[SRU][Resolute][PULL v2] Resolute upstream stable patchset 2026-09-01

alice.munduruca at canonical.com alice.munduruca at canonical.com
Tue Sep 1 20:40:13 UTC 2026


This pull request (478 commits) includes the following Resolute stable patchsets:

        Resolute update: upstream stable patchset 2026-09-01
                 Ported from the following upstream stable releases:
                         v6.18.45, v6.18.46, v7.1.9, v7.1.10
        https://bugs.launchpad.net/bugs/2166029

Note also that the 'stable-next' branch head contains this and all
prior pending upstream stable releases. I recommend fetching and
applying just this reference ('stable-next') instead of each
tags/resolute-stable-* reference:

  git://git.launchpad.net/~ubuntu-kernel-stable/+git/resolute stable-next

 - Alice C. Munduruca

------------------------------------------------------------------------

The following changes since commit 760b422a9de28be4e0d0fad4a88377fb0db447a5:

  UBUNTU: Upstream stable to v6.18.44, v7.1.8 (2026-08-31 14:36:59 -0400)

are available in the Git repository at:

  git://git.launchpad.net/~ubuntu-kernel-stable/+git/resolute tags/resolute-stable-2026-09-01

for you to fetch changes up to 41a449980f5b9846564de5b973776dde68cb1ae5:

  UBUNTU: Upstream stable to v6.18.45, v6.18.46, v7.1.9, v7.1.10 (2026-09-01 16:35:20 -0400)

----------------------------------------------------------------
Aditya Chillara (1):
      perf/core: Fix group leader use-after-free after sibling detach

Aelin Reidel (1):
      nvmem: apple-spmi-nvmem: wrap regmap calls to satisfy CFI

Ahmad Byagowi (1):
      ptp: ocp: Fix board ID over-read

Ahmed Naseef (1):
      net: phy: mediatek: fix TX blink masks using the RX bits

Ajrat Makhmutov (1):
      ALSA: hda/realtek: Enable headset mic on F+ FLAPTOP r

Akhil P Oommen (1):
      arm64: dts: qcom: purwa: Fix GPU IOMMU property

Al Viro (1):
      mount: honour SB_NOUSER in the new mount API

Aleksandr Nogikh (2):
      usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()
      firewire: ohci: fix NULL pointer dereference in ar_context_release

Alex Deucher (3):
      drm/amdgpu/gmc12.1: implement tlb inv semaphore
      drm/amdgpu/gmc12.1: fix MMHUB0 check in pasid tlb flush
      drm/amdgpu: fix missing check in vm_flush()

Alexander Usyskin (1):
      mei: pull kvfree out of spinlock

Alexandra Winter (2):
      s390/ism: Fix UAF of sba and ieq during ism_dev_exit()
      net/dibs: Correct freeing of dmb_clientid_arr

Alexej Sidorenko (1):
      Bluetooth: btrtl: fix RTL8761B/BU broken LE extended scan

Alexey Velichayshiy (1):
      netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path

Ali Ahmet Memis (2):
      hwmon: (corsair-psu) serialize debugfs access against hwmon
      openrisc: signal: do not restore privileged SR bits on sigreturn

Alice C. Munduruca (1):
      UBUNTU: Upstream stable to v6.18.45, v6.18.46, v7.1.9, v7.1.10

Alice Ryhl (1):
      rust_binder: do not query current thread for all ioctls

Alok Tiwari (2):
      bnge: use int for bnge_fix_rings_count() return value
      bnge: Fix NULL pointer dereference in aux device release

Anandu Krishnan E (1):
      misc: fastrpc: fix channel ctx ref leak when session alloc fails

Andrey Albershteyn (1):
      fs,fsverity: remove check for fsverity being enabled in setattr_prepare()

Andrey Golovko (1):
      regmap: sdw-mbq: don't call an unset readable_reg callback

Andy Lutomirski (1):
      mm: fix incorrect flush address in direct page table reclaim

AngeloGioacchino Del Regno (1):
      pmdomains: mediatek: Avoid setting RTFF's CLK_DIS before NRESTORE

Anna Schumaker (2):
      NFS: Pin the 'struct nfs_server' during a FREE_STATEID call
      NFS: Decrement refcounts if allocating nfs_free_stateid_data fails

Antonio Quartulli (7):
      ovpn: skip rehash for peers already removed from by_id
      ovpn: rehash peer in by_transp_addr table on CMD_PEER_SET
      ovpn: ensure socket is owned by ovpn before deref sk_user_data
      ovpn: zero-initialize sockaddr before learning a floated endpoint
      ovpn: hash floated peer by transport identity only
      ovpn: disable IPv4 redirects on MP interfaces
      ovpn: ensure TCP vars are initialized first

Asad Kamal (1):
      drm/amdgpu: fix aperture iounmap skipped on device removal

Babanpreet Singh (1):
      counter: microchip-tcb-capture: Fix DT channel validation

Bard Liao (1):
      ASoC: SOF: topology: Use acpi mach from the machine driver

Baul Lee (8):
      ALSA: usb-audio: fix OOB write on Type II inbound URBs
      net: bridge: mrp: fix uninitialised bytes on the wire
      ALSA: usx2y: bound the hwdep mmap fault offset
      ALSA: FCP: fix OOB write in fcp_meter_ctl_get()
      ALSA: us144mkii: re-anchor capture URBs on resubmission
      net/x25: fix use-after-free of the socket by its timers
      vxlan: do not arm the ageing timer on a device that is down
      sctp: keep chunk->transport in step with the list it is queued on

Bhargava Marreddy (1):
      bnge: Fix resource leak in bnge_init_nic() error path

Binbin Zhou (1):
      mmc: loongson2: Fix sg iteration in data reorder functions

Bobby Eshleman (1):
      net/mlx5e: fix BQL reset on SQ re-activation

Breno Leitao (1):
      x86/mce: Set up the polling timer before CMCI discovery

Bryam Vargas (7):
      thunderbolt: Bound the DROM dual link port number before indexing sw->ports
      selinux: require every boolean value to be defined
      selinux: reject a class permission count below its inherited common
      selinux: do not cancel a policy conversion that never started
      selinux: reject an unclaimed class value in security_get_classes()
      selinux: reject a permission value exceeding the class permission count
      Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer

Candice Li (2):
      drm/amdgpu: reject oversized IBs with per-ring packet limits
      drm/amdgpu: validate GEM_CREATE domain combinations

Cen Zhang (Microsoft) (1):
      net/openvswitch: check Ethernet header length in key_extract()

Cengiz Can (1):
      gpio: sloppy-logic-analyzer: fix use-after-free via debugfs trigger on unbind

Chao Shi (1):
      block: stop the timeout timer when releasing a never added disk

Charles Keepax (1):
      regmap: sdw-mbq: Fix swap of timeout and retry times

Chengfeng Ye (4):
      netfilter: ebt_nflog: pin the NFLOG backend
      ipv4: fix use-after-free in fib_nhc_update_mtu()
      bpf, sockmap: Fix sk_redir use-after-free in send verdict
      bpf: Fix netns reference imbalance in conntrack kfuncs

Christian A. Ehrhardt (1):
      drm/shmem_helper: Check VMA boundaries for PMD mappings

Christian Borntraeger (1):
      vdpa/mlx5: Fix buffer length in create_direct_keys()

Christian Brauner (2):
      ovl: don't warn when the mount is completed from another user namespace
      binfmt_misc: don't warn when the mount is completed from another user namespace

Christoph Hellwig (1):
      xfs: check v5 superblock features early

Christophe Leroy (CS GROUP) (1):
      gpiolib: Check gc->get_direction() before calling gpiod_get_direction()

Chuck Lever (1):
      net/tls: Fail tls_sw_splice_read() after a failed async decrypt

Cunhao Lu (1):
      serial: 8250_dma: Clear stale RX state on shutdown

Daming Li (1):
      net: smc: fix splice entry lifetime imbalance in smc_rx_splice

Daniel Drake (1):
      arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timer

Daniele Ceraolo Spurio (1):
      drm/xe/pxp: add termination on resume

Darrick J. Wong (18):
      xfs: mark nonzero sb_gquotino as corrupt on metadir filesystems
      xfs: check cowextsize in xrep_inode_cowextsize
      xfs: fix transaction block reservation in xrep_rtbitmap
      xfs: zero i_nlink before repair puts inode on unlinked list
      xfs: only check mergeability of bnobt records
      xfs: don't double-lock when deleting a self-referential directory
      xfs: set the prev pointer when reinserting an inode on the unlinked list
      xfs: pass runtime errors from xrep_iunlink_mark_ondisk_rec up to callers
      xfs: nlink scrub must take IOLOCK before determining ILOCK state
      xfs: load next_agino from the correct xfarray in xrep_iunlink_relink_prev
      xfs: don't zap the attr fork on repair when there are queued pptr updates
      xfs: don't walk off the end of a null sc->sa.agi_bp in AGI repair
      xfs: fix allocated inodes that show up in the unlinked list
      xfs: fix another iunlink infinite loop bug in online fsck
      xfs: don't return EFSCORRUPTED when scrubbing corrupt parent pointers
      xfs: avoid UAF on sc->tempip in xrep_tempfile_create
      xfs: don't ignore runtime errors in xrep_iunlink_reload_next
      xfs: check xfarray iteration errors when committing unlinked inode lists

David Lee (1):
      btrfs: lzo: reject inline extents without valid headers

David Rosca (5):
      drm/amdgpu: Reject UVD message with invalid number of h265 refs
      drm/amdgpu: Reject UVD message with dimensions above 4096
      drm/amdgpu: Fix UVD min buffer sizes
      drm/amdgpu: Fix UVD dpb min size calculation for H264
      drm/amdgpu: Fix UVD decode image min size calculation

Dawid Wróbel (2):
      ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
      ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses

Dmitry Antipov (1):
      btrfs: fix memory leak in btrfs_do_encoded_write()

Dmitry Baryshkov (1):
      arm64: dts: qcom: sdm850-lenovo-yoga-c630: lower PSCI cluster idle

Dmitry Osipenko (1):
      pmdomain: mediatek: Fix mt8183 hang on boot

Dmitry Torokhov (8):
      Input: evdev - sanitize event type index when fetching event masks
      Input: evdev - fix information leak in evdev_pass_values()
      Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
      Input: synaptics-rmi4 - zero report size on F54 work error
      Input: synaptics-rmi4 - block s_input when F54 queue is busy
      Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue
      Input: sur40 - fix input device registration ordering
      Input: sur40 - fix V4L error path cleanup

Dongli Zhang (1):
      net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp()

Donglin Lyu (1):
      Input: atkbd - skip deactivate for HONOR ZQC-P

Doruk Tan Ozturk (2):
      net: usb: ipheth: fix carrier_work UAF on disconnect
      net/packet: reset the MAC header on the packet-socket transmit path

Eddie Lin (1):
      misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free

Eduard Zingerman (1):
      bpf: split check_reg_sane_offset() in two parts

Ekansh Gupta (2):
      misc: fastrpc: Fix initial memory allocation for Audio PD memory pool
      misc: fastrpc: Remove buffer from list prior to unmap operation

Eric Biggers (2):
      fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions
      fsverity: Fix silent truncation in bpf_get_fsverity_digest()

Eric Dumazet (7):
      netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()
      net: remove WARN_ON_ONCE() from sk_mc_loop()
      net/atm: fix slab-out-of-bounds read in vcc_setsockopt()
      ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
      macvlan: inherit needed_headroom and needed_tailroom from lowerdev
      af_packet: Don't send zero-byte data in tpacket_snd().
      l2tp: fix tunnel and session refcount leak on seq_file release

Eric Farman (10):
      s390/vfio_ccw: Free all memory if cp_init() fails
      s390/vfio_ccw: Limit the number of channel program segments
      s390/vfio_ccw: Cancel existing workqueues
      s390/vfio_ccw: Ensure index for read/write regions are within range
      s390/vfio_ccw: Ensure first IDAW remains constant
      s390/vfio_ccw: Fix out of bounds check on CCW array
      s390/vfio_ccw: Move cp cleanup out of not operational
      s390/vfio_ccw: Selectively expand io_mutex
      s390/vfio_ccw: Calculate idal length based on idaw type
      s390/vfio_ccw: Implement a crw lock

Fan Wu (3):
      serial: amba-pl011: fix indefinite RS485 post-send delay
      serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ
      serial: amba-pl011: synchronize DMA teardown

Fan XinRan (1):
      net: thunderbolt: Tear down DMA paths before stopping the rings

Fan Ye (1):
      Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"

Florian Westphal (2):
      netfilter: ipset: fix list type element drift bug
      netfilter: ipset: let destroy callbacks adjust ext mem size

Frank Sorenson (1):
      smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive()

Gang Yan (1):
      selftests: mptcp: join: mark tests with data corruption as failed

Gao Xiang (1):
      erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms

George Wilson (3):
      powerpc/pseries: pci - logic bug
      powerpc/pseries: lparcfg - fix kbuf[] underflow
      powerpc/pseries: papr-phy-attest - validate cmd.length, plug mem leak

Guanghui Yang (1):
      xfs: propagate errors from xfs_rtginode_load

Guangshuo Li (2):
      pmdomain: mediatek: fix remaining %pOF after of_node_put()
      drm/radeon: fix autosuspend cleanup during teardown

Guenter Roeck (8):
      hwmon: (pmbus_core) Use guard() for mutex protection
      hwmon: (pmbus) Fix type confusion in notification logic
      hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations
      hwmon: (ltc4282) Avoid overflow in maximum power calculation
      hwmon: (ltc4282) Clamp negative current limits
      hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvolt
      hwmon: (pmbus/core) Avoid race condition during probe
      hwmon: Support guard() and scoped_guard for subsystem locks

Haibo Chen (1):
      mmc: sdhci: make tuning_err a signed int

Hans Ulli Kroll (2):
      pinctrl: qcom: ipq806x: mark gpio as a GPIO pin function
      pinctrl: qcom: ipq806x: mark pci reset as a GPIO pin function

Harald Freudenberger (1):
      s390/zcrypt: Fix CPRB memory allocation in zcrypt misc code

Harshal Dev (1):
      dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clk

Henry Martin (1):
      net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length

Herbert Xu (1):
      crypto: ccm - Set rfc4309 maxauthsize from child

Hidayath Khan (2):
      dibs: initialise dibs->lock in dibs_dev_alloc()
      s390/qeth: validate user buffer length in SNMP and ARP query ioctls

Hongjie Fang (1):
      scsi: core: pair EH runtime PM get and put

Hongyan Xu (2):
      ata: pata_sl82c105: fix bridge revision use-after-free
      watchdog: at91sam9_wdt: prevent timer rearm during teardown

Hugh Dickins (1):
      mm/filemap: __filemap_add_folio() restore index before retrying

Hui Su (2):
      ring-buffer: Fix crash passing ERR_PTR to kthread_stop()
      tracing: Fix NULL pointer dereference in module event cache removal

HyeongJun An (1):
      Input: cs40l50-vibra - validate custom data from user space

Hyunjung Ko (2):
      net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
      net/sched: act_gact, act_police: range check the fallback control action

Ibrahim Hashimov (1):
      xfs: bounds-check buffer log item's dirty bitmap

Ishaan Dandekar (1):
      usb: quirks: Add ShanWan gamepad to quirk list

Jakub Kicinski (5):
      eth: bnxt: cancel IRQ notifier before freeing affinity mask
      eth: bnxt: keep the aRFS rmap updated when TPH is enabled
      net: rename netdev_ops_assert_locked()
      eth: bnxt: decrease indent in bnxt_request_irq()
      eth: bnxt: avoid deadlock when canceling IRQ affinity notifier

Jamal Hadi Salim (4):
      net/sched: cls_route: fix fastmap use-after-free on filter
      net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers
      net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
      net/sched: cls_bpf: reject dev-bound programs bound to a different device

Jan Sebastian Götte (1):
      serial: qcom-geni: fix TX DMA buffer flush

Jasper Wise (1):
      spi: virtio: mark device ready before registering the controller

Jesse Zhang (4):
      drm/amdgpu: fix JPEG v5.0.0 queue reset failure in DPG mode
      drm/amdgpu: fix JPEG v4.0.5 queue reset failure in DPG mode
      drm/amdgpu/userq: serialize queue map against GPU reset
      drm/amdgpu: fix JPEG v5.3.0 queue reset failure in DPG mode

Jia Jia (1):
      vhost-scsi: reject feature changes after endpoint

Jia Yao (3):
      drm/xe/guc_ads: allocate UM queues in a separate BO
      drm/xe/guc_ads: allocate UM queues in VRAM on dGFX
      drm/xe/guc_ads: use uncached mapping for UM queue BO

Jiangshan Yi (1):
      usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg

Jianing Li (1):
      Input: hynitron_cstxxx - validate touch count and finger IDs

Jiawen Liu (1):
      net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete

Jiawen Wu (1):
      net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling

Jiayuan Chen (2):
      tcp: fix TFO max_qlen accounting across reuseport migration
      tcp: fix icsk_ack.ato bitfield overflow

Jijie Shao (1):
      net: hns3: fix speed configuration residue after driver reload

John Harrison (1):
      drm/connector/hdmi: Fix out of bounds memory read

Jon Hunter (1):
      arm64: tegra: Add EL2 virtual timer interrupt for Tegra194

Jonas Köppeler (1):
      veth: fix queue index used to wake the peer txq in veth_poll

Jordan Rhee (2):
      gve: fix NULL dereference due to missing ptp adjfine
      gve: fix zero-length skb frag with header-split

Jose Fernandez (Anthropic) (1):
      bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()

Josh Poimboeuf (1):
      ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()

Joshua Rogers (2):
      vt: add permission check for KDSKBMETA ioctl
      vt: stabilize tty reference in kbd_keycode with tty_port_tty_get

Jozsef Kadlecsik (1):
      netfilter: ipset: switch ext_size to atomic64_t

Julian Anastasov (5):
      ipvs: avoid out-of-bounds write in ip_vs_nat_icmp
      ipvs: return the csum validation for forward hook
      ipvs: add totalconns for dest
      ipvs: properly update the overload flag on dest edit
      ipvs: revalidate ihl to prevent out-of-bounds access

Jun Yang (2):
      vhost: reset the vring metadata cache on vring reconfiguration
      tipc: read le->link under the node lock in tipc_node_link_down()

Junjie Cao (2):
      gpio: ml-ioh: use raw_spinlock_t for the register lock
      gpio: ml-ioh: share the register lock across channels

Junrui Luo (2):
      misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke
      drm/amdgpu: disallow multiple FENCE chunks in one submit

Jérémy Jean (3):
      tls: rx: restore msg_iter before TLS 1.3 optimistic retry
      netfilter: flowtable: publish GC-visible tuple last
      sctp: validate cookie AUTH state before use

Karl Mehltretter (2):
      pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()
      tick: Include ktime.h and jiffies.h in linux/tick.h

Karthikeyan KS (1):
      soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read

Keegan Freyhof (1):
      bnxt_en: Fix PTP PPS setting bug

Kefu Chai (1):
      libceph: tolerate addrvecs with multiple entries of the same type

Keno Fischer (1):
      futex: Prevent robust futex exit race some more

Koichiro Den (2):
      net: ntb_netdev: Introduce per-queue context
      NTB: ntb_netdev: Preserve RX queue depth on allocation failure

Krzysztof Kozlowski (1):
      arm64: dts: qcom: monaco: Add default GIC address cells

Kuba Piecuch (1):
      selftests/sched_ext: Handle sleeping task affinity changes in numa test

Kumar Kartikeya Dwivedi (1):
      rqspinlock: Reset tail when preserving queue on deadlock

Kuniyuki Iwashima (1):
      af_unix: Unlink scc_entry in unix_del_edge().

Kyle Zeng (3):
      ipvs: clear IPv4 options after rebasing tunnel ICMP errors
      ipv6: prevent in6_dev_get() from resurrecting inet6_dev
      perf: Reject exited events as group leaders

Kyohei Kadota (1):
      Input: xpad - add support for ZENAIM LEVERLESS

Laurent Vivier (1):
      usbnet: cap max_mtu for drivers without bind callback

Leon Hwang (3):
      ftrace: Protect direct_functions in ftrace_find_rec_direct
      ftrace: Protect direct_functions in update_ftrace_direct_del
      ftrace: Protect direct_functions in update_ftrace_direct_mod

Lin Jiapeng (1):
      xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN

Lincoln Wallace (1):
      ima: fix out-of-bounds read in xattr_verify()

Linfeng Sun (1):
      vhost-scsi: Validate T10 PI scatterlist counts

Linfeng Sun  (1):
      vhost_iotlb: bound map allocation in add_range

Linmao Li (4):
      Input: psxpad-spi - set driver data before use
      Input: byd - synchronize timer deletion before freeing private data
      drm/xe/oa: Fix sync entry leak on OA config emit failure
      drm/xe/oa: Check managed mutex initialization errors

Lizhi Hou (3):
      accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()
      accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()
      accel/amdxdna: Skip unmapped range in aie2_populate_range()

Long Li (2):
      xfs: fix ilock leak on error in xfs_dq_get_next_id
      xfs: don't swallow dquot recovery verification errors

Lorenzo Stoakes (ARM) (4):
      mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
      mm/huge_memory: fix huge_zero_pfn race
      arm64: remove redundant concurrent ptdump UAF mitigation
      mm/ptdump: always stabilise against page table freeing using init_mm

Luca Fresi (1):
      serial: sc16is7xx: enable THRI before filling TX FIFO

Luxiao Xu (1):
      bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie

Maciej Fijalkowski (2):
      selftests/xsk: fix too-many-frags multi-buffer Tx test
      selftests/xsk: account reclaimed invalid Tx descriptors

Mahanta Jambigi (1):
      net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()

Marcin Bernatowicz (1):
      drm/xe/uc: Apply RCS/CCS yield policy to SR-IOV VFs

Mariano Baragiola (1):
      staging: rtl8723bs: validate monitor transmit frame lengths

Mark Brown (1):
      ASoC: tas2562: Validate values for volume writes

Mark Tomlinson (1):
      gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock

Martin Kaiser (1):
      selftests/ftrace: refactor eprobes test to fix argument checks

Mathieu Dubois-Briand (1):
      nvmem: layouts: Add fixed-layout driver

Matt Fleming (1):
      mm/huge_memory: initialise workingset state before folio split

Matthew Brost (1):
      drm/xe: Order ring writes before ring tail updates

Matthew Rosato (1):
      KVM: s390: pci: Fix aisb calculation

Matthieu Baerts (NGI0) (2):
      mptcp: avoid combining some incoming suboptions
      mptcp: options: reset DSS fields in case of unexpected size

Matti Vaittinen (1):
      watchdog: bd96801_wdt: Fix timeout for enabled WDG

Max Kellermann (2):
      ceph: avoid fs reclaim while using current->journal_info
      ceph: fix hanging __ceph_get_caps() with stale mds_wanted

Maximilian Immanuel Brandtner (1):
      tls: don't abort the connection on signal-interrupted sends

Maíra Canal (1):
      drm/v3d: Serialize the scheduler timeout handlers

Melbin K Mathew (2):
      fbdev: bound mode sysfs output to the sysfs buffer
      fbdev: clear fb_info->mode before deleting a videomode

Michael Chan (1):
      bnxt_en: Disable EOP for TPA on all chips to prevent data corruption

Michael Guralnik (1):
      net/mlx5: fw_tracer, return NULL on create error

Michael Wu (1):
      tracing: Fix race between update_event_fields and, event_define_fields

Michal Luczaj (3):
      selftests/bpf: Fail unbound UDP on sockmap update
      selftests/bpf: Ensure UDP sockets are bound
      selftests/bpf: Adapt sockmap update error handling

Michał Winiarski (1):
      drm/xe: Fix memory leak in exec_queue_set_hang_replay_state()

Mimi Zohar (1):
      ima: Instantiate file_truncate and path_truncate hooks

Mingyu Wang (1):
      fbdev: core: Fix pointer desynchronization in fb_io_read()

Mostafa Saleh (1):
      optee: ffa: Add NULL check in optee_ffa_lend_protmem

Muhammad Bilal (2):
      staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()
      staging: rtl8723bs: fix OOB read in WMM_param_handler()

Myeonghun Pak (1):
      mmc: sdhci: unmap the bounce buffer before device release

Nareshkumar Gollakoti (1):
      drm/xe: Set GT rp min frequency as 1.2GHz default for BMG/CRI

Nathan Gao (1):
      tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()

Nathan Lucas (2):
      drm/amd/display: fix BT.2020 YCbCr limited output CSC matrix
      drm/amd/display: fix BT.2020 YCbCr output CSC matrices for DCE

Nikhil P. Rao (2):
      pds_core: keep the health thread stopped during reset
      pds_core: cancel pending PCI reset work on AER recovery

Nikhil Solanke (1):
      usb: core: Add quirk for 255-bytes initial config read

Nils Helmig (1):
      Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV

Oleksij Rempel (1):
      net: phy: realtek: fix EEE advertisement write on the internal PHY MMD path

Or Har-Toov (1):
      devlink: fix net namespace reference leak in reload

Osama Abdelkader (1):
      drm/panthor: skip zero-sized firmware sections

Pablo Neira Ayuso (1):
      netfilter: flowtable: ensure sufficient headroom in xmit path

Panagiotis Petrakopoulos (1):
      staging: rtl8723bs: fix missing shared-key auth challenge length check

Paolo Abeni (1):
      mptcp: reclaim forward-allocated memory on RX path errors

Paolo Bonzini (1):
      KVM: SVM: Serialize accesses to the owner and mirror list with separate lock

Pavel Begunkov (1):
      net: devmem: prevent net-iov / page mixing

Pavitra Jha (2):
      libceph: fix multiple unsafe decodes in decode_locker()
      libceph: fix OOB read in decode_watchers() via missing bounds check

Pawel Laszczak (1):
      usb: cdnsp: fix incorrect endian conversions for APB timeout register

Pei Xiao (1):
      mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition

Pengpeng Hou (3):
      drm/bridge: ps8640: propagate AUX transfer register errors
      net: prestera: validate firmware header length
      Input: iforce - validate input packet lengths

Peter Ujfalusi (6):
      ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()
      ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout
      ASoC: cs4265: sort the register default table
      ASoC: cs35l45: sort the register default table
      ASoC: cs35l41: sort the register default table
      ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup

Peter Zijlstra (1):
      sched/fair: Revert 6d71a9c61604 ("sched/fair: Fix EEVDF entity placement bug causing scheduling lag")

Philipp David (1):
      igc: fix netdev not re-attached after resume if interface is down

Praveen Talari (1):
      pmdomain: arm: Fix -EINVAL from scmi_pd_set_perf_state() on state 0

Pu Lehui (1):
      riscv: ftrace: Fix ftrace_modify_call failure on kprobed functions

Qiang Ma (1):
      xfs: clear zapped attr fork state when bmap repair finds no attr fork

Qiang Yu (1):
      drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12

Qihang Tang (3):
      packet: use consistent hard_header_len in non-ring send paths
      packet: use consistent hard_header_len in TX_RING send path
      net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header

Qing Luo (2):
      sctp: fix addip_serial increment on ASCONF_ACK allocation failure
      mptcp: pm: fix data race in add_addr timer callback

Qing Ming (1):
      sctp: clear new_transport when removing a peer

Qingfang Deng (1):
      ovpn: fix incorrect use of rcu_access_pointer()

Qingshuang Fu (2):
      hwmon: (nzxt-smart2) Check return value of init_device() in probe
      hwmon: (ads7828) Fix external VREF regulator handling

Qu Wenruo (2):
      btrfs: lzo: add error message for invalid headers
      btrfs: initialize inode mapping flags for cached inodes

Raag Jadav (1):
      drm/xe: Fix xe_device_probe() failure

Rafael J. Wysocki (2):
      Revert "thermal/drivers/hwmon: Cleanup coding style a bit"
      Revert "thermal: hwmon: Register a hwmon device for each thermal zone"

Ralf Lici (5):
      ovpn: add missing rtnl_link_ops->get_size callback
      ovpn: fix NULL dereference when killing missing key
      ovpn: finish crypto callback cleanup before peer release
      ovpn: run deferred work on a module-owned workqueue
      ovpn: defer key slot crypto freeing to workqueue

Raphael Zimmer (1):
      libceph: Avoid using invalid osd indices from primary_temp

Ray Wu (2):
      drm/amd/display: Add AV mute wait frames to dce110_set_avmute
      drm/amd/display: Check for tg ops in dce110_set_avmute

Richard Davies (1):
      Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet

Rik van Riel (2):
      fbdev: bitblit: bound-check glyph index in bit_cursor()
      x86/CPU: Add a tlbi= cmdline switch

Robby Cai (1):
      regulator: fp9931: Fix VPOS/VNEG voltage selector table

Rosen Penev (2):
      ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt
      ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

Rui Qi (1):
      selftests/ftrace: Convert ELF entry point to file offset in uprobe test

Ryan Wilbur (1):
      serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx

SJ Park (3):
      samples/damon/mtier: error out for zero quota goal target values
      mm/damon: adjust isolated pages stat for DAMOS_MIGRATE_{HOT,COLD}
      mm/damon/lru_sort: error out for >10000 active_mem_bp

Samuel Pitoiset (1):
      drm/amd/display: Fix NULL pointer dereference in amdgpu_dm_crtc_set_vblank()

Satish Kharat (1):
      enic: fix tx_hang_reset use-after-free on device removal

Sean Christopherson (1):
      KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

Sergey V. Frolov (1):
      net: octeontx2-pf: Fix UB in shift operation

Shay Drory (1):
      net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock

Shenghao Ding (1):
      ASoC: tas2781: fix clang build error for goto bypassing cleanup variable

Shixiong Ou (3):
      drm/log: Fix out-of-bounds read on empty message length
      drm/log: Fix infinite loop when scale is too large for display
      drm/log: Fix division by zero when scale module parameter is 0

Shravya KN (3):
      bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss()
      bnxt_en: Determine and store default RX ring in vnic structure
      bnxt_en: Refresh VNIC default ring on queue restart if needed

Shuangpeng Bai (2):
      smb: client: Fix use-after-free in cifs_try_adding_channels()
      eventfs: Fix use-after-free in eventfs_remove_rec()

Siddharth Vadapalli (1):
      net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

Sidraya Jayagond (1):
      net/smc: fix TOCTOU race between smc_listen_out() and listener close

Sonali Pradhan (1):
      usb: gadget: f_ncm: Use unsigned int for ndp_index

Stanislav Fomichev (6):
      xsk: require at least 16 bytes of TX metadata
      xsk: pass TX metadata pointer by reference
      xsk: clear metadata pointer when no timestamp is requested
      xsk: validate launch-time metadata size
      xsk: move xsk_tx_metadata_request() to xdp_sock_drv.h
      xsk: validate metadata when processing requests

Stefan Agner (1):
      net: stmmac: resume PHY before hardware setup when opening the interface

Steven Rostedt (1):
      eventfs: Use children field for rcu head and add memory barriers

Sun Jian (2):
      net: fix skb length accounting after generic XDP frag adjustment
      veth: fix skb length accounting after XDP frag adjustment

Takashi Iwai (1):
      ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

Tejun Heo (5):
      sched/psi: Shut down rtpoll_timer in psi_cgroup_free()
      sched/psi: Create the psimon kthread outside of cgroup_mutex
      sched_ext: Take cgroup_lock() first in scx_cgroup_lock()
      sched_ext: Update p->scx.disallow warning in scx_init_task()
      sched_ext: Reorganize enable/disable path for multi-scheduler support

Tengda Wu (1):
      ring-buffer: Use current_context for safe per-CPU buffer swap

Thorsten Blum (2):
      crypto: starfive - use scatterlist length before DMA mapping
      crypto: qce - fix error path in devm_qce_register_algs

Toke Høiland-Jørgensen (1):
      net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter

Travis K. Bangs (1):
      drm/amd: Disable DP audio spread spectrum for Cyan Skillfish

Uwe Kleine-König (1):
      m68k: Define NR_CPUS to 1

Vinay Belgaumkar (1):
      drm/xe: Fix a bug in pc_adjust_freq_bounds()

Vincent Donnefort (4):
      ring-buffer: Prevent subbuf order change when resizing is disabled
      ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer()
      ring-buffer: Prevent resizing of persistent ring buffer
      ring-buffer: Store bpage pointers into subbuf_ids

Vladislav Dronov (1):
      crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

Wang Jiang (1):
      drm/radeon: restore hardware polling in fence_is_signaled to fix performance regression

Wei Fang (2):
      net: packet: fix wrong transport_header when sending VLAN-tagged frame
      net: tap: fix wrong transport_header when sending VLAN-tagged frame

Weiming Shi (2):
      vsock/virtio: read virtqueues under worker locks
      vsock/virtio: avoid refilling the RX queue after teardown

Wilken Gottwalt (1):
      hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination

Will Chen (1):
      bnxt: fix memory leak in bnxt_queue_mem_alloc error cases

William Palacek (1):
      drm/amdkfd: Add bounds check for CRAT subtype length

Wyatt Feng (1):
      mptcp: fastopen: only mark MPTFO subflows with SYN data

Xiang Mei (1):
      xfs: fix off-by-one in rtrefcount btree root level validation

Xiang Mei (Microsoft) (2):
      bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor
      netfilter: ipset: fix refcount race between list:set GC and swap

Xin Long (1):
      sctp: clear control chunk transport if it is being removed

Xu Rao (4):
      thunderbolt: icm: Preserve USB4 proxy data-valid bit
      ALSA: hda/tas2781: fix ACPI reference handling
      scsi: scsi_debug: Negate wrapped memcmp() result
      thunderbolt: Fix bandwidth group reservation indexing

Xuanqiang Luo (1):
      udp: fix potential use-after-free in tunnel segmentation

Yang Wang (2):
      drm/amdgpu: fix nbif 6.3.1 l1 low power not functional
      drm/amdgpu: check ASPM on the dGPU host link

Yangyu Chen (2):
      net: atlantic: free stranded TX buffers on ring deinit
      net: atlantic: free RX pages of consumed but not refilled buffers

Yao Kai (1):
      futex: Fix race in futex_pivot_pending() during private hash resize

Yi Cong (1):
      net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()

Yiming Zhu (1):
      ceph: fix MDS random selection readiness predicate

Yixun Lan (2):
      clk: spacemit: k3: fix USB2 bus clock
      clk: spacemit: k3: set hdma clock as critical

Yiyang Chen (2):
      bpf: Preserve pointer state for commuted arithmetic
      bpf: Propagate untrusted pointer state in commuted arithmetic

Yizhou Zhao (1):
      ipvs: separate destination availability state

Yousef Alhouseen (1):
      vhost/vdpa: reject overflowing PA map page counts on 32-bit

Yuejie Shi (1):
      ipv6: fix Route Information option length validation

Yuho Choi (1):
      ARM: npcm: Fix OF node refcount leaks in SMP setup

Yun Zhou (1):
      xfs: handle NULL b_addr in xfs_buf_free

Yuxiang Yang (1):
      sctp: fix use-after-free of cached ASCONF chunk

Zhan Xusheng (2):
      fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
      mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit

Zhang Changzhong (1):
      net/sched: cls_u32: skip hash tables in u32_bind_class()

Zhefu Zhang (1):
      Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard

Zhiling Zou (7):
      ipvs: stop estimator after disabled calc phase
      net: openvswitch: reallocate update replies for mismatched IDs
      inet: frags: publish queues before arming timer
      netfilter: bridge: release template ct on non-IP path
      xdp: reject clones that overrun skb_shared_info tailroom
      ip6_tunnel: clear skb2->cb[] in ip6ip6_err()
      mm/page_table_check: skip special zero mappings

Zihan Xi (4):
      packet: synchronize pressure clearing with ring reconfiguration
      mac802154: fix netdev use-after-free in beacon worker
      ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops
      netfilter: nf_conntrack: defer invalid log until after unlock

Zijie Huang (1):
      net/sched: reject overly deep qdisc hierarchies

chanyoung (1):
      tls: don't leave a full plaintext sk_msg ring unpushed

liyouhong (1):
      mm/damon/ops-common: putback folios on invalid migrate nid

Łukasz Patron (1):
      net: qrtr: ns: Raise lookup limit to 128

 Documentation/admin-guide/kernel-parameters.txt    |   9 +
 .../bindings/crypto/qcom,inline-crypto-engine.yaml |  16 +-
 Documentation/hwmon/hwmon-kernel-api.rst           |   7 +-
 MAINTAINERS                                        |   5 +
 arch/arm/boot/dts/broadcom/bcm-ns.dtsi             |   2 +-
 arch/arm/mach-npcm/platsmp.c                       |   2 +
 arch/arm64/boot/dts/broadcom/bcm2712.dtsi          |   2 -
 arch/arm64/boot/dts/nvidia/tegra194.dtsi           |   2 +
 arch/arm64/boot/dts/qcom/monaco.dtsi               |   1 +
 arch/arm64/boot/dts/qcom/purwa.dtsi                |   2 +
 .../boot/dts/qcom/sdm850-lenovo-yoga-c630.dts      |   4 +
 arch/arm64/include/asm/ptdump.h                    |   2 -
 arch/arm64/mm/mmu.c                                |  43 +--
 arch/arm64/mm/ptdump.c                             |  11 +-
 arch/m68k/Kconfig.cpu                              |   4 +
 arch/openrisc/include/asm/processor.h              |   2 +
 arch/openrisc/kernel/signal.c                      |   5 +-
 arch/powerpc/platforms/pseries/lparcfg.c           |   2 +-
 arch/powerpc/platforms/pseries/papr-phy-attest.c   |  12 +-
 arch/powerpc/platforms/pseries/pci.c               |   2 +-
 arch/riscv/kernel/ftrace.c                         |   5 +-
 arch/s390/kvm/pci.c                                |   2 +-
 arch/x86/kernel/cpu/common.c                       |  10 +
 arch/x86/kernel/cpu/mce/core.c                     |   2 +-
 arch/x86/kvm/mmu/mmu.c                             |   3 +
 arch/x86/kvm/svm/sev.c                             |  34 +-
 arch/x86/kvm/svm/svm.h                             |   1 +
 block/genhd.c                                      |  12 +-
 crypto/ccm.c                                       |   2 +-
 debian.master/upstream-stable                      |   4 +-
 drivers/accel/amdxdna/aie2_ctx.c                   |  16 +
 drivers/accel/amdxdna/amdxdna_gem.c                |  47 +--
 drivers/android/binder/process.rs                  |  12 +-
 drivers/ata/pata_sl82c105.c                        |   4 +-
 drivers/base/regmap/regmap-sdw-mbq.c               |   4 +-
 drivers/bluetooth/btrtl.c                          |  13 +
 drivers/bluetooth/btusb.c                          |   2 +
 drivers/clk/spacemit/ccu-k3.c                      |   4 +-
 drivers/counter/microchip-tcb-capture.c            |   4 +-
 drivers/crypto/qce/core.c                          |   2 +-
 drivers/crypto/starfive/jh7110-aes.c               |   2 +-
 drivers/crypto/tegra/tegra-se-aes.c                |  22 +-
 drivers/dibs/dibs_loopback.c                       |   1 -
 drivers/dibs/dibs_main.c                           |  16 +-
 drivers/firewire/ohci.c                            |   4 +-
 drivers/gpio/gpio-ml-ioh.c                         |  71 +++--
 drivers/gpio/gpio-pca953x.c                        |  19 +-
 drivers/gpio/gpio-sloppy-logic-analyzer.c          |   2 +-
 drivers/gpio/gpiolib.c                             |   3 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c             |  31 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |  50 ++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c            |  21 ++
 drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c            |  10 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c          |   5 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c            |  85 ++---
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c             |   3 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c             |   5 +
 drivers/gpu/drm/amd/amdgpu/gmc_v12_1.c             |  48 ++-
 drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_5.c           |  21 +-
 drivers/gpu/drm/amd/amdgpu/jpeg_v5_0_0.c           |  21 +-
 drivers/gpu/drm/amd/amdgpu/jpeg_v5_3_0.c           |  21 +-
 drivers/gpu/drm/amd/amdgpu/nbif_v6_3_1.c           |  42 +--
 drivers/gpu/drm/amd/amdkfd/kfd_crat.c              |   9 +
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |   4 +
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c |   2 +-
 .../gpu/drm/amd/display/dc/core/dc_hw_sequencer.c  |  31 +-
 drivers/gpu/drm/amd/display/dc/dce/dce_transform.c |   7 +-
 .../drm/amd/display/dc/dce110/dce110_opp_csc_v.c   |   7 +-
 .../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c  |  24 +-
 drivers/gpu/drm/bridge/parade-ps8640.c             |  27 +-
 drivers/gpu/drm/clients/drm_log.c                  |  12 +
 drivers/gpu/drm/display/drm_hdmi_state_helper.c    |   3 +-
 drivers/gpu/drm/drm_gem_shmem_helper.c             |   6 +-
 drivers/gpu/drm/panthor/panthor_fw.c               |   3 +
 drivers/gpu/drm/radeon/radeon_fence.c              |   7 +
 drivers/gpu/drm/radeon/radeon_kms.c                |   1 +
 drivers/gpu/drm/v3d/v3d_drv.h                      |   6 +
 drivers/gpu/drm/v3d/v3d_sched.c                    |   9 +-
 drivers/gpu/drm/xe/xe_bo.h                         |  14 +
 drivers/gpu/drm/xe/xe_device.c                     |   6 +-
 drivers/gpu/drm/xe/xe_exec_queue.c                 |   3 +
 drivers/gpu/drm/xe/xe_guc_ads.c                    |  93 ++++--
 drivers/gpu/drm/xe/xe_guc_ads_types.h              |   5 +
 drivers/gpu/drm/xe/xe_guc_pc.c                     |  43 ++-
 drivers/gpu/drm/xe/xe_lrc.c                        |   7 +
 drivers/gpu/drm/xe/xe_oa.c                         |  13 +-
 drivers/gpu/drm/xe/xe_pxp.c                        | 162 +++++++---
 drivers/gpu/drm/xe/xe_pxp_types.h                  |  27 +-
 drivers/gpu/drm/xe/xe_uc.c                         |   7 +-
 drivers/hwmon/ads7828.c                            |  11 +-
 drivers/hwmon/corsair-psu.c                        |   8 +-
 drivers/hwmon/ltc4282.c                            |  20 +-
 drivers/hwmon/nzxt-smart2.c                        |   6 +-
 drivers/hwmon/pmbus/lm25066.c                      |   5 +-
 drivers/hwmon/pmbus/pmbus_core.c                   | 342 +++++++++------------
 drivers/input/evdev.c                              |  27 +-
 drivers/input/joystick/iforce/iforce-packets.c     |  11 +-
 drivers/input/joystick/iforce/iforce-usb.c         |   3 +
 drivers/input/joystick/psxpad-spi.c                |   1 +
 drivers/input/joystick/xpad.c                      |   2 +
 drivers/input/keyboard/atkbd.c                     |  20 +-
 drivers/input/misc/cs40l50-vibra.c                 |  10 +-
 drivers/input/mouse/byd.c                          |   2 +-
 drivers/input/mouse/focaltech.c                    |   2 +-
 drivers/input/rmi4/rmi_f54.c                       |  43 ++-
 drivers/input/rmi4/rmi_f55.c                       |   4 +-
 drivers/input/touchscreen/hynitron_cstxxx.c        |  13 +-
 drivers/input/touchscreen/sur40.c                  |  23 +-
 drivers/misc/fastrpc.c                             |  27 +-
 drivers/misc/mei/client.c                          |  25 +-
 drivers/mmc/host/atmel-mci.c                       |   2 +
 drivers/mmc/host/loongson2-mmc.c                   |   8 +-
 drivers/mmc/host/omap_hsmmc.c                      |   2 +-
 drivers/mmc/host/sdhci.c                           |  16 +
 drivers/mmc/host/sdhci.h                           |   2 +-
 drivers/net/bonding/bond_alb.c                     |  10 +-
 drivers/net/ethernet/amd/pds_core/core.h           |   1 +
 drivers/net/ethernet/amd/pds_core/main.c           |  14 +-
 drivers/net/ethernet/aquantia/atlantic/aq_ring.c   |  51 ++-
 drivers/net/ethernet/aquantia/atlantic/aq_ring.h   |   1 +
 drivers/net/ethernet/aquantia/atlantic/aq_vec.c    |   2 +-
 drivers/net/ethernet/broadcom/bnge/bnge_auxr.c     |   9 +-
 drivers/net/ethernet/broadcom/bnge/bnge_netdev.c   |   2 -
 drivers/net/ethernet/broadcom/bnge/bnge_resc.c     |   3 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          | 197 ++++++++----
 drivers/net/ethernet/broadcom/bnxt/bnxt.h          |   4 +
 drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c      |   7 +-
 drivers/net/ethernet/cisco/enic/enic_main.c        |   5 +-
 drivers/net/ethernet/google/gve/gve_ptp.c          |   6 +
 drivers/net/ethernet/google/gve/gve_rx_dqo.c       |   5 +
 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c      |   1 -
 .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c    |   6 +-
 drivers/net/ethernet/intel/igc/igc_main.c          |  10 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c   |   6 +-
 .../net/ethernet/marvell/prestera/prestera_pci.c   |   3 +
 .../ethernet/mellanox/mlx5/core/diag/fw_tracer.c   |  16 +-
 drivers/net/ethernet/mellanox/mlx5/core/en.h       |   2 +-
 .../net/ethernet/mellanox/mlx5/core/en/tc_priv.h   |   1 +
 drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c   |  15 +-
 drivers/net/ethernet/mellanox/mlx5/core/en/xdp.h   |   4 +-
 .../net/ethernet/mellanox/mlx5/core/en/xsk/tx.c    |   2 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |   4 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_tc.c    |   4 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  13 +-
 drivers/net/ethernet/ti/am65-cpsw-nuss.c           |   2 +
 drivers/net/ethernet/wangxun/ngbe/ngbe_main.c      |   4 +-
 drivers/net/ipvlan/ipvlan_main.c                   |   4 +
 drivers/net/macvlan.c                              |   4 +
 drivers/net/ntb_netdev.c                           | 292 ++++++++++++------
 drivers/net/ovpn/crypto.c                          |  26 +-
 drivers/net/ovpn/crypto.h                          |   4 +-
 drivers/net/ovpn/crypto_aead.c                     |  19 +-
 drivers/net/ovpn/crypto_aead.h                     |   1 -
 drivers/net/ovpn/io.c                              |  10 +-
 drivers/net/ovpn/main.c                            |  83 +++--
 drivers/net/ovpn/netlink.c                         |   6 +
 drivers/net/ovpn/ovpnpriv.h                        |   4 +
 drivers/net/ovpn/peer.c                            | 180 ++++++++---
 drivers/net/ovpn/peer.h                            |   1 +
 drivers/net/ovpn/socket.c                          |   9 +
 drivers/net/ovpn/tcp.c                             |   9 +-
 drivers/net/phy/mediatek/mtk.h                     |   8 +-
 drivers/net/phy/realtek/realtek_main.c             |   2 +-
 drivers/net/tap.c                                  |  25 +-
 drivers/net/thunderbolt/main.c                     |  33 +-
 drivers/net/usb/ax88179_178a.c                     |   4 +-
 drivers/net/usb/ipheth.c                           |  11 +-
 drivers/net/usb/usbnet.c                           |   3 +-
 drivers/net/veth.c                                 |  24 +-
 drivers/net/vxlan/vxlan_core.c                     |   2 +-
 drivers/nvmem/apple-spmi-nvmem.c                   |  20 +-
 drivers/nvmem/core.c                               |  24 +-
 drivers/nvmem/internals.h                          |   2 +
 drivers/nvmem/layouts.c                            |  11 -
 drivers/nvmem/layouts/Makefile                     |   1 +
 drivers/nvmem/layouts/fixed-layout.c               |  58 ++++
 drivers/pinctrl/qcom/pinctrl-ipq8064.c             |   8 +-
 drivers/pinctrl/qcom/pinctrl-msm.h                 |   5 +
 drivers/pmdomain/arm/scmi_perf_domain.c            |   2 +-
 drivers/pmdomain/mediatek/mt8183-pm-domains.h      |   7 +-
 drivers/pmdomain/mediatek/mtk-mfg-pmdomain.c       |   2 +-
 drivers/pmdomain/mediatek/mtk-pm-domains.c         |  30 +-
 drivers/ptp/ptp_ocp.c                              |   4 +-
 drivers/regulator/fp9931.c                         |  54 +---
 drivers/s390/cio/vfio_ccw_async.c                  |  16 +
 drivers/s390/cio/vfio_ccw_chp.c                    |  31 +-
 drivers/s390/cio/vfio_ccw_cp.c                     |  74 +++--
 drivers/s390/cio/vfio_ccw_cp.h                     |  10 +
 drivers/s390/cio/vfio_ccw_drv.c                    |  21 +-
 drivers/s390/cio/vfio_ccw_fsm.c                    |   8 +-
 drivers/s390/cio/vfio_ccw_ops.c                    |  39 ++-
 drivers/s390/cio/vfio_ccw_private.h                |  10 +-
 drivers/s390/crypto/zcrypt_ccamisc.c               |  20 +-
 drivers/s390/crypto/zcrypt_ep11misc.c              |  16 +-
 drivers/s390/net/ism_drv.c                         |  19 +-
 drivers/s390/net/qeth_core_main.c                  |   3 +
 drivers/s390/net/qeth_l3_main.c                    |   5 +
 drivers/scsi/scsi_debug.c                          |   4 +-
 drivers/scsi/scsi_error.c                          |   6 +-
 drivers/soc/aspeed/Makefile                        |   1 +
 drivers/soc/aspeed/aspeed-lpc-snoop.c              |  38 ++-
 drivers/spi/spi-virtio.c                           |   2 +
 drivers/staging/rtl8723bs/core/rtw_ieee80211.c     |   3 +
 drivers/staging/rtl8723bs/core/rtw_mlme_ext.c      |   2 +-
 drivers/staging/rtl8723bs/core/rtw_wlan_util.c     |   3 +
 drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c  |   4 +
 drivers/tee/optee/ffa_abi.c                        |   3 +
 drivers/thermal/thermal_hwmon.c                    | 154 +++++++---
 drivers/thunderbolt/eeprom.c                       |   9 +-
 drivers/thunderbolt/icm.c                          |   2 +-
 drivers/thunderbolt/tb.c                           |   2 +-
 drivers/tty/serial/8250/8250_dma.c                 |  12 +-
 drivers/tty/serial/8250/8250_of.c                  |  38 +++
 drivers/tty/serial/amba-pl011.c                    |  68 ++--
 drivers/tty/serial/qcom_geni_serial.c              |  43 +--
 drivers/tty/serial/sc16is7xx.c                     |   3 +
 drivers/tty/vt/keyboard.c                          |   5 +-
 drivers/tty/vt/vt_ioctl.c                          |   2 +
 drivers/ufs/core/ufshcd.c                          |   4 +-
 drivers/usb/atm/cxacru.c                           |   2 +
 drivers/usb/cdns3/cdnsp-gadget.c                   |   4 +-
 drivers/usb/core/config.c                          |  32 +-
 drivers/usb/core/quirks.c                          |   7 +
 drivers/usb/gadget/function/f_ncm.c                |   2 +-
 drivers/usb/misc/usbio.c                           |   2 +-
 drivers/vdpa/mlx5/core/mlx5_vdpa.h                 |   2 +
 drivers/vdpa/mlx5/core/mr.c                        |   8 +-
 drivers/vdpa/mlx5/core/resources.c                 |  11 +-
 drivers/vdpa/vdpa_sim/vdpa_sim.c                   |  10 +-
 drivers/vdpa/vdpa_user/iova_domain.c               |  11 +-
 drivers/vhost/iotlb.c                              |  47 ++-
 drivers/vhost/scsi.c                               |  17 +
 drivers/vhost/vdpa.c                               |  18 +-
 drivers/vhost/vhost.c                              |  16 +
 drivers/video/fbdev/core/bitblit.c                 |   9 +-
 drivers/video/fbdev/core/fb_io_fops.c              |   8 +
 drivers/video/fbdev/core/fbmem.c                   |   5 +-
 drivers/video/fbdev/core/fbsysfs.c                 |  15 +-
 drivers/watchdog/at91sam9_wdt.c                    |   4 +-
 drivers/watchdog/bd96801_wdt.c                     |   5 +-
 fs/attr.c                                          |   2 +-
 fs/binfmt_misc.c                                   |   3 +-
 fs/btrfs/inode.c                                   |   4 +-
 fs/btrfs/lzo.c                                     |  17 +-
 fs/ceph/caps.c                                     |  17 +-
 fs/ceph/file.c                                     |   9 +-
 fs/ceph/mds_client.c                               |  11 +
 fs/ceph/mds_client.h                               |   1 +
 fs/ceph/mdsmap.c                                   |   2 +-
 fs/crypto/policy.c                                 |   2 +-
 fs/erofs/Kconfig                                   |   3 +-
 fs/namespace.c                                     |   4 +
 fs/nfs/nfs4proc.c                                  |  17 +-
 fs/overlayfs/super.c                               |   3 +-
 fs/smb/client/sess.c                               |   2 +-
 fs/smb/client/smb1transport.c                      |  28 +-
 fs/tracefs/event_inode.c                           |  28 +-
 fs/tracefs/internal.h                              |   4 +-
 fs/verity/measure.c                                |  15 +-
 fs/xfs/libxfs/xfs_exchmaps.c                       |  10 +
 fs/xfs/libxfs/xfs_rtrefcount_btree.c               |   4 +-
 fs/xfs/libxfs/xfs_sb.c                             |   4 +-
 fs/xfs/scrub/agheader.c                            |   2 +-
 fs/xfs/scrub/agheader_repair.c                     | 152 +++++++--
 fs/xfs/scrub/alloc.c                               |   5 +-
 fs/xfs/scrub/attr_repair.c                         |   3 +-
 fs/xfs/scrub/bmap.c                                |   5 +
 fs/xfs/scrub/dirtree_repair.c                      |  22 +-
 fs/xfs/scrub/inode_repair.c                        |   2 +-
 fs/xfs/scrub/nlinks.c                              |  13 +-
 fs/xfs/scrub/nlinks_repair.c                       |   7 +-
 fs/xfs/scrub/parent.c                              |   2 +-
 fs/xfs/scrub/rtbitmap_repair.c                     |  46 +--
 fs/xfs/scrub/tempfile.c                            |   1 +
 fs/xfs/scrub/trace.h                               |   2 +
 fs/xfs/xfs_buf.c                                   |   2 +-
 fs/xfs/xfs_buf_item_recover.c                      |  57 +++-
 fs/xfs/xfs_dquot.c                                 |   3 +-
 fs/xfs/xfs_dquot_item_recover.c                    |   2 +-
 fs/xfs/xfs_rtalloc.c                               |   2 +-
 include/linux/dibs.h                               |   2 +-
 include/linux/hwmon.h                              |   3 +
 include/linux/mmap_lock.h                          |   1 +
 include/linux/netdevice.h                          |  11 +-
 include/linux/netfilter/ipset/ip_set.h             |   2 +-
 include/linux/nvmem-provider.h                     |   6 +
 include/linux/psi.h                                |   4 +-
 include/linux/tick.h                               |   2 +
 include/linux/usb/quirks.h                         |   3 +
 include/net/act_api.h                              |  19 ++
 include/net/addrconf.h                             |   4 +-
 include/net/ip_vs.h                                |  50 +--
 include/net/libeth/xsk.h                           |   2 +-
 include/net/netdev_lock.h                          |   6 +-
 include/net/route.h                                |   2 +
 include/net/sch_generic.h                          |   1 +
 include/net/sctp/auth.h                            |   3 +
 include/net/xdp_sock.h                             |  45 +--
 include/net/xdp_sock_drv.h                         |  77 ++++-
 include/scsi/scsi_host.h                           |   7 +-
 include/uapi/linux/ip_vs.h                         |   6 -
 kernel/bpf/rqspinlock.c                            |   5 +-
 kernel/bpf/verifier.c                              |  68 ++--
 kernel/cgroup/cgroup.c                             |  23 +-
 kernel/events/core.c                               |  75 +++--
 kernel/futex/core.c                                |  89 ++++--
 kernel/sched/ext.c                                 |  95 +++---
 kernel/sched/fair.c                                | 148 +++++++--
 kernel/sched/psi.c                                 |  75 ++++-
 kernel/trace/ftrace.c                              |  33 +-
 kernel/trace/ring_buffer.c                         |  34 +-
 kernel/trace/trace_events.c                        |   4 +-
 mm/damon/lru_sort.c                                |   2 +
 mm/damon/ops-common.c                              |  13 +-
 mm/damon/paddr.c                                   |   2 +
 mm/damon/vaddr.c                                   |   3 +-
 mm/filemap.c                                       |   6 +
 mm/huge_memory.c                                   |  47 ++-
 mm/memory.c                                        |   2 +-
 mm/page_table_check.c                              |  22 +-
 mm/pagewalk.c                                      |  36 ++-
 mm/ptdump.c                                        |   7 +
 mm/vmalloc.c                                       |  40 ++-
 net/atm/common.c                                   |  14 +-
 net/bridge/br_mrp.c                                |   6 +-
 net/bridge/netfilter/ebt_nflog.c                   |  17 +-
 net/bridge/netfilter/nf_conntrack_bridge.c         |   1 +
 net/ceph/cls_lock_client.c                         |  13 +-
 net/ceph/decode.c                                  |  18 +-
 net/ceph/osd_client.c                              |   5 +-
 net/ceph/osdmap.c                                  |   5 +-
 net/core/datagram.c                                |   3 +
 net/core/dev.c                                     |  32 +-
 net/core/filter.c                                  |   4 +-
 net/core/link_watch.c                              |   2 +-
 net/core/lock_debug.c                              |   2 +-
 net/core/sock.c                                    |   1 -
 net/core/xdp.c                                     |   2 +-
 net/devlink/dev.c                                  |   1 +
 net/ethtool/netlink.c                              |   4 +-
 net/ipv4/fib_semantics.c                           | 101 +++---
 net/ipv4/inet_connection_sock.c                    |  20 +-
 net/ipv4/inet_fragment.c                           |  10 +-
 net/ipv4/route.c                                   |  29 ++
 net/ipv4/tcp_bpf.c                                 |   2 +
 net/ipv4/tcp_input.c                               |   8 +-
 net/ipv4/tcp_ipv4.c                                |  43 +--
 net/ipv4/tcp_timer.c                               |   4 +-
 net/ipv4/udp_offload.c                             |   4 +-
 net/ipv6/addrconf.c                                |   2 +-
 net/ipv6/ip6_tunnel.c                              |   3 +
 net/ipv6/route.c                                   |   8 +-
 net/l2tp/l2tp_debugfs.c                            |   4 +
 net/l2tp/l2tp_ppp.c                                |  56 +++-
 net/mac802154/scan.c                               |   4 +
 net/mptcp/fastopen.c                               |   7 +-
 net/mptcp/options.c                                |  67 +++-
 net/mptcp/pm.c                                     |   6 +-
 net/mptcp/protocol.c                               |   6 +
 net/mptcp/protocol.h                               |   1 +
 net/ncsi/ncsi-netlink.c                            |   4 +
 net/netfilter/ipset/ip_set_bitmap_gen.h            |   4 +-
 net/netfilter/ipset/ip_set_core.c                  |  25 +-
 net/netfilter/ipset/ip_set_hash_gen.h              |   2 +-
 net/netfilter/ipset/ip_set_list_set.c              |  12 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |  45 +--
 net/netfilter/ipvs/ip_vs_core.c                    |  83 ++---
 net/netfilter/ipvs/ip_vs_ctl.c                     |  83 ++++-
 net/netfilter/ipvs/ip_vs_dh.c                      |   4 +-
 net/netfilter/ipvs/ip_vs_est.c                     |  10 +-
 net/netfilter/ipvs/ip_vs_lblc.c                    |   2 +-
 net/netfilter/ipvs/ip_vs_lblcr.c                   |   8 +-
 net/netfilter/ipvs/ip_vs_lc.c                      |   4 +-
 net/netfilter/ipvs/ip_vs_proto_sctp.c              |   4 +-
 net/netfilter/ipvs/ip_vs_proto_tcp.c               |   2 -
 net/netfilter/ipvs/ip_vs_sync.c                    |   7 +-
 net/netfilter/ipvs/ip_vs_xmit.c                    |   3 +-
 net/netfilter/nf_conntrack_bpf.c                   |  72 +++--
 net/netfilter/nf_conntrack_proto.c                 |   6 +
 net/netfilter/nf_conntrack_proto_sctp.c            |  12 +-
 net/netfilter/nf_conntrack_proto_tcp.c             | 132 +++++---
 net/netfilter/nf_flow_table_core.c                 |   7 +-
 net/netfilter/nf_flow_table_ip.c                   |  16 +-
 net/netfilter/nf_tables_offload.c                  |   2 +-
 net/openvswitch/datapath.c                         |  29 +-
 net/openvswitch/flow.c                             |  11 +-
 net/packet/af_packet.c                             |  79 +++--
 net/qrtr/ns.c                                      |   2 +-
 net/sched/act_api.c                                |  10 +-
 net/sched/act_ct.c                                 |  29 +-
 net/sched/act_gact.c                               |   5 +
 net/sched/act_police.c                             |   6 +
 net/sched/cls_api.c                                |  17 +-
 net/sched/cls_bpf.c                                |  18 +-
 net/sched/cls_route.c                              |  35 ++-
 net/sched/cls_u32.c                                |   3 +
 net/sched/sch_api.c                                |   9 +
 net/sched/sch_cake.c                               |   1 -
 net/sctp/associola.c                               |  11 +-
 net/sctp/auth.c                                    |  75 +++++
 net/sctp/outqueue.c                                |   1 +
 net/sctp/sm_make_chunk.c                           |   6 +-
 net/sctp/sm_statefuns.c                            |   6 +-
 net/smc/af_smc.c                                   |   3 +-
 net/smc/smc_llc.c                                  |   3 +-
 net/smc/smc_rx.c                                   |  19 +-
 net/tipc/node.c                                    |  15 +-
 net/tls/tls_sw.c                                   |  23 +-
 net/unix/garbage.c                                 |   1 +
 net/vmw_vsock/virtio_transport.c                   |  14 +-
 net/x25/af_x25.c                                   |   4 +-
 net/x25/x25_timer.c                                |  25 +-
 net/xdp/xdp_umem.c                                 |   2 +
 net/xdp/xsk.c                                      |  11 +-
 net/xdp/xsk_buff_pool.c                            |   8 +-
 samples/damon/mtier.c                              |   3 +
 security/integrity/ima/ima_appraise.c              |   9 +-
 security/integrity/ima/ima_main.c                  |  39 +++
 security/selinux/ss/policydb.c                     |  34 ++
 security/selinux/ss/services.c                     |  28 +-
 sound/hda/codecs/realtek/alc662.c                  |   1 +
 sound/hda/codecs/side-codecs/tas2781_hda_spi.c     |   3 +-
 sound/soc/codecs/cs35l41-lib.c                     |   2 +-
 sound/soc/codecs/cs35l45-tables.c                  |  32 +-
 sound/soc/codecs/cs4265.c                          |   4 +-
 sound/soc/codecs/lpass-tx-macro.c                  |   4 +-
 sound/soc/codecs/lpass-wsa-macro.c                 |   8 +-
 sound/soc/codecs/tas2562.c                         |   9 +-
 sound/soc/codecs/tas2781-i2c.c                     |  18 +-
 sound/soc/intel/common/sof-function-topology-lib.c |   7 +-
 sound/soc/sof/ipc4-pcm.c                           |  25 +-
 sound/soc/sof/ipc4-topology.c                      |  33 ++
 sound/soc/sof/sof-audio.c                          |   9 +-
 sound/soc/xilinx/xlnx_formatter_pcm.c              |  10 +-
 sound/usb/endpoint.c                               |   6 +-
 sound/usb/fcp.c                                    |  10 +-
 sound/usb/midi2.c                                  |   9 +
 sound/usb/usx2y/us144mkii_capture.c                |   1 +
 sound/usb/usx2y/usX2Yhwdep.c                       |   2 +
 sound/usb/usx2y/usx2yhwdeppcm.c                    |   2 +
 .../selftests/bpf/prog_tests/sockmap_basic.c       |   6 +-
 .../selftests/bpf/prog_tests/sockmap_listen.c      |  21 +-
 tools/testing/selftests/bpf/prog_tests/test_xsk.c  |  50 +--
 tools/testing/selftests/bpf/test_maps.c            |  13 +-
 .../ftrace/test.d/dynevent/add_remove_eprobe.tc    |  16 +-
 .../ftrace/test.d/dynevent/add_remove_uprobe.tc    |  27 +-
 tools/testing/selftests/net/mptcp/mptcp_join.sh    |   4 +-
 tools/testing/selftests/net/tls.c                  |  57 ++++
 tools/testing/selftests/sched_ext/numa.bpf.c       |  13 +-
 449 files changed, 5570 insertions(+), 2404 deletions(-)
 create mode 100644 drivers/nvmem/layouts/fixed-layout.c



More information about the kernel-team mailing list