[PATCH 7.0 000/461] 7.0.11-rc1 review
From: Greg Kroah-Hartman
Date: Thu May 28 2026 - 15:56:38 EST
This is the start of the stable review cycle for the 7.0.11 release.
There are 461 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 30 May 2026 19:45:49 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.0.11-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.0.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 7.0.11-rc1
Armin Wolf <W_Armin@xxxxxx>
platform/x86: uniwill-laptop: Do not enable the charging limit even when forced
Werner Sembach <wse@xxxxxxxxxxxxxxxxxxx>
Documentation: laptops: Update documentation for uniwill laptops
Damien Le Moal <dlemoal@xxxxxxxxxx>
block: avoid use-after-free in disk_free_zone_resources()
Tiezhu Yang <yangtiezhu@xxxxxxxxxxx>
LoongArch: kprobes: Fix handling of fatal unrecoverable recursions
Junyi Liu <moss80199@xxxxxxxxx>
ksmbd: fix durable reconnect error path file lifetime
Keith Busch <kbusch@xxxxxxxxxx>
blk-mq: pop cached request if it is usable
Alexander A. Klimov <grandmaster@xxxxxxxxxxxx>
io_uring/nop: pass all errors to userspace
Wei Fang <wei.fang@xxxxxxx>
net: enetc: fix missing error code when pf->vf_state allocation fails
Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
net: gro: don't merge zcopy skbs
Nikhil P. Rao <nikhil.rao@xxxxxxx>
pds_core: ensure null-termination for firmware version strings
Lorenzo Bianconi <lorenzo@xxxxxxxxxx>
net: airoha: Disable GDM2 forwarding before configuring GDM2 loopback
Weiming Shi <bestswngs@xxxxxxxxx>
tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR
Aditya Garg <gargaditya@xxxxxxxxxxxxxxxxxxx>
net: mana: validate rx_req_idx to prevent out-of-bounds array access
Ratheesh Kannoth <rkannoth@xxxxxxxxxxx>
octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs
Keith Busch <kbusch@xxxxxxxxxx>
nvme-pci: fix dma mapping leak on data setup error
Keith Busch <kbusch@xxxxxxxxxx>
nvme-pci: fix dma_vecs leak on p2p memory
Nimrod Oren <noren@xxxxxxxxxx>
selftests: net: Fix checksums in xdp_native
Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
ASoC: cs-amp-lib: Fix missing dput() after debugfs_lookup()
Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
ASoC: cs-amp-lib: Fix wrong sizeof() in _cs_amp_set_efi_calibration_data()
Shuicheng Lin <shuicheng.lin@xxxxxxxxx>
drm/xe/oa: Fix exec_queue leak on width check in stream open
Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
gpio: aggregator: lock device when calling device_is_bound()
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
gpio: aggregator: remove the software node when deactivating the aggregator
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
gpio: aggregator: stop using dev-sync-probe
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
gpio: aggregator: fix a potential use-after-free
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
gpio: cdev: check if uAPI v2 config attributes are correctly zeroed
Zhi Li <lizhi2@xxxxxxxxxxxxxxxxxx>
net: stmmac: eswin: validate RGMII delay values
Zhi Li <lizhi2@xxxxxxxxxxxxxxxxxx>
net: stmmac: eswin: correct RGMII delay granularity to 20 ps
Zhi Li <lizhi2@xxxxxxxxxxxxxxxxxx>
net: stmmac: eswin: clear TXD and RXD delay registers during initialization
Zhi Li <lizhi2@xxxxxxxxxxxxxxxxxx>
net: stmmac: eswin: fix HSP CSR init ordering after clock enable
Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction
Xingwang Xiang <v3rdant.xiang@xxxxxxxxx>
bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
Rosen Penev <rosenp@xxxxxxxxx>
net: ag71xx: check error for platform_get_irq
David Howells <dhowells@xxxxxxxxxx>
rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg
David Howells <dhowells@xxxxxxxxxx>
crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks
Jakub Kicinski <kuba@xxxxxxxxxx>
net: shaper: rework the VALID marking (again)
Jakub Kicinski <kuba@xxxxxxxxxx>
net: shaper: annotate the data races
Prathamesh Deshpande <prathameshdeshpande7@xxxxxxxxx>
net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA
Gal Pressman <gal@xxxxxxxxxx>
udp: Fix UDP length on last GSO_PARTIAL segment
Alice Mikityanska <alice@xxxxxxxxxxxxx>
udp: gso: Fix handling checksum in __udp_gso_segment
Jiajia Liu <liujiajia@xxxxxxxxxx>
Bluetooth: btmtk: fix urb->setup_packet leak in error paths
Kiran K <kiran.k@xxxxxxxxx>
Bluetooth: btintel_pcie: Fix incorrect MAC access programming
Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_sync: Fix not setting mask for HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE
David Carlier <devnexen@xxxxxxxxx>
tracing: Avoid NULL return from hist_field_name() on truncation
Cunlong Li <shenxiaogll@xxxxxxxxx>
cgroup: rstat: relax NMI guard after switch to try_cmpxchg
Zhang Cen <rollkingzzc@xxxxxxxxx>
ALSA: seq: Serialize UMP output teardown with event_input
Shitalkumar Gandhi <shital.gandhi45@xxxxxxxxx>
wifi: wilc1000: fix dma_buffer leak on bus acquire failure
Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: mac80211: fix multi-link element inheritance
Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: mac80211: fix MLE defragmentation
Alexandru Hossu <hossu.alexandru@xxxxxxxxx>
wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs
Jia Zhu <zhujia.zj@xxxxxxxxxxxxx>
erofs: fix metabuf leak in inode xattr initialization
Utkal Singh <singhutkal015@xxxxxxxxx>
erofs: harden h_shared_count in erofs_init_inode_xattrs()
Gao Xiang <xiang@xxxxxxxxxx>
erofs: fix managed cache race for unaligned extents
Nikhil P. Rao <nikhil.rao@xxxxxxx>
pds_core: fix debugfs_lookup dentry leak and error handling
Nikhil P. Rao <nikhil.rao@xxxxxxx>
pds_core: fix error handling in pdsc_devcmd_wait
Christian Marangi <ansuelsmth@xxxxxxxxx>
net: airoha: Fix NPU RX DMA descriptor bits
Nicolai Buchwitz <nb@xxxxxxxxxxx>
net: phy: honor eee_disabled_modes in phy_advertise_eee_all()
Nicolai Buchwitz <nb@xxxxxxxxxxx>
net: phy: honor eee_disabled_modes in phy_support_eee()
Ido Schimmel <idosch@xxxxxxxxxx>
bridge: mcast: Fix a possible use-after-free when removing a bridge port
Guangshuo Li <lgs201920130244@xxxxxxxxx>
RDMA/rtrs: Fix use-after-free in path file creation cleanup
Shiraz Saleem <shirazsaleem@xxxxxxxxxxxxx>
RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port
Timur Kristóf <timur.kristof@xxxxxxxxx>
drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets
Timur Kristóf <timur.kristof@xxxxxxxxx>
drm/amdgpu/vce1: Check that the GPU address is < 128 MiB
Timur Kristóf <timur.kristof@xxxxxxxxx>
drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2)
Robertus Diawan Chris <robertusdchris@xxxxxxxxx>
ASoC: soc-utils: Add missing va_end in snd_soc_ret()
Ahmed Yaseen <yaseen@xxxxxxxxx>
platform/x86: asus-armoury: fix mini-LED mode get/set on MODE2 devices
Armin Wolf <W_Armin@xxxxxx>
platform/x86: uniwill-laptop: Fix behavior of "force" module param
Armin Wolf <W_Armin@xxxxxx>
platform/x86: uniwill-laptop: Accept charging threshold of 0
Armin Wolf <W_Armin@xxxxxx>
platform/x86: uniwill-laptop: Properly initialize charging threshold
Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL
Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
platform/x86: intel_sar: Check ACPI_HANDLE() against NULL
Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
platform/x86: intel-hid: Check ACPI_HANDLE() against NULL
Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
platform/x86: hp_accel: Check ACPI_COMPANION() against NULL
Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL
Oliver White <oliverjwhite07@xxxxxxxxx>
platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7
Erni Sri Satya Vennela <ernis@xxxxxxxxxxxxxxxxxxx>
net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
Daniel Golle <daniel@xxxxxxxxxxxxxx>
net: dsa: mt7530: preserve VLAN tags on trapped link-local frames
Daniel Golle <daniel@xxxxxxxxxxxxxx>
net: dsa: mt7530: fix FDB entries not aging out with short timeout
Viktor Jägersküpper <viktor_jaegerskuepper@xxxxxxxxxx>
kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme
Xiangxu Yin <xiangxu.yin@xxxxxxxxxxxxxxxx>
phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config
Ankit Nautiyal <ankit.k.nautiyal@xxxxxxxxx>
drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP
Kohei Enju <kohei@xxxxxxxx>
igc: set tx buffer type for SMD frames
Grzegorz Nitka <grzegorz.nitka@xxxxxxxxx>
ice: ptp: use primary NAC semaphore on E825
Grzegorz Nitka <grzegorz.nitka@xxxxxxxxx>
ice: ptp: serialize E825 PHY timer start with PTP lock
David Howells <dhowells@xxxxxxxxxx>
cifs: Fix undefined variables
Dragos Tatulea <dtatulea@xxxxxxxxxx>
net/mlx5e: xsk: Fix unlocked writing to ICOSQ
Qing Ming <a0yami@xxxxxxxxxxx>
cgroup/rstat: validate cpu before css_rstat_cpu() access
Paul E. McKenney <paulmck@xxxxxxxxxx>
srcu: Don't queue workqueue handlers to never-online CPUs
Michael Bommarito <michael.bommarito@xxxxxxxxx>
io_uring: propagate array_index_nospec opcode into req->opcode
Louis-Alexis Eyraud <louisalexis.eyraud@xxxxxxxxxxxxx>
drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable
Louis-Alexis Eyraud <louisalexis.eyraud@xxxxxxxxxxxxx>
drm/mediatek: mtk_cec: Fix non-static global variable
Louis-Alexis Eyraud <louisalexis.eyraud@xxxxxxxxxxxxx>
drm/mediatek: mtk_hdmi_v2: Fix non-static global variable
Louis-Alexis Eyraud <louisalexis.eyraud@xxxxxxxxxxxxx>
drm/mediatek: mtk_hdmi_ddc_v2: Fix non-static global variable
Baochen Qiang <baochen.qiang@xxxxxxxxxxxxxxxx>
wifi: ath12k: fix EHT TX MCS limitation due to wrong 20 MHz-only parsing
Matthew Leach <matthew.leach@xxxxxxxxxxxxx>
wifi: ath11k: fix peer resolution on rx path when peer_id=0
Gustavo Sousa <gustavo.sousa@xxxxxxxxx>
drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4
Matt Roper <matthew.d.roper@xxxxxxxxx>
drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p
Gustavo Sousa <gustavo.sousa@xxxxxxxxx>
drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1
Matt Roper <matthew.d.roper@xxxxxxxxx>
drm/xe: Consolidate workaround entries for Wa_18033852989
Matt Roper <matthew.d.roper@xxxxxxxxx>
drm/xe: Consolidate workaround entries for Wa_14019988906
Mohanram Meenakshisundaram <mohanram.meenakshisundaram@xxxxxxxxx>
drm/xe/pf: Fix CFI failure in debugfs access
Michal Wajdeczko <michal.wajdeczko@xxxxxxxxx>
drm/xe/vf: Fix signature of print functions
Shuicheng Lin <shuicheng.lin@xxxxxxxxx>
drm/xe/gsc: Fix double-free of managed BO in error path
Boris Brezillon <boris.brezillon@xxxxxxxxxxxxx>
drm/gem: Make the GEM LRU lock part of drm_device
Jianpeng Chang <jianpeng.chang.cn@xxxxxxxxxxxxx>
dma-mapping: move dma_map_resource() sanity check into debug code
Miri Korenblit <miriam.rachel.korenblit@xxxxxxxxx>
wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it
Cole Leavitt <cole@xxxxxxxxx>
wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled
Guenter Roeck <linux@xxxxxxxxxxxx>
hwmon: (lm90) Add lock protection to lm90_alert
Guenter Roeck <linux@xxxxxxxxxxxx>
hwmon: (lm90) Stop work before releasing hwmon device
Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxxxxxxxx>
drm/msm/snapshot: fix dumping of the unaligned regions
Eric Naim <dnaim@xxxxxxxxxxx>
ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5
Florian Westphal <fw@xxxxxxxxx>
netfilter: nft_inner: release local_lock before re-enabling softirqs
Felix Gu <ustc.gu@xxxxxxxxx>
spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()
Cássio Gabriel <cassiogabrielcontato@xxxxxxxxx>
ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging
Boris Burkov <boris@xxxxxx>
btrfs: fix squota accounting during enable generation
Boris Burkov <boris@xxxxxx>
btrfs: check for subvolume before deleting squota qgroup
Stefano Garzarella <sgarzare@xxxxxxxxxx>
vsock/virtio: fix zerocopy completion for multi-skb sends
Jens Axboe <axboe@xxxxxxxxx>
io_uring/net: punt IORING_OP_BIND async if it needs file create
Hongling Zeng <zenghongling@xxxxxxxxxx>
cachefiles: Fix error return when vfs_mkdir() fails
Matt DeVillier <matt.devillier@xxxxxxxxx>
ALSA: hda/ca0132: Disable auto-detect on manual output select
Robertus Diawan Chris <robertusdchris@xxxxxxxxx>
ALSA: scarlett2: Add missing error check when initialise Autogain Status
Jason Gunthorpe <jgg@xxxxxxxx>
iommupt: Fix the end_index calculation in __map_range_leaf()
Jason Gunthorpe <jgg@xxxxxxxx>
iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap
Jason Gunthorpe <jgg@xxxxxxxx>
iommu: Handle unmap error when iommu_debug is enabled
Jason Gunthorpe <jgg@xxxxxxxx>
iommu: Fix up map/unmap debugging for iommupt domains
Jason Gunthorpe <jgg@xxxxxxxx>
iommu: Fix loss of errno on map failure for classic ops
Jason Gunthorpe <jgg@xxxxxxxx>
iommupt: Avoid rewalking during map
Jason Gunthorpe <jgg@xxxxxxxx>
iommupt: Directly call iommupt's unmap_range()
Alexander A. Klimov <grandmaster@xxxxxxxxxxxx>
ASoC: codecs: fs210x: fix possible buffer overflow
Mike Christie <michael.christie@xxxxxxxxxx>
scsi: sd: Fix return code handling in sd_spinup_disk()
Or Har-Toov <ohartoov@xxxxxxxxxx>
net/mlx5: Skip disabled vports when setting max TX speed
Jeroen Massar <jmassar@xxxxxxxxxx>
net/mlx5: Do not restore destination-less TC rules
Chuck Lever <chuck.lever@xxxxxxxxxx>
tls: Preserve sk_err across recvmsg() when data has been copied
Ralf Lici <ralf@xxxxxxxxxxxxx>
ovpn: disable BHs when updating device stats
Matt Evans <mattev@xxxxxxxx>
vfio/pci: Check BAR resources before exporting a DMABUF
Juergen Gross <jgross@xxxxxxxx>
x86/xen: Fix xen_e820_swap_entry_with_ram()
Kees Cook <kees@xxxxxxxxxx>
gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE
David Carlier <devnexen@xxxxxxxxx>
phy: apple: atc: Fix typec switch/mux leak on unbind
DaeMyung Kang <charsyam@xxxxxxxxx>
cifs: client: stage smb3_reconfigure() updates and restore ctx on failure
Antonio Quartulli <antonio@xxxxxxxxxxx>
ovpn: fix race between deleting interface and adding new peer
David Carlier <devnexen@xxxxxxxxx>
ovpn: respect peer refcount in CMD_NEW_PEER error path
David Carlier <devnexen@xxxxxxxxx>
ovpn: tcp - use cached peer pointer in ovpn_tcp_close()
Sven Schuchmann <schuchmann@xxxxxxxxxxxxxxxxx>
net: phy: DP83TC811: add reading of abilities
Jakub Kicinski <kuba@xxxxxxxxxx>
net: tls: prevent chain-after-chain in plain text SG
Jakub Kicinski <kuba@xxxxxxxxxx>
net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring
Xiang Mei <xmei5@xxxxxxx>
net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot
Sayali Patil <sayalip@xxxxxxxxxxxxx>
powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()
Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
riscv: Docs: fix unmatched quote warning
Cássio Gabriel <cassiogabrielcontato@xxxxxxxxx>
ASoC: sdw_utils: Check speaker component string allocation
Maciej Strozek <mstrozek@xxxxxxxxxxxxxxxxxxxxx>
ASoC: sdw_utils: cs42l43: allow spk component names to be combined
Maciej Strozek <mstrozek@xxxxxxxxxxxxxxxxxxxxx>
ASoC: intel: sof_sdw: Prepare for configuration without a jack
Chen Ni <nichen@xxxxxxxxxxx>
drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table
Mikko Perttunen <mperttunen@xxxxxxxxxx>
drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN
Rob Clark <robin.clark@xxxxxxxxxxxxxxxx>
drm/msm/a6xx: Restore sysprof_active
Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxxxxxxxx>
drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx
Felix Gu <ustc.gu@xxxxxxxxx>
drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()
Akhil P Oommen <akhilpo@xxxxxxxxxxxxxxxx>
drm/msm/a6xx: Add soft fuse detection support
Alexander Koskovich <akoskovich@xxxxx>
drm/msm: Fix GMEM_BASE for A650
Ricardo Neri <ricardo.neri-calderon@xxxxxxxxxxxxxxx>
Documentation: intel_pstate: Fix description of asymmetric packing with SMT
Borislav Petkov (AMD) <bp@xxxxxxxxx>
x86/mce: Restore MCA polling interval halving
Ming Lei <tom.leiming@xxxxxxxxx>
selftests: ublk: cap nthreads to kernel's actual nr_hw_queues
Damien Le Moal <dlemoal@xxxxxxxxxx>
block: fix handling of dead zone write plugs
Damien Le Moal <dlemoal@xxxxxxxxxx>
block: allow submitting all zone writes from a single context
Damien Le Moal <dlemoal@xxxxxxxxxx>
block: rename struct gendisk zone_wplugs_lock field
Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxxxxxxxx>
drm/msm/dpu: don't mix devm and drmm functions
Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxxxxxxxx>
drm/msm/dsi: don't dump registers past the mapped region
Mahadevan P <mahadevan.p@xxxxxxxxxxxxxxxx>
drm/msm/dpu: Fix Kaanapali CWB register configuration
Neil Armstrong <neil.armstrong@xxxxxxxxxx>
drm/msm/dpu: fix UV scanlines calculation for YUV UBWC formats
Chenguang Zhao <zhaochenguang@xxxxxxxxxx>
ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics
Xiang Mei <xmei5@xxxxxxx>
net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint
Zack McKevitt <zachary.mckevitt@xxxxxxxxxxxxxxxx>
accel/qaic: Add overflow check to remap_pfn_range during mmap
Sungwoo Kim <iam@xxxxxxxxxxxx>
block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()
Lukas Bulwahn <lukas.bulwahn@xxxxxxxxxx>
HID: quirks: really enable the intended work around for appledisplay
Casey Chen <cachen@xxxxxxxxxxxxxxx>
block: recompute nr_integrity_segments in blk_insert_cloned_request
David Carlier <devnexen@xxxxxxxxx>
block: don't overwrite bip_vcnt in bio_integrity_copy_user()
Jakub Kicinski <kuba@xxxxxxxxxx>
net: shaper: reject QUEUE scope handle with missing id
Jakub Kicinski <kuba@xxxxxxxxxx>
net: shaper: enforce singleton NETDEV scope with id 0
Jakub Kicinski <kuba@xxxxxxxxxx>
net: shaper: reject handle IDs exceeding internal bit-width
Jakub Kicinski <kuba@xxxxxxxxxx>
net: shaper: fix undersized reply skb allocation in GROUP command
Jakub Kicinski <kuba@xxxxxxxxxx>
net: shaper: set ret to -ENOMEM when genlmsg_new() fails in group_doit
Jakub Kicinski <kuba@xxxxxxxxxx>
net: shaper: reject duplicate leaves in GROUP request
Jakub Kicinski <kuba@xxxxxxxxxx>
net: shaper: fix trivial ordering issue in net_shaper_commit()
Jakub Kicinski <kuba@xxxxxxxxxx>
net: shaper: flip the polarity of the valid flag
Kang Yang <kang.yang@xxxxxxxxxxxxxxxx>
wifi: ath10k: skip WMI and beacon transmission when device is wedged
Nicolas Escande <nico.escande@xxxxxxxxx>
wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()
Nicolas Escande <nico.escande@xxxxxxxxx>
wifi: ath11k: fix error path leaks in some WMI WOW calls
Ethan Nelson-Moore <enelsonmoore@xxxxxxxxx>
net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference
Linus Walleij <linusw@xxxxxxxxxx>
net: ethernet: cortina: Carry over frag counter
Andreas Haarmann-Thiemann <eitschman@xxxxxxxxxxxxx>
net: ethernet: cortina: Drop half-assembled SKB
Linus Walleij <linusw@xxxxxxxxxx>
net: ethernet: cortina: Make RX SKB per-port
David Howells <dhowells@xxxxxxxxxx>
afs: Fix the locking used by afs_get_link()
David Howells <dhowells@xxxxxxxxxx>
netfs, afs: Fix write skipping in dir/link writepages
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix netfs_read_folio() to wait on writeback
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix folio->private handling in netfs_perform_write()
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix partial invalidation of streaming-write folio
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix leak of request in netfs_write_begin() error handling
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix early put of sink folio in netfs_read_gaps()
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix write streaming disablement if fd open O_RDWR
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix read-gaps to remove netfs_folio from filled folio
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix potential deadlock in write-through mode
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix streaming write being overwritten
David Howells <dhowells@xxxxxxxxxx>
netfs: Defer the emission of trace_netfs_folio()
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix overrun check in netfs_extract_user_iter()
Viacheslav Dubeyko <Slava.Dubeyko@xxxxxxx>
netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix zeropoint update where i_size > remote_i_size
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix potential for tearing in ->remote_i_size and ->zero_point
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix netfs_read_to_pagecache() to pause on subreq failure
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix missing barriers when accessing stream->subrequests locklessly
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix missing locking around retry adding new subreqs
David Howells <dhowells@xxxxxxxxxx>
netfs: Fix cancellation of a DIO and single read subrequests
Aboorva Devarajan <aboorvad@xxxxxxxxxxxxx>
powerpc/hv-gpci: fix preempt count leak in sysfs show paths
Julian Braha <julianbraha@xxxxxxxxx>
powerpc: fix dead default for GUEST_STATE_BUFFER_TEST
Ally Heev <allyheev@xxxxxxxxx>
powerpc: 82xx: fix uninitialized pointers with free attribute
Mario Limonciello <mario.limonciello@xxxxxxx>
ASoC: SOF: amd: Fix error code handling in psp_send_cmd()
Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().
Johannes Thumshirn <johannes.thumshirn@xxxxxxx>
zonefs: handle integer overflow in zonefs_fname_to_fno
Chia-Lin Kao (AceLan) <acelan.kao@xxxxxxxxxxxxx>
nvme-pci: fix use-after-free in nvme_free_host_mem()
Keith Busch <kbusch@xxxxxxxxxx>
nvme: fix bio leak on mapping failure
Jiayuan Chen <jiayuan.chen@xxxxxxxxx>
irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT
Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
nsfs: fix wrong error code returned for pidns ioctls
Ming Lei <tom.leiming@xxxxxxxxx>
ublk: reject max_sectors smaller than PAGE_SECTORS in parameter validation
Pankaj Raghav <p.raghav@xxxxxxxxxxx>
fs: fix forced iversion increment on lazytime timestamp updates
Rosen Penev <rosenp@xxxxxxxxx>
irqchip/ath79-cpu: Remove unused function
Hongling Zeng <zenghongling@xxxxxxxxxx>
fs: Fix return in jfs_mkdir and orangefs_mkdir
Junyoung Jang <graypanda.inzag@xxxxxxxxx>
fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap
Masami Hiramatsu (Google) <mhiramat@xxxxxxxxxx>
fprobe: Fix unregister_fprobe() to wait for RCU grace period
Mac Chiang <mac.chiang@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx>
ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC
Mac Chiang <mac.chiang@xxxxxxxxx>
ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC
Chuck Lever <chuck.lever@xxxxxxxxxx>
NFSD: Fix infinite loop in layout state revocation
Felix Gu <ustc.gu@xxxxxxxxx>
phy: spacemit: Remove incorrect clk_disable() in spacemit_usb2phy_init()
Gabor Juhos <j4g8y7@xxxxxxxxx>
phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access
Shitalkumar Gandhi <shital.gandhi45@xxxxxxxxx>
net: ti: icssm-prueth: fix eth_ports_node leak in probe
Myeonghun Pak <mhun512@xxxxxxxxx>
net: lan966x: avoid unregistering netdev on register failure
Ivan Vecera <ivecera@xxxxxxxxxx>
ice: dpll: fix misplaced header macros
Ivan Vecera <ivecera@xxxxxxxxxx>
ice: dpll: fix rclk pin state get for E810
Bart Van Assche <bvanassche@xxxxxxx>
ice: fix locking in ice_dcb_rebuild()
Marcin Szycik <marcin.szycik@xxxxxxxxxxxxxxx>
ice: fix setting RSS VSI hash for E830
Emil Tantilov <emil.s.tantilov@xxxxxxxxx>
idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()
Mohsin Bashir <hmohsin@xxxxxxxx>
net: shaper: Reject reparenting of existing nodes
Dragos Tatulea <dtatulea@xxxxxxxxxx>
net: napi: Avoid gro timer misfiring at end of busypoll
Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
tcp: Fix imbalanced icsk_accept_queue count.
Martin Kaiser <martin@xxxxxxxxx>
test_kprobes: clear kprobes between test runs
Jianpeng Chang <jianpeng.chang.cn@xxxxxxxxxxxxx>
kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist()
Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nf_conntrack_expect: restore helper propagation via expectation
Florian Westphal <fw@xxxxxxxxx>
netfilter: bridge: eb_tables: close module init race
Florian Westphal <fw@xxxxxxxxx>
netfilter: x_tables: close dangling table module init race
Florian Westphal <fw@xxxxxxxxx>
netfilter: ebtables: close dangling table module init race
Florian Westphal <fw@xxxxxxxxx>
netfilter: ebtables: move to two-stage removal scheme
Florian Westphal <fw@xxxxxxxxx>
netfilter: x_tables: add and use xtables_unregister_table_exit
Florian Westphal <fw@xxxxxxxxx>
netfilter: x_tables: add and use xt_unregister_table_pre_exit
Florian Westphal <fw@xxxxxxxxx>
netfilter: x_tables: unregister the templates first
Florian Westphal <fw@xxxxxxxxx>
netfilter: x_tables: allocate hook ops while under mutex
Florian Westphal <fw@xxxxxxxxx>
netfilter: x_tables: allow initial table replace without emitting audit log message
Filipe Manana <fdmanana@xxxxxxxx>
btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()
Shuhao Fu <sfual@xxxxxxxxxx>
ALSA: hda: cs35l41: Put ACPI device on missing physical node
Shuhao Fu <sfual@xxxxxxxxxx>
ALSA: hda: cs35l56: Put ACPI device after setting companion
Guenter Roeck <linux@xxxxxxxxxxxx>
ARM: integrator: Fix early initialization
Sudeep Holla <sudeep.holla@xxxxxxxxxx>
firmware: arm_ffa: Fix sched-recv callback partition lookup
Sudeep Holla <sudeep.holla@xxxxxxxxxx>
firmware: arm_ffa: Snapshot notifier callbacks under lock
Sudeep Holla <sudeep.holla@xxxxxxxxxx>
firmware: arm_ffa: Align RxTx buffer size before mapping
Sudeep Holla <sudeep.holla@xxxxxxxxxx>
firmware: arm_ffa: Validate framework notification message layout
Sudeep Holla <sudeep.holla@xxxxxxxxxx>
firmware: arm_ffa: Keep framework RX release under lock
Sudeep Holla <sudeep.holla@xxxxxxxxxx>
firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies
Maulik Shah <maulik.shah@xxxxxxxxxxxxxxxx>
pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150
David Gow <david@xxxxxxxxxxxx>
kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS
David Gow <david@xxxxxxxxxxxx>
kunit: config: Enable KUNIT_DEBUGFS by default
Guo Ren (Alibaba DAMO Academy) <guoren@xxxxxxxxxx>
riscv: mm: Fixup no5lvl failure when vaddr is invalid
Michael Neuling <mikey@xxxxxxxxxxx>
riscv: Fix register corruption from uninitialized cregs on error
Michael Neuling <mikey@xxxxxxxxxxx>
riscv: errata: Fix bitwise vs logical AND in MIPS errata patching
Sudeep Holla <sudeep.holla@xxxxxxxxxx>
firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0
Sudeep Holla <sudeep.holla@xxxxxxxxxx>
firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue
Sudeep Holla <sudeep.holla@xxxxxxxxxx>
firmware: arm_ffa: Skip free_pages on RX buffer alloc failure
Sudeep Holla <sudeep.holla@xxxxxxxxxx>
firmware: arm_ffa: Check for NULL FF-A ID table while driver registration
Takashi Iwai <tiwai@xxxxxxx>
HID: uclogic: Fix regression of input name assignment
Dan Carpenter <error27@xxxxxxxxx>
HID: intel-thc-hid: Intel-quickspi: Fix some error codes
David Carlier <devnexen@xxxxxxxxx>
mm/memfd_luo: report error when restoring a folio fails mid-loop
Evangelos Petrongonas <epetron@xxxxxxxxx>
kho: skip KHO for crash kernel
Maulik Shah <maulik.shah@xxxxxxxxxxxxxxxx>
pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615
Xianwei Zhao <xianwei.zhao@xxxxxxxxxxx>
pinctrl: meson: amlogic-a4: fix deadlock issue
Lad Prabhakar <prabhakar.mahadev-lad.rj@xxxxxxxxxxxxxx>
pinctrl: renesas: rzg2l: Fix SMT register cache handling
Biju Das <biju.das.jz@xxxxxxxxxxxxxx>
pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for high pins during suspend/resume
Marek Vasut <marek.vasut+renesas@xxxxxxxxxxx>
ARM: dts: renesas: rskrza1: Drop superfluous cells
Marek Vasut <marek.vasut+renesas@xxxxxxxxxxx>
ARM: dts: renesas: genmai: Drop superfluous cells
Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
arm64: dts: renesas: r8a78000: Fix SCIF brg_int clocks
Til Kaiser <mail@xxxxxxxx>
pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
pinctrl: mediatek: moore: implement gpio_chip::get_direction()
Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors
Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe()
Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe()
Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple
Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR
Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer
Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer
Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) reject implausible blackbox record_count
Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) seed timestamp from the real-time clock
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tt: prevent TVLV entry number overflow
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tt: fix negative tt_buff_len
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tt: fix negative last_changeset_len
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tt: avoid empty VLAN responses
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tt: reject oversized local TVLV buffers
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tt: fix TOCTOU race for reported vlans
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tp_meter: avoid role confusion in tp_list
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tp_meter: fix race condition in send error reporting
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tp_meter: directly shut down timer on cleanup
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tp_meter: avoid use of uninit sender vars
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: bla: avoid double decrement of bla.num_requests
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: bla: fix report_work leak on backbone_gw purge
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: frag: disallow unicast fragment in fragment
Luxiao Xu <rakukuip@xxxxxxxxx>
batman-adv: fix tp_meter counter underflow during shutdown
Ruide Cao <caoruide123@xxxxxxxxx>
batman-adv: fix fragment reassembly length accounting
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: dat: handle forward allocation error
Ruijie Li <ruijieli51@xxxxxxxxx>
batman-adv: clear current gateway during teardown
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: mcast: fix use-after-free in orig_node RCU release
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: iv: recover OGM scheduling after forward packet error
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tvlv: reject oversized TVLV packets
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tvlv: abort OGM send on tvlv append failure
Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: v: stop OGMv2 on disabled interface
Harry Wentland <harry.wentland@xxxxxxx>
drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async
Harry Wentland <harry.wentland@xxxxxxx>
drm/amd/display: Validate GPIO pin LUT table size before iterating
Harry Wentland <harry.wentland@xxxxxxx>
drm/amd/display: Fix integer overflow in bios_get_image()
Osama Abdelkader <osama.abdelkader@xxxxxxxxx>
drm/bridge: megachips: remove bridge when irq request fails
Julien Chauveau <chauveau.julien@xxxxxxxxx>
drm/bridge: it66121: acquire reset GPIO in probe
Alan Liu <haoping.liu@xxxxxxx>
drm/amdgpu/vpe: Force collaborate sync after TRAP
Niranjana Vishwanathapura <niranjana.vishwanathapura@xxxxxxxxx>
drm/xe/multi_queue: Fix secondary queue error case
Deepanshu Kartikey <kartikey406@xxxxxxxxx>
drm/virtio: use uninterruptible resv lock for plane updates
Maíra Canal <mcanal@xxxxxxxxxx>
drm/v3d: Release indirect CSD GEM reference on CPU job free
Maíra Canal <mcanal@xxxxxxxxxx>
drm/v3d: Fix use-after-free of CPU job query arrays on error path
Daniel J Blueman <daniel@xxxxxxxxx>
drm/msm: Fix shrinker deadlock
Chaitanya Kumar Borah <chaitanya.kumar.borah@xxxxxxxxx>
drm/i915/display: Copy color pipeline from plane in the primary joiner pipe
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
device property: set fwnode->secondary to NULL in fwnode_init()
Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E
Huacai Chen <chenhuacai@xxxxxxxxxx>
LoongArch: Remove unused code to avoid build warning
Tiezhu Yang <yangtiezhu@xxxxxxxxxxx>
LoongArch: kprobes: Use larch_insn_text_copy() to patch instructions
Heechan Kang <gganji11@xxxxxxxxx>
fwctl: pds: Validate RPC input size before parsing
Thomas Richter <tmricht@xxxxxxxxxxxxx>
s390/pai: Fix missing PAI counter increments under heavy load
Thomas Richter <tmricht@xxxxxxxxxxxxx>
s390/pai: Disable duplicate read of kernel PAI counter value
Peter Oberparleiter <oberpar@xxxxxxxxxxxxx>
s390/cio: Restore GFP_DMA for CHSC allocation
Michael Bommarito <michael.bommarito@xxxxxxxxx>
RDMA/siw: Reject MPA FPDU length underflow before signed receive math
Qing Wang <wangqing7171@xxxxxxxxx>
mm/slub: hold cpus_read_lock around flush_rcu_sheaves_on_cache()
Johan Hovold <johan@xxxxxxxxxx>
spi: ti-qspi: fix use-after-free after DMA setup failure
Johan Hovold <johan@xxxxxxxxxx>
spi: sprd: fix error pointer deref after DMA setup failure
Johan Hovold <johan@xxxxxxxxxx>
spi: ep93xx: fix error pointer deref after DMA setup failure
Michael Bommarito <michael.bommarito@xxxxxxxxx>
scsi: isci: Fix use-after-free in device removal path
Yongxing Mou <yongxing.mou@xxxxxxxxxxxxxxxx>
phy: qcom: edp: Fix AUX_CFG8 programming for DP mode
Yongxing Mou <yongxing.mou@xxxxxxxxxxxxxxxx>
phy: qcom: edp: Add eDP/DP mode switch support
Yongxing Mou <yongxing.mou@xxxxxxxxxxxxxxxx>
phy: qcom: edp: Unify generic DP/eDP swing and pre-emphasis tables
Nitin Rawat <nitin.rawat@xxxxxxxxxxxxxxxx>
phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after SM8650 G4 fix
Wayne Chang <waynec@xxxxxxxxxx>
phy: tegra: xusb: Fix per-pad high-speed termination calibration
Łukasz Lebiedziński <kernel@xxxxxxxxx>
phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for Exynos7870
Johan Hovold <johan@xxxxxxxxxx>
spi: qup: fix error pointer deref after DMA setup failure
Osama Abdelkader <osama.abdelkader@xxxxxxxxx>
drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe
Saurav Sachidanand <sauravsc@xxxxxxxxxx>
i2c: tegra: fix pm_runtime leak on mutex_lock failure
Carlos López <clopez@xxxxxxx>
virt: sev-guest: Explicitly leak pages in unknown state
Osama Abdelkader <osama.abdelkader@xxxxxxxxx>
riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when OOM
Osama Abdelkader <osama.abdelkader@xxxxxxxxx>
riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM
Tina Zhang <zhang_wei@xxxxxxxxxxxxxx>
KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)
Michael Bommarito <michael.bommarito@xxxxxxxxx>
KVM: arm64: vgic: Free private_irqs when init fails after allocation
Michael Bommarito <michael.bommarito@xxxxxxxxx>
KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits
Vladimir Murzin <vladimir.murzin@xxxxxxx>
arm64: probes: Handle probes on hinted conditional branch instructions
Jeongjun Park <aha310510@xxxxxxxxx>
ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put()
Masami Hiramatsu (Google) <mhiramat@xxxxxxxxxx>
tracing: Do not call map->ops->elt_free() if elt_alloc() fails
Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
cifs: Fix busy dentry used after unmounting
Dawei Feng <dawei.feng@xxxxxxxxxx>
octeontx2-pf: avoid double free of pool->stack on AQ init failure
Michael Bommarito <michael.bommarito@xxxxxxxxx>
wifi: mac80211: consume only present negotiated TTLM maps
Jann Horn <jannh@xxxxxxxxxx>
af_unix: Fix UAF read of tail->len in unix_stream_data_wait()
John Walker <johnwalker0@xxxxxxxxx>
wifi: cfg80211: advance loop vars in cfg80211_merge_profile()
Grzegorz Nitka <grzegorz.nitka@xxxxxxxxx>
ice: restore PTP Rx timestamp config after ethtool set-channels
Marcin Szycik <marcin.szycik@xxxxxxxxx>
ice: fix setting promisc mode while adding VID filter
Jacob Keller <jacob.e.keller@xxxxxxxxx>
ice: fix locking around wait_event_interruptible_locked_irq
Kohei Enju <kohei@xxxxxxxx>
igc: fix potential skb leak in igc_fpe_xmit_smd_frame()
Dawei Feng <dawei.feng@xxxxxxxxxx>
octeontx2-pf: fix double free in rvu_rep_rsrc_init()
Sam Daly <sam@xxxxxxxxxx>
octeontx2-af: CGX: add bounds check to cgx_speed_mbps index
Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
lsm: hold cred_guard_mutex for lsm_set_self_attr()
Paolo Abeni <pabeni@xxxxxxxxxx>
mptcp: reset rcv wnd on disconnect
Shardul Bankar <shardul.b@xxxxxxxxxxxxxxxxxx>
mptcp: do not drop partial packets
Ilya Dryomov <idryomov@xxxxxxxxx>
rbd: eliminate a race in lock_dwork draining on unmap
Michael Bommarito <michael.bommarito@xxxxxxxxx>
ixgbevf: fix use-after-free in VEPA multicast source pruning
Michael Bommarito <michael.bommarito@xxxxxxxxx>
ipv4: raw: reject IP_HDRINCL packets with ihl < 5
Sheroz Juraev <goodmartiandev@xxxxxxxxx>
wifi: iwlwifi: mld: stop TX during firmware restart
Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: iwlwifi: mvm: fix driver-set TX rates on old devices
Kyle Farnung <kfarnung@xxxxxxxxx>
wifi: ath11k: clear shared SRNG pointer state on restart
Jose Ignacio Tornos Martinez <jtornosm@xxxxxxxxxx>
ice: fix VF queue configuration with low MTU values
Stefano Garzarella <sgarzare@xxxxxxxxxx>
vsock/virtio: reset connection on receiving queue overflow
Minh Nguyen <minhnguyen.080505@xxxxxxxxx>
vsock/vmci: fix UAF when peer resets connection during handshake
Li Xiasong <lixiasong1@xxxxxxxxxx>
mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient
Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
selftests: mptcp: drop nanoseconds width specifier
Justin Iurman <justin.iurman@xxxxxxxxx>
ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()
Zhao Li <enderaoelyther@xxxxxxxxx>
wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb
Masami Hiramatsu (Google) <mhiramat@xxxxxxxxxx>
ring-buffer: Flush and stop persistent ring buffer on panic
Steven Rostedt <rostedt@xxxxxxxxxxx>
ring-buffer: Fix reporting of missed events in iterator
Dawei Feng <dawei.feng@xxxxxxxxxx>
qed: fix double free in qed_cxt_tables_alloc()
Michael Bommarito <michael.bommarito@xxxxxxxxx>
l2tp: use list_del_rcu in l2tp_session_unhash
Tejun Heo <tj@xxxxxxxxxx>
sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path
Samuele Mariotti <smariotti@xxxxxxxxxxx>
sched_ext: Fix missing warning in scx_set_task_state() default case
Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
ACPI: driver: Check ACPI_COMPANION() against NULL during probe
David Carlier <devnexen@xxxxxxxxx>
net: ethtool: phy: avoid NULL deref when PHY driver is unbound
Quan Sun <2022090917019@xxxxxxxxxxxxxxxx>
net: ethtool: fix NULL pointer dereference in phy_reply_size
Yizhou Zhao <zhaoyz24@xxxxxxxxxxxxxxxxxxxxx>
netfilter: nft_inner: Fix IPv6 inner_thoff desync
Nan Li <tonanli66@xxxxxxxxx>
netfilter: ipset: stop hash:* range iteration at end
Haoze Xie <royenheart@xxxxxxxxx>
netfilter: nf_queue: hold bridge skb->dev while queued
Zhengchuan Liang <zcliangcn@xxxxxxxxx>
netfilter: ip6t_hbh: reject oversized option lists
Jonas Jelonek <jelonek.jonas@xxxxxxxxx>
net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis()
Michael Bommarito <michael.bommarito@xxxxxxxxx>
net: ifb: report ethtool stats over num_tx_queues
Matt Fleming <mfleming@xxxxxxxxxxxxxx>
net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover
Michael Bommarito <michael.bommarito@xxxxxxxxx>
net: hsr: defer node table free until after RCU readers
Nerijus Bendžiūnas <nerijus.bendziunas@xxxxxxxxx>
net: phy: skip EEE advertisement write when autoneg is disabled
David Carlier <devnexen@xxxxxxxxx>
net: devmem: reject dma-buf bind with non-page-aligned size or SG length
Nicolai Buchwitz <nb@xxxxxxxxxxx>
net: bcmgenet: keep RBUF EEE/PM disabled
Zijing Yin <yzjaurora@xxxxxxxxx>
phonet/pep: disable BH around forwarded sk_receive_skb()
Jiexun Wang <wangjiexun2025@xxxxxxxxx>
Bluetooth: serialize accept_q access
Michael Bommarito <michael.bommarito@xxxxxxxxx>
Bluetooth: MGMT: validate Add Extended Advertising Data length
Shuai Zhang <shuai.zhang@xxxxxxxxxxxxxxxx>
Bluetooth: hci_qca: Convert timeout from jiffies to ms
Michael Bommarito <michael.bommarito@xxxxxxxxx>
Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer
Mingyu Wang <25181214217@xxxxxxxxxxxxxxxxx>
Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths
Jann Horn <jannh@xxxxxxxxxx>
Bluetooth: bnep: Fix UAF read of dev->name
David Carlier <devnexen@xxxxxxxxx>
Bluetooth: ISO: drop ISO_END frames received without prior ISO_START
Safa Karakuş <safa.karakus@xxxxxxxxxxxx>
Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()
Abdun Nihaal <nihaal@xxxxxxxxxxxxxx>
net: wwan: iosm: fix potential memory leaks in ipc_imem_init()
SeongJae Park <sj@xxxxxxxxxx>
mm/damon: fix damos_stat tracepoint format for sz_applied
Luiz Capitulino <luizcap@xxxxxxxxxx>
selftests/mm: run_vmtests.sh: fix destructive tests invocation
Sunny Patel <nueralspacetech@xxxxxxxxx>
mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page
David Hildenbrand (Arm) <david@xxxxxxxxxx>
mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free
Muchun Song <muchun.song@xxxxxxxxx>
mm/memory_hotplug: fix memory block reference leak on remove
David Hildenbrand (Arm) <david@xxxxxxxxxx>
mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special()
Alistair Popple <apopple@xxxxxxxxxx>
mm/memory: fix spurious warning when unmapping device-private/exclusive pages
Justin Iurman <justin.iurman@xxxxxxxxx>
ipv6: ioam: refresh hdr pointer before ioam6_event()
Muchun Song <muchun.song@xxxxxxxxx>
drivers/base/memory: fix memory block reference leak in poison accounting
Heechan Kang <gganji11@xxxxxxxxx>
io_uring/waitid: clear waitid info before copying it to userspace
Krishnamoorthi M <krishnamoorthi.m@xxxxxxx>
spi: amd: Set correct bus number in ACPI probe path
Ard Biesheuvel <ardb@xxxxxxxxxx>
efi: Allocate runtime workqueue before ACPI init
Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
ACPI: battery: Fix system wakeup on critical battery status
Cássio Gabriel <cassiogabrielcontato@xxxxxxxxx>
ALSA: scarlett2: Allow flash writes ending at segment boundary
Takashi Iwai <tiwai@xxxxxxx>
ALSA: asihpi: Fix potential OOB array access at reading cache
Takashi Iwai <tiwai@xxxxxxx>
ALSA: pcm: Don't setup bogus iov_iter for silencing
Cássio Gabriel <cassiogabrielcontato@xxxxxxxxx>
ALSA: ua101: Reject too-short USB descriptors
Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX
ChenXiaoSong <chenxiaosong@xxxxxxxxxx>
smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close
Jeremy Erazo <mendozayt13@xxxxxxxxx>
smb: client: use data_len for SMB2 READ encrypted folioq copy
Henrique Carvalho <henrique.carvalho@xxxxxxxx>
smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
Michael Bommarito <michael.bommarito@xxxxxxxxx>
smb: client: require net admin for CIFS SWN netlink
Illia Ostapyshyn <illia@xxxxxxxxx>
scripts/gdb: mm: cast untyped symbols in x86_page_ops
Tom Lendacky <thomas.lendacky@xxxxxxx>
x86/mm: Disable broadcast TLB flush when PCID is disabled
Alexander Sverdlin <alexander.sverdlin@xxxxxxxxx>
regulator: tps65219: fix irq_data.rdev not being assigned
Junyi Liu <moss80199@xxxxxxxxx>
ksmbd: validate SID in parent security descriptor during ACL inheritance
Ferry Meng <mengferry@xxxxxxxxxxxxxxxxx>
ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow
Jeremy Laratro <research@xxxxxxxxx>
ksmbd: fix null pointer dereference in proc_show_files()
Jeremy Laratro <research@xxxxxxxxx>
ksmbd: fix null pointer dereference in compare_guid_key()
SeongJae Park <sj@xxxxxxxxxx>
mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()
Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
sysfs: don't remove existing directory on update failure
Niklas Cassel <cassel@xxxxxxxxxx>
ata: libata-scsi: do not needlessly defer commands when using PMP with FBS
Niklas Cassel <cassel@xxxxxxxxxx>
ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS
Niklas Cassel <cassel@xxxxxxxxxx>
ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT
Niklas Cassel <cassel@xxxxxxxxxx>
ata: libata-scsi: improve readability of ata_scsi_qc_issue()
Asim Viladi Oglu Manizada <manizada@xxxxx>
smb: client: reject userspace cifs.spnego descriptions
DaeMyung Kang <charsyam@xxxxxxxxx>
ksmbd: close durable scavenger races against m_fp_list lookups
Eder Zulian <ezulian@xxxxxxxxxx>
iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs
Guanghui Feng <guanghuifeng@xxxxxxxxxxxxxxxxx>
iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs
-------------
Diffstat:
.../ABI/testing/sysfs-driver-uniwill-laptop | 27 ++
.../admin-guide/laptops/uniwill-laptop.rst | 22 ++
Documentation/admin-guide/pm/intel_pstate.rst | 11 +-
Documentation/arch/riscv/zicfilp.rst | 2 +-
Documentation/crypto/krb5.rst | 17 +-
Documentation/netlink/specs/net_shaper.yaml | 7 +
Makefile | 4 +-
arch/alpha/include/asm/Kbuild | 1 +
arch/arc/include/asm/Kbuild | 1 +
arch/arm/boot/dts/renesas/r7s72100-genmai.dts | 3 -
arch/arm/boot/dts/renesas/r7s72100-rskrza1.dts | 2 -
arch/arm/include/asm/Kbuild | 1 +
arch/arm/mach-versatile/integrator_cp.c | 13 +-
arch/arm64/boot/dts/renesas/r8a78000.dtsi | 8 +-
arch/arm64/include/asm/insn.h | 2 +-
arch/arm64/include/asm/page.h | 2 +-
arch/arm64/include/asm/ring_buffer.h | 10 +
arch/arm64/kvm/arm.c | 4 +-
arch/arm64/kvm/vgic/vgic-its.c | 4 +
arch/arm64/mm/fault.c | 11 +-
arch/csky/include/asm/Kbuild | 1 +
arch/hexagon/include/asm/Kbuild | 1 +
arch/loongarch/include/asm/Kbuild | 1 +
arch/loongarch/kernel/kprobes.c | 14 +-
arch/loongarch/mm/init.c | 4 -
arch/m68k/include/asm/Kbuild | 1 +
arch/microblaze/include/asm/Kbuild | 1 +
arch/mips/include/asm/Kbuild | 1 +
arch/nios2/include/asm/Kbuild | 1 +
arch/openrisc/include/asm/Kbuild | 1 +
arch/parisc/include/asm/Kbuild | 1 +
arch/powerpc/Kconfig.debug | 3 +-
arch/powerpc/include/asm/Kbuild | 1 +
arch/powerpc/kernel/time.c | 6 +-
arch/powerpc/perf/hv-gpci.c | 24 +-
arch/powerpc/platforms/82xx/km82xx.c | 4 +-
arch/riscv/errata/mips/errata.c | 2 +-
arch/riscv/include/asm/Kbuild | 1 +
arch/riscv/kernel/compat_signal.c | 2 +
arch/riscv/kernel/ptrace.c | 4 +-
arch/riscv/kvm/vcpu_pmu.c | 12 +-
arch/riscv/mm/init.c | 25 ++
arch/s390/include/asm/Kbuild | 1 +
arch/s390/kernel/perf_pai.c | 31 ++-
arch/sh/include/asm/Kbuild | 1 +
arch/sparc/include/asm/Kbuild | 1 +
arch/um/include/asm/Kbuild | 1 +
arch/x86/include/asm/Kbuild | 1 +
arch/x86/kernel/cpu/cpuid-deps.c | 1 +
arch/x86/kernel/cpu/mce/core.c | 33 +--
arch/x86/kvm/svm/avic.c | 12 +-
arch/x86/xen/setup.c | 2 +-
arch/xtensa/include/asm/Kbuild | 1 +
block/bio-integrity.c | 19 +-
block/blk-cgroup.c | 2 +-
block/blk-mq-debugfs.c | 1 +
block/blk-mq.c | 53 ++--
block/blk-sysfs.c | 35 ++-
block/blk-zoned.c | 250 ++++++++++++++---
crypto/krb5/krb5_api.c | 54 +++-
drivers/accel/qaic/qaic_data.c | 23 +-
drivers/acpi/ac.c | 6 +-
drivers/acpi/acpi_pad.c | 6 +-
drivers/acpi/acpi_tad.c | 6 +-
drivers/acpi/battery.c | 10 +-
drivers/acpi/button.c | 9 +-
drivers/acpi/ec.c | 6 +-
drivers/acpi/hed.c | 6 +-
drivers/acpi/nfit/core.c | 6 +-
drivers/acpi/pfr_telemetry.c | 6 +-
drivers/acpi/pfr_update.c | 6 +-
drivers/acpi/sbs.c | 6 +-
drivers/acpi/sbshc.c | 6 +-
drivers/acpi/thermal.c | 2 +-
drivers/acpi/tiny-power-button.c | 6 +-
drivers/ata/libata-core.c | 9 +-
drivers/ata/libata-eh.c | 8 +-
drivers/ata/libata-pmp.c | 18 +-
drivers/ata/libata-scsi.c | 102 ++++---
drivers/ata/sata_sil24.c | 6 +-
drivers/base/memory.c | 8 +-
drivers/block/rbd.c | 20 +-
drivers/block/ublk_drv.c | 3 +
drivers/bluetooth/btintel_pcie.c | 20 +-
drivers/bluetooth/btintel_pcie.h | 3 -
drivers/bluetooth/btmtk.c | 2 +
drivers/bluetooth/hci_ldisc.c | 48 +++-
drivers/bluetooth/hci_qca.c | 33 ++-
drivers/cpufreq/intel_pstate.c | 2 +-
drivers/firmware/arm_ffa/bus.c | 4 +-
drivers/firmware/arm_ffa/driver.c | 133 +++++++---
drivers/firmware/efi/efi.c | 28 +-
drivers/fwctl/pds/main.c | 3 +
drivers/gpio/Kconfig | 1 -
drivers/gpio/gpio-aggregator.c | 47 ++--
drivers/gpio/gpiolib-cdev.c | 13 +
drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c | 9 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_vpe.c | 7 +-
drivers/gpu/drm/amd/amdgpu/vce_v1_0.c | 31 ++-
drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c | 9 +
.../drm/amd/display/dc/bios/bios_parser_helper.c | 9 +-
drivers/gpu/drm/amd/display/dc/core/dc.c | 6 +-
drivers/gpu/drm/bridge/chipone-icn6211.c | 4 +-
drivers/gpu/drm/bridge/ite-it66121.c | 5 +
.../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 16 +-
drivers/gpu/drm/drm_drv.c | 2 +
drivers/gpu/drm/drm_gem.c | 36 ++-
drivers/gpu/drm/i915/display/intel_dp.c | 2 +-
drivers/gpu/drm/i915/display/intel_plane.c | 2 +-
drivers/gpu/drm/mediatek/mtk_cec.c | 2 +-
drivers/gpu/drm/mediatek/mtk_hdmi_ddc.c | 2 +-
drivers/gpu/drm/mediatek/mtk_hdmi_ddc_v2.c | 2 +-
drivers/gpu/drm/mediatek/mtk_hdmi_v2.c | 2 +-
drivers/gpu/drm/msm/adreno/a5xx_gpu.c | 6 +
drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 48 +++-
drivers/gpu/drm/msm/adreno/a6xx_hfi.c | 2 +
drivers/gpu/drm/msm/adreno/adreno_gpu.c | 13 +-
drivers/gpu/drm/msm/adreno/adreno_gpu.h | 1 +
.../drm/msm/disp/dpu1/catalog/dpu_13_0_kaanapali.h | 2 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_formats.c | 12 +-
drivers/gpu/drm/msm/disp/dpu1/dpu_writeback.c | 3 +-
drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c | 24 +-
drivers/gpu/drm/msm/dsi/dsi_host.c | 1 +
drivers/gpu/drm/msm/msm_drv.c | 11 +-
drivers/gpu/drm/msm/msm_drv.h | 7 -
drivers/gpu/drm/msm/msm_gem.c | 33 ++-
drivers/gpu/drm/msm/msm_gem_shrinker.c | 44 ++-
drivers/gpu/drm/msm/msm_gem_submit.c | 6 +-
drivers/gpu/drm/msm/msm_gem_vma.c | 12 +-
drivers/gpu/drm/msm/msm_iommu.c | 5 +-
drivers/gpu/drm/msm/msm_ringbuffer.c | 6 +-
drivers/gpu/drm/msm/registers/adreno/a6xx.xml | 4 +
drivers/gpu/drm/v3d/v3d_sched.c | 16 +-
drivers/gpu/drm/v3d/v3d_submit.c | 22 +-
drivers/gpu/drm/virtio/virtgpu_drv.h | 1 +
drivers/gpu/drm/virtio/virtgpu_gem.c | 17 ++
drivers/gpu/drm/virtio/virtgpu_plane.c | 10 +-
drivers/gpu/drm/xe/regs/xe_gt_regs.h | 3 +
drivers/gpu/drm/xe/xe_gsc.c | 5 +-
drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.c | 6 +-
drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.h | 2 +-
drivers/gpu/drm/xe/xe_gt_sriov_vf.c | 24 +-
drivers/gpu/drm/xe/xe_gt_sriov_vf.h | 6 +-
drivers/gpu/drm/xe/xe_guc_submit.c | 16 +-
drivers/gpu/drm/xe/xe_oa.c | 6 +-
drivers/gpu/drm/xe/xe_tuning.c | 5 +
drivers/gpu/drm/xe/xe_wa.c | 28 +-
drivers/hid/hid-quirks.c | 2 +-
drivers/hid/hid-uclogic-core.c | 4 +-
.../intel-quickspi/quickspi-protocol.c | 4 +-
drivers/hwmon/lm90.c | 26 +-
drivers/hwmon/pmbus/adm1266.c | 32 ++-
drivers/i2c/busses/i2c-tegra.c | 4 +-
drivers/infiniband/hw/mana/main.c | 1 +
drivers/infiniband/sw/siw/siw_qp_rx.c | 15 ++
drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c | 2 +-
drivers/iommu/amd/debugfs.c | 43 ++-
drivers/iommu/generic_pt/iommu_pt.h | 176 ++++++------
drivers/iommu/generic_pt/kunit_generic_pt.h | 12 +
drivers/iommu/generic_pt/pt_iter.h | 22 ++
drivers/iommu/iommu.c | 118 +++++----
drivers/irqchip/irq-ath79-cpu.c | 7 -
drivers/net/dsa/mt7530.c | 47 ++--
drivers/net/ethernet/airoha/airoha_eth.c | 10 +-
drivers/net/ethernet/amd/pds_core/debugfs.c | 7 +-
drivers/net/ethernet/amd/pds_core/dev.c | 11 +-
drivers/net/ethernet/amd/pds_core/devlink.c | 6 +-
drivers/net/ethernet/atheros/ag71xx.c | 3 +
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 9 +-
drivers/net/ethernet/cirrus/cs89x0.c | 2 -
drivers/net/ethernet/cortina/gemini.c | 21 +-
drivers/net/ethernet/freescale/enetc/enetc_pf.c | 4 +-
drivers/net/ethernet/intel/ice/ice_dcb_lib.c | 4 +-
drivers/net/ethernet/intel/ice/ice_dpll.c | 5 +
drivers/net/ethernet/intel/ice/ice_dpll.h | 32 +--
drivers/net/ethernet/intel/ice/ice_main.c | 10 +-
drivers/net/ethernet/intel/ice/ice_ptp_hw.c | 33 ++-
drivers/net/ethernet/intel/ice/virt/queues.c | 2 +-
drivers/net/ethernet/intel/idpf/idpf_ptp.c | 4 +-
drivers/net/ethernet/intel/igc/igc_tsn.c | 9 +-
drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 1 +
drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 7 +-
.../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 2 +-
drivers/net/ethernet/marvell/octeontx2/nic/cn20k.c | 2 +
.../ethernet/marvell/octeontx2/nic/otx2_common.c | 2 +
drivers/net/ethernet/marvell/octeontx2/nic/rep.c | 3 +-
.../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 6 +-
.../ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 7 +-
drivers/net/ethernet/mellanox/mlx5/core/en_txrx.c | 2 +-
.../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c | 3 +-
drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 21 ++
drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 1 +
drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 5 +
.../net/ethernet/microchip/lan966x/lan966x_main.c | 8 +-
drivers/net/ethernet/microsoft/mana/hw_channel.c | 35 ++-
drivers/net/ethernet/qlogic/qed/qed_cxt.c | 2 +
.../net/ethernet/stmicro/stmmac/dwmac-eic7700.c | 128 ++++++---
drivers/net/ethernet/ti/icssm/icssm_prueth.c | 1 +
drivers/net/ifb.c | 11 +-
drivers/net/ovpn/io.c | 12 +-
drivers/net/ovpn/main.c | 12 +-
drivers/net/ovpn/netlink.c | 8 +-
drivers/net/ovpn/peer.c | 23 +-
drivers/net/ovpn/peer.h | 1 -
drivers/net/ovpn/stats.h | 16 ++
drivers/net/ovpn/tcp.c | 19 +-
drivers/net/ovpn/udp.c | 2 +-
drivers/net/phy/dp83tc811.c | 1 +
drivers/net/phy/phy-c45.c | 8 +
drivers/net/phy/phy_device.c | 6 +-
drivers/net/pse-pd/pse_core.c | 2 +-
drivers/net/tap.c | 2 +-
drivers/net/wireless/ath/ath10k/wmi.c | 17 +-
drivers/net/wireless/ath/ath11k/dp_rx.c | 3 +-
drivers/net/wireless/ath/ath11k/hal.c | 14 +-
drivers/net/wireless/ath/ath11k/hal_rx.c | 5 +-
drivers/net/wireless/ath/ath11k/testmode.c | 1 +
drivers/net/wireless/ath/ath11k/wmi.c | 19 +-
drivers/net/wireless/ath/ath12k/mac.c | 8 +-
drivers/net/wireless/intel/iwlwifi/mld/link.c | 13 +-
drivers/net/wireless/intel/iwlwifi/mld/tx.c | 15 +-
drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 27 +-
drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 14 +-
drivers/net/wireless/microchip/wilc1000/wlan.c | 2 +-
drivers/net/wwan/iosm/iosm_ipc_imem.c | 2 +
drivers/nvme/host/ioctl.c | 5 +-
drivers/nvme/host/pci.c | 40 ++-
drivers/phy/apple/atc.c | 27 +-
drivers/phy/marvell/phy-mvebu-a3700-utmi.c | 5 +-
drivers/phy/qualcomm/phy-qcom-edp.c | 88 +++---
drivers/phy/qualcomm/phy-qcom-qmp-ufs.c | 1 +
drivers/phy/qualcomm/phy-qcom-qmp-usbc.c | 2 +-
drivers/phy/samsung/phy-exynos5-usbdrd.c | 7 +-
drivers/phy/spacemit/phy-k1-usb2.c | 1 -
drivers/phy/tegra/xusb-tegra186.c | 33 ++-
drivers/phy/tegra/xusb.h | 1 +
drivers/pinctrl/mediatek/pinctrl-moore.c | 18 ++
drivers/pinctrl/meson/pinctrl-amlogic-a4.c | 6 +-
drivers/pinctrl/qcom/pinctrl-ipq4019.c | 2 +-
drivers/pinctrl/qcom/pinctrl-msm.h | 5 +
drivers/pinctrl/qcom/pinctrl-qcs615.c | 6 +-
drivers/pinctrl/qcom/pinctrl-sm8150.c | 8 +-
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 23 +-
.../platform/surface/surface_aggregator_registry.c | 2 -
drivers/platform/x86/adv_swbutton.c | 6 +-
drivers/platform/x86/asus-armoury.c | 16 +-
drivers/platform/x86/hp/hp_accel.c | 3 +
drivers/platform/x86/intel/hid.c | 6 +-
drivers/platform/x86/intel/int1092/intel_sar.c | 7 +-
drivers/platform/x86/intel/vbtn.c | 6 +-
drivers/platform/x86/uniwill/uniwill-acpi.c | 47 +++-
drivers/regulator/tps65219-regulator.c | 135 +++++++---
drivers/s390/cio/chsc.c | 4 +-
drivers/s390/cio/chsc_sch.c | 20 +-
drivers/s390/cio/scm.c | 2 +-
drivers/scsi/isci/host.c | 3 +
drivers/scsi/sd.c | 3 +-
drivers/spi/spi-amd.c | 2 +-
drivers/spi/spi-ep93xx.c | 2 +
drivers/spi/spi-mtk-snfi.c | 2 +-
drivers/spi/spi-qup.c | 3 +
drivers/spi/spi-sprd.c | 3 +-
drivers/spi/spi-ti-qspi.c | 1 +
drivers/vfio/pci/vfio_pci_dmabuf.c | 6 +-
drivers/virt/coco/sev-guest/sev-guest.c | 10 +-
fs/9p/v9fs_vfs.h | 13 -
fs/9p/vfs_inode.c | 6 +-
fs/9p/vfs_inode_dotl.c | 12 +-
fs/afs/Makefile | 1 +
fs/afs/dir.c | 79 +++---
fs/afs/file.c | 24 +-
fs/afs/fsclient.c | 4 +-
fs/afs/inode.c | 127 ++-------
fs/afs/internal.h | 45 ++--
fs/afs/symlink.c | 278 +++++++++++++++++++
fs/afs/validation.c | 14 +-
fs/afs/write.c | 2 +-
fs/afs/yfsclient.c | 4 +-
fs/btrfs/fs.h | 1 +
fs/btrfs/qgroup.c | 81 ++++--
fs/cachefiles/namei.c | 2 +
fs/erofs/xattr.c | 10 +-
fs/erofs/zdata.c | 15 +-
fs/inode.c | 8 +-
fs/jfs/namei.c | 2 +-
fs/mnt_idmapping.c | 2 +
fs/netfs/buffered_read.c | 73 ++---
fs/netfs/buffered_write.c | 174 +++++++-----
fs/netfs/direct_read.c | 42 +--
fs/netfs/direct_write.c | 6 +-
fs/netfs/internal.h | 3 +
fs/netfs/iterator.c | 26 +-
fs/netfs/misc.c | 41 ++-
fs/netfs/read_collect.c | 19 +-
fs/netfs/read_retry.c | 17 +-
fs/netfs/read_single.c | 23 +-
fs/netfs/write_collect.c | 15 +-
fs/netfs/write_issue.c | 51 ++--
fs/netfs/write_retry.c | 6 +-
fs/nfsd/nfs4state.c | 7 +
fs/nsfs.c | 2 +-
fs/orangefs/namei.c | 2 +-
fs/smb/client/cifs_spnego.c | 16 ++
fs/smb/client/cifsfs.c | 42 ++-
fs/smb/client/cifssmb.c | 3 +-
fs/smb/client/file.c | 13 +-
fs/smb/client/fs_context.c | 163 ++++++++----
fs/smb/client/inode.c | 14 +-
fs/smb/client/netlink.c | 6 +-
fs/smb/client/readdir.c | 3 +-
fs/smb/client/smb2ops.c | 46 ++--
fs/smb/client/smb2pdu.c | 3 +-
fs/smb/client/smb2transport.c | 2 +
fs/smb/server/oplock.c | 6 +-
fs/smb/server/smb2pdu.c | 15 +-
fs/smb/server/smbacl.c | 78 ++++--
fs/smb/server/vfs_cache.c | 120 ++++++---
fs/sysfs/group.c | 2 +-
fs/zonefs/super.c | 6 +-
include/asm-generic/kprobes.h | 2 +-
include/asm-generic/ring_buffer.h | 13 +
include/crypto/krb5.h | 9 +-
include/drm/drm_device.h | 7 +
include/drm/drm_gem.h | 20 +-
include/linux/blkdev.h | 10 +-
include/linux/cgroup.h | 1 +
include/linux/fprobe.h | 5 +
include/linux/fwnode.h | 1 +
include/linux/generic_pt/iommu.h | 69 ++++-
include/linux/gfp_types.h | 10 +-
include/linux/highmem.h | 7 +-
include/linux/iommu.h | 1 +
include/linux/libata.h | 7 +-
include/linux/list.h | 37 +++
include/linux/netfilter/x_tables.h | 4 +-
include/linux/netfilter_arp/arp_tables.h | 1 -
include/linux/netfilter_ipv4/ip_tables.h | 1 -
include/linux/netfilter_ipv6/ip6_tables.h | 1 -
include/linux/netfs.h | 295 ++++++++++++++++++++-
include/linux/soc/airoha/airoha_offload.h | 6 +-
include/net/bluetooth/bluetooth.h | 1 +
include/net/net_shaper.h | 1 +
include/net/netfilter/nf_conntrack_expect.h | 5 +-
include/net/netfilter/nf_queue.h | 1 +
include/net/tcp.h | 7 +-
include/trace/events/btrfs.h | 4 +-
include/trace/events/damon.h | 2 +-
include/trace/events/netfs.h | 8 +
include/trace/events/rxrpc.h | 1 +
io_uring/io_uring.c | 9 +-
io_uring/net.c | 26 +-
io_uring/nop.c | 4 +-
io_uring/waitid.c | 1 +
kernel/cgroup/rstat.c | 37 ++-
kernel/dma/debug.c | 9 +-
kernel/dma/mapping.c | 4 -
kernel/irq_work.c | 7 +
kernel/liveupdate/kexec_handover.c | 2 +-
kernel/rcu/srcutree.c | 12 +-
kernel/sched/ext.c | 5 +-
kernel/trace/bpf_trace.c | 3 +-
kernel/trace/fprobe.c | 23 +-
kernel/trace/ring_buffer.c | 30 ++-
kernel/trace/trace_events_hist.c | 6 +-
kernel/trace/tracing_map.c | 17 +-
lib/kunit/Kconfig | 5 +-
lib/tests/test_kprobes.c | 29 +-
mm/damon/sysfs-schemes.c | 1 +
mm/memcontrol.c | 6 +-
mm/memfd_luo.c | 1 +
mm/memory.c | 24 +-
mm/memory_hotplug.c | 2 +
mm/migrate_device.c | 2 +-
mm/page_alloc.c | 8 +-
mm/slab_common.c | 2 +
mm/slub.c | 1 +
net/batman-adv/bat_iv_ogm.c | 82 ++++--
net/batman-adv/bat_v_ogm.c | 59 +++--
net/batman-adv/bridge_loop_avoidance.c | 109 +++++---
net/batman-adv/distributed-arp-table.c | 3 +
net/batman-adv/fragmentation.c | 58 +++-
net/batman-adv/gateway_client.c | 4 +
net/batman-adv/mesh-interface.c | 1 +
net/batman-adv/originator.c | 4 +-
net/batman-adv/tp_meter.c | 117 +++++---
net/batman-adv/translation-table.c | 55 +++-
net/batman-adv/tvlv.c | 28 +-
net/batman-adv/tvlv.h | 2 +-
net/batman-adv/types.h | 59 +++--
net/bluetooth/af_bluetooth.c | 99 +++++--
net/bluetooth/bnep/core.c | 2 +-
net/bluetooth/hci_sync.c | 6 +-
net/bluetooth/iso.c | 14 +-
net/bluetooth/l2cap_core.c | 2 +-
net/bluetooth/l2cap_sock.c | 51 +++-
net/bluetooth/mgmt.c | 6 +
net/bluetooth/rfcomm/sock.c | 9 +-
net/bluetooth/sco.c | 9 +-
net/bridge/br_multicast.c | 22 +-
net/bridge/netfilter/ebtable_broute.c | 14 +-
net/bridge/netfilter/ebtable_filter.c | 14 +-
net/bridge/netfilter/ebtable_nat.c | 12 +-
net/bridge/netfilter/ebtables.c | 71 +++--
net/core/dev.c | 21 +-
net/core/devmem.c | 11 +
net/core/gro.c | 3 +
net/core/skmsg.c | 9 +-
net/ethtool/bitset.c | 8 +-
net/ethtool/phy.c | 36 ++-
net/hsr/hsr_framereg.c | 4 +-
net/ipv4/inet_connection_sock.c | 2 +-
net/ipv4/netfilter/arp_tables.c | 53 +---
net/ipv4/netfilter/arptable_filter.c | 27 +-
net/ipv4/netfilter/ip_tables.c | 59 +----
net/ipv4/netfilter/iptable_filter.c | 27 +-
net/ipv4/netfilter/iptable_mangle.c | 29 +-
net/ipv4/netfilter/iptable_nat.c | 6 +-
net/ipv4/netfilter/iptable_raw.c | 26 +-
net/ipv4/netfilter/iptable_security.c | 27 +-
net/ipv4/raw.c | 2 +-
net/ipv4/tcp.c | 3 -
net/ipv4/tcp_ao.c | 3 +-
net/ipv4/tcp_input.c | 15 +-
net/ipv4/tcp_ipv4.c | 3 +-
net/ipv4/udp_offload.c | 22 +-
net/ipv6/exthdrs.c | 21 +-
net/ipv6/netfilter/ip6_tables.c | 56 +---
net/ipv6/netfilter/ip6t_hbh.c | 4 +
net/ipv6/netfilter/ip6table_filter.c | 26 +-
net/ipv6/netfilter/ip6table_mangle.c | 27 +-
net/ipv6/netfilter/ip6table_nat.c | 6 +-
net/ipv6/netfilter/ip6table_raw.c | 24 +-
net/ipv6/netfilter/ip6table_security.c | 27 +-
net/ipv6/tcp_ipv6.c | 3 +-
net/l2tp/l2tp_core.c | 2 +-
net/mac80211/mlme.c | 5 +-
net/mac80211/parse.c | 107 +++++---
net/mac80211/rx.c | 6 +-
net/mptcp/pm.c | 56 +++-
net/mptcp/protocol.c | 25 +-
net/netfilter/ipset/ip_set_hash_ipmark.c | 6 +-
net/netfilter/ipset/ip_set_hash_ipport.c | 5 +-
net/netfilter/ipset/ip_set_hash_ipportip.c | 5 +-
net/netfilter/ipset/ip_set_hash_ipportnet.c | 5 +-
net/netfilter/nf_conntrack_broadcast.c | 1 +
net/netfilter/nf_conntrack_core.c | 7 +-
net/netfilter/nf_conntrack_expect.c | 1 +
net/netfilter/nf_conntrack_h323_main.c | 12 +-
net/netfilter/nf_conntrack_helper.c | 5 +
net/netfilter/nf_conntrack_netlink.c | 18 +-
net/netfilter/nf_conntrack_sip.c | 2 +-
net/netfilter/nf_queue.c | 4 +-
net/netfilter/nfnetlink_queue.c | 2 +
net/netfilter/nft_inner.c | 3 +-
net/netfilter/x_tables.c | 177 ++++++++++---
net/phonet/pep.c | 19 +-
net/rxrpc/ar-internal.h | 7 +-
net/rxrpc/call_event.c | 22 +-
net/rxrpc/call_object.c | 2 +
net/rxrpc/insecure.c | 3 -
net/rxrpc/recvmsg.c | 68 ++++-
net/rxrpc/rxgk.c | 62 +++--
net/rxrpc/rxgk_common.h | 82 ++++++
net/rxrpc/rxkad.c | 86 +++---
net/shaper/shaper.c | 224 +++++++++++-----
net/shaper/shaper_nl_gen.c | 7 +-
net/shaper/shaper_nl_gen.h | 2 +
net/smc/af_smc.c | 3 +-
net/smc/smc_tracepoint.h | 2 +-
net/tls/tls_sw.c | 46 +++-
net/unix/af_unix.c | 11 +-
net/vmw_vsock/virtio_transport_common.c | 103 ++++---
net/vmw_vsock/vmci_transport.c | 2 +-
net/wireless/scan.c | 3 +
scripts/gcc-plugins/gcc-common.h | 4 +-
scripts/gdb/linux/mm.py | 6 +-
scripts/package/PKGBUILD | 2 +-
security/lsm_syscalls.c | 9 +-
sound/core/pcm_lib.c | 3 +
sound/core/seq/seq_ump_client.c | 22 +-
sound/hda/codecs/ca0132.c | 44 ++-
sound/hda/codecs/realtek/alc269.c | 12 +-
sound/hda/codecs/side-codecs/cs35l41_hda.c | 4 +-
sound/hda/codecs/side-codecs/cs35l56_hda.c | 1 +
sound/pci/asihpi/hpicmn.c | 6 +
sound/soc/amd/acp/acp-sdw-legacy-mach.c | 2 +-
sound/soc/codecs/cs-amp-lib.c | 15 +-
sound/soc/codecs/cs35l56-sdw.c | 3 +-
sound/soc/codecs/fs210x.c | 2 +-
sound/soc/codecs/pcm512x.c | 6 +-
sound/soc/sdw_utils/soc_sdw_bridge_cs35l56.c | 6 -
sound/soc/sdw_utils/soc_sdw_cs42l43.c | 20 +-
sound/soc/sdw_utils/soc_sdw_utils.c | 34 ++-
sound/soc/soc-utils.c | 1 +
sound/soc/sof/amd/acp.c | 2 +-
sound/usb/misc/ua101.c | 5 +-
sound/usb/mixer_scarlett2.c | 9 +-
tools/testing/selftests/mm/hmm-tests.c | 50 ++++
tools/testing/selftests/mm/run_vmtests.sh | 2 +-
tools/testing/selftests/net/lib/xdp_native.bpf.c | 55 ++--
tools/testing/selftests/net/mptcp/mptcp_connect.sh | 6 +-
tools/testing/selftests/net/mptcp/mptcp_lib.sh | 10 +-
tools/testing/selftests/ublk/kublk.c | 11 +
503 files changed, 6399 insertions(+), 2940 deletions(-)