[PATCH 7.0 000/461] 7.0.11-rc1 review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 7.0.11 release.
There are 461 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat, 30 May 2026 19:45:49 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.0.11-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.0.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 7.0.11-rc1

Armin Wolf <W_Armin@gmx.de>
    platform/x86: uniwill-laptop: Do not enable the charging limit even when forced

Werner Sembach <wse@tuxedocomputers.com>
    Documentation: laptops: Update documentation for uniwill laptops

Damien Le Moal <dlemoal@kernel.org>
    block: avoid use-after-free in disk_free_zone_resources()

Tiezhu Yang <yangtiezhu@loongson.cn>
    LoongArch: kprobes: Fix handling of fatal unrecoverable recursions

Junyi Liu <moss80199@gmail.com>
    ksmbd: fix durable reconnect error path file lifetime

Keith Busch <kbusch@kernel.org>
    blk-mq: pop cached request if it is usable

Alexander A. Klimov <grandmaster@al2klimov.de>
    io_uring/nop: pass all errors to userspace

Wei Fang <wei.fang@nxp.com>
    net: enetc: fix missing error code when pf->vf_state allocation fails

Sabrina Dubroca <sd@queasysnail.net>
    net: gro: don't merge zcopy skbs

Nikhil P. Rao <nikhil.rao@amd.com>
    pds_core: ensure null-termination for firmware version strings

Lorenzo Bianconi <lorenzo@kernel.org>
    net: airoha: Disable GDM2 forwarding before configuring GDM2 loopback

Weiming Shi <bestswngs@gmail.com>
    tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR

Aditya Garg <gargaditya@linux.microsoft.com>
    net: mana: validate rx_req_idx to prevent out-of-bounds array access

Ratheesh Kannoth <rkannoth@marvell.com>
    octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs

Keith Busch <kbusch@kernel.org>
    nvme-pci: fix dma mapping leak on data setup error

Keith Busch <kbusch@kernel.org>
    nvme-pci: fix dma_vecs leak on p2p memory

Nimrod Oren <noren@nvidia.com>
    selftests: net: Fix checksums in xdp_native

Richard Fitzgerald <rf@opensource.cirrus.com>
    ASoC: cs-amp-lib: Fix missing dput() after debugfs_lookup()

Richard Fitzgerald <rf@opensource.cirrus.com>
    ASoC: cs-amp-lib: Fix wrong sizeof() in _cs_amp_set_efi_calibration_data()

Shuicheng Lin <shuicheng.lin@intel.com>
    drm/xe/oa: Fix exec_queue leak on width check in stream open

Richard Fitzgerald <rf@opensource.cirrus.com>
    ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()

Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
    gpio: aggregator: lock device when calling device_is_bound()

Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
    gpio: aggregator: remove the software node when deactivating the aggregator

Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
    gpio: aggregator: stop using dev-sync-probe

Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
    gpio: aggregator: fix a potential use-after-free

Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
    gpio: cdev: check if uAPI v2 config attributes are correctly zeroed

Zhi Li <lizhi2@eswincomputing.com>
    net: stmmac: eswin: validate RGMII delay values

Zhi Li <lizhi2@eswincomputing.com>
    net: stmmac: eswin: correct RGMII delay granularity to 20 ps

Zhi Li <lizhi2@eswincomputing.com>
    net: stmmac: eswin: clear TXD and RXD delay registers during initialization

Zhi Li <lizhi2@eswincomputing.com>
    net: stmmac: eswin: fix HSP CSR init ordering after clock enable

Eric Dumazet <edumazet@google.com>
    tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction

Xingwang Xiang <v3rdant.xiang@gmail.com>
    bpf, skmsg: fix verdict sk_data_ready racing with ktls rx

Rosen Penev <rosenp@gmail.com>
    net: ag71xx: check error for platform_get_irq

David Howells <dhowells@redhat.com>
    rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg

David Howells <dhowells@redhat.com>
    crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks

Jakub Kicinski <kuba@kernel.org>
    net: shaper: rework the VALID marking (again)

Jakub Kicinski <kuba@kernel.org>
    net: shaper: annotate the data races

Prathamesh Deshpande <prathameshdeshpande7@gmail.com>
    net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA

Gal Pressman <gal@nvidia.com>
    udp: Fix UDP length on last GSO_PARTIAL segment

Alice Mikityanska <alice@isovalent.com>
    udp: gso: Fix handling checksum in __udp_gso_segment

Jiajia Liu <liujiajia@kylinos.cn>
    Bluetooth: btmtk: fix urb->setup_packet leak in error paths

Kiran K <kiran.k@intel.com>
    Bluetooth: btintel_pcie: Fix incorrect MAC access programming

Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
    Bluetooth: hci_sync: Fix not setting mask for HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE

David Carlier <devnexen@gmail.com>
    tracing: Avoid NULL return from hist_field_name() on truncation

Cunlong Li <shenxiaogll@gmail.com>
    cgroup: rstat: relax NMI guard after switch to try_cmpxchg

Zhang Cen <rollkingzzc@gmail.com>
    ALSA: seq: Serialize UMP output teardown with event_input

Shitalkumar Gandhi <shital.gandhi45@gmail.com>
    wifi: wilc1000: fix dma_buffer leak on bus acquire failure

Johannes Berg <johannes.berg@intel.com>
    wifi: mac80211: fix multi-link element inheritance

Johannes Berg <johannes.berg@intel.com>
    wifi: mac80211: fix MLE defragmentation

Alexandru Hossu <hossu.alexandru@gmail.com>
    wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs

Jia Zhu <zhujia.zj@bytedance.com>
    erofs: fix metabuf leak in inode xattr initialization

Utkal Singh <singhutkal015@gmail.com>
    erofs: harden h_shared_count in erofs_init_inode_xattrs()

Gao Xiang <xiang@kernel.org>
    erofs: fix managed cache race for unaligned extents

Nikhil P. Rao <nikhil.rao@amd.com>
    pds_core: fix debugfs_lookup dentry leak and error handling

Nikhil P. Rao <nikhil.rao@amd.com>
    pds_core: fix error handling in pdsc_devcmd_wait

Christian Marangi <ansuelsmth@gmail.com>
    net: airoha: Fix NPU RX DMA descriptor bits

Nicolai Buchwitz <nb@tipi-net.de>
    net: phy: honor eee_disabled_modes in phy_advertise_eee_all()

Nicolai Buchwitz <nb@tipi-net.de>
    net: phy: honor eee_disabled_modes in phy_support_eee()

Ido Schimmel <idosch@nvidia.com>
    bridge: mcast: Fix a possible use-after-free when removing a bridge port

Guangshuo Li <lgs201920130244@gmail.com>
    RDMA/rtrs: Fix use-after-free in path file creation cleanup

Shiraz Saleem <shirazsaleem@microsoft.com>
    RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port

Timur Kristóf <timur.kristof@gmail.com>
    drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets

Timur Kristóf <timur.kristof@gmail.com>
    drm/amdgpu/vce1: Check that the GPU address is < 128 MiB

Timur Kristóf <timur.kristof@gmail.com>
    drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2)

Robertus Diawan Chris <robertusdchris@gmail.com>
    ASoC: soc-utils: Add missing va_end in snd_soc_ret()

Ahmed Yaseen <yaseen@ghoul.dev>
    platform/x86: asus-armoury: fix mini-LED mode get/set on MODE2 devices

Armin Wolf <W_Armin@gmx.de>
    platform/x86: uniwill-laptop: Fix behavior of "force" module param

Armin Wolf <W_Armin@gmx.de>
    platform/x86: uniwill-laptop: Accept charging threshold of 0

Armin Wolf <W_Armin@gmx.de>
    platform/x86: uniwill-laptop: Properly initialize charging threshold

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    platform/x86: intel_sar: Check ACPI_HANDLE() against NULL

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    platform/x86: intel-hid: Check ACPI_HANDLE() against NULL

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    platform/x86: hp_accel: Check ACPI_COMPANION() against NULL

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL

Oliver White <oliverjwhite07@gmail.com>
    platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7

Erni Sri Satya Vennela <ernis@linux.microsoft.com>
    net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

Daniel Golle <daniel@makrotopia.org>
    net: dsa: mt7530: preserve VLAN tags on trapped link-local frames

Daniel Golle <daniel@makrotopia.org>
    net: dsa: mt7530: fix FDB entries not aging out with short timeout

Viktor Jägersküpper <viktor_jaegerskuepper@freenet.de>
    kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme

Xiangxu Yin <xiangxu.yin@oss.qualcomm.com>
    phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config

Ankit Nautiyal <ankit.k.nautiyal@intel.com>
    drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP

Kohei Enju <kohei@enjuk.jp>
    igc: set tx buffer type for SMD frames

Grzegorz Nitka <grzegorz.nitka@intel.com>
    ice: ptp: use primary NAC semaphore on E825

Grzegorz Nitka <grzegorz.nitka@intel.com>
    ice: ptp: serialize E825 PHY timer start with PTP lock

David Howells <dhowells@redhat.com>
    cifs: Fix undefined variables

Dragos Tatulea <dtatulea@nvidia.com>
    net/mlx5e: xsk: Fix unlocked writing to ICOSQ

Qing Ming <a0yami@mailbox.org>
    cgroup/rstat: validate cpu before css_rstat_cpu() access

Paul E. McKenney <paulmck@kernel.org>
    srcu: Don't queue workqueue handlers to never-online CPUs

Michael Bommarito <michael.bommarito@gmail.com>
    io_uring: propagate array_index_nospec opcode into req->opcode

Louis-Alexis Eyraud <louisalexis.eyraud@collabora.com>
    drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable

Louis-Alexis Eyraud <louisalexis.eyraud@collabora.com>
    drm/mediatek: mtk_cec: Fix non-static global variable

Louis-Alexis Eyraud <louisalexis.eyraud@collabora.com>
    drm/mediatek: mtk_hdmi_v2: Fix non-static global variable

Louis-Alexis Eyraud <louisalexis.eyraud@collabora.com>
    drm/mediatek: mtk_hdmi_ddc_v2: Fix non-static global variable

Baochen Qiang <baochen.qiang@oss.qualcomm.com>
    wifi: ath12k: fix EHT TX MCS limitation due to wrong 20 MHz-only parsing

Matthew Leach <matthew.leach@collabora.com>
    wifi: ath11k: fix peer resolution on rx path when peer_id=0

Gustavo Sousa <gustavo.sousa@intel.com>
    drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4

Matt Roper <matthew.d.roper@intel.com>
    drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p

Gustavo Sousa <gustavo.sousa@intel.com>
    drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1

Matt Roper <matthew.d.roper@intel.com>
    drm/xe: Consolidate workaround entries for Wa_18033852989

Matt Roper <matthew.d.roper@intel.com>
    drm/xe: Consolidate workaround entries for Wa_14019988906

Mohanram Meenakshisundaram <mohanram.meenakshisundaram@intel.com>
    drm/xe/pf: Fix CFI failure in debugfs access

Michal Wajdeczko <michal.wajdeczko@intel.com>
    drm/xe/vf: Fix signature of print functions

Shuicheng Lin <shuicheng.lin@intel.com>
    drm/xe/gsc: Fix double-free of managed BO in error path

Boris Brezillon <boris.brezillon@collabora.com>
    drm/gem: Make the GEM LRU lock part of drm_device

Jianpeng Chang <jianpeng.chang.cn@windriver.com>
    dma-mapping: move dma_map_resource() sanity check into debug code

Miri Korenblit <miriam.rachel.korenblit@intel.com>
    wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it

Cole Leavitt <cole@unwrap.rs>
    wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled

Guenter Roeck <linux@roeck-us.net>
    hwmon: (lm90) Add lock protection to lm90_alert

Guenter Roeck <linux@roeck-us.net>
    hwmon: (lm90) Stop work before releasing hwmon device

Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
    drm/msm/snapshot: fix dumping of the unaligned regions

Eric Naim <dnaim@cachyos.org>
    ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5

Florian Westphal <fw@strlen.de>
    netfilter: nft_inner: release local_lock before re-enabling softirqs

Felix Gu <ustc.gu@gmail.com>
    spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()

Cássio Gabriel <cassiogabrielcontato@gmail.com>
    ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging

Boris Burkov <boris@bur.io>
    btrfs: fix squota accounting during enable generation

Boris Burkov <boris@bur.io>
    btrfs: check for subvolume before deleting squota qgroup

Stefano Garzarella <sgarzare@redhat.com>
    vsock/virtio: fix zerocopy completion for multi-skb sends

Jens Axboe <axboe@kernel.dk>
    io_uring/net: punt IORING_OP_BIND async if it needs file create

Hongling Zeng <zenghongling@kylinos.cn>
    cachefiles: Fix error return when vfs_mkdir() fails

Matt DeVillier <matt.devillier@gmail.com>
    ALSA: hda/ca0132: Disable auto-detect on manual output select

Robertus Diawan Chris <robertusdchris@gmail.com>
    ALSA: scarlett2: Add missing error check when initialise Autogain Status

Jason Gunthorpe <jgg@ziepe.ca>
    iommupt: Fix the end_index calculation in __map_range_leaf()

Jason Gunthorpe <jgg@ziepe.ca>
    iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap

Jason Gunthorpe <jgg@ziepe.ca>
    iommu: Handle unmap error when iommu_debug is enabled

Jason Gunthorpe <jgg@ziepe.ca>
    iommu: Fix up map/unmap debugging for iommupt domains

Jason Gunthorpe <jgg@ziepe.ca>
    iommu: Fix loss of errno on map failure for classic ops

Jason Gunthorpe <jgg@ziepe.ca>
    iommupt: Avoid rewalking during map

Jason Gunthorpe <jgg@ziepe.ca>
    iommupt: Directly call iommupt's unmap_range()

Alexander A. Klimov <grandmaster@al2klimov.de>
    ASoC: codecs: fs210x: fix possible buffer overflow

Mike Christie <michael.christie@oracle.com>
    scsi: sd: Fix return code handling in sd_spinup_disk()

Or Har-Toov <ohartoov@nvidia.com>
    net/mlx5: Skip disabled vports when setting max TX speed

Jeroen Massar <jmassar@nvidia.com>
    net/mlx5: Do not restore destination-less TC rules

Chuck Lever <chuck.lever@oracle.com>
    tls: Preserve sk_err across recvmsg() when data has been copied

Ralf Lici <ralf@mandelbit.com>
    ovpn: disable BHs when updating device stats

Matt Evans <mattev@meta.com>
    vfio/pci: Check BAR resources before exporting a DMABUF

Juergen Gross <jgross@suse.com>
    x86/xen: Fix xen_e820_swap_entry_with_ram()

Kees Cook <kees@kernel.org>
    gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE

David Carlier <devnexen@gmail.com>
    phy: apple: atc: Fix typec switch/mux leak on unbind

DaeMyung Kang <charsyam@gmail.com>
    cifs: client: stage smb3_reconfigure() updates and restore ctx on failure

Antonio Quartulli <antonio@openvpn.net>
    ovpn: fix race between deleting interface and adding new peer

David Carlier <devnexen@gmail.com>
    ovpn: respect peer refcount in CMD_NEW_PEER error path

David Carlier <devnexen@gmail.com>
    ovpn: tcp - use cached peer pointer in ovpn_tcp_close()

Sven Schuchmann <schuchmann@schleissheimer.de>
    net: phy: DP83TC811: add reading of abilities

Jakub Kicinski <kuba@kernel.org>
    net: tls: prevent chain-after-chain in plain text SG

Jakub Kicinski <kuba@kernel.org>
    net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring

Xiang Mei <xmei5@asu.edu>
    net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot

Sayali Patil <sayalip@linux.ibm.com>
    powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()

Randy Dunlap <rdunlap@infradead.org>
    riscv: Docs: fix unmatched quote warning

Cássio Gabriel <cassiogabrielcontato@gmail.com>
    ASoC: sdw_utils: Check speaker component string allocation

Maciej Strozek <mstrozek@opensource.cirrus.com>
    ASoC: sdw_utils: cs42l43: allow spk component names to be combined

Maciej Strozek <mstrozek@opensource.cirrus.com>
    ASoC: intel: sof_sdw: Prepare for configuration without a jack

Chen Ni <nichen@iscas.ac.cn>
    drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table

Mikko Perttunen <mperttunen@nvidia.com>
    drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN

Rob Clark <robin.clark@oss.qualcomm.com>
    drm/msm/a6xx: Restore sysprof_active

Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
    drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx

Felix Gu <ustc.gu@gmail.com>
    drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()

Akhil P Oommen <akhilpo@oss.qualcomm.com>
    drm/msm/a6xx: Add soft fuse detection support

Alexander Koskovich <akoskovich@pm.me>
    drm/msm: Fix GMEM_BASE for A650

Ricardo Neri <ricardo.neri-calderon@linux.intel.com>
    Documentation: intel_pstate: Fix description of asymmetric packing with SMT

Borislav Petkov (AMD) <bp@alien8.de>
    x86/mce: Restore MCA polling interval halving

Ming Lei <tom.leiming@gmail.com>
    selftests: ublk: cap nthreads to kernel's actual nr_hw_queues

Damien Le Moal <dlemoal@kernel.org>
    block: fix handling of dead zone write plugs

Damien Le Moal <dlemoal@kernel.org>
    block: allow submitting all zone writes from a single context

Damien Le Moal <dlemoal@kernel.org>
    block: rename struct gendisk zone_wplugs_lock field

Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
    drm/msm/dpu: don't mix devm and drmm functions

Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com>
    drm/msm/dsi: don't dump registers past the mapped region

Mahadevan P <mahadevan.p@oss.qualcomm.com>
    drm/msm/dpu: Fix Kaanapali CWB register configuration

Neil Armstrong <neil.armstrong@linaro.org>
    drm/msm/dpu: fix UV scanlines calculation for YUV UBWC formats

Chenguang Zhao <zhaochenguang@kylinos.cn>
    ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics

Xiang Mei <xmei5@asu.edu>
    net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint

Zack McKevitt <zachary.mckevitt@oss.qualcomm.com>
    accel/qaic: Add overflow check to remap_pfn_range during mmap

Sungwoo Kim <iam@sung-woo.kim>
    block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user()

Lukas Bulwahn <lukas.bulwahn@redhat.com>
    HID: quirks: really enable the intended work around for appledisplay

Casey Chen <cachen@purestorage.com>
    block: recompute nr_integrity_segments in blk_insert_cloned_request

David Carlier <devnexen@gmail.com>
    block: don't overwrite bip_vcnt in bio_integrity_copy_user()

Jakub Kicinski <kuba@kernel.org>
    net: shaper: reject QUEUE scope handle with missing id

Jakub Kicinski <kuba@kernel.org>
    net: shaper: enforce singleton NETDEV scope with id 0

Jakub Kicinski <kuba@kernel.org>
    net: shaper: reject handle IDs exceeding internal bit-width

Jakub Kicinski <kuba@kernel.org>
    net: shaper: fix undersized reply skb allocation in GROUP command

Jakub Kicinski <kuba@kernel.org>
    net: shaper: set ret to -ENOMEM when genlmsg_new() fails in group_doit

Jakub Kicinski <kuba@kernel.org>
    net: shaper: reject duplicate leaves in GROUP request

Jakub Kicinski <kuba@kernel.org>
    net: shaper: fix trivial ordering issue in net_shaper_commit()

Jakub Kicinski <kuba@kernel.org>
    net: shaper: flip the polarity of the valid flag

Kang Yang <kang.yang@oss.qualcomm.com>
    wifi: ath10k: skip WMI and beacon transmission when device is wedged

Nicolas Escande <nico.escande@gmail.com>
    wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()

Nicolas Escande <nico.escande@gmail.com>
    wifi: ath11k: fix error path leaks in some WMI WOW calls

Ethan Nelson-Moore <enelsonmoore@gmail.com>
    net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference

Linus Walleij <linusw@kernel.org>
    net: ethernet: cortina: Carry over frag counter

Andreas Haarmann-Thiemann <eitschman@nebelreich.de>
    net: ethernet: cortina: Drop half-assembled SKB

Linus Walleij <linusw@kernel.org>
    net: ethernet: cortina: Make RX SKB per-port

David Howells <dhowells@redhat.com>
    afs: Fix the locking used by afs_get_link()

David Howells <dhowells@redhat.com>
    netfs, afs: Fix write skipping in dir/link writepages

David Howells <dhowells@redhat.com>
    netfs: Fix netfs_read_folio() to wait on writeback

David Howells <dhowells@redhat.com>
    netfs: Fix folio->private handling in netfs_perform_write()

David Howells <dhowells@redhat.com>
    netfs: Fix partial invalidation of streaming-write folio

David Howells <dhowells@redhat.com>
    netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()

David Howells <dhowells@redhat.com>
    netfs: Fix leak of request in netfs_write_begin() error handling

David Howells <dhowells@redhat.com>
    netfs: Fix early put of sink folio in netfs_read_gaps()

David Howells <dhowells@redhat.com>
    netfs: Fix write streaming disablement if fd open O_RDWR

David Howells <dhowells@redhat.com>
    netfs: Fix read-gaps to remove netfs_folio from filled folio

David Howells <dhowells@redhat.com>
    netfs: Fix potential deadlock in write-through mode

David Howells <dhowells@redhat.com>
    netfs: Fix streaming write being overwritten

David Howells <dhowells@redhat.com>
    netfs: Defer the emission of trace_netfs_folio()

David Howells <dhowells@redhat.com>
    netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone

David Howells <dhowells@redhat.com>
    netfs: Fix overrun check in netfs_extract_user_iter()

Viacheslav Dubeyko <Slava.Dubeyko@ibm.com>
    netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call

David Howells <dhowells@redhat.com>
    netfs: Fix zeropoint update where i_size > remote_i_size

David Howells <dhowells@redhat.com>
    netfs: Fix potential for tearing in ->remote_i_size and ->zero_point

David Howells <dhowells@redhat.com>
    netfs: Fix netfs_read_to_pagecache() to pause on subreq failure

David Howells <dhowells@redhat.com>
    netfs: Fix missing barriers when accessing stream->subrequests locklessly

David Howells <dhowells@redhat.com>
    netfs: Fix missing locking around retry adding new subreqs

David Howells <dhowells@redhat.com>
    netfs: Fix cancellation of a DIO and single read subrequests

Aboorva Devarajan <aboorvad@linux.ibm.com>
    powerpc/hv-gpci: fix preempt count leak in sysfs show paths

Julian Braha <julianbraha@gmail.com>
    powerpc: fix dead default for GUEST_STATE_BUFFER_TEST

Ally Heev <allyheev@gmail.com>
    powerpc: 82xx: fix uninitialized pointers with free attribute

Mario Limonciello <mario.limonciello@amd.com>
    ASoC: SOF: amd: Fix error code handling in psp_send_cmd()

Kuniyuki Iwashima <kuniyu@google.com>
    tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key().

Johannes Thumshirn <johannes.thumshirn@wdc.com>
    zonefs: handle integer overflow in zonefs_fname_to_fno

Chia-Lin Kao (AceLan) <acelan.kao@canonical.com>
    nvme-pci: fix use-after-free in nvme_free_host_mem()

Keith Busch <kbusch@kernel.org>
    nvme: fix bio leak on mapping failure

Jiayuan Chen <jiayuan.chen@linux.dev>
    irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT

Zhihao Cheng <chengzhihao1@huawei.com>
    nsfs: fix wrong error code returned for pidns ioctls

Ming Lei <tom.leiming@gmail.com>
    ublk: reject max_sectors smaller than PAGE_SECTORS in parameter validation

Pankaj Raghav <p.raghav@samsung.com>
    fs: fix forced iversion increment on lazytime timestamp updates

Rosen Penev <rosenp@gmail.com>
    irqchip/ath79-cpu: Remove unused function

Hongling Zeng <zenghongling@kylinos.cn>
    fs: Fix return in jfs_mkdir and orangefs_mkdir

Junyoung Jang <graypanda.inzag@gmail.com>
    fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap

Masami Hiramatsu (Google) <mhiramat@kernel.org>
    fprobe: Fix unregister_fprobe() to wait for RCU grace period

Mac Chiang <mac.chiang@intel.corp-partner.google.com>
    ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC

Mac Chiang <mac.chiang@intel.com>
    ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC

Chuck Lever <chuck.lever@oracle.com>
    NFSD: Fix infinite loop in layout state revocation

Felix Gu <ustc.gu@gmail.com>
    phy: spacemit: Remove incorrect clk_disable() in spacemit_usb2phy_init()

Gabor Juhos <j4g8y7@gmail.com>
    phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access

Shitalkumar Gandhi <shital.gandhi45@gmail.com>
    net: ti: icssm-prueth: fix eth_ports_node leak in probe

Myeonghun Pak <mhun512@gmail.com>
    net: lan966x: avoid unregistering netdev on register failure

Ivan Vecera <ivecera@redhat.com>
    ice: dpll: fix misplaced header macros

Ivan Vecera <ivecera@redhat.com>
    ice: dpll: fix rclk pin state get for E810

Bart Van Assche <bvanassche@acm.org>
    ice: fix locking in ice_dcb_rebuild()

Marcin Szycik <marcin.szycik@linux.intel.com>
    ice: fix setting RSS VSI hash for E830

Emil Tantilov <emil.s.tantilov@intel.com>
    idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()

Mohsin Bashir <hmohsin@meta.com>
    net: shaper: Reject reparenting of existing nodes

Dragos Tatulea <dtatulea@nvidia.com>
    net: napi: Avoid gro timer misfiring at end of busypoll

Kuniyuki Iwashima <kuniyu@google.com>
    tcp: Fix imbalanced icsk_accept_queue count.

Martin Kaiser <martin@kaiser.cx>
    test_kprobes: clear kprobes between test runs

Jianpeng Chang <jianpeng.chang.cn@windriver.com>
    kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist()

Pablo Neira Ayuso <pablo@netfilter.org>
    netfilter: nf_conntrack_expect: restore helper propagation via expectation

Florian Westphal <fw@strlen.de>
    netfilter: bridge: eb_tables: close module init race

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: close dangling table module init race

Florian Westphal <fw@strlen.de>
    netfilter: ebtables: close dangling table module init race

Florian Westphal <fw@strlen.de>
    netfilter: ebtables: move to two-stage removal scheme

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: add and use xtables_unregister_table_exit

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: add and use xt_unregister_table_pre_exit

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: unregister the templates first

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: allocate hook ops while under mutex

Florian Westphal <fw@strlen.de>
    netfilter: x_tables: allow initial table replace without emitting audit log message

Filipe Manana <fdmanana@suse.com>
    btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()

Shuhao Fu <sfual@cse.ust.hk>
    ALSA: hda: cs35l41: Put ACPI device on missing physical node

Shuhao Fu <sfual@cse.ust.hk>
    ALSA: hda: cs35l56: Put ACPI device after setting companion

Guenter Roeck <linux@roeck-us.net>
    ARM: integrator: Fix early initialization

Sudeep Holla <sudeep.holla@kernel.org>
    firmware: arm_ffa: Fix sched-recv callback partition lookup

Sudeep Holla <sudeep.holla@kernel.org>
    firmware: arm_ffa: Snapshot notifier callbacks under lock

Sudeep Holla <sudeep.holla@kernel.org>
    firmware: arm_ffa: Align RxTx buffer size before mapping

Sudeep Holla <sudeep.holla@kernel.org>
    firmware: arm_ffa: Validate framework notification message layout

Sudeep Holla <sudeep.holla@kernel.org>
    firmware: arm_ffa: Keep framework RX release under lock

Sudeep Holla <sudeep.holla@kernel.org>
    firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies

Maulik Shah <maulik.shah@oss.qualcomm.com>
    pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150

David Gow <david@davidgow.net>
    kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS

David Gow <david@davidgow.net>
    kunit: config: Enable KUNIT_DEBUGFS by default

Guo Ren (Alibaba DAMO Academy) <guoren@kernel.org>
    riscv: mm: Fixup no5lvl failure when vaddr is invalid

Michael Neuling <mikey@neuling.org>
    riscv: Fix register corruption from uninitialized cregs on error

Michael Neuling <mikey@neuling.org>
    riscv: errata: Fix bitwise vs logical AND in MIPS errata patching

Sudeep Holla <sudeep.holla@kernel.org>
    firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0

Sudeep Holla <sudeep.holla@kernel.org>
    firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue

Sudeep Holla <sudeep.holla@kernel.org>
    firmware: arm_ffa: Skip free_pages on RX buffer alloc failure

Sudeep Holla <sudeep.holla@kernel.org>
    firmware: arm_ffa: Check for NULL FF-A ID table while driver registration

Takashi Iwai <tiwai@suse.de>
    HID: uclogic: Fix regression of input name assignment

Dan Carpenter <error27@gmail.com>
    HID: intel-thc-hid: Intel-quickspi: Fix some error codes

David Carlier <devnexen@gmail.com>
    mm/memfd_luo: report error when restoring a folio fails mid-loop

Evangelos Petrongonas <epetron@amazon.de>
    kho: skip KHO for crash kernel

Maulik Shah <maulik.shah@oss.qualcomm.com>
    pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615

Xianwei Zhao <xianwei.zhao@amlogic.com>
    pinctrl: meson: amlogic-a4: fix deadlock issue

Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
    pinctrl: renesas: rzg2l: Fix SMT register cache handling

Biju Das <biju.das.jz@bp.renesas.com>
    pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for high pins during suspend/resume

Marek Vasut <marek.vasut+renesas@mailbox.org>
    ARM: dts: renesas: rskrza1: Drop superfluous cells

Marek Vasut <marek.vasut+renesas@mailbox.org>
    ARM: dts: renesas: genmai: Drop superfluous cells

Geert Uytterhoeven <geert+renesas@glider.be>
    arm64: dts: renesas: r8a78000: Fix SCIF brg_int clocks

Til Kaiser <mail@tk154.de>
    pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function

Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
    pinctrl: mediatek: moore: implement gpio_chip::get_direction()

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe()

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe()

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    hwmon: (pmbus/adm1266) reject implausible blackbox record_count

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    hwmon: (pmbus/adm1266) seed timestamp from the real-time clock

Sven Eckelmann <sven@narfation.org>
    batman-adv: tt: prevent TVLV entry number overflow

Sven Eckelmann <sven@narfation.org>
    batman-adv: tt: fix negative tt_buff_len

Sven Eckelmann <sven@narfation.org>
    batman-adv: tt: fix negative last_changeset_len

Sven Eckelmann <sven@narfation.org>
    batman-adv: tt: avoid empty VLAN responses

Sven Eckelmann <sven@narfation.org>
    batman-adv: tt: reject oversized local TVLV buffers

Sven Eckelmann <sven@narfation.org>
    batman-adv: tt: fix TOCTOU race for reported vlans

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: avoid role confusion in tp_list

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: fix race condition in send error reporting

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: directly shut down timer on cleanup

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: avoid use of uninit sender vars

Sven Eckelmann <sven@narfation.org>
    batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface

Sven Eckelmann <sven@narfation.org>
    batman-adv: bla: avoid double decrement of bla.num_requests

Sven Eckelmann <sven@narfation.org>
    batman-adv: bla: fix report_work leak on backbone_gw purge

Sven Eckelmann <sven@narfation.org>
    batman-adv: frag: disallow unicast fragment in fragment

Luxiao Xu <rakukuip@gmail.com>
    batman-adv: fix tp_meter counter underflow during shutdown

Ruide Cao <caoruide123@gmail.com>
    batman-adv: fix fragment reassembly length accounting

Sven Eckelmann <sven@narfation.org>
    batman-adv: dat: handle forward allocation error

Ruijie Li <ruijieli51@gmail.com>
    batman-adv: clear current gateway during teardown

Sven Eckelmann <sven@narfation.org>
    batman-adv: mcast: fix use-after-free in orig_node RCU release

Sven Eckelmann <sven@narfation.org>
    batman-adv: iv: recover OGM scheduling after forward packet error

Sven Eckelmann <sven@narfation.org>
    batman-adv: tvlv: reject oversized TVLV packets

Sven Eckelmann <sven@narfation.org>
    batman-adv: tvlv: abort OGM send on tvlv append failure

Sven Eckelmann <sven@narfation.org>
    batman-adv: v: stop OGMv2 on disabled interface

Harry Wentland <harry.wentland@amd.com>
    drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

Harry Wentland <harry.wentland@amd.com>
    drm/amd/display: Validate GPIO pin LUT table size before iterating

Harry Wentland <harry.wentland@amd.com>
    drm/amd/display: Fix integer overflow in bios_get_image()

Osama Abdelkader <osama.abdelkader@gmail.com>
    drm/bridge: megachips: remove bridge when irq request fails

Julien Chauveau <chauveau.julien@gmail.com>
    drm/bridge: it66121: acquire reset GPIO in probe

Alan Liu <haoping.liu@amd.com>
    drm/amdgpu/vpe: Force collaborate sync after TRAP

Niranjana Vishwanathapura <niranjana.vishwanathapura@intel.com>
    drm/xe/multi_queue: Fix secondary queue error case

Deepanshu Kartikey <kartikey406@gmail.com>
    drm/virtio: use uninterruptible resv lock for plane updates

Maíra Canal <mcanal@igalia.com>
    drm/v3d: Release indirect CSD GEM reference on CPU job free

Maíra Canal <mcanal@igalia.com>
    drm/v3d: Fix use-after-free of CPU job query arrays on error path

Daniel J Blueman <daniel@quora.org>
    drm/msm: Fix shrinker deadlock

Chaitanya Kumar Borah <chaitanya.kumar.borah@intel.com>
    drm/i915/display: Copy color pipeline from plane in the primary joiner pipe

Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
    device property: set fwnode->secondary to NULL in fwnode_init()

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E

Huacai Chen <chenhuacai@kernel.org>
    LoongArch: Remove unused code to avoid build warning

Tiezhu Yang <yangtiezhu@loongson.cn>
    LoongArch: kprobes: Use larch_insn_text_copy() to patch instructions

Heechan Kang <gganji11@naver.com>
    fwctl: pds: Validate RPC input size before parsing

Thomas Richter <tmricht@linux.ibm.com>
    s390/pai: Fix missing PAI counter increments under heavy load

Thomas Richter <tmricht@linux.ibm.com>
    s390/pai: Disable duplicate read of kernel PAI counter value

Peter Oberparleiter <oberpar@linux.ibm.com>
    s390/cio: Restore GFP_DMA for CHSC allocation

Michael Bommarito <michael.bommarito@gmail.com>
    RDMA/siw: Reject MPA FPDU length underflow before signed receive math

Qing Wang <wangqing7171@gmail.com>
    mm/slub: hold cpus_read_lock around flush_rcu_sheaves_on_cache()

Johan Hovold <johan@kernel.org>
    spi: ti-qspi: fix use-after-free after DMA setup failure

Johan Hovold <johan@kernel.org>
    spi: sprd: fix error pointer deref after DMA setup failure

Johan Hovold <johan@kernel.org>
    spi: ep93xx: fix error pointer deref after DMA setup failure

Michael Bommarito <michael.bommarito@gmail.com>
    scsi: isci: Fix use-after-free in device removal path

Yongxing Mou <yongxing.mou@oss.qualcomm.com>
    phy: qcom: edp: Fix AUX_CFG8 programming for DP mode

Yongxing Mou <yongxing.mou@oss.qualcomm.com>
    phy: qcom: edp: Add eDP/DP mode switch support

Yongxing Mou <yongxing.mou@oss.qualcomm.com>
    phy: qcom: edp: Unify generic DP/eDP swing and pre-emphasis tables

Nitin Rawat <nitin.rawat@oss.qualcomm.com>
    phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after SM8650 G4 fix

Wayne Chang <waynec@nvidia.com>
    phy: tegra: xusb: Fix per-pad high-speed termination calibration

Łukasz Lebiedziński <kernel@lvkasz.us>
    phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for Exynos7870

Johan Hovold <johan@kernel.org>
    spi: qup: fix error pointer deref after DMA setup failure

Osama Abdelkader <osama.abdelkader@gmail.com>
    drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe

Saurav Sachidanand <sauravsc@amazon.com>
    i2c: tegra: fix pm_runtime leak on mutex_lock failure

Carlos López <clopez@suse.de>
    virt: sev-guest: Explicitly leak pages in unknown state

Osama Abdelkader <osama.abdelkader@gmail.com>
    riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when OOM

Osama Abdelkader <osama.abdelkader@gmail.com>
    riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM

Tina Zhang <zhang_wei@open-hieco.net>
    KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235)

Michael Bommarito <michael.bommarito@gmail.com>
    KVM: arm64: vgic: Free private_irqs when init fails after allocation

Michael Bommarito <michael.bommarito@gmail.com>
    KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits

Vladimir Murzin <vladimir.murzin@arm.com>
    arm64: probes: Handle probes on hinted conditional branch instructions

Jeongjun Park <aha310510@gmail.com>
    ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put()

Masami Hiramatsu (Google) <mhiramat@kernel.org>
    tracing: Do not call map->ops->elt_free() if elt_alloc() fails

Zhihao Cheng <chengzhihao1@huawei.com>
    cifs: Fix busy dentry used after unmounting

Dawei Feng <dawei.feng@seu.edu.cn>
    octeontx2-pf: avoid double free of pool->stack on AQ init failure

Michael Bommarito <michael.bommarito@gmail.com>
    wifi: mac80211: consume only present negotiated TTLM maps

Jann Horn <jannh@google.com>
    af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

John Walker <johnwalker0@gmail.com>
    wifi: cfg80211: advance loop vars in cfg80211_merge_profile()

Grzegorz Nitka <grzegorz.nitka@intel.com>
    ice: restore PTP Rx timestamp config after ethtool set-channels

Marcin Szycik <marcin.szycik@intel.com>
    ice: fix setting promisc mode while adding VID filter

Jacob Keller <jacob.e.keller@intel.com>
    ice: fix locking around wait_event_interruptible_locked_irq

Kohei Enju <kohei@enjuk.jp>
    igc: fix potential skb leak in igc_fpe_xmit_smd_frame()

Dawei Feng <dawei.feng@seu.edu.cn>
    octeontx2-pf: fix double free in rvu_rep_rsrc_init()

Sam Daly <sam@samdaly.ie>
    octeontx2-af: CGX: add bounds check to cgx_speed_mbps index

Stephen Smalley <stephen.smalley.work@gmail.com>
    lsm: hold cred_guard_mutex for lsm_set_self_attr()

Paolo Abeni <pabeni@redhat.com>
    mptcp: reset rcv wnd on disconnect

Shardul Bankar <shardul.b@mpiricsoftware.com>
    mptcp: do not drop partial packets

Ilya Dryomov <idryomov@gmail.com>
    rbd: eliminate a race in lock_dwork draining on unmap

Michael Bommarito <michael.bommarito@gmail.com>
    ixgbevf: fix use-after-free in VEPA multicast source pruning

Michael Bommarito <michael.bommarito@gmail.com>
    ipv4: raw: reject IP_HDRINCL packets with ihl < 5

Sheroz Juraev <goodmartiandev@gmail.com>
    wifi: iwlwifi: mld: stop TX during firmware restart

Johannes Berg <johannes.berg@intel.com>
    wifi: iwlwifi: mvm: fix driver-set TX rates on old devices

Kyle Farnung <kfarnung@gmail.com>
    wifi: ath11k: clear shared SRNG pointer state on restart

Jose Ignacio Tornos Martinez <jtornosm@redhat.com>
    ice: fix VF queue configuration with low MTU values

Stefano Garzarella <sgarzare@redhat.com>
    vsock/virtio: reset connection on receiving queue overflow

Minh Nguyen <minhnguyen.080505@gmail.com>
    vsock/vmci: fix UAF when peer resets connection during handshake

Li Xiasong <lixiasong1@huawei.com>
    mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient

Matthieu Baerts (NGI0) <matttbe@kernel.org>
    selftests: mptcp: drop nanoseconds width specifier

Justin Iurman <justin.iurman@gmail.com>
    ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()

Zhao Li <enderaoelyther@gmail.com>
    wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb

Masami Hiramatsu (Google) <mhiramat@kernel.org>
    ring-buffer: Flush and stop persistent ring buffer on panic

Steven Rostedt <rostedt@goodmis.org>
    ring-buffer: Fix reporting of missed events in iterator

Dawei Feng <dawei.feng@seu.edu.cn>
    qed: fix double free in qed_cxt_tables_alloc()

Michael Bommarito <michael.bommarito@gmail.com>
    l2tp: use list_del_rcu in l2tp_session_unhash

Tejun Heo <tj@kernel.org>
    sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path

Samuele Mariotti <smariotti@disroot.org>
    sched_ext: Fix missing warning in scx_set_task_state() default case

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    ACPI: driver: Check ACPI_COMPANION() against NULL during probe

David Carlier <devnexen@gmail.com>
    net: ethtool: phy: avoid NULL deref when PHY driver is unbound

Quan Sun <2022090917019@std.uestc.edu.cn>
    net: ethtool: fix NULL pointer dereference in phy_reply_size

Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
    netfilter: nft_inner: Fix IPv6 inner_thoff desync

Nan Li <tonanli66@gmail.com>
    netfilter: ipset: stop hash:* range iteration at end

Haoze Xie <royenheart@gmail.com>
    netfilter: nf_queue: hold bridge skb->dev while queued

Zhengchuan Liang <zcliangcn@gmail.com>
    netfilter: ip6t_hbh: reject oversized option lists

Jonas Jelonek <jelonek.jonas@gmail.com>
    net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis()

Michael Bommarito <michael.bommarito@gmail.com>
    net: ifb: report ethtool stats over num_tx_queues

Matt Fleming <mfleming@cloudflare.com>
    net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover

Michael Bommarito <michael.bommarito@gmail.com>
    net: hsr: defer node table free until after RCU readers

Nerijus Bendžiūnas <nerijus.bendziunas@gmail.com>
    net: phy: skip EEE advertisement write when autoneg is disabled

David Carlier <devnexen@gmail.com>
    net: devmem: reject dma-buf bind with non-page-aligned size or SG length

Nicolai Buchwitz <nb@tipi-net.de>
    net: bcmgenet: keep RBUF EEE/PM disabled

Zijing Yin <yzjaurora@gmail.com>
    phonet/pep: disable BH around forwarded sk_receive_skb()

Jiexun Wang <wangjiexun2025@gmail.com>
    Bluetooth: serialize accept_q access

Michael Bommarito <michael.bommarito@gmail.com>
    Bluetooth: MGMT: validate Add Extended Advertising Data length

Shuai Zhang <shuai.zhang@oss.qualcomm.com>
    Bluetooth: hci_qca: Convert timeout from jiffies to ms

Michael Bommarito <michael.bommarito@gmail.com>
    Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer

Mingyu Wang <25181214217@stu.xidian.edu.cn>
    Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths

Jann Horn <jannh@google.com>
    Bluetooth: bnep: Fix UAF read of dev->name

David Carlier <devnexen@gmail.com>
    Bluetooth: ISO: drop ISO_END frames received without prior ISO_START

Safa Karakuş <safa.karakus@secunnix.com>
    Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()

Abdun Nihaal <nihaal@cse.iitm.ac.in>
    net: wwan: iosm: fix potential memory leaks in ipc_imem_init()

SeongJae Park <sj@kernel.org>
    mm/damon: fix damos_stat tracepoint format for sz_applied

Luiz Capitulino <luizcap@redhat.com>
    selftests/mm: run_vmtests.sh: fix destructive tests invocation

Sunny Patel <nueralspacetech@gmail.com>
    mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page

David Hildenbrand (Arm) <david@kernel.org>
    mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free

Muchun Song <muchun.song@linux.dev>
    mm/memory_hotplug: fix memory block reference leak on remove

David Hildenbrand (Arm) <david@kernel.org>
    mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special()

Alistair Popple <apopple@nvidia.com>
    mm/memory: fix spurious warning when unmapping device-private/exclusive pages

Justin Iurman <justin.iurman@gmail.com>
    ipv6: ioam: refresh hdr pointer before ioam6_event()

Muchun Song <muchun.song@linux.dev>
    drivers/base/memory: fix memory block reference leak in poison accounting

Heechan Kang <gganji11@naver.com>
    io_uring/waitid: clear waitid info before copying it to userspace

Krishnamoorthi M <krishnamoorthi.m@amd.com>
    spi: amd: Set correct bus number in ACPI probe path

Ard Biesheuvel <ardb@kernel.org>
    efi: Allocate runtime workqueue before ACPI init

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    ACPI: battery: Fix system wakeup on critical battery status

Cássio Gabriel <cassiogabrielcontato@gmail.com>
    ALSA: scarlett2: Allow flash writes ending at segment boundary

Takashi Iwai <tiwai@suse.de>
    ALSA: asihpi: Fix potential OOB array access at reading cache

Takashi Iwai <tiwai@suse.de>
    ALSA: pcm: Don't setup bogus iov_iter for silencing

Cássio Gabriel <cassiogabrielcontato@gmail.com>
    ALSA: ua101: Reject too-short USB descriptors

Abdurrahman Hussain <abdurrahman@nexthop.ai>
    hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX

ChenXiaoSong <chenxiaosong@kylinos.cn>
    smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close

Jeremy Erazo <mendozayt13@gmail.com>
    smb: client: use data_len for SMB2 READ encrypted folioq copy

Henrique Carvalho <henrique.carvalho@suse.com>
    smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

Michael Bommarito <michael.bommarito@gmail.com>
    smb: client: require net admin for CIFS SWN netlink

Illia Ostapyshyn <illia@yshyn.com>
    scripts/gdb: mm: cast untyped symbols in x86_page_ops

Tom Lendacky <thomas.lendacky@amd.com>
    x86/mm: Disable broadcast TLB flush when PCID is disabled

Alexander Sverdlin <alexander.sverdlin@gmail.com>
    regulator: tps65219: fix irq_data.rdev not being assigned

Junyi Liu <moss80199@gmail.com>
    ksmbd: validate SID in parent security descriptor during ACL inheritance

Ferry Meng <mengferry@linux.alibaba.com>
    ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow

Jeremy Laratro <research@aradex.io>
    ksmbd: fix null pointer dereference in proc_show_files()

Jeremy Laratro <research@aradex.io>
    ksmbd: fix null pointer dereference in compare_guid_key()

SeongJae Park <sj@kernel.org>
    mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    sysfs: don't remove existing directory on update failure

Niklas Cassel <cassel@kernel.org>
    ata: libata-scsi: do not needlessly defer commands when using PMP with FBS

Niklas Cassel <cassel@kernel.org>
    ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS

Niklas Cassel <cassel@kernel.org>
    ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT

Niklas Cassel <cassel@kernel.org>
    ata: libata-scsi: improve readability of ata_scsi_qc_issue()

Asim Viladi Oglu Manizada <manizada@pm.me>
    smb: client: reject userspace cifs.spnego descriptions

DaeMyung Kang <charsyam@gmail.com>
    ksmbd: close durable scavenger races against m_fp_list lookups

Eder Zulian <ezulian@redhat.com>
    iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs

Guanghui Feng <guanghuifeng@linux.alibaba.com>
    iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs


-------------

Diffstat:

 .../ABI/testing/sysfs-driver-uniwill-laptop        |  27 ++
 .../admin-guide/laptops/uniwill-laptop.rst         |  22 ++
 Documentation/admin-guide/pm/intel_pstate.rst      |  11 +-
 Documentation/arch/riscv/zicfilp.rst               |   2 +-
 Documentation/crypto/krb5.rst                      |  17 +-
 Documentation/netlink/specs/net_shaper.yaml        |   7 +
 Makefile                                           |   4 +-
 arch/alpha/include/asm/Kbuild                      |   1 +
 arch/arc/include/asm/Kbuild                        |   1 +
 arch/arm/boot/dts/renesas/r7s72100-genmai.dts      |   3 -
 arch/arm/boot/dts/renesas/r7s72100-rskrza1.dts     |   2 -
 arch/arm/include/asm/Kbuild                        |   1 +
 arch/arm/mach-versatile/integrator_cp.c            |  13 +-
 arch/arm64/boot/dts/renesas/r8a78000.dtsi          |   8 +-
 arch/arm64/include/asm/insn.h                      |   2 +-
 arch/arm64/include/asm/page.h                      |   2 +-
 arch/arm64/include/asm/ring_buffer.h               |  10 +
 arch/arm64/kvm/arm.c                               |   4 +-
 arch/arm64/kvm/vgic/vgic-its.c                     |   4 +
 arch/arm64/mm/fault.c                              |  11 +-
 arch/csky/include/asm/Kbuild                       |   1 +
 arch/hexagon/include/asm/Kbuild                    |   1 +
 arch/loongarch/include/asm/Kbuild                  |   1 +
 arch/loongarch/kernel/kprobes.c                    |  14 +-
 arch/loongarch/mm/init.c                           |   4 -
 arch/m68k/include/asm/Kbuild                       |   1 +
 arch/microblaze/include/asm/Kbuild                 |   1 +
 arch/mips/include/asm/Kbuild                       |   1 +
 arch/nios2/include/asm/Kbuild                      |   1 +
 arch/openrisc/include/asm/Kbuild                   |   1 +
 arch/parisc/include/asm/Kbuild                     |   1 +
 arch/powerpc/Kconfig.debug                         |   3 +-
 arch/powerpc/include/asm/Kbuild                    |   1 +
 arch/powerpc/kernel/time.c                         |   6 +-
 arch/powerpc/perf/hv-gpci.c                        |  24 +-
 arch/powerpc/platforms/82xx/km82xx.c               |   4 +-
 arch/riscv/errata/mips/errata.c                    |   2 +-
 arch/riscv/include/asm/Kbuild                      |   1 +
 arch/riscv/kernel/compat_signal.c                  |   2 +
 arch/riscv/kernel/ptrace.c                         |   4 +-
 arch/riscv/kvm/vcpu_pmu.c                          |  12 +-
 arch/riscv/mm/init.c                               |  25 ++
 arch/s390/include/asm/Kbuild                       |   1 +
 arch/s390/kernel/perf_pai.c                        |  31 ++-
 arch/sh/include/asm/Kbuild                         |   1 +
 arch/sparc/include/asm/Kbuild                      |   1 +
 arch/um/include/asm/Kbuild                         |   1 +
 arch/x86/include/asm/Kbuild                        |   1 +
 arch/x86/kernel/cpu/cpuid-deps.c                   |   1 +
 arch/x86/kernel/cpu/mce/core.c                     |  33 +--
 arch/x86/kvm/svm/avic.c                            |  12 +-
 arch/x86/xen/setup.c                               |   2 +-
 arch/xtensa/include/asm/Kbuild                     |   1 +
 block/bio-integrity.c                              |  19 +-
 block/blk-cgroup.c                                 |   2 +-
 block/blk-mq-debugfs.c                             |   1 +
 block/blk-mq.c                                     |  53 ++--
 block/blk-sysfs.c                                  |  35 ++-
 block/blk-zoned.c                                  | 250 ++++++++++++++---
 crypto/krb5/krb5_api.c                             |  54 +++-
 drivers/accel/qaic/qaic_data.c                     |  23 +-
 drivers/acpi/ac.c                                  |   6 +-
 drivers/acpi/acpi_pad.c                            |   6 +-
 drivers/acpi/acpi_tad.c                            |   6 +-
 drivers/acpi/battery.c                             |  10 +-
 drivers/acpi/button.c                              |   9 +-
 drivers/acpi/ec.c                                  |   6 +-
 drivers/acpi/hed.c                                 |   6 +-
 drivers/acpi/nfit/core.c                           |   6 +-
 drivers/acpi/pfr_telemetry.c                       |   6 +-
 drivers/acpi/pfr_update.c                          |   6 +-
 drivers/acpi/sbs.c                                 |   6 +-
 drivers/acpi/sbshc.c                               |   6 +-
 drivers/acpi/thermal.c                             |   2 +-
 drivers/acpi/tiny-power-button.c                   |   6 +-
 drivers/ata/libata-core.c                          |   9 +-
 drivers/ata/libata-eh.c                            |   8 +-
 drivers/ata/libata-pmp.c                           |  18 +-
 drivers/ata/libata-scsi.c                          | 102 ++++---
 drivers/ata/sata_sil24.c                           |   6 +-
 drivers/base/memory.c                              |   8 +-
 drivers/block/rbd.c                                |  20 +-
 drivers/block/ublk_drv.c                           |   3 +
 drivers/bluetooth/btintel_pcie.c                   |  20 +-
 drivers/bluetooth/btintel_pcie.h                   |   3 -
 drivers/bluetooth/btmtk.c                          |   2 +
 drivers/bluetooth/hci_ldisc.c                      |  48 +++-
 drivers/bluetooth/hci_qca.c                        |  33 ++-
 drivers/cpufreq/intel_pstate.c                     |   2 +-
 drivers/firmware/arm_ffa/bus.c                     |   4 +-
 drivers/firmware/arm_ffa/driver.c                  | 133 +++++++---
 drivers/firmware/efi/efi.c                         |  28 +-
 drivers/fwctl/pds/main.c                           |   3 +
 drivers/gpio/Kconfig                               |   1 -
 drivers/gpio/gpio-aggregator.c                     |  47 ++--
 drivers/gpio/gpiolib-cdev.c                        |  13 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c        |   9 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vpe.c            |   7 +-
 drivers/gpu/drm/amd/amdgpu/vce_v1_0.c              |  31 ++-
 drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c |   9 +
 .../drm/amd/display/dc/bios/bios_parser_helper.c   |   9 +-
 drivers/gpu/drm/amd/display/dc/core/dc.c           |   6 +-
 drivers/gpu/drm/bridge/chipone-icn6211.c           |   4 +-
 drivers/gpu/drm/bridge/ite-it66121.c               |   5 +
 .../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c   |  16 +-
 drivers/gpu/drm/drm_drv.c                          |   2 +
 drivers/gpu/drm/drm_gem.c                          |  36 ++-
 drivers/gpu/drm/i915/display/intel_dp.c            |   2 +-
 drivers/gpu/drm/i915/display/intel_plane.c         |   2 +-
 drivers/gpu/drm/mediatek/mtk_cec.c                 |   2 +-
 drivers/gpu/drm/mediatek/mtk_hdmi_ddc.c            |   2 +-
 drivers/gpu/drm/mediatek/mtk_hdmi_ddc_v2.c         |   2 +-
 drivers/gpu/drm/mediatek/mtk_hdmi_v2.c             |   2 +-
 drivers/gpu/drm/msm/adreno/a5xx_gpu.c              |   6 +
 drivers/gpu/drm/msm/adreno/a6xx_gpu.c              |  48 +++-
 drivers/gpu/drm/msm/adreno/a6xx_hfi.c              |   2 +
 drivers/gpu/drm/msm/adreno/adreno_gpu.c            |  13 +-
 drivers/gpu/drm/msm/adreno/adreno_gpu.h            |   1 +
 .../drm/msm/disp/dpu1/catalog/dpu_13_0_kaanapali.h |   2 +-
 drivers/gpu/drm/msm/disp/dpu1/dpu_formats.c        |  12 +-
 drivers/gpu/drm/msm/disp/dpu1/dpu_writeback.c      |   3 +-
 drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c  |  24 +-
 drivers/gpu/drm/msm/dsi/dsi_host.c                 |   1 +
 drivers/gpu/drm/msm/msm_drv.c                      |  11 +-
 drivers/gpu/drm/msm/msm_drv.h                      |   7 -
 drivers/gpu/drm/msm/msm_gem.c                      |  33 ++-
 drivers/gpu/drm/msm/msm_gem_shrinker.c             |  44 ++-
 drivers/gpu/drm/msm/msm_gem_submit.c               |   6 +-
 drivers/gpu/drm/msm/msm_gem_vma.c                  |  12 +-
 drivers/gpu/drm/msm/msm_iommu.c                    |   5 +-
 drivers/gpu/drm/msm/msm_ringbuffer.c               |   6 +-
 drivers/gpu/drm/msm/registers/adreno/a6xx.xml      |   4 +
 drivers/gpu/drm/v3d/v3d_sched.c                    |  16 +-
 drivers/gpu/drm/v3d/v3d_submit.c                   |  22 +-
 drivers/gpu/drm/virtio/virtgpu_drv.h               |   1 +
 drivers/gpu/drm/virtio/virtgpu_gem.c               |  17 ++
 drivers/gpu/drm/virtio/virtgpu_plane.c             |  10 +-
 drivers/gpu/drm/xe/regs/xe_gt_regs.h               |   3 +
 drivers/gpu/drm/xe/xe_gsc.c                        |   5 +-
 drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.c        |   6 +-
 drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.h        |   2 +-
 drivers/gpu/drm/xe/xe_gt_sriov_vf.c                |  24 +-
 drivers/gpu/drm/xe/xe_gt_sriov_vf.h                |   6 +-
 drivers/gpu/drm/xe/xe_guc_submit.c                 |  16 +-
 drivers/gpu/drm/xe/xe_oa.c                         |   6 +-
 drivers/gpu/drm/xe/xe_tuning.c                     |   5 +
 drivers/gpu/drm/xe/xe_wa.c                         |  28 +-
 drivers/hid/hid-quirks.c                           |   2 +-
 drivers/hid/hid-uclogic-core.c                     |   4 +-
 .../intel-quickspi/quickspi-protocol.c             |   4 +-
 drivers/hwmon/lm90.c                               |  26 +-
 drivers/hwmon/pmbus/adm1266.c                      |  32 ++-
 drivers/i2c/busses/i2c-tegra.c                     |   4 +-
 drivers/infiniband/hw/mana/main.c                  |   1 +
 drivers/infiniband/sw/siw/siw_qp_rx.c              |  15 ++
 drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c       |   2 +-
 drivers/iommu/amd/debugfs.c                        |  43 ++-
 drivers/iommu/generic_pt/iommu_pt.h                | 176 ++++++------
 drivers/iommu/generic_pt/kunit_generic_pt.h        |  12 +
 drivers/iommu/generic_pt/pt_iter.h                 |  22 ++
 drivers/iommu/iommu.c                              | 118 +++++----
 drivers/irqchip/irq-ath79-cpu.c                    |   7 -
 drivers/net/dsa/mt7530.c                           |  47 ++--
 drivers/net/ethernet/airoha/airoha_eth.c           |  10 +-
 drivers/net/ethernet/amd/pds_core/debugfs.c        |   7 +-
 drivers/net/ethernet/amd/pds_core/dev.c            |  11 +-
 drivers/net/ethernet/amd/pds_core/devlink.c        |   6 +-
 drivers/net/ethernet/atheros/ag71xx.c              |   3 +
 drivers/net/ethernet/broadcom/genet/bcmgenet.c     |   9 +-
 drivers/net/ethernet/cirrus/cs89x0.c               |   2 -
 drivers/net/ethernet/cortina/gemini.c              |  21 +-
 drivers/net/ethernet/freescale/enetc/enetc_pf.c    |   4 +-
 drivers/net/ethernet/intel/ice/ice_dcb_lib.c       |   4 +-
 drivers/net/ethernet/intel/ice/ice_dpll.c          |   5 +
 drivers/net/ethernet/intel/ice/ice_dpll.h          |  32 +--
 drivers/net/ethernet/intel/ice/ice_main.c          |  10 +-
 drivers/net/ethernet/intel/ice/ice_ptp_hw.c        |  33 ++-
 drivers/net/ethernet/intel/ice/virt/queues.c       |   2 +-
 drivers/net/ethernet/intel/idpf/idpf_ptp.c         |   4 +-
 drivers/net/ethernet/intel/igc/igc_tsn.c           |   9 +-
 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c  |   1 +
 drivers/net/ethernet/marvell/octeontx2/af/cgx.c    |   7 +-
 .../net/ethernet/marvell/octeontx2/af/rvu_npc.c    |   2 +-
 drivers/net/ethernet/marvell/octeontx2/nic/cn20k.c |   2 +
 .../ethernet/marvell/octeontx2/nic/otx2_common.c   |   2 +
 drivers/net/ethernet/marvell/octeontx2/nic/rep.c   |   3 +-
 .../ethernet/mellanox/mlx5/core/en/reporter_tx.c   |   6 +-
 .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c   |   7 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_txrx.c  |   2 +-
 .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c |   3 +-
 drivers/net/ethernet/mellanox/mlx5/core/eswitch.c  |  21 ++
 drivers/net/ethernet/mellanox/mlx5/core/eswitch.h  |   1 +
 drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c  |   5 +
 .../net/ethernet/microchip/lan966x/lan966x_main.c  |   8 +-
 drivers/net/ethernet/microsoft/mana/hw_channel.c   |  35 ++-
 drivers/net/ethernet/qlogic/qed/qed_cxt.c          |   2 +
 .../net/ethernet/stmicro/stmmac/dwmac-eic7700.c    | 128 ++++++---
 drivers/net/ethernet/ti/icssm/icssm_prueth.c       |   1 +
 drivers/net/ifb.c                                  |  11 +-
 drivers/net/ovpn/io.c                              |  12 +-
 drivers/net/ovpn/main.c                            |  12 +-
 drivers/net/ovpn/netlink.c                         |   8 +-
 drivers/net/ovpn/peer.c                            |  23 +-
 drivers/net/ovpn/peer.h                            |   1 -
 drivers/net/ovpn/stats.h                           |  16 ++
 drivers/net/ovpn/tcp.c                             |  19 +-
 drivers/net/ovpn/udp.c                             |   2 +-
 drivers/net/phy/dp83tc811.c                        |   1 +
 drivers/net/phy/phy-c45.c                          |   8 +
 drivers/net/phy/phy_device.c                       |   6 +-
 drivers/net/pse-pd/pse_core.c                      |   2 +-
 drivers/net/tap.c                                  |   2 +-
 drivers/net/wireless/ath/ath10k/wmi.c              |  17 +-
 drivers/net/wireless/ath/ath11k/dp_rx.c            |   3 +-
 drivers/net/wireless/ath/ath11k/hal.c              |  14 +-
 drivers/net/wireless/ath/ath11k/hal_rx.c           |   5 +-
 drivers/net/wireless/ath/ath11k/testmode.c         |   1 +
 drivers/net/wireless/ath/ath11k/wmi.c              |  19 +-
 drivers/net/wireless/ath/ath12k/mac.c              |   8 +-
 drivers/net/wireless/intel/iwlwifi/mld/link.c      |  13 +-
 drivers/net/wireless/intel/iwlwifi/mld/tx.c        |  15 +-
 drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c  |  27 +-
 drivers/net/wireless/intel/iwlwifi/mvm/utils.c     |  14 +-
 drivers/net/wireless/microchip/wilc1000/wlan.c     |   2 +-
 drivers/net/wwan/iosm/iosm_ipc_imem.c              |   2 +
 drivers/nvme/host/ioctl.c                          |   5 +-
 drivers/nvme/host/pci.c                            |  40 ++-
 drivers/phy/apple/atc.c                            |  27 +-
 drivers/phy/marvell/phy-mvebu-a3700-utmi.c         |   5 +-
 drivers/phy/qualcomm/phy-qcom-edp.c                |  88 +++---
 drivers/phy/qualcomm/phy-qcom-qmp-ufs.c            |   1 +
 drivers/phy/qualcomm/phy-qcom-qmp-usbc.c           |   2 +-
 drivers/phy/samsung/phy-exynos5-usbdrd.c           |   7 +-
 drivers/phy/spacemit/phy-k1-usb2.c                 |   1 -
 drivers/phy/tegra/xusb-tegra186.c                  |  33 ++-
 drivers/phy/tegra/xusb.h                           |   1 +
 drivers/pinctrl/mediatek/pinctrl-moore.c           |  18 ++
 drivers/pinctrl/meson/pinctrl-amlogic-a4.c         |   6 +-
 drivers/pinctrl/qcom/pinctrl-ipq4019.c             |   2 +-
 drivers/pinctrl/qcom/pinctrl-msm.h                 |   5 +
 drivers/pinctrl/qcom/pinctrl-qcs615.c              |   6 +-
 drivers/pinctrl/qcom/pinctrl-sm8150.c              |   8 +-
 drivers/pinctrl/renesas/pinctrl-rzg2l.c            |  23 +-
 .../platform/surface/surface_aggregator_registry.c |   2 -
 drivers/platform/x86/adv_swbutton.c                |   6 +-
 drivers/platform/x86/asus-armoury.c                |  16 +-
 drivers/platform/x86/hp/hp_accel.c                 |   3 +
 drivers/platform/x86/intel/hid.c                   |   6 +-
 drivers/platform/x86/intel/int1092/intel_sar.c     |   7 +-
 drivers/platform/x86/intel/vbtn.c                  |   6 +-
 drivers/platform/x86/uniwill/uniwill-acpi.c        |  47 +++-
 drivers/regulator/tps65219-regulator.c             | 135 +++++++---
 drivers/s390/cio/chsc.c                            |   4 +-
 drivers/s390/cio/chsc_sch.c                        |  20 +-
 drivers/s390/cio/scm.c                             |   2 +-
 drivers/scsi/isci/host.c                           |   3 +
 drivers/scsi/sd.c                                  |   3 +-
 drivers/spi/spi-amd.c                              |   2 +-
 drivers/spi/spi-ep93xx.c                           |   2 +
 drivers/spi/spi-mtk-snfi.c                         |   2 +-
 drivers/spi/spi-qup.c                              |   3 +
 drivers/spi/spi-sprd.c                             |   3 +-
 drivers/spi/spi-ti-qspi.c                          |   1 +
 drivers/vfio/pci/vfio_pci_dmabuf.c                 |   6 +-
 drivers/virt/coco/sev-guest/sev-guest.c            |  10 +-
 fs/9p/v9fs_vfs.h                                   |  13 -
 fs/9p/vfs_inode.c                                  |   6 +-
 fs/9p/vfs_inode_dotl.c                             |  12 +-
 fs/afs/Makefile                                    |   1 +
 fs/afs/dir.c                                       |  79 +++---
 fs/afs/file.c                                      |  24 +-
 fs/afs/fsclient.c                                  |   4 +-
 fs/afs/inode.c                                     | 127 ++-------
 fs/afs/internal.h                                  |  45 ++--
 fs/afs/symlink.c                                   | 278 +++++++++++++++++++
 fs/afs/validation.c                                |  14 +-
 fs/afs/write.c                                     |   2 +-
 fs/afs/yfsclient.c                                 |   4 +-
 fs/btrfs/fs.h                                      |   1 +
 fs/btrfs/qgroup.c                                  |  81 ++++--
 fs/cachefiles/namei.c                              |   2 +
 fs/erofs/xattr.c                                   |  10 +-
 fs/erofs/zdata.c                                   |  15 +-
 fs/inode.c                                         |   8 +-
 fs/jfs/namei.c                                     |   2 +-
 fs/mnt_idmapping.c                                 |   2 +
 fs/netfs/buffered_read.c                           |  73 ++---
 fs/netfs/buffered_write.c                          | 174 +++++++-----
 fs/netfs/direct_read.c                             |  42 +--
 fs/netfs/direct_write.c                            |   6 +-
 fs/netfs/internal.h                                |   3 +
 fs/netfs/iterator.c                                |  26 +-
 fs/netfs/misc.c                                    |  41 ++-
 fs/netfs/read_collect.c                            |  19 +-
 fs/netfs/read_retry.c                              |  17 +-
 fs/netfs/read_single.c                             |  23 +-
 fs/netfs/write_collect.c                           |  15 +-
 fs/netfs/write_issue.c                             |  51 ++--
 fs/netfs/write_retry.c                             |   6 +-
 fs/nfsd/nfs4state.c                                |   7 +
 fs/nsfs.c                                          |   2 +-
 fs/orangefs/namei.c                                |   2 +-
 fs/smb/client/cifs_spnego.c                        |  16 ++
 fs/smb/client/cifsfs.c                             |  42 ++-
 fs/smb/client/cifssmb.c                            |   3 +-
 fs/smb/client/file.c                               |  13 +-
 fs/smb/client/fs_context.c                         | 163 ++++++++----
 fs/smb/client/inode.c                              |  14 +-
 fs/smb/client/netlink.c                            |   6 +-
 fs/smb/client/readdir.c                            |   3 +-
 fs/smb/client/smb2ops.c                            |  46 ++--
 fs/smb/client/smb2pdu.c                            |   3 +-
 fs/smb/client/smb2transport.c                      |   2 +
 fs/smb/server/oplock.c                             |   6 +-
 fs/smb/server/smb2pdu.c                            |  15 +-
 fs/smb/server/smbacl.c                             |  78 ++++--
 fs/smb/server/vfs_cache.c                          | 120 ++++++---
 fs/sysfs/group.c                                   |   2 +-
 fs/zonefs/super.c                                  |   6 +-
 include/asm-generic/kprobes.h                      |   2 +-
 include/asm-generic/ring_buffer.h                  |  13 +
 include/crypto/krb5.h                              |   9 +-
 include/drm/drm_device.h                           |   7 +
 include/drm/drm_gem.h                              |  20 +-
 include/linux/blkdev.h                             |  10 +-
 include/linux/cgroup.h                             |   1 +
 include/linux/fprobe.h                             |   5 +
 include/linux/fwnode.h                             |   1 +
 include/linux/generic_pt/iommu.h                   |  69 ++++-
 include/linux/gfp_types.h                          |  10 +-
 include/linux/highmem.h                            |   7 +-
 include/linux/iommu.h                              |   1 +
 include/linux/libata.h                             |   7 +-
 include/linux/list.h                               |  37 +++
 include/linux/netfilter/x_tables.h                 |   4 +-
 include/linux/netfilter_arp/arp_tables.h           |   1 -
 include/linux/netfilter_ipv4/ip_tables.h           |   1 -
 include/linux/netfilter_ipv6/ip6_tables.h          |   1 -
 include/linux/netfs.h                              | 295 ++++++++++++++++++++-
 include/linux/soc/airoha/airoha_offload.h          |   6 +-
 include/net/bluetooth/bluetooth.h                  |   1 +
 include/net/net_shaper.h                           |   1 +
 include/net/netfilter/nf_conntrack_expect.h        |   5 +-
 include/net/netfilter/nf_queue.h                   |   1 +
 include/net/tcp.h                                  |   7 +-
 include/trace/events/btrfs.h                       |   4 +-
 include/trace/events/damon.h                       |   2 +-
 include/trace/events/netfs.h                       |   8 +
 include/trace/events/rxrpc.h                       |   1 +
 io_uring/io_uring.c                                |   9 +-
 io_uring/net.c                                     |  26 +-
 io_uring/nop.c                                     |   4 +-
 io_uring/waitid.c                                  |   1 +
 kernel/cgroup/rstat.c                              |  37 ++-
 kernel/dma/debug.c                                 |   9 +-
 kernel/dma/mapping.c                               |   4 -
 kernel/irq_work.c                                  |   7 +
 kernel/liveupdate/kexec_handover.c                 |   2 +-
 kernel/rcu/srcutree.c                              |  12 +-
 kernel/sched/ext.c                                 |   5 +-
 kernel/trace/bpf_trace.c                           |   3 +-
 kernel/trace/fprobe.c                              |  23 +-
 kernel/trace/ring_buffer.c                         |  30 ++-
 kernel/trace/trace_events_hist.c                   |   6 +-
 kernel/trace/tracing_map.c                         |  17 +-
 lib/kunit/Kconfig                                  |   5 +-
 lib/tests/test_kprobes.c                           |  29 +-
 mm/damon/sysfs-schemes.c                           |   1 +
 mm/memcontrol.c                                    |   6 +-
 mm/memfd_luo.c                                     |   1 +
 mm/memory.c                                        |  24 +-
 mm/memory_hotplug.c                                |   2 +
 mm/migrate_device.c                                |   2 +-
 mm/page_alloc.c                                    |   8 +-
 mm/slab_common.c                                   |   2 +
 mm/slub.c                                          |   1 +
 net/batman-adv/bat_iv_ogm.c                        |  82 ++++--
 net/batman-adv/bat_v_ogm.c                         |  59 +++--
 net/batman-adv/bridge_loop_avoidance.c             | 109 +++++---
 net/batman-adv/distributed-arp-table.c             |   3 +
 net/batman-adv/fragmentation.c                     |  58 +++-
 net/batman-adv/gateway_client.c                    |   4 +
 net/batman-adv/mesh-interface.c                    |   1 +
 net/batman-adv/originator.c                        |   4 +-
 net/batman-adv/tp_meter.c                          | 117 +++++---
 net/batman-adv/translation-table.c                 |  55 +++-
 net/batman-adv/tvlv.c                              |  28 +-
 net/batman-adv/tvlv.h                              |   2 +-
 net/batman-adv/types.h                             |  59 +++--
 net/bluetooth/af_bluetooth.c                       |  99 +++++--
 net/bluetooth/bnep/core.c                          |   2 +-
 net/bluetooth/hci_sync.c                           |   6 +-
 net/bluetooth/iso.c                                |  14 +-
 net/bluetooth/l2cap_core.c                         |   2 +-
 net/bluetooth/l2cap_sock.c                         |  51 +++-
 net/bluetooth/mgmt.c                               |   6 +
 net/bluetooth/rfcomm/sock.c                        |   9 +-
 net/bluetooth/sco.c                                |   9 +-
 net/bridge/br_multicast.c                          |  22 +-
 net/bridge/netfilter/ebtable_broute.c              |  14 +-
 net/bridge/netfilter/ebtable_filter.c              |  14 +-
 net/bridge/netfilter/ebtable_nat.c                 |  12 +-
 net/bridge/netfilter/ebtables.c                    |  71 +++--
 net/core/dev.c                                     |  21 +-
 net/core/devmem.c                                  |  11 +
 net/core/gro.c                                     |   3 +
 net/core/skmsg.c                                   |   9 +-
 net/ethtool/bitset.c                               |   8 +-
 net/ethtool/phy.c                                  |  36 ++-
 net/hsr/hsr_framereg.c                             |   4 +-
 net/ipv4/inet_connection_sock.c                    |   2 +-
 net/ipv4/netfilter/arp_tables.c                    |  53 +---
 net/ipv4/netfilter/arptable_filter.c               |  27 +-
 net/ipv4/netfilter/ip_tables.c                     |  59 +----
 net/ipv4/netfilter/iptable_filter.c                |  27 +-
 net/ipv4/netfilter/iptable_mangle.c                |  29 +-
 net/ipv4/netfilter/iptable_nat.c                   |   6 +-
 net/ipv4/netfilter/iptable_raw.c                   |  26 +-
 net/ipv4/netfilter/iptable_security.c              |  27 +-
 net/ipv4/raw.c                                     |   2 +-
 net/ipv4/tcp.c                                     |   3 -
 net/ipv4/tcp_ao.c                                  |   3 +-
 net/ipv4/tcp_input.c                               |  15 +-
 net/ipv4/tcp_ipv4.c                                |   3 +-
 net/ipv4/udp_offload.c                             |  22 +-
 net/ipv6/exthdrs.c                                 |  21 +-
 net/ipv6/netfilter/ip6_tables.c                    |  56 +---
 net/ipv6/netfilter/ip6t_hbh.c                      |   4 +
 net/ipv6/netfilter/ip6table_filter.c               |  26 +-
 net/ipv6/netfilter/ip6table_mangle.c               |  27 +-
 net/ipv6/netfilter/ip6table_nat.c                  |   6 +-
 net/ipv6/netfilter/ip6table_raw.c                  |  24 +-
 net/ipv6/netfilter/ip6table_security.c             |  27 +-
 net/ipv6/tcp_ipv6.c                                |   3 +-
 net/l2tp/l2tp_core.c                               |   2 +-
 net/mac80211/mlme.c                                |   5 +-
 net/mac80211/parse.c                               | 107 +++++---
 net/mac80211/rx.c                                  |   6 +-
 net/mptcp/pm.c                                     |  56 +++-
 net/mptcp/protocol.c                               |  25 +-
 net/netfilter/ipset/ip_set_hash_ipmark.c           |   6 +-
 net/netfilter/ipset/ip_set_hash_ipport.c           |   5 +-
 net/netfilter/ipset/ip_set_hash_ipportip.c         |   5 +-
 net/netfilter/ipset/ip_set_hash_ipportnet.c        |   5 +-
 net/netfilter/nf_conntrack_broadcast.c             |   1 +
 net/netfilter/nf_conntrack_core.c                  |   7 +-
 net/netfilter/nf_conntrack_expect.c                |   1 +
 net/netfilter/nf_conntrack_h323_main.c             |  12 +-
 net/netfilter/nf_conntrack_helper.c                |   5 +
 net/netfilter/nf_conntrack_netlink.c               |  18 +-
 net/netfilter/nf_conntrack_sip.c                   |   2 +-
 net/netfilter/nf_queue.c                           |   4 +-
 net/netfilter/nfnetlink_queue.c                    |   2 +
 net/netfilter/nft_inner.c                          |   3 +-
 net/netfilter/x_tables.c                           | 177 ++++++++++---
 net/phonet/pep.c                                   |  19 +-
 net/rxrpc/ar-internal.h                            |   7 +-
 net/rxrpc/call_event.c                             |  22 +-
 net/rxrpc/call_object.c                            |   2 +
 net/rxrpc/insecure.c                               |   3 -
 net/rxrpc/recvmsg.c                                |  68 ++++-
 net/rxrpc/rxgk.c                                   |  62 +++--
 net/rxrpc/rxgk_common.h                            |  82 ++++++
 net/rxrpc/rxkad.c                                  |  86 +++---
 net/shaper/shaper.c                                | 224 +++++++++++-----
 net/shaper/shaper_nl_gen.c                         |   7 +-
 net/shaper/shaper_nl_gen.h                         |   2 +
 net/smc/af_smc.c                                   |   3 +-
 net/smc/smc_tracepoint.h                           |   2 +-
 net/tls/tls_sw.c                                   |  46 +++-
 net/unix/af_unix.c                                 |  11 +-
 net/vmw_vsock/virtio_transport_common.c            | 103 ++++---
 net/vmw_vsock/vmci_transport.c                     |   2 +-
 net/wireless/scan.c                                |   3 +
 scripts/gcc-plugins/gcc-common.h                   |   4 +-
 scripts/gdb/linux/mm.py                            |   6 +-
 scripts/package/PKGBUILD                           |   2 +-
 security/lsm_syscalls.c                            |   9 +-
 sound/core/pcm_lib.c                               |   3 +
 sound/core/seq/seq_ump_client.c                    |  22 +-
 sound/hda/codecs/ca0132.c                          |  44 ++-
 sound/hda/codecs/realtek/alc269.c                  |  12 +-
 sound/hda/codecs/side-codecs/cs35l41_hda.c         |   4 +-
 sound/hda/codecs/side-codecs/cs35l56_hda.c         |   1 +
 sound/pci/asihpi/hpicmn.c                          |   6 +
 sound/soc/amd/acp/acp-sdw-legacy-mach.c            |   2 +-
 sound/soc/codecs/cs-amp-lib.c                      |  15 +-
 sound/soc/codecs/cs35l56-sdw.c                     |   3 +-
 sound/soc/codecs/fs210x.c                          |   2 +-
 sound/soc/codecs/pcm512x.c                         |   6 +-
 sound/soc/sdw_utils/soc_sdw_bridge_cs35l56.c       |   6 -
 sound/soc/sdw_utils/soc_sdw_cs42l43.c              |  20 +-
 sound/soc/sdw_utils/soc_sdw_utils.c                |  34 ++-
 sound/soc/soc-utils.c                              |   1 +
 sound/soc/sof/amd/acp.c                            |   2 +-
 sound/usb/misc/ua101.c                             |   5 +-
 sound/usb/mixer_scarlett2.c                        |   9 +-
 tools/testing/selftests/mm/hmm-tests.c             |  50 ++++
 tools/testing/selftests/mm/run_vmtests.sh          |   2 +-
 tools/testing/selftests/net/lib/xdp_native.bpf.c   |  55 ++--
 tools/testing/selftests/net/mptcp/mptcp_connect.sh |   6 +-
 tools/testing/selftests/net/mptcp/mptcp_lib.sh     |  10 +-
 tools/testing/selftests/ublk/kublk.c               |  11 +
 503 files changed, 6399 insertions(+), 2940 deletions(-)