7.2.10-rc1 review

Greg Kroah-Hartman linux-patches lkml stable 1 version Oct 9 In review

Get series with b4

b4 am [email protected]

Versions newest first

v1 Latest Oct 9428 patches 18 repliesIn review

Patches in v1 No applies recorded yet

#	Subject and files	Size	Replies
1/428	dm-pcache: reject a kset that overruns its segment`drivers/md/dm-pcache/cache_gc.c` `drivers/md/dm-pcache/cache_key.c` `drivers/md/dm-pcache/cache_writeback.c`	+15 -0	0 replies
2/428	dm-pcache: bound the logical key offset from persistent memory`drivers/md/dm-pcache/cache_key.c`	+9 -0	0 replies
3/428	drm/xe/i2c: Keep the i2c controller always enabled`drivers/gpu/drm/xe/xe_i2c.c` `drivers/gpu/drm/xe/xe_i2c.h`	+49 -1	0 replies
4/428	selftests/cgroup: account for zswap shrinker writeback`tools/testing/selftests/cgroup/test_zswap.c`	+26 -2	0 replies
5/428	sched/fair: Avoid creating misfits during cache-aware balancing`kernel/sched/fair.c`	+45 -5	0 replies
6/428	sched/cache: Keep nr_pref_llc_running in the runnable domain, to fix LLC mis-scheduling bug`kernel/sched/fair.c`	+58 -5	0 replies
7/428	sched/cache: Honor migrate_llc_task semantics in active load balance, to fix LLC mis-scheduling bug`kernel/sched/fair.c`	+51 -6	0 replies
8/428	sched/cache: Introduce task_struct->sched_cache_grp to fix UAF`fs/exec.c` `include/linux/sched.h` `kernel/exit.c` +2 more	+154 ~~-92~~	0 replies
9/428	sched/cache: Skip kernel threads for cache aware scheduling to rubustify the code`kernel/sched/fair.c`	+8 -2	0 replies
10/428	sched_ext: Build the cid tables privately and publish them with RCU`kernel/sched/ext/cid.c` `kernel/sched/ext/cid.h` `kernel/sched/ext/ext.c` +1 more	+83 ~~-54~~	0 replies
11/428	sched_ext: Add a size argument to scx_bpf_cid_topo() so struct scx_cid_topo can grow`kernel/sched/ext/cid.c` `kernel/sched/ext/types.h` `tools/sched_ext/include/scx/common.bpf.h`	+21 ~~-11~~	0 replies
12/428	sched_ext: Dont run ops.dequeue() with a DSQ lock held`kernel/sched/ext/ext.c`	+26 ~~-22~~	0 replies
13/428	sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task`kernel/sched/ext/ext.c`	+10 -0	0 replies
14/428	KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails`arch/x86/kvm/x86.c`	+1 -0	0 replies
15/428	ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture`sound/soc/sdw_utils/soc_sdw_utils.c`	+14 -6	0 replies
16/428	Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table`drivers/bluetooth/btusb.c`	+2 -0	0 replies
17/428	KVM: x86: Fill kvm_run exit fields in common get_nested_state_pages() error paths`arch/x86/kvm/svm/nested.c` `arch/x86/kvm/vmx/nested.c` `arch/x86/kvm/x86.c`	+9 ~~-16~~	0 replies
18/428	ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices`sound/usb/quirks.c`	+2 -2	0 replies
19/428	audit: fix exe mark UAF in kill_rules()`kernel/audit_tree.c`	+20 -4	0 replies
20/428	crypto: x86/aes-gcm - fix always true check for last AAD segment`arch/x86/crypto/aesni-intel_glue.c`	+1 -1	0 replies
21/428	fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()`kernel/trace/fprobe.c`	+16 ~~-10~~	0 replies
22/428	HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request`drivers/hid/bpf/hid_bpf_dispatch.c`	+1 -1	0 replies
23/428	HID: multitouch: stop the release timer from being rearmed on remove`drivers/hid/hid-multitouch.c`	+1 -1	0 replies
24/428	io_uring/cmd_net: end TX_TIMESTAMP multishot when the CQ is full`io_uring/cmd_net.c`	+14 -5	0 replies
25/428	io_uring/zcrx: requeue multishot receives stopped by a local resource`io_uring/zcrx.c`	+7 -2	0 replies
26/428	io_uring: fix task_work add use-after-free with SQPOLL`io_uring/io_uring.c` `io_uring/tw.c`	+5 -2	0 replies
27/428	ipvs: bound LBLCR and LBLC cache growth`net/netfilter/ipvs/ip_vs_lblc.c` `net/netfilter/ipvs/ip_vs_lblcr.c`	+6 -0	0 replies
28/428	kasan: unpoison task stack below watermark only in generic mode`mm/kasan/common.c`	+12 -1	0 replies
29/428	kprobes: Skip disarmed probes when checking optkprobe overlap`kernel/kprobes.c`	+5 -3	0 replies
30/428	octeontx2-pf: Fix RSS indirection table size`drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c`	+1 -1	0 replies
31/428	of/irq: Fix remaining refcount leaks in of_irq_init()`drivers/of/irq.c`	+2 -0	0 replies
32/428	of/overlay: put property on deadprops only after changeset add succeeds`drivers/of/overlay.c`	+4 -3	0 replies
33/428	of/overlay: only treat a positive changeset id as registered`drivers/of/overlay.c`	+2 -1	0 replies
34/428	net: gso: limit recursive IP-in-IP segmentation`include/net/gso.h` `net/core/gso.c` `net/ipv4/af_inet.c` +1 more	+16 -0	0 replies
35/428	net: extend IPv6 exthdr detection of tunneled packets`net/core/dev.c`	+31 ~~-16~~	0 replies
36/428	net: fix checksum offsets in skb_splice_from_iter()`net/core/skbuff.c`	+5 -3	0 replies
37/428	net: phy: aquantia: fix system interface type not updated in forced mode`drivers/net/phy/aquantia/aquantia_main.c`	+4 -1	0 replies
38/428	netfilter: nft_flow_offload: drop flowtable reference on init error path`net/netfilter/nft_flow_offload.c`	+6 -1	0 replies
39/428	net/packet: prevent TX_RING byte count overflow`net/packet/af_packet.c`	+3 -0	0 replies
40/428	pfcp: fix socket lifetime on netdevice registration failure`drivers/net/pfcp.c`	+3 -0	0 replies
41/428	r8169: disable EEE on RTL8168h/8111h`drivers/net/ethernet/realtek/r8169_main.c`	+6 -0	0 replies
42/428	random: vDSO: avoid call to memset() when zeroing reserved parameter`arch/arm64/kernel/vdso/Makefile` `arch/loongarch/vdso/Makefile` `arch/powerpc/kernel/vdso/Makefile` +4 more	+11 -2	0 replies
43/428	rtc: ac100: Assign .num before accessing .hws`drivers/rtc/rtc-ac100.c`	+2 -1	0 replies
44/428	rtc: spear: initialize IRQ state before requesting alarm IRQ`drivers/rtc/rtc-spear.c`	+6 -5	0 replies
45/428	sctp: check RCV_SHUTDOWN after the sendmsg connect wait`net/sctp/socket.c`	+1 -1	0 replies
46/428	sysctl: Negate before converting in the int read path`kernel/sysctl.c`	+1 -1	0 replies
47/428	time/jiffies: Saturate in mult_hz() instead of wrapping`kernel/time/jiffies.c`	+2 -0	0 replies
48/428	tpm: Disable TPM on null key name mismatch`drivers/char/tpm/tpm2-sessions.c`	+1 -0	0 replies
49/428	netfs: clear post-EOF pagecache when extending a file via write`Documentation/filesystems/netfs_library.rst` `fs/netfs/buffered_write.c` `fs/netfs/direct_write.c` +3 more	+147 -0	0 replies
50/428	netfs: zero gaps in read-gaps folio to avoid writing back stale data`fs/netfs/buffered_read.c`	+7 -0	0 replies
51/428	netfs: zero the tail of a short DIO/unbuffered read`fs/netfs/read_collect.c`	+24 -0	0 replies
52/428	module: fix lost error code from codetag_load_module()`kernel/module/main.c`	+6 -2	0 replies
53/428	virt: vmgenid: remap memory as decrypted`drivers/virt/vmgenid.c`	+2 -1	0 replies
54/428	virt: vmgenid: set driver_data before registering notification handlers`drivers/virt/vmgenid.c`	+4 -2	0 replies
55/428	mm/damon/core: dont skip damos_adjust_quota() while esz is not zero`mm/damon/core.c`	+1 -1	0 replies
56/428	mm/vma: predicate setting mmap_prepare VMA fields on new vma alloc`mm/vma.c`	+2 -2	0 replies
57/428	mm: shmem: ignore sysfs configs for shmem forced collapse`mm/shmem.c`	+5 -2	0 replies
58/428	vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF`drivers/tty/vt/vc_screen.c`	+12 ~~-11~~	0 replies
59/428	vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()`drivers/tty/vt/selection.c`	+2 -2	0 replies
60/428	vt: skip screen update for DEC alignment test on backgroup consoles`drivers/tty/vt/vt.c`	+2 -1	0 replies
61/428	wifi: wlcore: Fix runtime PM leak in wlcore_remove()`drivers/net/wireless/ti/wlcore/main.c`	+3 -1	0 replies
62/428	ALSA: caiaq: unregister the input device when probe fails`sound/usb/caiaq/device.c`	+3 -0	0 replies
63/428	ALSA: ctxfi: Fix silent playback on Titanium HD (SB1270)`sound/pci/ctxfi/cthw20k2.c`	+2 -0	0 replies
64/428	ALSA: line6: reject oversized playback packets`sound/usb/line6/playback.c`	+7 -0	0 replies
65/428	ext4: dont enable large folios on encrypted inodes`fs/ext4/inode.c`	+2 -1	0 replies
66/428	iio: dac: rohm-bd79703: Do not allow writing SCALE`drivers/iio/dac/rohm-bd79703.c`	+3 -0	0 replies
67/428	iio: light: rohm-bu27034: Fix error return`drivers/iio/light/rohm-bu27034.c`	+1 -1	0 replies
68/428	iio: accel: kionix-kx022a: Fix array boundary check`drivers/iio/accel/kionix-kx022a.c`	+1 -1	0 replies
69/428	mtd: core: avoid double-free of OTP NVMEM device`drivers/mtd/mtdcore.c`	+1 -0	0 replies
70/428	mtd: core: call _get_device() with the master MTD`drivers/mtd/mtdcore.c`	+1 -1	0 replies
71/428	nvmet: preserve device path on allocation failure`drivers/nvme/target/configfs.c`	+6 -3	0 replies
72/428	blk-cgroup: save IRQ state in blkg_tryget_closest()`block/blk-cgroup.c`	+3 -2	0 replies
73/428	random: fix vgetrandom_opaque_params kernel-doc`include/uapi/linux/random.h`	+1 -1	0 replies
74/428	of/overlay: dont leak fragment references when changeset init fails`drivers/of/overlay.c`	+4 -0	0 replies
75/428	of/overlay: dont create "//" paths for fragments targeting the root`drivers/of/overlay.c`	+3 -0	0 replies
76/428	ASoC: wm8903: Move the DRC QR threshold to the register that holds it`sound/soc/codecs/wm8903.c`	+1 -1	0 replies
77/428	wifi: wfx: validate MIB read length before copying to caller`drivers/net/wireless/silabs/wfx/hif_tx.c`	+3 -1	0 replies
78/428	ASoC: tegra: Fix ASRC Stream6 input threshold control`sound/soc/tegra/tegra186_asrc.c`	+1 -1	0 replies
79/428	wifi: mac80211: drop oversized fragments to avoid extra_len overflow`net/mac80211/drop.h` `net/mac80211/rx.c`	+7 -0	0 replies
80/428	wifi: ath11k: reset ar->num_stations on hardware start`drivers/net/wireless/ath/ath11k/mac.c`	+1 -0	0 replies
81/428	wifi: ath9k: Clean up device initialisation guards`drivers/net/wireless/ath/ath9k/htc.h` `drivers/net/wireless/ath/ath9k/htc_drv_init.c` `drivers/net/wireless/ath/ath9k/htc_drv_txrx.c` +1 more	+11 ~~-17~~	0 replies
82/428	wifi: ath9k: reject short WMI command responses`drivers/net/wireless/ath/ath9k/wmi.c` `drivers/net/wireless/ath/ath9k/wmi.h`	+15 -2	0 replies
83/428	wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE`drivers/net/wireless/ath/ath9k/hif_usb.c`	+9 ~~-10~~	0 replies
84/428	rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak`drivers/rtc/dev.c`	+1 -1	0 replies
85/428	rtc: ac100: Fix clock provider use-after-free on probe failure`drivers/rtc/rtc-ac100.c`	+7 ~~-29~~	0 replies
86/428	rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()`drivers/rtc/rtc-mpfs.c`	+5 -1	0 replies
87/428	wifi: mac80211: validate TX status rate metadata`net/mac80211/rc80211_minstrel_ht.c` `net/mac80211/status.c`	+123 -6	0 replies
88/428	wifi: cfg80211: preserve hidden-group beacon IE ownership`net/wireless/scan.c`	+12 ~~-10~~	0 replies
89/428	wifi: mac80211: prevent AP VLAN tx from other interfaces`net/mac80211/ieee80211_i.h` `net/mac80211/tx.c`	+16 ~~-10~~	0 replies
90/428	ASoC: codecs: rt286: Revert delay value for jack setup`sound/soc/codecs/rt286.c`	+1 -1	0 replies
91/428	ASoC: codecs: rt274: Fix format setting for 44100 rate`sound/soc/codecs/rt274.c`	+3 -1	0 replies
92/428	block: reject polled dio with user integrity metadata`block/fops.c`	+5 -0	0 replies
93/428	blk-mq: set RQF_USE_SCHED when the operation is known`block/blk-mq.c` `block/mq-deadline.c`	+38 ~~-23~~	0 replies
94/428	Bluetooth: hci_core: free the HCI ID if naming fails`net/bluetooth/hci_core.c`	+3 -1	0 replies
95/428	Bluetooth: btintel: validate DDC record lengths`drivers/bluetooth/btintel.c`	+10 -2	0 replies
96/428	mm/slab: handle the !allow_spin case in kfree_rcu_sheaf()`mm/slab.h` `mm/slab_common.c` `mm/slub.c`	+44 ~~-10~~	0 replies
97/428	mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()`mm/slub.c`	+4 -3	0 replies
98/428	arm64: topology: fix arch_freq_get_on_cpu() overflow above 4.19 GHz`arch/arm64/kernel/topology.c`	+2 -4	0 replies
99/428	ASoC: SDCA: Set suspended flag after resuming within system suspend`sound/soc/sdca/sdca_class_function.c`	+2 -2	0 replies
100/428	ASoC: SDCA: Add better pm_runtime error handling in func probe`sound/soc/sdca/sdca_class_function.c`	+11 -4	0 replies
101/428	drbd: remove unused drbd_nl_mcgrps[] array`drivers/block/drbd/drbd_nl_gen.c`	+0 -4	0 replies
102/428	bpf: Fix overflow of jump offset in constant blinding`kernel/bpf/core.c`	+8 -2	0 replies
103/428	ARC: arch_cmpxchg_relaxed to use size of pointed type not pointer`arch/arc/include/asm/atomic64-arcv2.h` `arch/arc/include/asm/cmpxchg.h`	+8 -2	0 replies
104/428	nvme: add nvme_get_ns_head()`drivers/nvme/host/core.c` `drivers/nvme/host/multipath.c` `drivers/nvme/host/nvme.h`	+7 -1	0 replies
105/428	nvme: fix cdev lifetime`drivers/nvme/host/core.c` `drivers/nvme/host/multipath.c`	+9 ~~-20~~	0 replies
106/428	nvme: work around -Wformat-security warning`drivers/nvme/host/core.c` `drivers/nvme/host/multipath.c` `drivers/nvme/host/nvme.h`	+17 ~~-22~~	0 replies
107/428	nvme: fix command effects log lifetime for multipath heads`drivers/nvme/host/core.c` `drivers/nvme/host/nvme.h`	+21 ~~-23~~	0 replies
108/428	bpf: Hold map BTF for the memory allocator destructor record`kernel/bpf/hashtab.c`	+16 -1	0 replies
109/428	net/mctp: publish the mctp_dev only after it is initialised`net/mctp/device.c`	+3 -3	0 replies
110/428	net/sched: cls_api: reclaim an empty proto on the error path`net/sched/cls_api.c`	+14 -1	0 replies
111/428	net: bcmgenet: allocate RX buffers as page fragments`drivers/net/ethernet/broadcom/genet/bcmgenet.c` `drivers/net/ethernet/broadcom/genet/bcmgenet.h`	+23 -8	0 replies
112/428	ipv6: fix prefix route expiry in modify_prefix_route()`net/ipv6/addrconf.c`	+1 -1	0 replies
113/428	netfilter: ipset: do not update comments from kernel-side adds`net/netfilter/ipset/ip_set_bitmap_gen.h`	+1 -1	0 replies
114/428	wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()`net/mac80211/iface.c` `net/mac80211/tx.c`	+7 -7	0 replies
115/428	ALSA: hda/realtek - Add headset mode for Dell Pro QC1255`sound/hda/codecs/realtek/alc269.c`	+2 -0	0 replies
116/428	drm/xe/pf: Refactor VF LMEM BAR resize helper function`drivers/gpu/drm/xe/xe_pci_sriov.c`	+20 -7	0 replies
117/428	drm/xe/pf: Keep VF LMEM BAR size low if no VFs enabled`drivers/gpu/drm/xe/xe_pci_sriov.c`	+3 -0	0 replies
118/428	Bluetooth: hci_sync: dont drain cmd_sync backlog on unregister`net/bluetooth/hci_sync.c`	+6 -0	0 replies
119/428	drm/mediatek: mtk_hdmi_v2: fix VID_DOWNSAMPLE_CONFIG register offset`drivers/gpu/drm/mediatek/mtk_hdmi_regs_v2.h`	+1 -1	0 replies
120/428	net: systemport: Fix buffer overflow in bcm_sysport_get_stats()`drivers/net/ethernet/broadcom/bcmsysport.c`	+2 -2	0 replies
121/428	net: systemport: Fix RUNT MIB counter register offset calculation`drivers/net/ethernet/broadcom/bcmsysport.c`	+3 -1	0 replies
122/428	net/mlx5: Fix slab-out-of-bounds when handling team device events`drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c`	+6 -4	0 replies
123/428	octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled`drivers/net/ethernet/marvell/octeontx2/nic/cn20k.c` `drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.c` `drivers/net/ethernet/marvell/octeontx2/nic/otx2_common.h`	+16 ~~-20~~	0 replies
124/428	octeontx2-af: mcs: Fix SC resource cleanup loop`drivers/net/ethernet/marvell/octeontx2/af/mcs.c`	+2 -2	0 replies
125/428	tipc: prevent GCM nonce reuse on peer key changes`net/tipc/crypto.c`	+5 ~~-15~~	0 replies
126/428	net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()`net/core/page_pool.c`	+1 -1	0 replies
127/428	net: stmmac: fix rx Scatter-Gather support`drivers/net/ethernet/stmicro/stmmac/stmmac_main.c`	+49 ~~-34~~	0 replies
128/428	seg6: ensure packet data is writable before modifying SRH and IPv6 DA`net/ipv6/seg6_local.c`	+117 ~~-23~~	0 replies
129/428	net: ethtool: let tsconfig reach a PHY-only timestamp provider`net/core/dev_ioctl.c` `net/ethtool/tsconfig.c`	+12 ~~-15~~	0 replies
130/428	net: restrict SO_RESERVE_MEM to TCP sockets and cap max value`net/core/sock.c`	+2 -2	0 replies
131/428	bpf: Wait for an RCU tasks grace period before freeing trampoline progs`include/linux/bpf.h` `kernel/bpf/syscall.c` `kernel/bpf/trampoline.c`	+20 -1	0 replies
132/428	bpf: Skip detached progs in trampoline images that are still in use`arch/arm64/net/bpf_jit_comp.c` `arch/loongarch/net/bpf_jit.c` `arch/powerpc/net/bpf_jit_comp.c` +5 more	+277 ~~-121~~	0 replies
133/428	gve: DQO: accept TSO packets with non-protocol gso_type bits`drivers/net/ethernet/google/gve/gve_tx_dqo.c`	+7 -7	0 replies
134/428	net/sched: fq_codel: match the no-drop threshold to the packet size`net/sched/sch_fq_codel.c`	+2 -2	0 replies
135/428	net/sched: sch_codel: match the no-drop threshold to the packet size`net/sched/sch_codel.c`	+1 -1	0 replies
136/428	ALSA: usb-audio: Add boot quirk for Behringer CM1A`sound/usb/quirks.c`	+23 -0	0 replies
137/428	ALSA: usb-audio: Apply boot quirk for Behringer models generically`sound/usb/quirks.c`	+4 -2	0 replies
138/428	virtio_blk: set the zone write granularity`drivers/block/virtio_blk.c`	+1 -0	0 replies
139/428	net: pcs: rzn1-miic: Clear MIIC protection state before unprotect sequence`drivers/net/pcs/pcs-rzn1-miic.c`	+3 -0	0 replies
140/428	net: bcmgenet: fix NULL dereference in set_coalesce before first open`drivers/net/ethernet/broadcom/genet/bcmgenet.c`	+4 -1	0 replies
141/428	net: cap skb->queue_mapping when the tx queue is picked`include/linux/netfilter_netdev.h` `include/linux/rtnetlink.h` `include/linux/skbuff.h` +3 more	+43 ~~-13~~	0 replies
142/428	net: ethernet: mtk_eth_soc: allocate dummy netdev sooner`drivers/net/ethernet/mediatek/mtk_eth_soc.c`	+26 ~~-12~~	0 replies
143/428	net: phy: qcom: at803x: Fix IPQ5018 short-cable DAC values`drivers/net/phy/qcom/at803x.c`	+6 -2	0 replies
144/428	net: sparx5: skip ptp deinit if init was skipped`drivers/net/ethernet/microchip/sparx5/sparx5_ptp.c`	+3 -0	0 replies
145/428	tcp: refresh TS.Recent for accepted old ACKs`net/ipv4/tcp_input.c`	+6 -0	0 replies
146/428	ipvs: fix missing counter decrement in lblc`net/netfilter/ipvs/ip_vs_lblc.c`	+1 -0	0 replies
147/428	ipvs: do not create invisible templates`net/netfilter/ipvs/ip_vs_conn.c`	+3 -0	0 replies
148/428	ipvs: filter some flags received in the backup server`net/netfilter/ipvs/ip_vs_sync.c`	+30 -3	0 replies
149/428	netfilter: bpf: reject invalid NAT manipulation types`net/netfilter/nf_nat_bpf.c` `net/netfilter/nf_nat_core.c`	+6 -2	0 replies
150/428	netfilter: flowtable: generalize pending status bit`include/net/netfilter/nf_flow_table.h` `net/netfilter/nf_flow_table_core.c` `net/netfilter/nf_flow_table_offload.c` +1 more	+13 ~~-12~~	0 replies
151/428	net: microchip: vcap: stop scanning after deleting key field`drivers/net/ethernet/microchip/vcap/vcap_api.c`	+1 -1	0 replies
152/428	of: Put coreboot node after compatibility check`drivers/of/base.c`	+9 -1	0 replies
153/428	net: sparx5: make ports inherit the switch base mac address type`drivers/net/ethernet/microchip/sparx5/sparx5_main.c` `drivers/net/ethernet/microchip/sparx5/sparx5_main.h` `drivers/net/ethernet/microchip/sparx5/sparx5_netdev.c`	+3 -0	0 replies
154/428	net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference`drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c`	+3 -0	0 replies
155/428	ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()`net/ipv6/seg6_iptunnel.c`	+1 -1	0 replies
156/428	net: mvneta: clear XDP pfmemalloc flag between frames`drivers/net/ethernet/marvell/mvneta.c` `include/net/xdp.h`	+6 -1	0 replies
157/428	i2c: at91: release DMA channels when probe defers`drivers/i2c/busses/i2c-at91-master.c`	+7 -1	0 replies
158/428	perf: Fix race between perf_event_exit_task() and perf_pending_task()`kernel/events/core.c`	+4 -2	0 replies
159/428	ALSA: core: Define auto-cleanup for snd_card_free()`include/sound/core.h`	+9 -0	0 replies
160/428	ALSA: ice1712: Fix the error handling via auto-cleanup at probe`sound/pci/ice1712/ice1712.c`	+1 -1	0 replies
161/428	spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260`drivers/spi/spi-cs42l43.c`	+97 -0	0 replies
162/428	bpf: Factor out __do_call_rcu_ttrace()`kernel/bpf/memalloc.c`	+17 ~~-10~~	0 replies
163/428	bpf: Fix objects stuck in free_by_rcu_ttrace`kernel/bpf/memalloc.c`	+32 -2	0 replies
164/428	drm/mediatek: Fix runtime PM leak in mtk_hdmi_ddc_v2_probe()`drivers/gpu/drm/mediatek/mtk_hdmi_ddc_v2.c`	+3 -1	0 replies
165/428	futex: Fix private hash use-after-free on resize`kernel/futex/core.c`	+6 -4	0 replies
166/428	bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()`kernel/bpf/hashtab.c`	+2 -0	0 replies
167/428	PCI: Accept AtomicOps already enabled by the hypervisor`drivers/pci/pci.c`	+14 -1	0 replies
168/428	drm/amd/display: guard dc_sink dereferences in MST mode validation`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_mst_types.c`	+5 -1	0 replies
169/428	drm/amd/display: Preserve eDP mode on initial ASSR failure`drivers/gpu/drm/amd/display/dc/dc.h` `drivers/gpu/drm/amd/display/dc/link/protocols/link_edp_panel_control.c`	+4 -1	0 replies
170/428	drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c`	+7 -2	0 replies
171/428	drm/amd/display: Fix fast updates on DCE 6.x`drivers/gpu/drm/amd/display/dc/resource/dce60/dce60_resource.c`	+12 -0	0 replies
172/428	drm/amd/display: Fix fast updates on DCE 8.1`drivers/gpu/drm/amd/display/dc/resource/dce80/dce80_resource.c`	+2 -0	0 replies
173/428	drm/amd/display: Fix stale replay_events after mod_power stream removal`drivers/gpu/drm/amd/display/modules/power/power.c`	+2 -0	0 replies
174/428	drm/amd/display: Mark DCE 6.4 as not APU`drivers/gpu/drm/amd/display/dc/resource/dce60/dce60_resource.c`	+0 -1	0 replies
175/428	drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC`drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c`	+2 -1	0 replies
176/428	drm/amd/pm/si: Fix updating clock limits on AC/DC`drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c`	+18 ~~-18~~	0 replies
177/428	drm/amdgpu/gfx6: fix firmware leak on teardown`drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c`	+9 -0	0 replies
178/428	drm/amdgpu/gmc12.1: properly pass flush_type to gmc_v12_1_flush_vm_hub()`drivers/gpu/drm/amd/amdgpu/gmc_v12_1.c`	+1 -1	0 replies
179/428	drm/amdgpu/gmc12: properly pass flush_type to gmc_v12_0_flush_vm_hub()`drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c`	+1 -1	0 replies
180/428	drm/i915/vrr: Disable DC balance by default`drivers/gpu/drm/i915/display/intel_display_params.c` `drivers/gpu/drm/i915/display/intel_display_params.h` `drivers/gpu/drm/i915/display/intel_vrr.c`	+8 -1	0 replies
181/428	drm/radeon: Read the VRAM VBIOS signature with readb()`drivers/gpu/drm/radeon/radeon_bios.c`	+5 -1	0 replies
182/428	drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device`drivers/gpu/drm/mediatek/mtk_drm_drv.c`	+3 -0	0 replies
183/428	drm/mediatek: Fix ovl adaptor platform device leak`drivers/gpu/drm/mediatek/mtk_drm_drv.c`	+9 -1	0 replies
184/428	drm/mediatek: Fix pdev reference leak in mtk_drm_bind()`drivers/gpu/drm/mediatek/mtk_drm_drv.c`	+3 -1	0 replies
185/428	drm/amdgpu: fix IP instance memory leak on kobject add failure`drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c`	+2 -0	0 replies
186/428	drm/amdgpu: implement workaround for sdma dcc corruption`drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c`	+7 -1	0 replies
187/428	drm/amdgpu: drop userq callback assignment for sdma 7.1`drivers/gpu/drm/amd/amdgpu/sdma_v7_1.c`	+0 -4	0 replies
188/428	drm/amdgpu: fix ACP MFD device leak on init failure`drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c`	+9 -4	0 replies
189/428	drm/amdgpu: skip the noirq suspend reset for a switcheroo-parked GPU`drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c`	+8 -0	0 replies
190/428	binder: fix is_failure flag for superseded transaction cleanup`drivers/android/binder.c`	+1 -1	0 replies
191/428	binder: fix leaked fd fixups on TF_UPDATE_TXN supersede`drivers/android/binder.c`	+1 -0	0 replies
192/428	binderfs: fix UAF write in binder_add_device`drivers/android/binderfs.c`	+1 -2	0 replies
193/428	clk: spacemit: k3: add CPU PLL rate tables`drivers/clk/spacemit/ccu-k3.c`	+92 -0	0 replies
194/428	hrtimer: Use the mask to clear TIF_HRTIMER_REARM from the exit work`include/linux/hrtimer_rearm.h`	+1 -1	0 replies
195/428	kgdboc: Fix tty driver reference leak in configure_kgdboc()`drivers/tty/serial/kgdboc.c`	+9 -0	0 replies
196/428	Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11`drivers/input/keyboard/atkbd.c`	+8 -0	0 replies
197/428	Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410`drivers/input/serio/i8042-acpipnpio.h`	+9 -0	0 replies
198/428	Input: s6sy761 - fix resume ordering and restore sensing`drivers/input/touchscreen/s6sy761.c`	+13 -1	0 replies
199/428	Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490`drivers/input/mouse/synaptics.c`	+1 -0	0 replies
200/428	Input: synaptics - limit T440p InterTouch quirk to LEN0036`drivers/input/mouse/synaptics.c`	+4 -2	0 replies
201/428	nitro_enclaves: fix use-after-free on SLOT_ALLOC failure`drivers/virt/nitro_enclaves/ne_misc_dev.c`	+1 -0	0 replies
202/428	rust_binder: cancel deferred work items in thread exit`drivers/android/binder/thread.rs`	+7 -1	0 replies
203/428	rust_binder: reschedule node refcount update on thread exit`drivers/android/binder/node.rs` `drivers/android/binder/node/wrapper.rs`	+50 -4	2 replies
204/428	soc: qcom: geni-se: Correct QUP Core ICC vote constants`include/linux/soc/qcom/geni-se.h`	+5 ~~-10~~	0 replies
205/428	USB: cdc-acm: fix racy TIOCMIWAIT implementation`drivers/usb/class/cdc-acm.c` `drivers/usb/class/cdc-acm.h`	+19 ~~-18~~	0 replies
206/428	USB: cdc-acm: skip URB restart in port_shutdown if disconnected`drivers/usb/class/cdc-acm.c`	+3 -0	0 replies
207/428	USB: serial: fix port tear down use-after-free`drivers/usb/serial/usb-serial.c`	+7 -2	0 replies
208/428	usb: storage: sierra_ms: reject short SWoC info transfers`drivers/usb/storage/sierra_ms.c`	+7 -0	0 replies
209/428	usb: hub: use shorter 120ms post resume hold for SS root hubs`drivers/usb/core/hub.c`	+6 -1	0 replies
210/428	usb: octeon-hcd: fix the FIFO-flush timeout computation`drivers/usb/host/octeon-hcd.c`	+1 -1	0 replies
211/428	usb: ohci-da8xx: disable controller wakeup on cleanup`drivers/usb/host/ohci-da8xx.c`	+2 -0	0 replies
212/428	usb: ohci-s3c2410: disable controller wakeup on removal`drivers/usb/host/ohci-s3c2410.c`	+1 -0	0 replies
213/428	usb: ohci-spear: disable controller wakeup on removal`drivers/usb/host/ohci-spear.c`	+1 -0	0 replies
214/428	usb: ohci-st: disable controller wakeup on removal`drivers/usb/host/ohci-st.c`	+1 -0	0 replies
215/428	usb: gadget: midi2: Fix the jack descriptor array sizes`drivers/usb/gadget/function/f_midi2.c`	+2 -2	0 replies
216/428	usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd`drivers/usb/gadget/function/f_uac1_legacy.c`	+6 -0	0 replies
217/428	usb: typec: anx7411 - stop the IRQ before destroying the workqueue`drivers/usb/typec/anx7411.c`	+4 -1	0 replies
218/428	usb: typec: port-mapper: Only match USB4 port if host interface is available`drivers/usb/typec/port-mapper.c`	+19 -2	0 replies
219/428	usb: dwc3: am62: Fix runtime PM usage count leak on probe error path`drivers/usb/dwc3/dwc3-am62.c`	+1 -0	0 replies
220/428	usb: dwc3: gadget: fix IRQ storm on invalid event buffer count`drivers/usb/dwc3/core.h` `drivers/usb/dwc3/ep0.c` `drivers/usb/dwc3/gadget.c`	+134 -2	0 replies
221/428	usb: gadget: aspeed-vhub: cancel wake work on device removal`drivers/usb/gadget/udc/aspeed-vhub/core.c` `drivers/usb/gadget/udc/aspeed-vhub/dev.c` `drivers/usb/gadget/udc/aspeed-vhub/hub.c` +1 more	+9 -3	0 replies
222/428	USB: gadget: dummy-hcd: Fix wait for outstanding request completions`drivers/usb/gadget/udc/dummy_hcd.c`	+4 -0	0 replies
223/428	usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC`drivers/usb/gadget/function/f_fs.c`	+13 -2	0 replies
224/428	usb: chipidea: tegra: disable runtime PM on resume failure`drivers/usb/chipidea/ci_hdrc_tegra.c`	+3 -1	0 replies
225/428	usb: core: clear both ep_in and ep_out for non-ep0 control endpoints`drivers/usb/core/message.c`	+7 -1	0 replies
226/428	USB: dwc2: shut down wakeup timer before freeing HCD state`drivers/usb/dwc2/hcd.c`	+1 -2	0 replies
227/428	usb: typec: tcpm: recover after failure to start the frs ams`drivers/usb/typec/tcpm/tcpm.c`	+1 -1	0 replies
228/428	usb: typec: tipd: dont send GAID when probe fails in APP mode`drivers/usb/typec/tipd/core.c`	+4 -1	0 replies
229/428	usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()`drivers/usb/typec/tipd/core.c`	+1 -2	0 replies
230/428	usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()`drivers/usb/typec/tipd/core.c`	+1 -2	0 replies
231/428	usb: typec: ucsi: glink: fix use-after-free of ucsi on remove`drivers/usb/typec/ucsi/ucsi_glink.c`	+13 -2	0 replies
232/428	usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41`drivers/usb/typec/ucsi/ucsi_acpi.c`	+34 -0	0 replies
233/428	usb: typec: ucsi: Get the connector fwnode based on reg value`drivers/usb/typec/ucsi/ucsi.c`	+14 -3	0 replies
234/428	usb: typec: ucsi: displayport: Current CAM OOB index fixup`drivers/usb/typec/ucsi/displayport.c`	+6 -3	0 replies
235/428	usb: cdns3: fix use-after-free in cdns3_gadget_exit()`drivers/usb/cdns3/cdns3-gadget.c`	+4 -0	0 replies
236/428	usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe`drivers/usb/cdns3/cdns3-pci-wrap.c`	+5 -0	0 replies
237/428	tty: vt: fix memory leak in vc_allocate()`drivers/tty/vt/vt.c`	+2 -0	0 replies
238/428	tty: amiserial: fix broken TIOCMIWAIT`drivers/tty/amiserial.c`	+4 -5	0 replies
239/428	tty: vcc: zero-initialize control packet in vcc_send_ctl()`drivers/tty/vcc.c`	+1 -1	0 replies
240/428	tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup`drivers/tty/vcc.c`	+2 -1	0 replies
241/428	tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2`drivers/tty/n_gsm.c`	+14 ~~-33~~	0 replies
242/428	tty: tty_port: restore TTY_IO_ERROR on activation failure`drivers/tty/tty_port.c`	+3 -1	0 replies
243/428	tty: port: fix tty_port_tty_vhangup() race`drivers/tty/tty_port.c` `include/linux/tty_port.h`	+60 ~~-49~~	0 replies
244/428	tty: serial: qcom_geni_serial: Keep console RX functional after deep idle`drivers/tty/serial/qcom_geni_serial.c`	+2 -3	0 replies
245/428	tty: abort break signalling on hangup`drivers/tty/tty_io.c` `include/linux/tty.h`	+28 -9	0 replies
246/428	tty: fix saved termios reset race`drivers/staging/greybus/uart.c` `drivers/tty/tty_io.c` `drivers/usb/class/cdc-acm.c` +2 more	+21 ~~-11~~	0 replies
247/428	tty: serial: max3100: shut down timer before freeing port`drivers/tty/serial/max3100.c`	+11 -2	0 replies
248/428	perf: Replace perf_event_header__init_id with full header init`arch/powerpc/perf/imc-pmu.c` `include/linux/perf_event.h` `kernel/events/core.c` +1 more	+146 ~~-194~~	0 replies
249/428	serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()`drivers/tty/serial/8250/8250_bcm7271.c`	+1 -1	0 replies
250/428	serial: 8250_omap: fix wake irq cleared during suspend`drivers/tty/serial/8250/8250_omap.c`	+8 -7	0 replies
251/428	serial: abort TIOCMIWAIT on hangup`drivers/tty/serial/serial_core.c`	+5 -0	0 replies
252/428	serial: core: fix NULL pointer dereference in serial_core_unregister_port()`drivers/tty/serial/serial_core.c`	+15 -2	0 replies
253/428	serial: revert guards in uart_wait_modem_status()`drivers/tty/serial/serial_core.c`	+7 -6	0 replies
254/428	serial: fix ioctl hangup race`drivers/tty/serial/serial_core.c`	+29 ~~-12~~	0 replies
255/428	serial: fix TIOCMIWAIT race`drivers/tty/serial/serial_core.c`	+2 -2	0 replies
256/428	serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()`drivers/tty/serial/ma35d1_serial.c`	+5 -1	0 replies
257/428	serial: tegra: dont clear the Tx FIFO on an Rx-only reset`drivers/tty/serial/serial-tegra.c`	+16 -2	0 replies
258/428	serial: vt8500: Fix clock reference leak in vt8500_serial_probe()`drivers/tty/serial/vt8500_serial.c`	+1 -0	0 replies
259/428	serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around`drivers/tty/serial/sc16is7xx.c`	+13 -4	0 replies
260/428	serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL`drivers/tty/serial/sc16is7xx.c`	+30 -8	0 replies
261/428	arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems`arch/arm64/kernel/signal.c`	+20 ~~-14~~	0 replies
262/428	arm64: mm: Fix the break-before-make flush range for erratum 2645198`arch/arm64/mm/mmu.c`	+1 -1	0 replies
263/428	ASoC: codecs: lpass-wsa-macro: rewrite the interpolator volume after enabling clocks`sound/soc/codecs/lpass-wsa-macro.c`	+3 -0	0 replies
264/428	ASoC: codecs: max98363: fix uninitialized stream_config->type`sound/soc/codecs/max98363.c`	+1 -1	0 replies
265/428	ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type`sound/soc/codecs/rt1017-sdca-sdw.c`	+8 ~~-19~~	0 replies
266/428	ASoC: qcom: lpass-cpu: use DAI table index for playback constraints`sound/soc/qcom/lpass-cpu.c`	+2 -2	0 replies
267/428	ALSA: hda/tegra: Re-enable SDO workaround for Tegra194`sound/hda/controllers/tegra.c`	+2 -1	0 replies
268/428	ALSA: seq: Serialize compat port-info ioctls`sound/core/seq/seq_compat.c`	+3 -1	0 replies
269/428	ALSA: ua101: reject mismatched capture/playback packet sizes`sound/usb/misc/ua101.c`	+9 -0	0 replies
270/428	ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR`sound/hda/codecs/realtek/alc269.c`	+1 -1	0 replies
271/428	ALSA: hda/realtek: Fix silent speaker on Higole F9B`sound/hda/codecs/realtek/alc269.c`	+1 -0	0 replies
272/428	ALSA: hda/realtek: Add micmute LED quirk for Acer Swift SFG16-72`sound/hda/codecs/realtek/alc269.c`	+1 -0	0 replies
273/428	EDAC/versalnet: Drop remote processor handle refcount on driver removal`drivers/edac/versalnet_edac.c`	+1 -0	0 replies
274/428	EDAC/altera: Do not allow driver unbinding`drivers/edac/altera_edac.c`	+4 ~~-21~~	0 replies
275/428	EDAC/altera: Drop __init from ECC setup paths for re-probe safety`drivers/edac/altera_edac.c`	+8 -8	0 replies
276/428	EDAC/altera: Fix memory leak on dci allocation failure`drivers/edac/altera_edac.c`	+3 -1	0 replies
277/428	EDAC/altera: Fix use-after-free in error paths`drivers/edac/altera_edac.c`	+14 -1	0 replies
278/428	EDAC/altera: Fix device node reference leaks in the SDMMC ECC setup`drivers/edac/altera_edac.c`	+6 -1	0 replies
279/428	i2c: xiic: preserve PEC byte length in SMBus block read setup`drivers/i2c/busses/i2c-xiic.c`	+41 ~~-13~~	0 replies
280/428	i2c: xiic: defer RX_FULL until all trailing bytes are in FIFO`drivers/i2c/busses/i2c-xiic.c`	+4 -4	1 reply
281/428	i2c: xiic: dont clobber msg->len to signal block-read completion`drivers/i2c/busses/i2c-xiic.c`	+5 -2	0 replies
282/428	Bluetooth: RFCOMM: Fix initial port reference race`net/bluetooth/rfcomm/tty.c`	+3 -4	0 replies
283/428	Bluetooth: Serialize SMP remote OOB data access`include/net/bluetooth/hci_core.h` `net/bluetooth/hci_core.c` `net/bluetooth/smp.c`	+14 -1	0 replies
284/428	Bluetooth: hci_sync: Fix inquiry cache use-after-free`net/bluetooth/hci_sync.c`	+11 -2	0 replies
285/428	Bluetooth: hci_conn: Lock parent access during enhanced SCO setup`net/bluetooth/hci_conn.c`	+13 -5	0 replies
286/428	Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems`include/net/bluetooth/hci_core.h` `net/bluetooth/hci_debugfs.c`	+3 -3	0 replies
287/428	Bluetooth: hci_core: Serialize ACL scheduling with channel deletion`net/bluetooth/hci_core.c`	+8 -0	0 replies
288/428	Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown`net/bluetooth/hci_core.c`	+18 -8	0 replies
289/428	Bluetooth: hci_core: Serialize fragmented ISO packet queueing`net/bluetooth/hci_core.c`	+4 -0	0 replies
290/428	Bluetooth: btintel: fix buffer over-read in btintel_hw_error()`drivers/bluetooth/btintel.c`	+2 -1	0 replies
291/428	Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()`drivers/bluetooth/btintel_pcie.c`	+1 -1	0 replies
292/428	Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()`drivers/bluetooth/btintel_pcie.c`	+10 -0	0 replies
293/428	x86/mm: Dont apply va_align to hugetlb mappings on AMD F15h`arch/x86/kernel/sys_x86_64.c`	+11 -4	0 replies
294/428	x86/mm: Drop unnecessary PMD page copy when freeing`arch/x86/mm/pgtable.c`	+14 ~~-24~~	0 replies
295/428	tpm: fix off-by-four bounds check in tpm2_get_random()`drivers/char/tpm/tpm2-cmd.c`	+1 -1	0 replies
296/428	nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known`drivers/nvme/host/multipath.c`	+0 -2	0 replies
297/428	nvme-multipath: fix underflow in ANA log bounds checks`drivers/nvme/host/multipath.c`	+3 -2	0 replies
298/428	nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT`drivers/nvme/host/pci.c`	+2 -0	0 replies
299/428	nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()`drivers/nvme/target/fabrics-cmd-auth.c`	+1 -1	0 replies
300/428	nvmet: pci-epf: reject too-short SGL segments`drivers/nvme/target/pci-epf.c`	+3 -0	0 replies
301/428	nvmet: copy the hostid into the ctrl before creating PR pc_refs`drivers/nvme/target/core.c`	+2 -3	0 replies
302/428	mtd: block2mtd: Fix divide error when erase_size is zero`drivers/mtd/devices/block2mtd.c`	+1 -1	0 replies
303/428	mtd: mtd_intel_dg: reset poll counter for each erase`drivers/mtd/devices/mtd_intel_dg.c`	+2 -1	0 replies
304/428	mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ`drivers/mtd/nand/raw/cadence-nand-controller.c`	+3 -3	0 replies
305/428	mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB`drivers/mtd/nand/raw/vf610_nfc.c`	+60 ~~-12~~	0 replies
306/428	mtd: spi-nor: core: Fix mutex leak in spi_nor_rww_start_exclusive()`drivers/mtd/spi-nor/core.c`	+1 -1	0 replies
307/428	mtd: spinand: Enable QE on all dies`drivers/mtd/nand/spi/core.c`	+20 -2	0 replies
308/428	mtd: spinand: fix NULL pointer dereference with no ECC engine`drivers/mtd/nand/ecc.c` `drivers/mtd/nand/spi/core.c` `include/linux/mtd/nand.h`	+12 -5	0 replies
309/428	mtd: spinand: fix zero oobavail when no ECC engine is used`drivers/mtd/nand/spi/core.c`	+9 -4	0 replies
310/428	mtd: spinand: Do not update the QE bit on devices without one`drivers/mtd/nand/spi/core.c`	+5 -5	0 replies
311/428	KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified`arch/x86/kvm/vmx/nested.c`	+6 -0	0 replies
312/428	KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it`arch/x86/kvm/svm/sev.c`	+22 ~~-11~~	0 replies
313/428	KVM: SEV: Do cache maintenance on the source VM before clearing SEV state`arch/x86/kvm/svm/sev.c`	+7 -6	0 replies
314/428	KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy`arch/x86/kvm/mmu/mmu.c`	+6 -0	0 replies
315/428	KVM: SVM: Use the active VMCBs MSR bitmap when checking if MSR is intercepted`arch/x86/kvm/svm/svm.c`	+1 ~~-10~~	0 replies
316/428	KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN`arch/x86/kvm/svm/svm.c` `arch/x86/kvm/svm/svm.h`	+11 -3	0 replies
317/428	KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded`arch/x86/kvm/svm/svm.c`	+8 -8	0 replies
318/428	KVM: arm64: Clear HCR_EL2.RW for 32-bit non-protected vCPUs`arch/arm64/kvm/hyp/nvhe/pkvm.c`	+9 -0	0 replies
319/428	KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT`arch/arm64/kvm/emulate-nested.c`	+0 -3	0 replies
320/428	KVM: arm64: vgic: Allow last_lr_irq to be NULL when LRs are not overflowing`arch/arm64/kvm/vgic/vgic-v2.c` `arch/arm64/kvm/vgic/vgic-v3.c` `arch/arm64/kvm/vgic/vgic.c`	+11 -9	0 replies
321/428	KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq`arch/arm64/kvm/vgic/vgic.c`	+14 -1	0 replies
322/428	KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor`arch/arm64/kvm/vgic/vgic-its.c`	+8 -4	0 replies
323/428	KVM: arm64: Use stage-1 leaf size for VM_PFNMAP`arch/arm64/kvm/mmu.c`	+6 ~~-41~~	0 replies
324/428	wifi: cfg80211: fix RTS threshold setting for single-radio PHY`net/wireless/nl80211.c`	+6 -5	0 replies
325/428	wifi: cw1200: fix TX padding OOB read leaking heap data to device`drivers/net/wireless/st/cw1200/bh.c` `drivers/net/wireless/st/cw1200/txrx.c`	+21 -1	0 replies
326/428	wifi: iwlegacy: 3945: free EEPROM data on remove`drivers/net/wireless/intel/iwlegacy/3945-mac.c`	+1 -0	0 replies
327/428	wifi: mac80211: count only matching reservations in reserved switch`net/mac80211/chan.c`	+23 -7	0 replies
328/428	wifi: mac80211: keep paired old chanctx alive`net/mac80211/chan.c`	+18 -2	0 replies
329/428	wifi: mac80211: shut down RX BA session timer on teardown`net/mac80211/agg-rx.c`	+1 -1	0 replies
330/428	wifi: mac80211: drain PS delivery work during station teardown`net/mac80211/sta_info.c`	+4 -2	0 replies
331/428	wifi: mac80211: account proxy paths against the mesh path limit`net/mac80211/mesh_pathtbl.c`	+10 -3	0 replies
332/428	wifi: mac80211: keep fallback association elements alive`net/mac80211/mlme.c`	+2 -2	0 replies
333/428	wifi: mac80211: minstrel_ht: validate fixed rate index`net/mac80211/rc80211_minstrel_ht.c`	+28 -2	0 replies
334/428	wifi: mac80211: reject invalid 320 MHz CSA bandwidth`net/mac80211/spectmgmt.c`	+2 -2	0 replies
335/428	wifi: mac80211: release mesh path quota on failed additions`net/mac80211/mesh_pathtbl.c`	+4 -1	0 replies
336/428	wifi: mac80211: set info->band for 802.3 encap offload frames`net/mac80211/tx.c`	+11 -0	0 replies
337/428	wifi: mac80211: fix mesh fast xmit path deletion UAF`net/mac80211/mesh_pathtbl.c`	+11 -1	0 replies
338/428	wifi: mac80211: handle empty FILS association request payload`net/mac80211/fils_aead.c`	+8 -0	0 replies
339/428	USB: serial: cp210x: add Corsair AX1500i Power Supply`drivers/usb/serial/cp210x.c`	+1 -0	0 replies
340/428	USB: serial: quatech2: fix baud rate overflow`drivers/usb/serial/quatech2.c`	+16 -3	0 replies
341/428	USB: serial: ssu100: fix baud rate overflow`drivers/usb/serial/ssu100.c`	+16 -2	0 replies
342/428	USB: serial: fix dynamic id driver deregistration race`drivers/usb/serial/bus.c`	+1 -1	0 replies
343/428	USB: serial: fix driver deregistration order`drivers/usb/serial/bus.c` `drivers/usb/serial/usb-serial.c` `include/linux/usb/serial.h`	+23 -3	0 replies
344/428	USB: serial: fix ioctl hangup race`drivers/usb/serial/generic.c` `drivers/usb/serial/usb-serial.c` `drivers/usb/serial/xr_serial.c`	+86 ~~-28~~	0 replies
345/428	USB: serial: option: add support for SIMCom SIM8260C`drivers/usb/serial/option.c`	+2 -0	0 replies
346/428	USB: serial: option: add Quectel EG060W`drivers/usb/serial/option.c`	+2 -0	0 replies
347/428	USB: serial: option: add Compal EXM-G1x support`drivers/usb/serial/option.c`	+3 -0	0 replies
348/428	USB: serial: option: add Quectel RG660QB`drivers/usb/serial/option.c`	+3 -0	0 replies
349/428	USB: serial: option: add Compal EXC-T1 support`drivers/usb/serial/option.c`	+4 -0	0 replies
350/428	thunderbolt: Fix KASAN reported use-after-free when request is canceled`drivers/thunderbolt/ctl.c`	+31 ~~-32~~	0 replies
351/428	thunderbolt: Hold a router reference for each allocated HopID`drivers/thunderbolt/switch.c` `drivers/thunderbolt/test.c`	+29 -1	0 replies
352/428	thunderbolt: Make the DP tunnel activation callback mandatory`drivers/thunderbolt/tb.c` `drivers/thunderbolt/test.c` `drivers/thunderbolt/tunnel.c` +1 more	+60 ~~-36~~	0 replies
353/428	thunderbolt: Mark discovered tunnels as active`drivers/thunderbolt/tunnel.c`	+3 -0	0 replies
354/428	thunderbolt: Tear down inactive DP tunnels when the domain is stopped`drivers/thunderbolt/tb.c`	+5 -4	0 replies
355/428	thunderbolt: Fix domain reference leak when DPRX read is canceled`drivers/thunderbolt/tb.c` `drivers/thunderbolt/tunnel.c`	+10 -8	0 replies
356/428	thunderbolt: Dont access a DP tunnel after its DPRX read was canceled`drivers/thunderbolt/tb.c` `drivers/thunderbolt/tunnel.c`	+21 -2	0 replies
357/428	thunderbolt: Fix NULL dereference in tb_remove_work()`drivers/thunderbolt/tb.c`	+3 -3	0 replies
358/428	thunderbolt: Disable CL states for the Anker Prime TB5 dock`drivers/thunderbolt/quirks.c`	+3 -0	0 replies
359/428	thunderbolt: Reject oversized XDomain properties responses`drivers/thunderbolt/xdomain.c`	+4 -0	0 replies
360/428	smb: client: discard post-EOF pagecache when extending a file via zero range`fs/smb/client/smb2ops.c`	+4 -1	0 replies
361/428	smb: client: discard post-EOF pagecache when extending a file via copy range`fs/smb/client/cifsfs.c`	+6 -1	0 replies
362/428	smb: client: discard post-EOF pagecache when extending a file via clone range`fs/smb/client/cifsfs.c`	+7 -2	0 replies
363/428	smb: client: flush and commit data before querying allocated ranges`fs/smb/client/smb2ops.c`	+26 -6	0 replies
364/428	smb: client: only require read lease for size-extending zero range`fs/smb/client/smb2ops.c`	+26 -5	0 replies
365/428	smb: client: flush dirty data before zeroing a range`fs/smb/client/smb2ops.c`	+4 -6	0 replies
366/428	smb: client: distinguish real EOF from a stale remote_i_size on read`fs/smb/client/smb2pdu.c`	+8 -2	0 replies
367/428	smb: client: drain and invalidate before server-side copy/clone`fs/smb/client/cifsfs.c`	+26 -5	0 replies
368/428	smb: client: require stable pages for signed connections`fs/smb/client/inode.c`	+2 -0	0 replies
369/428	smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races`fs/smb/client/cifsglob.h`	+5 -5	0 replies
370/428	iio: accel: kionix-kx022a: Prevent memory leak and fix state`drivers/iio/accel/kionix-kx022a.c`	+23 -5	0 replies
371/428	iio: accel: kxcjk-1013: reject duplicate event disable`drivers/iio/accel/kxcjk-1013.c`	+1 -1	0 replies
372/428	iio: accel: sca3000: fix frequency divider condition check`drivers/iio/accel/sca3000.c`	+1 -1	0 replies
373/428	iio: adc: ad4030: fix invalid oversampling_ratio validation`drivers/iio/adc/ad4030.c`	+9 -2	0 replies
374/428	iio: adc: ad7173: Fix digital filter configuration`drivers/iio/adc/ad7173.c`	+2 -2	0 replies
375/428	iio: adc: ad_sigma_delta: fix use-after-free on unbind`drivers/iio/adc/ad_sigma_delta.c`	+18 ~~-13~~	0 replies
376/428	iio: adc: ade9000: fix NULL pointer dereference in clkout registration`drivers/iio/adc/ade9000.c`	+3 -2	0 replies
377/428	iio: adc: ade9000: fix overlapping scan_index for current and voltage channels`drivers/iio/adc/ade9000.c`	+2 -2	0 replies
378/428	iio: adc: ade9000: handle Phase C dip events in IRQ1 handler`drivers/iio/adc/ade9000.c`	+1 -1	0 replies
379/428	iio: adc: ade9000: request interrupts after powering the device`drivers/iio/adc/ade9000.c`	+13 ~~-12~~	0 replies
380/428	iio: adc: adi-axi-adc: Initialize state mutex`drivers/iio/adc/adi-axi-adc.c`	+4 -0	0 replies
381/428	iio: adc: aspeed: propagate reset deassert errors`drivers/iio/adc/aspeed_adc.c`	+3 -1	0 replies
382/428	iio: adc: axp288: Add TS bias override for Haier HV103H`drivers/iio/adc/axp288_adc.c`	+8 -0	0 replies
383/428	iio: adc: max1363: sign-extend bipolar differential channel reads`drivers/iio/adc/max1363.c`	+8 -0	0 replies
384/428	iio: adc: pac1934: check ACPI label duplication`drivers/iio/adc/pac1934.c`	+4 -0	0 replies
385/428	iio: adc: rohm-bd79124: Catch regmap errors at measurement start/stop`drivers/iio/adc/rohm-bd79124.c`	+8 -0	0 replies
386/428	iio: adc: rohm-bd79124: Fix channel initialization`drivers/iio/adc/rohm-bd79124.c`	+4 -4	0 replies
387/428	iio: adc: rohm-bd79124: Fix GPIO mask check`drivers/iio/adc/rohm-bd79124.c`	+1 -1	0 replies
388/428	iio: adc: rohm-bd79124: Fix rising alarm`drivers/iio/adc/rohm-bd79124.c`	+1 -1	0 replies
389/428	iio: adc: stm32-adc: fix check on internal channel availability`drivers/iio/adc/stm32-adc.c`	+19 ~~-15~~	0 replies
390/428	iio: adc: stm32-adc: fix possible division by zero in processed channel`drivers/iio/adc/stm32-adc.c`	+7 -2	0 replies
391/428	iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure`drivers/iio/adc/sun4i-gpadc-iio.c`	+4 -4	0 replies
392/428	iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls`drivers/iio/adc/sun4i-gpadc-iio.c`	+0 -2	0 replies
393/428	iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind`drivers/iio/adc/xilinx-xadc-core.c`	+5 -4	0 replies
394/428	iio: admv1013: initialize callback mutex before registering notifier`drivers/iio/frequency/admv1013.c`	+5 -2	0 replies
395/428	iio: buffer: serialize buffer teardown with mode claims`drivers/iio/industrialio-buffer.c`	+4 -0	0 replies
396/428	iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.`drivers/iio/industrialio-buffer.c`	+2 -1	0 replies
397/428	iio: cdc: ad7150: fix OF matching and publish module aliases`drivers/iio/cdc/ad7150.c`	+5 -3	0 replies
398/428	iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data`drivers/iio/frequency/adf4377.c`	+2 -2	0 replies
399/428	iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw()`drivers/iio/frequency/admv1013.c`	+1 -1	0 replies
400/428	iio: gyro: adis16136: fix unprotected debugfs reads`drivers/iio/gyro/adis16136.c`	+1 -1	0 replies
401/428	iio: health: max30102: fix NULL dereference in interrupt handler`drivers/iio/health/max30102.c`	+9 -3	0 replies
402/428	iio: imu: adis16400: fix unprotected debugfs reads`drivers/iio/imu/adis16400.c`	+1 -1	0 replies
403/428	iio: imu: adis16480: fix unprotected debugfs reads`drivers/iio/imu/adis16480.c`	+2 -2	0 replies
404/428	iio: light: gp2ap020a00f: drain irq_work after free_irq`drivers/iio/light/gp2ap020a00f.c`	+2 -0	0 replies
405/428	iio: light: rohm-bu27034: Fix infinite delay on error`drivers/iio/light/rohm-bu27034.c`	+36 ~~-24~~	0 replies
406/428	iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup`drivers/iio/pressure/bmp280-core.c`	+1 -1	0 replies
407/428	iio: pressure: rohm-bm1390: Return error when read fails`drivers/iio/pressure/rohm-bm1390.c`	+1 -1	0 replies
408/428	iio: proximity: aw96103: validate firmware data length`drivers/iio/proximity/aw96103.c`	+24 -6	0 replies
409/428	iio: proximity: isl29501: Fix return type of isl29501_register_write`drivers/iio/proximity/isl29501.c`	+1 -1	0 replies
410/428	iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure`drivers/iio/proximity/pulsedlight-lidar-lite-v2.c`	+3 -1	0 replies
411/428	iio: proximity: sx9324: Correct proximity channel resolution`drivers/iio/proximity/sx9324.c`	+1 -1	0 replies
412/428	iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler`drivers/iio/proximity/vcnl3020.c`	+17 -7	0 replies
413/428	iio: proximity: vl53l0x-i2c: claim direct mode for raw reads`drivers/iio/proximity/vl53l0x-i2c.c`	+3 -0	0 replies
414/428	iio: trigger: cancel reenable_work before freeing trigger`drivers/iio/industrialio-trigger.c`	+2 -0	0 replies
415/428	mptcp: fix msk->timer_ival reset`net/mptcp/protocol.c`	+1 -1	0 replies
416/428	mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages`drivers/mtd/nand/raw/vf610_nfc.c`	+11 -4	0 replies
417/428	rust: irq: pass RegistrationInner as cookie to request_irq`rust/kernel/irq/request.rs`	+54 ~~-35~~	0 replies
418/428	drm/amd/display: map PWM brightness through custom backlight curve`drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c`	+80 ~~-12~~	0 replies
419/428	drm/amdgpu: reset VI ASIC on MacBookPro15,1`drivers/gpu/drm/amd/amdgpu/vi.c`	+20 -0	0 replies
420/428	drm/amdgpu: reset VI ASIC on MacBookPro14,3`drivers/gpu/drm/amd/amdgpu/vi.c`	+1 -0	0 replies
421/428	perf/core: Check kernel access when kernel callchains are requested`kernel/events/core.c`	+3 -1	0 replies
422/428	perf: Require kernel access for text poke events`kernel/events/core.c`	+1 -1	0 replies
423/428	arm64: errata: Factor out broken AMU const counter cap`arch/arm64/Kconfig` `arch/arm64/kernel/cpu_errata.c` `arch/arm64/kernel/cpufeature.c` +2 more	+25 -9	0 replies
424/428	arm64: errata: Add Cortex-A725 erratum 3821522 workaround`Documentation/arch/arm64/silicon-errata.rst` `arch/arm64/Kconfig` `arch/arm64/kernel/cpu_errata.c` +1 more	+33 -4	0 replies
425/428	smb: client: only require read lease for size-extending preallocate`fs/smb/client/smb2ops.c`	+27 -9	0 replies
426/428	net: usb: qmi_wwan: add Quectel EG120K-EA`drivers/net/usb/qmi_wwan.c`	+1 -0	0 replies
427/428	xen/netfront: drop RX packets with a short Ethernet header`drivers/net/xen-netfront.c`	+10 -2	0 replies
428/428	iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs`drivers/iio/buffer/industrialio-buffer-dmaengine.c`	+11 -5	0 replies

Reviews trailers per patch

203 of 428 patches have a Reviewed-by or Acked-by.

Patch	Rodrigo Vivi	Ricardo Neri	Chen Yu	Kayra Cizmeci	Tim Chen	Andrea Righi	Jiri Kosina	Benjamin Tissoires	Pavel Begunkov	Faaris Ansari	Julian Anastasov	Ratheesh Kannoth	Geert Uytterhoeven	Willem de Bruijn	Ricardo Robaina	Bradley Morgan	Simon Horman	Chen-Yu Tsai	Gustavo A. R. Silva	Xin Long	Gunnar Kudrjavets	Jarkko Sakkinen	David Howells	Namjae Jeon	Kunwu Chan	Suren Baghdasaryan	Gregory Price (Meta)	Zi Yan	Vlastimil Babka (SUSE)	Paul E. McKenney	Kiryl Shutsemau (Meta)	Lance Yang	Barry Song	Qi Zheng	David Hildenbrand (Arm)	Lorenzo Stoakes (ARM)	Mehdi Djait	Christoph Hellwig	Tejun Heo	Charles Keepax	Thierry Reding	Rameshkumar Sundaram	Baochen Qiang	Toke Høiland-Jørgensen	Conor Dooley	Ren Wei	Shengming Hu	Dietmar Eggemann	Christoph Böhmwalder	Nilay Shroff	John Garry	Damien Le Moal	Eric Dumazet	Hangbin Liu	Ido Schimmel	Francis Perron	Michał Winiarski	Louis-Alexis Eyraud	AngeloGioacchino Del Regno	Nicolai Buchwitz	Mark Bloch	Tung Nguyen	Maxime Chevallier	Kory Maincent	Wei Wang	Ankit Garg	Harshitha Ramamurthy	Stefan Hajnoczi	Lad Prabhakar	Florian Fainelli	hybris	Daniel Machon	Tariq Toukan	Xuanqiang Luo	Wiza Jalakasi	Mykyta Yatsenko	Gerd Bayer	Christian König	Fangzhi Zuo	Daniel Wheeler	George Zhang	Alex Hung	Mario Limonciello	Ray Wu	Andrew Lunn	Mukul Joshi	Ankit Nautiyal	CK Hu	Carlos Llamas	Alice Ryhl	Aurelien Jarno	Anirudh Srinivasan	Yixun Lan	Douglas Anderson	Hans de Goede	Alexander Graf	Lijo Lazar	Konrad Dybcio	Greg Kroah-Hartman	Mathias Nyman	Alan Stern	Alex Deucher	Patrice Chotard	Weibin Liu	Ivy Lopez	Heikki Krogerus	Thinh Nguyen	Benjamin Herrenschmidt	Minseo Kim	Hawking Zhang	Michał Nazarewicz	Benson Leung	Peter Chen	Jiri Slaby	Badhri Jagan Sridharan	Tony Lindgren	Joachim Knorr	David Laight	Mark Brown	Dev Jain	Johan Hovold	Srinivas Kandagatla	Radhey Shyam Pandey	Dinh Nguyen	Michal Simek	Shubhrajyoti Datta	Dave Hansen	Pedro Falcato	Hannes Reinecke	Wei-Lin Chang	Fuad Tabba	Marc Zyngier	Stanislaw Gruszka	Vitaly Kuznetsov	Miquel Raynal	Tudor Ambarus	Joshua Crofts	Andy Shevchenko	Nuno Sá	Antoniu Miclaus	Ivan Mikhaylov	ChiaHsuan (Tom) Chung	David Lechner	Sai Krishna Potthuri	Vladimir Murzin	Brian Masney	Ronald Warsow	Brett A C Sheffield	Peter Schneider	Ron Economos	Takeshi Ogasawara	Slade Watkins	Barry K. Nathan	Pavel Machek (CIP)
Series																																																																						T-b																																																																													T-b	T-b	T-b	T-b	T-b	T-b	T-b	T-b
1/428
2/428
3/428	R-b
4/428
5/428		R-b T-b	R-b
6/428				R-b
7/428			R-b		R-b
8/428
9/428
10/428						R-b
11/428						R-b
12/428						A-b
13/428						R-b
14/428
15/428
16/428
17/428
18/428										Reported-and-tested-by
19/428															R-b T-b	R-b
20/428
21/428																														R-b
22/428							A-b
23/428								R-b
24/428									R-b
25/428									R-b
26/428
27/428											A-b
28/428
29/428
30/428												R-b
31/428
32/428
33/428													R-b
34/428														R-b
35/428
36/428
37/428
38/428
39/428														R-b
40/428																	R-b
41/428
42/428
43/428																		R-b	R-b
44/428
45/428																				A-b
46/428																R-b
47/428
48/428																					R-b	R-b
49/428																							R-b	R-b
50/428																							R-b	R-b
51/428																							R-b	R-b
52/428																R-b
53/428
54/428
55/428																									R-b
56/428																										R-b	R-b	A-b	A-b
57/428																												A-b			R-b	R-b	R-b	A-b	A-b	R-b
58/428
59/428
60/428
61/428
62/428
63/428
64/428
65/428
66/428
67/428
68/428																																					R-b
69/428
70/428
71/428																																						R-b
72/428																																							A-b
73/428
74/428
75/428
76/428																																								R-b
77/428
78/428																																									R-b
79/428
80/428																																										R-b	R-b
81/428
82/428
83/428																																												A-b
84/428
85/428
86/428																																													R-b
87/428																																														R-b
88/428
89/428
90/428
91/428
92/428
93/428																																						R-b
94/428
95/428
96/428																													R-b																		R-b
97/428
98/428																																																R-b
99/428																																								R-b
100/428																																								R-b
101/428																																																	R-b
102/428
103/428
104/428																																						R-b												R-b
105/428																																						R-b												R-b
106/428																																																		R-b	R-b	R-b
107/428																																						R-b
108/428
109/428																																																					R-b
110/428																	R-b
111/428																	R-b
112/428																																																						R-b	R-b
113/428
114/428																																																								R-b
115/428
116/428																																																									R-b
117/428	R-b
118/428
119/428																																																										R-b	R-b
120/428																																																												R-b
121/428																																																												R-b
122/428																																																													R-b
123/428																	R-b
124/428																	R-b
125/428																																																														R-b
126/428																	R-b																											R-b
127/428
128/428
129/428																																																															R-b	R-b
130/428																																																																	R-b
131/428
132/428
133/428																																																					R-b													R-b	R-b
134/428
135/428
136/428
137/428
138/428																																																																				R-b
139/428																																																																					R-b
140/428																																																																						R-b
141/428																																																					R-b																		T-b
142/428																	R-b
143/428																																																																																					R-b
144/428																																																																								R-b
145/428																																																					R-b
146/428
147/428
148/428
149/428
150/428
151/428																																																																								R-b
152/428
153/428																	R-b																																																							R-b
154/428																																																																									R-b
155/428																																																							R-b																			R-b
156/428																	R-b																											R-b
157/428
158/428
159/428
160/428
161/428																																								R-b																																			T-b
162/428
163/428
164/428
165/428																														R-b
166/428																																																																												A-b
167/428																																																																													T-b R-b	R-b
168/428																																																																															R-b	T-b
169/428																																																																																T-b	R-b	R-b
170/428																																																																																T-b	R-b
171/428																																																																																			R-b
172/428																																																																																			R-b
173/428																																																																																T-b				R-b
174/428																																																																																			R-b
175/428																																																																																			R-b
176/428																																																																																			R-b
177/428
178/428																																																																																						R-b
179/428																																																																																						R-b
180/428																																																																																							R-b
181/428
182/428																																																																																								R-b
183/428
184/428
185/428																																																																																																	R-b
186/428																																																																														R-b																								R-b
187/428																																																																																																														R-b
188/428
189/428
190/428																																																																																									A-b
191/428																																																																																									A-b	R-b
192/428																																																																																									A-b
193/428																																																																																											R-b T-b	T-b	R-b
194/428
195/428																																																																																														R-b
196/428																																																																																															R-b
197/428
198/428
199/428
200/428
201/428																																																																																																R-b
202/428
203/428
204/428																																																																																																		R-b
205/428
206/428
207/428																																																																																																			R-b
208/428
209/428																																																																																																				A-b
210/428
211/428																																																																																																					A-b
212/428																																																																																																					A-b
213/428																																																																																																					A-b
214/428																																																																																																					A-b		R-b
215/428
216/428																																																																																																								R-b	R-b
217/428																																																																																																										R-b
218/428																																																																																																										A-b
219/428																																																																																																											A-b
220/428																																																																																																											A-b
221/428																																																																																																												R-b
222/428																																																																																																													T-b
223/428																																																																																																															A-b
224/428																																																																																																																	A-b
225/428																																																																																																					A-b
226/428																																																																																																											R-b
227/428																																																																																																										A-b									R-b
228/428																																																																																																										R-b
229/428																																																																																																										R-b
230/428																																																																																																										R-b
231/428																																																																																																										R-b
232/428																																																																																																										R-b
233/428																																																																																																										R-b
234/428																																																																																																										R-b						R-b
235/428																																																																																																																	A-b
236/428																																																																																																																	A-b
237/428
238/428																																																																																																																		R-b
239/428																																																																																																																		R-b
240/428																																																																																																																		R-b
241/428
242/428
243/428
244/428																																																																																																		R-b
245/428
246/428
247/428
248/428
249/428																																																																						R-b
250/428																																																																																																																				R-b
251/428
252/428																																																																																																																				R-b
253/428
254/428
255/428
256/428
257/428
258/428
259/428																																																																																																																					R-b
260/428																																																																																																																						R-b
261/428																																																																																																																							R-b
262/428																																																																																																																								R-b
263/428																																																																																																																									R-b
264/428
265/428
266/428																																																																																																																										R-b
267/428
268/428
269/428
270/428
271/428
272/428
273/428																																																																																																																											R-b
274/428
275/428
276/428
277/428
278/428																																																																																																																												A-b
279/428																																																																																																																													A-b
280/428																																																																																																																													A-b
281/428																																																																																																																													A-b	R-b
282/428
283/428
284/428
285/428
286/428
287/428
288/428
289/428
290/428
291/428
292/428
293/428																																																																																																																															A-b
294/428																																																																																																																																R-b
295/428																						R-b
296/428
297/428																																						R-b
298/428
299/428																																						R-b																																																																																											R-b
300/428																																						R-b
301/428																																						R-b												R-b																																																																															R-b
302/428
303/428
304/428
305/428
306/428																																																																																																																																							R-b	R-b
307/428
308/428
309/428
310/428
311/428																																																																																																																																						R-b
312/428
313/428
314/428
315/428
316/428
317/428
318/428
319/428																																																																																																																																		R-b
320/428																																																																																																																																			R-b T-b
321/428																																																																																																																																			R-b T-b
322/428
323/428																																																																																																																																				R-b
324/428
325/428
326/428																																																																																																																																					A-b
327/428
328/428
329/428
330/428
331/428
332/428
333/428																																														R-b
334/428
335/428
336/428
337/428
338/428																																														R-b
339/428
340/428
341/428
342/428
343/428
344/428
345/428
346/428
347/428
348/428
349/428
350/428
351/428
352/428
353/428
354/428
355/428
356/428
357/428
358/428
359/428
360/428																							R-b	R-b
361/428																							R-b	R-b
362/428																							R-b	R-b
363/428																							R-b	R-b
364/428																							R-b	R-b
365/428																							R-b	R-b
366/428																							R-b	R-b
367/428																							R-b	R-b
368/428																							R-b	R-b
369/428																								R-b
370/428																																					R-b
371/428
372/428																																																																																																																																									R-b
373/428																																																																																																																																										R-b
374/428
375/428																																																																																																																																											R-b
376/428																																																																																																																																												R-b
377/428
378/428
379/428																																																																																																																																									R-b
380/428
381/428
382/428																																																																																															R-b
383/428																																																																																																																																										R-b
384/428
385/428
386/428
387/428
388/428
389/428																																																																																																																																										R-b
390/428																																																																																																																																										R-b
391/428
392/428
393/428																																																																																																																																															R-b	R-b
394/428
395/428																																																																																																																																									R-b		R-b
396/428																																																																																																																																									R-b	R-b	R-b
397/428
398/428																																																																																																																																									R-b									R-b
399/428
400/428																																																																																																																																										R-b
401/428
402/428
403/428																																																																																																																																										R-b
404/428
405/428
406/428																																																																																																																																									R-b
407/428
408/428
409/428																																																																																																																																									R-b
410/428
411/428																																																																																																																																										R-b
412/428																																																																																																																																													R-b
413/428
414/428
415/428
416/428
417/428
418/428																																																																																T-b																																																														R-b
419/428
420/428
421/428
422/428
423/428																																																																																																																																																	R-b
424/428																																																																																																																																																	R-b
425/428																							R-b	R-b
426/428
427/428
428/428

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 154 reviewers.

Read the v1 thread

Cover letter [PATCH 7.2 000/428] 7.2.10-rc1 review

This is the start of the stable review cycle for the 7.2.10 release. There are 428 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sun, 11 Oct 2026 14:08:23 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.10-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 7.2.10-rc1

Michael Hennerich <[email protected]>
iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs

Josef Bacik <[email protected]>
xen/netfront: drop RX packets with a short Ethernet header

Gilberto Conde <[email protected]>
net: usb: qmi_wwan: add Quectel EG120K-EA

Paulo Alcantara <[email protected]>
smb: client: only require read lease for size-extending preallocate

Beata Michalska <[email protected]>

    arm64: errata: Add Cortex-A725 erratum 3821522 workaround

Beata Michalska <[email protected]>
arm64: errata: Factor out broken AMU const counter cap

Zhengchuan Liang <[email protected]>
perf: Require kernel access for text poke events

Dapeng Mi <[email protected]>
perf/core: Check kernel access when kernel callchains are requested

Francisco Beltrán Millalén <[email protected]>
drm/amdgpu: reset VI ASIC on MacBookPro14,3

Andre Eikmeyer <[email protected]>
drm/amdgpu: reset VI ASIC on MacBookPro15,1

Ray Wu <[email protected]>
drm/amd/display: map PWM brightness through custom backlight curve

Alice Ryhl <[email protected]>
rust: irq: pass RegistrationInner as cookie to request_irq

Mehmet Fide <[email protected]>
mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages

Matthieu Baerts (NGI0) <[email protected]>

    mptcp: fix msk->timer_ival reset

Fan Wu <[email protected]>
iio: trigger: cancel reenable_work before freeing trigger

Donggeun Yoo <[email protected]>

    iio: proximity: vl53l0x-i2c: claim direct mode for raw reads

Salah Triki <[email protected]>
iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler

Zhang Jie <[email protected]>
iio: proximity: sx9324: Correct proximity channel resolution

Cong Nguyen <[email protected]>
iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure

Salah Triki <[email protected]>
iio: proximity: isl29501: Fix return type of isl29501_register_write

Laxman Acharya Padhya <[email protected]>
iio: proximity: aw96103: validate firmware data length

Matti Vaittinen <[email protected]>
iio: pressure: rohm-bm1390: Return error when read fails

Hui Su <[email protected]>
iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup

Matti Vaittinen <[email protected]>
iio: light: rohm-bu27034: Fix infinite delay on error

Fan Wu <[email protected]>
iio: light: gp2ap020a00f: drain irq_work after free_irq

Arka Mondal <[email protected]>
iio: imu: adis16480: fix unprotected debugfs reads

Arka Mondal <[email protected]>
iio: imu: adis16400: fix unprotected debugfs reads

Marco Chen <[email protected]>
iio: health: max30102: fix NULL dereference in interrupt handler

Arka Mondal <[email protected]>
iio: gyro: adis16136: fix unprotected debugfs reads

Salah Triki <[email protected]>
iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw()

Geert Uytterhoeven <[email protected]>
iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data

Pengpeng Hou <[email protected]>
iio: cdc: ad7150: fix OF matching and publish module aliases

Jonathan Cameron <[email protected]>
iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.

Jinseob Kim <[email protected]>
iio: buffer: serialize buffer teardown with mode claims

Runyu Xiao <[email protected]>
iio: admv1013: initialize callback mutex before registering notifier

Fan Wu <[email protected]>
iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind

Felix Gu <[email protected]>
iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls

Felix Gu <[email protected]>
iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure

Fabrice Gasnier <[email protected]>
iio: adc: stm32-adc: fix possible division by zero in processed channel

Fabrice Gasnier <[email protected]>
iio: adc: stm32-adc: fix check on internal channel availability

Matti Vaittinen <[email protected]>
iio: adc: rohm-bd79124: Fix rising alarm

Matti Vaittinen <[email protected]>
iio: adc: rohm-bd79124: Fix GPIO mask check

Matti Vaittinen <[email protected]>
iio: adc: rohm-bd79124: Fix channel initialization

Matti Vaittinen <[email protected]>
iio: adc: rohm-bd79124: Catch regmap errors at measurement start/stop

Slavin Liu <[email protected]>
iio: adc: pac1934: check ACPI label duplication

Cong Nguyen <[email protected]>
iio: adc: max1363: sign-extend bipolar differential channel reads

Vladyslav Ivashchenko <[email protected]>
iio: adc: axp288: Add TS bias override for Haier HV103H

Pengpeng Hou <[email protected]>
iio: adc: aspeed: propagate reset deassert errors

Janani Sunil <[email protected]>
iio: adc: adi-axi-adc: Initialize state mutex

Antoniu Miclaus <[email protected]>
iio: adc: ade9000: request interrupts after powering the device

Antoniu Miclaus <[email protected]>
iio: adc: ade9000: handle Phase C dip events in IRQ1 handler

Antoniu Miclaus <[email protected]>
iio: adc: ade9000: fix overlapping scan_index for current and voltage channels

Linmao Li <[email protected]>
iio: adc: ade9000: fix NULL pointer dereference in clkout registration

Fan Wu <[email protected]>
iio: adc: ad_sigma_delta: fix use-after-free on unbind

Marcelo Schmitt <[email protected]>
iio: adc: ad7173: Fix digital filter configuration

Salah Triki <[email protected]>
iio: adc: ad4030: fix invalid oversampling_ratio validation

Salah Triki <[email protected]>
iio: accel: sca3000: fix frequency divider condition check

Jiale Yao <[email protected]>
iio: accel: kxcjk-1013: reject duplicate event disable

Matti Vaittinen <[email protected]>
iio: accel: kionix-kx022a: Prevent memory leak and fix state

Frank Sorenson <[email protected]>
smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races

Paulo Alcantara <[email protected]>
smb: client: require stable pages for signed connections

Paulo Alcantara <[email protected]>
smb: client: drain and invalidate before server-side copy/clone

Paulo Alcantara <[email protected]>
smb: client: distinguish real EOF from a stale remote_i_size on read

Paulo Alcantara <[email protected]>
smb: client: flush dirty data before zeroing a range

Paulo Alcantara <[email protected]>
smb: client: only require read lease for size-extending zero range

Paulo Alcantara <[email protected]>
smb: client: flush and commit data before querying allocated ranges

Paulo Alcantara <[email protected]>
smb: client: discard post-EOF pagecache when extending a file via clone range

Paulo Alcantara <[email protected]>
smb: client: discard post-EOF pagecache when extending a file via copy range

Paulo Alcantara <[email protected]>
smb: client: discard post-EOF pagecache when extending a file via zero range

Daehyeon Ko <[email protected]>
thunderbolt: Reject oversized XDomain properties responses

Kurt Lieber <[email protected]>
thunderbolt: Disable CL states for the Anker Prime TB5 dock

Fedor Pchelkin <[email protected]>
thunderbolt: Fix NULL dereference in tb_remove_work()

Sven Peter <[email protected]>
thunderbolt: Don't access a DP tunnel after its DPRX read was canceled

Sven Peter <[email protected]>
thunderbolt: Fix domain reference leak when DPRX read is canceled

Sven Peter <[email protected]>
thunderbolt: Tear down inactive DP tunnels when the domain is stopped

Sven Peter <[email protected]>
thunderbolt: Mark discovered tunnels as active

Sven Peter <[email protected]>
thunderbolt: Make the DP tunnel activation callback mandatory

Sven Peter <[email protected]>
thunderbolt: Hold a router reference for each allocated HopID

Mika Westerberg <[email protected]>
thunderbolt: Fix KASAN reported use-after-free when request is canceled

Ian Lin <[email protected]>
USB: serial: option: add Compal EXC-T1 support

Sebastian Sjoholm <[email protected]>
USB: serial: option: add Quectel RG660QB

Ian Lin <[email protected]>
USB: serial: option: add Compal EXM-G1x support

Carlo Szelinsky <[email protected]>
USB: serial: option: add Quectel EG060W

Zhao Dongdong <[email protected]>
USB: serial: option: add support for SIMCom SIM8260C

Johan Hovold <[email protected]>
USB: serial: fix ioctl hangup race

Johan Hovold <[email protected]>
USB: serial: fix driver deregistration order

Johan Hovold <[email protected]>
USB: serial: fix dynamic id driver deregistration race

Johan Hovold <[email protected]>
USB: serial: ssu100: fix baud rate overflow

Johan Hovold <[email protected]>
USB: serial: quatech2: fix baud rate overflow

Jérémy Carrat <[email protected]>

    USB: serial: cp210x: add Corsair AX1500i Power Supply

Yuqi Xu <[email protected]>
wifi: mac80211: handle empty FILS association request payload

Zihan Xi <[email protected]>
wifi: mac80211: fix mesh fast xmit path deletion UAF

Felix Fietkau <[email protected]>

    wifi: mac80211: set info->band for 802.3 encap offload frames

Zhao Li <[email protected]>
wifi: mac80211: release mesh path quota on failed additions

Ruide Cao <[email protected]>
wifi: mac80211: reject invalid 320 MHz CSA bandwidth

Yuqi Xu <[email protected]>
wifi: mac80211: minstrel_ht: validate fixed rate index

Zhao Li <[email protected]>
wifi: mac80211: keep fallback association elements alive

Zhao Li <[email protected]>
wifi: mac80211: account proxy paths against the mesh path limit

Zhao Li <[email protected]>
wifi: mac80211: drain PS delivery work during station teardown

Zhao Li <[email protected]>
wifi: mac80211: shut down RX BA session timer on teardown

Zhiling Zou <[email protected]>
wifi: mac80211: keep paired old chanctx alive

Zhiling Zou <[email protected]>
wifi: mac80211: count only matching reservations in reserved switch

Guangshuo Li <[email protected]>
wifi: iwlegacy: 3945: free EEPROM data on remove

Tianchu Chen <[email protected]>
wifi: cw1200: fix TX padding OOB read leaking heap data to device

Stanislaw Gruszka <[email protected]>
wifi: cfg80211: fix RTS threshold setting for single-radio PHY

Mostafa Saleh <[email protected]>
KVM: arm64: Use stage-1 leaf size for VM_PFNMAP

Marc Zyngier <[email protected]>
KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor

Marc Zyngier <[email protected]>
KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq

Marc Zyngier <[email protected]>
KVM: arm64: vgic: Allow last_lr_irq to be NULL when LRs are not overflowing

Fuad Tabba <[email protected]>
KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT

Fuad Tabba <[email protected]>
KVM: arm64: Clear HCR_EL2.RW for 32-bit non-protected vCPUs

Sean Christopherson <[email protected]>
KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded

Sean Christopherson <[email protected]>
KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN

Sean Christopherson <[email protected]>
KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted

Sean Christopherson <[email protected]>
KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy

Sean Christopherson <[email protected]>
KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state

Sean Christopherson <[email protected]>
KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it

Sean Christopherson <[email protected]>
KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified

Sagnik Sasmal <[email protected]>
mtd: spinand: Do not update the QE bit on devices without one

Nuno Sá <[email protected]>
mtd: spinand: fix zero oobavail when no ECC engine is used

Nuno Sá <[email protected]>
mtd: spinand: fix NULL pointer dereference with no ECC engine

Han Xu <[email protected]>
mtd: spinand: Enable QE on all dies

Runyu Xiao <[email protected]>
mtd: spi-nor: core: Fix mutex leak in spi_nor_rww_start_exclusive()

Mehmet Fide <[email protected]>
mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB

Runyu Xiao <[email protected]>
mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ

Menachem Adin <[email protected]>
mtd: mtd_intel_dg: reset poll counter for each erase

Pei Xiao <[email protected]>
mtd: block2mtd: Fix divide error when erase_size is zero

Guixin Liu <[email protected]>
nvmet: copy the hostid into the ctrl before creating PR pc_refs

Daehyeon Ko <[email protected]>
nvmet: pci-epf: reject too-short SGL segments

Weiming Shi <[email protected]>
nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()

Bean Huo <[email protected]>
nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT

Daehyeon Ko <[email protected]>
nvme-multipath: fix underflow in ANA log bounds checks

Guixin Liu <[email protected]>
nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known

Jiangshan Yi <[email protected]>
tpm: fix off-by-four bounds check in tpm2_get_random()

Mikhail Gavrilov <[email protected]>
x86/mm: Drop unnecessary PMD page copy when freeing

Laurent Wandrebeck <[email protected]>
x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h

Chandrashekar Devegowda <[email protected]>
Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()

Chandrashekar Devegowda <[email protected]>
Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()

Chandrashekar Devegowda <[email protected]>
Bluetooth: btintel: fix buffer over-read in btintel_hw_error()

Chengfeng Ye <[email protected]>
Bluetooth: hci_core: Serialize fragmented ISO packet queueing

Chengfeng Ye <[email protected]>
Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown

Chengfeng Ye <[email protected]>
Bluetooth: hci_core: Serialize ACL scheduling with channel deletion

Linmao Li <[email protected]>
Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems

Chengfeng Ye <[email protected]>
Bluetooth: hci_conn: Lock parent access during enhanced SCO setup

Chengfeng Ye <[email protected]>
Bluetooth: hci_sync: Fix inquiry cache use-after-free

Chengfeng Ye <[email protected]>
Bluetooth: Serialize SMP remote OOB data access

Chengfeng Ye <[email protected]>
Bluetooth: RFCOMM: Fix initial port reference race

Abdurrahman Hussain <[email protected]>

    i2c: xiic: don't clobber msg->len to signal block-read completion

Abdurrahman Hussain <[email protected]>
i2c: xiic: defer RX_FULL until all trailing bytes are in FIFO

Abdurrahman Hussain <[email protected]>
i2c: xiic: preserve PEC byte length in SMBus block read setup

Rounak Das <[email protected]>
EDAC/altera: Fix device node reference leaks in the SDMMC ECC setup

Dinh Nguyen <[email protected]>
EDAC/altera: Fix use-after-free in error paths

Dinh Nguyen <[email protected]>
EDAC/altera: Fix memory leak on dci allocation failure

Dinh Nguyen <[email protected]>
EDAC/altera: Drop __init from ECC setup paths for re-probe safety

Dinh Nguyen <[email protected]>
EDAC/altera: Do not allow driver unbinding

Guangshuo Li <[email protected]>
EDAC/versalnet: Drop remote processor handle refcount on driver removal

Jakub Gawlik <[email protected]>
ALSA: hda/realtek: Add micmute LED quirk for Acer Swift SFG16-72

Yu-Hsiang Tseng <[email protected]>
ALSA: hda/realtek: Fix silent speaker on Higole F9B

Zhang Heng <[email protected]>
ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR

Xiang Mei <[email protected]>
ALSA: ua101: reject mismatched capture/playback packet sizes

Kyle Zeng <[email protected]>
ALSA: seq: Serialize compat port-info ioctls

Aaron Kling <[email protected]>
ALSA: hda/tegra: Re-enable SDO workaround for Tegra194

Zimeng Li <[email protected]>
ASoC: qcom: lpass-cpu: use DAI table index for playback constraints

Jiangshan Yi <[email protected]>

    ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type

Jiangshan Yi <[email protected]>

    ASoC: codecs: max98363: fix uninitialized stream_config->type

Liviu Nicoara <[email protected]>
ASoC: codecs: lpass-wsa-macro: rewrite the interpolator volume after enabling clocks

Andrea Parri <[email protected]>
arm64: mm: Fix the break-before-make flush range for erratum 2645198

Mark Rutland <[email protected]>
arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems

Paul Mbewe <[email protected]>
serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL

Paul Mbewe <[email protected]>
serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around

Wentao Liang <[email protected]>
serial: vt8500: Fix clock reference leak in vt8500_serial_probe()

Simon Gassner <[email protected]>
serial: tegra: don't clear the Tx FIFO on an Rx-only reset

Wentao Liang <[email protected]>
serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()

Johan Hovold <[email protected]>
serial: fix TIOCMIWAIT race

Johan Hovold <[email protected]>
serial: fix ioctl hangup race

Johan Hovold <[email protected]>
serial: revert guards in uart_wait_modem_status()

Ruslan Valiyev <[email protected]>
serial: core: fix NULL pointer dereference in serial_core_unregister_port()

Johan Hovold <[email protected]>
serial: abort TIOCMIWAIT on hangup

Kendall Willis <[email protected]>
serial: 8250_omap: fix wake irq cleared during suspend

Fan Wu <[email protected]>

    serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()

Ian Rogers <[email protected]>
perf: Replace perf_event_header__init_id with full header init

Fan Wu <[email protected]>
tty: serial: max3100: shut down timer before freeing port

Johan Hovold <[email protected]>
tty: fix saved termios reset race

Johan Hovold <[email protected]>
tty: abort break signalling on hangup

Viken Dadhaniya <[email protected]>
tty: serial: qcom_geni_serial: Keep console RX functional after deep idle

Johan Hovold <[email protected]>
tty: port: fix tty_port_tty_vhangup() race

Johan Hovold <[email protected]>
tty: tty_port: restore TTY_IO_ERROR on activation failure

Daniel Starke <[email protected]>
tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2

Joshua Rogers <[email protected]>
tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup

Joshua Rogers <[email protected]>
tty: vcc: zero-initialize control packet in vcc_send_ctl()

Johan Hovold <[email protected]>
tty: amiserial: fix broken TIOCMIWAIT

Mingyu Wang <[email protected]>
tty: vt: fix memory leak in vc_allocate()

Jie Deng <[email protected]>
usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe

Fan Wu <[email protected]>
usb: cdns3: fix use-after-free in cdns3_gadget_exit()

Jameson Thies <[email protected]>
usb: typec: ucsi: displayport: Current CAM OOB index fixup

Prashanth K <[email protected]>
usb: typec: ucsi: Get the connector fwnode based on reg value

Pannarat Wiriyaarritham <[email protected]>
usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41

Fan Wu <[email protected]>
usb: typec: ucsi: glink: fix use-after-free of ucsi on remove

Radhey Shyam Pandey <[email protected]>
usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()

Radhey Shyam Pandey <[email protected]>
usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()

Marian Rotariu <[email protected]>
usb: typec: tipd: don't send GAID when probe fails in APP mode

Amit Sunil Dhamne <[email protected]>
usb: typec: tcpm: recover after failure to start the frs ams

Runyu Xiao <[email protected]>
USB: dwc2: shut down wakeup timer before freeing HCD state

Hui Peng <[email protected]>
usb: core: clear both ep_in and ep_out for non-ep0 control endpoints

Myeonghun Pak <[email protected]>
usb: chipidea: tegra: disable runtime PM on resume failure

Yuchao Zhang <[email protected]>
usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC

Alan Stern <[email protected]>
USB: gadget: dummy-hcd: Fix wait for outstanding request completions

Fan Wu <[email protected]>
usb: gadget: aspeed-vhub: cancel wake work on device removal

Jiazi Liu <[email protected]>
usb: dwc3: gadget: fix IRQ storm on invalid event buffer count

Radhey Shyam Pandey <[email protected]>
usb: dwc3: am62: Fix runtime PM usage count leak on probe error path

Marek Maslanka <[email protected]>
usb: typec: port-mapper: Only match USB4 port if host interface is available

Linkai Gong <[email protected]>
usb: typec: anx7411 - stop the IRQ before destroying the workqueue

Liu Chao <[email protected]>
usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd

Takashi Iwai <[email protected]>
usb: gadget: midi2: Fix the jack descriptor array sizes

Myeonghun Pak <[email protected]>
usb: ohci-st: disable controller wakeup on removal

Myeonghun Pak <[email protected]>
usb: ohci-spear: disable controller wakeup on removal

Myeonghun Pak <[email protected]>
usb: ohci-s3c2410: disable controller wakeup on removal

Myeonghun Pak <[email protected]>
usb: ohci-da8xx: disable controller wakeup on cleanup

Orgad Shaneh <[email protected]>
usb: octeon-hcd: fix the FIFO-flush timeout computation

Lovekesh Solanki <[email protected]>
usb: hub: use shorter 120ms post resume hold for SS root hubs

Syed Labeeq Sajid Bukhari <[email protected]>
usb: storage: sierra_ms: reject short SWoC info transfers

Johan Hovold <[email protected]>
USB: serial: fix port tear down use-after-free

Yuchao Zhang <[email protected]>
USB: cdc-acm: skip URB restart in port_shutdown if disconnected

Johan Hovold <[email protected]>
USB: cdc-acm: fix racy TIOCMIWAIT implementation

Viken Dadhaniya <[email protected]>
soc: qcom: geni-se: Correct QUP Core ICC vote constants

Alice Ryhl <[email protected]>
rust_binder: reschedule node refcount update on thread exit

Alice Ryhl <[email protected]>
rust_binder: cancel deferred work items in thread exit

Yuxiao Wang <[email protected]>
nitro_enclaves: fix use-after-free on SLOT_ALLOC failure

Raphaël Larocque <[email protected]>
Input: synaptics - limit T440p InterTouch quirk to LEN0036

Lovekesh Solanki <[email protected]>
Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490

David Heidelberg <[email protected]>
Input: s6sy761 - fix resume ordering and restore sensing

Lovekesh Solanki <[email protected]>
Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410

Martino Papero <[email protected]>
Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11

Wentao Liang <[email protected]>
kgdboc: Fix tty driver reference leak in configure_kgdboc()

Karl Mehltretter <[email protected]>
hrtimer: Use the mask to clear TIF_HRTIMER_REARM from the exit work

Troy Mitchell <[email protected]>
clk: spacemit: k3: add CPU PLL rate tables

Peiyang He <[email protected]>
binderfs: fix UAF write in binder_add_device

Tomer Pomeranc <[email protected]>
binder: fix leaked fd fixups on TF_UPDATE_TXN supersede

Tomer Pomeranc <[email protected]>
binder: fix is_failure flag for superseded transaction cleanup

Theo Andersen Carton <[email protected]>
drm/amdgpu: skip the noirq suspend reset for a switcheroo-parked GPU

Guangshuo Li <[email protected]>
drm/amdgpu: fix ACP MFD device leak on init failure

Alex Deucher <[email protected]>
drm/amdgpu: drop userq callback assignment for sdma 7.1

Pierre-Eric Pelloux-Prayer <[email protected]>
drm/amdgpu: implement workaround for sdma dcc corruption

Guangshuo Li <[email protected]>
drm/amdgpu: fix IP instance memory leak on kobject add failure

Wentao Liang <[email protected]>
drm/mediatek: Fix pdev reference leak in mtk_drm_bind()

Guangshuo Li <[email protected]>
drm/mediatek: Fix ovl adaptor platform device leak

Haojie Li <[email protected]>
drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device

Imre Kaloz <[email protected]>
drm/radeon: Read the VRAM VBIOS signature with readb()

Mitul Golani <[email protected]>
drm/i915/vrr: Disable DC balance by default

Alex Deucher <[email protected]>
drm/amdgpu/gmc12: properly pass flush_type to gmc_v12_0_flush_vm_hub()

Alex Deucher <[email protected]>
drm/amdgpu/gmc12.1: properly pass flush_type to gmc_v12_1_flush_vm_hub()

Willian Oliveira <[email protected]>
drm/amdgpu/gfx6: fix firmware leak on teardown

Timur Kristóf <[email protected]>
drm/amd/pm/si: Fix updating clock limits on AC/DC

Timur Kristóf <[email protected]>
drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC

Timur Kristóf <[email protected]>
drm/amd/display: Mark DCE 6.4 as not APU

Simon Polack <[email protected]>
drm/amd/display: Fix stale replay_events after mod_power stream removal

Timur Kristóf <[email protected]>
drm/amd/display: Fix fast updates on DCE 8.1

Timur Kristóf <[email protected]>
drm/amd/display: Fix fast updates on DCE 6.x

Jiangshan Yi <[email protected]>
drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend

Arthur Heymans <[email protected]>
drm/amd/display: Preserve eDP mode on initial ASSR failure

Hari Mishal <[email protected]>
drm/amd/display: guard dc_sink dereferences in MST mode validation

Nikola Prica <[email protected]>
PCI: Accept AtomicOps already enabled by the hypervisor

Ömer Mete Kaya <[email protected]>
bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()

Chris Mason <[email protected]>
futex: Fix private hash use-after-free on resize

Wentao Liang <[email protected]>
drm/mediatek: Fix runtime PM leak in mtk_hdmi_ddc_v2_probe()

Alexei Starovoitov <[email protected]>
bpf: Fix objects stuck in free_by_rcu_ttrace

Alexei Starovoitov <[email protected]>
bpf: Factor out __do_call_rcu_ttrace()

Richard Fitzgerald <[email protected]>
spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260

Takashi Iwai <[email protected]>
ALSA: ice1712: Fix the error handling via auto-cleanup at probe

Takashi Iwai <[email protected]>
ALSA: core: Define auto-cleanup for snd_card_free()

Luo Gengkun <[email protected]>
perf: Fix race between perf_event_exit_task() and perf_pending_task()

Hongjian Dai <[email protected]>
i2c: at91: release DMA channels when probe defers

Lorenzo Bianconi <[email protected]>
net: mvneta: clear XDP pfmemalloc flag between frames

Eric Dumazet <[email protected]>
ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()

Prathamesh Deshpande <[email protected]>
net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference

Quentin Freimanis <[email protected]>
net: sparx5: make ports inherit the switch base mac address type

Yuho Choi <[email protected]>
of: Put coreboot node after compatibility check

Harshit Mogalapalli <[email protected]>
net: microchip: vcap: stop scanning after deleting key field

Pablo Neira Ayuso <[email protected]>
netfilter: flowtable: generalize pending status bit

Fernando Fernandez Mancera <[email protected]>
netfilter: bpf: reject invalid NAT manipulation types

Julian Anastasov <[email protected]>
ipvs: filter some flags received in the backup server

Julian Anastasov <[email protected]>
ipvs: do not create invisible templates

Julian Anastasov <[email protected]>
ipvs: fix missing counter decrement in lblc

Jeff Jo <[email protected]>
tcp: refresh TS.Recent for accepted old ACKs

Quentin Freimanis <[email protected]>
net: sparx5: skip ptp deinit if init was skipped

Yongzhao Chen <[email protected]>
net: phy: qcom: at803x: Fix IPQ5018 short-cable DAC values

Sandeep Haemoon <[email protected]>
net: ethernet: mtk_eth_soc: allocate dummy netdev sooner

Jamal Hadi Salim <[email protected]>

    net: cap skb->queue_mapping when the tx queue is picked

Nicolai Buchwitz <[email protected]>
net: bcmgenet: fix NULL dereference in set_coalesce before first open

Yoshihisa Yamamoto <[email protected]>
net: pcs: rzn1-miic: Clear MIIC protection state before unprotect sequence

Niklas Cassel <[email protected]>
virtio_blk: set the zone write granularity

Takashi Iwai <[email protected]>
ALSA: usb-audio: Apply boot quirk for Behringer models generically

Sebastian Dalfuß <[email protected]>
ALSA: usb-audio: Add boot quirk for Behringer CM1A

Jamal Hadi Salim <[email protected]>
net/sched: sch_codel: match the no-drop threshold to the packet size

Jamal Hadi Salim <[email protected]>
net/sched: fq_codel: match the no-drop threshold to the packet size

Hannu Varjoranta <[email protected]>
gve: DQO: accept TSO packets with non-protocol gso_type bits

Florent Revest (Anthropic) <[email protected]>
bpf: Skip detached progs in trampoline images that are still in use

Florent Revest (Anthropic) <[email protected]>
bpf: Wait for an RCU tasks grace period before freeing trampoline progs

Eric Dumazet <[email protected]>
net: restrict SO_RESERVE_MEM to TCP sockets and cap max value

Nicolai Buchwitz <[email protected]>
net: ethtool: let tsconfig reach a PHY-only timestamp provider

Andrea Mayer <[email protected]>
seg6: ensure packet data is writable before modifying SRH and IPv6 DA

Lorenzo Bianconi <[email protected]>
net: stmmac: fix rx Scatter-Gather support

Mina Almasry <[email protected]>
net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()

Jérémy Jean <[email protected]>
tipc: prevent GCM nonce reuse on peer key changes

Baha Mesleh <[email protected]>
octeontx2-af: mcs: Fix SC resource cleanup loop

Geetha sowjanya <[email protected]>
octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled

Anirudh Virdi <[email protected]>
net/mlx5: Fix slab-out-of-bounds when handling team device events

Florian Fainelli <[email protected]>
net: systemport: Fix RUNT MIB counter register offset calculation

Florian Fainelli <[email protected]>
net: systemport: Fix buffer overflow in bcm_sysport_get_stats()

Julien Stephan <[email protected]>
drm/mediatek: mtk_hdmi_v2: fix VID_DOWNSAMPLE_CONFIG register offset

Nguyen Ngoc Thang <[email protected]>
Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister

Marcin Bernatowicz <[email protected]>
drm/xe/pf: Keep VF LMEM BAR size low if no VFs enabled

Michal Wajdeczko <[email protected]>
drm/xe/pf: Refactor VF LMEM BAR resize helper function

Kailang Yang <[email protected]>
ALSA: hda/realtek - Add headset mode for Dell Pro QC1255

Cen Zhang (Microsoft) <[email protected]>

    wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()

Florian Westphal <[email protected]>
netfilter: ipset: do not update comments from kernel-side adds

Qishuai Liu <[email protected]>
ipv6: fix prefix route expiry in modify_prefix_route()

Nicolai Buchwitz <[email protected]>
net: bcmgenet: allocate RX buffers as page fragments

Jamal Hadi Salim <[email protected]>
net/sched: cls_api: reclaim an empty proto on the error path

Binbin Deng <[email protected]>
net/mctp: publish the mctp_dev only after it is initialised

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Hold map BTF for the memory allocator destructor record

Yao Sang <[email protected]>
nvme: fix command effects log lifetime for multipath heads

Arnd Bergmann <[email protected]>
nvme: work around -Wformat-security warning

John Garry <[email protected]>
nvme: fix cdev lifetime

John Garry <[email protected]>
nvme: add nvme_get_ns_head()

Vineet Gupta <[email protected]>
ARC: arch_cmpxchg_relaxed to use size of pointed type not pointer

Alexei Starovoitov <[email protected]>
bpf: Fix overflow of jump offset in constant blinding

Arnd Bergmann <[email protected]>

    drbd: remove unused drbd_nl_mcgrps[] array

Maciej Strozek <[email protected]>
ASoC: SDCA: Add better pm_runtime error handling in func probe

Maciej Strozek <[email protected]>
ASoC: SDCA: Set suspended flag after resuming within system suspend

Oleg Keri <[email protected]>
arm64: topology: fix arch_freq_get_on_cpu() overflow above 4.19 GHz

Harry Yoo (Meta) <[email protected]>
mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()

Harry Yoo (Oracle) <[email protected]>
mm/slab: handle the !allow_spin case in kfree_rcu_sheaf()

Sai Teja Aluvala <[email protected]>
Bluetooth: btintel: validate DDC record lengths

Sang-Hoon Choi <[email protected]>
Bluetooth: hci_core: free the HCI ID if naming fails

Keith Busch <[email protected]>
blk-mq: set RQF_USE_SCHED when the operation is known

Yang Xiuwei <[email protected]>
block: reject polled dio with user integrity metadata

Cezary Rojewski <[email protected]>
ASoC: codecs: rt274: Fix format setting for 44100 rate

Cezary Rojewski <[email protected]>
ASoC: codecs: rt286: Revert delay value for jack setup

Felix Fietkau <[email protected]>
wifi: mac80211: prevent AP VLAN tx from other interfaces

Zhao Li <[email protected]>
wifi: cfg80211: preserve hidden-group beacon IE ownership

Yuqi Xu <[email protected]>
wifi: mac80211: validate TX status rate metadata

Manush Prajwal <[email protected]>
rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()

Aamir Ahmed <[email protected]>
rtc: ac100: Fix clock provider use-after-free on probe failure

Liu Dalin <[email protected]>
rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak

Georgios Karantzas <[email protected]>
wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE

Pengpeng Hou <[email protected]>
wifi: ath9k: reject short WMI command responses

Toke Høiland-Jørgensen <[email protected]>
wifi: ath9k: Clean up device initialisation guards

Nicolas Escande <[email protected]>

    wifi: ath11k: reset ar->num_stations on hardware start

Yuchao Zhang <[email protected]>
wifi: mac80211: drop oversized fragments to avoid extra_len overflow

Sheetal <[email protected]>
ASoC: tegra: Fix ASRC Stream6 input threshold control

Aamir Ahmed <[email protected]>
wifi: wfx: validate MIB read length before copying to caller

HyeongJun An <[email protected]>
ASoC: wm8903: Move the DRC QR threshold to the register that holds it

Abdurrahman Hussain <[email protected]>
of/overlay: don't create "//" paths for fragments targeting the root

Abdurrahman Hussain <[email protected]>
of/overlay: don't leak fragment references when changeset init fails

Karl Mehltretter <[email protected]>
random: fix vgetrandom_opaque_params kernel-doc

Hao Zhang <[email protected]>
blk-cgroup: save IRQ state in blkg_tryget_closest()

Julian Sun <[email protected]>
nvmet: preserve device path on allocation failure

Karl Mehltretter <[email protected]>
mtd: core: call _get_device() with the master MTD

Karl Mehltretter <[email protected]>
mtd: core: avoid double-free of OTP NVMEM device

Matti Vaittinen <[email protected]>
iio: accel: kionix-kx022a: Fix array boundary check

Matti Vaittinen <[email protected]>
iio: light: rohm-bu27034: Fix error return

Matti Vaittinen <[email protected]>
iio: dac: rohm-bd79703: Do not allow writing SCALE

Alberto Garcia <[email protected]>
ext4: don't enable large folios on encrypted inodes

Xiang Mei <[email protected]>
ALSA: line6: reject oversized playback packets

Harin Lee <[email protected]>
ALSA: ctxfi: Fix silent playback on Titanium HD (SB1270)

Nguyen Ngoc Thang <[email protected]>
ALSA: caiaq: unregister the input device when probe fails

Wentao Liang <[email protected]>
wifi: wlcore: Fix runtime PM leak in wlcore_remove()

Zizhi Wo <[email protected]>
vt: skip screen update for DEC alignment test on backgroup consoles

Hui Peng <[email protected]>
vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()

Yi Yang <[email protected]>
vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF

Baolin Wang <[email protected]>
mm: shmem: ignore sysfs configs for shmem forced collapse

Lorenzo Stoakes (ARM) <[email protected]>
mm/vma: predicate setting mmap_prepare VMA fields on new vma alloc

SJ Park <[email protected]>
mm/damon/core: don't skip damos_adjust_quota() while esz is not zero

Zhichen Wang <[email protected]>
virt: vmgenid: set driver_data before registering notification handlers

Vitaly Kuznetsov <[email protected]>
virt: vmgenid: remap memory as decrypted

Hao Ge <[email protected]>
module: fix lost error code from codetag_load_module()

Paulo Alcantara <[email protected]>
netfs: zero the tail of a short DIO/unbuffered read

Paulo Alcantara <[email protected]>
netfs: zero gaps in read-gaps folio to avoid writing back stale data

Paulo Alcantara <[email protected]>
netfs: clear post-EOF pagecache when extending a file via write

Surendran Kanagaraj <[email protected]>
tpm: Disable TPM on null key name mismatch

Zhan Xusheng <[email protected]>
time/jiffies: Saturate in mult_hz() instead of wrapping

Zhan Xusheng <[email protected]>
sysctl: Negate before converting in the int read path

Jun Yang <[email protected]>
sctp: check RCV_SHUTDOWN after the sendmsg connect wait

Runyu Xiao <[email protected]>
rtc: spear: initialize IRQ state before requesting alarm IRQ

Aamir Ahmed <[email protected]>
rtc: ac100: Assign .num before accessing .hws

Nathan Chancellor <[email protected]>
random: vDSO: avoid call to memset() when zeroing reserved parameter

Oleksij Rempel <[email protected]>

    r8169: disable EEE on RTL8168h/8111h

Xuanqiang Luo <[email protected]>
pfcp: fix socket lifetime on netdevice registration failure

Ilkka Lappeteläinen <[email protected]>
net/packet: prevent TX_RING byte count overflow

Aohan Mei <[email protected]>
netfilter: nft_flow_offload: drop flowtable reference on init error path

Bartosz Golaszewski <[email protected]>
net: phy: aquantia: fix system interface type not updated in forced mode

Alireza Asgari <[email protected]>
net: fix checksum offsets in skb_splice_from_iter()

Willem de Bruijn <[email protected]>
net: extend IPv6 exthdr detection of tunneled packets

Zihan Xi <[email protected]>
net: gso: limit recursive IP-in-IP segmentation

Abdurrahman Hussain <[email protected]>
of/overlay: only treat a positive changeset id as registered

Abdurrahman Hussain <[email protected]>
of/overlay: put property on deadprops only after changeset add succeeds

Wentao Liang <[email protected]>
of/irq: Fix remaining refcount leaks in of_irq_init()

Jari Seppälä <[email protected]>
octeontx2-pf: Fix RSS indirection table size

Leon Hwang <[email protected]>
kprobes: Skip disarmed probes when checking optkprobe overlap

Andrey Ryabinin <[email protected]>
kasan: unpoison task stack below watermark only in generic mode

Zhiling Zou <[email protected]>
ipvs: bound LBLCR and LBLC cache growth

Jens Axboe <[email protected]>
io_uring: fix task_work add use-after-free with SQPOLL

Junyuan Feng <[email protected]>
io_uring/zcrx: requeue multishot receives stopped by a local resource

lollipopkit <[email protected]>
io_uring/cmd_net: end TX_TIMESTAMP multishot when the CQ is full

Aldo Ariel Panzardo <[email protected]>
HID: multitouch: stop the release timer from being rearmed on remove

Benjamin Tissoires <[email protected]>
HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request

Masami Hiramatsu (Google) <[email protected]>
fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()

Mohamad Raizudeen <[email protected]>
crypto: x86/aes-gcm - fix always true check for last AAD segment

Jérémy Jean <[email protected]>
audit: fix exe mark UAF in kill_rules()

Takashi Iwai <[email protected]>
ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices

Sean Christopherson <[email protected]>
KVM: x86: Fill kvm_run exit fields in common get_nested_state_pages() error paths

Tibor Harcsa <[email protected]>
Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table

Richard Fitzgerald <[email protected]>
ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture

Sean Christopherson <[email protected]>
KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails

Tejun Heo <[email protected]>
sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task

fangqiurong <[email protected]>
sched_ext: Don't run ops.dequeue() with a DSQ lock held

Tejun Heo <[email protected]>
sched_ext: Add a size argument to scx_bpf_cid_topo() so struct scx_cid_topo can grow

Tejun Heo <[email protected]>
sched_ext: Build the cid tables privately and publish them with RCU

Chen Yu <[email protected]>
sched/cache: Skip kernel threads for cache aware scheduling to rubustify the code

Tim Chen <[email protected]>

    sched/cache: Introduce task_struct->sched_cache_grp to fix UAF

Lu Wang <[email protected]>
sched/cache: Honor migrate_llc_task semantics in active load balance, to fix LLC mis-scheduling bug

Tim Chen <[email protected]>
sched/cache: Keep nr_pref_llc_running in the runnable domain, to fix LLC mis-scheduling bug

Tim Chen <[email protected]>
sched/fair: Avoid creating misfits during cache-aware balancing

Joshua Hahn <[email protected]>
selftests/cgroup: account for zswap shrinker writeback

Heikki Krogerus <[email protected]>
drm/xe/i2c: Keep the i2c controller always enabled

Bryam Vargas <[email protected]>
dm-pcache: bound the logical key offset from persistent memory

Bryam Vargas <[email protected]>
dm-pcache: reject a kset that overruns its segment

-------------

Diffstat:

 Documentation/arch/arm64/silicon-errata.rst        |   2 +
 Documentation/filesystems/netfs_library.rst        |  26 ++
 Makefile                                           |   4 +-
 arch/arc/include/asm/atomic64-arcv2.h              |   6 +
 arch/arc/include/asm/cmpxchg.h                     |   4 +-
 arch/arm64/Kconfig                                 |  30 ++
 arch/arm64/kernel/cpu_errata.c                     |  24 +-
 arch/arm64/kernel/cpufeature.c                     |   2 +-
 arch/arm64/kernel/signal.c                         |  34 +-
 arch/arm64/kernel/topology.c                       |  17 +-
 arch/arm64/kernel/vdso/Makefile                    |   2 +-
 arch/arm64/kvm/emulate-nested.c                    |   3 -
 arch/arm64/kvm/hyp/nvhe/pkvm.c                     |   9 +
 arch/arm64/kvm/mmu.c                               |  47 +--
 arch/arm64/kvm/vgic/vgic-its.c                     |  12 +-
 arch/arm64/kvm/vgic/vgic-v2.c                      |   6 +-
 arch/arm64/kvm/vgic/vgic-v3.c                      |   6 +-
 arch/arm64/kvm/vgic/vgic.c                         |  21 +-
 arch/arm64/mm/mmu.c                                |   2 +-
 arch/arm64/net/bpf_jit_comp.c                      |  37 +-
 arch/arm64/tools/cpucaps                           |   2 +-
 arch/loongarch/net/bpf_jit.c                       |  60 ++--
 arch/loongarch/vdso/Makefile                       |   1 +
 arch/powerpc/kernel/vdso/Makefile                  |   1 +
 arch/powerpc/net/bpf_jit_comp.c                    |  45 +--
 arch/powerpc/perf/imc-pmu.c                        |  23 +-
 arch/riscv/kernel/vdso/Makefile                    |   1 +
 arch/riscv/net/bpf_jit_comp64.c                    |  56 +++-
 arch/s390/kernel/vdso/Makefile                     |   1 +
 arch/s390/net/bpf_jit_comp.c                       |  46 ++-
 arch/x86/crypto/aesni-intel_glue.c                 |   2 +-
 arch/x86/entry/vdso/vdso64/Makefile                |   2 +-
 arch/x86/kernel/sys_x86_64.c                       |  15 +-
 arch/x86/kvm/mmu/mmu.c                             |   6 +
 arch/x86/kvm/svm/nested.c                          |   7 +-
 arch/x86/kvm/svm/sev.c                             |  46 ++-
 arch/x86/kvm/svm/svm.c                             |  38 +--
 arch/x86/kvm/svm/svm.h                             |   1 +
 arch/x86/kvm/vmx/nested.c                          |  21 +-
 arch/x86/kvm/x86.c                                 |   4 +
 arch/x86/mm/pgtable.c                              |  38 +--
 arch/x86/net/bpf_jit_comp.c                        |  26 +-
 block/blk-cgroup.c                                 |   5 +-
 block/blk-mq.c                                     |  59 ++--
 block/fops.c                                       |   5 +
 block/mq-deadline.c                                |   2 +-
 drivers/android/binder.c                           |   3 +-
 drivers/android/binder/node.rs                     |  20 +-
 drivers/android/binder/node/wrapper.rs             |  34 +-
 drivers/android/binder/thread.rs                   |   8 +-
 drivers/android/binderfs.c                         |   3 +-
 drivers/block/drbd/drbd_nl_gen.c                   |   4 -
 drivers/block/virtio_blk.c                         |   1 +
 drivers/bluetooth/btintel.c                        |  15 +-
 drivers/bluetooth/btintel_pcie.c                   |  12 +-
 drivers/bluetooth/btusb.c                          |   2 +
 drivers/char/tpm/tpm2-cmd.c                        |   2 +-
 drivers/char/tpm/tpm2-sessions.c                   |   1 +
 drivers/clk/spacemit/ccu-k3.c                      |  92 +++++
 drivers/edac/altera_edac.c                         |  67 ++--
 drivers/edac/versalnet_edac.c                      |   1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c            |  13 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c      |   2 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c            |   8 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |   8 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c              |   9 +
 drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c             |   2 +-
 drivers/gpu/drm/amd/amdgpu/gmc_v12_1.c             |   2 +-
 drivers/gpu/drm/amd/amdgpu/sdma_v7_1.c             |   4 -
 drivers/gpu/drm/amd/amdgpu/vi.c                    |  21 ++
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  | 103 +++++-
 .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c    |   6 +-
 drivers/gpu/drm/amd/display/dc/dc.h                |   1 +
 .../dc/link/protocols/link_edp_panel_control.c     |   4 +-
 .../amd/display/dc/resource/dce60/dce60_resource.c |  13 +-
 .../amd/display/dc/resource/dce80/dce80_resource.c |   2 +
 drivers/gpu/drm/amd/display/modules/power/power.c  |   2 +
 drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c         |  39 +--
 .../gpu/drm/i915/display/intel_display_params.c    |   4 +
 .../gpu/drm/i915/display/intel_display_params.h    |   1 +
 drivers/gpu/drm/i915/display/intel_vrr.c           |   4 +-
 drivers/gpu/drm/mediatek/mtk_drm_drv.c             |  17 +-
 drivers/gpu/drm/mediatek/mtk_hdmi_ddc_v2.c         |   4 +-
 drivers/gpu/drm/mediatek/mtk_hdmi_regs_v2.h        |   2 +-
 drivers/gpu/drm/radeon/radeon_bios.c               |   6 +-
 drivers/gpu/drm/xe/xe_i2c.c                        |  49 ++-
 drivers/gpu/drm/xe/xe_i2c.h                        |   1 +
 drivers/gpu/drm/xe/xe_pci_sriov.c                  |  30 +-
 drivers/hid/bpf/hid_bpf_dispatch.c                 |   2 +-
 drivers/hid/hid-multitouch.c                       |   2 +-
 drivers/i2c/busses/i2c-at91-master.c               |   8 +-
 drivers/i2c/busses/i2c-xiic.c                      |  61 +++-
 drivers/iio/accel/kionix-kx022a.c                  |  30 +-
 drivers/iio/accel/kxcjk-1013.c                     |   2 +-
 drivers/iio/accel/sca3000.c                        |   2 +-
 drivers/iio/adc/ad4030.c                           |  11 +-
 drivers/iio/adc/ad7173.c                           |   4 +-
 drivers/iio/adc/ad_sigma_delta.c                   |  31 +-
 drivers/iio/adc/ade9000.c                          |  36 +-
 drivers/iio/adc/adi-axi-adc.c                      |   4 +
 drivers/iio/adc/aspeed_adc.c                       |   4 +-
 drivers/iio/adc/axp288_adc.c                       |   8 +
 drivers/iio/adc/max1363.c                          |   8 +
 drivers/iio/adc/pac1934.c                          |   4 +
 drivers/iio/adc/rohm-bd79124.c                     |  20 +-
 drivers/iio/adc/stm32-adc.c                        |  47 +--
 drivers/iio/adc/sun4i-gpadc-iio.c                  |  10 +-
 drivers/iio/adc/xilinx-xadc-core.c                 |   9 +-
 drivers/iio/buffer/industrialio-buffer-dmaengine.c |  16 +-
 drivers/iio/cdc/ad7150.c                           |   8 +-
 drivers/iio/dac/rohm-bd79703.c                     |   3 +
 drivers/iio/frequency/adf4377.c                    |   4 +-
 drivers/iio/frequency/admv1013.c                   |   9 +-
 drivers/iio/gyro/adis16136.c                       |   2 +-
 drivers/iio/health/max30102.c                      |  12 +-
 drivers/iio/imu/adis16400.c                        |   2 +-
 drivers/iio/imu/adis16480.c                        |   4 +-
 drivers/iio/industrialio-buffer.c                  |   7 +-
 drivers/iio/industrialio-trigger.c                 |   2 +
 drivers/iio/light/gp2ap020a00f.c                   |   2 +
 drivers/iio/light/rohm-bu27034.c                   |  62 ++--
 drivers/iio/pressure/bmp280-core.c                 |   2 +-
 drivers/iio/pressure/rohm-bm1390.c                 |   2 +-
 drivers/iio/proximity/aw96103.c                    |  30 +-
 drivers/iio/proximity/isl29501.c                   |   2 +-
 drivers/iio/proximity/pulsedlight-lidar-lite-v2.c  |   4 +-
 drivers/iio/proximity/sx9324.c                     |   2 +-
 drivers/iio/proximity/vcnl3020.c                   |  24 +-
 drivers/iio/proximity/vl53l0x-i2c.c                |   3 +
 drivers/input/keyboard/atkbd.c                     |   8 +
 drivers/input/mouse/synaptics.c                    |   7 +-
 drivers/input/serio/i8042-acpipnpio.h              |   9 +
 drivers/input/touchscreen/s6sy761.c                |  14 +-
 drivers/md/dm-pcache/cache_gc.c                    |   5 +
 drivers/md/dm-pcache/cache_key.c                   |  14 +
 drivers/md/dm-pcache/cache_writeback.c             |   5 +
 drivers/mtd/devices/block2mtd.c                    |   2 +-
 drivers/mtd/devices/mtd_intel_dg.c                 |   3 +-
 drivers/mtd/mtdcore.c                              |   3 +-
 drivers/mtd/nand/ecc.c                             |   7 +
 drivers/mtd/nand/raw/cadence-nand-controller.c     |   6 +-
 drivers/mtd/nand/raw/vf610_nfc.c                   |  85 ++++-
 drivers/mtd/nand/spi/core.c                        |  53 ++-
 drivers/mtd/spi-nor/core.c                         |   2 +-
 drivers/net/ethernet/broadcom/bcmsysport.c         |   8 +-
 drivers/net/ethernet/broadcom/genet/bcmgenet.c     |  34 +-
 drivers/net/ethernet/broadcom/genet/bcmgenet.h     |   2 +
 drivers/net/ethernet/google/gve/gve_tx_dqo.c       |  14 +-
 drivers/net/ethernet/marvell/mvneta.c              |   2 +-
 drivers/net/ethernet/marvell/octeontx2/af/mcs.c    |   4 +-
 drivers/net/ethernet/marvell/octeontx2/nic/cn20k.c |  11 +-
 .../ethernet/marvell/octeontx2/nic/otx2_common.c   |  18 +-
 .../ethernet/marvell/octeontx2/nic/otx2_common.h   |   9 +
 drivers/net/ethernet/mediatek/mtk_eth_soc.c        |  38 ++-
 drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c   |   3 +
 drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c  |  10 +-
 .../net/ethernet/microchip/sparx5/sparx5_main.c    |   1 +
 .../net/ethernet/microchip/sparx5/sparx5_main.h    |   1 +
 .../net/ethernet/microchip/sparx5/sparx5_netdev.c  |   1 +
 drivers/net/ethernet/microchip/sparx5/sparx5_ptp.c |   3 +
 drivers/net/ethernet/microchip/vcap/vcap_api.c     |   2 +-
 drivers/net/ethernet/realtek/r8169_main.c          |   6 +
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  83 +++--
 drivers/net/pcs/pcs-rzn1-miic.c                    |   3 +
 drivers/net/pfcp.c                                 |   3 +
 drivers/net/phy/aquantia/aquantia_main.c           |   5 +-
 drivers/net/phy/qcom/at803x.c                      |   8 +-
 drivers/net/usb/qmi_wwan.c                         |   1 +
 drivers/net/wireless/ath/ath11k/mac.c              |   1 +
 drivers/net/wireless/ath/ath9k/hif_usb.c           |  21 +-
 drivers/net/wireless/ath/ath9k/htc.h               |   1 -
 drivers/net/wireless/ath/ath9k/htc_drv_init.c      |   7 +-
 drivers/net/wireless/ath/ath9k/htc_drv_txrx.c      |   8 +-
 drivers/net/wireless/ath/ath9k/wmi.c               |  28 +-
 drivers/net/wireless/ath/ath9k/wmi.h               |   1 +
 drivers/net/wireless/intel/iwlegacy/3945-mac.c     |   1 +
 drivers/net/wireless/silabs/wfx/hif_tx.c           |   4 +-
 drivers/net/wireless/st/cw1200/bh.c                |   8 +-
 drivers/net/wireless/st/cw1200/txrx.c              |  14 +
 drivers/net/wireless/ti/wlcore/main.c              |   4 +-
 drivers/net/xen-netfront.c                         |  12 +-
 drivers/nvme/host/core.c                           |  74 ++--
 drivers/nvme/host/multipath.c                      |  43 +--
 drivers/nvme/host/nvme.h                           |  10 +-
 drivers/nvme/host/pci.c                            |   2 +
 drivers/nvme/target/configfs.c                     |   9 +-
 drivers/nvme/target/core.c                         |   5 +-
 drivers/nvme/target/fabrics-cmd-auth.c             |   2 +-
 drivers/nvme/target/pci-epf.c                      |   3 +
 drivers/of/base.c                                  |  10 +-
 drivers/of/irq.c                                   |   2 +
 drivers/of/overlay.c                               |  17 +-
 drivers/pci/pci.c                                  |  15 +-
 drivers/rtc/dev.c                                  |   2 +-
 drivers/rtc/rtc-ac100.c                            |  39 +--
 drivers/rtc/rtc-mpfs.c                             |   6 +-
 drivers/rtc/rtc-spear.c                            |  11 +-
 drivers/spi/spi-cs42l43.c                          |  97 ++++++
 drivers/staging/greybus/uart.c                     |   3 +-
 drivers/thunderbolt/ctl.c                          |  63 ++--
 drivers/thunderbolt/quirks.c                       |   3 +
 drivers/thunderbolt/switch.c                       |   9 +-
 drivers/thunderbolt/tb.c                           |  37 +-
 drivers/thunderbolt/test.c                         |  58 +++-
 drivers/thunderbolt/tunnel.c                       |  73 ++--
 drivers/thunderbolt/tunnel.h                       |   8 +-
 drivers/thunderbolt/xdomain.c                      |   4 +
 drivers/tty/amiserial.c                            |   9 +-
 drivers/tty/n_gsm.c                                |  47 +--
 drivers/tty/serial/8250/8250_bcm7271.c             |   2 +-
 drivers/tty/serial/8250/8250_omap.c                |  15 +-
 drivers/tty/serial/kgdboc.c                        |   9 +
 drivers/tty/serial/ma35d1_serial.c                 |   6 +-
 drivers/tty/serial/max3100.c                       |  13 +-
 drivers/tty/serial/qcom_geni_serial.c              |   5 +-
 drivers/tty/serial/sc16is7xx.c                     |  53 ++-
 drivers/tty/serial/serial-tegra.c                  |  18 +-
 drivers/tty/serial/serial_core.c                   |  76 +++--
 drivers/tty/serial/vt8500_serial.c                 |   1 +
 drivers/tty/tty_io.c                               |  54 ++-
 drivers/tty/tty_port.c                             |  91 +++--
 drivers/tty/vcc.c                                  |   5 +-
 drivers/tty/vt/selection.c                         |   4 +-
 drivers/tty/vt/vc_screen.c                         |  23 +-
 drivers/tty/vt/vt.c                                |   5 +-
 drivers/usb/cdns3/cdns3-gadget.c                   |   4 +
 drivers/usb/cdns3/cdns3-pci-wrap.c                 |   5 +
 drivers/usb/chipidea/ci_hdrc_tegra.c               |   4 +-
 drivers/usb/class/cdc-acm.c                        |  41 ++-
 drivers/usb/class/cdc-acm.h                        |   1 -
 drivers/usb/core/hub.c                             |   7 +-
 drivers/usb/core/message.c                         |   8 +-
 drivers/usb/dwc2/hcd.c                             |   3 +-
 drivers/usb/dwc3/core.h                            |  19 ++
 drivers/usb/dwc3/dwc3-am62.c                       |   1 +
 drivers/usb/dwc3/ep0.c                             |   9 +
 drivers/usb/dwc3/gadget.c                          | 108 +++++-
 drivers/usb/gadget/function/f_fs.c                 |  15 +-
 drivers/usb/gadget/function/f_midi2.c              |   4 +-
 drivers/usb/gadget/function/f_uac1_legacy.c        |   6 +
 drivers/usb/gadget/udc/aspeed-vhub/core.c          |   4 +
 drivers/usb/gadget/udc/aspeed-vhub/dev.c           |   2 +-
 drivers/usb/gadget/udc/aspeed-vhub/hub.c           |   5 +-
 drivers/usb/gadget/udc/aspeed-vhub/vhub.h          |   1 +
 drivers/usb/gadget/udc/dummy_hcd.c                 |   4 +
 drivers/usb/host/octeon-hcd.c                      |   2 +-
 drivers/usb/host/ohci-da8xx.c                      |   2 +
 drivers/usb/host/ohci-s3c2410.c                    |   1 +
 drivers/usb/host/ohci-spear.c                      |   1 +
 drivers/usb/host/ohci-st.c                         |   1 +
 drivers/usb/serial/bus.c                           |   6 +-
 drivers/usb/serial/cp210x.c                        |   1 +
 drivers/usb/serial/generic.c                       |  10 +-
 drivers/usb/serial/option.c                        |  14 +
 drivers/usb/serial/quatech2.c                      |  19 +-
 drivers/usb/serial/ssu100.c                        |  18 +-
 drivers/usb/serial/usb-serial.c                    | 127 +++++--
 drivers/usb/serial/xr_serial.c                     |  10 +-
 drivers/usb/storage/sierra_ms.c                    |   7 +
 drivers/usb/typec/anx7411.c                        |   5 +-
 drivers/usb/typec/port-mapper.c                    |  21 +-
 drivers/usb/typec/tcpm/tcpm.c                      |   2 +-
 drivers/usb/typec/tipd/core.c                      |  11 +-
 drivers/usb/typec/ucsi/displayport.c               |   9 +-
 drivers/usb/typec/ucsi/ucsi.c                      |  17 +-
 drivers/usb/typec/ucsi/ucsi_acpi.c                 |  34 ++
 drivers/usb/typec/ucsi/ucsi_glink.c                |  15 +-
 drivers/virt/nitro_enclaves/ne_misc_dev.c          |   1 +
 drivers/virt/vmgenid.c                             |   9 +-
 fs/exec.c                                          |   1 +
 fs/ext4/inode.c                                    |   3 +-
 fs/netfs/buffered_read.c                           |   7 +
 fs/netfs/buffered_write.c                          |   9 +
 fs/netfs/direct_write.c                            |   9 +
 fs/netfs/internal.h                                |   2 +
 fs/netfs/misc.c                                    |  99 ++++++
 fs/netfs/read_collect.c                            |  24 ++
 fs/smb/client/cifsfs.c                             |  41 ++-
 fs/smb/client/cifsglob.h                           |  10 +-
 fs/smb/client/inode.c                              |   2 +
 fs/smb/client/smb2ops.c                            | 114 +++++--
 fs/smb/client/smb2pdu.c                            |  10 +-
 include/linux/bpf.h                                |  45 ++-
 include/linux/hrtimer_rearm.h                      |   2 +-
 include/linux/mtd/nand.h                           |   2 +
 include/linux/netfilter_netdev.h                   |   2 +-
 include/linux/netfs.h                              |   2 +
 include/linux/perf_event.h                         |   7 +-
 include/linux/rtnetlink.h                          |   7 +-
 include/linux/sched.h                              |  14 +
 include/linux/skbuff.h                             |   2 +-
 include/linux/soc/qcom/geni-se.h                   |  15 +-
 include/linux/tty.h                                |   1 +
 include/linux/tty_driver.h                         |   6 +
 include/linux/tty_port.h                           |  22 +-
 include/linux/usb/serial.h                         |   1 +
 include/net/bluetooth/hci_core.h                   |   5 +-
 include/net/gso.h                                  |   8 +
 include/net/netfilter/nf_flow_table.h              |   2 +-
 include/net/sch_generic.h                          |   9 +
 include/net/xdp.h                                  |   5 +
 include/sound/core.h                               |   9 +
 include/uapi/linux/random.h                        |   2 +-
 init/Kconfig                                       |   5 +
 io_uring/cmd_net.c                                 |  19 +-
 io_uring/io_uring.c                                |   4 +-
 io_uring/tw.c                                      |   3 +
 io_uring/zcrx.c                                    |   9 +-
 kernel/audit_tree.c                                |  36 +-
 kernel/bpf/core.c                                  |  10 +-
 kernel/bpf/hashtab.c                               |  19 +-
 kernel/bpf/memalloc.c                              |  57 +++-
 kernel/bpf/syscall.c                               |  19 +-
 kernel/bpf/trampoline.c                            |  85 ++++-
 kernel/events/core.c                               | 313 ++++++++---------
 kernel/events/ring_buffer.c                        |   7 +-
 kernel/exit.c                                      |  33 +-
 kernel/fork.c                                      |   2 +
 kernel/futex/core.c                                |  10 +-
 kernel/kprobes.c                                   |   8 +-
 kernel/module/main.c                               |   8 +-
 kernel/sched/ext/cid.c                             | 138 +++++---
 kernel/sched/ext/cid.h                             |   2 +-
 kernel/sched/ext/ext.c                             |  77 +++--
 kernel/sched/ext/types.h                           |   4 +
 kernel/sched/fair.c                                | 372 ++++++++++++++++-----
 kernel/sysctl.c                                    |   2 +-
 kernel/time/jiffies.c                              |   2 +
 kernel/trace/fprobe.c                              |  26 +-
 mm/damon/core.c                                    |   2 +-
 mm/kasan/common.c                                  |  13 +-
 mm/shmem.c                                         |   7 +-
 mm/slab.h                                          |  18 +-
 mm/slab_common.c                                   |   2 +-
 mm/slub.c                                          |  37 +-
 mm/vma.c                                           |   4 +-
 net/bluetooth/hci_conn.c                           |  18 +-
 net/bluetooth/hci_core.c                           |  54 ++-
 net/bluetooth/hci_debugfs.c                        |   2 +-
 net/bluetooth/hci_sync.c                           |  19 +-
 net/bluetooth/rfcomm/tty.c                         |   7 +-
 net/bluetooth/smp.c                                |   2 +
 net/core/dev.c                                     |  78 +++--
 net/core/dev_ioctl.c                               |   3 +-
 net/core/gso.c                                     |   1 +
 net/core/page_pool.c                               |   2 +-
 net/core/skbuff.c                                  |   8 +-
 net/core/sock.c                                    |   4 +-
 net/ethtool/tsconfig.c                             |  24 +-
 net/ipv4/af_inet.c                                 |   3 +
 net/ipv4/tcp_input.c                               |   6 +
 net/ipv6/addrconf.c                                |   2 +-
 net/ipv6/ip6_offload.c                             |   4 +
 net/ipv6/seg6_iptunnel.c                           |   2 +-
 net/ipv6/seg6_local.c                              | 140 ++++++--
 net/mac80211/agg-rx.c                              |   2 +-
 net/mac80211/chan.c                                |  50 ++-
 net/mac80211/drop.h                                |   1 +
 net/mac80211/fils_aead.c                           |   8 +
 net/mac80211/ieee80211_i.h                         |   2 +-
 net/mac80211/iface.c                               |   4 +-
 net/mac80211/mesh_pathtbl.c                        |  30 +-
 net/mac80211/mlme.c                                |   4 +-
 net/mac80211/rc80211_minstrel_ht.c                 |  89 ++++-
 net/mac80211/rx.c                                  |   6 +
 net/mac80211/spectmgmt.c                           |   4 +-
 net/mac80211/sta_info.c                            |   6 +-
 net/mac80211/status.c                              |  70 ++++
 net/mac80211/tx.c                                  |  45 ++-
 net/mctp/device.c                                  |   6 +-
 net/mptcp/protocol.c                               |   2 +-
 net/netfilter/ipset/ip_set_bitmap_gen.h            |   2 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |   3 +
 net/netfilter/ipvs/ip_vs_lblc.c                    |   4 +
 net/netfilter/ipvs/ip_vs_lblcr.c                   |   3 +
 net/netfilter/ipvs/ip_vs_sync.c                    |  33 +-
 net/netfilter/nf_flow_table_core.c                 |   7 +-
 net/netfilter/nf_flow_table_offload.c              |  14 +-
 net/netfilter/nf_nat_bpf.c                         |   3 +
 net/netfilter/nf_nat_core.c                        |   5 +-
 net/netfilter/nft_flow_offload.c                   |   7 +-
 net/packet/af_packet.c                             |   3 +
 net/sched/act_ct.c                                 |   2 +-
 net/sched/act_skbedit.c                            |   5 +-
 net/sched/cls_api.c                                |  15 +-
 net/sched/sch_codel.c                              |   2 +-
 net/sched/sch_fq_codel.c                           |   4 +-
 net/sctp/socket.c                                  |   2 +-
 net/tipc/crypto.c                                  |  20 +-
 net/wireless/nl80211.c                             |  11 +-
 net/wireless/scan.c                                |  22 +-
 rust/kernel/irq/request.rs                         |  89 +++--
 sound/core/seq/seq_compat.c                        |   4 +-
 sound/hda/codecs/realtek/alc269.c                  |   6 +-
 sound/hda/controllers/tegra.c                      |   3 +-
 sound/pci/ctxfi/cthw20k2.c                         |   2 +
 sound/pci/ice1712/ice1712.c                        |   2 +-
 sound/soc/codecs/lpass-wsa-macro.c                 |   3 +
 sound/soc/codecs/max98363.c                        |   2 +-
 sound/soc/codecs/rt1017-sdca-sdw.c                 |  27 +-
 sound/soc/codecs/rt274.c                           |   4 +-
 sound/soc/codecs/rt286.c                           |   2 +-
 sound/soc/codecs/wm8903.c                          |   2 +-
 sound/soc/qcom/lpass-cpu.c                         |   4 +-
 sound/soc/sdca/sdca_class_function.c               |  19 +-
 sound/soc/sdw_utils/soc_sdw_utils.c                |  20 +-
 sound/soc/tegra/tegra186_asrc.c                    |   2 +-
 sound/usb/caiaq/device.c                           |   3 +
 sound/usb/line6/playback.c                         |   7 +
 sound/usb/misc/ua101.c                             |   9 +
 sound/usb/quirks.c                                 |  29 +-
 tools/sched_ext/include/scx/common.bpf.h           |   4 +-
 tools/testing/selftests/cgroup/test_zswap.c        |  28 +-
 413 files changed, 5137 insertions(+), 2033 deletions(-)

Read the cover letter in its thread