[PATCH 6.18 000/198] 6.18.7-rc1 review

From: Greg Kroah-Hartman

Date: Wed Jan 21 2026 - 13:26:59 EST


This is the start of the stable review cycle for the 6.18.7 release.
There are 198 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri, 23 Jan 2026 18:13:40 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.7-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.18.7-rc1

Carlos Llamas <cmllamas@xxxxxxxxxx>
iommu/sva: include mmu_notifier.h header

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Revert "functionfs: fix the open/removal races"

Vlastimil Babka <vbabka@xxxxxxx>
mm/page_alloc: prevent pcp corruption with SMP=n

Joshua Hahn <joshua.hahnjy@xxxxxxxxx>
mm/page_alloc: batch page freeing in decay_pcp_high

Joshua Hahn <joshua.hahnjy@xxxxxxxxx>
mm/page_alloc/vmstat: simplify refresh_cpu_vm_stats change detection

Robbie Ko <robbieko@xxxxxxxxxxxx>
btrfs: fix deadlock in wait_current_trans() due to ignored transaction type

Nathan Chancellor <nathan@xxxxxxxxxx>
HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue()

Zhang Lixu <lixu.zhang@xxxxxxxxx>
HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking

Lu Baolu <baolu.lu@xxxxxxxxxxxxxxx>
iommu/sva: invalidate stale IOTLB entries for kernel address space

Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
mm: introduce deferred freeing for kernel page tables

Lu Baolu <baolu.lu@xxxxxxxxxxxxxxx>
x86/mm: use pagetable_free()

Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
mm: introduce pure page table freeing function

Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
x86/mm: use 'ptdesc' when freeing PMD pages

Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
mm: actually mark kernel page table pages

Dave Hansen <dave.hansen@xxxxxxxxxxxxxxx>
mm: add a ptdesc flag to mark kernel page tables

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: ti: k3-udma: fix device leak on udma lookup

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: stm32: dmamux: fix OF node leak on route allocation failure

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: stm32: dmamux: fix device leak on route allocation

Biju Das <biju.das.jz@xxxxxxxxxxxxxx>
dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: sh: rz-dmac: fix device leak on probe failure

Miaoqian Lin <linmq006@xxxxxxxxx>
dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: lpc32xx-dmamux: fix device leak on route allocation

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: lpc18xx-dmamux: fix device leak on route allocation

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: idxd: fix device leaks on compat bind and unbind

Zhen Ni <zhen.ni@xxxxxxxxxxxx>
dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: dw: dmamux: fix OF node leak on route allocation failure

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: cv1800b-dmamux: fix device leak on route allocation

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: bcm-sba-raid: fix device leak on probe

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: at_hdmac: fix device leak on of_dma_xlate()

Janne Grunau <j@xxxxxxxxxx>
dmaengine: apple-admac: Add "apple,t8103-admac" compatible

Qiang Ma <maqianga@xxxxxxxxxxxxx>
LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy()

Qiang Ma <maqianga@xxxxxxxxxxxxx>
LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy()

Qiang Ma <maqianga@xxxxxxxxxxxxx>
LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()

Binbin Zhou <zhoubinbin@xxxxxxxxxxx>
LoongArch: dts: loongson-2k2000: Add default interrupt controller address cells

Binbin Zhou <zhoubinbin@xxxxxxxxxxx>
LoongArch: dts: loongson-2k1000: Fix i2c-gpio node names

Binbin Zhou <zhoubinbin@xxxxxxxxxxx>
LoongArch: dts: loongson-2k1000: Add default interrupt controller address cells

Binbin Zhou <zhoubinbin@xxxxxxxxxxx>
LoongArch: dts: loongson-2k0500: Add default interrupt controller address cells

Haoxiang Li <lihaoxiang@xxxxxxxxxxxxxxxx>
drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()

Thomas Zimmermann <tzimmermann@xxxxxxx>
drm/sysfb: Remove duplicate declarations

Ludovic Desroches <ludovic.desroches@xxxxxxxxxxxxx>
drm/panel: simple: restore connector_type fallback

Marek Vasut <marex@xxxxxxxxxxxx>
drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel

Lyude Paul <lyude@xxxxxxxxxx>
drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare

Haoxiang Li <lihaoxiang@xxxxxxxxxxxxxxxx>
drm/amdkfd: fix a memory leak in device_queue_manager_init()

Alex Deucher <alexander.deucher@xxxxxxx>
drm/amdgpu: make sure userqs are enabled in userq IOCTLs

Philip Yang <Philip.Yang@xxxxxxx>
drm/amdgpu: Fix gfx9 update PTE mtype flag

Mario Limonciello (AMD) <superm1@xxxxxxxxxx>
drm/amd: Clean up kfd node on surprise disconnect

Vivek Das Mohapatra <vivek@xxxxxxxxxxxxx>
drm/amd/display: Initialise backlight level values from hw

Mario Limonciello <mario.limonciello@xxxxxxx>
drm/amd/display: Bump the HDMI clock to 340MHz

Yao Zi <me@xxxxxxxx>
LoongArch: dts: Describe PCI sideband IRQ through interrupt-extended

Lisa Robinson <lisa@bytefly.space>
LoongArch: Fix PMU counter allocation for mixed-type event groups

SeongJae Park <sj@xxxxxxxxxx>
mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure

SeongJae Park <sj@xxxxxxxxxx>
mm/damon/sysfs: cleanup intervals subdirs on attrs dir setup failure

SeongJae Park <sj@xxxxxxxxxx>
mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure

SeongJae Park <sj@xxxxxxxxxx>
mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure

SeongJae Park <sj@xxxxxxxxxx>
mm/damon/core: remove call_control in inactive contexts

Aboorva Devarajan <aboorvad@xxxxxxxxxxxxx>
mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free

Pavel Butsykin <pbutsykin@xxxxxxxxxxxxxx>
mm/zswap: fix error pointer free in zswap_cpu_comp_prepare()

Ben Dooks <ben.dooks@xxxxxxxxxxxxxxx>
mm: numa,memblock: include <asm/numa.h> for 'numa_nodes_parsed'

Ryan Roberts <ryan.roberts@xxxxxxx>
mm: kmsan: fix poisoning of high-order non-compound pages

Nilay Shroff <nilay@xxxxxxxxxxxxx>
nvme: fix PCIe subsystem reset controller state transition

Xiaochen Shen <shenxiaochen@xxxxxxxxxxxxxx>
x86/resctrl: Fix memory bandwidth counter width for Hygon

Xiaochen Shen <shenxiaochen@xxxxxxxxxxxxxx>
x86/resctrl: Add missing resctrl initialization for Hygon

Tommaso Merciai <tommaso.merciai.xr@xxxxxxxxxxxxxx>
i2c: riic: Move suspend handling to NOIRQ phase

Arnaud Ferraris <arnaud.ferraris@xxxxxxxxxxxxx>
tcpm: allow looking for role_sw device in the main node

Haoxiang Li <lihaoxiang@xxxxxxxxxxxxxxxx>
EDAC/i3200: Fix a resource leak in i3200_probe1()

Haoxiang Li <lihaoxiang@xxxxxxxxxxxxxxxx>
EDAC/x38: Fix a resource leak in x38_probe1()

Thomas Weißschuh <thomas.weissschuh@xxxxxxxxxxxxx>
hrtimer: Fix softirq base check in update_needs_ipi()

Yang Erkun <yangerkun@xxxxxxxxxx>
ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref

Arnd Bergmann <arnd@xxxxxxxx>
ext4: fix ext4_tune_sb_params padding

Johan Hovold <johan@xxxxxxxxxx>
ASoC: codecs: wsa881x: fix unnecessary initialisation

Ilikara Zheng <ilikara@xxxxxxx>
nvme-pci: disable secondary temp for Wodposit WPBSNM8

Ethan Nelson-Moore <enelsonmoore@xxxxxxxxx>
USB: serial: ftdi_sio: add support for PICAXE AXE027 cable

Ulrich Mohr <u.mohr@xxxxxxxxxxxxxxxx>
USB: serial: option: add Telit LE910 MBIM composition

Huacai Chen <chenhuacai@xxxxxxxxxx>
USB: OHCI/UHCI: Add soft dependencies on ehci_platform

Johannes Brüderl <johannes.bruederl@xxxxxxxxx>
usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor

Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx>
usb: dwc3: Check for USB4 IP_NAME

Xu Yang <xu.yang_2@xxxxxxx>
usb: gadget: uvc: fix req_payload_size calculation

Xu Yang <xu.yang_2@xxxxxxx>
usb: gadget: uvc: fix interval_duration calculation

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
xhci: sideband: don't dereference freed ring when removing sideband endpoint

Wayne Chang <waynec@xxxxxxxxxx>
usb: host: xhci-tegra: Use platform_get_irq_optional() for wake IRQs

Wayne Chang <waynec@xxxxxxxxxx>
phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7

Franz Schnyder <franz.schnyder@xxxxxxxxxxx>
phy: fsl-imx8mq-usb: fix typec orientation switch when built as module

Louis Chauvet <louis.chauvet@xxxxxxxxxxx>
phy: rockchip: inno-usb2: fix disconnection in gadget mode

Rafael Beims <rafael.beims@xxxxxxxxxxx>
phy: freescale: imx8m-pcie: assert phy reset during power on

Wentao Liang <vulab@xxxxxxxxxxx>
phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()

Johan Hovold <johan@xxxxxxxxxx>
phy: ti: gmii-sel: fix regmap leak on probe failure

Luca Ceresoli <luca.ceresoli@xxxxxxxxxxx>
phy: rockchip: inno-usb2: fix communication disruption in gadget mode

Dan Williams <dan.j.williams@xxxxxxxxx>
x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers

Shakeel Butt <shakeel.butt@xxxxxxxxx>
lib/buildid: use __kernel_read() for sleepable context

Bui Quang Minh <minhquangbui99@xxxxxxxxx>
virtio-net: don't schedule delayed refill worker

Nirjhar Roy (IBM) <nirjhar.roy.lists@xxxxxxxxx>
xfs: Fix the return value of xfs_rtcopy_summary()

Brian Foster <bfoster@xxxxxxxxxx>
xfs: set max_agbno to allow sparse alloc of last full inode chunk

Guenter Roeck <linux@xxxxxxxxxxxx>
ftrace: Do not over-allocate ftrace memory

Lorenzo Stoakes <lorenzo.stoakes@xxxxxxxxxx>
tools/testing/selftests: fix gup_longterm for unknown fs

Lorenzo Stoakes <lorenzo.stoakes@xxxxxxxxxx>
tools/testing/selftests: add forked (un)/faulted VMA merge tests

Lorenzo Stoakes <lorenzo.stoakes@xxxxxxxxxx>
tools/testing/selftests: add tests for !tgt, src mremap() merges

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts

Ondrej Ille <ondrej.ille@xxxxxxxxx>
can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit.

Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak

Nilay Shroff <nilay@xxxxxxxxxxxxx>
null_blk: fix kmemleak by releasing references to fault configfs items

Zhang Heng <zhangheng@xxxxxxxxxx>
ALSA: hda/realtek: Add quirk for HP Pavilion x360 to enable mute LED

Matthew Schwartz <matthew.schwartz@xxxxxxxxx>
ALSA: hda/tas2781: Skip UEFI calibration on ASUS ROG Xbox Ally X

Jaroslav Kysela <perex@xxxxxxxx>
ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer

Paolo Bonzini <pbonzini@xxxxxxxxxx>
selftests: kvm: try getting XFD and XSAVE state out of sync

Paolo Bonzini <pbonzini@xxxxxxxxxx>
selftests: kvm: replace numbered sync points with actions

Brian Kao <powenkao@xxxxxxxxxx>
scsi: core: Fix error handler encryption support

Yonghong Song <yonghong.song@xxxxxxxxx>
selftests/bpf: Fix selftest verif_scale_strobemeta failure with llvm22

Benjamin Tissoires <bentiss@xxxxxxxxxx>
HID: usbhid: paper over wrong bNumDescriptor field

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
sched: Deadline has dynamic priority

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
sched/deadline: Avoid double update_rq_clock()

Carlos Song <carlos.song@xxxxxxx>
i2c: imx-lpi2c: change to PIO mode in system-wide suspend/resume progress

Neil Armstrong <neil.armstrong@xxxxxxxxxx>
i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA

Harshit Mogalapalli <harshit.m.mogalapalli@xxxxxxxxxx>
soundwire: bus: fix off-by-one when allocating slave IDs

Haotian Zhang <vulab@xxxxxxxxxxx>
dmaengine: omap-dma: fix dma_pool resource leak in error paths

Günther Noack <gnoack3000@xxxxxxxxx>
selftests/landlock: Properly close a file descriptor

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxxxxx>
phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)

Tingmao Wang <m@xxxxxxxxxx>
landlock: Fix wrong type usage

Matthieu Buffet <matthieu@xxxxxxxxx>
selftests/landlock: Remove invalid unix socket bind()

Matthieu Buffet <matthieu@xxxxxxxxx>
selftests/landlock: Fix TCP bind(AF_UNSPEC) test case

Matthieu Buffet <matthieu@xxxxxxxxx>
landlock: Fix TCP handling of short AF_UNSPEC addresses

Haotian Zhang <vulab@xxxxxxxxxxx>
phy: ti: da8xx-usb: Handle devm_pm_runtime_enable() errors

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
phy: stm32-usphyc: Fix off by one in probe()

Loic Poulain <loic.poulain@xxxxxxxxxxxxxxxx>
phy: qcom-qusb2: Fix NULL pointer dereference on early suspend

Stefano Radaelli <stefano.radaelli21@xxxxxxxxx>
phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it

Suraj Gupta <suraj.gupta2@xxxxxxx>
dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing

Sheetal <sheetal@xxxxxxxxxx>
dmaengine: tegra-adma: Fix use-after-free

Anthony Brandon <anthony@xxxxxxxxxxxxxxxxxxxx>
dmaengine: xilinx: xdma: Fix regmap max_register

Guodong Xu <guodong@xxxxxxxxxxxx>
dmaengine: mmp_pdma: fix DMA mask handling

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
NFS: Fix size read races in truncate, fallocate and copy offload

John Groves <John@xxxxxxxxxx>
drivers/dax: add some missing kerneldoc comment fields for struct dev_dax

Mike Rapoport (Microsoft) <rppt@xxxxxxxxxx>
mips: fix HIGHMEM initialization

Bagas Sanjaya <bagasdotme@xxxxxxxxx>
mm, kfence: describe @slab parameter in __kfence_obj_info()

Bagas Sanjaya <bagasdotme@xxxxxxxxx>
textsearch: describe @list member in ts_ops search

Bagas Sanjaya <bagasdotme@xxxxxxxxx>
mm: describe @flags parameter in memalloc_flags_save()

Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx>
drm/amdgpu/userq: Fix fence reference leak on queue teardown v2

Harish Kasiviswanathan <Harish.Kasiviswanathan@xxxxxxx>
drm/amdkfd: No need to suspend whole MES to evict process

Yang Wang <kevinyang.wang@xxxxxxx>
drm/amd/pm: fix smu overdrive data type wrong issue on smu 14.0.2

Mario Limonciello (AMD) <superm1@xxxxxxxxxx>
drm/amd/display: Show link name in PSR status message

Lu Yao <yaolu@xxxxxxxxxx>
drm/amdgpu: fix drm panic null pointer when driver not support atomic

Emil Svendsen <emas@xxxxxxxxxxxxxxx>
ASoC: tlv320adcx140: fix word length

Emil Svendsen <emas@xxxxxxxxxxxxxxx>
ASoC: tlv320adcx140: fix null pointer

Cole Leavitt <cole@xxxxxxxxx>
ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type

Eric Dumazet <edumazet@xxxxxxxxxx>
net/sched: sch_qfq: do not free existing class in qfq_change_class()

Gal Pressman <gal@xxxxxxxxxx>
selftests: drv-net: fix RPS mask handling for high CPU numbers

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
ipv6: Fix use-after-free in inet6_addr_del().

Eric Dumazet <edumazet@xxxxxxxxxx>
dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list()

Aditya Garg <gargaditya@xxxxxxxxxxxxxxxxxxx>
net: hv_netvsc: reject RSS hash key programming without RX indirection table

Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
ALSA: hda/cirrus_scodec_test: Fix test suite name

Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip

Lorenzo Bianconi <lorenzo@xxxxxxxxxx>
net: airoha: Fix typo in airoha_ppe_setup_tc_block_cb definition

Jijie Shao <shaojijie@xxxxxxxxxx>
net: phy: motorcomm: fix duplex setting error for phy leds

Kery Qi <qikeyu2017@xxxxxxxxx>
net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback

Li Ming <ming.li@xxxxxxxxxxxx>
cxl/hdm: Fix potential infinite loop in __cxl_dpa_reserve()

Jiasheng Jiang <jiashengjiangcool@xxxxxxxxx>
btrfs: fix memory leaks in create_space_info() error paths

Saeed Mahameed <saeedm@xxxxxxxxxx>
net/mlx5e: Restore destroying state bit after profile cleanup

Saeed Mahameed <saeedm@xxxxxxxxxx>
net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv

Saeed Mahameed <saeedm@xxxxxxxxxx>
net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv

Saeed Mahameed <saeedm@xxxxxxxxxx>
net/mlx5e: Fix crash on profile change rollback failure

Stefano Garzarella <sgarzare@xxxxxxxxxx>
vsock/test: add a final full barrier after run all tests

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv4: ip_gre: make ipgre_header() robust

Caleb Sander Mateos <csander@xxxxxxxxxxxxxxx>
block: zero non-PI portion of auto integrity buffer

Eric Dumazet <edumazet@xxxxxxxxxx>
macvlan: fix possible UAF in macvlan_forward_source()

Eric Dumazet <edumazet@xxxxxxxxxx>
net: update netdev_lock_{type,name}

Eric Dumazet <edumazet@xxxxxxxxxx>
ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()

Eric Dumazet <edumazet@xxxxxxxxxx>
net: bridge: annotate data-races around fdb->{updated,used}

Yang Li <yang.li@xxxxxxxxxxx>
Bluetooth: hci_sync: enable PA Sync Lost event

Qu Wenruo <wqu@xxxxxxxx>
btrfs: send: check for inline extents in range_is_hole_in_parent()

Filipe Manana <fdmanana@xxxxxxxx>
btrfs: release path before iget_failed() in btrfs_read_locked_inode()

Robert Richter <rrichter@xxxxxxx>
cxl/port: Fix target list setup for multiple decoders sharing the same dport

Shivam Kumar <kumar.shivam43666@xxxxxxxxx>
nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec

Szymon Wilczek <swilczek.lx@xxxxxxxxx>
can: etas_es58x: allow partial RX URB allocation to succeed

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv4: ip_tunnel: spread netdev_lockdep_set_classes()

Yaxiong Tian <tianyaxiong@xxxxxxxxxx>
PM: EM: Fix incorrect description of the cost field in struct em_perf_state

Andy Yan <andy.yan@xxxxxxxxxxxxxx>
drm/rockchip: vop2: Only wait for changed layer cfg done when there is pending cfgdone bits

Andy Yan <andy.yan@xxxxxxxxxxxxxx>
drm/rockchip: vop2: Add delay between poll registers

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
NFS/localio: Deal with page bases that are > PAGE_SIZE

Ian Forbes <ian.forbes@xxxxxxxxxxxx>
drm/vmwgfx: Merge vmw_bo_release and vmw_bo_free functions

Ian Forbes <ian.forbes@xxxxxxxxxxxx>
drm/vmwgfx: Fix KMS with 3D on HW version 10

Sebastian Reichel <sebastian.reichel@xxxxxxxxxxxxx>
drm/bridge: dw-hdmi-qp: Fix spurious IRQ on resume

Zilin Guan <zilin@xxxxxxxxxx>
pnfs/blocklayout: Fix memory leak in bl_parse_scsi()

Zilin Guan <zilin@xxxxxxxxxx>
pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
NFS: Fix a deadlock involving nfs_release_folio()

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
pNFS: Fix a deadlock when returning a delegation during open()

Antony Antony <antony.antony@xxxxxxxxxxx>
xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set

Jianbo Liu <jianbol@xxxxxxxxxx>
xfrm: Fix inner mode lookup in tunnel mode GSO segmentation

Ming Lei <ming.lei@xxxxxxxxxx>
io_uring: move local task_work in exit cancel loop

Gustavo A. R. Silva <gustavoars@xxxxxxxxxx>
virtio_net: Fix misalignment bug in struct virtnet_info

Shenghao Yang <me@xxxxxxxxxxxxxxxxx>
drm/gud: fix NULL fb and crtc dereferences on USB disconnect

Johan Hovold <johan@xxxxxxxxxx>
ASoC: codecs: wsa883x: fix unnecessary initialisation

Johan Hovold <johan@xxxxxxxxxx>
ASoC: codecs: wsa884x: fix codec initialisation

Alice Ryhl <aliceryhl@xxxxxxxxxx>
rust: bitops: fix missing _find_* functions on 32-bit ARM

Sean Christopherson <seanjc@xxxxxxxxxx>
x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1

Andreas Gruenbacher <agruenba@xxxxxxxxxx>
Revert "gfs2: Fix use of bio_chain"

Janne Grunau <j@xxxxxxxxxx>
nvme-apple: add "apple,t8103-nvme-ans2" as compatible

Morduan Zang <zhangdandan@xxxxxxxxxxxxx>
efi/cper: Fix cper_bits_to_str buffer handling and return value

Peng Fan <peng.fan@xxxxxxx>
firmware: imx: scu-irq: Set mu_resource_id before get handle


-------------

Diffstat:

Makefile | 4 +-
arch/loongarch/boot/dts/loongson-2k0500.dtsi | 3 +
arch/loongarch/boot/dts/loongson-2k1000.dtsi | 31 +-
arch/loongarch/boot/dts/loongson-2k2000.dtsi | 35 +-
arch/loongarch/kernel/perf_event.c | 21 +-
arch/loongarch/kvm/intc/eiointc.c | 1 +
arch/loongarch/kvm/intc/ipi.c | 1 +
arch/loongarch/kvm/intc/pch_pic.c | 1 +
arch/mips/mm/init.c | 23 ++
arch/x86/Kconfig | 1 +
arch/x86/kernel/cpu/resctrl/core.c | 21 +-
arch/x86/kernel/cpu/resctrl/internal.h | 3 +
arch/x86/kernel/fpu/core.c | 32 +-
arch/x86/kvm/x86.c | 9 +
arch/x86/mm/init_64.c | 2 +-
arch/x86/mm/kaslr.c | 10 +-
arch/x86/mm/pat/set_memory.c | 2 +-
arch/x86/mm/pgtable.c | 12 +-
block/bio-integrity-auto.c | 2 +-
drivers/block/null_blk/main.c | 12 +-
drivers/cxl/core/hdm.c | 2 +-
drivers/cxl/core/port.c | 2 +-
drivers/dax/dax-private.h | 10 +-
drivers/dma/apple-admac.c | 1 +
drivers/dma/at_hdmac.c | 9 +-
drivers/dma/bcm-sba-raid.c | 6 +-
drivers/dma/cv1800b-dmamux.c | 17 +-
drivers/dma/dw/rzn1-dmamux.c | 4 +-
drivers/dma/fsl-edma-common.c | 1 +
drivers/dma/idxd/compat.c | 23 +-
drivers/dma/lpc18xx-dmamux.c | 19 +-
drivers/dma/lpc32xx-dmamux.c | 19 +-
drivers/dma/mmp_pdma.c | 20 +-
drivers/dma/qcom/gpi.c | 6 +-
drivers/dma/sh/rz-dmac.c | 18 +-
drivers/dma/stm32/stm32-dmamux.c | 22 +-
drivers/dma/tegra210-adma.c | 10 +-
drivers/dma/ti/dma-crossbar.c | 18 +-
drivers/dma/ti/k3-udma-private.c | 2 +-
drivers/dma/ti/omap-dma.c | 4 +
drivers/dma/xilinx/xdma-regs.h | 1 +
drivers/dma/xilinx/xdma.c | 2 +-
drivers/dma/xilinx/xilinx_dma.c | 7 +-
drivers/edac/i3200_edac.c | 11 +-
drivers/edac/x38_edac.c | 9 +-
drivers/firmware/efi/cper.c | 2 +-
drivers/firmware/imx/imx-scu-irq.c | 24 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 8 +
drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 7 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 16 +
drivers/gpu/drm/amd/amdgpu/amdgpu_userq.h | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c | 8 +
drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 8 +-
.../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 31 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 21 +-
drivers/gpu/drm/amd/display/dc/dc_hdmi_types.h | 2 +-
.../gpu/drm/amd/display/dc/link/link_detection.c | 4 +-
.../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 3 +-
drivers/gpu/drm/bridge/synopsys/dw-hdmi-qp.c | 9 +
drivers/gpu/drm/gud/gud_pipe.c | 20 +-
drivers/gpu/drm/nouveau/dispnv50/curs507a.c | 1 +
drivers/gpu/drm/panel/panel-simple.c | 110 +++---
drivers/gpu/drm/rockchip/dw_hdmi_qp-rockchip.c | 12 +-
drivers/gpu/drm/rockchip/rockchip_vop2_reg.c | 17 +-
drivers/gpu/drm/sysfb/drm_sysfb_helper.h | 9 -
drivers/gpu/drm/vmwgfx/vmwgfx_bo.c | 22 +-
drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 14 +-
drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 4 +-
drivers/hid/intel-ish-hid/ipc/ipc.c | 25 +-
drivers/hid/intel-ish-hid/ipc/pci-ish.c | 2 +-
drivers/hid/intel-ish-hid/ishtp-hid-client.c | 4 +-
drivers/hid/intel-ish-hid/ishtp/bus.c | 18 +-
drivers/hid/intel-ish-hid/ishtp/hbm.c | 4 +-
drivers/hid/intel-ish-hid/ishtp/ishtp-dev.h | 3 +
drivers/hid/usbhid/hid-core.c | 17 +-
drivers/i2c/busses/i2c-imx-lpi2c.c | 7 +
drivers/i2c/busses/i2c-qcom-geni.c | 11 +-
drivers/i2c/busses/i2c-riic.c | 46 ++-
drivers/iommu/iommu-sva.c | 33 +-
drivers/net/can/ctucanfd/ctucanfd_base.c | 2 +-
drivers/net/can/usb/etas_es58x/es58x_core.c | 2 +-
drivers/net/can/usb/gs_usb.c | 2 +
.../ethernet/marvell/octeon_ep_vf/octep_vf_main.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/en.h | 13 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 86 +++--
drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 15 +-
drivers/net/hyperv/netvsc_drv.c | 3 +
drivers/net/macvlan.c | 20 +-
drivers/net/phy/motorcomm.c | 4 +-
drivers/net/virtio_net.c | 59 ++--
drivers/nvme/host/apple.c | 1 +
drivers/nvme/host/pci.c | 7 +-
drivers/nvme/target/tcp.c | 12 +
drivers/pci/Kconfig | 6 -
drivers/phy/broadcom/phy-bcm-ns-usb3.c | 2 +-
drivers/phy/freescale/phy-fsl-imx8m-pcie.c | 3 +-
drivers/phy/freescale/phy-fsl-imx8mq-usb.c | 15 +-
drivers/phy/qualcomm/phy-qcom-qusb2.c | 16 +-
drivers/phy/rockchip/phy-rockchip-inno-usb2.c | 14 +-
drivers/phy/st/phy-stm32-usbphyc.c | 2 +-
drivers/phy/tegra/xusb-tegra186.c | 3 +
drivers/phy/ti/phy-da8xx-usb.c | 7 +-
drivers/phy/ti/phy-gmii-sel.c | 2 +-
drivers/scsi/scsi_error.c | 24 ++
drivers/soundwire/bus_type.c | 2 +-
drivers/usb/core/config.c | 5 +
drivers/usb/core/quirks.c | 3 +
drivers/usb/dwc3/core.c | 2 +
drivers/usb/dwc3/core.h | 1 +
drivers/usb/gadget/function/f_fs.c | 53 +--
drivers/usb/gadget/function/f_uvc.c | 4 +
drivers/usb/gadget/function/uvc.h | 3 +-
drivers/usb/gadget/function/uvc_queue.c | 15 +-
drivers/usb/gadget/function/uvc_video.c | 11 +-
drivers/usb/host/ohci-platform.c | 1 +
drivers/usb/host/uhci-platform.c | 1 +
drivers/usb/host/xhci-sideband.c | 1 -
drivers/usb/host/xhci-tegra.c | 2 +-
drivers/usb/host/xhci.c | 15 +-
drivers/usb/serial/ftdi_sio.c | 1 +
drivers/usb/serial/ftdi_sio_ids.h | 2 +
drivers/usb/serial/option.c | 1 +
drivers/usb/typec/tcpm/tcpm.c | 2 +-
fs/btrfs/inode.c | 9 +
fs/btrfs/send.c | 2 +
fs/btrfs/space-info.c | 8 +-
fs/btrfs/transaction.c | 11 +-
fs/ext4/xattr.c | 1 +
fs/gfs2/lops.c | 2 +-
fs/nfs/blocklayout/dev.c | 6 +-
fs/nfs/file.c | 3 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 2 +-
fs/nfs/inode.c | 10 +-
fs/nfs/io.c | 2 +
fs/nfs/localio.c | 2 +
fs/nfs/nfs42proc.c | 29 +-
fs/nfs/nfs4proc.c | 6 +-
fs/nfs/nfstrace.h | 3 +
fs/nfs/pnfs.c | 58 +++-
fs/nfs/pnfs.h | 17 +-
fs/nfs/write.c | 33 ++
fs/xfs/libxfs/xfs_ialloc.c | 11 +-
fs/xfs/xfs_rtalloc.c | 2 +-
include/asm-generic/pgalloc.h | 18 +
include/drm/bridge/dw_hdmi_qp.h | 1 +
include/linux/energy_model.h | 2 +-
include/linux/gfp.h | 2 +-
include/linux/intel-ish-client-if.h | 2 +
include/linux/iommu.h | 4 +
include/linux/kfence.h | 1 +
include/linux/mm.h | 65 +++-
include/linux/nfs_fs.h | 1 +
include/linux/sched/mm.h | 1 +
include/linux/soc/airoha/airoha_offload.h | 4 +-
include/linux/textsearch.h | 1 +
include/linux/usb/quirks.h | 3 +
include/net/ip_tunnels.h | 13 +-
include/scsi/scsi_eh.h | 6 +
include/sound/pcm.h | 2 +-
include/uapi/linux/ext4.h | 2 +-
io_uring/io_uring.c | 8 +-
kernel/sched/core.c | 2 +-
kernel/sched/deadline.c | 3 +-
kernel/sched/syscalls.c | 2 +-
kernel/time/hrtimer.c | 2 +-
kernel/trace/ftrace.c | 29 +-
lib/buildid.c | 32 +-
mm/Kconfig | 13 +-
mm/damon/core.c | 33 +-
mm/damon/sysfs-schemes.c | 10 +-
mm/damon/sysfs.c | 9 +-
mm/kmsan/shadow.c | 2 +-
mm/numa_memblks.c | 2 +
mm/page_alloc.c | 74 +++-
mm/pgtable-generic.c | 39 +++
mm/vmstat.c | 28 +-
mm/zswap.c | 2 +-
net/bluetooth/hci_sync.c | 1 +
net/bridge/br_fdb.c | 28 +-
net/bridge/br_input.c | 4 +-
net/can/j1939/transport.c | 10 +-
net/core/dev.c | 25 +-
net/core/dst.c | 1 +
net/ipv4/esp4_offload.c | 4 +-
net/ipv4/ip_gre.c | 11 +-
net/ipv4/ip_tunnel.c | 5 +-
net/ipv4/route.c | 4 +-
net/ipv6/addrconf.c | 4 +-
net/ipv6/esp6_offload.c | 4 +-
net/ipv6/ip6_tunnel.c | 2 +-
net/ipv6/route.c | 4 +-
net/sched/sch_qfq.c | 6 +-
net/xfrm/xfrm_state.c | 1 +
rust/helpers/bitops.c | 42 +++
security/landlock/audit.c | 2 +-
security/landlock/net.c | 118 ++++---
sound/core/oss/pcm_oss.c | 4 +-
sound/core/pcm_native.c | 9 +-
sound/hda/codecs/realtek/alc269.c | 1 +
sound/hda/codecs/side-codecs/cirrus_scodec_test.c | 3 +-
sound/hda/codecs/side-codecs/tas2781_hda_i2c.c | 13 +-
sound/soc/codecs/tlv320adcx140.c | 8 +-
sound/soc/codecs/wsa881x.c | 9 +
sound/soc/codecs/wsa883x.c | 9 +
sound/soc/codecs/wsa884x.c | 3 +-
sound/soc/sdw_utils/soc_sdw_cs42l43.c | 2 +-
tools/testing/selftests/bpf/progs/strobemeta.h | 6 +-
tools/testing/selftests/kvm/x86/amx_test.c | 118 ++++---
tools/testing/selftests/landlock/common.h | 1 +
tools/testing/selftests/landlock/fs_test.c | 6 +-
tools/testing/selftests/landlock/net_test.c | 16 +-
tools/testing/selftests/mm/gup_longterm.c | 2 +-
tools/testing/selftests/mm/merge.c | 384 +++++++++++++++++++--
tools/testing/selftests/net/toeplitz.c | 4 +-
tools/testing/vsock/util.c | 12 +
215 files changed, 2132 insertions(+), 828 deletions(-)