[PATCH 6.8 000/228] 6.8.9-rc1 review

From: Greg Kroah-Hartman
Date: Tue Apr 30 2024 - 06:46:23 EST

This is the start of the stable review cycle for the 6.8.9 release.
There are 228 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 02 May 2024 10:30:27 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.8.9-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.8.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.8.9-rc1

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_sync: Fix UAF on create_le_conn_complete

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync

Matthew Wilcox (Oracle) <willy@xxxxxxxxxxxxx>
bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS

Johan Hovold <johan+linaro@xxxxxxxxxx>
phy: qcom: qmp-combo: fix VCO div offset on v5_5nm and v6

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: smbus: fix NULL function pointer dereference

Andrew Jones <ajones@xxxxxxxxxxxxxxxx>
RISC-V: selftests: cbo: Ensure asm operands match constraints, take 2

Clément Léger <cleger@xxxxxxxxxxxx>
riscv: hwprobe: fix invalid sign extension for RISCV_HWPROBE_EXT_ZVFHMIN

Xuewen Yan <xuewen.yan@xxxxxxxxxx>
sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf()

Tianchen Ding <dtcccc@xxxxxxxxxxxxxxxxx>
sched/eevdf: Fix miscalculation in reweight_entity() when se is not curr

Tianchen Ding <dtcccc@xxxxxxxxxxxxxxxxx>
sched/eevdf: Always update V if se->on_rq when reweighting

Rob Herring <robh@xxxxxxxxxx>
dt-bindings: eeprom: at24: Fix ST M24C64-D compatible schema

Hans de Goede <hdegoede@xxxxxxxxxx>
phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered

Samuel Holland <samuel.holland@xxxxxxxxxx>
riscv: Fix loading 64-bit NOMMU kernels past the start of RAM

Samuel Holland <samuel.holland@xxxxxxxxxx>
riscv: Fix TASK_SIZE on 64-bit NOMMU

Fenghua Yu <fenghua.yu@xxxxxxxxx>
dmaengine: idxd: Fix oops during rmmod on single-CPU platforms

Sean Anderson <sean.anderson@xxxxxxxxx>
dma: xilinx_dpdma: Fix locking

Rex Zhang <rex.zhang@xxxxxxxxx>
dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue

Gabor Juhos <j4g8y7@xxxxxxxxx>
phy: qcom: m31: match requested regulator name with dt schema

Sebastian Reichel <sebastian.reichel@xxxxxxxxxxxxx>
phy: rockchip: naneng-combphy: Fix mux on rk3588

Sebastian Reichel <sebastian.reichel@xxxxxxxxxxxxx>
phy: rockchip-snps-pcie3: fix clearing PHP_GRF_PCIESEL_CON bits

Michal Tomek <mtdev79b@xxxxxxxxx>
phy: rockchip-snps-pcie3: fix bifurcation on rk3588

Marcel Ziswiler <marcel.ziswiler@xxxxxxxxxxx>
phy: freescale: imx8m-pcie: fix pcie link-up instability

Mikhail Kobuk <m.kobuk@xxxxxxxxx>
phy: marvell: a3700-comphy: Fix hardcoded array size

Mikhail Kobuk <m.kobuk@xxxxxxxxx>
phy: marvell: a3700-comphy: Fix out of bounds read

Vijendar Mukunda <Vijendar.Mukunda@xxxxxxx>
soundwire: amd: fix for wake interrupt handling for clockstop mode

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
idma64: Don't try to serve interrupts when device is powered off

Akhil R <akhilrajeev@xxxxxxxxxx>
dmaengine: tegra186: Fix residual calculation

Arnd Bergmann <arnd@xxxxxxxx>
dmaengine: owl: fix register access functions

Johannes Weiner <hannes@xxxxxxxxxxx>
mm: zswap: fix shrinker NULL crash with cgroup_disable=memory

Matthew Wilcox (Oracle) <willy@xxxxxxxxxxxxx>
mm: turn folio_test_hugetlb into a PageType

Stephen Boyd <swboyd@xxxxxxxxxxxx>
phy: qcom: qmp-combo: Fix VCO div offset on v3

Stephen Boyd <swboyd@xxxxxxxxxxxx>
phy: qcom: qmp-combo: Fix register base for QSERDES_DP_PHY_MODE

Maximilian Luz <luzmaximilian@xxxxxxxxx>
firmware: qcom: uefisecapp: Fix memory related IO errors and crashes

Arnd Bergmann <arnd@xxxxxxxx>
mtd: diskonchip: work around ubsan link failure

Christian Marangi <ansuelsmth@xxxxxxxxx>
mtd: limit OTP NVMEM cell parse to non-NAND devices

Yick Xie <yick.xie@xxxxxxxxx>
udp: preserve the connected status if only UDP cmsg

Nam Cao <namcao@xxxxxxxxxxxxx>
fbdev: fix incorrect address computation in deferred IO

Andrey Ryabinin <ryabinin.a.a@xxxxxxxxx>
stackdepot: respect __GFP_NOLOCKDEP allocation flag

Rahul Rameshbabu <rrameshbabu@xxxxxxxxxx>
macsec: Detect if Rx skb is macsec-related for offloading devices that update md_dst

Rahul Rameshbabu <rrameshbabu@xxxxxxxxxx>
macsec: Enable devices to advertise whether they update sk_buff md_dst during offloads

Peter Münster <pm@xxxxxxxx>
net: b44: set pause params only when interface is up

Rahul Rameshbabu <rrameshbabu@xxxxxxxxxx>
ethernet: Add helper for assigning packet type when dest address does not match device address

Rahul Rameshbabu <rrameshbabu@xxxxxxxxxx>
net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec

Vanshidhar Konda <vanshikonda@xxxxxxxxxxxxxxxxxxxxxx>
ACPI: CPPC: Fix access width used for PCC registers

Jarred White <jarredwhite@xxxxxxxxxxxxxxxxxxx>
ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro

Jarred White <jarredwhite@xxxxxxxxxxxxxxxxxxx>
ACPI: CPPC: Use access_width over bit_width for system memory accesses

Guanrui Huang <guanrui.huang@xxxxxxxxxxxxxxxxx>
irqchip/gic-v3-its: Prevent double free on error

Felix Kuehling <felix.kuehling@xxxxxxx>
drm/amdkfd: Fix eviction fence handling

Felix Kuehling <felix.kuehling@xxxxxxx>
drm/amdkfd: Fix rescheduling of restore worker

Mukul Joshi <mukul.joshi@xxxxxxx>
drm/amdgpu: Fix leak when GPU memory allocation fails

Lang Yu <Lang.Yu@xxxxxxx>
drm/amdgpu/umsch: don't execute umsch test when GPU is in reset/suspend

Ma Jun <Jun.Ma2@xxxxxxx>
drm/amdgpu/pm: Remove gpu_od if it's an empty directory

Lucas Stach <l.stach@xxxxxxxxxxxxxx>
drm/atomic-helper: fix parameter order in drm_format_conv_state_copy() call

Lijo Lazar <lijo.lazar@xxxxxxx>
drm/amdgpu: Assign correct bits for SDMA HDP flush

Alex Deucher <alexander.deucher@xxxxxxx>
drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3

Louis Chauvet <louis.chauvet@xxxxxxxxxxx>
dmaengine: xilinx: xdma: Fix synchronization issue

Miquel Raynal <miquel.raynal@xxxxxxxxxxx>
dmaengine: xilinx: xdma: Fix wrong offsets in the buffers addresses in dma descriptor

Vinod Koul <vkoul@xxxxxxxxxx>
dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"

Iskander Amara <iskander.amara@xxxxxxxxxxxxxxxxxxxxx>
arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma

Manivannan Sadhasivam <manivannan.sadhasivam@xxxxxxxxxx>
arm64: dts: qcom: sm8450: Fix the msi-map entries

Johan Hovold <johan+linaro@xxxxxxxxxx>
arm64: dts: qcom: sc8280xp: add missing PCIe minimum OPP

Jiantao Shan <shanjiantao@xxxxxxxxxxx>
LoongArch: Fix access error when read fault on a write-only VMA

Huacai Chen <chenhuacai@xxxxxxxxxx>
LoongArch: Fix callchain parse error with kernel tracepoint events

Daniel Okazaki <dtokazaki@xxxxxxxxxx>
eeprom: at24: fix memory corruption race condition

Sean Christopherson <seanjc@xxxxxxxxxx>
cpu: Re-enable CPU mitigations by default for !X86 architectures

Kirill A. Shutemov <kirill.shutemov@xxxxxxxxxxxxxxx>
x86/tdx: Preserve shared bit on mprotect()

Johannes Thumshirn <johannes.thumshirn@xxxxxxx>
btrfs: fix information leak in btrfs_ioctl_logical_to_ino()

Naohiro Aota <naohiro.aota@xxxxxxx>
btrfs: scrub: run relocation repair when/only needed

Qu Wenruo <wqu@xxxxxxxx>
btrfs: fix wrong block_start calculation for btrfs_drop_extent_map_range()

Sweet Tea Dorminy <sweettea-kernel@xxxxxxxxxx>
btrfs: fallback if compressed IO fails for ENOSPC

Kenny Levinsen <kl@xxxxxx>
HID: i2c-hid: Revert to await reset ACK before reading report descriptor

Nam Cao <namcao@xxxxxxxxxxxxx>
HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up

Steve French <stfrench@xxxxxxxxxxxxx>
smb3: fix lock ordering potential deadlock in cifs_sync_mid_result

Steve French <stfrench@xxxxxxxxxxxxx>
smb3: missing lock when picking channel

Gustavo A. R. Silva <gustavoars@xxxxxxxxxx>
smb: client: Fix struct_group() usage in __packed structs

Miaohe Lin <linmiaohe@xxxxxxxxxx>
mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio()

Matthew Wilcox (Oracle) <willy@xxxxxxxxxxxxx>
mm: support page_mapcount() on page_has_type() pages

Matthew Wilcox (Oracle) <willy@xxxxxxxxxxxxx>
mm: create FOLIO_FLAG_FALSE and FOLIO_TYPE_OPS macros

Maksim Kiselev <bigunclemax@xxxxxxxxx>
mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128

Mantas Pucka <mantas@xxxxxxxxxxxx>
mmc: sdhci-msm: pervent access to suspended controller

Peter Xu <peterx@xxxxxxxxxx>
mm/hugetlb: fix missing hugetlb_lock for resv uncharge

Christian Marangi <ansuelsmth@xxxxxxxxx>
mtd: rawnand: qcom: Fix broken OP_RESET_DEVICE command in qcom_misc_cmd_type_exec()

Johan Hovold <johan+linaro@xxxxxxxxxx>
Bluetooth: qca: fix NULL-deref on non-serdev setup

Johan Hovold <johan+linaro@xxxxxxxxxx>
Bluetooth: qca: fix NULL-deref on non-serdev suspend

WangYuli <wangyuli@xxxxxxxxxxxxx>
Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853

Nathan Chancellor <nathan@xxxxxxxxxx>
Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()

Aswin Unnikrishnan <aswinunni01@xxxxxxxxx>
rust: remove `params` from `module` macro example

Miguel Ojeda <ojeda@xxxxxxxxxx>
kbuild: rust: force `alloc` extern to allow "empty" Rust files

Miguel Ojeda <ojeda@xxxxxxxxxx>
kbuild: rust: remove unneeded `@rustc_cfg` to avoid ICE

Conor Dooley <conor.dooley@xxxxxxxxxxxxx>
rust: make mutually exclusive with CFI_CLANG

Laine Taffin Altman <alexanderaltman@xxxxxx>
rust: init: remove impl Zeroable for Infallible

Alice Ryhl <aliceryhl@xxxxxxxxxx>
rust: don't select CONSTRUCTORS

Wedson Almeida Filho <walmeida@xxxxxxxxxxxxx>
rust: kernel: require `Send` for `Module` implementations

Wedson Almeida Filho <walmeida@xxxxxxxxxxxxx>
rust: phy: implement `Send` for `Registration`

David Kaplan <david.kaplan@xxxxxxx>
x86/cpu: Fix check for RDPKRU in __show_regs()

Wenkuan Wang <Wenkuan.Wang@xxxxxxx>
x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range

Terry Tritton <terry.tritton@xxxxxxxxxx>
selftests/seccomp: Handle EINVAL on unshare(CLONE_NEWPID)

Terry Tritton <terry.tritton@xxxxxxxxxx>
selftests/seccomp: Change the syscall used in KILL_THREAD test

Terry Tritton <terry.tritton@xxxxxxxxxx>
selftests/seccomp: user_notification_addfd check nextfd is available

Christian König <christian.koenig@xxxxxxx>
drm/amdgpu: fix visible VRAM handling during faults

Alex Deucher <alexander.deucher@xxxxxxx>
drm/amdgpu: add shared fdinfo stats

Alex Deucher <alexander.deucher@xxxxxxx>
drm: add drm_gem_object_is_shared_for_memory_stats() helper

Sean Christopherson <seanjc@xxxxxxxxxx>
KVM: x86/pmu: Set enable bits for GP counters in PERF_GLOBAL_CTRL at "RESET"

Sean Christopherson <seanjc@xxxxxxxxxx>
KVM: x86/pmu: Zero out PMU metadata on AMD if PMU is disabled

Oliver Neukum <oneukum@xxxxxxxx>
usb: xhci: correct return value in case of STS_HCE

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
xhci: move event processing for one interrupter to a separate function

Alex Deucher <alexander.deucher@xxxxxxx>
Revert "drm/amd/display: fix USB-C flag update after enc10 feature init"

George Shen <george.shen@xxxxxxx>
drm/amd/display: Check DP Alt mode DPCS state via DMUB

David Howells <dhowells@xxxxxxxxxx>
netfs: Fix the pre-flush when appending to a file in writethrough mode

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().

Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
tls: fix lockless read of strp->msg_ready in ->poll

Arkadiusz Kubalewski <arkadiusz.kubalewski@xxxxxxxxx>
dpll: fix dpll_pin_on_pin_register() for multiple parent pins

Jiri Pirko <jiri@xxxxxxxxxxx>
dpll: check that pin is registered in __dpll_pin_unregister()

Su Hui <suhui@xxxxxxxxxxxx>
octeontx2-af: fix the double free in rvu_npc_freemem()

Jason Reeder <jreeder@xxxxxx>
net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets

Jacob Keller <jacob.e.keller@xxxxxxxxx>
ice: fix LAG and VF lock dependency in ice_reset_vf()

Sudheer Mogilappagari <sudheer.mogilappagari@xxxxxxxxx>
iavf: Fix TC config comparison with existing adapter TC config

Erwan Velu <e.velu@xxxxxxxxxx>
i40e: Report MFS in decimal base instead of hex

Sindhu Devale <sindhu.devale@xxxxxxxxx>
i40e: Do not use WQ_MEM_RECLAIM flag for workqueue

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
net: ti: icssg-prueth: Fix signedness bug in prueth_init_rx_chns()

MD Danish Anwar <danishanwar@xxxxxx>
net: phy: dp83869: Fix MII mode failure

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nf_tables: honor table dormant flag from netdev release event path

Michael Heimpold <michael.heimpold@xxxxxxxxxxxxxx>
ARM: dts: imx6ull-tarragon: fix USB over-current polarity

Jakub Kicinski <kuba@xxxxxxxxxx>
eth: bnxt: fix counting packets discarded due to OOM and netpoll

Ido Schimmel <idosch@xxxxxxxxxx>
mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work

Ido Schimmel <idosch@xxxxxxxxxx>
mlxsw: spectrum_acl_tcam: Fix incorrect list API usage

Ido Schimmel <idosch@xxxxxxxxxx>
mlxsw: spectrum_acl_tcam: Fix warning during rehash

Ido Schimmel <idosch@xxxxxxxxxx>
mlxsw: spectrum_acl_tcam: Fix memory leak during rehash

Ido Schimmel <idosch@xxxxxxxxxx>
mlxsw: spectrum_acl_tcam: Rate limit error message

Ido Schimmel <idosch@xxxxxxxxxx>
mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash

Ido Schimmel <idosch@xxxxxxxxxx>
mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update

Ido Schimmel <idosch@xxxxxxxxxx>
mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work

Ido Schimmel <idosch@xxxxxxxxxx>
mlxsw: spectrum_acl_tcam: Fix race in region ID allocation

Amit Cohen <amcohen@xxxxxxxxxx>
mlxsw: Use refcount_t for reference counting

Hyunwoo Kim <v4bel@xxxxxxxxx>
net: openvswitch: Fix Use-After-Free in ovs_ct_exit

Ismael Luceno <iluceno@xxxxxxx>
ipvs: Fix checksumming on GSO of SCTP packets

Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxx>
Bluetooth: qca: set power_ctrl_enabled on NULL returned by gpiod_get_optional()

Chun-Yi Lee <jlee@xxxxxxxx>
Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor

Sean Wang <sean.wang@xxxxxxxxxxxx>
Bluetooth: btusb: mediatek: Fix double free of skb in coredump

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE

Zijun Hu <quic_zijuhu@xxxxxxxxxxx>
Bluetooth: btusb: Fix triggering coredump implementation for QCA

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_sync: Use advertised PHYs on hci_le_ext_create_conn_sync

Iulia Tanasescu <iulia.tanasescu@xxxxxxx>
Bluetooth: ISO: Reassemble PA data for bcast sink

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_sync: Attempt to dequeue connection attempt

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_conn: Always use sk_timeo as conn_timeout

Jonas Dreßler <verdre@xxxxxxx>
Bluetooth: Remove pending ACL connection attempts

Jonas Dreßler <verdre@xxxxxxx>
Bluetooth: hci_conn: Only do ACL connections sequentially

Jonas Dreßler <verdre@xxxxxxx>
Bluetooth: hci_event: Use HCI error defines instead of magic values

Himal Prasad Ghimiray <himal.prasad.ghimiray@xxxxxxxxx>
drm/xe: call free_gsc_pkt only once on action add failure

Himal Prasad Ghimiray <himal.prasad.ghimiray@xxxxxxxxx>
drm/xe: Remove sysfs only once on action add failure

Prathamesh Shete <pshete@xxxxxxxxxx>
gpio: tegra186: Fix tegra186_gpio_is_accessible() check

Daniel Golle <daniel@xxxxxxxxxxxxxx>
net: phy: mediatek-ge-soc: follow netdev LED trigger semantics

Hyunwoo Kim <v4bel@xxxxxxxxx>
net: gtp: Fix Use-After-Free in gtp_dellink

Hyunwoo Kim <v4bel@xxxxxxxxx>
tcp: Fix Use-After-Free in tcp_ao_connect_init

Eric Dumazet <edumazet@xxxxxxxxxx>
net: usb: ax88179_178a: stop lying about skb->truesize

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv4: check for NULL idev in ip_route_use_hint()

Eric Dumazet <edumazet@xxxxxxxxxx>
net: fix sk_memory_allocated_{add|sub} vs softirqs

Adam Li <adamli@xxxxxxxxxxxxxxxxxxxxxx>
net: make SK_MEMORY_PCPU_RESERV tunable

Jakub Kicinski <kuba@xxxxxxxxxx>
tools: ynl: don't ignore errors in NLMSG_DONE messages

AngeloGioacchino Del Regno <angelogioacchino.delregno@xxxxxxxxxxxxx>
soc: mediatek: mtk-svs: Append "-thermal" to thermal zone names

Duoming Zhou <duoming@xxxxxxxxxx>
ax25: Fix netdev refcount issue

David Howells <dhowells@xxxxxxxxxx>
netfs: Fix writethrough-mode error handling

Paul Geurts <paul_geurts@xxxxxxx>
NFC: trf7970a: disable all regulators on removal

Matthias Schiffer <matthias.schiffer@xxxxxxxxxxxxxxx>
net: dsa: mv88e6xx: fix supported_interfaces setup in mv88e6250_phylink_get_caps()

Dan Williams <dan.j.williams@xxxxxxxxx>
cxl/core: Fix potential payload size confusion in cxl_mem_get_poison()

Michael Chan <michael.chan@xxxxxxxxxxxx>
bnxt_en: Fix error recovery for 5760X (P7) chips

Vikas Gupta <vikas.gupta@xxxxxxxxxxxx>
bnxt_en: Fix the PCI-AER routines

Vikas Gupta <vikas.gupta@xxxxxxxxxxxx>
bnxt_en: refactor reset close code

Hangbin Liu <liuhangbin@xxxxxxxxx>
bridge/br_netlink.c: no need to return void function

Eric Dumazet <edumazet@xxxxxxxxxx>
icmp: prevent possible NULL dereferences from icmp_build_probe()

Andrei Simion <andrei.simion@xxxxxxxxxxxxx>
ARM: dts: microchip: at91-sama7g5ek: Replace regulator-suspend-voltage with the valid property

Ido Schimmel <idosch@xxxxxxxxxx>
mlxsw: pci: Fix driver initialization with old firmware

Ido Schimmel <idosch@xxxxxxxxxx>
mlxsw: core_env: Fix driver initialization with old firmware

Ido Schimmel <idosch@xxxxxxxxxx>
mlxsw: core: Unregister EMAD trap using FORWARD action

Justin Chen <justin.chen@xxxxxxxxxxxx>
net: bcmasp: fix memory leak when bringing down interface

David Bauer <mail@xxxxxxxxxxxxxxx>
vxlan: drop packets from invalid src-address

Duanqiang Wen <duanqiangwen@xxxxxxxxxxxxx>
net: libwx: fix alloc msix vectors failed

Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: mac80211: fix unaligned le16 access

Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: mac80211: remove link before AP

Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: mac80211_hwsim: init peer measurement result

Patrik Jakobsson <patrik.r.jakobsson@xxxxxxxxx>
drm/gma500: Remove lid code

Miri Korenblit <miriam.rachel.korenblit@xxxxxxxxx>
wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd

Avraham Stern <avraham.stern@xxxxxxxxx>
wifi: iwlwifi: mvm: remove old PASN station when adding a new one

Felix Fietkau <nbd@xxxxxxxx>
wifi: mac80211: split mesh fast tx cache into local/proxied/forwarded

Colin Ian King <colin.i.king@xxxxxxxxx>
wifi: mac80211: clean up assignments to pointer cache.

Alexey Brodkin <Alexey.Brodkin@xxxxxxxxxxxx>
ARC: [plat-hsdk]: Remove misplaced interrupt-cells property

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
gpio: tangier: Use correct type for the IRQ chip data

Maximilian Luz <luzmaximilian@xxxxxxxxx>
arm64: dts: qcom: sc8180x: Fix ss_phy_irq for secondary USB controller

Rajendra Nayak <quic_rjendra@xxxxxxxxxxx>
arm64: dts: qcom: x1e80100: Fix the compatible for cluster idle states

Luca Weiss <luca.weiss@xxxxxxxxxxxxx>
arm64: dts: qcom: Fix type of "wdog" IRQs for remoteprocs

Yu Kuai <yukuai3@xxxxxxxxxx>
block: fix module reference leakage from bdev_open_by_dev error path

Jose Ignacio Tornos Martinez <jtornosm@xxxxxxxxxx>
arm64: dts: rockchip: regulator for sd needs to be always on for BPI-R2Pro

Muhammed Efe Cetin <efectn@xxxxxxxxxxxxxx>
arm64: dts: rockchip: mark system power controller and fix typo on orangepi-5-plus

Rafał Miłecki <rafal@xxxxxxxxxx>
arm64: dts: mediatek: mt2712: fix validation errors

Rafał Miłecki <rafal@xxxxxxxxxx>
arm64: dts: mediatek: mt7986: prefix BPI-R3 cooling maps with "map-"

Rafał Miłecki <rafal@xxxxxxxxxx>
arm64: dts: mediatek: mt7986: drop invalid thermal block clock

Rafał Miłecki <rafal@xxxxxxxxxx>
arm64: dts: mediatek: mt7986: reorder nodes

Rafał Miłecki <rafal@xxxxxxxxxx>
arm64: dts: mediatek: mt7986: drop "#reset-cells" from Ethernet controller

Rafał Miłecki <rafal@xxxxxxxxxx>
arm64: dts: mediatek: mt7986: drop invalid properties from ethsys

Rafał Miłecki <rafal@xxxxxxxxxx>
arm64: dts: mediatek: mt7986: reorder properties

Rafał Miłecki <rafal@xxxxxxxxxx>
arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block

Rafał Miłecki <rafal@xxxxxxxxxx>
arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"

Rafał Miłecki <rafal@xxxxxxxxxx>
arm64: dts: mediatek: mt7622: fix IR nodename

Rafał Miłecki <rafal@xxxxxxxxxx>
arm64: dts: mediatek: mt7622: fix clock controllers

Pin-yen Lin <treapking@xxxxxxxxxxxx>
arm64: dts: mediatek: mt8183-kukui: Use default min voltage for MT6358

Pin-yen Lin <treapking@xxxxxxxxxxxx>
arm64: dts: mediatek: mt8195-cherry: Update min voltage constraint for MT6315

Pin-yen Lin <treapking@xxxxxxxxxxxx>
arm64: dts: mediatek: mt8192-asurada: Update min voltage constraint for MT6315

Nícolas F. R. A. Prado <nfraprado@xxxxxxxxxxxxx>
arm64: dts: mediatek: cherry: Describe CPU supplies

Nícolas F. R. A. Prado <nfraprado@xxxxxxxxxxxxx>
arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex1

Nícolas F. R. A. Prado <nfraprado@xxxxxxxxxxxxx>
arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex

Nícolas F. R. A. Prado <nfraprado@xxxxxxxxxxxxx>
arm64: dts: mediatek: mt8195: Add missing gce-client-reg to vpp/vdosys

Nícolas F. R. A. Prado <nfraprado@xxxxxxxxxxxxx>
arm64: dts: mediatek: mt8192: Add missing gce-client-reg to mutex

Ikjoon Jang <ikjn@xxxxxxxxxxxx>
arm64: dts: mediatek: mt8183: Add power-domains properity to mfgcfg

Dragan Simic <dsimic@xxxxxxxxxxx>
arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts

Andy Yan <andyshrk@xxxxxxx>
arm64: dts: rockchip: Fix the i2c address of es8316 on Cool Pi CM5

Quentin Schulz <quentin.schulz@xxxxxxxxxxxxxxxxxxxxx>
arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma

Iskander Amara <iskander.amara@xxxxxxxxxxxxxxxxxxxxx>
arm64: dts: rockchip: fix alphabetical ordering RK3399 puma

Quentin Schulz <quentin.schulz@xxxxxxxxxxxxxxxxxxxxx>
arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 Puma

Arınç ÜNAL <arinc.unal@xxxxxxxxxx>
arm64: dts: rockchip: set PHY address of MT7531 switch to 0x1f

Yaraslau Furman <yaro330@xxxxxxxxx>
HID: logitech-dj: allow mice to use all types of reports

Zhang Lixu <lixu.zhang@xxxxxxxxx>
HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc

Takayuki Nagata <tnagata@xxxxxxxxxx>
cifs: reinstate original behavior again for forceuid/forcegid

Paulo Alcantara <pc@xxxxxxxxxxxxx>
smb: client: fix rename(2) regression against samba

David Howells <dhowells@xxxxxxxxxx>
cifs: Fix reacquisition of volume cookie on still-live connection


-------------

Diffstat:

Documentation/admin-guide/sysctl/net.rst | 5 +
Documentation/devicetree/bindings/eeprom/at24.yaml | 5 +-
Makefile | 4 +-
arch/Kconfig | 8 +
arch/arc/boot/dts/hsdk.dts | 1 -
arch/arm/boot/dts/microchip/at91-sama7g5ek.dts | 8 +-
.../boot/dts/nxp/imx/imx6ull-tarragon-common.dtsi | 1 +
arch/arm64/boot/dts/mediatek/mt2712-evb.dts | 8 +-
arch/arm64/boot/dts/mediatek/mt2712e.dtsi | 3 +-
arch/arm64/boot/dts/mediatek/mt7622.dtsi | 34 ++-
.../boot/dts/mediatek/mt7986a-bananapi-bpi-r3.dts | 6 +-
arch/arm64/boot/dts/mediatek/mt7986a.dtsi | 215 ++++++++--------
arch/arm64/boot/dts/mediatek/mt8183-kukui.dtsi | 1 -
arch/arm64/boot/dts/mediatek/mt8183.dtsi | 1 +
arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi | 6 +-
arch/arm64/boot/dts/mediatek/mt8192.dtsi | 1 +
arch/arm64/boot/dts/mediatek/mt8195-cherry.dtsi | 36 ++-
arch/arm64/boot/dts/mediatek/mt8195.dtsi | 5 +
arch/arm64/boot/dts/qcom/sc7280.dtsi | 4 +-
arch/arm64/boot/dts/qcom/sc8180x.dtsi | 2 +-
arch/arm64/boot/dts/qcom/sc8280xp.dtsi | 11 +-
arch/arm64/boot/dts/qcom/sm6350.dtsi | 4 +-
arch/arm64/boot/dts/qcom/sm6375.dtsi | 2 +-
arch/arm64/boot/dts/qcom/sm8250.dtsi | 6 +-
arch/arm64/boot/dts/qcom/sm8450.dtsi | 16 +-
arch/arm64/boot/dts/qcom/x1e80100.dtsi | 4 +-
.../boot/dts/rockchip/rk3399-pinebook-pro.dts | 1 -
arch/arm64/boot/dts/rockchip/rk3399-puma.dtsi | 31 ++-
arch/arm64/boot/dts/rockchip/rk3568-bpi-r2-pro.dts | 6 +-
.../arm64/boot/dts/rockchip/rk3588-coolpi-cm5.dtsi | 4 +-
.../boot/dts/rockchip/rk3588-orangepi-5-plus.dts | 3 +-
arch/loongarch/include/asm/perf_event.h | 8 +
arch/loongarch/mm/fault.c | 4 +-
arch/riscv/include/asm/page.h | 2 +-
arch/riscv/include/asm/pgtable.h | 2 +-
arch/riscv/include/uapi/asm/hwprobe.h | 2 +-
arch/riscv/mm/init.c | 2 +-
arch/x86/Kconfig | 11 +-
arch/x86/include/asm/coco.h | 1 +
arch/x86/include/asm/pgtable_types.h | 3 +-
arch/x86/kernel/cpu/amd.c | 3 +-
arch/x86/kernel/process_64.c | 2 +-
arch/x86/kvm/pmu.c | 30 ++-
arch/x86/kvm/vmx/pmu_intel.c | 16 +-
block/bdev.c | 2 +-
drivers/acpi/cppc_acpi.c | 72 ++++--
drivers/bluetooth/btmtk.c | 7 +-
drivers/bluetooth/btusb.c | 11 +-
drivers/bluetooth/hci_qca.c | 27 +-
drivers/cxl/core/mbox.c | 38 ++-
drivers/dma/idma64.c | 4 +
drivers/dma/idxd/cdev.c | 5 +-
drivers/dma/idxd/debugfs.c | 4 +-
drivers/dma/idxd/device.c | 8 +-
drivers/dma/idxd/idxd.h | 2 +-
drivers/dma/idxd/init.c | 2 +-
drivers/dma/idxd/irq.c | 4 +-
drivers/dma/idxd/perfmon.c | 9 +-
drivers/dma/owl-dma.c | 4 +-
drivers/dma/pl330.c | 3 -
drivers/dma/tegra186-gpc-dma.c | 3 +
drivers/dma/xilinx/xdma-regs.h | 3 +
drivers/dma/xilinx/xdma.c | 28 ++-
drivers/dma/xilinx/xilinx_dpdma.c | 13 +-
drivers/dpll/dpll_core.c | 61 +++--
drivers/firmware/qcom/qcom_qseecom_uefisecapp.c | 137 +++++++----
drivers/firmware/qcom/qcom_scm.c | 37 +--
drivers/gpio/gpio-tangier.c | 9 +-
drivers/gpio/gpio-tegra186.c | 20 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_fdinfo.c | 4 +
drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 33 ++-
drivers/gpu/drm/amd/amdgpu/amdgpu_object.h | 28 +--
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 73 +++---
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.h | 3 +
drivers/gpu/drm/amd/amdgpu/amdgpu_umsch_mm.c | 3 +
drivers/gpu/drm/amd/amdgpu/sdma_v4_4_2.c | 3 +-
drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 24 +-
drivers/gpu/drm/amd/amdkfd/kfd_process.c | 15 +-
.../amd/display/dc/dcn32/dcn32_dio_link_encoder.c | 85 +++++--
.../amd/display/dc/dcn32/dcn32_dio_link_encoder.h | 5 +
.../amd/display/dc/dcn35/dcn35_dio_link_encoder.c | 4 +-
drivers/gpu/drm/amd/pm/amdgpu_pm.c | 7 +
drivers/gpu/drm/drm_gem_atomic_helper.c | 4 +-
drivers/gpu/drm/gma500/Makefile | 1 -
drivers/gpu/drm/gma500/psb_device.c | 5 +-
drivers/gpu/drm/gma500/psb_drv.h | 9 -
drivers/gpu/drm/gma500/psb_lid.c | 80 ------
drivers/gpu/drm/xe/xe_gt.c | 4 +-
drivers/gpu/drm/xe/xe_gt_ccs_mode.c | 19 +-
drivers/gpu/drm/xe/xe_gt_ccs_mode.h | 2 +-
drivers/gpu/drm/xe/xe_huc.c | 9 +-
drivers/hid/hid-logitech-dj.c | 4 +-
drivers/hid/i2c-hid/i2c-hid-core.c | 38 +--
drivers/hid/intel-ish-hid/ipc/ipc.c | 2 +-
drivers/i2c/i2c-core-base.c | 12 +-
drivers/irqchip/irq-gic-v3-its.c | 9 +-
drivers/misc/eeprom/at24.c | 18 +-
drivers/mmc/host/sdhci-msm.c | 16 +-
drivers/mmc/host/sdhci-of-dwcmshc.c | 1 +
drivers/mtd/mtdcore.c | 2 +-
drivers/mtd/nand/raw/diskonchip.c | 4 +-
drivers/mtd/nand/raw/qcom_nandc.c | 7 +-
drivers/net/dsa/mv88e6xxx/chip.c | 56 ++++-
drivers/net/dsa/mv88e6xxx/port.h | 23 +-
drivers/net/ethernet/broadcom/asp2/bcmasp_intf.c | 21 +-
drivers/net/ethernet/broadcom/b44.c | 14 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 82 +++---
drivers/net/ethernet/intel/i40e/i40e_main.c | 6 +-
drivers/net/ethernet/intel/iavf/iavf_main.c | 30 ++-
drivers/net/ethernet/intel/ice/ice_vf_lib.c | 16 +-
.../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 1 -
.../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 1 +
drivers/net/ethernet/mellanox/mlxsw/core.c | 2 +-
.../mellanox/mlxsw/core_acl_flex_actions.c | 16 +-
.../ethernet/mellanox/mlxsw/core_acl_flex_keys.c | 9 +-
drivers/net/ethernet/mellanox/mlxsw/core_env.c | 20 +-
drivers/net/ethernet/mellanox/mlxsw/pci.c | 10 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum_acl.c | 11 +-
.../ethernet/mellanox/mlxsw/spectrum_acl_tcam.c | 132 ++++++----
.../ethernet/mellanox/mlxsw/spectrum_acl_tcam.h | 5 +-
.../net/ethernet/mellanox/mlxsw/spectrum_router.c | 15 +-
.../ethernet/mellanox/mlxsw/spectrum_switchdev.c | 8 +-
drivers/net/ethernet/ti/am65-cpts.c | 5 +
drivers/net/ethernet/ti/icssg/icssg_prueth.c | 8 +-
drivers/net/ethernet/wangxun/libwx/wx_lib.c | 2 +-
drivers/net/gtp.c | 3 +-
drivers/net/macsec.c | 46 +++-
drivers/net/phy/dp83869.c | 3 +-
drivers/net/phy/mediatek-ge-soc.c | 43 ++--
drivers/net/usb/ax88179_178a.c | 11 +-
drivers/net/vxlan/vxlan_core.c | 4 +
.../net/wireless/intel/iwlwifi/mvm/ftm-initiator.c | 2 +
drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 3 +-
drivers/net/wireless/virtual/mac80211_hwsim.c | 2 +-
drivers/nfc/trf7970a.c | 42 ++--
drivers/phy/freescale/phy-fsl-imx8m-pcie.c | 6 +-
drivers/phy/marvell/phy-mvebu-a3700-comphy.c | 9 +-
drivers/phy/qualcomm/phy-qcom-m31.c | 2 +-
drivers/phy/qualcomm/phy-qcom-qmp-combo.c | 12 +-
drivers/phy/qualcomm/phy-qcom-qmp.h | 2 +
drivers/phy/rockchip/phy-rockchip-naneng-combphy.c | 36 ++-
drivers/phy/rockchip/phy-rockchip-snps-pcie3.c | 31 +--
drivers/phy/ti/phy-tusb1210.c | 23 +-
drivers/soc/mediatek/mtk-svs.c | 7 +-
drivers/soundwire/amd_manager.c | 15 ++
drivers/soundwire/amd_manager.h | 3 +-
drivers/usb/host/xhci-ring.c | 116 +++++----
drivers/video/fbdev/core/fb_defio.c | 2 +-
fs/btrfs/backref.c | 12 +-
fs/btrfs/extent_map.c | 2 +-
fs/btrfs/inode.c | 13 +-
fs/btrfs/scrub.c | 18 +-
fs/btrfs/tests/extent-map-tests.c | 5 +
fs/netfs/buffered_write.c | 23 +-
fs/proc/page.c | 7 +-
fs/smb/client/cifsfs.c | 1 +
fs/smb/client/cifsglob.h | 2 +
fs/smb/client/cifspdu.h | 4 +-
fs/smb/client/fs_context.c | 12 +
fs/smb/client/fs_context.h | 2 +
fs/smb/client/fscache.c | 13 +
fs/smb/client/misc.c | 3 +
fs/smb/client/smb2pdu.h | 2 +-
fs/smb/client/transport.c | 7 +-
include/drm/drm_gem.h | 13 +
include/linux/etherdevice.h | 25 ++
include/linux/firmware/qcom/qcom_qseecom.h | 55 ++++-
include/linux/firmware/qcom/qcom_scm.h | 10 +-
include/linux/mm.h | 8 +-
include/linux/page-flags.h | 146 ++++++-----
include/net/af_unix.h | 3 +
include/net/bluetooth/hci.h | 8 +
include/net/bluetooth/hci_core.h | 38 ++-
include/net/bluetooth/hci_sync.h | 20 +-
include/net/bluetooth/l2cap.h | 2 +-
include/net/macsec.h | 2 +
include/net/sock.h | 41 +--
include/net/tls.h | 3 +-
include/trace/events/mmflags.h | 1 +
init/Kconfig | 2 +-
kernel/bounds.c | 2 +-
kernel/cpu.c | 4 +-
kernel/crash_core.c | 5 +-
kernel/sched/fair.c | 34 +--
lib/stackdepot.c | 4 +-
mm/hugetlb.c | 29 +--
mm/zswap.c | 25 +-
net/ax25/af_ax25.c | 2 +-
net/bluetooth/6lowpan.c | 2 +-
net/bluetooth/hci_conn.c | 168 +++----------
net/bluetooth/hci_event.c | 52 ++--
net/bluetooth/hci_sync.c | 274 ++++++++++++++++++++-
net/bluetooth/iso.c | 50 +++-
net/bluetooth/l2cap_core.c | 12 +-
net/bluetooth/l2cap_sock.c | 10 +-
net/bluetooth/mgmt.c | 27 +-
net/bluetooth/sco.c | 10 +-
net/bridge/br_netlink.c | 2 +-
net/core/sock.c | 1 +
net/core/sysctl_net_core.c | 9 +
net/ethernet/eth.c | 12 +-
net/ipv4/icmp.c | 12 +-
net/ipv4/route.c | 3 +
net/ipv4/tcp_ao.c | 3 +-
net/ipv4/udp.c | 5 +-
net/ipv6/udp.c | 5 +-
net/mac80211/mesh.c | 8 +-
net/mac80211/mesh.h | 36 ++-
net/mac80211/mesh_pathtbl.c | 37 +--
net/mac80211/mlme.c | 9 +-
net/mac80211/rx.c | 13 +-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 6 +-
net/netfilter/nft_chain_filter.c | 4 +-
net/openvswitch/conntrack.c | 4 +-
net/tls/tls.h | 2 +-
net/tls/tls_strp.c | 6 +-
net/unix/garbage.c | 2 +-
rust/Makefile | 1 -
rust/kernel/init.rs | 11 +-
rust/kernel/lib.rs | 2 +-
rust/kernel/net/phy.rs | 4 +
rust/macros/lib.rs | 12 -
scripts/Makefile.build | 2 +-
tools/net/ynl/lib/ynl.py | 1 +
tools/testing/selftests/riscv/hwprobe/cbo.c | 2 +-
tools/testing/selftests/riscv/hwprobe/hwprobe.h | 10 +
tools/testing/selftests/seccomp/seccomp_bpf.c | 41 ++-
229 files changed, 2425 insertions(+), 1546 deletions(-)