[PATCH 7.2 000/428] 7.2.10-rc1 review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 7.2.10 release.
There are 428 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun, 11 Oct 2026 14:08:23 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.10-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 7.2.10-rc1

Michael Hennerich <michael.hennerich@analog.com>
    iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs

Josef Bacik <josef@toxicpanda.com>
    xen/netfront: drop RX packets with a short Ethernet header

Gilberto Conde <gilbertorconde@gmail.com>
    net: usb: qmi_wwan: add Quectel EG120K-EA

Paulo Alcantara <pc@manguebit.org>
    smb: client: only require read lease for size-extending preallocate

Beata Michalska <beata.michalska@arm.com>
    arm64: errata: Add Cortex-A725 erratum 3821522 workaround

Beata Michalska <beata.michalska@arm.com>
    arm64: errata: Factor out broken AMU const counter cap

Zhengchuan Liang <zcliangcn@gmail.com>
    perf: Require kernel access for text poke events

Dapeng Mi <dapeng1.mi@linux.intel.com>
    perf/core: Check kernel access when kernel callchains are requested

Francisco Beltrán Millalén <fbeltranmillalen@gmail.com>
    drm/amdgpu: reset VI ASIC on MacBookPro14,3

Andre Eikmeyer <dev@deq.rocks>
    drm/amdgpu: reset VI ASIC on MacBookPro15,1

Ray Wu <ray.wu@amd.com>
    drm/amd/display: map PWM brightness through custom backlight curve

Alice Ryhl <aliceryhl@google.com>
    rust: irq: pass RegistrationInner as cookie to request_irq

Mehmet Fide <mehmet.fide@screeningeagle.com>
    mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages

Matthieu Baerts (NGI0) <matttbe@kernel.org>
    mptcp: fix msk->timer_ival reset

Fan Wu <fanwu01@zju.edu.cn>
    iio: trigger: cancel reenable_work before freeing trigger

Donggeun Yoo <donggeunyoo.kernel@gmail.com>
    iio: proximity: vl53l0x-i2c: claim direct mode for raw reads

Salah Triki <salah.triki@gmail.com>
    iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler

Zhang Jie <zhangjie14@huaqin.corp-partner.google.com>
    iio: proximity: sx9324: Correct proximity channel resolution

Cong Nguyen <congnt264@gmail.com>
    iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure

Salah Triki <salah.triki@gmail.com>
    iio: proximity: isl29501: Fix return type of isl29501_register_write

Laxman Acharya Padhya <acharyalaxman8848@gmail.com>
    iio: proximity: aw96103: validate firmware data length

Matti Vaittinen <mazziesaccount@gmail.com>
    iio: pressure: rohm-bm1390: Return error when read fails

Hui Su <sh_def@163.com>
    iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup

Matti Vaittinen <mazziesaccount@gmail.com>
    iio: light: rohm-bu27034: Fix infinite delay on error

Fan Wu <fanwu01@zju.edu.cn>
    iio: light: gp2ap020a00f: drain irq_work after free_irq

Arka Mondal <arkamondalofficial@gmail.com>
    iio: imu: adis16480: fix unprotected debugfs reads

Arka Mondal <arkamondalofficial@gmail.com>
    iio: imu: adis16400: fix unprotected debugfs reads

Marco Chen <marcochen.dev@gmail.com>
    iio: health: max30102: fix NULL dereference in interrupt handler

Arka Mondal <arkamondalofficial@gmail.com>
    iio: gyro: adis16136: fix unprotected debugfs reads

Salah Triki <salah.triki@gmail.com>
    iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw()

Geert Uytterhoeven <geert+renesas@glider.be>
    iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data

Pengpeng Hou <hppiscas@163.com>
    iio: cdc: ad7150: fix OF matching and publish module aliases

Jonathan Cameron <jonathan.cameron@oss.qualcomm.com>
    iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.

Jinseob Kim <kimjinseob88@gmail.com>
    iio: buffer: serialize buffer teardown with mode claims

Runyu Xiao <runyu.xiao@seu.edu.cn>
    iio: admv1013: initialize callback mutex before registering notifier

Fan Wu <fanwu01@zju.edu.cn>
    iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind

Felix Gu <ustc.gu@gmail.com>
    iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls

Felix Gu <ustc.gu@gmail.com>
    iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure

Fabrice Gasnier <fabrice.gasnier@foss.st.com>
    iio: adc: stm32-adc: fix possible division by zero in processed channel

Fabrice Gasnier <fabrice.gasnier@foss.st.com>
    iio: adc: stm32-adc: fix check on internal channel availability

Matti Vaittinen <mazziesaccount@gmail.com>
    iio: adc: rohm-bd79124: Fix rising alarm

Matti Vaittinen <mazziesaccount@gmail.com>
    iio: adc: rohm-bd79124: Fix GPIO mask check

Matti Vaittinen <mazziesaccount@gmail.com>
    iio: adc: rohm-bd79124: Fix channel initialization

Matti Vaittinen <mazziesaccount@gmail.com>
    iio: adc: rohm-bd79124: Catch regmap errors at measurement start/stop

Slavin Liu <bolin.liu@seu.edu.cn>
    iio: adc: pac1934: check ACPI label duplication

Cong Nguyen <congnt264@gmail.com>
    iio: adc: max1363: sign-extend bipolar differential channel reads

Vladyslav Ivashchenko <cactucatu4eckuu@gmail.com>
    iio: adc: axp288: Add TS bias override for Haier HV103H

Pengpeng Hou <pengpeng@iscas.ac.cn>
    iio: adc: aspeed: propagate reset deassert errors

Janani Sunil <janani.sunil@analog.com>
    iio: adc: adi-axi-adc: Initialize state mutex

Antoniu Miclaus <antoniu.miclaus@analog.com>
    iio: adc: ade9000: request interrupts after powering the device

Antoniu Miclaus <antoniu.miclaus@analog.com>
    iio: adc: ade9000: handle Phase C dip events in IRQ1 handler

Antoniu Miclaus <antoniu.miclaus@analog.com>
    iio: adc: ade9000: fix overlapping scan_index for current and voltage channels

Linmao Li <lilinmao@kylinos.cn>
    iio: adc: ade9000: fix NULL pointer dereference in clkout registration

Fan Wu <fanwu01@zju.edu.cn>
    iio: adc: ad_sigma_delta: fix use-after-free on unbind

Marcelo Schmitt <marcelo.schmitt@analog.com>
    iio: adc: ad7173: Fix digital filter configuration

Salah Triki <salah.triki@gmail.com>
    iio: adc: ad4030: fix invalid oversampling_ratio validation

Salah Triki <salah.triki@gmail.com>
    iio: accel: sca3000: fix frequency divider condition check

Jiale Yao <yaojiale02@163.com>
    iio: accel: kxcjk-1013: reject duplicate event disable

Matti Vaittinen <mazziesaccount@gmail.com>
    iio: accel: kionix-kx022a: Prevent memory leak and fix state

Frank Sorenson <sorenson@redhat.com>
    smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races

Paulo Alcantara <pc@manguebit.org>
    smb: client: require stable pages for signed connections

Paulo Alcantara <pc@manguebit.org>
    smb: client: drain and invalidate before server-side copy/clone

Paulo Alcantara <pc@manguebit.org>
    smb: client: distinguish real EOF from a stale remote_i_size on read

Paulo Alcantara <pc@manguebit.org>
    smb: client: flush dirty data before zeroing a range

Paulo Alcantara <pc@manguebit.org>
    smb: client: only require read lease for size-extending zero range

Paulo Alcantara <pc@manguebit.org>
    smb: client: flush and commit data before querying allocated ranges

Paulo Alcantara <pc@manguebit.org>
    smb: client: discard post-EOF pagecache when extending a file via clone range

Paulo Alcantara <pc@manguebit.org>
    smb: client: discard post-EOF pagecache when extending a file via copy range

Paulo Alcantara <pc@manguebit.org>
    smb: client: discard post-EOF pagecache when extending a file via zero range

Daehyeon Ko <4ncienth@gmail.com>
    thunderbolt: Reject oversized XDomain properties responses

Kurt Lieber <kurt@lieber.org>
    thunderbolt: Disable CL states for the Anker Prime TB5 dock

Fedor Pchelkin <pchelkin@ispras.ru>
    thunderbolt: Fix NULL dereference in tb_remove_work()

Sven Peter <sven@kernel.org>
    thunderbolt: Don't access a DP tunnel after its DPRX read was canceled

Sven Peter <sven@kernel.org>
    thunderbolt: Fix domain reference leak when DPRX read is canceled

Sven Peter <sven@kernel.org>
    thunderbolt: Tear down inactive DP tunnels when the domain is stopped

Sven Peter <sven@kernel.org>
    thunderbolt: Mark discovered tunnels as active

Sven Peter <sven@kernel.org>
    thunderbolt: Make the DP tunnel activation callback mandatory

Sven Peter <sven@kernel.org>
    thunderbolt: Hold a router reference for each allocated HopID

Mika Westerberg <mika.westerberg@linux.intel.com>
    thunderbolt: Fix KASAN reported use-after-free when request is canceled

Ian Lin <ian.lin@jetone.com.tw>
    USB: serial: option: add Compal EXC-T1 support

Sebastian Sjoholm <sebastian.sjoholm@gmail.com>
    USB: serial: option: add Quectel RG660QB

Ian Lin <jisayme@gmail.com>
    USB: serial: option: add Compal EXM-G1x support

Carlo Szelinsky <github@szelinsky.de>
    USB: serial: option: add Quectel EG060W

Zhao Dongdong <zhaodongdong@kylinos.cn>
    USB: serial: option: add support for SIMCom SIM8260C

Johan Hovold <johan@kernel.org>
    USB: serial: fix ioctl hangup race

Johan Hovold <johan@kernel.org>
    USB: serial: fix driver deregistration order

Johan Hovold <johan@kernel.org>
    USB: serial: fix dynamic id driver deregistration race

Johan Hovold <johan@kernel.org>
    USB: serial: ssu100: fix baud rate overflow

Johan Hovold <johan@kernel.org>
    USB: serial: quatech2: fix baud rate overflow

Jérémy Carrat <jeremy.carrat@icloud.com>
    USB: serial: cp210x: add Corsair AX1500i Power Supply

Yuqi Xu <xuyuqiabc@gmail.com>
    wifi: mac80211: handle empty FILS association request payload

Zihan Xi <zihanx@nebusec.ai>
    wifi: mac80211: fix mesh fast xmit path deletion UAF

Felix Fietkau <nbd@nbd.name>
    wifi: mac80211: set info->band for 802.3 encap offload frames

Zhao Li <enderaoelyther@gmail.com>
    wifi: mac80211: release mesh path quota on failed additions

Ruide Cao <caoruide123@gmail.com>
    wifi: mac80211: reject invalid 320 MHz CSA bandwidth

Yuqi Xu <xuyuqiabc@gmail.com>
    wifi: mac80211: minstrel_ht: validate fixed rate index

Zhao Li <enderaoelyther@gmail.com>
    wifi: mac80211: keep fallback association elements alive

Zhao Li <enderaoelyther@gmail.com>
    wifi: mac80211: account proxy paths against the mesh path limit

Zhao Li <enderaoelyther@gmail.com>
    wifi: mac80211: drain PS delivery work during station teardown

Zhao Li <enderaoelyther@gmail.com>
    wifi: mac80211: shut down RX BA session timer on teardown

Zhiling Zou <zhilinz@nebusec.ai>
    wifi: mac80211: keep paired old chanctx alive

Zhiling Zou <zhilinz@nebusec.ai>
    wifi: mac80211: count only matching reservations in reserved switch

Guangshuo Li <lgs201920130244@gmail.com>
    wifi: iwlegacy: 3945: free EEPROM data on remove

Tianchu Chen <flynnnchen@tencent.com>
    wifi: cw1200: fix TX padding OOB read leaking heap data to device

Stanislaw Gruszka <stf_xl@wp.pl>
    wifi: cfg80211: fix RTS threshold setting for single-radio PHY

Mostafa Saleh <smostafa@google.com>
    KVM: arm64: Use stage-1 leaf size for VM_PFNMAP

Marc Zyngier <maz@kernel.org>
    KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor

Marc Zyngier <maz@kernel.org>
    KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq

Marc Zyngier <maz@kernel.org>
    KVM: arm64: vgic: Allow last_lr_irq to be NULL when LRs are not overflowing

Fuad Tabba <fuad.tabba@linux.dev>
    KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT

Fuad Tabba <fuad.tabba@linux.dev>
    KVM: arm64: Clear HCR_EL2.RW for 32-bit non-protected vCPUs

Sean Christopherson <seanjc@google.com>
    KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded

Sean Christopherson <seanjc@google.com>
    KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN

Sean Christopherson <seanjc@google.com>
    KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted

Sean Christopherson <seanjc@google.com>
    KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy

Sean Christopherson <seanjc@google.com>
    KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state

Sean Christopherson <seanjc@google.com>
    KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it

Sean Christopherson <seanjc@google.com>
    KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified

Sagnik Sasmal <sagnik@sagnik.me>
    mtd: spinand: Do not update the QE bit on devices without one

Nuno Sá <nuno.sa@analog.com>
    mtd: spinand: fix zero oobavail when no ECC engine is used

Nuno Sá <nuno.sa@analog.com>
    mtd: spinand: fix NULL pointer dereference with no ECC engine

Han Xu <han.xu@nxp.com>
    mtd: spinand: Enable QE on all dies

Runyu Xiao <runyu.xiao@seu.edu.cn>
    mtd: spi-nor: core: Fix mutex leak in spi_nor_rww_start_exclusive()

Mehmet Fide <mehmet.fide@screeningeagle.com>
    mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB

Runyu Xiao <runyu.xiao@seu.edu.cn>
    mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ

Menachem Adin <menachem.adin@intel.com>
    mtd: mtd_intel_dg: reset poll counter for each erase

Pei Xiao <xiaopei01@kylinos.cn>
    mtd: block2mtd: Fix divide error when erase_size is zero

Guixin Liu <kanie@linux.alibaba.com>
    nvmet: copy the hostid into the ctrl before creating PR pc_refs

Daehyeon Ko <4ncienth@gmail.com>
    nvmet: pci-epf: reject too-short SGL segments

Weiming Shi <bestswngs@gmail.com>
    nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()

Bean Huo <beanhuo@micron.com>
    nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT

Daehyeon Ko <4ncienth@gmail.com>
    nvme-multipath: fix underflow in ANA log bounds checks

Guixin Liu <kanie@linux.alibaba.com>
    nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known

Jiangshan Yi <yijiangshan@kylinos.cn>
    tpm: fix off-by-four bounds check in tpm2_get_random()

Mikhail Gavrilov <mikhail.v.gavrilov@gmail.com>
    x86/mm: Drop unnecessary PMD page copy when freeing

Laurent Wandrebeck <l.wandrebeck@quelquesmots.fr>
    x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h

Chandrashekar Devegowda <chandrashekar.devegowda@intel.com>
    Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()

Chandrashekar Devegowda <chandrashekar.devegowda@intel.com>
    Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()

Chandrashekar Devegowda <chandrashekar.devegowda@intel.com>
    Bluetooth: btintel: fix buffer over-read in btintel_hw_error()

Chengfeng Ye <nicoyip.dev@gmail.com>
    Bluetooth: hci_core: Serialize fragmented ISO packet queueing

Chengfeng Ye <nicoyip.dev@gmail.com>
    Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown

Chengfeng Ye <nicoyip.dev@gmail.com>
    Bluetooth: hci_core: Serialize ACL scheduling with channel deletion

Linmao Li <lilinmao@kylinos.cn>
    Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems

Chengfeng Ye <nicoyip.dev@gmail.com>
    Bluetooth: hci_conn: Lock parent access during enhanced SCO setup

Chengfeng Ye <nicoyip.dev@gmail.com>
    Bluetooth: hci_sync: Fix inquiry cache use-after-free

Chengfeng Ye <nicoyip.dev@gmail.com>
    Bluetooth: Serialize SMP remote OOB data access

Chengfeng Ye <nicoyip.dev@gmail.com>
    Bluetooth: RFCOMM: Fix initial port reference race

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    i2c: xiic: don't clobber msg->len to signal block-read completion

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    i2c: xiic: defer RX_FULL until all trailing bytes are in FIFO

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    i2c: xiic: preserve PEC byte length in SMBus block read setup

Rounak Das <rounakdas2025@gmail.com>
    EDAC/altera: Fix device node reference leaks in the SDMMC ECC setup

Dinh Nguyen <dinguyen@kernel.org>
    EDAC/altera: Fix use-after-free in error paths

Dinh Nguyen <dinguyen@kernel.org>
    EDAC/altera: Fix memory leak on dci allocation failure

Dinh Nguyen <dinguyen@kernel.org>
    EDAC/altera: Drop __init from ECC setup paths for re-probe safety

Dinh Nguyen <dinguyen@kernel.org>
    EDAC/altera: Do not allow driver unbinding

Guangshuo Li <lgs201920130244@gmail.com>
    EDAC/versalnet: Drop remote processor handle refcount on driver removal

Jakub Gawlik <jakubgawlik13@gmail.com>
    ALSA: hda/realtek: Add micmute LED quirk for Acer Swift SFG16-72

Yu-Hsiang Tseng <asas1asas200@gmail.com>
    ALSA: hda/realtek: Fix silent speaker on Higole F9B

Zhang Heng <zhangheng@kylinos.cn>
    ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR

Xiang Mei <xmei5@asu.edu>
    ALSA: ua101: reject mismatched capture/playback packet sizes

Kyle Zeng <kylebot@openai.com>
    ALSA: seq: Serialize compat port-info ioctls

Aaron Kling <webgeek1234@gmail.com>
    ALSA: hda/tegra: Re-enable SDO workaround for Tegra194

Zimeng Li <me@lizi.moe>
    ASoC: qcom: lpass-cpu: use DAI table index for playback constraints

Jiangshan Yi <yijiangshan@kylinos.cn>
    ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type

Jiangshan Yi <yijiangshan@kylinos.cn>
    ASoC: codecs: max98363: fix uninitialized stream_config->type

Liviu Nicoara <lnicoara@thinkoid.org>
    ASoC: codecs: lpass-wsa-macro: rewrite the interpolator volume after enabling clocks

Andrea Parri <parri.andrea@gmail.com>
    arm64: mm: Fix the break-before-make flush range for erratum 2645198

Mark Rutland <mark.rutland@arm.com>
    arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems

Paul Mbewe <paultyson.mbewe@ziehl-abegg.de>
    serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL

Paul Mbewe <paultyson.mbewe@ziehl-abegg.de>
    serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around

Wentao Liang <vulab@iscas.ac.cn>
    serial: vt8500: Fix clock reference leak in vt8500_serial_probe()

Simon Gassner <simon.gassner@noxsystems.com>
    serial: tegra: don't clear the Tx FIFO on an Rx-only reset

Wentao Liang <vulab@iscas.ac.cn>
    serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()

Johan Hovold <johan@kernel.org>
    serial: fix TIOCMIWAIT race

Johan Hovold <johan@kernel.org>
    serial: fix ioctl hangup race

Johan Hovold <johan@kernel.org>
    serial: revert guards in uart_wait_modem_status()

Ruslan Valiyev <linuxoid@gmail.com>
    serial: core: fix NULL pointer dereference in serial_core_unregister_port()

Johan Hovold <johan@kernel.org>
    serial: abort TIOCMIWAIT on hangup

Kendall Willis <k-willis@ti.com>
    serial: 8250_omap: fix wake irq cleared during suspend

Fan Wu <fanwu01@zju.edu.cn>
    serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()

Ian Rogers <irogers@google.com>
    perf: Replace perf_event_header__init_id with full header init

Fan Wu <fanwu01@zju.edu.cn>
    tty: serial: max3100: shut down timer before freeing port

Johan Hovold <johan@kernel.org>
    tty: fix saved termios reset race

Johan Hovold <johan@kernel.org>
    tty: abort break signalling on hangup

Viken Dadhaniya <viken.dadhaniya@oss.qualcomm.com>
    tty: serial: qcom_geni_serial: Keep console RX functional after deep idle

Johan Hovold <johan@kernel.org>
    tty: port: fix tty_port_tty_vhangup() race

Johan Hovold <johan@kernel.org>
    tty: tty_port: restore TTY_IO_ERROR on activation failure

Daniel Starke <daniel.starke@siemens.com>
    tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2

Joshua Rogers <linux@joshua.hu>
    tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup

Joshua Rogers <linux@joshua.hu>
    tty: vcc: zero-initialize control packet in vcc_send_ctl()

Johan Hovold <johan@kernel.org>
    tty: amiserial: fix broken TIOCMIWAIT

Mingyu Wang <25181214217@stu.xidian.edu.cn>
    tty: vt: fix memory leak in vc_allocate()

Jie Deng <dengjie03@kylinos.cn>
    usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe

Fan Wu <fanwu01@zju.edu.cn>
    usb: cdns3: fix use-after-free in cdns3_gadget_exit()

Jameson Thies <jthies@google.com>
    usb: typec: ucsi: displayport: Current CAM OOB index fixup

Prashanth K <prashanth.k@oss.qualcomm.com>
    usb: typec: ucsi: Get the connector fwnode based on reg value

Pannarat Wiriyaarritham <pannarat.wiriyaarritham@danielcorp.dev>
    usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41

Fan Wu <fanwu01@zju.edu.cn>
    usb: typec: ucsi: glink: fix use-after-free of ucsi on remove

Radhey Shyam Pandey <radhey.shyam.pandey@amd.com>
    usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()

Radhey Shyam Pandey <radhey.shyam.pandey@amd.com>
    usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()

Marian Rotariu <marian.c.rotariu@gmail.com>
    usb: typec: tipd: don't send GAID when probe fails in APP mode

Amit Sunil Dhamne <amitsd@google.com>
    usb: typec: tcpm: recover after failure to start the frs ams

Runyu Xiao <runyu.xiao@seu.edu.cn>
    USB: dwc2: shut down wakeup timer before freeing HCD state

Hui Peng <benquike@gmail.com>
    usb: core: clear both ep_in and ep_out for non-ep0 control endpoints

Myeonghun Pak <mhun512@gmail.com>
    usb: chipidea: tegra: disable runtime PM on resume failure

Yuchao Zhang <ndaugoing@gmail.com>
    usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC

Alan Stern <stern@rowland.harvard.edu>
    USB: gadget: dummy-hcd: Fix wait for outstanding request completions

Fan Wu <fanwu01@zju.edu.cn>
    usb: gadget: aspeed-vhub: cancel wake work on device removal

Jiazi Liu <jiazi.liu1984@gmail.com>
    usb: dwc3: gadget: fix IRQ storm on invalid event buffer count

Radhey Shyam Pandey <radhey.shyam.pandey@amd.com>
    usb: dwc3: am62: Fix runtime PM usage count leak on probe error path

Marek Maslanka <mmaslanka@google.com>
    usb: typec: port-mapper: Only match USB4 port if host interface is available

Linkai Gong <gonglinkai@kylinos.cn>
    usb: typec: anx7411 - stop the IRQ before destroying the workqueue

Liu Chao <liuc63@xiaopeng.com>
    usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd

Takashi Iwai <tiwai@suse.de>
    usb: gadget: midi2: Fix the jack descriptor array sizes

Myeonghun Pak <mhun512@gmail.com>
    usb: ohci-st: disable controller wakeup on removal

Myeonghun Pak <mhun512@gmail.com>
    usb: ohci-spear: disable controller wakeup on removal

Myeonghun Pak <mhun512@gmail.com>
    usb: ohci-s3c2410: disable controller wakeup on removal

Myeonghun Pak <mhun512@gmail.com>
    usb: ohci-da8xx: disable controller wakeup on cleanup

Orgad Shaneh <orgads@gmail.com>
    usb: octeon-hcd: fix the FIFO-flush timeout computation

Lovekesh Solanki <lovekeshsolanki00@gmail.com>
    usb: hub: use shorter 120ms post resume hold for SS root hubs

Syed Labeeq Sajid Bukhari <syedlabeeq@gmail.com>
    usb: storage: sierra_ms: reject short SWoC info transfers

Johan Hovold <johan@kernel.org>
    USB: serial: fix port tear down use-after-free

Yuchao Zhang <ndaugoing@gmail.com>
    USB: cdc-acm: skip URB restart in port_shutdown if disconnected

Johan Hovold <johan@kernel.org>
    USB: cdc-acm: fix racy TIOCMIWAIT implementation

Viken Dadhaniya <viken.dadhaniya@oss.qualcomm.com>
    soc: qcom: geni-se: Correct QUP Core ICC vote constants

Alice Ryhl <aliceryhl@google.com>
    rust_binder: reschedule node refcount update on thread exit

Alice Ryhl <aliceryhl@google.com>
    rust_binder: cancel deferred work items in thread exit

Yuxiao Wang <yuxiao.wang@certik.com>
    nitro_enclaves: fix use-after-free on SLOT_ALLOC failure

Raphaël Larocque <rlarocque@disroot.org>
    Input: synaptics - limit T440p InterTouch quirk to LEN0036

Lovekesh Solanki <lovekeshsolanki00@gmail.com>
    Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490

David Heidelberg <david@ixit.cz>
    Input: s6sy761 - fix resume ordering and restore sensing

Lovekesh Solanki <lovekeshsolanki00@gmail.com>
    Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410

Martino Papero <martino.papero@lcb.to.it>
    Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11

Wentao Liang <vulab@iscas.ac.cn>
    kgdboc: Fix tty driver reference leak in configure_kgdboc()

Karl Mehltretter <kmehltretter@gmail.com>
    hrtimer: Use the mask to clear TIF_HRTIMER_REARM from the exit work

Troy Mitchell <troy.mitchell@linux.spacemit.com>
    clk: spacemit: k3: add CPU PLL rate tables

Peiyang He <peiyang_he@smail.nju.edu.cn>
    binderfs: fix UAF write in binder_add_device

Tomer Pomeranc <tomerpo@gmail.com>
    binder: fix leaked fd fixups on TF_UPDATE_TXN supersede

Tomer Pomeranc <tomerpo@gmail.com>
    binder: fix is_failure flag for superseded transaction cleanup

Theo Andersen Carton <andersen.theo@gmail.com>
    drm/amdgpu: skip the noirq suspend reset for a switcheroo-parked GPU

Guangshuo Li <lgs201920130244@gmail.com>
    drm/amdgpu: fix ACP MFD device leak on init failure

Alex Deucher <alexander.deucher@amd.com>
    drm/amdgpu: drop userq callback assignment for sdma 7.1

Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer@amd.com>
    drm/amdgpu: implement workaround for sdma dcc corruption

Guangshuo Li <lgs201920130244@gmail.com>
    drm/amdgpu: fix IP instance memory leak on kobject add failure

Wentao Liang <vulab@iscas.ac.cn>
    drm/mediatek: Fix pdev reference leak in mtk_drm_bind()

Guangshuo Li <lgs201920130244@gmail.com>
    drm/mediatek: Fix ovl adaptor platform device leak

Haojie Li <lihaojie@kylinos.cn>
    drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device

Imre Kaloz <kaloz@kernel.org>
    drm/radeon: Read the VRAM VBIOS signature with readb()

Mitul Golani <mitulkumar.ajitkumar.golani@intel.com>
    drm/i915/vrr: Disable DC balance by default

Alex Deucher <alexander.deucher@amd.com>
    drm/amdgpu/gmc12: properly pass flush_type to gmc_v12_0_flush_vm_hub()

Alex Deucher <alexander.deucher@amd.com>
    drm/amdgpu/gmc12.1: properly pass flush_type to gmc_v12_1_flush_vm_hub()

Willian Oliveira <williandossantosdeoliveira287@gmail.com>
    drm/amdgpu/gfx6: fix firmware leak on teardown

Timur Kristóf <timur.kristof@gmail.com>
    drm/amd/pm/si: Fix updating clock limits on AC/DC

Timur Kristóf <timur.kristof@gmail.com>
    drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC

Timur Kristóf <timur.kristof@gmail.com>
    drm/amd/display: Mark DCE 6.4 as not APU

Simon Polack <spolack+git@mailbox.org>
    drm/amd/display: Fix stale replay_events after mod_power stream removal

Timur Kristóf <timur.kristof@gmail.com>
    drm/amd/display: Fix fast updates on DCE 8.1

Timur Kristóf <timur.kristof@gmail.com>
    drm/amd/display: Fix fast updates on DCE 6.x

Jiangshan Yi <yijiangshan@kylinos.cn>
    drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend

Arthur Heymans <arthur@aheymans.xyz>
    drm/amd/display: Preserve eDP mode on initial ASSR failure

Hari Mishal <harimishal1@gmail.com>
    drm/amd/display: guard dc_sink dereferences in MST mode validation

Nikola Prica <nikola.prica@amd.com>
    PCI: Accept AtomicOps already enabled by the hypervisor

Ömer Mete Kaya <omermetekaya0@gmail.com>
    bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch()

Chris Mason <mason@kernel.org>
    futex: Fix private hash use-after-free on resize

Wentao Liang <vulab@iscas.ac.cn>
    drm/mediatek: Fix runtime PM leak in mtk_hdmi_ddc_v2_probe()

Alexei Starovoitov <ast@kernel.org>
    bpf: Fix objects stuck in free_by_rcu_ttrace

Alexei Starovoitov <ast@kernel.org>
    bpf: Factor out __do_call_rcu_ttrace()

Richard Fitzgerald <rf@opensource.cirrus.com>
    spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260

Takashi Iwai <tiwai@suse.de>
    ALSA: ice1712: Fix the error handling via auto-cleanup at probe

Takashi Iwai <tiwai@suse.de>
    ALSA: core: Define auto-cleanup for snd_card_free()

Luo Gengkun <luogengkun2@huawei.com>
    perf: Fix race between perf_event_exit_task() and perf_pending_task()

Hongjian Dai <daihongjian@kylinsec.com.cn>
    i2c: at91: release DMA channels when probe defers

Lorenzo Bianconi <lorenzo.bianconi@oss.qualcomm.com>
    net: mvneta: clear XDP pfmemalloc flag between frames

Eric Dumazet <edumazet@kernel.org>
    ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()

Prathamesh Deshpande <prathameshdeshpande7@gmail.com>
    net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference

Quentin Freimanis <quentin@q-lab.dev>
    net: sparx5: make ports inherit the switch base mac address type

Yuho Choi <oss.patchbox@gmail.com>
    of: Put coreboot node after compatibility check

Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com>
    net: microchip: vcap: stop scanning after deleting key field

Pablo Neira Ayuso <pablo@netfilter.org>
    netfilter: flowtable: generalize pending status bit

Fernando Fernandez Mancera <fmancera@suse.de>
    netfilter: bpf: reject invalid NAT manipulation types

Julian Anastasov <ja@ssi.bg>
    ipvs: filter some flags received in the backup server

Julian Anastasov <ja@ssi.bg>
    ipvs: do not create invisible templates

Julian Anastasov <ja@ssi.bg>
    ipvs: fix missing counter decrement in lblc

Jeff Jo <jeffjo@openai.com>
    tcp: refresh TS.Recent for accepted old ACKs

Quentin Freimanis <quentin@q-lab.dev>
    net: sparx5: skip ptp deinit if init was skipped

Yongzhao Chen <yongzhao.derek@gmail.com>
    net: phy: qcom: at803x: Fix IPQ5018 short-cable DAC values

Sandeep Haemoon <sandeeph@loljews.com>
    net: ethernet: mtk_eth_soc: allocate dummy netdev sooner

Jamal Hadi Salim <jhs@mojatatu.com>
    net: cap skb->queue_mapping when the tx queue is picked

Nicolai Buchwitz <nb@tipi-net.de>
    net: bcmgenet: fix NULL dereference in set_coalesce before first open

Yoshihisa Yamamoto <yoshihisa.yamamoto.xn@renesas.com>
    net: pcs: rzn1-miic: Clear MIIC protection state before unprotect sequence

Niklas Cassel <cassel@kernel.org>
    virtio_blk: set the zone write granularity

Takashi Iwai <tiwai@suse.de>
    ALSA: usb-audio: Apply boot quirk for Behringer models generically

Sebastian Dalfuß <sd@sedf.de>
    ALSA: usb-audio: Add boot quirk for Behringer CM1A

Jamal Hadi Salim <jhs@mojatatu.com>
    net/sched: sch_codel: match the no-drop threshold to the packet size

Jamal Hadi Salim <jhs@mojatatu.com>
    net/sched: fq_codel: match the no-drop threshold to the packet size

Hannu Varjoranta <hannu@varjosoft.com>
    gve: DQO: accept TSO packets with non-protocol gso_type bits

Florent Revest (Anthropic) <florent.revest@linux.dev>
    bpf: Skip detached progs in trampoline images that are still in use

Florent Revest (Anthropic) <florent.revest@linux.dev>
    bpf: Wait for an RCU tasks grace period before freeing trampoline progs

Eric Dumazet <edumazet@google.com>
    net: restrict SO_RESERVE_MEM to TCP sockets and cap max value

Nicolai Buchwitz <nb@tipi-net.de>
    net: ethtool: let tsconfig reach a PHY-only timestamp provider

Andrea Mayer <andrea.mayer@uniroma2.it>
    seg6: ensure packet data is writable before modifying SRH and IPv6 DA

Lorenzo Bianconi <lorenzo.bianconi@oss.qualcomm.com>
    net: stmmac: fix rx Scatter-Gather support

Mina Almasry <almasrymina@google.com>
    net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()

Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
    tipc: prevent GCM nonce reuse on peer key changes

Baha Mesleh <baha.mesleh@nokia.com>
    octeontx2-af: mcs: Fix SC resource cleanup loop

Geetha sowjanya <gakula@marvell.com>
    octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled

Anirudh Virdi <avirdi@redhat.com>
    net/mlx5: Fix slab-out-of-bounds when handling team device events

Florian Fainelli <florian.fainelli@broadcom.com>
    net: systemport: Fix RUNT MIB counter register offset calculation

Florian Fainelli <florian.fainelli@broadcom.com>
    net: systemport: Fix buffer overflow in bcm_sysport_get_stats()

Julien Stephan <jstephan@baylibre.com>
    drm/mediatek: mtk_hdmi_v2: fix VID_DOWNSAMPLE_CONFIG register offset

Nguyen Ngoc Thang <ngocthang2710.1999@gmail.com>
    Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister

Marcin Bernatowicz <marcin.bernatowicz@linux.intel.com>
    drm/xe/pf: Keep VF LMEM BAR size low if no VFs enabled

Michal Wajdeczko <michal.wajdeczko@intel.com>
    drm/xe/pf: Refactor VF LMEM BAR resize helper function

Kailang Yang <kailang@realtek.com>
    ALSA: hda/realtek - Add headset mode for Dell Pro QC1255

Cen Zhang (Microsoft) <cenzhang@linux.microsoft.com>
    wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue()

Florian Westphal <fw@strlen.de>
    netfilter: ipset: do not update comments from kernel-side adds

Qishuai Liu <lqs@lqs.me>
    ipv6: fix prefix route expiry in modify_prefix_route()

Nicolai Buchwitz <nb@tipi-net.de>
    net: bcmgenet: allocate RX buffers as page fragments

Jamal Hadi Salim <jhs@mojatatu.com>
    net/sched: cls_api: reclaim an empty proto on the error path

Binbin Deng <18983559317@163.com>
    net/mctp: publish the mctp_dev only after it is initialised

Kumar Kartikeya Dwivedi <memxor@gmail.com>
    bpf: Hold map BTF for the memory allocator destructor record

Yao Sang <sangyao@kylinos.cn>
    nvme: fix command effects log lifetime for multipath heads

Arnd Bergmann <arnd@arndb.de>
    nvme: work around -Wformat-security warning

John Garry <john.g.garry@oracle.com>
    nvme: fix cdev lifetime

John Garry <john.garry@linux.dev>
    nvme: add nvme_get_ns_head()

Vineet Gupta <vgupta@kernel.org>
    ARC: arch_cmpxchg_relaxed to use size of pointed type not pointer

Alexei Starovoitov <ast@kernel.org>
    bpf: Fix overflow of jump offset in constant blinding

Arnd Bergmann <arnd@arndb.de>
    drbd: remove unused drbd_nl_mcgrps[] array

Maciej Strozek <mstrozek@opensource.cirrus.com>
    ASoC: SDCA: Add better pm_runtime error handling in func probe

Maciej Strozek <mstrozek@opensource.cirrus.com>
    ASoC: SDCA: Set suspended flag after resuming within system suspend

Oleg Keri <okerixx@gmail.com>
    arm64: topology: fix arch_freq_get_on_cpu() overflow above 4.19 GHz

Harry Yoo (Meta) <harry@kernel.org>
    mm/slab: do not wake up kswapd in __kfree_rcu_sheaf()

Harry Yoo (Oracle) <harry@kernel.org>
    mm/slab: handle the !allow_spin case in kfree_rcu_sheaf()

Sai Teja Aluvala <aluvala.sai.teja@intel.com>
    Bluetooth: btintel: validate DDC record lengths

Sang-Hoon Choi <csh0052@gmail.com>
    Bluetooth: hci_core: free the HCI ID if naming fails

Keith Busch <kbusch@kernel.org>
    blk-mq: set RQF_USE_SCHED when the operation is known

Yang Xiuwei <yangxiuwei@kylinos.cn>
    block: reject polled dio with user integrity metadata

Cezary Rojewski <cezary.rojewski@intel.com>
    ASoC: codecs: rt274: Fix format setting for 44100 rate

Cezary Rojewski <cezary.rojewski@intel.com>
    ASoC: codecs: rt286: Revert delay value for jack setup

Felix Fietkau <nbd@nbd.name>
    wifi: mac80211: prevent AP VLAN tx from other interfaces

Zhao Li <enderaoelyther@gmail.com>
    wifi: cfg80211: preserve hidden-group beacon IE ownership

Yuqi Xu <xuyuqiabc@gmail.com>
    wifi: mac80211: validate TX status rate metadata

Manush Prajwal <manushprajwal555@gmail.com>
    rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()

Aamir Ahmed <elb12345@hotmail.co.uk>
    rtc: ac100: Fix clock provider use-after-free on probe failure

Liu Dalin <liudalin@kylinsec.com.cn>
    rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak

Georgios Karantzas <gck.kara@gmail.com>
    wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE

Pengpeng Hou <pengpeng@iscas.ac.cn>
    wifi: ath9k: reject short WMI command responses

Toke Høiland-Jørgensen <toke@redhat.com>
    wifi: ath9k: Clean up device initialisation guards

Nicolas Escande <nico.escande@gmail.com>
    wifi: ath11k: reset ar->num_stations on hardware start

Yuchao Zhang <ndaugoing@gmail.com>
    wifi: mac80211: drop oversized fragments to avoid extra_len overflow

Sheetal <sheetal@nvidia.com>
    ASoC: tegra: Fix ASRC Stream6 input threshold control

Aamir Ahmed <elb12345@hotmail.co.uk>
    wifi: wfx: validate MIB read length before copying to caller

HyeongJun An <sammiee5311@gmail.com>
    ASoC: wm8903: Move the DRC QR threshold to the register that holds it

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    of/overlay: don't create "//" paths for fragments targeting the root

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    of/overlay: don't leak fragment references when changeset init fails

Karl Mehltretter <kmehltretter@gmail.com>
    random: fix vgetrandom_opaque_params kernel-doc

Hao Zhang <zhanghao1@kylinos.cn>
    blk-cgroup: save IRQ state in blkg_tryget_closest()

Julian Sun <sunjunchao@bytedance.com>
    nvmet: preserve device path on allocation failure

Karl Mehltretter <kmehltretter@gmail.com>
    mtd: core: call _get_device() with the master MTD

Karl Mehltretter <kmehltretter@gmail.com>
    mtd: core: avoid double-free of OTP NVMEM device

Matti Vaittinen <mazziesaccount@gmail.com>
    iio: accel: kionix-kx022a: Fix array boundary check

Matti Vaittinen <mazziesaccount@gmail.com>
    iio: light: rohm-bu27034: Fix error return

Matti Vaittinen <mazziesaccount@gmail.com>
    iio: dac: rohm-bd79703: Do not allow writing SCALE

Alberto Garcia <berto@igalia.com>
    ext4: don't enable large folios on encrypted inodes

Xiang Mei <xmei5@asu.edu>
    ALSA: line6: reject oversized playback packets

Harin Lee <me@harin.net>
    ALSA: ctxfi: Fix silent playback on Titanium HD (SB1270)

Nguyen Ngoc Thang <ngocthang2710.1999@gmail.com>
    ALSA: caiaq: unregister the input device when probe fails

Wentao Liang <vulab@iscas.ac.cn>
    wifi: wlcore: Fix runtime PM leak in wlcore_remove()

Zizhi Wo <wozizhi@huawei.com>
    vt: skip screen update for DEC alignment test on backgroup consoles

Hui Peng <benquike@gmail.com>
    vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()

Yi Yang <yiyang13@huawei.com>
    vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF

Baolin Wang <baolin.wang@linux.alibaba.com>
    mm: shmem: ignore sysfs configs for shmem forced collapse

Lorenzo Stoakes (ARM) <ljs@kernel.org>
    mm/vma: predicate setting mmap_prepare VMA fields on new vma alloc

SJ Park <sj@kernel.org>
    mm/damon/core: don't skip damos_adjust_quota() while esz is not zero

Zhichen Wang <wangzhichen@manus.ai>
    virt: vmgenid: set driver_data before registering notification handlers

Vitaly Kuznetsov <vkuznets@redhat.com>
    virt: vmgenid: remap memory as decrypted

Hao Ge <hao.ge@linux.dev>
    module: fix lost error code from codetag_load_module()

Paulo Alcantara <pc@manguebit.org>
    netfs: zero the tail of a short DIO/unbuffered read

Paulo Alcantara <pc@manguebit.org>
    netfs: zero gaps in read-gaps folio to avoid writing back stale data

Paulo Alcantara <pc@manguebit.org>
    netfs: clear post-EOF pagecache when extending a file via write

Surendran Kanagaraj <surenkj@amazon.com>
    tpm: Disable TPM on null key name mismatch

Zhan Xusheng <zhanxusheng1024@gmail.com>
    time/jiffies: Saturate in mult_hz() instead of wrapping

Zhan Xusheng <zhanxusheng1024@gmail.com>
    sysctl: Negate before converting in the int read path

Jun Yang <junvyyang@tencent.com>
    sctp: check RCV_SHUTDOWN after the sendmsg connect wait

Runyu Xiao <runyu.xiao@seu.edu.cn>
    rtc: spear: initialize IRQ state before requesting alarm IRQ

Aamir Ahmed <elb12345@hotmail.co.uk>
    rtc: ac100: Assign .num before accessing .hws

Nathan Chancellor <nathan@kernel.org>
    random: vDSO: avoid call to memset() when zeroing reserved parameter

Oleksij Rempel <o.rempel@pengutronix.de>
    r8169: disable EEE on RTL8168h/8111h

Xuanqiang Luo <luoxuanqiang@kylinos.cn>
    pfcp: fix socket lifetime on netdevice registration failure

Ilkka Lappeteläinen <ilkka.lappetelainen@gmail.com>
    net/packet: prevent TX_RING byte count overflow

Aohan Mei <henrymei@tencent.com>
    netfilter: nft_flow_offload: drop flowtable reference on init error path

Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
    net: phy: aquantia: fix system interface type not updated in forced mode

Alireza Asgari <alireza@asgari.net>
    net: fix checksum offsets in skb_splice_from_iter()

Willem de Bruijn <willemb@google.com>
    net: extend IPv6 exthdr detection of tunneled packets

Zihan Xi <zihanx@nebusec.ai>
    net: gso: limit recursive IP-in-IP segmentation

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    of/overlay: only treat a positive changeset id as registered

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    of/overlay: put property on deadprops only after changeset add succeeds

Wentao Liang <vulab@iscas.ac.cn>
    of/irq: Fix remaining refcount leaks in of_irq_init()

Jari Seppälä <jase@nocloud.org>
    octeontx2-pf: Fix RSS indirection table size

Leon Hwang <leon.hwang@linux.dev>
    kprobes: Skip disarmed probes when checking optkprobe overlap

Andrey Ryabinin <ryabinin.a.a@gmail.com>
    kasan: unpoison task stack below watermark only in generic mode

Zhiling Zou <zhilinz@nebusec.ai>
    ipvs: bound LBLCR and LBLC cache growth

Jens Axboe <axboe@kernel.dk>
    io_uring: fix task_work add use-after-free with SQPOLL

Junyuan Feng <a@lollipopkit.com>
    io_uring/zcrx: requeue multishot receives stopped by a local resource

lollipopkit <a@lolli.tech>
    io_uring/cmd_net: end TX_TIMESTAMP multishot when the CQ is full

Aldo Ariel Panzardo <qwe.aldo@gmail.com>
    HID: multitouch: stop the release timer from being rearmed on remove

Benjamin Tissoires <bentiss@kernel.org>
    HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request

Masami Hiramatsu (Google) <mhiramat@kernel.org>
    fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()

Mohamad Raizudeen <raizudeen.kerneldev@gmail.com>
    crypto: x86/aes-gcm - fix always true check for last AAD segment

Jérémy Jean <Jeremy.Jean@oss.cyber.gouv.fr>
    audit: fix exe mark UAF in kill_rules()

Takashi Iwai <tiwai@suse.de>
    ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices

Sean Christopherson <seanjc@google.com>
    KVM: x86: Fill kvm_run exit fields in common get_nested_state_pages() error paths

Tibor Harcsa <silurust@gmail.com>
    Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table

Richard Fitzgerald <rf@opensource.cirrus.com>
    ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture

Sean Christopherson <seanjc@google.com>
    KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails

Tejun Heo <tj@kernel.org>
    sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task

fangqiurong <fangqiurong@kylinos.cn>
    sched_ext: Don't run ops.dequeue() with a DSQ lock held

Tejun Heo <tj@kernel.org>
    sched_ext: Add a size argument to scx_bpf_cid_topo() so struct scx_cid_topo can grow

Tejun Heo <tj@kernel.org>
    sched_ext: Build the cid tables privately and publish them with RCU

Chen Yu <yu.c.chen@intel.com>
    sched/cache: Skip kernel threads for cache aware scheduling to rubustify the code

Tim Chen <tim.c.chen@linux.intel.com>
    sched/cache: Introduce task_struct->sched_cache_grp to fix UAF

Lu Wang <wanglu.priv@gmail.com>
    sched/cache: Honor migrate_llc_task semantics in active load balance, to fix LLC mis-scheduling bug

Tim Chen <tim.c.chen@linux.intel.com>
    sched/cache: Keep nr_pref_llc_running in the runnable domain, to fix LLC mis-scheduling bug

Tim Chen <tim.c.chen@linux.intel.com>
    sched/fair: Avoid creating misfits during cache-aware balancing

Joshua Hahn <joshua.hahnjy@gmail.com>
    selftests/cgroup: account for zswap shrinker writeback

Heikki Krogerus <heikki.krogerus@linux.intel.com>
    drm/xe/i2c: Keep the i2c controller always enabled

Bryam Vargas <hexlabsecurity@proton.me>
    dm-pcache: bound the logical key offset from persistent memory

Bryam Vargas <hexlabsecurity@proton.me>
    dm-pcache: reject a kset that overruns its segment


-------------

Diffstat:

 Documentation/arch/arm64/silicon-errata.rst        |   2 +
 Documentation/filesystems/netfs_library.rst        |  26 ++
 Makefile                                           |   4 +-
 arch/arc/include/asm/atomic64-arcv2.h              |   6 +
 arch/arc/include/asm/cmpxchg.h                     |   4 +-
 arch/arm64/Kconfig                                 |  30 ++
 arch/arm64/kernel/cpu_errata.c                     |  24 +-
 arch/arm64/kernel/cpufeature.c                     |   2 +-
 arch/arm64/kernel/signal.c                         |  34 +-
 arch/arm64/kernel/topology.c                       |  17 +-
 arch/arm64/kernel/vdso/Makefile                    |   2 +-
 arch/arm64/kvm/emulate-nested.c                    |   3 -
 arch/arm64/kvm/hyp/nvhe/pkvm.c                     |   9 +
 arch/arm64/kvm/mmu.c                               |  47 +--
 arch/arm64/kvm/vgic/vgic-its.c                     |  12 +-
 arch/arm64/kvm/vgic/vgic-v2.c                      |   6 +-
 arch/arm64/kvm/vgic/vgic-v3.c                      |   6 +-
 arch/arm64/kvm/vgic/vgic.c                         |  21 +-
 arch/arm64/mm/mmu.c                                |   2 +-
 arch/arm64/net/bpf_jit_comp.c                      |  37 +-
 arch/arm64/tools/cpucaps                           |   2 +-
 arch/loongarch/net/bpf_jit.c                       |  60 ++--
 arch/loongarch/vdso/Makefile                       |   1 +
 arch/powerpc/kernel/vdso/Makefile                  |   1 +
 arch/powerpc/net/bpf_jit_comp.c                    |  45 +--
 arch/powerpc/perf/imc-pmu.c                        |  23 +-
 arch/riscv/kernel/vdso/Makefile                    |   1 +
 arch/riscv/net/bpf_jit_comp64.c                    |  56 +++-
 arch/s390/kernel/vdso/Makefile                     |   1 +
 arch/s390/net/bpf_jit_comp.c                       |  46 ++-
 arch/x86/crypto/aesni-intel_glue.c                 |   2 +-
 arch/x86/entry/vdso/vdso64/Makefile                |   2 +-
 arch/x86/kernel/sys_x86_64.c                       |  15 +-
 arch/x86/kvm/mmu/mmu.c                             |   6 +
 arch/x86/kvm/svm/nested.c                          |   7 +-
 arch/x86/kvm/svm/sev.c                             |  46 ++-
 arch/x86/kvm/svm/svm.c                             |  38 +--
 arch/x86/kvm/svm/svm.h                             |   1 +
 arch/x86/kvm/vmx/nested.c                          |  21 +-
 arch/x86/kvm/x86.c                                 |   4 +
 arch/x86/mm/pgtable.c                              |  38 +--
 arch/x86/net/bpf_jit_comp.c                        |  26 +-
 block/blk-cgroup.c                                 |   5 +-
 block/blk-mq.c                                     |  59 ++--
 block/fops.c                                       |   5 +
 block/mq-deadline.c                                |   2 +-
 drivers/android/binder.c                           |   3 +-
 drivers/android/binder/node.rs                     |  20 +-
 drivers/android/binder/node/wrapper.rs             |  34 +-
 drivers/android/binder/thread.rs                   |   8 +-
 drivers/android/binderfs.c                         |   3 +-
 drivers/block/drbd/drbd_nl_gen.c                   |   4 -
 drivers/block/virtio_blk.c                         |   1 +
 drivers/bluetooth/btintel.c                        |  15 +-
 drivers/bluetooth/btintel_pcie.c                   |  12 +-
 drivers/bluetooth/btusb.c                          |   2 +
 drivers/char/tpm/tpm2-cmd.c                        |   2 +-
 drivers/char/tpm/tpm2-sessions.c                   |   1 +
 drivers/clk/spacemit/ccu-k3.c                      |  92 +++++
 drivers/edac/altera_edac.c                         |  67 ++--
 drivers/edac/versalnet_edac.c                      |   1 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c            |  13 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c      |   2 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c            |   8 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |   8 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c              |   9 +
 drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c             |   2 +-
 drivers/gpu/drm/amd/amdgpu/gmc_v12_1.c             |   2 +-
 drivers/gpu/drm/amd/amdgpu/sdma_v7_1.c             |   4 -
 drivers/gpu/drm/amd/amdgpu/vi.c                    |  21 ++
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  | 103 +++++-
 .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c    |   6 +-
 drivers/gpu/drm/amd/display/dc/dc.h                |   1 +
 .../dc/link/protocols/link_edp_panel_control.c     |   4 +-
 .../amd/display/dc/resource/dce60/dce60_resource.c |  13 +-
 .../amd/display/dc/resource/dce80/dce80_resource.c |   2 +
 drivers/gpu/drm/amd/display/modules/power/power.c  |   2 +
 drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c         |  39 +--
 .../gpu/drm/i915/display/intel_display_params.c    |   4 +
 .../gpu/drm/i915/display/intel_display_params.h    |   1 +
 drivers/gpu/drm/i915/display/intel_vrr.c           |   4 +-
 drivers/gpu/drm/mediatek/mtk_drm_drv.c             |  17 +-
 drivers/gpu/drm/mediatek/mtk_hdmi_ddc_v2.c         |   4 +-
 drivers/gpu/drm/mediatek/mtk_hdmi_regs_v2.h        |   2 +-
 drivers/gpu/drm/radeon/radeon_bios.c               |   6 +-
 drivers/gpu/drm/xe/xe_i2c.c                        |  49 ++-
 drivers/gpu/drm/xe/xe_i2c.h                        |   1 +
 drivers/gpu/drm/xe/xe_pci_sriov.c                  |  30 +-
 drivers/hid/bpf/hid_bpf_dispatch.c                 |   2 +-
 drivers/hid/hid-multitouch.c                       |   2 +-
 drivers/i2c/busses/i2c-at91-master.c               |   8 +-
 drivers/i2c/busses/i2c-xiic.c                      |  61 +++-
 drivers/iio/accel/kionix-kx022a.c                  |  30 +-
 drivers/iio/accel/kxcjk-1013.c                     |   2 +-
 drivers/iio/accel/sca3000.c                        |   2 +-
 drivers/iio/adc/ad4030.c                           |  11 +-
 drivers/iio/adc/ad7173.c                           |   4 +-
 drivers/iio/adc/ad_sigma_delta.c                   |  31 +-
 drivers/iio/adc/ade9000.c                          |  36 +-
 drivers/iio/adc/adi-axi-adc.c                      |   4 +
 drivers/iio/adc/aspeed_adc.c                       |   4 +-
 drivers/iio/adc/axp288_adc.c                       |   8 +
 drivers/iio/adc/max1363.c                          |   8 +
 drivers/iio/adc/pac1934.c                          |   4 +
 drivers/iio/adc/rohm-bd79124.c                     |  20 +-
 drivers/iio/adc/stm32-adc.c                        |  47 +--
 drivers/iio/adc/sun4i-gpadc-iio.c                  |  10 +-
 drivers/iio/adc/xilinx-xadc-core.c                 |   9 +-
 drivers/iio/buffer/industrialio-buffer-dmaengine.c |  16 +-
 drivers/iio/cdc/ad7150.c                           |   8 +-
 drivers/iio/dac/rohm-bd79703.c                     |   3 +
 drivers/iio/frequency/adf4377.c                    |   4 +-
 drivers/iio/frequency/admv1013.c                   |   9 +-
 drivers/iio/gyro/adis16136.c                       |   2 +-
 drivers/iio/health/max30102.c                      |  12 +-
 drivers/iio/imu/adis16400.c                        |   2 +-
 drivers/iio/imu/adis16480.c                        |   4 +-
 drivers/iio/industrialio-buffer.c                  |   7 +-
 drivers/iio/industrialio-trigger.c                 |   2 +
 drivers/iio/light/gp2ap020a00f.c                   |   2 +
 drivers/iio/light/rohm-bu27034.c                   |  62 ++--
 drivers/iio/pressure/bmp280-core.c                 |   2 +-
 drivers/iio/pressure/rohm-bm1390.c                 |   2 +-
 drivers/iio/proximity/aw96103.c                    |  30 +-
 drivers/iio/proximity/isl29501.c                   |   2 +-
 drivers/iio/proximity/pulsedlight-lidar-lite-v2.c  |   4 +-
 drivers/iio/proximity/sx9324.c                     |   2 +-
 drivers/iio/proximity/vcnl3020.c                   |  24 +-
 drivers/iio/proximity/vl53l0x-i2c.c                |   3 +
 drivers/input/keyboard/atkbd.c                     |   8 +
 drivers/input/mouse/synaptics.c                    |   7 +-
 drivers/input/serio/i8042-acpipnpio.h              |   9 +
 drivers/input/touchscreen/s6sy761.c                |  14 +-
 drivers/md/dm-pcache/cache_gc.c                    |   5 +
 drivers/md/dm-pcache/cache_key.c                   |  14 +
 drivers/md/dm-pcache/cache_writeback.c             |   5 +
 drivers/mtd/devices/block2mtd.c                    |   2 +-
 drivers/mtd/devices/mtd_intel_dg.c                 |   3 +-
 drivers/mtd/mtdcore.c                              |   3 +-
 drivers/mtd/nand/ecc.c                             |   7 +
 drivers/mtd/nand/raw/cadence-nand-controller.c     |   6 +-
 drivers/mtd/nand/raw/vf610_nfc.c                   |  85 ++++-
 drivers/mtd/nand/spi/core.c                        |  53 ++-
 drivers/mtd/spi-nor/core.c                         |   2 +-
 drivers/net/ethernet/broadcom/bcmsysport.c         |   8 +-
 drivers/net/ethernet/broadcom/genet/bcmgenet.c     |  34 +-
 drivers/net/ethernet/broadcom/genet/bcmgenet.h     |   2 +
 drivers/net/ethernet/google/gve/gve_tx_dqo.c       |  14 +-
 drivers/net/ethernet/marvell/mvneta.c              |   2 +-
 drivers/net/ethernet/marvell/octeontx2/af/mcs.c    |   4 +-
 drivers/net/ethernet/marvell/octeontx2/nic/cn20k.c |  11 +-
 .../ethernet/marvell/octeontx2/nic/otx2_common.c   |  18 +-
 .../ethernet/marvell/octeontx2/nic/otx2_common.h   |   9 +
 drivers/net/ethernet/mediatek/mtk_eth_soc.c        |  38 ++-
 drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c   |   3 +
 drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c  |  10 +-
 .../net/ethernet/microchip/sparx5/sparx5_main.c    |   1 +
 .../net/ethernet/microchip/sparx5/sparx5_main.h    |   1 +
 .../net/ethernet/microchip/sparx5/sparx5_netdev.c  |   1 +
 drivers/net/ethernet/microchip/sparx5/sparx5_ptp.c |   3 +
 drivers/net/ethernet/microchip/vcap/vcap_api.c     |   2 +-
 drivers/net/ethernet/realtek/r8169_main.c          |   6 +
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  83 +++--
 drivers/net/pcs/pcs-rzn1-miic.c                    |   3 +
 drivers/net/pfcp.c                                 |   3 +
 drivers/net/phy/aquantia/aquantia_main.c           |   5 +-
 drivers/net/phy/qcom/at803x.c                      |   8 +-
 drivers/net/usb/qmi_wwan.c                         |   1 +
 drivers/net/wireless/ath/ath11k/mac.c              |   1 +
 drivers/net/wireless/ath/ath9k/hif_usb.c           |  21 +-
 drivers/net/wireless/ath/ath9k/htc.h               |   1 -
 drivers/net/wireless/ath/ath9k/htc_drv_init.c      |   7 +-
 drivers/net/wireless/ath/ath9k/htc_drv_txrx.c      |   8 +-
 drivers/net/wireless/ath/ath9k/wmi.c               |  28 +-
 drivers/net/wireless/ath/ath9k/wmi.h               |   1 +
 drivers/net/wireless/intel/iwlegacy/3945-mac.c     |   1 +
 drivers/net/wireless/silabs/wfx/hif_tx.c           |   4 +-
 drivers/net/wireless/st/cw1200/bh.c                |   8 +-
 drivers/net/wireless/st/cw1200/txrx.c              |  14 +
 drivers/net/wireless/ti/wlcore/main.c              |   4 +-
 drivers/net/xen-netfront.c                         |  12 +-
 drivers/nvme/host/core.c                           |  74 ++--
 drivers/nvme/host/multipath.c                      |  43 +--
 drivers/nvme/host/nvme.h                           |  10 +-
 drivers/nvme/host/pci.c                            |   2 +
 drivers/nvme/target/configfs.c                     |   9 +-
 drivers/nvme/target/core.c                         |   5 +-
 drivers/nvme/target/fabrics-cmd-auth.c             |   2 +-
 drivers/nvme/target/pci-epf.c                      |   3 +
 drivers/of/base.c                                  |  10 +-
 drivers/of/irq.c                                   |   2 +
 drivers/of/overlay.c                               |  17 +-
 drivers/pci/pci.c                                  |  15 +-
 drivers/rtc/dev.c                                  |   2 +-
 drivers/rtc/rtc-ac100.c                            |  39 +--
 drivers/rtc/rtc-mpfs.c                             |   6 +-
 drivers/rtc/rtc-spear.c                            |  11 +-
 drivers/spi/spi-cs42l43.c                          |  97 ++++++
 drivers/staging/greybus/uart.c                     |   3 +-
 drivers/thunderbolt/ctl.c                          |  63 ++--
 drivers/thunderbolt/quirks.c                       |   3 +
 drivers/thunderbolt/switch.c                       |   9 +-
 drivers/thunderbolt/tb.c                           |  37 +-
 drivers/thunderbolt/test.c                         |  58 +++-
 drivers/thunderbolt/tunnel.c                       |  73 ++--
 drivers/thunderbolt/tunnel.h                       |   8 +-
 drivers/thunderbolt/xdomain.c                      |   4 +
 drivers/tty/amiserial.c                            |   9 +-
 drivers/tty/n_gsm.c                                |  47 +--
 drivers/tty/serial/8250/8250_bcm7271.c             |   2 +-
 drivers/tty/serial/8250/8250_omap.c                |  15 +-
 drivers/tty/serial/kgdboc.c                        |   9 +
 drivers/tty/serial/ma35d1_serial.c                 |   6 +-
 drivers/tty/serial/max3100.c                       |  13 +-
 drivers/tty/serial/qcom_geni_serial.c              |   5 +-
 drivers/tty/serial/sc16is7xx.c                     |  53 ++-
 drivers/tty/serial/serial-tegra.c                  |  18 +-
 drivers/tty/serial/serial_core.c                   |  76 +++--
 drivers/tty/serial/vt8500_serial.c                 |   1 +
 drivers/tty/tty_io.c                               |  54 ++-
 drivers/tty/tty_port.c                             |  91 +++--
 drivers/tty/vcc.c                                  |   5 +-
 drivers/tty/vt/selection.c                         |   4 +-
 drivers/tty/vt/vc_screen.c                         |  23 +-
 drivers/tty/vt/vt.c                                |   5 +-
 drivers/usb/cdns3/cdns3-gadget.c                   |   4 +
 drivers/usb/cdns3/cdns3-pci-wrap.c                 |   5 +
 drivers/usb/chipidea/ci_hdrc_tegra.c               |   4 +-
 drivers/usb/class/cdc-acm.c                        |  41 ++-
 drivers/usb/class/cdc-acm.h                        |   1 -
 drivers/usb/core/hub.c                             |   7 +-
 drivers/usb/core/message.c                         |   8 +-
 drivers/usb/dwc2/hcd.c                             |   3 +-
 drivers/usb/dwc3/core.h                            |  19 ++
 drivers/usb/dwc3/dwc3-am62.c                       |   1 +
 drivers/usb/dwc3/ep0.c                             |   9 +
 drivers/usb/dwc3/gadget.c                          | 108 +++++-
 drivers/usb/gadget/function/f_fs.c                 |  15 +-
 drivers/usb/gadget/function/f_midi2.c              |   4 +-
 drivers/usb/gadget/function/f_uac1_legacy.c        |   6 +
 drivers/usb/gadget/udc/aspeed-vhub/core.c          |   4 +
 drivers/usb/gadget/udc/aspeed-vhub/dev.c           |   2 +-
 drivers/usb/gadget/udc/aspeed-vhub/hub.c           |   5 +-
 drivers/usb/gadget/udc/aspeed-vhub/vhub.h          |   1 +
 drivers/usb/gadget/udc/dummy_hcd.c                 |   4 +
 drivers/usb/host/octeon-hcd.c                      |   2 +-
 drivers/usb/host/ohci-da8xx.c                      |   2 +
 drivers/usb/host/ohci-s3c2410.c                    |   1 +
 drivers/usb/host/ohci-spear.c                      |   1 +
 drivers/usb/host/ohci-st.c                         |   1 +
 drivers/usb/serial/bus.c                           |   6 +-
 drivers/usb/serial/cp210x.c                        |   1 +
 drivers/usb/serial/generic.c                       |  10 +-
 drivers/usb/serial/option.c                        |  14 +
 drivers/usb/serial/quatech2.c                      |  19 +-
 drivers/usb/serial/ssu100.c                        |  18 +-
 drivers/usb/serial/usb-serial.c                    | 127 +++++--
 drivers/usb/serial/xr_serial.c                     |  10 +-
 drivers/usb/storage/sierra_ms.c                    |   7 +
 drivers/usb/typec/anx7411.c                        |   5 +-
 drivers/usb/typec/port-mapper.c                    |  21 +-
 drivers/usb/typec/tcpm/tcpm.c                      |   2 +-
 drivers/usb/typec/tipd/core.c                      |  11 +-
 drivers/usb/typec/ucsi/displayport.c               |   9 +-
 drivers/usb/typec/ucsi/ucsi.c                      |  17 +-
 drivers/usb/typec/ucsi/ucsi_acpi.c                 |  34 ++
 drivers/usb/typec/ucsi/ucsi_glink.c                |  15 +-
 drivers/virt/nitro_enclaves/ne_misc_dev.c          |   1 +
 drivers/virt/vmgenid.c                             |   9 +-
 fs/exec.c                                          |   1 +
 fs/ext4/inode.c                                    |   3 +-
 fs/netfs/buffered_read.c                           |   7 +
 fs/netfs/buffered_write.c                          |   9 +
 fs/netfs/direct_write.c                            |   9 +
 fs/netfs/internal.h                                |   2 +
 fs/netfs/misc.c                                    |  99 ++++++
 fs/netfs/read_collect.c                            |  24 ++
 fs/smb/client/cifsfs.c                             |  41 ++-
 fs/smb/client/cifsglob.h                           |  10 +-
 fs/smb/client/inode.c                              |   2 +
 fs/smb/client/smb2ops.c                            | 114 +++++--
 fs/smb/client/smb2pdu.c                            |  10 +-
 include/linux/bpf.h                                |  45 ++-
 include/linux/hrtimer_rearm.h                      |   2 +-
 include/linux/mtd/nand.h                           |   2 +
 include/linux/netfilter_netdev.h                   |   2 +-
 include/linux/netfs.h                              |   2 +
 include/linux/perf_event.h                         |   7 +-
 include/linux/rtnetlink.h                          |   7 +-
 include/linux/sched.h                              |  14 +
 include/linux/skbuff.h                             |   2 +-
 include/linux/soc/qcom/geni-se.h                   |  15 +-
 include/linux/tty.h                                |   1 +
 include/linux/tty_driver.h                         |   6 +
 include/linux/tty_port.h                           |  22 +-
 include/linux/usb/serial.h                         |   1 +
 include/net/bluetooth/hci_core.h                   |   5 +-
 include/net/gso.h                                  |   8 +
 include/net/netfilter/nf_flow_table.h              |   2 +-
 include/net/sch_generic.h                          |   9 +
 include/net/xdp.h                                  |   5 +
 include/sound/core.h                               |   9 +
 include/uapi/linux/random.h                        |   2 +-
 init/Kconfig                                       |   5 +
 io_uring/cmd_net.c                                 |  19 +-
 io_uring/io_uring.c                                |   4 +-
 io_uring/tw.c                                      |   3 +
 io_uring/zcrx.c                                    |   9 +-
 kernel/audit_tree.c                                |  36 +-
 kernel/bpf/core.c                                  |  10 +-
 kernel/bpf/hashtab.c                               |  19 +-
 kernel/bpf/memalloc.c                              |  57 +++-
 kernel/bpf/syscall.c                               |  19 +-
 kernel/bpf/trampoline.c                            |  85 ++++-
 kernel/events/core.c                               | 313 ++++++++---------
 kernel/events/ring_buffer.c                        |   7 +-
 kernel/exit.c                                      |  33 +-
 kernel/fork.c                                      |   2 +
 kernel/futex/core.c                                |  10 +-
 kernel/kprobes.c                                   |   8 +-
 kernel/module/main.c                               |   8 +-
 kernel/sched/ext/cid.c                             | 138 +++++---
 kernel/sched/ext/cid.h                             |   2 +-
 kernel/sched/ext/ext.c                             |  77 +++--
 kernel/sched/ext/types.h                           |   4 +
 kernel/sched/fair.c                                | 372 ++++++++++++++++-----
 kernel/sysctl.c                                    |   2 +-
 kernel/time/jiffies.c                              |   2 +
 kernel/trace/fprobe.c                              |  26 +-
 mm/damon/core.c                                    |   2 +-
 mm/kasan/common.c                                  |  13 +-
 mm/shmem.c                                         |   7 +-
 mm/slab.h                                          |  18 +-
 mm/slab_common.c                                   |   2 +-
 mm/slub.c                                          |  37 +-
 mm/vma.c                                           |   4 +-
 net/bluetooth/hci_conn.c                           |  18 +-
 net/bluetooth/hci_core.c                           |  54 ++-
 net/bluetooth/hci_debugfs.c                        |   2 +-
 net/bluetooth/hci_sync.c                           |  19 +-
 net/bluetooth/rfcomm/tty.c                         |   7 +-
 net/bluetooth/smp.c                                |   2 +
 net/core/dev.c                                     |  78 +++--
 net/core/dev_ioctl.c                               |   3 +-
 net/core/gso.c                                     |   1 +
 net/core/page_pool.c                               |   2 +-
 net/core/skbuff.c                                  |   8 +-
 net/core/sock.c                                    |   4 +-
 net/ethtool/tsconfig.c                             |  24 +-
 net/ipv4/af_inet.c                                 |   3 +
 net/ipv4/tcp_input.c                               |   6 +
 net/ipv6/addrconf.c                                |   2 +-
 net/ipv6/ip6_offload.c                             |   4 +
 net/ipv6/seg6_iptunnel.c                           |   2 +-
 net/ipv6/seg6_local.c                              | 140 ++++++--
 net/mac80211/agg-rx.c                              |   2 +-
 net/mac80211/chan.c                                |  50 ++-
 net/mac80211/drop.h                                |   1 +
 net/mac80211/fils_aead.c                           |   8 +
 net/mac80211/ieee80211_i.h                         |   2 +-
 net/mac80211/iface.c                               |   4 +-
 net/mac80211/mesh_pathtbl.c                        |  30 +-
 net/mac80211/mlme.c                                |   4 +-
 net/mac80211/rc80211_minstrel_ht.c                 |  89 ++++-
 net/mac80211/rx.c                                  |   6 +
 net/mac80211/spectmgmt.c                           |   4 +-
 net/mac80211/sta_info.c                            |   6 +-
 net/mac80211/status.c                              |  70 ++++
 net/mac80211/tx.c                                  |  45 ++-
 net/mctp/device.c                                  |   6 +-
 net/mptcp/protocol.c                               |   2 +-
 net/netfilter/ipset/ip_set_bitmap_gen.h            |   2 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |   3 +
 net/netfilter/ipvs/ip_vs_lblc.c                    |   4 +
 net/netfilter/ipvs/ip_vs_lblcr.c                   |   3 +
 net/netfilter/ipvs/ip_vs_sync.c                    |  33 +-
 net/netfilter/nf_flow_table_core.c                 |   7 +-
 net/netfilter/nf_flow_table_offload.c              |  14 +-
 net/netfilter/nf_nat_bpf.c                         |   3 +
 net/netfilter/nf_nat_core.c                        |   5 +-
 net/netfilter/nft_flow_offload.c                   |   7 +-
 net/packet/af_packet.c                             |   3 +
 net/sched/act_ct.c                                 |   2 +-
 net/sched/act_skbedit.c                            |   5 +-
 net/sched/cls_api.c                                |  15 +-
 net/sched/sch_codel.c                              |   2 +-
 net/sched/sch_fq_codel.c                           |   4 +-
 net/sctp/socket.c                                  |   2 +-
 net/tipc/crypto.c                                  |  20 +-
 net/wireless/nl80211.c                             |  11 +-
 net/wireless/scan.c                                |  22 +-
 rust/kernel/irq/request.rs                         |  89 +++--
 sound/core/seq/seq_compat.c                        |   4 +-
 sound/hda/codecs/realtek/alc269.c                  |   6 +-
 sound/hda/controllers/tegra.c                      |   3 +-
 sound/pci/ctxfi/cthw20k2.c                         |   2 +
 sound/pci/ice1712/ice1712.c                        |   2 +-
 sound/soc/codecs/lpass-wsa-macro.c                 |   3 +
 sound/soc/codecs/max98363.c                        |   2 +-
 sound/soc/codecs/rt1017-sdca-sdw.c                 |  27 +-
 sound/soc/codecs/rt274.c                           |   4 +-
 sound/soc/codecs/rt286.c                           |   2 +-
 sound/soc/codecs/wm8903.c                          |   2 +-
 sound/soc/qcom/lpass-cpu.c                         |   4 +-
 sound/soc/sdca/sdca_class_function.c               |  19 +-
 sound/soc/sdw_utils/soc_sdw_utils.c                |  20 +-
 sound/soc/tegra/tegra186_asrc.c                    |   2 +-
 sound/usb/caiaq/device.c                           |   3 +
 sound/usb/line6/playback.c                         |   7 +
 sound/usb/misc/ua101.c                             |   9 +
 sound/usb/quirks.c                                 |  29 +-
 tools/sched_ext/include/scx/common.bpf.h           |   4 +-
 tools/testing/selftests/cgroup/test_zswap.c        |  28 +-
 413 files changed, 5137 insertions(+), 2033 deletions(-)