6.6.160-rc2 review

This is the start of the stable review cycle for the 6.6.160 release. There are 1651 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 22 Oct 2026 07:53:04 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.160-rc2.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.160-rc2

Jinu Kim <[email protected]>
KVM: x86: Use active memslots for the per-vCPU MMIO cache

Ilan Dudnik <[email protected]>
ksmbd: fix heap out-of-bounds write in krb5_authenticate()

Mattia Meleleo <[email protected]>
bpf, sockmap: Account for receive queue in FIONREAD without a verdict program

Dave Chinner <[email protected]>
xfs: fix unmount hang with unflushable inodes stuck in the AIL

Dave Chinner <[email protected]>
xfs: factor out stale buffer item completion

Dave Chinner <[email protected]>
xfs: rearrange code in xfs_buf_item.c

Dave Chinner <[email protected]>
xfs: catch stale AGF/AGF metadata

Dave Chinner <[email protected]>
xfs: xfs_ifree_cluster vs xfs_iflush_shutdown_abort deadlock

Eduard Zingerman <[email protected]>

    bpf: abort verification if env->cur_state->loop_entry != NULL

ThangNN99 <[email protected]>
Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained

Baokun Li <[email protected]>
Revert "mm/filemap: avoid buffered read/write race to read inconsistent data"

Namjae Jeon <[email protected]>
Revert "ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev()"

Vasiliy Kovalev <[email protected]>
ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14

Heiner Kallweit <[email protected]>
r8169: remove original workaround for RTL8125 broken rx issue

Ze Tan <[email protected]>
smb/server: fix tree connection leak in smb2_tree_connect()

Li Chen <[email protected]>
nvdimm: pmem: keep PREFLUSH before data writes

Benjamin Leggett <[email protected]>
drm/virtio: use the DMA API for resource backing on Xen

Sajal Gupta <[email protected]>
drm/gud: validate GUD_ROTATION_0 is present in supported rotations

Eduard Zingerman <[email protected]>
bpf: check_cond_jmp_op(): properly infer if register is null

Huiwen He <[email protected]>
smb/client: validate new EOF for insert range

Huiwen He <[email protected]>
smb/client: validate new EOF for zero range

Huiwen He <[email protected]>
smb/client: fix stale page cache in insert/collapse range

Huiwen He <[email protected]>
smb/client: invalidate fscache for fallocate range operations

Namjae Jeon <[email protected]>
ksmbd: propagate DACL parsing errors

Pauli Virtanen <[email protected]>
Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect

Eric Dumazet <[email protected]>
igmp: convert struct ip_sf_list to RCU

Eric Dumazet <[email protected]>
ipv6: mcast: use rcu_assign_pointer() for __rcu list updates

David Laight <[email protected]>
tipc: Dont send random pad bytes in RESET/ACTIVATE messages

Eduard Zingerman <[email protected]>
bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge

Eduard Zingerman <[email protected]>
bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks

Johannes Thumshirn <[email protected]>
btrfs: zoned: finish active block group cleanup if call_zone_finish() fails

FAN YE <[email protected]>
btrfs: zstd: fix lost wakeup when waiting for a workspace

Kuniyuki Iwashima <[email protected]>
net: Remove conflicting altnames for dying netns in __dev_change_net_namespace().

Nicolas Dichtel <[email protected]>
net: plumb extack in __dev_change_net_namespace()

Gao Xiang <[email protected]>
erofs: disable LZ4 rolling decompression for now

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Mark syscall helpers as sleepable

Mohamed Khalfella <[email protected]>
nvme: remove stale namespaces by NSID range during scan

Stuart Hayes <[email protected]>
nvme_core: scan namespaces asynchronously

Eduard Zingerman <[email protected]>
bpf: Don't infer non-NULL from a pointer with an unbounded offset

Eduard Zingerman <[email protected]>
bpf: Don't predict JMP32 pointer vs zero comparisons

Andrii Nakryiko <[email protected]>
bpf: generalize is_scalar_branch_taken() logic

Andrii Nakryiko <[email protected]>
bpf: unify 32-bit and 64-bit is_branch_taken logic

Andrii Nakryiko <[email protected]>
bpf: generalize is_branch_taken to handle all conditional jumps in one place

Andrii Nakryiko <[email protected]>
bpf: move is_branch_taken() down

Andrii Nakryiko <[email protected]>
bpf: generalize is_branch_taken() to work with two registers

Andrii Nakryiko <[email protected]>
bpf: rename is_branch_taken reg arguments to prepare for the second one

Andrii Nakryiko <[email protected]>
bpf: Improve JEQ/JNE branch taken logic

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Mark NULL kptr stores precise

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Preserve inner map identity in callback frames

Jamal Hadi Salim <[email protected]>
net: reject oversized tx_queue_len at netlink parse time

Eduard Zingerman <[email protected]>
bpf: mark a NULL call argument precise

Karl Mehltretter <[email protected]>
iommu/amd: Do not reallocate GA log buffers on resume

Alexander Graf <[email protected]>
virtio_ring: fix stale descriptor flags after a failed packed add

Yu Zhang <[email protected]>
vhost-vdpa: protect config_ctx from being freed under the config callback

Christian Brauner <[email protected]>
eventfd: simplify eventfd_signal()

Jia Jia <[email protected]>
vduse: validate virtqueue alignment

Jia Jia <[email protected]>
vhost: invalidate vring access on IOTLB transitions

Kuniyuki Iwashima <[email protected]>
af_unix: Update last skb marker in manage_oob().

Jakub Kicinski <[email protected]>
eth: ice: don't dereference pointers from TP_printk()

Krystian Kaniewski <[email protected]>
Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()

Eric Dumazet <[email protected]>
vxlan: initialize _md in vxlan_xmit_one()

Carolina Jubran <[email protected]>
net/mlx5e: Move representor vnic reporter to eswitch devlink port

Dapeng Mi <[email protected]>
perf/x86/intel: Prevent drain_pebs() reentry

Lorenzo Bianconi <[email protected]>
net: stmmac: fix TX descriptor availability check for TSO traffic

Vasileios Almpanis <[email protected]>

    configfs: pin the symlink target's dirent instead of chasing ->ci_dentry

Al Viro <[email protected]>
configfs:get_target() - release path as soon as we grab configfs_item reference

Christian Brauner <[email protected]>
path: add cleanup helper

Vasileios Almpanis <[email protected]>
configfs: unhash the dentry before dropping the item in rmdir

Cen Zhang (Microsoft) <[email protected]>
reboot: fix cad_pid use-after-free race

Steven Rostedt <[email protected]>
tracing: Take trace_array reference when opening a tracer options file

Tristan Madani <[email protected]>
ALSA: usbusx2y: validate URB actual_length in interrupt callback

Takashi Iwai <[email protected]>
ALSA: usx2y: Use standard print API

Donggeun Yoo <[email protected]>
tracing: Take the reference before publishing the named histogram trigger

Donggeun Yoo <[email protected]>
tracing: Undo the registration when enabling the histogram trigger fails

Magdalena Schulfer <[email protected]>
accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr

Magdalena Schulfer <[email protected]>
accel/ivpu: Validate firmware log buffer metadata

Dawid Osuchowski <[email protected]>
accel/ivpu: Limit firmware log name prints to field size

Masami Hiramatsu (Google) <[email protected]>
bootconfig: Fix integer overflow in initrd size check

Chengfeng Ye <[email protected]>
netfilter: cttimeout: prevent UAF during module unload

Zhiling Zou <[email protected]>
ipv6: flowlabel: cap duplicate leases per socket

Xixin Liu <[email protected]>
perf: RISC-V: store available counter mask as bitmap

Kalpan Jani <[email protected]>
mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0

Paulo Alcantara <[email protected]>
smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid

Bjoern Doebel <[email protected]>
smb: client: fail DACL rewrite when the new DACL exceeds 64K

Paulo Alcantara <[email protected]>
smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()

Nilesh Javali <[email protected]>
scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size

Daeho Jeong <[email protected]>
f2fs: accurately adjust free_sections during free_segment_range

Nilesh Javali <[email protected]>
scsi: qla2xxx: Skip vport under deletion in report ID acquisition

Nilesh Javali <[email protected]>
scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock

Nilesh Javali <[email protected]>
scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error

Yuqi Xu <[email protected]>
wifi: cfg80211: reject duplicate wiphy cipher suite entries

Reinette Chatre <[email protected]>
fs/resctrl: Prevent use-after-free in rdtgroup_kn_put()

Felix Fietkau <[email protected]>

    wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[]

Cen Zhang <[email protected]>
ocfs2: validate external xattr entries when reading metadata

Takashi Sakamoto <[email protected]>
firewire: core: fix memory leak in error path of build_tree()

Jeff Layton <[email protected]>
nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net

Chuck Lever <[email protected]>
svcrdma: Validate Read chunk positions before reconstruction

Shuai Xue <[email protected]>

    iommu/sva: Set handle->dev before the SVA handle is visible

Yi Liu <[email protected]>
iommu: Pass domain to remove_dev_pasid() op

Abd-Alrhman Masalkhi <[email protected]>
md/raid1,raid10: fix error-path detection with md_cloned_bio()

Abd-Alrhman Masalkhi <[email protected]>
md/raid1,raid10: fix bio accounting for split md cloned bios

Filipe Manana <[email protected]>
btrfs: fix deadlock cloning inline extent when using flushoncommit

Jordan Walters <[email protected]>
Bluetooth: hci_core: Fix UAF in hci_unregister_dev()

Dan Williams <[email protected]>
cxl/region: Resolve region deletion races

Chuck Lever <[email protected]>
net/handshake: hand off the pinned file reference to accept_doit

Gao Xiang <[email protected]>

    erofs: fix use-after-free on sbi->sync_decompress

Florian Westphal <[email protected]>
netfilter: revalidate bridge ports

Damien Riégel <[email protected]>
greybus: raw: fix use-after-free if write is called after disconnect

Sam Edwards <[email protected]>
ceph: fix num_ops off-by-one when crypto allocation fails

Yosry Ahmed <[email protected]>
KVM: SVM: Add missing save/restore handling of LBR MSRs

Lianjie Wang <[email protected]>
hwrng: core - use RCU and work_struct to fix race condition

Florian Westphal <[email protected]>
netfilter: nfnetlink_queue: do shared-unconfirmed check before segmentation

Ming Qian <[email protected]>
media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC

Nicolas Dufresne <[email protected]>
media: v4l2-mem2mem: Add a kref to the v4l2_m2m_dev structure

Sebastian Reichel <[email protected]>
media: hantro: Disable multicore support

Cédric Bellegarde <[email protected]>
ASoC: qcom: q6asm: drop DSP responses for closed data streams

Srinivas Kandagatla <[email protected]>
ASoC: qcom: q6asm: handle the responses after closing

Yonatan Nachum <[email protected]>
RDMA/efa: Fix use of completion ctx after free

Eric Dumazet <[email protected]>
ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS

Jie Zhang <[email protected]>
drm/msm: Recover HW before retire hung submit

Rafael J. Wysocki <[email protected]>
ACPI: platform: Use acpi_bus_get_primary_device()

Duoming Zhou <[email protected]>
net: mscc: ocelot: Fix use-after-free caused by cyclic delayed work

Al Viro <[email protected]>
xen: fix UAF in dmabuf_exp_from_pages()

Daniel J. Ogorchock <[email protected]>
HID: nintendo: avoid bluetooth suspend/resume stalls

Jonas Gorski <[email protected]>
net: dsa: b53: do not enable EEE on bcm63xx

Peter Griffin <[email protected]>
scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Mark raw_tp arguments with PTR_MAYBE_NULL

Krzysztof Wilczyński <[email protected]>
PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()

Ilpo Järvinen <[email protected]>
PCI/sysfs: Demacrofy pci_dev_resource_resize_attr(n) functions

Pengpeng Hou <[email protected]>
genirq/proc: Size interrupt directory names for 10-digit interrupt numbers

Chen-Yu Tsai <[email protected]>
pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction

Candice Li <[email protected]>
drm/amdgpu: validate and share PSP fw_pri_buf copies via psp_copy_fw

Candice Li <[email protected]>
drm/amdgpu: Bound GPIO I2C table entry count from VBIOS

Alex Deucher <[email protected]>
drm/amdgpu: rework i2c init and fini

Alex Deucher <[email protected]>
drm/amdgpu/atombios: drop empty function

Dr. David Alan Gilbert <[email protected]>
drm/amdgpu: Remove unused amdgpu_i2c functions

Miri Korenblit <[email protected]>
wifi: mac80211: don't call ieee80211_handle_reconfig_failure when not needed

Stepan Ionichev <[email protected]>

    tty: serial: 8250: protect against NULL uart->port.dev in register

Jiri Slaby (SUSE) <[email protected]>

    serial: 8250: invert serial8250_register_8250_port() CIR condition

Herve Codina <[email protected]>
driver core: Avoid warning when removing a device while its supplier is unbinding

Sicong Huang <[email protected]>
virt: acrn: Fix irqfd use-after-free during eventfd shutdown

Tao Cui <[email protected]>
RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind()

Johannes Berg <[email protected]>
wifi: iwlwifi: mvm: fix P2P-Device binding handling

Stanley.Yang <[email protected]>
drm/amdgpu: harden FRU PIA parsing with bounded helpers

Lijo Lazar <[email protected]>
drm/amdgpu: Refactor FRU product information

Yunxiang Li <[email protected]>
drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq

Yongqiang Sun <[email protected]>
drm/amdkfd: fix SMI event cross-process information leak

Nikhil P. Rao <[email protected]>
pds_core: quiesce DMA before freeing resources

David Timber <[email protected]>
exfat: fix handling of damaged volume in exfat_create_upcase_table()

Daniel Yang <[email protected]>
exfat: resolve memory leak from exfat_create_upcase_table()

Peter Zijlstra <[email protected]>
perf: Fix addr_filter_ranges lifetime

Pagadala Yesu Anjaneyulu <[email protected]>
wifi: mac80211: ibss: wait for in-flight TX on disconnect

ChenXiaoSong <[email protected]>
smb/client: zero-initialize stack-allocated cifs_open_info_data

Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: pcie: null RX pointers after free

Emmanuel Grumbach <[email protected]>
wifi: iwlwifi: mvm: validate TX_CMD response layout

Miri Korenblit <[email protected]>
wifi: iwlwifi: mvm: remove mvm prefix from iwl_mvm_tx_resp*

Namjae Jeon <[email protected]>
ksmbd: fix maximum allowed access checks

Alexey Velichayshiy <[email protected]>
ksmbd: remove redundant DACL check in smb_check_perm_dacl

Adrian Hunter <[email protected]>
perf/x86/intel/pt: Fix stop/start with no update

Val Packett <[email protected]>
remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3

Gou Hao <[email protected]>
powerpc/xive: propagate IPI init errors to prevent use-after-free

Gou Hao <[email protected]>
powerpc/xive: add error return value to xive_smp_probe()

Rafael J. Wysocki <[email protected]>
ACPI: bus: Introduce acpi_bus_get_primary_device()

Shakeel Butt <[email protected]>
memcg: make the v1 soft limit knob inert

Chris Mason <[email protected]>
svcrdma: Reject Write/Reply chunks with segcount 0

Chris Mason <[email protected]>
nfsd: convert nfsd_net boolean flags to unsigned long flags word

Ye Liu <[email protected]>
mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg()

Shameer Kolothum <[email protected]>
iommu/arm-smmu-v3: Manage teardown with devm

Adrian Hunter <[email protected]>
i3c: master: Fix recursive locking during device registration

Li Chen <[email protected]>
nvdimm: virtio_pmem: refcount requests for token lifetime

Maíra Canal <[email protected]>

    drm/v3d: Clear queue->active_job when v3d_fence_create() fails

Richard Cheng <[email protected]>
cxl/mbox: Clamp mailbox output allocation to the payload size

Shengjiu Wang <[email protected]>
ASoC: fsl_audmix: rework runtime PM handling in probe

Evgenii Burenchev <[email protected]>
drm/amd/display: Fix dangling pointer in plane reset function

Evgenii Burenchev <[email protected]>
drm/amd/display: Fix dangling pointer in CRTC reset function

Gregory Price <[email protected]>
mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug

Gregory Price <[email protected]>
mm: name the anonymous MMOP enum as enum mmop

Israel Batista <[email protected]>
mm: change type of state in struct memory_block

Alex Bereza <[email protected]>
dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout

Manos Pitsidianakis <[email protected]>
hwrng: core - fix rng list on registration error

Waiman Long <[email protected]>
cgroup/cpuset: Make nr_deadline_tasks an atomic_t

Chen Ridong <[email protected]>
cgroup/cpuset: move common code to cpuset-internal.h

Chen Ridong <[email protected]>
cgroup/cpuset: introduce cpuset-v1.c

Yiyang Chen <[email protected]>
bpf: Reject MEM_ALLOC BTF accesses past object bounds

Malaya Kumar Rout <[email protected]>
time/namespace: Validate nanosecond field in proc_timens_set_offset()

Nicholas Dudar <[email protected]>
bpf: Reject writes through untrusted BTF pointers

Armin Wolf <[email protected]>
platform/x86: dell-wmi-base: Fix handling of ultra performance key

Armin Wolf <[email protected]>
platform/x86: lg-laptop: Fix LED resource handling

Nicholas Dudar <[email protected]>
bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max

Qing Ming <[email protected]>
usb: gadget: uac: validate rate list length before storing

Marco Scardovi <[email protected]>
platform/x86: asus-wmi: fix resource leaks on probe failure

Luke D. Jones <[email protected]>
platform/x86: asus-wmi: disable USB0 hub on ROG Ally before suspend

Maher Azzouzi <[email protected]>
esp: do not unref managed frag pages in esp_ssg_unref()

Leon Romanovsky <[email protected]>
RDMA/rvt: Return NULL after port allocation failure

Sudeep Holla <[email protected]>
firmware: arm_scmi: Clean up channels on setup failure

Sudeep Holla <[email protected]>
firmware: arm_scmi: Fix SCMI device destroy lifetimes

Ruoyu Wang <[email protected]>
drm/msm: Only fini scheduler after successful init

Philipp Stanner <[email protected]>
drm/sched: Use struct for drm_sched_init() params

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Zero queue and stack outputs on lock failure

Pu Lehui <[email protected]>
riscv, bpf: Fix memory leak in bpf_jit_free

Rafael Passos <[email protected]>
bpf: remove unused parameter in bpf_jit_binary_pack_finalize

Hari Bathini <[email protected]>
powerpc/bpf: rename powerpc64_jit_data to powerpc_jit_data

Aditya Prakash Srivastava <[email protected]>
ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()

Leon Romanovsky <[email protected]>
RDMA/erdma: complete object teardown when the destroy command fails

Leon Hwang <[email protected]>
bpf: Fix WARNING in bpf_tracing_link_release

Justin Yeh <[email protected]>
pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip

Li Qiang <[email protected]>
scsi: ufs: core: Validate string descriptors

Bean Huo <[email protected]>
scsi: ufs: core: Convert string descriptor format macros to enum

Fan Wu <[email protected]>
spi: oc-tiny: switch to managed controller allocation

Louis-Alexis Eyraud <[email protected]>
clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path

Gary Guo <[email protected]>
PCI: Fix UAF when probe runs concurrent to dyn ID removal

Gary Guo <[email protected]>
PCI: Fix dyn_id add TOCTOU

Gary Guo <[email protected]>
PCI: Make pci_match_one_device() match on ID instead of device

Samiullah Khawaja <[email protected]>
PCI: Initialize temporary device in new_id_store()

Leon Romanovsky <[email protected]>
RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()

Jeff Johnson <[email protected]>
wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()

Jeff Johnson <[email protected]>
wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()

Jeff Johnson <[email protected]>
wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()

Mukesh Ojha <[email protected]>
firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published

Martin Wilck <[email protected]>
md/raid1: create serial pool adding rdev to array with serialize_policy=1

Muhammad Usama Anjum <[email protected]>
misc: sgi-gru: remove interrupt-context page-table walks

Peter Xu <[email protected]>
mm/treewide: replace pmd_large() with pmd_leaf()

Michael-CY Lee <[email protected]>
wifi: mt76: fix non-AQL packet accounting for MLO stations

Felix Fietkau <[email protected]>
wifi: mt76: mt7915: unwind state on add_interface failure

Christophe JAILLET <[email protected]>
wifi: mt76: mt7915: Fix an error handling path in mt7915_add_interface()

Felix Fietkau <[email protected]>
wifi: mt76: mt7915: allocate vif wcid in the same range as stations

Felix Fietkau <[email protected]>

    wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER

Felix Fietkau <[email protected]>
wifi: mt76: cancel reset and rc work on device unregister

Yonghong Song <[email protected]>
bpf, x86: Fix trampoline stack size for 128-bit arguments

Will Deacon <[email protected]>
arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry

Zhao Li <[email protected]>
wifi: nl80211: clean up color-change beacon data on errors

Johannes Berg <[email protected]>
wifi: nl80211: check link is beaconing for color change

Jason Huang <[email protected]>
wifi: brcmfmac: fix P2P action frame handling without device vif

Zhao Li <[email protected]>
wifi: cfg80211: stop PMSR before P2P and NAN teardown

Karl Mehltretter <[email protected]>
serial: core: do fallible allocations before the console can be registered

Karl Mehltretter <[email protected]>
serial: core: clear freed pointers on uart_register_driver() failure

Karl Mehltretter <[email protected]>
tty: skip cdev_del() when no cdev is registered

Haoxiang Li <[email protected]>
HID: logitech-hidpp: Fix FF device cleanup on init failure

Vicki Pfau <[email protected]>
HID: steam: Reject short reads

Zheng Qixing <[email protected]>
blk-cgroup: fix race between policy activation and blkg destruction

Caleb Sander Mateos <[email protected]>
ublk: check import_ubuf() return value

Cen Zhang <[email protected]>
ocfs2: validate inline xattrs during inode block validation

Rafael J. Wysocki <[email protected]>
thermal: hwmon: Remove hwmon class device along with its parent

Cheng Xu <[email protected]>
RDMA/erdma: Hold QP references for AE and CM processing

Cen Zhang <[email protected]>
ocfs2: o2hb: quiesce negotiate handlers and timeout work

Cen Zhang <[email protected]>
ocfs2/cluster: keep heartbeat local node stable

Yufan Chen <[email protected]>
ocfs2/heartbeat: fix slot mapping rollback leaks on error paths

Jiri Olsa <[email protected]>
bpf: Clear buf on error in __bpf_get_task_stack

Petr Pavlu <[email protected]>
module/dups: Fix use-after-free in kmod_dup_req lifetime handling

Harry Wentland <[email protected]>
drm/amd/display: Resize MST HDCP per-connector arrays to 32

Yeoreum Yun <[email protected]>
coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable

Yang Xiuwei <[email protected]>
scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails

Filipe Manana <[email protected]>
btrfs: defrag: fix deadlock between defrag and delalloc space reservation

Qu Wenruo <[email protected]>
btrfs: always wait for ordered extents to avoid OE races

Sun YangKai <[email protected]>
btrfs: check if root is readonly when setting posix acl

Qu Wenruo <[email protected]>
btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()

Pauli Virtanen <[email protected]>
Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind

Pauli Virtanen <[email protected]>
Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero

Pu Lehui <[email protected]>
bpf, cgroup: Fix storage null-ptr-deref after replacing prog

Sanghyun Park <[email protected]>
bpf: Fix mmap_lock leak in irq_work path

Chuck Lever <[email protected]>
NFS: Return a delegation the client fails to record

Kuniyuki Iwashima <[email protected]>
amt: Don't support cross-netns setup.

Marek Szyprowski <[email protected]>
clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type

Maurizio Lombardi <[email protected]>
nvmet: fix max_qid race between configfs and controller allocation

ZhengYuan Huang <[email protected]>
ocfs2: validate orphan slot during inode read

ZhengYuan Huang <[email protected]>
ocfs2: validate DIO orphan slot during inode read

Zizhi Wo <[email protected]>
null_blk: free zones array on device power-off

Usama Arif <[email protected]>
blk-iolatency: clear delay state when freeing policy data

Usama Arif <[email protected]>
blk-iocost: clear delay state when freeing policy data

Yu Kuai <[email protected]>
blk-cgroup: delay freeing policy data after rcu grace period

John Johansen <[email protected]>
apparmor: fix deadlock in complain-mode change_hat

Yunseong Kim <[email protected]>
ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()

Namjae Jeon <[email protected]>
ksmbd: serialize oplock close with pending break ownership

ZhangGuoDong <[email protected]>
smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()

Ilan Dudnik <[email protected]>
ksmbd: defer publishing granted locks to prevent UAF/double-free race

Gao Xiang <[email protected]>
erofs: fix interlaced ztailpacking pclusters

Namjae Jeon <[email protected]>
ksmbd: safely discard unregistered deferred locks

Namjae Jeon <[email protected]>
ksmbd: detach blocked lock requests before freeing

Namjae Jeon <[email protected]>
ksmbd: scope session state changes to bound connections

Ze Tan <[email protected]>
smb/server: fix session leak in ksmbd_session_register()

ZhangGuoDong <[email protected]>
pnfs/blocklayout: Fix device leaks on parse failure

Jeuk Kim <[email protected]>
NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers

Zhansong Gao <[email protected]>
NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()

Jeff Layton <[email protected]>
filelock: add some new helper functions

Nguyen Dinh Phi <[email protected]>
vsock: don't check the listener's sk_err in vsock_accept()

Tetsuo Handa <[email protected]>
net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()

Runyu Xiao <[email protected]>
ALSA: mtpav: shut down output timer before card teardown

Pengpeng Hou <[email protected]>
net: qlcnic: validate unified ROM sections before loading

Eric Dumazet <[email protected]>
ip6mr: do not clone dst in ip6mr_cache_report()

Jamal Hadi Salim <[email protected]>
net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue

Eric Dumazet <[email protected]>
net_sched: sch_fifo: implement lockless __fifo_dump()

Nikolay Aleksandrov <[email protected]>
net: bridge: arp/nd proxy: fix reading neigh ha

Nikolay Aleksandrov <[email protected]>
vxlan: fix reading neigh ha

Jérémy Jean <[email protected]>
NFSv4.1: zero referring call lists before decoding

Jamal Hadi Salim <[email protected]>
net/sched: account classifier filter allocations to memcg

Michael Kelley <[email protected]>
Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition

Pauli Virtanen <[email protected]>

    Bluetooth: L2CAP: access chan->conn safely in get/setsockopt

Radek Podgorny <[email protected]>
Bluetooth: do not leak an hci_conn when a second LE connect is rejected

Anshumali Gaur <[email protected]>
octeontx2-vf: fix workqueue and netdev race in probe/remove

Victor Nogueira <[email protected]>
net/sched: act_ife: Only operate on Ethernet frames

Jamal Hadi Salim <[email protected]>
net/sched: fq: add overflow bounds to quantum and initial quantum

Eric Dumazet <[email protected]>

    net_sched: export pfifo_fast prio2band[]

Eric Dumazet <[email protected]>
net_sched: sch_fq: change how @inactive is tracked

Eric Dumazet <[email protected]>
net_sched: sch_fq: struct sched_data reorg

Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: skip double clone set expressions on element insert

Doruk Tan Ozturk <[email protected]>
HID: sony: clean up device list on probe failure

Chuck Lever <[email protected]>
NFSD: Prevent client use-after-free during close_lru reaping

Chuck Lever <[email protected]>
NFSD: Prevent client use-after-free during blocked-lock reaping

Elson Serrao <[email protected]>
usb: dwc3: clear forceRM when issuing EndTransfer

Thinh Nguyen <[email protected]>
usb: dwc3: gadget: Reinitiate stream for all host NoStream behavior

Jeffin Philip <[email protected]>
usb: gadget: f_midi: initialize work in f_midi_alloc()

Kees Cook <[email protected]>
usb: gadget: f_midi: Annotate struct f_midi with __counted_by

Steven Rostedt <[email protected]>
tracing: Take trace_array reference when opening options file

Baineng Shou <[email protected]>
dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds

Usama Arif <[email protected]>
mm/huge_memory: transfer the pmd dirty bit to the folio on zap

Jinjie Ruan <[email protected]>
powerpc/kexec_file: Prevent kexec range truncation

Anthony Krowiak <[email protected]>
s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects

Vidhu Sarwal <[email protected]>
iio: light: ltrf216a: fix runtime PM reference leak in error path

Shreeya Patel <[email protected]>
iio: light: ltrf216a: Return floating point values

Yosry Ahmed <[email protected]>
KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU

Christian Borntraeger <[email protected]>
KVM: s390: Fix memory corruption by not reinjecting CK machine checks

Tiezhu Yang <[email protected]>
LoongArch: BPF: Refactor jump offset calculation in tail call

Wenjie Qi <[email protected]>
f2fs: avoid NULL checkpoint thread access in sysfs

Zhiguo Niu <[email protected]>
f2fs: use new ioprio Macro to get ckpt thread ioprio level

Daeho Jeong <[email protected]>
f2fs: fix to migrate all curseg types during free_segment_range

Chao Yu <[email protected]>
f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()

Chao Yu <[email protected]>
f2fs: fix to clear dirty flag on folio in error path

Bob Zhou <[email protected]>
drm/amdgpu: avoid force-completing uninitialized UVD rings

Jesse Zhang <[email protected]>
drm/amdgpu: force complete the KIQ ring fences on reset

Priya Hosur <[email protected]>
drm/amdkfd: Add TLB flush after MES queue eviction/suspension

Xiaogang Chen <[email protected]>
drm/amdkfd: Fix error path at svm_migrate_copy_to_ram

Xiaogang Chen <[email protected]>
drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram

Marek Czernohous <[email protected]>
drm/nouveau: unsubscribe the channel-kill event before the fence context

Ben Skeggs <[email protected]>

    drm/nouveau: remove chan->drm

Ben Skeggs <[email protected]>
drm/nouveau: remove nouveau_chan.device

Danilo Krummrich <[email protected]>
drm/gpuvm: rename struct drm_gpuva_manager to struct drm_gpuvm

Jiri Olsa <[email protected]>
bpf: Disable preemption in bpf_get_stackid

Farhan Ali <[email protected]>
PCI: Allow per function PCI slots to fix slot reset on s390

Farhan Ali <[email protected]>
PCI: Introduce PCI_SLOT_PLACEHOLDER constant for slot_nr placeholder value

Namjae Jeon <[email protected]>
ksmbd: zero pipe read compound padding

Cen Zhang (Microsoft Security FORGE Labs) <[email protected]>
ksmbd: fix tree connection use-after-free in smb2_tree_connect()

Breno Leitao <[email protected]>
mm/kmemleak: avoid soft lockup when scanning task stacks

Kairui Song <[email protected]>
mm/mglru: fix and remove redundant unevictable folio handling

Arvind Yadav <[email protected]>
mm/migrate_device: clear stale mapping after freeing swapcache

Longlong Xia <[email protected]>
zram: fix out-of-bounds access in writeback_store()

Sergey Senozhatsky <[email protected]>
zram: set default primary compressor in zram_destroy_comps()

Chuck Lever <[email protected]>
NFSD: check truncate permission under inode lock

NeilBrown <[email protected]>
nfsd: Pass 'cred' instead of 'rqstp' to some functions.

Jeff Layton <[email protected]>
lockd, nfsd: RCU-protect nlmsvc_ops dispatch

Jeff Layton <[email protected]>
nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke

NeilBrown <[email protected]>
nfsd: split sc_status out of sc_type

Chuck Lever <[email protected]>
NFSD: Clean up nfsd4_encode_layoutreturn()

Chuck Lever <[email protected]>
NFSD: Clean up nfsd4_encode_stateid()

Chuck Lever <[email protected]>
NFSD: Add simple u32, u64, and bool encoders

Jeff Layton <[email protected]>
nfsd: fix stale s2s_cp_stateids IDR entry for async COPY

Robbie Ko <[email protected]>
nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops

Chuck Lever <[email protected]>
NFSD: Prevent client use-after-free during delegation revoke

Xiubo Li <[email protected]>
ceph: fix UAF in check_new_map() on session freed during unlock

Michael Bommarito <[email protected]>
ceph: cap delegated inode count in ceph_parse_deleg_inos()

Max Kellermann <[email protected]>
ceph: do not repeat ceph_trim_dentries() if no progress possible

Guanghui Yang <[email protected]>
btrfs: drop recovered reloc root refs on recovery failure

Anand Jain <[email protected]>
btrfs: rename err to ret in btrfs_recover_relocation()

Anand Jain <[email protected]>
btrfs: rename ret to ret2 in btrfs_recover_relocation()

Anand Jain <[email protected]>
btrfs: rename ret to err in btrfs_recover_relocation()

Shuangpeng Bai <[email protected]>
btrfs: fix extent map leak in NOCOW direct I/O write

Frank Sorenson <[email protected]>
cifs: call pagecache_isize_extended() in cifs_setsize() when extending

Frank Sorenson <[email protected]>
smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()

Bryam Vargas <[email protected]>
smb: client: reject a tree connect response whose byte count is too small

Jiangshan Yi <[email protected]>
HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes

Florian Pradines <[email protected]>

    HID: mcp2221: fix OOB write in mcp2221_raw_event()

Jan Kara <[email protected]>
ext2: Fix lost inode updates for IS_SYNC inodes

Daniel Borkmann <[email protected]>
bpf: Disable preemption in __bpf_get_stack

Bryam Vargas <[email protected]>
dm array: validate array block headers on read

Ye Bin <[email protected]>
jbd2: use shrink_type type instead of bool type for __jbd2_journal_clean_checkpoint_list()

Zhiling Zou <[email protected]>
ip: orphan prefetched skbs before multicast forwarding

Andrea Mayer <[email protected]>
ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()

Yue Haibing <[email protected]>

    ipv6: annotate data-races around devconf->rpl_seg_enabled

Luxiao Xu <[email protected]>
sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir

Chuck Lever <[email protected]>
SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2

Chuck Lever <[email protected]>
svcrdma: Reject connection when transport allocation fails

Chuck Lever <[email protected]>
svcrdma: Handle ADDR_CHANGE CM event properly

Chuck Lever <[email protected]>
svcrdma: Reject inline replies that overflow the pull-up buffer

Chuck Lever <[email protected]>
svcrdma: Reject Read lists that exceed the page budget

Chuck Lever <[email protected]>
svcrdma: Use svc_xprt_put to free listener on create failure

Yan Zhen <[email protected]>
sunrpc: xprtrdma: Use ERR_CAST() to return

Chuck Lever <[email protected]>
svcrdma: Refactor the creation of listener CMA ID

Tejun Heo <[email protected]>
sched/core: Make core-sched flips wait for in-flight selections

Shuangpeng Bai <[email protected]>
lockd: fix NULL dereference on lockowner allocation failure

Jeff Layton <[email protected]>
lockd: adapt to breakup of struct file_lock

Jeff Layton <[email protected]>
filelock: split common fields into struct file_lock_core

Fan Wu <[email protected]>
power: supply: charger-manager: register regulators before exposing sysfs

Uwe Kleine-König <[email protected]>
power: supply: charger-manager: Convert to platform remove callback returning void

Fan Wu <[email protected]>
power: supply: lp8788-charger: fix use-after-free on remove

Andrew Davis <[email protected]>
power: supply: lp8788: Use devm_power_supply_register() helper

Uwe Kleine-König <[email protected]>
power: supply: lp8788-charger: Convert to platform remove callback returning void

Jianing Li <[email protected]>
power: supply: max17040: propagate register read errors

Weimin Xiong <[email protected]>
iommu/msm: Unwind probe state on registration failure

Srinivas Pandruvada <[email protected]>

    platform/x86: ISST: Add a NULL check for sst_inst[]

Abdun Nihaal <[email protected]>
platform/x86: int1092: Fix potential memory leak in sar_probe()

Rafael J. Wysocki <[email protected]>
platform/x86: intel_sar: Check ACPI_HANDLE() against NULL

Mario Limonciello <[email protected]>
platform/x86/amd/pmc: Propagate SMU errors and validate S2D address

Zihan Xi <[email protected]>
net: l2tp: do not propagate multicast notification errors

Xuanqiang Luo <[email protected]>
net: ravb: serialize PTP clock teardown

Hidayath Khan <[email protected]>
net/smc: stop killed, freed and out_of_sync sharing a byte

Simon Horman <[email protected]>
net/smc: Address spelling errors

Abdun Nihaal <[email protected]>
mfd: sm501: Fix potential memory leaks during remove

Uwe Kleine-König <[email protected]>
mfd: sm501: Convert to platform remove callback returning void

Dawei Feng <[email protected]>
wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()

Johannes Berg <[email protected]>
wifi: iwlwifi: dvm: pair transport op-mode enter/leave

Bryam Vargas <[email protected]>
wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy

StanleyYP Wang <[email protected]>
wifi: mt76: mt7915: set correct background radar capability

Jens Axboe <[email protected]>
io_uring: defer eventfd signaling when queued from a wakeup handler

Wei Fang <[email protected]>
net: tap: fix wrong transport_header when sending VLAN-tagged frame

Akihiko Odaki <[email protected]>
tap: Keep hdr_len in tap_get_user()

Leon Romanovsky <[email protected]>
ntb: Store original DMA address for future release

Koichiro Den <[email protected]>
NTB: ntb_transport: Use ntb_get_dma_dev() for DMA buffers

Koichiro Den <[email protected]>
NTB: core: Add .get_dma_dev() callback to ntb_dev_ops

Eric Dumazet <[email protected]>
tipc: avoid busy looping in tipc_exit_net()

Ibrahim Hashimov <[email protected]>
RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp

Bob Pearson <[email protected]>
RDMA/rxe: Merge request and complete tasks

Bob Pearson <[email protected]>
RDMA/rxe: Remove redundant scheduling of rxe_completer

Yong Wang <[email protected]>
tcp: clamp route advmss to TCP_MIN_MSS

Thomas Zimmermann <[email protected]>
fbdev: Wrap user-invoked calls to fb_set_var() in helper

Ali Ahmet Memis <[email protected]>
Bluetooth: ISO: zero the sockaddr before returning it in getname

Bryam Vargas <[email protected]>
selinux: reject a permission value exceeding the class permission count

William Palacek <[email protected]>
drm/amdkfd: Add bounds check for CRAT subtype length

Yongqiang Sun <[email protected]>
drm/amdkfd: Fix infinite loop parsing CRAT with zero subtype length

Luxiao Xu <[email protected]>
bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie

Jiri Slaby (SUSE) <[email protected]>
drm/amd/display: use proper context for logging

Yuho Choi <[email protected]>
dmaengine: idxd: fix double free of wq, engine, and group structs

Guenter Roeck <[email protected]>
hwmon: (sht3x) Fix unaligned accesses

Chenguang Zhao <[email protected]>
net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller

Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks

Danilo Krummrich <[email protected]>
Drivers: hv: vmbus: use generic driver_override infrastructure

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: use conntrack GC to reap expectations

Terry Bowman <[email protected]>
cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size

Prasanna Kumar T S M <[email protected]>
soc: xilinx: Shutdown and free rx mailbox channel

Uwe Kleine-König <[email protected]>
soc/xilinx: zynqmp_power: Convert to platform remove callback returning void

Yihang Li <[email protected]>
scsi: hisi_sas: Add slave_destroy interface for v3 hw

Yuho Choi <[email protected]>
media: atomisp: gc2235: fix UAF and memory leak

Qiuxu Zhuo <[email protected]>
EDAC/igen6: Fix call trace due to missing release()

Fernando Fernandez Mancera <[email protected]>
netfilter: synproxy: fix unaligned memory access in timestamp adjustment

Fernando Fernandez Mancera <[email protected]>
netfilter: synproxy: adjust duplicate timestamp options

Fernando Fernandez Mancera <[email protected]>
netfilter: synproxy: drop packets if timestamp adjustment fails

Florian Westphal <[email protected]>
netfilter: make nftables drops visible in net dropmonitor

David Carlier <[email protected]>
netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag

Weiming Shi <[email protected]>
btrfs: lzo: reject compressed segment that overflows the compressed input

Ratheesh Kannoth <[email protected]>
octeontx2-af: npc: Fix size of entry2cntr_map

Cen Zhang <[email protected]>

    ALSA: seq: oss: Serialize readq reset state with q->lock

James Clark <[email protected]>
coresight: ete: Always save state on power down

Ivan Abramov <[email protected]>

    ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns()

Masami Hiramatsu (Google) <[email protected]>
tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg

Candice Li <[email protected]>
drm/amdgpu: reject oversized IBs with per-ring packet limits

Hongjie Fang <[email protected]>
scsi: core: pair EH runtime PM get and put

Jérémy Jean <[email protected]>
sctp: validate cookie AUTH state before use

Julian Anastasov <[email protected]>
ipvs: revalidate ihl to prevent out-of-bounds access

Eric Dumazet <[email protected]>
l2tp: fix tunnel and session refcount leak on seq_file release

Aleksandr Nogikh <[email protected]>
firewire: ohci: fix NULL pointer dereference in ar_context_release

Mark Tomlinson <[email protected]>
gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock

Karthikeyan KS <[email protected]>
soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read

David Lee <[email protected]>
btrfs: lzo: reject inline extents without valid headers

Chengfeng Ye <[email protected]>
bpf: Fix netns reference imbalance in conntrack kfuncs

Linfeng Sun  <[email protected]>
vhost_iotlb: bound map allocation in add_range

Guenter Roeck <[email protected]>
hwmon: (pmbus) Fix type confusion in notification logic

Eric Dumazet <[email protected]>
netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()

Alexandra Winter <[email protected]>
s390/ism: Fix UAF of sba and ieq during ism_dev_exit()

Hongyan Xu <[email protected]>
watchdog: at91sam9_wdt: prevent timer rearm during teardown

Dongli Zhang <[email protected]>

    net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()

Ryan Wilbur <[email protected]>
serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx

Jérémy Jean <[email protected]>
tls: rx: restore msg_iter before TLS 1.3 optimistic retry

Sabrina Dubroca <[email protected]>
selftests: tls: add rekey tests

Sabrina Dubroca <[email protected]>
selftests: tls: add test with a partially invalid iov

Steven Rostedt <[email protected]>
eventfs: Use children field for rcu head and add memory barriers

Zhiling Zou <[email protected]>
mm/page_table_check: skip special zero mappings

Dongjiang Zhu <[email protected]>
btrfs: skip global block reserve accounting for rescue mounts

Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: make nft_object rhltable per table

Jason Xing <[email protected]>
xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx

Cen Zhang (Microsoft) <[email protected]>
net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds

Eric Dumazet <[email protected]>
net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister()

Pauli Virtanen <[email protected]>
Bluetooth: ISO: hold sk properly in iso_conn_ready

Hariprasad Kelam <[email protected]>
octeontx2-af: Block VFs from clobbering special CGX PKIND state

Harald Freudenberger <[email protected]>
s390/zcrypt: Close speculative mem read possibility

Wei Zhang <[email protected]>
wifi: ath11k: cancel SSR work items during PCI shutdown

Di Shen <[email protected]>
OPP: Fix race between OPP addition and lookup

Lianfa Weng <[email protected]>
RDMA/hns: Fix log flood after cmd_mbox failure

Takashi Iwai <[email protected]>
ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data

Geliang Tang <[email protected]>
nvmet-tcp: fix page fragment cache leak in error path

Yunsheng Lin <[email protected]>
net: introduce page_frag_cache_drain()

Hannes Reinecke <[email protected]>
nvmet-tcp: allocate socket file

Hannes Reinecke <[email protected]>
nvmet-tcp: make nvmet_tcp_alloc_queue() a void function

Abd-Alrhman Masalkhi <[email protected]>
md/raid1,raid10: fix deadlock in read error recovery path

Miaoqing Pan <[email protected]>
wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic()

Michael S. Tsirkin <[email protected]>
vhost: fix vhost_get_avail_idx for a non empty ring

Michael S. Tsirkin <[email protected]>
vhost: move smp_rmb() into vhost_get_avail_idx()

Xianting Tian <[email protected]>
vhost: correct misleading printing information

Zhang Cen <[email protected]>
ocfs2: validate fast symlink target during inode read

Dmitry Antipov <[email protected]>
ocfs2: add extra consistency checks for chain allocator dinodes

Pablo Neira Ayuso <[email protected]>
netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount

Bernard Metzler <[email protected]>
RDMA/siw: Fix endpoint/socket association handling

Guoqing Jiang <[email protected]>
RDMA/siw: Introduce siw_destroy_cep_sock

Kaitao Cheng <[email protected]>
bpf: Clear rb node linkage when freeing bpf_rb_root

David Windsor <[email protected]>
bpf: Reject sleepable BPF_LSM_CGROUP programs at load time

Larysa Zaremba <[email protected]>
ixgbe: do not configure xps for XDP queues

Yun Zhou <[email protected]>
ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT

HanQuan <[email protected]>
ALSA: seq: Fix kernel heap address leak in bounce_error_event()

Takashi Iwai <[email protected]>
ALSA: seq: Drop superfluous filter argument of get_event_dest_client()

Dan Williams <[email protected]>
cxl/region: Block region delete during region creation

Joe Damato <[email protected]>
bnxt: fix head underflow on XDP head-grow

Eric Dumazet <[email protected]>
net: watchdog: fix refcount tracking races

Cen Zhang <[email protected]>
ALSA: seq: avoid stale FIFO cells during resize

Takashi Iwai <[email protected]>
ALSA: seq: Clean up fifo locking with guard

Takashi Iwai <[email protected]>
ALSA: seq: fifo: Use guard() for locking

Kuniyuki Iwashima <[email protected]>
sockmap: Fix use-after-free in udp_bpf_recvmsg()

Selvin Xavier <[email protected]>
RDMA/bnxt_re: Initialize dpi variable to zero

Selvin Xavier <[email protected]>
RDMA/bnxt_re: Avoid repeated requests to allocate WC pages

Jacob Moroni <[email protected]>
RDMA/irdma: Replace waitqueue and flag with completion

Baoli.Zhang <[email protected]>
soundwire: fix bug in sdw_add_element_group_count found by syzkaller

Chris Mason <[email protected]>
xprtrdma: Fix ep kref imbalance on ADDR_CHANGE

Abd-Alrhman Masalkhi <[email protected]>
md/raid1: fix writes_pending and barrier reference leaks on write failures

Abd-Alrhman Masalkhi <[email protected]>
md/raid10: fix writes_pending leak on write request failures

John Garry <[email protected]>
md/raid10: Handle bio_split() errors

Abd-Alrhman Masalkhi <[email protected]>
md/raid10: fix writes_pending and barrier reference leaks on discard failures

Yiyang Chen <[email protected]>
bpf: Guard conntrack opts error writes

Puranjay Mohan <[email protected]>
bpf: net: netfilter: drop dead NULL checks

Chen Cheng <[email protected]>
md/raid5: avoid R5_Overlap races while breaking stripe batches

Eric Dumazet <[email protected]>
net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync

Eric Dumazet <[email protected]>
tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()

Xin Long <[email protected]>
sctp: add INIT verification after cookie unpacking

Abdurrahman Hussain <[email protected]>
hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid()

Xin Long <[email protected]>
sctp: fix addr_wq_timer race in sctp_free_addr_wq()

Michael Bommarito <[email protected]>

    xen/pvcalls: bound backend response req_id before indexing rsp[]

David Howells <[email protected]>

    afs: Fix reinitialisation of the inode, in particular ->lock_work

Yiyang Chen <[email protected]>
HID: bpf: Fix hid_bpf_get_data() range check

Feng Liu <[email protected]>

    net/mlx5e: Fix publication race for priv->channel_stats[]

Cen Zhang <[email protected]>
Bluetooth: 6lowpan: avoid untracked enable work

Yuho Choi <[email protected]>
net/liquidio: drop cached VF pci_dev LUT

Sandipan Das <[email protected]>
perf/x86/amd/core: Avoid enabling BRS from the SVM reload path

Rosen Penev <[email protected]>
gpio: mvebu: free generic chips on unbind

Eric Dumazet <[email protected]>
ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer()

Tamaki Yanagawa <[email protected]>
netfilter: nft_lookup: fix catchall element handling with inverted lookups

Marc Zyngier <[email protected]>
KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling

Deepanshu Kartikey <[email protected]>
mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch

Matthew Wilcox (Oracle) <[email protected]>
fs: Remove NTFS classic

Florian Fuchs <[email protected]>
mtd: maps: vmu-flash: fix fault in unaligned fixup

Ian Bridges <[email protected]>
ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec

Deepanshu Kartikey <[email protected]>
ocfs2: validate i_refcount_loc when refcount flag is set

Dmitry Antipov <[email protected]>
ocfs2: add suballoc slot check in ocfs2_validate_inode_block()

Julian Sun <[email protected]>
ocfs2: correct l_next_free_rec in online check

Michael Bommarito <[email protected]>
nvmet-auth: reject short AUTH_RECEIVE buffers

Damien Le Moal <[email protected]>
nvmet: Introduce nvmet_req_transfer_len()

Mikulas Patocka <[email protected]>
dm-verity: fix buffer overflow in FEC calculation

Guangshuo Li <[email protected]>
mmc: vub300: fix use-after-free on probe failure

Zhao Li <[email protected]>
wifi: ieee80211: validate MLE common info length

Harald Freudenberger <[email protected]>
s390/zcrypt: Fix buffer over-read in cca_cipher2protkey

Amir Goldstein <[email protected]>
ovl: check access to copy_file_range source with src mounter creds

Jamal Hadi Salim <[email protected]>
net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains

George Guo <[email protected]>
LoongArch: Fix address space mismatch in kexec command line lookup

Baoquan He <[email protected]>
loongarch, kexec: change dependency of object files

Petr Wozniak <[email protected]>

    xfrm: fix stale skb->prev after async crypto steals a GSO segment

Jacob Moroni <[email protected]>
RDMA/irdma: Prevent user-triggered null deref on QP create

Maoyi Xie <[email protected]>
wifi: mac80211: defer link RX stats percpu free to RCU

Sarika Sharma <[email protected]>
wifi: cfg80211: add link_station_info structure to support MLO statistics

Sarika Sharma <[email protected]>
wifi: mac80211: refactor populating mesh related fields in sinfo

Peddolla Harshavardhan Reddy <[email protected]>
wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock

Cen Zhang <[email protected]>
wifi: cfg80211: use wiphy work for socket owner autodisconnect

Mostafa Saleh <[email protected]>
firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit()

Matt Bobrowski <[email protected]>
bpf: Fix UAF in sock clone early bailouts

Fushuai Wang <[email protected]>
bpf: Use rcu_read_lock_dont_migrate in bpf_sk_storage.c

Menglong Dong <[email protected]>
rcu: add rcu_read_lock_dont_migrate()

Hou Tao <[email protected]>
bpf: Disable migration when cloning sock storage

Hou Tao <[email protected]>
bpf: Disable migration when destroying sock storage

David Jeffery <[email protected]>
scsi: core: wake eh reliably when using scsi_schedule_eh

Weiming Shi <[email protected]>
tipc: serialize udp bearer replicast list updates

Nikhil P. Rao <[email protected]>
pds_core: fix use-after-free on workqueue during remove

Brett Creeley <[email protected]>
pds_core: Clean up init/uninit flows to be more readable

Brett Creeley <[email protected]>
pds_core: Don't assign interrupt index/bound_intr to notifyq

Frank Sorenson <[email protected]>
cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths

Frank Sorenson <[email protected]>
cifs: prevent readdir from changing file size due to stale directory metadata

Gregor Herburger <[email protected]>
drm/vc4: hvs/v3d: Fix null dereference in unbind

Gal Pressman <[email protected]>
net/mlx5: Fix MCIA register buffer overflow on 32 dword reads

Tvrtko Ursulin <[email protected]>
drm/amdgpu: Fix context pstate override handling

David Francis <[email protected]>
drm/amdkfd: Check bounds on CRIU restore queue type and mqd size

Jani Nikula <[email protected]>
drm/i915/bios: range check LFP Data Block panel_type2

Joonas Lahtinen <[email protected]>
drm/i915/gt: Fix NULL deref on sched_engine alloc failure

Jani Nikula <[email protected]>
drm/i915/mst: limit DP MST ESI service loop

Mario Limonciello <[email protected]>
drm/amdgpu: Release VFCT ACPI table reference

Lijo Lazar <[email protected]>
drm/amdgpu: Add wrapper for freeing vbios memory

Lijo Lazar <[email protected]>
drm/amdgpu: Use dbg level for VBIOS check messages

Linmao Li <[email protected]>
drm/vc4: Shut down BO cache timer before teardown

Guangshuo Li <[email protected]>
media: vivid: fix cleanup bugs in vivid_init()

Kanglong Wang <[email protected]>
LoongArch: Move jump_label_init() before parse_early_param()

Davide Ornaghi <[email protected]>
ksmbd: fix path resolution in ksmbd_vfs_kern_path_create

Jori Koolstra <[email protected]>
vfs: make LAST_XXX private to fs/namei.c

Al Viro <[email protected]>
ksmbd_vfs_rename(): vfs_path_parent_lookup() accepts ERR_PTR() as name

Sean Christopherson <[email protected]>
KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state

Weiming Shi <[email protected]>
Bluetooth: eir: Fix stack OOB write when prepending the Flags AD

Chuck Lever <[email protected]>
net/handshake: Take a long-lived file reference at submit

Cássio Gabriel <[email protected]>
ALSA: hda/cs35l41: Fix firmware load work teardown

Namjae Jeon <[email protected]>
ksmbd: prevent path traversal bypass by restricting caseless retry

Namjae Jeon <[email protected]>
ksmbd: use opener credentials for ADS I/O

Haofeng Li <[email protected]>
ksmbd: validate NTLMv2 response before updating session key

Ralph Boehme <[email protected]>
smb/client: fix chown/chgrp with SMB3 POSIX Extensions

Guangshuo Li <[email protected]>
cpufreq: qcom-cpufreq-hw: Fix possible double free

Lizhe <[email protected]>

    cpufreq: Make cpufreq_driver->exit() return void

Viresh Kumar <[email protected]>
cpufreq: pcc: Remove empty exit() callback

Johan Hovold <[email protected]>
USB: iowarrior: fix use-after-free on disconnect race

Bryam Vargas <[email protected]>
nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page

Ahsan Atta <[email protected]>
crypto: qat - protect service table iterations with service_lock

Guenter Roeck <[email protected]>
hwmon: (lm90) Add lock protection to lm90_alert

Felix Gu <[email protected]>
drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()

Jia Zhu <[email protected]>
erofs: fix metabuf leak in inode xattr initialization

Junyi Liu <[email protected]>
ksmbd: validate SID in parent security descriptor during ACL inheritance

Zhao Li <[email protected]>

    wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb

Sarika Sharma <[email protected]>
wifi: mac80211: fix missing RX bitrate update for mesh forwarding path

Florian Westphal <[email protected]>
netfilter: x_tables: allocate hook ops while under mutex

Florian Westphal <[email protected]>
netfilter: x_tables: allow initial table replace without emitting audit log message

Yan Zhen <[email protected]>
netfilter: Use kmemdup_array instead of kmemdup for multiple allocation

Kartik <[email protected]>
mm/util: Introduce kmemdup_array()

Florian Westphal <[email protected]>
netfilter: ebtables: move to two-stage removal scheme

Florian Westphal <[email protected]>
netfilter: bridge: eb_tables: close module init race

Guenter Roeck <[email protected]>
hwmon: (lm90) Stop work before releasing hwmon device

Qing Ming <[email protected]>
cgroup/rstat: validate cpu before css_rstat_cpu() access

Jakub Kicinski <[email protected]>
ethtool: rss: fix indir_table and hkey leak on get_rxfh failure

Chuck Lever <[email protected]>
net/handshake: Drain pending requests at net namespace exit

Heitor Alves de Siqueira <[email protected]>
Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close

Greg Kroah-Hartman <[email protected]>
usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers

Greg Kroah-Hartman <[email protected]>

    usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes()

Sean Christopherson <[email protected]>
KVM: SEV: Ignore Port I/O requests of length '0'

Christian König <[email protected]>
drm/amdgpu: fix amdgpu_hmm_range_get_pages

Yinjie Yao <[email protected]>
drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring

Konstantin Khorenko <[email protected]>
gcov: use atomic counter updates to fix concurrent access crashes

Mikhail Lobanov <[email protected]>
f2fs: read COW data with the original inode during atomic write

Hongling Zeng <[email protected]>
fbdev: omap2: fix use-after-free in omapfb_mmap

Hongling Zeng <[email protected]>
fbdev: omap2: fix inconsistent lock returns in omapfb_mmap

Anna Maniscalco <[email protected]>
drm/msm: always recover the gpu

Harry Wentland <[email protected]>
drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval()

Rory Little <[email protected]>
wifi: mt76: mt7921: Place upper limit on station AID

Srinivasan Shanmugam <[email protected]>
drm/amd/display: Avoid NULL dereference in dc_dmub_srv error paths

Erni Sri Satya Vennela <[email protected]>
net: mana: Guard mana_remove against double invocation

Morduan Zang <[email protected]>
net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind

Qu Wenruo <[email protected]>
btrfs: only release the dirty pages io tree after successful writes

Lee Jones <[email protected]>
l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()

Fedor Pchelkin <[email protected]>
wifi: fix leak if split 6 GHz scanning fails

Dragos Tatulea <[email protected]>
net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure

Stanislav Fomichev <[email protected]>
tools: ynl: extend netdev sample to dump xdp-rx-metadata-features

Stanislav Fomichev <[email protected]>
bpf: make it easier to add new metadata kfunc

Xin Long <[email protected]>
sctp: validate embedded INIT chunk and address list lengths in cookie

Salman Alghamdi <[email protected]>
staging: rtl8723bs: fix buffer over-read in rtw_update_protection

Vivek BalachandharTN <[email protected]>
staging: rtl8723bs: clean up redundant & parentheses

Meir Elisha <[email protected]>
Staging: rtl8723bs: Delete dead code from update_current_network()

Meir Elisha <[email protected]>
Staging: rtl8723bs: Remove dead code from _rtw_free_network()

Salman Alghamdi <[email protected]>
staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction

Bartosz Golaszewski <[email protected]>
nvmem: core: fix use-after-free bugs in error paths

Miquel Raynal <[email protected]>
nvmem: core: Rework layouts to become regular devices

Miquel Raynal <[email protected]>
nvmem: Move of_nvmem_layout_get_container() in another header

Miquel Raynal <[email protected]>
of: device: Export of_device_make_bus_id()

HyungJung Joo <[email protected]>
fs/mbcache: cancel shrink work before destroying the cache

Filipe Manana <[email protected]>
btrfs: fix deadlock between reflink and transaction commit when using flushoncommit

Danilo Krummrich <[email protected]>
PCI: use generic driver_override infrastructure

Danilo Krummrich <[email protected]>
vdpa: use generic driver_override infrastructure

Danilo Krummrich <[email protected]>
bus: fsl-mc: use generic driver_override infrastructure

Zilin Guan <[email protected]>
wifi: ath11k: fix memory leaks in beacon template setup

Ritesh Harjani (IBM) <[email protected]>
powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy

Ritesh Harjani (IBM) <[email protected]>
powerpc/64s: Fix unmap race with PMD migration entries

Zilin Guan <[email protected]>
wifi: mt76: Fix memory leak after mt76_connac_mcu_alloc_sta_req()

Duoming Zhou <[email protected]>

    wifi: mt76: mt7996: fix use-after-free bugs in mt7996_mac_dump_work()

Eric Dumazet <[email protected]>
net: pull headers in qdisc_pkt_len_segs_init()

Xin Long <[email protected]>
sctp: disable BH before calling udp_tunnel_xmit_skb()

Vasant Hegde <[email protected]>
iommu/amd: Fix clone_alias() to use the original device's devid

Damien Riégel <[email protected]>
greybus: raw: fix use-after-free on cdev close

Jianan Huang <[email protected]>
f2fs: avoid reading already updated pages during GC

Yongpeng Yang <[email protected]>
f2fs: fix data loss caused by incorrect use of nat_entry flag

Michal Schmidt <[email protected]>
ice: fix double-free of tx_buf skb

Pablo Neira Ayuso <[email protected]>
netfilter: nat: use kfree_rcu to release ops

Edward Adam Davis <[email protected]>
sched/psi: fix race between file release and pressure write

Amir Goldstein <[email protected]>
fsnotify: fix inode reference leak in fsnotify_recalc_mask()

Raphael Zimmer <[email protected]>
libceph: Fix potential out-of-bounds access in __ceph_x_decrypt()

Weiming Shi <[email protected]>
tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR

D. Wythe <[email protected]>
Revert "net/smc: Introduce TCP ULP support"

Li Zhijian <[email protected]>

    RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE

Florian Westphal <[email protected]>
netfilter: nf_tables: use list_del_rcu for netlink hooks

Stephen Smalley <[email protected]>
selinux: allow multiple opens of /sys/fs/selinux/policy

Antoniu Miclaus <[email protected]>
iio: frequency: admv1013: fix NULL pointer dereference on str

Antoniu Miclaus <[email protected]>
iio: frequency: admv1013: add dev variable

David Lechner <[email protected]>
iio: frequency: admv1013: Use devm_regulator_get_enable_read_voltage()

Andy Shevchenko <[email protected]>
device property: Add fwnode_property_match_property_string()

Yicong Yang <[email protected]>
coresight: tmc-etr: Fix race condition between sysfs and perf mode

Srinivasan Shanmugam <[email protected]>
drm/amd/display: Fix dc_link NULL handling in HPD init

Johan Hovold <[email protected]>
spi: mpc52xx: fix use-after-free on registration failure

Johan Hovold <[email protected]>
spi: mpc52xx: fix controller deregistration

Yang Yingliang <[email protected]>
spi: mpc52xx: switch to use modern name

Jason Gunthorpe <[email protected]>
RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event()

Yongpeng Yang <[email protected]>
f2fs: fix fsck inconsistency caused by FGGC of node block

Osama Abdelkader <[email protected]>
riscv: kvm: fix vector context allocation leak

Conor Dooley <[email protected]>
spi: microchip-core-qspi: control built-in cs manually

Eric Biggers <[email protected]>
dm-verity-fec: fix reading parity bytes split across blocks (take 3)

Kevin Cheng <[email protected]>
KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1

Yosry Ahmed <[email protected]>
KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12

Yosry Ahmed <[email protected]>
KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN

Yosry Ahmed <[email protected]>
KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT

Chiara Meiohas <[email protected]>
RDMA/mlx5: Fix UMR hang in LAG error state unload

Deepanshu Kartikey <[email protected]>
gfs2: fix memory leaks in gfs2_fill_super error path

Lu Baolu <[email protected]>
iommu/vt-d: Clear Present bit before tearing down context entry

Gao Xiang <[email protected]>
erofs: fix inline data read failure for ztailpacking pclusters

Jie Zhang <[email protected]>
net: stmmac: fix oops when split header is enabled

Boris Burkov <[email protected]>
btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation

Guillaume Gonnet <[email protected]>
bpf: Fix tcx/netkit detach permissions when prog fd isn't given

Julian Anastasov <[email protected]>
ipvs: do not keep dest_dst if dev is going down

Brian Witte <[email protected]>
netfilter: nf_tables: revert commit_mutex usage in reset path

Lu Baolu <[email protected]>
iommu/vt-d: Clear Present bit before tearing down PASID entry

Ryan Lin <[email protected]>
HID: intel-ish-hid: fix NULL-ptr-deref in ishtp_bus_remove_all_clients

Even Xu <[email protected]>
HID: Intel-ish-hid: Ishtp: Fix sensor reads after ACPI S3 suspend

Andreas Gruenbacher <[email protected]>
gfs2: Fix slab-use-after-free in qd_put

Nhat Pham <[email protected]>
list_lru: allow explicit memcg and NUMA node selection

Andy Shevchenko <[email protected]>
mm: list_lru: Update kernel documentation to follow the requirements

Dragos Tatulea <[email protected]>
net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ

Dragos Tatulea <[email protected]>
net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ

Chen Ni <[email protected]>
ASoC: amd: acp-mach-common: Add missing error check for clock acquisition

Vladimir Riabchun <[email protected]>
scsi: qla2xxx: Completely fix fcport double free

Adrian Hunter <[email protected]>
i3c: mipi-i3c-hci: Fix race in DMA ring dequeue

Adrian Hunter <[email protected]>
i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue

Filipe Manana <[email protected]>
btrfs: reserve enough transaction items for qgroup ioctls

Filipe Manana <[email protected]>
btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()

Qu Wenruo <[email protected]>
btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()

Lijo Lazar <[email protected]>
drm/amdgpu: Skip vcn poison irq release on VF

Hugo Villeneuve <[email protected]>
drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels

Magnus Lindholm <[email protected]>
alpha: fix user-space corruption during memory compaction

Arnd Bergmann <[email protected]>
arch: turn off -Werror for architectures with known warnings

Mario Peter <[email protected]>
usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()

Stefano Stabellini <[email protected]>
9p/xen: protect xen_9pfs_front_free against concurrent calls

Eugenio Pérez <[email protected]>
vhost: move vdpa group bound check to vhost_vdpa

Jiayuan Chen <[email protected]>
kcm: fix zero-frag skb in frag_list on partial sendmsg error

Tetsuo Handa <[email protected]>
team: avoid NETDEV_CHANGEMTU event when unregistering slave

Ping-Ke Shih <[email protected]>
wifi: rtw89: pci: validate sequence number of TX release report

Jianbo Liu <[email protected]>
net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query

Jakub Kicinski <[email protected]>
netconsole: avoid OOB reads, msg is not nul-terminated

Nicholas Carlini <[email protected]>
ksmbd: fix signededness bug in smb_direct_prepare_negotiation()

Johannes Berg <[email protected]>
wifi: iwlwifi: fix 22000 series SMEM parsing

Christoph Hellwig <[email protected]>
xfs: remove xfs_attr_leaf_hasname

Szymon Wilczek <[email protected]>
ntfs3: fix circular locking dependency in run_unpack_ex

Konstantin Komarov <[email protected]>
fs/ntfs3: Accumulated refactoring changes

Filipe Manana <[email protected]>
btrfs: fix zero size inode with non-zero size after log replay

David Sterba <[email protected]>
btrfs: tree-log: don't use token set/get accessors in fill_inode_item()

Jeff Layton <[email protected]>
btrfs: convert to new timestamp accessors

Joel Fernandes <[email protected]>
srcu: Use irq_work to start GP in tiny SRCU

Thomas Gleixner <[email protected]>
irqwork: Move data struct to a types header

Suren Baghdasaryan <[email protected]>
types: move struct rcuwait into types.h

Keenan Dong <[email protected]>
xfrm: account XFRMA_IF_ID in aevent size calculation

Eric Dumazet <[email protected]>
ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()

Justin Iurman <[email protected]>
net: ioam6: fix OOB and missing lock

Linus Torvalds <[email protected]>
x86-64: rename misleadingly named '__copy_user_nocache()' function

Wang Tao <[email protected]>
Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers

Lee Jones <[email protected]>
HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure

Lee Jones <[email protected]>
HID: core: Mitigate potential OOB by removing bogus memset()

Li Chen <[email protected]>
HID: rate-limit hid_warn to prevent log flooding

Tatsuya S <[email protected]>
HID: core: Add reserved item tag for main items

Sabrina Dubroca <[email protected]>
mpls: add seqcount to protect the platform_label{,s} pair

Guoyu Su <[email protected]>
net: use skb_header_pointer() for TCPv4 GSO frag_off check

Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists

Daniel Borkmann <[email protected]>
bpf: Fix incorrect pruning due to atomic fetch precision tracking

Oleh Konko <[email protected]>
Bluetooth: hci_event: move wake reason storage into validated event handlers

Ville Syrjälä <[email protected]>
drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode

Kuen-Han Tsai <[email protected]>
usb: gadget: f_ecm: Fix net_device lifecycle with device_move

Kuen-Han Tsai <[email protected]>
usb: gadget: f_eem: Fix net_device lifecycle with device_move

Kuen-Han Tsai <[email protected]>
usb: gadget: f_subset: Fix net_device lifecycle with device_move

Kuen-Han Tsai <[email protected]>
usb: gadget: f_rndis: Fix net_device lifecycle with device_move

Michael Bommarito <[email protected]>
ksmbd: validate num_aces and harden ACE walk in smb_inherit_dacl()

Douya Le <[email protected]>
crypto: af_alg - limit RX SG extraction by receive buffer budget

Qi Tang <[email protected]>
xfrm: hold dev ref until after transport_finish NF_HOOK

Jianbo Liu <[email protected]>
xfrm: hold device only for the asynchronous decryption

Eric Dumazet <[email protected]>
net: adopt skb_network_offset() and similar helpers

David Carlier <[email protected]>
net: lan966x: fix page pool leak in error paths

Pengpeng Hou <[email protected]>
rxrpc: proc: size address buffers for %pISpc output

Michael Zimmermann <[email protected]>
usb: gadget: f_hid: don't call cdev_init while cdev in use

Sean Christopherson <[email protected]>

    KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock

Ge Yang <[email protected]>
KVM: SEV: Use long-term pin when registering encrypted memory regions

Janosch Frank <[email protected]>
s390/mm: Add missing secure storage access fixups for donated memory

Vladimir Yakovlev <[email protected]>
spi: spi-dw-dma: fix print error log when wait finish transaction

Chaitanya Kulkarni <[email protected]>
nvmet: move async event work off nvmet-wq

Fernando Fernandez Mancera <[email protected]>
ipv4: nexthop: allocate skb dynamically in rtm_get_nexthop()

Alison Schofield <[email protected]>
cxl/port: Fix use after free of parent_port in cxl_detach_ep()

Justin Chen <[email protected]>
net: bcmasp: fix double free of WoL irq

Kohei Enju <[email protected]>
iavf: fix out-of-bounds writes in iavf_get_ethtool_stats()

Danilo Krummrich <[email protected]>
spi: use generic driver_override infrastructure

Eric Huang <[email protected]>
drm/amdgpu: prevent immediate PASID reuse case

Christophe JAILLET <[email protected]>
drm/amdgpu: Remove usage of the deprecated ida_simple_xx() API

Namjae Jeon <[email protected]>
ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION

Kent Overstreet <[email protected]>
fs: super_set_uuid()

Jiayuan Chen <[email protected]>
serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN

Fuad Tabba <[email protected]>
bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing

Hou Tao <[email protected]>
bpf, arm64: Enable the inline of bpf_kptr_xchg()

Larysa Zaremba <[email protected]>
ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz

Juri Lelli <[email protected]>
sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting

Niklas Cassel <[email protected]>
PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry

Davidlohr Bueso <[email protected]>
cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed()

Weiming Shi <[email protected]>
net: add xmit recursion limit to tunnel xmit functions

Eric Dumazet <[email protected]>
tcp: secure_seq: add back ports to TS offset

Namjae Jeon <[email protected]>
ksmbd: add chann_lock to protect ksmbd_chann_list xarray

Qu Wenruo <[email protected]>
btrfs: reject new transactions if the fs is fully read-only

Perry Yuan <[email protected]>
drm/amd/pm: Disable MMIO access during SMU Mode 1 reset

Edward Adam Davis <[email protected]>
ALSA: usb-audio: Prevent excessive number of frames

Breno Leitao <[email protected]>
spi: tegra210-quad: Protect curr_xfer check in IRQ handler

Zilin Guan <[email protected]>
of: unittest: Fix memory leak in unittest_data_add()

Cong Nguyen <[email protected]>
staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths

Kumar Kartikeya Dwivedi <[email protected]>
bpf: Mark bpf_refcount field as unique

Haotian Zhang <[email protected]>
PCI: endpoint: Add missing NULL check for alloc_workqueue()

Manivannan Sadhasivam <[email protected]>
net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels

Bitterblue Smith <[email protected]>
wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()

Ping-Ke Shih <[email protected]>
wifi: rtw88: debugfs: support multiple adapters debugging

Johannes Berg <[email protected]>
wifi: mac80211: don't WARN for connections on invalid channels

FengWei Shih <[email protected]>
md: suspend array while updating raid_disks via sysfs

Yu Kuai <[email protected]>
md: add new helpers to suspend/resume and lock/unlock array

Yu Kuai <[email protected]>
md: add new helpers to suspend/resume array

Gregory CLEMENT <[email protected]>
MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits

Al Viro <[email protected]>
functionfs: fix the open/removal races

Al Viro <[email protected]>
functionfs, gadgetfs: use simple_recursive_removal()

Paul Cercueil <[email protected]>
usb: gadget: functionfs: Factorize wait-for-endpoint code

Paul Cercueil <[email protected]>
usb: gadget: Support already-mapped DMA SGs

Minseong Kim <[email protected]>
Input: lkkbd - disable pending work before freeing device

Al Viro <[email protected]>
shmem: fix recovery on rename failures

Duoming Zhou <[email protected]>
Input: alps - fix use-after-free bugs caused by dev3_register_work

Duoming Zhou <[email protected]>
usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal

Tony Battersby <[email protected]>
scsi: qla2xxx: Clear cmds after chip reset

Sarika Sharma <[email protected]>
wifi: ath12k: Fix MSDU buffer types handling in RX error path

Arnaud Lecomte <[email protected]>
bpf: Fix stackmap overflow check in __bpf_get_stackid()

Xiaoqi Zhuang <[email protected]>
coresight: ETR: Fix ETR buffer use-after-free issue

Yun Zhou <[email protected]>
md: fix rcu protection in md_wakeup_thread

Yu Kuai <[email protected]>
md: fix stopping sync thread

Andreas Gruenbacher <[email protected]>
gfs2: Prevent recursive memory reclaim

Duoming Zhou <[email protected]>
scsi: imm: Fix use-after-free bug caused by unfinished delayed work

Thomas Bogendoerfer <[email protected]>
tty: serial: ip22zilog: Use platform device for probing

Thomas Gleixner <[email protected]>
serial: ip22zilog: Use port lock wrappers

Nitin Rawat <[email protected]>
scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)

Nitin Rawat <[email protected]>
scsi: ufs: qcom : Refactor phy_power_on/off calls

Samuel Zhang <[email protected]>
drm/amdgpu: fix gpu page fault after hibernation on PF passthrough

Lijo Lazar <[email protected]>
drm/amdgpu: Restore partition mode after reset

Akiva Goldberger <[email protected]>
mlx5: Fix default values in create CQ

Christian König <[email protected]>
drm/amdgpu: remove two invalid BUG_ON()s

Eric Dumazet <[email protected]>
tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()

Richard Leitner <[email protected]>
media: nxp: imx8-isi: Fix streaming cleanup on release

Cezary Rojewski <[email protected]>
ASoC: Intel: avs: Do not share the name pointer between components

Xiao Ni <[email protected]>
md/raid10: wait barrier before returning discard request with REQ_NOWAIT

Christian König <[email protected]>
drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM

Lijo Lazar <[email protected]>
drm/amdgpu: Show vram vendor only if available

Pauli Virtanen <[email protected]>
Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete

Harini T <[email protected]>
mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop

Ben Levinsky <[email protected]>
mailbox: zynqmp: Move buffered IPI setup to of_match selected routine

Ben Levinsky <[email protected]>
mailbox: zynqmp: Move of_match structure closer to usage

Randy Dunlap <[email protected]>
mailbox: zynqmp-ipi: fix an Excess struct member kernel-doc warning

Eric Dumazet <[email protected]>
net: use dst_dev_rcu() in sk_setup_caps()

Eric Dumazet <[email protected]>
ipv6: use RCU in ip6_output()

Weili Qian <[email protected]>
crypto: hisilicon/qm - request reserved interrupt for virtual function

Eric Dumazet <[email protected]>
tcp_metrics: use dst_dev_net_rcu()

Fangyu Yu <[email protected]>
RISC-V: KVM: Write hgatp register with valid mode bits

I Viswanath <[email protected]>
ptp: Add a upper bound on max_vclocks

Xabier Marquiegui <[email protected]>
ptp: Replace timestamp event queue with linked list

Jiri Olsa <[email protected]>
bpf: Check the helper function is valid in get_helper_proto

Eduard Zingerman <[email protected]>
bpf: add a get_helper_proto() utility function

Mykyta Yatsenko <[email protected]>
bpf: improve error message for unsupported helper

Niklas Schnelle <[email protected]>
iommu/s390: Make attach succeed when the device was surprise removed

Jacob Keller <[email protected]>
ice: fix Rx page leak on multi-buffer frames

Mikulas Patocka <[email protected]>
dm-stripe: fix a possible integer overflow

John Garry <[email protected]>
dm-stripe: limit chunk_sectors to the stripe size

Christoph Hellwig <[email protected]>

    dm: stop using blk_limits_io_{min,opt}

Eric Biggers <[email protected]>
dm-verity: provide dma_alignment limit in io_hints

Stefan Metzmacher <[email protected]>
smb: client: let recv_done verify data_offset, data_length and remaining_data_length

Alex Markuze <[email protected]>
ceph: fix race condition validating r_parent before applying state

Uladzislau Rezki (Sony) <[email protected]>
mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc()

Felix Fietkau <[email protected]>
wifi: mt76: mt7915: fix list corruption after hardware restart

Duoming Zhou <[email protected]>
ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog

Ido Schimmel <[email protected]>
vxlan: Fix NPD when refreshing an FDB entry with a nexthop object

Ido Schimmel <[email protected]>
vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects

Ye Weihua <[email protected]>
trace/fgraph: Fix the warning caused by missing unregister notifier

Sreekanth Reddy <[email protected]>
bnxt_en: Fix memory corruption when FW resources change during ifdown

Eric Biggers <[email protected]>
crypto: x86/aegis - Add missing error checks

Eric Biggers <[email protected]>
crypto: x86/aegis - Fix sleeping when disallowed on PREEMPT_RT

Eric Biggers <[email protected]>
crypto: x86/aegis128 - improve assembly function prototypes

Eric Biggers <[email protected]>
crypto: x86/aegis128 - optimize length block preparation using SSE4.1

Eric Biggers <[email protected]>
crypto: x86/aegis128 - eliminate some indirect calls

Jinjiang Tu <[email protected]>
mm/smaps: fix race between smaps_hugetlb_range and migration

Baochen Qiang <[email protected]>
wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()

Kalle Valo <[email protected]>
wifi: ath11k: mac: fix struct ieee80211_sband_iftype_data handling

Siyang Liu <[email protected]>
drm/amd/display: fix a Null pointer dereference vulnerability

Hamza Mahfooz <[email protected]>
drm/amd/display: switch DC over to the new DRM logging macros

William Liu <[email protected]>
net/sched: Fix backlog accounting in qdisc_dequeue_internal

Al Viro <[email protected]>
habanalabs: fix UAF in export_dmabuf()

Umio Yasuno <[email protected]>
drm/amd/pm: fix null pointer access

Dan Carpenter <[email protected]>
wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()

Johannes Berg <[email protected]>
wifi: iwlwifi: return ERR_PTR from opmode start()

Gabriele Monaco <[email protected]>
rv: Use strings in da monitors tracepoints

Tamizh Chelvam Raja <[email protected]>
wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()

Heiko Stuebner <[email protected]>
drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port

wenglianfa <[email protected]>
RDMA/hns: Fix double destruction of rsv_qp

Baochen Qiang <[email protected]>
wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850

Heiko Carstens <[email protected]>
s390/mm: Fix in_atomic() handling in do_secure_storage_access()

Luiz Augusto von Dentz <[email protected]>
Bluetooth: eir: Fix possible crashes on eir_create_adv_data

Sarika Sharma <[email protected]>
wifi: ath12k: fix invalid access to memory

Yonghong Song <[email protected]>
bpf: Do not include stack ptr register in precision backtracking bookkeeping

Ben Dooks <[email protected]>
riscv: save the SR_SUM status over switches

Yeoreum Yun <[email protected]>
coresight: holding cscfg_csdev_lock while removing cscfg from csdev

Miri Korenblit <[email protected]>
wifi: iwlwifi: don't warn when if there is a FW error

Christian Bruel <[email protected]>
PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops

Michael S. Tsirkin <[email protected]>
virtio: break and reset virtio devices on device_shutdown()

Daniel Wagner <[email protected]>
virtio: hookup irq_get_affinity callback

Daniel Wagner <[email protected]>
driver core: bus: add irq_get_affinity callback to bus_type

Ricardo B. Marliere <[email protected]>
virtio: make virtio_bus const

Eduard Zingerman <[email protected]>
bpf: copy_verifier_state() should copy 'loop_entry' field

Roger Quadros <[email protected]>
dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn

Philippe Simons <[email protected]>
clk: sunxi-ng: h616: Reparent GPU clock during frequency changes

Andre Przywara <[email protected]>
clk: sunxi-ng: h616: Reparent CPU clock during frequency changes

Alexander Gordeev <[email protected]>
kasan: avoid sleepable page allocation from atomic context

Benjamin Berg <[email protected]>
um: work around sched_yield not yielding in time-travel mode

Johannes Berg <[email protected]>
um: fix time-travel syscall scheduling hack

Brendan Tam <[email protected]>
drm/amd/display: prevent hang on link training fail

Ranjan Kumar <[email protected]>
scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue

Ranjan Kumar <[email protected]>
scsi: mpi3mr: Debug ability improvements

Hannes Reinecke <[email protected]>
scsi: mpi3mr: Split off bus_reset function from host_reset

Edward Cree <[email protected]>
sfc: fix NULL dereferences in ef100_process_design_param()

Edward Cree <[email protected]>
sfc: rip out MDIO support

Alex Austin <[email protected]>
sfc: Implement ndo_hwtstamp_(get|set)

Boris Burkov <[email protected]>
btrfs: harden block_group::bg_list against list_del() races

Filipe Manana <[email protected]>
btrfs: stop reserving excessive space for block group item insertions

Filipe Manana <[email protected]>
btrfs: stop reserving excessive space for block group item updates

Filipe Manana <[email protected]>
btrfs: remove pointless loop from btrfs_update_block_group()

Filipe Manana <[email protected]>
btrfs: stop doing excessive space reservation for csum deletion

Filipe Manana <[email protected]>
btrfs: remove pointless initialization at btrfs_delayed_refs_rsv_release()

Filipe Manana <[email protected]>
btrfs: reserve space for delayed refs on a per ref basis

Filipe Manana <[email protected]>
btrfs: allow to run delayed refs by bytes to be released instead of count

Yonghong Song <[email protected]>
bpf: Fix kmemleak warning for percpu hashmap

Lizhi Xu <[email protected]>
fs/ntfs3: Keep write operations atomic

Konstantin Komarov <[email protected]>
fs/ntfs3: Separete common code for file_read/write iter/splice

Konstantin Komarov <[email protected]>
fs/ntfs3: Use function file_inode to get inode from file

Ming Lei <[email protected]>
ublk: fix handling recovery & reissue in ublk_abort_queue()

Paulo Alcantara <[email protected]>
smb: client: fix UAF in decryption with multichannel

Enzo Matsumiya <[email protected]>
smb: client: allocate crypto only for primary server

Frederic Weisbecker <[email protected]>
perf: Fix hang while freeing sigtrap event

P Praneesh <[email protected]>
wifi: ath12k: Avoid memory leak while enabling statistics

Karthikeyan Periyasamy <[email protected]>
wifi: ath12k: Avoid explicit type cast in monitor status parse handler

Karthikeyan Periyasamy <[email protected]>
wifi: ath12k: fix incorrect TID updation in DP monitor status path

Kang Yang <[email protected]>
wifi: ath12k: fix struct hal_rx_phyrx_rssi_legacy_info

Karthikeyan Periyasamy <[email protected]>
wifi: ath12k: refactor DP Rxdma ring structure

Karthikeyan Periyasamy <[email protected]>
wifi: ath12k: avoid explicit HW conversion argument in Rxdma replenish

Karthikeyan Periyasamy <[email protected]>
wifi: ath12k: avoid explicit RBM id argument in Rxdma replenish

Karthikeyan Periyasamy <[email protected]>
wifi: ath12k: avoid explicit mac id argument in Rxdma replenish

Wu Yunchuan <[email protected]>
wifi: ath12k: Remove unnecessary (void*) conversions

Atish Patra <[email protected]>
RISC-V: KVM: Teardown riscv specific bits after kvm_exit

Mayuresh Chitale <[email protected]>
RISC-V: KVM: Add kvm_vcpu_config

Wen Gong <[email protected]>
wifi: ath11k: update channel list in reg notifier instead reg worker

Jeff Johnson <[email protected]>
wifi: ath11k: fix misspelling of "dma" in num_rxmda_per_pdev

Wen Gong <[email protected]>
wifi: ath11k: add support to select 6 GHz regulatory type

Chao Yu <[email protected]>
f2fs: fix potential deadloop in prepare_compress_overwrite()

Chao Yu <[email protected]>
f2fs: convert f2fs_handle_page_eio() to use folio

Boris Burkov <[email protected]>
btrfs: fix block group refcount race in btrfs_create_pending_block_groups()

Ojaswin Mujoo <[email protected]>
ext4: avoid journaling sb update on error if journal is destroying

Ojaswin Mujoo <[email protected]>
ext4: define ext4_journal_destroy wrapper

Murad Masimov <[email protected]>
ax25: Remove broken autobind

Michael Chan <[email protected]>
bnxt_en: Mask the bd_cnt field in the TX BD properly

Michael Chan <[email protected]>
bnxt_en: Modify TX ring indexing logic.

Michael Chan <[email protected]>
bnxt_en: Add completion ring pointer in TX and RX ring structures

Michael Chan <[email protected]>
bnxt_en: Put the TX producer information in the TX BD opaque field

Christian Schoenebeck <[email protected]>
fs/9p: fix NULL pointer dereference on mkdir

Eric Van Hensbergen <[email protected]>
fs/9p: convert mkdir to use get_new_inode

Matt Johnston <[email protected]>
net: mctp: unshare packets when reassembling

Taehee Yoo <[email protected]>
eth: bnxt: fix truesize for mb-xdp-pass case

Maurizio Lombardi <[email protected]>
nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()

Yishai Hadas <[email protected]>
RDMA/mlx5: Fix the recovery flow of the UMR QP

Yishai Hadas <[email protected]>
RDMA/mlx5: Fix a WARN during dereg_mr for DM type

Kashyap Desai <[email protected]>
RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers

Hou Tao <[email protected]>
bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT

Qu Wenruo <[email protected]>
btrfs: do proper folio cleanup when cow_file_range() failed

Qu Wenruo <[email protected]>
btrfs: do proper folio cleanup when run_delalloc_nocow() failed

Kory Maincent <[email protected]>
net: ravb: Fix missing rtnl lock in suspend/resume path

Jakub Kicinski <[email protected]>
net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels

Ping-Ke Shih <[email protected]>
wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion

Guixin Liu <[email protected]>
scsi: mpi3mr: Fix possible crash when setting up bsg fails

Ryusuke Konishi <[email protected]>
nilfs2: do not force clear folio if buffer is referenced

Patrisious Haddad <[email protected]>
RDMA/mlx5: Fix implicit ODP use after free

Ryan Roberts <[email protected]>
mm: clear uffd-wp PTE/PMD state on mremap()

Hao Lan <[email protected]>
net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue

Matthieu Baerts (NGI0) <[email protected]>

    rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy

Niklas Cassel <[email protected]>
PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()

Gaurav Batra <[email protected]>
powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW

Shivaprasad G Bhat <[email protected]>
powerpc/iommu: Move pSeries specific functions to pseries/iommu.c

Stefano Brivio <[email protected]>
udp: Deal with race between UDP socket address change and rehash

Bernard Metzler <[email protected]>
RDMA/siw: Remove direct link to net_device

Stefan Eichenberger <[email protected]>
PCI: imx6: Fix suspend/resume support on i.MX6QDL

Ranjan Kumar <[email protected]>
scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs

Yishai Hadas <[email protected]>
vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()

Jann Horn <[email protected]>
udmabuf: fix memory leak on last export_udmabuf() error path

Huan Yang <[email protected]>
udmabuf: change folios array from kmalloc to kvmalloc

Hou Tao <[email protected]>
virtiofs: use pages instead of pointer for kernel direct IO

Lei Huang <[email protected]>
fuse: Fix missing FOLL_PIN for direct-io

Zicheng Qu <[email protected]>

    drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe

Pavel Begunkov <[email protected]>
io_uring: check for overflows in io_pin_pages

Yuezhang Mo <[email protected]>
exfat: fix out-of-bounds access of directory entries

Jeff Layton <[email protected]>
exfat: convert to new timestamp accessors

David Howells <[email protected]>
afs: Fix lock recursion

Srinivasan Shanmugam <[email protected]>
drm/amd/display: Implement bounds check for stream encoder creation in DCN401

Eddie James <[email protected]>
net/ncsi: Disable the ncsi work before freeing the associated structure

James Chapman <[email protected]>
l2tp: prevent possible tunnel refcount underflow

Alex Hung <[email protected]>
drm/amd/display: Check null pointers before used

Alex Hung <[email protected]>
drm/amd/display: Check null pointers before multiple uses

Srinivasan Shanmugam <[email protected]>
drm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer

Yonghong Song <[email protected]>
bpf: Fix a sdiv overflow issue

Peng Fan <[email protected]>
mm, slub: avoid zeroing kmalloc redzone

Nicolas Bouchinet <[email protected]>
mm/slub: avoid zeroing outside-object freepointer for single free

Andrey Konovalov <[email protected]>
slub, kasan: improve interaction of KASAN and slub_debug poisoning

Leon Hwang <[email protected]>
bpf: Prevent tailcall infinite loop caused by freplace

Alex Hung <[email protected]>
drm/amd/display: Avoid overflow from uint32_t to uint8_t

Justin Tee <[email protected]>
scsi: lpfc: Change lpfc_vport fc_flag member into a bitmask

Justin Tee <[email protected]>
scsi: lpfc: Protect vport fc_nodes list with an explicit spin lock

Justin Tee <[email protected]>
scsi: lpfc: Change nlp state statistic counters into atomic_t

Justin Tee <[email protected]>
scsi: lpfc: Remove shost_lock protection for fc_host_port shost APIs

Justin Tee <[email protected]>
scsi: lpfc: Fix failure to delete vports when discovery is in progress

Hersen Wu <[email protected]>
drm/amd/display: Add missing NULL pointer check within dpcd_extend_address_range

Lenko Donchev <[email protected]>
drm/amd/display: Use kcalloc() instead of kzalloc()

Eric Dumazet <[email protected]>
pktgen: use cpus_read_lock() in pg_net_init()

Hugo Villeneuve <[email protected]>
serial: sc16is7xx: fix TX fifo corruption

Manivannan Sadhasivam <[email protected]>
PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init()

Gavin Shan <[email protected]>
mm/huge_memory: avoid PMD-size page cache if needed

Matthew Wilcox <[email protected]>
mm: simplify thp_vma_allowable_order

Zach O'Keefe <[email protected]>
mm/thp: fix "mm: thp: kill __transhuge_page_enabled()"

Shailend Chand <[email protected]>
gve: Account for stopped queues when reading NIC stats

Holger Dengler <[email protected]>
s390/pkey: Wipe copies of protected- and secure-keys

Harald Freudenberger <[email protected]>
s390/pkey: harmonize pkey s390 debug feature calls

Milena Olech <[email protected]>
ice: Fix improper extts handling

Bob Zhou <[email protected]>
drm/amdgpu: fix double free err_addr pointer warnings

Jacob Keller <[email protected]>
ice: Don't process extts if PTP is disabled

Christophe Leroy <[email protected]>
bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()

Christophe Leroy <[email protected]>
bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro()

Josh Don <[email protected]>
sched: fix warning in sched_setaffinity

Wander Lairson Costa <[email protected]>
sched/deadline: Fix task_struct reference leak

Shashank Sharma <[email protected]>

    drm/amdgpu: change vm->task_info handling

Petr Machata <[email protected]>
net: nexthop: Increase weight to u16

Petr Machata <[email protected]>
net: nexthop: Have all NH notifiers carry NH ID

Paloma Arellano <[email protected]>
drm/msm/dpu: Add mutex lock in control vblank irq

Dmitry Baryshkov <[email protected]>
drm/msm/dpu: shift IRQ indices by 1

Johan Hovold <[email protected]>
tty: add break_wait kernel-doc

Christian Brauner <[email protected]>
namespace: handle mount locking for automounts correctly

Christian Brauner <[email protected]>
fcntl: refuse F_SET_RW_HINT on an immutable inode

Christian Brauner <[email protected]>
namespace: check the target before walking it in do_mount_setattr()

Christian Brauner <[email protected]>
namespace: don't copy an unmounted mount tree

Christian Brauner <[email protected]>
namespace: unhash a dentry before detaching the mounts on it

Wentao Liang <[email protected]>
drm/vc4: Fix firmware reference leak in vc4_drm_bind()

Stanley Jhu <[email protected]>
scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock()

Bart Van Assche <[email protected]>
scsi: ufs: core: Add a comment block above ufshcd_mcq_compl_all_cqes_lock()

Peter Wang <[email protected]>
scsi: ufs: core: Add debug log for MCQ command timeout

Bart Van Assche <[email protected]>
scsi: ufs: core: Move an assignment in ufshcd_mcq_process_cqe()

ChanWoo Lee <[email protected]>
scsi: ufs: mcq: Remove unused parameters

Ahmed Abdelhaleem Ahmed <[email protected]>
scsi: ch: Do not keep references to data transfer element devices

Stanley Jhu <[email protected]>
scsi: ufs: core: Decouple CQ sweep from request iterator in MCQ

Shao-Fu Chen <[email protected]>
optee: register TEE devices only once fully initialized

Artem Dinaburg <[email protected]>
wifi: ath12k: copy M3 firmware when reusing the buffer

Baochen Qiang <[email protected]>
wifi: ath12k: fix reusing m3 memory

Bard Liao <[email protected]>
ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params

Haoxiang Li <[email protected]>
ASoC: hdac_hda: Fix hlink refcount leak on component registration failure

Takashi Iwai <[email protected]>
ALSA: control: Don't add invalid kcontrols to LED layer

Li RongQing <[email protected]>
ACPI: processor_idle: Mark LPI enter functions as __cpuidle

Saeed Mahameed <[email protected]>
net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv

Saeed Mahameed <[email protected]>
net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv

Johan Hovold <[email protected]>
most: core: fix leak on early registration failure

Navaneeth K <[email protected]>
most: core: fix resource leak in most_register_interface error paths

Christian Brauner <[email protected]>
namespace: check the mounts before reading their parents in pivot_root()

Christian Brauner <[email protected]>
namespace: don't inherit MNT_UMOUNT in clone_mnt()

Chengfeng Ye <[email protected]>
Bluetooth: ISO: Serialize concurrent connect calls

Zack Rusin <[email protected]>
drm/vmwgfx: validate pitch coming from userspace

Mikhail Gavrilov <[email protected]>
Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex

Chengfeng Ye <[email protected]>
Bluetooth: hci_sync: Fix command skb lifetime during scan setup

Weiming Shi <[email protected]>
net: team: stop reusing skb after queue override

Weiming Shi <[email protected]>
net: team: fix NULL pointer dereference in team_xmit during mode change

Marc Harvey <[email protected]>
net: team: Rename port_disabled team mode op to port_tx_disabled

Marc Harvey <[email protected]>
net: team: Remove unused team_mode_op, port_enabled

Felix Fietkau <[email protected]>
netfilter: nf_tables: fix bidirectional offload regression

Jann Horn <[email protected]>
apparmor: fix cred UAF caused by begin_current_label_crit_section()

Takashi Iwai <[email protected]>
ALSA: mixer: oss: Add card disconnect checkpoints

Takashi Iwai <[email protected]>
ALSA: pcm: oss: Fix data race at accessing runtime.oss.trigger

Cássio Gabriel <[email protected]>
ALSA: pcm: oss: Fix setup list UAF on proc write error

Hannes Reinecke <[email protected]>
nvme-tcp: sanitize request list handling

NeilBrown <[email protected]>
llist: add interface to check if a node is on a list.

Lorenzo Stoakes (ARM) <[email protected]>
mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge

Lorenzo Stoakes (ARM) <[email protected]>
mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP

Tristan Madani <[email protected]>
ice: fix metadata_dst refcount handling on representor teardown

Daehyeon Ko <[email protected]>
ip6_gre: remove obsolete ERSPAN PMTU update

Donggeun Yoo <[email protected]>
tracing: Set the trace clock before registering the histogram trigger

Vicki Pfau <[email protected]>
HID: steam: Clean up locking

Vicki Pfau <[email protected]>
HID: steam: Refactor registration

Vicki Pfau <[email protected]>
HID: steam: Rearrange teardown sequence

Vicki Pfau <[email protected]>
HID: steam: Fully unregister controller when hidraw is opened

Vicki Pfau <[email protected]>
HID: hid-steam: Make client_opened a counter

Adrian Betschart <[email protected]>
drm/amd/display: Don't replace a sink mode that shares the native totals

Oliver Hartkopp <[email protected]>
can: fix unique skb identifier regression under RPS

Ezrak1e <[email protected]>
dlm: validate length in dlm_search_rsb_tree

Cristian Papa <[email protected]>
wifi: mt76: mt7603: initialize global station WCID

Adrian Bente <[email protected]>
netfilter: flowtable: fix offloaded ct timeout never being extended

Florian Westphal <[email protected]>
netfilter: conntrack: fix erronous removal of offload bit

Fernando Fernandez Mancera <[email protected]>
net: openvswitch: validate transport header presence in set_ipv6_addr

Petr Machata <[email protected]>
mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()

Li RongQing <[email protected]>
net/mlx5e: Order ICOSQ cc update after CQ doorbell

Tianyi Gao <[email protected]>
veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down

Eric Dumazet <[email protected]>
flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()

Victor Nogueira <[email protected]>
net/sched: cls_route: reject change with no routing attribute

Eric Dumazet <[email protected]>

    flow_dissector: avoid u16 truncation of skb->len when computing thoff

Marek Szyprowski <[email protected]>
ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM

Alvin Šipraga <[email protected]>
ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes

Alvin Šipraga <[email protected]>
ASoC: adau1372: allow sleepy powerdown GPIOs

Devin Wittmayer <[email protected]>
wifi: mt76: mt792x: pick the SAR table layout from the table itself

Junjie Cao <[email protected]>

    wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit

Filipe Manana <[email protected]>
btrfs: fix xattr replace when multiple xattrs are packed in the same item

Sang-Hoon Choi <[email protected]>
nvmet: use the local P2P device on metadata allocation failure

Sang-Hoon Choi <[email protected]>
cxgb4/ch_ktls: disable softirqs around tid_list erases

Omar Ramadan <[email protected]>
amt: send the relay's General Query directly from the receive path

Jamal Hadi Salim <[email protected]>
net/sched: em_text: reject unterminated algo before autoload

Maíra Canal <[email protected]>
drm/vc4: Free the BO cache size list on teardown

Myeonghun Pak <[email protected]>
drm/aspeed: Balance the display clock enable on teardown

Sang-Hoon Choi <[email protected]>
gpio: exar: initialize the ID before registering its cleanup

Oleg Keri <[email protected]>
drm/dp: don't mark the AUX backlight enabled when enabling failed

Christian Brauner <[email protected]>
namespace: refuse an automount below a mount that is in no namespace

Christian Brauner <[email protected]>
namei: don't reveal overmounted entries in refwalk

Christian Brauner <[email protected]>
dcache: don't put a mountpoint on a dentry that's being removed

Christian Brauner <[email protected]>
namespace: check a submount for references right before unmounting it

Christian Brauner <[email protected]>
fs: refuse fspick() on internal superblocks

Leo Li <[email protected]>
drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs

Mikhail Gavrilov <[email protected]>
drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks

Alex Deucher <[email protected]>
drm/amdgpu: make Mac FB workaround generic

Vitaly Prosyak <[email protected]>
drm/amdgpu: serialize vblank counter reads against GPU reset

Haojie Li <[email protected]>
drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info

Saleel Kudchadker <[email protected]>
drm/amdkfd: align SDMA doorbell base for shader doorbell writes

Fan Wu <[email protected]>
drm/vc4: drain the hangcheck timer and works on V3D unbind

Krzysztof Karas <[email protected]>
drm/i915/gt: Unmask interrupts only when ACTIVE is true

Krzysztof Karas <[email protected]>
drm/i915/gem: Prevent overstepping exec array boundary

Sajal Gupta <[email protected]>
drm/gud: don't keep a connector without a CRTC as connector_state

Nguyen Ngoc Thang <[email protected]>
drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN

Palla Raghunath <[email protected]>
Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown

Maxim Skokov <[email protected]>
Bluetooth: RFCOMM: free the skb when the DLC has no owner

Iaroslav Voitovych <[email protected]>
Bluetooth: MGMT: Fix status of pending commands flushed on power off

Chengfeng Ye <[email protected]>
Bluetooth: hci_sock: Serialize dead-device detachment

Runyu Xiao <[email protected]>
scsi: qedi: Initialize callback state before registration

Matti Vaittinen <[email protected]>
iio: light: Drop ROHM BU27034

Shawn Lin <[email protected]>
pmdomain: rockchip: propagate subdomain add errors

Shawn Lin <[email protected]>
pmdomain: rockchip: fix clock leak on domain probe failure

Shawn Lin <[email protected]>
pmdomain: rockchip: don't ignore clock lookup errors on attach

Ming Qian <[email protected]>
pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains

Ridham Khurana <[email protected]>
regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4

Abhishek Ojha <[email protected]>
regulator: ltc3676: don't read the write-only HRST and CLIRQ registers

Denis V. Lunev <[email protected]>
openvswitch: fix soft lockup in the netlink flow dump

Karl Bonde Torp <[email protected]>
nvme: fix swapped ZRASF zone state values for full and read only

Fredrik Nyberg <[email protected]>
net: usb: ax88179_178a: fix rx frame length for non-last packets

Sebastien Royen <[email protected]>
net: dsa: microchip: fix KSZ8765 fiber detection

Zixuan Chai <[email protected]>
net: bridge: avoid recursive multicast port cleanup

Chengfeng Ye <[email protected]>
net/smc: protect clcsock lifetime in smc_getname

Quchaosheng <[email protected]>
net/packet: guard the ll header push in packet_rcv_spkt()

Guangshuo Li <[email protected]>
mmc: sdhci-sprd: disable runtime PM on remove

Yibo Tan <[email protected]>
mmc: mtk-sd: Cancel request timeout work on remove

Guangshuo Li <[email protected]>
mmc: cavium-thunderx: destroy slot platform devices on remove

Guangshuo Li <[email protected]>
mmc: cavium-octeon: destroy slot platform devices on remove

Mikulas Patocka <[email protected]>
dm: fix reading free memory in do_resume

Ma Xinmeng <[email protected]>
dm-snap: reject the transient exception store for snapshot-merge

Ben Cressey <[email protected]>
dm-crypt: reject the lmk IV mode with AEAD ciphers

Nguyen Ngoc Thang <[email protected]>
memstick: rtsx_usb_ms: complete requests after eject instead of dropping them

Raj Ojha <[email protected]>
memstick: core: wait for request completion before freeing card

성병찬 <[email protected]>
KEYS: Fix add_key() race with keyring restriction

Karl Mehltretter <[email protected]>
keys: finalize persistent keyring timeout after link attempt

Mingming Cao <[email protected]>
ibmveth: fix TX LTB and filter unwind on open-fail

Mingming Cao <[email protected]>
ibmveth: h_free logical LAN on open-fail after register

Ridham Khurana <[email protected]>
gpio: xilinx: fix runtime PM leak on request error path

Vishal Badole <[email protected]>
EDAC/amd64: Mask UMC chip select to the four implemented selects

Hui Peng <[email protected]>
sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute

Stephen Smalley <[email protected]>
selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts

Christian Göttsche <[email protected]>
selinux: fix data race on AVC latest_notif

Johannes Berg <[email protected]>
Revert "wifi: libertas: reject short monitor TX frames"

Chengfeng Ye <[email protected]>
tipc: hold a reference to nodes found by link name

Yuqi Xu <[email protected]>
tipc: destroy topsrv workqueues before closing connections

Marek Szyprowski <[email protected]>
swiotlb: fix default_swiotlb_limit() for non-growable default pool

Sabrina Dubroca <[email protected]>
strparser: make sure __strp_recv isn't running before tearing down the parser

Josef Bacik <[email protected]>
xen/netfront: don't leak the skb when xennet_fill_frags() fails

Pavankumar Kondeti <[email protected]>
workqueue: Fix NULL current_pwq deref in chained work check

Jason A. Donenfeld <[email protected]>
wireguard: noise: reject response consumption after intermediate initiation

Ramses de Norre <[email protected]>
wireguard: queueing: preserve tstamp_type when encapsulating packet

Michele Dionisio <[email protected]>
wifi: brcmfmac: fix P2P device removal race in brcmf_detach()

Ji-Ze Hong (Peter Hong) <[email protected]>

    usb: f81604: fix struct f81604_int_data size mismatch

Palla Raghunath <[email protected]>
dm ioctl: don't let data_start run past the buffer

Wentao Liang <[email protected]>
btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()

Michael Garland <[email protected]>
ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P)

Karl Mehltretter <[email protected]>
arm64: irq: exclude the softirq stack switch from KCOV

Krzysztof Furman <[email protected]>
Input: xpad - add support for Corsair Novablade Pro

Daehyeon Ko <[email protected]>
ipv6: do not warn on route notification size race

Daehyeon Ko <[email protected]>
ipv4: do not warn on route notification size race

Daehyeon Ko <[email protected]>
ipv4: stop route notification sizing when nexthop group shrinks

Daehyeon Ko <[email protected]>
ipv4: stop PMTU walk when nexthop group shrinks

Eric Biggers <[email protected]>
crypto: drbg - Fix ineffective sanity check

Karl Mehltretter <[email protected]>
netfilter: nft_set_pipapo: restore cloned mapping table memcg accounting

Jiajia Liu <[email protected]>
Bluetooth: hci_event: fix simultaneous discovery stuck in FINDING

Liew Rui Yan <[email protected]>
mm/damon/core: fix unconditionally skip last region

SeongJae Park <[email protected]>
mm/damon/core: do non-safe region walk on kdamond_apply_schemes()

Chao Yu <[email protected]>
f2fs: fix to reset all pinned status during fggc

Chao Yu <[email protected]>
f2fs: fix to shrink gc_lock coverage in f2fs_gc_range()

Chao Yu <[email protected]>
f2fs: fix to reclaim space in f2fs_allocate_pinning_section()

Carlos Llamas <[email protected]>
HID: uhid: convert to hid_safe_input_report()

Benjamin Tissoires <[email protected]>
HID: core: introduce hid_safe_input_report()

Wentao Guan <[email protected]>
wifi: cfg80211: release locks on error in cfg80211_wext_siwgenie()

Pengpeng Hou <[email protected]>
iio: cdc: ad7150: fix OF matching and publish module aliases

Paulo Alcantara <[email protected]>
smb: client: only require read lease for size-extending preallocate

Fabrice Gasnier <[email protected]>
iio: adc: stm32-adc: fix possible division by zero in processed channel

Vladyslav Ivashchenko <[email protected]>
iio: adc: axp288: Add TS bias override for Haier HV103H

Cong Nguyen <[email protected]>
iio: adc: max1363: sign-extend bipolar differential channel reads

Pengpeng Hou <[email protected]>
iio: adc: aspeed: propagate reset deassert errors

Krzysztof Kozlowski <[email protected]>
iio: adc: aspeed: Simplify with dev_err_probe

Fan Wu <[email protected]>
iio: adc: ad_sigma_delta: fix use-after-free on unbind

Paulo Alcantara <[email protected]>
smb: client: discard post-EOF pagecache when extending a file via zero range

Felix Fietkau <[email protected]>

    wifi: mac80211: set info->band for 802.3 encap offload frames

Tamizh Chelvam Raja <[email protected]>

    wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit()

Sean Christopherson <[email protected]>
KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted

Peter Xu <[email protected]>
mm/hugetlb: fix avoid_reserve to allow taking folio from subpool

Dipayaan Roy <[email protected]>
net: mana: remove double CQ cleanup in mana_create_rxq error path

Dipayaan Roy <[email protected]>
net: mana: Skip WQ object destruction for uninitialized RXQ

Dipayaan Roy <[email protected]>
net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq()

Jerome Tollet <[email protected]>
net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry

Jerome Tollet <[email protected]>
net/mlx5e: Prevent stale XSK buffer release on refill retry

Matthew Wilcox (Oracle) <[email protected]>
fs: Free any excess xarray nodes in clear_inode()

Marco Chen <[email protected]>
iio: health: max30102: fix NULL dereference in interrupt handler

Nuno Sa <[email protected]>
iio: core: add accessors 'masklength'

Zhiling Zou <[email protected]>
wifi: mac80211: count only matching reservations in reserved switch

Zhiling Zou <[email protected]>
wifi: mac80211: keep paired old chanctx alive

Max Kellermann <[email protected]>
jbd2: bound shrinker scans by examined checkpoint buffers

Max Kellermann <[email protected]>
jbd2: check need_resched() when skipping busy checkpoint buffers

Marco Scardovi <[email protected]>
gpio: rockchip: fix generic IRQ chip leak on remove

Marco Scardovi <[email protected]>
gpio: rockchip: teardown bugs and resource leaks

Sudeep Holla <[email protected]>
firmware: arm_scmi: Unwind TX receiver mailbox setup failure

Sudeep Holla <[email protected]>
firmware: arm_scmi: Publish channel state before callbacks

Saurabh Sengar <[email protected]>
fbdev: hyperv_fb: Allow graceful removal of framebuffer

Saurabh Sengar <[email protected]>
fbdev: hyperv_fb: Simplify hvfb_putmem

Gao Xiang <[email protected]>
erofs: unify lcn as u64 for 32-bit platforms

Gao Xiang <[email protected]>
erofs: avoid infinite loops due to corrupted subpage compact indexes

Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers

Ranjani Sridharan <[email protected]>
ASoC: SOF: topology: Parse DAI type token for dspless mode

Johan Hovold <[email protected]>
tty: port: fix tty_port_tty_vhangup() race

Eric Dumazet <[email protected]>
bnxt_en: fix DMA mapping length for padded small packets

Han Xu <[email protected]>
mtd: spinand: Enable QE on all dies

Pei Xiao <[email protected]>
mtd: block2mtd: Fix divide error when erase_size is zero

Yu Kuai <[email protected]>
block2mtd: prevent direct access of bd_inode

Jan Kara <[email protected]>
mtd: block2mtd: Convert to bdev_open_by_dev/path()

Zhao Li <[email protected]>
wifi: mac80211: keep fallback association elements alive

Zhao Li <[email protected]>
wifi: mac80211: shut down RX BA session timer on teardown

Nuno Sá <[email protected]>
mtd: spinand: fix NULL pointer dereference with no ECC engine

Helge Deller <[email protected]>
apparmor: Fix & Optimize table creation from possibly unaligned memory

Helge Deller <[email protected]>
AppArmor: Allow apparmor to handle unaligned dfa tables

Timur Kristóf <[email protected]>
drm/amd/display: Mark DCE 6.4 as not APU

Abdurrahman Hussain <[email protected]>
i2c: xiic: preserve PEC byte length in SMBus block read setup

Manikanta Guntupalli <[email protected]>
i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode

Aaron Kling <[email protected]>
ALSA: hda/tegra: Re-enable SDO workaround for Tegra194

Wentao Liang <[email protected]>
serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()

Uwe Kleine-König <[email protected]>
serial: ma35d1: Convert to platform remove callback returning void

Johan Hovold <[email protected]>
serial: fix TIOCMIWAIT race

Fan Wu <[email protected]>
tty: serial: max3100: shut down timer before freeing port

Daniel Starke <[email protected]>
tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2

Johan Hovold <[email protected]>
tty: tty_port: restore TTY_IO_ERROR on activation failure

Pannarat Wiriyaarritham <[email protected]>
usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41

Arthur Heymans <[email protected]>
drm/amd/display: Preserve eDP mode on initial ASSR failure

Runyu Xiao <[email protected]>
USB: dwc2: shut down wakeup timer before freeing HCD state

Myeonghun Pak <[email protected]>
usb: ohci-spear: disable controller wakeup on removal

Chen Ni <[email protected]>
usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare()

Francisco Beltrán Millalén <[email protected]>
drm/amdgpu: reset VI ASIC on MacBookPro14,3

Andre Eikmeyer <[email protected]>
drm/amdgpu: reset VI ASIC on MacBookPro15,1

Jiangshan Yi <[email protected]>
drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend

Eric Biggers <[email protected]>
fsverity: add dependency on 64K or smaller pages

Mostafa Saleh <[email protected]>
KVM: arm64: Don't use the VMA to size stage-2 block mappings for VM_PFNMAP

Beata Michalska <[email protected]>

    arm64: errata: Add Cortex-A725 erratum 3821522 workaround

Beata Michalska <[email protected]>
arm64: errata: Factor out broken AMU const counter cap

Chengfeng Ye <[email protected]>
Bluetooth: Serialize SMP remote OOB data access

Chengfeng Ye <[email protected]>
Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown

Mark Rutland <[email protected]>
arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems

Zhengchuan Liang <[email protected]>
perf: Require kernel access for text poke events

Johan Hovold <[email protected]>
tty: fix saved termios reset race

Jiazi Liu <[email protected]>
usb: dwc3: gadget: fix IRQ storm on invalid event buffer count

Timur Kristóf <[email protected]>
drm/amd/display: Fix fast updates on DCE 8.1

Andrey Albershteyn <[email protected]>
fs,fsverity: remove check for fsverity being enabled in setattr_prepare()

Christoph Hellwig <[email protected]>
fs,fsverity: reject size changes on fsverity files in setattr_prepare

Josef Bacik <[email protected]>
xen/netfront: drop RX packets with a short Ethernet header

Amit Sunil Dhamne <[email protected]>
usb: typec: tcpm: constrain TCPM_SOURCING_VBUS event handling

Xu Yang <[email protected]>
usb: typec: tcpm: fix debug accessory mode detection for sink ports

Neill Kapron <[email protected]>
usb: gadget: f_fs: Fix Use-After-Free in AIO error path

Gabriel Prostitis <[email protected]>
USB: gadget: ffs: fix mm lifetime handling

Fan Wu <[email protected]>
usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed

Uwe Kleine-König <[email protected]>
usb: gadget: at91_udc: Convert to platform remove callback returning void

Karl Mehltretter <[email protected]>

    serial: imx: serialize imx_uart_ports[] lifetime

Uwe Kleine-König <[email protected]>
serial: imx: Convert to platform remove callback returning void

Gilberto Conde <[email protected]>
net: usb: qmi_wwan: add Quectel EG120K-EA

Wentao Liang <[email protected]>
wifi: wlcore: Fix runtime PM leak in wlcore_remove()

Uwe Kleine-König <[email protected]>
wifi: wlcore: Convert to platform remove callback returning void

Paolo Abeni <[email protected]>
mptcp: prevent race between disconnect() and rtx

Eric Dumazet <[email protected]>

    tcp: introduce icsk->icsk_keepalive_timer

Mehmet Fide <[email protected]>
mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages

Yi Yang <[email protected]>
vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF

Chris Mason <[email protected]>
SUNRPC: reject duplicate CREDS_VALUE options

Chris Mason <[email protected]>
SUNRPC: fix gssx_dec_option_array error path bugs

Asad Kamal <[email protected]>
drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read

Fuad Tabba <[email protected]>
KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save

Aditya Dutt <[email protected]>
jfs: fix array-index-out-of-bounds read in add_missing_indices

Fan Wu <[email protected]>
iio: trigger: cancel reenable_work before freeing trigger

Salah Triki <[email protected]>
iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler

Zhang Jie <[email protected]>
iio: proximity: sx9324: Correct proximity channel resolution

Cong Nguyen <[email protected]>
iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure

Salah Triki <[email protected]>
iio: proximity: isl29501: Fix return type of isl29501_register_write

Hui Su <[email protected]>
iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup

Fan Wu <[email protected]>
iio: light: gp2ap020a00f: drain irq_work after free_irq

Arka Mondal <[email protected]>
iio: imu: adis16480: fix unprotected debugfs reads

Arka Mondal <[email protected]>
iio: imu: adis16400: fix unprotected debugfs reads

Arka Mondal <[email protected]>
iio: gyro: adis16136: fix unprotected debugfs reads

Salah Triki <[email protected]>
iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw()

Jonathan Cameron <[email protected]>
iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.

Jinseob Kim <[email protected]>
iio: buffer: serialize buffer teardown with mode claims

Fan Wu <[email protected]>
iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind

Felix Gu <[email protected]>
iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls

Felix Gu <[email protected]>
iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure

Fabrice Gasnier <[email protected]>
iio: adc: stm32-adc: fix check on internal channel availability

Salah Triki <[email protected]>
iio: accel: sca3000: fix frequency divider condition check

Jiale Yao <[email protected]>
iio: accel: kxcjk-1013: reject duplicate event disable

Frank Sorenson <[email protected]>
smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races

Daehyeon Ko <[email protected]>
thunderbolt: Reject oversized XDomain properties responses

Kurt Lieber <[email protected]>
thunderbolt: Disable CL states for the Anker Prime TB5 dock

Mika Westerberg <[email protected]>
thunderbolt: Fix KASAN reported use-after-free when request is canceled

Ian Lin <[email protected]>
USB: serial: option: add Compal EXC-T1 support

Sebastian Sjoholm <[email protected]>
USB: serial: option: add Quectel RG660QB

Ian Lin <[email protected]>
USB: serial: option: add Compal EXM-G1x support

Carlo Szelinsky <[email protected]>
USB: serial: option: add Quectel EG060W

Zhao Dongdong <[email protected]>
USB: serial: option: add support for SIMCom SIM8260C

Johan Hovold <[email protected]>
USB: serial: fix ioctl hangup race

Johan Hovold <[email protected]>
USB: serial: fix driver deregistration order

Johan Hovold <[email protected]>
USB: serial: fix dynamic id driver deregistration race

Johan Hovold <[email protected]>
USB: serial: ssu100: fix baud rate overflow

Johan Hovold <[email protected]>
USB: serial: quatech2: fix baud rate overflow

Jérémy Carrat <[email protected]>

    USB: serial: cp210x: add Corsair AX1500i Power Supply

Yuqi Xu <[email protected]>
wifi: mac80211: handle empty FILS association request payload

Zihan Xi <[email protected]>
wifi: mac80211: fix mesh fast xmit path deletion UAF

Zhao Li <[email protected]>
wifi: mac80211: release mesh path quota on failed additions

Yuqi Xu <[email protected]>
wifi: mac80211: minstrel_ht: validate fixed rate index

Zhao Li <[email protected]>
wifi: mac80211: account proxy paths against the mesh path limit

Zhao Li <[email protected]>
wifi: mac80211: drain PS delivery work during station teardown

Guangshuo Li <[email protected]>
wifi: iwlegacy: 3945: free EEPROM data on remove

Tianchu Chen <[email protected]>
wifi: cw1200: fix TX padding OOB read leaking heap data to device

Sean Christopherson <[email protected]>
KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy

Nuno Sá <[email protected]>
mtd: spinand: fix zero oobavail when no ECC engine is used

Mehmet Fide <[email protected]>
mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB

Runyu Xiao <[email protected]>
mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ

Weiming Shi <[email protected]>
nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()

Bean Huo <[email protected]>
nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT

Daehyeon Ko <[email protected]>
nvme-multipath: fix underflow in ANA log bounds checks

John Pavlick <[email protected]>
net: sfp: add quirks for Hisense and HSGQ GPON ONT SFP modules

Willem de Bruijn <[email protected]>
net: extend IPv6 exthdr detection of tunneled packets

Aldo Ariel Panzardo <[email protected]>
HID: multitouch: stop the release timer from being rearmed on remove

Zhiling Zou <[email protected]>
ipvs: bound LBLCR and LBLC cache growth

Chandrashekar Devegowda <[email protected]>
Bluetooth: btintel: fix buffer over-read in btintel_hw_error()

Chengfeng Ye <[email protected]>
Bluetooth: hci_core: Serialize fragmented ISO packet queueing

Chengfeng Ye <[email protected]>
Bluetooth: hci_core: Serialize ACL scheduling with channel deletion

Linmao Li <[email protected]>
Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems

Chengfeng Ye <[email protected]>
Bluetooth: hci_conn: Lock parent access during enhanced SCO setup

Chengfeng Ye <[email protected]>
Bluetooth: hci_sync: Fix inquiry cache use-after-free

Chengfeng Ye <[email protected]>
Bluetooth: RFCOMM: Fix initial port reference race

Abdurrahman Hussain <[email protected]>

    i2c: xiic: don't clobber msg->len to signal block-read completion

Xiang Mei <[email protected]>
ALSA: ua101: reject mismatched capture/playback packet sizes

Kyle Zeng <[email protected]>
ALSA: seq: Serialize compat port-info ioctls

Zimeng Li <[email protected]>
ASoC: qcom: lpass-cpu: use DAI table index for playback constraints

Jiangshan Yi <[email protected]>

    ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type

Jiangshan Yi <[email protected]>

    ASoC: codecs: max98363: fix uninitialized stream_config->type

Wentao Liang <[email protected]>
serial: vt8500: Fix clock reference leak in vt8500_serial_probe()

Simon Gassner <[email protected]>
serial: tegra: don't clear the Tx FIFO on an Rx-only reset

Fan Wu <[email protected]>

    serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()

Johan Hovold <[email protected]>
tty: abort break signalling on hangup

Viken Dadhaniya <[email protected]>
tty: serial: qcom_geni_serial: Keep console RX functional after deep idle

Joshua Rogers <[email protected]>
tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup

Joshua Rogers <[email protected]>
tty: vcc: zero-initialize control packet in vcc_send_ctl()

Johan Hovold <[email protected]>
tty: amiserial: fix broken TIOCMIWAIT

Mingyu Wang <[email protected]>
tty: vt: fix memory leak in vc_allocate()

Jie Deng <[email protected]>
usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe

Fan Wu <[email protected]>
usb: cdns3: fix use-after-free in cdns3_gadget_exit()

Jameson Thies <[email protected]>
usb: typec: ucsi: displayport: Current CAM OOB index fixup

Prashanth K <[email protected]>
usb: typec: ucsi: Get the connector fwnode based on reg value

Radhey Shyam Pandey <[email protected]>
usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()

Amit Sunil Dhamne <[email protected]>
usb: typec: tcpm: recover after failure to start the frs ams

Hui Peng <[email protected]>
usb: core: clear both ep_in and ep_out for non-ep0 control endpoints

Myeonghun Pak <[email protected]>
usb: chipidea: tegra: disable runtime PM on resume failure

Yuchao Zhang <[email protected]>
usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC

Alan Stern <[email protected]>
USB: gadget: dummy-hcd: Fix wait for outstanding request completions

Fan Wu <[email protected]>
usb: gadget: aspeed-vhub: cancel wake work on device removal

Radhey Shyam Pandey <[email protected]>
usb: dwc3: am62: Fix runtime PM usage count leak on probe error path

Linkai Gong <[email protected]>
usb: typec: anx7411 - stop the IRQ before destroying the workqueue

Liu Chao <[email protected]>
usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd

Takashi Iwai <[email protected]>
usb: gadget: midi2: Fix the jack descriptor array sizes

Myeonghun Pak <[email protected]>
usb: ohci-st: disable controller wakeup on removal

Myeonghun Pak <[email protected]>
usb: ohci-s3c2410: disable controller wakeup on removal

Myeonghun Pak <[email protected]>
usb: ohci-da8xx: disable controller wakeup on cleanup

Orgad Shaneh <[email protected]>
usb: octeon-hcd: fix the FIFO-flush timeout computation

Lovekesh Solanki <[email protected]>
usb: hub: use shorter 120ms post resume hold for SS root hubs

Syed Labeeq Sajid Bukhari <[email protected]>
usb: storage: sierra_ms: reject short SWoC info transfers

Johan Hovold <[email protected]>
USB: serial: fix port tear down use-after-free

Yuchao Zhang <[email protected]>
USB: cdc-acm: skip URB restart in port_shutdown if disconnected

Johan Hovold <[email protected]>
USB: cdc-acm: fix racy TIOCMIWAIT implementation

Viken Dadhaniya <[email protected]>
soc: qcom: geni-se: Correct QUP Core ICC vote constants

Yuxiao Wang <[email protected]>
nitro_enclaves: fix use-after-free on SLOT_ALLOC failure

Raphaël Larocque <[email protected]>
Input: synaptics - limit T440p InterTouch quirk to LEN0036

Lovekesh Solanki <[email protected]>
Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490

David Heidelberg <[email protected]>
Input: s6sy761 - fix resume ordering and restore sensing

Lovekesh Solanki <[email protected]>
Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410

Martino Papero <[email protected]>
Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11

Wentao Liang <[email protected]>
kgdboc: Fix tty driver reference leak in configure_kgdboc()

Tomer Pomeranc <[email protected]>
binder: fix leaked fd fixups on TF_UPDATE_TXN supersede

Tomer Pomeranc <[email protected]>
binder: fix is_failure flag for superseded transaction cleanup

Guangshuo Li <[email protected]>
drm/amdgpu: fix ACP MFD device leak on init failure

Guangshuo Li <[email protected]>
drm/amdgpu: fix IP instance memory leak on kobject add failure

Wentao Liang <[email protected]>
drm/mediatek: Fix pdev reference leak in mtk_drm_bind()

Guangshuo Li <[email protected]>
drm/mediatek: Fix ovl adaptor platform device leak

Haojie Li <[email protected]>
drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device

Imre Kaloz <[email protected]>
drm/radeon: Read the VRAM VBIOS signature with readb()

Willian Oliveira <[email protected]>
drm/amdgpu/gfx6: fix firmware leak on teardown

Timur Kristóf <[email protected]>
drm/amd/pm/si: Fix updating clock limits on AC/DC

Timur Kristóf <[email protected]>
drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC

Nikola Prica <[email protected]>
PCI: Accept AtomicOps already enabled by the hypervisor

Takashi Iwai <[email protected]>
ALSA: ice1712: Fix the error handling via auto-cleanup at probe

Takashi Iwai <[email protected]>
ALSA: core: Define auto-cleanup for snd_card_free()

Luo Gengkun <[email protected]>
perf: Fix race between perf_event_exit_task() and perf_pending_task()

Hongjian Dai <[email protected]>
i2c: at91: release DMA channels when probe defers

Eric Dumazet <[email protected]>
ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()

Florian Westphal <[email protected]>
net: add and use skb_get_hash_net

Quentin Freimanis <[email protected]>
net: sparx5: make ports inherit the switch base mac address type

Harshit Mogalapalli <[email protected]>
net: microchip: vcap: stop scanning after deleting key field

Pablo Neira Ayuso <[email protected]>
netfilter: flowtable: generalize pending status bit

Florian Westphal <[email protected]>
netfilter: conntrack: rework offload nf_conn timeout extension logic

Florian Westphal <[email protected]>
netfilter: conntrack: remove skb argument from nf_ct_refresh

Fernando Fernandez Mancera <[email protected]>
netfilter: bpf: reject invalid NAT manipulation types

Julian Anastasov <[email protected]>
ipvs: filter some flags received in the backup server

Julian Anastasov <[email protected]>
ipvs: do not create invisible templates

Julian Anastasov <[email protected]>
ipvs: fix missing counter decrement in lblc

Jeff Jo <[email protected]>
tcp: refresh TS.Recent for accepted old ACKs

Sandeep Haemoon <[email protected]>
net: ethernet: mtk_eth_soc: allocate dummy netdev sooner

Nicolai Buchwitz <[email protected]>
net: bcmgenet: fix NULL dereference in set_coalesce before first open

Jamal Hadi Salim <[email protected]>
net/sched: sch_codel: match the no-drop threshold to the packet size

Jamal Hadi Salim <[email protected]>
net/sched: fq_codel: match the no-drop threshold to the packet size

Jérémy Jean <[email protected]>
tipc: prevent GCM nonce reuse on peer key changes

Baha Mesleh <[email protected]>
octeontx2-af: mcs: Fix SC resource cleanup loop

Florian Fainelli <[email protected]>
net: systemport: Fix RUNT MIB counter register offset calculation

Florian Fainelli <[email protected]>
net: systemport: Fix buffer overflow in bcm_sysport_get_stats()

Nguyen Ngoc Thang <[email protected]>
Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister

Florian Westphal <[email protected]>
netfilter: ipset: do not update comments from kernel-side adds

Qishuai Liu <[email protected]>
ipv6: fix prefix route expiry in modify_prefix_route()

Jamal Hadi Salim <[email protected]>
net/sched: cls_api: reclaim an empty proto on the error path

Binbin Deng <[email protected]>
net/mctp: publish the mctp_dev only after it is initialised

Sai Teja Aluvala <[email protected]>
Bluetooth: btintel: validate DDC record lengths

Sang-Hoon Choi <[email protected]>
Bluetooth: hci_core: free the HCI ID if naming fails

Cezary Rojewski <[email protected]>
ASoC: codecs: rt274: Fix format setting for 44100 rate

Cezary Rojewski <[email protected]>
ASoC: codecs: rt286: Revert delay value for jack setup

Felix Fietkau <[email protected]>
wifi: mac80211: prevent AP VLAN tx from other interfaces

Tamizh Chelvam Raja <[email protected]>
wifi: mac80211: Add 802.3 multicast encapsulation offload support

Tamizh Chelvam Raja <[email protected]>
wifi: mac80211: Add multicast to unicast support for 802.3 path

Zhao Li <[email protected]>
wifi: cfg80211: preserve hidden-group beacon IE ownership

Manush Prajwal <[email protected]>
rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()

Liu Dalin <[email protected]>
rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak

Nicolas Escande <[email protected]>

    wifi: ath11k: reset ar->num_stations on hardware start

Sheetal <[email protected]>
ASoC: tegra: Fix ASRC Stream6 input threshold control

Aamir Ahmed <[email protected]>
wifi: wfx: validate MIB read length before copying to caller

HyeongJun An <[email protected]>
ASoC: wm8903: Move the DRC QR threshold to the register that holds it

Abdurrahman Hussain <[email protected]>
of/overlay: don't create "//" paths for fragments targeting the root

Abdurrahman Hussain <[email protected]>
of/overlay: don't leak fragment references when changeset init fails

Julian Sun <[email protected]>
nvmet: preserve device path on allocation failure

Karl Mehltretter <[email protected]>
mtd: core: call _get_device() with the master MTD

Matti Vaittinen <[email protected]>
iio: accel: kionix-kx022a: Fix array boundary check

SJ Park <[email protected]>
mm/damon/core: don't skip damos_adjust_quota() while esz is not zero

Tetsuo Handa <[email protected]>
perf/core: Fix WARN in perf_sigtrap()

Lorenzo Stoakes (ARM) <[email protected]>
mm/secretmem: properly account locked pages

Xiang Mei <[email protected]>
ALSA: line6: reject oversized playback packets

Nguyen Ngoc Thang <[email protected]>
ALSA: caiaq: unregister the input device when probe fails

Zizhi Wo <[email protected]>
vt: skip screen update for DEC alignment test on backgroup consoles

Maoyi Xie <[email protected]>
rds_tcp: close NULL deref window in rds_tcp_set_callbacks

Benjamin Berg <[email protected]>
wifi: cfg80211: avoid double free if updating BSS fails

Justin Tee <[email protected]>
scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info

Justin Tee <[email protected]>
scsi: lpfc: Define lpfc_dmabuf type for ctx_buf ptr

Jiangshan Yi <[email protected]>
smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions

Jun Yang <[email protected]>
sctp: check RCV_SHUTDOWN after the sendmsg connect wait

Runyu Xiao <[email protected]>
rtc: spear: initialize IRQ state before requesting alarm IRQ

Aamir Ahmed <[email protected]>
rtc: ac100: Assign .num before accessing .hws

Ilkka Lappeteläinen <[email protected]>
net/packet: prevent TX_RING byte count overflow

Aohan Mei <[email protected]>
netfilter: nft_flow_offload: drop flowtable reference on init error path

Alireza Asgari <[email protected]>
net: fix checksum offsets in skb_splice_from_iter()

Abdurrahman Hussain <[email protected]>
of/overlay: only treat a positive changeset id as registered

Abdurrahman Hussain <[email protected]>
of/overlay: put property on deadprops only after changeset add succeeds

Wentao Liang <[email protected]>
of/irq: Fix remaining refcount leaks in of_irq_init()

Leon Hwang <[email protected]>
kprobes: Skip disarmed probes when checking optkprobe overlap

Jérémy Jean <[email protected]>
audit: fix exe mark UAF in kill_rules()

Takashi Iwai <[email protected]>
ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices

SJ Park <[email protected]>
mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()

Darrick J. Wong <[email protected]>
xfs: fix cursor and pointer handling when recovering iunlink buckets

Zihan Xi <[email protected]>
smb: client: close completed creates on compound wait errors

Zihan Xi <[email protected]>
smb: client: close handle after create-context parsing failure

ChenXiaoSong <[email protected]>
smb/client: pass cifs_open_info_data to SMB2_open()

ChenXiaoSong <[email protected]>
smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink()

Chen Changcheng <[email protected]>
HID: alps: unregister DualPoint Stick input device on remove

Bastien Nocera <[email protected]>
HID: hid-alps: Use pm_ptr instead of #ifdef CONFIG_PM

Thomas Weißschuh <[email protected]>
HID: core: remove #ifdef CONFIG_PM from hid_driver

Tibor Harcsa <[email protected]>
Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table

Jiayuan Chen <[email protected]>
bpf, xdp: move offload check into dev_xdp_install()

Jiakai Xu <[email protected]>
RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_has_attr()

Zhenhao Wan <[email protected]>
drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op

Namjae Jeon <[email protected]>
smb: client: use finish_no_open() for non-regular inodes

Dapeng Mi <[email protected]>
perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification

Dapeng Mi <[email protected]>
perf/x86/intel: Update event constraints and cache_extra_regsfor ADL

Aohan Mei <[email protected]>
netfilter: nf_tables: skip expired catchall elements on insert and delete

Pablo Neira Ayuso <[email protected]>

    netfilter: nf_tables: set->ops->insert returns opaque set element in case of EEXIST

Guangshuo Li <[email protected]>
net: ena: fix MMIO read buffer leak on probe failure

Dr. David Alan Gilbert <[email protected]>
net: ena: Remove autopolling mode

Puranjay Mohan <[email protected]>
perf/core: Run sched_task() for PMUs with only CPU-wide events

Thomas Richter <[email protected]>
perf/core: Allow list_del during perf_event_overflow()

Puranjay Mohan <[email protected]>

    perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()

Kan Liang <[email protected]>
perf: Supply task information to sched_task()

Yuqi Xu <[email protected]>
net: ipconfig: bound DHCP option construction

Thorsten Blum <[email protected]>
net: ipconfig: Remove outdated comment and indent code block

Liz Fong-Jones <[email protected]>
PCI: Fix BAR resize for devices on a root bus

Ilpo Järvinen <[email protected]>
PCI: Fix Resizable BAR restore order

Christian Brauner <[email protected]>
super: make iterate_supers_type() deletion-safe

Xie Bo <[email protected]>
RISC-V: KVM: Serialize IMSIC attributes with vCPU migration

Jiakai Xu <[email protected]>
RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_rw_attr()

Ilya Maximets <[email protected]>
net: openvswitch: conntrack: fix helper UAF due to extensions realloc

Ilya Maximets <[email protected]>
net: openvswitch: conntrack: remove 'add_helper' dead code

Florian Westphal <[email protected]>
openvswitch: prepare for stolen verdict coming from conntrack and nat engine

Ilya Maximets <[email protected]>
net/sched: act_ct: avoid modifying shared unconfirmed ct entry

Ilya Maximets <[email protected]>
net/sched: act_ct: fix helper UAF due to extensions realloc

Jaewook You <[email protected]>
mm/hugetlb: preserve mremap address delta when skipping page tables

Jinjiang Tu <[email protected]>

    mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish

Peiyang He <[email protected]>
drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM

Wentao Liang <[email protected]>
drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc()

Dapeng Mi <[email protected]>
perf/x86/intel: Remove anythread_deprecated bit from perf_capabilities

Willem de Bruijn <[email protected]>
tcp: prevent collapsing skbs across boundary in rtx queue

Myeonghun Pak <[email protected]>
bna: prevent IOC timer rearm during teardown

Frank Sorenson <[email protected]>
smb: client: fix reparse buffer bounds in cifs_query_reparse_point()

April Cardenas <[email protected]>
smb/client: send lease break ACKs thru correct session for multiuser mounts

Fan Wu <[email protected]>
wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown

Yibo Tan <[email protected]>
hwmon: (pwm-fan) Stop RPM timer before freeing tach data

Hongling Zeng <[email protected]>
btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()

Fan Wu <[email protected]>
smb: client: fix cifsFileInfo reference leak in deferred close

Paolo Abeni <[email protected]>
mptcp: do not reschedule the RTX timer for fallback sockets

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: reset retrans_time when ADD_ADDR entry is reused

Qing Luo <[email protected]>
mptcp: pm: userspace: fix address ID overflow

Geliang Tang <[email protected]>
mptcp: use sock_kmemdup for address entry

Geliang Tang <[email protected]>
sock: add sock_kmemdup helper

Geliang Tang <[email protected]>
mptcp: pm: drop match in userspace_pm_append_new_local_addr

Jingbo Xu <[email protected]>
erofs: add sysfs feature entry for xattr prefixes

Nikhil Gurudasani <[email protected]>
erofs: preserve LZMA decoders on resize failure

Xuanqiang Luo <[email protected]>
net/sched: act_api: release all action references on NEWACTION failure

Xiong Weimin <[email protected]>
virtio_mmio: disable IRQ wake before free_irq

Viresh Kumar <[email protected]>
virtio-mmio: Remove virtqueue list from mmio device

Zihan Xi <[email protected]>
ipmr: account multicast table and route memory

Shixiong Ou <[email protected]>
drm/sysfb: ofdrm: Fix is_avivo() constant comparison bug

Shixiong Ou <[email protected]>
drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation

Thomas Zimmermann <[email protected]>
drm/sysfb: simpledrm: Improve stride validation

Thomas Zimmermann <[email protected]>
drm/sysfb: simpledrm: Improve panel-size validation

Guanghui Yang <[email protected]>
f2fs: fix dentry folio leak in find_in_level

Wenjie Qi <[email protected]>
f2fs: limit recovery filename logging to stored length

Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature

Nilesh Javali <[email protected]>
scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot

Nilesh Javali <[email protected]>
scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs

Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate

Nilesh Javali <[email protected]>
scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path

Narasimharao Vadlamudi <[email protected]>
media: rkvdec: Propagate platform_get_irq() errors

Johan Hovold <[email protected]>
media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup

Lorenzo Stoakes (ARM) <[email protected]>
mm/mremap: reset unfaulted VMA page offset for MREMAP_DONTUNMAP

Imran Shaik <[email protected]>
clk: qcom: Fix test_ctl_hi field for DEFAULT_EVO PLLs

Xu Rao <[email protected]>
nvme-fabrics: fix DHCHAP secret leak on parse failure

Lad Prabhakar <[email protected]>
rtc: rzn1: Handle unset alarm weekday in rzn1_rtc_read_alarm

Steven Rostedt <[email protected]>
ftrace: Synchronize the initialization of ftrace_ops

Masami Hiramatsu (Google) <[email protected]>
tracing/probes: Fix anon_stack check for unnamed bitfields in btf_find_struct_member

Muhammad Bilal <[email protected]>
staging: sm750fb: fix mono image source stride mismatch in lynxfb_ops_imageblit()

Jeffin Philip <[email protected]>
usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()

Bryam Vargas <[email protected]>
wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy

Adrian Hunter <[email protected]>

    i3c: master: Fix use-after-free of master->this

Adrian Hunter <[email protected]>
i3c: master: Do not treat master device as a duplicate target

Can Peng <[email protected]>
hwrng: stm32 - Fix runtime PM cleanup on registration failure

Fan Wu <[email protected]>
power: supply: qcom_battmgr: fix use-after-free

Srinivas Pandruvada <[email protected]>
platform/x86: ISST: Validate max level for set feature

Srinivas Pandruvada <[email protected]>
platform/x86: ISST: Validate parameter for core power state

Fan Wu <[email protected]>
mmc: via-sdmmc: cancel card-detect work on remove

Oscar Ou <[email protected]>
lockd: fix swapped arguments in nlmsvc_match_ip()

Ruoyu Wang <[email protected]>
i2c: mxs: fix DMA channel leak on probe error

Bence Csókás <[email protected]>
dmaengine: Add devm_dma_request_chan()

Jorijn van der Graaf <[email protected]>
ASoC: codecs: aw88261: only check PLL and clock state at power-up

Val Packett <[email protected]>
ASoC: codecs: aw88261: reduce log spam

Jiacheng Yu <[email protected]>
params: fix charp corruption on allocation failure

Andy Shevchenko <[email protected]>
params: Fix multi-line comment style

Andy Shevchenko <[email protected]>
params: Sort headers

Andy Shevchenko <[email protected]>
params: Use size_add() for kmalloc()

Andy Shevchenko <[email protected]>
params: Do not go over the limit when getting the string length

Rafael J. Wysocki <[email protected]>
ACPI: TAD: Add locking around AML evaluations

Rafael J. Wysocki <[email protected]>
ACPI: TAD: Split three functions to untangle runtime PM handling

Rafael J. Wysocki <[email protected]>
ACPI: TAD: Rearrange RT data validation checking

Haoxiang Li <[email protected]>
cpufreq: apple-soc: Fix OPP table cleanup

Kuan-Wei Chiu <[email protected]>
coresight: etm3x: Fix cntr_val_show() to match cntr_val_store() behavior

Jeff Layton <[email protected]>
nfsd: fix clock domain mismatch in clients_still_reclaiming()

Jeff Layton <[email protected]>
nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()

Chris Mason <[email protected]>
nfsd: size fh_verify server sockaddr slot by xpt_locallen

Longlong Xia <[email protected]>
zram: fix out-of-bounds access in read_block_state()

Sergey Senozhatsky <[email protected]>
zram: fixup read_block_state()

Chengfeng Ye <[email protected]>
KEYS: trusted: Fix TPM teardown ordering

Jakub Kicinski <[email protected]>
ethtool: fail closed if we can't get max channel used in indirection tables

Mauro Carvalho Chehab <[email protected]>
media: av7110: fix a spectre vulnerability

Christoph Schlameuss <[email protected]>
kvm: s390: Reject memory region operations for ucontrol VMs

Suraj Kandpal <[email protected]>
drm/i915/hdcp: Add encoder check in hdcp2_get_capability

Suraj Kandpal <[email protected]>
drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability

Ilya Titov <[email protected]>
pinctrl: sunxi: keep a shadow copy of the data register output latches

Xiang Mei <[email protected]>
vlan: require the MAC header to be present in __vlan_insert_inner_tag()

Frank Sorenson <[email protected]>
smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()

Joseph Qi <[email protected]>
smb: client: fix use-after-free of iface in cifs_try_adding_channels()

Bharath SM <[email protected]>
smb: mark the new channel addition log as informational log with cifs_info

Daehyeon Ko <[email protected]>
wifi: libipw: reject TKIP frames without a full MIC

Xiang Mei <[email protected]>
ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity

Takashi Iwai <[email protected]>
ALSA: usb-audio: Optimize the copy of packet sizes for implicit fb handling

Norbert Szetei <[email protected]>
landlock: Fix use-after-free of the source's parent directory

Fan Wu <[email protected]>

    ieee802154: cc2520: fix FIFOP work use-after-free

Zhiling Zou <[email protected]>
net: bridge: use option bits for CFM/MRP frame handlers

Jens Axboe <[email protected]>

    io_uring/rw: end write accounting from ->ki_complete

XingWang Xiang <[email protected]>
genetlink: pin family module during policy dump

Xu Rao <[email protected]>
Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev

Uwe Kleine-König <[email protected]>
Bluetooth: btqcomsmd: Convert to platform remove callback returning void

Donggeun Yoo <[email protected]>
tracing: Fix memory corruption from a "STACKTRACE" histogram key

Chao Yu <[email protected]>
f2fs: embed f2fs_gc_kthread in f2fs_sb_info

Wenjie Qi <[email protected]>
f2fs: validate MOVE_RANGE destination size

Nilesh Javali <[email protected]>

    scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[]

Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown

Nilesh Javali <[email protected]>
scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking

Nilesh Javali <[email protected]>
scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak

Christian Borntraeger <[email protected]>
KVM: s390: Zero initialize data structures for inject_pfault_token

Tristan Madani <[email protected]>
nvme: add missing SRCU grace period in error path

Steven Rostedt <[email protected]>
ftrace: Take trace_array reference before accessing its ftrace_ops

Muhammad Bilal <[email protected]>
staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()

Vivek BalachandharTN <[email protected]>
staging: rtl8723bs: fix spacing around operators

Myeonghun Pak <[email protected]>
usb: storage: realtek_cr: fix use-after-free on disconnect

Jan Kara <[email protected]>
udf: Fix data loss when converting inline inodes to out of line

Fan Wu <[email protected]>
wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop

Doruk Tan Ozturk <[email protected]>
ocfs2: validate directory-index entry counts when reading metadata

Joseph Qi <[email protected]>
ocfs2: validate dx_root extent list fields during block read

Baul Lee <[email protected]>
HID: universal-pidff: stop the device when force-feedback init fails

Doruk Tan Ozturk <[email protected]>
HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind

Frank Sorenson <[email protected]>
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()

Sam Edwards <[email protected]>
ceph: properly decrypt filenames in vmalloc() buffers

Jeff Layton <[email protected]>
nfsd: fix nfsd_file leak on inter-server COPY setup failure

Roger Pau Monne <[email protected]>
x86/xen: fix init of balloon stats again

Roger Pau Monne <[email protected]>
xen/balloon: improve accuracy of initial balloon target for dom0

Hyunwoo Kim <[email protected]>
apparmor: fix out-of-bounds write when null terminating a label vec

Mario Limonciello <[email protected]>
x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client

David Arinzon <[email protected]>
net: ena: Add validation for completion descriptors consistency

Shay Drory <[email protected]>
net/mlx5e: Fix netif state handling

Jan Kara <[email protected]>
ocfs2: Avoid touching renamed directory if parent does not change

Tahera Fahimi <[email protected]>
xfrm: prevent policy_hthresh.work from racing with netns teardown

Aneesh Kumar K.V (Arm) <[email protected]>
dma-direct: return struct page from dma_direct_alloc_from_pool()

Christoph Hellwig <[email protected]>
dma-direct: simplify the use atomic pool logic in dma_direct_alloc

-------------

Diffstat:

 CREDITS                                            |    5 +
 Documentation/ABI/testing/sysfs-fs-erofs           |    2 +-
 Documentation/admin-guide/cgroup-v1/memory.rst     |   47 +-
 Documentation/arch/arm64/silicon-errata.rst        |    2 +
 Documentation/filesystems/ntfs.rst                 |  466 ---
 Documentation/netlink/specs/rt_link.yaml           |    2 +
 Documentation/networking/strparser.rst             |    2 +-
 Documentation/virt/kvm/api.rst                     |    6 +
 MAINTAINERS                                        |   12 +-
 Makefile                                           |   31 +-
 arch/alpha/include/asm/pgtable.h                   |   33 +-
 arch/alpha/include/asm/tlbflush.h                  |    4 +-
 arch/alpha/lib/Makefile                            |    1 -
 arch/alpha/mm/Makefile                             |    4 +-
 arch/alpha/mm/tlbflush.c                           |  112 +
 arch/arm/mm/dump.c                                 |    4 +-
 arch/arm/net/bpf_jit_32.c                          |   25 +-
 arch/arm64/Kconfig                                 |   30 +
 arch/arm64/kernel/Makefile                         |    3 +
 arch/arm64/kernel/cpu_errata.c                     |   24 +-
 arch/arm64/kernel/cpufeature.c                     |    2 +-
 arch/arm64/kernel/ptrace.c                         |   50 +
 arch/arm64/kernel/signal.c                         |   34 +-
 arch/arm64/kernel/topology.c                       |   11 +-
 arch/arm64/kvm/mmu.c                               |   25 +-
 arch/arm64/kvm/vgic/vgic-its.c                     |    8 +
 arch/arm64/kvm/vgic/vgic.c                         |    9 +-
 arch/arm64/net/bpf_jit_comp.c                      |   15 +-
 arch/arm64/tools/cpucaps                           |    2 +-
 arch/loongarch/kernel/Makefile                     |    2 +-
 arch/loongarch/kernel/machine_kexec.c              |    5 +-
 arch/loongarch/kernel/setup.c                      |    1 +
 arch/loongarch/net/bpf_jit.c                       |   34 +-
 arch/mips/Kbuild                                   |    6 -
 arch/mips/kernel/ftrace.c                          |   25 +-
 arch/mips/net/bpf_jit_comp.c                       |    3 +-
 arch/mips/sgi-ip22/ip22-platform.c                 |   32 +
 arch/parisc/net/bpf_jit_core.c                     |    8 +-
 arch/powerpc/include/asm/book3s/64/pgtable.h       |   16 +
 arch/powerpc/include/asm/iommu.h                   |    4 +-
 arch/powerpc/include/asm/xive.h                    |    4 +-
 arch/powerpc/kernel/iommu.c                        |  151 +-
 arch/powerpc/kexec/ranges.c                        |   12 +-
 arch/powerpc/mm/book3s64/pgtable.c                 |   15 +-
 arch/powerpc/mm/book3s64/radix_pgtable.c           |    2 +-
 arch/powerpc/mm/pgtable-frag.c                     |    1 +
 arch/powerpc/mm/pgtable_64.c                       |    2 +-
 arch/powerpc/net/bpf_jit_comp.c                    |   12 +-
 arch/powerpc/perf/core-book3s.c                    |    8 +-
 arch/powerpc/platforms/powernv/smp.c               |    8 +-
 arch/powerpc/platforms/pseries/iommu.c             |  147 +-
 arch/powerpc/platforms/pseries/smp.c               |    8 +-
 arch/powerpc/sysdev/xive/common.c                  |   10 +-
 arch/riscv/include/asm/kvm_host.h                  |    7 +
 arch/riscv/include/asm/processor.h                 |    1 +
 arch/riscv/kernel/asm-offsets.c                    |    5 +
 arch/riscv/kernel/entry.S                          |    9 +
 arch/riscv/kvm/aia_imsic.c                         |   16 +-
 arch/riscv/kvm/main.c                              |    4 +-
 arch/riscv/kvm/vcpu.c                              |   27 +-
 arch/riscv/kvm/vcpu_vector.c                       |    5 +-
 arch/riscv/kvm/vmid.c                              |    2 +-
 arch/riscv/net/bpf_jit_core.c                      |    6 +-
 arch/s390/boot/vmem.c                              |    2 +-
 arch/s390/include/asm/nmi.h                        |    3 +
 arch/s390/include/asm/pci_insn.h                   |   10 +-
 arch/s390/include/asm/pgtable.h                    |    8 +-
 arch/s390/kernel/nmi.c                             |    5 +-
 arch/s390/kernel/perf_pai_crypto.c                 |    3 +-
 arch/s390/kernel/perf_pai_ext.c                    |    3 +-
 arch/s390/kvm/interrupt.c                          |   24 +-
 arch/s390/kvm/kvm-s390.c                           |    7 +-
 arch/s390/mm/fault.c                               |   13 +-
 arch/s390/mm/gmap.c                                |   12 +-
 arch/s390/mm/hugetlbpage.c                         |    2 +-
 arch/s390/mm/pageattr.c                            |    2 +-
 arch/s390/mm/pgtable.c                             |    6 +-
 arch/s390/mm/vmem.c                                |    6 +-
 arch/s390/net/bpf_jit_comp.c                       |    6 +-
 arch/sparc/kernel/Makefile                         |    1 -
 arch/sparc/lib/Makefile                            |    1 -
 arch/sparc/mm/Makefile                             |    1 -
 arch/sparc/mm/init_64.c                            |    4 +-
 arch/sparc/net/bpf_jit_comp_64.c                   |    6 +-
 arch/sparc/prom/Makefile                           |    1 -
 arch/um/include/linux/time-internal.h              |    2 +
 arch/um/kernel/skas/syscall.c                      |   45 +-
 arch/x86/boot/compressed/ident_map_64.c            |    2 +-
 arch/x86/crypto/Kconfig                            |    4 +-
 arch/x86/crypto/aegis128-aesni-asm.S               |  110 +-
 arch/x86/crypto/aegis128-aesni-glue.c              |  156 +-
 arch/x86/events/amd/brs.c                          |    3 +-
 arch/x86/events/amd/core.c                         |   12 +-
 arch/x86/events/amd/lbr.c                          |    3 +-
 arch/x86/events/core.c                             |    5 +-
 arch/x86/events/intel/core.c                       |   50 +-
 arch/x86/events/intel/ds.c                         |   45 +-
 arch/x86/events/intel/lbr.c                        |    3 +-
 arch/x86/events/intel/pt.c                         |   56 +-
 arch/x86/events/perf_event.h                       |   29 +-
 arch/x86/include/asm/uaccess_64.h                  |    5 +-
 arch/x86/kernel/cpu/amd.c                          |   11 +
 arch/x86/kernel/cpu/resctrl/rdtgroup.c             |   19 +-
 arch/x86/kvm/hyperv.c                              |    2 +-
 arch/x86/kvm/mmu/mmu.c                             |    8 +-
 arch/x86/kvm/svm/hyperv.h                          |    7 +
 arch/x86/kvm/svm/nested.c                          |   53 +-
 arch/x86/kvm/svm/sev.c                             |   29 +-
 arch/x86/kvm/svm/svm.c                             |   75 +-
 arch/x86/kvm/vmx/nested.c                          |   31 +-
 arch/x86/kvm/x86.c                                 |   13 +
 arch/x86/kvm/x86.h                                 |    4 +-
 arch/x86/kvm/xen.c                                 |    2 +-
 arch/x86/lib/copy_user_uncached_64.S               |    6 +-
 arch/x86/lib/usercopy_64.c                         |    4 +-
 arch/x86/mm/fault.c                                |    8 +-
 arch/x86/mm/init_32.c                              |    2 +-
 arch/x86/mm/init_64.c                              |    8 +-
 arch/x86/mm/kasan_init_64.c                        |    2 +-
 arch/x86/mm/mem_encrypt_identity.c                 |    4 +-
 arch/x86/mm/pat/set_memory.c                       |    4 +-
 arch/x86/mm/pgtable.c                              |    2 +-
 arch/x86/mm/pti.c                                  |    4 +-
 arch/x86/net/bpf_jit_comp.c                        |    8 +-
 arch/x86/net/bpf_jit_comp32.c                      |    3 +-
 arch/x86/power/hibernate.c                         |    2 +-
 arch/x86/xen/mmu_pv.c                              |    4 +-
 block/bfq-cgroup.c                                 |    9 +-
 block/blk-cgroup.c                                 |    5 +-
 block/blk-cgroup.h                                 |    2 +
 block/blk-iocost.c                                 |   21 +-
 block/blk-iolatency.c                              |   19 +-
 block/blk-throttle.c                               |   15 +-
 crypto/af_alg.c                                    |    2 +
 crypto/algif_skcipher.c                            |    8 +-
 crypto/drbg.c                                      |   11 +-
 drivers/accel/habanalabs/common/device.c           |    2 +-
 drivers/accel/habanalabs/common/memory.c           |   24 +-
 drivers/accel/ivpu/ivpu_fw_log.c                   |   74 +-
 drivers/accel/ivpu/ivpu_gem.h                      |   14 +-
 drivers/accel/ivpu/ivpu_ipc.c                      |    7 +-
 drivers/accel/qaic/mhi_controller.c                |   22 -
 drivers/acpi/acpi_platform.c                       |   16 +-
 drivers/acpi/acpi_tad.c                            |  188 +-
 drivers/acpi/bus.c                                 |   54 +-
 drivers/acpi/processor_idle.c                      |    4 +-
 drivers/android/binder.c                           |    3 +-
 drivers/android/binder_alloc.c                     |    7 +-
 drivers/base/core.c                                |    3 +-
 drivers/base/memory.c                              |    4 +-
 drivers/base/property.c                            |   35 +
 drivers/block/null_blk/main.c                      |   16 +-
 drivers/block/ublk_drv.c                           |   50 +-
 drivers/block/zram/zram_drv.c                      |   25 +-
 drivers/bluetooth/btintel.c                        |   15 +-
 drivers/bluetooth/btqcomsmd.c                      |   10 +-
 drivers/bluetooth/btusb.c                          |    2 +
 drivers/bus/fsl-mc/fsl-mc-bus.c                    |   43 +-
 drivers/bus/mhi/host/pci_generic.c                 |   20 +-
 drivers/char/hw_random/core.c                      |  152 +-
 drivers/char/hw_random/stm32-rng.c                 |   12 +-
 drivers/clk/mediatek/clk-pllfh.c                   |   97 +-
 drivers/clk/qcom/gcc-qcm2290.c                     |    6 +-
 drivers/clk/qcom/gcc-sm6115.c                      |    6 +-
 drivers/clk/sunxi-ng/ccu-sun50i-h616.c             |   64 +-
 drivers/clocksource/samsung_pwm_timer.c            |   22 +-
 drivers/cpufreq/acpi-cpufreq.c                     |    4 +-
 drivers/cpufreq/amd-pstate.c                       |    7 +-
 drivers/cpufreq/apple-soc-cpufreq.c                |   40 +-
 drivers/cpufreq/bmips-cpufreq.c                    |    4 +-
 drivers/cpufreq/cppc_cpufreq.c                     |    3 +-
 drivers/cpufreq/cpufreq-dt.c                       |    3 +-
 drivers/cpufreq/e_powersaver.c                     |    3 +-
 drivers/cpufreq/intel_pstate.c                     |    8 +-
 drivers/cpufreq/mediatek-cpufreq-hw.c              |    4 +-
 drivers/cpufreq/mediatek-cpufreq.c                 |    4 +-
 drivers/cpufreq/omap-cpufreq.c                     |    3 +-
 drivers/cpufreq/pasemi-cpufreq.c                   |    6 +-
 drivers/cpufreq/pcc-cpufreq.c                      |    6 -
 drivers/cpufreq/powernow-k6.c                      |    5 +-
 drivers/cpufreq/powernow-k7.c                      |    3 +-
 drivers/cpufreq/powernow-k8.c                      |    6 +-
 drivers/cpufreq/powernv-cpufreq.c                  |    4 +-
 drivers/cpufreq/ppc_cbe_cpufreq.c                  |    3 +-
 drivers/cpufreq/qcom-cpufreq-hw.c                  |    5 +-
 drivers/cpufreq/qoriq-cpufreq.c                    |    4 +-
 drivers/cpufreq/scmi-cpufreq.c                     |    4 +-
 drivers/cpufreq/scpi-cpufreq.c                     |    4 +-
 drivers/cpufreq/sh-cpufreq.c                       |    4 +-
 drivers/cpufreq/sparc-us2e-cpufreq.c               |    3 +-
 drivers/cpufreq/sparc-us3-cpufreq.c                |    3 +-
 drivers/cpufreq/speedstep-centrino.c               |   10 +-
 drivers/cpufreq/tegra194-cpufreq.c                 |    4 +-
 drivers/cpufreq/vexpress-spc-cpufreq.c             |    5 +-
 drivers/crypto/hisilicon/qm.c                      |   38 +-
 drivers/crypto/intel/qat/qat_common/adf_init.c     |   14 +
 drivers/cxl/core/core.h                            |    2 +
 drivers/cxl/core/mbox.c                            |   15 +-
 drivers/cxl/core/pci.c                             |   10 +-
 drivers/cxl/core/port.c                            |   13 +-
 drivers/cxl/core/region.c                          |   84 +-
 drivers/cxl/core/trace.h                           |   12 +-
 drivers/cxl/cxl.h                                  |   22 +-
 drivers/dma-buf/dma-buf.c                          |   15 +
 drivers/dma-buf/dma-heap.c                         |   80 +-
 drivers/dma-buf/udmabuf.c                          |   20 +-
 drivers/dma/dmaengine.c                            |   30 +
 drivers/dma/idxd/init.c                            |   36 +-
 drivers/dma/ti/k3-udma-glue.c                      |   15 +-
 drivers/dma/xilinx/xilinx_dma.c                    |   14 +-
 drivers/edac/amd64_edac.c                          |    4 +-
 drivers/edac/igen6_edac.c                          |    6 +
 drivers/firewire/core-topology.c                   |   30 +-
 drivers/firewire/ohci.c                            |    4 +-
 drivers/firmware/arm_ffa/driver.c                  |    4 +-
 drivers/firmware/arm_scmi/bus.c                    |   36 +-
 drivers/firmware/arm_scmi/driver.c                 |    4 +-
 drivers/firmware/arm_scmi/mailbox.c                |   23 +-
 drivers/firmware/arm_scmi/smc.c                    |   13 +-
 drivers/firmware/qcom_scm-smc.c                    |    2 +-
 drivers/firmware/qcom_scm.c                        |    8 +-
 drivers/firmware/qcom_scm.h                        |    2 +-
 drivers/fpga/dfl.c                                 |    2 +-
 drivers/gpio/gpio-exar.c                           |    2 +-
 drivers/gpio/gpio-mvebu.c                          |    1 +
 drivers/gpio/gpio-pca953x.c                        |   18 +-
 drivers/gpio/gpio-rockchip.c                       |   19 +-
 drivers/gpio/gpio-xilinx.c                         |    9 +-
 drivers/gpu/drm/Makefile                           |    2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu.h                |    9 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c            |   13 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c           |    1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c         |    8 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_atombios.c       |   25 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c           |   63 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c             |   26 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c            |   73 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c        |   86 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |   61 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c      |    2 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_fru_eeprom.c     |  104 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_fru_eeprom.h     |    9 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c            |   25 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.h            |    3 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c            |   17 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c            |   15 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c            |   25 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.h            |    3 -
 drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c            |   46 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ids.h            |    1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_job.c            |   18 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c            |    5 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c            |   32 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_psp.h            |    2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c            |   32 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_ras.h            |    1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_umc.c            |    1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c            |    3 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c             |  150 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h             |   21 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm_pt.c          |    2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c       |   20 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_xcp.c            |   28 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_xcp.h            |    1 +
 drivers/gpu/drm/amd/amdgpu/aqua_vanjaram.c         |    3 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c             |    2 -
 drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c              |    9 +
 drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c              |    2 -
 drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c            |    8 +-
 drivers/gpu/drm/amd/amdgpu/gmc_v10_0.c             |   24 +-
 drivers/gpu/drm/amd/amdgpu/gmc_v11_0.c             |   23 +-
 drivers/gpu/drm/amd/amdgpu/gmc_v8_0.c              |   20 +-
 drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c              |   24 +-
 drivers/gpu/drm/amd/amdgpu/psp_v11_0.c             |    8 +-
 drivers/gpu/drm/amd/amdgpu/psp_v12_0.c             |    8 +-
 drivers/gpu/drm/amd/amdgpu/psp_v13_0.c             |   14 +-
 drivers/gpu/drm/amd/amdgpu/psp_v13_0_4.c           |   14 +-
 drivers/gpu/drm/amd/amdgpu/psp_v3_1.c              |    8 +-
 drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c             |   23 +-
 drivers/gpu/drm/amd/amdgpu/sdma_v4_4_2.c           |   22 +-
 drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c              |    4 +-
 drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c              |    1 +
 drivers/gpu/drm/amd/amdgpu/vi.c                    |   21 +
 drivers/gpu/drm/amd/amdkfd/kfd_crat.c              |   17 +
 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c  |   51 +-
 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h  |    2 +
 drivers/gpu/drm/amd/amdkfd/kfd_migrate.c           |   56 +-
 drivers/gpu/drm/amd/amdkfd/kfd_priv.h              |   10 +-
 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c |   24 +-
 drivers/gpu/drm/amd/amdkfd/kfd_smi_events.c        |   18 +-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   82 +-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h  |    2 +-
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c |    8 +-
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c |   10 +-
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.h |    8 +-
 .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c  |   69 +-
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c  |    3 +
 .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c    |   22 +-
 .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c    |   40 +-
 drivers/gpu/drm/amd/display/dc/bios/bios_parser.c  |    3 +
 .../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c |    2 +-
 .../amd/display/dc/clk_mgr/dcn201/dcn201_clk_mgr.c |    2 -
 drivers/gpu/drm/amd/display/dc/core/dc.c           |   29 +-
 drivers/gpu/drm/amd/display/dc/core/dc_debug.c     |    2 +
 .../gpu/drm/amd/display/dc/core/dc_hw_sequencer.c  |   82 +-
 drivers/gpu/drm/amd/display/dc/core/dc_resource.c  |    2 +
 drivers/gpu/drm/amd/display/dc/dc.h                |    1 +
 drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c       |   36 +-
 drivers/gpu/drm/amd/display/dc/dc_dp_types.h       |    2 +-
 drivers/gpu/drm/amd/display/dc/dc_helper.c         |    3 +
 drivers/gpu/drm/amd/display/dc/dc_types.h          |    1 +
 .../gpu/drm/amd/display/dc/dce/dce_clock_source.c  |   20 +-
 drivers/gpu/drm/amd/display/dc/dce/dmub_abm_lcd.c  |    2 +-
 .../amd/display/dc/dce110/dce110_hw_sequencer.c    |   14 +-
 .../drm/amd/display/dc/dce112/dce112_resource.c    |    5 +-
 .../gpu/drm/amd/display/dc/dce60/dce60_resource.c  |    1 -
 .../gpu/drm/amd/display/dc/dce80/dce80_resource.c  |    1 +
 drivers/gpu/drm/amd/display/dc/dcn10/dcn10_hubp.c  |    3 +-
 .../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c  |   22 +-
 drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hubp.c  |    5 +-
 drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c |   27 +-
 drivers/gpu/drm/amd/display/dc/dcn20/dcn20_vmid.c  |    3 +
 drivers/gpu/drm/amd/display/dc/dcn21/dcn21_hubp.c  |    2 +
 drivers/gpu/drm/amd/display/dc/dcn21/dcn21_hwseq.c |    2 +-
 .../gpu/drm/amd/display/dc/dcn30/dcn30_resource.c  |    2 +
 .../drm/amd/display/dc/dcn301/dcn301_resource.c    |    2 +
 .../drm/amd/display/dc/dcn302/dcn302_resource.c    |    2 +
 .../drm/amd/display/dc/dcn303/dcn303_resource.c    |    2 +
 drivers/gpu/drm/amd/display/dc/dcn31/dcn31_hwseq.c |    4 +-
 .../gpu/drm/amd/display/dc/dcn31/dcn31_resource.c  |    2 +
 .../gpu/drm/amd/display/dc/dcn314/dcn314_hwseq.c   |    2 +-
 .../drm/amd/display/dc/dcn314/dcn314_resource.c    |    2 +
 drivers/gpu/drm/amd/display/dc/dcn32/dcn32_hwseq.c |    2 +-
 .../gpu/drm/amd/display/dc/dcn32/dcn32_resource.c  |    7 +-
 .../amd/display/dc/dcn32/dcn32_resource_helpers.c  |   10 +-
 .../drm/amd/display/dc/dcn321/dcn321_resource.c    |    2 +-
 .../gpu/drm/amd/display/dc/dml/dcn20/dcn20_fpu.c   |    2 +
 .../drm/amd/display/dc/inc/hw/clk_mgr_internal.h   |    2 +-
 .../amd/display/dc/link/accessories/link_dp_cts.c  |    5 +-
 .../drm/amd/display/dc/link/hwss/link_hwss_dio.c   |    5 +-
 .../drm/amd/display/dc/link/hwss/link_hwss_dpia.c  |    2 +
 .../gpu/drm/amd/display/dc/link/link_detection.c   |    3 +
 drivers/gpu/drm/amd/display/dc/link/link_dpms.c    |   13 +-
 drivers/gpu/drm/amd/display/dc/link/link_factory.c |    3 +
 .../drm/amd/display/dc/link/protocols/link_ddc.c   |    2 +
 .../display/dc/link/protocols/link_dp_capability.c |    2 +-
 .../dc/link/protocols/link_dp_irq_handler.c        |    2 +
 .../display/dc/link/protocols/link_dp_training.c   |    3 +-
 .../drm/amd/display/dc/link/protocols/link_dpcd.c  |    3 +-
 .../dc/link/protocols/link_edp_panel_control.c     |    3 +
 drivers/gpu/drm/amd/display/dc/os_types.h          |    1 +
 drivers/gpu/drm/amd/display/include/logger_types.h |  142 +-
 drivers/gpu/drm/amd/pm/amdgpu_pm.c                 |    2 +
 drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c         |   39 +-
 .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c    |   10 +-
 .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomfwctrl.c  |   11 +-
 drivers/gpu/drm/amd/pm/swsmu/smu11/arcturus_ppt.c  |    4 -
 .../drm/amd/pm/swsmu/smu11/sienna_cichlid_ppt.c    |    2 -
 drivers/gpu/drm/amd/pm/swsmu/smu13/aldebaran_ppt.c |    2 -
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c   |    9 +-
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c   |    2 -
 drivers/gpu/drm/aspeed/aspeed_gfx_drv.c            |    5 +-
 drivers/gpu/drm/display/drm_dp_helper.c            |    4 +-
 drivers/gpu/drm/drm_debugfs.c                      |   16 +-
 drivers/gpu/drm/drm_fb_helper.c                    |    6 +-
 drivers/gpu/drm/{drm_gpuva_mgr.c => drm_gpuvm.c}   |  404 +--
 drivers/gpu/drm/drm_syncobj.c                      |    6 +-
 drivers/gpu/drm/etnaviv/etnaviv_sched.c            |   13 +-
 drivers/gpu/drm/gud/gud_drv.c                      |    2 +
 drivers/gpu/drm/gud/gud_pipe.c                     |    1 +
 drivers/gpu/drm/i915/display/icl_dsi.c             |    4 +-
 drivers/gpu/drm/i915/display/intel_bios.c          |   36 +-
 drivers/gpu/drm/i915/display/intel_dp.c            |    8 +-
 drivers/gpu/drm/i915/display/intel_hdcp.c          |   14 +-
 drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c     |    2 +-
 .../gpu/drm/i915/gt/intel_execlists_submission.c   |   19 +-
 drivers/gpu/drm/i915/gt/intel_rps.c                |    3 +-
 drivers/gpu/drm/i915/gvt/interrupt.c               |    2 +-
 drivers/gpu/drm/lima/lima_sched.c                  |   13 +-
 drivers/gpu/drm/mediatek/mtk_drm_drv.c             |   17 +-
 drivers/gpu/drm/msm/adreno/a6xx_gpu.c              |    5 +-
 .../drm/msm/disp/dpu1/catalog/dpu_3_0_msm8998.h    |    4 -
 .../gpu/drm/msm/disp/dpu1/catalog/dpu_4_0_sdm845.h |    4 -
 .../gpu/drm/msm/disp/dpu1/catalog/dpu_5_0_sm8150.h |    8 -
 .../drm/msm/disp/dpu1/catalog/dpu_5_1_sc8180x.h    |   10 -
 .../gpu/drm/msm/disp/dpu1/catalog/dpu_5_4_sm6125.h |    3 -
 .../gpu/drm/msm/disp/dpu1/catalog/dpu_6_0_sm8250.h |    8 -
 .../gpu/drm/msm/disp/dpu1/catalog/dpu_6_2_sc7180.h |    3 -
 .../gpu/drm/msm/disp/dpu1/catalog/dpu_6_3_sm6115.h |    1 -
 .../gpu/drm/msm/disp/dpu1/catalog/dpu_6_4_sm6350.h |    3 -
 .../drm/msm/disp/dpu1/catalog/dpu_6_5_qcm2290.h    |    1 -
 .../gpu/drm/msm/disp/dpu1/catalog/dpu_6_9_sm6375.h |    1 -
 .../gpu/drm/msm/disp/dpu1/catalog/dpu_7_0_sm8350.h |    8 -
 .../gpu/drm/msm/disp/dpu1/catalog/dpu_7_2_sc7280.h |    6 -
 .../drm/msm/disp/dpu1/catalog/dpu_8_0_sc8280xp.h   |   13 -
 .../gpu/drm/msm/disp/dpu1/catalog/dpu_8_1_sm8450.h |   12 -
 .../gpu/drm/msm/disp/dpu1/catalog/dpu_9_0_sm8550.h |   12 -
 drivers/gpu/drm/msm/disp/dpu1/dpu_core_irq.h       |    6 +-
 drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c        |   10 +-
 drivers/gpu/drm/msm/disp/dpu1/dpu_encoder_phys.h   |    8 +-
 .../gpu/drm/msm/disp/dpu1/dpu_encoder_phys_cmd.c   |   32 +-
 .../gpu/drm/msm/disp/dpu1/dpu_encoder_phys_vid.c   |   33 +-
 drivers/gpu/drm/msm/disp/dpu1/dpu_hw_catalog.h     |   14 +-
 drivers/gpu/drm/msm/disp/dpu1/dpu_hw_interrupts.c  |   39 +-
 drivers/gpu/drm/msm/disp/dpu1/dpu_hw_interrupts.h  |    6 +-
 drivers/gpu/drm/msm/msm_gpu.c                      |   30 +-
 drivers/gpu/drm/msm/msm_ringbuffer.c               |   22 +-
 drivers/gpu/drm/msm/msm_ringbuffer.h               |    1 +
 drivers/gpu/drm/nouveau/dispnv04/crtc.c            |    4 +-
 drivers/gpu/drm/nouveau/nouveau_bo0039.c           |    2 +-
 drivers/gpu/drm/nouveau/nouveau_bo5039.c           |    2 +-
 drivers/gpu/drm/nouveau/nouveau_chan.c             |   36 +-
 drivers/gpu/drm/nouveau/nouveau_chan.h             |    2 -
 drivers/gpu/drm/nouveau/nouveau_dma.c              |    2 +-
 drivers/gpu/drm/nouveau/nouveau_exec.c             |    2 +-
 drivers/gpu/drm/nouveau/nouveau_fence.c            |   15 +-
 drivers/gpu/drm/nouveau/nouveau_gem.c              |    7 +-
 drivers/gpu/drm/nouveau/nouveau_sched.c            |   12 +-
 drivers/gpu/drm/nouveau/nouveau_uvmm.c             |   41 +-
 drivers/gpu/drm/nouveau/nouveau_uvmm.h             |    6 +-
 drivers/gpu/drm/nouveau/nv17_fence.c               |    6 +-
 drivers/gpu/drm/nouveau/nv50_fence.c               |    2 +-
 drivers/gpu/drm/nouveau/nv84_fence.c               |    8 +-
 drivers/gpu/drm/panfrost/panfrost_job.c            |   15 +-
 drivers/gpu/drm/radeon/radeon_bios.c               |    6 +-
 drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c     |    8 +
 drivers/gpu/drm/rockchip/rockchip_drm_vop2.c       |    4 +
 drivers/gpu/drm/scheduler/sched_main.c             |   34 +-
 drivers/gpu/drm/tiny/ofdrm.c                       |    8 +-
 drivers/gpu/drm/tiny/simpledrm.c                   |   59 +-
 drivers/gpu/drm/v3d/v3d_sched.c                    |  108 +-
 drivers/gpu/drm/vc4/vc4_bo.c                       |    3 +-
 drivers/gpu/drm/vc4/vc4_drv.c                      |    5 +-
 drivers/gpu/drm/vc4/vc4_hvs.c                      |    2 +-
 drivers/gpu/drm/vc4/vc4_v3d.c                      |   10 +-
 drivers/gpu/drm/virtio/virtgpu_drv.h               |   20 +
 drivers/gpu/drm/virtio/virtgpu_object.c            |    2 +-
 drivers/gpu/drm/virtio/virtgpu_vq.c                |    4 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_kms.c                |   26 +-
 drivers/hid/bpf/hid_bpf_dispatch.c                 |    5 +-
 drivers/hid/hid-alps.c                             |   25 +-
 drivers/hid/hid-core.c                             |   38 +-
 drivers/hid/hid-logitech-hidpp.c                   |   27 +-
 drivers/hid/hid-mcp2221.c                          |   17 +-
 drivers/hid/hid-multitouch.c                       |    2 +-
 drivers/hid/hid-nintendo.c                         |   38 +-
 drivers/hid/hid-sony.c                             |   37 +-
 drivers/hid/hid-steam.c                            |  269 +-
 drivers/hid/hid-universal-pidff.c                  |    4 +-
 drivers/hid/i2c-hid/i2c-hid-core.c                 |    7 +-
 drivers/hid/intel-ish-hid/ishtp/bus.c              |    2 +
 drivers/hid/intel-ish-hid/ishtp/client.c           |    4 +-
 drivers/hid/uhid.c                                 |    8 +-
 drivers/hid/usbhid/hid-core.c                      |   11 +-
 drivers/hv/vmbus_drv.c                             |   58 +-
 drivers/hwmon/lm90.c                               |   26 +-
 drivers/hwmon/pmbus/pmbus_core.c                   |   80 +-
 drivers/hwmon/pwm-fan.c                            |   13 +-
 drivers/hwmon/sht3x.c                              |    9 +-
 .../hwtracing/coresight/coresight-etm3x-sysfs.c    |   15 +-
 drivers/hwtracing/coresight/coresight-etm4x-core.c |   89 +-
 drivers/hwtracing/coresight/coresight-syscfg.c     |    2 +
 drivers/hwtracing/coresight/coresight-tmc-etr.c    |   16 +
 drivers/i2c/busses/i2c-at91-master.c               |    8 +-
 drivers/i2c/busses/i2c-mxs.c                       |    5 +-
 drivers/i2c/busses/i2c-xiic.c                      |   98 +-
 drivers/i3c/master.c                               |   59 +-
 drivers/i3c/master/mipi-i3c-hci/core.c             |    3 +
 drivers/i3c/master/mipi-i3c-hci/dma.c              |   27 +-
 drivers/i3c/master/mipi-i3c-hci/hci.h              |    1 +
 drivers/iio/accel/kionix-kx022a.c                  |    2 +-
 drivers/iio/accel/kxcjk-1013.c                     |    2 +-
 drivers/iio/accel/sca3000.c                        |    2 +-
 drivers/iio/adc/ad_sigma_delta.c                   |   26 +-
 drivers/iio/adc/aspeed_adc.c                       |   13 +-
 drivers/iio/adc/axp288_adc.c                       |    8 +
 drivers/iio/adc/max1363.c                          |    8 +
 drivers/iio/adc/stm32-adc.c                        |   47 +-
 drivers/iio/adc/sun4i-gpadc-iio.c                  |   10 +-
 drivers/iio/adc/xilinx-xadc-core.c                 |    9 +-
 drivers/iio/cdc/ad7150.c                           |    8 +-
 drivers/iio/frequency/admv1013.c                   |  128 +-
 drivers/iio/gyro/adis16136.c                       |    2 +-
 drivers/iio/health/max30102.c                      |   12 +-
 drivers/iio/imu/adis16400.c                        |    2 +-
 drivers/iio/imu/adis16480.c                        |    4 +-
 drivers/iio/industrialio-buffer.c                  |    7 +-
 drivers/iio/industrialio-trigger.c                 |    2 +
 drivers/iio/light/Kconfig                          |   14 -
 drivers/iio/light/Makefile                         |    1 -
 drivers/iio/light/gp2ap020a00f.c                   |    2 +
 drivers/iio/light/ltrf216a.c                       |   13 +-
 drivers/iio/light/rohm-bu27034.c                   | 1528 ----------
 drivers/iio/pressure/bmp280-core.c                 |    2 +-
 drivers/iio/proximity/isl29501.c                   |    2 +-
 drivers/iio/proximity/pulsedlight-lidar-lite-v2.c  |    4 +-
 drivers/iio/proximity/sx9324.c                     |    2 +-
 drivers/iio/proximity/vcnl3020.c                   |   24 +-
 drivers/infiniband/core/counters.c                 |    9 +-
 drivers/infiniband/hw/bnxt_re/ib_verbs.c           |   38 +-
 drivers/infiniband/hw/bnxt_re/ib_verbs.h           |    1 +
 drivers/infiniband/hw/cxgb4/mem.c                  |   46 +-
 drivers/infiniband/hw/efa/efa_com.c                |   28 +-
 drivers/infiniband/hw/erdma/erdma_cm.c             |    6 +-
 drivers/infiniband/hw/erdma/erdma_eq.c             |    3 +-
 drivers/infiniband/hw/erdma/erdma_verbs.c          |   23 +-
 drivers/infiniband/hw/erdma/erdma_verbs.h          |   15 +
 drivers/infiniband/hw/hns/hns_roce_cq.c            |    6 +-
 drivers/infiniband/hw/hns/hns_roce_hw_v2.c         |   43 +-
 drivers/infiniband/hw/hns/hns_roce_main.c          |    5 +-
 drivers/infiniband/hw/hns/hns_roce_mr.c            |    6 +-
 drivers/infiniband/hw/hns/hns_roce_srq.c           |    2 +-
 drivers/infiniband/hw/irdma/hw.c                   |    7 +-
 drivers/infiniband/hw/irdma/main.h                 |    3 +-
 drivers/infiniband/hw/irdma/utils.c                |   12 +-
 drivers/infiniband/hw/irdma/verbs.c                |   21 +-
 drivers/infiniband/hw/mlx5/cq.c                    |   11 +-
 drivers/infiniband/hw/mlx5/devx.c                  |    2 +-
 drivers/infiniband/hw/mlx5/main.c                  |   75 +-
 drivers/infiniband/hw/mlx5/mlx5_ib.h               |    2 +
 drivers/infiniband/hw/mlx5/mr.c                    |    2 +-
 drivers/infiniband/hw/mlx5/odp.c                   |   15 +-
 drivers/infiniband/hw/mlx5/umr.c                   |   87 +-
 drivers/infiniband/sw/rdmavt/qp.c                  |    8 +-
 drivers/infiniband/sw/rdmavt/vt.c                  |    4 +-
 drivers/infiniband/sw/rxe/rxe_comp.c               |   20 +-
 drivers/infiniband/sw/rxe/rxe_hw_counters.c        |    2 +-
 drivers/infiniband/sw/rxe/rxe_hw_counters.h        |    2 +-
 drivers/infiniband/sw/rxe/rxe_loc.h                |    3 +-
 drivers/infiniband/sw/rxe/rxe_mr.c                 |  285 +-
 drivers/infiniband/sw/rxe/rxe_net.c                |    4 +-
 drivers/infiniband/sw/rxe/rxe_qp.c                 |   58 +-
 drivers/infiniband/sw/rxe/rxe_req.c                |   25 +-
 drivers/infiniband/sw/rxe/rxe_resp.c               |    6 +-
 drivers/infiniband/sw/rxe/rxe_verbs.c              |   11 +-
 drivers/infiniband/sw/rxe/rxe_verbs.h              |   16 +-
 drivers/infiniband/sw/siw/siw.h                    |    7 +-
 drivers/infiniband/sw/siw/siw_cm.c                 |   75 +-
 drivers/infiniband/sw/siw/siw_main.c               |   15 +-
 drivers/infiniband/sw/siw/siw_verbs.c              |   35 +-
 drivers/input/joystick/xpad.c                      |    3 +
 drivers/input/keyboard/atkbd.c                     |    8 +
 drivers/input/keyboard/lkkbd.c                     |    2 +
 drivers/input/mouse/alps.c                         |    2 +
 drivers/input/mouse/synaptics.c                    |    7 +-
 drivers/input/serio/i8042-acpipnpio.h              |    9 +
 drivers/input/touchscreen/s6sy761.c                |   14 +-
 drivers/iommu/amd/init.c                           |    5 +
 drivers/iommu/amd/iommu.c                          |    7 +-
 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c        |   65 +-
 drivers/iommu/intel/iommu.c                        |   37 +-
 drivers/iommu/intel/pasid.c                        |   20 +-
 drivers/iommu/iommu-sva.c                          |    3 +-
 drivers/iommu/iommu.c                              |    9 +-
 drivers/iommu/msm_iommu.c                          |    9 +-
 drivers/iommu/s390-iommu.c                         |   23 +-
 drivers/mailbox/zynqmp-ipi-mailbox.c               |  135 +-
 drivers/md/dm-cache-target.c                       |    4 +-
 drivers/md/dm-clone-target.c                       |    4 +-
 drivers/md/dm-crypt.c                              |    7 +-
 drivers/md/dm-ebs-target.c                         |    2 +-
 drivers/md/dm-era-target.c                         |    4 +-
 drivers/md/dm-integrity.c                          |    2 +-
 drivers/md/dm-ioctl.c                              |   14 +-
 drivers/md/dm-raid.c                               |    4 +-
 drivers/md/dm-snap.c                               |   14 +
 drivers/md/dm-stripe.c                             |   11 +-
 drivers/md/dm-thin.c                               |    6 +-
 drivers/md/dm-verity-fec.c                         |  101 +-
 drivers/md/dm-verity-target.c                      |   10 +-
 drivers/md/dm-zoned-target.c                       |    4 +-
 drivers/md/md.c                                    |  254 +-
 drivers/md/md.h                                    |   43 +-
 drivers/md/persistent-data/dm-array.c              |   37 +-
 drivers/md/raid1.c                                 |   27 +-
 drivers/md/raid10.c                                |  100 +-
 drivers/md/raid5.c                                 |   10 +-
 .../media/platform/mediatek/mdp3/mtk-mdp3-core.c   |    5 +
 .../media/platform/nxp/imx8-isi/imx8-isi-video.c   |  156 +-
 drivers/media/platform/verisilicon/hantro.h        |    2 +
 drivers/media/platform/verisilicon/hantro_drv.c    |   89 +-
 drivers/media/platform/verisilicon/imx8m_vpu_hw.c  |    8 +
 drivers/media/test-drivers/vivid/vivid-core.c      |    4 +-
 drivers/media/v4l2-core/v4l2-mem2mem.c             |   23 +
 drivers/memstick/core/memstick.c                   |    8 +-
 drivers/memstick/host/rtsx_usb_ms.c                |   31 +-
 drivers/mfd/sm501.c                                |    8 +-
 drivers/misc/ocxl/file.c                           |    2 +-
 drivers/misc/sgi-gru/grufault.c                    |  101 +-
 drivers/misc/sgi-gru/gruprocfs.c                   |    1 -
 drivers/misc/sgi-gru/grutables.h                   |    1 -
 drivers/mmc/host/cavium-octeon.c                   |    5 +-
 drivers/mmc/host/cavium-thunderx.c                 |    5 +-
 drivers/mmc/host/mtk-sd.c                          |    1 +
 drivers/mmc/host/sdhci-sprd.c                      |    4 +
 drivers/mmc/host/via-sdmmc.c                       |    4 +
 drivers/mmc/host/vub300.c                          |   11 +-
 drivers/most/core.c                                |   15 +-
 drivers/mtd/devices/block2mtd.c                    |   53 +-
 drivers/mtd/maps/vmu-flash.c                       |   10 +-
 drivers/mtd/mtdcore.c                              |    2 +-
 drivers/mtd/nand/raw/cadence-nand-controller.c     |    6 +-
 drivers/mtd/nand/raw/vf610_nfc.c                   |   85 +-
 drivers/mtd/nand/spi/core.c                        |   37 +-
 drivers/net/amt.c                                  |   51 +-
 drivers/net/can/dev/skb.c                          |    2 +
 drivers/net/can/usb/f81604.c                       |    2 +-
 drivers/net/dsa/b53/b53_common.c                   |    8 +-
 drivers/net/dsa/microchip/ksz_common.h             |    2 +-
 drivers/net/ethernet/amazon/ena/ena_com.c          |   25 +-
 drivers/net/ethernet/amazon/ena/ena_com.h          |   14 -
 drivers/net/ethernet/amazon/ena/ena_eth_com.c      |   37 +-
 drivers/net/ethernet/amazon/ena/ena_netdev.c       |    3 +
 drivers/net/ethernet/amazon/ena/ena_regs_defs.h    |    1 +
 drivers/net/ethernet/amd/pds_core/core.c           |  102 +-
 drivers/net/ethernet/amd/pds_core/core.h           |    1 +
 drivers/net/ethernet/amd/pds_core/debugfs.c        |    3 +-
 drivers/net/ethernet/amd/pds_core/dev.c            |   16 +
 drivers/net/ethernet/amd/pds_core/main.c           |    5 +-
 drivers/net/ethernet/broadcom/asp2/bcmasp.c        |   21 -
 drivers/net/ethernet/broadcom/asp2/bcmasp.h        |    2 -
 drivers/net/ethernet/broadcom/bcmsysport.c         |    8 +-
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c    |   11 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |  138 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.h          |   26 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c      |   31 +-
 drivers/net/ethernet/broadcom/genet/bcmgenet.c     |    5 +-
 drivers/net/ethernet/brocade/bna/bnad.c            |   16 +-
 drivers/net/ethernet/cavium/liquidio/lio_main.c    |   27 -
 .../net/ethernet/cavium/liquidio/octeon_device.h   |    3 -
 .../net/ethernet/cavium/liquidio/octeon_mailbox.c  |   33 +-
 .../chelsio/inline_crypto/ch_ktls/chcr_ktls.c      |    4 +-
 drivers/net/ethernet/google/gve/gve_ethtool.c      |   38 +-
 drivers/net/ethernet/google/gve/gve_main.c         |   11 +-
 drivers/net/ethernet/hisilicon/hns3/hns3_enet.c    |    4 +-
 .../ethernet/hisilicon/hns3/hns3pf/hclge_regs.c    |    9 +-
 .../ethernet/hisilicon/hns3/hns3vf/hclgevf_regs.c  |    9 +-
 drivers/net/ethernet/ibm/ibmveth.c                 |   22 +-
 drivers/net/ethernet/intel/i40e/i40e_main.c        |    2 +-
 drivers/net/ethernet/intel/iavf/iavf_ethtool.c     |   31 +-
 drivers/net/ethernet/intel/iavf/iavf_main.c        |    2 +-
 drivers/net/ethernet/intel/ice/ice_base.c          |    9 +-
 drivers/net/ethernet/intel/ice/ice_eswitch.c       |    2 +-
 drivers/net/ethernet/intel/ice/ice_ptp.c           |  109 +-
 drivers/net/ethernet/intel/ice/ice_ptp.h           |    8 +
 drivers/net/ethernet/intel/ice/ice_trace.h         |   64 +-
 drivers/net/ethernet/intel/ice/ice_txrx.c          |   86 +-
 drivers/net/ethernet/intel/ice/ice_txrx.h          |    1 -
 drivers/net/ethernet/intel/igb/igb_main.c          |    2 +-
 drivers/net/ethernet/intel/igbvf/netdev.c          |    2 +-
 drivers/net/ethernet/intel/igc/igc_main.c          |    2 +-
 drivers/net/ethernet/intel/ixgbe/ixgbe_main.c      |    5 +-
 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c  |    2 +-
 drivers/net/ethernet/marvell/octeontx2/af/cgx.c    |   12 +
 drivers/net/ethernet/marvell/octeontx2/af/cgx.h    |    1 +
 drivers/net/ethernet/marvell/octeontx2/af/mcs.c    |    4 +-
 drivers/net/ethernet/marvell/octeontx2/af/rvu.h    |    2 +
 .../net/ethernet/marvell/octeontx2/af/rvu_cgx.c    |   79 +
 .../net/ethernet/marvell/octeontx2/af/rvu_nix.c    |   22 +-
 .../net/ethernet/marvell/octeontx2/af/rvu_npc.c    |   67 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c   |   20 +-
 drivers/net/ethernet/mediatek/mtk_eth_soc.c        |   40 +-
 drivers/net/ethernet/mediatek/mtk_wed_wo.c         |   17 +-
 drivers/net/ethernet/mellanox/mlx4/srq.c           |   14 +-
 drivers/net/ethernet/mellanox/mlx5/core/cq.c       |   23 +-
 drivers/net/ethernet/mellanox/mlx5/core/en.h       |   16 +-
 .../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c |   10 +-
 drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c   |   10 +-
 .../net/ethernet/mellanox/mlx5/core/en/xsk/rx.c    |    2 +
 .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c   |    3 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |   56 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_rep.c   |   55 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_rep.h   |    1 -
 drivers/net/ethernet/mellanox/mlx5/core/en_rx.c    |   37 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_stats.c |    9 +-
 .../ethernet/mellanox/mlx5/core/esw/devlink_port.c |   34 +
 drivers/net/ethernet/mellanox/mlx5/core/eswitch.h  |    1 +
 .../net/ethernet/mellanox/mlx5/core/fpga/conn.c    |   17 +-
 .../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c  |    3 +-
 drivers/net/ethernet/mellanox/mlx5/core/port.c     |    4 +-
 .../ethernet/mellanox/mlx5/core/steering/dr_send.c |   30 +-
 drivers/net/ethernet/mellanox/mlxsw/spectrum.h     |    2 +
 drivers/net/ethernet/mellanox/mlxsw/spectrum_acl.c |   10 +-
 .../net/ethernet/mellanox/mlxsw/spectrum_flower.c  |    9 +-
 .../net/ethernet/microchip/lan966x/lan966x_fdma.c  |    6 +-
 .../net/ethernet/microchip/sparx5/sparx5_main.c    |    1 +
 .../net/ethernet/microchip/sparx5/sparx5_main.h    |    1 +
 .../net/ethernet/microchip/sparx5/sparx5_netdev.c  |    1 +
 drivers/net/ethernet/microchip/vcap/vcap_api.c     |    2 +-
 drivers/net/ethernet/microsoft/mana/mana_en.c      |   17 +-
 drivers/net/ethernet/mscc/ocelot_stats.c           |    2 +-
 drivers/net/ethernet/qlogic/qede/qede_fp.c         |    2 +-
 drivers/net/ethernet/qlogic/qlcnic/qlcnic_init.c   |  467 +--
 drivers/net/ethernet/qlogic/qlcnic/qlcnic_io.c     |    3 +-
 drivers/net/ethernet/realtek/r8169_main.c          |    4 -
 drivers/net/ethernet/renesas/ravb_main.c           |    8 +-
 drivers/net/ethernet/renesas/ravb_ptp.c            |   37 +-
 drivers/net/ethernet/sfc/ef10.c                    |    4 +-
 drivers/net/ethernet/sfc/ef100_netdev.c            |    7 +-
 drivers/net/ethernet/sfc/ef100_nic.c               |   47 +-
 drivers/net/ethernet/sfc/efx.c                     |   48 +-
 drivers/net/ethernet/sfc/mcdi_port.c               |   59 +-
 drivers/net/ethernet/sfc/mcdi_port_common.c        |   11 -
 drivers/net/ethernet/sfc/net_driver.h              |    8 +-
 drivers/net/ethernet/sfc/ptp.c                     |   30 +-
 drivers/net/ethernet/sfc/ptp.h                     |    7 +-
 drivers/net/ethernet/sfc/siena/tx_common.c         |    5 +-
 drivers/net/ethernet/sfc/tx_common.c               |    5 +-
 drivers/net/ethernet/sfc/tx_tso.c                  |    4 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |   51 +-
 drivers/net/ethernet/sun/sunvnet_common.c          |    4 +-
 drivers/net/ethernet/ti/am65-cpsw-nuss.c           |    4 +-
 drivers/net/ethernet/ti/icssg/icssg_prueth.c       |    2 +-
 drivers/net/ethernet/wangxun/libwx/wx_lib.c        |    2 +-
 drivers/net/ieee802154/cc2520.c                    |   10 +-
 drivers/net/netconsole.c                           |    3 +-
 drivers/net/phy/sfp.c                              |   16 +
 drivers/net/tap.c                                  |   55 +-
 drivers/net/team/team_core.c                       |  102 +-
 drivers/net/team/team_mode_loadbalance.c           |    4 +-
 drivers/net/usb/ax88179_178a.c                     |    6 +-
 drivers/net/usb/qmi_wwan.c                         |    1 +
 drivers/net/veth.c                                 |    1 +
 drivers/net/vxlan/vxlan_core.c                     |   40 +-
 drivers/net/vxlan/vxlan_private.h                  |    4 +-
 drivers/net/wireguard/noise.c                      |    7 +-
 drivers/net/wireguard/queueing.h                   |    2 +
 drivers/net/wireguard/receive.c                    |    2 +-
 drivers/net/wireless/ath/ath11k/core.c             |   18 +-
 drivers/net/wireless/ath/ath11k/debugfs.c          |    6 +-
 drivers/net/wireless/ath/ath11k/dp.c               |   12 +-
 drivers/net/wireless/ath/ath11k/dp_rx.c            |   22 +-
 drivers/net/wireless/ath/ath11k/dp_tx.c            |    6 +-
 drivers/net/wireless/ath/ath11k/hw.h               |    4 +-
 drivers/net/wireless/ath/ath11k/mac.c              |   44 +-
 drivers/net/wireless/ath/ath11k/mhi.c              |    8 +-
 drivers/net/wireless/ath/ath11k/pci.c              |    7 +
 drivers/net/wireless/ath/ath11k/reg.c              |   92 +-
 drivers/net/wireless/ath/ath11k/reg.h              |    6 +-
 drivers/net/wireless/ath/ath11k/wmi.c              |   15 +-
 drivers/net/wireless/ath/ath12k/dp.c               |    6 +-
 drivers/net/wireless/ath/ath12k/dp.h               |   13 +-
 drivers/net/wireless/ath/ath12k/dp_mon.c           |  237 +-
 drivers/net/wireless/ath/ath12k/dp_mon.h           |    4 +-
 drivers/net/wireless/ath/ath12k/dp_rx.c            |  216 +-
 drivers/net/wireless/ath/ath12k/dp_rx.h            |    8 +-
 drivers/net/wireless/ath/ath12k/dp_tx.c            |   10 +-
 drivers/net/wireless/ath/ath12k/hal_rx.c           |   10 +-
 drivers/net/wireless/ath/ath12k/hal_rx.h           |   12 +-
 drivers/net/wireless/ath/ath12k/hw.c               |    6 +
 drivers/net/wireless/ath/ath12k/hw.h               |    2 +
 drivers/net/wireless/ath/ath12k/mhi.c              |    4 -
 drivers/net/wireless/ath/ath12k/pci.c              |    6 +-
 drivers/net/wireless/ath/ath12k/pci.h              |    4 +-
 drivers/net/wireless/ath/ath12k/qmi.c              |   12 +-
 drivers/net/wireless/ath/ath12k/qmi.h              |    3 +
 drivers/net/wireless/ath/ath12k/wmi.c              |   25 +-
 drivers/net/wireless/ath/wcn36xx/dxe.c             |    2 +-
 .../wireless/broadcom/brcm80211/brcmfmac/core.c    |   27 +-
 .../net/wireless/broadcom/brcm80211/brcmfmac/p2p.c |    4 +
 drivers/net/wireless/intel/iwlegacy/3945-mac.c     |    1 +
 drivers/net/wireless/intel/iwlwifi/dvm/main.c      |   47 +-
 .../net/wireless/intel/iwlwifi/fw/api/commands.h   |    4 +-
 drivers/net/wireless/intel/iwlwifi/fw/api/tx.h     |   12 +-
 drivers/net/wireless/intel/iwlwifi/fw/dbg.h        |    4 +-
 drivers/net/wireless/intel/iwlwifi/fw/smem.c       |    8 +-
 drivers/net/wireless/intel/iwlwifi/iwl-drv.c       |    2 +-
 drivers/net/wireless/intel/iwlwifi/iwl-trans.h     |    3 +
 drivers/net/wireless/intel/iwlwifi/mvm/binding.c   |    5 +-
 drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c  |    2 +-
 drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c  |   13 +-
 drivers/net/wireless/intel/iwlwifi/mvm/mvm.h       |    7 +-
 drivers/net/wireless/intel/iwlwifi/mvm/ops.c       |   26 +-
 .../net/wireless/intel/iwlwifi/mvm/time-event.c    |    3 +-
 drivers/net/wireless/intel/iwlwifi/mvm/tx.c        |   46 +-
 drivers/net/wireless/intel/iwlwifi/pcie/rx.c       |    9 +-
 drivers/net/wireless/marvell/libertas/tx.c         |    7 -
 drivers/net/wireless/mediatek/mt76/mac80211.c      |   37 +
 drivers/net/wireless/mediatek/mt76/mt76.h          |    1 +
 drivers/net/wireless/mediatek/mt76/mt7603/init.c   |    1 +
 .../net/wireless/mediatek/mt76/mt76_connac_mcu.c   |   16 +-
 .../net/wireless/mediatek/mt76/mt7915/debugfs.c    |    5 +
 drivers/net/wireless/mediatek/mt76/mt7915/eeprom.c |   33 +-
 drivers/net/wireless/mediatek/mt76/mt7915/eeprom.h |    1 +
 drivers/net/wireless/mediatek/mt76/mt7915/init.c   |    9 +-
 drivers/net/wireless/mediatek/mt76/mt7915/mac.c    |   12 +-
 drivers/net/wireless/mediatek/mt76/mt7915/main.c   |   17 +-
 drivers/net/wireless/mediatek/mt76/mt7915/mcu.c    |   19 +-
 drivers/net/wireless/mediatek/mt76/mt7915/mt7915.h |    3 +-
 drivers/net/wireless/mediatek/mt76/mt7921/main.c   |    3 +
 drivers/net/wireless/mediatek/mt76/mt7921/mt7921.h |    2 +
 .../net/wireless/mediatek/mt76/mt792x_acpi_sar.c   |  134 +-
 .../net/wireless/mediatek/mt76/mt792x_acpi_sar.h   |    2 +
 drivers/net/wireless/mediatek/mt76/mt7996/init.c   |    3 +
 drivers/net/wireless/mediatek/mt76/mt7996/mac.c    |   11 +-
 drivers/net/wireless/mediatek/mt76/mt7996/mcu.c    |    8 +-
 drivers/net/wireless/mediatek/mt76/tx.c            |    1 -
 .../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c  |   19 +-
 drivers/net/wireless/realtek/rtw88/debug.c         |  303 +-
 drivers/net/wireless/realtek/rtw88/debug.h         |    2 +
 drivers/net/wireless/realtek/rtw88/main.c          |   20 +-
 drivers/net/wireless/realtek/rtw88/main.h          |    3 +-
 drivers/net/wireless/realtek/rtw89/mac80211.c      |    9 +-
 drivers/net/wireless/realtek/rtw89/pci.c           |    7 +-
 drivers/net/wireless/silabs/wfx/hif_tx.c           |    4 +-
 drivers/net/wireless/st/cw1200/bh.c                |    8 +-
 drivers/net/wireless/st/cw1200/txrx.c              |   14 +
 drivers/net/wireless/ti/wl12xx/main.c              |    6 +-
 drivers/net/wireless/ti/wl18xx/main.c              |    2 +-
 drivers/net/wireless/ti/wlcore/main.c              |   10 +-
 drivers/net/wireless/ti/wlcore/wlcore.h            |    2 +-
 drivers/net/xen-netfront.c                         |   16 +-
 drivers/ntb/ntb_transport.c                        |   25 +-
 drivers/nvdimm/nd_virtio.c                         |   32 +-
 drivers/nvdimm/pmem.c                              |   12 +-
 drivers/nvdimm/virtio_pmem.h                       |    2 +
 drivers/nvme/host/core.c                           |   61 +-
 drivers/nvme/host/fabrics.c                        |    2 +
 drivers/nvme/host/multipath.c                      |    5 +-
 drivers/nvme/host/pci.c                            |    2 +
 drivers/nvme/host/tcp.c                            |   54 +-
 drivers/nvme/target/admin-cmd.c                    |   31 +-
 drivers/nvme/target/configfs.c                     |    9 +-
 drivers/nvme/target/core.c                         |   94 +-
 drivers/nvme/target/discovery.c                    |   37 +-
 drivers/nvme/target/fabrics-cmd-auth.c             |   40 +-
 drivers/nvme/target/fabrics-cmd.c                  |   45 +-
 drivers/nvme/target/nvmet.h                        |   15 +
 drivers/nvme/target/rdma.c                         |    1 +
 drivers/nvme/target/tcp.c                          |   46 +-
 drivers/nvmem/Kconfig                              |    1 +
 drivers/nvmem/Makefile                             |    2 +
 drivers/nvmem/core.c                               |  176 +-
 drivers/nvmem/internals.h                          |   21 +
 drivers/nvmem/layouts.c                            |  201 ++
 drivers/nvmem/layouts/Kconfig                      |    8 +
 drivers/nvmem/layouts/onie-tlv.c                   |   24 +-
 drivers/nvmem/layouts/sl28vpd.c                    |   24 +-
 drivers/of/device.c                                |   41 +
 drivers/of/irq.c                                   |    2 +
 drivers/of/overlay.c                               |   17 +-
 drivers/of/platform.c                              |   40 -
 drivers/of/unittest.c                              |    7 +-
 drivers/opp/core.c                                 |    5 +-
 drivers/pci/controller/dwc/pci-imx6.c              |   57 +-
 drivers/pci/controller/dwc/pcie-designware-ep.c    |   24 +
 drivers/pci/endpoint/functions/pci-epf-ntb.c       |    5 +
 drivers/pci/endpoint/functions/pci-epf-test.c      |   16 +-
 drivers/pci/endpoint/functions/pci-epf-vntb.c      |    5 +
 drivers/pci/hotplug/pnv_php.c                      |    2 +-
 drivers/pci/hotplug/rpaphp_slot.c                  |    2 +-
 drivers/pci/pci-driver.c                           |  194 +-
 drivers/pci/pci-sysfs.c                            |  153 +-
 drivers/pci/pci.c                                  |   20 +-
 drivers/pci/pci.h                                  |   41 +-
 drivers/pci/probe.c                                |    1 -
 drivers/pci/rebar.c                                |   19 +-
 drivers/pci/search.c                               |    8 +-
 drivers/pci/setup-bus.c                            |   56 +-
 drivers/pci/slot.c                                 |   47 +-
 drivers/perf/riscv_pmu_legacy.c                    |    5 +-
 drivers/perf/riscv_pmu_sbi.c                       |   67 +-
 drivers/pinctrl/mediatek/pinctrl-moore.c           |    6 +-
 drivers/pinctrl/mediatek/pinctrl-mtk-common.c      |   14 +-
 drivers/pinctrl/mediatek/pinctrl-paris.c           |    7 +-
 drivers/pinctrl/sunxi/pinctrl-sunxi.c              |   88 +-
 drivers/pinctrl/sunxi/pinctrl-sunxi.h              |    7 +
 drivers/platform/x86/amd/pmc/pmc.c                 |   40 +-
 drivers/platform/x86/asus-wmi.c                    |   52 +-
 drivers/platform/x86/dell/dell-wmi-base.c          |    2 +-
 drivers/platform/x86/intel/int1092/intel_sar.c     |   39 +-
 .../x86/intel/speed_select_if/isst_tpmi_core.c     |   17 +-
 drivers/platform/x86/lg-laptop.c                   |   28 +-
 drivers/pmdomain/imx/imx8m-blk-ctrl.c              |   15 +
 drivers/pmdomain/rockchip/pm-domains.c             |   20 +-
 drivers/power/supply/charger-manager.c             |   60 +-
 drivers/power/supply/lp8788-charger.c              |   29 +-
 drivers/power/supply/max17040_battery.c            |   27 +-
 drivers/power/supply/qcom_battmgr.c                |    8 +-
 drivers/ptp/ptp_chardev.c                          |   12 +-
 drivers/ptp/ptp_clock.c                            |   26 +-
 drivers/ptp/ptp_ocp.c                              |    3 +-
 drivers/ptp/ptp_private.h                          |    5 +-
 drivers/ptp/ptp_sysfs.c                            |    8 +-
 drivers/pwm/pwm-samsung.c                          |   22 +-
 drivers/regulator/ltc3676.c                        |   15 +-
 drivers/regulator/tps6594-regulator.c              |    6 +-
 drivers/remoteproc/qcom_wcnss.c                    |   23 +-
 drivers/rtc/dev.c                                  |    2 +-
 drivers/rtc/rtc-ac100.c                            |    3 +-
 drivers/rtc/rtc-mpfs.c                             |    6 +-
 drivers/rtc/rtc-rzn1.c                             |   16 +-
 drivers/rtc/rtc-spear.c                            |   11 +-
 drivers/s390/cio/vfio_ccw_chp.c                    |    2 +-
 drivers/s390/cio/vfio_ccw_drv.c                    |    4 +-
 drivers/s390/cio/vfio_ccw_ops.c                    |    6 +-
 drivers/s390/crypto/pkey_api.c                     |  128 +-
 drivers/s390/crypto/vfio_ap_ops.c                  |   28 +-
 drivers/s390/crypto/zcrypt_api.c                   |    3 +
 drivers/s390/crypto/zcrypt_ccamisc.c               |   64 +-
 drivers/s390/crypto/zcrypt_ccamisc.h               |    6 +-
 drivers/s390/net/ism_drv.c                         |   20 +-
 drivers/scsi/ch.c                                  |   30 +-
 drivers/scsi/hisi_sas/hisi_sas_v3_hw.c             |   12 +-
 drivers/scsi/hosts.c                               |    2 +
 drivers/scsi/imm.c                                 |    1 +
 drivers/scsi/lpfc/lpfc.h                           |   77 +-
 drivers/scsi/lpfc/lpfc_attr.c                      |  105 +-
 drivers/scsi/lpfc/lpfc_bsg.c                       |    8 +-
 drivers/scsi/lpfc/lpfc_ct.c                        |  147 +-
 drivers/scsi/lpfc/lpfc_debugfs.c                   |   12 +-
 drivers/scsi/lpfc/lpfc_els.c                       |  391 +--
 drivers/scsi/lpfc/lpfc_hbadisc.c                   |  314 +-
 drivers/scsi/lpfc/lpfc_init.c                      |   66 +-
 drivers/scsi/lpfc/lpfc_mbox.c                      |    8 +-
 drivers/scsi/lpfc/lpfc_nportdisc.c                 |   68 +-
 drivers/scsi/lpfc/lpfc_sli.c                       |   34 +-
 drivers/scsi/lpfc/lpfc_sli.h                       |    1 +
 drivers/scsi/lpfc/lpfc_vport.c                     |   46 +-
 drivers/scsi/mpi3mr/mpi3mr.h                       |   21 +-
 drivers/scsi/mpi3mr/mpi3mr_app.c                   |    7 +-
 drivers/scsi/mpi3mr/mpi3mr_fw.c                    |  169 +-
 drivers/scsi/mpi3mr/mpi3mr_os.c                    |   63 +-
 drivers/scsi/qedi/qedi_main.c                      |    3 +-
 drivers/scsi/qla2xxx/qla_bsg.c                     |   47 +-
 drivers/scsi/qla2xxx/qla_def.h                     |    2 +
 drivers/scsi/qla2xxx/qla_init.c                    |    1 +
 drivers/scsi/qla2xxx/qla_iocb.c                    |   25 +-
 drivers/scsi/qla2xxx/qla_isr.c                     |   33 +-
 drivers/scsi/qla2xxx/qla_mbx.c                     |    6 +-
 drivers/scsi/qla2xxx/qla_mid.c                     |   41 +-
 drivers/scsi/qla2xxx/qla_nvme.c                    |   10 +
 drivers/scsi/qla2xxx/qla_os.c                      |   35 +-
 drivers/scsi/qla2xxx/qla_target.c                  |    5 +-
 drivers/scsi/qla2xxx/qla_target.h                  |    1 +
 drivers/scsi/scsi_error.c                          |   28 +-
 drivers/scsi/scsi_priv.h                           |    1 +
 drivers/scsi/sd.c                                  |   37 +-
 drivers/soc/aspeed/aspeed-lpc-snoop.c              |   31 +-
 drivers/soc/xilinx/zynqmp_power.c                  |   10 +-
 drivers/soundwire/generic_bandwidth_allocation.c   |   36 +-
 drivers/spi/spi-dw-dma.c                           |    2 +-
 drivers/spi/spi-microchip-core-qspi.c              |   79 +-
 drivers/spi/spi-mpc52xx.c                          |   60 +-
 drivers/spi/spi-oc-tiny.c                          |   24 +-
 drivers/spi/spi-tegra210-quad.c                    |   20 +
 drivers/spi/spi.c                                  |   19 +-
 drivers/staging/greybus/raw.c                      |   90 +-
 drivers/staging/greybus/uart.c                     |    3 +-
 drivers/staging/media/atomisp/i2c/atomisp-gc2235.c |   29 +-
 drivers/staging/media/av7110/av7110.h              |    4 +-
 drivers/staging/media/av7110/av7110_ca.c           |   26 +-
 drivers/staging/media/rkvdec/rkvdec.c              |    4 +-
 drivers/staging/rtl8723bs/core/rtw_mlme.c          |  247 +-
 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c      |   22 +-
 drivers/staging/sm750fb/sm750.c                    |    2 +-
 drivers/staging/sm750fb/sm750.h                    |    2 +-
 drivers/staging/sm750fb/sm750_accel.c              |    6 +-
 drivers/staging/sm750fb/sm750_accel.h              |    4 +-
 drivers/tee/optee/ffa_abi.c                        |   16 +-
 drivers/tee/optee/smc_abi.c                        |   17 +-
 drivers/thermal/thermal_hwmon.c                    |   89 +-
 drivers/thunderbolt/ctl.c                          |   63 +-
 drivers/thunderbolt/quirks.c                       |    3 +
 drivers/thunderbolt/xdomain.c                      |    4 +
 drivers/tty/amiserial.c                            |    9 +-
 drivers/tty/n_gsm.c                                |   47 +-
 drivers/tty/serial/8250/8250_bcm7271.c             |    2 +-
 drivers/tty/serial/8250/8250_core.c                |  253 +-
 drivers/tty/serial/8250/8250_of.c                  |   43 +
 drivers/tty/serial/imx.c                           |   26 +-
 drivers/tty/serial/ip22zilog.c                     |  388 +--
 drivers/tty/serial/kgdboc.c                        |    9 +
 drivers/tty/serial/ma35d1_serial.c                 |   11 +-
 drivers/tty/serial/max3100.c                       |   13 +-
 drivers/tty/serial/qcom_geni_serial.c              |    5 +-
 drivers/tty/serial/sc16is7xx.c                     |   37 +-
 drivers/tty/serial/serial-tegra.c                  |   18 +-
 drivers/tty/serial/serial_core.c                   |   48 +-
 drivers/tty/serial/vt8500_serial.c                 |    1 +
 drivers/tty/tty_io.c                               |   56 +-
 drivers/tty/tty_port.c                             |   75 +-
 drivers/tty/vcc.c                                  |    5 +-
 drivers/tty/vt/vc_screen.c                         |   25 +-
 drivers/tty/vt/vt.c                                |    5 +-
 drivers/ufs/core/ufs-mcq.c                         |   39 +-
 drivers/ufs/core/ufshcd-priv.h                     |   14 +-
 drivers/ufs/core/ufshcd.c                          |   73 +-
 drivers/ufs/host/ufs-exynos.c                      |   17 +-
 drivers/ufs/host/ufs-exynos.h                      |    3 +-
 drivers/ufs/host/ufs-qcom.c                        |   69 +-
 drivers/usb/cdns3/cdns3-gadget.c                   |    4 +
 drivers/usb/cdns3/cdns3-pci-wrap.c                 |    5 +
 drivers/usb/chipidea/ci_hdrc_tegra.c               |    4 +-
 drivers/usb/chipidea/udc.c                         |    4 +
 drivers/usb/class/cdc-acm.c                        |   41 +-
 drivers/usb/class/cdc-acm.h                        |    1 -
 drivers/usb/core/hub.c                             |    7 +-
 drivers/usb/core/message.c                         |    8 +-
 drivers/usb/dwc2/hcd.c                             |    3 +-
 drivers/usb/dwc3/core.h                            |   22 +-
 drivers/usb/dwc3/dwc3-am62.c                       |    1 +
 drivers/usb/dwc3/ep0.c                             |   11 +-
 drivers/usb/dwc3/gadget.c                          |  236 +-
 drivers/usb/gadget/function/f_ecm.c                |   35 +-
 drivers/usb/gadget/function/f_eem.c                |   59 +-
 drivers/usb/gadget/function/f_fs.c                 |  176 +-
 drivers/usb/gadget/function/f_hid.c                |   17 +-
 drivers/usb/gadget/function/f_mass_storage.c       |    3 +
 drivers/usb/gadget/function/f_midi.c               |    6 +-
 drivers/usb/gadget/function/f_midi2.c              |    4 +-
 drivers/usb/gadget/function/f_rndis.c              |   42 +-
 drivers/usb/gadget/function/f_subset.c             |   57 +-
 drivers/usb/gadget/function/f_uac1.c               |   13 +-
 drivers/usb/gadget/function/f_uac1_legacy.c        |    6 +
 drivers/usb/gadget/function/f_uac2.c               |   13 +-
 drivers/usb/gadget/function/u_ecm.h                |   21 +-
 drivers/usb/gadget/function/u_eem.h                |   21 +-
 drivers/usb/gadget/function/u_gether.h             |   22 +-
 drivers/usb/gadget/function/u_rndis.h              |   31 +-
 drivers/usb/gadget/legacy/inode.c                  |    7 +-
 drivers/usb/gadget/udc/aspeed-vhub/core.c          |    4 +
 drivers/usb/gadget/udc/aspeed-vhub/dev.c           |    2 +-
 drivers/usb/gadget/udc/aspeed-vhub/hub.c           |    5 +-
 drivers/usb/gadget/udc/aspeed-vhub/vhub.h          |    1 +
 drivers/usb/gadget/udc/at91_udc.c                  |   33 +-
 drivers/usb/gadget/udc/core.c                      |    7 +-
 drivers/usb/gadget/udc/dummy_hcd.c                 |    4 +
 drivers/usb/host/octeon-hcd.c                      |    2 +-
 drivers/usb/host/ohci-da8xx.c                      |    2 +
 drivers/usb/host/ohci-s3c2410.c                    |    1 +
 drivers/usb/host/ohci-spear.c                      |    4 +-
 drivers/usb/host/ohci-st.c                         |    1 +
 drivers/usb/misc/iowarrior.c                       |   57 +-
 drivers/usb/phy/phy-fsl-usb.c                      |    1 +
 drivers/usb/serial/bus.c                           |    6 +-
 drivers/usb/serial/cp210x.c                        |    1 +
 drivers/usb/serial/generic.c                       |   10 +-
 drivers/usb/serial/option.c                        |   14 +
 drivers/usb/serial/quatech2.c                      |   19 +-
 drivers/usb/serial/ssu100.c                        |   18 +-
 drivers/usb/serial/usb-serial.c                    |  127 +-
 drivers/usb/serial/xr_serial.c                     |   10 +-
 drivers/usb/storage/realtek_cr.c                   |    9 +-
 drivers/usb/storage/sierra_ms.c                    |    7 +
 drivers/usb/typec/anx7411.c                        |    5 +-
 drivers/usb/typec/tcpm/tcpm.c                      |   53 +-
 drivers/usb/typec/tipd/core.c                      |    3 +-
 drivers/usb/typec/ucsi/displayport.c               |    9 +-
 drivers/usb/typec/ucsi/ucsi.c                      |   17 +-
 drivers/usb/typec/ucsi/ucsi_acpi.c                 |   32 +
 drivers/vdpa/mlx5/core/mlx5_vdpa.h                 |    2 +
 drivers/vdpa/mlx5/core/resources.c                 |   11 +-
 drivers/vdpa/mlx5/net/mlx5_vnet.c                  |    9 +-
 drivers/vdpa/vdpa.c                                |   48 +-
 drivers/vdpa/vdpa_sim/vdpa_sim.c                   |   10 +-
 drivers/vdpa/vdpa_user/iova_domain.c               |   11 +-
 drivers/vdpa/vdpa_user/vduse_dev.c                 |   10 +-
 drivers/vfio/fsl-mc/vfio_fsl_mc.c                  |    4 +-
 drivers/vfio/fsl-mc/vfio_fsl_mc_intr.c             |    6 +-
 drivers/vfio/pci/mlx5/main.c                       |    6 +-
 drivers/vfio/pci/vfio_pci_core.c                   |   10 +-
 drivers/vfio/pci/vfio_pci_intrs.c                  |   12 +-
 drivers/vfio/platform/vfio_platform_irq.c          |    2 +-
 drivers/vhost/iotlb.c                              |   47 +-
 drivers/vhost/net.c                                |    2 +
 drivers/vhost/vdpa.c                               |   45 +-
 drivers/vhost/vhost.c                              |  183 +-
 drivers/vhost/vhost.h                              |    3 +-
 drivers/vhost/vsock.c                              |    2 +
 drivers/video/fbdev/core/fb_chrdev.c               |    6 +-
 drivers/video/fbdev/core/fbcon.c                   |    2 -
 drivers/video/fbdev/core/fbmem.c                   |   13 +
 drivers/video/fbdev/core/fbsysfs.c                 |    4 +-
 drivers/video/fbdev/hyperv_fb.c                    |   29 +-
 drivers/video/fbdev/omap2/omapfb/omapfb-main.c     |   11 +-
 drivers/video/fbdev/ps3fb.c                        |    5 +-
 drivers/video/fbdev/sh_mobile_lcdcfb.c             |    5 +-
 drivers/virt/acrn/ioeventfd.c                      |    2 +-
 drivers/virt/acrn/irqfd.c                          |   75 +-
 drivers/virt/nitro_enclaves/ne_misc_dev.c          |    1 +
 drivers/virtio/virtio.c                            |   50 +-
 drivers/virtio/virtio_mmio.c                       |   66 +-
 drivers/virtio/virtio_ring.c                       |   19 +-
 drivers/watchdog/at91sam9_wdt.c                    |    4 +-
 drivers/xen/balloon.c                              |   56 +-
 drivers/xen/gntdev-dmabuf.c                        |   31 +-
 drivers/xen/pvcalls-front.c                        |   88 +-
 drivers/xen/xen-pciback/pci_stub.c                 |    6 +-
 fs/9p/vfs_inode_dotl.c                             |   35 +-
 fs/Kconfig                                         |    1 -
 fs/Makefile                                        |    1 -
 fs/afs/inode.c                                     |    1 +
 fs/afs/internal.h                                  |    2 +
 fs/afs/rxrpc.c                                     |   81 +-
 fs/afs/super.c                                     |    2 +-
 fs/aio.c                                           |    2 +-
 fs/attr.c                                          |   12 +-
 fs/btrfs/acl.c                                     |    3 +
 fs/btrfs/bio.c                                     |    8 +-
 fs/btrfs/block-group.c                             |  172 +-
 fs/btrfs/block-rsv.c                               |   19 +-
 fs/btrfs/defrag.c                                  |   50 +-
 fs/btrfs/delayed-inode.c                           |   20 +-
 fs/btrfs/delayed-ref.c                             |  135 +-
 fs/btrfs/delayed-ref.h                             |   17 +-
 fs/btrfs/dev-replace.c                             |    1 +
 fs/btrfs/disk-io.c                                 |    8 +-
 fs/btrfs/extent-tree.c                             |   92 +-
 fs/btrfs/extent-tree.h                             |    4 +-
 fs/btrfs/file.c                                    |  126 +-
 fs/btrfs/fs.h                                      |   15 +
 fs/btrfs/inode.c                                   |  229 +-
 fs/btrfs/ioctl.c                                   |   12 +-
 fs/btrfs/lzo.c                                     |   13 +-
 fs/btrfs/qgroup.c                                  |   18 +-
 fs/btrfs/reflink.c                                 |   66 +-
 fs/btrfs/relocation.c                              |   87 +-
 fs/btrfs/scrub.c                                   |    4 +-
 fs/btrfs/space-info.c                              |   17 +-
 fs/btrfs/subpage.h                                 |   13 +
 fs/btrfs/transaction.c                             |   34 +-
 fs/btrfs/transaction.h                             |    1 +
 fs/btrfs/tree-log.c                                |  142 +-
 fs/btrfs/volumes.c                                 |  241 +-
 fs/btrfs/xattr.c                                   |    9 +
 fs/btrfs/zoned.c                                   |    6 +-
 fs/btrfs/zstd.c                                    |   11 +-
 fs/ceph/addr.c                                     |    4 +
 fs/ceph/crypto.c                                   |   46 +-
 fs/ceph/debugfs.c                                  |   14 +-
 fs/ceph/dir.c                                      |   20 +-
 fs/ceph/file.c                                     |   10 +-
 fs/ceph/mds_client.c                               |  252 +-
 fs/ceph/mds_client.h                               |   19 +-
 fs/ceph/super.h                                    |    9 +
 fs/configfs/dir.c                                  |   13 +-
 fs/configfs/symlink.c                              |   51 +-
 fs/dcache.c                                        |   12 +-
 fs/dlm/lock.c                                      |    2 +
 fs/erofs/decompressor.c                            |   55 +-
 fs/erofs/decompressor_lzma.c                       |   18 +-
 fs/erofs/internal.h                                |    6 +-
 fs/erofs/sysfs.c                                   |    2 +
 fs/erofs/xattr.c                                   |    1 +
 fs/erofs/zdata.c                                   |   31 +-
 fs/erofs/zmap.c                                    |   54 +-
 fs/eventfd.c                                       |   11 +-
 fs/exfat/exfat_fs.h                                |    1 +
 fs/exfat/file.c                                    |    7 +-
 fs/exfat/inode.c                                   |   31 +-
 fs/exfat/misc.c                                    |    8 +
 fs/exfat/namei.c                                   |   44 +-
 fs/exfat/nls.c                                     |   24 +-
 fs/exfat/super.c                                   |    4 +-
 fs/ext2/inode.c                                    |    3 +-
 fs/ext2/xattr.c                                    |    4 +-
 fs/ext4/ext4.h                                     |    6 +-
 fs/ext4/ext4_jbd2.h                                |   29 +
 fs/ext4/inode.c                                    |   36 +-
 fs/ext4/ioctl.c                                    |    5 +
 fs/ext4/super.c                                    |   34 +-
 fs/ext4/xattr.c                                    |    2 +-
 fs/f2fs/checkpoint.c                               |    2 +-
 fs/f2fs/compress.c                                 |    1 +
 fs/f2fs/data.c                                     |   37 +-
 fs/f2fs/debug.c                                    |    4 -
 fs/f2fs/dir.c                                      |    1 +
 fs/f2fs/f2fs.h                                     |   30 +-
 fs/f2fs/file.c                                     |   20 +-
 fs/f2fs/gc.c                                       |   88 +-
 fs/f2fs/gc.h                                       |   20 -
 fs/f2fs/node.c                                     |   50 +-
 fs/f2fs/recovery.c                                 |   33 +-
 fs/f2fs/segment.c                                  |   23 +-
 fs/f2fs/super.c                                    |    6 +-
 fs/f2fs/sysfs.c                                    |   33 +-
 fs/fcntl.c                                         |    3 +
 fs/fsopen.c                                        |    3 +
 fs/fuse/file.c                                     |   77 +-
 fs/fuse/fuse_i.h                                   |    7 +
 fs/fuse/virtio_fs.c                                |    1 +
 fs/gfs2/inode.c                                    |   15 +
 fs/gfs2/inode.h                                    |    1 +
 fs/gfs2/ops_fstype.c                               |    4 +-
 fs/gfs2/quota.c                                    |    7 +-
 fs/gfs2/super.c                                    |    4 +-
 fs/inode.c                                         |   27 +-
 fs/jbd2/checkpoint.c                               |   44 +-
 fs/jbd2/commit.c                                   |    2 +-
 fs/jfs/jfs_dtree.c                                 |   18 +-
 fs/kernfs/mount.c                                  |    8 +-
 fs/libfs.c                                         |   50 +-
 fs/lockd/clnt4xdr.c                                |   14 +-
 fs/lockd/clntlock.c                                |    2 +-
 fs/lockd/clntproc.c                                |   64 +-
 fs/lockd/clntxdr.c                                 |   14 +-
 fs/lockd/svc.c                                     |    4 +-
 fs/lockd/svc4proc.c                                |   12 +-
 fs/lockd/svclock.c                                 |   66 +-
 fs/lockd/svcproc.c                                 |   12 +-
 fs/lockd/svcsubs.c                                 |   60 +-
 fs/lockd/xdr.c                                     |   14 +-
 fs/lockd/xdr4.c                                    |   14 +-
 fs/locks.c                                         |   18 +-
 fs/mbcache.c                                       |    1 +
 fs/namei.c                                         |   49 +-
 fs/namespace.c                                     |  123 +-
 fs/nfs/blocklayout/dev.c                           |   19 +-
 fs/nfs/callback_xdr.c                              |    6 +-
 fs/nfs/delegation.c                                |   18 +-
 fs/nfs/flexfilelayout/flexfilelayout.c             |    3 +-
 fs/nfs/nfs42xattr.c                                |    8 +-
 fs/nfs/nfs4proc.c                                  |    4 +-
 fs/nfs/nfs4session.c                               |   16 +-
 fs/nfsd/auth.c                                     |   14 +-
 fs/nfsd/auth.h                                     |    2 +-
 fs/nfsd/export.h                                   |    3 +-
 fs/nfsd/filecache.c                                |   78 +-
 fs/nfsd/lockd.c                                    |    6 +-
 fs/nfsd/netns.h                                    |   24 +-
 fs/nfsd/nfs3proc.c                                 |   40 +
 fs/nfsd/nfs4layouts.c                              |   30 +-
 fs/nfsd/nfs4proc.c                                 |   38 +-
 fs/nfsd/nfs4recover.c                              |   12 +-
 fs/nfsd/nfs4state.c                                |  300 +-
 fs/nfsd/nfs4xdr.c                                  |   48 +-
 fs/nfsd/nfsctl.c                                   |    2 +-
 fs/nfsd/nfsfh.c                                    |    6 +-
 fs/nfsd/nfsproc.c                                  |    9 +-
 fs/nfsd/nfssvc.c                                   |   20 +-
 fs/nfsd/state.h                                    |   40 +-
 fs/nfsd/trace.h                                    |   35 +-
 fs/nfsd/vfs.c                                      |   45 +-
 fs/nfsd/vfs.h                                      |    4 +-
 fs/nfsd/xdr4.h                                     |  113 +-
 fs/nilfs2/page.c                                   |   35 +-
 fs/notify/mark.c                                   |   39 +-
 fs/ntfs/Kconfig                                    |   81 -
 fs/ntfs/Makefile                                   |   15 -
 fs/ntfs/aops.c                                     | 1761 -----------
 fs/ntfs/aops.h                                     |   88 -
 fs/ntfs/attrib.c                                   | 2624 ----------------
 fs/ntfs/attrib.h                                   |  102 -
 fs/ntfs/bitmap.c                                   |  179 --
 fs/ntfs/bitmap.h                                   |  104 -
 fs/ntfs/collate.c                                  |  110 -
 fs/ntfs/collate.h                                  |   36 -
 fs/ntfs/compress.c                                 |  950 ------
 fs/ntfs/debug.c                                    |  159 -
 fs/ntfs/debug.h                                    |   57 -
 fs/ntfs/dir.c                                      | 1539 ----------
 fs/ntfs/dir.h                                      |   34 -
 fs/ntfs/endian.h                                   |   79 -
 fs/ntfs/file.c                                     | 2004 ------------
 fs/ntfs/index.c                                    |  440 ---
 fs/ntfs/index.h                                    |  134 -
 fs/ntfs/inode.c                                    | 3101 -------------------
 fs/ntfs/inode.h                                    |  310 --
 fs/ntfs/layout.h                                   | 2421 ---------------
 fs/ntfs/lcnalloc.c                                 | 1000 ------
 fs/ntfs/lcnalloc.h                                 |  131 -
 fs/ntfs/logfile.c                                  |  849 ------
 fs/ntfs/logfile.h                                  |  295 --
 fs/ntfs/malloc.h                                   |   77 -
 fs/ntfs/mft.c                                      | 2907 ------------------
 fs/ntfs/mft.h                                      |  110 -
 fs/ntfs/mst.c                                      |  189 --
 fs/ntfs/namei.c                                    |  391 ---
 fs/ntfs/ntfs.h                                     |  150 -
 fs/ntfs/quota.c                                    |  103 -
 fs/ntfs/quota.h                                    |   21 -
 fs/ntfs/runlist.c                                  | 1893 ------------
 fs/ntfs/runlist.h                                  |   88 -
 fs/ntfs/super.c                                    | 3202 --------------------
 fs/ntfs/sysctl.c                                   |   59 -
 fs/ntfs/sysctl.h                                   |   27 -
 fs/ntfs/time.h                                     |   89 -
 fs/ntfs/types.h                                    |   55 -
 fs/ntfs/unistr.c                                   |  384 ---
 fs/ntfs/upcase.c                                   |   73 -
 fs/ntfs/usnjrnl.c                                  |   70 -
 fs/ntfs/usnjrnl.h                                  |  191 --
 fs/ntfs/volume.h                                   |  164 -
 fs/ntfs3/bitmap.c                                  |   62 +-
 fs/ntfs3/file.c                                    |  147 +-
 fs/ntfs3/frecord.c                                 |    1 -
 fs/ntfs3/fsntfs.c                                  |    2 +-
 fs/ntfs3/run.c                                     |   19 +-
 fs/ocfs2/cluster/heartbeat.c                       |  168 +-
 fs/ocfs2/cluster/nodemanager.c                     |   19 +-
 fs/ocfs2/cluster/nodemanager.h                     |    2 +
 fs/ocfs2/cluster/tcp.c                             |  105 +-
 fs/ocfs2/cluster/tcp.h                             |    1 +
 fs/ocfs2/dir.c                                     |   71 +-
 fs/ocfs2/inode.c                                   |  131 +
 fs/ocfs2/namei.c                                   |    8 +-
 fs/ocfs2/super.c                                   |    4 +-
 fs/ocfs2/xattr.c                                   |  215 ++
 fs/ocfs2/xattr.h                                   |    2 +
 fs/overlayfs/file.c                                |   19 +-
 fs/proc/task_mmu.c                                 |    9 +-
 fs/smb/client/cifsacl.c                            |   66 +-
 fs/smb/client/cifsencrypt.c                        |    1 -
 fs/smb/client/cifsfs.c                             |    1 +
 fs/smb/client/cifsglob.h                           |   11 +-
 fs/smb/client/cifssmb.c                            |    2 +-
 fs/smb/client/connect.c                            |    5 +
 fs/smb/client/dir.c                                |   39 +-
 fs/smb/client/file.c                               |   93 +-
 fs/smb/client/inode.c                              |   52 +-
 fs/smb/client/link.c                               |   17 +-
 fs/smb/client/misc.c                               |   72 +-
 fs/smb/client/readdir.c                            |   17 +-
 fs/smb/client/sess.c                               |  106 +-
 fs/smb/client/smb1ops.c                            |   23 +-
 fs/smb/client/smb2file.c                           |   19 +-
 fs/smb/client/smb2inode.c                          |    8 +-
 fs/smb/client/smb2misc.c                           |    9 +-
 fs/smb/client/smb2ops.c                            |  116 +-
 fs/smb/client/smb2pdu.c                            |   39 +-
 fs/smb/client/smb2proto.h                          |    2 +-
 fs/smb/client/smbdirect.c                          |   19 +-
 fs/smb/client/transport.c                          |   69 +-
 fs/smb/server/auth.c                               |   21 +-
 fs/smb/server/connection.c                         |   35 +-
 fs/smb/server/connection.h                         |    7 +-
 fs/smb/server/mgmt/share_config.c                  |    7 +-
 fs/smb/server/mgmt/tree_connect.c                  |   20 +-
 fs/smb/server/mgmt/user_config.c                   |   11 +
 fs/smb/server/mgmt/user_session.c                  |   25 +-
 fs/smb/server/mgmt/user_session.h                  |    1 +
 fs/smb/server/misc.c                               |   33 -
 fs/smb/server/misc.h                               |    1 -
 fs/smb/server/oplock.c                             |   83 +-
 fs/smb/server/oplock.h                             |    1 +
 fs/smb/server/smb2pdu.c                            |  150 +-
 fs/smb/server/smbacl.c                             |  244 +-
 fs/smb/server/smbacl.h                             |    2 +-
 fs/smb/server/transport_rdma.c                     |   44 +-
 fs/smb/server/vfs.c                                |   70 +-
 fs/smb/server/vfs_cache.c                          |    8 +-
 fs/super.c                                         |   43 +-
 fs/tracefs/event_inode.c                           |   24 +
 fs/tracefs/internal.h                              |    4 +-
 fs/ubifs/super.c                                   |    2 +-
 fs/udf/inode.c                                     |   42 +-
 fs/userfaultfd.c                                   |    7 +
 fs/verity/Kconfig                                  |    3 +
 fs/verity/open.c                                   |    8 -
 fs/xfs/libxfs/xfs_alloc.c                          |   46 +-
 fs/xfs/libxfs/xfs_attr.c                           |   74 +-
 fs/xfs/libxfs/xfs_ialloc.c                         |   32 +-
 fs/xfs/xfs_buf.c                                   |    6 +-
 fs/xfs/xfs_buf_item.c                              |  299 +-
 fs/xfs/xfs_buf_item.h                              |    3 +-
 fs/xfs/xfs_dquot.c                                 |    2 +-
 fs/xfs/xfs_icache.c                                |    8 +
 fs/xfs/xfs_inode.c                                 |    2 +-
 fs/xfs/xfs_log_recover.c                           |   13 +-
 fs/xfs/xfs_mount.c                                 |    2 +-
 fs/xfs/xfs_qm.c                                    |    2 +-
 include/acpi/acpi_bus.h                            |    6 +
 include/clocksource/samsung_pwm.h                  |    2 +-
 include/drm/drm_debugfs.h                          |    6 +-
 include/drm/{drm_gpuva_mgr.h => drm_gpuvm.h}       |  155 +-
 include/drm/gpu_scheduler.h                        |   29 +-
 include/linux/bpf.h                                |   32 +-
 include/linux/bpf_mprog.h                          |   10 +
 include/linux/bpf_verifier.h                       |   12 +-
 include/linux/can/skb.h                            |    2 +
 include/linux/cgroup.h                             |    1 +
 include/linux/cpufreq.h                            |    2 +-
 include/linux/device/bus.h                         |    3 +
 include/linux/dma-buf.h                            |    1 +
 include/linux/dma/k3-udma-glue.h                   |    3 +-
 include/linux/dmaengine.h                          |    7 +
 include/linux/eventfd.h                            |    4 +-
 include/linux/fb.h                                 |    2 +
 include/linux/filelock.h                           |   90 +-
 include/linux/filter.h                             |   13 +-
 include/linux/fs.h                                 |   11 +-
 include/linux/fsl/mc.h                             |    4 -
 include/linux/fsverity.h                           |   25 -
 include/linux/ftrace.h                             |    5 +-
 include/linux/gfp.h                                |    1 +
 include/linux/hid.h                                |   10 +-
 include/linux/huge_mm.h                            |   29 +-
 include/linux/hw_random.h                          |    2 +
 include/linux/hyperv.h                             |    5 -
 include/linux/i3c/master.h                         |    3 +
 include/linux/ieee80211.h                          |   12 +-
 include/linux/if_team.h                            |    3 +-
 include/linux/if_vlan.h                            |    3 +
 include/linux/igmp.h                               |    7 +-
 include/linux/iio/iio.h                            |   15 +
 include/linux/iommu.h                              |    3 +-
 include/linux/irq_work.h                           |    9 +-
 include/linux/irq_work_types.h                     |   14 +
 include/linux/jbd2.h                               |    4 +-
 include/linux/kasan.h                              |    6 +-
 include/linux/list_lru.h                           |   92 +-
 include/linux/llist.h                              |   42 +
 include/linux/lockd/bind.h                         |   12 +-
 include/linux/lockd/lockd.h                        |   10 +-
 include/linux/memory.h                             |   23 +-
 include/linux/memory_hotplug.h                     |   14 +-
 include/linux/mlx5/cq.h                            |    1 +
 include/linux/mlx5/mlx5_ifc.h                      |   13 +-
 include/linux/mm.h                                 |    2 +-
 include/linux/mount.h                              |    2 +-
 include/linux/namei.h                              |    7 +-
 include/linux/netdevice.h                          |    9 +-
 include/linux/netfilter.h                          |   12 +
 include/linux/netfilter/x_tables.h                 |    1 +
 include/linux/ntb.h                                |   24 +
 include/linux/nvme.h                               |    4 +-
 include/linux/nvmem-consumer.h                     |    7 -
 include/linux/nvmem-provider.h                     |   57 +-
 include/linux/of_device.h                          |    6 +
 include/linux/path.h                               |    9 +
 include/linux/pci.h                                |   21 +-
 include/linux/perf/riscv_pmu.h                     |    2 +-
 include/linux/perf_event.h                         |    3 +-
 include/linux/platform_data/x86/asus-wmi.h         |    3 +
 include/linux/property.h                           |   12 +
 include/linux/rcupdate.h                           |   14 +
 include/linux/rcuwait.h                            |   13 +-
 include/linux/sched.h                              |    2 +-
 include/linux/sched/signal.h                       |    5 +-
 include/linux/sched/user.h                         |    3 +-
 include/linux/skbuff.h                             |   12 +-
 include/linux/skmsg.h                              |   14 -
 include/linux/soc/qcom/geni-se.h                   |   15 +-
 include/linux/spi/spi.h                            |    5 -
 include/linux/srcutiny.h                           |    4 +
 include/linux/string.h                             |    1 +
 include/linux/sunrpc/svc_rdma.h                    |    1 +
 include/linux/tty.h                                |    2 +
 include/linux/tty_driver.h                         |    6 +
 include/linux/tty_port.h                           |   22 +-
 include/linux/types.h                              |   12 +
 include/linux/usb/gadget.h                         |    2 +
 include/linux/usb/serial.h                         |    1 +
 include/linux/userfaultfd_k.h                      |    7 +
 include/linux/vdpa.h                               |    4 -
 include/linux/virtio.h                             |    2 +-
 include/media/v4l2-mem2mem.h                       |   21 +
 include/net/amt.h                                  |    4 -
 include/net/ax25.h                                 |    1 -
 include/net/bluetooth/hci_core.h                   |    7 +-
 include/net/bluetooth/rfcomm.h                     |    1 +
 include/net/cfg80211.h                             |  105 +-
 include/net/dropreason-core.h                      |    3 +
 include/net/inet_connection_sock.h                 |   11 +-
 include/net/ip.h                                   |   16 +-
 include/net/ip6_route.h                            |    2 +-
 include/net/ip6_tunnel.h                           |   12 +
 include/net/ip_tunnels.h                           |   17 +
 include/net/ip_vs.h                                |    2 +-
 include/net/mac80211.h                             |    4 +
 include/net/netfilter/nf_conntrack.h               |   18 +-
 include/net/netfilter/nf_conntrack_expect.h        |   16 +-
 include/net/netfilter/nf_conntrack_timeout.h       |   27 +-
 include/net/netfilter/nf_flow_table.h              |    2 +-
 include/net/netfilter/nf_queue.h                   |    1 +
 include/net/netfilter/nf_tables.h                  |    8 +-
 include/net/netns/mpls.h                           |    2 +
 include/net/netns/xfrm.h                           |    1 +
 include/net/nexthop.h                              |    6 +-
 include/net/pkt_cls.h                              |   14 +-
 include/net/route.h                                |    2 +-
 include/net/sch_generic.h                          |   12 +-
 include/net/sctp/auth.h                            |    3 +
 include/net/secure_seq.h                           |   45 +-
 include/net/sock.h                                 |    8 +-
 include/net/strparser.h                            |   10 +-
 include/net/tcp.h                                  |   12 +-
 include/net/xdp.h                                  |   16 +-
 include/scsi/scsi_host.h                           |   10 +-
 include/sound/core.h                               |    9 +
 include/trace/events/rv.h                          |   60 +-
 include/uapi/linux/netfilter/nf_conntrack_common.h |    1 +
 include/uapi/linux/nexthop.h                       |    7 +-
 include/ufs/ufshcd.h                               |    4 -
 init/main.c                                        |   27 +-
 io_uring/io_uring.c                                |   15 +-
 io_uring/io_uring.h                                |    8 +
 io_uring/poll.c                                    |   22 +-
 io_uring/rw.c                                      |   32 +-
 kernel/audit_tree.c                                |   36 +-
 kernel/bpf/arraymap.c                              |   26 +-
 kernel/bpf/btf.c                                   |   31 +-
 kernel/bpf/cgroup.c                                |   19 +-
 kernel/bpf/core.c                                  |   13 +-
 kernel/bpf/hashtab.c                               |    4 +-
 kernel/bpf/helpers.c                               |   29 +-
 kernel/bpf/mmap_unlock_work.h                      |   51 +-
 kernel/bpf/offload.c                               |    9 +-
 kernel/bpf/queue_stack_maps.c                      |    8 +-
 kernel/bpf/stackmap.c                              |   69 +-
 kernel/bpf/syscall.c                               |   11 +-
 kernel/bpf/task_iter.c                             |   14 +-
 kernel/bpf/trampoline.c                            |   54 +-
 kernel/bpf/verifier.c                              |  807 +++--
 kernel/cgroup/Makefile                             |    2 +-
 kernel/cgroup/cgroup.c                             |   24 +-
 kernel/cgroup/cpuset-internal.h                    |  222 ++
 kernel/cgroup/cpuset-v1.c                          |    3 +
 kernel/cgroup/cpuset.c                             |  226 +-
 kernel/cgroup/rstat.c                              |   19 +-
 kernel/dma/direct.c                                |   41 +-
 kernel/dma/swiotlb.c                               |    6 +-
 kernel/events/core.c                               |  117 +-
 kernel/irq/proc.c                                  |    7 +-
 kernel/kprobes.c                                   |    8 +-
 kernel/module/dups.c                               |   66 +-
 kernel/params.c                                    |   60 +-
 kernel/rcu/srcutiny.c                              |   19 +-
 kernel/reboot.c                                    |    3 +-
 kernel/sched/core.c                                |   54 +-
 kernel/sched/deadline.c                            |    6 +-
 kernel/sched/sched.h                               |    1 +
 kernel/signal.c                                    |   12 +
 kernel/sysctl.c                                    |   13 +-
 kernel/time/namespace.c                            |    5 +
 kernel/trace/fgraph.c                              |    1 +
 kernel/trace/ftrace.c                              |   72 +-
 kernel/trace/trace.c                               |  117 +-
 kernel/trace/trace.h                               |    5 +-
 kernel/trace/trace_btf.c                           |   12 +-
 kernel/trace/trace_events_hist.c                   |   41 +-
 kernel/trace/trace_functions.c                     |    2 +-
 kernel/trace/trace_probe.c                         |    2 +-
 kernel/trace/trace_stack.c                         |    2 +-
 kernel/workqueue.c                                 |    2 +-
 mm/damon/core.c                                    |   47 +-
 mm/damon/vaddr.c                                   |    1 +
 mm/filemap.c                                       |    9 -
 mm/huge_memory.c                                   |   54 +-
 mm/hugetlb.c                                       |   54 +-
 mm/kasan/shadow.c                                  |  111 +-
 mm/khugepaged.c                                    |   14 +-
 mm/kmemleak.c                                      |   51 +-
 mm/list_lru.c                                      |   48 +-
 mm/memcontrol.c                                    |   52 +-
 mm/memory.c                                        |    6 +-
 mm/memory_hotplug.c                                |    9 +-
 mm/migrate_device.c                                |    6 +
 mm/mm_init.c                                       |   14 +-
 mm/mmap.c                                          |   31 +-
 mm/mremap.c                                        |   72 +-
 mm/page_alloc.c                                    |   10 +
 mm/page_owner.c                                    |   14 +-
 mm/page_table_check.c                              |   20 +-
 mm/rmap.c                                          |    6 +-
 mm/secretmem.c                                     |  118 +-
 mm/shmem.c                                         |   28 +-
 mm/slub.c                                          |  175 +-
 mm/util.c                                          |   17 +
 mm/vmalloc.c                                       |    4 +-
 mm/vmpressure.c                                    |    2 +-
 mm/vmscan.c                                        |   18 +-
 mm/workingset.c                                    |    4 +-
 net/9p/trans_xen.c                                 |   79 +-
 net/ax25/af_ax25.c                                 |   30 +-
 net/ax25/ax25_route.c                              |   74 -
 net/bluetooth/6lowpan.c                            |   27 +-
 net/bluetooth/eir.c                                |   13 +-
 net/bluetooth/eir.h                                |    2 +-
 net/bluetooth/hci_conn.c                           |   20 +-
 net/bluetooth/hci_core.c                           |   63 +-
 net/bluetooth/hci_debugfs.c                        |    2 +-
 net/bluetooth/hci_event.c                          |  100 +-
 net/bluetooth/hci_sock.c                           |    2 +
 net/bluetooth/hci_sync.c                           |  100 +-
 net/bluetooth/hci_sysfs.c                          |   17 +-
 net/bluetooth/iso.c                                |   97 +-
 net/bluetooth/l2cap_core.c                         |   43 +-
 net/bluetooth/l2cap_sock.c                         |   57 +-
 net/bluetooth/mgmt.c                               |   35 +-
 net/bluetooth/rfcomm/core.c                        |  134 +-
 net/bluetooth/rfcomm/sock.c                        |    5 +-
 net/bluetooth/rfcomm/tty.c                         |    9 +-
 net/bluetooth/smp.c                                |    2 +
 net/bridge/br_arp_nd_proxy.c                       |   24 +-
 net/bridge/br_cfm.c                                |   11 +-
 net/bridge/br_device.c                             |    1 -
 net/bridge/br_input.c                              |   35 +-
 net/bridge/br_mrp.c                                |   13 +-
 net/bridge/br_multicast.c                          |   23 +-
 net/bridge/br_private.h                            |   26 +-
 net/bridge/netfilter/ebt_dnat.c                    |    4 +-
 net/bridge/netfilter/ebt_redirect.c                |   16 +-
 net/bridge/netfilter/ebtable_broute.c              |    2 +-
 net/bridge/netfilter/ebtable_filter.c              |    2 +-
 net/bridge/netfilter/ebtable_nat.c                 |    2 +-
 net/bridge/netfilter/ebtables.c                    |   73 +-
 net/can/af_can.c                                   |    6 +-
 net/can/bcm.c                                      |    2 +
 net/can/isotp.c                                    |   11 +-
 net/can/j1939/socket.c                             |    1 +
 net/can/j1939/transport.c                          |    2 +
 net/can/raw.c                                      |    7 +-
 net/ceph/auth_x.c                                  |    5 +
 net/core/bpf_sk_storage.c                          |   17 +-
 net/core/dev.c                                     |  271 +-
 net/core/filter.c                                  |    4 +-
 net/core/flow_dissector.c                          |   26 +-
 net/core/pktgen.c                                  |    5 +-
 net/core/rtnetlink.c                               |    9 +-
 net/core/secure_seq.c                              |   80 +-
 net/core/skbuff.c                                  |    8 +-
 net/core/sock.c                                    |   35 +-
 net/core/xdp.c                                     |    4 +-
 net/dccp/timer.c                                   |    4 +-
 net/ethtool/channels.c                             |    6 +-
 net/ethtool/common.c                               |   22 +-
 net/ethtool/common.h                               |    2 +-
 net/ethtool/ioctl.c                                |    4 +-
 net/ethtool/rss.c                                  |    4 +-
 net/handshake/handshake-test.c                     |    8 +
 net/handshake/handshake.h                          |    2 +
 net/handshake/netlink.c                            |   21 +-
 net/handshake/request.c                            |   73 +-
 net/ieee802154/core.c                              |    8 +-
 net/ife/ife.c                                      |   14 +-
 net/ipv4/esp4.c                                    |    7 +
 net/ipv4/fib_semantics.c                           |    3 +
 net/ipv4/fib_trie.c                                |    2 -
 net/ipv4/igmp.c                                    |  224 +-
 net/ipv4/inet_connection_sock.c                    |   10 +-
 net/ipv4/inet_diag.c                               |    4 +-
 net/ipv4/ip_tunnel_core.c                          |   13 +
 net/ipv4/ipconfig.c                                |   90 +-
 net/ipv4/ipmr.c                                    |    6 +-
 net/ipv4/ipmr_base.c                               |    2 +-
 net/ipv4/netfilter/arp_tables.c                    |   35 +-
 net/ipv4/netfilter/ip_tables.c                     |   41 +-
 net/ipv4/netfilter/iptable_nat.c                   |    4 +-
 net/ipv4/nexthop.c                                 |   54 +-
 net/ipv4/raw.c                                     |    2 +-
 net/ipv4/route.c                                   |    2 +
 net/ipv4/syncookies.c                              |   11 +-
 net/ipv4/tcp_bpf.c                                 |   17 +-
 net/ipv4/tcp_fastopen.c                            |    7 +-
 net/ipv4/tcp_input.c                               |   14 +-
 net/ipv4/tcp_ipv4.c                                |   43 +-
 net/ipv4/tcp_metrics.c                             |    6 +-
 net/ipv4/tcp_minisocks.c                           |    2 +-
 net/ipv4/tcp_output.c                              |    6 +-
 net/ipv4/tcp_timer.c                               |    5 +-
 net/ipv4/udp.c                                     |   56 +
 net/ipv4/udp_bpf.c                                 |    9 +
 net/ipv4/udp_tunnel_nic.c                          |   29 +-
 net/ipv4/xfrm4_input.c                             |    7 +-
 net/ipv6/addrconf.c                                |    2 +-
 net/ipv6/esp6.c                                    |    7 +
 net/ipv6/exthdrs.c                                 |   36 +-
 net/ipv6/ioam6.c                                   |   32 +-
 net/ipv6/ioam6_iptunnel.c                          |    9 +-
 net/ipv6/ip6_flowlabel.c                           |   20 +
 net/ipv6/ip6_gre.c                                 |    5 -
 net/ipv6/ip6_input.c                               |    1 +
 net/ipv6/ip6_output.c                              |   30 +-
 net/ipv6/ip6mr.c                                   |    5 +-
 net/ipv6/mcast.c                                   |   20 +-
 net/ipv6/netfilter/ip6_tables.c                    |   38 +-
 net/ipv6/netfilter/ip6table_nat.c                  |    4 +-
 net/ipv6/netfilter/nf_conntrack_reasm.c            |    4 +-
 net/ipv6/reassembly.c                              |    4 +-
 net/ipv6/route.c                                   |    2 -
 net/ipv6/rpl_iptunnel.c                            |    9 +-
 net/ipv6/seg6_iptunnel.c                           |    2 +-
 net/ipv6/syncookies.c                              |   11 +-
 net/ipv6/tcp_ipv6.c                                |   43 +-
 net/ipv6/udp.c                                     |   50 +
 net/ipv6/xfrm6_input.c                             |    7 +-
 net/kcm/kcmsock.c                                  |   21 +-
 net/l2tp/l2tp_core.c                               |   16 +-
 net/l2tp/l2tp_core.h                               |    3 +-
 net/l2tp/l2tp_debugfs.c                            |    4 +
 net/l2tp/l2tp_netlink.c                            |   20 +-
 net/l2tp/l2tp_ppp.c                                |  151 +-
 net/mac80211/agg-rx.c                              |    2 +-
 net/mac80211/chan.c                                |   37 +-
 net/mac80211/fils_aead.c                           |    8 +
 net/mac80211/ibss.c                                |    9 +-
 net/mac80211/ieee80211_i.h                         |    2 +-
 net/mac80211/mesh_pathtbl.c                        |   30 +-
 net/mac80211/mlme.c                                |   10 +-
 net/mac80211/rc80211_minstrel_ht.c                 |   30 +-
 net/mac80211/rx.c                                  |   16 +-
 net/mac80211/sta_info.c                            |   85 +-
 net/mac80211/tx.c                                  |  128 +-
 net/mac80211/util.c                                |    7 +-
 net/mctp/device.c                                  |    6 +-
 net/mctp/route.c                                   |   10 +-
 net/mctp/test/route-test.c                         |  112 +
 net/mpls/af_mpls.c                                 |   35 +-
 net/mptcp/pm.c                                     |    3 +
 net/mptcp/pm_netlink.c                             |   10 +-
 net/mptcp/pm_userspace.c                           |   32 +-
 net/mptcp/protocol.c                               |   54 +-
 net/mptcp/protocol.h                               |    4 +-
 net/ncsi/ncsi-manage.c                             |    2 +
 net/netfilter/core.c                               |    6 +-
 net/netfilter/ipset/ip_set_bitmap_gen.h            |    2 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |    3 +
 net/netfilter/ipvs/ip_vs_core.c                    |   11 +-
 net/netfilter/ipvs/ip_vs_lblc.c                    |    4 +
 net/netfilter/ipvs/ip_vs_lblcr.c                   |    3 +
 net/netfilter/ipvs/ip_vs_sync.c                    |   33 +-
 net/netfilter/ipvs/ip_vs_xmit.c                    |   49 +-
 net/netfilter/nf_conntrack_amanda.c                |    2 +-
 net/netfilter/nf_conntrack_bpf.c                   |   86 +-
 net/netfilter/nf_conntrack_broadcast.c             |    2 +-
 net/netfilter/nf_conntrack_core.c                  |   52 +-
 net/netfilter/nf_conntrack_expect.c                |  145 +-
 net/netfilter/nf_conntrack_h323_main.c             |    8 +-
 net/netfilter/nf_conntrack_helper.c                |   10 +-
 net/netfilter/nf_conntrack_netlink.c               |   22 +-
 net/netfilter/nf_conntrack_sip.c                   |   17 +-
 net/netfilter/nf_conntrack_timeout.c               |   27 +-
 net/netfilter/nf_flow_table_core.c                 |  123 +-
 net/netfilter/nf_flow_table_ip.c                   |    3 +
 net/netfilter/nf_flow_table_offload.c              |   14 +-
 net/netfilter/nf_nat_bpf.c                         |    3 +
 net/netfilter/nf_nat_core.c                        |   17 +-
 net/netfilter/nf_synproxy_core.c                   |   40 +-
 net/netfilter/nf_tables_api.c                      |  192 +-
 net/netfilter/nf_tables_core.c                     |    6 +-
 net/netfilter/nf_tables_trace.c                    |    2 +-
 net/netfilter/nfnetlink_cttimeout.c                |  114 +-
 net/netfilter/nfnetlink_log.c                      |   23 +-
 net/netfilter/nfnetlink_queue.c                    |  186 +-
 net/netfilter/nft_ct.c                             |   12 +-
 net/netfilter/nft_dynset.c                         |   25 +-
 net/netfilter/nft_flow_offload.c                   |   11 +-
 net/netfilter/nft_lookup.c                         |   14 +-
 net/netfilter/nft_set_bitmap.c                     |    4 +-
 net/netfilter/nft_set_hash.c                       |    8 +-
 net/netfilter/nft_set_pipapo.c                     |   12 +-
 net/netfilter/nft_set_rbtree.c                     |   10 +-
 net/netfilter/x_tables.c                           |   77 +-
 net/netfilter/xt_CT.c                              |    2 +-
 net/netlink/genetlink.c                            |   21 +-
 net/openvswitch/actions.c                          |    7 +-
 net/openvswitch/conntrack.c                        |   70 +-
 net/openvswitch/datapath.c                         |    8 +
 net/packet/af_packet.c                             |    6 +-
 net/phonet/socket.c                                |   10 +-
 net/qrtr/mhi.c                                     |   61 +-
 net/rds/tcp.c                                      |   48 +-
 net/rxrpc/proc.c                                   |   26 +-
 net/sched/act_api.c                                |    9 +-
 net/sched/act_ct.c                                 |   36 +-
 net/sched/act_ife.c                                |   32 +-
 net/sched/cls_api.c                                |   17 +-
 net/sched/cls_basic.c                              |    6 +-
 net/sched/cls_bpf.c                                |    6 +-
 net/sched/cls_cgroup.c                             |    2 +-
 net/sched/cls_flow.c                               |    2 +-
 net/sched/cls_flower.c                             |    4 +-
 net/sched/cls_fw.c                                 |    4 +-
 net/sched/cls_matchall.c                           |    4 +-
 net/sched/cls_route.c                              |   10 +-
 net/sched/cls_u32.c                                |   18 +-
 net/sched/em_text.c                                |    3 +
 net/sched/sch_cake.c                               |    2 +-
 net/sched/sch_codel.c                              |   14 +-
 net/sched/sch_drr.c                                |    2 +-
 net/sched/sch_ets.c                                |    2 +-
 net/sched/sch_fifo.c                               |   16 +-
 net/sched/sch_fq.c                                 |   48 +-
 net/sched/sch_fq_codel.c                           |   18 +-
 net/sched/sch_fq_pie.c                             |   14 +-
 net/sched/sch_generic.c                            |   54 +-
 net/sched/sch_gred.c                               |    4 +-
 net/sched/sch_hfsc.c                               |    2 +-
 net/sched/sch_hhf.c                                |   12 +-
 net/sched/sch_htb.c                                |    2 +-
 net/sched/sch_multiq.c                             |    2 +-
 net/sched/sch_pie.c                                |   12 +-
 net/sched/sch_plug.c                               |    2 +-
 net/sched/sch_prio.c                               |    2 +-
 net/sched/sch_qfq.c                                |    2 +-
 net/sched/sch_sfb.c                                |    2 +-
 net/sched/sch_sfq.c                                |    2 +-
 net/sctp/auth.c                                    |   76 +
 net/sctp/bind_addr.c                               |   11 +-
 net/sctp/ipv6.c                                    |   10 +-
 net/sctp/protocol.c                                |    5 +-
 net/sctp/sm_make_chunk.c                           |   20 +-
 net/sctp/sm_statefuns.c                            |   36 +-
 net/sctp/socket.c                                  |    8 +-
 net/smc/af_smc.c                                   |   97 +-
 net/smc/smc.h                                      |    6 +-
 net/smc/smc_clc.h                                  |    2 +-
 net/smc/smc_core.c                                 |    2 +-
 net/smc/smc_core.h                                 |    4 +-
 net/strparser/strparser.c                          |    6 +-
 net/sunrpc/auth_gss/gss_krb5_unseal.c              |    3 +
 net/sunrpc/auth_gss/gss_rpc_xdr.c                  |   15 +-
 net/sunrpc/clnt.c                                  |   24 +-
 net/sunrpc/xprtrdma/svc_rdma_pcl.c                 |    2 +-
 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c            |   22 +-
 net/sunrpc/xprtrdma/svc_rdma_rw.c                  |   31 +-
 net/sunrpc/xprtrdma/svc_rdma_sendto.c              |   47 +-
 net/sunrpc/xprtrdma/svc_rdma_transport.c           |  105 +-
 net/sunrpc/xprtrdma/verbs.c                        |   13 +-
 net/tipc/core.c                                    |    4 +-
 net/tipc/crypto.c                                  |   20 +-
 net/tipc/link.c                                    |    6 +-
 net/tipc/node.c                                    |   10 +-
 net/tipc/topsrv.c                                  |   80 +-
 net/tipc/udp_media.c                               |   75 +-
 net/tls/tls_device.c                               |    4 +-
 net/tls/tls_sw.c                                   |    2 +
 net/unix/af_unix.c                                 |    8 +-
 net/vmw_vsock/af_vsock.c                           |    6 +-
 net/wireless/core.c                                |   38 +-
 net/wireless/core.h                                |    4 +-
 net/wireless/lib80211_crypt_tkip.c                 |   13 +-
 net/wireless/nl80211.c                             |   16 +-
 net/wireless/pmsr.c                                |    8 +-
 net/wireless/scan.c                                |   38 +-
 net/wireless/sme.c                                 |    6 +-
 net/wireless/wext-sme.c                            |    6 +-
 net/xdp/xsk.c                                      |    7 +-
 net/xfrm/xfrm_device.c                             |    8 +
 net/xfrm/xfrm_input.c                              |   25 +-
 net/xfrm/xfrm_policy.c                             |   19 +-
 net/xfrm/xfrm_user.c                               |   10 +-
 samples/vfio-mdev/mtty.c                           |    4 +-
 security/apparmor/domain.c                         |   25 +-
 security/apparmor/include/cred.h                   |    6 +-
 security/apparmor/include/label.h                  |    6 +-
 security/apparmor/include/match.h                  |   12 +-
 security/apparmor/include/policy.h                 |    3 +
 security/apparmor/include/task.h                   |   15 +-
 security/apparmor/match.c                          |   22 +-
 security/apparmor/policy.c                         |   22 +-
 security/apparmor/task.c                           |   27 +
 security/keys/key.c                                |    6 +-
 security/keys/persistent.c                         |   55 +-
 security/keys/trusted-keys/trusted_tpm1.c          |    2 +-
 security/landlock/fs.c                             |   19 +-
 security/selinux/avc.c                             |    5 +-
 security/selinux/hooks.c                           |    9 +-
 security/selinux/selinuxfs.c                       |   27 +-
 security/selinux/ss/policydb.c                     |    4 +
 sound/core/control_led.c                           |    4 +
 sound/core/oss/mixer_oss.c                         |   32 +
 sound/core/oss/pcm_oss.c                           |   53 +-
 sound/core/seq/oss/seq_oss_event.c                 |    6 +-
 sound/core/seq/oss/seq_oss_event.h                 |    3 +-
 sound/core/seq/oss/seq_oss_ioctl.c                 |    5 +-
 sound/core/seq/oss/seq_oss_midi.c                  |    6 +-
 sound/core/seq/oss/seq_oss_midi.h                  |    2 +-
 sound/core/seq/oss/seq_oss_readq.c                 |   85 +-
 sound/core/seq/oss/seq_oss_rw.c                    |    5 +-
 sound/core/seq/seq_clientmgr.c                     |   54 +-
 sound/core/seq/seq_compat.c                        |    4 +-
 sound/core/seq/seq_fifo.c                          |   98 +-
 sound/core/seq/seq_fifo.h                          |    1 +
 sound/drivers/mtpav.c                              |    6 +-
 sound/pci/hda/cs35l41_hda.c                        |   73 +-
 sound/pci/hda/cs35l41_hda.h                        |    5 +
 sound/pci/hda/hda_tegra.c                          |    3 +-
 sound/pci/hda/patch_realtek.c                      |   12 +-
 sound/pci/ice1712/ice1712.c                        |    2 +-
 sound/soc/amd/acp/acp-mach-common.c                |   18 +-
 sound/soc/amd/yc/acp6x-mach.c                      |    7 +
 sound/soc/codecs/adau1372.c                        |   18 +-
 sound/soc/codecs/aw88261.c                         |   30 +-
 sound/soc/codecs/aw88261.h                         |    6 -
 sound/soc/codecs/hdac_hda.c                        |    4 +-
 sound/soc/codecs/max98363.c                        |    2 +-
 sound/soc/codecs/rt1017-sdca-sdw.c                 |   27 +-
 sound/soc/codecs/rt274.c                           |    4 +-
 sound/soc/codecs/rt286.c                           |    2 +-
 sound/soc/codecs/wm8903.c                          |    2 +-
 sound/soc/fsl/fsl_audmix.c                         |   24 +-
 sound/soc/intel/avs/pcm.c                          |    5 +-
 sound/soc/qcom/lpass-cpu.c                         |    4 +-
 sound/soc/qcom/qdsp6/q6asm.c                       |    5 +
 sound/soc/samsung/i2s.c                            |    8 +
 sound/soc/sof/intel/hda-dai.c                      |    6 +
 sound/soc/sof/intel/hda.c                          |    5 +
 sound/soc/sof/ipc4-topology.c                      |   13 +-
 sound/soc/sof/sof-audio.h                          |    1 +
 sound/soc/sof/topology.c                           |   11 +
 sound/soc/tegra/tegra186_asrc.c                    |    2 +-
 sound/usb/caiaq/device.c                           |    3 +
 sound/usb/card.h                                   |    3 +-
 sound/usb/endpoint.c                               |   16 +-
 sound/usb/line6/playback.c                         |    7 +
 sound/usb/misc/ua101.c                             |    9 +
 sound/usb/pcm.c                                    |    3 +-
 sound/usb/quirks.c                                 |    4 +-
 sound/usb/usx2y/us122l.c                           |   45 +-
 sound/usb/usx2y/usX2Yhwdep.c                       |   25 +-
 sound/usb/usx2y/usb_stream.c                       |   92 +-
 sound/usb/usx2y/usb_stream.h                       |    1 +
 sound/usb/usx2y/usbusx2y.c                         |   13 +-
 sound/usb/usx2y/usbusx2yaudio.c                    |   67 +-
 sound/usb/usx2y/usx2yhwdeppcm.c                    |   54 +-
 tools/bpf/bpftool/feature.c                        |    3 +-
 tools/lib/bpf/libbpf_probes.c                      |    6 +-
 tools/net/ynl/generated/netdev-user.c              |   19 +
 tools/net/ynl/generated/netdev-user.h              |    3 +
 tools/net/ynl/samples/Makefile                     |    2 +-
 tools/net/ynl/samples/netdev.c                     |    8 +-
 tools/objtool/check.c                              |    2 +-
 .../testing/selftests/bpf/prog_tests/bpf_tcp_ca.c  |    2 +-
 tools/testing/selftests/bpf/progs/bpf_iter_tcp4.c  |    4 +-
 tools/testing/selftests/bpf/progs/bpf_iter_tcp6.c  |    4 +-
 .../bpf/progs/verifier_helper_restricted.c         |    8 +-
 .../bpf/progs/verifier_subprog_precision.c         |   12 +-
 tools/testing/selftests/mm/memfd_secret.c          |   30 +-
 tools/testing/selftests/net/tls.c                  |  549 ++++
 virt/kvm/eventfd.c                                 |    4 +-
 1923 files changed, 29774 insertions(+), 47583 deletions(-)

# Librecast Test Results

044/044 [ OK ] liblcrq
010/010 [ OK ] libmld
120/120 [ OK ] liblibrecast

CPU/kernel: Linux auntie 6.6.160-rc2-gc578c158a368 #1 SMP PREEMPT_DYNAMIC Tue Oct 20 08:16:25 -00 2026 x86_64 AMD Ryzen 9 9950X 16-Core Processor AuthenticAMD GNU/Linux

Hi!

CIP testing did not find any problems here:

https://gitlab.com/cip-project/cip-testing/linux-stable-rc-ci/-/tree/linux-6.6.y

Best regards,
Pavel

Boot-tested under QEMU for Rust x86_64:

Thanks!

Cheers,
Miguel

This rc kernel passes DAMON functionality test [1] on my test machine.

[1] https://github.com/damonitor/damon-tests/tree/next/corr

Thanks,
SJ

[...]

perf build issues are fixed, however we now we get the MIPS kernel to fail building with:

arch/mips/kernel/ftrace.c: In function 'ftrace_dyn_arch_init_insns':
arch/mips/kernel/ftrace.c:62:6: error: implicit declaration of function 'uasm_in_compat_space_p'; did you mean 'uasm_i_dsra_safe'? [-Werror=implicit-function-declaration]

  if (uasm_in_compat_space_p(MCOUNT_ADDR)) {
      ^~~~~~~~~~~~~~~~~~~~~~
      uasm_i_dsra_safe

cc1: some warnings being treated as errors

Florian

Looks like this is missing commit e9f98feb1720 ("mips: unhide uasm_in_compat_space_p() declaration"), so I'll go queue that up now,

thanks.

greg k-h

Am 20.10.2026 um 09:57 schrieb Greg Kroah-Hartman:

Builds, boots and works on my 2-socket Ivy Bridge Xeon E5-2697v2 server. No dmesg oddities or regressions found.

Beste Grüße,
Peter Schneider

Climb the mountain not to plant your flag, but to embrace the challenge,
enjoy the air and behold the view. Climb it so you can see the world,
not so the world can see you.                    -- David McCullough Jr.

OpenPGP:  0xA3828BD796CCE11A8CADE8866E3A92C92C3FF244
Download: https://www.peters-netzplatz.de/download/pschneider1968_pub.asc
https://keys.mailvelope.com/pks/lookup?op=get&[email protected]
https://keys.mailvelope.com/pks/lookup?op=get&[email protected]

Built 6.6.160-rc2 (c578c158a368) and 6.6.159 for x86_64 with BlueZ's doc/tester.config (KASAN, lockdep) and ran the BlueZ CI TestRunner suites on both in QEMU/KVM (emulated controllers, no Bluetooth hardware). Four of rc2's fixes show up as intended:

- "Bluetooth: hci_event: fix simultaneous discovery stuck in FINDING":
mgmt-tester "Start Discovery - Simultaneous Inquiry Late" fails on 6.6.159 (Start Discovery answered Busy) and passes on rc2, 3 of 3.
- "Bluetooth: MGMT: Fix status of pending commands flushed on power off": a vhci reproducer gets Command Status 0x00 for Start Discovery on 6.6.159 and 0x0f (Not Powered) on rc2, 2 of 2.
- "Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete":
mesh-tester "Mesh - Enable 2" hits KASAN stack-out-of-bounds in set_mesh_sync and then a GPF in mgmt_pending_remove on 6.6.159; on rc2 it passes.
- "Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect":
l2cap-tester "L2CAP Ext-Flowctl Client - Defer limit" fails on 6.6.159 and passes on rc2, 3 of 3.

No other case that ran on both kernels passes on one and not on the
other: mgmt-tester (rc2 465 passed, 37 failed, 6 timed out; 6.6.159 464, 38, 6), mesh-, iso-, sco-, rfcomm-, bnep-, smp-, ioctl-, userchan- and 6lowpan-tester, and l2cap-tester up to "L2CAP Ext-Flowctl Server - Accept 2 Close 1", which hangs on both. No kernel warnings, sanitizer or lockdep reports were found on rc2 in these runs.