[PATCH 6.6 000/186] 6.6.142-rc1 review

From: Greg Kroah-Hartman

Date: Thu May 28 2026 - 16:53:38 EST


This is the start of the stable review cycle for the 6.6.142 release.
There are 186 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat, 30 May 2026 19:48:57 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.142-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.6.142-rc1

Tiezhu Yang <yangtiezhu@xxxxxxxxxxx>
LoongArch: kprobes: Fix handling of fatal unrecoverable recursions

Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
net: gro: don't merge zcopy skbs

Nikhil P. Rao <nikhil.rao@xxxxxxx>
pds_core: ensure null-termination for firmware version strings

Su Hui <suhui@xxxxxxxxxxxx>
pds_core: add an error code check in pdsc_dl_info_get

Aditya Garg <gargaditya@xxxxxxxxxxxxxxxxxxx>
net: mana: validate rx_req_idx to prevent out-of-bounds array access

Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove()

Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
gpio: cdev: check if uAPI v2 config attributes are correctly zeroed

Andy Shevchenko <andy.shevchenko@xxxxxxxxx>
gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n)

Jani Nikula <jani.nikula@xxxxxxxxx>
string: add mem_is_zero() helper to check if memory area is all zeros

Xingwang Xiang <v3rdant.xiang@xxxxxxxxx>
bpf, skmsg: fix verdict sk_data_ready racing with ktls rx

Rosen Penev <rosenp@xxxxxxxxx>
net: ag71xx: check error for platform_get_irq

Jiajia Liu <liujiajia@xxxxxxxxxx>
Bluetooth: btmtk: fix urb->setup_packet leak in error paths

Chris Lu <chris.lu@xxxxxxxxxxxx>
Bluetooth: btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c

Chris Lu <chris.lu@xxxxxxxxxxxx>
Bluetooth: btmtk: rename btmediatek_data

Hao Qin <hao.qin@xxxxxxxxxxxx>
Bluetooth: btusb: mediatek: refactor the function btusb_mtk_reset

Sean Wang <sean.wang@xxxxxxxxxxxx>
Bluetooth: btmtk: add the function to get the fw name

David Carlier <devnexen@xxxxxxxxx>
tracing: Avoid NULL return from hist_field_name() on truncation

Zhang Cen <rollkingzzc@xxxxxxxxx>
ALSA: seq: Serialize UMP output teardown with event_input

Takashi Iwai <tiwai@xxxxxxx>
ALSA: seq: ump: Use guard() for locking

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
ptrace: Convert ptrace_attach() to use lock guards

Nikhil P. Rao <nikhil.rao@xxxxxxx>
pds_core: fix debugfs_lookup dentry leak and error handling

Nikhil P. Rao <nikhil.rao@xxxxxxx>
pds_core: fix error handling in pdsc_devcmd_wait

Ido Schimmel <idosch@xxxxxxxxxx>
bridge: mcast: Fix a possible use-after-free when removing a bridge port

Petr Machata <petrm@xxxxxxxxxx>
net: bridge: Flush multicast groups when snooping is disabled

Guangshuo Li <lgs201920130244@xxxxxxxxx>
RDMA/rtrs: Fix use-after-free in path file creation cleanup

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
platform/x86: intel-hid: Check ACPI_HANDLE() against NULL

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
platform/x86: hp_accel: Check ACPI_COMPANION() against NULL

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL

Erni Sri Satya Vennela <ernis@xxxxxxxxxxxxxxxxxxx>
net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

Daniel Golle <daniel@xxxxxxxxxxxxxx>
net: dsa: mt7530: preserve VLAN tags on trapped link-local frames

Arınç ÜNAL <arinc.unal@xxxxxxxxxx>
net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw

Daniel Golle <daniel@xxxxxxxxxxxxxx>
net: dsa: mt7530: fix FDB entries not aging out with short timeout

Matthew Leach <matthew.leach@xxxxxxxxxxxxx>
wifi: ath11k: fix peer resolution on rx path when peer_id=0

Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxxxxxxxx>
drm/msm/snapshot: fix dumping of the unaligned regions

Felix Gu <ustc.gu@xxxxxxxxx>
spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache()

Jeroen Massar <jmassar@xxxxxxxxxx>
net/mlx5: Do not restore destination-less TC rules

Chuck Lever <chuck.lever@xxxxxxxxxx>
tls: Preserve sk_err across recvmsg() when data has been copied

Juergen Gross <jgross@xxxxxxxx>
x86/xen: Fix xen_e820_swap_entry_with_ram()

Sven Schuchmann <schuchmann@xxxxxxxxxxxxxxxxx>
net: phy: DP83TC811: add reading of abilities

Oleksij Rempel <o.rempel@xxxxxxxxxxxxxx>
net: phy: c45: add genphy_c45_pma_read_ext_abilities() function

Jakub Kicinski <kuba@xxxxxxxxxx>
net: tls: prevent chain-after-chain in plain text SG

Jakub Kicinski <kuba@xxxxxxxxxx>
net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring

Xiang Mei <xmei5@xxxxxxx>
net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot

Sayali Patil <sayalip@xxxxxxxxxxxxx>
powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()

Mikko Perttunen <mperttunen@xxxxxxxxxx>
drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN

Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxxxxxxxx>
drm/msm/dsi: don't dump registers past the mapped region

Chenguang Zhao <zhaochenguang@xxxxxxxxxx>
ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics

Xiang Mei <xmei5@xxxxxxx>
net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint

Zack McKevitt <zachary.mckevitt@xxxxxxxxxxxxxxxx>
accel/qaic: Add overflow check to remap_pfn_range during mmap

Lukas Bulwahn <lukas.bulwahn@xxxxxxxxxx>
HID: quirks: really enable the intended work around for appledisplay

Nicolas Escande <nico.escande@xxxxxxxxx>
wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm()

Nicolas Escande <nico.escande@xxxxxxxxx>
wifi: ath11k: fix error path leaks in some WMI WOW calls

Ethan Nelson-Moore <enelsonmoore@xxxxxxxxx>
net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference

Linus Walleij <linusw@xxxxxxxxxx>
net: ethernet: cortina: Carry over frag counter

Andreas Haarmann-Thiemann <eitschman@xxxxxxxxxxxxx>
net: ethernet: cortina: Drop half-assembled SKB

Linus Walleij <linusw@xxxxxxxxxx>
net: ethernet: cortina: Make RX SKB per-port

David Howells <dhowells@xxxxxxxxxx>
netfs: Fix overrun check in netfs_extract_user_iter()

Johannes Thumshirn <johannes.thumshirn@xxxxxxx>
zonefs: handle integer overflow in zonefs_fname_to_fno

Jiayuan Chen <jiayuan.chen@xxxxxxxxx>
irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT

Rosen Penev <rosenp@xxxxxxxxx>
irqchip/ath79-cpu: Remove unused function

Gabor Juhos <j4g8y7@xxxxxxxxx>
phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access

Myeonghun Pak <mhun512@xxxxxxxxx>
net: lan966x: avoid unregistering netdev on register failure

Bart Van Assche <bvanassche@xxxxxxx>
ice: fix locking in ice_dcb_rebuild()

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
tcp: Fix imbalanced icsk_accept_queue count.

Martin Kaiser <martin@xxxxxxxxx>
test_kprobes: clear kprobes between test runs

Jianpeng Chang <jianpeng.chang.cn@xxxxxxxxxxxxx>
kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist()

Florian Westphal <fw@xxxxxxxxx>
netfilter: bridge: eb_tables: close module init race

Florian Westphal <fw@xxxxxxxxx>
netfilter: x_tables: close dangling table module init race

Florian Westphal <fw@xxxxxxxxx>
netfilter: ebtables: close dangling table module init race

Florian Westphal <fw@xxxxxxxxx>
netfilter: ebtables: move to two-stage removal scheme

Florian Westphal <fw@xxxxxxxxx>
netfilter: x_tables: add and use xtables_unregister_table_exit

Florian Westphal <fw@xxxxxxxxx>
netfilter: x_tables: add and use xt_unregister_table_pre_exit

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: Exclude LEGACY TABLES on PREEMPT_RT.

Breno Leitao <leitao@xxxxxxxxxx>
netfilter: Make legacy configs user selectable

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
netfilter: arptables: Select NETFILTER_FAMILY_ARP when building arp_tables.c

Florian Westphal <fw@xxxxxxxxx>
netfilter: xtables: fix up kconfig dependencies

Florian Westphal <fw@xxxxxxxxx>
netfilter: ebtables: allow xtables-nft only builds

Florian Westphal <fw@xxxxxxxxx>
netfilter: xtables: allow xtables-nft only builds

Florian Westphal <fw@xxxxxxxxx>
netfilter: arptables: allow xtables-nft only builds

Florian Westphal <fw@xxxxxxxxx>
netfilter: x_tables: unregister the templates first

Filipe Manana <fdmanana@xxxxxxxx>
btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()

Shuhao Fu <sfual@xxxxxxxxxx>
ALSA: hda: cs35l56: Put ACPI device after setting companion

Guenter Roeck <linux@xxxxxxxxxxxx>
ARM: integrator: Fix early initialization

Maulik Shah <maulik.shah@xxxxxxxxxxxxxxxx>
pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150

David Gow <david@xxxxxxxxxxxx>
kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS

David Gow <david@xxxxxxxxxxxx>
kunit: config: Enable KUNIT_DEBUGFS by default

Sudeep Holla <sudeep.holla@xxxxxxxxxx>
firmware: arm_ffa: Skip free_pages on RX buffer alloc failure

Sudeep Holla <sudeep.holla@xxxxxxxxxx>
firmware: arm_ffa: Check for NULL FF-A ID table while driver registration

Takashi Iwai <tiwai@xxxxxxx>
HID: uclogic: Fix regression of input name assignment

Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors

Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe()

Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe()

Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple

Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR

Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer

Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer

Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) reject implausible blackbox record_count

Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) seed timestamp from the real-time clock

Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tt: fix negative tt_buff_len

Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tt: fix negative last_changeset_len

Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tp_meter: fix race condition in send error reporting

Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown

Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: tp_meter: avoid use of uninit sender vars

Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: bla: fix report_work leak on backbone_gw purge

Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: frag: disallow unicast fragment in fragment

Luxiao Xu <rakukuip@xxxxxxxxx>
batman-adv: fix tp_meter counter underflow during shutdown

Ruide Cao <caoruide123@xxxxxxxxx>
batman-adv: fix fragment reassembly length accounting

Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: dat: handle forward allocation error

Ruijie Li <ruijieli51@xxxxxxxxx>
batman-adv: clear current gateway during teardown

Sven Eckelmann <sven@xxxxxxxxxxxxx>
batman-adv: mcast: fix use-after-free in orig_node RCU release

Harry Wentland <harry.wentland@xxxxxxx>
drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async

Harry Wentland <harry.wentland@xxxxxxx>
drm/amd/display: Validate GPIO pin LUT table size before iterating

Harry Wentland <harry.wentland@xxxxxxx>
drm/amd/display: Fix integer overflow in bios_get_image()

Osama Abdelkader <osama.abdelkader@xxxxxxxxx>
drm/bridge: megachips: remove bridge when irq request fails

Julien Chauveau <chauveau.julien@xxxxxxxxx>
drm/bridge: it66121: acquire reset GPIO in probe

Deepanshu Kartikey <kartikey406@xxxxxxxxx>
drm/virtio: use uninterruptible resv lock for plane updates

Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
device property: set fwnode->secondary to NULL in fwnode_init()

Huacai Chen <chenhuacai@xxxxxxxxxx>
LoongArch: Remove unused code to avoid build warning

Michael Bommarito <michael.bommarito@xxxxxxxxx>
RDMA/siw: Reject MPA FPDU length underflow before signed receive math

Johan Hovold <johan@xxxxxxxxxx>
spi: ti-qspi: fix use-after-free after DMA setup failure

Johan Hovold <johan@xxxxxxxxxx>
spi: sprd: fix error pointer deref after DMA setup failure

Michael Bommarito <michael.bommarito@xxxxxxxxx>
scsi: isci: Fix use-after-free in device removal path

Wayne Chang <waynec@xxxxxxxxxx>
phy: tegra: xusb: Fix per-pad high-speed termination calibration

Johan Hovold <johan@xxxxxxxxxx>
spi: qup: fix error pointer deref after DMA setup failure

Osama Abdelkader <osama.abdelkader@xxxxxxxxx>
drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe

Michael Bommarito <michael.bommarito@xxxxxxxxx>
KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits

Vladimir Murzin <vladimir.murzin@xxxxxxx>
arm64: probes: Handle probes on hinted conditional branch instructions

Masami Hiramatsu (Google) <mhiramat@xxxxxxxxxx>
tracing: Do not call map->ops->elt_free() if elt_alloc() fails

Zhihao Cheng <chengzhihao1@xxxxxxxxxx>
cifs: Fix busy dentry used after unmounting

John Walker <johnwalker0@xxxxxxxxx>
wifi: cfg80211: advance loop vars in cfg80211_merge_profile()

Marcin Szycik <marcin.szycik@xxxxxxxxx>
ice: fix setting promisc mode while adding VID filter

Michael Bommarito <michael.bommarito@xxxxxxxxx>
ixgbevf: fix use-after-free in VEPA multicast source pruning

Michael Bommarito <michael.bommarito@xxxxxxxxx>
ipv4: raw: reject IP_HDRINCL packets with ihl < 5

Kyle Farnung <kfarnung@xxxxxxxxx>
wifi: ath11k: clear shared SRNG pointer state on restart

Stefano Garzarella <sgarzare@xxxxxxxxxx>
vsock/virtio: reset connection on receiving queue overflow

Minh Nguyen <minhnguyen.080505@xxxxxxxxx>
vsock/vmci: fix UAF when peer resets connection during handshake

Steven Rostedt <rostedt@xxxxxxxxxxx>
ring-buffer: Fix reporting of missed events in iterator

Dawei Feng <dawei.feng@xxxxxxxxxx>
qed: fix double free in qed_cxt_tables_alloc()

Yizhou Zhao <zhaoyz24@xxxxxxxxxxxxxxxxxxxxx>
netfilter: nft_inner: Fix IPv6 inner_thoff desync

Nan Li <tonanli66@xxxxxxxxx>
netfilter: ipset: stop hash:* range iteration at end

Haoze Xie <royenheart@xxxxxxxxx>
netfilter: nf_queue: hold bridge skb->dev while queued

Zhengchuan Liang <zcliangcn@xxxxxxxxx>
netfilter: ip6t_hbh: reject oversized option lists

Michael Bommarito <michael.bommarito@xxxxxxxxx>
net: ifb: report ethtool stats over num_tx_queues

Nicolai Buchwitz <nb@xxxxxxxxxxx>
net: bcmgenet: keep RBUF EEE/PM disabled

Zijing Yin <yzjaurora@xxxxxxxxx>
phonet/pep: disable BH around forwarded sk_receive_skb()

Jiexun Wang <wangjiexun2025@xxxxxxxxx>
Bluetooth: serialize accept_q access

Michael Bommarito <michael.bommarito@xxxxxxxxx>
Bluetooth: MGMT: validate Add Extended Advertising Data length

Mingyu Wang <25181214217@xxxxxxxxxxxxxxxxx>
Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths

Jann Horn <jannh@xxxxxxxxxx>
Bluetooth: bnep: Fix UAF read of dev->name

David Carlier <devnexen@xxxxxxxxx>
Bluetooth: ISO: drop ISO_END frames received without prior ISO_START

Safa Karakuş <safa.karakus@xxxxxxxxxxxx>
Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()

Abdun Nihaal <nihaal@xxxxxxxxxxxxxx>
net: wwan: iosm: fix potential memory leaks in ipc_imem_init()

Muchun Song <muchun.song@xxxxxxxxx>
drivers/base/memory: fix memory block reference leak in poison accounting

Ard Biesheuvel <ardb@xxxxxxxxxx>
efi: Allocate runtime workqueue before ACPI init

Takashi Iwai <tiwai@xxxxxxx>
ALSA: asihpi: Fix potential OOB array access at reading cache

Takashi Iwai <tiwai@xxxxxxx>
ALSA: pcm: Don't setup bogus iov_iter for silencing

Cássio Gabriel <cassiogabrielcontato@xxxxxxxxx>
ALSA: ua101: Reject too-short USB descriptors

Abdurrahman Hussain <abdurrahman@xxxxxxxxxx>
hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX

ChenXiaoSong <chenxiaosong@xxxxxxxxxx>
smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close

Henrique Carvalho <henrique.carvalho@xxxxxxxx>
smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()

Ferry Meng <mengferry@xxxxxxxxxxxxxxxxx>
ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow

Jeremy Laratro <research@xxxxxxxxx>
ksmbd: fix null pointer dereference in compare_guid_key()

SeongJae Park <sj@xxxxxxxxxx>
mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break()

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
sysfs: don't remove existing directory on update failure

Adrian Hunter <adrian.hunter@xxxxxxxxx>
i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue

Sasha Levin <sashal@xxxxxxxxxx>
Revert "af_unix: Reject SIOCATMARK on non-stream sockets"

Sasha Levin <sashal@xxxxxxxxxx>
Revert "s390/cio: Update purge function to unregister the unused subchannels"

Sasha Levin <sashal@xxxxxxxxxx>
Revert "ice: Remove jumbo_remove step from TX path"

Sasha Levin <sashal@xxxxxxxxxx>
Revert "ice: fix double-free of tx_buf skb"

Asim Viladi Oglu Manizada <manizada@xxxxx>
smb: client: reject userspace cifs.spnego descriptions

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
af_unix: Give up GC if MSG_PEEK intervened.

DaeMyung Kang <charsyam@xxxxxxxxx>
ksmbd: close durable scavenger races against m_fp_list lookups

Namjae Jeon <linkinjeon@xxxxxxxxxx>
ksmbd: validate owner of durable handle on reconnect

Namjae Jeon <linkinjeon@xxxxxxxxxx>
ksmbd: add durable scavenger timer

Namjae Jeon <linkinjeon@xxxxxxxxxx>
ksmbd: avoid reclaiming expired durable opens by the client

Sasha Levin <sashal@xxxxxxxxxx>
Revert "x86/vdso: Fix output operand size of RDPID"

Deepanshu Kartikey <kartikey406@xxxxxxxxx>
wifi: mac80211: check tdls flag in ieee80211_tdls_oper

Pengpeng Hou <pengpeng@xxxxxxxxxxx>
s390/debug: Reject zero-length input before trimming a newline

Danilo Krummrich <dakr@xxxxxxxxxx>
driver core: platform: use generic driver_override infrastructure

Danilo Krummrich <dakr@xxxxxxxxxx>
driver core: generalize driver_override in struct device

Fabian Godehardt <fg@xxxxxxxxx>
spi: spidev: fix lock inversion between spi_lock and buf_lock

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
mptcp: pm: ADD_ADDR rtx: free sk if last

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
mptcp: pm: ADD_ADDR rtx: always decrease sk refcount

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
mptcp: pm: ADD_ADDR rtx: allow ID 0

Gang Yan <yangang@xxxxxxxxxx>
mptcp: sync the msk->sndbuf at accept() time


-------------

Diffstat:

Makefile | 4 +-
arch/arm/mach-versatile/integrator_cp.c | 13 +-
arch/arm64/include/asm/insn.h | 2 +-
arch/arm64/kvm/vgic/vgic-its.c | 4 +
arch/loongarch/kernel/kprobes.c | 4 +-
arch/loongarch/mm/init.c | 4 -
arch/powerpc/kernel/time.c | 6 +-
arch/s390/kernel/debug.c | 3 +
arch/x86/include/asm/segment.h | 8 +-
arch/x86/xen/setup.c | 2 +-
drivers/accel/qaic/qaic_data.c | 23 +-
drivers/base/bus.c | 43 ++-
drivers/base/core.c | 2 +
drivers/base/dd.c | 60 ++++
drivers/base/memory.c | 8 +-
drivers/base/platform.c | 37 +--
drivers/bluetooth/btmtk.c | 295 +++++++++++++++++-
drivers/bluetooth/btmtk.h | 41 ++-
drivers/bluetooth/btmtksdio.c | 1 +
drivers/bluetooth/btmtkuart.c | 1 +
drivers/bluetooth/btusb.c | 338 +++------------------
drivers/bluetooth/hci_ldisc.c | 48 ++-
drivers/bus/simple-pm-bus.c | 4 +-
drivers/clk/imx/clk-scu.c | 3 +-
drivers/firmware/arm_ffa/bus.c | 4 +-
drivers/firmware/arm_ffa/driver.c | 2 +-
drivers/firmware/efi/efi.c | 28 +-
drivers/gpio/gpiolib-cdev.c | 21 +-
drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c | 9 +
.../drm/amd/display/dc/bios/bios_parser_helper.c | 9 +-
drivers/gpu/drm/amd/display/dc/core/dc.c | 6 +-
drivers/gpu/drm/bridge/chipone-icn6211.c | 4 +-
drivers/gpu/drm/bridge/ite-it66121.c | 5 +
.../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 16 +-
drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c | 24 +-
drivers/gpu/drm/msm/dsi/dsi_host.c | 1 +
drivers/gpu/drm/msm/msm_iommu.c | 5 +-
drivers/gpu/drm/virtio/virtgpu_drv.h | 1 +
drivers/gpu/drm/virtio/virtgpu_gem.c | 17 ++
drivers/gpu/drm/virtio/virtgpu_plane.c | 10 +-
drivers/hid/hid-quirks.c | 2 +-
drivers/hid/hid-uclogic-core.c | 4 +-
drivers/hwmon/pmbus/adm1266.c | 32 +-
drivers/i3c/master/mipi-i3c-hci/dma.c | 25 +-
drivers/infiniband/sw/siw/siw_qp_rx.c | 15 +
drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c | 2 +-
drivers/irqchip/irq-ath79-cpu.c | 7 -
drivers/net/dsa/mt7530.c | 79 ++---
drivers/net/dsa/mt7530.h | 70 ++---
drivers/net/ethernet/amd/pds_core/debugfs.c | 7 +-
drivers/net/ethernet/amd/pds_core/dev.c | 11 +-
drivers/net/ethernet/amd/pds_core/devlink.c | 8 +-
drivers/net/ethernet/atheros/ag71xx.c | 3 +
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 9 +-
drivers/net/ethernet/cirrus/cs89x0.c | 2 -
drivers/net/ethernet/cortina/gemini.c | 21 +-
drivers/net/ethernet/intel/ice/ice_dcb_lib.c | 4 +-
drivers/net/ethernet/intel/ice/ice_main.c | 2 +-
drivers/net/ethernet/intel/ice/ice_txrx.c | 7 +-
drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 1 +
.../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c | 3 +-
.../net/ethernet/microchip/lan966x/lan966x_main.c | 8 +-
drivers/net/ethernet/microsoft/mana/hw_channel.c | 35 ++-
drivers/net/ethernet/qlogic/qed/qed_cxt.c | 2 +
drivers/net/ifb.c | 11 +-
drivers/net/phy/dp83tc811.c | 1 +
drivers/net/phy/phy-c45.c | 129 ++++----
drivers/net/wireless/ath/ath11k/dp_rx.c | 3 +-
drivers/net/wireless/ath/ath11k/hal.c | 14 +-
drivers/net/wireless/ath/ath11k/hal_rx.c | 5 +-
drivers/net/wireless/ath/ath11k/testmode.c | 1 +
drivers/net/wireless/ath/ath11k/wmi.c | 19 +-
drivers/net/wwan/iosm/iosm_ipc_imem.c | 2 +
drivers/phy/marvell/phy-mvebu-a3700-utmi.c | 5 +-
drivers/phy/tegra/xusb-tegra186.c | 33 +-
drivers/phy/tegra/xusb.h | 1 +
drivers/pinctrl/qcom/pinctrl-sm8150.c | 8 +-
drivers/platform/x86/adv_swbutton.c | 6 +-
drivers/platform/x86/hp/hp_accel.c | 3 +
drivers/platform/x86/intel/hid.c | 6 +-
drivers/platform/x86/intel/vbtn.c | 6 +-
drivers/s390/cio/device.c | 37 +--
drivers/scsi/isci/host.c | 3 +
drivers/slimbus/qcom-ngd-ctrl.c | 6 +-
drivers/spi/spi-mtk-snfi.c | 2 +-
drivers/spi/spi-qup.c | 3 +
drivers/spi/spi-sprd.c | 3 +-
drivers/spi/spi-ti-qspi.c | 1 +
drivers/spi/spidev.c | 63 ++--
fs/netfs/iterator.c | 26 +-
fs/smb/client/cifs_spnego.c | 16 +
fs/smb/client/cifsfs.c | 2 +
fs/smb/client/smb2transport.c | 2 +
fs/smb/server/mgmt/user_session.c | 10 +-
fs/smb/server/oplock.c | 13 +-
fs/smb/server/oplock.h | 1 +
fs/smb/server/server.c | 1 +
fs/smb/server/server.h | 1 +
fs/smb/server/smb2pdu.c | 5 +-
fs/smb/server/smb2pdu.h | 2 +
fs/smb/server/smbacl.c | 12 +-
fs/smb/server/vfs_cache.c | 325 ++++++++++++++++++--
fs/smb/server/vfs_cache.h | 15 +-
fs/sysfs/group.c | 2 +-
fs/zonefs/super.c | 6 +-
include/asm-generic/kprobes.h | 2 +-
include/linux/device.h | 54 ++++
include/linux/device/bus.h | 4 +
include/linux/fwnode.h | 1 +
include/linux/netfilter/x_tables.h | 3 +-
include/linux/netfilter_arp/arp_tables.h | 1 -
include/linux/netfilter_ipv4/ip_tables.h | 1 -
include/linux/netfilter_ipv6/ip6_tables.h | 1 -
include/linux/phy.h | 1 +
include/linux/platform_device.h | 5 -
include/linux/sched/task.h | 2 +
include/linux/spinlock.h | 26 ++
include/linux/string.h | 12 +
include/net/af_unix.h | 1 +
include/net/bluetooth/bluetooth.h | 1 +
include/net/netfilter/nf_queue.h | 1 +
include/trace/events/btrfs.h | 4 +-
kernel/irq_work.c | 7 +
kernel/ptrace.c | 154 +++++-----
kernel/trace/ring_buffer.c | 8 +-
kernel/trace/trace_events_hist.c | 6 +-
kernel/trace/tracing_map.c | 17 +-
lib/kunit/Kconfig | 5 +-
lib/test_kprobes.c | 29 +-
mm/damon/sysfs-schemes.c | 1 +
net/batman-adv/bridge_loop_avoidance.c | 54 ++--
net/batman-adv/distributed-arp-table.c | 3 +
net/batman-adv/fragmentation.c | 58 +++-
net/batman-adv/gateway_client.c | 4 +
net/batman-adv/originator.c | 4 +-
net/batman-adv/tp_meter.c | 64 ++--
net/batman-adv/types.h | 17 +-
net/bluetooth/af_bluetooth.c | 99 ++++--
net/bluetooth/bnep/core.c | 2 +-
net/bluetooth/iso.c | 14 +-
net/bluetooth/l2cap_sock.c | 51 +++-
net/bluetooth/mgmt.c | 6 +
net/bluetooth/rfcomm/sock.c | 9 +-
net/bluetooth/sco.c | 9 +-
net/bridge/br_multicast.c | 27 +-
net/bridge/netfilter/Kconfig | 13 +
net/bridge/netfilter/Makefile | 2 +-
net/bridge/netfilter/ebtable_broute.c | 14 +-
net/bridge/netfilter/ebtable_filter.c | 14 +-
net/bridge/netfilter/ebtable_nat.c | 12 +-
net/bridge/netfilter/ebtables.c | 71 +++--
net/core/gro.c | 3 +
net/core/skmsg.c | 9 +-
net/ethtool/bitset.c | 8 +-
net/ipv4/inet_connection_sock.c | 2 +-
net/ipv4/netfilter/Kconfig | 59 ++--
net/ipv4/netfilter/Makefile | 2 +-
net/ipv4/netfilter/arp_tables.c | 18 +-
net/ipv4/netfilter/arptable_filter.c | 27 +-
net/ipv4/netfilter/ip_tables.c | 18 +-
net/ipv4/netfilter/iptable_filter.c | 27 +-
net/ipv4/netfilter/iptable_mangle.c | 29 +-
net/ipv4/netfilter/iptable_nat.c | 6 +-
net/ipv4/netfilter/iptable_raw.c | 26 +-
net/ipv4/netfilter/iptable_security.c | 27 +-
net/ipv4/raw.c | 2 +-
net/ipv6/netfilter/Kconfig | 30 +-
net/ipv6/netfilter/Makefile | 2 +-
net/ipv6/netfilter/ip6_tables.c | 18 +-
net/ipv6/netfilter/ip6t_hbh.c | 4 +
net/ipv6/netfilter/ip6table_filter.c | 26 +-
net/ipv6/netfilter/ip6table_mangle.c | 27 +-
net/ipv6/netfilter/ip6table_nat.c | 6 +-
net/ipv6/netfilter/ip6table_raw.c | 24 +-
net/ipv6/netfilter/ip6table_security.c | 27 +-
net/mac80211/tdls.c | 2 +-
net/mptcp/pm_netlink.c | 35 +--
net/mptcp/protocol.c | 3 +-
net/netfilter/Kconfig | 22 +-
net/netfilter/ipset/ip_set_hash_ipmark.c | 6 +-
net/netfilter/ipset/ip_set_hash_ipport.c | 5 +-
net/netfilter/ipset/ip_set_hash_ipportip.c | 5 +-
net/netfilter/ipset/ip_set_hash_ipportnet.c | 5 +-
net/netfilter/nf_queue.c | 4 +-
net/netfilter/nfnetlink_queue.c | 2 +
net/netfilter/nft_inner.c | 1 -
net/netfilter/x_tables.c | 116 +++++--
net/phonet/pep.c | 19 +-
net/smc/af_smc.c | 3 +-
net/smc/smc_tracepoint.h | 2 +-
net/tls/tls_sw.c | 46 ++-
net/unix/af_unix.c | 5 +-
net/unix/garbage.c | 79 +++--
net/vmw_vsock/virtio_transport_common.c | 20 +-
net/vmw_vsock/vmci_transport.c | 2 +-
net/wireless/scan.c | 3 +
sound/core/pcm_lib.c | 3 +
sound/core/seq/seq_ump_client.c | 35 ++-
sound/pci/asihpi/hpicmn.c | 6 +
sound/pci/hda/cs35l56_hda.c | 1 +
sound/soc/codecs/cs35l56-sdw.c | 3 +-
sound/soc/samsung/i2s.c | 6 +-
sound/usb/misc/ua101.c | 5 +-
203 files changed, 2704 insertions(+), 1346 deletions(-)