From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id E173D457E7B; Fri, 9 Oct 2026 14:14:05 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1791555259; cv=none; b=Jeib1edo3WUbYpDwGtetWeYs6I8337J/dTkWrqUbyN5IPDNwcMeuoDwwuNS2r9Z07pDpOKhdzKvJ0k9qFsInL0fKTDS85ZyMtoatclg0pMpaFRKEoOk4h0/Br14/Sudrko1QAgzB+B/rJQddQBLmHxZGmNNtP/jwPcZTDEXBz40= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1791555259; c=relaxed/simple; bh=EIILukNPmubKOJ99GvgnLztiVhuT9UvvSt5D7+bUA+o=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type; b=Xz3iIjNZriVovj54bofLAh9JjmkQarbv1rLoyegjisrxwG0aK6NjnJpOVMNSWgodid3BLANSSlVAeBR+sDt0hMC1dBDwoAVNkvo1UxPtKpmO/lGpjcFqjU0zYmwgR0zftzuP10vO6qMUEByCFlCAth3+t+cA//U4bsF3xY8rdaE= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=RM6UuhLc; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="RM6UuhLc" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 302541F000FF; Fri, 9 Oct 2026 14:14:04 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1791555245; bh=0XPSq8pKVYJkNyiHB0OMoymekGVPKMpv0EQdQru2jCg=; h=From:To:Cc:Subject:Date; b=RM6UuhLcIGbWQ9Hd/IGaojGsUIYMtQ/3R9S8wkpK3KVkZ88nh8UGnkdwgqwnTvDVw /Q1NRbTdZzkt/nSFKKnpVHwjMRGEboIuDfvc/af8qPr8jXjg1o9PvmznAEHfJ/Kp/Y +g4nk0hFYtW625uPA/JlMTYlPiUNlL6bwHHdskdA= From: Greg Kroah-Hartman To: stable@vger.kernel.org Cc: Greg Kroah-Hartman , patches@lists.linux.dev, linux-kernel@vger.kernel.org, torvalds@linux-foundation.org, akpm@linux-foundation.org, linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org, lkft-triage@lists.linaro.org, pavel@nabladev.com, jonathanh@nvidia.com, f.fainelli@gmail.com, sudipm.mukherjee@gmail.com, rwarsow@gmx.de, conor@kernel.org, hargar@microsoft.com, broonie@kernel.org, achill@achill.org, sr@sladewatkins.com Subject: [PATCH 7.2 000/428] 7.2.10-rc1 review Date: Fri, 9 Oct 2026 16:05:37 +0200 Message-ID: <20261009140946.008206689@linuxfoundation.org> X-Mailer: git-send-email 2.56.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: quilt/0.69 X-stable: review X-Patchwork-Hint: ignore X-KernelTest-Patch: http://kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.10-rc1.gz X-KernelTest-Tree: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git X-KernelTest-Branch: linux-7.2.y X-KernelTest-Patches: git://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git X-KernelTest-Version: 7.2.10-rc1 X-KernelTest-Deadline: 2026-10-11T14:09+00:00 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is the start of the stable review cycle for the 7.2.10 release. There are 428 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 11 Oct 2026 14:08:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.10-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman Linux 7.2.10-rc1 Michael Hennerich iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs Josef Bacik xen/netfront: drop RX packets with a short Ethernet header Gilberto Conde net: usb: qmi_wwan: add Quectel EG120K-EA Paulo Alcantara smb: client: only require read lease for size-extending preallocate Beata Michalska arm64: errata: Add Cortex-A725 erratum 3821522 workaround Beata Michalska arm64: errata: Factor out broken AMU const counter cap Zhengchuan Liang perf: Require kernel access for text poke events Dapeng Mi perf/core: Check kernel access when kernel callchains are requested Francisco Beltrán Millalén drm/amdgpu: reset VI ASIC on MacBookPro14,3 Andre Eikmeyer drm/amdgpu: reset VI ASIC on MacBookPro15,1 Ray Wu drm/amd/display: map PWM brightness through custom backlight curve Alice Ryhl rust: irq: pass RegistrationInner as cookie to request_irq Mehmet Fide mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages Matthieu Baerts (NGI0) mptcp: fix msk->timer_ival reset Fan Wu iio: trigger: cancel reenable_work before freeing trigger Donggeun Yoo iio: proximity: vl53l0x-i2c: claim direct mode for raw reads Salah Triki iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler Zhang Jie iio: proximity: sx9324: Correct proximity channel resolution Cong Nguyen iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure Salah Triki iio: proximity: isl29501: Fix return type of isl29501_register_write Laxman Acharya Padhya iio: proximity: aw96103: validate firmware data length Matti Vaittinen iio: pressure: rohm-bm1390: Return error when read fails Hui Su iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup Matti Vaittinen iio: light: rohm-bu27034: Fix infinite delay on error Fan Wu iio: light: gp2ap020a00f: drain irq_work after free_irq Arka Mondal iio: imu: adis16480: fix unprotected debugfs reads Arka Mondal iio: imu: adis16400: fix unprotected debugfs reads Marco Chen iio: health: max30102: fix NULL dereference in interrupt handler Arka Mondal iio: gyro: adis16136: fix unprotected debugfs reads Salah Triki iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() Geert Uytterhoeven iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data Pengpeng Hou iio: cdc: ad7150: fix OF matching and publish module aliases Jonathan Cameron iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. Jinseob Kim iio: buffer: serialize buffer teardown with mode claims Runyu Xiao iio: admv1013: initialize callback mutex before registering notifier Fan Wu iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind Felix Gu iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls Felix Gu iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure Fabrice Gasnier iio: adc: stm32-adc: fix possible division by zero in processed channel Fabrice Gasnier iio: adc: stm32-adc: fix check on internal channel availability Matti Vaittinen iio: adc: rohm-bd79124: Fix rising alarm Matti Vaittinen iio: adc: rohm-bd79124: Fix GPIO mask check Matti Vaittinen iio: adc: rohm-bd79124: Fix channel initialization Matti Vaittinen iio: adc: rohm-bd79124: Catch regmap errors at measurement start/stop Slavin Liu iio: adc: pac1934: check ACPI label duplication Cong Nguyen iio: adc: max1363: sign-extend bipolar differential channel reads Vladyslav Ivashchenko iio: adc: axp288: Add TS bias override for Haier HV103H Pengpeng Hou iio: adc: aspeed: propagate reset deassert errors Janani Sunil iio: adc: adi-axi-adc: Initialize state mutex Antoniu Miclaus iio: adc: ade9000: request interrupts after powering the device Antoniu Miclaus iio: adc: ade9000: handle Phase C dip events in IRQ1 handler Antoniu Miclaus iio: adc: ade9000: fix overlapping scan_index for current and voltage channels Linmao Li iio: adc: ade9000: fix NULL pointer dereference in clkout registration Fan Wu iio: adc: ad_sigma_delta: fix use-after-free on unbind Marcelo Schmitt iio: adc: ad7173: Fix digital filter configuration Salah Triki iio: adc: ad4030: fix invalid oversampling_ratio validation Salah Triki iio: accel: sca3000: fix frequency divider condition check Jiale Yao iio: accel: kxcjk-1013: reject duplicate event disable Matti Vaittinen iio: accel: kionix-kx022a: Prevent memory leak and fix state Frank Sorenson smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races Paulo Alcantara smb: client: require stable pages for signed connections Paulo Alcantara smb: client: drain and invalidate before server-side copy/clone Paulo Alcantara smb: client: distinguish real EOF from a stale remote_i_size on read Paulo Alcantara smb: client: flush dirty data before zeroing a range Paulo Alcantara smb: client: only require read lease for size-extending zero range Paulo Alcantara smb: client: flush and commit data before querying allocated ranges Paulo Alcantara smb: client: discard post-EOF pagecache when extending a file via clone range Paulo Alcantara smb: client: discard post-EOF pagecache when extending a file via copy range Paulo Alcantara smb: client: discard post-EOF pagecache when extending a file via zero range Daehyeon Ko <4ncienth@gmail.com> thunderbolt: Reject oversized XDomain properties responses Kurt Lieber thunderbolt: Disable CL states for the Anker Prime TB5 dock Fedor Pchelkin thunderbolt: Fix NULL dereference in tb_remove_work() Sven Peter thunderbolt: Don't access a DP tunnel after its DPRX read was canceled Sven Peter thunderbolt: Fix domain reference leak when DPRX read is canceled Sven Peter thunderbolt: Tear down inactive DP tunnels when the domain is stopped Sven Peter thunderbolt: Mark discovered tunnels as active Sven Peter thunderbolt: Make the DP tunnel activation callback mandatory Sven Peter thunderbolt: Hold a router reference for each allocated HopID Mika Westerberg thunderbolt: Fix KASAN reported use-after-free when request is canceled Ian Lin USB: serial: option: add Compal EXC-T1 support Sebastian Sjoholm USB: serial: option: add Quectel RG660QB Ian Lin USB: serial: option: add Compal EXM-G1x support Carlo Szelinsky USB: serial: option: add Quectel EG060W Zhao Dongdong USB: serial: option: add support for SIMCom SIM8260C Johan Hovold USB: serial: fix ioctl hangup race Johan Hovold USB: serial: fix driver deregistration order Johan Hovold USB: serial: fix dynamic id driver deregistration race Johan Hovold USB: serial: ssu100: fix baud rate overflow Johan Hovold USB: serial: quatech2: fix baud rate overflow Jérémy Carrat USB: serial: cp210x: add Corsair AX1500i Power Supply Yuqi Xu wifi: mac80211: handle empty FILS association request payload Zihan Xi wifi: mac80211: fix mesh fast xmit path deletion UAF Felix Fietkau wifi: mac80211: set info->band for 802.3 encap offload frames Zhao Li wifi: mac80211: release mesh path quota on failed additions Ruide Cao wifi: mac80211: reject invalid 320 MHz CSA bandwidth Yuqi Xu wifi: mac80211: minstrel_ht: validate fixed rate index Zhao Li wifi: mac80211: keep fallback association elements alive Zhao Li wifi: mac80211: account proxy paths against the mesh path limit Zhao Li wifi: mac80211: drain PS delivery work during station teardown Zhao Li wifi: mac80211: shut down RX BA session timer on teardown Zhiling Zou wifi: mac80211: keep paired old chanctx alive Zhiling Zou wifi: mac80211: count only matching reservations in reserved switch Guangshuo Li wifi: iwlegacy: 3945: free EEPROM data on remove Tianchu Chen wifi: cw1200: fix TX padding OOB read leaking heap data to device Stanislaw Gruszka wifi: cfg80211: fix RTS threshold setting for single-radio PHY Mostafa Saleh KVM: arm64: Use stage-1 leaf size for VM_PFNMAP Marc Zyngier KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor Marc Zyngier KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq Marc Zyngier KVM: arm64: vgic: Allow last_lr_irq to be NULL when LRs are not overflowing Fuad Tabba KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT Fuad Tabba KVM: arm64: Clear HCR_EL2.RW for 32-bit non-protected vCPUs Sean Christopherson KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded Sean Christopherson KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN Sean Christopherson KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted Sean Christopherson KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy Sean Christopherson KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state Sean Christopherson KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it Sean Christopherson KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified Sagnik Sasmal mtd: spinand: Do not update the QE bit on devices without one Nuno Sá mtd: spinand: fix zero oobavail when no ECC engine is used Nuno Sá mtd: spinand: fix NULL pointer dereference with no ECC engine Han Xu mtd: spinand: Enable QE on all dies Runyu Xiao mtd: spi-nor: core: Fix mutex leak in spi_nor_rww_start_exclusive() Mehmet Fide mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB Runyu Xiao mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ Menachem Adin mtd: mtd_intel_dg: reset poll counter for each erase Pei Xiao mtd: block2mtd: Fix divide error when erase_size is zero Guixin Liu nvmet: copy the hostid into the ctrl before creating PR pc_refs Daehyeon Ko <4ncienth@gmail.com> nvmet: pci-epf: reject too-short SGL segments Weiming Shi nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() Bean Huo nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT Daehyeon Ko <4ncienth@gmail.com> nvme-multipath: fix underflow in ANA log bounds checks Guixin Liu nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known Jiangshan Yi tpm: fix off-by-four bounds check in tpm2_get_random() Mikhail Gavrilov x86/mm: Drop unnecessary PMD page copy when freeing Laurent Wandrebeck x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h Chandrashekar Devegowda Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() Chandrashekar Devegowda Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() Chandrashekar Devegowda Bluetooth: btintel: fix buffer over-read in btintel_hw_error() Chengfeng Ye Bluetooth: hci_core: Serialize fragmented ISO packet queueing Chengfeng Ye Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown Chengfeng Ye Bluetooth: hci_core: Serialize ACL scheduling with channel deletion Linmao Li Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems Chengfeng Ye Bluetooth: hci_conn: Lock parent access during enhanced SCO setup Chengfeng Ye Bluetooth: hci_sync: Fix inquiry cache use-after-free Chengfeng Ye Bluetooth: Serialize SMP remote OOB data access Chengfeng Ye Bluetooth: RFCOMM: Fix initial port reference race Abdurrahman Hussain i2c: xiic: don't clobber msg->len to signal block-read completion Abdurrahman Hussain i2c: xiic: defer RX_FULL until all trailing bytes are in FIFO Abdurrahman Hussain i2c: xiic: preserve PEC byte length in SMBus block read setup Rounak Das EDAC/altera: Fix device node reference leaks in the SDMMC ECC setup Dinh Nguyen EDAC/altera: Fix use-after-free in error paths Dinh Nguyen EDAC/altera: Fix memory leak on dci allocation failure Dinh Nguyen EDAC/altera: Drop __init from ECC setup paths for re-probe safety Dinh Nguyen EDAC/altera: Do not allow driver unbinding Guangshuo Li EDAC/versalnet: Drop remote processor handle refcount on driver removal Jakub Gawlik ALSA: hda/realtek: Add micmute LED quirk for Acer Swift SFG16-72 Yu-Hsiang Tseng ALSA: hda/realtek: Fix silent speaker on Higole F9B Zhang Heng ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR Xiang Mei ALSA: ua101: reject mismatched capture/playback packet sizes Kyle Zeng ALSA: seq: Serialize compat port-info ioctls Aaron Kling ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 Zimeng Li ASoC: qcom: lpass-cpu: use DAI table index for playback constraints Jiangshan Yi ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type Jiangshan Yi ASoC: codecs: max98363: fix uninitialized stream_config->type Liviu Nicoara ASoC: codecs: lpass-wsa-macro: rewrite the interpolator volume after enabling clocks Andrea Parri arm64: mm: Fix the break-before-make flush range for erratum 2645198 Mark Rutland arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems Paul Mbewe serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL Paul Mbewe serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around Wentao Liang serial: vt8500: Fix clock reference leak in vt8500_serial_probe() Simon Gassner serial: tegra: don't clear the Tx FIFO on an Rx-only reset Wentao Liang serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() Johan Hovold serial: fix TIOCMIWAIT race Johan Hovold serial: fix ioctl hangup race Johan Hovold serial: revert guards in uart_wait_modem_status() Ruslan Valiyev serial: core: fix NULL pointer dereference in serial_core_unregister_port() Johan Hovold serial: abort TIOCMIWAIT on hangup Kendall Willis serial: 8250_omap: fix wake irq cleared during suspend Fan Wu serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() Ian Rogers perf: Replace perf_event_header__init_id with full header init Fan Wu tty: serial: max3100: shut down timer before freeing port Johan Hovold tty: fix saved termios reset race Johan Hovold tty: abort break signalling on hangup Viken Dadhaniya tty: serial: qcom_geni_serial: Keep console RX functional after deep idle Johan Hovold tty: port: fix tty_port_tty_vhangup() race Johan Hovold tty: tty_port: restore TTY_IO_ERROR on activation failure Daniel Starke tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2 Joshua Rogers tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup Joshua Rogers tty: vcc: zero-initialize control packet in vcc_send_ctl() Johan Hovold tty: amiserial: fix broken TIOCMIWAIT Mingyu Wang <25181214217@stu.xidian.edu.cn> tty: vt: fix memory leak in vc_allocate() Jie Deng usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe Fan Wu usb: cdns3: fix use-after-free in cdns3_gadget_exit() Jameson Thies usb: typec: ucsi: displayport: Current CAM OOB index fixup Prashanth K usb: typec: ucsi: Get the connector fwnode based on reg value Pannarat Wiriyaarritham usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41 Fan Wu usb: typec: ucsi: glink: fix use-after-free of ucsi on remove Radhey Shyam Pandey usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() Radhey Shyam Pandey usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() Marian Rotariu usb: typec: tipd: don't send GAID when probe fails in APP mode Amit Sunil Dhamne usb: typec: tcpm: recover after failure to start the frs ams Runyu Xiao USB: dwc2: shut down wakeup timer before freeing HCD state Hui Peng usb: core: clear both ep_in and ep_out for non-ep0 control endpoints Myeonghun Pak usb: chipidea: tegra: disable runtime PM on resume failure Yuchao Zhang usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC Alan Stern USB: gadget: dummy-hcd: Fix wait for outstanding request completions Fan Wu usb: gadget: aspeed-vhub: cancel wake work on device removal Jiazi Liu usb: dwc3: gadget: fix IRQ storm on invalid event buffer count Radhey Shyam Pandey usb: dwc3: am62: Fix runtime PM usage count leak on probe error path Marek Maslanka usb: typec: port-mapper: Only match USB4 port if host interface is available Linkai Gong usb: typec: anx7411 - stop the IRQ before destroying the workqueue Liu Chao usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd Takashi Iwai usb: gadget: midi2: Fix the jack descriptor array sizes Myeonghun Pak usb: ohci-st: disable controller wakeup on removal Myeonghun Pak usb: ohci-spear: disable controller wakeup on removal Myeonghun Pak usb: ohci-s3c2410: disable controller wakeup on removal Myeonghun Pak usb: ohci-da8xx: disable controller wakeup on cleanup Orgad Shaneh usb: octeon-hcd: fix the FIFO-flush timeout computation Lovekesh Solanki usb: hub: use shorter 120ms post resume hold for SS root hubs Syed Labeeq Sajid Bukhari usb: storage: sierra_ms: reject short SWoC info transfers Johan Hovold USB: serial: fix port tear down use-after-free Yuchao Zhang USB: cdc-acm: skip URB restart in port_shutdown if disconnected Johan Hovold USB: cdc-acm: fix racy TIOCMIWAIT implementation Viken Dadhaniya soc: qcom: geni-se: Correct QUP Core ICC vote constants Alice Ryhl rust_binder: reschedule node refcount update on thread exit Alice Ryhl rust_binder: cancel deferred work items in thread exit Yuxiao Wang nitro_enclaves: fix use-after-free on SLOT_ALLOC failure Raphaël Larocque Input: synaptics - limit T440p InterTouch quirk to LEN0036 Lovekesh Solanki Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 David Heidelberg Input: s6sy761 - fix resume ordering and restore sensing Lovekesh Solanki Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 Martino Papero Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 Wentao Liang kgdboc: Fix tty driver reference leak in configure_kgdboc() Karl Mehltretter hrtimer: Use the mask to clear TIF_HRTIMER_REARM from the exit work Troy Mitchell clk: spacemit: k3: add CPU PLL rate tables Peiyang He binderfs: fix UAF write in binder_add_device Tomer Pomeranc binder: fix leaked fd fixups on TF_UPDATE_TXN supersede Tomer Pomeranc binder: fix is_failure flag for superseded transaction cleanup Theo Andersen Carton drm/amdgpu: skip the noirq suspend reset for a switcheroo-parked GPU Guangshuo Li drm/amdgpu: fix ACP MFD device leak on init failure Alex Deucher drm/amdgpu: drop userq callback assignment for sdma 7.1 Pierre-Eric Pelloux-Prayer drm/amdgpu: implement workaround for sdma dcc corruption Guangshuo Li drm/amdgpu: fix IP instance memory leak on kobject add failure Wentao Liang drm/mediatek: Fix pdev reference leak in mtk_drm_bind() Guangshuo Li drm/mediatek: Fix ovl adaptor platform device leak Haojie Li drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device Imre Kaloz drm/radeon: Read the VRAM VBIOS signature with readb() Mitul Golani drm/i915/vrr: Disable DC balance by default Alex Deucher drm/amdgpu/gmc12: properly pass flush_type to gmc_v12_0_flush_vm_hub() Alex Deucher drm/amdgpu/gmc12.1: properly pass flush_type to gmc_v12_1_flush_vm_hub() Willian Oliveira drm/amdgpu/gfx6: fix firmware leak on teardown Timur Kristóf drm/amd/pm/si: Fix updating clock limits on AC/DC Timur Kristóf drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC Timur Kristóf drm/amd/display: Mark DCE 6.4 as not APU Simon Polack drm/amd/display: Fix stale replay_events after mod_power stream removal Timur Kristóf drm/amd/display: Fix fast updates on DCE 8.1 Timur Kristóf drm/amd/display: Fix fast updates on DCE 6.x Jiangshan Yi drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend Arthur Heymans drm/amd/display: Preserve eDP mode on initial ASSR failure Hari Mishal drm/amd/display: guard dc_sink dereferences in MST mode validation Nikola Prica PCI: Accept AtomicOps already enabled by the hypervisor Ömer Mete Kaya bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch() Chris Mason futex: Fix private hash use-after-free on resize Wentao Liang drm/mediatek: Fix runtime PM leak in mtk_hdmi_ddc_v2_probe() Alexei Starovoitov bpf: Fix objects stuck in free_by_rcu_ttrace Alexei Starovoitov bpf: Factor out __do_call_rcu_ttrace() Richard Fitzgerald spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260 Takashi Iwai ALSA: ice1712: Fix the error handling via auto-cleanup at probe Takashi Iwai ALSA: core: Define auto-cleanup for snd_card_free() Luo Gengkun perf: Fix race between perf_event_exit_task() and perf_pending_task() Hongjian Dai i2c: at91: release DMA channels when probe defers Lorenzo Bianconi net: mvneta: clear XDP pfmemalloc flag between frames Eric Dumazet ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() Prathamesh Deshpande net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference Quentin Freimanis net: sparx5: make ports inherit the switch base mac address type Yuho Choi of: Put coreboot node after compatibility check Harshit Mogalapalli net: microchip: vcap: stop scanning after deleting key field Pablo Neira Ayuso netfilter: flowtable: generalize pending status bit Fernando Fernandez Mancera netfilter: bpf: reject invalid NAT manipulation types Julian Anastasov ipvs: filter some flags received in the backup server Julian Anastasov ipvs: do not create invisible templates Julian Anastasov ipvs: fix missing counter decrement in lblc Jeff Jo tcp: refresh TS.Recent for accepted old ACKs Quentin Freimanis net: sparx5: skip ptp deinit if init was skipped Yongzhao Chen net: phy: qcom: at803x: Fix IPQ5018 short-cable DAC values Sandeep Haemoon net: ethernet: mtk_eth_soc: allocate dummy netdev sooner Jamal Hadi Salim net: cap skb->queue_mapping when the tx queue is picked Nicolai Buchwitz net: bcmgenet: fix NULL dereference in set_coalesce before first open Yoshihisa Yamamoto net: pcs: rzn1-miic: Clear MIIC protection state before unprotect sequence Niklas Cassel virtio_blk: set the zone write granularity Takashi Iwai ALSA: usb-audio: Apply boot quirk for Behringer models generically Sebastian Dalfuß ALSA: usb-audio: Add boot quirk for Behringer CM1A Jamal Hadi Salim net/sched: sch_codel: match the no-drop threshold to the packet size Jamal Hadi Salim net/sched: fq_codel: match the no-drop threshold to the packet size Hannu Varjoranta gve: DQO: accept TSO packets with non-protocol gso_type bits Florent Revest (Anthropic) bpf: Skip detached progs in trampoline images that are still in use Florent Revest (Anthropic) bpf: Wait for an RCU tasks grace period before freeing trampoline progs Eric Dumazet net: restrict SO_RESERVE_MEM to TCP sockets and cap max value Nicolai Buchwitz net: ethtool: let tsconfig reach a PHY-only timestamp provider Andrea Mayer seg6: ensure packet data is writable before modifying SRH and IPv6 DA Lorenzo Bianconi net: stmmac: fix rx Scatter-Gather support Mina Almasry net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() Jérémy Jean tipc: prevent GCM nonce reuse on peer key changes Baha Mesleh octeontx2-af: mcs: Fix SC resource cleanup loop Geetha sowjanya octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled Anirudh Virdi net/mlx5: Fix slab-out-of-bounds when handling team device events Florian Fainelli net: systemport: Fix RUNT MIB counter register offset calculation Florian Fainelli net: systemport: Fix buffer overflow in bcm_sysport_get_stats() Julien Stephan drm/mediatek: mtk_hdmi_v2: fix VID_DOWNSAMPLE_CONFIG register offset Nguyen Ngoc Thang Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister Marcin Bernatowicz drm/xe/pf: Keep VF LMEM BAR size low if no VFs enabled Michal Wajdeczko drm/xe/pf: Refactor VF LMEM BAR resize helper function Kailang Yang ALSA: hda/realtek - Add headset mode for Dell Pro QC1255 Cen Zhang (Microsoft) wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() Florian Westphal netfilter: ipset: do not update comments from kernel-side adds Qishuai Liu ipv6: fix prefix route expiry in modify_prefix_route() Nicolai Buchwitz net: bcmgenet: allocate RX buffers as page fragments Jamal Hadi Salim net/sched: cls_api: reclaim an empty proto on the error path Binbin Deng <18983559317@163.com> net/mctp: publish the mctp_dev only after it is initialised Kumar Kartikeya Dwivedi bpf: Hold map BTF for the memory allocator destructor record Yao Sang nvme: fix command effects log lifetime for multipath heads Arnd Bergmann nvme: work around -Wformat-security warning John Garry nvme: fix cdev lifetime John Garry nvme: add nvme_get_ns_head() Vineet Gupta ARC: arch_cmpxchg_relaxed to use size of pointed type not pointer Alexei Starovoitov bpf: Fix overflow of jump offset in constant blinding Arnd Bergmann drbd: remove unused drbd_nl_mcgrps[] array Maciej Strozek ASoC: SDCA: Add better pm_runtime error handling in func probe Maciej Strozek ASoC: SDCA: Set suspended flag after resuming within system suspend Oleg Keri arm64: topology: fix arch_freq_get_on_cpu() overflow above 4.19 GHz Harry Yoo (Meta) mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() Harry Yoo (Oracle) mm/slab: handle the !allow_spin case in kfree_rcu_sheaf() Sai Teja Aluvala Bluetooth: btintel: validate DDC record lengths Sang-Hoon Choi Bluetooth: hci_core: free the HCI ID if naming fails Keith Busch blk-mq: set RQF_USE_SCHED when the operation is known Yang Xiuwei block: reject polled dio with user integrity metadata Cezary Rojewski ASoC: codecs: rt274: Fix format setting for 44100 rate Cezary Rojewski ASoC: codecs: rt286: Revert delay value for jack setup Felix Fietkau wifi: mac80211: prevent AP VLAN tx from other interfaces Zhao Li wifi: cfg80211: preserve hidden-group beacon IE ownership Yuqi Xu wifi: mac80211: validate TX status rate metadata Manush Prajwal rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() Aamir Ahmed rtc: ac100: Fix clock provider use-after-free on probe failure Liu Dalin rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak Georgios Karantzas wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE Pengpeng Hou wifi: ath9k: reject short WMI command responses Toke Høiland-Jørgensen wifi: ath9k: Clean up device initialisation guards Nicolas Escande wifi: ath11k: reset ar->num_stations on hardware start Yuchao Zhang wifi: mac80211: drop oversized fragments to avoid extra_len overflow Sheetal ASoC: tegra: Fix ASRC Stream6 input threshold control Aamir Ahmed wifi: wfx: validate MIB read length before copying to caller HyeongJun An ASoC: wm8903: Move the DRC QR threshold to the register that holds it Abdurrahman Hussain of/overlay: don't create "//" paths for fragments targeting the root Abdurrahman Hussain of/overlay: don't leak fragment references when changeset init fails Karl Mehltretter random: fix vgetrandom_opaque_params kernel-doc Hao Zhang blk-cgroup: save IRQ state in blkg_tryget_closest() Julian Sun nvmet: preserve device path on allocation failure Karl Mehltretter mtd: core: call _get_device() with the master MTD Karl Mehltretter mtd: core: avoid double-free of OTP NVMEM device Matti Vaittinen iio: accel: kionix-kx022a: Fix array boundary check Matti Vaittinen iio: light: rohm-bu27034: Fix error return Matti Vaittinen iio: dac: rohm-bd79703: Do not allow writing SCALE Alberto Garcia ext4: don't enable large folios on encrypted inodes Xiang Mei ALSA: line6: reject oversized playback packets Harin Lee ALSA: ctxfi: Fix silent playback on Titanium HD (SB1270) Nguyen Ngoc Thang ALSA: caiaq: unregister the input device when probe fails Wentao Liang wifi: wlcore: Fix runtime PM leak in wlcore_remove() Zizhi Wo vt: skip screen update for DEC alignment test on backgroup consoles Hui Peng vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() Yi Yang vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF Baolin Wang mm: shmem: ignore sysfs configs for shmem forced collapse Lorenzo Stoakes (ARM) mm/vma: predicate setting mmap_prepare VMA fields on new vma alloc SJ Park mm/damon/core: don't skip damos_adjust_quota() while esz is not zero Zhichen Wang virt: vmgenid: set driver_data before registering notification handlers Vitaly Kuznetsov virt: vmgenid: remap memory as decrypted Hao Ge module: fix lost error code from codetag_load_module() Paulo Alcantara netfs: zero the tail of a short DIO/unbuffered read Paulo Alcantara netfs: zero gaps in read-gaps folio to avoid writing back stale data Paulo Alcantara netfs: clear post-EOF pagecache when extending a file via write Surendran Kanagaraj tpm: Disable TPM on null key name mismatch Zhan Xusheng time/jiffies: Saturate in mult_hz() instead of wrapping Zhan Xusheng sysctl: Negate before converting in the int read path Jun Yang sctp: check RCV_SHUTDOWN after the sendmsg connect wait Runyu Xiao rtc: spear: initialize IRQ state before requesting alarm IRQ Aamir Ahmed rtc: ac100: Assign .num before accessing .hws Nathan Chancellor random: vDSO: avoid call to memset() when zeroing reserved parameter Oleksij Rempel r8169: disable EEE on RTL8168h/8111h Xuanqiang Luo pfcp: fix socket lifetime on netdevice registration failure Ilkka Lappeteläinen net/packet: prevent TX_RING byte count overflow Aohan Mei netfilter: nft_flow_offload: drop flowtable reference on init error path Bartosz Golaszewski net: phy: aquantia: fix system interface type not updated in forced mode Alireza Asgari net: fix checksum offsets in skb_splice_from_iter() Willem de Bruijn net: extend IPv6 exthdr detection of tunneled packets Zihan Xi net: gso: limit recursive IP-in-IP segmentation Abdurrahman Hussain of/overlay: only treat a positive changeset id as registered Abdurrahman Hussain of/overlay: put property on deadprops only after changeset add succeeds Wentao Liang of/irq: Fix remaining refcount leaks in of_irq_init() Jari Seppälä octeontx2-pf: Fix RSS indirection table size Leon Hwang kprobes: Skip disarmed probes when checking optkprobe overlap Andrey Ryabinin kasan: unpoison task stack below watermark only in generic mode Zhiling Zou ipvs: bound LBLCR and LBLC cache growth Jens Axboe io_uring: fix task_work add use-after-free with SQPOLL Junyuan Feng io_uring/zcrx: requeue multishot receives stopped by a local resource lollipopkit io_uring/cmd_net: end TX_TIMESTAMP multishot when the CQ is full Aldo Ariel Panzardo HID: multitouch: stop the release timer from being rearmed on remove Benjamin Tissoires HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request Masami Hiramatsu (Google) fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() Mohamad Raizudeen crypto: x86/aes-gcm - fix always true check for last AAD segment Jérémy Jean audit: fix exe mark UAF in kill_rules() Takashi Iwai ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices Sean Christopherson KVM: x86: Fill kvm_run exit fields in common get_nested_state_pages() error paths Tibor Harcsa Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table Richard Fitzgerald ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture Sean Christopherson KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails Tejun Heo sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task fangqiurong sched_ext: Don't run ops.dequeue() with a DSQ lock held Tejun Heo sched_ext: Add a size argument to scx_bpf_cid_topo() so struct scx_cid_topo can grow Tejun Heo sched_ext: Build the cid tables privately and publish them with RCU Chen Yu sched/cache: Skip kernel threads for cache aware scheduling to rubustify the code Tim Chen sched/cache: Introduce task_struct->sched_cache_grp to fix UAF Lu Wang sched/cache: Honor migrate_llc_task semantics in active load balance, to fix LLC mis-scheduling bug Tim Chen sched/cache: Keep nr_pref_llc_running in the runnable domain, to fix LLC mis-scheduling bug Tim Chen sched/fair: Avoid creating misfits during cache-aware balancing Joshua Hahn selftests/cgroup: account for zswap shrinker writeback Heikki Krogerus drm/xe/i2c: Keep the i2c controller always enabled Bryam Vargas dm-pcache: bound the logical key offset from persistent memory Bryam Vargas dm-pcache: reject a kset that overruns its segment ------------- Diffstat: Documentation/arch/arm64/silicon-errata.rst | 2 + Documentation/filesystems/netfs_library.rst | 26 ++ Makefile | 4 +- arch/arc/include/asm/atomic64-arcv2.h | 6 + arch/arc/include/asm/cmpxchg.h | 4 +- arch/arm64/Kconfig | 30 ++ arch/arm64/kernel/cpu_errata.c | 24 +- arch/arm64/kernel/cpufeature.c | 2 +- arch/arm64/kernel/signal.c | 34 +- arch/arm64/kernel/topology.c | 17 +- arch/arm64/kernel/vdso/Makefile | 2 +- arch/arm64/kvm/emulate-nested.c | 3 - arch/arm64/kvm/hyp/nvhe/pkvm.c | 9 + arch/arm64/kvm/mmu.c | 47 +-- arch/arm64/kvm/vgic/vgic-its.c | 12 +- arch/arm64/kvm/vgic/vgic-v2.c | 6 +- arch/arm64/kvm/vgic/vgic-v3.c | 6 +- arch/arm64/kvm/vgic/vgic.c | 21 +- arch/arm64/mm/mmu.c | 2 +- arch/arm64/net/bpf_jit_comp.c | 37 +- arch/arm64/tools/cpucaps | 2 +- arch/loongarch/net/bpf_jit.c | 60 ++-- arch/loongarch/vdso/Makefile | 1 + arch/powerpc/kernel/vdso/Makefile | 1 + arch/powerpc/net/bpf_jit_comp.c | 45 +-- arch/powerpc/perf/imc-pmu.c | 23 +- arch/riscv/kernel/vdso/Makefile | 1 + arch/riscv/net/bpf_jit_comp64.c | 56 +++- arch/s390/kernel/vdso/Makefile | 1 + arch/s390/net/bpf_jit_comp.c | 46 ++- arch/x86/crypto/aesni-intel_glue.c | 2 +- arch/x86/entry/vdso/vdso64/Makefile | 2 +- arch/x86/kernel/sys_x86_64.c | 15 +- arch/x86/kvm/mmu/mmu.c | 6 + arch/x86/kvm/svm/nested.c | 7 +- arch/x86/kvm/svm/sev.c | 46 ++- arch/x86/kvm/svm/svm.c | 38 +-- arch/x86/kvm/svm/svm.h | 1 + arch/x86/kvm/vmx/nested.c | 21 +- arch/x86/kvm/x86.c | 4 + arch/x86/mm/pgtable.c | 38 +-- arch/x86/net/bpf_jit_comp.c | 26 +- block/blk-cgroup.c | 5 +- block/blk-mq.c | 59 ++-- block/fops.c | 5 + block/mq-deadline.c | 2 +- drivers/android/binder.c | 3 +- drivers/android/binder/node.rs | 20 +- drivers/android/binder/node/wrapper.rs | 34 +- drivers/android/binder/thread.rs | 8 +- drivers/android/binderfs.c | 3 +- drivers/block/drbd/drbd_nl_gen.c | 4 - drivers/block/virtio_blk.c | 1 + drivers/bluetooth/btintel.c | 15 +- drivers/bluetooth/btintel_pcie.c | 12 +- drivers/bluetooth/btusb.c | 2 + drivers/char/tpm/tpm2-cmd.c | 2 +- drivers/char/tpm/tpm2-sessions.c | 1 + drivers/clk/spacemit/ccu-k3.c | 92 +++++ drivers/edac/altera_edac.c | 67 ++-- drivers/edac/versalnet_edac.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 + drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 8 +- drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 9 + drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/gmc_v12_1.c | 2 +- drivers/gpu/drm/amd/amdgpu/sdma_v7_1.c | 4 - drivers/gpu/drm/amd/amdgpu/vi.c | 21 ++ drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 103 +++++- .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 6 +- drivers/gpu/drm/amd/display/dc/dc.h | 1 + .../dc/link/protocols/link_edp_panel_control.c | 4 +- .../amd/display/dc/resource/dce60/dce60_resource.c | 13 +- .../amd/display/dc/resource/dce80/dce80_resource.c | 2 + drivers/gpu/drm/amd/display/modules/power/power.c | 2 + drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 39 +-- .../gpu/drm/i915/display/intel_display_params.c | 4 + .../gpu/drm/i915/display/intel_display_params.h | 1 + drivers/gpu/drm/i915/display/intel_vrr.c | 4 +- drivers/gpu/drm/mediatek/mtk_drm_drv.c | 17 +- drivers/gpu/drm/mediatek/mtk_hdmi_ddc_v2.c | 4 +- drivers/gpu/drm/mediatek/mtk_hdmi_regs_v2.h | 2 +- drivers/gpu/drm/radeon/radeon_bios.c | 6 +- drivers/gpu/drm/xe/xe_i2c.c | 49 ++- drivers/gpu/drm/xe/xe_i2c.h | 1 + drivers/gpu/drm/xe/xe_pci_sriov.c | 30 +- drivers/hid/bpf/hid_bpf_dispatch.c | 2 +- drivers/hid/hid-multitouch.c | 2 +- drivers/i2c/busses/i2c-at91-master.c | 8 +- drivers/i2c/busses/i2c-xiic.c | 61 +++- drivers/iio/accel/kionix-kx022a.c | 30 +- drivers/iio/accel/kxcjk-1013.c | 2 +- drivers/iio/accel/sca3000.c | 2 +- drivers/iio/adc/ad4030.c | 11 +- drivers/iio/adc/ad7173.c | 4 +- drivers/iio/adc/ad_sigma_delta.c | 31 +- drivers/iio/adc/ade9000.c | 36 +- drivers/iio/adc/adi-axi-adc.c | 4 + drivers/iio/adc/aspeed_adc.c | 4 +- drivers/iio/adc/axp288_adc.c | 8 + drivers/iio/adc/max1363.c | 8 + drivers/iio/adc/pac1934.c | 4 + drivers/iio/adc/rohm-bd79124.c | 20 +- drivers/iio/adc/stm32-adc.c | 47 +-- drivers/iio/adc/sun4i-gpadc-iio.c | 10 +- drivers/iio/adc/xilinx-xadc-core.c | 9 +- drivers/iio/buffer/industrialio-buffer-dmaengine.c | 16 +- drivers/iio/cdc/ad7150.c | 8 +- drivers/iio/dac/rohm-bd79703.c | 3 + drivers/iio/frequency/adf4377.c | 4 +- drivers/iio/frequency/admv1013.c | 9 +- drivers/iio/gyro/adis16136.c | 2 +- drivers/iio/health/max30102.c | 12 +- drivers/iio/imu/adis16400.c | 2 +- drivers/iio/imu/adis16480.c | 4 +- drivers/iio/industrialio-buffer.c | 7 +- drivers/iio/industrialio-trigger.c | 2 + drivers/iio/light/gp2ap020a00f.c | 2 + drivers/iio/light/rohm-bu27034.c | 62 ++-- drivers/iio/pressure/bmp280-core.c | 2 +- drivers/iio/pressure/rohm-bm1390.c | 2 +- drivers/iio/proximity/aw96103.c | 30 +- drivers/iio/proximity/isl29501.c | 2 +- drivers/iio/proximity/pulsedlight-lidar-lite-v2.c | 4 +- drivers/iio/proximity/sx9324.c | 2 +- drivers/iio/proximity/vcnl3020.c | 24 +- drivers/iio/proximity/vl53l0x-i2c.c | 3 + drivers/input/keyboard/atkbd.c | 8 + drivers/input/mouse/synaptics.c | 7 +- drivers/input/serio/i8042-acpipnpio.h | 9 + drivers/input/touchscreen/s6sy761.c | 14 +- drivers/md/dm-pcache/cache_gc.c | 5 + drivers/md/dm-pcache/cache_key.c | 14 + drivers/md/dm-pcache/cache_writeback.c | 5 + drivers/mtd/devices/block2mtd.c | 2 +- drivers/mtd/devices/mtd_intel_dg.c | 3 +- drivers/mtd/mtdcore.c | 3 +- drivers/mtd/nand/ecc.c | 7 + drivers/mtd/nand/raw/cadence-nand-controller.c | 6 +- drivers/mtd/nand/raw/vf610_nfc.c | 85 ++++- drivers/mtd/nand/spi/core.c | 53 ++- drivers/mtd/spi-nor/core.c | 2 +- drivers/net/ethernet/broadcom/bcmsysport.c | 8 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 34 +- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 2 + drivers/net/ethernet/google/gve/gve_tx_dqo.c | 14 +- drivers/net/ethernet/marvell/mvneta.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 4 +- drivers/net/ethernet/marvell/octeontx2/nic/cn20k.c | 11 +- .../ethernet/marvell/octeontx2/nic/otx2_common.c | 18 +- .../ethernet/marvell/octeontx2/nic/otx2_common.h | 9 + drivers/net/ethernet/mediatek/mtk_eth_soc.c | 38 ++- drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 10 +- .../net/ethernet/microchip/sparx5/sparx5_main.c | 1 + .../net/ethernet/microchip/sparx5/sparx5_main.h | 1 + .../net/ethernet/microchip/sparx5/sparx5_netdev.c | 1 + drivers/net/ethernet/microchip/sparx5/sparx5_ptp.c | 3 + drivers/net/ethernet/microchip/vcap/vcap_api.c | 2 +- drivers/net/ethernet/realtek/r8169_main.c | 6 + drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 83 +++-- drivers/net/pcs/pcs-rzn1-miic.c | 3 + drivers/net/pfcp.c | 3 + drivers/net/phy/aquantia/aquantia_main.c | 5 +- drivers/net/phy/qcom/at803x.c | 8 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/wireless/ath/ath11k/mac.c | 1 + drivers/net/wireless/ath/ath9k/hif_usb.c | 21 +- drivers/net/wireless/ath/ath9k/htc.h | 1 - drivers/net/wireless/ath/ath9k/htc_drv_init.c | 7 +- drivers/net/wireless/ath/ath9k/htc_drv_txrx.c | 8 +- drivers/net/wireless/ath/ath9k/wmi.c | 28 +- drivers/net/wireless/ath/ath9k/wmi.h | 1 + drivers/net/wireless/intel/iwlegacy/3945-mac.c | 1 + drivers/net/wireless/silabs/wfx/hif_tx.c | 4 +- drivers/net/wireless/st/cw1200/bh.c | 8 +- drivers/net/wireless/st/cw1200/txrx.c | 14 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/xen-netfront.c | 12 +- drivers/nvme/host/core.c | 74 ++-- drivers/nvme/host/multipath.c | 43 +-- drivers/nvme/host/nvme.h | 10 +- drivers/nvme/host/pci.c | 2 + drivers/nvme/target/configfs.c | 9 +- drivers/nvme/target/core.c | 5 +- drivers/nvme/target/fabrics-cmd-auth.c | 2 +- drivers/nvme/target/pci-epf.c | 3 + drivers/of/base.c | 10 +- drivers/of/irq.c | 2 + drivers/of/overlay.c | 17 +- drivers/pci/pci.c | 15 +- drivers/rtc/dev.c | 2 +- drivers/rtc/rtc-ac100.c | 39 +-- drivers/rtc/rtc-mpfs.c | 6 +- drivers/rtc/rtc-spear.c | 11 +- drivers/spi/spi-cs42l43.c | 97 ++++++ drivers/staging/greybus/uart.c | 3 +- drivers/thunderbolt/ctl.c | 63 ++-- drivers/thunderbolt/quirks.c | 3 + drivers/thunderbolt/switch.c | 9 +- drivers/thunderbolt/tb.c | 37 +- drivers/thunderbolt/test.c | 58 +++- drivers/thunderbolt/tunnel.c | 73 ++-- drivers/thunderbolt/tunnel.h | 8 +- drivers/thunderbolt/xdomain.c | 4 + drivers/tty/amiserial.c | 9 +- drivers/tty/n_gsm.c | 47 +-- drivers/tty/serial/8250/8250_bcm7271.c | 2 +- drivers/tty/serial/8250/8250_omap.c | 15 +- drivers/tty/serial/kgdboc.c | 9 + drivers/tty/serial/ma35d1_serial.c | 6 +- drivers/tty/serial/max3100.c | 13 +- drivers/tty/serial/qcom_geni_serial.c | 5 +- drivers/tty/serial/sc16is7xx.c | 53 ++- drivers/tty/serial/serial-tegra.c | 18 +- drivers/tty/serial/serial_core.c | 76 +++-- drivers/tty/serial/vt8500_serial.c | 1 + drivers/tty/tty_io.c | 54 ++- drivers/tty/tty_port.c | 91 +++-- drivers/tty/vcc.c | 5 +- drivers/tty/vt/selection.c | 4 +- drivers/tty/vt/vc_screen.c | 23 +- drivers/tty/vt/vt.c | 5 +- drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/cdns3/cdns3-pci-wrap.c | 5 + drivers/usb/chipidea/ci_hdrc_tegra.c | 4 +- drivers/usb/class/cdc-acm.c | 41 ++- drivers/usb/class/cdc-acm.h | 1 - drivers/usb/core/hub.c | 7 +- drivers/usb/core/message.c | 8 +- drivers/usb/dwc2/hcd.c | 3 +- drivers/usb/dwc3/core.h | 19 ++ drivers/usb/dwc3/dwc3-am62.c | 1 + drivers/usb/dwc3/ep0.c | 9 + drivers/usb/dwc3/gadget.c | 108 +++++- drivers/usb/gadget/function/f_fs.c | 15 +- drivers/usb/gadget/function/f_midi2.c | 4 +- drivers/usb/gadget/function/f_uac1_legacy.c | 6 + drivers/usb/gadget/udc/aspeed-vhub/core.c | 4 + drivers/usb/gadget/udc/aspeed-vhub/dev.c | 2 +- drivers/usb/gadget/udc/aspeed-vhub/hub.c | 5 +- drivers/usb/gadget/udc/aspeed-vhub/vhub.h | 1 + drivers/usb/gadget/udc/dummy_hcd.c | 4 + drivers/usb/host/octeon-hcd.c | 2 +- drivers/usb/host/ohci-da8xx.c | 2 + drivers/usb/host/ohci-s3c2410.c | 1 + drivers/usb/host/ohci-spear.c | 1 + drivers/usb/host/ohci-st.c | 1 + drivers/usb/serial/bus.c | 6 +- drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/generic.c | 10 +- drivers/usb/serial/option.c | 14 + drivers/usb/serial/quatech2.c | 19 +- drivers/usb/serial/ssu100.c | 18 +- drivers/usb/serial/usb-serial.c | 127 +++++-- drivers/usb/serial/xr_serial.c | 10 +- drivers/usb/storage/sierra_ms.c | 7 + drivers/usb/typec/anx7411.c | 5 +- drivers/usb/typec/port-mapper.c | 21 +- drivers/usb/typec/tcpm/tcpm.c | 2 +- drivers/usb/typec/tipd/core.c | 11 +- drivers/usb/typec/ucsi/displayport.c | 9 +- drivers/usb/typec/ucsi/ucsi.c | 17 +- drivers/usb/typec/ucsi/ucsi_acpi.c | 34 ++ drivers/usb/typec/ucsi/ucsi_glink.c | 15 +- drivers/virt/nitro_enclaves/ne_misc_dev.c | 1 + drivers/virt/vmgenid.c | 9 +- fs/exec.c | 1 + fs/ext4/inode.c | 3 +- fs/netfs/buffered_read.c | 7 + fs/netfs/buffered_write.c | 9 + fs/netfs/direct_write.c | 9 + fs/netfs/internal.h | 2 + fs/netfs/misc.c | 99 ++++++ fs/netfs/read_collect.c | 24 ++ fs/smb/client/cifsfs.c | 41 ++- fs/smb/client/cifsglob.h | 10 +- fs/smb/client/inode.c | 2 + fs/smb/client/smb2ops.c | 114 +++++-- fs/smb/client/smb2pdu.c | 10 +- include/linux/bpf.h | 45 ++- include/linux/hrtimer_rearm.h | 2 +- include/linux/mtd/nand.h | 2 + include/linux/netfilter_netdev.h | 2 +- include/linux/netfs.h | 2 + include/linux/perf_event.h | 7 +- include/linux/rtnetlink.h | 7 +- include/linux/sched.h | 14 + include/linux/skbuff.h | 2 +- include/linux/soc/qcom/geni-se.h | 15 +- include/linux/tty.h | 1 + include/linux/tty_driver.h | 6 + include/linux/tty_port.h | 22 +- include/linux/usb/serial.h | 1 + include/net/bluetooth/hci_core.h | 5 +- include/net/gso.h | 8 + include/net/netfilter/nf_flow_table.h | 2 +- include/net/sch_generic.h | 9 + include/net/xdp.h | 5 + include/sound/core.h | 9 + include/uapi/linux/random.h | 2 +- init/Kconfig | 5 + io_uring/cmd_net.c | 19 +- io_uring/io_uring.c | 4 +- io_uring/tw.c | 3 + io_uring/zcrx.c | 9 +- kernel/audit_tree.c | 36 +- kernel/bpf/core.c | 10 +- kernel/bpf/hashtab.c | 19 +- kernel/bpf/memalloc.c | 57 +++- kernel/bpf/syscall.c | 19 +- kernel/bpf/trampoline.c | 85 ++++- kernel/events/core.c | 313 ++++++++--------- kernel/events/ring_buffer.c | 7 +- kernel/exit.c | 33 +- kernel/fork.c | 2 + kernel/futex/core.c | 10 +- kernel/kprobes.c | 8 +- kernel/module/main.c | 8 +- kernel/sched/ext/cid.c | 138 +++++--- kernel/sched/ext/cid.h | 2 +- kernel/sched/ext/ext.c | 77 +++-- kernel/sched/ext/types.h | 4 + kernel/sched/fair.c | 372 ++++++++++++++++----- kernel/sysctl.c | 2 +- kernel/time/jiffies.c | 2 + kernel/trace/fprobe.c | 26 +- mm/damon/core.c | 2 +- mm/kasan/common.c | 13 +- mm/shmem.c | 7 +- mm/slab.h | 18 +- mm/slab_common.c | 2 +- mm/slub.c | 37 +- mm/vma.c | 4 +- net/bluetooth/hci_conn.c | 18 +- net/bluetooth/hci_core.c | 54 ++- net/bluetooth/hci_debugfs.c | 2 +- net/bluetooth/hci_sync.c | 19 +- net/bluetooth/rfcomm/tty.c | 7 +- net/bluetooth/smp.c | 2 + net/core/dev.c | 78 +++-- net/core/dev_ioctl.c | 3 +- net/core/gso.c | 1 + net/core/page_pool.c | 2 +- net/core/skbuff.c | 8 +- net/core/sock.c | 4 +- net/ethtool/tsconfig.c | 24 +- net/ipv4/af_inet.c | 3 + net/ipv4/tcp_input.c | 6 + net/ipv6/addrconf.c | 2 +- net/ipv6/ip6_offload.c | 4 + net/ipv6/seg6_iptunnel.c | 2 +- net/ipv6/seg6_local.c | 140 ++++++-- net/mac80211/agg-rx.c | 2 +- net/mac80211/chan.c | 50 ++- net/mac80211/drop.h | 1 + net/mac80211/fils_aead.c | 8 + net/mac80211/ieee80211_i.h | 2 +- net/mac80211/iface.c | 4 +- net/mac80211/mesh_pathtbl.c | 30 +- net/mac80211/mlme.c | 4 +- net/mac80211/rc80211_minstrel_ht.c | 89 ++++- net/mac80211/rx.c | 6 + net/mac80211/spectmgmt.c | 4 +- net/mac80211/sta_info.c | 6 +- net/mac80211/status.c | 70 ++++ net/mac80211/tx.c | 45 ++- net/mctp/device.c | 6 +- net/mptcp/protocol.c | 2 +- net/netfilter/ipset/ip_set_bitmap_gen.h | 2 +- net/netfilter/ipvs/ip_vs_conn.c | 3 + net/netfilter/ipvs/ip_vs_lblc.c | 4 + net/netfilter/ipvs/ip_vs_lblcr.c | 3 + net/netfilter/ipvs/ip_vs_sync.c | 33 +- net/netfilter/nf_flow_table_core.c | 7 +- net/netfilter/nf_flow_table_offload.c | 14 +- net/netfilter/nf_nat_bpf.c | 3 + net/netfilter/nf_nat_core.c | 5 +- net/netfilter/nft_flow_offload.c | 7 +- net/packet/af_packet.c | 3 + net/sched/act_ct.c | 2 +- net/sched/act_skbedit.c | 5 +- net/sched/cls_api.c | 15 +- net/sched/sch_codel.c | 2 +- net/sched/sch_fq_codel.c | 4 +- net/sctp/socket.c | 2 +- net/tipc/crypto.c | 20 +- net/wireless/nl80211.c | 11 +- net/wireless/scan.c | 22 +- rust/kernel/irq/request.rs | 89 +++-- sound/core/seq/seq_compat.c | 4 +- sound/hda/codecs/realtek/alc269.c | 6 +- sound/hda/controllers/tegra.c | 3 +- sound/pci/ctxfi/cthw20k2.c | 2 + sound/pci/ice1712/ice1712.c | 2 +- sound/soc/codecs/lpass-wsa-macro.c | 3 + sound/soc/codecs/max98363.c | 2 +- sound/soc/codecs/rt1017-sdca-sdw.c | 27 +- sound/soc/codecs/rt274.c | 4 +- sound/soc/codecs/rt286.c | 2 +- sound/soc/codecs/wm8903.c | 2 +- sound/soc/qcom/lpass-cpu.c | 4 +- sound/soc/sdca/sdca_class_function.c | 19 +- sound/soc/sdw_utils/soc_sdw_utils.c | 20 +- sound/soc/tegra/tegra186_asrc.c | 2 +- sound/usb/caiaq/device.c | 3 + sound/usb/line6/playback.c | 7 + sound/usb/misc/ua101.c | 9 + sound/usb/quirks.c | 29 +- tools/sched_ext/include/scx/common.bpf.h | 4 +- tools/testing/selftests/cgroup/test_zswap.c | 28 +- 413 files changed, 5137 insertions(+), 2033 deletions(-)