem_handle_create() fails`drivers/gpu/drm/virtio/virtgpu_gem.c`	+1 -1	0 replies
109/457	drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()`drivers/gpu/drm/virtio/virtgpu_ioctl.c`	+1 -1	0 replies
110/457	drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()`drivers/gpu/drm/virtio/virtgpu_ioctl.c`	+2 -2	0 replies
111/457	drm/virtio: release the GEM object on virtio_gpu_vram_create() errors`drivers/gpu/drm/virtio/virtgpu_vram.c`	+9 -8	0 replies
112/457	Revert "drm/virtio: Allow importing prime buffers when 3D is enabled"`drivers/gpu/drm/virtio/virtgpu_prime.c`	+1 -1	0 replies
113/457	drm/virtio: sync shmem backing on guest-bound transfers`drivers/gpu/drm/virtio/virtgpu_drv.h` `drivers/gpu/drm/virtio/virtgpu_ioctl.c` `drivers/gpu/drm/virtio/virtgpu_vq.c`	+94 -0	0 replies
114/457	pinctrl: tegra238: Fix register bank for AON pin groups`drivers/pinctrl/tegra/pinctrl-tegra238.c`	+102 ~~-102~~	0 replies
115/457	drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach`drivers/gpu/drm/bridge/samsung-dsim.c`	+1 -1	0 replies
116/457	ovpn: preserve IPv6 scope id for netlink peer endpoints`drivers/net/ovpn/netlink.c`	+6 -0	0 replies
117/457	ovpn: skip UDP source validation for unspecified addresses`drivers/net/ovpn/udp.c`	+4 -3	0 replies
118/457	ovpn: track UDP socket route key for peer dst cache`drivers/net/ovpn/peer.c` `drivers/net/ovpn/peer.h` `drivers/net/ovpn/udp.c`	+95 ~~-15~~	0 replies
119/457	ovpn: validate peer state before caching UDP dst`drivers/net/ovpn/udp.c`	+31 -2	0 replies
120/457	ovpn: replace bind when learning local endpoint`drivers/net/ovpn/peer.c`	+23 ~~-20~~	0 replies
121/457	ovpn: replace bind when clearing stale local source`drivers/net/ovpn/udp.c`	+56 ~~-25~~	0 replies
122/457	ovpn: always unhash old VPN addresses before rehashing`drivers/net/ovpn/peer.c`	+4 -6	0 replies
123/457	ovpn: reject duplicate peer VPN addresses`drivers/net/ovpn/netlink.c` `drivers/net/ovpn/peer.c` `drivers/net/ovpn/peer.h`	+101 -9	0 replies
124/457	ovpn: reject multipeer peers without VPN addresses`drivers/net/ovpn/netlink.c`	+30 -6	0 replies
125/457	ovpn: reject invalid peer VPN addresses`drivers/net/ovpn/netlink.c`	+42 ~~-13~~	0 replies
126/457	drm/xe/gt_throttle: Report power brake as a throttle reason on CRI`drivers/gpu/drm/xe/regs/xe_gt_regs.h` `drivers/gpu/drm/xe/xe_gt_throttle.c`	+4 -2	0 replies
127/457	Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough`net/bluetooth/bnep/core.c` `net/bluetooth/bnep/netdev.c`	+23 -2	0 replies
128/457	Bluetooth: btintel_pcie: validate device-supplied DMA indices`drivers/bluetooth/btintel_pcie.c`	+16 -0	0 replies
129/457	Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()`net/bluetooth/rfcomm/core.c`	+2 -1	0 replies
130/457	bpf: Reject non-negative offsets in stack_slot_obj_get_spi()`kernel/bpf/verifier.c`	+1 -1	0 replies
131/457	octeontx2-af: Fix memory scaling limitation in SR-IOV mode`drivers/net/ethernet/marvell/octeontx2/af/common.h`	+39 -6	0 replies
132/457	ipv6: Prevent rt6_insert_exception() for dying fib6_info.`net/ipv6/ip6_fib.c` `net/ipv6/route.c`	+6 -1	0 replies
133/457	net: dont require the hwtstamp NDOs when a PHY provides timestamping`net/core/dev_ioctl.c`	+9 ~~-16~~	0 replies
134/457	dpll: use exact lookup for reference sync pin id`drivers/dpll/dpll_netlink.c`	+1 -2	0 replies
135/457	net: usb: sr9700: include receive overhead in the length check`drivers/net/usb/sr9700.c`	+2 -1	0 replies
136/457	ipv6: Fix dst leak for uncached routes.`include/net/ip6_route.h` `net/ipv6/route.c`	+6 -5	0 replies
137/457	udp: relocate a connected socket in the 4-tuple hash table on re-connect`net/ipv4/udp.c`	+14 -5	0 replies
138/457	udp: remove a disconnected socket from the 4-tuple hash table`net/ipv4/udp.c`	+23 -0	0 replies
139/457	tg3: clean up PHYLIB resources on probe failure`drivers/net/ethernet/broadcom/tg3.c`	+4 -0	0 replies
140/457	drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable`drivers/gpu/drm/i915/display/intel_cursor.c` `drivers/gpu/drm/i915/display/intel_display_types.h` `drivers/gpu/drm/i915/display/intel_psr.c` +1 more	+26 -7	0 replies
141/457	s390/debug: Do not register views for failed static debug areas`arch/s390/include/asm/debug.h` `arch/s390/kernel/debug.c`	+15 -5	0 replies
142/457	s390/debug: Fix NULL pointer dereference in debug_info_copy()`arch/s390/kernel/debug.c`	+2 -1	0 replies
143/457	net: spacemit: clear TX descriptor on fragment mapping failure`drivers/net/ethernet/spacemit/k1_emac.c`	+3 -0	0 replies
144/457	net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error`drivers/net/ethernet/ti/netcp_core.c`	+1 -1	0 replies
145/457	genetlink: report the real command id for dump-only ops in policy dumps`net/netlink/genetlink.c`	+5 -3	0 replies
146/457	net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure`drivers/net/pcs/pcs-xpcs.c`	+3 -1	0 replies
147/457	PM: hibernate: Freeze kernel threads after image preallocation`kernel/power/hibernate.c`	+14 ~~-12~~	0 replies
148/457	thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds`drivers/thermal/gov_step_wise.c`	+4 -6	0 replies
149/457	bpf: Fix bounds check for skb-backed dynptrs`include/linux/skbuff.h`	+4 -1	0 replies
150/457	bpf: Fix bpf_sock context code generation`net/core/filter.c`	+4 -3	0 replies
151/457	bpf: Reject pkt arguments in mutating subprogs`kernel/bpf/verifier.c`	+10 -0	0 replies
152/457	bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc`net/core/sock_map.c`	+1 -0	0 replies
153/457	firewire: cdev: fix back-transition for iso_resource_auto client resource`drivers/firewire/core-cdev.c`	+4 -2	0 replies
154/457	net/mlx5: Bridge, dont fail switchdev events of sibling eswitch ports`drivers/net/ethernet/mellanox/mlx5/core/en/rep/bridge.c` `drivers/net/ethernet/mellanox/mlx5/core/esw/bridge.c` `drivers/net/ethernet/mellanox/mlx5/core/esw/bridge.h`	+44 -9	0 replies
155/457	net/mlx5: Bridge, dont fail unlink of untracked/unsupported peer ports`drivers/net/ethernet/mellanox/mlx5/core/esw/bridge.c`	+5 -4	0 replies
156/457	sctp: hold asoc or transport before mod_timer() in timer handlers`net/sctp/input.c` `net/sctp/sm_sideeffect.c`	+26 ~~-18~~	0 replies
157/457	net: stmmac: selftests: Support running selftests on DSA conduits`drivers/net/ethernet/stmicro/stmmac/stmmac_selftests.c`	+71 ~~-18~~	0 replies
158/457	net: stmmac: selftests: Validate EEE based on the actual LPI timer value`drivers/net/ethernet/stmicro/stmmac/stmmac_selftests.c`	+37 -7	0 replies
159/457	net: stmmac: selftests: Check the dev->features for S-TAG offload testing`drivers/net/ethernet/stmicro/stmmac/stmmac_selftests.c`	+1 -1	0 replies
160/457	net: stmmac: selftests: Capture all packets for vlan checks`drivers/net/ethernet/stmicro/stmmac/stmmac_selftests.c`	+13 -6	0 replies
161/457	net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K`drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c` `drivers/net/ethernet/stmicro/stmmac/hwif.h` `drivers/net/ethernet/stmicro/stmmac/ring_mode.c`	+5 -5	0 replies
162/457	net: stmmac: size the RX buffers from the frame length, not the MTU`drivers/net/ethernet/stmicro/stmmac/stmmac_main.c`	+11 -9	0 replies
163/457	net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test`drivers/net/ethernet/stmicro/stmmac/stmmac_selftests.c`	+3 -0	0 replies
164/457	eth: fbnic: Avoid rounding zero ring sizes`drivers/net/ethernet/meta/fbnic/fbnic_ethtool.c`	+9 -4	0 replies
165/457	net/sched: fix potential stack infoleak in em_text_dump()`net/sched/em_text.c`	+1 -1	0 replies
166/457	bpf: Reject dev-bound-only programs on other devices`kernel/bpf/offload.c`	+2 -0	0 replies
167/457	nfc: nfcmrvl: validate helper command length before pull`drivers/nfc/nfcmrvl/fw_dnld.c`	+8 -3	0 replies
168/457	nfc: st21nfca: validate received frame size`drivers/nfc/st21nfca/i2c.c`	+19 ~~-10~~	0 replies
169/457	nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()`net/nfc/llcp_core.c`	+25 -0	0 replies
170/457	selftests: nci: Correct pthread_create return value check`tools/testing/selftests/nci/nci_dev.c`	+7 -5	0 replies
171/457	nfc: llcp: Fix race condition in accept_queue lifecycle`net/nfc/llcp.h` `net/nfc/llcp_core.c` `net/nfc/llcp_sock.c`	+116 ~~-59~~	0 replies
172/457	selftests: nci: Fix uninitialized family ID on missing attribute`tools/testing/selftests/nci/nci_dev.c`	+1 -1	0 replies
173/457	selftests/nci: Fix out-of-bounds store on thread join`tools/testing/selftests/nci/nci_dev.c`	+20 ~~-11~~	0 replies
174/457	nfc: virtual_ncidev: Add missing ioctl compat handler`drivers/nfc/virtual_ncidev.c`	+2 -1	0 replies
175/457	nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure`net/nfc/netlink.c`	+5 -2	0 replies
176/457	nfc: st21nfca: validate ISO15693 inventory length`drivers/nfc/st21nfca/core.c`	+1 -3	0 replies
177/457	nfc: llcp: fix -ENOMEM on connect with zero-length service name`net/nfc/llcp_sock.c`	+10 -6	0 replies
178/457	nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()`net/nfc/llcp_core.c`	+2 -1	0 replies
179/457	nfc: llcp: fix slab-out-of-bounds reads when logging service names`net/nfc/llcp_commands.c` `net/nfc/llcp_core.c`	+2 -2	0 replies
180/457	nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()`drivers/nfc/pn533/usb.c`	+3 -1	0 replies
181/457	net/sched: act_gate: budget the per-entry list in get_fill_size`net/sched/act_gate.c`	+29 -1	0 replies
182/457	net: bcmgenet: stop Tx NAPI before disabling the queues`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+4 -2	0 replies
183/457	veth: manage XDP program pointers during channel resize`drivers/net/veth.c`	+2 -0	0 replies
184/457	net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()`net/core/skbuff.c`	+6 -3	0 replies
185/457	vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets`drivers/net/vrf.c`	+0 -2	0 replies
186/457	net: dsa: mv88e6xxx: 88E6191X and 88E6193X have no PTP`drivers/net/dsa/mv88e6xxx/chip.c`	+64 -4	0 replies
187/457	net: mdio: realtek-rtl9300: fix RTL931x C22 extended page selection`drivers/net/mdio/mdio-realtek-rtl9300.c`	+6 -0	0 replies
188/457	bpf: Fix immediate JMP JEQ/JNE on MIPS32`arch/mips/net/bpf_jit_comp32.c`	+1 -1	0 replies
189/457	bpf: Fix BSWAP 32 and 16 on MIPS64`arch/mips/net/bpf_jit_comp64.c`	+1 -2	0 replies
190/457	tg3: use random MAC address when tg3_get_device_address fails`drivers/net/ethernet/broadcom/tg3.c`	+7 -4	0 replies
191/457	net: stmmac: clear stale buf->page after recycling on skb build failure`drivers/net/ethernet/stmicro/stmmac/stmmac_main.c`	+1 -0	0 replies
192/457	net: ipv6: keep room for the mac header in dst_dev_overhead()`include/net/dst.h`	+2 -1	0 replies
193/457	net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+2 -3	0 replies
194/457	net: bcmgenet: initialize u64 stats seq counter for all queues`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+2 -2	0 replies
195/457	net: bcmgenet: do not skip WoL power up on GENET V1`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+8 -5	0 replies
196/457	net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+3 -0	0 replies
197/457	net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+2 -1	0 replies
198/457	ip_gre: Reject enabling collect metadata through changelink`net/ipv4/ip_gre.c`	+12 -0	0 replies
199/457	vxlan: use one headroom snapshot for neighbour replies`drivers/net/vxlan/vxlan_core.c`	+4 -2	0 replies
200/457	net: xps: reject an out of range traffic class`net/core/dev.c`	+1 -1	0 replies
201/457	drm/imagination: clamp freelist reconstruction requests`drivers/gpu/drm/imagination/pvr_free_list.c`	+12 -3	0 replies
202/457	bonding: crypto offload enabled, non-offload slave failover, rekey failed`drivers/net/bonding/bond_main.c`	+1 -1	0 replies
203/457	macsec: initialize SecY before registering the netdevice`drivers/net/macsec.c`	+43 ~~-41~~	0 replies
204/457	net/sched: act_ife: validate metadata length before decoding`net/sched/act_ife.c` `net/sched/act_meta_mark.c` `net/sched/act_meta_skbprio.c` +1 more	+24 ~~-11~~	0 replies
205/457	net: emac: move setting of netops to fix crash`drivers/net/ethernet/ibm/emac/core.c`	+9 -7	0 replies
206/457	bpf: Zero-fill other CPUs when BPF_F_CPU creates a per-cpu hash element`kernel/bpf/hashtab.c`	+7 -4	0 replies
207/457	net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621`drivers/net/dsa/mt7530-mdio.c`	+11 -9	0 replies
208/457	net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq`drivers/net/dsa/mt7530.c`	+0 -3	0 replies
209/457	tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()`net/ipv4/tcp_output.c`	+3 -0	0 replies
210/457	net: phylink: record the PHY only once bringup cannot fail`drivers/net/phy/phylink.c`	+17 -3	0 replies
211/457	net: wangxun: implement soft quiesce for PCIe error recovery`drivers/net/ethernet/wangxun/libwx/wx_lib.c` `drivers/net/ethernet/wangxun/libwx/wx_lib.h` `drivers/net/ethernet/wangxun/libwx/wx_ptp.c` +2 more	+63 -0	0 replies
212/457	net: libwx: fix races in Tx timestamp handling`drivers/net/ethernet/wangxun/libwx/wx_hw.c` `drivers/net/ethernet/wangxun/libwx/wx_lib.c` `drivers/net/ethernet/wangxun/libwx/wx_ptp.c` +1 more	+132 ~~-60~~	0 replies
213/457	nfp: hold IPsec RX state under the XArray lock`drivers/net/ethernet/netronome/nfp/crypto/ipsec.c`	+2 -1	0 replies
214/457	net/rds: size a connections path set by the transport it ends up with`net/rds/connection.c`	+6 -0	0 replies
215/457	net/smc: fix UAF on lgr list traversal in smcr_port_err()`net/smc/smc_core.c` `net/smc/smc_ib.c`	+10 -2	0 replies
216/457	tipc: Fix a data race on mon->peer_cnt in mon_timeout()`net/tipc/monitor.c`	+2 -1	0 replies
217/457	net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails`drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c`	+4 -1	0 replies
218/457	net: flush skb_defer_nodes in dev_cpu_dead()`net/core/dev.c` `net/core/dev.h` `net/core/skbuff.c`	+46 ~~-15~~	0 replies
219/457	gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO`drivers/net/ethernet/google/gve/gve_tx_dqo.c`	+7 -1	0 replies
220/457	gve: fix TX drop when GSO MSS is too small for hw`drivers/net/ethernet/google/gve/gve_tx_dqo.c`	+3 ~~-11~~	0 replies
221/457	gve: DQO: reject TSO packets with an out of range MSS`drivers/net/ethernet/google/gve/gve_desc_dqo.h` `drivers/net/ethernet/google/gve/gve_tx_dqo.c`	+30 -1	0 replies
222/457	llc: fix skb UAF and leaks on llc_mac_hdr_init() failure`net/llc/llc_c_ac.c` `net/llc/llc_s_ac.c`	+5 -1	0 replies
223/457	bridge: check llc_mac_hdr_init() return value in br_send_bpdu()`net/bridge/br_stp_bpdu.c`	+4 -1	0 replies
224/457	net/sched: sch_teql: fix shadowed err in __teql_resolve()`net/sched/sch_teql.c`	+2 -5	0 replies
225/457	vlan: ensure sufficient headroom in vlan_dev_hard_header()`net/8021q/vlan_dev.c`	+5 -0	0 replies
226/457	ovl: fix UAF in ovl_do_mkdir() debug print`fs/overlayfs/overlayfs.h`	+3 -1	0 replies
227/457	autofs: fix sbi->pipe file reference leak in autofs_kill_sb()`fs/autofs/inode.c`	+4 -0	0 replies
228/457	perf/x86/intel: Ensure KVM guest PEBS path doesnt set unwanted PERF_GLOBAL_CTRL bits`arch/x86/events/intel/core.c`	+1 -1	0 replies
229/457	perf/x86/intel: Dont write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED`arch/x86/events/intel/core.c`	+37 ~~-18~~	0 replies
230/457	perf/x86/intel: Dont pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused`arch/x86/events/intel/core.c`	+25 ~~-14~~	0 replies
231/457	perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs()`arch/x86/events/intel/core.c`	+4 -4	0 replies
232/457	perf/x86/intel: Delete dead NVL PEBS data-source initcall`arch/x86/events/intel/core.c`	+0 -2	0 replies
233/457	perf/core: Fix a refcount leak in attach_perf_ctx_data()`kernel/events/core.c`	+2 -0	0 replies
234/457	perf/core: Fill branch entries with a single assignment`arch/x86/events/amd/brs.c` `arch/x86/events/amd/lbr.c` `arch/x86/events/intel/lbr.c` +2 more	+48 ~~-61~~	0 replies
235/457	sched/core: Account PSI IRQ time to the execution context, not the scheduling context`kernel/sched/core.c`	+1 -1	0 replies
236/457	mptcp: return sk_wait_data() errors from recvmsg()`net/mptcp/protocol.c`	+1 -1	0 replies
237/457	drm/pagemap: dma-unmap pages before handling migration errors`drivers/gpu/drm/drm_pagemap.c`	+6 -6	0 replies
238/457	vlan: require the MAC header to be present in __vlan_insert_inner_tag()`include/linux/if_vlan.h`	+3 -0	0 replies
239/457	x86/mce: Fix hardware debug register corruption on task migration`arch/x86/kernel/cpu/mce/core.c`	+10 ~~-17~~	0 replies
240/457	x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11`arch/x86/pci/fixup.c`	+99 -0	0 replies
241/457	x86/sev: Make vTPM SVSM calls preemption-safe`arch/x86/coco/sev/svsm.c`	+8 -2	0 replies
242/457	vsock: ignore empty child namespace mode writes`net/vmw_vsock/af_vsock.c`	+3 -0	0 replies
243/457	virtio_net: copy zerocopy frags in start_xmit without NAPI`drivers/net/virtio_net.c`	+9 -0	0 replies
244/457	tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow`net/tipc/group.c`	+2 -2	0 replies
245/457	tcp: prevent collapsing skbs across boundary in rtx queue`include/net/tcp.h`	+2 -2	0 replies
246/457	sctp: discard the rest of the packet on a stale-cookie error`net/sctp/sm_statefuns.c`	+2 -0	0 replies
247/457	af_packet: fix integer overflow in prb_calc_retire_blk_tmo()`net/packet/af_packet.c`	+1 -1	0 replies
248/457	arm64/boot: Disable trapping of PMZR_EL0 writes to EL2`Documentation/arch/arm64/booting.rst` `arch/arm64/include/asm/el2_setup.h`	+9 -1	0 replies
249/457	arm64: errata: match the target implementation CPUs own MIDR`arch/arm64/kernel/cpu_errata.c`	+9 -6	0 replies
250/457	ata: libata-scsi: bound the ATA passthru sense descriptor writes`drivers/ata/libata-scsi.c`	+8 -2	0 replies
251/457	bna: prevent IOC timer rearm during teardown`drivers/net/ethernet/brocade/bna/bnad.c`	+18 -6	0 replies
252/457	bpf: fs/xattr: dont assume the inode is locked in path_unlink/path_rmdir`fs/bpf_fs_kfuncs.c`	+0 -4	0 replies
253/457	crypto: s390/hmac - Generate intermediate CV for API partial block handling`arch/s390/crypto/hmac_s390.c`	+4 -1	0 replies
254/457	cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict`kernel/cgroup/cpuset.c` `tools/testing/selftests/cgroup/test_cpuset_prs.sh`	+4 -1	0 replies
255/457	cgroup/pids: Restore pids.events notifications in local mode`kernel/cgroup/pids.c`	+5 -0	0 replies
256/457	fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT`net/ipv4/fou_core.c`	+4 -0	0 replies
257/457	fprobe: Terminate the fgraph_data list when the reservation is not filled`kernel/trace/fprobe.c`	+15 -0	0 replies
258/457	fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbots "WARNING in do_new_mount" saga`fs/ntfs3/inode.c`	+2 -5	0 replies
259/457	netfs: Fix missing alloc tagging of direct mempool allocations`fs/netfs/objects.c` `fs/netfs/rolling_buffer.c` `include/linux/mempool.h`	+10 -3	0 replies
260/457	writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes`fs/fs-writeback.c`	+20 -5	0 replies
261/457	workqueue: Fix NULL current_pwq deref in flush dependency check`kernel/workqueue.c`	+1 -1	0 replies
262/457	writeback: report a Tasks-RCU quiescent state per cgwb drain pass`mm/backing-dev.c`	+3 -2	0 replies
263/457	fsl/fman: Fix clk reference leak in read_dts_node()`drivers/net/ethernet/freescale/fman/fman.c`	+1 -0	0 replies
264/457	ipe: fix use-after-free when auditing a newly loaded policy`security/ipe/fs.c` `security/ipe/policy_fs.c`	+6 -5	0 replies
265/457	ipe: protect the dm-verity root hash with RCU`security/ipe/eval.c` `security/ipe/eval.h` `security/ipe/hooks.c`	+26 ~~-10~~	0 replies
266/457	ipv6: do not let ipv6_find_hdr() return an offset past the packet end`net/ipv6/exthdrs_core.c`	+3 -0	0 replies
267/457	ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST`net/ipv6/seg6.c`	+2 -2	0 replies
268/457	kprobes: Fix permanent hang when flushing the kprobe optimizer`kernel/kprobes.c`	+14 -8	0 replies
269/457	gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()`drivers/gpio/gpio-arizona.c`	+6 -2	0 replies
270/457	gpio: cdev: fix kernel stack leak to user-space in error path`drivers/gpio/gpiolib-cdev.c`	+25 -7	0 replies
271/457	gpio: zynq: fix runtime PM leak on request error path`drivers/gpio/gpio-zynq.c`	+1 -9	0 replies
272/457	llc: reserve device headroom for allocated frames`net/llc/llc_sap.c`	+4 -4	0 replies
273/457	mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()`net/mctp/route.c`	+1 -1	0 replies
274/457	rds: ib: Clear the sg list when mapping an MR fails`net/rds/ib_frmr.c`	+5 -6	0 replies
275/457	drm/client: fix restore of partially initialized client`drivers/gpu/drm/clients/drm_fbdev_client.c`	+8 -0	0 replies
276/457	drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()`drivers/gpu/drm/imagination/pvr_mmu.c`	+4 -1	0 replies
277/457	drm/imagination: Fix page count for page table for map() interface`drivers/gpu/drm/imagination/pvr_mmu.c` `drivers/gpu/drm/imagination/pvr_mmu.h` `drivers/gpu/drm/imagination/pvr_vm.c`	+11 -9	0 replies
278/457	drm/i915: fix incorrect RCU teardown order`drivers/gpu/drm/i915/gem/i915_gem_object.c`	+1 -1	0 replies
279/457	drm/i915/quirks: Limit eDP rate to HBR2 on HP Pavilion Plus 14-ew1`drivers/gpu/drm/i915/display/intel_quirks.c`	+3 -0	0 replies
280/457	drm/i915/dp_mst: Fix configuring FEC for a disconnected stream`drivers/gpu/drm/i915/display/intel_dp_mst.c`	+2 -1	0 replies
281/457	drm/i915/dp_mst: Fix configuring TUs for a disconnected stream`drivers/gpu/drm/i915/display/intel_dp_mst.c` `drivers/gpu/drm/i915/display/intel_dp_mst.h` `drivers/gpu/drm/i915/display/intel_link_bw.c`	+25 -1	0 replies
282/457	drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping`drivers/gpu/drm/amd/amdkfd/kfd_chardev.c`	+57 ~~-14~~	0 replies
283/457	drm/amd/display: Fix dc stream excess put in dm_update_crtc_state()`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c`	+3 -1	0 replies
284/457	drm/amd/display: Bump frame warning limit for clang builds of dml`drivers/gpu/drm/amd/display/dc/dml/Makefile`	+5 -1	0 replies
285/457	drm/amdgpu/userq: fix double jiffies conversion in hang detect timeout`drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c`	+6 -6	0 replies
286/457	drm/amdgpu/vcn4.0.3: fix video_timeout unit mismatch in jpeg reset wait`drivers/gpu/drm/amd/amdgpu/vcn_v4_0_3.c`	+2 -1	0 replies
287/457	drm/amdgpu/vcn5.0.1: fix video_timeout unit mismatch in jpeg reset wait`drivers/gpu/drm/amd/amdgpu/vcn_v5_0_1.c`	+2 -1	0 replies
288/457	drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc()`drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c`	+3 -1	0 replies
289/457	drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init()`drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c`	+1 -0	0 replies
290/457	drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()`drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c`	+3 -1	0 replies
291/457	drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init()`drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c`	+1 -1	0 replies
292/457	drm/amdgpu: move userq fence wait out of signalling section`drivers/gpu/drm/amd/amdgpu/amdgpu_eviction_fence.c` `drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c` `drivers/gpu/drm/amd/amdgpu/amdgpu_userq.h`	+5 -3	0 replies
293/457	drm/nouveau/dmem: pin VRAM for the whole registered range`drivers/gpu/drm/nouveau/nouveau_dmem.c`	+2 -2	0 replies
294/457	drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM`drivers/gpu/drm/nouveau/nouveau_uvmm.c`	+11 -2	0 replies
295/457	drm/nouveau: fix autosuspend cleanup during teardown`drivers/gpu/drm/nouveau/nouveau_drm.c`	+1 -0	0 replies
296/457	drm/nouveau: Fix bridge reference leak in nv1a_ram_new()`drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c`	+2 -0	0 replies
297/457	drm/nouveau: fix double-free in nvif_vmm_dtor`drivers/gpu/drm/nouveau/nouveau_drm.c` `drivers/gpu/drm/nouveau/nvif/vmm.c`	+2 -3	0 replies
298/457	drm/nouveau: Fix gem reference leak in validate_init()`drivers/gpu/drm/nouveau/nouveau_gem.c`	+2 -0	0 replies
299/457	drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()`drivers/gpu/drm/nouveau/nouveau_connector.c`	+4 -1	0 replies
300/457	drm/nouveau: RCU-free the scheduler-containing nouveau_sched`drivers/gpu/drm/nouveau/nouveau_sched.c` `drivers/gpu/drm/nouveau/nouveau_sched.h`	+2 -1	0 replies
301/457	drm/nouveau: dont bump pin count on failed re-pin in nouveau_bo_pin_locked()`drivers/gpu/drm/nouveau/nouveau_bo.c`	+2 -1	0 replies
302/457	drm/xe/vm: nuke PTs only after unlinking contested VMAs`drivers/gpu/drm/xe/xe_vm.c`	+9 ~~-12~~	0 replies
303/457	drm/xe: harden adjust_idledly() against divide-by-zero and overflow`drivers/gpu/drm/xe/xe_hw_engine.c`	+21 -6	0 replies
304/457	drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV`drivers/gpu/drm/xe/xe_bo.h`	+19 -0	0 replies
305/457	drm/xe: Keep walking on SVM eviction failure`drivers/gpu/drm/xe/xe_bo.c`	+7 -0	0 replies
306/457	drm/virtio: fix memory leak of fence event on execbuffer failure`drivers/gpu/drm/virtio/virtgpu_submit.c`	+4 -0	0 replies
307/457	drm/virtio: fix NULL pointer dereference on fence allocation failure`drivers/gpu/drm/virtio/virtgpu_submit.c`	+5 -2	0 replies
308/457	gpio: tps65219: Fix GPIO input value reads`drivers/gpio/gpio-tps65219.c`	+1 -1	0 replies
309/457	gpio: tps65219: Use the variant-specific direction callback`drivers/gpio/gpio-tps65219.c`	+3 -3	0 replies
310/457	gpio: tps65219: Fix TPS65214 GPIO direction programming`drivers/gpio/gpio-tps65219.c`	+3 -1	0 replies
311/457	mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish`mm/rmap.c` `mm/vma.c`	+13 -1	0 replies
312/457	mm/hugetlb: do not dissolve gigantic pages without runtime support`mm/hugetlb.c`	+9 -0	0 replies
313/457	mm/hugetlb: preserve mremap address delta when skipping page tables`mm/hugetlb.c`	+7 -4	0 replies
314/457	mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()`mm/damon/vaddr.c`	+14 -7	0 replies
315/457	mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()`mm/damon/ops-common.c`	+6 -1	0 replies
316/457	mm/damon/core: fix unconditionally skip last region`mm/damon/core.c`	+14 ~~-11~~	0 replies
317/457	mm/damon/core: allow esz to be set to zero`mm/damon/core.c`	+3 -2	0 replies
318/457	mm/damon/core: reset invalid quota->charge_target_from`mm/damon/core.c`	+8 -1	0 replies
319/457	PCI: Fix BAR resize for devices on a root bus`drivers/pci/setup-bus.c`	+18 -7	0 replies
320/457	PCI: of_property: Omit bus properties without a subordinate bus`drivers/pci/of_property.c`	+9 -2	0 replies
321/457	packet: use ubuf_info completion for TX_RING packets`include/linux/skbuff.h` `net/packet/af_packet.c`	+65 ~~-56~~	0 replies
322/457	HID: alps: unregister DualPoint Stick input device on remove`drivers/hid/hid-alps.c`	+19 -0	0 replies
323/457	HID: alps: fix use-after-free on input2 registration failure`drivers/hid/hid-alps.c`	+4 -2	0 replies
324/457	HID: hid-oxp: use cancel_delayed_work_sync() in remove`drivers/hid/hid-oxp.c`	+3 -3	0 replies
325/457	HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard`drivers/hid/hid-ids.h` `drivers/hid/hid-quirks.c`	+4 -0	0 replies
326/457	HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()`drivers/hid/wacom_sys.c`	+3 -2	0 replies
327/457	net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()`drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c`	+3 -0	0 replies
328/457	net/mlx5e: advertise MACsec offload only when supported`drivers/net/ethernet/mellanox/mlx5/core/en_accel/macsec.c` `drivers/net/ethernet/mellanox/mlx5/core/en_main.c`	+2 -1	0 replies
329/457	net/mlx5e: fix swapped IPv6 IPsec policy masks`drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c`	+2 -2	0 replies
330/457	net/sched: reject IDR error pointers when deleting actions`net/sched/act_api.c`	+1 -1	0 replies
331/457	net: airoha: npu: cancel wdt_work after releasing the WDT IRQ`drivers/net/ethernet/airoha/airoha_npu.c`	+6 ~~-12~~	0 replies
332/457	net: arp: terminate device name before lookup`net/ipv4/arp.c`	+1 -0	0 replies
333/457	net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read`drivers/net/ethernet/atheros/atlx/atl1.c`	+3 -0	0 replies
334/457	net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy()`drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c`	+3 -0	0 replies
335/457	net: ipconfig: bound DHCP option construction`net/ipv4/ipconfig.c`	+26 ~~-19~~	0 replies
336/457	net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths`drivers/net/ethernet/cadence/macb_main.c`	+12 -2	0 replies
337/457	net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry`include/net/netfilter/nf_conntrack.h` `net/openvswitch/conntrack.c`	+17 -0	0 replies
338/457	net: openvswitch: conntrack: remove add_helper dead code`net/openvswitch/conntrack.c`	+2 -8	0 replies
339/457	net: openvswitch: conntrack: fix helper UAF due to extensions realloc`net/openvswitch/conntrack.c`	+15 -4	0 replies
340/457	net: atl1c: fix soft lockup on out-of-range tpd_cons read`drivers/net/ethernet/atheros/atl1c/atl1c_main.c`	+3 -0	0 replies
341/457	net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read`drivers/net/ethernet/atheros/atl1e/atl1e_main.c`	+3 -0	0 replies
342/457	net: bridge: mdb: restart port group walk after deletion`net/bridge/br_mdb.c`	+2 -0	0 replies
343/457	net: ena: fix PHC cleanup on probe failure`drivers/net/ethernet/amazon/ena/ena_netdev.c`	+1 -0	0 replies
344/457	net: ena: fix MMIO read buffer leak on probe failure`drivers/net/ethernet/amazon/ena/ena_netdev.c`	+1 -0	0 replies
345/457	net: phy: intel-xway: workaround 100BASE-TX Link-Up issue`drivers/net/phy/intel-xway.c`	+28 -1	0 replies
346/457	net: phy: micrel: Advance register data pointer in write loop`drivers/net/phy/micrel.c`	+1 -0	0 replies
347/457	net: txgbe: fix FDIR filter restore for VF rules`drivers/net/ethernet/wangxun/txgbe/txgbe_fdir.c`	+11 -2	0 replies
348/457	net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist`drivers/net/usb/cdc_mbim.c`	+5 -0	0 replies
349/457	net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs()`drivers/net/usb/lan78xx.c`	+2 -0	0 replies
350/457	netfilter: ip6t_rpfilter: reject routes without inet6_dev`net/ipv6/netfilter/ip6t_rpfilter.c`	+1 -1	0 replies
351/457	netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read`net/ipv6/netfilter/ip6t_rt.c`	+8 -3	0 replies
352/457	netfilter: nf_tables: skip expired catchall elements on insert and delete`net/netfilter/nf_tables_api.c`	+8 -2	0 replies
353/457	nfc: fix use-after-free in nfc_get_local_general_bytes`drivers/nfc/microread/microread.c` `drivers/nfc/pn533/pn533.c` `drivers/nfc/pn533/pn533.h` +9 more	+55 ~~-42~~	0 replies
354/457	nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()`net/nfc/llcp_core.c`	+3 -0	0 replies
355/457	nfc: port100: reject frames whose declared length exceeds the received data`drivers/nfc/port100.c`	+7 -0	0 replies
356/457	nfc: trf7970a: power down on startup RX gain failure`drivers/nfc/trf7970a.c`	+3 -1	0 replies
357/457	scsi: libiscsi_tcp: Check the data direction of a Data-In PDU`drivers/scsi/libiscsi_tcp.c`	+3 -0	0 replies
358/457	scsi: ufs: core: Keep internal commands dispatchable during error handling`drivers/ufs/core/ufshcd.c`	+6 -0	0 replies
359/457	scsi: ufs: pltfrm: Add quirk for R-Car S4 lacking lanes-per-direction`drivers/ufs/host/ufshcd-pltfrm.c`	+5 -1	0 replies
360/457	parisc: Increase kernel stack size to 32kb`arch/parisc/include/asm/thread_info.h`	+1 -1	0 replies
361/457	parisc: parse early parameters in setup_arch()`arch/parisc/kernel/setup.c`	+12 -0	0 replies
362/457	perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()`kernel/events/core.c`	+1 -1	0 replies
363/457	perf/core: Run sched_task() for PMUs with only CPU-wide events`kernel/events/core.c`	+9 -4	0 replies
364/457	perf/x86/intel: Fix CMT PEBS load/store direction for latency events, to fix sample classification`arch/x86/events/intel/ds.c`	+2 -2	0 replies
365/457	perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification`arch/x86/events/intel/ds.c`	+13 -3	0 replies
366/457	perf/x86/intel: Fix DKT PEBS load/store direction for latency events, to fix sample classification`arch/x86/events/intel/ds.c` `arch/x86/events/perf_event.h`	+2 -6	0 replies
367/457	perf/x86/intel: Fix Panther Cove PEBS data-source snoop states`arch/x86/events/intel/ds.c`	+2 -2	0 replies
368/457	perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints`arch/x86/events/intel/ds.c`	+5 ~~-17~~	0 replies
369/457	perf/x86/intel: Remove incorrect Panther Cove PEBS data-source constraints`arch/x86/events/intel/ds.c`	+5 ~~-13~~	0 replies
370/457	perf/x86/intel: Constrain Panther Cove UOPS_DISPATCHED events to PMCs 0-3`arch/x86/events/intel/core.c`	+2 -0	0 replies
371/457	pinctrl: mpfs-mssio: fix width of unused bank voltage setting`drivers/pinctrl/microchip/pinctrl-mpfs-mssio.c`	+1 -1	0 replies
372/457	pinctrl: mpfs-mssio: use correct regmap function to set bank voltage`drivers/pinctrl/microchip/pinctrl-mpfs-mssio.c`	+2 -2	0 replies
373/457	pinctrl: qcom: nord: Split QUP1 SE2/SE3 into lane-pair functions`Documentation/devicetree/bindings/pinctrl/qcom,nord-tlmm.yaml` `drivers/pinctrl/qcom/pinctrl-nord.c`	+27 ~~-14~~	0 replies
374/457	pinctrl: single: free the IRQ on domain creation failure`drivers/pinctrl/pinctrl-single.c`	+2 -1	0 replies
375/457	pinctrl: sunxi: keep a shadow copy of the data register output latches`drivers/pinctrl/sunxi/pinctrl-sunxi.c` `drivers/pinctrl/sunxi/pinctrl-sunxi.h`	+68 ~~-15~~	0 replies
376/457	s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()`drivers/s390/cio/device_ops.c`	+2 -0	0 replies
377/457	s390/cmf: Fix virtual vs physical address confusion`drivers/s390/cio/cio.h` `drivers/s390/cio/cmf.c`	+4 -3	0 replies
378/457	s390/pci: Fix leak of struct pci_dev reference in zpci_report_status()`arch/s390/pci/pci_event.c` `arch/s390/pci/pci_report.c` `arch/s390/pci/pci_report.h`	+9 -8	0 replies
379/457	s390/pci: Fix missing device lock in zpci_report_status()`arch/s390/pci/pci_event.c` `arch/s390/pci/pci_report.c`	+16 -7	0 replies
380/457	s390/pci: Report SCLP status on error events when no pdev is associated`arch/s390/pci/pci_event.c`	+3 -1	0 replies
381/457	s390/pci: Dont report recovery success on skipped recovery`arch/s390/pci/pci_event.c`	+1 -0	0 replies
382/457	s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config`drivers/s390/crypto/vfio_ap_ops.c`	+14 -4	0 replies
383/457	KVM: Ensure memory attributes xarray nodes are accounted to the callers memcg`virt/kvm/kvm_main.c`	+1 -1	0 replies
384/457	KVM: Dont treat reserved xarray entries as having memory attributes`virt/kvm/kvm_main.c`	+25 -3	0 replies
385/457	KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV`arch/x86/kvm/svm/sev.c`	+6 -2	0 replies
386/457	KVM: SEV: Do cache maintenance on the source VM during intra-host migration`arch/x86/kvm/svm/sev.c`	+10 -0	0 replies
387/457	KVM: arm64: Dont WARN on an unknown VM ioctl in protected mode`arch/arm64/include/asm/kvm_pkvm.h`	+1 -2	0 replies
388/457	KVM: arm64: Fix AArch32 DBGBXVR<n> handling`arch/arm64/kvm/sys_regs.c`	+1 -0	0 replies
389/457	KVM: arm64: Fix spurious warning for benign stage 2 teardown race`arch/arm64/kvm/mmu.c`	+12 -3	0 replies
390/457	KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race`arch/arm64/kvm/nested.c`	+13 -2	0 replies
391/457	KVM: arm64: Transfer the hyp stack pages out of the host stage-2`arch/arm64/kvm/hyp/nvhe/setup.c`	+10 -0	0 replies
392/457	RISC-V: KVM: Serialize IMSIC attributes with vCPU migration`arch/riscv/kvm/aia_imsic.c`	+9 -2	0 replies
393/457	RISC-V: KVM: Synchronize hrtimer callback during teardown`arch/riscv/kvm/vcpu_timer.c`	+4 -1	0 replies
394/457	RISC-V: KVM: Release unused page after MMU invalidation`arch/riscv/kvm/mmu.c`	+6 -2	0 replies
395/457	RISC-V: KVM: Propagate interrupted G-stage faults`arch/riscv/kvm/mmu.c` `arch/riscv/kvm/vcpu_exit.c`	+3 -1	0 replies
396/457	RISC-V: KVM: Fix HSM hart status error propagation`arch/riscv/kvm/vcpu_sbi_hsm.c`	+2 -2	0 replies
397/457	sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags`kernel/sched/ext/ext.c`	+6 -1	0 replies
398/457	sched/cache: Decouple sched_cache_group from mm to fix UAF`include/linux/mm_types.h` `include/linux/sched.h` `kernel/exit.c` +1 more	+144 ~~-61~~	0 replies
399/457	sched/cache: Refresh LLC capacity across CPU hotplug, to fix capacity underestimation bug`drivers/base/cacheinfo.c` `include/linux/sched/topology.h` `kernel/sched/topology.c`	+21 ~~-16~~	0 replies
400/457	Bluetooth: hci_conn: fix CIS hold ownership on reuse`net/bluetooth/hci_conn.c`	+8 -1	0 replies
401/457	Bluetooth: hci_sock: validate event length before filtering`net/bluetooth/hci_sock.c`	+14 -3	0 replies
402/457	Bluetooth: hci_sock: reject out-of-range OCF values`net/bluetooth/hci_sock.c`	+2 -1	0 replies
403/457	Bluetooth: ISO: balance the parent hold in hci_bind_bis()`net/bluetooth/hci_conn.c`	+4 -1	0 replies
404/457	Bluetooth: ISO: release unused CIS holds after channel attach`net/bluetooth/iso.c`	+7 -0	0 replies
405/457	Bluetooth: L2CAP: validate frame length before control and FCS access`net/bluetooth/l2cap_core.c`	+9 -1	0 replies
406/457	Bluetooth: mgmt: fix race in read_unconf_index_list()`net/bluetooth/mgmt.c`	+2 -6	0 replies
407/457	Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO`net/bluetooth/rfcomm/sock.c`	+4 -2	0 replies
408/457	smb: client: fix create context out-of-bounds reads`fs/smb/client/smb2ops.c` `fs/smb/client/smb2pdu.c`	+54 ~~-18~~	0 replies
409/457	smb: client: close handle after create-context parsing failure`fs/smb/client/smb2pdu.c`	+3 -0	0 replies
410/457	smb: client: clean up failed cached directory opens`fs/smb/client/cached_dir.c`	+22 ~~-10~~	0 replies
411/457	smb: client: preserve create-context parsing errors`fs/smb/client/smb2inode.c`	+3 -1	0 replies
412/457	smb: client: use finish_no_open() for non-regular inodes`fs/smb/client/dir.c`	+39 ~~-13~~	0 replies
413/457	smb: client: validate POSIX create context length`fs/smb/client/smb2pdu.c`	+5 -2	0 replies
414/457	smb: client: close completed creates on compound wait errors`fs/smb/client/smb2inode.c` `fs/smb/client/smb2misc.c` `fs/smb/client/transport.c`	+61 ~~-17~~	0 replies
415/457	smb: client: delete compound mids on send failure before unlock`fs/smb/client/transport.c`	+4 -0	0 replies
416/457	xfs: dont assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption`fs/xfs/scrub/health.c`	+3 -3	0 replies
417/457	xfs: fix attr fork block count checks in xrep_inode_blockcounts`fs/xfs/scrub/inode_repair.c`	+1 -1	0 replies
418/457	xfs: release orphanage dir inode if chown fails`fs/xfs/scrub/orphanage.c`	+5 -1	0 replies
419/457	xfs: use correct jiffies comparison function in xchk_maybe_relax`fs/xfs/scrub/scrub.h`	+1 -1	0 replies
420/457	xfs: check padding field in xfs_ioc_commit_range`fs/xfs/xfs_exchrange.c`	+1 -1	0 replies
421/457	xfs: dont call xfs_exchange_range_finish for a dry run`fs/xfs/xfs_exchrange.c`	+8 -3	0 replies
422/457	xfs: only flag zero padding for dir3 data blocks, not dir3 block blocks`fs/xfs/scrub/dir.c`	+1 -1	0 replies
423/457	xfs: use the correct reservations for rtrmap/refcount recovery`fs/xfs/xfs_refcount_item.c` `fs/xfs/xfs_rmap_item.c`	+12 -4	0 replies
424/457	xfs: check di_forkoff correctly in scrub`fs/xfs/scrub/inode.c`	+1 -1	0 replies
425/457	xfs: fix rtgroup repair estimations`fs/xfs/scrub/repair.c` `fs/xfs/scrub/trace.h`	+25 -6	0 replies
426/457	xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots`fs/xfs/libxfs/xfs_rtrefcount_btree.c`	+2 -2	0 replies
427/457	xfs: call xfs_dquot_set_prealloc_limits if we installed default rtb limits`fs/xfs/xfs_dquot.c`	+6 -2	0 replies
428/457	xfs: dont let hidden_space go negative in xfs_metafile_resv_init`fs/xfs/libxfs/xfs_metafile.c`	+4 -4	0 replies
429/457	xfs: dont let memory failures leak blocks and kill repairs`fs/xfs/scrub/newbt.c`	+5 -3	0 replies
430/457	xfs: dont merge different file IO error types`fs/xfs/xfs_healthmon.c`	+3 -1	0 replies
431/457	xfs: drop dquot flush lock when we cant find a buffer to flush`fs/xfs/xfs_qm.c`	+8 -2	0 replies
432/457	xfs: fix blockgc group quota scanning when usrquota isnt enforced`fs/xfs/xfs_icache.c`	+1 -1	0 replies
433/457	xfs: fix cursor and pointer handling when recovering iunlink buckets`fs/xfs/xfs_log_recover.c`	+8 -5	0 replies
434/457	drm/xe: Add wa_14025941587 to xe2, xe3 and xe3p platforms`drivers/gpu/drm/xe/xe_guc_ads.c` `drivers/gpu/drm/xe/xe_hw_engine.c` `drivers/gpu/drm/xe/xe_wa_oob.rules`	+79 ~~-18~~	0 replies
435/457	landlock: Work around gcc-16 -Wuninitialized warning`security/landlock/access.h`	+8 -0	0 replies
436/457	accel/ivpu: Use threaded IRQ for IPC callback processing`drivers/accel/ivpu/ivpu_drv.c` `drivers/accel/ivpu/ivpu_drv.h` `drivers/accel/ivpu/ivpu_hw.c` +4 more	+96 ~~-17~~	0 replies
437/457	accel/ivpu: Use separate flag for job timeout`drivers/accel/ivpu/ivpu_drv.c` `drivers/accel/ivpu/ivpu_drv.h` `drivers/accel/ivpu/ivpu_job.c` +2 more	+7 -7	0 replies
438/457	i2c: qcom-geni: Isolate serial engine setup`drivers/i2c/busses/i2c-qcom-geni.c`	+75 ~~-83~~	0 replies
439/457	i2c: qcom-geni: Move resource initialization to separate function`drivers/i2c/busses/i2c-qcom-geni.c`	+24 ~~-40~~	0 replies
440/457	i2c: qcom-geni: Store of_device_id data in driver private struct`drivers/i2c/busses/i2c-qcom-geni.c`	+24 ~~-22~~	0 replies
441/457	i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL`drivers/i2c/busses/i2c-qcom-geni.c`	+33 -5	0 replies
442/457	super: convert s_count to refcount_t s_passive`fs/super.c` `include/linux/fs/super_types.h`	+10 ~~-10~~	0 replies
443/457	super: take lock after last reference count`fs/super.c`	+28 ~~-35~~	0 replies
444/457	super: make iterate_supers_type() deletion-safe`fs/kernfs/mount.c` `fs/super.c`	+21 ~~-22~~	0 replies
445/457	drm/amd/display: Relax DML frame limit with UBSAN`drivers/gpu/drm/amd/display/dc/dml/Makefile` `drivers/gpu/drm/amd/display/dc/dml2_0/Makefile`	+2 -2	0 replies
446/457	net/sched: act_ct: fix helper UAF due to extensions realloc`net/sched/act_ct.c`	+12 -6	0 replies
447/457	net/sched: act_ct: avoid modifying shared unconfirmed ct entry`net/sched/act_ct.c`	+16 -2	0 replies
448/457	KVM: arm64: nv: Fix life cycle of the nested_mmus array`arch/arm64/include/asm/kvm_host.h` `arch/arm64/include/asm/kvm_nested.h` `arch/arm64/kvm/arm.c` +1 more	+49 ~~-52~~	0 replies
449/457	KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction`arch/arm64/include/asm/kvm_nested.h` `arch/arm64/kvm/arm.c` `arch/arm64/kvm/nested.c`	+13 -7	0 replies
450/457	KVM: x86: Move IRQ-related helper declarations from kvm_host.h => irq.h`arch/x86/include/asm/kvm_host.h` `arch/x86/kvm/irq.h` `arch/x86/kvm/svm/nested.c` +1 more	+8 -5	0 replies
451/457	KVM: x86/mmu: Move kvm_arch_async_page_ready() below kvm_tdp_page_fault()`arch/x86/kvm/mmu/mmu.c`	+31 ~~-31~~	0 replies
452/457	KVM: x86/mmu: Move kvm_mmu_do_page_fault() from mmu_internal.h => mmu.c`arch/x86/kvm/mmu/mmu.c` `arch/x86/kvm/mmu/mmu_internal.h`	+66 ~~-67~~	0 replies
453/457	KVM: move TSS constants from kvm_host.h to tss.h`arch/x86/include/asm/kvm_host.h` `arch/x86/kvm/tss.h` `arch/x86/kvm/vmx/vmx.c`	+8 -7	0 replies
454/457	KVM: x86: Reject nested CAP enablement if nested virtualization is disabled`arch/x86/include/asm/kvm_host.h` `arch/x86/kvm/hyperv.c` `arch/x86/kvm/svm/svm.c` +2 more	+13 -6	0 replies
455/457	KVM: x86: Add static calls for nested virtualization ops`arch/x86/include/asm/kvm-x86-nested-ops.h` `arch/x86/include/asm/kvm_host.h` `arch/x86/kvm/hyperv.c` +4 more	+83 ~~-27~~	0 replies
456/457	accel/ivpu: Drop IRQF_ONESHOT to allow IPC IRQ threading on PREEMPT_RT`drivers/accel/ivpu/ivpu_drv.c`	+1 -1	0 replies
457/457	i2c: qcom-geni: release DMA channels on probe error`drivers/i2c/busses/i2c-qcom-geni.c`	+1 -0	0 replies

Reviews trailers per patch

275 of 457 patches have a Reviewed-by or Acked-by.

Patch	Mario Limonciello	Daniel Wheeler	Nicholas Kazlauskas	mayhemandcoffee	Like Xu	Sandipan Das	Anton Protopopov	Rik van Riel	Emil Tsalapatis	Hou Tao	Jiayuan Chen	Xu Kuohai	Neil Armstrong	Basavaraj Natikar	Anup Patel	Claudio Imbrenda	Christoph Schlameuss	Marc Zyngier	Steffen Eiden	Fuad Tabba	Vincent Donnefort	Zenghui Yu (Huawei)	Leonardo Bras	Lorenzo Stoakes (ARM)	Phillip Lougher	Zhihao Cheng	Damien Le Moal	Per Larsson	Juan Manuel Lopez Carrillo	Chen-Yu Tsai	Steven Rostedt	Eduard Zingerman	Kuniyuki Iwashima	Christian Borntraeger	Randy Dunlap	Simon Horman	Victor Nogueira	hybris	Geert Uytterhoeven	Lad Prabhakar	Ratheesh Kannoth	Akiva Goldberger	Peter Oberparleiter	Ido Schimmel	Eric Dumazet	Andy Shevchenko	Catalin Marinas	Konrad Dybcio	Lyude Paul	Tano Dzhinski	Xuanqiang Luo	Xin Long	Frank Sorenson	Paulo Alcantara	Jan Kara	Ren Wei	Luca Ceresoli	Raag Jadav	Sun Jian	Leon Romanovsky	Kory Maincent	Ethan Nelson-Moore	Hangbin Liu	Jouni Högander	Heiko Carstens	Vivian Wang	Troy Mitchell	Mario Limonciello (AMD)	Matthew Leach	Val Packett	Mark Bloch	Nicolai Buchwitz	Joe Damato	Jamal Hadi Salim	[email protected]	Stanislav Fomichev	Jason Xing	David Ahern	Andrea Mayer	Andrew Lunn	Markus Stockhausen	Maxime Chevallier	Justin Iurman	Gabriel Goller	Aleksandr Loktionov	Mahanta Jambigi	Dust Li	Tung Nguyen	Heiko Stuebner	Lorenzo Bianconi	Ankit Garg	Harshitha Ramamurthy	Sabrina Dubroca	Nikolay Aleksandrov	Dapeng Mi	Jim Mattson	Yifan Wu	Matthieu Baerts (NGI0)	Himal Prasad Ghimiray	Peter Zijlstra (Intel)	Stefano Garzarella	Luigi Leonardi	Bobby Eshleman	Daniel Zahka	Willem de Bruijn	Anshuman Khandual	Oliver Upton	Weiming Shi	Alessio Belle	Erhard Furtner	Vlastimil Babka (SUSE)	Tejun Heo	Roman Gushchin	Ilya Maximets	Charles Keepax	Kent Gibson	Allison Henderson	Thomas Zimmermann	Alexandru Dadu	Tvrtko Ursulin	Annoy Cc	Nemesa Garg	Luca Coelho	Lijo Lazar	Christian König	Harald Freudenberger	Vitaly Prosyak	Waiman Long	Jonathan Cormier	Lance Yang	David Hildenbrand (Arm)	Muchun Song	SJ Park	Baolin Wang	Ilpo Järvinen	Derek J. Clark	Jason Gerecke	Tariq Toukan	Aaron Conole	Thomas Hellström	Matthew Brost	Vinay Belgaumkar	Paul Geurts	Mike Christie	Bart Van Assche	Helge Deller	Benjamin Block	Farhan Ali	Matthew Rosato	Halil Pasic	Suzuki K Poulose	Yuan Yao	Jonathan Davies	[email protected]	Christoph Hellwig	Andrea Righi	Andrzej Kacprowski	Dawid Osuchowski	Viken Dadhaniya	Mukesh Kumar Savaliya	Mattijs Korpershoek	Chen Yu	Tim Chen	K Prateek Nayak	Yosry Ahmed	Kai Huang	Binbin Wu	Vitaly Kuznetsov	Karl Mehltretter	Wei-Lin Chang	Ronald Warsow	Peter Schneider	Benjamin Boortz	Pavel Machek (CIP)	Ron Economos	Takeshi Ogasawara	Miguel Ojeda	Brett A C Sheffield	Barry K. Nathan	Justin M. Forbes	Florian Fainelli
Series																																																																																																																																																																											T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/457	R-b	T-b
2/457
3/457
4/457			R-b
5/457
6/457
7/457
8/457
9/457
10/457																	R-b																	R-b
11/457
12/457
13/457																A-b	R-b
14/457																	R-b
15/457
16/457									R-b
17/457																															R-b
18/457																																A-b
19/457																																	R-b
20/457
21/457				T-b
22/457
23/457
24/457					R-b	R-b
25/457							R-b
26/457								R-b
27/457									R-b
28/457										A-b
29/457									R-b		R-b
30/457
31/457												A-b
32/457													R-b
33/457
34/457														A-b
35/457
36/457															R-b
37/457															R-b
38/457															R-b
39/457															R-b
40/457															R-b
41/457																		R-b
42/457																		R-b
43/457																		R-b
44/457
45/457
46/457																			R-b	R-b T-b
47/457																		R-b			R-b T-b
48/457																						R-b
49/457																							R-b	R-b
50/457																									R-b	R-b
51/457																											R-b
52/457																											R-b
53/457																												T-b	T-b	R-b T-b
54/457
55/457
56/457
57/457
58/457
59/457																																			R-b
60/457																																											R-b
61/457																																											R-b
62/457																																											R-b
63/457																																																					T-b	R-b
64/457																																																						R-b
65/457																																																							R-b
66/457									R-b
67/457
68/457																																				R-b
69/457																																				R-b	R-b	T-b
70/457																																							R-b	R-b
71/457																																									R-b
72/457																																										R-b
73/457																																										R-b
74/457																																										R-b
75/457																																A-b
76/457																																A-b
77/457																																A-b
78/457
79/457																																												R-b	R-b
80/457																																														R-b
81/457
82/457
83/457
84/457
85/457
86/457																																															R-b
87/457
88/457																																																R-b
89/457																																																	R-b
90/457																																																	R-b
91/457																																																	R-b	Co-Authored-By T-b
92/457																																				R-b
93/457
94/457
95/457																																												R-b							R-b
96/457																																				R-b
97/457																																				R-b
98/457																																				R-b
99/457																																				R-b
100/457																																				R-b
101/457																																				R-b
102/457																																																				A-b
103/457																																												R-b
104/457
105/457																																				R-b
106/457																																																								R-b
107/457																																					R-b	T-b
108/457
109/457
110/457
111/457
112/457																																																																						R-b
113/457
114/457
115/457																																																									R-b T-b
116/457
117/457
118/457
119/457
120/457
121/457
122/457
123/457
124/457
125/457
126/457																																																										R-b
127/457
128/457
129/457
130/457																																																											R-b
131/457																																																												R-b
132/457																																												R-b
133/457																																																													R-b
134/457
135/457																																																														R-b T-b
136/457																																												R-b	R-b						R-b												R-b
137/457																																	R-b
138/457																																	R-b
139/457
140/457																																																																R-b
141/457																																																																	R-b
142/457																																											R-b																						A-b
143/457																																																																		R-b	R-b
144/457																																				R-b
145/457
146/457																																				R-b
147/457																																																																				R-b	T-b R-b
148/457
149/457											R-b
150/457											R-b
151/457
152/457
153/457
154/457																																																																							R-b
155/457																																																																							R-b
156/457
157/457																																																																								R-b
158/457																																																																								R-b
159/457																																																																								R-b
160/457																																																																								R-b
161/457																																																																								R-b
162/457																																																																								R-b
163/457																																																																								R-b
164/457																																																																									R-b
165/457																																																																										A-b
166/457
167/457
168/457
169/457
170/457
171/457
172/457																																																															R-b
173/457																																				R-b
174/457																																				R-b
175/457																																				R-b
176/457
177/457
178/457
179/457
180/457																																																																											T-b
181/457																																						T-b
182/457
183/457											R-b																																																																	A-b	R-b
184/457
185/457																																													R-b																																	R-b	R-b
186/457																																																																																R-b
187/457																																																																																	A-b
188/457
189/457
190/457
191/457																																																																																		R-b
192/457																																													R-b																																		R-b				R-b	R-b
193/457																																																																								R-b
194/457																																																																								R-b
195/457																																																																								R-b
196/457																																																																								R-b
197/457																																																																								R-b
198/457																																												R-b																			R-b
199/457
200/457
201/457																																																																																																													R-b
202/457																																																															R-b
203/457																																																																																													R-b
204/457
205/457																																																																								R-b										R-b
206/457
207/457
208/457
209/457																																													R-b																																																															T-b
210/457
211/457																																																																																					R-b
212/457
213/457
214/457
215/457																																																																																						R-b	R-b
216/457																																																																																								R-b
217/457																																																																																		R-b							R-b	A-b
218/457
219/457																																																																																											R-b	R-b
220/457																																																																																												R-b
221/457																																																																																												R-b
222/457
223/457																																																																																														A-b
224/457
225/457
226/457
227/457
228/457																																																																																															R-b
229/457																																																																																															R-b
230/457																																																																																															R-b	R-b
231/457																																																																																															R-b	R-b
232/457
233/457
234/457																																																																																																	T-b
235/457
236/457																																																																																																		R-b
237/457																																																																																																			R-b
238/457																																				R-b
239/457																																																																																																				A-b
240/457
241/457																																																																																																					R-b
242/457																																																																																																					R-b	R-b	R-b
243/457
244/457
245/457																																													R-b																																																											R-b
246/457																																																				A-b
247/457																																																																																																									R-b
248/457																																																																																																										R-b	R-b
249/457
250/457																											R-b
251/457
252/457
253/457																																																																																																																														R-b
254/457																																																																																																																																R-b
255/457
256/457																																																															R-b
257/457
258/457																																																							R-b
259/457																																																																																																														T-b	A-b
260/457																																																							R-b																																																									A-b	A-b
261/457
262/457																								A-b																															R-b																																																									A-b	R-b
263/457																																				R-b
264/457
265/457
266/457																																												R-b																																																																						R-b
267/457																																																															R-b																R-b				R-b
268/457
269/457																																																																																																																			R-b
270/457																																																																																																																				R-b
271/457
272/457																																													R-b
273/457
274/457																																																																																																																					R-b
275/457																																																																																																																						R-b
276/457																																																																																																													R-b										R-b
277/457																																																																																																													R-b										R-b
278/457																																																																																																																								R-b
279/457																																																																																																																									T-b	R-b
280/457																																																																																																																											R-b
281/457																																																																																																																											R-b
282/457																																																																																																																												R-b
283/457
284/457
285/457																																																																																																																													R-b
286/457																																																																																																																													R-b
287/457																																																																																																																													R-b
288/457																																																																																																																												R-b
289/457
290/457
291/457
292/457																																																																																																																															R-b
293/457																																																	R-b
294/457																																																	R-b
295/457																																																	R-b
296/457																																																	R-b
297/457																																																	R-b
298/457																																																	R-b
299/457																																																	R-b
300/457																																																	R-b
301/457																																																	R-b
302/457																																																																																																																																												R-b	R-b
303/457																																																																																																																																														R-b
304/457																																																																																																																																												R-b
305/457																																																																																																			R-b
306/457
307/457
308/457																																																																																																																																	R-b
309/457
310/457
311/457																								R-b																																																																																							A-b																			R-b	A-b
312/457																																																																																																																																				A-b
313/457																																																																																																																																			A-b
314/457
315/457																																																																																																																																					R-b	R-b
316/457																																																																																																																																					R-b
317/457																																																																																																																																					R-b
318/457
319/457																																																																																																																																							R-b
320/457
321/457
322/457
323/457
324/457																																																																																																																																								R-b
325/457
326/457																																																																																																																																									R-b
327/457																																																																																																																																										R-b
328/457																																																																																																																																										R-b
329/457																																																																																																																																										R-b
330/457
331/457																																																																																										A-b
332/457																																												R-b
333/457
334/457																																				R-b
335/457																																				R-b																				R-b
336/457																																																																								R-b
337/457																																																																																																																																											R-b
338/457																																																																																																																																											R-b
339/457																																																																																																																																											R-b
340/457
341/457
342/457																																																																																														A-b
343/457
344/457
345/457																																																																																R-b
346/457																																																																																R-b
347/457
348/457
349/457
350/457
351/457
352/457
353/457																																				R-b
354/457																																				R-b
355/457																																				R-b
356/457																																																																																																																																															R-b
357/457																																																																																																																																																R-b
358/457																																																																																																																																																	R-b
359/457
360/457
361/457																																																																																																																																																		T-b
362/457																																																																																																	T-b
363/457																																																																																																	T-b
364/457
365/457
366/457
367/457
368/457
369/457
370/457
371/457
372/457
373/457																																																R-b
374/457
375/457
376/457																																											R-b
377/457																																																																	R-b
378/457																																																																																																																																																			R-b	R-b
379/457																																																																																																																																																			R-b	R-b
380/457																																																																																																																																																			R-b	R-b
381/457																																																																																																																																																			R-b	R-b
382/457																																																																																																																																																					R-b	A-b
383/457
384/457
385/457
386/457
387/457																																																																																																																																																							R-b
388/457																		R-b
389/457																		R-b																																																																																																																																						R-b
390/457																		R-b																																																																																																																																							T-b
391/457																		R-b			R-b T-b
392/457															R-b
393/457															R-b
394/457															R-b
395/457															R-b
396/457															R-b
397/457																																																																																																																																																												R-b
398/457
399/457																																																																																																																																																																		R-b T-b	R-b	R-b T-b
400/457
401/457
402/457
403/457
404/457
405/457
406/457
407/457
408/457																																																					T-b
409/457																																																					T-b
410/457																																																					T-b
411/457																																																					T-b
412/457
413/457																																																					T-b
414/457																																																					T-b
415/457																																																																																																																																																										T-b
416/457																																																																																																																																																											R-b
417/457																																																																																																																																																											R-b
418/457																																																																																																																																																											R-b
419/457																																																																																																																																																											R-b
420/457																																																																																																																																																											R-b
421/457																																																																																																																																																											R-b
422/457																																																																																																																																																											R-b
423/457																																																																																																																																																											R-b
424/457																																																																																																																																																											R-b
425/457																																																																																																																																																											R-b
426/457																																																																																																																																																											R-b
427/457																																																																																																																																																											R-b
428/457																																																																																																																																																											R-b
429/457																																																																																																																																																											R-b
430/457																																																																																																																																																											R-b
431/457																																																																																																																																																											R-b
432/457																																																																																																																																																											R-b
433/457																																																																																																																																																											R-b
434/457																																																																																																																																														R-b
435/457
436/457																																																																																																																																																													R-b
437/457																																																																																																																																																														R-b
438/457																																																R-b																																																																																																															A-b	R-b	T-b
439/457																																																R-b																																																																																																															A-b		T-b
440/457																																																R-b																																																																																																															A-b		T-b
441/457																																																																																																																																																																R-b
442/457																																																							R-b
443/457																																																							R-b
444/457																																																							R-b																																																																																																																		T-b
445/457
446/457																																																				R-b																						R-b																																																																	R-b
447/457																																																				R-b																						R-b																																																																	R-b
448/457																								A-b																																																																																																																																																		R-b
449/457																								R-b																																																																																																																																																		R-b
450/457																																																																																																																																																																					R-b	R-b	R-b
451/457																																																																																																																																																																					R-b	R-b	R-b
452/457																																																																																																																																																																					R-b	R-b	R-b
453/457
454/457																																																																																																																																																																								R-b
455/457
456/457																																																																																																																																																													R-b
457/457																																																R-b																																																																																																																R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 181 reviewers.

Read the v1 thread

Cover letter [PATCH 7.2 000/457] 7.2.9-rc1 review

This is the start of the stable review cycle for the 7.2.9 release. There are 457 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 02 Oct 2026 15:23:04 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.9-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 7.2.9-rc1

Shengzhuo Wei <[email protected]>
i2c: qcom-geni: release DMA channels on probe error

Karol Wachowski <[email protected]>
accel/ivpu: Drop IRQF_ONESHOT to allow IPC IRQ threading on PREEMPT_RT

Sean Christopherson <[email protected]>
KVM: x86: Add static calls for nested virtualization ops

Sean Christopherson <[email protected]>
KVM: x86: Reject nested CAP enablement if nested virtualization is disabled

Paolo Bonzini <[email protected]>
KVM: move TSS constants from kvm_host.h to tss.h

Sean Christopherson <[email protected]>
KVM: x86/mmu: Move kvm_mmu_do_page_fault() from mmu_internal.h => mmu.c

Sean Christopherson <[email protected]>
KVM: x86/mmu: Move kvm_arch_async_page_ready() below kvm_tdp_page_fault()

Sean Christopherson <[email protected]>
KVM: x86: Move IRQ-related helper declarations from kvm_host.h => irq.h

Marc Zyngier <[email protected]>
KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction

Marc Zyngier <[email protected]>
KVM: arm64: nv: Fix life cycle of the nested_mmus array

Ilya Maximets <[email protected]>
net/sched: act_ct: avoid modifying shared unconfirmed ct entry

Ilya Maximets <[email protected]>
net/sched: act_ct: fix helper UAF due to extensions realloc

Alex Hung <[email protected]>
drm/amd/display: Relax DML frame limit with UBSAN

Christian Brauner <[email protected]>
super: make iterate_supers_type() deletion-safe

Christian Brauner <[email protected]>
super: take lock after last reference count

Christian Brauner <[email protected]>
super: convert s_count to refcount_t s_passive

Viken Dadhaniya <[email protected]>
i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL

Praveen Talari <[email protected]>
i2c: qcom-geni: Store of_device_id data in driver private struct

Praveen Talari <[email protected]>
i2c: qcom-geni: Move resource initialization to separate function

Praveen Talari <[email protected]>
i2c: qcom-geni: Isolate serial engine setup

Jakub Pawlak <[email protected]>
accel/ivpu: Use separate flag for job timeout

Karol Wachowski <[email protected]>
accel/ivpu: Use threaded IRQ for IPC callback processing

Arnd Bergmann <[email protected]>
landlock: Work around gcc-16 -Wuninitialized warning

Tangudu Tilak Tirumalesh <[email protected]>

    drm/xe: Add wa_14025941587 to xe2, xe3 and xe3p platforms

Darrick J. Wong <[email protected]>
xfs: fix cursor and pointer handling when recovering iunlink buckets

Darrick J. Wong <[email protected]>
xfs: fix blockgc group quota scanning when usrquota isn't enforced

Darrick J. Wong <[email protected]>
xfs: drop dquot flush lock when we can't find a buffer to flush

Darrick J. Wong <[email protected]>
xfs: don't merge different file IO error types

Darrick J. Wong <[email protected]>
xfs: don't let memory failures leak blocks and kill repairs

Darrick J. Wong <[email protected]>
xfs: don't let hidden_space go negative in xfs_metafile_resv_init

Darrick J. Wong <[email protected]>
xfs: call xfs_dquot_set_prealloc_limits if we installed default rtb limits

Darrick J. Wong <[email protected]>
xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots

Darrick J. Wong <[email protected]>
xfs: fix rtgroup repair estimations

Darrick J. Wong <[email protected]>
xfs: check di_forkoff correctly in scrub

Darrick J. Wong <[email protected]>
xfs: use the correct reservations for rtrmap/refcount recovery

Darrick J. Wong <[email protected]>
xfs: only flag zero padding for dir3 data blocks, not dir3 block blocks

Darrick J. Wong <[email protected]>
xfs: don't call xfs_exchange_range_finish for a dry run

Darrick J. Wong <[email protected]>
xfs: check padding field in xfs_ioc_commit_range

Darrick J. Wong <[email protected]>
xfs: use correct jiffies comparison function in xchk_maybe_relax

Darrick J. Wong <[email protected]>
xfs: release orphanage dir inode if chown fails

Darrick J. Wong <[email protected]>
xfs: fix attr fork block count checks in xrep_inode_blockcounts

Darrick J. Wong <[email protected]>
xfs: don't assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption

Adarsh Das <[email protected]>
smb: client: delete compound mids on send failure before unlock

Zihan Xi <[email protected]>
smb: client: close completed creates on compound wait errors

Zihan Xi <[email protected]>
smb: client: validate POSIX create context length

Namjae Jeon <[email protected]>
smb: client: use finish_no_open() for non-regular inodes

Zihan Xi <[email protected]>
smb: client: preserve create-context parsing errors

Zihan Xi <[email protected]>
smb: client: clean up failed cached directory opens

Zihan Xi <[email protected]>
smb: client: close handle after create-context parsing failure

Zihan Xi <[email protected]>
smb: client: fix create context out-of-bounds reads

Hui Peng <[email protected]>

    Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO

Aldo Ariel Panzardo <[email protected]>
Bluetooth: mgmt: fix race in read_unconf_index_list()

Aldo Ariel Panzardo <[email protected]>
Bluetooth: L2CAP: validate frame length before control and FCS access

Aldo Ariel Panzardo <[email protected]>
Bluetooth: ISO: release unused CIS holds after channel attach

Aldo Ariel Panzardo <[email protected]>
Bluetooth: ISO: balance the parent hold in hci_bind_bis()

Aldo Ariel Panzardo <[email protected]>
Bluetooth: hci_sock: reject out-of-range OCF values

Aldo Ariel Panzardo <[email protected]>
Bluetooth: hci_sock: validate event length before filtering

Aldo Ariel Panzardo <[email protected]>
Bluetooth: hci_conn: fix CIS hold ownership on reuse

Davi Chaves Azevedo <[email protected]>
sched/cache: Refresh LLC capacity across CPU hotplug, to fix capacity underestimation bug

Tim Chen <[email protected]>
sched/cache: Decouple sched_cache_group from mm to fix UAF

Tejun Heo <[email protected]>
sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags

Tan Chi <[email protected]>
RISC-V: KVM: Fix HSM hart status error propagation

Xie Bo <[email protected]>
RISC-V: KVM: Propagate interrupted G-stage faults

Xie Bo <[email protected]>
RISC-V: KVM: Release unused page after MMU invalidation

Myeonghun Pak <[email protected]>
RISC-V: KVM: Synchronize hrtimer callback during teardown

Xie Bo <[email protected]>
RISC-V: KVM: Serialize IMSIC attributes with vCPU migration

Fuad Tabba <[email protected]>
KVM: arm64: Transfer the hyp stack pages out of the host stage-2

Lorenzo Stoakes (ARM) <[email protected]>
KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race

Lorenzo Stoakes (ARM) <[email protected]>
KVM: arm64: Fix spurious warning for benign stage 2 teardown race

Karl Mehltretter <[email protected]>
KVM: arm64: Fix AArch32 DBGBXVR<n> handling

Fuad Tabba <[email protected]>
KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode

Sean Christopherson <[email protected]>
KVM: SEV: Do cache maintenance on the source VM during intra-host migration

Sean Christopherson <[email protected]>
KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV

Zeng Chi <[email protected]>
KVM: Don't treat reserved xarray entries as having memory attributes

David Ballesteros <[email protected]>
KVM: Ensure memory attributes xarray nodes are accounted to the caller's memcg

Anthony Krowiak <[email protected]>
s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config

Niklas Schnelle <[email protected]>
s390/pci: Don't report recovery success on skipped recovery

Niklas Schnelle <[email protected]>
s390/pci: Report SCLP status on error events when no pdev is associated

Niklas Schnelle <[email protected]>
s390/pci: Fix missing device lock in zpci_report_status()

Niklas Schnelle <[email protected]>
s390/pci: Fix leak of struct pci_dev reference in zpci_report_status()

Peter Oberparleiter <[email protected]>
s390/cmf: Fix virtual vs physical address confusion

Vineeth Vijayan <[email protected]>
s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()

Ilya Titov <[email protected]>
pinctrl: sunxi: keep a shadow copy of the data register output latches

Myeonghun Pak <[email protected]>
pinctrl: single: free the IRQ on domain creation failure

Shawn Guo <[email protected]>
pinctrl: qcom: nord: Split QUP1 SE2/SE3 into lane-pair functions

Conor Dooley <[email protected]>
pinctrl: mpfs-mssio: use correct regmap function to set bank voltage

Conor Dooley <[email protected]>
pinctrl: mpfs-mssio: fix width of unused bank voltage setting

Dapeng Mi <[email protected]>
perf/x86/intel: Constrain Panther Cove UOPS_DISPATCHED events to PMCs 0-3

Dapeng Mi <[email protected]>
perf/x86/intel: Remove incorrect Panther Cove PEBS data-source constraints

Dapeng Mi <[email protected]>
perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints

Dapeng Mi <[email protected]>
perf/x86/intel: Fix Panther Cove PEBS data-source snoop states

Dapeng Mi <[email protected]>
perf/x86/intel: Fix DKT PEBS load/store direction for latency events, to fix sample classification

Dapeng Mi <[email protected]>
perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification

Dapeng Mi <[email protected]>
perf/x86/intel: Fix CMT PEBS load/store direction for latency events, to fix sample classification

Puranjay Mohan <[email protected]>
perf/core: Run sched_task() for PMUs with only CPU-wide events

Puranjay Mohan <[email protected]>

    perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()

Zhenghui Hao <[email protected]>
parisc: parse early parameters in setup_arch()

Helge Deller <[email protected]>
parisc: Increase kernel stack size to 32kb

Geert Uytterhoeven <[email protected]>
scsi: ufs: pltfrm: Add quirk for R-Car S4 lacking lanes-per-direction

Stanley Jhu <[email protected]>
scsi: ufs: core: Keep internal commands dispatchable during error handling

Yehyeong Lee <[email protected]>
scsi: libiscsi_tcp: Check the data direction of a Data-In PDU

Myeonghun Pak <[email protected]>
nfc: trf7970a: power down on startup RX gain failure

Doruk Tan Ozturk <[email protected]>
nfc: port100: reject frames whose declared length exceeds the received data

Aamir Ahmed <[email protected]>
nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()

Luxiao Xu <[email protected]>
nfc: fix use-after-free in nfc_get_local_general_bytes

Aohan Mei <[email protected]>
netfilter: nf_tables: skip expired catchall elements on insert and delete

Luxiao Xu <[email protected]>
netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read

Weiming Shi <[email protected]>
netfilter: ip6t_rpfilter: reject routes without inet6_dev

Wentao Liang <[email protected]>
net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs()

Ming Wang <[email protected]>
net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist

Zhang Yunfei <[email protected]>
net: txgbe: fix FDIR filter restore for VF rules

Abhishek Ojha <[email protected]>
net: phy: micrel: Advance register data pointer in write loop

Alexander Sverdlin <[email protected]>
net: phy: intel-xway: workaround 100BASE-TX Link-Up issue

Guangshuo Li <[email protected]>
net: ena: fix MMIO read buffer leak on probe failure

Guangshuo Li <[email protected]>
net: ena: fix PHC cleanup on probe failure

Fourie Zhang <[email protected]>
net: bridge: mdb: restart port group walk after deletion

Gajdos Tamás <[email protected]>
net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read

Gajdos Tamás <[email protected]>
net: atl1c: fix soft lockup on out-of-range tpd_cons read

Ilya Maximets <[email protected]>
net: openvswitch: conntrack: fix helper UAF due to extensions realloc

Ilya Maximets <[email protected]>
net: openvswitch: conntrack: remove 'add_helper' dead code

Ilya Maximets <[email protected]>
net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry

Théo Lebrun <[email protected]>
net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths

Yuqi Xu <[email protected]>
net: ipconfig: bound DHCP option construction

Wentao Liang <[email protected]>
net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy()

Gajdos Tamás <[email protected]>
net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read

Zijie Huang <[email protected]>
net: arp: terminate device name before lookup

Myeonghun Pak <[email protected]>
net: airoha: npu: cancel wdt_work after releasing the WDT IRQ

Weiming Shi <[email protected]>
net/sched: reject IDR error pointers when deleting actions

Andrea Parri <[email protected]>
net/mlx5e: fix swapped IPv6 IPsec policy masks

Ralf Lici <[email protected]>
net/mlx5e: advertise MACsec offload only when supported

Wentao Liang <[email protected]>
net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()

Wei Jie LAW <[email protected]>
HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()

Junjie Cao <[email protected]>
HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard

Tristan Madani <[email protected]>
HID: hid-oxp: use cancel_delayed_work_sync() in remove

Chen Changcheng <[email protected]>
HID: alps: fix use-after-free on input2 registration failure

Chen Changcheng <[email protected]>
HID: alps: unregister DualPoint Stick input device on remove

Willem de Bruijn <[email protected]>
packet: use ubuf_info completion for TX_RING packets

Angel J <[email protected]>
PCI: of_property: Omit bus properties without a subordinate bus

Liz Fong-Jones <[email protected]>
PCI: Fix BAR resize for devices on a root bus

SJ Park <[email protected]>

    mm/damon/core: reset invalid quota->charge_target_from

Liew Rui Yan <[email protected]>
mm/damon/core: allow esz to be set to zero

Liew Rui Yan <[email protected]>
mm/damon/core: fix unconditionally skip last region

Nathan Gao <[email protected]>
mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()

SJ Park <[email protected]>
mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()

Jaewook You <[email protected]>
mm/hugetlb: preserve mremap address delta when skipping page tables

Longlong Xia <[email protected]>
mm/hugetlb: do not dissolve gigantic pages without runtime support

Jinjiang Tu <[email protected]>

    mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish

Karl Mehltretter <[email protected]>
gpio: tps65219: Fix TPS65214 GPIO direction programming

Karl Mehltretter <[email protected]>
gpio: tps65219: Use the variant-specific direction callback

Karl Mehltretter <[email protected]>
gpio: tps65219: Fix GPIO input value reads

Peiyang He <[email protected]>
drm/virtio: fix NULL pointer dereference on fence allocation failure

Peiyang He <[email protected]>
drm/virtio: fix memory leak of fence event on execbuffer failure

Matthew Brost <[email protected]>
drm/xe: Keep walking on SVM eviction failure

Szymon Acedański <[email protected]>
drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV

Tangudu Tilak Tirumalesh <[email protected]>
drm/xe: harden adjust_idledly() against divide-by-zero and overflow

Matthew Auld <[email protected]>
drm/xe/vm: nuke PTs only after unlinking contested VMAs

Peiyang He <[email protected]>
drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()

Jonghyuk Kim(MalHyuk) <[email protected]>
drm/nouveau: RCU-free the scheduler-containing nouveau_sched

Wentao Liang <[email protected]>
drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()

Wentao Liang <[email protected]>
drm/nouveau: Fix gem reference leak in validate_init()

Peiyang He <[email protected]>
drm/nouveau: fix double-free in nvif_vmm_dtor

Wentao Liang <[email protected]>
drm/nouveau: Fix bridge reference leak in nv1a_ram_new()

Guangshuo Li <[email protected]>
drm/nouveau: fix autosuspend cleanup during teardown

Peiyang He <[email protected]>
drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM

Junrui Luo <[email protected]>
drm/nouveau/dmem: pin VRAM for the whole registered range

Prike Liang <[email protected]>
drm/amdgpu: move userq fence wait out of signalling section

Wentao Liang <[email protected]>
drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init()

Wentao Liang <[email protected]>
drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()

Wentao Liang <[email protected]>
drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init()

Wentao Liang <[email protected]>
drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc()

Sunil Khatri <[email protected]>
drm/amdgpu/vcn5.0.1: fix video_timeout unit mismatch in jpeg reset wait

Sunil Khatri <[email protected]>
drm/amdgpu/vcn4.0.3: fix video_timeout unit mismatch in jpeg reset wait

Sunil Khatri <[email protected]>
drm/amdgpu/userq: fix double jiffies conversion in hang detect timeout

Ivan Lipski <[email protected]>
drm/amd/display: Bump frame warning limit for clang builds of dml

Wentao Liang <[email protected]>
drm/amd/display: Fix dc stream excess put in dm_update_crtc_state()

Asad Kamal <[email protected]>
drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping

Imre Deak <[email protected]>
drm/i915/dp_mst: Fix configuring TUs for a disconnected stream

Imre Deak <[email protected]>
drm/i915/dp_mst: Fix configuring FEC for a disconnected stream

Ankit Nautiyal <[email protected]>
drm/i915/quirks: Limit eDP rate to HBR2 on HP Pavilion Plus 14-ew1

Christian König <[email protected]>
drm/i915: fix incorrect RCU teardown order

Brajesh Gupta <[email protected]>
drm/imagination: Fix page count for page table for map() interface

Brajesh Gupta <[email protected]>
drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()

shechenglong <[email protected]>
drm/client: fix restore of partially initialized client

Dongliang Qin <[email protected]>
rds: ib: Clear the sg list when mapping an MR fails

Hui Peng <[email protected]>
mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()

Zixuan Chai <[email protected]>
llc: reserve device headroom for allocated frames

Ridham Khurana <[email protected]>
gpio: zynq: fix runtime PM leak on request error path

Bartosz Golaszewski <[email protected]>
gpio: cdev: fix kernel stack leak to user-space in error path

Wentao Liang <[email protected]>
gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()

Andrea Parri <[email protected]>
kprobes: Fix permanent hang when flushing the kprobe optimizer

Hui Peng <[email protected]>
ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST

Norbert Szetei <[email protected]>
ipv6: do not let ipv6_find_hdr() return an offset past the packet end

Fan Wu <[email protected]>
ipe: protect the dm-verity root hash with RCU

Fan Wu <[email protected]>
ipe: fix use-after-free when auditing a newly loaded policy

Wentao Liang <[email protected]>
fsl/fman: Fix clk reference leak in read_dts_node()

Josef Bacik <[email protected]>
writeback: report a Tasks-RCU quiescent state per cgwb drain pass

Pavankumar Kondeti <[email protected]>
workqueue: Fix NULL current_pwq deref in flush dependency check

Patrick Lu (Anthropic) <[email protected]>
writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes

Hao Ge <[email protected]>
netfs: Fix missing alloc tagging of direct mempool allocations

Christian Brauner <[email protected]>
fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga

David Carlier <[email protected]>
fprobe: Terminate the fgraph_data list when the reservation is not filled

Hui Peng <[email protected]>
fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT

Guopeng Zhang <[email protected]>
cgroup/pids: Restore pids.events notifications in local mode

Hui Peng <[email protected]>
cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict

Holger Dengler <[email protected]>
crypto: s390/hmac - Generate intermediate CV for API partial block handling

Andrea Parri <[email protected]>
bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir

Myeonghun Pak <[email protected]>
bna: prevent IOC timer rearm during teardown

Matthias Goergens <[email protected]>
ata: libata-scsi: bound the ATA passthru sense descriptor writes

David Carlier <[email protected]>
arm64: errata: match the target implementation CPU's own MIDR

Fuad Tabba <[email protected]>
arm64/boot: Disable trapping of PMZR_EL0 writes to EL2

Dairui Zhang <[email protected]>
af_packet: fix integer overflow in prb_calc_retire_blk_tmo()

Aohan Mei <[email protected]>
sctp: discard the rest of the packet on a stale-cookie error

Willem de Bruijn <[email protected]>
tcp: prevent collapsing skbs across boundary in rtx queue

Eric Dumazet <[email protected]>
tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow

Willem de Bruijn <[email protected]>
virtio_net: copy zerocopy frags in start_xmit without NAPI

Aldo Ariel Panzardo <[email protected]>
vsock: ignore empty child namespace mode writes

Melody Wang <[email protected]>
x86/sev: Make vTPM SVSM calls preemption-safe

Mario Limonciello <[email protected]>
x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11

Masami Hiramatsu (Google) <[email protected]>
x86/mce: Fix hardware debug register corruption on task migration

Xiang Mei <[email protected]>
vlan: require the MAC header to be present in __vlan_insert_inner_tag()

Matthew Brost <[email protected]>
drm/pagemap: dma-unmap pages before handling migration errors

Mark Amirkan <[email protected]>
mptcp: return sk_wait_data() errors from recvmsg()

Zhan Xusheng <[email protected]>
sched/core: Account PSI IRQ time to the execution context, not the scheduling context

Puranjay Mohan <[email protected]>
perf/core: Fill branch entries with a single assignment

Namhyung Kim <[email protected]>
perf/core: Fix a refcount leak in attach_perf_ctx_data()

Dapeng Mi <[email protected]>
perf/x86/intel: Delete dead NVL PEBS data-source initcall

Sean Christopherson <[email protected]>
perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs()

Sean Christopherson <[email protected]>
perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused

Sean Christopherson <[email protected]>
perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED

Sean Christopherson <[email protected]>
perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits

Hui Peng <[email protected]>

    autofs: fix sbi->pipe file reference leak in autofs_kill_sb()

Amir Goldstein <[email protected]>
ovl: fix UAF in ovl_do_mkdir() debug print

Eric Dumazet <[email protected]>
vlan: ensure sufficient headroom in vlan_dev_hard_header()

Eric Dumazet <[email protected]>
net/sched: sch_teql: fix shadowed err in __teql_resolve()

Eric Dumazet <[email protected]>
bridge: check llc_mac_hdr_init() return value in br_send_bpdu()

Eric Dumazet <[email protected]>
llc: fix skb UAF and leaks on llc_mac_hdr_init() failure

Eric Dumazet <[email protected]>
gve: DQO: reject TSO packets with an out of range MSS

Eddie Phillips <[email protected]>
gve: fix TX drop when GSO MSS is too small for hw

Eric Dumazet <[email protected]>
gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO

Eric Dumazet <[email protected]>
net: flush skb_defer_nodes in dev_cpu_dead()

Coia Prant <[email protected]>
net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails

Ginger Li <[email protected]>

    tipc: Fix a data race on mon->peer_cnt in mon_timeout()

Sidraya Jayagond <[email protected]>
net/smc: fix UAF on lgr list traversal in smcr_port_err()

Allison Henderson <[email protected]>
net/rds: size a connection's path set by the transport it ends up with

Sang-Hoon Choi <[email protected]>
nfp: hold IPsec RX state under the XArray lock

Jiawen Wu <[email protected]>
net: libwx: fix races in Tx timestamp handling

Jiawen Wu <[email protected]>
net: wangxun: implement soft quiesce for PCIe error recovery

Aleksei Sviridkin <[email protected]>
net: phylink: record the PHY only once bringup cannot fail

Yilin Zhang <[email protected]>
tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()

Aleksei Sviridkin <[email protected]>
net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq

Aleksei Sviridkin <[email protected]>
net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621

Donggeun Yoo <[email protected]>
bpf: Zero-fill other CPUs when BPF_F_CPU creates a per-cpu hash element

Christian Lamparter <[email protected]>
net: emac: move setting of netops to fix crash

Fang Xieyan <[email protected]>
net/sched: act_ife: validate metadata length before decoding

Haseeb Malik <[email protected]>
macsec: initialize SecY before registering the netdevice

David Dai <[email protected]>
bonding: crypto offload enabled, non-offload slave failover, rekey failed

Pengpeng Hou <[email protected]>
drm/imagination: clamp freelist reconstruction requests

Norbert Szetei <[email protected]>
net: xps: reject an out of range traffic class

Sanghyun Park <[email protected]>
vxlan: use one headroom snapshot for neighbour replies

Xuanqiang Luo <[email protected]>
ip_gre: Reject enabling collect metadata through changelink

Florian Fainelli <[email protected]>
net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT

Florian Fainelli <[email protected]>
net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr

Florian Fainelli <[email protected]>
net: bcmgenet: do not skip WoL power up on GENET V1

Florian Fainelli <[email protected]>
net: bcmgenet: initialize u64 stats seq counter for all queues

Florian Fainelli <[email protected]>
net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems

Yuya Kusakabe <[email protected]>
net: ipv6: keep room for the mac header in dst_dev_overhead()

Lorenzo Bianconi <[email protected]>

    net: stmmac: clear stale buf->page after recycling on skb build failure

Ivan Delalande <[email protected]>
tg3: use random MAC address when tg3_get_device_address fails

Johan Almbladh <[email protected]>
bpf: Fix BSWAP 32 and 16 on MIPS64

Johan Almbladh <[email protected]>
bpf: Fix immediate JMP JEQ/JNE on MIPS32

Jonas Jelonek <[email protected]>
net: mdio: realtek-rtl9300: fix RTL931x C22 extended page selection

Nicolo Giuliani <[email protected]>

    net: dsa: mv88e6xxx: 88E6191X and 88E6193X have no PTP

Ido Schimmel <[email protected]>

    vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets

Shihuang Liu <[email protected]>
net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()

Jakub Kicinski <[email protected]>
veth: manage XDP program pointers during channel resize

Nicolai Buchwitz <[email protected]>
net: bcmgenet: stop Tx NAPI before disabling the queues

Victor Nogueira <[email protected]>
net/sched: act_gate: budget the per-entry list in get_fill_size

Deepanshu Kartikey <[email protected]>

    nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()

Ömer Mete Kaya <[email protected]>
nfc: llcp: fix slab-out-of-bounds reads when logging service names

Ömer Mete Kaya <[email protected]>
nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()

Ömer Mete Kaya <[email protected]>
nfc: llcp: fix -ENOMEM on connect with zero-length service name

Pengpeng Hou <[email protected]>
nfc: st21nfca: validate ISO15693 inventory length

Cong Nguyen <[email protected]>
nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure

Chris Gellermann <[email protected]>
nfc: virtual_ncidev: Add missing ioctl compat handler

Chris Gellermann <[email protected]>
selftests/nci: Fix out-of-bounds store on thread join

Chaithanya Lagisetty <[email protected]>
selftests: nci: Fix uninitialized family ID on missing attribute

Lee Jones <[email protected]>
nfc: llcp: Fix race condition in accept_queue lifecycle

Lei Zhu <[email protected]>
selftests: nci: Correct pthread_create return value check

Aldo Ariel Panzardo <[email protected]>
nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()

Pengpeng Hou <[email protected]>
nfc: st21nfca: validate received frame size

Pengpeng Hou <[email protected]>
nfc: nfcmrvl: validate helper command length before pull

Weiming Shi <[email protected]>
bpf: Reject dev-bound-only programs on other devices

Bernard Ladenthin <[email protected]>
net/sched: fix potential stack infoleak in em_text_dump()

Björn Töpel <[email protected]>
eth: fbnic: Avoid rounding zero ring sizes

Maxime Chevallier <[email protected]>
net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test

Maxime Chevallier <[email protected]>
net: stmmac: size the RX buffers from the frame length, not the MTU

Maxime Chevallier <[email protected]>
net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K

Maxime Chevallier <[email protected]>
net: stmmac: selftests: Capture all packets for vlan checks

Maxime Chevallier <[email protected]>

    net: stmmac: selftests: Check the dev->features for S-TAG offload testing

Maxime Chevallier <[email protected]>
net: stmmac: selftests: Validate EEE based on the actual LPI timer value

Maxime Chevallier <[email protected]>
net: stmmac: selftests: Support running selftests on DSA conduits

Xin Long <[email protected]>
sctp: hold asoc or transport before mod_timer() in timer handlers

Bernardo Soares <[email protected]>
net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports

Bernardo Soares <[email protected]>
net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports

Takashi Sakamoto <[email protected]>
firewire: cdev: fix back-transition for iso_resource_auto client resource

Zhao Gongyi <[email protected]>
bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc

Emil Tsalapatis <[email protected]>
bpf: Reject pkt arguments in mutating subprogs

Emil Tsalapatis <[email protected]>
bpf: Fix bpf_sock context code generation

Emil Tsalapatis <[email protected]>
bpf: Fix bounds check for skb-backed dynptrs

Manaf Meethalavalappu Pallikunhi <[email protected]>
thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds

Florian Schmaus <[email protected]>
PM: hibernate: Freeze kernel threads after image preallocation

Coia Prant <[email protected]>
net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure

Jakub Kicinski <[email protected]>
genetlink: report the real command id for dump-only ops in policy dumps

bui duc phuc <[email protected]>
net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error

Muhammad Bilal <[email protected]>
net: spacemit: clear TX descriptor on fragment mapping failure

Mikhail Zaslonko <[email protected]>
s390/debug: Fix NULL pointer dereference in debug_info_copy()

Mikhail Zaslonko <[email protected]>
s390/debug: Do not register views for failed static debug areas

Nemesa Garg <[email protected]>
drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable

Myeonghun Pak <[email protected]>
tg3: clean up PHYLIB resources on probe failure

Shardul Bankar <[email protected]>
udp: remove a disconnected socket from the 4-tuple hash table

Shardul Bankar <[email protected]>
udp: relocate a connected socket in the 4-tuple hash table on re-connect

Kuniyuki Iwashima <[email protected]>
ipv6: Fix dst leak for uncached routes.

Pengpeng Hou <[email protected]>
net: usb: sr9700: include receive overhead in the length check

Ivan Vecera <[email protected]>
dpll: use exact lookup for reference sync pin id

Nicolai Buchwitz <[email protected]>
net: don't require the hwtstamp NDOs when a PHY provides timestamping

Kuniyuki Iwashima <[email protected]>
ipv6: Prevent rt6_insert_exception() for dying fib6_info.

Ratheesh Kannoth <[email protected]>
octeontx2-af: Fix memory scaling limitation in SR-IOV mode

Xu Yunxiang <[email protected]>
bpf: Reject non-negative offsets in stack_slot_obj_get_spi()

Hui Peng <[email protected]>
Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()

Ravindra <[email protected]>
Bluetooth: btintel_pcie: validate device-supplied DMA indices

Hui Peng <[email protected]>
Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough

Sk Anirban <[email protected]>
drm/xe/gt_throttle: Report power brake as a throttle reason on CRI

Ralf Lici <[email protected]>
ovpn: reject invalid peer VPN addresses

Ralf Lici <[email protected]>
ovpn: reject multipeer peers without VPN addresses

Ralf Lici <[email protected]>
ovpn: reject duplicate peer VPN addresses

Ralf Lici <[email protected]>
ovpn: always unhash old VPN addresses before rehashing

Ralf Lici <[email protected]>
ovpn: replace bind when clearing stale local source

Ralf Lici <[email protected]>
ovpn: replace bind when learning local endpoint

Ralf Lici <[email protected]>
ovpn: validate peer state before caching UDP dst

Ralf Lici <[email protected]>
ovpn: track UDP socket route key for peer dst cache

Ralf Lici <[email protected]>
ovpn: skip UDP source validation for unspecified addresses

Ralf Lici <[email protected]>
ovpn: preserve IPv6 scope id for netlink peer endpoints

Li Youhong <[email protected]>
drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach

Prathamesh Shete <[email protected]>
pinctrl: tegra238: Fix register bank for AON pin groups

Benjamin Leggett <[email protected]>
drm/virtio: sync shmem backing on guest-bound transfers

Dmitry Osipenko <[email protected]>
Revert "drm/virtio: Allow importing prime buffers when 3D is enabled"

Junrui Luo <[email protected]>
drm/virtio: release the GEM object on virtio_gpu_vram_create() errors

Junrui Luo <[email protected]>
drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()

Junrui Luo <[email protected]>
drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()

Junrui Luo <[email protected]>
drm/virtio: fix object leak when drm_gem_handle_create() fails

Jamal Hadi Salim <[email protected]>
net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget

Yuqi Xu <[email protected]>
bpf: Check params size before reading reserved fields

Aamir Ahmed <[email protected]>
net: usb: catc: bound the RX packet length in catc_rx_done()

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Bound ownership depth through local kptrs and graph roots

Quentin Armitage <[email protected]>
net: allow IFLA_INET_CONF messages when NLA_F_NESTED unset

Yiqi Sun <[email protected]>
sctp: avoid livelock while updating retransmit path

Alexander Duyck <[email protected]>
eth: fbnic: Handle FW mailbox completions flagged with an error

Alexander Duyck <[email protected]>
eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox

Alexander Duyck <[email protected]>
eth: fbnic: reset num_napi when the napi vectors are freed

Alexander Duyck <[email protected]>
eth: fbnic: use the Rx queue napi pointer to find the napi vector

Björn Töpel <[email protected]>
eth: fbnic: Handle maximum standalone channels

Alexander Duyck <[email protected]>
net: ethtool: keep rtnl_lock for the ioctl self test

Kuniyuki Iwashima <[email protected]>
ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink().

Lorenzo Bianconi <[email protected]>
net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure

Jérémy Jean <[email protected]>
net: gue: reject invalid REMCSUM offsets

Nguyen Ngoc Thang <[email protected]>
net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure

Giuseppe Ranieri <[email protected]>
drm/nouveau/disp: don't reject HDMI config on cards without SCDC

Francesco Magazzu <[email protected]>
drm/nouveau/clk: don't clobber reclock status when restoring volt/fan

Dan Carpenter <[email protected]>
drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update

hpp.iscas <[email protected]>
pinctrl: qcom: ipq5210: Publish the OF module alias

Joseph Qi <[email protected]>
ocfs2: make ocfs2_calc_xattr_init() return void

Zeng Heng <[email protected]>
arm64: io: Reject non-user protection in ioremap_prot()

Naman Gulati <[email protected]>
netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name

Julian Anastasov <[email protected]>
ipvs: revalidate ihl before icmp_send

Karl Mehltretter <[email protected]>
netfilter: nft_synproxy: use the family-aware checksum helper

Florian Westphal <[email protected]>
netfilter: nfnetlink_queue: hold nfnl mutex in event notifier

Jérémy Jean <[email protected]>
netfilter: flowtable: publish HW_DEAD after worker is done

Frank Wunderlich <[email protected]>
gpiolib: use of_node_name if line-name is missing

Linkui Xiao <[email protected]>

    ipv4: fib: fix data-race and stale genid check around nh->nh_saddr

Kumar Kartikeya Dwivedi <[email protected]>
libbpf: Reject truncated ldimm64 CO-RE relocations

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Restrict CO-RE poisoning to relocatable instructions

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Preserve packet pointer class displacement in regsafe()

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Make post-verification instruction rewrites killable

Shay Drory <[email protected]>
net/mlx5: LAG, reload IB reps of LAG master before the rest

Shay Drory <[email protected]>
net/mlx5: SD, unload reps on shared FDB create error path

Shay Drory <[email protected]>
net/mlx5: devcom, Base component size on linked devices

Heyang Tan <[email protected]>
octeontx2-af: use seq_file for rsrc_alloc debugfs

Kyle Hendry <[email protected]>
net: pcs: rzn1-miic: Fix config array initialization

Jamal Hadi Salim <[email protected]>
net/sched: cls_u32: fix manual hash table handle IDR aliasing

Björn Töpel <[email protected]>
eth: fbnic: Fix payload page pool error cleanup

Weiming Shi <[email protected]>
bpf: Skip unsettled links in link iterator

Zhiling Zou <[email protected]>
xsk: Use a 32-bit compare in xsk_map_gen_lookup

Julian Sun <[email protected]>
fs: avoid repeated scans in evict_inodes()

David Howells <[email protected]>
netfs, afs: Fix symlink reading

David Howells <[email protected]>
netfs: Fix netfs_read_gaps() to use separate sink folios

Vineeth Vijayan <[email protected]>
s390/cio: Guard PMCW field accesses with dnv check

Vineeth Vijayan <[email protected]>
s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points

Vineeth Vijayan <[email protected]>
s390/cio: Fix cio_update_schib() to not cache invalid schib

Karl Mehltretter <[email protected]>
s390/pci/docs: Fix sriov_numvfs attribute name

Bart Van Assche <[email protected]>
scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume()

Eva Kurchatova <[email protected]>
selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode

Lee Jones <[email protected]>
Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel

Zijun Hu <[email protected]>
Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()

Christiano Amora <[email protected]>
Bluetooth: SMP: reject Security Request over BR/EDR

Andre Przywara <[email protected]>
pinctrl: sunxi: A523: fix voltage withstand encoding

ZHOU Jiaxiang <[email protected]>
scsi: sd_zbc: Reject disks with too many zones

ZHOU Jiaxiang <[email protected]>
scsi: block: Fix zones_cond out-of-bounds write on zone report

Ran Hongyun <[email protected]>
squashfs: Add dictionary size range check to prevent shift-out-of-bounds

Mark Brown <[email protected]>
KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP

Sebastian Ott <[email protected]>
KVM: selftests: fix steal_time for arm64 with host page size > 4K

Fuad Tabba <[email protected]>
KVM: arm64: Match hyp text by physical address in fix_host_ownership()

Karl Mehltretter <[email protected]>
KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0

Fuad Tabba <[email protected]>
KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2

Fuad Tabba <[email protected]>
KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure

Fuad Tabba <[email protected]>
KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()

Fuad Tabba <[email protected]>
KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save

Fuad Tabba <[email protected]>
KVM: arm64: vgic-its: Free the caches when GITS_BASER changes

SeungJu Cheon <[email protected]>
RISC-V: KVM: Fix perf-backed counter accounting across stop and read

SeungJu Cheon <[email protected]>
RISC-V: KVM: Report snapshot write failure to the guest

SeungJu Cheon <[email protected]>
RISC-V: KVM: Preserve firmware counter value across stop/start

Zongmin Zhou <[email protected]>
KVM: riscv: Fix NACL hfence entry update order

Yicong Yang <[email protected]>
RISC-V: KVM: Fix the conversion between vsip and hvip

Benjamin Tissoires <[email protected]>
HID: bpf: fix __hid_bpf_hw_check_params report length

Slawomir Stepien <[email protected]>
HID: amd_sfh: Validate PCI BAR size before mapping

Sarah Emery <[email protected]>
pinctrl: generic: serialise pinctrl_generic_dt_node_to_map()

Sean Anderson <[email protected]>
pinctrl: meson: Fix typo in s4 group name

Donggeun Yoo <[email protected]>
bpf, arm64: set up the frame pointer for the exception callback

Masoud Aghasi <[email protected]>
bpf: Fix u32 overflow issue in map batch operations

Geliang Tang <[email protected]>
bpf, sockmap: Fix self-redirect copied_seq double-counting

Pu Lehui <[email protected]>
bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk

Jiayuan Chen <[email protected]>
bpf: Fix out-of-bounds read of rtt_min in sock_ops

Jose Fernandez (Anthropic) <[email protected]>
bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()

Siddharth Chintamaneni <[email protected]>
bpf: Allow terminal gotox instructions

Jim Mattson <[email protected]>
KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr()

Oscar Priego Verdugo <[email protected]>
HID: elecom: fix bus type for M-XGL20DLBK

René Onier <[email protected]>
HID: winwing: fix use-after-free in force feedback teardown

Lovekesh Solanki <[email protected]>
HID: multitouch: Add report ID mismatch quirk for ASUS ROG Z13 Folio

Jiayuan Chen <[email protected]>
tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context

Jiayuan Chen <[email protected]>
bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()

Jiayuan Chen <[email protected]>
bpf: Fix divide-by-zero in btf_struct_walk()

Sven Schnelle <[email protected]>
selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc

Weiming Shi <[email protected]>
bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL

Daniel Borkmann <[email protected]>
bpf: Fix bpf_skb_change_tail wrt csum partial skbs

Steffen Eiden <[email protected]>
s390/uv: Prevent potential out-of-bounds read

Steffen Eiden <[email protected]>
s390/uv: Fix loop condition in uv_find_secrets

Claudio Imbrenda <[email protected]>
KVM: s390: Fix race in _destroy_pages_crste()

Claudio Imbrenda <[email protected]>
KVM: s390: Fix potential races in dat skey functions

Claudio Imbrenda <[email protected]>
KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()

Claudio Imbrenda <[email protected]>

    KVM: s390: Add missing srcu in kvm_s390_set_irq_state()

Claudio Imbrenda <[email protected]>
KVM: s390: Fix IRQ injection with SIGP Stop and Store Status

Claudio Imbrenda <[email protected]>

    KVM: s390: Fix _gaccess_shadow_fault()

Claudio Imbrenda <[email protected]>
KVM: s390: Fix dirty marking in adapter_indicators_set*()

Mostafa Saleh <[email protected]>
remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage

Dominik Kaszewski <[email protected]>
drm/amd/display: Remove sink usage from DPMS

Sean Rhodes <[email protected]>
ALSA: hda/realtek: Add StarFighter HDA SSID

Sean Rhodes <[email protected]>
ALSA: hda/realtek: Limit Star Labs internal mic boost

Leo Li <[email protected]>
drm/amd/display: Atomize IRQ register read/modify/write ops

-------------

Diffstat:

 Documentation/arch/arm64/booting.rst               |   1 +
 Documentation/arch/s390/pci.rst                    |   2 +-
 .../bindings/pinctrl/qcom,nord-tlmm.yaml           |   7 +-
 Makefile                                           |   4 +-
 arch/arm64/include/asm/el2_setup.h                 |   9 +-
 arch/arm64/include/asm/io.h                        |   3 +-
 arch/arm64/include/asm/kvm_host.h                  |   2 +-
 arch/arm64/include/asm/kvm_nested.h                |   3 +-
 arch/arm64/include/asm/kvm_pkvm.h                  |   3 +-
 arch/arm64/kernel/cpu_errata.c                     |  15 +-
 arch/arm64/kvm/arm.c                               |   8 +-
 arch/arm64/kvm/emulate-nested.c                    |   2 +-
 arch/arm64/kvm/hyp/include/nvhe/mem_protect.h      |   1 +
 arch/arm64/kvm/hyp/nvhe/mem_protect.c              |   8 +
 arch/arm64/kvm/hyp/nvhe/pkvm.c                     |  25 +-
 arch/arm64/kvm/hyp/nvhe/setup.c                    |  12 +-
 arch/arm64/kvm/hypercalls.c                        |   3 +-
 arch/arm64/kvm/mmu.c                               |  15 +-
 arch/arm64/kvm/nested.c                            | 115 ++++----
 arch/arm64/kvm/sys_regs.c                          |   1 +
 arch/arm64/kvm/vgic/vgic-its.c                     |  43 +--
 arch/arm64/net/bpf_jit_comp.c                      |   2 +
 arch/mips/net/bpf_jit_comp32.c                     |   2 +-
 arch/mips/net/bpf_jit_comp64.c                     |   3 +-
 arch/parisc/include/asm/thread_info.h              |   2 +-
 arch/parisc/kernel/setup.c                         |  12 +
 arch/riscv/include/asm/csr.h                       |  20 +-
 arch/riscv/kvm/aia_imsic.c                         |  11 +-
 arch/riscv/kvm/mmu.c                               |  10 +-
 arch/riscv/kvm/nacl.c                              |  20 +-
 arch/riscv/kvm/vcpu.c                              |   3 +-
 arch/riscv/kvm/vcpu_exit.c                         |   2 +-
 arch/riscv/kvm/vcpu_onereg.c                       |   8 +-
 arch/riscv/kvm/vcpu_pmu.c                          |  33 +--
 arch/riscv/kvm/vcpu_sbi_hsm.c                      |   4 +-
 arch/riscv/kvm/vcpu_timer.c                        |   5 +-
 arch/s390/crypto/hmac_s390.c                       |   5 +-
 arch/s390/include/asm/debug.h                      |   8 +-
 arch/s390/kernel/debug.c                           |  15 +-
 arch/s390/kernel/uv.c                              |   8 +-
 arch/s390/kvm/dat.c                                |  41 ++-
 arch/s390/kvm/gaccess.c                            |  13 +
 arch/s390/kvm/gmap.c                               |   6 +-
 arch/s390/kvm/interrupt.c                          | 149 ++++++-----
 arch/s390/pci/pci_event.c                          |   7 +-
 arch/s390/pci/pci_report.c                         |  32 ++-
 arch/s390/pci/pci_report.h                         |   4 +-
 arch/x86/coco/sev/svsm.c                           |  10 +-
 arch/x86/events/amd/brs.c                          |   9 +-
 arch/x86/events/amd/lbr.c                          |  16 +-
 arch/x86/events/intel/core.c                       |  80 ++++--
 arch/x86/events/intel/ds.c                         |  68 ++---
 arch/x86/events/intel/lbr.c                        |  63 +++--
 arch/x86/events/perf_event.h                       |   4 -
 arch/x86/include/asm/kvm-x86-nested-ops.h          |  36 +++
 arch/x86/include/asm/kvm_host.h                    |  22 +-
 arch/x86/kernel/cpu/mce/core.c                     |  27 +-
 arch/x86/kvm/hyperv.c                              |   6 +-
 arch/x86/kvm/irq.h                                 |   6 +
 arch/x86/kvm/mmu.h                                 |   5 +-
 arch/x86/kvm/mmu/mmu.c                             | 129 ++++++---
 arch/x86/kvm/mmu/mmu_internal.h                    |  66 -----
 arch/x86/kvm/mmu/paging_tmpl.h                     |   2 +-
 arch/x86/kvm/pmu.c                                 |   8 -
 arch/x86/kvm/svm/nested.c                          |   1 +
 arch/x86/kvm/svm/sev.c                             |  18 +-
 arch/x86/kvm/svm/svm.c                             |   1 +
 arch/x86/kvm/tss.h                                 |   7 +
 arch/x86/kvm/vmx/nested.c                          |   1 +
 arch/x86/kvm/vmx/pmu_intel.c                       |   3 +
 arch/x86/kvm/vmx/vmx.c                             |   2 +
 arch/x86/kvm/x86.c                                 |  62 +++--
 arch/x86/kvm/x86.h                                 |   2 +-
 arch/x86/pci/fixup.c                               |  99 +++++++
 block/blk-zoned.c                                  |  15 +-
 drivers/accel/ivpu/ivpu_drv.c                      |  31 ++-
 drivers/accel/ivpu/ivpu_drv.h                      |   7 +-
 drivers/accel/ivpu/ivpu_hw.c                       |   4 +
 drivers/accel/ivpu/ivpu_ipc.c                      |   8 +-
 drivers/accel/ivpu/ivpu_ipc.h                      |   2 +-
 drivers/accel/ivpu/ivpu_job.c                      |  66 ++++-
 drivers/accel/ivpu/ivpu_job.h                      |   7 +-
 drivers/accel/ivpu/ivpu_mmu.c                      |   1 -
 drivers/accel/ivpu/ivpu_pm.c                       |   1 +
 drivers/ata/libata-scsi.c                          |  10 +-
 drivers/base/cacheinfo.c                           |  11 +-
 drivers/bluetooth/btintel_pcie.c                   |  16 ++
 drivers/bluetooth/btnxpuart.c                      |   8 +-
 drivers/dpll/dpll_netlink.c                        |   3 +-
 drivers/firewire/core-cdev.c                       |   6 +-
 drivers/gpio/gpio-arizona.c                        |   8 +-
 drivers/gpio/gpio-tps65219.c                       |  12 +-
 drivers/gpio/gpio-zynq.c                           |  10 +-
 drivers/gpio/gpiolib-cdev.c                        |  32 ++-
 drivers/gpio/gpiolib.c                             |   7 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c           |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c        |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_eviction_fence.c |   3 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c           |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c          |  16 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_userq.h          |   1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c             |   1 +
 drivers/gpu/drm/amd/amdgpu/vcn_v4_0_3.c            |   3 +-
 drivers/gpu/drm/amd/amdgpu/vcn_v5_0_1.c            |   3 +-
 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c           |  71 ++++-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   8 +-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h  |  12 +
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c |   3 +-
 .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c  |   3 +-
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c  |  62 +++--
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.h  |  28 ++
 drivers/gpu/drm/amd/display/dc/dml/Makefile        |   8 +-
 drivers/gpu/drm/amd/display/dc/dml2_0/Makefile     |   2 +-
 drivers/gpu/drm/amd/display/dc/link/link_dpms.c    | 180 ++++++-------
 drivers/gpu/drm/bridge/samsung-dsim.c              |   2 +-
 drivers/gpu/drm/clients/drm_fbdev_client.c         |   8 +
 drivers/gpu/drm/drm_pagemap.c                      |  12 +-
 drivers/gpu/drm/i915/display/intel_cursor.c        |   7 +-
 drivers/gpu/drm/i915/display/intel_display_types.h |   2 +
 drivers/gpu/drm/i915/display/intel_dp_mst.c        |  24 +-
 drivers/gpu/drm/i915/display/intel_dp_mst.h        |   2 +
 drivers/gpu/drm/i915/display/intel_link_bw.c       |   3 +-
 drivers/gpu/drm/i915/display/intel_psr.c           |  15 ++
 drivers/gpu/drm/i915/display/intel_quirks.c        |   3 +
 drivers/gpu/drm/i915/display/skl_universal_plane.c |   9 +-
 drivers/gpu/drm/i915/gem/i915_gem_object.c         |   2 +-
 drivers/gpu/drm/imagination/pvr_free_list.c        |  15 +-
 drivers/gpu/drm/imagination/pvr_mmu.c              |  19 +-
 drivers/gpu/drm/imagination/pvr_mmu.h              |   2 +-
 drivers/gpu/drm/imagination/pvr_vm.c               |   4 +-
 drivers/gpu/drm/nouveau/nouveau_bo.c               |   3 +-
 drivers/gpu/drm/nouveau/nouveau_connector.c        |   5 +-
 drivers/gpu/drm/nouveau/nouveau_dmem.c             |   4 +-
 drivers/gpu/drm/nouveau/nouveau_drm.c              |   5 +-
 drivers/gpu/drm/nouveau/nouveau_gem.c              |   2 +
 drivers/gpu/drm/nouveau/nouveau_sched.c            |   2 +-
 drivers/gpu/drm/nouveau/nouveau_sched.h            |   1 +
 drivers/gpu/drm/nouveau/nouveau_uvmm.c             |  13 +-
 drivers/gpu/drm/nouveau/nvif/vmm.c                 |   1 +
 drivers/gpu/drm/nouveau/nvkm/engine/disp/uoutp.c   |   3 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c     |  23 +-
 drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c   |   2 +
 drivers/gpu/drm/virtio/virtgpu_drv.h               |   5 +
 drivers/gpu/drm/virtio/virtgpu_gem.c               |   2 +-
 drivers/gpu/drm/virtio/virtgpu_ioctl.c             |  49 +++-
 drivers/gpu/drm/virtio/virtgpu_prime.c             |   2 +-
 drivers/gpu/drm/virtio/virtgpu_submit.c            |  11 +-
 drivers/gpu/drm/virtio/virtgpu_vq.c                |  46 ++++
 drivers/gpu/drm/virtio/virtgpu_vram.c              |  17 +-
 drivers/gpu/drm/xe/regs/xe_gt_regs.h               |   1 +
 drivers/gpu/drm/xe/xe_bo.c                         |   7 +
 drivers/gpu/drm/xe/xe_bo.h                         |  19 ++
 drivers/gpu/drm/xe/xe_gt_throttle.c                |   5 +-
 drivers/gpu/drm/xe/xe_guc_ads.c                    |   2 +-
 drivers/gpu/drm/xe/xe_hw_engine.c                  |  96 ++++++-
 drivers/gpu/drm/xe/xe_vm.c                         |  21 +-
 drivers/gpu/drm/xe/xe_wa_oob.rules                 |   2 +
 drivers/hid/amd-sfh-hid/amd_sfh_common.h           |   4 +
 drivers/hid/amd-sfh-hid/amd_sfh_pcie.c             |  10 +
 drivers/hid/bpf/hid_bpf_dispatch.c                 |  12 +-
 drivers/hid/hid-alps.c                             |  25 +-
 drivers/hid/hid-ids.h                              |   3 +
 drivers/hid/hid-multitouch.c                       |  29 +-
 drivers/hid/hid-oxp.c                              |   6 +-
 drivers/hid/hid-quirks.c                           |   3 +-
 drivers/hid/hid-winwing.c                          |  10 +-
 drivers/hid/wacom_sys.c                            |   5 +-
 drivers/i2c/busses/i2c-qcom-geni.c                 | 293 +++++++++++----------
 drivers/net/bonding/bond_main.c                    |   2 +-
 drivers/net/dsa/mt7530-mdio.c                      |  18 +-
 drivers/net/dsa/mt7530.c                           |   3 -
 drivers/net/dsa/mv88e6xxx/chip.c                   |  68 ++++-
 drivers/net/ethernet/airoha/airoha_npu.c           |  18 +-
 drivers/net/ethernet/amazon/ena/ena_netdev.c       |   2 +
 drivers/net/ethernet/atheros/atl1c/atl1c_main.c    |   3 +
 drivers/net/ethernet/atheros/atl1e/atl1e_main.c    |   3 +
 drivers/net/ethernet/atheros/atlx/atl1.c           |   3 +
 drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c  |   3 +-
 drivers/net/ethernet/broadcom/genet/bcmgenet.c     |  34 ++-
 drivers/net/ethernet/broadcom/tg3.c                |  15 +-
 drivers/net/ethernet/brocade/bna/bnad.c            |  24 +-
 drivers/net/ethernet/cadence/macb_main.c           |  14 +-
 drivers/net/ethernet/freescale/fman/fman.c         |   1 +
 drivers/net/ethernet/google/gve/gve_desc_dqo.h     |   5 +
 drivers/net/ethernet/google/gve/gve_tx_dqo.c       |  40 ++-
 drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c  |   3 +
 drivers/net/ethernet/ibm/emac/core.c               |  16 +-
 drivers/net/ethernet/marvell/octeontx2/af/common.h |  45 +++-
 .../ethernet/marvell/octeontx2/af/rvu_debugfs.c    | 104 +++-----
 drivers/net/ethernet/mediatek/mtk_eth_soc.c        |   6 +-
 .../ethernet/mellanox/mlx5/core/en/rep/bridge.c    |  45 +++-
 drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c |   3 +
 .../mellanox/mlx5/core/en_accel/ipsec_fs.c         |   4 +-
 .../ethernet/mellanox/mlx5/core/en_accel/macsec.c  |   2 +
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |   1 -
 .../net/ethernet/mellanox/mlx5/core/esw/bridge.c   |  15 +-
 .../net/ethernet/mellanox/mlx5/core/esw/bridge.h   |   2 +
 drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c  |  44 +++-
 .../ethernet/mellanox/mlx5/core/lag/shared_fdb.c   |   1 +
 .../net/ethernet/mellanox/mlx5/core/lib/devcom.c   |   5 +-
 drivers/net/ethernet/meta/fbnic/fbnic_csr.h        |   5 +
 drivers/net/ethernet/meta/fbnic/fbnic_debugfs.c    |   4 +-
 drivers/net/ethernet/meta/fbnic/fbnic_ethtool.c    |  16 +-
 drivers/net/ethernet/meta/fbnic/fbnic_fw.c         |  47 +++-
 drivers/net/ethernet/meta/fbnic/fbnic_fw.h         |   1 +
 drivers/net/ethernet/meta/fbnic/fbnic_pci.c        |  18 +-
 drivers/net/ethernet/meta/fbnic/fbnic_txrx.c       |  30 ++-
 drivers/net/ethernet/netronome/nfp/crypto/ipsec.c  |   3 +-
 drivers/net/ethernet/spacemit/k1_emac.c            |   3 +
 drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c     |   5 +-
 drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c |   4 +-
 drivers/net/ethernet/stmicro/stmmac/hwif.h         |   2 +-
 drivers/net/ethernet/stmicro/stmmac/ring_mode.c    |   4 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  21 +-
 .../net/ethernet/stmicro/stmmac/stmmac_selftests.c | 153 ++++++++---
 drivers/net/ethernet/ti/netcp_core.c               |   2 +-
 drivers/net/ethernet/wangxun/libwx/wx_hw.c         |   1 +
 drivers/net/ethernet/wangxun/libwx/wx_lib.c        |  65 ++++-
 drivers/net/ethernet/wangxun/libwx/wx_lib.h        |   1 +
 drivers/net/ethernet/wangxun/libwx/wx_ptp.c        | 161 ++++++++---
 drivers/net/ethernet/wangxun/libwx/wx_ptp.h        |   1 +
 drivers/net/ethernet/wangxun/libwx/wx_type.h       |   2 +
 drivers/net/ethernet/wangxun/txgbe/txgbe_fdir.c    |  13 +-
 drivers/net/ethernet/wangxun/txgbe/txgbe_main.c    |  16 ++
 drivers/net/macsec.c                               |  84 +++---
 drivers/net/mdio/mdio-realtek-rtl9300.c            |   6 +
 drivers/net/ovpn/netlink.c                         | 108 +++++++-
 drivers/net/ovpn/peer.c                            | 121 +++++++--
 drivers/net/ovpn/peer.h                            |  25 +-
 drivers/net/ovpn/udp.c                             | 193 +++++++++++---
 drivers/net/pcs/pcs-rzn1-miic.c                    |   3 +-
 drivers/net/pcs/pcs-xpcs.c                         |   4 +-
 drivers/net/phy/intel-xway.c                       |  29 +-
 drivers/net/phy/micrel.c                           |   1 +
 drivers/net/phy/phylink.c                          |  20 +-
 drivers/net/usb/catc.c                             |  15 +-
 drivers/net/usb/cdc_mbim.c                         |   5 +
 drivers/net/usb/lan78xx.c                          |   2 +
 drivers/net/usb/sr9700.c                           |   3 +-
 drivers/net/veth.c                                 |   2 +
 drivers/net/virtio_net.c                           |   9 +
 drivers/net/vrf.c                                  |   2 -
 drivers/net/vxlan/vxlan_core.c                     |   6 +-
 drivers/nfc/microread/microread.c                  |   6 +-
 drivers/nfc/nfcmrvl/fw_dnld.c                      |  11 +-
 drivers/nfc/pn533/pn533.c                          |  14 +-
 drivers/nfc/pn533/pn533.h                          |   4 +-
 drivers/nfc/pn533/usb.c                            |   4 +-
 drivers/nfc/pn544/pn544.c                          |   7 +-
 drivers/nfc/port100.c                              |   7 +
 drivers/nfc/st21nfca/core.c                        |  12 +-
 drivers/nfc/st21nfca/i2c.c                         |  29 +-
 drivers/nfc/trf7970a.c                             |   4 +-
 drivers/nfc/virtual_ncidev.c                       |   3 +-
 drivers/pci/of_property.c                          |  11 +-
 drivers/pci/setup-bus.c                            |  23 +-
 drivers/perf/arm_brbe.c                            |   2 +-
 drivers/pinctrl/meson/pinctrl-meson-s4.c           |   2 +-
 drivers/pinctrl/microchip/pinctrl-mpfs-mssio.c     |   6 +-
 drivers/pinctrl/pinctrl-generic.c                  |   4 +
 drivers/pinctrl/pinctrl-single.c                   |   3 +-
 drivers/pinctrl/qcom/pinctrl-ipq5210.c             |   1 +
 drivers/pinctrl/qcom/pinctrl-nord.c                |  34 ++-
 drivers/pinctrl/sunxi/pinctrl-sun55i-a523-r.c      |   2 +-
 drivers/pinctrl/sunxi/pinctrl-sun55i-a523.c        |   2 +-
 drivers/pinctrl/sunxi/pinctrl-sunxi.c              |  82 ++++--
 drivers/pinctrl/sunxi/pinctrl-sunxi.h              |   9 +
 drivers/pinctrl/tegra/pinctrl-tegra238.c           | 204 +++++++-------
 drivers/remoteproc/qcom_q6v5_adsp.c                |   8 +-
 drivers/s390/cio/chp.c                             |   3 +
 drivers/s390/cio/cio.c                             |  11 +-
 drivers/s390/cio/cio.h                             |   5 +-
 drivers/s390/cio/cmf.c                             |   2 +-
 drivers/s390/cio/device.c                          |   9 +-
 drivers/s390/cio/device_fsm.c                      |   3 +
 drivers/s390/cio/device_ops.c                      |  23 ++
 drivers/s390/cio/vfio_ccw_fsm.c                    |   2 +-
 drivers/s390/crypto/vfio_ap_ops.c                  |  18 +-
 drivers/scsi/libiscsi_tcp.c                        |   3 +
 drivers/scsi/megaraid/megaraid_sas_base.c          |   4 +-
 drivers/scsi/sd_zbc.c                              |   8 +-
 drivers/thermal/gov_step_wise.c                    |  10 +-
 drivers/ufs/core/ufshcd.c                          |   6 +
 drivers/ufs/host/ufshcd-pltfrm.c                   |   6 +-
 fs/autofs/inode.c                                  |   4 +
 fs/bpf_fs_kfuncs.c                                 |   4 -
 fs/fs-writeback.c                                  |  25 +-
 fs/inode.c                                         |  11 +-
 fs/kernfs/mount.c                                  |   4 +-
 fs/netfs/buffered_read.c                           |  34 +--
 fs/netfs/objects.c                                 |   4 +-
 fs/netfs/read_collect.c                            |   5 +
 fs/netfs/rolling_buffer.c                          |   2 +-
 fs/ntfs3/inode.c                                   |   7 +-
 fs/ocfs2/namei.c                                   |   9 +-
 fs/ocfs2/xattr.c                                   |  13 +-
 fs/ocfs2/xattr.h                                   |   8 +-
 fs/overlayfs/overlayfs.h                           |   4 +-
 fs/smb/client/cached_dir.c                         |  32 ++-
 fs/smb/client/dir.c                                |  52 +++-
 fs/smb/client/smb2inode.c                          |   6 +-
 fs/smb/client/smb2misc.c                           |   9 +-
 fs/smb/client/smb2ops.c                            |  28 +-
 fs/smb/client/smb2pdu.c                            |  54 +++-
 fs/smb/client/transport.c                          |  71 ++++-
 fs/squashfs/xz_wrapper.c                           |   6 +-
 fs/super.c                                         | 114 ++++----
 fs/xfs/libxfs/xfs_metafile.c                       |   8 +-
 fs/xfs/libxfs/xfs_rtrefcount_btree.c               |   4 +-
 fs/xfs/scrub/dir.c                                 |   2 +-
 fs/xfs/scrub/health.c                              |   6 +-
 fs/xfs/scrub/inode.c                               |   2 +-
 fs/xfs/scrub/inode_repair.c                        |   2 +-
 fs/xfs/scrub/newbt.c                               |   8 +-
 fs/xfs/scrub/orphanage.c                           |   6 +-
 fs/xfs/scrub/repair.c                              |  21 +-
 fs/xfs/scrub/scrub.h                               |   2 +-
 fs/xfs/scrub/trace.h                               |  12 +-
 fs/xfs/xfs_dquot.c                                 |   8 +-
 fs/xfs/xfs_exchrange.c                             |  13 +-
 fs/xfs/xfs_healthmon.c                             |   4 +-
 fs/xfs/xfs_icache.c                                |   2 +-
 fs/xfs/xfs_log_recover.c                           |  13 +-
 fs/xfs/xfs_qm.c                                    |  10 +-
 fs/xfs/xfs_refcount_item.c                         |   8 +-
 fs/xfs/xfs_rmap_item.c                             |   8 +-
 include/linux/ethtool.h                            |   2 +
 include/linux/fs/super_types.h                     |   2 +-
 include/linux/if_vlan.h                            |   3 +
 include/linux/mempool.h                            |   7 +
 include/linux/mm_types.h                           |  15 +-
 include/linux/perf_event.h                         |  17 --
 include/linux/sched.h                              |   6 +-
 include/linux/sched/topology.h                     |   4 +-
 include/linux/skbuff.h                             |  24 +-
 include/net/dst.h                                  |   3 +-
 include/net/gue.h                                  |  19 +-
 include/net/ip6_route.h                            |   4 +-
 include/net/netfilter/nf_conntrack.h               |   5 +
 include/net/nfc/hci.h                              |   2 +-
 include/net/nfc/nfc.h                              |   3 +-
 include/net/tcp.h                                  |   4 +-
 kernel/bpf/btf.c                                   | 140 ++++++----
 kernel/bpf/core.c                                  |  21 +-
 kernel/bpf/crypto.c                                |   5 +-
 kernel/bpf/fixups.c                                |  24 +-
 kernel/bpf/hashtab.c                               |  43 ++-
 kernel/bpf/memalloc.c                              |  50 ++--
 kernel/bpf/offload.c                               |   2 +
 kernel/bpf/states.c                                |   3 +
 kernel/bpf/syscall.c                               |  15 +-
 kernel/bpf/verifier.c                              |  17 +-
 kernel/cgroup/cpuset.c                             |   3 +-
 kernel/cgroup/pids.c                               |   5 +
 kernel/events/core.c                               |  17 +-
 kernel/exit.c                                      |  11 +-
 kernel/kprobes.c                                   |  22 +-
 kernel/power/hibernate.c                           |  26 +-
 kernel/sched/core.c                                |   2 +-
 kernel/sched/ext/ext.c                             |   7 +-
 kernel/sched/fair.c                                | 173 ++++++++----
 kernel/sched/topology.c                            |  22 +-
 kernel/trace/fprobe.c                              |  15 ++
 kernel/workqueue.c                                 |   2 +-
 mm/backing-dev.c                                   |   5 +-
 mm/damon/core.c                                    |  39 ++-
 mm/damon/ops-common.c                              |   7 +-
 mm/damon/vaddr.c                                   |  21 +-
 mm/hugetlb.c                                       |  20 +-
 mm/rmap.c                                          |   6 +-
 mm/vma.c                                           |   8 +
 net/8021q/vlan_dev.c                               |   5 +
 net/bluetooth/bnep/core.c                          |  17 +-
 net/bluetooth/bnep/netdev.c                        |   8 +-
 net/bluetooth/hci_conn.c                           |  14 +-
 net/bluetooth/hci_sock.c                           |  20 +-
 net/bluetooth/iso.c                                |   7 +
 net/bluetooth/l2cap_core.c                         |  10 +-
 net/bluetooth/mgmt.c                               |  27 +-
 net/bluetooth/rfcomm/core.c                        |   3 +-
 net/bluetooth/rfcomm/sock.c                        |   6 +-
 net/bluetooth/smp.c                                |  17 ++
 net/bridge/br_mdb.c                                |   2 +
 net/bridge/br_stp_bpdu.c                           |   5 +-
 net/core/dev.c                                     |  49 +++-
 net/core/dev.h                                     |   2 +
 net/core/dev_ioctl.c                               |  25 +-
 net/core/filter.c                                  |  46 ++--
 net/core/skbuff.c                                  |  21 +-
 net/core/skmsg.c                                   |   4 +
 net/core/sock_map.c                                |   1 +
 net/ethtool/common.h                               |   2 +
 net/ipv4/arp.c                                     |   1 +
 net/ipv4/devinet.c                                 |   7 +-
 net/ipv4/fib_semantics.c                           |  13 +-
 net/ipv4/fou_core.c                                |   4 +
 net/ipv4/inet_connection_sock.c                    |   3 +-
 net/ipv4/ip_gre.c                                  |  12 +
 net/ipv4/ipconfig.c                                |  45 ++--
 net/ipv4/tcp_output.c                              |   3 +
 net/ipv4/udp.c                                     |  44 +++-
 net/ipv6/exthdrs_core.c                            |   3 +
 net/ipv6/ip6_fib.c                                 |   2 +-
 net/ipv6/ip6_gre.c                                 |   2 +-
 net/ipv6/netfilter/ip6t_rpfilter.c                 |   2 +-
 net/ipv6/netfilter/ip6t_rt.c                       |  11 +-
 net/ipv6/route.c                                   |  12 +-
 net/ipv6/seg6.c                                    |   4 +-
 net/llc/llc_c_ac.c                                 |   2 +-
 net/llc/llc_s_ac.c                                 |   4 +
 net/llc/llc_sap.c                                  |   8 +-
 net/mctp/route.c                                   |   2 +-
 net/mptcp/protocol.c                               |   2 +-
 net/netfilter/ipvs/ip_vs_core.c                    |   6 +
 net/netfilter/nf_conntrack_netlink.c               |   3 +-
 net/netfilter/nf_flow_table_offload.c              |   7 +-
 net/netfilter/nf_tables_api.c                      |  10 +-
 net/netfilter/nfnetlink_queue.c                    |   8 +-
 net/netfilter/nft_synproxy.c                       |   3 +-
 net/netlink/genetlink.c                            |   8 +-
 net/nfc/core.c                                     |  15 +-
 net/nfc/digital_dep.c                              |   8 +-
 net/nfc/llcp.h                                     |   1 +
 net/nfc/llcp_commands.c                            |   2 +-
 net/nfc/llcp_core.c                                | 173 ++++++++----
 net/nfc/llcp_sock.c                                |  67 +++--
 net/nfc/nci/core.c                                 |  10 +-
 net/nfc/netlink.c                                  |   7 +-
 net/nfc/nfc.h                                      |   3 +-
 net/openvswitch/conntrack.c                        |  37 ++-
 net/packet/af_packet.c                             | 104 +++++---
 net/rds/connection.c                               |   6 +
 net/rds/ib_frmr.c                                  |  11 +-
 net/sched/act_api.c                                |   2 +-
 net/sched/act_ct.c                                 |  41 ++-
 net/sched/act_gate.c                               |  30 ++-
 net/sched/act_ife.c                                |  17 +-
 net/sched/act_meta_mark.c                          |   6 +-
 net/sched/act_meta_skbprio.c                       |   6 +-
 net/sched/act_meta_skbtcindex.c                    |   6 +-
 net/sched/cls_u32.c                                |  12 +-
 net/sched/em_text.c                                |   2 +-
 net/sched/sch_hfsc.c                               |  22 ++
 net/sched/sch_teql.c                               |   7 +-
 net/sctp/associola.c                               |  15 +-
 net/sctp/input.c                                   |   7 +-
 net/sctp/sm_sideeffect.c                           |  37 +--
 net/sctp/sm_statefuns.c                            |   2 +
 net/smc/smc_core.c                                 |   2 +
 net/smc/smc_ib.c                                   |  10 +-
 net/tipc/group.c                                   |   4 +-
 net/tipc/monitor.c                                 |   3 +-
 net/vmw_vsock/af_vsock.c                           |   3 +
 net/xdp/xskmap.c                                   |   2 +-
 security/ipe/eval.c                                |  12 +-
 security/ipe/eval.h                                |   2 +-
 security/ipe/fs.c                                  |   8 +-
 security/ipe/hooks.c                               |  22 +-
 security/ipe/policy_fs.c                           |   3 +
 security/landlock/access.h                         |   8 +
 sound/hda/codecs/realtek/alc269.c                  |   9 +
 tools/arch/riscv/include/asm/csr.h                 |  20 +-
 tools/lib/bpf/libbpf.c                             |   7 +
 tools/lib/bpf/relo_core.c                          |  58 ++--
 .../testing/selftests/bpf/prog_tests/linked_list.c |   4 +-
 tools/testing/selftests/cgroup/test_cpuset_prs.sh  |   2 +
 tools/testing/selftests/cgroup/test_memcontrol.c   |   2 +-
 .../ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc |   2 +-
 tools/testing/selftests/kvm/steal_time.c           |  30 ++-
 tools/testing/selftests/nci/nci_dev.c              |  45 ++--
 virt/kvm/kvm_main.c                                |  30 ++-
 471 files changed, 5769 insertions(+), 2585 deletions(-)

Read the cover letter in its thread