From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 0C21D2DF137; Thu, 16 Jul 2026 13:37:14 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1784209041; cv=none; b=th2b0fdovu8PnyUjHfOqbK2jeeu2ZZ0hFCyYfbebSo/H+f2yfVqEK7oIxes8E5Nba4fEnK40CtcuiWnlc1IMOJ4HXXaQ1oCo0mREPv6QRmqQH0O6HdY8wYskZ1KHkG0bJoIO0vtDDc+3jAhNY/hC2Kyk7b5sStB9LeKIdC46qzI= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1784209041; c=relaxed/simple; bh=l7dhhxNta4gU1N83V9lF/lCSX7FOqKpSWPXT5yf7Vlg=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type; b=F6CsapHd7c5VEWQPXSa6RtpzaZrUngotzTqsnuu7IXNFJGWcFaoFie2+yCyMIMZ6TmVXxl1bvjRu9v/FMF8nkzqfDLZaD2BkSoeKiupul0P8sBs01fVAzCHbc/pkm+iGm7yZ/cmOho+aQS12l8GEFBMH4b7Y/3Y637hNaUKoWhA= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=r5Z9cCcc; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="r5Z9cCcc" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 3B4031F000E9; Thu, 16 Jul 2026 13:37:13 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1784209034; bh=B9Hfr0t9DGpZj65nGnjJ4tPm4XgiJdPbVmsHN3ExccY=; h=From:To:Cc:Subject:Date; b=r5Z9cCccNFyLTp/B5y9tRJlXjHjTz6fYTGjdDACIYCwdfJ1PUIDeJfoLaGSYp4I0U 2bDEo4ek2RE1UG23+1sZ0eADCOHNs8sH8DPb/apuAhCS4GT0Hk1LqrCds9Y0C+zQ+R zOElcAJC+p+PtMSJafbw4KBgcCzqJQo9zryKduBA= From: Greg Kroah-Hartman To: stable@vger.kernel.org Cc: Greg Kroah-Hartman , patches@lists.linux.dev, linux-kernel@vger.kernel.org, torvalds@linux-foundation.org, akpm@linux-foundation.org, linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org, lkft-triage@lists.linaro.org, pavel@nabladev.com, jonathanh@nvidia.com, f.fainelli@gmail.com, sudipm.mukherjee@gmail.com, rwarsow@gmx.de, conor@kernel.org, hargar@microsoft.com, broonie@kernel.org, achill@achill.org, sr@sladewatkins.com Subject: [PATCH 7.1 000/518] 7.1.4-rc1 review Date: Thu, 16 Jul 2026 15:24:28 +0200 Message-ID: <20260716133047.772246337@linuxfoundation.org> X-Mailer: git-send-email 2.55.0 Precedence: bulk X-Mailing-List: patches@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: quilt/0.69 X-stable: review X-Patchwork-Hint: ignore X-KernelTest-Patch: http://kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.4-rc1.gz X-KernelTest-Tree: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git X-KernelTest-Branch: linux-7.1.y X-KernelTest-Patches: git://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git X-KernelTest-Version: 7.1.4-rc1 X-KernelTest-Deadline: 2026-07-18T13:30+00:00 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is the start of the stable review cycle for the 7.1.4 release. There are 518 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 18 Jul 2026 13:30:01 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.4-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman Linux 7.1.4-rc1 Luiz Augusto von Dentz Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev Mikhail Gavrilov timekeeping: Register default clocksource before taking tk_core.lock Rong Zhang ALSA: doc: usb-audio: Add doc for QUIRK_FLAG_IFB_SILENCE_ON_EMPTY Joanne Koong fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref Bernd Schubert fuse-uring: make a fuse_req on SQE commit only findable after memcpy Bernd Schubert fuse-uring: Avoid queue->stopped races and set/read that value under lock Bernd Schubert fuse-uring: Avoid use-after-free in fuse_uring_async_stop_queues Chris Mason fuse-uring: end fuse_req on io-uring cancel task work Joanne Koong fuse-uring: fix moving cancelled entry to ent_in_userspace list Chris Mason fuse-uring: fix data races on ring->ready Chris Mason fuse-uring: fix EFAULT clobber in fuse_uring_commit Ji'an Zhou fuse: clear intr_entry in fuse_resend and fuse_remove_pending_req Joanne Koong fuse: don't block in fuse_get_dev() for non-sync_init case Joanne Koong fuse: fix io-uring background queue dispatch on request completion Joanne Koong fuse: re-lock request before returning from fuse_ref_folio() Miklos Szeredi fuse: do not use start_removing_noperm() Alberto Ruiz fuse: fix device node leak in cuse_process_init_reply() Miklos Szeredi Revert "fuse: fix conversion of fuse_reverse_inval_entry() to start_removing()" Samuel Moelius fuse: avoid 32-bit prune notification count wrap Matthew R. Ochs fuse: back uncached readdir buffers with pages Michael Bommarito RDMA/siw: bound Read Response placement to the RREAD length Maher Sanalla RDMA/core: Fix broadcast address falsely detected as local Zhenhao Wan RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg Dmitry Torokhov Input: maplecontrol - set driver data before registering input device Dmitry Torokhov Input: maplemouse - set driver data before registering input device Dmitry Torokhov Input: maple_keyb - set driver data before registering input device Dmitry Torokhov Input: mms114 - fix multi-touch slot corruption Florian Fuchs Input: maplemouse - fix NULL pointer dereference in open() Xu Rao Input: gscps2 - advance receive buffer write index Bryam Vargas Input: mms114 - reject an oversized device packet size Bryam Vargas Input: touchwin - reset the packet index on every complete packet Kris Bahnsen Input: ads7846 - don't use scratch for tx_buf when clearing register Dmitry Torokhov Input: mms114 - fix touch indexing for MMS134S and MMS136 Bryam Vargas Input: iforce - bound the device-reported force-feedback effect index Bryam Vargas Input: goodix - clamp the device-reported contact count Ranjan Kumar Input: elan_i2c - prevent division by zero and arithmetic underflow Bryam Vargas Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count Bryam Vargas Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count Haoxiang Li Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure Mingyu Wang <25181214217@stu.xidian.edu.cn> i2c: i801: fix hardware state machine corruption in error path Carlos Song i2c: imx-lpi2c: mark I2C adapter when hardware is powered down Guillermo Rodríguez i2c: stm32f7: truncate clock period instead of rounding it Haoxiang Li i2c: davinci: Unregister cpufreq notifier on probe failure Andy Shevchenko i2c: mpc: Fix timeout calculations Johan Hovold i2c: core: fix adapter deregistration race Johan Hovold i2c: core: fix adapter debugfs creation Johan Hovold i2c: core: fix NULL-deref on adapter registration failure Johan Hovold i2c: core: fix irq domain leak on adapter registration failure Johan Hovold i2c: core: fix adapter probe deferral loop Sebastian Alba Vives fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() Chuck Lever Revert "svcrdma: Use contiguous pages for RDMA Read sink buffers" Chuck Lever svcrdma: wake sq waiters when the transport closes Mikhail Gavrilov dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning Mikhail Gavrilov udmabuf: fix DMA direction mismatch in release_udmabuf() Oliver Upton KVM: arm64: Don't leak PFN when kvm_translate_vncr() races MMU notifier Sean Christopherson KVM: x86: Add dedicated API for getting mask of accelerated x2APIC MSRs Sean Christopherson KVM: guest_memfd: Treat memslot binding offset+size as unsigned values Sean Christopherson KVM: x86: Ensure vendor's exit handler runs before fastpath userspace exits Sean Christopherson KVM: TDX: Account all non-transient page allocations for per-TD structures Xuanqing Shi <1356292400@qq.com> KVM: VMX: Handle bad values on proxied writes to LBR MSRs Sean Christopherson KVM: SEV: Don't terminate SNP VMs on #VMGEXIT without a registered GHCB Sean Christopherson KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs Sean Christopherson KVM: SVM: Only disable x2AVIC WRMSR interception for MSRs that are accelerated Sean Christopherson KVM: SVM: Disable x2AVIC RDMSR interception for MSRs KVM actually supports Sean Christopherson KVM: SEV: Pin source page for write when adding CPUID data for SNP guest Hyunwoo Kim KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU Hyunwoo Kim KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU Zeng Chi LoongArch: KVM: Add missing slots_lock for device register/unregister Marc Zyngier KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB Mickaël Salaün selftests/landlock: Increase default audit socket timeout Mickaël Salaün selftests/landlock: Filter dealloc records in audit_count_records() Mickaël Salaün landlock: Account all audit data allocations to user space Maximilian Heyne selftests/landlock: Explicitly disable audit in teardowns Mickaël Salaün landlock: Set audit_net.sk for socket access checks Ricardo Robaina audit: fix removal of dangling executable rules Nicolin Chen iommufd: Set upper bounds on cache invalidation entry_num and entry_len Nicolin Chen iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read() Nicolin Chen iommufd: Break the loop on failure in iommufd_fault_fops_read() Nicolin Chen iommufd: Reject invalid read count in iommufd_fault_fops_read() Nicolin Chen iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch() Nicolin Chen iommufd: Reject invalid read count in iommufd_veventq_fops_read() Nicolin Chen iommufd: Rewind header length in done if iommufd_veventq_fops_read() fails Nicolin Chen iommufd: Set veventq_depth upper bound Nicolin Chen iommufd: Move vevent memory allocation outside spinlock Nicolin Chen iommufd: Fix data_len byte-count vs element-count mismatch Kai Aizen iommufd: Use sizeof(*hdr) instead of sizeof(hdr) in veventq read Weinan Liu iommu/amd: Don't split flush for amd_iommu_domain_flush_all() Lu Baolu iommu/vt-d: Avoid WARNING in sva unbind path Matt Bobrowski bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized Dave Airlie nouveau/vmm: fix another SPT/LPT race Sarthak Sharma selftests/mm: fix ksft_process_madv.sh test category Zenghui Yu selftests/mm: pagemap_ioctl: use the correct page size for transact_test() Pedro Falcato mm: do file ownership checks with the proper mount idmap Ketan mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access David Hildenbrand (Arm) selftests: mm: fix and speedup "droppable" test Anthony Yznaga mm: fix mmap errno value when MAP_DROPPABLE is not supported Hao Ge lib/test_hmm: use kvfree() to free kvcalloc() allocations Vivian Wang riscv: mm: Unconditionally sfence.vma for spurious fault Vivian Wang riscv: mm: Define DIRECT_MAP_PHYSMEM_END Koichiro Den NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr() Bryam Vargas exfat: bound uniname advance in exfat_find_dir_entry() Rochan Avlur exfat: preserve benign secondary entries during rename and move Nicolas Pitre vt: fix spurious modifier in CSI/cursor key sequences Andrii Kuchmenko module: decompress: check return value of module_extend_max_pages() Gabriele Monaco rqspinlock: Fix order in raw_res_spin_(un)lock_irq to allow schedule Benjamin Coddington NFSv4: include MAY_WRITE in open permission mask for O_TRUNC Ricardo Robaina audit: fix potential integer overflow in audit_log_n_hex() Huihui Huang tracing: Prevent out-of-bounds read in glob matching Luca Boccassi selftests/liveupdate: add test cases for LIVEUPDATE_IOCTL_CREATE_SESSION calls with invalid length Luca Boccassi liveupdate: reject LIVEUPDATE_IOCTL_CREATE_SESSION with invalid name length Lee Jia Jie perf/aux: Fix page UAF in map_range() Johan Hovold i2c: core: fix hang on adapter registration failure Wentao Liang regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() Janne Grunau watchdog: apple: Add "apple,t8103-wdt" compatible Vasily Khoruzhick EDAC/i10nm: Don't fail probing if ADXL is missing David Hildenbrand (Arm) x86/mm: Fix freeing of PMD-sized vmemmap pages Carlos Song spi: fsl-lpspi: terminate the RX channel on TX prepare failure path Carlos Song spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync() Mark Rutland arm64: fpsimd: Fix type mismatch in sme_{save,load}_state() Paul Louvel crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation Paul Louvel crypto: talitos/hash - remove useless wrapper Paul Louvel crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request Paul Louvel crypto: talitos/hash - drop workqueue mechanism for SEC1 Paul Louvel crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue Paul Louvel crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor Paul Louvel crypto: talitos - move code in current_desc_hdr() into a standalone function Paul Louvel crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function Paul Louvel crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function Paul Louvel crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1 Paul Louvel crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header Ahsan Atta crypto: qat - factor out AER reset helpers Giovanni Cabiddu crypto: qat - validate RSA CRT component lengths Ahsan Atta crypto: qat - skip restart for down devices Ahsan Atta crypto: qat - protect service table iterations with service_lock Ahsan Atta crypto: qat - notify fatal error before AER reset preparation Ahsan Atta crypto: qat - keep VFs enabled during reset Ahsan Atta crypto: qat - handle sysfs-triggered reset callbacks Ahsan Atta crypto: qat - fix restarting state leak on allocation failure Ahsan Atta crypto: qat - centralize bus master enable Eric Biggers crypto: drbg - Fix the fips_enabled priority boost Eric Biggers crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels Eric Biggers crypto: drbg - Fix ineffective sanity check Eric Biggers crypto: drbg - Fix misaligned writes in CTR_DRBG and HASH_DRBG Eric Biggers crypto: drbg - Fix returning success on failure in CTR_DRBG Tycho Andersen (AMD) crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG) Tycho Andersen (AMD) crypto: ccp - Do not initialize SNP for ioctl(SNP_VLEK_LOAD) Tycho Andersen (AMD) crypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT) Tycho Andersen (AMD) crypto: ccp - Do not initialize SNP for SEV ioctls Eric Biggers crypto: loongson - Remove broken and unused loongson-rng Eric Biggers crypto: loongson - Select CRYPTO_RNG Wentao Liang crypto: tegra - fix refcount leak in tegra_se_host1x_submit() Ruijie Li crypto: pcrypt - restore callback for non-parallel fallback Eric Biggers crypto: hisi-trng - Remove crypto_rng interface Anastasia Tishchenko crypto: ecc - Fix carry overflow in vli multiplication Eric Biggers crypto: crypto4xx - Remove insecure and unused rng_alg Xiaonan Zhao crypto: chacha20poly1305 - validate poly1305 template argument Thorsten Blum crypto: caam - use print_hex_dump_devel to guard key hex dumps again Thorsten Blum crypto: caam - use print_hex_dump_devel to guard key hex dumps Eric Biggers crypto: af_alg - Remove zero-copy support from skcipher and aead Bryam Vargas isofs: bound Rock Ridge symlink components to the SL record Qu Wenruo btrfs: fix incorrect buffered IO fallback for append direct writes Bryam Vargas partitions: aix: bound the pp_count scan to the ppe array Qu Wenruo btrfs: do not trim a device which is not writeable Qu Wenruo btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC Tianchu Chen nvmet-auth: validate reply message payload bounds against transfer length Qu Wenruo btrfs: fix false IO failure after falling back to buffered write Bryam Vargas nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page Achkinazi, Igor nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks Mikulas Patocka dm-ioctl: report an error if a device has no table Wentao Liang block: partitions: fix of_node refcount leak in of_partition() Wentao Liang nvme: target: rdma: fix ndev refcount leak on queue connect Thorsten Blum crypto: atmel-sha204a - fail on hwrng registration error in probe path Thorsten Blum crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A Wentao Liang hwrng: jh7110 - fix refcount leak in starfive_trng_read() Bryam Vargas udf: validate sparing table length as an entry count, not a byte count Bryam Vargas udf: validate VAT header length against the VAT inode size Michael Bommarito udf: validate free block extents against the partition length Arjan van de Ven wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon Chao Shi block: skip sync_blockdev() on surprise removal in bdev_mark_dead() Neill Kapron usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile Neill Kapron usb: gadget: f_fs: Initialize epfile->in early to fix endpoint direction checks Paul Cercueil usb: gadget: f_fs: Fix DMA fence leak Tyler Baker usb: gadget: f_fs: initialize reset_work at allocation time Paul Menzel usb: typec: ucsi: cancel pending work on system suspend Fan Wu usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove Madhu M usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode Andrei Kuchynski usb: typec: ucsi: Invert DisplayPort role assignment Badhri Jagan Sridharan usb: typec: tcpm: Validate SVID index in svdm_consume_modes() Andy Yan usb: typec: tcpm: Fix VDM type for Enter Mode commands Stephan Gerhold usb: typec: ps883x: Fix DP+USB3 configuration Shuangpeng Bai usb: typec: class: drop PD lookup reference Myeonghun Pak usb: typec: anx7411: use devm_pm_runtime_enable() Sam Day usbip: vudc: fix NULL deref in vep_dequeue() Yichong Chen usbip: tools: support SuperSpeedPlus devices Xu Rao USB: usb-storage: ene_ub6250: restore media-ready check Johan Hovold USB: ulpi: fix memory leak on registration failure Johan Hovold USB: serial: digi_acceleport: fix write buffer corruption Johan Hovold USB: serial: digi_acceleport: fix hard lockup on disconnect Johan Hovold USB: serial: digi_acceleport: fix broken rx after throttle Fabio Porcedda USB: serial: option: add Telit Cinterion FE990D50 compositions Johan Hovold USB: serial: keyspan_pda: fix information leak Haoxiang Li usb: mtu3: unmap request DMA on queue failure Myeonghun Pak USB: misc: uss720: unregister parport on probe failure HE WEI (ギカク) usb: misc: usbio: bound bulk IN response length to the received transfer Xu Rao USB: storage: include US_FL_NO_SAME in quirks mask Myeonghun Pak usb: sl811-hcd: disable controller wakeup on remove Johan Hovold USB: legousbtower: fix use-after-free on disconnect race Erich E. Hoover USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD Johan Hovold USB: iowarrior: fix use-after-free on disconnect race Johan Hovold USB: iowarrior: fix use-after-free on disconnect Johan Hovold USB: ldusb: fix use-after-free on disconnect race Johan Hovold USB: idmouse: fix use-after-free on disconnect race Xu Rao usb: gadget: f_printer: take kref only for successful open Jimmy Hu usb: gadget: udc: Fix use-after-free in gadget_match_driver Maoyi Xie usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler Dawei Feng usb: free iso schedules on failed submit WenTao Liang usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() Ben Dooks usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup() Rodrigo Lugathe da Conceição Alves USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub Haoxiang Li usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() Jared Baldridge usb: cdc_acm: Add quirk for Uniden BC125AT scanner Jens Glathe Revert "usb: typec: mux: avoid duplicated mux switches" Maoyi Xie net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() Vlad Poenaru bpf: Allow LPM map access from sleepable BPF programs Nuoqi Gui bpf: Keep dynamic inner array lookups nullable Paul Moses bpf: Validate BTF repeated field counts before expansion Dawei Feng bpf: Restore sysctl new-value from 1 to 0 Zhao Zhang bpf: Reject fragmented frames in devmap Dawei Feng xfs: fix memory leak in xfs_dqinode_metadir_create() Yingjie Gao xfs: fix exchmaps reservation limit check Darrick J. Wong xfs: fix pointer arithmetic error on 32-bit systems Alexey Nepomnyashih xfs: fix unreachable BIGTIME check in dquot flush validation Christoph Hellwig xfs: initialize iomap->flags earlier in xfs_bmbt_to_iomap Christoph Hellwig xfs: only log freed extents for the current RTG in zoned growfs Christoph Hellwig xfs: pass back updated nb from xfs_growfs_compute_deltas Yingjie Gao xfs: release dquot buffer after dqflush failure Yousef Alhouseen xfs: use null daddr for unset first bad log block Andy Shevchenko serial: 8250_mid: Disable DMA for selected platforms Louis-Alexis Eyraud media: mtk-jpeg: cancel workqueue on release for supported platforms only Deepanshu Kartikey nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers Tristan Madani hfs/hfsplus: zero-initialize buffer in hfs_bnode_read Tristan Madani hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length Srinivas Pandruvada HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads Maoyi Xie HID: lg-g15: cancel pending work on remove to fix a use-after-free Manish Khadka HID: appleir: fix UAF on pending key_up_timer in remove() Trung Nguyen HID: multitouch: fix out-of-bounds bit access on mt_io_flags Manish Khadka HID: letsketch: fix UAF on inrange_timer at driver unbind Jinmo Yang HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush() Jinmo Yang HID: wacom: fix slab-out-of-bounds write in wacom_wac_queue_insert Manish Khadka HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove() Oleg Makarenko HID: pidff: Use correct effect type in effect update Myeonghun Pak HID: wacom: stop hardware after post-start probe failures Carlos Llamas HID: uhid: convert to hid_safe_input_report() Tianchu Chen HID: hid-goodix-spi: validate report size to prevent stack buffer overflow Yichong Chen tools/mm/slabinfo: fix total_objects attribute name Xuewen Wang tools/mm/slabinfo: Fix trace disable logic inversion Vlastimil Babka (SUSE) mm/slab: do not limit zeroing to orig_size when only red zoning is enabled Lukas Wunner X.509: Fix validation of ASN.1 certificate header Robin Murphy perf/arm-cmn: Fix DVM node events Heiko Carstens s390: Revert support for DCACHE_WORD_ACCESS Kartik Rajput clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances Thomas Gleixner time/jiffies: Register jiffies clocksource before usage WenTao Liang posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path Jann Horn proc: protect ptrace_may_access() with exec_update_lock (part 1) Yuho Choi cpufreq: pcc: fix use-after-free and double free in _OSC evaluation Tianxiang Chen cpufreq: Fix hotplug-suspend race during reboot Steven Rostedt sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT Fushuai Wang cpufreq: intel_pstate: Sync policy->cur during CPU offline Zide Chen perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box() Jann Horn proc: protect ptrace_may_access() with exec_update_lock (FD links) John Hubbard libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo() Guangshuo Li firmware_loader: fix device reference leak in firmware_upload_register() Guangshuo Li cpufreq: qcom-cpufreq-hw: Fix possible double free Abdun Nihaal OPP: of: Fix potential memory leak in opp_parse_supplies() Baokun Li writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() ChenXiaoSong smb/server: do not require delete access for non-replacing links Norbert Manthey smb: client: mask server-provided mode to 07777 in modefromsid Xu Rao smb: client: fix atime clamp check in read completion Zihan Xi smb: client: harden POSIX SID length parsing Zihan Xi smb: client: use unaligned reads in parse_posix_ctxt() Haoxiang Li smb: client: Fix next buffer leak in receive_encrypted_standard() Henrique Carvalho smb: client: fix double-free in SMB2_close() replay Henrique Carvalho smb: client: fix double-free in SMB2_open() replay Zhao Zhang smb: client: fix double-free in SMB2_flush() replay Henrique Carvalho smb: client: fix change notify replay double-free Henrique Carvalho smb: client: fix double-free in SMB2_ioctl() replay Henrique Carvalho smb: client: fix query_info() replay double-free Henrique Carvalho smb: client: fix query directory replay double-free Ralph Boehme smb/client: fix chown/chgrp with SMB3 POSIX Extensions Haofeng Li ksmbd: validate NTLMv2 response before updating session key Namjae Jeon ksmbd: track the connection owning a byte-range lock Namjae Jeon ksmbd: use opener credentials for ADS I/O Namjae Jeon ksmbd: use opener credentials for delete-on-close Gil Portnoy ksmbd: add per-handle permission check to FILE_LINK_INFORMATION Gil Portnoy ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION Namjae Jeon ksmbd: run set info with opener credentials Gil Portnoy ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY Namjae Jeon ksmbd: require source read access for duplicate extents Davide Ornaghi ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation Namjae Jeon ksmbd: serialize QUERY_DIRECTORY requests per file Gil Portnoy ksmbd: add a permission check for FSCTL_SET_ZERO_DATA Gil Portnoy ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE Namjae Jeon ksmbd: prevent path traversal bypass by restricting caseless retry Dan Carpenter smb/client: Fix error code in smb2_aead_req_alloc() Michael Bommarito smb: client: resolve SWN tcon from live registrations Junrui Luo coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() Muhammad Bilal Bluetooth: L2CAP: validate option length before reading conf opt value Runyu Xiao Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock Muhammad Bilal Bluetooth: ISO: avoid NULL deref of conn in iso_conn_big_sync() Pauli Virtanen Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled Siwei Zhang Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() Yousef Alhouseen Bluetooth: fix UAF in bt_accept_dequeue() Maoyi Xie Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() Yousef Alhouseen Bluetooth: bnep: pin L2CAP connection during netdev registration Sergey Senozhatsky Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() Pablo Neira Ayuso netfilter: flowtable: IPIP tunnel hardware offload is not yet support Adrian Bente netfilter: flowtable: fix offloaded ct timeout never being extended Xiang Mei netfilter: ebtables: terminate table name before find_table_lock() Florian Westphal netfilter: ebtables: module names must be null-terminated Florian Westphal netfilter: ebtables: zero chainstack array Florian Westphal netfilter: handle unreadable frags Pratham Gupta netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump Zijiang Huang mm/swap: add cond_resched() in swap_reclaim_full_clusters to prevent softlockup Jose Fernandez (Anthropic) mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host Qi Zheng mm: shrinker: fix NULL pointer dereference in debugfs Qi Zheng mm: shrinker: fix shrinker_info teardown race with expansion Shakeel Butt mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() Andrei Kuchynski mfd: cros_ec: Delay dev_set_drvdata() until probe success Xiaolei Wang media: nxp: imx8-isi: Fix use-after-free on remove Wyatt Feng net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Yuyang Huang ipv4: igmp: remove multicast group from hash table on device destruction Breno Leitao netpoll: fix a use-after-free on shutdown path Michael Wigham io_uring/rw: preserve partial result for iopoll Runyu Xiao io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item Vasileios Almpanis io_uring/nop: fix file reference leak with IOSQE_FIXED_FILE HyeongJun An HID: logitech-dj: Fix maxfield check in DJ short report validation Runyu Xiao gpio: sch: use raw_spinlock_t in the irq startup path Runyu Xiao gpio: eic-sprd: use raw_spinlock_t in the irq startup path Koichiro Den NTB: epf: Avoid calling pci_irq_vector() from hardirq context Valeriy Yashnikov ntfs: avoid calling post_write_mst_fixup() for invalid index_block Yunpeng Tian fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns Thomas Gleixner debugobjects: Plug race against a concurrent OOM disable Runyu Xiao coresight: etb10: restore atomic_t for shared reading state Samuel Page Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete Marco Elver Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref Chi Wang audit: Fix data races of skb_queue_len() readers on audit_queue Zijing Yin net: af_key: initialize alg_key_len for IPComp states Gil Portnoy ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL Giovanni Cabiddu crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() Michael Bommarito crypto: krb5 - filter out async aead implementations at alloc Dawei Feng crypto: amlogic - avoid double cleanup in meson_crypto_probe() Alexandru Hossu staging: rtl8723bs: fix OOB write in HT_caps_handler() Alexandru Hossu staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Alexandru Hossu staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop Alexandru Hossu staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() Alexandru Hossu staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop Alexandru Hossu staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop Alexandru Hossu staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() Alexandru Hossu staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() Christopher Mackle staging: rtl8723bs: don't drop short TX frames in _rtw_pktfile_read() Alexandru Hossu staging: media: ipu7: fix double-free and use-after-free in error paths Arnd Bergmann staging: media: atomisp: reduce load_primary_binaries() stack usage Ricardo Ribalda media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe Hao-Qun Huang staging: vme_user: fix location monitor leak in tsi148 bridge Hao-Qun Huang staging: vme_user: fix location monitor leak in fake bridge Shoichiro Miyamoto smb: client: restrict implied bcc[0] exemption to responses without data area Michael Tautschnig staging: vme_user: bound slave read/write to the kern_buf size Samuel Page tipc: fix out-of-bounds read in broadcast Gap ACK blocks Yuanhe Shu tracing: Fix NULL pointer dereference in func_set_flag() Yizhou Zhao 6lowpan: fix NHC entry use-after-free on error path Cen Zhang usb: misc: usbio: fix disconnect UAF in client teardown Runyu Xiao usb: dwc3: run gadget disconnect from sleepable suspend context Alan Stern USB: chaoskey: Fix slab-use-after-free in chaoskey_release() Michael Bommarito hwrng: virtio: clamp device-reported used.len at copy_data() Johan Hovold virtio-mmio: fix device release warning on module unload Ammar Faizi virtio_pci: fix vq info pointer lookup via wrong index Xiang Mei netfilter: ipset: fix race between dump and ip_set_list resize SeongJae Park mm/damon/ops-common: handle extreme intervals in damon_hot_score() Michael Bommarito tcp: restore RCU grace period in tcp_ao_destroy_sock Marco Nenciarini PCI/IOV: Skip VF Resizable BAR restore on read error Marco Nenciarini PCI: Skip Resizable BAR restore on read error Yadu M G PCI: qcom: Initialize DWC MSI lock for firmware-managed ECAM hosts Manivannan Sadhasivam PCI: mediatek: Fix IRQ domain leak when port fails to enable Richard Zhu PCI: imx6: Assert ref_clk_en after reference clock stabilizes on i.MX95 Richard Zhu PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling Richard Zhu PCI: imx6: Configure REF_USE_PAD before PHY reset for i.MX95 Ratheesh Kannoth PCI: host-common: Request bus reassignment when not probe-only Maciej W. Rozycki PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining Mahesh Vaidya PCI: altera: Fix resource leaks on probe failure Mahesh Vaidya PCI: altera: Do not dispose parent IRQ mapping Ziyao Li PCI: loongson: Override PCIe bridge supported speeds for Loongson-3C6000 series Han Gao riscv: dts: sophgo: Add dma-coherent to SG2042 PCIe controllers Myeonghun Pak usb: typec: tcpci_rt1711h: unregister TCPCI port with devres Xu Rao xhci: sideband: fix ring sg table pages leak 胡连勤 usb: xhci: Fix sleep in atomic context in xhci_free_streams() Alice Ryhl rust_binder: clear freeze listener on node removal Keshav Verma rust_binder: synchronize Rust Binder stats with freeze commands Keshav Verma rust_binder: reject context manager self-transaction Alice Ryhl rust_binder: fix BINDER_GET_EXTENDED_ERROR Hyunwoo Kim rust_binder: use a u64 stride when cleaning up the offsets array Carlos Llamas binder: fix UAF in binder_free_transaction() Carlos Llamas binder: fix UAF in binder_thread_release() Johan Hovold Bluetooth: btusb: fix wakeup source leak on probe failure Johan Hovold Bluetooth: btusb: fix use-after-free on marvell probe failure Johan Hovold Bluetooth: btusb: fix use-after-free on registration failure Zenm Chen Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB Alex Williamson vfio/mlx5: Fix racy bitfields and tighten struct layout Alex Williamson vfio: Remove device debugfs before releasing devres Junrui Luo vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc Alex Williamson vfio/pci: Fix racy bitfields and tighten struct layout Alex Williamson vfio/pci: Release the VGA arbiter client on register_device() failure Alex Williamson vfio/pci: Latch disable_idle_d3 per device Raghavendra Rao Ananta vfio/pci: Use a private flag to prevent power state change with VFs Reinette Chatre x86,fs/resctrl: Prevent out-of-bounds access while offlining CPU when SNC enabled Cássio Gabriel ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes Cássio Gabriel ALSA: usb-audio: Update Babyface Pro control caches only after successful writes Cássio Gabriel ALSA: usb-audio: Roll back quirk control caches on write errors Cássio Gabriel ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks Cássio Gabriel ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() Darvell Long ALSA: usb-audio: avoid kobject path lookup in DualSense match Gordon Chen ALSA: usb-audio: add IFB_SILENCE_ON_EMPTY quirk for Behringer Flow 8 WenTao Liang ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission HyeongJun An ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() Zhao Dongdong ALSA: ice1712: check snd_ctl_new1() return value Aaron Erhardt ALSA: hda/realtek: Fix noisy mic for Clevo V6xxAW Huacai Chen ALSA: hda/hdmi: Use 'AC_PINSENSE_ELDV' to detect pinsense for Loongson Cameron Graham ALSA: hda/hdmi: Add force-connect quirk for HP EliteDesk 800 G5 Mini Cássio Gabriel ALSA: hda/cs35l41: Fix firmware load work teardown Zhao Dongdong ALSA: gus: check snd_ctl_new1() return value Maoyi Xie ALSA: firewire: isight: bound the sample count to the packet payload Geoffrey D. Bennett ALSA: FCP: Add Focusrite ISA C8X support Zhao Dongdong ALSA: es1938: check snd_ctl_new1() return value Cássio Gabriel ALSA: compress: Fix task creation error unwind Zhao Dongdong ALSA: cmipci: check snd_ctl_new1() return value Maoyi Xie ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser Zhao Dongdong ALSA: aoa: check snd_ctl_new1() return value Zhao Dongdong ALSA: ymfpci: check snd_ctl_new1() return value Cássio Gabriel ALSA: virtio: Validate control metadata from the device Cássio Gabriel ALSA: virtio: Add missing 384 kHz PCM rate mapping HyeongJun An ALSA: usx2y: us144mkii: fix work UAF on disconnect Stepan Ionichev iio: temperature: tmp006: use devm_iio_trigger_register Liviu Stan iio: temperature: ltc2983: Fix reinit_completion() called after conversion start Liviu Stan iio: temperature: ltc2983: Fix n_wires default bypassing rotation check Pengpeng Hou iio: temperature: Build mlx90635 with CONFIG_MLX90635 Stepan Ionichev iio: resolver: ad2s1210: notify trigger and clear state on fault read error Stepan Ionichev iio: proximity: vl53l0x: notify trigger and clear IRQ on error paths Biren Pandya iio: pressure: mpl115: fix runtime PM leak on read error David Carlier iio: pressure: bmp280: zero-init bmp580 trigger handler buffer Andy Shevchenko iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call Javier Carrasco iio: light: veml6030: fix channel type when pushing events Stepan Ionichev iio: light: tsl2591: return actual error from probe IRQ failure Joshua Crofts iio: light: opt3001: fix missing state reset on timeout Biren Pandya iio: light: gp2ap002: fix runtime PM leak on read error Alexander A. Klimov iio: light: al3320a: read both ALS ADC registers again Joshua Crofts iio: light: al3320a: add missing REGMAP_I2C to Kconfig Alexander A. Klimov iio: light: al3010: read both ALS ADC registers again Vidhu Sarwal iio: light: al3010: fix incorrect scale for the highest gain range Joshua Crofts iio: light: al3010: add missing REGMAP_I2C to Kconfig Joshua Crofts iio: light: al3000a: add missing REGMAP_I2C to Kconfig Andreas Kempe iio: imu: st_lsm6dsx: deselect shub page before reading whoami Jean-Baptiste Maneyrol iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading Jean-Baptiste Maneyrol iio: imu: inv_icm42600: fix timestamp clock period by using lower value Runyu Xiao iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ Runyu Xiao iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ Stepan Ionichev iio: gyro: bmg160: wait full startup time after mode change at probe Stepan Ionichev iio: gyro: bmg160: bail out when bandwidth/filter is not in table Lars-Peter Clausen iio: event: Fix event FIFO reset race Dan Carpenter iio: dac: ad3552r-hs: fix uninitialized data ni ad3552r_hs_write_data_source() Dan Carpenter iio: core: fix uninitialized data in debugfs Herman van Hazendonk iio: common: st_sensors: honour channel endianness in read_axis_data Maxwell Doose iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Felix Gu iio: buffer: hw-consumer: free scan_mask on buffer release Dan Carpenter iio: backend: fix uninitialized data in debugfs Pengpeng Hou iio: adc: ti-ads124s08: Return reset GPIO lookup errors Guangshuo Li iio: adc: ti-ads1119: fix PM reference leak in buffer preenable Maxwell Doose iio: adc: spear: Initialize completion before requesting IRQ Andy Shevchenko iio: adc: nxp-sar-adc: Fix the delay calculation in nxp_sar_adc_wait_for() Maxwell Doose iio: adc: lpc32xx: Initialize completion before requesting IRQ Radu Sabau iio: adc: ad_sigma_delta: fix CS held asserted and state leaks Radu Sabau iio: adc: ad_sigma_delta: fix clear_pending_event for registerless devices Joshua Crofts iio: adc: ad7779: add missing 'select IIO_TRIGGERED_BUFFER' to Kconfig Jonathan Cameron iio: adc: ad7768-1: Select GPIOLIB Samuel Moelius iio: adc: ad7380: select REGMAP Arnd Bergmann iio: adc: ad4062: add GPIOLIB dependency Biren Pandya iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error Bryam Vargas iio: accel: bmc150: clamp the device-reported FIFO frame count Griffin Kroah-Hartman usb: gadget: function: rndis: add length check for header Griffin Kroah-Hartman usb: gadget: function: rndis: add length check to response query Po-Hao Huang wifi: rtw89: correct drop logic for malformed AMPDU frames Pawan Gupta bpf: Prefer dirty packs for eBPF allocations Pawan Gupta bpf: Prefer packs that won't trigger an IBPB flush on allocation Pawan Gupta bpf: Skip redundant IBPB in pack allocator Pawan Gupta bpf: Restrict JIT predictor flush to cBPF Pawan Gupta x86/bugs: Enable IBPB flush on BPF JIT allocation Pawan Gupta bpf: Support for hardening against JIT spraying Taeyang Lee <0wn@theori.io> perf/core: Detach event groups during remove_on_exec Sebastian Andrzej Siewior futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" Alice Ryhl rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER Gary Guo rust: doctest: fix incorrect pattern in replacement Haoze Xie rust: block: fix GenDisk cleanup paths Danilo Krummrich rust: pci: use 'static lifetime for PCI BAR resource names Alice Ryhl rust: kasan: KASAN+RUST requires clang Miguel Ojeda rust: cpufreq: clean new `clippy::map_or_identity` lint for Rust 1.98.0 Huacai Chen LoongArch: Add PIO for early access before ACPI PCI root register HyeongJun An platform/x86: intel-hid: Protect ACPI notify handler against recursion Rafael J. Wysocki ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup Rafael J. Wysocki ACPI: NFIT: core: Fix possible NULL pointer dereference Jeremy Linton ACPI: CPPC: Suppress UBSAN warning caused by field misuse Carlos López KVM: x86: Unconditionally recompute CR8 intercept on PPR update Sean Christopherson KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode Sean Christopherson KVM: x86: Move update_cr8_intercept() to lapic.c Florian Fainelli perf trace beauty fcntl: Fix build with older kernel headers Randy Dunlap slab: recognize @GFP parameter as optional in kernel-doc Pedro Falcato mm/khugepaged: write all dirty file folios when collapsing Xingquan Liu net/sched: dualpi2: fix GSO backlog accounting Kiryl Shutsemau userfaultfd: gate must_wait writability check on pte_present() Miguel Ojeda rust: str: clean unused import for Rust >= 1.98 Miguel Ojeda rust: str: use the "kernel vertical" imports style ------------- Diffstat: Documentation/crypto/userspace-if.rst | 31 +- Documentation/sound/alsa-configuration.rst | 6 + MAINTAINERS | 1 - Makefile | 7 +- arch/arm64/include/asm/kvm_hyp.h | 1 + arch/arm64/kernel/entry-fpsimd.S | 8 +- arch/arm64/kvm/arm.c | 2 + arch/arm64/kvm/hyp/nvhe/hyp-main.c | 12 + arch/arm64/kvm/nested.c | 40 +- arch/arm64/net/bpf_jit_comp.c | 4 +- arch/loongarch/configs/loongson32_defconfig | 1 - arch/loongarch/configs/loongson64_defconfig | 1 - arch/loongarch/include/asm/acpi.h | 2 + arch/loongarch/kernel/acpi.c | 28 + arch/loongarch/kernel/setup.c | 2 + arch/loongarch/kvm/intc/eiointc.c | 6 + arch/loongarch/kvm/intc/ipi.c | 2 + arch/loongarch/kvm/intc/pch_pic.c | 2 + arch/loongarch/net/bpf_jit.c | 5 +- arch/loongarch/pci/acpi.c | 2 + arch/powerpc/net/bpf_jit_comp.c | 4 +- arch/riscv/boot/dts/sophgo/sg2042.dtsi | 4 + arch/riscv/include/asm/pgtable.h | 10 + arch/riscv/kernel/entry.S | 7 +- arch/riscv/net/bpf_jit_comp64.c | 2 +- arch/riscv/net/bpf_jit_core.c | 3 +- arch/s390/Kconfig | 1 - arch/s390/include/asm/asm-extable.h | 4 - arch/s390/include/asm/word-at-a-time.h | 22 - arch/s390/mm/extable.c | 18 - arch/x86/events/intel/uncore_snb.c | 7 - arch/x86/include/asm/nospec-branch.h | 4 + arch/x86/kernel/cpu/bugs.c | 50 +- arch/x86/kernel/cpu/resctrl/monitor.c | 5 + arch/x86/kvm/lapic.c | 49 +- arch/x86/kvm/lapic.h | 3 +- arch/x86/kvm/svm/avic.c | 47 +- arch/x86/kvm/svm/sev.c | 10 +- arch/x86/kvm/svm/svm.c | 3 + arch/x86/kvm/vmx/pmu_intel.c | 6 +- arch/x86/kvm/vmx/tdx.c | 16 +- arch/x86/kvm/vmx/vmx.c | 44 +- arch/x86/kvm/x86.c | 38 +- arch/x86/mm/init_64.c | 40 +- arch/x86/net/bpf_jit_comp.c | 5 +- block/bdev.c | 8 +- block/partitions/aix.c | 9 + block/partitions/of.c | 5 +- crypto/af_alg.c | 69 +-- crypto/algif_aead.c | 8 +- crypto/asymmetric_keys/x509_loader.c | 2 +- crypto/chacha20poly1305.c | 11 +- crypto/df_sp80090a.c | 7 +- crypto/drbg.c | 16 +- crypto/ecc.c | 31 +- crypto/krb5/krb5_api.c | 2 +- crypto/pcrypt.c | 4 + drivers/acpi/cppc_acpi.c | 11 +- drivers/acpi/nfit/core.c | 21 +- drivers/android/binder.c | 19 +- drivers/android/binder/allocation.rs | 5 +- drivers/android/binder/error.rs | 13 +- drivers/android/binder/freeze.rs | 11 +- drivers/android/binder/node.rs | 10 +- drivers/android/binder/process.rs | 18 +- drivers/android/binder/rust_binder_events.c | 7 +- drivers/android/binder/stats.rs | 4 +- drivers/android/binder/thread.rs | 65 ++- drivers/android/binder/transaction.rs | 15 +- drivers/base/firmware_loader/sysfs_upload.c | 8 +- drivers/bluetooth/btmtksdio.c | 2 +- drivers/bluetooth/btnxpuart.c | 6 + drivers/bluetooth/btusb.c | 39 +- drivers/bluetooth/hci_ldisc.c | 14 +- drivers/char/hw_random/jh7110-trng.c | 13 +- drivers/char/hw_random/virtio-rng.c | 23 +- drivers/clocksource/timer-tegra186.c | 3 +- drivers/cpufreq/cpufreq.c | 2 + drivers/cpufreq/intel_pstate.c | 6 +- drivers/cpufreq/pcc-cpufreq.c | 2 + drivers/cpufreq/qcom-cpufreq-hw.c | 1 - drivers/crypto/Kconfig | 2 - drivers/crypto/Makefile | 1 - drivers/crypto/amcc/crypto4xx_core.c | 88 ---- drivers/crypto/amcc/crypto4xx_core.h | 4 - drivers/crypto/amcc/crypto4xx_reg_def.h | 11 - drivers/crypto/amlogic/amlogic-gxl-core.c | 2 +- drivers/crypto/atmel-sha204a.c | 27 +- drivers/crypto/caam/caamalg.c | 12 +- drivers/crypto/caam/caamalg_qi.c | 12 +- drivers/crypto/caam/caamalg_qi2.c | 12 +- drivers/crypto/caam/caamhash.c | 4 +- drivers/crypto/caam/key_gen.c | 4 +- drivers/crypto/ccp/sev-dev.c | 70 +-- drivers/crypto/hisilicon/Kconfig | 1 - drivers/crypto/hisilicon/trng/trng.c | 296 +---------- drivers/crypto/intel/qat/qat_420xx/adf_drv.c | 2 - drivers/crypto/intel/qat/qat_4xxx/adf_drv.c | 2 - drivers/crypto/intel/qat/qat_6xxx/adf_drv.c | 2 - drivers/crypto/intel/qat/qat_c3xxx/adf_drv.c | 1 - drivers/crypto/intel/qat/qat_c3xxxvf/adf_drv.c | 1 - drivers/crypto/intel/qat/qat_c62x/adf_drv.c | 1 - drivers/crypto/intel/qat/qat_c62xvf/adf_drv.c | 1 - .../intel/qat/qat_common/adf_accel_devices.h | 2 + drivers/crypto/intel/qat/qat_common/adf_aer.c | 109 ++-- .../crypto/intel/qat/qat_common/adf_common_drv.h | 3 + drivers/crypto/intel/qat/qat_common/adf_init.c | 18 + drivers/crypto/intel/qat/qat_common/adf_isr.c | 39 ++ drivers/crypto/intel/qat/qat_common/adf_sriov.c | 32 +- .../crypto/intel/qat/qat_common/qat_asym_algs.c | 10 +- drivers/crypto/intel/qat/qat_dh895xcc/adf_drv.c | 1 - drivers/crypto/intel/qat/qat_dh895xccvf/adf_drv.c | 1 - drivers/crypto/loongson/Kconfig | 5 - drivers/crypto/loongson/Makefile | 1 - drivers/crypto/loongson/loongson-rng.c | 209 -------- drivers/crypto/talitos.c | 561 +++++++++++---------- drivers/crypto/talitos.h | 12 + drivers/crypto/tegra/tegra-se-main.c | 2 +- drivers/dma-buf/udmabuf.c | 9 +- drivers/edac/i10nm_base.c | 14 +- drivers/fpga/dfl-afu-main.c | 3 + drivers/gpio/gpio-eic-sprd.c | 8 +- drivers/gpio/gpio-sch.c | 32 +- drivers/gpu/drm/nouveau/nvkm/subdev/mmu/vmm.c | 31 +- drivers/hid/hid-appleir.c | 45 +- drivers/hid/hid-goodix-spi.c | 3 + drivers/hid/hid-lenovo-go.c | 9 + drivers/hid/hid-letsketch.c | 36 +- drivers/hid/hid-lg-g15.c | 16 + drivers/hid/hid-logitech-dj.c | 9 +- drivers/hid/hid-multitouch.c | 32 +- drivers/hid/hid-sensor-hub.c | 77 ++- drivers/hid/uhid.c | 8 +- drivers/hid/usbhid/hid-pidff.c | 2 +- drivers/hid/wacom_sys.c | 20 +- drivers/hwtracing/coresight/coresight-etb10.c | 6 +- drivers/hwtracing/coresight/ultrasoc-smb.c | 1 + drivers/i2c/busses/i2c-davinci.c | 4 +- drivers/i2c/busses/i2c-i801.c | 2 +- drivers/i2c/busses/i2c-imx-lpi2c.c | 15 +- drivers/i2c/busses/i2c-mpc.c | 2 +- drivers/i2c/busses/i2c-stm32f7.c | 9 +- drivers/i2c/i2c-core-base.c | 81 +-- drivers/iio/accel/bmc150-accel-core.c | 2 + drivers/iio/accel/kxsd9.c | 5 +- drivers/iio/adc/Kconfig | 4 + drivers/iio/adc/ad_sigma_delta.c | 39 +- drivers/iio/adc/lpc32xx_adc.c | 4 +- drivers/iio/adc/nxp-sar-adc.c | 4 +- drivers/iio/adc/spear_adc.c | 3 +- drivers/iio/adc/ti-ads1119.c | 6 +- drivers/iio/adc/ti-ads124s08.c | 3 +- drivers/iio/buffer/industrialio-hw-consumer.c | 2 + drivers/iio/chemical/scd30_core.c | 19 +- drivers/iio/common/st_sensors/st_sensors_core.c | 23 +- drivers/iio/dac/ad3552r-hs.c | 2 +- drivers/iio/gyro/bmg160_core.c | 16 +- drivers/iio/imu/adis_trigger.c | 2 +- drivers/iio/imu/bmi160/bmi160_core.c | 3 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 4 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 9 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 1 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 4 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 21 +- drivers/iio/industrialio-backend.c | 2 +- drivers/iio/industrialio-core.c | 2 +- drivers/iio/industrialio-event.c | 5 +- drivers/iio/light/Kconfig | 3 + drivers/iio/light/al3010.c | 10 +- drivers/iio/light/al3320a.c | 8 +- drivers/iio/light/gp2ap002.c | 2 +- drivers/iio/light/opt3001.c | 6 +- drivers/iio/light/tsl2591.c | 6 +- drivers/iio/light/veml6030.c | 8 +- drivers/iio/magnetometer/ak8975.c | 1 + drivers/iio/pressure/bmp280-core.c | 2 +- drivers/iio/pressure/mpl115.c | 4 +- drivers/iio/proximity/vl53l0x-i2c.c | 7 +- drivers/iio/resolver/ad2s1210.c | 2 +- drivers/iio/temperature/Makefile | 2 +- drivers/iio/temperature/ltc2983.c | 5 +- drivers/iio/temperature/tmp006.c | 2 +- drivers/infiniband/core/addr.c | 2 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 9 + drivers/infiniband/ulp/rtrs/rtrs-srv.c | 5 +- drivers/input/joystick/iforce/iforce-packets.c | 18 +- drivers/input/joystick/maplecontrol.c | 3 +- drivers/input/keyboard/maple_keyb.c | 4 +- drivers/input/mouse/elan_i2c_core.c | 36 +- drivers/input/mouse/maplemouse.c | 9 +- drivers/input/rmi4/rmi_bus.c | 4 +- drivers/input/rmi4/rmi_f30.c | 2 +- drivers/input/rmi4/rmi_f3a.c | 2 +- drivers/input/serio/gscps2.c | 1 + drivers/input/touchscreen/ads7846.c | 5 +- drivers/input/touchscreen/goodix.c | 3 +- drivers/input/touchscreen/mms114.c | 26 +- drivers/input/touchscreen/touchwin.c | 15 +- drivers/iommu/amd/iommu.c | 3 +- drivers/iommu/intel/iommu.h | 11 + drivers/iommu/intel/svm.c | 12 +- drivers/iommu/iommufd/driver.c | 13 +- drivers/iommu/iommufd/eventq.c | 36 +- drivers/iommu/iommufd/hw_pagetable.c | 11 +- drivers/iommu/iommufd/iommufd_private.h | 2 +- drivers/md/dm-ioctl.c | 5 +- .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 3 +- .../media/platform/nxp/imx8-isi/imx8-isi-core.c | 2 +- drivers/mfd/cros_ec_dev.c | 3 +- drivers/net/usb/kalmia.c | 8 + drivers/net/wireless/mediatek/mt76/mt7921/main.c | 3 + drivers/net/wireless/mediatek/mt76/mt7925/main.c | 3 + drivers/net/wireless/realtek/rtw89/core.c | 3 +- drivers/net/wireless/realtek/rtw89/mac80211.c | 3 +- drivers/ntb/hw/epf/ntb_hw_epf.c | 14 +- drivers/nvme/host/multipath.c | 6 + drivers/nvme/target/discovery.c | 23 +- drivers/nvme/target/fabrics-cmd-auth.c | 15 +- drivers/nvme/target/rdma.c | 6 +- drivers/opp/of.c | 3 +- drivers/pci/controller/dwc/pci-imx6.c | 65 ++- drivers/pci/controller/dwc/pcie-qcom.c | 6 + drivers/pci/controller/pci-host-common.c | 4 + drivers/pci/controller/pci-loongson.c | 36 ++ drivers/pci/controller/pcie-altera.c | 36 +- drivers/pci/controller/pcie-mediatek.c | 65 ++- drivers/pci/iov.c | 6 + drivers/pci/quirks.c | 51 +- drivers/pci/rebar.c | 6 + drivers/perf/arm-cmn.c | 23 +- drivers/platform/x86/intel/hid.c | 9 + drivers/regulator/scmi-regulator.c | 4 +- drivers/spi/spi-fsl-lpspi.c | 18 +- drivers/staging/media/atomisp/pci/sh_css.c | 6 +- drivers/staging/media/ipu3/ipu3-css-params.c | 8 +- drivers/staging/media/ipu7/ipu7.c | 22 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 15 + drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 20 +- drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 23 +- drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 8 + drivers/staging/rtl8723bs/os_dep/xmit_linux.c | 6 +- drivers/staging/vme_user/vme_fake.c | 8 + drivers/staging/vme_user/vme_tsi148.c | 8 + drivers/staging/vme_user/vme_user.c | 22 + drivers/tty/serial/8250/8250_mid.c | 13 +- drivers/tty/vt/keyboard.c | 12 +- drivers/usb/cdns3/cdnsp-mem.c | 2 + drivers/usb/class/cdc-acm.c | 3 + drivers/usb/common/ulpi.c | 23 +- drivers/usb/core/quirks.c | 6 + drivers/usb/dwc3/core.c | 4 +- drivers/usb/dwc3/dwc3-meson-g12a.c | 14 +- drivers/usb/dwc3/gadget.c | 43 +- drivers/usb/fotg210/fotg210-hcd.c | 6 +- drivers/usb/gadget/composite.c | 5 +- drivers/usb/gadget/function/f_fs.c | 9 +- drivers/usb/gadget/function/f_printer.c | 3 +- drivers/usb/gadget/function/rndis.c | 20 +- drivers/usb/gadget/udc/core.c | 29 +- drivers/usb/host/ehci-sched.c | 11 +- drivers/usb/host/sl811-hcd.c | 1 + drivers/usb/host/xhci-sideband.c | 2 + drivers/usb/host/xhci.c | 11 +- drivers/usb/misc/chaoskey.c | 1 - drivers/usb/misc/idmouse.c | 45 +- drivers/usb/misc/iowarrior.c | 61 +-- drivers/usb/misc/ldusb.c | 38 +- drivers/usb/misc/legousbtower.c | 37 +- drivers/usb/misc/usbio.c | 8 +- drivers/usb/misc/uss720.c | 5 +- drivers/usb/mtu3/mtu3_gadget.c | 1 + drivers/usb/serial/digi_acceleport.c | 43 +- drivers/usb/serial/keyspan_pda.c | 2 +- drivers/usb/serial/option.c | 16 + drivers/usb/storage/ene_ub6250.c | 3 +- drivers/usb/storage/usb.c | 2 +- drivers/usb/typec/anx7411.c | 4 +- drivers/usb/typec/class.c | 1 + drivers/usb/typec/mux.c | 13 +- drivers/usb/typec/mux/ps883x.c | 6 +- drivers/usb/typec/tcpm/tcpci_rt1711h.c | 13 +- drivers/usb/typec/tcpm/tcpm.c | 9 +- drivers/usb/typec/ucsi/displayport.c | 7 +- drivers/usb/typec/ucsi/ucsi.c | 20 + drivers/usb/typec/ucsi/ucsi.h | 1 + drivers/usb/typec/ucsi/ucsi_acpi.c | 10 +- drivers/usb/typec/ucsi/ucsi_ccg.c | 2 +- drivers/usb/usbip/vudc.h | 1 - drivers/usb/usbip/vudc_dev.c | 4 +- drivers/vfio/debugfs.c | 1 + drivers/vfio/pci/mlx5/cmd.h | 15 +- drivers/vfio/pci/vfio_pci_core.c | 37 +- drivers/vfio/vfio_main.c | 11 +- drivers/virtio/virtio_mmio.c | 26 +- drivers/virtio/virtio_pci_common.c | 10 +- drivers/watchdog/apple_wdt.c | 1 + fs/btrfs/btrfs_inode.h | 2 + fs/btrfs/direct-io.c | 60 ++- fs/btrfs/extent-tree.c | 12 +- fs/btrfs/file.c | 25 +- fs/btrfs/inode.c | 67 ++- fs/btrfs/ordered-data.c | 12 + fs/btrfs/ordered-data.h | 2 + fs/btrfs/reflink.c | 4 +- fs/exfat/dir.c | 63 ++- fs/exfat/exfat_fs.h | 5 +- fs/exfat/namei.c | 89 +++- fs/fs-writeback.c | 31 +- fs/fuse/cuse.c | 4 +- fs/fuse/dev.c | 66 ++- fs/fuse/dev_uring.c | 93 ++-- fs/fuse/dev_uring_i.h | 10 +- fs/fuse/dir.c | 36 +- fs/fuse/fuse_dev_i.h | 1 + fs/fuse/notify.c | 434 ++++++++++++++++ fs/fuse/readdir.c | 85 +++- fs/hfs/bnode.c | 4 +- fs/hfsplus/bnode.c | 2 + fs/hfsplus/hfsplus_fs.h | 2 +- fs/isofs/rock.c | 11 + fs/libfs.c | 1 + fs/nfs/dir.c | 2 + fs/nilfs2/segment.c | 22 + fs/ntfs/index.c | 5 +- fs/ntfs3/fslog.c | 20 +- fs/proc/array.c | 6 + fs/proc/base.c | 162 +++--- fs/proc/fd.c | 25 +- fs/proc/internal.h | 2 +- fs/proc/namespaces.c | 12 + fs/resctrl/monitor.c | 37 +- fs/smb/client/cifs_swn.c | 316 ++++++++++-- fs/smb/client/cifsacl.c | 2 +- fs/smb/client/file.c | 2 +- fs/smb/client/inode.c | 3 +- fs/smb/client/smb2misc.c | 32 +- fs/smb/client/smb2ops.c | 18 +- fs/smb/client/smb2pdu.c | 22 +- fs/smb/client/trace.h | 2 + fs/smb/server/auth.c | 20 +- fs/smb/server/smb2pdu.c | 117 +++-- fs/smb/server/vfs.c | 20 +- fs/smb/server/vfs_cache.c | 28 +- fs/smb/server/vfs_cache.h | 3 + fs/udf/balloc.c | 5 +- fs/udf/super.c | 11 +- fs/userfaultfd.c | 20 + fs/xfs/libxfs/xfs_ag.c | 10 +- fs/xfs/libxfs/xfs_ag.h | 2 +- fs/xfs/libxfs/xfs_bmap_btree.h | 2 +- fs/xfs/libxfs/xfs_dquot_buf.c | 14 +- fs/xfs/libxfs/xfs_exchmaps.c | 2 +- fs/xfs/xfs_dquot.c | 16 +- fs/xfs/xfs_fsops.c | 2 +- fs/xfs/xfs_iomap.c | 2 +- fs/xfs/xfs_log_recover.c | 6 +- fs/xfs/xfs_qm.c | 5 +- fs/xfs/xfs_rtalloc.c | 8 +- include/asm-generic/rqspinlock.h | 14 +- include/crypto/drbg.h | 18 +- include/crypto/internal/drbg.h | 18 - include/linux/bpf_lsm.h | 4 + include/linux/damon.h | 8 +- include/linux/filter.h | 15 +- include/linux/fs.h | 5 + include/linux/glob.h | 1 + include/linux/hid-sensor-hub.h | 25 + include/linux/kvm_host.h | 3 +- include/linux/page_ext.h | 19 +- include/linux/slab.h | 6 +- include/linux/sunrpc/svc_rdma.h | 1 + include/linux/vfio_pci_core.h | 15 +- include/net/bluetooth/hci_core.h | 1 + include/net/bluetooth/l2cap.h | 1 + include/net/netfilter/nf_flow_table.h | 2 + include/net/tcp_ao.h | 1 + include/sound/hda_codec.h | 1 + init/Kconfig | 1 + io_uring/io-wq.c | 2 +- io_uring/nop.c | 8 +- io_uring/rw.c | 12 +- kernel/audit.c | 21 +- kernel/audit_fsnotify.c | 4 - kernel/bpf/bpf_inode_storage.c | 9 + kernel/bpf/btf.c | 9 +- kernel/bpf/cgroup.c | 2 +- kernel/bpf/core.c | 68 ++- kernel/bpf/devmap.c | 7 + kernel/bpf/dispatcher.c | 2 +- kernel/bpf/lpm_trie.c | 8 +- kernel/bpf/verifier.c | 15 +- kernel/events/core.c | 19 +- kernel/futex/requeue.c | 6 - kernel/liveupdate/luo_session.c | 4 + kernel/module/decompress.c | 2 + kernel/sched/features.h | 8 + kernel/time/jiffies.c | 11 +- kernel/time/posix-cpu-timers.c | 1 + kernel/time/timekeeping.c | 7 +- kernel/trace/trace_events_filter.c | 6 +- kernel/trace/trace_functions.c | 8 +- lib/debugobjects.c | 17 + lib/glob.c | 31 +- lib/test_hmm.c | 4 +- mm/damon/ops-common.c | 1 + mm/filemap.c | 2 +- mm/khugepaged.c | 41 +- mm/madvise.c | 3 +- mm/mincore.c | 3 +- mm/mmap.c | 2 +- mm/shrinker.c | 13 +- mm/shrinker_debug.c | 14 +- mm/slub.c | 18 +- mm/swap_cgroup.c | 2 + mm/swapfile.c | 1 + net/6lowpan/nhc.c | 2 +- net/bluetooth/6lowpan.c | 18 +- net/bluetooth/af_bluetooth.c | 17 +- net/bluetooth/bnep/core.c | 27 +- net/bluetooth/hci_conn.c | 21 +- net/bluetooth/hci_sync.c | 137 ++++- net/bluetooth/iso.c | 13 +- net/bluetooth/l2cap_core.c | 80 +-- net/bluetooth/l2cap_sock.c | 4 +- net/bluetooth/mgmt.c | 3 + net/bridge/netfilter/ebtables.c | 12 +- net/core/netpoll.c | 9 +- net/ipv4/igmp.c | 1 + net/ipv4/sysctl_net_ipv4.c | 10 +- net/ipv4/tcp_ao.c | 5 +- net/ipv4/tcp_output.c | 4 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 2 +- net/key/af_key.c | 1 + net/netfilter/ipset/ip_set_core.c | 8 +- net/netfilter/nf_conntrack_netlink.c | 2 +- net/netfilter/nf_flow_table_core.c | 20 +- net/netfilter/nf_flow_table_offload.c | 22 +- net/netfilter/nfnetlink_log.c | 26 +- net/netfilter/nfnetlink_queue.c | 16 +- net/netfilter/xt_u32.c | 16 +- net/sched/sch_dualpi2.c | 11 +- net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 4 +- net/sunrpc/xprtrdma/svc_rdma_rw.c | 229 +-------- net/sunrpc/xprtrdma/svc_rdma_sendto.c | 6 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 30 +- net/tipc/bcast.c | 22 +- net/tipc/bcast.h | 2 +- net/tipc/node.c | 15 +- rust/kernel/block/mq/gen_disk.rs | 20 +- rust/kernel/cpufreq.rs | 2 +- rust/kernel/pci/io.rs | 6 +- rust/kernel/str.rs | 23 +- scripts/rustdoc_test_builder.rs | 16 +- security/bpf/hooks.c | 3 + security/landlock/domain.c | 9 +- security/landlock/domain.h | 5 +- security/landlock/net.c | 1 + sound/aoa/fabrics/layout.c | 6 + sound/core/compress_offload.c | 13 +- sound/core/seq/seq_memory.c | 2 +- sound/firewire/isight.c | 3 +- sound/hda/codecs/hdmi/hdmi.c | 9 +- sound/hda/codecs/realtek/alc269.c | 1 + sound/hda/codecs/side-codecs/cs35l41_hda.c | 77 ++- sound/hda/codecs/side-codecs/cs35l41_hda.h | 5 + sound/hda/common/jack.c | 6 + sound/isa/gus/gus_pcm.c | 2 + sound/pci/cmipci.c | 6 + sound/pci/es1938.c | 2 + sound/pci/ice1712/aureon.c | 2 + sound/pci/ice1712/ice1712.c | 8 + sound/pci/ice1712/ice1724.c | 6 + sound/pci/ymfpci/ymfpci_main.c | 6 + sound/usb/caiaq/input.c | 2 +- sound/usb/endpoint.c | 10 +- sound/usb/mixer_quirks.c | 102 ++-- sound/usb/mixer_scarlett.c | 4 +- sound/usb/mixer_us16x08.c | 127 +++-- sound/usb/quirks.c | 3 + sound/usb/usbaudio.h | 8 + sound/usb/usx2y/us144mkii.c | 17 +- sound/usb/usx2y/us144mkii_capture.c | 2 +- sound/virtio/virtio_kctl.c | 50 ++ sound/virtio/virtio_pcm.c | 3 +- sound/virtio/virtio_pcm_ops.c | 3 +- tools/mm/slabinfo.c | 6 +- tools/perf/trace/beauty/fcntl.c | 16 + tools/testing/selftests/landlock/audit.h | 140 +++-- tools/testing/selftests/landlock/audit_test.c | 6 +- tools/testing/selftests/landlock/net_test.c | 62 +++ tools/testing/selftests/landlock/ptrace_test.c | 1 + .../selftests/landlock/scoped_abstract_unix_test.c | 1 + tools/testing/selftests/liveupdate/liveupdate.c | 42 ++ tools/testing/selftests/mm/droppable.c | 48 +- tools/testing/selftests/mm/ksft_process_madv.sh | 2 +- tools/testing/selftests/mm/pagemap_ioctl.c | 12 +- tools/usb/usbip/libsrc/usbip_common.c | 2 + tools/usb/usbip/libsrc/usbip_device_driver.c | 4 + tools/usb/usbip/libsrc/vhci_driver.c | 1 + virt/kvm/guest_memfd.c | 14 +- virt/kvm/kvm_mm.h | 7 +- 501 files changed, 5826 insertions(+), 3378 deletions(-)