[PATCH 5.15 000/203] 5.15.199-rc2 review

From: Greg Kroah-Hartman

Date: Thu Feb 05 2026 - 09:47:49 EST


This is the start of the stable review cycle for the 5.15.199 release.
There are 203 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat, 07 Feb 2026 14:34:07 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.199-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 5.15.199-rc2

Edward Adam Davis <eadavis@xxxxxx>
wifi: cfg80211: init wiphy_work before allocating rfkill fails

Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: cfg80211: fully move wiphy work to unbound workqueue

Miri Korenblit <miriam.rachel.korenblit@xxxxxxxxx>
wifi: cfg80211: cancel wiphy_work before freeing wiphy

Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: cfg80211: fix wiphy delayed work queueing

Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: cfg80211: use system_unbound_wq for wiphy work

Nikola Z. Ivanov <zlatistiv@xxxxxxxxx>
team: Move team device type change at the end of team_port_add

Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
pinctrl: meson: mark the GPIO controller as sleeping

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
mptcp: avoid dup SUB_CLOSED events after disconnect

Laveesh Bansal <laveeshb@xxxxxxxxxxxxxxxxx>
writeback: fix 100% CPU usage when dirtytime_expire_interval is 0

Johan Hovold <johan@xxxxxxxxxx>
drm/imx/tve: fix probe device leak

Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver

Chen Ni <nichen@xxxxxxxxxxx>
net/sched: act_ife: convert comma to semicolon

JP Kobryn <inwardvessel@xxxxxxxxx>
btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate()

Haoxiang Li <lihaoxiang@xxxxxxxxxxxxxxxx>
drm/amdkfd: fix a memory leak in device_queue_manager_init()

Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak

Gyeyoung Baek <gye976@xxxxxxxxx>
genirq/irq_sim: Initialize work context pointers properly

Henry Martin <bsdhenrymartin@xxxxxxxxx>
HID: uclogic: Add NULL check in uclogic_input_configured()

Rahul Rameshbabu <sergeantsagara@xxxxxxxxxxxxxx>
HID: uclogic: Correct devm device reference for hidinput input_dev name

Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: mac80211: move TDLS work to wiphy work

Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: mac80211: use wiphy work for sdata->work

Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: cfg80211: add a work abstraction with special semantics

Ying Hsu <yinghsu@xxxxxxxxxxxx>
Bluetooth: Fix hci_suspend_sync crash

Alexis Lothoré <alexis.lothore@xxxxxxxxxxx>
net: stmmac: make sure that ptp_rate is not 0 before configuring EST

Zqiang <qiang.zhang@xxxxxxxxx>
usbnet: Fix using smp_processor_id() in preemptible code warnings

Maninder Singh <maninder1.s@xxxxxxxxxxx>
NFSD: fix race between nfsd registration and exports_proc

Luís Henriques <lhenriques@xxxxxxx>
ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup}

Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
espintcp: fix skb leaks

Waiman Long <longman@xxxxxxxxxx>
blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()

Bartlomiej Kubik <kubik.bartlomiej@xxxxxxxxx>
fs/ntfs3: Initialize allocated memory before use

Namjae Jeon <linkinjeon@xxxxxxxxxx>
ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency

Gaosheng Cui <cuigaosheng1@xxxxxxxxxx>
drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED

Pedro Demarchi Gomes <pedrodemargomes@xxxxxxxxx>
ksm: use range-walk function to jump over holes in scan_get_next_rmap_item

David Hildenbrand <david@xxxxxxxxxx>
mm/pagewalk: add walk_page_range_vma()

Thomas Fourier <fourier.thomas@xxxxxxxxx>
ksmbd: smbd: fix dma_unmap_sg() nents

Alexander Usyskin <alexander.usyskin@xxxxxxxxx>
mei: trace: treat reg parameter as string

Samasth Norway Ananda <samasth.norway.ananda@xxxxxxxxxx>
ALSA: scarlett2: Fix buffer overflow in config retrieval

Nilay Shroff <nilay@xxxxxxxxxxxxx>
nvme: fix PCIe subsystem reset controller state transition

Keith Busch <kbusch@xxxxxxxxxx>
nvme-pci: do not directly handle subsys reset fallout

Daniel Wagner <dwagner@xxxxxxx>
nvme-fc: rename free_ctrl callback to match name pattern

Brian Foster <bfoster@xxxxxxxxxx>
xfs: set max_agbno to allow sparse alloc of last full inode chunk

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: stm32: dmamux: fix device leak on route allocation

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: stm32: dmamux: fix OF node leak on route allocation failure

Thorsten Blum <thorsten.blum@xxxxxxxxx>
w1: therm: Fix off-by-one buffer overflow in alarms_store

Yang Guang <yang.guang5@xxxxxxxxxx>
w1: w1_therm: use swap() to make code cleaner

Geraldo Nascimento <geraldogabriel@xxxxxxxxx>
arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s

Abdun Nihaal <nihaal@xxxxxxxxxxxxxx>
scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()

Johan Hovold <johan@xxxxxxxxxx>
iio: adc: exynos_adc: fix OF populate on driver rebind

Rob Herring (Arm) <robh@xxxxxxxxxx>
of: platform: Use default match table for /firmware

Ian Abbott <abbotti@xxxxxxxxx>
comedi: Fix getting range information for subdevices 16 to 255

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().

Sharath Chandra Vurukala <quic_sharathv@xxxxxxxxxxx>
net: Add locking to protect skb->dev access in ip_output

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
mptcp: only reset subflow errors when propagated

Thomas Fourier <fourier.thomas@xxxxxxxxx>
scsi: qla2xxx: edif: Fix dma_free_coherent() size

Haoxiang Li <lihaoxiang@xxxxxxxxxxxxxxxx>
scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()

Fabio Estevam <festevam@xxxxxxxxx>
ASoC: fsl: imx-card: Do not force slot width to sample width

Sai Sree Kartheek Adivi <s-adivi@xxxxxx>
dma/pool: distinguish between missing and exhausted atomic pools

Denis Sergeev <denserg.edu@xxxxxxxxx>
gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler

Kery Qi <qikeyu2017@xxxxxxxxx>
scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()

Martin Kaiser <martin@xxxxxxxxx>
net: bridge: fix static key check

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
nfc: nci: Fix race between rfkill and nci_unregister_device().

Gal Pressman <gal@xxxxxxxxxx>
net/mlx5e: Account for netdev stats in ndo_get_stats64

Yafang Shao <laoar.shao@xxxxxxxxx>
net/mlx5e: Report rx_discards_phy via rx_dropped

Gal Pressman <gal@xxxxxxxxxx>
net/mlx5e: Expose rx_oversize_pkts_buffer counter

Saeed Mahameed <saeedm@xxxxxxxxxx>
net/mlx5: Add HW definitions of vport debug counters

Jesse Brandeburg <jbrandeburg@xxxxxxxxxxxxxx>
ice: stop counting UDP csum mismatch as rx_errors

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().

Kery Qi <qikeyu2017@xxxxxxxxx>
rocker: fix memory leak in rocker_world_port_post_fini()

Fernando Fernandez Mancera <fmancera@xxxxxxx>
ipv6: use the right ifindex when replying to icmpv6 from localhost

Zilin Guan <zilin@xxxxxxxxxx>
net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()

Zilin Guan <zilin@xxxxxxxxxx>
net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()

Jia-Hong Su <s11242586@xxxxxxxxx>
Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work

Paul Chaignon <paul.chaignon@xxxxxxxxx>
bpf: Reject narrower access to pointer ctx fields

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: Do not let BPF test infra emit invalid GSO types to stack

Matthew Wilcox (Oracle) <willy@xxxxxxxxxxxxx>
migrate: correct lock ordering for hugetlb file folios

Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak

Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak

Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak

Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak

Arnd Bergmann <arnd@xxxxxxxx>
irqchip/gic-v3-its: Avoid truncating memory addresses

Fernand Sieber <sieberf@xxxxxxxxxx>
perf/x86/intel: Do not enable BTS for guests

Jeongjun Park <aha310510@xxxxxxxxx>
netrom: fix double-free in nr_route_frame()

Chenghai Huang <huangchenghai2@xxxxxxxxxx>
uacce: ensure safe queue release with state management

Yang Shen <shenyang39@xxxxxxxxxx>
uacce: implement mremap in uacce_vm_ops to return -EPERM

Wenkai Lin <linwenkai6@xxxxxxxxxxxxx>
uacce: fix cdev handling in the cleanup path

Johan Hovold <johan@xxxxxxxxxx>
intel_th: fix device leak on output open()

Johan Hovold <johan@xxxxxxxxxx>
slimbus: core: fix device reference leak on report present

Johan Hovold <johan@xxxxxxxxxx>
slimbus: core: fix runtime PM imbalance on report present

Thomas Fourier <fourier.thomas@xxxxxxxxx>
octeontx2: Fix otx2_dma_map_page() error return code

Zhaoyang Huang <zhaoyang.huang@xxxxxxxxxx>
arm64: Set __nocfi on swsusp_arch_resume()

Marek Vasut <marex@xxxxxxxxxxxx>
wifi: rsi: Fix memory corruption due to not set vif driver data size

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize()

Thomas Fourier <fourier.thomas@xxxxxxxxx>
wifi: ath10k: fix dma_free_coherent() pointer

Matthew Schwartz <matthew.schwartz@xxxxxxxxx>
mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function

Berk Cem Goksel <berkcgoksel@xxxxxxxxx>
ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()

Takashi Iwai <tiwai@xxxxxxx>
ALSA: ctxfi: Fix potential OOB access in audio mixer handling

Kübrich, Andreas <andreas.kuebrich@xxxxxxxxxxxxxxxxxx>
iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl

Pei Xiao <xiaopei01@xxxxxxxxxx>
iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver

Tomas Melin <tomas.melin@xxxxxxxxxxx>
iio: adc: ad9467: fix ad9434 vref mask

Weigang He <geoffreyhe2@xxxxxxxxx>
of: fix reference count leak in of_alias_scan()

Hans de Goede <johannes.goede@xxxxxxxxxxxxxxxx>
leds: led-class: Only Add LED to leds_list when it is fully ready

Cedric Xing <cedric.xing@xxxxxxxxx>
x86: make page fault handling disable interrupts properly

Eric Dumazet <edumazet@xxxxxxxxxx>
net/sched: act_ife: avoid possible NULL deref

Ratheesh Kannoth <rkannoth@xxxxxxxxxxx>
octeontx2-af: Fix error handling

Eric Dumazet <edumazet@xxxxxxxxxx>
bonding: provide a net pointer to __skb_flow_dissect()

Andrey Vatoropin <a.vatoropin@xxxxxxx>
be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list

Timur Kristóf <timur.kristof@xxxxxxxxx>
drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2)

Timur Kristóf <timur.kristof@xxxxxxxxx>
drm/amd/pm: Don't clear SI SMC table when setting power limit

Laurent Vivier <lvivier@xxxxxxxxxx>
usbnet: limit max_mtu based on device's hard_mtu

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv6: annotate data-race in ndisc_router_discovery()

Eric Dumazet <edumazet@xxxxxxxxxx>
mISDN: annotate data-race around dev->work

Jijie Shao <shaojijie@xxxxxxxxxx>
net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue

Jijie Shao <shaojijie@xxxxxxxxxx>
net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M

Arun Raghavan <arunr@xxxxxxxxxxxxxxxxx>
ALSA: usb: Increase volume range that triggers a warning

Cheng-Yu Lee <cylee12@xxxxxxxxxxx>
regmap: Fix race condition in hwspinlock irqsave routine

Pavel Zhigulin <Pavel.Zhigulin@xxxxxxxxxxxxx>
iio: adc: ad7280a: handle spi_setup() errors in probe()

Jonathan Cameron <Jonathan.Cameron@xxxxxxxxxx>
staging:iio:adc:ad7280a: Register define cleanup.

Francesco Lavra <flavra@xxxxxxxxxxxx>
iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection

Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
x86/kfence: avoid writing L1TF-vulnerable PTEs

Long Li <longli@xxxxxxxxxxxxx>
scsi: storvsc: Process unsupported MODE_SENSE_10

feng <alec.jiang@xxxxxxxxx>
Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA

gongqi <550230171hxy@xxxxxxxxx>
Input: i8042 - add quirks for MECHREVO Wujie 15X Pro

Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxx>
Revert "nfc/nci: Add the inconsistency check between the input data length and count"

Haoxiang Li <lihaoxiang@xxxxxxxxxxxxxxxx>
w1: fix redundant counter decrement in w1_attach_slave_device()

Ian Abbott <abbotti@xxxxxxxxx>
comedi: dmm32at: serialize use of paged registers

Taeyang Lee <0wn@xxxxxxxxx>
crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec

Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag

Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
net/sched: Enforce that teql can only be used as root qdisc

Dmitry Skorodumov <dskr99@xxxxxxxxx>
ipvlan: Make the addrs_lock be per port

Eric Dumazet <edumazet@xxxxxxxxxx>
l2tp: avoid one data-race in l2tp_tunnel_del_work()

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
fou: Don't allow 0 for FOU_ATTR_IPPROTO.

Jakub Kicinski <kuba@xxxxxxxxxx>
net: fou: use policy and operation tables generated from the spec

Jakub Kicinski <kuba@xxxxxxxxxx>
net: fou: rename the source for linking

Jakub Kicinski <kuba@xxxxxxxxxx>
netlink: add a proto specification for FOU

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
gue: Fix skb memleak with inner IP protocol 0.

Raju Rangoju <Raju.Rangoju@xxxxxxx>
amd-xgbe: avoid misleading per-packet error log

Xin Long <lucien.xin@xxxxxxxxx>
sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT

Ricardo B. Marlière <rbm@xxxxxxxx>
selftests: net: fib-onlink-tests: Convert to use namespaces by default

Hangbin Liu <liuhangbin@xxxxxxxxx>
selftests/net: convert fib-onlink-tests.sh to run it in unique namespace

Eric Dumazet <edumazet@xxxxxxxxxx>
bonding: limit BOND_MODE_8023AD to Ethernet devices

Ethan Nelson-Moore <enelsonmoore@xxxxxxxxx>
net: usb: dm9601: remove broken SR9700 support

Wojtek Wasko <wwasko@xxxxxxxxxx>
testptp: Add option to open PHC in readonly mode

Mahesh Bandewar <maheshb@xxxxxxxxxx>
selftest/ptp: update ptp selftest to exercise the gettimex options

Xabier Marquiegui <reibax@xxxxxxxxx>
ptp: add testptp mask test

Alex Maftei <alex.maftei@xxxxxxx>
selftests/ptp: Add -X option for testing PTP_SYS_OFFSET_PRECISE

Alex Maftei <alex.maftei@xxxxxxx>
selftests/ptp: Add -x option for testing PTP_SYS_OFFSET_EXTENDED

Rahul Rameshbabu <rrameshbabu@xxxxxxxxxx>
testptp: Add support for testing ptp_clock_info .adjphase callback

Maciek Machnikowski <maciek@xxxxxxxxxxxxxxxx>
testptp: add option to shift clock by nanoseconds

Wojtek Wasko <wwasko@xxxxxxxxxx>
ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE.

Wojtek Wasko <wwasko@xxxxxxxxxx>
posix-clock: Store file pointer in struct posix_clock_context

Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx>
Fix memory leak in posix_clock_open()

Xabier Marquiegui <reibax@xxxxxxxxx>
posix-clock: introduce posix_clock_context concept

Robbie Ko <robbieko@xxxxxxxxxxxx>
btrfs: fix deadlock in wait_current_trans() due to ignored transaction type

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: ti: k3-udma: fix device leak on udma lookup

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation

Biju Das <biju.das.jz@xxxxxxxxxxxxxx>
dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()

Miaoqian Lin <linmq006@xxxxxxxxx>
dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: lpc18xx-dmamux: fix device leak on route allocation

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: idxd: fix device leaks on compat bind and unbind

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: bcm-sba-raid: fix device leak on probe

Johan Hovold <johan@xxxxxxxxxx>
dmaengine: at_hdmac: fix device leak on of_dma_xlate()

Haoxiang Li <lihaoxiang@xxxxxxxxxxxxxxxx>
drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()

Marek Vasut <marex@xxxxxxxxxxxx>
drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel

Lyude Paul <lyude@xxxxxxxxxx>
drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare

Aboorva Devarajan <aboorvad@xxxxxxxxxxxxx>
mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free

Xiaochen Shen <shenxiaochen@xxxxxxxxxxxxxx>
x86/resctrl: Fix memory bandwidth counter width for Hygon

Xiaochen Shen <shenxiaochen@xxxxxxxxxxxxxx>
x86/resctrl: Add missing resctrl initialization for Hygon

Haoxiang Li <lihaoxiang@xxxxxxxxxxxxxxxx>
EDAC/i3200: Fix a resource leak in i3200_probe1()

Haoxiang Li <lihaoxiang@xxxxxxxxxxxxxxxx>
EDAC/x38: Fix a resource leak in x38_probe1()

Thomas Weißschuh <thomas.weissschuh@xxxxxxxxxxxxx>
hrtimer: Fix softirq base check in update_needs_ipi()

Yang Erkun <yangerkun@xxxxxxxxxx>
ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref

Ilikara Zheng <ilikara@xxxxxxx>
nvme-pci: disable secondary temp for Wodposit WPBSNM8

Ethan Nelson-Moore <enelsonmoore@xxxxxxxxx>
USB: serial: ftdi_sio: add support for PICAXE AXE027 cable

Ulrich Mohr <u.mohr@xxxxxxxxxxxxxxxx>
USB: serial: option: add Telit LE910 MBIM composition

Huacai Chen <chenhuacai@xxxxxxxxxx>
USB: OHCI/UHCI: Add soft dependencies on ehci_platform

Thinh Nguyen <Thinh.Nguyen@xxxxxxxxxxxx>
usb: dwc3: Check for USB4 IP_NAME

Wayne Chang <waynec@xxxxxxxxxx>
phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7

Luca Ceresoli <luca.ceresoli@xxxxxxxxxxx>
phy: rockchip: inno-usb2: fix communication disruption in gadget mode

Louis Chauvet <louis.chauvet@xxxxxxxxxxx>
phy: rockchip: inno-usb2: fix disconnection in gadget mode

Dan Williams <dan.j.williams@xxxxxxxxx>
x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts

Jaroslav Kysela <perex@xxxxxxxx>
ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer

Benjamin Tissoires <bentiss@xxxxxxxxxx>
HID: usbhid: paper over wrong bNumDescriptor field

Haotian Zhang <vulab@xxxxxxxxxxx>
dmaengine: omap-dma: fix dma_pool resource leak in error paths

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxxxxx>
phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
phy: stm32-usphyc: Fix off by one in probe()

Suraj Gupta <suraj.gupta2@xxxxxxx>
dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing

Sheetal <sheetal@xxxxxxxxxx>
dmaengine: tegra-adma: Fix use-after-free

Bagas Sanjaya <bagasdotme@xxxxxxxxx>
mm, kfence: describe @slab parameter in __kfence_obj_info()

Bagas Sanjaya <bagasdotme@xxxxxxxxx>
textsearch: describe @list member in ts_ops search

Emil Svendsen <emas@xxxxxxxxxxxxxxx>
ASoC: tlv320adcx140: fix word length

Eric Dumazet <edumazet@xxxxxxxxxx>
net/sched: sch_qfq: do not free existing class in qfq_change_class()

Gal Pressman <gal@xxxxxxxxxx>
selftests: drv-net: fix RPS mask handling for high CPU numbers

Saeed Mahameed <saeedm@xxxxxxxxxx>
net/mlx5e: Restore destroying state bit after profile cleanup

Stefano Garzarella <sgarzare@xxxxxxxxxx>
vsock/test: add a final full barrier after run all tests

Eric Dumazet <edumazet@xxxxxxxxxx>
ipv4: ip_gre: make ipgre_header() robust

Eric Dumazet <edumazet@xxxxxxxxxx>
macvlan: fix possible UAF in macvlan_forward_source()

Eric Dumazet <edumazet@xxxxxxxxxx>
net: update netdev_lock_{type,name}

Eric Dumazet <edumazet@xxxxxxxxxx>
ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()

Shivam Kumar <kumar.shivam43666@xxxxxxxxx>
nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec

Maurizio Lombardi <mlombard@xxxxxxxxxx>
nvmet-tcp: remove boilerplate code

Szymon Wilczek <swilczek.lx@xxxxxxxxx>
can: etas_es58x: allow partial RX URB allocation to succeed

Zilin Guan <zilin@xxxxxxxxxx>
pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()


-------------

Diffstat:

Documentation/netlink/specs/fou.yaml | 130 ++++++++++
Makefile | 4 +-
arch/arm64/boot/dts/rockchip/rk3399-nanopi-r4s.dts | 1 -
arch/arm64/kernel/hibernate.c | 2 +-
arch/x86/events/perf_event.h | 13 +-
arch/x86/include/asm/kfence.h | 29 ++-
arch/x86/kernel/cpu/resctrl/core.c | 21 +-
arch/x86/kernel/cpu/resctrl/internal.h | 3 +
arch/x86/mm/fault.c | 15 +-
arch/x86/mm/kaslr.c | 10 +-
block/blk-cgroup.c | 4 +
crypto/authencesn.c | 6 +
drivers/base/regmap/regmap.c | 4 +-
drivers/bluetooth/hci_ldisc.c | 4 +-
drivers/comedi/comedi.h | 2 +-
drivers/comedi/comedi_fops.c | 2 +-
drivers/comedi/drivers/dmm32at.c | 32 ++-
drivers/comedi/range.c | 2 +-
drivers/dma/at_hdmac.c | 9 +-
drivers/dma/bcm-sba-raid.c | 6 +-
drivers/dma/idxd/compat.c | 23 +-
drivers/dma/lpc18xx-dmamux.c | 19 +-
drivers/dma/qcom/gpi.c | 6 +-
drivers/dma/sh/rz-dmac.c | 5 +
drivers/dma/stm32-dmamux.c | 22 +-
drivers/dma/tegra210-adma.c | 10 +-
drivers/dma/ti/dma-crossbar.c | 18 +-
drivers/dma/ti/k3-udma-private.c | 2 +-
drivers/dma/ti/omap-dma.c | 4 +
drivers/dma/xilinx/xilinx_dma.c | 7 +-
drivers/edac/i3200_edac.c | 11 +-
drivers/edac/x38_edac.c | 9 +-
drivers/gpio/gpiolib-acpi.c | 2 +-
.../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 18 +-
drivers/gpu/drm/amd/pm/powerplay/si_dpm.c | 23 +-
drivers/gpu/drm/imx/imx-tve.c | 13 +
drivers/gpu/drm/nouveau/dispnv50/curs507a.c | 1 +
drivers/gpu/drm/panel/panel-simple.c | 1 +
drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 4 +-
drivers/hid/hid-uclogic-core.c | 12 +-
drivers/hid/usbhid/hid-core.c | 17 +-
drivers/hwtracing/intel_th/core.c | 19 +-
drivers/iio/adc/ad9467.c | 2 +-
drivers/iio/adc/at91-sama5d2_adc.c | 1 +
drivers/iio/adc/exynos_adc.c | 13 +-
drivers/iio/dac/ad5686.c | 6 +
drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 15 +-
drivers/input/serio/i8042-acpipnpio.h | 18 ++
drivers/irqchip/irq-gic-v3-its.c | 8 +-
drivers/isdn/mISDN/timerdev.c | 13 +-
drivers/leds/led-class.c | 10 +-
drivers/misc/mei/mei-trace.h | 18 +-
drivers/misc/uacce/uacce.c | 42 ++-
drivers/mmc/host/rtsx_pci_sdmmc.c | 41 +++
drivers/net/bonding/bond_main.c | 11 +-
drivers/net/can/usb/ems_usb.c | 8 +-
drivers/net/can/usb/esd_usb2.c | 9 +-
drivers/net/can/usb/etas_es58x/es58x_core.c | 2 +-
drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 9 +-
drivers/net/can/usb/mcba_usb.c | 8 +-
drivers/net/can/usb/usb_8dev.c | 8 +-
drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 5 +-
drivers/net/ethernet/emulex/benet/be_cmds.c | 3 +-
.../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.h | 2 +-
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 2 +-
drivers/net/ethernet/intel/ice/ice_main.c | 1 -
drivers/net/ethernet/marvell/mvpp2/mvpp2_cls.c | 2 +-
drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 86 +++++--
.../ethernet/marvell/octeontx2/nic/otx2_common.h | 7 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 25 +-
drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 21 +-
drivers/net/ethernet/mellanox/mlx5/core/en_stats.h | 4 +
.../mellanox/mlx5/core/esw/acl/ingress_lgcy.c | 2 +-
drivers/net/ethernet/rocker/rocker_main.c | 5 +-
drivers/net/ethernet/stmicro/stmmac/dwmac5.c | 5 +
.../net/ethernet/stmicro/stmmac/dwxgmac2_core.c | 5 +
drivers/net/ipvlan/ipvlan.h | 2 +-
drivers/net/ipvlan/ipvlan_core.c | 16 +-
drivers/net/ipvlan/ipvlan_main.c | 49 ++--
drivers/net/macvlan.c | 20 +-
drivers/net/team/team.c | 23 +-
drivers/net/usb/dm9601.c | 4 -
drivers/net/usb/usbnet.c | 11 +-
drivers/net/wireless/ath/ath10k/ce.c | 16 +-
.../net/wireless/marvell/mwifiex/11n_rxreorder.c | 6 +-
drivers/net/wireless/rsi/rsi_91x_mac80211.c | 1 +
drivers/nfc/virtual_ncidev.c | 4 -
drivers/nvme/host/fabrics.c | 15 ++
drivers/nvme/host/fabrics.h | 1 +
drivers/nvme/host/fc.c | 5 +-
drivers/nvme/host/nvme.h | 14 +-
drivers/nvme/host/pci.c | 41 +++
drivers/nvme/host/rdma.c | 1 +
drivers/nvme/host/tcp.c | 1 +
drivers/nvme/target/tcp.c | 28 +-
drivers/of/base.c | 8 +-
drivers/of/platform.c | 2 +-
drivers/pci/Kconfig | 6 -
drivers/phy/broadcom/phy-bcm-ns-usb3.c | 2 +-
drivers/phy/rockchip/phy-rockchip-inno-usb2.c | 12 +-
drivers/phy/st/phy-stm32-usbphyc.c | 2 +-
drivers/phy/tegra/xusb-tegra186.c | 3 +
drivers/pinctrl/meson/pinctrl-meson.c | 2 +-
drivers/pinctrl/qcom/pinctrl-lpass-lpi.c | 17 ++
drivers/ptp/ptp_chardev.c | 37 ++-
drivers/ptp/ptp_private.h | 16 +-
drivers/scsi/be2iscsi/be_mgmt.c | 1 +
drivers/scsi/qla2xxx/qla_os.c | 2 +-
drivers/scsi/storvsc_drv.c | 3 +-
drivers/slimbus/core.c | 19 +-
drivers/staging/iio/adc/ad7280a.c | 283 +++++++++++----------
drivers/target/sbp/sbp_target.c | 4 +-
drivers/usb/dwc3/core.c | 2 +
drivers/usb/dwc3/core.h | 1 +
drivers/usb/host/ohci-platform.c | 1 +
drivers/usb/host/uhci-platform.c | 1 +
drivers/usb/serial/ftdi_sio.c | 1 +
drivers/usb/serial/ftdi_sio_ids.h | 2 +
drivers/usb/serial/option.c | 1 +
drivers/w1/slaves/w1_therm.c | 67 ++---
drivers/w1/w1.c | 2 -
drivers/xen/xen-scsiback.c | 1 +
fs/btrfs/relocation.c | 13 +
fs/btrfs/transaction.c | 11 +-
fs/ext4/ext4.h | 38 +--
fs/ext4/xattr.c | 1 +
fs/fs-writeback.c | 14 +-
fs/ksmbd/mgmt/tree_connect.c | 18 +-
fs/ksmbd/mgmt/tree_connect.h | 1 -
fs/ksmbd/smb2pdu.c | 3 -
fs/ksmbd/transport_rdma.c | 15 +-
fs/nfs/flexfilelayout/flexfilelayoutdev.c | 2 +-
fs/nfsd/nfsctl.c | 17 +-
fs/ntfs3/inode.c | 7 +-
fs/xfs/libxfs/xfs_ialloc.c | 11 +-
include/drm/ttm/ttm_tt.h | 2 +-
include/linux/kfence.h | 1 +
include/linux/mlx5/mlx5_ifc.h | 27 +-
include/linux/nvme.h | 3 +
include/linux/pagewalk.h | 3 +
include/linux/posix-clock.h | 39 ++-
include/linux/textsearch.h | 1 +
include/net/cfg80211.h | 95 ++++++-
include/net/dst.h | 12 +
include/net/nfc/nfc.h | 2 +
include/sound/pcm.h | 2 +-
kernel/bpf/cgroup.c | 8 +-
kernel/dma/pool.c | 7 +-
kernel/irq/irq_sim.c | 2 +-
kernel/time/hrtimer.c | 2 +-
kernel/time/posix-clock.c | 53 ++--
mm/Kconfig | 10 +-
mm/ksm.c | 115 ++++++++-
mm/migrate.c | 14 +-
mm/page_alloc.c | 10 +-
mm/pagewalk.c | 20 ++
net/bluetooth/hci_core.c | 4 +
net/bpf/test_run.c | 5 +
net/bridge/br_input.c | 2 +-
net/can/j1939/transport.c | 10 +-
net/core/dev.c | 25 +-
net/core/filter.c | 25 +-
net/ipv4/Makefile | 1 +
net/ipv4/esp4.c | 4 +-
net/ipv4/{fou.c => fou_core.c} | 50 +---
net/ipv4/fou_nl.c | 48 ++++
net/ipv4/fou_nl.h | 25 ++
net/ipv4/ip_gre.c | 11 +-
net/ipv4/ip_output.c | 16 +-
net/ipv6/esp6.c | 4 +-
net/ipv6/icmp.c | 4 +-
net/ipv6/ip6_tunnel.c | 2 +-
net/ipv6/ndisc.c | 4 +-
net/l2tp/l2tp_core.c | 4 +-
net/mac80211/ibss.c | 8 +-
net/mac80211/ieee80211_i.h | 6 +-
net/mac80211/iface.c | 10 +-
net/mac80211/mesh.c | 10 +-
net/mac80211/mesh_hwmp.c | 6 +-
net/mac80211/mlme.c | 13 +-
net/mac80211/ocb.c | 6 +-
net/mac80211/rx.c | 2 +-
net/mac80211/scan.c | 2 +-
net/mac80211/status.c | 5 +-
net/mac80211/tdls.c | 11 +-
net/mac80211/util.c | 2 +-
net/mptcp/protocol.c | 13 +-
net/netrom/nr_route.c | 13 +-
net/nfc/core.c | 27 +-
net/nfc/llcp_commands.c | 17 +-
net/nfc/llcp_core.c | 4 +-
net/nfc/nci/core.c | 4 +-
net/sched/act_ife.c | 12 +-
net/sched/sch_qfq.c | 8 +-
net/sched/sch_teql.c | 5 +
net/sctp/sm_statefuns.c | 10 +-
net/tls/tls_device.c | 18 +-
net/wireless/core.c | 131 +++++++++-
net/wireless/core.h | 7 +
net/wireless/sysfs.c | 8 +-
net/xfrm/espintcp.c | 4 +-
sound/core/oss/pcm_oss.c | 4 +-
sound/core/pcm_native.c | 9 +-
sound/pci/ctxfi/ctamixer.c | 2 +
sound/soc/codecs/tlv320adcx140.c | 4 +-
sound/soc/fsl/imx-card.c | 1 -
sound/usb/mixer.c | 22 +-
sound/usb/mixer_scarlett_gen2.c | 7 +-
tools/testing/selftests/net/fib-onlink-tests.sh | 76 +++---
tools/testing/selftests/net/toeplitz.c | 4 +-
tools/testing/selftests/ptp/testptp.c | 210 +++++++++++++--
tools/testing/vsock/util.c | 12 +
212 files changed, 2370 insertions(+), 884 deletions(-)