42e7bb864359 Linux 7.2.7-xanmod1
3c5c78f4c106 Merge tag 'v7.2.7' into 7.2
f42acb367842 Linux 7.2.7
dc054821e639 mptcp: fix bad accounting in __mptcp_subflow_push_pending()
4c856f3c151a mptcp: close race between scheduler and state change
ce7e4ede01ed mptcp: avoid unneeded actions on subflow reset
2712d052b60c mptcp: move the stale logic out of retrans scheduler
496e2a239cad x86/mm: Fix and document DEBUG_PAGEALLOC
c60aab39d8ba misc: amd-sbi: Add null check for devm_kasprintf()
922873cf4fc3 x86/mm/pat: Allocate split page tables as kernel page tables
706e2bf33014 s390/pai: Support CPU hotplug for PMU PAI
0fd9fdd7d28b s390/pai: Move locking to event init and delete
62405f69ab0b s390/pai: Use PAI PMU index as parameter replacing event
a1d4d022e1ee drm/amd/display: Honor Broadcast RGB for BT.2020 RGB output
e6d24ae69050 drm/amd/display: Propagate HDMI RGB quantization selectability
4d8ad6bc8cc5 scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock
c55d649a6cc2 scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error
f75bff451a2f scsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[]
76342f971c2a scsi: qla2xxx: Clamp max_npiv_vports to VP_CTRL bitmap capacity
6aa722fca9d2 scsi: qla2xxx: Fix soft lockup polling continuation IOCB signature
7a83979d9278 scsi: qla2xxx: Skip vport under deletion in report ID acquisition
94188435020d scsi: qla2xxx: Fix 64G link speed reporting in get_data_rate
286d9594a022 scsi: qla2xxx: Null out freed pointers in qla2x00_mem_alloc() error path
dc4797c909b6 EDAC/altera: Use parent device for devres in altr_portb_setup()
cc73b2043d10 x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF
c76463f41110 x86/mm/pat: Don't gate cpa_lock on debug_pagealloc_enabled()
dafe2ad3ddfe platform/x86: hp-wmi: Fix board_params typo for 8DD6 board
50818e0d086f platform/x86: hp-wmi: Introduce board-specific feature data
583a91b1c178 drm/xe/i2c: Fix the interrupt handling
30ecd5ec1e05 i2c: designware: Global register definitions
33b00fa8023e accel/amdxdna: Disable device buffer exporting
47501eb6b989 drm/i915/cdclk: Avoid spurious cdclk sanitization on PTL+
cc3d3b6a9cb6 f2fs: fix to reset all pinned status during fggc
8508ea9bc910 f2fs: fix to shrink gc_lock coverage in f2fs_gc_range()
8a123a10770d f2fs: accurately adjust free_sections during free_segment_range
e41d28d9a242 scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot
71bbf36cc956 scsi: qla2xxx: Use ring-slot helpers in __qla2x00_alloc_iocbs
13354ad251ab scsi: qla2xxx: Bound VP index against VP_CTRL IOCB bitmap size
f1f4d1cb93ee scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown
94fc0c5b45de scsi: qla2xxx: Fix queue teardown NULL dma_free and bitmap locking
7a52e76b6309 media: qcom: iris: fix runtime PM reference leaks
b141852e6594 media: remove conditional return with no effect
7fb6ee99bd0e hwmon: (asus_rog_ryujin) Synchronize HID command and report handling
1caa5f9399ff hwmon: (asus_rog_ryujin) Validate HID report lengths
57825d63c51c hwmon: (asus_rog_ryujin) Add per-device configuration
ef36230c61ff usb: usbtmc: don't store usb_device_id
f7db611d98b6 usb: xusbatm: don't rely on id table pointer arithmetic
61b84e964a82 net: usb: pegasus: don't rely on id table pointer arithmetic
4f9525f96a89 usb: serial: spcp8x5: don't store usb_device_id
b6cfd26daf23 media: as102: do not rely on id table address comparison
c34aa5995059 wifi: ath9k_htc: don't store usb_device_id
98c9ff464419 ASoC: cs35l56: Fix race between kexec and snd_soc_register_component()
5074fca9b45b xfs: actually check internal-rtdev fields in the superblock
7eabaebb9441 xfs: actually recover intended file sizes in xfs_xmi_item_recover_intent
99c669e51c33 xfs: advance the findparent inode scan cursor while holding ILOCK
f6a331c435fd xfs: always set xfs_healthmon::first_event when inserting at front of list
b5309ae6504e xfs: bail out on bitmap errors in xrep_agfl_fill
72f6a614396e xfs: bump lost_prev_errors if we lose even the healthmon lost event
ca1247567aff xfs: check healthmon outbuffer space correctly
73fc377879dd xfs: compute dquot checksum after resetting dd_lsn in repair
d220e14c1776 xfs: count escaped corruption errors in scrub stats
8fe78d142ab7 xfs: cross-reference the rtgroup superblock extent, not block
582f54dce620 xfs: destroy seen inode bitmap when we fail to add a dirpath
788c3a46ef9d xfs: don't leak dqacct if rhashtable insertion fails
b19dfd454608 xfs: don't leak new_bp if xfs_btree_bload_drop_buf fails
ad72feaa5cbc xfs: don't modify file attributes or poke fsnotify for dry runs
a455c83ce5dc xfs: don't spin forever on zero-length dirents when salvaging them
b73cd6a5fcd7 xfs: don't stash removename operations with unknown ftype
bbd2300ddc20 xfs: fix backwards mergeability logic in refcount scrubber
ea3260d91002 xfs: fix backwards skipping logic in xrep_quota_block
18c310727e30 xfs: fix bnobt repair space reservation disposal failure
8ae30b9a8c20 xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN
b2d8330e5067 xfs: fix media verification ioctl for internal rt volumes
8934cbc73840 xfs: fix name string recording in slowpath pptr tracepoints
5f90096d59b4 xfs: fix parent rec lookup initialization in xrep_metapath_unlink
9bad46d3ec0f xfs: fix reclaimed page accounting in xfs_buf_free
cbbe842f94fa xfs: fix replaying dirent removals into the temporary directory
06c28541e6c8 xfs: fix rtrefcount btree block counting in scrub
99f38921ed06 xfs: fix rtrmap cross-referencing elision logic
63a9a2f8d3c2 xfs: fix short ifork reaping computation in xreap_bmapi_binval
84316cb25af9 xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions
b950e84acd07 xfs: fix under-reservation of blocks when repairing sf directories
cfeba3bdf4df xfs: fix unit conversions in per_binval computation
de6a0fbfb635 xfs: fix xfs_rtrmapbt_mem_cursor for non-rmap filesystems
ac9032882d67 xfs: initialise args->total for parent pointer updates
6b507c239884 xfs: initialise error in xfs_defer_finish_one()
d963ce1910bc xfs: lock the healthmon when inserting unmount event
60dd72cd158d xfs: log the tempip after we convert it to extents format
4a3adfe30350 xfs: make the rtsummary repair fix the file size too
ebedb3b06532 xfs: preserve owner on in-memory btree creation
ab3c14a9e87b xfs: release alleged child inode on metapath unlink error
a70af98621cc xfs: report healthy filesystem events in scrub stats
9fa8cee07b67 xfs: report nonexistent parents as a filesystem corruption
856763b23d6b xfs: reset parent pointer args before each dir tree unlink repair
3a8a5b4db0ed xfs: signal inode btree xref error if get_rec returns an error
7e38185ae072 xfs: snapshot old AGFL before rewriting it
169c7488e826 xfs: snapshot scrub stats when rendering them
87ec73be3550 xfs: strengthen the "is cow staging" helpers in scrub
208b94b8ab72 xfs: truncate quota file correctly when repairing quota file
60dcfbe0b068 xfs: use the rtgroup extent count to find rtrefcount gaps
c9a8b60ce140 smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()
2a9aee9ef562 smb: client: fix heap overflow in DACL owner/group rewrite
1d1b0f1d812a smb: client: avoid leaking refcount when cifs_sb_tlink() fails
dfe7b750c7e0 smb: client: avoid leaking refcount in cifs_queue_oplock_break()
47f772c40fea smb: client: fix file type corruption in wsl_to_fattr()
b700d02cb2ac smb: client: fix file type corruption in posix_reparse_to_fattr()
fe99108bbf02 smb: client: fix file type corruption in cifs_reparse_point_to_fattr()
ea93759d6c27 smb: client: fix cifsFileInfo reference leak in deferred close
ee13d687d06a smb: client: fail DACL rewrite when the new DACL exceeds 64K
2a302fdbaf7d smb: client: fix one-byte OOB read in smb2_parse_native_symlink()
e01787e1b64e smb: client: fix uid/gid override in getattr with posix extensions
b6e29cd93eec smb: client: fix WSL reparse point uid/gid override
e1b74f8f8c1d smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid
5b01a8c02096 smb: client: pin DFS superblock in iterator callback
667feba13e78 smb: client: reject out-of-bounds DataOffset in CIFSSMBRead()
1d3b24b16a0b smb: client: reject userspace cifs.idmap descriptions
aaa221c1b1d2 smb: client: reject short READ responses in CIFSSMBRead()
c31fdbfbe50a mptcp: pm: userspace: fix address ID overflow
652731242f77 mptcp: pm: reset retrans_time when ADD_ADDR entry is reused
545616b4e732 mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0
69a7b2a91267 mptcp: prevent race between disconnect() and rtx
44cf1e275743 selftests: mptcp: lib: get counters for the right test
b08cea41bfad selftests: mptcp: lib: dump nstat for the right test
c81cc809174e selftests: mptcp: fix an UAF in mptcp_connect.c
9a682067dd7b mptcp: options: fix uninit-value in mptcp_write_data_fin
06d649f9cd03 mptcp: syncookies: remember the request backup flag
e173a0c94cf6 mptcp: subflow: no need to copy thmac during ulp_clone
fe77616c29ca mptcp: options: handle MPC data + csum reqd + no csum
ff014953977f mptcp: do not reschedule the RTX timer for fallback sockets
e33ce547c0cd bnxt_en: Prevent queue stop with deferred completions
05cf64d17177 bnxt_en: Bound SW TPA IDs to prevent crashes
37e08dc821a5 bnxt_en: Propagate TPA buffer allocation failures in bnxt_queue_mem_alloc()
dfd73af81cdb bnxt_en: Propagate RX ring init failures in bnxt_init_nic()
8b2fd5c0aeda bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()
0596a7caa6fc bnxt_en: Don't free the live ring's TPA state on queue restart failure
7951e6c893f1 bnxt_en: Only restore LRO if the device supports TPA
c4c88b5ba856 media: v4l2-ctrls: validate AV1 tile counts
ba1023d3a6d5 media: v4l2-ctrls: validate HEVC tile counts
fd965369220c media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity
6b7a281a815a media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer
d45413293e12 media: v4l2-h264: Fix memcmp() size in B1 reference list comparison
eb0ea3898e39 media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity
03beb248d8a7 media: rkvdec: bound HEVC tile loops and PPS id to the array capacity
05e8e4cdfe69 media: verisilicon: hantro: bound G2 HEVC tile loop to the buffer capacity
3f77f3e10af7 media: ipu-bridge: do not use the CVS device lookup for IVSC
990a33228320 media: hevc: add bounded tile-count helpers
6809ebbedbf2 hwmon: (pmbus) Clear generic status alarms with CLEAR_FAULTS
4951594ff015 hwmon: (mcp9982) Propagate one-shot polling errors
c6ab7f855891 hwmon: (gpio-fan) Fix use-after-free in alarm work
4bae34c0ead5 hwmon: (chipcap2) fix channels in humidity alarm notifications
7401f7071c25 hwmon: (applesmc) fix key backlight workqueue leak on register failure
7f7f5589d048 afs: Clear stale peer app data after address list changes
349e713039a1 afs: Fix incorrect free in candidate cleanup in afs_lookup_server()
b60f51e4ad0f afs: Fix double-unmap of directory block
f57d4728ac54 afs: Fix missing kunmap in afs_dir_search_bucket()
b598e527a194 perf: RISC-V: use BIT_ULL for u64 overflow masks
e5481db31f46 perf: RISC-V: store available counter mask as bitmap
7bed86ac5678 selftests: ublk: install test_common.sh and trace/ scripts
e267bd142664 s390/crypto: Map EBUSY to EIO when key conversion fails repeatedly
5480291aa848 s390/crypto: Fix wrong return code to engine in asynch callbacks
d7159d2132e9 s390/crypto: Fix missing scrub of temp buffers with PAES algorithm
bcd7f1f1e2f2 s390/crypto: Fix handling of EBUSY in PHMAC when req is pushed to crypto engine
4e4b9cb77c7f s390/crypto: Fix missing cra_flags in paes_s390
a83488cecb35 s390/crypto: Fix missing scrub of temp buffers with AES ctr and gcm algorithm
910643fa7765 s390/crypto: Fix use of mutex in atomic context
aea3e1588f08 s390/crypto: Fix skcipher_walk return code handling in aes_s390
bdb7a6b24e37 s390/qeth: allow bridgeport queries despite OS_MISMATCH
41b5e0ce6801 iommu/s390: Fix NULL dereference in iova_to_phys() with ZPCI_TABLE_TYPE_RFX
ba29c46ccfe3 landlock: Fix use-after-free of the source's parent directory
83043cb61623 KVM: PPC: Book3S HV: Set irqfd->producer only on success
3d1fde35f95d mac802154: fix use-after-free of sdata via queued RX frames
0c61f7d8e18a ipvs: reject invalid states in connection template sync records
467467bf4209 ipv6: flowlabel: cap duplicate leases per socket
2c29c053a662 ipv4: fib: bound automatic table ID allocation
db6442deecb1 ieee802154: hwsim: serialize pib updates to fix double-free
890a80d516a1 ieee802154: cc2520: fix FIFOP work use-after-free
8528da2333ce ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink
bf3d6c44c84c inet: frags: invalidate queues before flushing them
cd7a1598645b idpf: disable DIM work before freeing q_vectors
3c91e51a53cf fbdev: vfb: defer cleanup until the last reference
38e9e07ac02a erofs: preserve LZMA decoders on resize failure
f355193e8016 erofs: add sysfs feature entry for xattr prefixes
6259b5d9bdc4 fs: autofs: fix memory leak in autofs_fill_super()
254d329e9452 scripts/sorttable: Mark long_size as __maybe_unused
f20d005520d9 vdpa: solidrun: Free IRQs after request failure
816fd60fea5d vdpa: ifcvf: Put device on unsupported feature error
651032d854d9 netfilter: report NLM_F_DUMP_FILTERED when all is filtered out
dce24f3a1469 netfilter: nf_log: unregister loggers before per-net teardown
1f69c570a73f netfilter: cttimeout: prevent UAF during module unload
2e38d500471d netfs: Fix uninitialized return value in netfs_unbuffered_write()
73392fcaf7b3 net: phy: dp83td510: handle the active-high LED polarity mode
035e9c372206 net: openvswitch: fix use-after-free of the flow table mask array
b39120523475 net: mpls: clear inner_protocol when the last label is popped
6c739cb89ebd net: mana: Reserve extra CQ slot for the fence completion CQE
bb9e77ca5efe net: macb: initialize PTP state before registering clock
fe45a7d7b789 net: hso: fix TIOCMIWAIT race
3eb5c7e1c154 net: dsa: tag_brcm: legacy FCS: request needed tailroom
42e033c8f30f net: bridge: use option bits for CFM/MRP frame handlers
048617743feb net/sched: act_api: release all action references on NEWACTION failure
32bf47db9237 ring-buffer: Check resize_disabled before publishing the new subbuf order
0f3620bc1720 ring-buffer: Acquire the lock with irqsave in rb_wake_up_waiters()
2e70ea75c7bb io_uring/net: don't overconsume buffers when using MSG_TRUNC
c91c866afa47 io_uring/net: let io_recv_buf_select return the length of the buffer region
055d43a1233e io_uring/rw: end write accounting from ->ki_complete
0fd7f2ba3bac drm/amd/display: Rebuild InfoFrames on output color space changes
10e7920fd5a1 drm/amd/display: Exit IPS before connector detection on resume
92393fc5227b drm/xe: Flush LSC untyped L1 dataport cache after rcs/ccs batches
a6b0c1d1f83d drm/sched: Create a fake device for KUnit tests
2fcd112caa4e drm/rockchip: analogix_dp: fix unchecked bound endpoint name length
59e0a04d95e1 drm/i915: Fix memory leak in query_perf_config_list()
a565022c02f2 drm/drm_exec: fix up contended obj when num_objects is 0
94f078b2be15 drm/bridge: ti-sn65dsi83: Fix error handling in sn65dsi83_reset_work()
691217b10117 drm/bridge: tc358768: Enforce input bus flags via atomic_check
e56ff2a63f41 drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7
449d615fd1c7 hrtimer: Use hard expiry when updating timers on the same base
6d8e653fcf1c genetlink: pin family module during policy dump
5894fabba7f3 function_graph: Use the saved entry's size when reprinting it
ff2a694f6613 fs: don't return -EINVAL for successful nested thaw
96803a12e8ac exit: hold a reference to thread_pid across proc_flush_pid
63be3d8511bd exec: do_close_on_exec() before taking exec_update_lock
2cee937f779f cpufreq: initialize policy rwsem before sysfs publication
bbc0472d2270 cpufreq: zero-initialize policy cpumask before sysfs publication
bff9a1579e2c bootconfig: Fix integer overflow in initrd size check
c4249cf6e80b Bluetooth: btrtl: Don't leak return code when parsing firmware format v2
2d016208a011 Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev
a42dd4dae4c9 ASoC: sti: initialize IRQ lock before requesting IRQ
8064b73997f1 ASoC: sprd: validate compress buffer sizes against fixed allocations
2ce508def59b ASoC: amd: acp-da7219-max98357a: don't bind on Raven/Picasso boards
bb6f6201c6c8 ata: pata_legacy: remove documentation for removed module parameters
50c27d412fed accel: ethosu: Ensure SRAM region size matches job
e5576641b79e accel: ethosu: Ensure SRAM size is 0 on mapping failure
bf957f166f7b accel: ethosu: Ensure cmd stream ends with a stop op
63fcf4bba7b5 accel: ethosu: Drop IRQF_SHARED flag
e98afe5142ad accel: ethosu: Fix ethosu_job_open() return value
3d7130807009 accel/ivpu: Limit firmware log name prints to field size
b1555f63ee1a accel/ivpu: Validate firmware log buffer metadata
29f82a2280e1 accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr
bfa6bc11aef9 tracing: Undo the registration when enabling the histogram trigger fails
91c15cdda603 tracing: Take the reference before publishing the named histogram trigger
17e87ce55f87 tracing: Keep the entry count when the histogram stats allocation fails
90f84dfbc31e tracing: Let histogram values keep the percent and graph modifiers
891c21f6d567 tracing: Free histogram the field rejected for a bad modifier
94bbd65da4ae tracing: Free histogram var refs regardless of how often they are referenced
a69baeac3867 tracing: Free histogram the var ref when its initialization fails
62d6544e8650 tracing/user_events: Don't destroy fields when event removal fails
495d866e239e tools/bootconfig: Fix integer overflow and truncation in size checks
292b7a8ed840 tick/broadcast: Plug clockevents replacement race
a1da7901ed9d tunnels: Drop stale dst when building an ICMP error for PMTUD
abde9eb33106 ufs: validate cylinder group metadata before caching it
8173e051a8ac ufs: create the root dentry after loading cylinder metadata
c0bc47134ff8 virtio_mmio: disable IRQ wake before free_irq
89ced79cc3f2 watchdog: sunxi_wdt: preserve boot-enabled watchdog
241d7450cf75 drm/amdgpu: skip the VMID 0 flush for VRAM
52947c09c41c drm/amdgpu: skip gfx switch_power_profile during GPU reset
ab9f92414d05 dm/amdgpu: fix malformed link_settings debugfs output
2743c5c22939 riscv: hwprobe: initialize pair->value in hwprobe_one_pair()
c7b2c7aadc4a Revert "riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set"
2770321b3586 ALSA: usbusx2y: validate URB actual_length in interrupt callback
b5753bdfd909 ALSA: usbusx2y: fix in04_last array size mismatch with in04_buf
0eb9dd4774af ALSA: us122l: Prevent write upgrades for read mappings
a817e12bf2e2 ALSA: ctxfi: Fix CA20K2 S/PDIF passthrough
a57262303a8b drm/panic: clean new `clippy::needless_range_loop` lint for Rust 1.100.0
8ee7286f6854 rust: allow `unknown_lints` in generated bindings for Rust < 1.88
5409aa512a81 rust: allow `clippy::as_underscore` in the generated bindings
fdd562ddc108 rust: pin-init: use irrefutable pattern for `stack_pin_init`
320e60bde8c0 rust: num: seal Integer
67fb91a7f7bb tracing: Don't dereference trace_event_file in deferred trigger free
b2fb87d29ffb tracing: Take trace_array reference when opening a tracer options file
c27f8b68c058 tracing: Fix memory corruption from a "STACKTRACE" histogram key
65d1e28198f3 tracing: Set the trace clock before registering the histogram trigger
393dcf61b435 tracing: Restore :mod: trailer after parsing in ftrace_set_clr_event()
55caaf25da2c tracing: Fix memory corruption from the histogram stacktrace modifier
1fadebbbf31f ftrace: fork: Initialize function graph state before copy_exec_state()
1e685b7d9880 ftrace: Use rcu_assign_pointer() for tmp_ops filter hash
9a17b0e05319 reboot: fix cad_pid use-after-free race
d0a2e2a4ee6b ipmr: account multicast table and route memory
4553cfafa8d0 ipv6: fix fib6 walker UAF on seq stop
570a6aaf6b52 mm/slab: take n->list_lock in __slab_try_return_freelist() to avoid race
89c60435b90d x86/alternatives: Exclude text poking against change_page_attr()
93b98882198b x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF
67cf94c30a8b x86/cfi: Fix FineIBT hash offset in cfi_get_func_hash()
a5ad97cbcfce x86/mm: Fix user-space data loss with MADV_FREE and THP
aa2a4277ad42 x86/amd_node: Fix PCI device reference counting in amd_smn_init()
24f27068bd36 crypto: x86/aria - add missing vzeroupper in AVX-512 code
eec0fefe1964 crypto: x86/aria - add missing vzeroupper in AVX2 code
a797a2331e5d x86/amd_node: Fix potential NULL pointer dereference
662aa0e5eeb2 x86/MCE/AMD: Fix inverted interrupt enablement during storm handling
94e984d8858a x86/amd_node: Avoid divide by zero on virtualized systems
5d180176e868 powerpc: pci-ioda: Fix the stale irq chip reference
85d8eaefc052 powerpc/eeh: Fix recursive locking on devices without EEH sensitive driver
579667c825a8 powerpc/ps3: Fix repository.c build failure
925d8564f1b2 configfs: unhash the dentry before dropping the item in rmdir
d47c5de1cd6b configfs: pin the symlink target's dirent instead of chasing ->ci_dentry
37f7f54d06c6 scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands
b1eb100750c7 tracing/remotes: Catch nr_page_va overflow in ring_buffer_desc sizing
aac53a4683b2 tracing/remotes: Account for ring buffer page header in size calculation
cf1951cfa039 scripts/mksysmap: fix escape of '$' in the __pi_ pattern
fb548ba5e2c7 scripts/mksysmap: drop the MODULE_INFO() symbols from kallsyms
fe34800ee6f2 tracing: Fix ring_buffer_read_page_size() kernel-doc
3ee56aa5330f erofs: add missing buf->off in erofs_bread()
69083eba7585 ublk: clear force_abort in ublk_queue_reset_io_flags()
f3322baa3a8a sunvdc: unmap LDC cookies when the descriptor send fails
bdf1c10c6a63 block: Fix start and length check added to iov_iter_extract_bvecs()
d81c5c80d77f openvswitch: fix wrong flag value in get_ipv6_ext_hdrs()
756847a25f73 net: hsr: enable promiscuous mode on interlink port with fwd offload
65820fc743ea net: stmmac: fix TX descriptor availability check for TSO traffic
f4649a716be2 net/rds: fix tcp stream corruption with large pages
9801edfba8df net: mana: restore the XDP program pointer when pre-allocation fails
fea2aef26ea5 net: phy: dp83867: handle the active-high LED polarity mode
f098a6b596d1 octeontx2-af: fix PF/CGX debugfs PCI bus lookup
c49bfa2c5dbd net: net_failover: Fix the deadlock in net_failover_slave_name_change()
517209690d38 net: phy: mediatek-ge: disable EEE on the MT7530 PHY
6f549221cc3e net: ethernet: mtk_eth_soc: populate lpi_interfaces to fix EEE support
dcc6d2daa79b net: dsa: mt7530: populate lpi_interfaces to fix EEE support
af5d1ccb3f62 net: dsa: mt7530: add EN7528 support
513f7b16ed0c net: hinic: fix mailbox segment buffer overflow
7d9632d828bb net: sun4i-emac: fix missing of_node_put() for phy_node
e9ac395bb561 net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain().
83efad4fc3c9 net/sched: cls_route: Fix in-place replace
0de0f36e5232 net/sched: cls_route: Reject handle aliasing
81dd117c0442 net/sched: cls_route: free emptied bucket on filter move
003f07eeb585 sched/core: Call wq_worker_tick() for the execution context
90aa8b43de40 sched: Account cgroup CPU time to the execution context
85cafaf879de sched/eevdf: Fix rb augmented with multi fields
f47ea366f105 sched/eevdf: Fix augmented max_slice
c55599c0ec2a perf/x86/intel: Prevent drain_pebs() reentry
d79715f25ea9 perf/x86/intel: Correct pt_regs->flags update for PEBS path
e2770c76a024 perf/core: Allow list_del during perf_event_overflow()
c616733aa797 drm/i915/dp: Gate UHBR SST SDP splitting on sink capability
720954c6cc98 selftests/powerpc/tm: Fix tcheck() reading uninitialised CR value
1a2063f06238 powerpc/entry: Fix double accounting of user time on interrupt entry
d1fcff9b39ba net/mlx5e: Move representor vnic reporter to eswitch devlink port
b1986595cf82 net: stmmac: initialize ptp_lock at probe time
4786233082ac net: phylink: initialise link_state before a forced major config
15d0a6c9a42d ppp_synctty: ensure a writeable skb header
081f22177d9d vxlan: initialize _md in vxlan_xmit_one()
2df186418e17 octeontx2-pf: reset HTB scheduler topology before freeing queues
0f07cb072703 hwmon: (nct6694) do not expose enable on DTIN temperature channels
fdc1bc23ff59 hwmon: (corsair-cpro) Remove debugfs entries when probe fails
22d0f81552a5 hwmon: (aspeed-pwm-tacho) Propagate reset deassert errors
f77fd0bb2092 hwmon: (gpio-fan) take fan_data->lock in gpio_fan_shutdown()
fdfe17cb8657 hwmon: (corsair-cpro) Create debugfs entries after hwmon registration
f5d193272bd2 net: ks8851: Fix receiver error in 100BASE-TX mode following software power-down
3a441afa2a49 net: dsa: lantiq_gswip: fix GSWIP_MDIO_PHY_FCONTX_EN value
89f7b194f4fa watchdog: msc313e: Sync timeout value if WDT was running at boot
64229a6c4ef8 watchdog: msc313e: Fix undefined behavior
6d7217cf2dbd watchdog: msc313e: Fix spurious reset on suspend
8bd8a53faf6c watchdog: msc313e: Enable clock before accessing hardware registers
faf1eb2895c8 watchdog: msc313e: Fix clock leak and spurious timer in settimeout()
5788a6747eda watchdog: msc313e: Avoid division by zero
0d8dfcf54823 watchdog: fix hrtimer start when pretimeout is zero
c9bc3e41aa20 mptcp: remove unneeded READ_ONCE() annotation
25764620ec64 drm/xe: Guard page-fault worker with runtime PM check
9e673bf5d88a nstree: check listing permission before taking a namespace reference
7d60dc7ff85b net: macb: put the "mdio" child node reference on success
8558e3195664 net: macb: destroy the phylink instance on the probe error path
1155234c2227 ipv6: null-check fib6_node before accessing in __ip6_del_rt_siblings()
3a4d79a56d05 net: mana: Clear RDMA teardown and suspend state in mana_rdma_probe()
188c06af0f5f Bluetooth: btusb: Fix leaked runtime PM reference in btusb_reset
7befa027558d Bluetooth: btusb: mediatek: Fix leaked runtime PM reference in reset
9e9ece97b8e7 Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del()
d9b31fe313e0 Bluetooth: btmtk: Declare MT7920 (MT7961 1a) Bluetooth firmware
a641201a9b4d Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one
46884c0f9270 Bluetooth: btintel_pcie: validate packet_len before skb_put_data
fa391adb9c75 Bluetooth: btusb: Fix UAF of btusb_data by rx_work
8691bcc50222 Bluetooth: Properly disable remote wakeup for MT7922/MT7925 on Ryzen platform
c42db35518bb eth: ice: don't dereference pointers from TP_printk()
d6f38fb12069 ice: add missing xa_destroy for sched_node_ids
a7cc0478a89d idpf: account for VLAN header when parsing RSC packet header
1c821dcda973 platform/x86: x86-android-tablets: fix gpio_secondary_fwnode_init() not working
abd790cad191 ALSA: hda: Report a change when only the channel status bytes move
716e1cd37838 s390/debug: Fix NULL pointer dereference in debug_set_level()
02b905992807 drm/logicvc: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER
8c38cdbecb67 drm/adp: Drop the select of the nonexistent CONFIG_DRM_KMS_DMA_HELPER
928b2947f929 net: ethernet: cortina: Count RX descriptors for freeq refill
39739dd93e2a net: ethernet: cortina: Count RX drops once per frame
5754e0c07588 net: ethernet: cortina: Count dropped frames as NAPI work
a4031429ea71 net: ethernet: cortina: Finish RX updates before NAPI completion
94e06e12a376 net: ethernet: cortina: Fix budget accounting
8977d7caf05f net: macb: reject an unknown link speed in the taprio setup
203c064b09ec net: macb: zero the link settings taprio reads back
135ac58097fa vduse: return compat ioctl results directly
31d7eea4be53 net: ipv6: Clamp to IP6_MAX_MTU in ip6_dst_mtu_maybe_forward
e01b7c176d9a net: ipv6: Fix UDP length overflow with PMTU discover and big MTU
81f540827d24 net: ipv4: Fix UDP length overflow with PMTU discover and big MTU
c81c5be3826c af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.
fc62a26493a9 af_unix: Update last skb marker in manage_oob().
5378f7945856 virtio_input: stop callbacks before unregistering input device
668ebfea7ba6 virtio_input: reset device if input_register_device() fails
4a454af8e56c vhost: invalidate vring access on IOTLB transitions
c3c3b0839a11 vduse: validate virtqueue alignment
5195893d7b3d virtio-pci: return IRQ_HANDLED after non-zero ISR
2bbf1c1f6999 vdpa_sim_net: check TX pull result before RX copy
d6dac17e20fd vdpa_sim_blk: reject out-of-range sector starts
f4a93f15ed1c vhost-vdpa: protect config_ctx from being freed under the config callback
6b20b40f020b vhost-vdpa: don't install the eventfd_ctx_fdget() error in config_ctx
59522639a7d7 vhost/vdpa: reject VRING_NUM larger than device max
f620c40ea686 virtio_console: do not free control-out buffers on remove
caf042153016 virtio: fix use-after-free in unregister_virtio_device()
d595358276b6 virtio_ring: fix stale descriptor flags after a failed packed add
68a60150ee06 irqchip/gic-v5: Preserve ICC_CR0_EL1 state
6c7b3b1e7ba8 ASoC: mt6351: Publish the OF module alias
96e856bbe705 regulator: pf1550: fix which regulator is notified
a5b43094d4ea netfilter: ip6_tables: set F_PROTO when proto value is nonzero
e2dd0f1f8c4e netfilter: nfnetlink_log: cope with concurrent instance destruction
3373cfc7ec19 btrfs: fix unnecessary transaction commit fallback from btrfs_log_all_parents()
a191d3a2a08b ASoC: Intel: SST: Publish the PCI module aliases
ccbd83e69e1b ASoC: bcm: bcm63xx: Publish the OF module aliases
85a89e529b9a hwmon: (sht4x) Fix return value from heater_enable_store()
ef52acffe5c4 hwmon: (sht4x) Add missing locks
72041f02ae51 hwmon: (yogafan) fix non-kernel-doc comment
df1edd8e0f00 Documentation: hwmon: replace full-width colon by a standard ASCII colon
05beedad2de1 hwmon: (ina2xx) Decouple in0 and curr1 alarms
3e4ba0d57297 hwmon: (ina2xx) Replace masks with enum in alert functions
5949a7e98a9f hwmon: (ina2xx) Parameterize ina2xx_data in ina226_alert_read()
ba71f55c2266 hwmon: (ina2xx) Acquire hwmon_lock in shunt_resistor_show()
01dd8b4fc2cf hwmon: Fix potential UAF in pec_store
159ad4370b5a Documentation/hwmon: Document hwmon_notify_event()
aa08ce1ffaf3 hwmon: (ltc4282) Make sure clk_init_data is fully initialized
80c231f55772 iommu/amd: Fix ineffective error check in nested domain allocation
f2098875800f iommu/amd: Fix premature break in init_iommu_one() again
b6be275d19ce iommu/amd: Do not reallocate GA log buffers on resume
79ae5a5a25e1 iommu/riscv: Avoid waiting on failed command enqueue
6d4c12ab9ab8 iommu/riscv: Serialize command queue publishing
c80bfa4d49e7 iommu/riscv: Add command queue lock
16322a67336c erofs: delimit inode_share cache key components
d41e6c1533f0 ALSA: caiaq: Decoupling ep1_in_urb in caiaq dev
f8ae8275c721 bpf: Reject non-scalar bpf_loop iteration counts
edb39c7666bb net: macb: fix NULL pointer dereference on unbind with fixed-link
de22c30ec559 net/sched: ets: clamp quantum in parse and fallback paths
8f756ae1c874 net/sched: drr: clamp quantum in change class
0f5550b8b7c3 net/sched: pie: clamp psched_mtu in pie_drop_early
1f0a5bb2fa53 net/sched: dualpi2: clamp psched_mtu at all call sites
0898c6f9fa9c net/sched: hhf: clamp quantum in change and init paths
e6c1cb728e38 net/sched: sfq: clamp quantum in change path
6655b56e2801 net/sched: fq_pie: clamp quantum in change path
9ab4f3ef4701 net/mlx5e: Keep HW timestamp stats monotonic across reconfiguration
668e050429c7 net/mlx5: E-Switch, prevent mc_list repopulation during vport disable
18b296907387 net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put
1daecd76ab9e net/mlx5e: Fix use-after-free race in sample_restore_put()
b1b796a67290 net/mlx5e: Fix ETS zero BW reporting when one TC holds 100%
fa670c482eee net/mlx5: LAG, use local tracker to update active ports
df643e20c315 net/mlx5e: Fix reporting support for all RS FEC variants
2647fbc69c56 net/mlx5e: Fix setting RS FEC after remapping
f8760e28fd3f net/mlx5e: Fix missing FEC mode mapping for RS_544_514_INTERLEAVED_QUAD
5bfe927c5b4b net/sched: defer qdisc freeing after failed creation
95cd316a896f powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit
906d8dbafabf net: mctp: i3c: serialize probe with bus removal
ada0b3d6ee2d powerpc/kexec_file: Use inclusive range checks for excluded memory
0dbb7d3fc659 powerpc/kexec_file: Use inclusive range checks in add_usable_mem()
37803c6aa015 bpf: propagate mark_chain_precision() errors out of loop_flag_is_zero()
69a9ad004ccf bpf: mark a NULL call argument precise
1e6a26f21f59 pds_core: don't release PCI regions for VFs on reset
09f831bfe39d pds_core: fix cmd_regs access racing BAR unmap on reset
a638a2625aa8 net: reject oversized tx_queue_len at netlink parse time
a03b927bae4a net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations
3fa64d86fc64 vxlan: reject dynamic fdb entries that reference a nexthop id
60983356fab0 s390/ism: folio_put() after error
a4fd1ea63365 dibs: Unregister dibs_class after error
237c9ae71457 net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow
e247d033dd32 ionic: use netif_txq_maybe_stop() in ionic_tx()
94a7a895677c octeontx2-af: mcs: Clear stale X2P calibration state before calibration
f7bf57e94a5d net: bridge: mcast: properly convert mglist to rcu
cda5ac8fe8ac net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size
552e528a7d85 eth: nfp: drop the replaced rule from the list when reprogramming fails
ecebfdaab72a eth: nfp: bound the ntuple rule dump by the caller's buffer size
b231b6d8516d net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size
8e2a5ffdc32c bonding: use skb_cow_head() in bond_do_alb_xmit() and rlb_arp_xmit()
d80677ad7aa5 nexthop: Initialize extack in remove_nh_grp_entry()
72e750bf178b tracing: Fix comment in tracing_buffers_splice_read()
94e35fcbda97 ring-buffer: Cap static ring buffer nr_pages
75b37b836977 tracing: Fix subbuf resize races with trace_pipe_raw readers
5ccce5bbdfac ring-buffer: Remove ring_buffer_per_cpu::mapped
66ff2eff093d bpf: Preserve inner map identity in callback frames
86168208737b bpf: Mark NULL kptr stores precise
28fde1356dbc bpf: Cancel special fields when recycling rhtab elements
6a5266b82882 bpf: Preserve special fields in recycled rhtab elements
bb998fdbee99 selftests/bpf: Fix flaky bpf_nf test when random NAT port is 0
8adebc20f9c6 tracing: Fix to avoid creating trace instances with duplicate names
6b1f786ad85a bpf: Reject untrusted allocated-object pointers
85074498228a bpf: Keep refcount_acquire nullable for borrowed RCU kptrs
ad4ebae5dbc2 bpf: Require MEM_PERCPU for percpu kptr stores
56d5886eb53f thermal: sysfs: switch to use scnprintf() to suppress truncation warning
ddca9a3b8833 bpf: Mark the zero register precise for a register-form NULL check
a4d7f94c1ca9 bpf: Don't predict JMP32 pointer vs zero comparisons
e821ff19b8ef bpf: Don't resurrect a scalar id dropped by collect_linked_regs()
cb6642048739 bpf: Don't infer non-NULL from a pointer with an unbounded offset
bc489c0c9b8c bpf: Reject legacy packet loads from callbacks
19e8d5a98afd bpf: Mark faultable stack helpers as sleepable
17f54a8f2b97 bpf: Mark bpf_btf_find_by_name_kind() as sleepable
2410cb2ac041 bpf: Check ancestor frames for rbtree callbacks
9ef2b594f628 bpf: Track verifier instruction stats for each subprogram
24adbc2c3bbe bpf: don't rewrite bpf_fastcall patterns entered by a jump
1c1b476d43a8 bpf: zero extend the result of an arena 32-bit cmpxchg
7ddcc460176e mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context
5df7ecd30248 net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times
17e6ad484dea net: bcmasp: clear txcb->last before writing each descriptor
8f20a0f4f7d6 ASoC: Intel: avs: Refactor and fix init_config access
60b396b2aeca ASoC: Intel: avs: Fix unbalanced module reference count
b4f0941e728c ASoC: Intel: avs: Do not ignore -ENOENT when loading a topology
04447cd14ebc ASoC: Intel: avs: Clean up the bus when fetching ML caps fails
7b94af22e5c7 nvme-tcp: defer TLS inline send to io_work
18bc44e127f5 nvmet: print namespace IDs as unsigned 32bit value
140e211543bd nvme: print namespace IDs as unsigned 32bit value
52200fc41a79 nvme: remove stale namespaces by NSID range during scan
69d502457e3f ring-buffer: Add checking nr_subbufs to persistent ring buffer validation
3408e98f06ce bpf: Mark syscall helpers as sleepable
b9205e936dde bpf: Mark sched_process_wait argument as nullable
71930202a0a0 bpf: Reject resilient lock operations in rbtree callbacks
96d31b28263c bpf: Reject tail calls directly from callback frames
d2eaea3599bc bpf: Mark signal tracepoint siginfo arguments as scalar
ea383b3ea569 bpf: Fix NULL-ptr-deref in btf_var_show()
5324f4e75ff6 bpf: Fix NULL-ptr-deref when showing a void BTF type
7ca231252820 bpf: Reject key-less BTF for hash maps
3c3170d29e55 drm/rockchip: rk3066_hdmi: Add missing Kconfig selects
0e72cfedd2c5 drm/rockchip: dw_dp: Select DRM_BRIDGE_CONNECTOR
b629ae7b3edd ALSA: caiaq: Fix potential double-free at error path
f5fd0de52432 selftests/alsa: Fix the step check for INTEGER controls
c9a2db4b9950 erofs: disable LZ4 rolling decompression for now
be056cc0ee22 arm64: trans_pgd: clone only the linear map that exists at runtime
eab6f00b7c62 net: gro: Fix nesting of TCP GSO SKBs in skb_gro_receive_list()
21448b9b85a7 net: stmmac: reconfigure RX packet parser table in stmmac_hw_setup() after reset
737a95fc1528 net: airoha: enable RX_DONE interrupt for RX queue 31
c8e80c19c3b9 powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()
ade9f5464ff7 powerpc: Don't drop _TIF_RESTOREALL on syscall restart
294156139506 net/rds: don't let rds_conn_shutdown() consume a concurrent drop
1fe627e5db5c net/rds: acquire the fastpath locks in rds_conn_shutdown()
062d9e008c67 net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()
a76fa27d4464 net/rds: tcp: don't force RDS_CONN_RESETTING over a concurrent shutdown
cb62aa8f0465 net/rds: clear cp_flags bits individually in rds_conn_path_reset()
61916e746111 net/rds: use clear_bit_unlock() in release_refill()
3764627b30a2 net/rds: use wq_has_sleeper() in release_in_xmit()
aba934acbfcd net: macb: exclude software FCS from TX byte statistics
2ebeb6e8ab9d net: macb: unify device pointer naming convention
ac6631843269 net: Remove conflicting altnames for dying netns in __dev_change_net_namespace().
6d0ee411d543 bonding: do not clear curr_active_slave prematurely when releasing all slaves
92f0bd0e2b63 bpf: reject BPF_PSEUDO_FUNC reference to the main program
178ff2e011e2 tracing/probes: Fix use-after-free on field name/type of events with multiple probes
4a30aa2ba007 netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()
de6cc6ec7932 ipvs: fix reversed sequence option serialization
98d66a95b430 drm/amdgpu/userq: fix struct drm_amdgpu_info_device padding for 32bit compile
0de9f31d447a btrfs: zstd: fix lost wakeup when waiting for a workspace
b5d5ab5a7150 btrfs: do not force reloc root creation during qgroup_account_snapshot()
cb09becfebbd btrfs: send: fix lost error return value in will_overwrite_ref()
e1b168a53174 btrfs: zoned: finish active block group cleanup if call_zone_finish() fails
c8e65e7e9c03 btrfs: return proper negative error code for update_raid_extent_item()
bb4da45766d1 btrfs: fix the possible bioc_list memory leak during error
b7b94923b3b5 btrfs: fix transaction use-after-free in raid stripe insertion
fe5a889674ca btrfs: scrub: report the failing sector's address, not the stripe base
f83890dfed9e bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks
671b7b9a660e bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge
5c421d64a1ae ASoC: ux500: Program the MSP FIFO watermarks
2859e47fd3aa ASoC: ux500: Allow repeated MSP prepare calls
db6abd51ba32 ASoC: ux500: Remove obsolete PRCMU QoS calls
a68251d68fb0 ASoC: ux500: Request the MSP MMIO resource
5977cd2af922 ASoC: ux500: Deassert the MSP reset during probe
9ed5d1e428ed mfd: db8500-prcmu: Fold dbx500 header into db8500
39fb9ebea798 ASoC: ux500: Validate MSP DAI configuration
41da17079fe6 ASoC: ux500: Correct MSP frame and bit clock setup
68544eca7b18 ASoC: ux500: Propagate MSP setup errors
0fcf9ac170b8 ASoC: ux500: Fix MSP stream lifecycle handling
c62b6e081119 platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown
24f7b68b69bf printk/nbcon: Change nbcon_irq_work to IRQ_WORK_LAZY
a4cef20cd473 ALSA: ump: do not touch legacy_rmidi before it exists
34365e921d99 ksmbd: fix sparc build with atomic work state
03fa3d5585e7 octeontx2-af: Fix limiting SRIOV VF count logic
baa320fbb2f9 locking/lockdep: Invalidate stale class_cache entries for zapped classes
da0217aeeacf perf/core: Skip empty AUX records with only format flags
94a643e97e54 x86/itmt: Don't make ITMT enablement depend on debugfs
4ed549b42cf9 sched/core: Skip rq->avg_idle update without a valid idle_stamp
b0c6f9470577 sched/rt,dl: Skip migrate-disabled tasks when picking a push candidate
45504e621b7e scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues()
80b45c8b6602 perf: RISC-V: check cpu_hw_evt before dereference in overflow IRQ
3b178894931a bonding: alb: fix uninitialized transport header access in alb_determine_nd()
b79b4b290036 btrfs: restore active device pointers after failed sprout
0ea6814bc0ff btrfs: detach failed sprout device from transaction update list
9f0520143dd1 accel/amdxdna: refuse to flush an imported BO
f7ac45653209 ALSA: dummy: Report a change when one capture switch channel moves
7c372ada4aaa drm/xe/oa: Remove sysfs entry on idr_alloc failure in xe_oa_add_config_ioctl()
b66d66c2da56 ASoC: cs35l56: Fix probe deadlock waiting for SoundWire enumeration
0b027b65addd ASoC: cs35l56: Request IRQ in cs35l56_common_probe()
0f2fe40362f1 block: save page offset gaps in cloned bio
ac961c34cf39 ASoC: amd: yc: fix memory leak in acp6x_pdm_dma_close()
4dacdec65982 ASoC: amd: renoir: fix disable_pdm_interrupts() to clear mask bits
fa1bbe353449 ASoC: fsl_micfil: balance mclk enable/disable
8d11bfec8666 s390/boot: Avoid IPL parameter append past command line
36b63b4d365e s390/boot: Fix physical memory search range
537ea064c0f9 ALSA: hda: restore MFG widget enumeration after core split
e1b2c0ede2a8 net: bonding: annotate lockless writes with WRITE_ONCE()
dcb48fde8003 staging: fbtft: make dirty_lock IRQ-safe
9d714076ff39 af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().
3ad7dca5e03b ipv6: sr: restore network header before routing and forwarding
bee1459e57f2 tipc: Dont send random pad bytes in RESET/ACTIVATE messages
d0d82f1214f3 tipc: fix NULL deref in tipc_named_node_up() on empty publication list
390e6ef5325c ip6_gre: check tunnel info before xmit in ip6gre_tunnel_xmit
8c1fe5762539 ipv6: mcast: use jiffies_delta_to_clock_t() in igmp6_mc_seq_show()
2e46b0c9fcf7 ipv6: mcast: use rcu_assign_pointer() for __rcu list updates
5e62b63f56e5 ipv6: mcast: fix delay calculation in igmp6_join_group()
20db91a05233 ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source()
5149c60c4065 ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()
d24f76ea332b objtool/klp: Fix checksums for constant pool references
a8bc78d640ec klp-build: Fix wrong index in funcs cleanup error path
2b51c3d6a523 ppp: ppp_synctty: simplify tty disc_data access
1b13502b25da ppp: ppp_async: simplify tty disc_data access
e3206419bdb0 igmp: convert struct ip_sf_list to RCU
e8fac7521de6 rust: samples: add missing newlines in rust_print_main
f594f04268d0 net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted
25e26ba83302 net: ethernet: oa_tc6: Fix for the wrong data type
264c80a9bfa5 net: ethernet: oa_tc6: Disable tx queues on fatal error
b89770d49374 net: ethernet: oa_tc6: Improve the error recovery
1c1f35bc2d27 net: ethernet: oa_tc6: Protect skb pointer used by two different kernel instances
4e56cbcfe0d9 net: ethernet: oa_tc6: Add the OA_TC6_ prefix to standard registers
057351f537f5 net: ethernet: oa_tc6: Export standard defined registers
14864eec5878 net: ethernet: oa_tc6: Handle the OA TC6 SPI protected mode
95d2386a2b16 drm/pagemap: Reset migration page count on eviction retry
62451f540c46 drm/pagemap: Prevent double migration of device pages
9a17d5d364c4 ASoC: ab8500: Skip missing DMIC GPIOs on AB8505
ce643d02326e ASoC: ab8500: Remove the nonfunctional sidetone apply control
a3df2bb5923c ASoC: codecs: ab8500: Use guard() for mutex locks
e78c44bd9dca ASoC: ab8500: Validate and program TDM slots correctly
89a0d0f2c5cf ASoC: ab8500: Correct digital interface format setup
3c057babc97f ASoC: ab8500: Repair the DAPM capture graph
f48cf599c19a ASoC: ab8500: Reset the audio block before configuring it
ddf6add96811 platform/x86: asus-laptop: Fix ACPI event handling
adc86d12f13a Bluetooth: hci_mrvl: Fix wrong return value check of wait_on_bit_timeout()
cc4545a8a773 Bluetooth: L2CAP: clear FLAG_DEFER_SETUP only for same PID/PSM
df8c3af61326 Bluetooth: L2CAP: fix out-of-bounds write in l2cap_ecred_connect
6cb79e649922 Bluetooth: L2CAP: fix chan mode for LE_CONN_REQ + EXT_FLOWCTL pchan
d427b1c71d97 Bluetooth: hci_core: Fix race condition during device registration
a07b3024a927 Bluetooth: btintel: bound firmware ID by TLV length
5ec43df2830b Bluetooth: btintel: validate version TLV value lengths
89d0220cba87 workqueue: reject watchdog thresholds that overflow jiffies
84fb4138aa08 Bluetooth: btintel_pcie: Clear automask on spurious interrupts
a14c25fcec67 sched_ext: Fix vtime delta loss in scx_flatcg cgroup migration
5e2bd013ad8f sched_ext: Fix timer pinning and return value in scx_central
c93938a157d7 s390/pai: Reduce excessive debug feature size
1387c202668c s390/diag324: Preserve -EBUSY return code
280ff1985344 s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block
b6bf82bc5e00 s390/ipl: Fix NULL deref in kdump without re-IPL parm block
565eb4a12a56 s390/time: Use jiffies instead of jiffies_64
40581f10c1e5 ksmbd: fix listener task lifetime on netdev events
54cb2a909996 ksmbd: rate limit unmapped SID errors
a04dac1f2cff ksmbd: propagate DACL parsing errors
a7e6df0bb926 ksmbd: safely drain sessions during logoff
0947087678f4 smb/server: cancel async requests when closing connection
13a411272c93 ovl: return EINVAL instead of EIO in case of mismatched user_ns
b3e4eeaaff85 drm/i915/cdclk: Fix dg2_power_well_count() return type
04a36f6f1b91 drm/i915/dp_mst: Remove duplicate intel_pfit_compute_config() call
5f13ee1f3c39 octeontx2-af: fix CN20K default MCAM rule removal on port cleanup
9371188ee3c7 dma-buf: fix some kernel-doc warnings
8c1882dfee8f ALSA: pcm: Serialize PCM mmap with buffer reallocation to fix page UAF
93488ea378b4 cachefiles: Fix potential UAF/KASAN warning
5b50fa4b6d71 netfs: Fix read progress reporting
fc18818960ec netfs: Mark folios with COPY_TO_CACHE whilst issuing subreqs
8c9b33945712 netfs: Fix readahead synchronisation issues by loading all folios upfront
19f246c795e9 netfs: break unbuffered write when netfs_alloc_subrequest() fails
0a573f4283a9 netfs: Fix subreq ref leak
7ab7100edff9 netfs: Fix i_size update for partial transfer
680f6b07e7ac netfs: Fix error vs transferred passed to ->ki_complete()
8e11e842936c netfs: Fix unbuffered/DIO write partial transfer error return
ccd8bd3b8ca6 perf powerpc-vpadtl: Fix raw_size of DTL samples
325cd9a8bc42 OPP: of: Fix potential multiplication overflow when calculating freq
ef9795a0e473 perf symbol: Do not use debug file as the binary type
6495dc16e635 watchdog: msc313e: Fix NULL pointer dereference in PM callbacks
71203a41d6fa vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()
411e9b969d9d net: amd-xgbe: discard rx packets with bad FCS
55ad62f9e025 raw: annotate disconnect-side IPv4 match writers
7ba84e2971d2 sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration
4bfaf34d2d4b smb: client: transport: Fix debug printing in __release_mid()
93c6e5a8d7c5 smb/client: invalidate fscache for fallocate range operations
76222e76d08f smb/client: fix stale page cache in insert/collapse range
b7625c7de7da smb/client: fix integer truncation in collapse range
c6379b31abff smb/client: fix data corruption in emulated insert range
1c5d219498cc smb/client: mark file sparse before emulating insert range
f320ca20c273 smb/client: validate new EOF for zero range
f8cbfe3a3fce smb/client: validate new EOF for insert range
60c15270faae scsi: ufs: ufs-pci: Add MCQ support for Intel UFS 4.0 controllers
c9fdc7e2a779 scsi: ufs: ufs-pci: Add support for Intel UFS 4.0 HS-Gear5
1ccbe8c42009 scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()
5cb58b052cf0 scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()
3d698d1e6c8b sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START
43f874494321 net/sched: act_api: fix skb sizing and action leak on reoffload delete
5eb1e633b9ed net/sched: act_api: size the RTM_GETACTION reply from the actions
afca30398b99 net/sched: act_api: budget all shared attributes in notify skbs
3340b8565b85 net: iptunnel: fix stale transport header during tunnel decapsulation
e85adaac3dc6 net: stmmac: fix dma mapping leak in stmmac_tso_xmit()
ad051a0a2619 tcp: use GFP_ATOMIC in tcp_send_active_reset()
2b32f8c35609 net: icmp: avoid invalid transport header access in icmp_send tracepoint
436fa689630b bpf: don't downgrade half-dead scalar zero spills to STACK_ZERO
5811a0831075 ntfs: leave HasEA flag untouched on setxattr failure
b55c9f019e16 bpf: check_cond_jmp_op(): properly infer if register is null
7524c3145a3b ntfs: reject invalid sectors_per_cluster in the boot sector
3e2ae47b8ebc ntfs: bound $AttrDef table walk to the loaded table size
56392b0d5290 ntfs: treat any nonzero dio zero-range return as an error
ca1f9933eff7 ntfs: do not mark the volume clean in sync_fs when errors were recorded
fc070b91cca8 ntfs: skip free cluster decrement when rollback fails
7eb97d8828e7 ntfs: only count successfully cleared runs when freeing clusters
5d7f7bf8fba8 ntfs: fix kmap_local leak in write_mft_record_nolock() error paths
369597d1afa9 ntfs: return real error from ntfs_non_resident_attr_record_add()
380540243cc2 ntfs: preserve error code in ntfs_resident_attr_record_add()
b3575c669286 ntfs: return -ERANGE for undersized xattr buffer
c62f446c6339 ntfs: propagate reparse index insertion failure
6de3a77a5e75 ntfs: return DT_UNKNOWN on inode lookup failure in readdir
144f51cd0ccc drm/cirrus-qemu: Validate BAR0 size during probe
e44b3a824472 ufs: do not treat unreadable directory blocks as empty
6b08adbda8ea accel: ethosu: Don't read the U65 rounding mode as a storage mode
a615bcb8a632 cgroup/cpuset: Preserve boot-isolated CPUs on partition release
6bc03f48fdb2 selftests/cgroup: Drop invalid boot isolation comparison
eb90cb257e07 accel/amdxdna: put the chained BO when its mapping fails
ed74e8d603df accel/amdxdna: reject a command chain that carries no commands
52f3e086760a accel/amdxdna: Remove __counted_by from struct amdxdna_cmd_chain
4e6762797981 printk: Don't WARN on kthread_run failure.
876b33d8a9a0 drm/gud: validate GUD_ROTATION_0 is present in supported rotations
a9b264a563d7 sched_ext: Fix spurious aborts in scx_bpf_dsq_move() on ownership change races
c16c62c91e5d bpf: Fix percpu map update indexing with sparse CPU IDs
bdc5941f6eee bpf: Fix BPF_F_CPU validation for sparse CPU IDs
9f9477ae73de bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic
cec57b68924b selftests/cgroup: Fix cg_run_in_subcgroups ignoring arg parameter
16d1721b05d5 selftests/cgroup: set the test plan after the setup checks
ea8de2a0eddf sched_ext: Fix nonexistent field in sched-ext.rst example
60d56bf0b14d nvmet-rdma: fix queue leak when connect backlog is exceeded
e0a23e3c8c4c nvme: fix racy access to FDP placement id array
5bcff753943e nvme: set ns->head in nvme_alloc_ns_head
ca1cf71288f3 nvme: add context annotations for nvme_subsystem::lock
171b993a4aed nvme-rdma: fix -EIO cleanup order in queue_rq
c72e81ee46bd accel/qaic: Address potential out-of-bounds read in resp_worker()
455184dbe965 drm/virtio: use the DMA API for resource backing on Xen
f1050a7d3652 drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()
0e022ee4f8e0 EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation
acca637cf4b4 EDAC/igen6: Fix Raptor Lake-P logged error address
1714dbdc8667 EDAC/igen6: Fix channel address decode for non-hash mode
2b3ba2fea2a6 EDAC/igen6: Fix channel selection hash
083bbc5ae7c2 EDAC/igen6: Fix interleave boundary condition
53ed9ffdbbf4 RAS/AMD/ATL, EDAC/amd64: Only load ATL when needed
717137221c7d ppp_async: drop the errored frame instead of resetting its headroom
fe1c294202c7 leds: st1202: Validate pattern input before stopping the sequence
0c5916a03644 wifi: mt76: mt7921: skip unknown CLC firmware records
3c505e2af16a wifi: mt76: mt7921: validate CLC firmware records
111aa3934be7 iommu/arm-smmu-v3: Disable implementations during devm teardown