diff --git a/Makefile.rhelver b/Makefile.rhelver
index f8a7f247f..a51a0b73c 100644
--- a/Makefile.rhelver
+++ b/Makefile.rhelver
@@ -12,7 +12,7 @@ RHEL_MINOR = 2
 #
 # Use this spot to avoid future merge conflicts.
 # Do not trim this comment.
-RHEL_RELEASE = 128
+RHEL_RELEASE = 131
 
 #
 # RHEL_REBASE_NUM
diff --git a/kernel-aarch64-64k-debug-rhel.config b/kernel-aarch64-64k-debug-rhel.config
index eea8d023a..6eec11750 100644
--- a/kernel-aarch64-64k-debug-rhel.config
+++ b/kernel-aarch64-64k-debug-rhel.config
@@ -675,6 +675,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5467,6 +5468,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-aarch64-64k-rhel.config b/kernel-aarch64-64k-rhel.config
index 40e4ef1fd..245714976 100644
--- a/kernel-aarch64-64k-rhel.config
+++ b/kernel-aarch64-64k-rhel.config
@@ -675,6 +675,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5444,6 +5445,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index 01ffde61e..53890a4ff 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -673,6 +673,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5463,6 +5464,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-aarch64-rhel.config b/kernel-aarch64-rhel.config
index 94fc5e518..d32d39ffa 100644
--- a/kernel-aarch64-rhel.config
+++ b/kernel-aarch64-rhel.config
@@ -673,6 +673,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5440,6 +5441,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-aarch64-rt-64k-debug-rhel.config b/kernel-aarch64-rt-64k-debug-rhel.config
index 4ba510e27..edb1405af 100644
--- a/kernel-aarch64-rt-64k-debug-rhel.config
+++ b/kernel-aarch64-rt-64k-debug-rhel.config
@@ -675,6 +675,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5514,6 +5515,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-aarch64-rt-64k-rhel.config b/kernel-aarch64-rt-64k-rhel.config
index af5591882..f8d6ed958 100644
--- a/kernel-aarch64-rt-64k-rhel.config
+++ b/kernel-aarch64-rt-64k-rhel.config
@@ -675,6 +675,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5491,6 +5492,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-aarch64-rt-debug-rhel.config b/kernel-aarch64-rt-debug-rhel.config
index 1cb77dacd..b6e716117 100644
--- a/kernel-aarch64-rt-debug-rhel.config
+++ b/kernel-aarch64-rt-debug-rhel.config
@@ -673,6 +673,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5510,6 +5511,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-aarch64-rt-rhel.config b/kernel-aarch64-rt-rhel.config
index 3fe41930a..774ffb3a6 100644
--- a/kernel-aarch64-rt-rhel.config
+++ b/kernel-aarch64-rt-rhel.config
@@ -673,6 +673,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5487,6 +5488,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-ppc64le-debug-rhel.config b/kernel-ppc64le-debug-rhel.config
index 1e73a5a88..a39d5d3f1 100644
--- a/kernel-ppc64le-debug-rhel.config
+++ b/kernel-ppc64le-debug-rhel.config
@@ -513,6 +513,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5018,6 +5019,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-ppc64le-rhel.config b/kernel-ppc64le-rhel.config
index 3df1724b7..1d0b11780 100644
--- a/kernel-ppc64le-rhel.config
+++ b/kernel-ppc64le-rhel.config
@@ -513,6 +513,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -4997,6 +4998,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-riscv64-debug-rhel.config b/kernel-riscv64-debug-rhel.config
index 0a6a115b0..022114532 100644
--- a/kernel-riscv64-debug-rhel.config
+++ b/kernel-riscv64-debug-rhel.config
@@ -522,6 +522,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -4932,6 +4933,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-riscv64-rhel.config b/kernel-riscv64-rhel.config
index 275695342..e4debeff8 100644
--- a/kernel-riscv64-rhel.config
+++ b/kernel-riscv64-rhel.config
@@ -522,6 +522,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -4911,6 +4912,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-s390x-debug-rhel.config b/kernel-s390x-debug-rhel.config
index 8b65d6127..4543e439f 100644
--- a/kernel-s390x-debug-rhel.config
+++ b/kernel-s390x-debug-rhel.config
@@ -512,6 +512,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -4957,6 +4958,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 # CONFIG_REALTEK_PHY is not set
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-s390x-rhel.config b/kernel-s390x-rhel.config
index 966957a7d..ff762c8fb 100644
--- a/kernel-s390x-rhel.config
+++ b/kernel-s390x-rhel.config
@@ -512,6 +512,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -4936,6 +4937,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 # CONFIG_REALTEK_PHY is not set
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-s390x-zfcpdump-rhel.config b/kernel-s390x-zfcpdump-rhel.config
index ca4f535e0..5d45d3fc1 100644
--- a/kernel-s390x-zfcpdump-rhel.config
+++ b/kernel-s390x-zfcpdump-rhel.config
@@ -513,6 +513,7 @@ CONFIG_BLK_DEV_THROTTLING=y
 CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -4947,6 +4948,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 # CONFIG_REALTEK_PHY is not set
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-x86_64-debug-rhel.config b/kernel-x86_64-debug-rhel.config
index 6bf55e9ca..fc6c2c4f5 100644
--- a/kernel-x86_64-debug-rhel.config
+++ b/kernel-x86_64-debug-rhel.config
@@ -542,6 +542,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5285,6 +5286,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-x86_64-rhel.config b/kernel-x86_64-rhel.config
index 98615f4d2..871349f82 100644
--- a/kernel-x86_64-rhel.config
+++ b/kernel-x86_64-rhel.config
@@ -542,6 +542,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5263,6 +5264,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-x86_64-rt-debug-rhel.config b/kernel-x86_64-rt-debug-rhel.config
index 22d54c18c..986f4eb1f 100644
--- a/kernel-x86_64-rt-debug-rhel.config
+++ b/kernel-x86_64-rt-debug-rhel.config
@@ -542,6 +542,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5332,6 +5333,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel-x86_64-rt-rhel.config b/kernel-x86_64-rt-rhel.config
index 1981ab601..6c71ed294 100644
--- a/kernel-x86_64-rt-rhel.config
+++ b/kernel-x86_64-rt-rhel.config
@@ -542,6 +542,7 @@ CONFIG_BLKDEV_UBLK_LEGACY_OPCODES=y
 CONFIG_BLK_DEV_UBLK=m
 CONFIG_BLK_DEV_WRITE_MOUNTED=y
 CONFIG_BLK_DEV=y
+# CONFIG_BLK_DEV_ZONED_LOOP is not set
 CONFIG_BLK_DEV_ZONED=y
 # CONFIG_BLK_INLINE_ENCRYPTION is not set
 CONFIG_BLK_SED_OPAL=y
@@ -5310,6 +5311,7 @@ CONFIG_RD_ZSTD=y
 # CONFIG_READABLE_ASM is not set
 # CONFIG_READ_ONLY_THP_FOR_FS is not set
 CONFIG_REALTEK_AUTOPM=y
+CONFIG_REALTEK_PHY_HWMON=y
 CONFIG_REALTEK_PHY=m
 # CONFIG_REED_SOLOMON_TEST is not set
 # CONFIG_REGMAP_BUILD is not set
diff --git a/kernel.changelog b/kernel.changelog
index f86e59a71..fea9c7e41 100644
--- a/kernel.changelog
+++ b/kernel.changelog
@@ -1,3 +1,714 @@
+* Wed Sep 17 2025 Scott Weaver <scweaver@redhat.com> [6.12.0-131.el10]
+- config: new config in drivers/phy (Izabela Bakollari) [RHEL-106145]
+- net: phy: realtek: remove unsed RTL821x_PHYSR* macros (Izabela Bakollari) [RHEL-106145]
+- net: phy: realtek: make HWMON support a user-visible Kconfig symbol (Izabela Bakollari) [RHEL-106145]
+- net: phy: realtek: HWMON support for standalone versions of RTL8221B and RTL8251 (Izabela Bakollari) [RHEL-106145]
+- net: phy: realtek: add hwmon support for temp sensor on RTL822x (Izabela Bakollari) [RHEL-106145]
+- x86/hyperv: Fix kdump on Azure CVMs (Vitaly Kuznetsov) [RHEL-75576]
+- cpupower: Improve Python binding's Makefile (John B. Wyatt IV) [RHEL-91191]
+- cpupower: change binding's makefile to use -lcpupower (John B. Wyatt IV) [RHEL-91191]
+- pm: cpupower: Add missing residency header changes in cpuidle.h to SWIG (John B. Wyatt IV) [RHEL-91191]
+- pm: cpupower: Add header changes for cpufreq.h to SWIG bindings (John B. Wyatt IV) [RHEL-91191]
+- pm: cpupower: Add install and uninstall options to bindings makefile (John B. Wyatt IV) [RHEL-91191]
+- pm: cpupower: bindings: Add test to confirm cpu state is disabled (John B. Wyatt IV) [RHEL-91191]
+- pm: cpupower: bindings: Improve disable c_state block (John B. Wyatt IV) [RHEL-91191]
+- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107880]
+- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112787] {CVE-2025-38352}
+- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [RHEL-106441] {CVE-2025-38472}
+- netfilter: nf_tables: hide clash bit from userspace (Florian Westphal) [RHEL-106441]
+- selftests: netfilter: conntrack_resize.sh: extend resize test (Florian Westphal) [RHEL-106441]
+- redhat: Explicitly disable 'hostonly' mode on the dracut cmdline (Vitaly Kuznetsov) [RHEL-109610]
+- redhat: Directly use 'ukify' for building the UKI (Vitaly Kuznetsov) [RHEL-109610]
+- redhat: Add SBAT to the UKI unconditionally (Vitaly Kuznetsov) [RHEL-109610]
+- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111072] {CVE-2025-38566}
+- dpll: add reserved fields to dpll_device_ops and dpll_pin_ops structs (Ivan Vecera) [RHEL-111905]
+- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110814] {CVE-2025-38571}
+- i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-105134]
+- kselftests/mm: fix khugepaged build broken (Chunyu Hu) [RHEL-112084]
+- iommu/virtio: Make instance lookup robust (Eric Auger) [RHEL-108207]
+- enic: fix incorrect MTU comparison in enic_change_mtu() (CKI Backport Bot) [RHEL-108262]
+- net/enic: Allow at least 8 RQs to always be used (CKI Backport Bot) [RHEL-108262]
+- ixgbe: prevent from unwanted interface name changes (CKI Backport Bot) [RHEL-109604]
+- devlink: let driver opt out of automatic phys_port_name generation (CKI Backport Bot) [RHEL-109604]
+- redhat: set defaults for RHEL 10.1 (Julio Faracco)
+Resolves: RHEL-106145, RHEL-75576, RHEL-91191
+
+* Mon Sep 15 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-130.el10]
+- selftests/ftrace: Use readelf to find entry point in uprobe test (Anubhav Shelat) [RHEL-87219]
+- ublk selftests: add --no_ublk_fixed_fd for not using registered ublk char device (Ming Lei) [RHEL-106845]
+- ublk: avoid ublk_io_release() called after ublk char dev is closed (Ming Lei) [RHEL-106845]
+- block: validate QoS before calling __rq_qos_done_bio() (Ming Lei) [RHEL-106845]
+- md: improve return types of badblocks handling functions (Ming Lei) [RHEL-106845]
+- raid6: riscv: Fix NULL pointer dereference caused by a missing clobber (Ming Lei) [RHEL-106845]
+- dm-stripe: limit chunk_sectors to the stripe size (Ming Lei) [RHEL-106845]
+- md/raid10: set chunk_sectors limit (Ming Lei) [RHEL-106845]
+- md/raid0: set chunk_sectors limit (Ming Lei) [RHEL-106845]
+- md: allow removing faulty rdev during resync (Ming Lei) [RHEL-106845]
+- md/raid5: unset WQ_CPU_INTENSIVE for raid5 unbound workqueue (Ming Lei) [RHEL-106845]
+- md: remove/add redundancy group only in level change (Ming Lei) [RHEL-106845]
+- raid6: Add RISC-V SIMD syndrome and recovery calculations (Ming Lei) [RHEL-106845]
+- md/raid1: Add check for missing source disk in process_checks() (Ming Lei) [RHEL-106845]
+- md/raid10: fix missing discard IO accounting (Ming Lei) [RHEL-106845]
+- block: avoid cpu_hotplug_lock depedency on freeze_lock (Ming Lei) [RHEL-106845]
+- block: decrement block_rq_qos static key in rq_qos_del() (Ming Lei) [RHEL-106845]
+- block: skip q->rq_qos check in rq_qos_done_bio() (Ming Lei) [RHEL-106845]
+- blk-mq: fix lockdep warning in __blk_mq_update_nr_hw_queues (Ming Lei) [RHEL-106845]
+- selftests: ublk: Use ARRAY_SIZE() macro to improve code (Ming Lei) [RHEL-106845]
+- block: fix kobject double initialization in add_disk (Ming Lei) [RHEL-106845]
+- block: fix potential deadlock while running nr_hw_queue update (Ming Lei) [RHEL-106845]
+- block: fix lockdep warning caused by lock dependency in elv_iosched_store (Ming Lei) [RHEL-106845]
+- block: move elevator queue allocation logic into blk_mq_init_sched (Ming Lei) [RHEL-106845]
+- ublk: check for unprivileged daemon on each I/O fetch (Ming Lei) [RHEL-106845]
+- ublk: don't quiesce in ublk_ch_release (Ming Lei) [RHEL-106845]
+- ublk: remove unused req argument from ublk_sub_req_ref() (Ming Lei) [RHEL-106845]
+- selftests: ublk: add utils.h (Ming Lei) [RHEL-106845]
+- selftests: ublk: add helper ublk_handle_uring_cmd() for handle ublk command (Ming Lei) [RHEL-106845]
+- selftests: ublk: improve flags naming (Ming Lei) [RHEL-106845]
+- selftests: ublk: remove ublk queue self-defined flags (Ming Lei) [RHEL-106845]
+- selftests: ublk: pass 'ublk_thread *' to more common helpers (Ming Lei) [RHEL-106845]
+- selftests: ublk: pass 'ublk_thread *' to ->queue_io() and ->tgt_io_done() (Ming Lei) [RHEL-106845]
+- selftests: ublk: remove `tag` parameter of ->tgt_io_done() (Ming Lei) [RHEL-106845]
+- ublk: pass 'const struct ublk_io *' to ublk_[un]map_io() (Ming Lei) [RHEL-106845]
+- ublk: remove ublk_commit_and_fetch() (Ming Lei) [RHEL-106845]
+- ublk: add helper ublk_check_fetch_buf() (Ming Lei) [RHEL-106845]
+- ublk: store auto buffer register data into `struct ublk_io` (Ming Lei) [RHEL-106845]
+- ublk: move auto buffer register handling into one dedicated helper (Ming Lei) [RHEL-106845]
+- ublk: avoid to pass `struct ublksrv_io_cmd *` to ublk_commit_and_fetch() (Ming Lei) [RHEL-106845]
+- ublk: let ublk_fill_io_cmd() cover more things (Ming Lei) [RHEL-106845]
+- ublk: move fake timeout logic into __ublk_complete_rq() (Ming Lei) [RHEL-106845]
+- ublk: look up ublk task via its pid in timeout handler (Ming Lei) [RHEL-106845]
+- ublk: validate ublk server pid (Ming Lei) [RHEL-106845]
+- ublk: introduce and use ublk_set_canceling helper (Ming Lei) [RHEL-106845]
+- ublk: speed up ublk server exit handling (Ming Lei) [RHEL-106845]
+- blk-mq: add number of queue calc helper (Ming Lei) [RHEL-106845]
+- ublk: cache-align struct ublk_io (Ming Lei) [RHEL-106845]
+- ublk: remove ubq checks from ublk_{get,put}_req_ref() (Ming Lei) [RHEL-106845]
+- ublk: optimize UBLK_IO_UNREGISTER_IO_BUF on daemon task (Ming Lei) [RHEL-106845]
+- ublk: optimize UBLK_IO_REGISTER_IO_BUF on daemon task (Ming Lei) [RHEL-106845]
+- ublk: return early if blk_should_fake_timeout() (Ming Lei) [RHEL-106845]
+- ublk: allow UBLK_IO_(UN)REGISTER_IO_BUF on any task (Ming Lei) [RHEL-106845]
+- ublk: don't take ublk_queue in ublk_unregister_io_buf() (Ming Lei) [RHEL-106845]
+- ublk: consolidate UBLK_IO_FLAG_{ACTIVE,OWNED_BY_SRV} checks (Ming Lei) [RHEL-106845]
+- ublk: remove task variable from __ublk_ch_uring_cmd() (Ming Lei) [RHEL-106845]
+- ublk: handle UBLK_IO_FETCH_REQ earlier (Ming Lei) [RHEL-106845]
+- ublk: check cmd_op first (Ming Lei) [RHEL-106845]
+- ublk: remove struct ublk_rq_data (Ming Lei) [RHEL-106845]
+- ublk: use vmalloc for ublk_device's __queues (Ming Lei) [RHEL-106845]
+- redhat/configs: Adding CONFIG_BLK_DEV_ZONED_LOOP (Ming Lei) [RHEL-106845]
+- block: restore default wbt enablement (Ming Lei) [RHEL-106845]
+- zloop: fix KASAN use-after-free of tag set (Ming Lei) [RHEL-106845] {CVE-2025-38620}
+- mm: fix vmstat after removing NR_BOUNCE (Ming Lei) [RHEL-106845]
+- nbd: fix lockdep deadlock warning (Ming Lei) [RHEL-106845]
+- block: restore two stage elevator switch while running nr_hw_queue update (Ming Lei) [RHEL-106845]
+- md/raid10: fix set but not used variable in sync_request_write() (Ming Lei) [RHEL-106845]
+- block: fix module reference leak in mq-deadline I/O scheduler (Ming Lei) [RHEL-106845]
+- nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list() (Ming Lei) [RHEL-106845]
+- block: fix kobject leak in blk_unregister_queue (Ming Lei) [RHEL-106845]
+- nbd: fix uaf in nbd_genl_connect() error path (Ming Lei) [RHEL-106845] {CVE-2025-38443}
+- md/md-bitmap: fix GPF in bitmap_get_stats() (Ming Lei) [RHEL-106845] {CVE-2025-38451}
+- md/md-bitmap: fix stats collection for external bitmaps (Ming Lei) [RHEL-106845]
+- md/raid1,raid10: strip REQ_NOWAIT from member bios (Ming Lei) [RHEL-106845]
+- raid10: cleanup memleak at raid10_make_request (Ming Lei) [RHEL-106845] {CVE-2025-38444}
+- md/raid1: Fix stack memory use after return in raid1_reshape (Ming Lei) [RHEL-106845] {CVE-2025-38445}
+- brd: fix sleeping function called from invalid context in brd_insert_page() (Ming Lei) [RHEL-106845]
+- ublk: don't queue request if the associated uring_cmd is canceled (Ming Lei) [RHEL-106845]
+- block: fix false warning in bdev_count_inflight_rw() (Ming Lei) [RHEL-106845]
+- ublk: sanity check add_dev input for underflow (Ming Lei) [RHEL-106845]
+- ublk: setup ublk_io correctly in case of ublk_get_data() failure (Ming Lei) [RHEL-106845]
+- ublk: update UBLK_F_SUPPORT_ZERO_COPY comment in UAPI header (Ming Lei) [RHEL-106845]
+- ublk: fix narrowing warnings in UAPI header (Ming Lei) [RHEL-106845]
+- selftests: ublk: don't take same backing file for more than one ublk devices (Ming Lei) [RHEL-106845]
+- ublk: build batch from IOs in same io_ring_ctx and io task (Ming Lei) [RHEL-106845]
+- ublk: santizize the arguments from userspace when adding a device (Ming Lei) [RHEL-106845] {CVE-2025-38182}
+- aoe: defer rexmit timer downdev work to workqueue (Ming Lei) [RHEL-106845]
+- aoe: clean device rq_list in aoedev_downdev() (Ming Lei) [RHEL-106845] {CVE-2025-38326}
+- nvme: always punt polled uring_cmd end_io work to task_work (Ming Lei) [RHEL-106845]
+- Documentation: ublk: Separate UBLK_F_AUTO_BUF_REG fallback behavior sublists (Ming Lei) [RHEL-106845]
+- block: Fix bvec_set_folio() for very large folios (Ming Lei) [RHEL-106845]
+- bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP (Ming Lei) [RHEL-106845]
+- block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work (Ming Lei) [RHEL-106845] {CVE-2025-38302}
+- block: Clear BIO_EMULATES_ZONE_APPEND flag on BIO completion (Ming Lei) [RHEL-106845]
+- ublk: document auto buffer registration(UBLK_F_AUTO_BUF_REG) (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: improve behavior on init failure (Ming Lei) [RHEL-106845]
+- block: drop direction param from bio_integrity_copy_user() (Ming Lei) [RHEL-106845]
+- selftests: ublk: cover PER_IO_DAEMON in more stress tests (Ming Lei) [RHEL-106845]
+- Documentation: ublk: document UBLK_F_PER_IO_DAEMON (Ming Lei) [RHEL-106845]
+- selftests: ublk: add stress test for per io daemons (Ming Lei) [RHEL-106845]
+- selftests: ublk: add functional test for per io daemons (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: decouple ublk_queues from ublk server threads (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: move per-thread data out of ublk_queue (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: lift queue initialization out of thread (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: tie sqe allocation to io instead of queue (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: plumb q_id in io_uring user_data (Ming Lei) [RHEL-106845]
+- ublk: have a per-io daemon instead of a per-queue daemon (Ming Lei) [RHEL-106845]
+- md/md-bitmap: remove parameter slot from bitmap_create() (Ming Lei) [RHEL-106845]
+- md/md-bitmap: cleanup bitmap_ops->startwrite() (Ming Lei) [RHEL-106845]
+- md/dm-raid: remove max_write_behind setting limit (Ming Lei) [RHEL-106845]
+- md/md-bitmap: fix dm-raid max_write_behind setting (Ming Lei) [RHEL-106845]
+- md/raid1,raid10: don't handle IO error for REQ_RAHEAD and REQ_NOWAIT (Ming Lei) [RHEL-106845]
+- selftests: ublk: add test for UBLK_F_QUIESCE (Ming Lei) [RHEL-106845]
+- ublk: add feature UBLK_F_QUIESCE (Ming Lei) [RHEL-106845]
+- selftests: ublk: add test case for UBLK_U_CMD_UPDATE_SIZE (Ming Lei) [RHEL-106845]
+- traceevent/block: Add REQ_ATOMIC flag to block trace events (Ming Lei) [RHEL-106845]
+- ublk: run auto buf unregisgering in same io_ring_ctx with registering (Ming Lei) [RHEL-106845]
+- io_uring: add helper io_uring_cmd_ctx_handle() (Ming Lei) [RHEL-106845]
+- ublk: remove io argument from ublk_auto_buf_reg_fallback() (Ming Lei) [RHEL-106845]
+- ublk: handle ublk_set_auto_buf_reg() failure correctly in ublk_fetch() (Ming Lei) [RHEL-106845]
+- selftests: ublk: add test for covering UBLK_AUTO_BUF_REG_FALLBACK (Ming Lei) [RHEL-106845]
+- selftests: ublk: support UBLK_F_AUTO_BUF_REG (Ming Lei) [RHEL-106845]
+- ublk: support UBLK_AUTO_BUF_REG_FALLBACK (Ming Lei) [RHEL-106845]
+- ublk: register buffer to local io_uring with provided buf index via UBLK_F_AUTO_BUF_REG (Ming Lei) [RHEL-106845]
+- ublk: prepare for supporting to register request buffer automatically (Ming Lei) [RHEL-106845]
+- ublk: convert to refcount_t (Ming Lei) [RHEL-106845]
+- selftests: ublk: make IO & device removal test more stressful (Ming Lei) [RHEL-106845]
+- nvmet-tcp: switch to using the crc32c library (Ming Lei) [RHEL-106845]
+- nvmet: replace strncpy with strscpy (Ming Lei) [RHEL-106845]
+- nvme-tcp: open-code nvme_tcp_queue_request() for R2T (Ming Lei) [RHEL-106845]
+- nvme-loop: avoid -Wflex-array-member-not-at-end warning (Ming Lei) [RHEL-106845]
+- blk-mq: add a copyright notice to blk-mq-dma.c (Ming Lei) [RHEL-106845]
+- blk-mq: move the DMA mapping code to a separate file (Ming Lei) [RHEL-106845]
+- cdrom: Remove unnecessary NULL check before unregister_sysctl_table() (Ming Lei) [RHEL-106845]
+- block: fix elv_update_nr_hw_queues() to reattach elevator (Ming Lei) [RHEL-106845]
+- brd: avoid extra xarray lookups on first write (Ming Lei) [RHEL-106845]
+- block: Remove obsolete configs BLK_MQ_{PCI,VIRTIO} (Ming Lei) [RHEL-106845]
+- block: remove the same_page output argument to bvec_try_merge_page (Ming Lei) [RHEL-106845]
+- block: unfreeze queue if realloc tag set fails during nr_hw_queues update (Ming Lei) [RHEL-106845]
+- md: clean up accounting for issued sync IO (Ming Lei) [RHEL-106845]
+- md: fix is_mddev_idle() (Ming Lei) [RHEL-106845]
+- md: add a new api sync_io_depth (Ming Lei) [RHEL-106845]
+- md: record dm-raid gendisk in mddev (Ming Lei) [RHEL-106845]
+- block: export API to get the number of bdev inflight IO (Ming Lei) [RHEL-106845]
+- block: clean up blk_mq_in_flight_rw() (Ming Lei) [RHEL-106845]
+- block: WARN if bdev inflight counter is negative (Ming Lei) [RHEL-106845]
+- block: reuse part_in_flight_rw for part_in_flight (Ming Lei) [RHEL-106845]
+- blk-mq: remove blk_mq_in_flight() (Ming Lei) [RHEL-106845]
+- block: move removing elevator after deleting disk->queue_kobj (Ming Lei) [RHEL-106845]
+- block: don't quiesce queue for calling elevator_set_none() (Ming Lei) [RHEL-106845]
+- fs: aio: initialize .ki_write_stream of read-write request (Ming Lei) [RHEL-106845]
+- dm-integrity: use bio_add_virt_nofail (Ming Lei) [RHEL-106845]
+- dm-bufio: use bio_add_virt_nofail (Ming Lei) [RHEL-106845]
+- PM: hibernate: split and simplify hib_submit_io (Ming Lei) [RHEL-106845]
+- zonefs: use bdev_rw_virt in zonefs_read_super (Ming Lei) [RHEL-106845]
+- gfs2: use bdev_rw_virt in gfs2_read_super (Ming Lei) [RHEL-106845]
+- rnbd-srv: use bio_add_virt_nofail (Ming Lei) [RHEL-106845]
+- bcache: use bio_add_virt_nofail (Ming Lei) [RHEL-106845]
+- block: simplify bio_map_kern (Ming Lei) [RHEL-106845]
+- block: pass the operation to bio_{map,copy}_kern (Ming Lei) [RHEL-106845]
+- block: remove the q argument from blk_rq_map_kern (Ming Lei) [RHEL-106845]
+- block: add a bio_add_vmalloc helpers (Ming Lei) [RHEL-106845]
+- block: add a bio_add_max_vecs helper (Ming Lei) [RHEL-106845]
+- block: add a bdev_rw_virt helper (Ming Lei) [RHEL-106845]
+- block: add a bio_add_virt_nofail helper (Ming Lei) [RHEL-106845]
+- block: fix warning on 'make htmldocs' (Ming Lei) [RHEL-106845]
+- nvme: fix incorrect sizeof (Ming Lei) [RHEL-106845]
+- nvme: fix write_stream_granularity initialization (Ming Lei) [RHEL-106845]
+- nvme: use fdp streams if write stream is provided (Ming Lei) [RHEL-106845]
+- nvme: register fdp parameters with the block layer (Ming Lei) [RHEL-106845]
+- nvme: add FDP definitions (Ming Lei) [RHEL-106845]
+- nvme: pass a void pointer to nvme_get/set_features for the result (Ming Lei) [RHEL-106845]
+- nvme: add a nvme_get_log_lsi helper (Ming Lei) [RHEL-106845]
+- io_uring: enable per-io write streams (Ming Lei) [RHEL-106845]
+- block: expose write streams for block device nodes (Ming Lei) [RHEL-106845]
+- block: introduce a write_stream_granularity queue limit (Ming Lei) [RHEL-106845]
+- block: introduce max_write_streams queue limit (Ming Lei) [RHEL-106845]
+- block: add a bi_write_stream field (Ming Lei) [RHEL-106845]
+- fs: add a write stream field to the kiocb (Ming Lei) [RHEL-106845]
+- block: only update request sector if needed (Ming Lei) [RHEL-106845]
+- block: move wbt_enable_default() out of queue freezing from sched ->exit() (Ming Lei) [RHEL-106845]
+- block: move hctx cpuhp add/del out of queue freezing (Ming Lei) [RHEL-106845]
+- block: don't acquire ->elevator_lock in blk_mq_map_swqueue and blk_mq_realloc_hw_ctxs (Ming Lei) [RHEL-106845]
+- block: move hctx debugfs/sysfs registering out of freezing queue (Ming Lei) [RHEL-106845]
+- block: move elv_register[unregister]_queue out of elevator_lock (Ming Lei) [RHEL-106845]
+- block: add new helper for disabling elevator switch when deleting disk (Ming Lei) [RHEL-106845]
+- block: fail to show/store elevator sysfs attribute if elevator is dying (Ming Lei) [RHEL-106845]
+- block: remove elevator queue's type check in elv_attr_show/store() (Ming Lei) [RHEL-106845]
+- block: pass elevator_queue to elv_register_queue & unregister_queue (Ming Lei) [RHEL-106845]
+- block: unifying elevator change (Ming Lei) [RHEL-106845]
+- block: add `struct elv_change_ctx` for unifying elevator change (Ming Lei) [RHEL-106845]
+- block: move queue freezing & elevator_lock into elevator_change() (Ming Lei) [RHEL-106845]
+- block: simplify elevator reattachment for updating nr_hw_queues (Ming Lei) [RHEL-106845]
+- block: move blk_queue_registered() check into elv_iosched_store() (Ming Lei) [RHEL-106845]
+- block: fold elevator_disable into elevator_switch (Ming Lei) [RHEL-106845]
+- block: look up the elevator type in elevator_switch (Ming Lei) [RHEL-106845]
+- block: don't allow to switch elevator if updating nr_hw_queues is in-progress (Ming Lei) [RHEL-106845]
+- block: prevent adding/deleting disk during updating nr_hw_queues (Ming Lei) [RHEL-106845]
+- block: add helper add_disk_final() (Ming Lei) [RHEL-106845]
+- block: move sched debugfs register into elvevator_register_queue (Ming Lei) [RHEL-106845]
+- block: add two helpers for registering/un-registering sched debugfs (Ming Lei) [RHEL-106845]
+- block: use q->elevator with ->elevator_lock held in elv_iosched_show() (Ming Lei) [RHEL-106845]
+- block: don't call freeze queue in elevator_switch() and elevator_disable() (Ming Lei) [RHEL-106845]
+- block: move ELEVATOR_FLAG_DISABLE_WBT a request queue flag (Ming Lei) [RHEL-106845]
+- block: move blk_mq_add_queue_tag_set() after blk_mq_map_swqueue() (Ming Lei) [RHEL-106845]
+- brd: fix discard end sector (Ming Lei) [RHEL-106845]
+- brd: fix aligned_sector from brd_do_discard() (Ming Lei) [RHEL-106845]
+- brd: protect page with rcu (Ming Lei) [RHEL-106845]
+- ublk: consolidate UBLK_IO_FLAG_OWNED_BY_SRV checks (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: fix include path (Ming Lei) [RHEL-106845]
+- selftests: ublk: make test_generic_06 silent on success (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: build with -Werror iff WERROR!=0 (Ming Lei) [RHEL-106845]
+- mm: remove NR_BOUNCE zone stat (Ming Lei) [RHEL-106845]
+- block: remove bounce buffering support (Ming Lei) [RHEL-106845]
+- scsi: remove the no_highmem flag in the host (Ming Lei) [RHEL-106845]
+- usb-storage: reject probe of device one non-DMA HCDs when using highmem (Ming Lei) [RHEL-106845]
+- scsi: make ppa depend on !HIGHMEM (Ming Lei) [RHEL-106845]
+- scsi: make imm depend on !HIGHMEM (Ming Lei) [RHEL-106845]
+- scsi: make aha152x depend on !HIGHMEM (Ming Lei) [RHEL-106845]
+- block: use writeback_iter (Ming Lei) [RHEL-106845]
+- ublk: store request pointer in ublk_io (Ming Lei) [RHEL-106845]
+- ublk: check UBLK_IO_FLAG_OWNED_BY_SRV in ublk_abort_queue() (Ming Lei) [RHEL-106845]
+- ublk: don't call ublk_dispatch_req() for NEED_GET_DATA (Ming Lei) [RHEL-106845]
+- ublk: factor out ublk_start_io() helper (Ming Lei) [RHEL-106845]
+- ublk: don't log uring_cmd cmd_op in ublk_dispatch_req() (Ming Lei) [RHEL-106845]
+- ublk: take const ubq pointer in ublk_get_iod() (Ming Lei) [RHEL-106845]
+- ublk: remove misleading "ubq" in "ubq_complete_io_cmd()" (Ming Lei) [RHEL-106845]
+- ublk: fix "immepdately" typo in comment (Ming Lei) [RHEL-106845]
+- ublk: factor out ublk_commit_and_fetch (Ming Lei) [RHEL-106845]
+- block: avoid hctx spinlock for plug with multiple queues (Ming Lei) [RHEL-106845]
+- block: factor out blk_mq_dispatch_queue_requests() helper (Ming Lei) [RHEL-106845]
+- block: take rq_list instead of plug in dispatch functions (Ming Lei) [RHEL-106845]
+- Documentation: Document the new zoned loop block device driver (Ming Lei) [RHEL-106845]
+- block: new zoned loop block device driver (Ming Lei) [RHEL-106845]
+- brd: use memcpy_{to,from]_page in brd_rw_bvec (Ming Lei) [RHEL-106845]
+- brd: split I/O at page boundaries (Ming Lei) [RHEL-106845]
+- brd: use bvec_kmap_local in brd_do_bvec (Ming Lei) [RHEL-106845]
+- brd: remove the sector variable in brd_submit_bio (Ming Lei) [RHEL-106845]
+- brd: pass a bvec pointer to brd_do_bvec (Ming Lei) [RHEL-106845]
+- ublk: remove unnecessary ubq checks (Ming Lei) [RHEL-106845]
+- ublk: Add UBLK_U_CMD_UPDATE_SIZE (Ming Lei) [RHEL-106845]
+- block: blk-rq-qos: guard rq-qos helpers by static key (Ming Lei) [RHEL-106845]
+- block: ensure that struct blk_mq_alloc_data is fully initialized (Ming Lei) [RHEL-106845]
+- block: Simplify blk_mq_dispatch_rq_list() and its callers (Ming Lei) [RHEL-106845]
+- ublk: fix dead loop when canceling io command (Ming Lei) [RHEL-106845]
+- ublk: remove the check of ublk_need_req_ref() from __ublk_check_and_get_req (Ming Lei) [RHEL-106845]
+- ublk: enhance check for register/unregister io buffer command (Ming Lei) [RHEL-106845]
+- ublk: decouple zero copy from user copy (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix UBLK_F_NEED_GET_DATA (Ming Lei) [RHEL-106845]
+- ublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd (Ming Lei) [RHEL-106845] {CVE-2025-37906}
+- ublk: call ublk_dispatch_req() for handling UBLK_U_IO_NEED_GET_DATA (Ming Lei) [RHEL-106845]
+- selftests: ublk: common: fix _get_disk_dev_t for pre-9.0 coreutils (Ming Lei) [RHEL-106845]
+- selftests: ublk: remove useless 'delay_us' from 'struct dev_ctx' (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix recover test (Ming Lei) [RHEL-106845]
+- selftests: ublk: add generic_06 for covering fault inject (Ming Lei) [RHEL-106845]
+- ublk: simplify aborting ublk request (Ming Lei) [RHEL-106845]
+- ublk: remove __ublk_quiesce_dev() (Ming Lei) [RHEL-106845]
+- ublk: improve detection and handling of ublk server exit (Ming Lei) [RHEL-106845]
+- ublk: move device reset into ublk_ch_release() (Ming Lei) [RHEL-106845]
+- ublk: rely on ->canceling for dealing with ublk_nosrv_dev_should_queue_io (Ming Lei) [RHEL-106845]
+- ublk: add ublk_force_abort_dev() (Ming Lei) [RHEL-106845]
+- ublk: properly serialize all FETCH_REQs (Ming Lei) [RHEL-106845]
+- selftests: ublk: move creating UBLK_TMP into _prep_test() (Ming Lei) [RHEL-106845]
+- selftests: ublk: add test_stress_05.sh (Ming Lei) [RHEL-106845]
+- selftests: ublk: support user recovery (Ming Lei) [RHEL-106845]
+- selftests: ublk: support target specific command line (Ming Lei) [RHEL-106845]
+- selftests: ublk: increase max nr_queues and queue depth (Ming Lei) [RHEL-106845]
+- selftests: ublk: set queue pthread's cpu affinity (Ming Lei) [RHEL-106845]
+- selftests: ublk: setup ring with IORING_SETUP_SINGLE_ISSUER/IORING_SETUP_DEFER_TASKRUN (Ming Lei) [RHEL-106845]
+- selftests: ublk: add two stress tests for zero copy feature (Ming Lei) [RHEL-106845]
+- selftests: ublk: run stress tests in parallel (Ming Lei) [RHEL-106845]
+- selftests: ublk: make sure _add_ublk_dev can return in sub-shell (Ming Lei) [RHEL-106845]
+- selftests: ublk: cleanup backfile automatically (Ming Lei) [RHEL-106845]
+- selftests: ublk: add io_uring uapi header (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix ublk_find_tgt() (Ming Lei) [RHEL-106845]
+- ublk: don't suggest CONFIG_BLK_DEV_UBLK=Y (Ming Lei) [RHEL-106845]
+- ublk: pass ublksrv_ctrl_cmd * instead of io_uring_cmd * (Ming Lei) [RHEL-106845]
+- ublk: don't fail request for recovery & reissue in case of ubq->canceling (Ming Lei) [RHEL-106845]
+- ublk: fix handling recovery & reissue in ublk_abort_queue() (Ming Lei) [RHEL-106845] {CVE-2025-37759}
+- selftests: ublk: fix test_stripe_04 (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: validate buffer count with offset for cloning (Ming Lei) [RHEL-106845] {CVE-2025-38196}
+- io_uring/memmap: cast nr_pages to size_t before shifting (Ming Lei) [RHEL-106845]
+- io_uring/poll: fix POLLERR handling (Ming Lei) [RHEL-106845]
+- io_uring/net: only consider msg_inq if larger than 1 (Ming Lei) [RHEL-106845]
+- io_uring: don't assume uaddr alignment in io_vec_fill_bvec (Ming Lei) [RHEL-106845]
+- io_uring/net: always use current transfer count for buffer put (Ming Lei) [RHEL-106845]
+- io_uring/net: only retry recv bundle for a full transfer (Ming Lei) [RHEL-106845]
+- io_uring: fix overflow resched cqe reordering (Ming Lei) [RHEL-106845]
+- io_uring/cmd: axe duplicate io_uring_cmd_import_fixed_vec() declaration (Ming Lei) [RHEL-106845]
+- io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo() (Ming Lei) [RHEL-106845] {CVE-2025-38002}
+- io_uring/memmap: don't use page_address() on a highmem page (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: fix hybrid polling initialization issue (Ming Lei) [RHEL-106845]
+- io_uring/sqpoll: Increase task_work submission batch size (Ming Lei) [RHEL-106845]
+- io_uring: always arm linked timeouts prior to issue (Ming Lei) [RHEL-106845]
+- io_uring/fdinfo: annotate racy sq/cq head/tail reads (Ming Lei) [RHEL-106845]
+- io_uring: fix 'sync' handling of io_fallback_tw() (Ming Lei) [RHEL-106845]
+- io_uring: don't duplicate flushing in io_req_post_cqe (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: ensure segments counts are correct on kbuf buffers (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: send exact nr_segs for fixed buffer (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: refactor io_import_fixed (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: separate kbuf offset adjustments (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: don't skip offset calculation (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: reject zero sized provided buffers (Ming Lei) [RHEL-106845]
+- io_uring: don't post tag CQEs on file/buffer registration failure (Ming Lei) [RHEL-106845]
+- io_uring: always do atomic put from iowq (Ming Lei) [RHEL-106845]
+- selftests: ublk: enable zero copy for stripe target (Ming Lei) [RHEL-106845]
+- io_uring: support vectored kernel fixed buffer (Ming Lei) [RHEL-106845]
+- io_uring: add validate_fixed_range() for validate fixed buffer (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: fix an error log line (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: use ioctl-encoded opcodes (Ming Lei) [RHEL-106845]
+- io_uring/net: avoid import_ubuf for regvec send (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: check size when importing reg buffer (Ming Lei) [RHEL-106845]
+- io_uring: cleanup {g,s]etsockopt sqe reading (Ming Lei) [RHEL-106845]
+- io_uring: hide caches sqes from drivers (Ming Lei) [RHEL-106845]
+- io_uring: add req flag invariant build assertion (Ming Lei) [RHEL-106845]
+- Documentation: ublk: remove dead footnote (Ming Lei) [RHEL-106845]
+- selftests: ublk: specify io_cmd_buf pointer type (Ming Lei) [RHEL-106845]
+- ublk: specify io_cmd_buf pointer type (Ming Lei) [RHEL-106845]
+- io_uring: don't pass ctx to tw add remote helper (Ming Lei) [RHEL-106845]
+- io_uring/msg: initialise msg request opcode (Ming Lei) [RHEL-106845]
+- io_uring/msg: rename io_double_lock_ctx() (Ming Lei) [RHEL-106845]
+- io_uring/net: import zc ubuf earlier (Ming Lei) [RHEL-106845]
+- io_uring/net: set sg_from_iter in advance (Ming Lei) [RHEL-106845]
+- io_uring/net: clusterise send vs msghdr branches (Ming Lei) [RHEL-106845]
+- io_uring/net: unify sendmsg setup with zc (Ming Lei) [RHEL-106845]
+- io_uring/net: combine sendzc flags writes (Ming Lei) [RHEL-106845]
+- io_uring/net: open code io_net_vec_assign() (Ming Lei) [RHEL-106845]
+- io_uring/net: open code io_sendmsg_copy_hdr() (Ming Lei) [RHEL-106845]
+- ublk: store req in ublk_uring_cmd_pdu for ublk_cmd_tw_cb() (Ming Lei) [RHEL-106845]
+- ublk: avoid redundant io->cmd in ublk_queue_cmd_list() (Ming Lei) [RHEL-106845]
+- ublk: get ubq from pdu in ublk_cmd_list_tw_cb() (Ming Lei) [RHEL-106845]
+- ublk: skip 1 NULL check in ublk_cmd_list_tw_cb() loop (Ming Lei) [RHEL-106845]
+- ublk: remove unused cmd argument to ublk_dispatch_req() (Ming Lei) [RHEL-106845]
+- selftests: ublk: add test for checking zero copy related parameter (Ming Lei) [RHEL-106845]
+- selftests: ublk: add more tests for covering MQ (Ming Lei) [RHEL-106845]
+- ublk: rename ublk_rq_task_work_cb as ublk_cmd_tw_cb (Ming Lei) [RHEL-106845]
+- ublk: implement ->queue_rqs() (Ming Lei) [RHEL-106845]
+- ublk: document zero copy feature (Ming Lei) [RHEL-106845]
+- ublk: add segment parameter (Ming Lei) [RHEL-106845]
+- ublk: call io_uring_cmd_to_pdu to get uring_cmd pdu (Ming Lei) [RHEL-106845]
+- ublk: add helper of ublk_need_map_io() (Ming Lei) [RHEL-106845]
+- ublk: remove two unused fields from 'struct ublk_queue' (Ming Lei) [RHEL-106845]
+- ublk: comment on ubq->canceling handling in ublk_queue_rq() (Ming Lei) [RHEL-106845]
+- ublk: make sure ubq->canceling is set when queue is frozen (Ming Lei) [RHEL-106845] {CVE-2025-22068}
+- io_uring/net: account memory for zc sendmsg (Ming Lei) [RHEL-106845]
+- io_uring/net: fix io_req_post_cqe abuse by send bundle (Ming Lei) [RHEL-106845]
+- io_uring/net: use REQ_F_IMPORT_BUFFER for send_zc (Ming Lei) [RHEL-106845]
+- io_uring: move min_events sanitisation (Ming Lei) [RHEL-106845]
+- io_uring: rename "min" arg in io_iopoll_check() (Ming Lei) [RHEL-106845]
+- io_uring: open code __io_post_aux_cqe() (Ming Lei) [RHEL-106845]
+- io_uring: defer iowq cqe overflow via task_work (Ming Lei) [RHEL-106845]
+- io_uring: fix retry handling off iowq (Ming Lei) [RHEL-106845]
+- io_uring/net: only import send_zc buffer once (Ming Lei) [RHEL-106845]
+- io_uring/cmd: introduce io_uring_cmd_import_fixed_vec (Ming Lei) [RHEL-106845]
+- io_uring/cmd: add iovec cache for commands (Ming Lei) [RHEL-106845]
+- io_uring/cmd: don't expose entire cmd async data (Ming Lei) [RHEL-106845]
+- io_uring: rename the data cmd cache (Ming Lei) [RHEL-106845]
+- io_uring: rely on io_prep_reg_vec for iovec placement (Ming Lei) [RHEL-106845]
+- io_uring: introduce io_prep_reg_iovec() (Ming Lei) [RHEL-106845]
+- io_uring: unify STOP_MULTISHOT with IOU_OK (Ming Lei) [RHEL-106845]
+- io_uring: return -EAGAIN to continue multishot (Ming Lei) [RHEL-106845]
+- io_uring: cap cached iovec/bvec size (Ming Lei) [RHEL-106845]
+- io_uring/net: implement vectored reg bufs for zctx (Ming Lei) [RHEL-106845]
+- io_uring/net: convert to struct iou_vec (Ming Lei) [RHEL-106845]
+- io_uring/net: pull vec alloc out of msghdr import (Ming Lei) [RHEL-106845]
+- io_uring/net: combine msghdr copy (Ming Lei) [RHEL-106845]
+- io_uring/rw: defer reg buf vec import (Ming Lei) [RHEL-106845]
+- io_uring/rw: implement vectored registered rw (Ming Lei) [RHEL-106845]
+- io_uring: add infra for importing vectored reg buffers (Ming Lei) [RHEL-106845]
+- io_uring: introduce struct iou_vec (Ming Lei) [RHEL-106845]
+- selftests: ublk: add stripe target (Ming Lei) [RHEL-106845]
+- selftests: ublk: simplify loop io completion (Ming Lei) [RHEL-106845]
+- selftests: ublk: enable zero copy for null target (Ming Lei) [RHEL-106845]
+- selftests: ublk: prepare for supporting stripe target (Ming Lei) [RHEL-106845]
+- selftests: ublk: move common code into common.c (Ming Lei) [RHEL-106845]
+- selftests: ublk: increase max buffer size to 1MB (Ming Lei) [RHEL-106845]
+- selftests: ublk: add single sqe allocator helper (Ming Lei) [RHEL-106845]
+- selftests: ublk: add generic_01 for verifying sequential IO order (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix starting ublk device (Ming Lei) [RHEL-106845]
+- io_uring: enable toggle of iowait usage when waiting on CQEs (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix write cache implementation (Ming Lei) [RHEL-106845]
+- selftests: ublk: add variable for user to not show test result (Ming Lei) [RHEL-106845]
+- selftests: ublk: don't show `modprobe` failure (Ming Lei) [RHEL-106845]
+- selftests: ublk: add one dependency header (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: enable bundles for incrementally consumed buffers (Ming Lei) [RHEL-106845]
+- Revert "io_uring/rsrc: simplify the bvec iter count calculation" (Ming Lei) [RHEL-106845]
+- selftests: ublk: improve test usability (Ming Lei) [RHEL-106845]
+- selftests: ublk: add stress test for covering IO vs. killing ublk server (Ming Lei) [RHEL-106845]
+- selftests: ublk: add one stress test for covering IO vs. removing device (Ming Lei) [RHEL-106845]
+- selftests: ublk: load/unload ublk_drv when preparing & cleaning up tests (Ming Lei) [RHEL-106845]
+- selftests: ublk: move zero copy feature check into _add_ublk_dev() (Ming Lei) [RHEL-106845]
+- selftests: ublk: don't pass ${dev_id} to _cleanup_test() (Ming Lei) [RHEL-106845]
+- selftests: ublk: support shellcheck and fix all warning (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix parsing '-a' argument (Ming Lei) [RHEL-106845]
+- selftests: ublk: add --foreground command line (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix build failure (Ming Lei) [RHEL-106845]
+- selftests: ublk: make ublk_stop_io_daemon() more reliable (Ming Lei) [RHEL-106845]
+- io_uring: Remove unused declaration io_alloc_async_data() (Ming Lei) [RHEL-106845]
+- io_uring: introduce io_cache_free() helper (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: skip NULL file/buffer checks in io_free_rsrc_node() (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: avoid NULL node check on io_sqe_buffer_register() failure (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: call io_free_node() on io_sqe_buffer_register() failure (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: free io_rsrc_node using kfree() (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: split out io_free_node() helper (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: include io_uring_types.h in rsrc.h (Ming Lei) [RHEL-106845]
+- ublk: don't cast registered buffer index to int (Ming Lei) [RHEL-106845]
+- io_uring/nop: use io_find_buf_node() (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: declare io_find_buf_node() in header file (Ming Lei) [RHEL-106845]
+- io_uring/ublk: report error when unregister operation fails (Ming Lei) [RHEL-106845]
+- io_uring: convert cmd_to_io_kiocb() macro to function (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: specify io_uring_cmd_import_fixed() pointer type (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: use rq_data_dir() to compute bvec dir (Ming Lei) [RHEL-106845]
+- selftests: ublk: add ublk zero copy test (Ming Lei) [RHEL-106845]
+- selftests: ublk: add file backed ublk (Ming Lei) [RHEL-106845]
+- selftests: ublk: add kernel selftests for ublk (Ming Lei) [RHEL-106845]
+- io_uring: cache nodes and mapped buffers (Ming Lei) [RHEL-106845]
+- ublk: zc register/unregister bvec (Ming Lei) [RHEL-106845]
+- io_uring: add support for kernel registered bvecs (Ming Lei) [RHEL-106845]
+- io_uring/rw: move fixed buffer import to issue path (Ming Lei) [RHEL-106845]
+- io_uring/rw: move buffer_select outside generic prep (Ming Lei) [RHEL-106845]
+- io_uring/net: fix build warning for !CONFIG_COMPAT (Ming Lei) [RHEL-106845]
+- io_uring: rearrange opdef flags by use pattern (Ming Lei) [RHEL-106845]
+- io_uring/net: extract iovec import into a helper (Ming Lei) [RHEL-106845]
+- io_uring/net: unify *mshot_prep calls with compat (Ming Lei) [RHEL-106845]
+- io_uring/net: derive iovec storage later (Ming Lei) [RHEL-106845]
+- io_uring/net: verify msghdr before copying iovec (Ming Lei) [RHEL-106845]
+- io_uring/net: isolate msghdr copying code (Ming Lei) [RHEL-106845]
+- io_uring/net: simplify compat selbuf iov parsing (Ming Lei) [RHEL-106845]
+- io_uring/net: remove unnecessary REQ_F_NEED_CLEANUP (Ming Lei) [RHEL-106845]
+- io_uring: combine buffer lookup and import (Ming Lei) [RHEL-106845]
+- io_uring/net: reuse req->buf_index for sendzc (Ming Lei) [RHEL-106845]
+- io_uring/nop: reuse req->buf_index (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: remove redundant check for valid imu (Ming Lei) [RHEL-106845]
+- io_uring/rw: open code io_prep_rw_setup() (Ming Lei) [RHEL-106845]
+- io_uring/rw: extract helper for iovec import (Ming Lei) [RHEL-106845]
+- io_uring/rw: rename io_import_iovec() (Ming Lei) [RHEL-106845]
+- io_uring/rw: allocate async data in io_prep_rw() (Ming Lei) [RHEL-106845]
+- io_uring: make io_poll_issue() sturdier (Ming Lei) [RHEL-106845]
+- io_uring/net: canonise accept mshot handling (Ming Lei) [RHEL-106845]
+- io_uring/net: fix accept multishot handling (Ming Lei) [RHEL-106845]
+- io_uring/net: use io_is_compat() (Ming Lei) [RHEL-106845]
+- io_uring/waitid: use io_is_compat() (Ming Lei) [RHEL-106845]
+- io_uring/rw: shrink io_iov_compat_buffer_select_prep (Ming Lei) [RHEL-106845]
+- io_uring/rw: compile out compat param passing (Ming Lei) [RHEL-106845]
+- io_uring/cmd: optimise !CONFIG_COMPAT flags setting (Ming Lei) [RHEL-106845]
+- io_uring: introduce io_is_compat() (Ming Lei) [RHEL-106845]
+- io_uring: use lockless_cq flag in io_req_complete_post() (Ming Lei) [RHEL-106845]
+- io_uring: pass struct io_tw_state by value (Ming Lei) [RHEL-106845]
+- io_uring: introduce type alias for io_tw_state (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: avoid NULL check in io_put_rsrc_node() (Ming Lei) [RHEL-106845]
+- io_uring: pass ctx instead of req to io_init_req_drain() (Ming Lei) [RHEL-106845]
+- io_uring: use IO_REQ_LINK_FLAGS more (Ming Lei) [RHEL-106845]
+- io_uring/net: improve recv bundles (Ming Lei) [RHEL-106845]
+- io_uring/waitid: use generic io_cancel_remove() helper (Ming Lei) [RHEL-106845]
+- io_uring/futex: use generic io_cancel_remove() helper (Ming Lei) [RHEL-106845]
+- io_uring/cancel: add generic cancel helper (Ming Lei) [RHEL-106845]
+- io_uring/waitid: convert to io_cancel_remove_all() (Ming Lei) [RHEL-106845]
+- io_uring/futex: convert to io_cancel_remove_all() (Ming Lei) [RHEL-106845]
+- io_uring/cancel: add generic remove_all helper (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: uninline __io_put_kbufs (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: introduce io_kbuf_drop_legacy() (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: open code __io_put_kbuf() (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: remove legacy kbuf caching (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: simplify __io_put_kbuf (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: move locking into io_kbuf_drop() (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: remove legacy kbuf kmem cache (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: remove legacy kbuf bulk allocation (Ming Lei) [RHEL-106845]
+- io_uring: sanitise ring params earlier (Ming Lei) [RHEL-106845]
+- io_uring: check for iowq alloc_workqueue failure (Ming Lei) [RHEL-106845]
+- io_uring: deduplicate caches deallocation (Ming Lei) [RHEL-106845]
+- io_uring/io-wq: pass io_wq to io_get_next_work() (Ming Lei) [RHEL-106845]
+- io_uring/io-wq: do not use bogus hash value (Ming Lei) [RHEL-106845]
+- io_uring/io-wq: cache work->flags in variable (Ming Lei) [RHEL-106845]
+- io_uring/io-wq: move worker lists to struct io_wq_acct (Ming Lei) [RHEL-106845]
+- io_uring/io-wq: add io_worker.acct pointer (Ming Lei) [RHEL-106845]
+- io_uring/io-wq: eliminate redundant io_work_get_acct() calls (Ming Lei) [RHEL-106845]
+- io_uring/net: fix sendzc double notif flush (Ming Lei) [RHEL-106845]
+- io_uring/net: don't clear REQ_F_NEED_CLEANUP unconditionally (Ming Lei) [RHEL-106845]
+- io_uring/rw: ensure reissue path is correctly handled for IOPOLL (Ming Lei) [RHEL-106845]
+- io_uring/net: save msg_control for compat (Ming Lei) [RHEL-106845]
+- io_uring/rw: clean up mshot forced sync mode (Ming Lei) [RHEL-106845]
+- io_uring/rw: move ki_complete init into prep (Ming Lei) [RHEL-106845]
+- io_uring/rw: don't directly use ki_complete (Ming Lei) [RHEL-106845]
+- io_uring/rw: forbid multishot async reads (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: remove unused constants (Ming Lei) [RHEL-106845]
+- io_uring: fix spelling error in uapi io_uring.h (Ming Lei) [RHEL-106845]
+- io-wq: backoff when retrying worker creation (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: unconditionally copy SQEs at prep time (Ming Lei) [RHEL-106845]
+- io_uring/waitid: setup async data in the prep handler (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: remove dead req_has_async_data() check (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: switch sqe to async_data on EAGAIN (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: don't assume io_uring_cmd_data layout (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: reallocate buf lists on upgrade (Ming Lei) [RHEL-106845] {CVE-2025-21836}
+- io_uring/waitid: don't abuse io_tw_state (Ming Lei) [RHEL-106845]
+- io_uring/net: don't retry connect operation on EPOLLERR (Ming Lei) [RHEL-106845]
+- io_uring/rw: simplify io_rw_recycle() (Ming Lei) [RHEL-106845]
+- io_uring: remove !KASAN guards from cache free (Ming Lei) [RHEL-106845]
+- io_uring/net: extract io_send_select_buffer() (Ming Lei) [RHEL-106845]
+- io_uring/net: clean io_msg_copy_hdr() (Ming Lei) [RHEL-106845]
+- io_uring/net: make io_net_vec_assign() return void (Ming Lei) [RHEL-106845]
+- io_uring: add alloc_cache.c (Ming Lei) [RHEL-106845]
+- io_uring: dont ifdef io_alloc_cache_kasan() (Ming Lei) [RHEL-106845]
+- io_uring: include all deps for alloc_cache.h (Ming Lei) [RHEL-106845]
+- io_uring: fix multishots with selected buffers (Ming Lei) [RHEL-106845]
+- io_uring/register: use atomic_read/write for sq_flags migration (Ming Lei) [RHEL-106845]
+- io_uring/alloc_cache: get rid of _nocache() helper (Ming Lei) [RHEL-106845]
+- io_uring: get rid of alloc cache init_once handling (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: cleanup struct io_uring_cmd_data layout (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock() (Ming Lei) [RHEL-106845]
+- io_uring/msg_ring: don't leave potentially dangling ->tctx pointer (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: Move lockdep assert from io_free_rsrc_node() to caller (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: remove unused parameter ctx for io_rsrc_node_alloc() (Ming Lei) [RHEL-106845]
+- io_uring: clean up io_uring_register_get_file() (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: Simplify buffer cloning by locking both rings (Ming Lei) [RHEL-106845]
+- io_uring/fdinfo: fix io_uring_show_fdinfo() misuse of ->d_iname (Ming Lei) [RHEL-106845]
+- io_uring: reuse io_should_terminate_tw() for cmds (Ming Lei) [RHEL-106845]
+- io_uring: Factor out a function to parse restrictions (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: require cloned buffers to share accounting contexts (Ming Lei) [RHEL-106845]
+- io_uring: simplify the SQPOLL thread check when cancelling requests (Ming Lei) [RHEL-106845]
+- io_uring: expose read/write attribute capability (Ming Lei) [RHEL-106845]
+- io_uring/rw: don't gate retry on completion context (Ming Lei) [RHEL-106845]
+- io_uring/rw: handle -EAGAIN retry at IO completion time (Ming Lei) [RHEL-106845]
+- io_uring/rw: use io_rw_recycle() from cleanup path (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: simplify the bvec iter count calculation (Ming Lei) [RHEL-106845]
+- io_uring: ensure io_queue_deferred() is out-of-line (Ming Lei) [RHEL-106845]
+- io_uring/rw: always clear ->bytes_done on io_async_rw setup (Ming Lei) [RHEL-106845]
+- io_uring/rw: use NULL for rw->free_iovec assigment (Ming Lei) [RHEL-106845]
+- io_uring/msg_ring: Drop custom destructor (Ming Lei) [RHEL-106845]
+- io_uring: Move old async data allocation helper to header (Ming Lei) [RHEL-106845]
+- io_uring/rw: Allocate async data through helper (Ming Lei) [RHEL-106845]
+- io_uring/net: Allocate msghdr async data through helper (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: Allocate async data through generic helper (Ming Lei) [RHEL-106845]
+- io_uring/poll: Allocate apoll with generic alloc_cache helper (Ming Lei) [RHEL-106845]
+- io_uring/futex: Allocate ifd with generic alloc_cache helper (Ming Lei) [RHEL-106845]
+- io_uring: Add generic helper to allocate async data (Ming Lei) [RHEL-106845]
+- io_uring: Fold allocation into alloc_cache helper (Ming Lei) [RHEL-106845]
+- io_uring: prevent reg-wait speculations (Ming Lei) [RHEL-106845] {CVE-2024-58000}
+- io_uring: don't vmap single page regions (Ming Lei) [RHEL-106845]
+- io_uring: clean up io_prep_rw_setup() (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: fix unintentional sign extension on shift of reg.bgid (Ming Lei) [RHEL-106845]
+- io_uring/memmap: unify io_uring mmap'ing code (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: use region api for pbuf rings (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: remove pbuf ring refcounting (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: use mmap_lock to sync with mmap (Ming Lei) [RHEL-106845]
+- io_uring: use region api for CQ (Ming Lei) [RHEL-106845]
+- io_uring: use region api for SQ (Ming Lei) [RHEL-106845]
+- io_uring: pass ctx to io_register_free_rings (Ming Lei) [RHEL-106845]
+- io_uring/memmap: implement mmap for regions (Ming Lei) [RHEL-106845]
+- io_uring/memmap: implement kernel allocated regions (Ming Lei) [RHEL-106845]
+- io_uring/memmap: add IO_REGION_F_SINGLE_REF (Ming Lei) [RHEL-106845]
+- io_uring/memmap: helper for pinning region pages (Ming Lei) [RHEL-106845]
+- io_uring/memmap: optimise single folio regions (Ming Lei) [RHEL-106845]
+- io_uring/memmap: reuse io_free_region for failure path (Ming Lei) [RHEL-106845]
+- io_uring/memmap: account memory before pinning (Ming Lei) [RHEL-106845]
+- io_uring/memmap: flag regions with user pages (Ming Lei) [RHEL-106845]
+- io_uring/memmap: flag vmap'ed regions (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: export io_check_coalesce_buffer (Ming Lei) [RHEL-106845]
+- io_uring: rename ->resize_lock (Ming Lei) [RHEL-106845]
+- io_uring: add io_uring_cmd_get_async_data helper (Ming Lei) [RHEL-106845]
+- io_uring/cmd: let cmds to know about dying task (Ming Lei) [RHEL-106845]
+- io_uring/cmd: add per-op data to struct io_uring_cmd_data (Ming Lei) [RHEL-106845]
+- io_uring/cmd: rename struct uring_cache to io_uring_cmd_data (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: defer SQE copying until it's needed (Ming Lei) [RHEL-106845]
+- io_uring/register: cache old SQ/CQ head reading for copies (Ming Lei) [RHEL-106845]
+- io_uring/register: document io_register_resize_rings() shared mem usage (Ming Lei) [RHEL-106845]
+- io_uring/register: use stable SQ/CQ ring data during resize (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: fixup io_clone_buffers() error handling (Ming Lei) [RHEL-106845]
+- io_uring: don't touch sqd->thread off tw add (Ming Lei) [RHEL-106845]
+- io_uring: silence false positive warnings (Ming Lei) [RHEL-106845]
+- io_uring/timeout: fix multishot updates (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: use pre-committed buffer address for non-pollable file (Ming Lei) [RHEL-106845]
+- io_uring/net: always initialize kmsg->msg.msg_inq upfront (Ming Lei) [RHEL-106845]
+- io_uring/timeout: flush timeouts outside of the timeout lock (Ming Lei) [RHEL-106845]
+- io_uring/rw: fix downgraded mshot read (Ming Lei) [RHEL-106845]
+- io_uring/sqpoll: fix sqpoll error handling races (Ming Lei) [RHEL-106845]
+- io_uring: check if iowq is killed before queuing (Ming Lei) [RHEL-106845] {CVE-2024-56709}
+- io_uring/register: limit ring resizing to DEFER_TASKRUN (Ming Lei) [RHEL-106845]
+- io_uring: Fix registered ring file refcount leak (Ming Lei) [RHEL-106845]
+- io_uring: make ctx->timeout_lock a raw spinlock (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: don't put/free empty buffers (Ming Lei) [RHEL-106845]
+- io_uring: Change res2 parameter type in io_uring_cmd_done (Ming Lei) [RHEL-106845]
+- io_uring/tctx: work around xa_store() allocation error issue (Ming Lei) [RHEL-106845] {CVE-2024-56584}
+- io_uring: fix corner case forgetting to vunmap (Ming Lei) [RHEL-106845]
+- io_uring: fix task_work cap overshooting (Ming Lei) [RHEL-106845]
+- io_uring: check for overflows in io_pin_pages (Ming Lei) [RHEL-106845] {CVE-2024-53187}
+- io_uring/nop: ensure nop->fd is always initialized (Ming Lei) [RHEL-106845]
+- io_uring: limit local tw done (Ming Lei) [RHEL-106845]
+- io_uring: add io_local_work_pending() (Ming Lei) [RHEL-106845]
+- io_uring/region: return negative -E2BIG in io_create_region() (Ming Lei) [RHEL-106845]
+- io_uring: protect register tracing (Ming Lei) [RHEL-106845]
+- io_uring: remove io_uring_cqwait_reg_arg (Ming Lei) [RHEL-106845]
+- io_uring/region: fix error codes after failed vmap (Ming Lei) [RHEL-106845]
+- io_uring: restore back registered wait arguments (Ming Lei) [RHEL-106845]
+- io_uring: add memory region registration (Ming Lei) [RHEL-106845]
+- io_uring: introduce concept of memory regions (Ming Lei) [RHEL-106845]
+- io_uring: temporarily disable registered waits (Ming Lei) [RHEL-106845]
+- io_uring: disable ENTER_EXT_ARG_REG for IOPOLL (Ming Lei) [RHEL-106845]
+- io_uring: fortify io_pin_pages with a warning (Ming Lei) [RHEL-106845]
+- switch io_msg_ring() to CLASS(fd) (Ming Lei) [RHEL-106845]
+- io_uring: fix invalid hybrid polling ctx leaks (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: fix buffer index retrieval (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: add & apply io_req_assign_buf_node() (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: remove '->ctx_ptr' of 'struct io_rsrc_node' (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: pass 'struct io_ring_ctx' reference to rsrc helpers (Ming Lei) [RHEL-106845]
+- io_uring: avoid normal tw intermediate fallback (Ming Lei) [RHEL-106845]
+- io_uring/napi: add static napi tracking strategy (Ming Lei) [RHEL-106845]
+- io_uring/napi: clean up __io_napi_do_busy_loop (Ming Lei) [RHEL-106845]
+- io_uring/napi: Use lock guards (Ming Lei) [RHEL-106845]
+- io_uring/napi: improve __io_napi_add (Ming Lei) [RHEL-106845]
+- io_uring/napi: fix io_napi_entry RCU accesses (Ming Lei) [RHEL-106845]
+- io_uring/napi: protect concurrent io_napi_entry timeout accesses (Ming Lei) [RHEL-106845]
+- io_uring: prevent speculating sq_array indexing (Ming Lei) [RHEL-106845]
+- io_uring: move struct io_kiocb from task_struct to io_uring_task (Ming Lei) [RHEL-106845]
+- io_uring: remove task ref helpers (Ming Lei) [RHEL-106845]
+- io_uring: move cancelations to be io_uring_task based (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: split io_kiocb node type assignments (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: encode node type and ctx together (Ming Lei) [RHEL-106845]
+- io_uring: add support for hybrid IOPOLL (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: allow cloning with node replacements (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: allow cloning at an offset (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: get rid of the empty node and dummy_ubuf (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: add io_reset_rsrc_node() helper (Ming Lei) [RHEL-106845]
+- io_uring/filetable: kill io_reset_alloc_hint() helper (Ming Lei) [RHEL-106845]
+- io_uring/filetable: remove io_file_from_index() helper (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: add io_rsrc_node_lookup() helper (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: unify file and buffer resource tables (Ming Lei) [RHEL-106845]
+- io_uring: only initialize io_kiocb rsrc_nodes when needed (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: add an empty io_rsrc_node for sparse buffer entries (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: get rid of io_rsrc_node allocation cache (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: get rid of per-ring io_rsrc_node list (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: kill io_charge_rsrc_node() (Ming Lei) [RHEL-106845]
+- io_uring/splice: open code 2nd direct file assignment (Ming Lei) [RHEL-106845]
+- io_uring: specify freeptr usage for SLAB_TYPESAFE_BY_RCU io_kiocb cache (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: move struct io_fixed_file to rsrc.h header (Ming Lei) [RHEL-106845]
+- io_uring/nop: add support for testing registered files and buffers (Ming Lei) [RHEL-106845]
+- io_uring: add support for fixed wait regions (Ming Lei) [RHEL-106845]
+- io_uring: change io_get_ext_arg() to use uaccess begin + end (Ming Lei) [RHEL-106845]
+- io_uring: switch struct ext_arg from __kernel_timespec to timespec64 (Ming Lei) [RHEL-106845]
+- io_uring/sqpoll: wait on sqd->wait for thread parking (Ming Lei) [RHEL-106845]
+- io_uring/register: add IORING_REGISTER_RESIZE_RINGS (Ming Lei) [RHEL-106845]
+- io_uring/memmap: explicitly return -EFAULT for mmap on NULL rings (Ming Lei) [RHEL-106845]
+- io_uring: abstract out a bit of the ring filling logic (Ming Lei) [RHEL-106845]
+- io_uring: move max entry definition and ring sizing into header (Ming Lei) [RHEL-106845]
+- io_uring/net: clean up io_msg_copy_hdr (Ming Lei) [RHEL-106845]
+- io_uring/net: don't alias send user pointer reads (Ming Lei) [RHEL-106845]
+- io_uring/net: don't store send address ptr (Ming Lei) [RHEL-106845]
+- io_uring/net: split send and sendmsg prep helpers (Ming Lei) [RHEL-106845]
+- io_uring: kill 'imu' from struct io_kiocb (Ming Lei) [RHEL-106845]
+- io_uring/net: move send zc fixed buffer import to issue path (Ming Lei) [RHEL-106845]
+- io_uring: remove 'issue_flags' argument for io_req_set_rsrc_node() (Ming Lei) [RHEL-106845]
+- io_uring/rw: get rid of using req->imu (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: get rid of using req->imu (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: don't assign bvec twice in io_import_fixed() (Ming Lei) [RHEL-106845]
+- io_uring: clean up cqe trace points (Ming Lei) [RHEL-106845]
+- io_uring: static_key for !IORING_SETUP_NO_SQARRAY (Ming Lei) [RHEL-106845]
+- io_uring: kill io_llist_xchg (Ming Lei) [RHEL-106845]
+- io_uring: move cancel hash tables to kvmalloc/kvfree (Ming Lei) [RHEL-106845]
+- io_uring/cancel: get rid of init_hash_table() helper (Ming Lei) [RHEL-106845]
+- io_uring/poll: get rid of per-hashtable bucket locks (Ming Lei) [RHEL-106845]
+- io_uring/poll: get rid of io_poll_tw_hash_eject() (Ming Lei) [RHEL-106845]
+- io_uring/poll: get rid of unlocked cancel hash (Ming Lei) [RHEL-106845]
+- io_uring/poll: remove 'ctx' argument from io_poll_req_delete() (Ming Lei) [RHEL-106845]
+- io_uring/msg_ring: add support for sending a sync message (Ming Lei) [RHEL-106845]
+- io_uring/msg_ring: refactor a few helper functions (Ming Lei) [RHEL-106845]
+- io_uring/eventfd: move ctx->evfd_last_cq_tail into io_ev_fd (Ming Lei) [RHEL-106845]
+- io_uring/eventfd: abstract out ev_fd grab + release helpers (Ming Lei) [RHEL-106845]
+- io_uring/eventfd: move trigger check into a helper (Ming Lei) [RHEL-106845]
+- io_uring/eventfd: move actual signaling part into separate helper (Ming Lei) [RHEL-106845]
+- io_uring/eventfd: check for the need to async notifier earlier (Ming Lei) [RHEL-106845]
+Resolves: RHEL-106845, RHEL-87219
+
+* Fri Sep 12 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-129.el10]
+- s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110239]
+Resolves: RHEL-110239
+
 * Thu Sep 11 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-128.el10]
 - ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-112760]
 Resolves: RHEL-112760
@@ -420,6 +1131,28 @@ Resolves: RHEL-101827, RHEL-102692, RHEL-104142, RHEL-104442, RHEL-110366, RHEL-
 - redhat: bump RHEL_MINOR for 10.2 (Scott Weaver)
 Resolves: RHEL-102876, RHEL-104319, RHEL-104327, RHEL-105599, RHEL-105606, RHEL-95630
 
+* Mon Sep 08 2025 Julio Faracco <jfaracco@redhat.com> [6.12.0-124.1.1.el10_1]
+- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107880]
+- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112787] {CVE-2025-38352}
+- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [RHEL-106441] {CVE-2025-38472}
+- netfilter: nf_tables: hide clash bit from userspace (Florian Westphal) [RHEL-106441]
+- selftests: netfilter: conntrack_resize.sh: extend resize test (Florian Westphal) [RHEL-106441]
+- redhat: Explicitly disable 'hostonly' mode on the dracut cmdline (Vitaly Kuznetsov) [RHEL-109610]
+- redhat: Directly use 'ukify' for building the UKI (Vitaly Kuznetsov) [RHEL-109610]
+- redhat: Add SBAT to the UKI unconditionally (Vitaly Kuznetsov) [RHEL-109610]
+- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111072] {CVE-2025-38566}
+- dpll: add reserved fields to dpll_device_ops and dpll_pin_ops structs (Ivan Vecera) [RHEL-111905]
+- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110814] {CVE-2025-38571}
+- i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-105134]
+- kselftests/mm: fix khugepaged build broken (Chunyu Hu) [RHEL-112084]
+- iommu/virtio: Make instance lookup robust (Eric Auger) [RHEL-108207]
+- enic: fix incorrect MTU comparison in enic_change_mtu() (CKI Backport Bot) [RHEL-108262]
+- net/enic: Allow at least 8 RQs to always be used (CKI Backport Bot) [RHEL-108262]
+- ixgbe: prevent from unwanted interface name changes (CKI Backport Bot) [RHEL-109604]
+- devlink: let driver opt out of automatic phys_port_name generation (CKI Backport Bot) [RHEL-109604]
+- redhat: set defaults for RHEL 10.1 (Julio Faracco)
+Resolves: RHEL-105134, RHEL-106441, RHEL-107880, RHEL-108207, RHEL-108262, RHEL-109604, RHEL-109610, RHEL-110814, RHEL-111072, RHEL-111905, RHEL-112084, RHEL-112787
+
 * Thu Aug 21 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-124.el10]
 - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (Frank Liang) [RHEL-107449]
 - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (John Meneghini) [RHEL-41234]
diff --git a/kernel.spec b/kernel.spec
index ee4dd50e8..8328586c1 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -108,6 +108,17 @@ Summary: The Linux kernel
 %global signkernel 0
 %endif
 
+# RHEL/CentOS/Fedora specific .SBAT entries
+%if 0%{?centos}
+%global sbat_suffix centos
+%else
+%if 0%{?fedora}
+%global sbat_suffix fedora
+%else
+%global sbat_suffix rhel
+%endif
+%endif
+
 # Sign modules on all arches
 %global signmodules 1
 
@@ -165,15 +176,15 @@ Summary: The Linux kernel
 %define specrpmversion 6.12.0
 %define specversion 6.12.0
 %define patchversion 6.12
-%define pkgrelease 128
+%define pkgrelease 131
 %define kversion 6
-%define tarfile_release 6.12.0-128.el10
+%define tarfile_release 6.12.0-131.el10
 # This is needed to do merge window version magic
 %define patchlevel 12
 # This allows pkg_release to have configurable %%{?dist} tag
-%define specrelease 128%{?buildid}%{?dist}
+%define specrelease 131%{?buildid}%{?dist}
 # This defines the kabi tarball version
-%define kabiversion 6.12.0-128.el10
+%define kabiversion 6.12.0-131.el10
 
 # If this variable is set to 1, a bpf selftests build failure will cause a
 # fatal kernel package build error
@@ -999,6 +1010,9 @@ Source77: partial-clang_lto-aarch64-debug-snip.config
 Source80: generate_all_configs.sh
 Source81: process_configs.sh
 
+Source83: uki.sbat.template
+Source84: uki-addons.sbat.template
+
 Source86: dracut-virt.conf
 
 Source87: flavors
@@ -2020,6 +2034,10 @@ rm -f localversion-next localversion-rt
 	Documentation \
 	scripts/clang-tools 2> /dev/null
 
+# SBAT data
+sed -e s,@KVER,%{KVERREL}, -e s,@SBAT_SUFFIX,%{sbat_suffix}, %{SOURCE83} > uki.sbat
+sed -e s,@KVER,%{KVERREL}, -e s,@SBAT_SUFFIX,%{sbat_suffix}, %{SOURCE84} > uki-addons.sbat
+
 # only deal with configs if we are going to build for the arch
 %ifnarch %nobuildarches
 
@@ -2781,44 +2799,30 @@ BuildKernel() {
         SBATsuffix="rhel"
 %endif
 %endif
-        SBAT=$(cat <<- EOF
-	linux,1,Red Hat,linux,$KernelVer,mailto:secalert@redhat.com
-	linux,1,AlmaLinux,linux,$KernelVer,mailto:security@almalinux.org
-	linux.$SBATsuffix,1,Red Hat,linux,$KernelVer,mailto:secalert@redhat.com
-	linux.almalinux,1,AlmaLinux,linux,$KernelVer,mailto:security@almalinux.org
-	kernel-uki-virt.$SBATsuffix,1,Red Hat,kernel-uki-virt,$KernelVer,mailto:secalert@redhat.com
-	kernel-uki-virt,almalinux,1,AlmaLinux,kernel-uki-virt,$KernelVer,mailto:security@almalinux.org
-	EOF
-	)
-
-        ADDONS_SBAT=$(cat <<- EOF
-	sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
-	kernel-uki-virt-addons.$SBATsuffix,1,Red Hat,kernel-uki-virt-addons,$KernelVer,mailto:secalert@redhat.com
-	EOF
-	)
-
 	KernelUnifiedImageDir="$RPM_BUILD_ROOT/lib/modules/$KernelVer"
     	KernelUnifiedImage="$KernelUnifiedImageDir/$InstallName-virt.efi"
+	KernelUnifiedInitrd="$KernelUnifiedImageDir/$InstallName-virt.img"
 
     	mkdir -p $KernelUnifiedImageDir
 
     	dracut --conf=%{SOURCE86} \
            --confdir=$(mktemp -d) \
+           --no-hostonly \
            --verbose \
            --kver "$KernelVer" \
            --kmoddir "$RPM_BUILD_ROOT/lib/modules/$KernelVer/" \
            --logfile=$(mktemp) \
-           --uefi \
-%if 0%{?rhel} && !0%{?eln}
-           --sbat "$SBAT" \
-%endif
-           --kernel-image $(realpath $KernelImage) \
-           --kernel-cmdline 'console=tty0 console=ttyS0' \
-	   $KernelUnifiedImage
+           $KernelUnifiedInitrd
+
+       ukify build --linux $(realpath $KernelImage) --initrd $KernelUnifiedInitrd \
+          --sbat @uki.sbat --os-release @/etc/os-release --uname $KernelVer \
+          --cmdline 'console=tty0 console=ttyS0' --output $KernelUnifiedImage
+
+       rm -f $KernelUnifiedInitrd
 
   KernelAddonsDirOut="$KernelUnifiedImage.extra.d"
   mkdir -p $KernelAddonsDirOut
-  python3 %{SOURCE151} %{SOURCE152} $KernelAddonsDirOut virt %{primary_target} %{_target_cpu} "$ADDONS_SBAT"
+  python3 %{SOURCE151} %{SOURCE152} $KernelAddonsDirOut virt %{primary_target} %{_target_cpu} @uki-addons.sbat
 
 %if %{signkernel}
 	%{log_msg "Sign the EFI UKI kernel"}
@@ -4384,14 +4388,14 @@ fi\
 #
 #
 %changelog
-* Tue Sep 16 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-128
+* Thu Sep 25 2025 Eduard Abdullin <eabdullin@almalinux.org> - 6.12.0-131
 - Debrand for AlmaLinux OS
 - Use AlmaLinux OS secure boot cert
 
-* Tue Sep 16 2025 Neal Gompa <ngompa@almalinux.org> - 6.12.0-128
+* Thu Sep 25 2025 Neal Gompa <ngompa@almalinux.org> - 6.12.0-131
 - Enable Btrfs support for all kernel variants
 
-* Tue Sep 16 2025 Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-128
+* Thu Sep 25 2025 Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-131
 - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
@@ -4402,6 +4406,714 @@ fi\
 - kernel/rh_messages.h: enable all disabled pci devices by moving to
   unmaintained
 
+* Wed Sep 17 2025 Scott Weaver <scweaver@redhat.com> [6.12.0-131.el10]
+- config: new config in drivers/phy (Izabela Bakollari) [RHEL-106145]
+- net: phy: realtek: remove unsed RTL821x_PHYSR* macros (Izabela Bakollari) [RHEL-106145]
+- net: phy: realtek: make HWMON support a user-visible Kconfig symbol (Izabela Bakollari) [RHEL-106145]
+- net: phy: realtek: HWMON support for standalone versions of RTL8221B and RTL8251 (Izabela Bakollari) [RHEL-106145]
+- net: phy: realtek: add hwmon support for temp sensor on RTL822x (Izabela Bakollari) [RHEL-106145]
+- x86/hyperv: Fix kdump on Azure CVMs (Vitaly Kuznetsov) [RHEL-75576]
+- cpupower: Improve Python binding's Makefile (John B. Wyatt IV) [RHEL-91191]
+- cpupower: change binding's makefile to use -lcpupower (John B. Wyatt IV) [RHEL-91191]
+- pm: cpupower: Add missing residency header changes in cpuidle.h to SWIG (John B. Wyatt IV) [RHEL-91191]
+- pm: cpupower: Add header changes for cpufreq.h to SWIG bindings (John B. Wyatt IV) [RHEL-91191]
+- pm: cpupower: Add install and uninstall options to bindings makefile (John B. Wyatt IV) [RHEL-91191]
+- pm: cpupower: bindings: Add test to confirm cpu state is disabled (John B. Wyatt IV) [RHEL-91191]
+- pm: cpupower: bindings: Improve disable c_state block (John B. Wyatt IV) [RHEL-91191]
+- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107880]
+- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112787] {CVE-2025-38352}
+- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [RHEL-106441] {CVE-2025-38472}
+- netfilter: nf_tables: hide clash bit from userspace (Florian Westphal) [RHEL-106441]
+- selftests: netfilter: conntrack_resize.sh: extend resize test (Florian Westphal) [RHEL-106441]
+- redhat: Explicitly disable 'hostonly' mode on the dracut cmdline (Vitaly Kuznetsov) [RHEL-109610]
+- redhat: Directly use 'ukify' for building the UKI (Vitaly Kuznetsov) [RHEL-109610]
+- redhat: Add SBAT to the UKI unconditionally (Vitaly Kuznetsov) [RHEL-109610]
+- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111072] {CVE-2025-38566}
+- dpll: add reserved fields to dpll_device_ops and dpll_pin_ops structs (Ivan Vecera) [RHEL-111905]
+- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110814] {CVE-2025-38571}
+- i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen) [RHEL-105134]
+- kselftests/mm: fix khugepaged build broken (Chunyu Hu) [RHEL-112084]
+- iommu/virtio: Make instance lookup robust (Eric Auger) [RHEL-108207]
+- enic: fix incorrect MTU comparison in enic_change_mtu() (CKI Backport Bot) [RHEL-108262]
+- net/enic: Allow at least 8 RQs to always be used (CKI Backport Bot) [RHEL-108262]
+- ixgbe: prevent from unwanted interface name changes (CKI Backport Bot) [RHEL-109604]
+- devlink: let driver opt out of automatic phys_port_name generation (CKI Backport Bot) [RHEL-109604]
+- redhat: set defaults for RHEL 10.1 (Julio Faracco)
+
+* Mon Sep 15 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-130.el10]
+- selftests/ftrace: Use readelf to find entry point in uprobe test (Anubhav Shelat) [RHEL-87219]
+- ublk selftests: add --no_ublk_fixed_fd for not using registered ublk char device (Ming Lei) [RHEL-106845]
+- ublk: avoid ublk_io_release() called after ublk char dev is closed (Ming Lei) [RHEL-106845]
+- block: validate QoS before calling __rq_qos_done_bio() (Ming Lei) [RHEL-106845]
+- md: improve return types of badblocks handling functions (Ming Lei) [RHEL-106845]
+- raid6: riscv: Fix NULL pointer dereference caused by a missing clobber (Ming Lei) [RHEL-106845]
+- dm-stripe: limit chunk_sectors to the stripe size (Ming Lei) [RHEL-106845]
+- md/raid10: set chunk_sectors limit (Ming Lei) [RHEL-106845]
+- md/raid0: set chunk_sectors limit (Ming Lei) [RHEL-106845]
+- md: allow removing faulty rdev during resync (Ming Lei) [RHEL-106845]
+- md/raid5: unset WQ_CPU_INTENSIVE for raid5 unbound workqueue (Ming Lei) [RHEL-106845]
+- md: remove/add redundancy group only in level change (Ming Lei) [RHEL-106845]
+- raid6: Add RISC-V SIMD syndrome and recovery calculations (Ming Lei) [RHEL-106845]
+- md/raid1: Add check for missing source disk in process_checks() (Ming Lei) [RHEL-106845]
+- md/raid10: fix missing discard IO accounting (Ming Lei) [RHEL-106845]
+- block: avoid cpu_hotplug_lock depedency on freeze_lock (Ming Lei) [RHEL-106845]
+- block: decrement block_rq_qos static key in rq_qos_del() (Ming Lei) [RHEL-106845]
+- block: skip q->rq_qos check in rq_qos_done_bio() (Ming Lei) [RHEL-106845]
+- blk-mq: fix lockdep warning in __blk_mq_update_nr_hw_queues (Ming Lei) [RHEL-106845]
+- selftests: ublk: Use ARRAY_SIZE() macro to improve code (Ming Lei) [RHEL-106845]
+- block: fix kobject double initialization in add_disk (Ming Lei) [RHEL-106845]
+- block: fix potential deadlock while running nr_hw_queue update (Ming Lei) [RHEL-106845]
+- block: fix lockdep warning caused by lock dependency in elv_iosched_store (Ming Lei) [RHEL-106845]
+- block: move elevator queue allocation logic into blk_mq_init_sched (Ming Lei) [RHEL-106845]
+- ublk: check for unprivileged daemon on each I/O fetch (Ming Lei) [RHEL-106845]
+- ublk: don't quiesce in ublk_ch_release (Ming Lei) [RHEL-106845]
+- ublk: remove unused req argument from ublk_sub_req_ref() (Ming Lei) [RHEL-106845]
+- selftests: ublk: add utils.h (Ming Lei) [RHEL-106845]
+- selftests: ublk: add helper ublk_handle_uring_cmd() for handle ublk command (Ming Lei) [RHEL-106845]
+- selftests: ublk: improve flags naming (Ming Lei) [RHEL-106845]
+- selftests: ublk: remove ublk queue self-defined flags (Ming Lei) [RHEL-106845]
+- selftests: ublk: pass 'ublk_thread *' to more common helpers (Ming Lei) [RHEL-106845]
+- selftests: ublk: pass 'ublk_thread *' to ->queue_io() and ->tgt_io_done() (Ming Lei) [RHEL-106845]
+- selftests: ublk: remove `tag` parameter of ->tgt_io_done() (Ming Lei) [RHEL-106845]
+- ublk: pass 'const struct ublk_io *' to ublk_[un]map_io() (Ming Lei) [RHEL-106845]
+- ublk: remove ublk_commit_and_fetch() (Ming Lei) [RHEL-106845]
+- ublk: add helper ublk_check_fetch_buf() (Ming Lei) [RHEL-106845]
+- ublk: store auto buffer register data into `struct ublk_io` (Ming Lei) [RHEL-106845]
+- ublk: move auto buffer register handling into one dedicated helper (Ming Lei) [RHEL-106845]
+- ublk: avoid to pass `struct ublksrv_io_cmd *` to ublk_commit_and_fetch() (Ming Lei) [RHEL-106845]
+- ublk: let ublk_fill_io_cmd() cover more things (Ming Lei) [RHEL-106845]
+- ublk: move fake timeout logic into __ublk_complete_rq() (Ming Lei) [RHEL-106845]
+- ublk: look up ublk task via its pid in timeout handler (Ming Lei) [RHEL-106845]
+- ublk: validate ublk server pid (Ming Lei) [RHEL-106845]
+- ublk: introduce and use ublk_set_canceling helper (Ming Lei) [RHEL-106845]
+- ublk: speed up ublk server exit handling (Ming Lei) [RHEL-106845]
+- blk-mq: add number of queue calc helper (Ming Lei) [RHEL-106845]
+- ublk: cache-align struct ublk_io (Ming Lei) [RHEL-106845]
+- ublk: remove ubq checks from ublk_{get,put}_req_ref() (Ming Lei) [RHEL-106845]
+- ublk: optimize UBLK_IO_UNREGISTER_IO_BUF on daemon task (Ming Lei) [RHEL-106845]
+- ublk: optimize UBLK_IO_REGISTER_IO_BUF on daemon task (Ming Lei) [RHEL-106845]
+- ublk: return early if blk_should_fake_timeout() (Ming Lei) [RHEL-106845]
+- ublk: allow UBLK_IO_(UN)REGISTER_IO_BUF on any task (Ming Lei) [RHEL-106845]
+- ublk: don't take ublk_queue in ublk_unregister_io_buf() (Ming Lei) [RHEL-106845]
+- ublk: consolidate UBLK_IO_FLAG_{ACTIVE,OWNED_BY_SRV} checks (Ming Lei) [RHEL-106845]
+- ublk: remove task variable from __ublk_ch_uring_cmd() (Ming Lei) [RHEL-106845]
+- ublk: handle UBLK_IO_FETCH_REQ earlier (Ming Lei) [RHEL-106845]
+- ublk: check cmd_op first (Ming Lei) [RHEL-106845]
+- ublk: remove struct ublk_rq_data (Ming Lei) [RHEL-106845]
+- ublk: use vmalloc for ublk_device's __queues (Ming Lei) [RHEL-106845]
+- redhat/configs: Adding CONFIG_BLK_DEV_ZONED_LOOP (Ming Lei) [RHEL-106845]
+- block: restore default wbt enablement (Ming Lei) [RHEL-106845]
+- zloop: fix KASAN use-after-free of tag set (Ming Lei) [RHEL-106845] {CVE-2025-38620}
+- mm: fix vmstat after removing NR_BOUNCE (Ming Lei) [RHEL-106845]
+- nbd: fix lockdep deadlock warning (Ming Lei) [RHEL-106845]
+- block: restore two stage elevator switch while running nr_hw_queue update (Ming Lei) [RHEL-106845]
+- md/raid10: fix set but not used variable in sync_request_write() (Ming Lei) [RHEL-106845]
+- block: fix module reference leak in mq-deadline I/O scheduler (Ming Lei) [RHEL-106845]
+- nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list() (Ming Lei) [RHEL-106845]
+- block: fix kobject leak in blk_unregister_queue (Ming Lei) [RHEL-106845]
+- nbd: fix uaf in nbd_genl_connect() error path (Ming Lei) [RHEL-106845] {CVE-2025-38443}
+- md/md-bitmap: fix GPF in bitmap_get_stats() (Ming Lei) [RHEL-106845] {CVE-2025-38451}
+- md/md-bitmap: fix stats collection for external bitmaps (Ming Lei) [RHEL-106845]
+- md/raid1,raid10: strip REQ_NOWAIT from member bios (Ming Lei) [RHEL-106845]
+- raid10: cleanup memleak at raid10_make_request (Ming Lei) [RHEL-106845] {CVE-2025-38444}
+- md/raid1: Fix stack memory use after return in raid1_reshape (Ming Lei) [RHEL-106845] {CVE-2025-38445}
+- brd: fix sleeping function called from invalid context in brd_insert_page() (Ming Lei) [RHEL-106845]
+- ublk: don't queue request if the associated uring_cmd is canceled (Ming Lei) [RHEL-106845]
+- block: fix false warning in bdev_count_inflight_rw() (Ming Lei) [RHEL-106845]
+- ublk: sanity check add_dev input for underflow (Ming Lei) [RHEL-106845]
+- ublk: setup ublk_io correctly in case of ublk_get_data() failure (Ming Lei) [RHEL-106845]
+- ublk: update UBLK_F_SUPPORT_ZERO_COPY comment in UAPI header (Ming Lei) [RHEL-106845]
+- ublk: fix narrowing warnings in UAPI header (Ming Lei) [RHEL-106845]
+- selftests: ublk: don't take same backing file for more than one ublk devices (Ming Lei) [RHEL-106845]
+- ublk: build batch from IOs in same io_ring_ctx and io task (Ming Lei) [RHEL-106845]
+- ublk: santizize the arguments from userspace when adding a device (Ming Lei) [RHEL-106845] {CVE-2025-38182}
+- aoe: defer rexmit timer downdev work to workqueue (Ming Lei) [RHEL-106845]
+- aoe: clean device rq_list in aoedev_downdev() (Ming Lei) [RHEL-106845] {CVE-2025-38326}
+- nvme: always punt polled uring_cmd end_io work to task_work (Ming Lei) [RHEL-106845]
+- Documentation: ublk: Separate UBLK_F_AUTO_BUF_REG fallback behavior sublists (Ming Lei) [RHEL-106845]
+- block: Fix bvec_set_folio() for very large folios (Ming Lei) [RHEL-106845]
+- bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP (Ming Lei) [RHEL-106845]
+- block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work (Ming Lei) [RHEL-106845] {CVE-2025-38302}
+- block: Clear BIO_EMULATES_ZONE_APPEND flag on BIO completion (Ming Lei) [RHEL-106845]
+- ublk: document auto buffer registration(UBLK_F_AUTO_BUF_REG) (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: improve behavior on init failure (Ming Lei) [RHEL-106845]
+- block: drop direction param from bio_integrity_copy_user() (Ming Lei) [RHEL-106845]
+- selftests: ublk: cover PER_IO_DAEMON in more stress tests (Ming Lei) [RHEL-106845]
+- Documentation: ublk: document UBLK_F_PER_IO_DAEMON (Ming Lei) [RHEL-106845]
+- selftests: ublk: add stress test for per io daemons (Ming Lei) [RHEL-106845]
+- selftests: ublk: add functional test for per io daemons (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: decouple ublk_queues from ublk server threads (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: move per-thread data out of ublk_queue (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: lift queue initialization out of thread (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: tie sqe allocation to io instead of queue (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: plumb q_id in io_uring user_data (Ming Lei) [RHEL-106845]
+- ublk: have a per-io daemon instead of a per-queue daemon (Ming Lei) [RHEL-106845]
+- md/md-bitmap: remove parameter slot from bitmap_create() (Ming Lei) [RHEL-106845]
+- md/md-bitmap: cleanup bitmap_ops->startwrite() (Ming Lei) [RHEL-106845]
+- md/dm-raid: remove max_write_behind setting limit (Ming Lei) [RHEL-106845]
+- md/md-bitmap: fix dm-raid max_write_behind setting (Ming Lei) [RHEL-106845]
+- md/raid1,raid10: don't handle IO error for REQ_RAHEAD and REQ_NOWAIT (Ming Lei) [RHEL-106845]
+- selftests: ublk: add test for UBLK_F_QUIESCE (Ming Lei) [RHEL-106845]
+- ublk: add feature UBLK_F_QUIESCE (Ming Lei) [RHEL-106845]
+- selftests: ublk: add test case for UBLK_U_CMD_UPDATE_SIZE (Ming Lei) [RHEL-106845]
+- traceevent/block: Add REQ_ATOMIC flag to block trace events (Ming Lei) [RHEL-106845]
+- ublk: run auto buf unregisgering in same io_ring_ctx with registering (Ming Lei) [RHEL-106845]
+- io_uring: add helper io_uring_cmd_ctx_handle() (Ming Lei) [RHEL-106845]
+- ublk: remove io argument from ublk_auto_buf_reg_fallback() (Ming Lei) [RHEL-106845]
+- ublk: handle ublk_set_auto_buf_reg() failure correctly in ublk_fetch() (Ming Lei) [RHEL-106845]
+- selftests: ublk: add test for covering UBLK_AUTO_BUF_REG_FALLBACK (Ming Lei) [RHEL-106845]
+- selftests: ublk: support UBLK_F_AUTO_BUF_REG (Ming Lei) [RHEL-106845]
+- ublk: support UBLK_AUTO_BUF_REG_FALLBACK (Ming Lei) [RHEL-106845]
+- ublk: register buffer to local io_uring with provided buf index via UBLK_F_AUTO_BUF_REG (Ming Lei) [RHEL-106845]
+- ublk: prepare for supporting to register request buffer automatically (Ming Lei) [RHEL-106845]
+- ublk: convert to refcount_t (Ming Lei) [RHEL-106845]
+- selftests: ublk: make IO & device removal test more stressful (Ming Lei) [RHEL-106845]
+- nvmet-tcp: switch to using the crc32c library (Ming Lei) [RHEL-106845]
+- nvmet: replace strncpy with strscpy (Ming Lei) [RHEL-106845]
+- nvme-tcp: open-code nvme_tcp_queue_request() for R2T (Ming Lei) [RHEL-106845]
+- nvme-loop: avoid -Wflex-array-member-not-at-end warning (Ming Lei) [RHEL-106845]
+- blk-mq: add a copyright notice to blk-mq-dma.c (Ming Lei) [RHEL-106845]
+- blk-mq: move the DMA mapping code to a separate file (Ming Lei) [RHEL-106845]
+- cdrom: Remove unnecessary NULL check before unregister_sysctl_table() (Ming Lei) [RHEL-106845]
+- block: fix elv_update_nr_hw_queues() to reattach elevator (Ming Lei) [RHEL-106845]
+- brd: avoid extra xarray lookups on first write (Ming Lei) [RHEL-106845]
+- block: Remove obsolete configs BLK_MQ_{PCI,VIRTIO} (Ming Lei) [RHEL-106845]
+- block: remove the same_page output argument to bvec_try_merge_page (Ming Lei) [RHEL-106845]
+- block: unfreeze queue if realloc tag set fails during nr_hw_queues update (Ming Lei) [RHEL-106845]
+- md: clean up accounting for issued sync IO (Ming Lei) [RHEL-106845]
+- md: fix is_mddev_idle() (Ming Lei) [RHEL-106845]
+- md: add a new api sync_io_depth (Ming Lei) [RHEL-106845]
+- md: record dm-raid gendisk in mddev (Ming Lei) [RHEL-106845]
+- block: export API to get the number of bdev inflight IO (Ming Lei) [RHEL-106845]
+- block: clean up blk_mq_in_flight_rw() (Ming Lei) [RHEL-106845]
+- block: WARN if bdev inflight counter is negative (Ming Lei) [RHEL-106845]
+- block: reuse part_in_flight_rw for part_in_flight (Ming Lei) [RHEL-106845]
+- blk-mq: remove blk_mq_in_flight() (Ming Lei) [RHEL-106845]
+- block: move removing elevator after deleting disk->queue_kobj (Ming Lei) [RHEL-106845]
+- block: don't quiesce queue for calling elevator_set_none() (Ming Lei) [RHEL-106845]
+- fs: aio: initialize .ki_write_stream of read-write request (Ming Lei) [RHEL-106845]
+- dm-integrity: use bio_add_virt_nofail (Ming Lei) [RHEL-106845]
+- dm-bufio: use bio_add_virt_nofail (Ming Lei) [RHEL-106845]
+- PM: hibernate: split and simplify hib_submit_io (Ming Lei) [RHEL-106845]
+- zonefs: use bdev_rw_virt in zonefs_read_super (Ming Lei) [RHEL-106845]
+- gfs2: use bdev_rw_virt in gfs2_read_super (Ming Lei) [RHEL-106845]
+- rnbd-srv: use bio_add_virt_nofail (Ming Lei) [RHEL-106845]
+- bcache: use bio_add_virt_nofail (Ming Lei) [RHEL-106845]
+- block: simplify bio_map_kern (Ming Lei) [RHEL-106845]
+- block: pass the operation to bio_{map,copy}_kern (Ming Lei) [RHEL-106845]
+- block: remove the q argument from blk_rq_map_kern (Ming Lei) [RHEL-106845]
+- block: add a bio_add_vmalloc helpers (Ming Lei) [RHEL-106845]
+- block: add a bio_add_max_vecs helper (Ming Lei) [RHEL-106845]
+- block: add a bdev_rw_virt helper (Ming Lei) [RHEL-106845]
+- block: add a bio_add_virt_nofail helper (Ming Lei) [RHEL-106845]
+- block: fix warning on 'make htmldocs' (Ming Lei) [RHEL-106845]
+- nvme: fix incorrect sizeof (Ming Lei) [RHEL-106845]
+- nvme: fix write_stream_granularity initialization (Ming Lei) [RHEL-106845]
+- nvme: use fdp streams if write stream is provided (Ming Lei) [RHEL-106845]
+- nvme: register fdp parameters with the block layer (Ming Lei) [RHEL-106845]
+- nvme: add FDP definitions (Ming Lei) [RHEL-106845]
+- nvme: pass a void pointer to nvme_get/set_features for the result (Ming Lei) [RHEL-106845]
+- nvme: add a nvme_get_log_lsi helper (Ming Lei) [RHEL-106845]
+- io_uring: enable per-io write streams (Ming Lei) [RHEL-106845]
+- block: expose write streams for block device nodes (Ming Lei) [RHEL-106845]
+- block: introduce a write_stream_granularity queue limit (Ming Lei) [RHEL-106845]
+- block: introduce max_write_streams queue limit (Ming Lei) [RHEL-106845]
+- block: add a bi_write_stream field (Ming Lei) [RHEL-106845]
+- fs: add a write stream field to the kiocb (Ming Lei) [RHEL-106845]
+- block: only update request sector if needed (Ming Lei) [RHEL-106845]
+- block: move wbt_enable_default() out of queue freezing from sched ->exit() (Ming Lei) [RHEL-106845]
+- block: move hctx cpuhp add/del out of queue freezing (Ming Lei) [RHEL-106845]
+- block: don't acquire ->elevator_lock in blk_mq_map_swqueue and blk_mq_realloc_hw_ctxs (Ming Lei) [RHEL-106845]
+- block: move hctx debugfs/sysfs registering out of freezing queue (Ming Lei) [RHEL-106845]
+- block: move elv_register[unregister]_queue out of elevator_lock (Ming Lei) [RHEL-106845]
+- block: add new helper for disabling elevator switch when deleting disk (Ming Lei) [RHEL-106845]
+- block: fail to show/store elevator sysfs attribute if elevator is dying (Ming Lei) [RHEL-106845]
+- block: remove elevator queue's type check in elv_attr_show/store() (Ming Lei) [RHEL-106845]
+- block: pass elevator_queue to elv_register_queue & unregister_queue (Ming Lei) [RHEL-106845]
+- block: unifying elevator change (Ming Lei) [RHEL-106845]
+- block: add `struct elv_change_ctx` for unifying elevator change (Ming Lei) [RHEL-106845]
+- block: move queue freezing & elevator_lock into elevator_change() (Ming Lei) [RHEL-106845]
+- block: simplify elevator reattachment for updating nr_hw_queues (Ming Lei) [RHEL-106845]
+- block: move blk_queue_registered() check into elv_iosched_store() (Ming Lei) [RHEL-106845]
+- block: fold elevator_disable into elevator_switch (Ming Lei) [RHEL-106845]
+- block: look up the elevator type in elevator_switch (Ming Lei) [RHEL-106845]
+- block: don't allow to switch elevator if updating nr_hw_queues is in-progress (Ming Lei) [RHEL-106845]
+- block: prevent adding/deleting disk during updating nr_hw_queues (Ming Lei) [RHEL-106845]
+- block: add helper add_disk_final() (Ming Lei) [RHEL-106845]
+- block: move sched debugfs register into elvevator_register_queue (Ming Lei) [RHEL-106845]
+- block: add two helpers for registering/un-registering sched debugfs (Ming Lei) [RHEL-106845]
+- block: use q->elevator with ->elevator_lock held in elv_iosched_show() (Ming Lei) [RHEL-106845]
+- block: don't call freeze queue in elevator_switch() and elevator_disable() (Ming Lei) [RHEL-106845]
+- block: move ELEVATOR_FLAG_DISABLE_WBT a request queue flag (Ming Lei) [RHEL-106845]
+- block: move blk_mq_add_queue_tag_set() after blk_mq_map_swqueue() (Ming Lei) [RHEL-106845]
+- brd: fix discard end sector (Ming Lei) [RHEL-106845]
+- brd: fix aligned_sector from brd_do_discard() (Ming Lei) [RHEL-106845]
+- brd: protect page with rcu (Ming Lei) [RHEL-106845]
+- ublk: consolidate UBLK_IO_FLAG_OWNED_BY_SRV checks (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: fix include path (Ming Lei) [RHEL-106845]
+- selftests: ublk: make test_generic_06 silent on success (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: build with -Werror iff WERROR!=0 (Ming Lei) [RHEL-106845]
+- mm: remove NR_BOUNCE zone stat (Ming Lei) [RHEL-106845]
+- block: remove bounce buffering support (Ming Lei) [RHEL-106845]
+- scsi: remove the no_highmem flag in the host (Ming Lei) [RHEL-106845]
+- usb-storage: reject probe of device one non-DMA HCDs when using highmem (Ming Lei) [RHEL-106845]
+- scsi: make ppa depend on !HIGHMEM (Ming Lei) [RHEL-106845]
+- scsi: make imm depend on !HIGHMEM (Ming Lei) [RHEL-106845]
+- scsi: make aha152x depend on !HIGHMEM (Ming Lei) [RHEL-106845]
+- block: use writeback_iter (Ming Lei) [RHEL-106845]
+- ublk: store request pointer in ublk_io (Ming Lei) [RHEL-106845]
+- ublk: check UBLK_IO_FLAG_OWNED_BY_SRV in ublk_abort_queue() (Ming Lei) [RHEL-106845]
+- ublk: don't call ublk_dispatch_req() for NEED_GET_DATA (Ming Lei) [RHEL-106845]
+- ublk: factor out ublk_start_io() helper (Ming Lei) [RHEL-106845]
+- ublk: don't log uring_cmd cmd_op in ublk_dispatch_req() (Ming Lei) [RHEL-106845]
+- ublk: take const ubq pointer in ublk_get_iod() (Ming Lei) [RHEL-106845]
+- ublk: remove misleading "ubq" in "ubq_complete_io_cmd()" (Ming Lei) [RHEL-106845]
+- ublk: fix "immepdately" typo in comment (Ming Lei) [RHEL-106845]
+- ublk: factor out ublk_commit_and_fetch (Ming Lei) [RHEL-106845]
+- block: avoid hctx spinlock for plug with multiple queues (Ming Lei) [RHEL-106845]
+- block: factor out blk_mq_dispatch_queue_requests() helper (Ming Lei) [RHEL-106845]
+- block: take rq_list instead of plug in dispatch functions (Ming Lei) [RHEL-106845]
+- Documentation: Document the new zoned loop block device driver (Ming Lei) [RHEL-106845]
+- block: new zoned loop block device driver (Ming Lei) [RHEL-106845]
+- brd: use memcpy_{to,from]_page in brd_rw_bvec (Ming Lei) [RHEL-106845]
+- brd: split I/O at page boundaries (Ming Lei) [RHEL-106845]
+- brd: use bvec_kmap_local in brd_do_bvec (Ming Lei) [RHEL-106845]
+- brd: remove the sector variable in brd_submit_bio (Ming Lei) [RHEL-106845]
+- brd: pass a bvec pointer to brd_do_bvec (Ming Lei) [RHEL-106845]
+- ublk: remove unnecessary ubq checks (Ming Lei) [RHEL-106845]
+- ublk: Add UBLK_U_CMD_UPDATE_SIZE (Ming Lei) [RHEL-106845]
+- block: blk-rq-qos: guard rq-qos helpers by static key (Ming Lei) [RHEL-106845]
+- block: ensure that struct blk_mq_alloc_data is fully initialized (Ming Lei) [RHEL-106845]
+- block: Simplify blk_mq_dispatch_rq_list() and its callers (Ming Lei) [RHEL-106845]
+- ublk: fix dead loop when canceling io command (Ming Lei) [RHEL-106845]
+- ublk: remove the check of ublk_need_req_ref() from __ublk_check_and_get_req (Ming Lei) [RHEL-106845]
+- ublk: enhance check for register/unregister io buffer command (Ming Lei) [RHEL-106845]
+- ublk: decouple zero copy from user copy (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix UBLK_F_NEED_GET_DATA (Ming Lei) [RHEL-106845]
+- ublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd (Ming Lei) [RHEL-106845] {CVE-2025-37906}
+- ublk: call ublk_dispatch_req() for handling UBLK_U_IO_NEED_GET_DATA (Ming Lei) [RHEL-106845]
+- selftests: ublk: common: fix _get_disk_dev_t for pre-9.0 coreutils (Ming Lei) [RHEL-106845]
+- selftests: ublk: remove useless 'delay_us' from 'struct dev_ctx' (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix recover test (Ming Lei) [RHEL-106845]
+- selftests: ublk: add generic_06 for covering fault inject (Ming Lei) [RHEL-106845]
+- ublk: simplify aborting ublk request (Ming Lei) [RHEL-106845]
+- ublk: remove __ublk_quiesce_dev() (Ming Lei) [RHEL-106845]
+- ublk: improve detection and handling of ublk server exit (Ming Lei) [RHEL-106845]
+- ublk: move device reset into ublk_ch_release() (Ming Lei) [RHEL-106845]
+- ublk: rely on ->canceling for dealing with ublk_nosrv_dev_should_queue_io (Ming Lei) [RHEL-106845]
+- ublk: add ublk_force_abort_dev() (Ming Lei) [RHEL-106845]
+- ublk: properly serialize all FETCH_REQs (Ming Lei) [RHEL-106845]
+- selftests: ublk: move creating UBLK_TMP into _prep_test() (Ming Lei) [RHEL-106845]
+- selftests: ublk: add test_stress_05.sh (Ming Lei) [RHEL-106845]
+- selftests: ublk: support user recovery (Ming Lei) [RHEL-106845]
+- selftests: ublk: support target specific command line (Ming Lei) [RHEL-106845]
+- selftests: ublk: increase max nr_queues and queue depth (Ming Lei) [RHEL-106845]
+- selftests: ublk: set queue pthread's cpu affinity (Ming Lei) [RHEL-106845]
+- selftests: ublk: setup ring with IORING_SETUP_SINGLE_ISSUER/IORING_SETUP_DEFER_TASKRUN (Ming Lei) [RHEL-106845]
+- selftests: ublk: add two stress tests for zero copy feature (Ming Lei) [RHEL-106845]
+- selftests: ublk: run stress tests in parallel (Ming Lei) [RHEL-106845]
+- selftests: ublk: make sure _add_ublk_dev can return in sub-shell (Ming Lei) [RHEL-106845]
+- selftests: ublk: cleanup backfile automatically (Ming Lei) [RHEL-106845]
+- selftests: ublk: add io_uring uapi header (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix ublk_find_tgt() (Ming Lei) [RHEL-106845]
+- ublk: don't suggest CONFIG_BLK_DEV_UBLK=Y (Ming Lei) [RHEL-106845]
+- ublk: pass ublksrv_ctrl_cmd * instead of io_uring_cmd * (Ming Lei) [RHEL-106845]
+- ublk: don't fail request for recovery & reissue in case of ubq->canceling (Ming Lei) [RHEL-106845]
+- ublk: fix handling recovery & reissue in ublk_abort_queue() (Ming Lei) [RHEL-106845] {CVE-2025-37759}
+- selftests: ublk: fix test_stripe_04 (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: validate buffer count with offset for cloning (Ming Lei) [RHEL-106845] {CVE-2025-38196}
+- io_uring/memmap: cast nr_pages to size_t before shifting (Ming Lei) [RHEL-106845]
+- io_uring/poll: fix POLLERR handling (Ming Lei) [RHEL-106845]
+- io_uring/net: only consider msg_inq if larger than 1 (Ming Lei) [RHEL-106845]
+- io_uring: don't assume uaddr alignment in io_vec_fill_bvec (Ming Lei) [RHEL-106845]
+- io_uring/net: always use current transfer count for buffer put (Ming Lei) [RHEL-106845]
+- io_uring/net: only retry recv bundle for a full transfer (Ming Lei) [RHEL-106845]
+- io_uring: fix overflow resched cqe reordering (Ming Lei) [RHEL-106845]
+- io_uring/cmd: axe duplicate io_uring_cmd_import_fixed_vec() declaration (Ming Lei) [RHEL-106845]
+- io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo() (Ming Lei) [RHEL-106845] {CVE-2025-38002}
+- io_uring/memmap: don't use page_address() on a highmem page (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: fix hybrid polling initialization issue (Ming Lei) [RHEL-106845]
+- io_uring/sqpoll: Increase task_work submission batch size (Ming Lei) [RHEL-106845]
+- io_uring: always arm linked timeouts prior to issue (Ming Lei) [RHEL-106845]
+- io_uring/fdinfo: annotate racy sq/cq head/tail reads (Ming Lei) [RHEL-106845]
+- io_uring: fix 'sync' handling of io_fallback_tw() (Ming Lei) [RHEL-106845]
+- io_uring: don't duplicate flushing in io_req_post_cqe (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: ensure segments counts are correct on kbuf buffers (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: send exact nr_segs for fixed buffer (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: refactor io_import_fixed (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: separate kbuf offset adjustments (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: don't skip offset calculation (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: reject zero sized provided buffers (Ming Lei) [RHEL-106845]
+- io_uring: don't post tag CQEs on file/buffer registration failure (Ming Lei) [RHEL-106845]
+- io_uring: always do atomic put from iowq (Ming Lei) [RHEL-106845]
+- selftests: ublk: enable zero copy for stripe target (Ming Lei) [RHEL-106845]
+- io_uring: support vectored kernel fixed buffer (Ming Lei) [RHEL-106845]
+- io_uring: add validate_fixed_range() for validate fixed buffer (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: fix an error log line (Ming Lei) [RHEL-106845]
+- selftests: ublk: kublk: use ioctl-encoded opcodes (Ming Lei) [RHEL-106845]
+- io_uring/net: avoid import_ubuf for regvec send (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: check size when importing reg buffer (Ming Lei) [RHEL-106845]
+- io_uring: cleanup {g,s]etsockopt sqe reading (Ming Lei) [RHEL-106845]
+- io_uring: hide caches sqes from drivers (Ming Lei) [RHEL-106845]
+- io_uring: add req flag invariant build assertion (Ming Lei) [RHEL-106845]
+- Documentation: ublk: remove dead footnote (Ming Lei) [RHEL-106845]
+- selftests: ublk: specify io_cmd_buf pointer type (Ming Lei) [RHEL-106845]
+- ublk: specify io_cmd_buf pointer type (Ming Lei) [RHEL-106845]
+- io_uring: don't pass ctx to tw add remote helper (Ming Lei) [RHEL-106845]
+- io_uring/msg: initialise msg request opcode (Ming Lei) [RHEL-106845]
+- io_uring/msg: rename io_double_lock_ctx() (Ming Lei) [RHEL-106845]
+- io_uring/net: import zc ubuf earlier (Ming Lei) [RHEL-106845]
+- io_uring/net: set sg_from_iter in advance (Ming Lei) [RHEL-106845]
+- io_uring/net: clusterise send vs msghdr branches (Ming Lei) [RHEL-106845]
+- io_uring/net: unify sendmsg setup with zc (Ming Lei) [RHEL-106845]
+- io_uring/net: combine sendzc flags writes (Ming Lei) [RHEL-106845]
+- io_uring/net: open code io_net_vec_assign() (Ming Lei) [RHEL-106845]
+- io_uring/net: open code io_sendmsg_copy_hdr() (Ming Lei) [RHEL-106845]
+- ublk: store req in ublk_uring_cmd_pdu for ublk_cmd_tw_cb() (Ming Lei) [RHEL-106845]
+- ublk: avoid redundant io->cmd in ublk_queue_cmd_list() (Ming Lei) [RHEL-106845]
+- ublk: get ubq from pdu in ublk_cmd_list_tw_cb() (Ming Lei) [RHEL-106845]
+- ublk: skip 1 NULL check in ublk_cmd_list_tw_cb() loop (Ming Lei) [RHEL-106845]
+- ublk: remove unused cmd argument to ublk_dispatch_req() (Ming Lei) [RHEL-106845]
+- selftests: ublk: add test for checking zero copy related parameter (Ming Lei) [RHEL-106845]
+- selftests: ublk: add more tests for covering MQ (Ming Lei) [RHEL-106845]
+- ublk: rename ublk_rq_task_work_cb as ublk_cmd_tw_cb (Ming Lei) [RHEL-106845]
+- ublk: implement ->queue_rqs() (Ming Lei) [RHEL-106845]
+- ublk: document zero copy feature (Ming Lei) [RHEL-106845]
+- ublk: add segment parameter (Ming Lei) [RHEL-106845]
+- ublk: call io_uring_cmd_to_pdu to get uring_cmd pdu (Ming Lei) [RHEL-106845]
+- ublk: add helper of ublk_need_map_io() (Ming Lei) [RHEL-106845]
+- ublk: remove two unused fields from 'struct ublk_queue' (Ming Lei) [RHEL-106845]
+- ublk: comment on ubq->canceling handling in ublk_queue_rq() (Ming Lei) [RHEL-106845]
+- ublk: make sure ubq->canceling is set when queue is frozen (Ming Lei) [RHEL-106845] {CVE-2025-22068}
+- io_uring/net: account memory for zc sendmsg (Ming Lei) [RHEL-106845]
+- io_uring/net: fix io_req_post_cqe abuse by send bundle (Ming Lei) [RHEL-106845]
+- io_uring/net: use REQ_F_IMPORT_BUFFER for send_zc (Ming Lei) [RHEL-106845]
+- io_uring: move min_events sanitisation (Ming Lei) [RHEL-106845]
+- io_uring: rename "min" arg in io_iopoll_check() (Ming Lei) [RHEL-106845]
+- io_uring: open code __io_post_aux_cqe() (Ming Lei) [RHEL-106845]
+- io_uring: defer iowq cqe overflow via task_work (Ming Lei) [RHEL-106845]
+- io_uring: fix retry handling off iowq (Ming Lei) [RHEL-106845]
+- io_uring/net: only import send_zc buffer once (Ming Lei) [RHEL-106845]
+- io_uring/cmd: introduce io_uring_cmd_import_fixed_vec (Ming Lei) [RHEL-106845]
+- io_uring/cmd: add iovec cache for commands (Ming Lei) [RHEL-106845]
+- io_uring/cmd: don't expose entire cmd async data (Ming Lei) [RHEL-106845]
+- io_uring: rename the data cmd cache (Ming Lei) [RHEL-106845]
+- io_uring: rely on io_prep_reg_vec for iovec placement (Ming Lei) [RHEL-106845]
+- io_uring: introduce io_prep_reg_iovec() (Ming Lei) [RHEL-106845]
+- io_uring: unify STOP_MULTISHOT with IOU_OK (Ming Lei) [RHEL-106845]
+- io_uring: return -EAGAIN to continue multishot (Ming Lei) [RHEL-106845]
+- io_uring: cap cached iovec/bvec size (Ming Lei) [RHEL-106845]
+- io_uring/net: implement vectored reg bufs for zctx (Ming Lei) [RHEL-106845]
+- io_uring/net: convert to struct iou_vec (Ming Lei) [RHEL-106845]
+- io_uring/net: pull vec alloc out of msghdr import (Ming Lei) [RHEL-106845]
+- io_uring/net: combine msghdr copy (Ming Lei) [RHEL-106845]
+- io_uring/rw: defer reg buf vec import (Ming Lei) [RHEL-106845]
+- io_uring/rw: implement vectored registered rw (Ming Lei) [RHEL-106845]
+- io_uring: add infra for importing vectored reg buffers (Ming Lei) [RHEL-106845]
+- io_uring: introduce struct iou_vec (Ming Lei) [RHEL-106845]
+- selftests: ublk: add stripe target (Ming Lei) [RHEL-106845]
+- selftests: ublk: simplify loop io completion (Ming Lei) [RHEL-106845]
+- selftests: ublk: enable zero copy for null target (Ming Lei) [RHEL-106845]
+- selftests: ublk: prepare for supporting stripe target (Ming Lei) [RHEL-106845]
+- selftests: ublk: move common code into common.c (Ming Lei) [RHEL-106845]
+- selftests: ublk: increase max buffer size to 1MB (Ming Lei) [RHEL-106845]
+- selftests: ublk: add single sqe allocator helper (Ming Lei) [RHEL-106845]
+- selftests: ublk: add generic_01 for verifying sequential IO order (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix starting ublk device (Ming Lei) [RHEL-106845]
+- io_uring: enable toggle of iowait usage when waiting on CQEs (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix write cache implementation (Ming Lei) [RHEL-106845]
+- selftests: ublk: add variable for user to not show test result (Ming Lei) [RHEL-106845]
+- selftests: ublk: don't show `modprobe` failure (Ming Lei) [RHEL-106845]
+- selftests: ublk: add one dependency header (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: enable bundles for incrementally consumed buffers (Ming Lei) [RHEL-106845]
+- Revert "io_uring/rsrc: simplify the bvec iter count calculation" (Ming Lei) [RHEL-106845]
+- selftests: ublk: improve test usability (Ming Lei) [RHEL-106845]
+- selftests: ublk: add stress test for covering IO vs. killing ublk server (Ming Lei) [RHEL-106845]
+- selftests: ublk: add one stress test for covering IO vs. removing device (Ming Lei) [RHEL-106845]
+- selftests: ublk: load/unload ublk_drv when preparing & cleaning up tests (Ming Lei) [RHEL-106845]
+- selftests: ublk: move zero copy feature check into _add_ublk_dev() (Ming Lei) [RHEL-106845]
+- selftests: ublk: don't pass ${dev_id} to _cleanup_test() (Ming Lei) [RHEL-106845]
+- selftests: ublk: support shellcheck and fix all warning (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix parsing '-a' argument (Ming Lei) [RHEL-106845]
+- selftests: ublk: add --foreground command line (Ming Lei) [RHEL-106845]
+- selftests: ublk: fix build failure (Ming Lei) [RHEL-106845]
+- selftests: ublk: make ublk_stop_io_daemon() more reliable (Ming Lei) [RHEL-106845]
+- io_uring: Remove unused declaration io_alloc_async_data() (Ming Lei) [RHEL-106845]
+- io_uring: introduce io_cache_free() helper (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: skip NULL file/buffer checks in io_free_rsrc_node() (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: avoid NULL node check on io_sqe_buffer_register() failure (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: call io_free_node() on io_sqe_buffer_register() failure (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: free io_rsrc_node using kfree() (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: split out io_free_node() helper (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: include io_uring_types.h in rsrc.h (Ming Lei) [RHEL-106845]
+- ublk: don't cast registered buffer index to int (Ming Lei) [RHEL-106845]
+- io_uring/nop: use io_find_buf_node() (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: declare io_find_buf_node() in header file (Ming Lei) [RHEL-106845]
+- io_uring/ublk: report error when unregister operation fails (Ming Lei) [RHEL-106845]
+- io_uring: convert cmd_to_io_kiocb() macro to function (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: specify io_uring_cmd_import_fixed() pointer type (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: use rq_data_dir() to compute bvec dir (Ming Lei) [RHEL-106845]
+- selftests: ublk: add ublk zero copy test (Ming Lei) [RHEL-106845]
+- selftests: ublk: add file backed ublk (Ming Lei) [RHEL-106845]
+- selftests: ublk: add kernel selftests for ublk (Ming Lei) [RHEL-106845]
+- io_uring: cache nodes and mapped buffers (Ming Lei) [RHEL-106845]
+- ublk: zc register/unregister bvec (Ming Lei) [RHEL-106845]
+- io_uring: add support for kernel registered bvecs (Ming Lei) [RHEL-106845]
+- io_uring/rw: move fixed buffer import to issue path (Ming Lei) [RHEL-106845]
+- io_uring/rw: move buffer_select outside generic prep (Ming Lei) [RHEL-106845]
+- io_uring/net: fix build warning for !CONFIG_COMPAT (Ming Lei) [RHEL-106845]
+- io_uring: rearrange opdef flags by use pattern (Ming Lei) [RHEL-106845]
+- io_uring/net: extract iovec import into a helper (Ming Lei) [RHEL-106845]
+- io_uring/net: unify *mshot_prep calls with compat (Ming Lei) [RHEL-106845]
+- io_uring/net: derive iovec storage later (Ming Lei) [RHEL-106845]
+- io_uring/net: verify msghdr before copying iovec (Ming Lei) [RHEL-106845]
+- io_uring/net: isolate msghdr copying code (Ming Lei) [RHEL-106845]
+- io_uring/net: simplify compat selbuf iov parsing (Ming Lei) [RHEL-106845]
+- io_uring/net: remove unnecessary REQ_F_NEED_CLEANUP (Ming Lei) [RHEL-106845]
+- io_uring: combine buffer lookup and import (Ming Lei) [RHEL-106845]
+- io_uring/net: reuse req->buf_index for sendzc (Ming Lei) [RHEL-106845]
+- io_uring/nop: reuse req->buf_index (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: remove redundant check for valid imu (Ming Lei) [RHEL-106845]
+- io_uring/rw: open code io_prep_rw_setup() (Ming Lei) [RHEL-106845]
+- io_uring/rw: extract helper for iovec import (Ming Lei) [RHEL-106845]
+- io_uring/rw: rename io_import_iovec() (Ming Lei) [RHEL-106845]
+- io_uring/rw: allocate async data in io_prep_rw() (Ming Lei) [RHEL-106845]
+- io_uring: make io_poll_issue() sturdier (Ming Lei) [RHEL-106845]
+- io_uring/net: canonise accept mshot handling (Ming Lei) [RHEL-106845]
+- io_uring/net: fix accept multishot handling (Ming Lei) [RHEL-106845]
+- io_uring/net: use io_is_compat() (Ming Lei) [RHEL-106845]
+- io_uring/waitid: use io_is_compat() (Ming Lei) [RHEL-106845]
+- io_uring/rw: shrink io_iov_compat_buffer_select_prep (Ming Lei) [RHEL-106845]
+- io_uring/rw: compile out compat param passing (Ming Lei) [RHEL-106845]
+- io_uring/cmd: optimise !CONFIG_COMPAT flags setting (Ming Lei) [RHEL-106845]
+- io_uring: introduce io_is_compat() (Ming Lei) [RHEL-106845]
+- io_uring: use lockless_cq flag in io_req_complete_post() (Ming Lei) [RHEL-106845]
+- io_uring: pass struct io_tw_state by value (Ming Lei) [RHEL-106845]
+- io_uring: introduce type alias for io_tw_state (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: avoid NULL check in io_put_rsrc_node() (Ming Lei) [RHEL-106845]
+- io_uring: pass ctx instead of req to io_init_req_drain() (Ming Lei) [RHEL-106845]
+- io_uring: use IO_REQ_LINK_FLAGS more (Ming Lei) [RHEL-106845]
+- io_uring/net: improve recv bundles (Ming Lei) [RHEL-106845]
+- io_uring/waitid: use generic io_cancel_remove() helper (Ming Lei) [RHEL-106845]
+- io_uring/futex: use generic io_cancel_remove() helper (Ming Lei) [RHEL-106845]
+- io_uring/cancel: add generic cancel helper (Ming Lei) [RHEL-106845]
+- io_uring/waitid: convert to io_cancel_remove_all() (Ming Lei) [RHEL-106845]
+- io_uring/futex: convert to io_cancel_remove_all() (Ming Lei) [RHEL-106845]
+- io_uring/cancel: add generic remove_all helper (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: uninline __io_put_kbufs (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: introduce io_kbuf_drop_legacy() (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: open code __io_put_kbuf() (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: remove legacy kbuf caching (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: simplify __io_put_kbuf (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: move locking into io_kbuf_drop() (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: remove legacy kbuf kmem cache (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: remove legacy kbuf bulk allocation (Ming Lei) [RHEL-106845]
+- io_uring: sanitise ring params earlier (Ming Lei) [RHEL-106845]
+- io_uring: check for iowq alloc_workqueue failure (Ming Lei) [RHEL-106845]
+- io_uring: deduplicate caches deallocation (Ming Lei) [RHEL-106845]
+- io_uring/io-wq: pass io_wq to io_get_next_work() (Ming Lei) [RHEL-106845]
+- io_uring/io-wq: do not use bogus hash value (Ming Lei) [RHEL-106845]
+- io_uring/io-wq: cache work->flags in variable (Ming Lei) [RHEL-106845]
+- io_uring/io-wq: move worker lists to struct io_wq_acct (Ming Lei) [RHEL-106845]
+- io_uring/io-wq: add io_worker.acct pointer (Ming Lei) [RHEL-106845]
+- io_uring/io-wq: eliminate redundant io_work_get_acct() calls (Ming Lei) [RHEL-106845]
+- io_uring/net: fix sendzc double notif flush (Ming Lei) [RHEL-106845]
+- io_uring/net: don't clear REQ_F_NEED_CLEANUP unconditionally (Ming Lei) [RHEL-106845]
+- io_uring/rw: ensure reissue path is correctly handled for IOPOLL (Ming Lei) [RHEL-106845]
+- io_uring/net: save msg_control for compat (Ming Lei) [RHEL-106845]
+- io_uring/rw: clean up mshot forced sync mode (Ming Lei) [RHEL-106845]
+- io_uring/rw: move ki_complete init into prep (Ming Lei) [RHEL-106845]
+- io_uring/rw: don't directly use ki_complete (Ming Lei) [RHEL-106845]
+- io_uring/rw: forbid multishot async reads (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: remove unused constants (Ming Lei) [RHEL-106845]
+- io_uring: fix spelling error in uapi io_uring.h (Ming Lei) [RHEL-106845]
+- io-wq: backoff when retrying worker creation (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: unconditionally copy SQEs at prep time (Ming Lei) [RHEL-106845]
+- io_uring/waitid: setup async data in the prep handler (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: remove dead req_has_async_data() check (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: switch sqe to async_data on EAGAIN (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: don't assume io_uring_cmd_data layout (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: reallocate buf lists on upgrade (Ming Lei) [RHEL-106845] {CVE-2025-21836}
+- io_uring/waitid: don't abuse io_tw_state (Ming Lei) [RHEL-106845]
+- io_uring/net: don't retry connect operation on EPOLLERR (Ming Lei) [RHEL-106845]
+- io_uring/rw: simplify io_rw_recycle() (Ming Lei) [RHEL-106845]
+- io_uring: remove !KASAN guards from cache free (Ming Lei) [RHEL-106845]
+- io_uring/net: extract io_send_select_buffer() (Ming Lei) [RHEL-106845]
+- io_uring/net: clean io_msg_copy_hdr() (Ming Lei) [RHEL-106845]
+- io_uring/net: make io_net_vec_assign() return void (Ming Lei) [RHEL-106845]
+- io_uring: add alloc_cache.c (Ming Lei) [RHEL-106845]
+- io_uring: dont ifdef io_alloc_cache_kasan() (Ming Lei) [RHEL-106845]
+- io_uring: include all deps for alloc_cache.h (Ming Lei) [RHEL-106845]
+- io_uring: fix multishots with selected buffers (Ming Lei) [RHEL-106845]
+- io_uring/register: use atomic_read/write for sq_flags migration (Ming Lei) [RHEL-106845]
+- io_uring/alloc_cache: get rid of _nocache() helper (Ming Lei) [RHEL-106845]
+- io_uring: get rid of alloc cache init_once handling (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: cleanup struct io_uring_cmd_data layout (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock() (Ming Lei) [RHEL-106845]
+- io_uring/msg_ring: don't leave potentially dangling ->tctx pointer (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: Move lockdep assert from io_free_rsrc_node() to caller (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: remove unused parameter ctx for io_rsrc_node_alloc() (Ming Lei) [RHEL-106845]
+- io_uring: clean up io_uring_register_get_file() (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: Simplify buffer cloning by locking both rings (Ming Lei) [RHEL-106845]
+- io_uring/fdinfo: fix io_uring_show_fdinfo() misuse of ->d_iname (Ming Lei) [RHEL-106845]
+- io_uring: reuse io_should_terminate_tw() for cmds (Ming Lei) [RHEL-106845]
+- io_uring: Factor out a function to parse restrictions (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: require cloned buffers to share accounting contexts (Ming Lei) [RHEL-106845]
+- io_uring: simplify the SQPOLL thread check when cancelling requests (Ming Lei) [RHEL-106845]
+- io_uring: expose read/write attribute capability (Ming Lei) [RHEL-106845]
+- io_uring/rw: don't gate retry on completion context (Ming Lei) [RHEL-106845]
+- io_uring/rw: handle -EAGAIN retry at IO completion time (Ming Lei) [RHEL-106845]
+- io_uring/rw: use io_rw_recycle() from cleanup path (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: simplify the bvec iter count calculation (Ming Lei) [RHEL-106845]
+- io_uring: ensure io_queue_deferred() is out-of-line (Ming Lei) [RHEL-106845]
+- io_uring/rw: always clear ->bytes_done on io_async_rw setup (Ming Lei) [RHEL-106845]
+- io_uring/rw: use NULL for rw->free_iovec assigment (Ming Lei) [RHEL-106845]
+- io_uring/msg_ring: Drop custom destructor (Ming Lei) [RHEL-106845]
+- io_uring: Move old async data allocation helper to header (Ming Lei) [RHEL-106845]
+- io_uring/rw: Allocate async data through helper (Ming Lei) [RHEL-106845]
+- io_uring/net: Allocate msghdr async data through helper (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: Allocate async data through generic helper (Ming Lei) [RHEL-106845]
+- io_uring/poll: Allocate apoll with generic alloc_cache helper (Ming Lei) [RHEL-106845]
+- io_uring/futex: Allocate ifd with generic alloc_cache helper (Ming Lei) [RHEL-106845]
+- io_uring: Add generic helper to allocate async data (Ming Lei) [RHEL-106845]
+- io_uring: Fold allocation into alloc_cache helper (Ming Lei) [RHEL-106845]
+- io_uring: prevent reg-wait speculations (Ming Lei) [RHEL-106845] {CVE-2024-58000}
+- io_uring: don't vmap single page regions (Ming Lei) [RHEL-106845]
+- io_uring: clean up io_prep_rw_setup() (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: fix unintentional sign extension on shift of reg.bgid (Ming Lei) [RHEL-106845]
+- io_uring/memmap: unify io_uring mmap'ing code (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: use region api for pbuf rings (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: remove pbuf ring refcounting (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: use mmap_lock to sync with mmap (Ming Lei) [RHEL-106845]
+- io_uring: use region api for CQ (Ming Lei) [RHEL-106845]
+- io_uring: use region api for SQ (Ming Lei) [RHEL-106845]
+- io_uring: pass ctx to io_register_free_rings (Ming Lei) [RHEL-106845]
+- io_uring/memmap: implement mmap for regions (Ming Lei) [RHEL-106845]
+- io_uring/memmap: implement kernel allocated regions (Ming Lei) [RHEL-106845]
+- io_uring/memmap: add IO_REGION_F_SINGLE_REF (Ming Lei) [RHEL-106845]
+- io_uring/memmap: helper for pinning region pages (Ming Lei) [RHEL-106845]
+- io_uring/memmap: optimise single folio regions (Ming Lei) [RHEL-106845]
+- io_uring/memmap: reuse io_free_region for failure path (Ming Lei) [RHEL-106845]
+- io_uring/memmap: account memory before pinning (Ming Lei) [RHEL-106845]
+- io_uring/memmap: flag regions with user pages (Ming Lei) [RHEL-106845]
+- io_uring/memmap: flag vmap'ed regions (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: export io_check_coalesce_buffer (Ming Lei) [RHEL-106845]
+- io_uring: rename ->resize_lock (Ming Lei) [RHEL-106845]
+- io_uring: add io_uring_cmd_get_async_data helper (Ming Lei) [RHEL-106845]
+- io_uring/cmd: let cmds to know about dying task (Ming Lei) [RHEL-106845]
+- io_uring/cmd: add per-op data to struct io_uring_cmd_data (Ming Lei) [RHEL-106845]
+- io_uring/cmd: rename struct uring_cache to io_uring_cmd_data (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: defer SQE copying until it's needed (Ming Lei) [RHEL-106845]
+- io_uring/register: cache old SQ/CQ head reading for copies (Ming Lei) [RHEL-106845]
+- io_uring/register: document io_register_resize_rings() shared mem usage (Ming Lei) [RHEL-106845]
+- io_uring/register: use stable SQ/CQ ring data during resize (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: fixup io_clone_buffers() error handling (Ming Lei) [RHEL-106845]
+- io_uring: don't touch sqd->thread off tw add (Ming Lei) [RHEL-106845]
+- io_uring: silence false positive warnings (Ming Lei) [RHEL-106845]
+- io_uring/timeout: fix multishot updates (Ming Lei) [RHEL-106845]
+- io_uring/kbuf: use pre-committed buffer address for non-pollable file (Ming Lei) [RHEL-106845]
+- io_uring/net: always initialize kmsg->msg.msg_inq upfront (Ming Lei) [RHEL-106845]
+- io_uring/timeout: flush timeouts outside of the timeout lock (Ming Lei) [RHEL-106845]
+- io_uring/rw: fix downgraded mshot read (Ming Lei) [RHEL-106845]
+- io_uring/sqpoll: fix sqpoll error handling races (Ming Lei) [RHEL-106845]
+- io_uring: check if iowq is killed before queuing (Ming Lei) [RHEL-106845] {CVE-2024-56709}
+- io_uring/register: limit ring resizing to DEFER_TASKRUN (Ming Lei) [RHEL-106845]
+- io_uring: Fix registered ring file refcount leak (Ming Lei) [RHEL-106845]
+- io_uring: make ctx->timeout_lock a raw spinlock (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: don't put/free empty buffers (Ming Lei) [RHEL-106845]
+- io_uring: Change res2 parameter type in io_uring_cmd_done (Ming Lei) [RHEL-106845]
+- io_uring/tctx: work around xa_store() allocation error issue (Ming Lei) [RHEL-106845] {CVE-2024-56584}
+- io_uring: fix corner case forgetting to vunmap (Ming Lei) [RHEL-106845]
+- io_uring: fix task_work cap overshooting (Ming Lei) [RHEL-106845]
+- io_uring: check for overflows in io_pin_pages (Ming Lei) [RHEL-106845] {CVE-2024-53187}
+- io_uring/nop: ensure nop->fd is always initialized (Ming Lei) [RHEL-106845]
+- io_uring: limit local tw done (Ming Lei) [RHEL-106845]
+- io_uring: add io_local_work_pending() (Ming Lei) [RHEL-106845]
+- io_uring/region: return negative -E2BIG in io_create_region() (Ming Lei) [RHEL-106845]
+- io_uring: protect register tracing (Ming Lei) [RHEL-106845]
+- io_uring: remove io_uring_cqwait_reg_arg (Ming Lei) [RHEL-106845]
+- io_uring/region: fix error codes after failed vmap (Ming Lei) [RHEL-106845]
+- io_uring: restore back registered wait arguments (Ming Lei) [RHEL-106845]
+- io_uring: add memory region registration (Ming Lei) [RHEL-106845]
+- io_uring: introduce concept of memory regions (Ming Lei) [RHEL-106845]
+- io_uring: temporarily disable registered waits (Ming Lei) [RHEL-106845]
+- io_uring: disable ENTER_EXT_ARG_REG for IOPOLL (Ming Lei) [RHEL-106845]
+- io_uring: fortify io_pin_pages with a warning (Ming Lei) [RHEL-106845]
+- switch io_msg_ring() to CLASS(fd) (Ming Lei) [RHEL-106845]
+- io_uring: fix invalid hybrid polling ctx leaks (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: fix buffer index retrieval (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: add & apply io_req_assign_buf_node() (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: remove '->ctx_ptr' of 'struct io_rsrc_node' (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: pass 'struct io_ring_ctx' reference to rsrc helpers (Ming Lei) [RHEL-106845]
+- io_uring: avoid normal tw intermediate fallback (Ming Lei) [RHEL-106845]
+- io_uring/napi: add static napi tracking strategy (Ming Lei) [RHEL-106845]
+- io_uring/napi: clean up __io_napi_do_busy_loop (Ming Lei) [RHEL-106845]
+- io_uring/napi: Use lock guards (Ming Lei) [RHEL-106845]
+- io_uring/napi: improve __io_napi_add (Ming Lei) [RHEL-106845]
+- io_uring/napi: fix io_napi_entry RCU accesses (Ming Lei) [RHEL-106845]
+- io_uring/napi: protect concurrent io_napi_entry timeout accesses (Ming Lei) [RHEL-106845]
+- io_uring: prevent speculating sq_array indexing (Ming Lei) [RHEL-106845]
+- io_uring: move struct io_kiocb from task_struct to io_uring_task (Ming Lei) [RHEL-106845]
+- io_uring: remove task ref helpers (Ming Lei) [RHEL-106845]
+- io_uring: move cancelations to be io_uring_task based (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: split io_kiocb node type assignments (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: encode node type and ctx together (Ming Lei) [RHEL-106845]
+- io_uring: add support for hybrid IOPOLL (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: allow cloning with node replacements (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: allow cloning at an offset (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: get rid of the empty node and dummy_ubuf (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: add io_reset_rsrc_node() helper (Ming Lei) [RHEL-106845]
+- io_uring/filetable: kill io_reset_alloc_hint() helper (Ming Lei) [RHEL-106845]
+- io_uring/filetable: remove io_file_from_index() helper (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: add io_rsrc_node_lookup() helper (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: unify file and buffer resource tables (Ming Lei) [RHEL-106845]
+- io_uring: only initialize io_kiocb rsrc_nodes when needed (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: add an empty io_rsrc_node for sparse buffer entries (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: get rid of io_rsrc_node allocation cache (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: get rid of per-ring io_rsrc_node list (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: kill io_charge_rsrc_node() (Ming Lei) [RHEL-106845]
+- io_uring/splice: open code 2nd direct file assignment (Ming Lei) [RHEL-106845]
+- io_uring: specify freeptr usage for SLAB_TYPESAFE_BY_RCU io_kiocb cache (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: move struct io_fixed_file to rsrc.h header (Ming Lei) [RHEL-106845]
+- io_uring/nop: add support for testing registered files and buffers (Ming Lei) [RHEL-106845]
+- io_uring: add support for fixed wait regions (Ming Lei) [RHEL-106845]
+- io_uring: change io_get_ext_arg() to use uaccess begin + end (Ming Lei) [RHEL-106845]
+- io_uring: switch struct ext_arg from __kernel_timespec to timespec64 (Ming Lei) [RHEL-106845]
+- io_uring/sqpoll: wait on sqd->wait for thread parking (Ming Lei) [RHEL-106845]
+- io_uring/register: add IORING_REGISTER_RESIZE_RINGS (Ming Lei) [RHEL-106845]
+- io_uring/memmap: explicitly return -EFAULT for mmap on NULL rings (Ming Lei) [RHEL-106845]
+- io_uring: abstract out a bit of the ring filling logic (Ming Lei) [RHEL-106845]
+- io_uring: move max entry definition and ring sizing into header (Ming Lei) [RHEL-106845]
+- io_uring/net: clean up io_msg_copy_hdr (Ming Lei) [RHEL-106845]
+- io_uring/net: don't alias send user pointer reads (Ming Lei) [RHEL-106845]
+- io_uring/net: don't store send address ptr (Ming Lei) [RHEL-106845]
+- io_uring/net: split send and sendmsg prep helpers (Ming Lei) [RHEL-106845]
+- io_uring: kill 'imu' from struct io_kiocb (Ming Lei) [RHEL-106845]
+- io_uring/net: move send zc fixed buffer import to issue path (Ming Lei) [RHEL-106845]
+- io_uring: remove 'issue_flags' argument for io_req_set_rsrc_node() (Ming Lei) [RHEL-106845]
+- io_uring/rw: get rid of using req->imu (Ming Lei) [RHEL-106845]
+- io_uring/uring_cmd: get rid of using req->imu (Ming Lei) [RHEL-106845]
+- io_uring/rsrc: don't assign bvec twice in io_import_fixed() (Ming Lei) [RHEL-106845]
+- io_uring: clean up cqe trace points (Ming Lei) [RHEL-106845]
+- io_uring: static_key for !IORING_SETUP_NO_SQARRAY (Ming Lei) [RHEL-106845]
+- io_uring: kill io_llist_xchg (Ming Lei) [RHEL-106845]
+- io_uring: move cancel hash tables to kvmalloc/kvfree (Ming Lei) [RHEL-106845]
+- io_uring/cancel: get rid of init_hash_table() helper (Ming Lei) [RHEL-106845]
+- io_uring/poll: get rid of per-hashtable bucket locks (Ming Lei) [RHEL-106845]
+- io_uring/poll: get rid of io_poll_tw_hash_eject() (Ming Lei) [RHEL-106845]
+- io_uring/poll: get rid of unlocked cancel hash (Ming Lei) [RHEL-106845]
+- io_uring/poll: remove 'ctx' argument from io_poll_req_delete() (Ming Lei) [RHEL-106845]
+- io_uring/msg_ring: add support for sending a sync message (Ming Lei) [RHEL-106845]
+- io_uring/msg_ring: refactor a few helper functions (Ming Lei) [RHEL-106845]
+- io_uring/eventfd: move ctx->evfd_last_cq_tail into io_ev_fd (Ming Lei) [RHEL-106845]
+- io_uring/eventfd: abstract out ev_fd grab + release helpers (Ming Lei) [RHEL-106845]
+- io_uring/eventfd: move trigger check into a helper (Ming Lei) [RHEL-106845]
+- io_uring/eventfd: move actual signaling part into separate helper (Ming Lei) [RHEL-106845]
+- io_uring/eventfd: check for the need to async notifier earlier (Ming Lei) [RHEL-106845]
+
+* Fri Sep 12 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-129.el10]
+- s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110239]
+
 * Thu Sep 11 2025 CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-128.el10]
 - ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-112760]
 
diff --git a/sources b/sources
index ad0d3aa0a..3deb3266f 100644
--- a/sources
+++ b/sources
@@ -1,5 +1,5 @@
 SHA512 (kernel-abi-stablelists-6.6.0.tar.bz2) = 4f917598056dee5e23814621ec96ff2e4a411c8c4ba9d56ecb01b23cb96431825bedbecfcbaac9338efbf5cb21694d85497fa0bf43e7c80d9cd10bc6dd144dbd
 SHA512 (kernel-kabi-dw-6.6.0.tar.bz2) = 19308cd976031d05e18ef7f5d093218acdb89446418bab0cd956ff12cf66369915b9e64bb66fa9f20939428a60e81884fec5be3529c6c7461738d6540d3cc5c6
-SHA512 (linux-6.12.0-128.el10.tar.xz) = a219de73ab67a8d6f7929fd2903246e0c2b9ca6be3489d8c5898d9f6d9070586045878209318ccc43a23e5be0174df107a8fd8b87dd7854248f51ac194629d31
-SHA512 (kernel-abi-stablelists-6.12.0-128.el10.tar.xz) = eb084ba32a95e8c8ac080c21bbdc0952714ffaa29ab8f76286de0b3a3483c8345d53b7f0be312af5581e70c2470e4aba12903f63eebf673624cf980cfe020c77
-SHA512 (kernel-kabi-dw-6.12.0-128.el10.tar.xz) = a7e9d65d09e220deb5b2393080e3d6854d13b87478319038c141bbed1c667448fe81f70ebe3dcaaada0c5a6655595d82d1d7100aa273a597abf857879ee39c3f
+SHA512 (linux-6.12.0-131.el10.tar.xz) = 9c0aed2b7e5ffce2b716435e21bcd8a443dcb924a9e657ee3d1e5c7431244c88480cd66d9cd48298a161c85d74756886140f102bd778f6d3b7df9d3291d6e352
+SHA512 (kernel-abi-stablelists-6.12.0-131.el10.tar.xz) = 6467a9d57ff9b3c99a5dcb5a0ae005e2d5573b11f165802c21b2481fe2dfa8002933fa4dcd996e833b1cf0c2551bb2dd1ee25b68f57b83c36ad49e0a4633fe6e
+SHA512 (kernel-kabi-dw-6.12.0-131.el10.tar.xz) = 9f27202676bcc6d1433bffc323c9e340cedf9a3bab6c27159576306b7ec139c290d27adfd4fd97d78d351ad5363907b5f31994dc727dc0fd40a50dcf28f2c5e0
diff --git a/uki-addons.sbat.template b/uki-addons.sbat.template
new file mode 100644
index 000000000..c8b787d6d
--- /dev/null
+++ b/uki-addons.sbat.template
@@ -0,0 +1,3 @@
+sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
+kernel-uki-virt-addons.@SBAT_SUFFIX,1,Red Hat,kernel-uki-virt-addons,@KVER,mailto:secalert@redhat.com
+kernel-uki-virt-addons.almalinux,1,AlmaLinux,kernel-uki-virt-addons,@KVER,mailto:security@almalinux.org
diff --git a/uki.sbat.template b/uki.sbat.template
new file mode 100644
index 000000000..c4780ed4d
--- /dev/null
+++ b/uki.sbat.template
@@ -0,0 +1,3 @@
+sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md
+kernel-uki-virt.@SBAT_SUFFIX,1,Red Hat,kernel-uki-virt,@KVER,mailto:secalert@redhat.com
+kernel-uki-virt.almalinux,1,AlmaLinux,kernel-uki-virt,@KVER,mailto:security@almalinux.org