[PATCH 7.2 000/713] 7.2.4-rc1 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 7.2.4 release.
There are 713 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun, 06 Sep 2026 04:56:59 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.4-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 7.2.4-rc1

Tzung-Bi Shih <tzungbi@xxxxxxxxxx>
    platform/chrome: sensorhub: Fix dropped timestamp events and log spam

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
    ACPI: scan: Do not combine resources that overlap completely

Injae Ryou <injaeryou@xxxxxxxxx>
    selftests/mm: fix on-fault-limit false failure under sudo-rs

Zhan Xusheng <zhanxusheng1024@xxxxxxxxx>
    udf: Fix i_lenExtents truncation on 32-bit kernels

Thomas Gleixner <tglx@xxxxxxxxxx>
    timer: Keep debugobjects state consistent in migrate_timer_list()

Thomas Weißschuh (Schneider Electric) <thomas.weissschuh@xxxxxxxxxxxxx>
    timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()

Bradley Morgan <include@xxxxxxxxx>
    taskstats: fix cpumask parsing cutting off the last character

Jann Horn <jannh@xxxxxxxxxx>
    smack: fix cred UAF in smack_file_send_sigiotask()

Bradley Morgan <include@xxxxxxxxx>
    signal: avoid shared siginfo namespace rewrites

Helge Deller <deller@xxxxxx>
    sticon/parisc: Detect default STI graphics card for console output

Oleg Nesterov <oleg@xxxxxxxxxx>
    sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]

Myeonghun Pak <mhun512@xxxxxxxxx>
    tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout

Xu Rao <raoxu@xxxxxxxxxxxxx>
    zloop: truncate finished zones to zone capacity

Zi Yan <ziy@xxxxxxxxxx>
    xarray: honor XA_FLAGS_ACCOUNT in xas_split_alloc()

Maoyi Xie <maoyixie.tju@xxxxxxxxx>
    w1: ds28e17: reject an oversize length on an I2C block read

Chengfeng Ye <nicoyip.dev@xxxxxxxxx>
    vsock/virtio: flush works in dependency order

Laxman Acharya Padhya <acharyalaxman8848@xxxxxxxxx>
    wifi: mt76: mt7996: validate default EEPROM firmware size

Felix Fietkau <nbd@xxxxxxxx>
    wifi: mt76: mt7996: fix TX DMA mapping leak for AddBA req frames

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy

Devin Wittmayer <lucid_duck@xxxxxxxxxxxxx>
    wifi: mt76: mt7925: cancel mlo_pm_work on stop

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy

Runyu Xiao <runyu.xiao@xxxxxxxxxx>
    wifi: mt76: mt7615: avoid waiting for mac work under the mt76 mutex

Yuhang.chen <yhchen312@xxxxxxxxx>
    wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot

Dawei Feng <dawei.feng@xxxxxxxxxx>
    wifi: rtw88: pci: fix resource leak on failed NAPI setup

Abdun Nihaal <nihaal@xxxxxxxxxxxxxx>
    wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb()

Abdun Nihaal <nihaal@xxxxxxxxxxxxxx>
    wifi: rtlwifi: rtl8192du: Fix possible memory leak in rtl92du_init_sw_vars()

Runyu Xiao <runyu.xiao@xxxxxxxxxx>
    wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids

Stanislaw Gruszka <stf_xl@xxxxx>
    wifi: rtl818x: initialize eeprom_93cx6 struct to zero

Fabio Estevam <festevam@xxxxxxxxxxxx>
    wifi: mwifiex: Detach sync cmd buffer on interrupted wait

Breno Leitao <leitao@xxxxxxxxxx>
    mm/kmemleak: report RCU-tasks quiescent states during the scan

Breno Leitao <leitao@xxxxxxxxxx>
    mm/kmemleak: stop the task stack scan early when interrupted

Thorsten Blum <thorsten.blum@xxxxxxxxx>
    crypto: atmel-ecc - avoid stale fallback key after set_secret failure

Thorsten Blum <thorsten.blum@xxxxxxxxx>
    crypto: atmel-ecc - clean up and improve ECDH comments

Vinicius Costa Gomes <vinicius.gomes@xxxxxxxxx>
    crypto: iaa - unmap dst before software fallback on decompress

Xiang Mei <xmei5@xxxxxxx>
    fuse: copy request headers via a stack buffer for io-uring

Joanne Koong <joannelkoong@xxxxxxxxx>
    fuse: decouple fuse_ring creation from ent registration

Fan Wu <fanwu01@xxxxxxxxxx>
    wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop

Dawei Feng <dawei.feng@xxxxxxxxxx>
    wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start()

Abdun Nihaal <nihaal@xxxxxxxxxxxxxx>
    wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control()

Claudiu Beznea <claudiu.beznea.uj@xxxxxxxxxxxxxx>
    i3c: renesas: Perform Dynamic Address Assignment on resume

Claudiu Beznea <claudiu.beznea.uj@xxxxxxxxxxxxxx>
    i3c: renesas: Restore STDBR and EXTBR registers on resume

Claudiu Beznea <claudiu.beznea.uj@xxxxxxxxxxxxxx>
    i3c: renesas: Reset the controller on resume

Claudiu Beznea <claudiu.beznea.uj@xxxxxxxxxxxxxx>
    i3c: renesas: Reconfigure the DATBAS register on re-attach

Claudiu Beznea <claudiu.beznea.uj@xxxxxxxxxxxxxx>
    i3c: renesas: Follow the reset deassert order used in probe

Claudiu Beznea <claudiu.beznea.uj@xxxxxxxxxxxxxx>
    i3c: renesas: Clean DATBAS register on detach

Claudiu Beznea <claudiu.beznea.uj@xxxxxxxxxxxxxx>
    i3c: renesas: Check that the transfer is valid before accessing it

Adrian Hunter <adrian.hunter@xxxxxxxxx>
    i3c: master: Fix potential UAF in i3c_device_uevent()

Maoyi Xie <maoyixie.tju@xxxxxxxxx>
    i3c: master: svc: bound IBI payload to the requested max_payload_len

Adrian Hunter <adrian.hunter@xxxxxxxxx>
    i3c: master: Fix info leak and UAF in device unregister path

Runyu Xiao <runyu.xiao@xxxxxxxxxx>
    i3c: master: adi: initialize the lock before enabling interrupts

Adrian Hunter <adrian.hunter@xxxxxxxxx>
    i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()

Jianyun Gao <jianyungao89@xxxxxxxxx>
    dm-pcache: fix use-after-free and invalid seg operations in kset_replay()

Jianyun Gao <jianyungao89@xxxxxxxxx>
    dm-pcache: fix implicit u8 truncation of gc_percent in message handler

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    dm-pcache: only hand out initialized cache segments

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    dm-pcache: detect a cycle in the last-kset chain during replay

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    dm-pcache: clamp the tail kset read to the segment data region

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    dm-pcache: bound the persisted tail-position offset

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    dm-pcache: validate on-media seg_num against the cache device size

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    dm-pcache: validate kset key_num and intra-segment bounds

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    dm-pcache: validate geometry fields from on-disk cache_info

Haotian Zhang <vulab@xxxxxxxxxxx>
    dm-switch: use WRITE_ONCE() in switch_region_table_write()

Mikulas Patocka <mpatocka@xxxxxxxxxx>
    dm-stats: fix a crash if allocation of per-cpu data fails

Nathan Chancellor <nathan@xxxxxxxxxx>
    arch_numa: avoid false positive fortify warning in setup_node_to_cpumask_map()

Eliot Courtney <ecourtney@xxxxxxxxxx>
    rust: num: reject Bounded::shr overshifts at build time

Zhang Heng <zhangheng@xxxxxxxxxx>
    ALSA: hda/realtek: Fix Lenovo Yoga Slim 7 14AKP10 quirk ordering

Denis Batishchev <ii343hbka@xxxxxxxxx>
    ALSA: hda/realtek: Enable micmute LED on HP EliteBook 6 G1a p/n: AD3Q9ET#UUG

Ajrat Makhmutov <rauty@xxxxxxxxxxxx>
    ALSA: hda/realtek: Enable headset mic on F+ FLAPTOP r

Eckhart Mohr <e.mohr@xxxxxxxxxxxxxxxxxxx>
    ALSA: hda/realtek: Add quirk for TongFang XxAF5xxx

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: virmidi: Check card index validity at probe

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: serial-u16550: Check card index validity at probe

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: portman2x4: Check card index validity at probe

Runyu Xiao <runyu.xiao@xxxxxxxxxx>
    ALSA: pcxhr: initialize mutexes before requesting threaded IRQ

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: mts64: Check card index validity at probe

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: mpu401: Check card index validity at probe

Xu Rao <raoxu@xxxxxxxxxxxxx>
    ALSA: hda/ext: preserve PPLCCTL bits when clearing reset

Baul Lee <baul.lee@xxxxxxxx>
    ALSA: FCP: do not copy out an uninitialised init response

Baul Lee <baul.lee@xxxxxxxx>
    ALSA: bcd2000: clear the URB pointers on disconnect

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: aloop: Check card index validity at probe

Baul Lee <baul.lee@xxxxxxxx>
    ALSA: 6fire: bound the MIDI event length from the device

Abdun Nihaal <nihaal@xxxxxxxxxxxxxx>
    mfd: sm501: Fix potential memory leaks during remove

Ali Ahmet Memis <ali@xxxxxxxxxxxxxx>
    mfd: qnap-mcu: keep the reply buffer alive past a command timeout

Thomas Richard <thomas.richard@xxxxxxxxxxx>
    mfd: cgbc: Fix teardown ordering in cgbc_remove()

Can Peng <pengcan@xxxxxxxxxx>
    hwrng: stm32 - Fix runtime PM cleanup on registration failure

Zhiling Zou <zhilinz@xxxxxxxxxx>
    seg6: reset IP6CB after IPv6 decapsulation

Norbert Szetei <norbert@xxxxxxxxxxxx>
    net: skbuff: don't touch shared zerocopy state in skb_tx_error()

Breno Leitao <leitao@xxxxxxxxxx>
    net: fix spurious TX timeout after dev_activate()

Zhiling Zou <zhilinz@xxxxxxxxxx>
    net: cap advertised IP tunnel headroom

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    net/smc: unregister the connection before draining the rx tasklet

Hidayath Khan <hidayath@xxxxxxxxxxxxx>
    net/smc: stop killed, freed and out_of_sync sharing a byte

Yehyeong Lee <yhlee@xxxxxxxxxxxxxxxxxx>
    net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()

Hidayath Khan <hidayath@xxxxxxxxxxxxx>
    net/smc: fix use-after-free in smc_rx_pipe_buf_release()

Hidayath Khan <hidayath@xxxxxxxxxxxxx>
    net/smc: fix socket refcount leak in smc_switch_conns()

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    net/smc: do not dereference an unset send buffer on the SMC-D teardown path

Yehyeong Lee <yhlee@xxxxxxxxxxxxxxxxxx>
    net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry

Yehyeong Lee <yhlee@xxxxxxxxxxxxxxxxxx>
    net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages

Glenn Judd <gmj@xxxxxxxx>
    net/mlx5e: do not HW-GRO coalesce small frames

Koichiro Den <den@xxxxxxxxxxxxx>
    net: ntb_netdev: Count packets dropped on RX refill failure

Koichiro Den <den@xxxxxxxxxxxxx>
    net: ntb_netdev: Avoid double-accounting netif_rx() drops

Koichiro Den <den@xxxxxxxxxxxxx>
    net: ntb_netdev: Fix TX busy and drop handling

Koichiro Den <den@xxxxxxxxxxxxx>
    NTB: ntb_transport: Reject oversized TX buffers

Koichiro Den <den@xxxxxxxxxxxxx>
    NTB: ntb_transport: Fail TX enqueue when the QP link is down

Koichiro Den <den@xxxxxxxxxxxxx>
    NTB: ntb_transport: Recycle TX entries before client callbacks

Fan Ye <fy15309206903@xxxxxxxxx>
    net: thunderbolt: Mark the connection down when bringing it up fails

Fan Ye <fy15309206903@xxxxxxxxx>
    net: thunderbolt: Release the Rx HopID that was handed out on mismatch

Xuanqiang Luo <luoxuanqiang@xxxxxxxxxx>
    net: ravb: serialize PTP clock teardown

Xuanqiang Luo <luoxuanqiang@xxxxxxxxxx>
    net: ravb: avoid dereferencing an invalid PTP clock

Christian Marangi <ansuelsmth@xxxxxxxxx>
    net: phylink: correctly validate returned PCS in phylink_inband_caps

Ruoyu Wang <ruoyuw560@xxxxxxxxx>
    net: openvswitch: fix nf_connlabels leak in ovs_ct_init

Ilya Maximets <i.maximets@xxxxxxx>
    net: openvswitch: fix flow mask use-after-free on flow deletion

Aldo Ariel Panzardo <qwe.aldo@xxxxxxxxx>
    net: mctp: hold a reference to the route device in mctp_route_lookup()

Zihan Xi <zihanx@xxxxxxxxxx>
    net: l2tp: do not propagate multicast notification errors

Jorijn van der Graaf <jorijnvdgraaf@xxxxxxxxxxxxx>
    net: ipa: fix stalled modem TX queue after runtime resume

Runyu Xiao <runyu.xiao@xxxxxxxxxx>
    net: ibm: emac: mal: fix NAPI locking

Joe Damato <joe@xxxxxxx>
    net: bnxt: ring the doorbell when SW USO exits early

Ahmad Fatoum <a.fatoum@xxxxxxxxxxxxxx>
    net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO

Asim Viladi Oglu Manizada <manizada@xxxxx>
    net: tun: bound receive headroom

Fabio Porcedda <fabio.porcedda@xxxxxxxxx>
    net: usb: qmi_wwan: add Telit Cinterion FE990D50 composition

Aleksandr Khromov <haa@xxxxxxxxx>
    slip: fix use-after-free in sl_sync()

Weiming Shi <bestswngs@xxxxxxxxx>
    xdp: fix zero-copy frame layout

Alexandra Winter <wintera@xxxxxxxxxxxxx>
    net/iucv: filter frames in afiucv_hs_rcv() by ingress device

Corey Minyard <corey@xxxxxxxxxxx>
    ipmi:msghandler: Cancel work cleanly on an error

Seiji Nishikawa <snishika@xxxxxxxxxx>
    ipmi: si: Fix NULL pointer dereference after failed registration

Yuho Choi <dbgh9129@xxxxxxxxx>
    ipmi: Remove all sysfs files on registration failure

Yousef Alhouseen <alhouseenyousef@xxxxxxxxx>
    ipmi: ipmb: validate write message length

Kuan-Wei Chiu <visitorckw@xxxxxxxxx>
    interconnect: Fix use after free in icc_get() and of_icc_get_by_index()

Laxman Acharya Padhya <acharyalaxman8848@xxxxxxxxx>
    io_uring/query: cap user size passed to copy_struct_to_user

Hui Su <sh_def@xxxxxxx>
    io_uring/waitid: avoid siginfo copy during ring teardown

Hui Su <sh_def@xxxxxxx>
    io_uring/waitid: honor task_work cancellation

Muhammad Bilal <meatuni001@xxxxxxxxx>
    platform/x86: hp-bioscfg: warn on element type mismatch instead of failing

Muhammad Bilal <meatuni001@xxxxxxxxx>
    platform/x86: hp-bioscfg: pass validated element count to package parsers

Muhammad Bilal <meatuni001@xxxxxxxxx>
    platform/x86: hp-bioscfg: fix ORD_LIST_ELEMENTS never being parsed

Muhammad Bilal <meatuni001@xxxxxxxxx>
    platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()

Muhammad Bilal <meatuni001@xxxxxxxxx>
    platform/x86: hp-bioscfg: fix new_password_store() overwriting current_password

Muhammad Bilal <meatuni001@xxxxxxxxx>
    platform/x86: hp-bioscfg: fix heap OOB read on empty password write

Muhammad Bilal <meatuni001@xxxxxxxxx>
    platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store()

Muhammad Bilal <meatuni001@xxxxxxxxx>
    platform/x86: hp-bioscfg: bound ordered-list parsing by the package count

Muhammad Bilal <meatuni001@xxxxxxxxx>
    platform/x86: hp-bioscfg: advance elem past consumed array elements

Muhammad Bilal <meatuni001@xxxxxxxxx>
    platform/x86: hp-bioscfg: accept reduced ACPI packages from older HP BIOS

Mario Limonciello <mario.limonciello@xxxxxxx>
    platform/x86/amd/pmc: Fix msg_port restoration in amd_stb_debugfs_open_v2()

Mario Limonciello <mario.limonciello@xxxxxxx>
    platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails

Mario Limonciello <mario.limonciello@xxxxxxx>
    platform/x86/amd/pmc: Propagate SMU errors and validate S2D address

Mario Limonciello <mario.limonciello@xxxxxxx>
    platform/x86/amd/pmc: Restore msg_port on amd_stb_s2d_init() error paths

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    platform/chrome: sensorhub: Bound the EC-reported sensor number

Thorsten Blum <thorsten.blum@xxxxxxxxx>
    platform/x86: think-lmi: Fix current password length check

Thorsten Blum <thorsten.blum@xxxxxxxxx>
    platform/x86: think-lmi: Free system certificate signatures

Thorsten Blum <thorsten.blum@xxxxxxxxx>
    platform/x86: think-lmi: Fix certificate thumbprint sysfs output

Hilgad Montelo <hilgad.montelo@xxxxxxxxx>
    platform/x86: panasonic-laptop: Fix sentinel write past pcc->sinf[]

Julian Haarmann <julian.haarmann@xxxxxxxxxxxxxxx>
    platform/x86: lenovo/ymc: Only match lower byte in WMI lid switch query response

Ma Ke <make_ruc2021@xxxxxxx>
    platform/x86: ishtp_eclite: Fix ACPI device reference leak in probe error path

Abdun Nihaal <nihaal@xxxxxxxxxxxxxx>
    platform/x86: int1092: Fix potential memory leak in sar_probe()

Krishna Chomal <krishna.chomal108@xxxxxxxxx>
    platform/x86: hp-wmi: Add support for OMEN MAX 16-ak0xxx (8DD6)

Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
    platform/x86: ISST: Return error during profile addition

Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
    platform/x86: ISST: Validate parameter for frequency and priority

Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
    platform/x86: ISST: Validate parameter for core power state

Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
    platform/x86: ISST: Validate max level for set feature

Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
    platform/x86: ISST: Validate logical CPU id and clos id

Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
    platform/x86: ISST: Use PP level enable mask

Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
    platform/x86: ISST: Just allow 2 bits for SST feature enable

Srinivas Pandruvada <srinivas.pandruvada@xxxxxxxxxxxxxxx>
    platform/x86: ISST: Add a NULL check for sst_inst[]

Fan Wu <fanwu01@xxxxxxxxxx>
    mmc: via-sdmmc: stop card-detect handling on probe failure

Fan Wu <fanwu01@xxxxxxxxxx>
    mmc: via-sdmmc: cancel card-detect work on remove

HyeongJun An <sammiee5311@xxxxxxxxx>
    platform/x86: ISST: Validate socket ID in clos_assoc ioctl

HyeongJun An <sammiee5311@xxxxxxxxx>
    platform/x86: ISST: Validate level in perf mask ioctls

HyeongJun An <sammiee5311@xxxxxxxxx>
    platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer

Peiyang He <peiyang_he@xxxxxxxxxxxxxxxx>
    iommufd: Fix UAF in selftest IOPF reporting

Shuai Xue <xueshuai@xxxxxxxxxxxxxxxxx>
    iommufd: Release current IOAS on xa_store() failure

Shuai Xue <xueshuai@xxxxxxxxxxxxxxxxx>
    iommufd: Avoid locking internal accesses during unmap

Shuai Xue <xueshuai@xxxxxxxxxxxxxxxxx>
    iommupt: Return zero for invalid iova_to_phys() ranges

Kevin Tian <kevin.tian@xxxxxxxxx>
    iommu/vt-d: Force requesting ACS when tboot is enabled

Kevin Tian <kevin.tian@xxxxxxxxx>
    iommu/vt-d: Fix no_iommu to disable platform opt-in

Peiyang He <peiyang_he@xxxxxxxxxxxxxxxx>
    iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add

Shameer Kolothum <skolothumtho@xxxxxxxxxx>
    iommu/arm-smmu-v3: Manage teardown with devm

Robin Murphy <robin.murphy@xxxxxxx>
    iommu/arm-smmu-v3: Add HAFT support for SVA

Nicolin Chen <nicolinc@xxxxxxxxxx>
    iommu/tegra241-cmdqv: Reject a vSID wider than the SID_MATCH field

Shuai Xue <xueshuai@xxxxxxxxxxxxxxxxx>
    iommu/sva: Set handle->dev before the SVA handle is visible

Weimin Xiong <xiongwm2026@xxxxxxx>
    iommu/msm: Unwind probe state on registration failure

Shuai Xue <xueshuai@xxxxxxxxxxxxxxxxx>
    iommu/amd: Put PCI device after handling PPR faults

Krzysztof Wilczyński <kwilczynski@xxxxxxxxxx>
    PCI/proc: Warn on writes to kernel-exclusive config space regions

Krzysztof Wilczyński <kwilczynski@xxxxxxxxxx>
    PCI/proc: Use file_ns_capable() when checking config space read access

Krzysztof Wilczyński <kwilczynski@xxxxxxxxxx>
    PCI/proc: Avoid spurious runtime PM wakeup on config space accesses

Farhan Ali <alifm@xxxxxxxxxxxxx>
    PCI/MSI: Enable memory decoding before restoring MSI-X messages

Darshit Shah <darnshah@xxxxxxxxx>
    PCI/DPC: Allow DPC on all Downstream Ports when OS controls AER

Max Lee <max.lee@xxxxxxxxxxxxx>
    PCI/ASPM: Avoid L0s for Realtek RTS525A

Lukas Wunner <lukas@xxxxxxxxx>
    PCI/AER: Fix mapping of errors to agent & layer

Lukas Wunner <lukas@xxxxxxxxx>
    PCI/AER: Emit TLP Log only for unmasked errors

Krzysztof Wilczyński <kwilczynski@xxxxxxxxxx>
    PCI/sysfs: Avoid spurious runtime PM wakeup on config space accesses

Krzysztof Wilczyński <kwilczynski@xxxxxxxxxx>
    PCI/sysfs: Fix read byte order in pci_read_legacy_io()

Tim Harvey <tharvey@xxxxxxxxxxxxx>
    PCI: Add ACS quirk for Pericom PI7C9X2G608 switches [12d8:2608]

Ali Tariq <alitariq45892@xxxxxxxxx>
    PCI: plda: Fix IRQ domain leaks in the error paths of plda_init_interrupts()

Ali Tariq <alitariq45892@xxxxxxxxx>
    PCI: plda: Fix use-after-free of event IRQs during teardown

Ali Tariq <alitariq45892@xxxxxxxxx>
    PCI: starfive: Fix resource leaks on error paths in host_init()

Ronald Claveau <linux-kernel-dev@xxxxxxxx>
    PCI: meson: Fix GPIO state while requesting PERST#

Mohamad Raizudeen <raizudeen.kerneldev@xxxxxxxxx>
    PCI: Fix 32-bit config write in Intel PCH Root Port MPC ACS quirk

Naman Jain <namjain@xxxxxxxxxxxxxxxxxxx>
    PCI: hv: Set irq_retrigger callback for the Hyper-V PCI MSI irqchip

Stefan Haberland <sth@xxxxxxxxxxxxx>
    s390/dasd: Propagate partial completion length across ERP recovery

Stefan Haberland <sth@xxxxxxxxxxxxx>
    s390/dasd: Guard sysfs discipline callbacks against unallocated private data

Stefan Haberland <sth@xxxxxxxxxxxxx>
    s390/dasd: Do not complete a failed ESE read as successful

Karl Mehltretter <kmehltretter@xxxxxxxxx>
    s390/percpu: Fix MVIY_PERCPU() with older binutils

Thomas Richter <tmricht@xxxxxxxxxxxxx>
    s390/cpum_cf: Handle CPU hotplug via prepare/dead callbacks

Jianing Li <m13940358460@xxxxxxx>
    power: supply: max17040: synchronize work cancellation on suspend

Jianing Li <m13940358460@xxxxxxx>
    power: supply: max17040: drop incorrect I2C functionality check

Jianing Li <m13940358460@xxxxxxx>
    power: supply: max17040: propagate register read errors

Fan Wu <fanwu01@xxxxxxxxxx>
    power: supply: ucs1002: fix use-after-free on remove

Maoyi Xie <maoyixie.tju@xxxxxxxxx>
    power: supply: twl4030_charger: cancel workers via devm

Fan Wu <fanwu01@xxxxxxxxxx>
    power: supply: rt9455: quiesce delayed work before teardown

HyeongJun An <sammiee5311@xxxxxxxxx>
    power: supply: qcom_battmgr: terminate the strings from firmware

Fan Wu <fanwu01@xxxxxxxxxx>
    power: supply: qcom_battmgr: fix use-after-free

Xu Rao <raoxu@xxxxxxxxxxxxx>
    power: supply: pf1550: enable charging when battery profile exists

Fan Wu <fanwu01@xxxxxxxxxx>
    power: supply: lp8788-charger: fix use-after-free on remove

Fan Wu <fanwu01@xxxxxxxxxx>
    power: supply: lp8727: fix use-after-free in lp8727_release_irq()

Jameson Thies <jthies@xxxxxxxxxx>
    power: supply: cros_usbpd: Limit port counts to EC_USB_PD_MAX_PORTS

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    power: supply: cros_usbpd-charger: bound the EC-reported port count

Fan Wu <fanwu01@xxxxxxxxxx>
    power: supply: charger-manager: register regulators before exposing sysfs

Ma Ke <make_ruc2021@xxxxxxx>
    power: supply: bq25890: Fix power_supply reference leak

Fan Wu <fanwu01@xxxxxxxxxx>
    power: supply: bq256xx: drain usb_work before freeing the charger

Fan Wu <fanwu01@xxxxxxxxxx>
    power: supply: bq24257: fix use-after-free on remove

Jun Yang <junvyyang@xxxxxxxxxxx>
    sctp: fix stream->outcnt underflow on duplicate RECONF responses

Jun Yang <junvyyang@xxxxxxxxxxx>
    sctp: distinguish sequence zero from wildcard in reconf lookup

Weiming Shi <bestswngs@xxxxxxxxx>
    sctp: fix NULL deref on untransmitted RECONF completion

Hyunwoo Kim <imv4bel@xxxxxxxxx>
    sctp: drop a chunk if its transport was removed

Hyunwoo Kim <imv4bel@xxxxxxxxx>
    sctp: stop processing a packet once its association is deleted

Yehyeong Lee <yhlee@xxxxxxxxxxxxxxxxxx>
    nvme-tcp: reject a read that transferred too few bytes

Yehyeong Lee <yhlee@xxxxxxxxxxxxxxxxxx>
    nvme-tcp: fix host memory disclosure on R2T for a read command

Yehyeong Lee <yhlee@xxxxxxxxxxxxxxxxxx>
    nvme-tcp: do not accept C2HData based on blk_rq_payload_bytes() alone

Myeonghun Pak <mhun512@xxxxxxxxx>
    nvme-pci: disable controller on admin queue IRQ setup failure

Yehyeong Lee <yhlee@xxxxxxxxxxxxxxxxxx>
    nvme: zero the discard fallback page

Ewan D. Milne <emilne@xxxxxxxxxx>
    nvme: nvme-fc: Fix nvme_fc_create_hw_io_queues() queue deletion in error path

Oscar Ou <oscarou@xxxxxxxxxxxx>
    lockd: fix swapped arguments in nlmsvc_match_ip()

Shuangpeng Bai <shuangpeng.kernel@xxxxxxxxx>
    lockd: fix NULL dereference on lockowner allocation failure

Olga Kornievskaia <okorniev@xxxxxxxxxx>
    lockd: fix NLMv4 GRANTED_MSG handling

Michael Bommarito <michael.bommarito@xxxxxxxxx>
    lockd: pin next file across nlm_inspect_file lock-drop

Yifei Gao <gyf161023@xxxxxxxxx>
    ipmi: Fix use-after-free of cmd_rcvr in _ipmi_destroy_user()

Ruoyu Wang <ruoyuw560@xxxxxxxxx>
    i2c: mxs: fix DMA channel leak on probe error

Cong Nguyen <congnt264@xxxxxxxxx>
    hwmon: (max6621) fix temperature clamp range

Cong Nguyen <congnt264@xxxxxxxxx>
    hwmon: (max6621) fix negative temperature offset and crit readings

Alexander Graf <graf@xxxxxxxxxx>
    dma-contiguous: fix truncation of numa_cma / cma_pernuma sizes >= 2G

Jorijn van der Graaf <jorijnvdgraaf@xxxxxxxxxxxxx>
    ASoC: codecs: aw88261: only check PLL and clock state at power-up

Christopher Tolang <christophertolang@xxxxxxxxx>
    ASoC: amd: yc: Add DMI entry for MSI Thin A15 B7UC

Karl Mehltretter <kmehltretter@xxxxxxxxx>
    arm64: proton-pack: Restore the nospectre_bhb command-line option

Karl Mehltretter <kmehltretter@xxxxxxxxx>
    arm64: compat: Fix decrementing LDM/STM alignment emulation

HyeongJun An <sammiee5311@xxxxxxxxx>
    ALSA: ump: Fix corrupted data bytes at MIDI 1.0 SysEx to UMP conversion

Norbert Szetei <norbert@xxxxxxxxxxxx>
    openvswitch: only skb_tx_error() a packet we are about to drop

Yuqi Xu <xuyuqiabc@xxxxxxxxx>
    openvswitch: Fix CT limit teardown use-after-free

Ali Ahmet Memis <ali@xxxxxxxxxxxxxx>
    openrisc: fix arbitrary kernel memory access via or1k_atomic syscall

Zhan Xusheng <zhanxusheng1024@xxxxxxxxx>
    ocfs2: fix readdir position truncation on 32-bit kernels

Matthias Goergens <matthias.goergens@xxxxxxxxx>
    ocfs2: fix cached cluster count after suballocator reclaim

Joseph Qi <joseph.qi@xxxxxxxxxxxxxxxxx>
    ocfs2: cluster: fix o2hb_dependent_users leak on pin failure

Joseph Qi <joseph.qi@xxxxxxxxxxxxxxxxx>
    ocfs2: cluster: avoid lock order inversion in o2hb_region_pin() from drop_item

Joseph Qi <joseph.qi@xxxxxxxxxxxxxxxxx>
    ocfs2: cluster: don't sleep while holding o2hb_live_lock in o2hb_region_pin()

Doruk Tan Ozturk <doruk@xxxxxxx>
    ocfs2: validate directory-index entry counts when reading metadata

Ibrahim Hashimov <security@xxxxxxxxxxxx>
    ocfs2: validate rl_used against rl_count in refcount block validator

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    ocfs2: validate lengths in dlm_mig_lockres_handler

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    ocfs2: bound namelen in dlm_migrate_request_handler

Dmitry Antipov <dmantipov@xxxxxxxxx>
    ocfs2: always run deallocs on copy-on-write completion

Zhiling Zou <zhilinz@xxxxxxxxxx>
    orangefs: skip leading spaces before parsing client debug masks

Yifei Gao <gyf161023@xxxxxxxxx>
    orangefs: fix double-free of trailer_buf on readdir copy failure

Shibo Zhu <3499129952@xxxxxx>
    PM: sleep: Unblock runtime PM when device prepare fails

Ivan Immanuel Shaji <ivanimmanuel1234@xxxxxxxxx>
    ring-buffer: Stop remote reader update when page swap fails

Vincent Donnefort <vdonnefort@xxxxxxxxxx>
    ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page

Vincent Donnefort <vdonnefort@xxxxxxxxxx>
    ring-buffer: Hold cpu_buffer::lock when resizing a subbuf

Vincent Donnefort <vdonnefort@xxxxxxxxxx>
    ring-buffer: Free cpu_buffer::free_page with subbuf_order

Vincent Donnefort <vdonnefort@xxxxxxxxxx>
    ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page()

Kathiravan Thirumoorthy <kathiravan.thirumoorthy@xxxxxxxxxxxxxxxx>
    regulator: qcom-refgen: correct the regulator type to CURRENT

WenTao Liang <vulab@xxxxxxxxxxx>
    regulator: max8998_pmic_dt_parse_pdata: of_node_put on reg_np after ownership transferred to rdata

WenTao Liang <vulab@xxxxxxxxxxx>
    regulator: as3722_get_regulator_dt_data: fix premature of_node_put leaving dangling of_node pointer

Yuhang Pan <242270054@xxxxxxxxxx>
    RDMA/uverbs: Guard legacy bundles without method_elm

Jason Gunthorpe <jgg@xxxxxxxx>
    RDMA/uverbs: Add UVERBS_ATTR_UHW to UVERBS_METHOD_REG_MR

Norbert Szetei <norbert@xxxxxxxxxxxx>
    RDMA/ucma: Lock the handler in ucma_write_cm_event()

Norbert Szetei <norbert@xxxxxxxxxxxx>
    RDMA/ucma: Lock the handler in ucma_set_ib_path()

Abhijit Gangurde <abhijit.gangurde@xxxxxxx>
    RDMA/ionic: Embed counter driver data in rdma_counter allocation

Brett Creeley <brett.creeley@xxxxxxx>
    RDMA/ionic: Cap eq_count to the eth driver's interrupt vector budget

Fan Wu <fanwu01@xxxxxxxxxx>
    RDMA/cxgb4: Cancel reg_work before freeing device on remove

Vaibhav Nagare <nagarevaibhav@xxxxxxxxx>
    qede: Fix NULL pointer dereference in TPA fragment processing

Abdifatah Suruur <suruurism@xxxxxxxxx>
    ptp: vmclock: prevent read-only mappings from becoming writable

Johan Hovold <johan@xxxxxxxxxx>
    remoteproc: scp: Fix device reference leak on failed lookup

Nam Cao <namcao@xxxxxxxxxxxxx>
    riscv: unaligned: stop using kthread for check_vector_unaligned_access()

Peixin Xie <peixin.xie@xxxxxxxxxxxxxxxxxx>
    riscv: acpi: Handle LPI architectural context loss flags

Guidong Han <2045gemini@xxxxxxxxx>
    RISC-V: KVM: Fix PMU event info array size overflow

Aurelien Jarno <aurelien@xxxxxxxxxxx>
    riscv: dts: spacemit: k1-orangepi-rv2: fix maximum CPU core voltage

Aurelien Jarno <aurelien@xxxxxxxxxxx>
    riscv: dts: spacemit: k1-orangepi-r2s: fix maximum CPU core voltage

Aurelien Jarno <aurelien@xxxxxxxxxxx>
    riscv: dts: spacemit: k1-musepi-pro: fix maximum CPU core voltage

Aurelien Jarno <aurelien@xxxxxxxxxxx>
    riscv: dts: spacemit: k1-milkv-jupiter: fix maximum CPU core voltage

Aurelien Jarno <aurelien@xxxxxxxxxxx>
    riscv: dts: spacemit: k1-bananapi-f3: fix maximum CPU core voltage

Fabio Estevam <festevam@xxxxxxxxxxxx>
    arm64: dts: rockchip: Fix rk3588s-roc-pc audio description

Fabio Estevam <festevam@xxxxxxxxxxxx>
    arm64: dts: rockchip: Fix rk3399-roc-pc-plus analog audio

Jakob Unterwurzacher <jakob.unterwurzacher@xxxxxxxxx>
    arm64: dts: rockchip: fix emmc reset polarity on px30-cobra

Quentin Schulz <quentin.schulz@xxxxxxxxx>
    arm64: dts: rockchip: fix eMMC reset polarity on PX30 Ringneck

Quentin Schulz <quentin.schulz@xxxxxxxxx>
    arm64: dts: rockchip: fix eMMC reset polarity on PP-1516

Michael Scott <mike.scott@xxxxxxxxxxxxxxxx>
    arm64: dts: qcom: x1-dell-thena: mark l12b and l15b always-on

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxxxxx>
    arm64: dts: qcom: sm6115-pro1x: Correct touchscreen GPIO flags

Jianping Li <jianping.li@xxxxxxxxxxxxxxxx>
    arm64: dts: qcom: kodiak: avoid EFI overlap for ADSP remote heap

Oren Klopfer <oklopfer37@xxxxxxxxx>
    Revert "arm64: dts: rockchip: Further describe the WiFi for the Pinephone Pro"

Chunkai Deng <chunkai.deng@xxxxxxxxxxxxxxxx>
    rpmsg: glink: smem: order FIFO read after availability check

Linkai Gong <gonglinkai@xxxxxxxxxx>
    scsi: fnic: Use GFP_ATOMIC for VLAN alloc under spinlock

Petr Vaganov <p.vaganov@xxxxxxxx>
    scsi: core: Fill in DMA padding bytes in scsi_alloc_sgtables()

Tejun Heo <tj@xxxxxxxxxx>
    sched_ext: Keep kick_sync waiting on the rq's own CPU

Tejun Heo <tj@xxxxxxxxxx>
    sched_ext: Fix scx_bpf_dsq_reenq___compat kfunc extern prototype

Tao Cui <cuitao@xxxxxxxxxx>
    sched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_users

Tejun Heo <tj@xxxxxxxxxx>
    sched_ext: Fix inverted ops.core_sched_before() invocation

fangqiurong <fangqiurong@xxxxxxxxxx>
    sched_ext: Fix exit_task leak on fork failure during enable

fangqiurong <fangqiurong@xxxxxxxxxx>
    sched_ext: Fix scx_bpf_dsq_move_to_local___v2 compat detection

Tejun Heo <tj@xxxxxxxxxx>
    sched_ext: Count rq lock releases in rq->scx.lock_drop_seq

Tejun Heo <tj@xxxxxxxxxx>
    sched_ext: Fix rq->core_pick corruption under core scheduling

Tejun Heo <tj@xxxxxxxxxx>
    sched_ext: Fix this_rq() assumptions in dispatch kfuncs

Tejun Heo <tj@xxxxxxxxxx>
    sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return

Tejun Heo <tj@xxxxxxxxxx>
    sched/core: Make core-sched flips wait for in-flight selections

Tejun Heo <tj@xxxxxxxxxx>
    sched/core: Handle pick_task() releasing the rq lock

Cong Nguyen <congnt264@xxxxxxxxx>
    media: staging/ipu7: fix async notifier UAF on probe error path

Hao-Qun Huang <alvinhuang0603@xxxxxxxxx>
    staging: media: tegra-video: vi: fix probe failure on skipped last port

Hao-Qun Huang <alvinhuang0603@xxxxxxxxx>
    staging: media: tegra-video: fix of_node_put() on VIP parse errors

Wentao Guan <guanwentao@xxxxxxxxxxxxx>
    wifi: mt76: mt7925: cancel pending mlo_pm_work

Doruk Tan Ozturk <doruk@xxxxxxx>
    wifi: ath6kl: clamp assoc request/response lengths before subtracting IE offsets

David Lee <david.lee@xxxxxxxxxxxxxxx>
    udf: reject VAT indexes equal to the entry count

Chuck Lever <cel@xxxxxxxxxx>
    svcrdma: Validate Read chunk positions before reconstruction

Chuck Lever <cel@xxxxxxxxxx>
    svcrdma: Use svc_xprt_put to free listener on create failure

Chris Mason <clm@xxxxxxxx>
    svcrdma: Reject Write/Reply chunks with segcount 0

Chuck Lever <cel@xxxxxxxxxx>
    svcrdma: Reject Read lists that exceed the page budget

Chuck Lever <cel@xxxxxxxxxx>
    svcrdma: Reject oversized Read segments at decode time

Chuck Lever <cel@xxxxxxxxxx>
    svcrdma: Reject inline replies that overflow the pull-up buffer

Chuck Lever <cel@xxxxxxxxxx>
    svcrdma: Reject connection when transport allocation fails

Chris Mason <clm@xxxxxxxx>
    svcrdma: Fix unmatched rn_unregister on failed accept

Chris Mason <clm@xxxxxxxx>
    svcrdma: Fix pcl_for_each_segment for empty chunks

Chris Mason <clm@xxxxxxxx>
    svcrdma: Fix offset arithmetic in read_chunk_range

Chuck Lever <cel@xxxxxxxxxx>
    svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails

Chuck Lever <cel@xxxxxxxxxx>
    svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id

Jérémy Jean <Jeremy.Jean@xxxxxxxxxxxxxxxxx>
    SUNRPC: wait for in-flight client TLS handshake callback

Chuck Lever <cel@xxxxxxxxxx>
    SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2

Chuck Lever <cel@xxxxxxxxxx>
    SUNRPC: Reject krb5 v2 wrap tokens with oversized ec field

Chris Mason <clm@xxxxxxxx>
    SUNRPC: reject duplicate CREDS_VALUE options

Chris Mason <clm@xxxxxxxx>
    sunrpc: init gssp_lock before publishing proc entry

Chris Mason <clm@xxxxxxxx>
    SUNRPC: harden gss_unwrap_resp_priv length checks

Chris Mason <clm@xxxxxxxx>
    SUNRPC: harden gss_krb5_unwrap_v2 against short tokens

Chris Mason <clm@xxxxxxxx>
    SUNRPC: Guard svcauth_gss_release() dispatch on rq_auth_stat

Luxiao Xu <rakukuip@xxxxxxxxx>
    sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir

Chris Mason <clm@xxxxxxxx>
    SUNRPC: fix gssx_dec_option_array error path bugs

Jeff Layton <jlayton@xxxxxxxxxx>
    sunrpc: defer rq_argp and rq_resp free until after RCU grace period

Chuck Lever <cel@xxxxxxxxxx>
    SUNRPC: close backchannel before destroying callback service

Chuck Lever <cel@xxxxxxxxxx>
    SUNRPC: Check svc pool percpu counter allocation

Jeff Layton <jlayton@xxxxxxxxxx>
    SUNRPC: always drain cache_cleaner before destroying a cache_detail

Ameer Hamza <ameer.hamza@xxxxxxxxxxx>
    SUNRPC: Restore NUMA_NO_NODE for svc thread allocations in global mode

Jeff Layton <jlayton@xxxxxxxxxx>
    sunrpc: route to a populated pool in svc_pool_for_cpu()

Chris Mason <clm@xxxxxxxx>
    SUNRPC: svcauth_gss: enforce krb5 token minimum length

Chris Mason <clm@xxxxxxxx>
    SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry

Chris Mason <clm@xxxxxxxx>
    SUNRPC: xdr_buf_trim: clamp buf->len to avoid underflow

Felix Gu <ustc.gu@xxxxxxxxx>
    phy: fsl-imx8mq-usb: fix typec switch leak on probe error path

Jiacheng Yu <yujiacheng3@xxxxxxxxxx>
    params: fix charp corruption on allocation failure

Dave Airlie <airlied@xxxxxxxxxx>
    nouveau/gem: reserve the bo in the info ioctl around the vma lookup

Stanislaw Gruszka <stf_xl@xxxxx>
    module/kallsyms: fix nextval for data symbol lookup

Harshit Varu <harshitvaru666@xxxxxxxxx>
    mptcp: fix uninitialized local_id in syncookie MP_JOIN reconstruction

Qing Ming <a0yami@xxxxxxxxxxx>
    mpls: reload header after pskb_may_pull()

Thiébaud Weksteen <tweek@xxxxxxxxxx>
    module: validate string table section types

Coly Li <colyli@xxxxxxx>
    md: do overflow check for sb->bblog_shift in super_1_load()

Yunye Zhao <yunye.zhao@xxxxxxxxxxxxxxxxx>
    md/raid10: fix still_degraded being inverted in raid10_sync_request()

Anup Vishwakarma <anup.vishwakarma@xxxxxxxxxxxxxxxx>
    mailbox: qcom-ipcc: fix duplicate channel allocation across holes

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    libnvdimm/labels: Prevent integer overflow in __nd_label_validate()

Günther Noack <gnoack@xxxxxxxxxx>
    landlock: Require LANDLOCK_ACCESS_FS_MAKE_REG for whiteout creation

Yuyang Huang <sigefriedhyy@xxxxxxxxx>
    ipv6: use RCU iterator to dump route exceptions

Andrea Mayer <andrea.mayer@xxxxxxxxxxx>
    ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()

Zhiling Zou <zhilinz@xxxxxxxxxx>
    ip6_gre: fix hardware header length for NBMA tunnels

Zhiling Zou <zhilinz@xxxxxxxxxx>
    ip6_tunnel: use skb_cow_head() in ip6_tnl_xmit()

Zhiling Zou <zhilinz@xxxxxxxxxx>
    ip: orphan prefetched skbs before multicast forwarding

Anton Danilov <littlesmilingcloud@xxxxxxxxx>
    ipip: fix skb leak in collect_md mode when metadata_dst allocation fails

Max Kellermann <max.kellermann@xxxxxxxxx>
    jbd2: check need_resched() when skipping busy checkpoint buffers

Max Kellermann <max.kellermann@xxxxxxxxx>
    jbd2: bound shrinker scans by examined checkpoint buffers

Pratyush Yadav (Google) <pratyush@xxxxxxxxxx>
    kho: fix size calculation in kho_preserved_memory_reserve()

Hui Su <sh_def@xxxxxxx>
    kasan: fix cache shrink race with CPU hotplug

Ibrahim Abdelkader <iabdelka@xxxxxxxxxxxxxxxx>
    Bluetooth: hci_sync: Clear HCI_CMD_PENDING when dropping the last request

Guangshuo Li <lgs201920130244@xxxxxxxxx>
    Bluetooth: hci_intel: fix usage_count leak when autosuspend_delay is negative

Guangshuo Li <lgs201920130244@xxxxxxxxx>
    Bluetooth: hci_h5: fix usage_count leak when autosuspend_delay is negative

Valentin Kindschi <valentin.kindschi@xxxxxxxxx>
    Bluetooth: hci_event: clear HCI_LE_ADV only on a created connection

Xin Chen <xin.chen2@xxxxxxxxxxxxxxxx>
    Bluetooth: hci_core: use skb_get() instead of skb_clone() for req_skb

Valentin Kindschi <valentin.kindschi@xxxxxxxxx>
    Bluetooth: hci_conn: re-enable advertising only for peripheral role

Chengfeng Ye <nicoyip.dev@xxxxxxxxx>
    Bluetooth: RFCOMM: serialize security confirmation handling

Hang Nan <2122295973@xxxxxx>
    Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready

Gongwei Li <ligongwei@xxxxxxxxxx>
    Bluetooth: hci_uart: Fix false success return in hci_uart_setup()

Guangshuo Li <lgs201920130244@xxxxxxxxx>
    Bluetooth: hci_bcm: fix usage_count leak when autosuspend_delay is negative

Lorenzo Stoakes (ARM) <ljs@xxxxxxxxxx>
    Bluetooth: hci_bcm4377: Ignore reserved PHY in ext adv reports on BCM4378

Terry Bowman <terry.bowman@xxxxxxx>
    cxl/ras: Fix cxl_rch_get_aer_severity() wrong severity register

Alison Schofield <alison.schofield@xxxxxxxxx>
    cxl/pmem: Format the nvdimm serial number as unsigned decimal

Dave Jiang <dave.jiang@xxxxxxxxx>
    cxl/mce: Make the MCE notifier per-region

Zhenhao Wan <whi4ed0g@xxxxxxxxx>
    cxl/features: bound fwctl command payload to the input buffer

Hui Su <sh_def@xxxxxxx>
    cpufreq: schedutil: Fix rate limit overflow

Haoxiang Li <haoxiang_li2024@xxxxxxx>
    cpufreq: apple-soc: Fix OPP table cleanup

Kuan-Wei Chiu <visitorckw@xxxxxxxxx>
    coresight: etm3x: Fix cntr_val_show() to match cntr_val_store() behavior

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    dm array: reject an array block whose value size is not the caller's

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    dm array: validate array block headers on read

Ilya Krutskih <devsec@xxxxxx>
    dm raid1: reserve space for NUL-terminator in build_constructor_string()

liyouhong <liyouhong@xxxxxxxxxx>
    dm-era: fix shadowed superblock leak on take-snap failure

Mikulas Patocka <mpatocka@xxxxxxxxxx>
    dm-io: report non-retryable errors separatedly

Keith Busch <kbusch@xxxxxxxxxx>
    dm-io: clone the source bio instead of copying its biovec

Jérémy Jean <Jeremy.Jean@xxxxxxxxxxxxxxxxx>
    bpf: Harden bloom filter sizing and indexing on 32-bit kernels

Jia Zhu <zhujia.zj@xxxxxxxxxxxxx>
    buffer: avoid tail commit walk for uptodate folios

Daniel Borkmann <borkmann@xxxxxxxxxxxxx>
    bpf: Disable preemption in __bpf_get_stack

Vineet Gupta <vineet.gupta@xxxxxxxxx>
    bpf, x86: Fix per-CPU address resolution into an extended register

Joe Damato <joe@xxxxxxx>
    bnxt_en: Write doorbell when linearizing skb fails

Jiangshan Yi <yijiangshan@xxxxxxxxxx>
    bnx2x: fix double free in bnx2x_init_firmware() error path

HyeongJun An <sammiee5311@xxxxxxxxx>
    Bluetooth: eir: Fix OOB read in eir_get_service_data()

Junjie Cao <junjie.cao@xxxxxxxxx>
    Bluetooth: btusb: limit RTL8761B BROKEN_EXT_SCAN quirk to 0bda:a728

Christoph Zwerschke <cito@xxxxxxxxx>
    Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU

Christoph Zwerschke <cito@xxxxxxxxx>
    Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU

胡连勤 <hulianqin@xxxxxxxx>
    block: set QUEUE_FLAG_DYING unconditionally in blk_mark_disk_dead()

Keith Busch <kbusch@xxxxxxxxxx>
    block: validate user space vectors during extraction

Junjie Cao <junjie.cao@xxxxxxxxx>
    backlight: aw99706: Honor the core blank state in update_status()

Junjie Cao <junjie.cao@xxxxxxxxx>
    backlight: aw99706: Fix DT property names to match binding

Hongyan Xu <getshell@xxxxxxxxxx>
    auxdisplay: charlcd: cancel backlight work on registration failure

Niklas Cassel <cassel@xxxxxxxxxx>
    ata: libata-scsi: fix DSM TRIM for sector sizes larger than 2048 bytes

Ethan Nelson-Moore <enelsonmoore@xxxxxxxxx>
    ARM: 9477/1: Disable broken eBPF JIT on the Risc PC

Matt Turner <mattst88@xxxxxxxxx>
    alpha: marvel: Fix lock ordering in init_io7_irqs()

Matt Turner <mattst88@xxxxxxxxx>
    alpha: marvel: Fix irq_set_status_flags to use correct IRQ number

Krzysztof Wilczyński <kwilczynski@xxxxxxxxxx>
    alpha/PCI: Fix I/O port accessor argument order in pci_legacy_write()

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
    ACPI: TAD: Add locking around AML evaluations

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
    ACPI: scan: Avoid registering platform devices with resource overlaps

Anirudh Prasad <icarus@xxxxxxxx>
    ACPI: pfr_update: fix stack buffer overflow in query_capability()

Christian Loehle <christian.loehle@xxxxxxx>
    ACPI: CPPC: Skip desired_perf read in cppc_get_perf()

Christian Loehle <christian.loehle@xxxxxxx>
    ACPI: CPPC: Reject desired_perf reads on _CPC revision 4+

TanZheng <tanzheng@xxxxxxxxxx>
    ACPI: APEI: GHES: fix ARM section length accounting after header

Nirmoy Das <nirmoyd@xxxxxxxxxx>
    ACPI: APEI: Fix ERST timeout unit conversion

Terry Bowman <terry.bowman@xxxxxxx>
    acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks

ZhaoJinming <zhaojinming@xxxxxxxxxxxxx>
    accel/rocket: Fix error path handling in rocket_job_run()

Shuvam Pandey <shuvampandey1@xxxxxxxxx>
    accel/rocket: initialize job domain before cleanup paths

Muhammad Bilal <meatuni001@xxxxxxxxx>
    accel/rocket: fix NULL dereference and integer overflow in rocket_job_push()

Guillaume Morin <guillaume@xxxxxxxxxxx>
    hugetlb: only adjust reservation during unmapping if mapcount is 0

Ivaylo Dimitrov <ivo.g.dimitrov.75@xxxxxxxxx>
    hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device

Youngjae Kwon <yjkwon0026@xxxxxxxxx>
    fsnotify: Fix stale object mask after concurrent mark updates

Tien Sung Ang <tien.sung.ang@xxxxxxxxxx>
    fpga: stratix10-soc: Fix SVC mailbox handling during reconfiguration

Marek Czernohous <marek@xxxxxxxxxxxxx>
    forcedeth: fix off-by-one when saving/restoring non-PCI config space

Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
    fonts: fixup font.h kernel-doc warnings

Myeonghun Pak <mhun512@xxxxxxxxx>
    fbdev: uvesafb: unregister connector callback on init failure

Hui Su <sh_def@xxxxxxx>
    fbdev: ssd1307fb: defer I2C transfers from damage callbacks

Florian Fuchs <fuchsfl@xxxxxxxxx>
    fbdev: pvr2fb: correct user pointer annotation and sentinel initializer

Runyu Xiao <runyu.xiao@xxxxxxxxxx>
    fbdev: omapfb: panel-dsi-cm: initialize lock before registering display

Yemu Lu <prcups@xxxxxxxx>
    fat: restore original value when fat_ent_write failed

Chengfeng Ye <nicoyip.dev@xxxxxxxxx>
    fanotify: fix use-after-free of file range info

Jan Kara <jack@xxxxxxx>
    ext2: Fix lost inode updates for IS_SYNC inodes

Nikhil Gurudasani <nikhilgurudasani314@xxxxxxxxx>
    erofs: skip sufficiently large global buffers when resizing

Jinjie Ruan <ruanjinjie@xxxxxxxxxx>
    entry: Fix seccomp bypass after ptrace with TSYNC

Ard Biesheuvel <ardb@xxxxxxxxxx>
    efivarfs: Rate limit statfs() handler

Yichong Chen <chenyichong@xxxxxxxxxxxxx>
    ecryptfs: show filename encryption options

Yichong Chen <chenyichong@xxxxxxxxxxxxx>
    ecryptfs: release message context on send failure

Yichong Chen <chenyichong@xxxxxxxxxxxxx>
    ecryptfs: reject too-small tag 70 packets

HanQuan <eilaimemedsnaimel@xxxxxxxxx>
    ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet

Yichong Chen <chenyichong@xxxxxxxxxxxxx>
    ecryptfs: pass packet set buffer size to parser

Yichong Chen <chenyichong@xxxxxxxxxxxxx>
    ecryptfs: hold msg ctx list lock when cleaning daemon queue

Yichong Chen <chenyichong@xxxxxxxxxxxxx>
    ecryptfs: fix tag 11 packet exact-fit size check

Pengpeng Hou <pengpeng@xxxxxxxxxxx>
    eCryptfs: bound the packet-length peek to the user buffer

Hongling Zeng <zenghongling@xxxxxxxxxx>
    ntfs: verify run length exceeding volume boundary

Hongling Zeng <zenghongling@xxxxxxxxxx>
    ntfs: validate non-resident attribute offsets

Hyunchul Lee <hyc.lee@xxxxxxxxx>
    ntfs: reject invalid MFT LCNs from boot sector

Hyunchul Lee <hyc.lee@xxxxxxxxx>
    ntfs: reject invalid empty mapping pairs

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    ntfs: bound the free-cluster bitmap scan to the volume

Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx>
    fs/ntfs3: bound page_lcns[] index by the log record

Samuel Page <sam@xxxxxxxx>
    fs/ntfs3: fix info-leak on partial LZNT decompress in ni_read_frame()

Xiang Mei <xmei5@xxxxxxx>
    fs/ntfs3: validate dirty page table on log replay

Deepanshu Kartikey <kartikey406@xxxxxxxxx>
    eventfs: Initialize ei->children and ei->list in init_ei()

Guangshuo Li <lgs201920130244@xxxxxxxxx>
    HID: intel-thc-hid: intel-quickspi: fix autosuspend cleanup during teardown

Guangshuo Li <lgs201920130244@xxxxxxxxx>
    HID: intel-thc-hid: intel-quicki2c: fix autosuspend cleanup during teardown

HyeongJun An <sammiee5311@xxxxxxxxx>
    HID: intel-thc-hid: intel-quickspi: bound GET_REPORT response to the caller buffer

HyeongJun An <sammiee5311@xxxxxxxxx>
    HID: intel-thc-hid: intel-quickspi: validate report size before copy

Jiangshan Yi <yijiangshan@xxxxxxxxxx>
    HID: mcp2221: validate report size in mcp2221_raw_event()

Jiangshan Yi <yijiangshan@xxxxxxxxxx>
    HID: mcp2221: clear rxbuf after I2C/SMBus transfer completes

Jiangshan Yi <yijiangshan@xxxxxxxxxx>
    HID: mcp2221: stop device IO before hid_hw_stop

Baul Lee <baul.lee@xxxxxxxx>
    HID: universal-pidff: stop the device when force-feedback init fails

Doruk Tan Ozturk <doruk@xxxxxxx>
    HID: sony: fix UAF of ghl_poke_timer / ghl_urb at driver unbind

Haoxiang Li <haoxiang_li2024@xxxxxxx>
    HID: sensor: custom: Fix field sysfs group cleanup on failure

Xu Rao <raoxu@xxxxxxxxxxxxx>
    HID: roccat: free buffered reports when destroying device

Ibrahim Hashimov <security@xxxxxxxxxxxx>
    HID: picolcd: clamp eeprom debugfs read to bytes actually received

Stuart Hayhurst <stuart.a.hayhurst@xxxxxxxxx>
    HID: corsair-void: Check size of status and firmware events before reading them

Andre Eikmeyer <dev@deq.rocks>
    HID: apple: preserve keyboard backlight across T2 resume

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    smb: client: restore the data_offset bound in is_valid_oplock_break()

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    smb: client: reject a tree connect response whose byte count is too small

Fredric Cover <fredric.cover.lkernel@xxxxxxxxx>
    smb: client: harden DFS cache against invalid target hints

Frank Sorenson <sorenson@xxxxxxxxxx>
    smb: client: fix use-before-check of ReparseDataLength in reparse_buf_ptr()

Frank Sorenson <sorenson@xxxxxxxxxx>
    smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()

Frank Sorenson <sorenson@xxxxxxxxxx>
    smb: client: fix copy-paste error in WSL EA length accounting for $LXDEV

Frank Sorenson <sorenson@xxxxxxxxxx>
    smb: client: fix ALIGN() overflow in symlink_data() error context loop

Aldo Ariel Panzardo <qwe.aldo@xxxxxxxxx>
    ksmbd: only rebind the reopened file's own oplock on durable reconnect

Fredric Cover <fredric.cover.lkernel@xxxxxxxxx>
    smb: client: clear ce->tgthint in free_tgts()

Frank Sorenson <sorenson@xxxxxxxxxx>
    smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2

Jiangshan Yi <yijiangshan@xxxxxxxxxx>
    smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions

Frank Sorenson <sorenson@xxxxxxxxxx>
    cifs: use cifs_invalidate_cache() in cifs_do_truncate() for O_TRUNC

Frank Sorenson <sorenson@xxxxxxxxxx>
    cifs: fix loff_t underflow in cifs_remap_file_range() when len == 0

Frank Sorenson <sorenson@xxxxxxxxxx>
    cifs: clear tcon after cifsFileInfo_put() in cifs_file_set_size()

Frank Sorenson <sorenson@xxxxxxxxxx>
    cifs: call pagecache_isize_extended() in cifs_setsize() when extending

Frank Sorenson <sorenson@xxxxxxxxxx>
    cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem

Jérémy Jean <Jeremy.Jean@xxxxxxxxxxxxxxxxx>
    audit: avoid dropping live tree ref on fsnotify rule autoremove

Qu Wenruo <wqu@xxxxxxxx>
    btrfs: do not overwrite NODATASUM flag when removing NODATACOW flag

Shuangpeng Bai <shuangpeng.kernel@xxxxxxxxx>
    btrfs: fix extent map leak in NOCOW direct I/O write

Guanghui Yang <3497809730@xxxxxx>
    btrfs: drop recovered reloc root refs on recovery failure

Matthew Brown <matthew@xxxxxxxxxxxx>
    ceph: fix leaked inode reference on writeback abort at umount

Max Kellermann <max.kellermann@xxxxxxxxx>
    ceph: do not repeat ceph_trim_dentries() if no progress possible

Michael Bommarito <michael.bommarito@xxxxxxxxx>
    ceph: cap delegated inode count in ceph_parse_deleg_inos()

Michael Bommarito <michael.bommarito@xxxxxxxxx>
    ceph: bound xattr value length in __build_xattrs()

Michael Bommarito <michael.bommarito@xxxxxxxxx>
    ceph: bound num_export_targets array for mds info v2/v3

Michael Bommarito <michael.bommarito@xxxxxxxxx>
    ceph: bound MDSCapAuth path and fs_name decode in handle_session()

Michael Bommarito <michael.bommarito@xxxxxxxxx>
    ceph: bound copied dentry name length in NFS export get_name

Jérémy Jean <Jeremy.Jean@xxxxxxxxxxxxxxxxx>
    ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode

Max Kellermann <max.kellermann@xxxxxxxxx>
    ceph: force a cap message when a deferred revoke can't be acked immediately

Xiubo Li <xiubo.li@xxxxxxxxx>
    ceph: fix UAF in check_new_map() on session freed during unlock

Xiubo Li <xiubo.li@xxxxxxxxx>
    ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock

Jérémy Jean <Jeremy.Jean@xxxxxxxxxxxxxxxxx>
    libceph: reject buckets with mismatched CRUSH ids

Michael Bommarito <michael.bommarito@xxxxxxxxx>
    libceph: validate OSD extent maps before cursor advance

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: use test_and_clear_bit for somebody_reclaimed to prevent lost update

Chuck Lever <cel@xxxxxxxxxx>
    NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup

Chuck Lever <cel@xxxxxxxxxx>
    NFSD: Prevent client use-after-free during delegation revoke

Chuck Lever <cel@xxxxxxxxxx>
    NFSD: Prevent client use-after-free during admin state revocation

Chuck Lever <cel@xxxxxxxxxx>
    NFSD: Prevent post-shutdown use-after-free in unlock_filesystem

Chuck Lever <cel@xxxxxxxxxx>
    NFSD: Prevent lock owner use-after-free during client teardown

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: revoke copy-notify stateids before dropping their reference

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: release OPEN-decoded posix ACLs via op_release

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: reject reclaim LOCK after RECLAIM_COMPLETE

Robbie Ko <robbieko@xxxxxxxxxxxx>
    nfsd: reject out-of-range useconds in NFSv2 SETATTR/CREATE

Robbie Ko <robbieko@xxxxxxxxxxxx>
    nfsd: reject out-of-range nseconds in NFSv3 SETATTR and create ops

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd()

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: initialize DRC hash table before registering shrinker

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: initialize copy-notify stateid before publishing it

Chris Mason <clm@xxxxxxxx>
    nfsd: hold rcu across localio cmpxchg retry

Chris Mason <clm@xxxxxxxx>
    nfsd: gate nfs3 setacl by argp->mask

Chuck Lever <cel@xxxxxxxxxx>
    nfsd: gate nfs2 setacl by argp->mask

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix version mismatch loops in nfsd_acl_init_request()

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix UAF in async copy cancel and shutdown

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix stale s2s_cp_stateids IDR entry for async COPY

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix reply size estimate for GET_DIR_DELEGATION

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix refcount leak in nfsd_file_lru_add on insertion failure

NeilBrown <neil@xxxxxxxxxx>
    nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()

Chris Mason <clm@xxxxxxxx>
    nfsd: fix partial-write detection in nfsd_direct_write

Nikol Kuklev <nikolk202@xxxxxxxxx>
    nfsd: fix null dereference in nfsd4_setattr for deleg timestamp attrs

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix nfsd_file leak on inter-server COPY setup failure

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix netlink dumpit error handling for rpc_status_get

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix layout fence worker double-reference race

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix FL_SLEEP being set unconditionally for all LOCK types

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix dentry ref leak on V4ROOT export filehandle lookup

Chris Mason <clm@xxxxxxxx>
    nfsd: fix cpntf publish race in nfs4_init_cp_state

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix clock domain mismatch in clients_still_reclaiming()

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke

NeilBrown <neil@xxxxxxxxxx>
    nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: drop the stateid, not the stateowner, on seqid_op replay retry

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: don't free session slots that are still in use

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: defer vfree of compound ops to fix rpc_status UAF

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: defer setting NFSD4_CALLBACK_RUNNING in deleg_reaper

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: dedup nfs4_client_to_reclaim inserts

Chris Mason <clm@xxxxxxxx>
    nfsd: convert nfsd_net boolean flags to unsigned long flags word

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: clear opcnt on compound arg release to prevent OOB read

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: clear CALLBACK_RUNNING on failed delegation recall queue

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: check client ownership when cancelling a copy-notify stateid

Chris Mason <clm@xxxxxxxx>
    nfsd: cap decoded POSIX ACL count to bound sort cost

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: block non-SAVEFH ops after FOREIGN PUTFH to prevent NULL deref

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: add missing read barrier to rpc_status_get dumpit seqcount retry

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: add filehandle match check to nfsd4_delegreturn()

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: validate symlink target length in NFSv4 CREATE

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: validate sockaddr length per family in listener_set

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: validate nseconds in TIME_DELEG decode paths

Chris Mason <clm@xxxxxxxx>
    nfsd: size fh_verify server sockaddr slot by xpt_locallen

Zhenghang Xiao <kipreyyy@xxxxxxxxx>
    nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations

Chuck Lever <cel@xxxxxxxxxx>
    nfsd: sample writeback error cursor before async COPY loop

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: return NFS4ERR_NOTSUPP for unsupported netloc4 types

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths

Chuck Lever <cel@xxxxxxxxxx>
    nfsd: Reset write verifier when async COPY writeback fails

Chris Mason <clm@xxxxxxxx>
    nfsd: release path refs on follow_down() error

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown

Jeff Layton <jlayton@xxxxxxxxxx>
    lockd, nfsd: RCU-protect nlmsvc_ops dispatch

Tim Menninger <tmenninger@xxxxxxxxxxxxxxxx>
    pNFS: Fix EBUSY check in pnfs_layout_need_return

Junrui Luo <moonafterrain@xxxxxxxxxxx>
    NFSv4.1: fix layout segment leak on the pnfs_layout_process() forget path

Chris Mason <clm@xxxxxxxx>
    nfsd: guard nfsd_serv deref in nfsd_file_net_dispose

Mike Snitzer <snitzer@xxxxxxxxxx>
    NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check

Michael Bommarito <michael.bommarito@xxxxxxxxx>
    NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock

Scott Mayhew <smayhew@xxxxxxxxxx>
    NFSD: fix up error returned by write_threads()

Chuck Lever <cel@xxxxxxxxxx>
    NFSD: Fix off-by-one in DRC bucket pruning limit

Chuck Lever <cel@xxxxxxxxxx>
    NFSD: Encode only the status in NFS-ACL v2 GETACL error replies

Chuck Lever <cel@xxxxxxxxxx>
    NFSD: check truncate permission under inode lock

Nate Prodromou <nate@xxxxxxxxxxxxx>
    NFS: fix delegation_hash_table leak when nfs4_server_common_setup() fails

Chris Mason <clm@xxxxxxxx>
    NFS/localio: fix ref leak on nfs_uuid_add_file failure

Longlong Xia <xialonglong@xxxxxxxxxx>
    zsmalloc: account for handle size in class lookup

Sergey Senozhatsky <senozhatsky@xxxxxxxxxxxx>
    zram: validate deflate params

Sergey Senozhatsky <senozhatsky@xxxxxxxxxxxx>
    zram: set default primary compressor in zram_destroy_comps()

Longlong Xia <xialonglong@xxxxxxxxxx>
    zram: fix out-of-bounds access in writeback_store()

Longlong Xia <xialonglong@xxxxxxxxxx>
    zram: fix out-of-bounds access in read_block_state()

Ibrahim Hashimov <security@xxxxxxxxxxxx>
    ubifs: fix out-of-bounds read in signature length check

Jason Yang <jason98166@xxxxxxxxx>
    phy: rockchip-samsung-dcphy: fix out-of-range max_register

Krzysztof Wilczyński <kwilczynski@xxxxxxxxxx>
    PCI/sysfs: Fix out-of-bounds read in pci_write_legacy_io()

Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
    of: fix out-of-bounds read in of_alias_scan() stem parser

Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx>
    nilfs2: fix slab-out-of-bounds in nilfs_direct_propagate after truncation

Junrui Luo <moonafterrain@xxxxxxxxxxx>
    media: vicodec: fix out-of-bounds write in FWHT encoder

Weigang He <geoffreyhe2@xxxxxxxxx>
    media: cec: stm32: prevent out-of-bounds write on RX overflow

Vincent Mailhol <mailhol@xxxxxxxxxx>
    lib/ucs2_string.c: fix out-of-bounds read in ucs2_strnlen()

Karl Mehltretter <kmehltretter@xxxxxxxxx>
    KVM: arm64: GICv2: Don't WARN on out-of-range GICV_DIR INTID

Claudiu Beznea <claudiu.beznea.uj@xxxxxxxxxxxxxx>
    i3c: renesas: Fix out-of-bounds access for newdevs mask

Xingrui Li <baka9@xxxxxxxxxxxxxx>
    HID: sensor-hub: Fix out-of-bounds write in sensor_hub_get_feature

Daisuke Matsuda <matsuda@xxxxxxxxxxxx>
    fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write

Terry Bowman <terry.bowman@xxxxxxx>
    cxl/ras: Fix cxl_rch_get_aer_info() out-of-bounds AER register read

Neill Kapron <nkapron@xxxxxxxxxx>
    usb: gadget: f_fs: Prevent deadlock during ep0 read loop

Jeffin Philip <jeffinphilip14@xxxxxxxxx>
    usb: gadget: uvc: fix dangling pointers in uvc_function_bind() and uvc_function_unbind()

Jeffin Philip <jeffinphilip14@xxxxxxxxx>
    usb: gadget: uvc: Fix null pointer dereference in uvcg_video_init()

Yun Zhou <yun.zhou@xxxxxxxxxxxxx>
    usb: gadget: f_tcm: fix deadlock in usbg_make_tpg()

Joshua Crofts <joshua.crofts1@xxxxxxxxx>
    usb: gadget: midi2: remove default configfs groups on teardown

Myeonghun Pak <mhun512@xxxxxxxxx>
    usb: gadget: snps_udc_plat: clean up PHY on probe deferral

Sonali Pradhan <sonalipradhan@xxxxxxxxxx>
    usb: gadget: u_audio: Fix use-after-free on sound card disconnect

Huang Wei <huangwei@xxxxxxxxxx>
    usb: typec: ucsi: use UCSI_TIMEOUT_MS for sync command completion

Fan Wu <fanwu01@xxxxxxxxxx>
    usb: typec: thunderbolt: Disable work before freeing tbt on remove

Xu Yang <xu.yang_2@xxxxxxx>
    usb: typec: tcpci: pass correct rx_type to tcpm_pd_receive()

Xu Rao <raoxu@xxxxxxxxxxxxx>
    usb: typec: hd3ss3220: fix VBUS regulator error message

Johan Hovold <johan@xxxxxxxxxx>
    USB: phy: fsl-usb: fix missing static keywords

Fan Wu <fanwu01@xxxxxxxxxx>
    usb: gadget: at91_udc: drain polled-VBUS timer/work before udc is freed

Pei Xiao <xiaopei01@xxxxxxxxxx>
    usb: dwc3: gadget: Fix use-after-free in dwc3_gadget_free_endpoints due to race condition

Francesco Lavra <flavra@xxxxxxxxxxxx>
    usb: dwc2: gadget: Exit partial power down state when changing USB pull-up

Hao-Qun Huang <alvinhuang0603@xxxxxxxxx>
    staging: greybus: hid: fix SET_REPORT return value

Karl Mehltretter <kmehltretter@xxxxxxxxx>
    serial: imx: serialize imx_uart_ports[] lifetime

Hans Verkuil <hverkuil+cisco@xxxxxxxxxx>
    Revert "media: v4l2-dev: fix error handling in __video_register_device()"

James Kim <james010kim@xxxxxxxxx>
    rapidio: mport_cdev: fix use-after-free in dma_req_free()

Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
    powerpc/powermac: fix OF node refcount

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
    misc: nsm: bound the device-reported response length

Xu Yang <xu.yang_2@xxxxxxx>
    device property: fix infinite loop in fwnode_for_each_child_node()

Chun-Yi Lee <jlee@xxxxxxxx>
    debugfs: Fix lockdown check for mmap_prepare

Prasanna Kumar T S M <ptsm@xxxxxxxxxxxxxxxxxxx>
    cdx: Fix double free when sysfs file creation fails

Hui Su <sh_def@xxxxxxx>
    tracing: Fix use-after-free with same-name named triggers

Deepanshu Kartikey <kartikey406@xxxxxxxxx>
    tracing: Fix use-after-free in trace_pipe read on sub-buffer order change

Ivan Immanuel Shaji <ivanimmanuel1234@xxxxxxxxx>
    tracing: Fix retry exhaustion in simple ring buffer reader swap

Vincent Donnefort <vdonnefort@xxxxxxxxxx>
    tracing: Fix logged instance name on creation failure

Hui Su <sh_def@xxxxxxx>
    tracing: Fix crash passing ERR_PTR to kthread_stop()

Jérémy Jean <Jeremy.Jean@xxxxxxxxxxxxxxxxx>
    tracing/user_events: Clear copied tracing state before fork duplication

Sanman Pradhan <psanman@xxxxxxxxxxx>
    hwtracing: hisi_ptt: Propagate DMA reset timeout in trace_start()

Roger Pau Monne <roger@xxxxxxxxxxxxxx>
    x86/xen: fix init of balloon stats again

Kiryl Shutsemau (Meta) <kas@xxxxxxxxxx>
    x86/tdx: Fix zero-extension for 32-bit port I/O

Kiryl Shutsemau (Meta) <kas@xxxxxxxxxx>
    x86/tdx: Fix off-by-one in port I/O handling

Kiryl Shutsemau (Meta) <kas@xxxxxxxxxx>
    x86/insn-eval: Move assign_register() out of KVM as insn_assign_reg()

Yao Zi <me@xxxxxxxx>
    x86/locking: Use sfence for wmb() if SSE is available

Joy H.J. Lee <rkr0k0r@xxxxxxxxx>
    tools/compiler: match glibc 2.42 definition of __attribute_const__

Ridong Chen <chenridong@xxxxxxxxxx>
    mm: vmscan: fix node reclaim ignoring swappiness parameter

Johannes Weiner <hannes@xxxxxxxxxxx>
    mm: page_alloc: fix non-movable reclaim storm in defrag_mode

Vlastimil Babka (SUSE) <vbabka@xxxxxxxxxx>
    mm: page_alloc: move capture_control to the page allocator

Johannes Weiner <hannes@xxxxxxxxxxx>
    mm: page_alloc: __GFP_FS lockdep annotation for direct compaction

Johannes Weiner <hannes@xxxxxxxxxxx>
    mm: mempolicy: fix automatic numa balancing for shmem

Guopeng Zhang <zhangguopeng@xxxxxxxxxx>
    mm: memcontrol: update state_local when flushing NMI stats

Guopeng Zhang <zhangguopeng@xxxxxxxxxx>
    mm: memcg: stop reclaim when a limit update is superseded

Guopeng Zhang <zhangguopeng@xxxxxxxxxx>
    mm: memcg-v1: fix memsw and TCP failcnt accounting

Guopeng Zhang <zhangguopeng@xxxxxxxxxx>
    mm: memcg-v1: fix wrong linux-mm list address in deprecation warnings

Johannes Weiner <hannes@xxxxxxxxxxx>
    mm: compaction: support non-movable compaction for pageblock requests

Hao Jia <jiahao1@xxxxxxxxxxx>
    mm/zswap: fix global shrinker when memory cgroup is disabled

Breno Leitao <leitao@xxxxxxxxxx>
    mm/vmscan: report RCU-tasks quiescent states in shrink_lruvec()

Artem Lytkin <iprintercanon@xxxxxxxxx>
    mm/vmalloc: make vm_struct.nr_pages an unsigned long

Shengming Hu <hu.shengming@xxxxxxxxxx>
    mm/slub: prevent pfmemalloc objects from entering the barn

Li Xiasong <lixiasong1@xxxxxxxxxx>
    mm/slub: fix missing debugfs entries for caches created before sysfs init

Dev Jain <dev.jain@xxxxxxx>
    mm/rmap: use huge_ptep_get() in try_to_migrate_one()

Dev Jain <dev.jain@xxxxxxx>
    mm/rmap: use huge_ptep_get() in try_to_unmap_one()

Hyunwoo Kim <imv4bel@xxxxxxxxx>
    mm/pagewalk: fix stale walk->action escaping walk_pmd_range()

Dev Jain <dev.jain@xxxxxxx>
    mm/page_vma_mapped: use huge_ptep_get() for hugetlb

Ye Liu <ye.liu@xxxxxxxxx>
    mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg()

Alexander Graf <graf@xxxxxxxxxx>
    mm/mm_init: deferred_grow_zone(): fix out-of-range first_deferred_pfn

Arvind Yadav <arvind.yadav@xxxxxxxxx>
    mm/migrate_device: clear stale mapping after freeing swapcache

Dev Jain <dev.jain@xxxxxxx>
    mm/migrate: use huge_ptep_get() in remove_migration_pte()

Breno Leitao <leitao@xxxxxxxxxx>
    mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch()

Kairui Song <kasong@xxxxxxxxxxx>
    mm/mglru: fix and remove redundant unevictable folio handling

Usama Arif <usama.arif@xxxxxxxxx>
    mm/mempolicy: skip non-present PMDs when queueing folios

Usama Arif <usama.arif@xxxxxxxxx>
    mm/madvise: skip device-private PMDs in cold and pageout walks

Breno Leitao <leitao@xxxxxxxxxx>
    mm/kmemleak: avoid soft lockup when scanning task stacks

Muchun Song <muchun.song@xxxxxxxxx>
    mm/hugetlb_vmemmap: fix __hugetlb_vmemmap_optimize_folios()

Muchun Song <muchun.song@xxxxxxxxx>
    mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier

Muchun Song <muchun.song@xxxxxxxxx>
    mm/hugetlb: fix boot panic with CONFIG_DEBUG_VM and HVO bootmem pages

Zi Yan <ziy@xxxxxxxxxx>
    mm/huge_memory: use folio's memcg inside __folio_split()

Usama Arif <usama.arif@xxxxxxxxx>
    mm/huge_memory: skip device-private PMDs in madvise_free_huge_pmd

David Hildenbrand (Arm) <david@xxxxxxxxxx>
    mm/gup: fix always draining LRU caches in collect_longterm_unpinnable_folios()

Breno Leitao <leitao@xxxxxxxxxx>
    mm, swap: ratelimit bad swap entry reports

Youngjun Park <youngjun.park@xxxxxxx>
    mm, swap: don't free a hibernation slot that is in the swap cache

Jordan R Abrahams-Whitehead <ajordanr@xxxxxxxxxx>
    include/linux/list.h: mark list_add and __list_add as __always_inline

Hyunwoo Kim <imv4bel@xxxxxxxxx>
    apparmor: fix out-of-bounds write when null terminating a label vec

Jann Horn <jannh@xxxxxxxxxx>
    apparmor: fix cred UAF caused by begin_current_label_crit_section()

Chengfeng Ye <nicoyip.dev@xxxxxxxxx>
    KEYS: trusted: Fix TPM teardown ordering

Miguel Ojeda <ojeda@xxxxxxxxxx>
    kbuild: rust: keep Rust objects out of Clang LTO with inline helpers

Miguel Ojeda <ojeda@xxxxxxxxxx>
    kbuild: rust: preserve unreachable traps with inline helpers

Gary Guo <gary@xxxxxxxxxxx>
    rust: cfi: disable function merging if CFI is enabled

Younes Akhouayri <git@xxxxxxxxx>
    rust: num: restrict bool conversion to unsigned Bounded

Miguel Ojeda <ojeda@xxxxxxxxxx>
    objtool/rust: add one more `noreturn` Rust function

Nikolai Grlica <nikolai@xxxxxxxxxxxxxxxxx>
    rust: kernel: list: fix incorrect pop_back example comment

Miguel Ojeda <ojeda@xxxxxxxxxx>
    rust: kbuild: disambiguate `zerocopy_derive` for `rusttest`

Danilo Krummrich <dakr@xxxxxxxxxx>
    rust: devres: ensure revocation is complete before device finishes unbinding

Danilo Krummrich <dakr@xxxxxxxxxx>
    rust: devres: fix race between concurrent revokers

Younes Akhouayri <git@xxxxxxxxx>
    rust: dma: return zero for Coherent reads past EOF

Miguel Ojeda <ojeda@xxxxxxxxxx>
    rust: rust_is_available: warn for `bindgen` < 0.72.1 && libclang >= 22

FUJITA Tomonori <fujita.tomonori@xxxxxxxxx>
    rust: bug: prevent dead_code warning from warn_on!'s flags constant

FUJITA Tomonori <fujita.tomonori@xxxxxxxxx>
    rust: bug: fix warn_on macro build error on UML

FUJITA Tomonori <fujita.tomonori@xxxxxxxxx>
    rust: bug: skip arch-specific asm in `testlib` builds

Antoni Boucher <bouanto@xxxxxxxx>
    rust: kbuild: disambiguate `zerocopy` for `rusttest`

Miguel Ojeda <ojeda@xxxxxxxxxx>
    objtool/rust: add one more `noreturn` Rust function for Rust 1.99.0

Jérémy Jean <Jeremy.Jean@xxxxxxxxxxxxxxxxx>
    timers/itimer: Zero-init old itimerval before copy to userspace

Ke Sun <sunke@xxxxxxxxxx>
    rust: fmt: fix {:p} printing stack addresses

Gaurav Batra <gbatra@xxxxxxxxxxxxx>
    powerpc/pseries/iommu: switch to Default DMA window during kdump

Chen Linxuan <me@xxxxxxxxxxxxx>
    pidfd: hold exec_update_lock around namespace ioctl

Vivek Parikh <vivek.parikh@xxxxxxxxxx>
    ovl: fix double end_creating() on the casefold-mismatch path

Baokun Li <libaokun@xxxxxxxxxxxxxxxxx>
    fs: fix user path of nested backing files

Felix Yan <felixonmars@xxxxxxxxxxxxx>
    clocksource/drivers/timer-sun4i: Advertise a real minimum delta

WenTao Liang <vulab@xxxxxxxxxxx>
    clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path

Matt Turner <mattst88@xxxxxxxxx>
    alpha: don't leak hardware-fabricated FP exception bits to user space

FUJITA Tomonori <fujita.tomonori@xxxxxxxxx>
    rust: time: fix as_micros_ceil() rounding near i64::MAX

Christoph Hellwig <hch@xxxxxx>
    iomap: don't free integrity payload that doesn't exist

Matt Turner <mattst88@xxxxxxxxx>
    alpha: fix ieee_swcr_to_fpcr setting FPCR_DNOD unconditionally

Fangzhi Zuo <jerry.zuo@xxxxxxx>
    drm/amd/display: Prune per-tile Timing from Apple Studio Display Primary Tile

Jerry Zuo <jerry.zuo@xxxxxxx>
    drm/amd/display: hide Apple Studio Display secondary tile

Vincent Donnefort <vdonnefort@xxxxxxxxxx>
    ring-buffer: Fix subbuf resize race with ring buffer readers

Boris Burkov <boris@xxxxxx>
    btrfs: write-protect folios during data writeback

Jon Hunter <jonathanh@xxxxxxxxxx>
    ASoC: tegra: Sort MBDRC register defaults

Jon Hunter <jonathanh@xxxxxxxxxx>
    ASoC: tegra: Sort ADMAIF register defaults

Jon Hunter <jonathanh@xxxxxxxxxx>
    ASoC: tegra: Fix the MIXER enable default value

Jon Hunter <jonathanh@xxxxxxxxxx>
    ASoC: tegra: Fix the I2S enable default value

Peter Ujfalusi <peter.ujfalusi@xxxxxxxxxxxxxxx>
    ASoC: tegra210_mixer: sort the register default table

Peter Ujfalusi <peter.ujfalusi@xxxxxxxxxxxxxxx>
    ASoC: tegra210_i2s: sort the Tegra264 register default table

Peter Ujfalusi <peter.ujfalusi@xxxxxxxxxxxxxxx>
    ASoC: tegra210_i2s: sort the register default table

Fangzhi Zuo <Jerry.Zuo@xxxxxxx>
    drm/amd/display: Skip Update HDCP Config In Transition State


-------------

Diffstat:

 Documentation/ABI/testing/sysfs-bus-nvdimm         |   3 +-
 Documentation/admin-guide/blockdev/zoned_loop.rst  |   9 +-
 Makefile                                           |  17 +-
 arch/alpha/include/uapi/asm/fpu.h                  |   8 +-
 arch/alpha/kernel/pci-sysfs.c                      |   6 +-
 arch/alpha/kernel/sys_marvel.c                     |  25 +-
 arch/alpha/kernel/traps.c                          |   6 +-
 arch/alpha/math-emu/math.c                         |  88 ++++-
 arch/arm/Kconfig                                   |   2 +-
 arch/arm64/boot/dts/qcom/kodiak.dtsi               |   9 +-
 arch/arm64/boot/dts/qcom/sm6115-fxtec-pro1x.dts    |   2 +-
 arch/arm64/boot/dts/qcom/x1-dell-thena.dtsi        |   2 +
 arch/arm64/boot/dts/rockchip/px30-cobra.dtsi       |   2 +-
 arch/arm64/boot/dts/rockchip/px30-pp1516.dtsi      |   2 +-
 arch/arm64/boot/dts/rockchip/px30-ringneck.dtsi    |   2 +-
 .../boot/dts/rockchip/rk3399-pinephone-pro.dts     |  18 -
 .../arm64/boot/dts/rockchip/rk3399-roc-pc-plus.dts |  12 +
 arch/arm64/boot/dts/rockchip/rk3588s-roc-pc.dts    |  23 +-
 arch/arm64/kernel/compat_alignment.c               |   4 +-
 arch/arm64/kernel/proton-pack.c                    |   9 +-
 arch/arm64/kvm/vgic/vgic-v2.c                      |   3 +-
 arch/openrisc/kernel/entry.S                       |  43 ++-
 arch/powerpc/kernel/pci-common.c                   |   9 +-
 arch/powerpc/platforms/powermac/low_i2c.c          |   2 +-
 arch/powerpc/platforms/pseries/iommu.c             |  23 +-
 arch/riscv/boot/dts/spacemit/k1-bananapi-f3.dts    |   4 +-
 arch/riscv/boot/dts/spacemit/k1-milkv-jupiter.dts  |   4 +-
 arch/riscv/boot/dts/spacemit/k1-musepi-pro.dts     |   4 +-
 arch/riscv/boot/dts/spacemit/k1-orangepi-r2s.dts   |   4 +-
 arch/riscv/boot/dts/spacemit/k1-orangepi-rv2.dts   |   4 +-
 arch/riscv/include/asm/acpi.h                      |  19 +
 arch/riscv/kernel/unaligned_access_speed.c         |  19 +-
 arch/riscv/kvm/vcpu_pmu.c                          |  14 +-
 arch/s390/include/asm/percpu.h                     |   4 +-
 arch/s390/kernel/perf_cpum_cf.c                    | 221 ++++++++----
 arch/x86/coco/tdx/tdx.c                            |  10 +-
 arch/x86/include/asm/barrier.h                     |   2 +-
 arch/x86/include/asm/insn-eval.h                   |  36 ++
 arch/x86/kvm/emulate.c                             |  26 +-
 arch/x86/net/bpf_jit_comp.c                        |   2 +-
 block/bio.c                                        |  56 ++-
 block/blk-map.c                                    |   2 +-
 block/fops.c                                       |   2 +-
 block/genhd.c                                      |   1 +
 drivers/accel/rocket/rocket_job.c                  |  32 +-
 drivers/acpi/acpi_platform.c                       |  45 ++-
 drivers/acpi/acpi_tad.c                            |  46 ++-
 drivers/acpi/apei/erst.c                           |   2 +-
 drivers/acpi/apei/ghes.c                           |  52 ++-
 drivers/acpi/cppc_acpi.c                           |  24 +-
 drivers/acpi/pfr_update.c                          |  45 +--
 drivers/ata/libata-scsi.c                          |  28 +-
 drivers/auxdisplay/charlcd.c                       |  21 +-
 drivers/base/arch_numa.c                           |  12 +
 drivers/base/power/main.c                          |   1 +
 drivers/base/property.c                            |  19 +-
 drivers/block/zloop.c                              |   3 +-
 drivers/block/zram/backend_deflate.c               |  10 +-
 drivers/block/zram/zram_drv.c                      |  14 +-
 drivers/bluetooth/btrtl.c                          |  13 -
 drivers/bluetooth/btusb.c                          |  14 +
 drivers/bluetooth/hci_bcm.c                        |   1 +
 drivers/bluetooth/hci_bcm4377.c                    |   1 +
 drivers/bluetooth/hci_h5.c                         |   4 +-
 drivers/bluetooth/hci_intel.c                      |   1 +
 drivers/bluetooth/hci_ldisc.c                      |   2 +-
 drivers/bluetooth/hci_serdev.c                     |   2 +-
 drivers/cdx/cdx.c                                  |   7 +-
 drivers/char/hw_random/stm32-rng.c                 |  10 +-
 drivers/char/ipmi/ipmb_dev_int.c                   |   5 +-
 drivers/char/ipmi/ipmi_msghandler.c                |   4 +
 drivers/char/tpm/tpm_i2c_nuvoton.c                 |   6 +-
 drivers/clocksource/timer-nxp-pit.c                |   4 +-
 drivers/clocksource/timer-sun4i.c                  |   2 +-
 drivers/cpufreq/apple-soc-cpufreq.c                |  36 +-
 drivers/cpufreq/cppc_cpufreq.c                     |   2 +-
 drivers/crypto/atmel-ecc.c                         |  46 +--
 drivers/crypto/intel/iaa/iaa_crypto_main.c         |  27 +-
 drivers/cxl/core/features.c                        |   8 +-
 drivers/cxl/core/mbox.c                            |   8 -
 drivers/cxl/core/mce.c                             |  27 +-
 drivers/cxl/core/pmem.c                            |  10 +-
 drivers/cxl/core/ras.c                             |   1 -
 drivers/cxl/core/ras_rch.c                         |  27 +-
 drivers/cxl/core/region.c                          |  43 +--
 drivers/cxl/cxl.h                                  |  11 +-
 drivers/cxl/cxlmem.h                               |   2 -
 drivers/cxl/pci.c                                  |   1 -
 drivers/cxl/pmem.c                                 |   2 +-
 drivers/fpga/altera-cvp.c                          |  10 +-
 drivers/fpga/stratix10-soc.c                       |  21 +-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |  79 ++++
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c |  28 +-
 .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c  |  11 +
 drivers/gpu/drm/amd/display/dc/dc_types.h          |   1 +
 drivers/gpu/drm/nouveau/nouveau_gem.c              |  11 +-
 drivers/hid/hid-apple.c                            |  18 +-
 drivers/hid/hid-corsair-void.c                     |  17 +
 drivers/hid/hid-mcp2221.c                          |  17 +-
 drivers/hid/hid-picolcd_debugfs.c                  |   9 +
 drivers/hid/hid-roccat.c                           |  13 +-
 drivers/hid/hid-sensor-custom.c                    |   9 +-
 drivers/hid/hid-sensor-hub.c                       |  46 ++-
 drivers/hid/hid-sony.c                             |   4 +-
 drivers/hid/hid-universal-pidff.c                  |   4 +-
 .../intel-thc-hid/intel-quicki2c/pci-quicki2c.c    |   1 +
 .../intel-thc-hid/intel-quickspi/pci-quickspi.c    |  10 +-
 .../intel-thc-hid/intel-quickspi/quickspi-dev.h    |   1 +
 .../intel-thc-hid/intel-quickspi/quickspi-hid.c    |   2 +-
 .../intel-quickspi/quickspi-protocol.c             |  19 +-
 .../intel-quickspi/quickspi-protocol.h             |   2 +-
 drivers/hsi/controllers/omap_ssi_core.c            |   6 +
 drivers/hwmon/max6621.c                            |   8 +-
 .../hwtracing/coresight/coresight-etm3x-sysfs.c    |  15 +-
 drivers/hwtracing/ptt/hisi_ptt.c                   |  20 +-
 drivers/i2c/busses/i2c-mxs.c                       |   5 +-
 drivers/i3c/device.c                               |   2 +-
 drivers/i3c/internals.h                            |   5 +
 drivers/i3c/master.c                               |  18 +-
 drivers/i3c/master/adi-i3c-master.c                |  15 +-
 drivers/i3c/master/renesas-i3c.c                   | 142 +++++---
 drivers/i3c/master/svc-i3c-master.c                |  10 +-
 drivers/infiniband/core/ib_core_uverbs.c           |   3 +
 drivers/infiniband/core/ucma.c                     |  14 +-
 drivers/infiniband/core/uverbs_main.c              |   1 +
 drivers/infiniband/core/uverbs_std_types_mr.c      |   6 +-
 drivers/infiniband/hw/cxgb4/device.c               |   6 +
 drivers/infiniband/hw/ionic/ionic_hw_stats.c       |  95 +++--
 drivers/infiniband/hw/ionic/ionic_ibdev.h          |  11 +-
 drivers/infiniband/hw/ionic/ionic_lif_cfg.c        |   2 +-
 drivers/interconnect/core.c                        |   7 +-
 drivers/iommu/amd/ppr.c                            |   3 +-
 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c    |  24 +-
 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c        |  65 +++-
 drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h        |   3 +
 drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c     |   8 +-
 drivers/iommu/generic_pt/iommu_pt.h                |   2 +-
 drivers/iommu/intel/dmar.c                         |  15 +-
 drivers/iommu/intel/iommu.c                        |   8 +-
 drivers/iommu/intel/iommu.h                        |   2 +
 drivers/iommu/iommu-sva.c                          |   2 +-
 drivers/iommu/iommu.c                              |   2 +-
 drivers/iommu/iommufd/device.c                     |   4 +-
 drivers/iommu/iommufd/ioas.c                       |   2 +
 drivers/iommu/iommufd/selftest.c                   |  31 +-
 drivers/iommu/msm_iommu.c                          |  10 +-
 drivers/mailbox/qcom-ipcc.c                        |  17 +-
 drivers/md/dm-bufio.c                              |  10 +-
 drivers/md/dm-era-target.c                         |   5 +
 drivers/md/dm-integrity.c                          |  32 +-
 drivers/md/dm-io.c                                 |  96 +++--
 drivers/md/dm-kcopyd.c                             |  10 +-
 drivers/md/dm-log-userspace-base.c                 |   1 +
 drivers/md/dm-log.c                                |   4 +-
 drivers/md/dm-pcache/cache.c                       |  18 +
 drivers/md/dm-pcache/cache.h                       |  21 ++
 drivers/md/dm-pcache/cache_dev.c                   |  22 +-
 drivers/md/dm-pcache/cache_gc.c                    |  10 +-
 drivers/md/dm-pcache/cache_key.c                   |  32 +-
 drivers/md/dm-pcache/cache_segment.c               |  12 +-
 drivers/md/dm-pcache/cache_writeback.c             |  10 +-
 drivers/md/dm-pcache/dm_pcache.c                   |   4 +-
 drivers/md/dm-raid1.c                              |  26 +-
 drivers/md/dm-snap-persistent.c                    |   4 +-
 drivers/md/dm-stats.c                              |   6 +-
 drivers/md/dm-switch.c                             |   2 +-
 drivers/md/dm-verity-target.c                      |   2 +-
 drivers/md/dm-writecache.c                         |  14 +-
 drivers/md/md.c                                    |   7 +
 drivers/md/persistent-data/dm-array.c              |  53 ++-
 drivers/md/raid10.c                                |   2 +-
 drivers/media/cec/platform/stm32/stm32-cec.c       |   3 +-
 drivers/media/test-drivers/vicodec/vicodec-core.c  |   4 +-
 drivers/media/v4l2-core/v4l2-dev.c                 |  14 +-
 drivers/mfd/cgbc-core.c                            |   4 +-
 drivers/mfd/qnap-mcu.c                             |  13 +-
 drivers/mfd/sm501.c                                |   2 +
 drivers/misc/nsm.c                                 |   2 +-
 drivers/mmc/host/via-sdmmc.c                       |  12 +-
 drivers/net/dsa/realtek/rtl83xx.c                  |   4 +-
 drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c   |   3 +
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |  17 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt_gso.c      |   4 +-
 drivers/net/ethernet/ibm/emac/mal.c                |  13 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_rx.c    |   5 +
 drivers/net/ethernet/nvidia/forcedeth.c            |   4 +-
 drivers/net/ethernet/qlogic/qede/qede.h            |   8 +-
 drivers/net/ethernet/qlogic/qede/qede_fp.c         |   1 +
 drivers/net/ethernet/renesas/ravb.h                |   3 +
 drivers/net/ethernet/renesas/ravb_main.c           |   9 +-
 drivers/net/ethernet/renesas/ravb_ptp.c            |  44 ++-
 drivers/net/ipa/ipa_modem.c                        |  18 +-
 drivers/net/ntb_netdev.c                           |  38 +-
 drivers/net/phy/phylink.c                          |   2 +-
 drivers/net/slip/slip.c                            |  11 +-
 drivers/net/thunderbolt/main.c                     |  12 +
 drivers/net/tun.c                                  |  21 +-
 drivers/net/usb/qmi_wwan.c                         |   1 +
 drivers/net/wireless/ath/ath6kl/cfg80211.c         |   5 +
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.c    |   3 +-
 drivers/net/wireless/intel/iwlwifi/dvm/main.c      |   4 +-
 drivers/net/wireless/marvell/mwifiex/sta_ioctl.c   |  12 +
 drivers/net/wireless/mediatek/mt76/mt7615/main.c   |   5 +-
 drivers/net/wireless/mediatek/mt76/mt7915/mcu.c    |  11 +-
 drivers/net/wireless/mediatek/mt76/mt7925/mac.c    |   1 +
 drivers/net/wireless/mediatek/mt76/mt7925/main.c   |  12 +-
 drivers/net/wireless/mediatek/mt76/mt7925/pci.c    |   2 +
 drivers/net/wireless/mediatek/mt76/mt7925/usb.c    |   1 +
 drivers/net/wireless/mediatek/mt76/mt7996/eeprom.c |   6 +
 drivers/net/wireless/mediatek/mt76/mt7996/mac.c    |  26 +-
 drivers/net/wireless/mediatek/mt76/mt7996/mcu.c    |   9 +-
 drivers/net/wireless/realtek/rtl818x/rtl8180/dev.c |   2 +-
 drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c |   2 +-
 drivers/net/wireless/realtek/rtl8xxxu/core.c       |  19 +-
 .../net/wireless/realtek/rtlwifi/rtl8192du/sw.c    |  12 +-
 .../net/wireless/realtek/rtlwifi/rtl8192du/trx.c   |   3 +-
 drivers/net/wireless/realtek/rtw88/pci.c           |   4 +-
 drivers/net/wireless/realtek/rtw88/tx.c            |   1 +
 drivers/net/wireless/realtek/rtw89/core.h          |   1 +
 drivers/net/wireless/realtek/rtw89/mac80211.c      |   3 +-
 drivers/net/wireless/realtek/rtw89/pci.c           |  13 +
 drivers/net/wireless/realtek/rtw89/pci.h           |   1 +
 drivers/net/wireless/realtek/rtw89/rtw8851be.c     |   1 +
 drivers/net/wireless/realtek/rtw89/rtw8852ae.c     |   1 +
 drivers/net/wireless/realtek/rtw89/rtw8852be.c     |   1 +
 drivers/net/wireless/realtek/rtw89/rtw8852bte.c    |   1 +
 drivers/net/wireless/realtek/rtw89/rtw8852ce.c     |   1 +
 drivers/net/wireless/realtek/rtw89/rtw8922ae.c     |   1 +
 drivers/net/wireless/realtek/rtw89/rtw8922de.c     |   1 +
 drivers/ntb/ntb_transport.c                        |  38 +-
 drivers/nvdimm/label.c                             |   2 +-
 drivers/nvme/host/core.c                           |   2 +-
 drivers/nvme/host/fc.c                             |   2 +-
 drivers/nvme/host/pci.c                            |   1 +
 drivers/nvme/host/tcp.c                            |  45 ++-
 drivers/of/base.c                                  |   2 +-
 drivers/pci/controller/dwc/pci-meson.c             |   2 +-
 drivers/pci/controller/pci-hyperv.c                |   1 +
 drivers/pci/controller/plda/pcie-plda-host.c       |  52 ++-
 drivers/pci/controller/plda/pcie-starfive.c        |  13 +-
 drivers/pci/msi/msi.c                              |  10 +
 drivers/pci/pci-sysfs.c                            |  42 ++-
 drivers/pci/pcie/aer.c                             |  29 +-
 drivers/pci/pcie/portdrv.c                         |   2 +-
 drivers/pci/proc.c                                 |  16 +-
 drivers/pci/quirks.c                               |   9 +-
 drivers/phy/freescale/phy-fsl-imx8mq-usb.c         |  21 +-
 drivers/phy/rockchip/phy-rockchip-samsung-dcphy.c  |   2 +-
 drivers/platform/chrome/cros_ec_sensorhub_ring.c   |  19 +-
 drivers/platform/x86/amd/pmc/mp1_stb.c             |  66 ++--
 drivers/platform/x86/amd/pmc/pmc.c                 |   6 +-
 .../x86/dell/dell-wmi-sysman/biosattr-interface.c  |   1 -
 drivers/platform/x86/hp/hp-bioscfg/bioscfg.c       |  18 +-
 drivers/platform/x86/hp/hp-bioscfg/bioscfg.h       |   8 +
 .../platform/x86/hp/hp-bioscfg/enum-attributes.c   |  15 +-
 .../platform/x86/hp/hp-bioscfg/int-attributes.c    |   6 +-
 .../x86/hp/hp-bioscfg/order-list-attributes.c      |  14 +-
 .../x86/hp/hp-bioscfg/passwdobj-attributes.c       |  14 +-
 .../platform/x86/hp/hp-bioscfg/spmobj-attributes.c |   4 +-
 .../platform/x86/hp/hp-bioscfg/string-attributes.c |   6 +-
 drivers/platform/x86/hp/hp-wmi.c                   |   4 +
 drivers/platform/x86/intel/int1092/intel_sar.c     |  32 +-
 drivers/platform/x86/intel/ishtp_eclite.c          |   5 +-
 .../x86/intel/speed_select_if/isst_tpmi_core.c     |  80 ++++-
 drivers/platform/x86/lenovo/think-lmi.c            |  19 +-
 drivers/platform/x86/lenovo/ymc.c                  |   8 +-
 drivers/platform/x86/panasonic-laptop.c            |  11 +-
 drivers/power/supply/bq24257_charger.c             |  16 +-
 drivers/power/supply/bq256xx_charger.c             |  29 +-
 drivers/power/supply/bq25890_charger.c             |  12 +
 drivers/power/supply/charger-manager.c             |  54 ++-
 drivers/power/supply/cros_usbpd-charger.c          |  17 +-
 drivers/power/supply/lp8727_charger.c              |   4 +-
 drivers/power/supply/lp8788-charger.c              |   2 +-
 drivers/power/supply/max17040_battery.c            |  32 +-
 drivers/power/supply/pf1550-charger.c              |   2 +-
 drivers/power/supply/qcom_battmgr.c                |   9 +-
 drivers/power/supply/rt9455_charger.c              |  21 +-
 drivers/power/supply/twl4030_charger.c             |  12 +-
 drivers/power/supply/ucs1002_power.c               |   6 +-
 drivers/ptp/ptp_vmclock.c                          |   6 +
 drivers/rapidio/devices/rio_mport_cdev.c           |  10 +-
 drivers/regulator/as3722-regulator.c               |   1 -
 drivers/regulator/max8998.c                        |   1 -
 drivers/regulator/qcom-refgen-regulator.c          |   4 +-
 drivers/remoteproc/mtk_scp.c                       |   9 +-
 drivers/rpmsg/qcom_glink_smem.c                    |   7 +
 drivers/s390/block/dasd.c                          |   6 +-
 drivers/s390/block/dasd_eckd.c                     |  40 ++-
 drivers/s390/block/dasd_erp.c                      |   3 +
 drivers/scsi/fnic/fip.c                            |   2 +-
 drivers/scsi/scsi_lib.c                            |   2 +
 drivers/staging/greybus/hid.c                      |   2 +-
 drivers/staging/media/ipu7/ipu7-isys.c             |   1 +
 drivers/staging/media/tegra-video/vi.c             |   9 +-
 drivers/staging/media/tegra-video/vip.c            |  10 +-
 drivers/tty/serial/imx.c                           |  20 +-
 drivers/usb/dwc2/gadget.c                          |  11 +-
 drivers/usb/dwc3/gadget.c                          |   1 +
 drivers/usb/gadget/function/f_fs.c                 |  14 +-
 drivers/usb/gadget/function/f_midi2.c              |   2 +
 drivers/usb/gadget/function/f_tcm.c                |  23 +-
 drivers/usb/gadget/function/f_uvc.c                |   7 +-
 drivers/usb/gadget/function/u_audio.c              |  24 +-
 drivers/usb/gadget/function/uvc_video.c            |   2 +-
 drivers/usb/gadget/udc/at91_udc.c                  |  20 +-
 drivers/usb/gadget/udc/snps_udc_plat.c             |   5 +-
 drivers/usb/phy/phy-fsl-usb.c                      |  52 +--
 drivers/usb/phy/phy-fsl-usb.h                      |   6 +-
 drivers/usb/typec/altmodes/thunderbolt.c           |   2 +
 drivers/usb/typec/hd3ss3220.c                      |   2 +-
 drivers/usb/typec/tcpm/tcpci.c                     |  12 +-
 drivers/usb/typec/ucsi/ucsi.c                      |   3 +-
 drivers/video/backlight/aw99706.c                  |  10 +-
 .../fbdev/omap2/omapfb/displays/panel-dsi-cm.c     |   4 +-
 drivers/video/fbdev/pvr2fb.c                       |   4 +-
 drivers/video/fbdev/ssd1307fb.c                    |  72 +++-
 drivers/video/fbdev/uvesafb.c                      |   2 +
 drivers/video/sticore.c                            |  22 +-
 drivers/w1/slaves/w1_ds28e17.c                     |   8 +
 drivers/xen/balloon.c                              |  29 +-
 fs/backing-file.c                                  |   2 +-
 fs/btrfs/direct-io.c                               |  19 +-
 fs/btrfs/extent_io.c                               |  31 ++
 fs/btrfs/extent_io.h                               |   5 +
 fs/btrfs/inode.c                                   |  23 +-
 fs/btrfs/ioctl.c                                   |  23 +-
 fs/btrfs/relocation.c                              |  31 +-
 fs/buffer.c                                        |   3 +
 fs/ceph/addr.c                                     |  11 +
 fs/ceph/caps.c                                     |  74 +++-
 fs/ceph/dir.c                                      |  10 +-
 fs/ceph/export.c                                   |  26 +-
 fs/ceph/mds_client.c                               |  73 +++-
 fs/ceph/mds_client.h                               |   1 +
 fs/ceph/mdsmap.c                                   |  11 +-
 fs/ceph/super.h                                    |  14 +
 fs/ceph/xattr.c                                    |   1 +
 fs/debugfs/file.c                                  |   3 +-
 fs/ecryptfs/crypto.c                               |   2 +-
 fs/ecryptfs/ecryptfs_kernel.h                      |   3 +-
 fs/ecryptfs/keystore.c                             |  45 ++-
 fs/ecryptfs/messaging.c                            |  11 +-
 fs/ecryptfs/miscdev.c                              |   5 +-
 fs/ecryptfs/super.c                                |   7 +
 fs/efivarfs/super.c                                |  30 +-
 fs/erofs/zutil.c                                   |   2 +
 fs/ext2/inode.c                                    |   7 +-
 fs/ext2/xattr.c                                    |   4 +-
 fs/fat/misc.c                                      |   4 +
 fs/fuse/dev.c                                      |   8 +-
 fs/fuse/dev.h                                      |   2 +-
 fs/fuse/dev_uring.c                                |  38 +-
 fs/fuse/dev_uring_i.h                              |   5 +
 fs/fuse/inode.c                                    |   4 +-
 fs/iomap/bio.c                                     |   2 +-
 fs/iomap/direct-io.c                               |   1 +
 fs/jbd2/checkpoint.c                               |  28 +-
 fs/lockd/clntproc.c                                |   3 +
 fs/lockd/lockd.h                                   |   2 +-
 fs/lockd/svc.c                                     |   4 +-
 fs/lockd/svc4proc.c                                |   7 +-
 fs/lockd/svcproc.c                                 |   4 +-
 fs/lockd/svcsubs.c                                 | 107 ++++--
 fs/nfs/callback.c                                  |   4 +-
 fs/nfs/nfs4client.c                                |  17 +-
 fs/nfs/pnfs.c                                      |   3 +-
 fs/nfs_common/nfslocalio.c                         |  16 +-
 fs/nfsd/filecache.c                                | 143 ++++----
 fs/nfsd/flexfilelayoutxdr.c                        |  20 +-
 fs/nfsd/localio.c                                  |   8 +-
 fs/nfsd/lockd.c                                    |   6 +-
 fs/nfsd/netns.h                                    |  35 +-
 fs/nfsd/nfs2acl.c                                  |  52 +--
 fs/nfsd/nfs3acl.c                                  |  17 +-
 fs/nfsd/nfs3proc.c                                 |  40 +++
 fs/nfsd/nfs4callback.c                             | 113 +++++-
 fs/nfsd/nfs4layouts.c                              |  39 +-
 fs/nfsd/nfs4proc.c                                 | 225 ++++++++----
 fs/nfsd/nfs4recover.c                              |  48 ++-
 fs/nfsd/nfs4state.c                                | 399 ++++++++++++++++-----
 fs/nfsd/nfs4xdr.c                                  |  40 ++-
 fs/nfsd/nfscache.c                                 |   6 +-
 fs/nfsd/nfsctl.c                                   | 156 ++++++--
 fs/nfsd/nfsfh.c                                    |  12 +-
 fs/nfsd/nfsproc.c                                  |   7 +
 fs/nfsd/nfssvc.c                                   |  49 ++-
 fs/nfsd/nfsxdr.c                                   |  32 +-
 fs/nfsd/state.h                                    |   4 +-
 fs/nfsd/trace.h                                    |  18 +-
 fs/nfsd/vfs.c                                      |  39 +-
 fs/nilfs2/bmap.c                                   |   2 +-
 fs/nilfs2/bmap.h                                   |   2 +-
 fs/nilfs2/btree.c                                  |  39 +-
 fs/nilfs2/direct.c                                 |   4 +-
 fs/notify/fanotify/fanotify.c                      |   3 +-
 fs/notify/fanotify/fanotify.h                      |   6 +-
 fs/notify/fanotify/fanotify_user.c                 |  17 +-
 fs/notify/inotify/inotify_user.c                   |  15 +-
 fs/ntfs/attrib.c                                   |  24 +-
 fs/ntfs/lcnalloc.c                                 |   7 +-
 fs/ntfs/runlist.c                                  |  48 +++
 fs/ntfs/super.c                                    |  12 +-
 fs/ntfs3/frecord.c                                 |   9 +
 fs/ntfs3/fslog.c                                   |  34 ++
 fs/ocfs2/cluster/heartbeat.c                       | 150 ++++++--
 fs/ocfs2/cluster/nodemanager.c                     |   6 +
 fs/ocfs2/cluster/nodemanager.h                     |   1 +
 fs/ocfs2/dir.c                                     |  47 ++-
 fs/ocfs2/dlm/dlmmaster.c                           |   6 +
 fs/ocfs2/dlm/dlmrecovery.c                         |   9 +
 fs/ocfs2/refcounttree.c                            |  47 ++-
 fs/ocfs2/suballoc.c                                |   2 +-
 fs/ocfs2/xattr.c                                   |   5 +-
 fs/orangefs/devorangefs-req.c                      |   1 +
 fs/orangefs/orangefs-debugfs.c                     |   1 +
 fs/overlayfs/dir.c                                 |   1 -
 fs/pidfs.c                                         |  43 ++-
 fs/smb/client/cifsfs.c                             |  15 +-
 fs/smb/client/cifsfs.h                             |   1 +
 fs/smb/client/cifssmb.c                            |   6 +
 fs/smb/client/dfs_cache.c                          |  33 +-
 fs/smb/client/file.c                               |   1 +
 fs/smb/client/inode.c                              |  56 ++-
 fs/smb/client/smb1misc.c                           |   3 +-
 fs/smb/client/smb1ops.c                            |   2 +-
 fs/smb/client/smb1transport.c                      |  35 +-
 fs/smb/client/smb2file.c                           |   5 +-
 fs/smb/client/smb2inode.c                          |   6 +-
 fs/smb/client/smb2ops.c                            |   9 +-
 fs/smb/client/trace.h                              |   3 +-
 fs/smb/server/vfs_cache.c                          |   2 +-
 fs/tracefs/event_inode.c                           |   7 +-
 fs/ubifs/auth.c                                    |   2 +-
 fs/udf/inode.c                                     |   2 +-
 fs/udf/partition.c                                 |   2 +-
 include/linux/bio.h                                |   2 +-
 include/linux/compaction.h                         |   3 +-
 include/linux/dm-io.h                              |   6 +-
 include/linux/entry-common.h                       |   3 +
 include/linux/font.h                               |   4 +-
 include/linux/hugetlb.h                            |   7 +
 include/linux/list.h                               |  15 +-
 include/linux/lockd/bind.h                         |  12 +-
 include/linux/sunrpc/bc_xprt.h                     |   5 +
 include/linux/sunrpc/svc_rdma_pcl.h                |   2 +-
 include/linux/uio.h                                |  10 +-
 include/linux/usb/tcpci.h                          |   1 +
 include/linux/vmalloc.h                            |   2 +-
 include/net/ip_tunnels.h                           |  11 +-
 include/net/sctp/structs.h                         |   2 +-
 include/uapi/linux/landlock.h                      |   1 +
 io_uring/query.c                                   |   3 +
 io_uring/waitid.c                                  |  33 +-
 kernel/auditfilter.c                               |   6 +-
 kernel/bpf/bloom_filter.c                          |  19 +-
 kernel/bpf/stackmap.c                              |   3 +
 kernel/dma/contiguous.c                            |  16 +-
 kernel/liveupdate/kexec_handover.c                 |   2 +-
 kernel/module/kallsyms.c                           |  24 +-
 kernel/module/main.c                               |  14 +-
 kernel/params.c                                    |  14 +-
 kernel/pid.c                                       |  31 --
 kernel/reboot.c                                    |  29 ++
 kernel/sched/core.c                                |  49 ++-
 kernel/sched/cpufreq_schedutil.c                   |  15 +-
 kernel/sched/ext/ext.c                             | 342 +++++++++++++-----
 kernel/sched/sched.h                               |   5 +-
 kernel/signal.c                                    |   4 +
 kernel/taskstats.c                                 |   3 +-
 kernel/time/itimer.c                               |   2 +-
 kernel/time/timekeeping.c                          |   8 +-
 kernel/time/timer.c                                |   1 +
 kernel/trace/ring_buffer.c                         | 202 +++++++----
 kernel/trace/simple_ring_buffer.c                  |   4 +-
 kernel/trace/trace.c                               |   6 +-
 kernel/trace/trace_events.c                        |   2 +
 kernel/trace/trace_events_hist.c                   |   4 +-
 kernel/trace/trace_events_user.c                   |   3 +
 lib/iov_iter.c                                     |   9 +-
 lib/ucs2_string.c                                  |   2 +-
 lib/xarray.c                                       |   3 +
 mm/compaction.c                                    |  98 ++---
 mm/gup.c                                           |  10 +-
 mm/huge_memory.c                                   |  24 +-
 mm/hugetlb.c                                       |  38 +-
 mm/hugetlb_vmemmap.c                               |  23 +-
 mm/internal.h                                      |  10 +-
 mm/kasan/quarantine.c                              |   7 +-
 mm/kmemleak.c                                      |  77 ++--
 mm/madvise.c                                       |   4 +-
 mm/memcontrol-v1.c                                 |   6 +-
 mm/memcontrol.c                                    |  13 +
 mm/mempolicy.c                                     |  29 +-
 mm/migrate.c                                       |   8 +-
 mm/migrate_device.c                                |  13 +
 mm/mm_init.c                                       |  10 +-
 mm/page_alloc.c                                    |  76 +++-
 mm/page_owner.c                                    |  10 +-
 mm/page_vma_mapped.c                               |   8 +-
 mm/pagewalk.c                                      |   6 +-
 mm/rmap.c                                          |  31 +-
 mm/slub.c                                          |  80 +++--
 mm/sparse-vmemmap.c                                |   4 +-
 mm/swapfile.c                                      |  15 +-
 mm/vmalloc.c                                       |  58 ++-
 mm/vmscan.c                                        |  40 +--
 mm/zsmalloc.c                                      |  11 +-
 mm/zswap.c                                         |  13 +-
 net/bluetooth/eir.c                                |   3 +-
 net/bluetooth/hci_conn.c                           |   3 +-
 net/bluetooth/hci_core.c                           |   2 +-
 net/bluetooth/hci_event.c                          |   7 +-
 net/bluetooth/hci_sync.c                           |   2 +
 net/bluetooth/iso.c                                |   8 +
 net/bluetooth/rfcomm/core.c                        |   8 +-
 net/ceph/osd_client.c                              |  30 ++
 net/ceph/osdmap.c                                  |   2 +
 net/core/skbuff.c                                  |   5 +-
 net/core/xdp.c                                     |   4 +-
 net/ipv4/ip_tunnel.c                               |   2 +-
 net/ipv4/ipip.c                                    |   2 +-
 net/ipv4/ipmr.c                                    |   3 +
 net/ipv6/exthdrs.c                                 |  26 +-
 net/ipv6/ip6_gre.c                                 |  14 +-
 net/ipv6/ip6_input.c                               |   1 +
 net/ipv6/ip6_tunnel.c                              |  22 +-
 net/ipv6/route.c                                   |   2 +-
 net/ipv6/seg6_local.c                              |   9 +
 net/ipv6/sit.c                                     |   2 +-
 net/iucv/af_iucv.c                                 |   2 +
 net/l2tp/l2tp_netlink.c                            |  16 +-
 net/mctp/route.c                                   |  19 +-
 net/mpls/af_mpls.c                                 |   2 +
 net/mptcp/syncookies.c                             |   1 +
 net/openvswitch/conntrack.c                        | 128 ++++---
 net/openvswitch/conntrack.h                        |   6 +-
 net/openvswitch/datapath.c                         |  60 ++--
 net/openvswitch/datapath.h                         |   8 +-
 net/sched/sch_generic.c                            |   2 +-
 net/sctp/inqueue.c                                 |   7 +-
 net/sctp/sm_sideeffect.c                           |   4 +
 net/sctp/stream.c                                  |  48 ++-
 net/smc/af_smc.c                                   |   3 +-
 net/smc/smc.h                                      |   6 +-
 net/smc/smc_core.c                                 |  27 +-
 net/smc/smc_llc.c                                  | 122 +++++--
 net/smc/smc_rx.c                                   |  11 +-
 net/smc/smc_tx.h                                   |   6 +-
 net/smc/smc_wr.c                                   |   6 +-
 net/sunrpc/auth_gss/auth_gss.c                     |   6 +-
 net/sunrpc/auth_gss/gss_krb5_unseal.c              |   3 +
 net/sunrpc/auth_gss/gss_krb5_wrap.c                |  13 +-
 net/sunrpc/auth_gss/gss_rpc_upcall.c               |   6 -
 net/sunrpc/auth_gss/gss_rpc_upcall.h               |   1 -
 net/sunrpc/auth_gss/gss_rpc_xdr.c                  |  15 +-
 net/sunrpc/auth_gss/svcauth_gss.c                  |   8 +-
 net/sunrpc/backchannel_rqst.c                      |  38 +-
 net/sunrpc/cache.c                                 |   7 +-
 net/sunrpc/clnt.c                                  |  22 +-
 net/sunrpc/sunrpc_syms.c                           |   1 +
 net/sunrpc/svc.c                                   |  93 ++++-
 net/sunrpc/xdr.c                                   |   2 +-
 net/sunrpc/xprtrdma/ib_client.c                    |  24 +-
 net/sunrpc/xprtrdma/svc_rdma_pcl.c                 |   2 +-
 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c            |  21 +-
 net/sunrpc/xprtrdma/svc_rdma_rw.c                  |  52 ++-
 net/sunrpc/xprtrdma/svc_rdma_sendto.c              |  47 ++-
 net/sunrpc/xprtrdma/svc_rdma_transport.c           |  69 +++-
 net/sunrpc/xprtsock.c                              |  12 +-
 net/vmw_vsock/virtio_transport.c                   |   2 +-
 rust/Makefile                                      |   6 +-
 rust/kernel/bug.rs                                 |  34 +-
 rust/kernel/devres.rs                              |  25 +-
 rust/kernel/dma.rs                                 |   6 +-
 rust/kernel/fmt.rs                                 |   9 +-
 rust/kernel/list.rs                                |   2 +-
 rust/kernel/num/bounded.rs                         |  31 +-
 rust/kernel/time.rs                                |  17 +-
 scripts/Makefile.build                             |   3 +-
 scripts/rust_is_available.sh                       |  14 +
 scripts/rust_is_available_bindgen_libclang_22.h    |   5 +
 scripts/rust_is_available_test.py                  |  30 +-
 security/apparmor/include/cred.h                   |   6 +-
 security/apparmor/include/label.h                  |   6 +-
 security/apparmor/include/task.h                   |  15 +-
 security/apparmor/task.c                           |  27 ++
 security/keys/trusted-keys/trusted_tpm1.c          |   2 +-
 security/landlock/errata/abi-1.h                   |  23 ++
 security/landlock/fs.c                             |  41 ++-
 security/smack/smack_lsm.c                         |   2 +-
 sound/core/ump_convert.c                           |   1 +
 sound/drivers/aloop.c                              |   6 +
 sound/drivers/mpu401/mpu401.c                      |   6 +
 sound/drivers/mts64.c                              |   6 +
 sound/drivers/portman2x4.c                         |   6 +
 sound/drivers/serial-u16550.c                      |   6 +
 sound/drivers/virmidi.c                            |   6 +
 sound/hda/codecs/realtek/alc269.c                  |   7 +-
 sound/hda/codecs/realtek/alc662.c                  |   1 +
 sound/hda/core/ext/stream.c                        |   4 +-
 sound/pci/pcxhr/pcxhr.c                            |  14 +-
 sound/soc/amd/yc/acp6x-mach.c                      |   7 +
 sound/soc/codecs/aw88261.c                         |   6 +-
 sound/soc/codecs/aw88261.h                         |   6 -
 sound/soc/tegra/tegra210_admaif.c                  | 210 +++++++----
 sound/soc/tegra/tegra210_i2s.c                     |  24 +-
 sound/soc/tegra/tegra210_i2s.h                     |   1 +
 sound/soc/tegra/tegra210_mbdrc.c                   |  42 +--
 sound/soc/tegra/tegra210_mixer.c                   |  10 +-
 sound/usb/6fire/comm.c                             |   9 +-
 sound/usb/bcd2000/bcd2000.c                        |  11 +-
 sound/usb/fcp.c                                    |   4 +-
 tools/include/linux/compiler.h                     |   2 +-
 tools/objtool/check.c                              |   2 +
 tools/sched_ext/include/scx/compat.bpf.h           |  12 +-
 tools/sched_ext/include/scx/enum_defs.autogen.h    |   1 -
 tools/sched_ext/include/scx/enums.autogen.bpf.h    |   3 -
 tools/sched_ext/include/scx/enums.autogen.h        |   1 -
 tools/sched_ext/scx_qmap.bpf.c                     |   2 +-
 tools/testing/selftests/mm/run_vmtests.sh          |   2 +-
 621 files changed, 7838 insertions(+), 3129 deletions(-)