[PATCH 6.12 000/261] 6.12.94-rc1 review
From: Greg Kroah-Hartman
Date: Tue Jun 16 2026 - 11:04:52 EST
This is the start of the stable review cycle for the 6.12.94 release.
There are 261 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 18 Jun 2026 14:49:57 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.94-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.12.94-rc1
Petr Machata <petrm@xxxxxxxxxx>
Revert "selftest/ptp: update ptp selftest to exercise the gettimex options"
Tao Cui <cuitao@xxxxxxxxxx>
mptcp: pm: fix extra_subflows underflow on userspace PM subflow creation
Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: secure_seq: add back ports to TS offset
Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: use EXPORT_IPV6_MOD[_GPL]()
Eric Dumazet <edumazet@xxxxxxxxxx>
net: introduce EXPORT_IPV6_MOD() and EXPORT_IPV6_MOD_GPL()
Will Deacon <will@xxxxxxxxxx>
arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU
Shanker Donthineni <sdonthineni@xxxxxxxxxx>
arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU
Mark Rutland <mark.rutland@xxxxxxx>
arm64: errata: Mitigate TLBI errata on various Arm CPUs
Mark Rutland <mark.rutland@xxxxxxx>
arm64: cputype: Add C1-Premium definitions
Mark Rutland <mark.rutland@xxxxxxx>
arm64: cputype: Add C1-Ultra definitions
Shanker Donthineni <sdonthineni@xxxxxxxxxx>
arm64: cputype: Add NVIDIA Olympus definitions
Damien Le Moal <dlemoal@xxxxxxxxxx>
block: fix handling of dead zone write plugs
Stefano Garzarella <sgarzare@xxxxxxxxxx>
vsock/virtio: fix skb overhead accounting to preserve full buf_alloc
Eric Dumazet <edumazet@xxxxxxxxxx>
vsock/virtio: fix potential unbounded skb queue
Julian Anastasov <ja@xxxxxx>
ipvs: skip ipv6 extension headers for csum checks
Corey Minyard <corey@xxxxxxxxxxx>
ipmi:ssif: NULL thread on error
Corey Minyard <corey@xxxxxxxxxxx>
ipmi:ssif: Remove unnecessary indention
Paolo Abeni <pabeni@xxxxxxxxxx>
mptcp: fix missing wakeups in edge scenarios
Lorenzo Stoakes <ljs@xxxxxxxxxx>
mm/hugetlb: avoid false positive lockdep assertion
Jason Gunthorpe <jgg@xxxxxxxx>
RDMA/umem: Fix truncation for block sizes >= 4G
Leon Romanovsky <leon@xxxxxxxxxx>
RDMA: Move DMA block iterator logic into dedicated files
Randy Dunlap <rdunlap@xxxxxxxxxxxxx>
RDMA/umem: fix kernel-doc warnings
Jason Gunthorpe <jgg@xxxxxxxx>
RDMA: During rereg_mr ensure that REREG_ACCESS is compatible
Jacob Moroni <jmoroni@xxxxxxxxxx>
RDMA/umem: Add helpers for umem dmabuf revoke lock
Jacob Moroni <jmoroni@xxxxxxxxxx>
RDMA/umem: Move umem dmabuf revoke logic into helper function
Jacob Moroni <jmoroni@xxxxxxxxxx>
RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper
Wupeng Ma <mawupeng1@xxxxxxxxxx>
mm/memory-failure: fix hugetlb_lock AA deadlock in get_huge_page_for_hwpoison
Davide Ornaghi <d.ornaghi97@xxxxxxxxx>
netfilter: nft_fib: fix stale stack leak via the OIFNAME register
Tejun Heo <tj@xxxxxxxxxx>
sched_ext: Don't warn on NULL cgrp_moving_from in scx_cgroup_move_task()
Anton Leontev <leontyevantony@xxxxxxxxx>
hv_netvsc: use kmap_local_page in netvsc_copy_to_send_buf
Jassi Brar <jassisinghbrar@xxxxxxxxx>
mailbox: Fix NULL message support in mbox_send_message()
Johan Hovold <johan@xxxxxxxxxx>
driver core: reject devices with unregistered buses
Mingyu Wang <25181214217@xxxxxxxxxxxxxxxxx>
fs/fcntl: fix SOFTIRQ-unsafe lock order in fasync signaling
Harry Wentland <harry.wentland@xxxxxxx>
drm/amd/display: Use krealloc_array() in dal_vector_reserve()
Harry Wentland <harry.wentland@xxxxxxx>
drm/amd/display: Fix NULL deref and buffer over-read in SDP debugfs
Leorize <leorize+oss@xxxxxxxxxxx>
drm/amd/display: add missing CSC entries for BT.2020 for DCE IPs
Harry Wentland <harry.wentland@xxxxxxx>
drm/amd/display: Clamp VBIOS HDMI retimer register count to array size
Harry Wentland <harry.wentland@xxxxxxx>
drm/amd/display: Clamp HDMI HDCP2 rx_id_list read to buffer size
Harry Wentland <harry.wentland@xxxxxxx>
drm/amd/display: Bound VBIOS record-chain walk loops
Priya Hosur <Priya.Hosur@xxxxxxx>
drm/amd/pm: smu_v14_0_0: use SoftMin for gfxclk in set_soft_freq_limited_range
Yang Wang <kevinyang.wang@xxxxxxx>
drm/amd/pm: mark metrics.energy_accumulator is invalid for smu 14.0.2
Yang Wang <kevinyang.wang@xxxxxxx>
drm/amd/pm: fix smu13 power limit default/cap calculation
Christian König <christian.koenig@xxxxxxx>
drm/amdgpu: restart the CS if some parts of the VM are still invalidated
Maíra Canal <mcanal@xxxxxxxxxx>
drm/v3d: Fix vaddr leak when indirect CSD has zeroed workgroups
Tangudu Tilak Tirumalesh <tilak.tirumalesh.tangudu@xxxxxxxxx>
drm/xe: Clear pending_disable before signaling suspend fence
Andrew Martin <andrew.martin@xxxxxxx>
drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11
Muhammad Bilal <meatuni001@xxxxxxxxx>
drm/amdkfd: fix NULL dereference in get_queue_ids()
Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxxxx>
slimbus: qcom-ngd-ctrl: Avoid ABBA on tx_lock/ctrl->lock
Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxxxx>
slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD
Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxxxx>
slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership
Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxxxx>
slimbus: qcom-ngd-ctrl: Initialize controller resources in controller
Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxxxx>
slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxxxx>
slimbus: qcom-ngd-ctrl: Fix probe error path ordering
Bjorn Andersson <bjorn.andersson@xxxxxxxxxxxxxxxx>
slimbus: qcom-ngd-ctrl: Fix up platform_driver registration
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
slimbus: qcom-ngd-ctrl: fix OF node refcount
Michael Bommarito <michael.bommarito@xxxxxxxxx>
thunderbolt: Limit XDomain response copy to actual frame size
Michael Bommarito <michael.bommarito@xxxxxxxxx>
thunderbolt: Validate XDomain request packet size before type cast
Michael Bommarito <michael.bommarito@xxxxxxxxx>
thunderbolt: Clamp XDomain response data copy to allocation size
Michael Bommarito <michael.bommarito@xxxxxxxxx>
thunderbolt: Bound root directory content to block size
Michael Bommarito <michael.bommarito@xxxxxxxxx>
thunderbolt: Reject zero-length property entries in validator
Wyatt Feng <bronzed_45_vested@xxxxxxxxxx>
sctp: stream: fully roll back denied add-stream state
Zhao Zhang <zzhan461@xxxxxxx>
sctp: diag: reject stale associations in dump_one path
Justin Lai <justinlai0215@xxxxxxxxxxx>
rtase: Reset TX subqueue when clearing TX ring
Justin Lai <justinlai0215@xxxxxxxxxxx>
rtase: Avoid sleeping in get_stats64()
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
pmdomain: imx: fix OF node refcount
Jisheng Zhang <jszhang@xxxxxxxxxx>
mmc: sdhci: add signal voltage switch in sdhci_resume_host
Lad Prabhakar <prabhakar.mahadev-lad.rj@xxxxxxxxxxxxxx>
mmc: renesas_sdhi: Add OF entry for RZ/G2H SoC
Inochi Amaoto <inochiama@xxxxxxxxx>
mmc: litex_mmc: Set mandatory idle clocks before CMD0
Heiko Stuebner <heiko@xxxxxxxxx>
mmc: dw_mmc-rockchip: Add missing private data for very old controllers
Kamal Dasu <kamal.dasu@xxxxxxxxxxxx>
mmc: core: Fix host controller programming for fixed driver type
David Carlier <devnexen@xxxxxxxxx>
mm/hugetlb: restore reservation on error in hugetlb folio copy paths
Christian A. Ehrhardt <lk@xxxxxxx>
io_uring/wait: fix min_timeout behavior
Jens Axboe <axboe@xxxxxxxxx>
io_uring/kbuf: don't truncate end buffer for bundles
Dawei Feng <dawei.feng@xxxxxxxxxx>
octeontx2-af: fix memory leak in rvu_setup_hw_resources()
Andre Heider <a.heider@xxxxxxxxx>
nvmem: layouts: onie-tlv: fix hang on unknown types
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
nvmem: core: fix use-after-free bugs in error paths
Yuqi Xu <xuyq21@xxxxxxxxxx>
net: rds: clear i_sends on setup unwind
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
net: mv643xx: fix OF node refcount
ZhaoJinming <zhaojinming@xxxxxxxxxxxxx>
net: bonding: fix NULL pointer dereference in bond_do_ioctl()
Nikolay Kuratov <kniv@xxxxxxxxxxxxxx>
net/mlx5: Reorder completion before putting command entry in cmd_work_handler
Mukesh Ojha <mukesh.ojha@xxxxxxxxxxxxxxxx>
misc: fastrpc: Fix NULL pointer dereference in rpmsg callback
Junrui Luo <moonafterrain@xxxxxxxxxxx>
misc: fastrpc: fix DMA address corruption due to find_vma misuse
Zhenghang Xiao <kipreyyy@xxxxxxxxx>
misc: fastrpc: fix use-after-free race in fastrpc_map_create
Anandu Krishnan E <anandu.e@xxxxxxxxxxxxxxxx>
misc: fastrpc: fix use-after-free of fastrpc_user in workqueue context
Yilin Zhu <zylzyl2333@xxxxxxxxx>
ipc/shm: serialize orphan cleanup with shm_nattch updates
Cryolitia PukNgae <cryolitia.pukngae@xxxxxxxxx>
Input: atkbd - skip deactivate for HONOR BCC-N's internal keyboard
Zeyu WANG <zeyu.thomas.wang@xxxxxxxxx>
Input: atkbd - add DMI quirk for Lenovo Yoga Air 14 (83QK)
Akhil R <akhilrajeev@xxxxxxxxxx>
i2c: tegra: Fix NOIRQ suspend/resume
Guillermo Rodríguez <guille.rodriguez@xxxxxxxxx>
i2c: stm32f7: fix timing computation ignoring i2c-analog-filter
Vladimir Zapolskiy <vladimir.zapolskiy@xxxxxxxxxx>
i2c: qcom-cci: Fix NULL pointer dereference in cci_remove()
Jann Horn <jannh@xxxxxxxxxx>
fuse: reject fuse_notify() pagecache ops on directories
Arpith Kalaginanavoor <arpithk@xxxxxxxxxx>
fs/qnx6: fix pointer arithmetic in directory iteration
Christian Brauner <brauner@xxxxxxxxxx>
pidfd: refuse access to tasks that have started exiting harder
Hyunwoo Kim <imv4bel@xxxxxxxxx>
inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush
Michael Bommarito <michael.bommarito@xxxxxxxxx>
IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
Kyle Meyer <kyle.meyer@xxxxxxx>
bnxt_en: Fix NULL pointer dereference
Chancel Liu <chancel.liu@xxxxxxx>
ASoC: fsl_sai: Fix 32 slots TDM broken by integer shift UB in xMR write
Amit Matityahu <amitmat@xxxxxxxxxx>
timers/migration: Fix livelock in tmigr_handle_remote_up()
Raf Dickson <rafdog35@xxxxxxxxx>
vsock/vmci: fix sk_ack_backlog leak on failed handshake
Yuqi Xu <xuyuqiabc@xxxxxxxxx>
wifi: nl80211: reject oversized EMA RNR lists
Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
mptcp: add-addr: always drop other suboptions
Tao Cui <cuitao@xxxxxxxxxx>
selftests: mptcp: add test for extra_subflows underflow on userspace PM
Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
mptcp: sockopt: check timestamping ret value
Paolo Abeni <pabeni@xxxxxxxxxx>
mptcp: allow subflow rcv wnd to shrink
Paolo Abeni <pabeni@xxxxxxxxxx>
mptcp: close TOCTOU race while computing rcv_wnd
Paolo Abeni <pabeni@xxxxxxxxxx>
mptcp: fix retransmission loop when csum is enabled
Karl Mehltretter <kmehltretter@xxxxxxxxx>
ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow
Karl Mehltretter <kmehltretter@xxxxxxxxx>
ARM: 9474/1: io: avoid KASAN instrumentation of raw halfword I/O
Yuho Choi <dbgh9129@xxxxxxxxx>
ARM: socfpga: Fix OF node refcount leak in SMP setup
Sechang Lim <rhkrqnwk98@xxxxxxxxx>
udp: clear skb->dev before running a sockmap verdict
Cunlong Li <shenxiaogll@xxxxxxxxx>
zram: fix use-after-free in zram_bvec_write_partial()
Michael Bommarito <michael.bommarito@xxxxxxxxx>
RDMA/srp: bound SRP_RSP sense copy by the received length
SeongJae Park <sj@xxxxxxxxxx>
mm/damon/ops-common: call folio_test_lru() after folio_get()
Yin Tirui <yintirui@xxxxxxxxxx>
mm/huge_memory: update file PMD counter before folio_put()
Harry Wentland <harry.wentland@xxxxxxx>
drm/amd/display: Reject gpio_bitshift >= 32 in bios_parser_get_gpio_pin_info()
Wentao Liang <vulab@xxxxxxxxxxx>
drm/virtio: fix dma_fence refcount leak on error in virtio_gpu_dma_fence_wait()
Clément Léger <cleger@xxxxxxxx>
io_uring/net: inherit IORING_CQE_F_BUF_MORE across bundle recv retries
Takashi Iwai <tiwai@xxxxxxx>
ALSA: timer: Fix UAF at snd_timer_user_params()
Takashi Iwai <tiwai@xxxxxxx>
ALSA: timer: Forcibly close timer instances at closing
HyeongJun An <sammiee5311@xxxxxxxxx>
USB: serial: kl5kusb105: fix bulk-out buffer overflow
Jack Wu <jackbb_wu@xxxxxxxxxx>
USB: serial: option: add usb-id for Dell Wireless DW5826e-m
Adrian Korwel <adriank20047@xxxxxxxxx>
USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()
Adrian Korwel <adriank20047@xxxxxxxxx>
USB: serial: io_ti: fix heap overflow in get_manuf_info()
Wyatt Feng <bronzed_45_vested@xxxxxxxxxx>
xfrm: espintcp: do not reuse an in-progress partial send
Gil Portnoy <dddhkts1@xxxxxxxxx>
ksmbd: fix use-after-free of a deferred file_lock on double SMB2_CANCEL
Judith Mendez <jm@xxxxxx>
pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init
Joonas Lahtinen <joonas.lahtinen@xxxxxxxxxxxxxxx>
drm/i915/gem: Fix phys BO pread/pwrite with offset
Sean Christopherson <seanjc@xxxxxxxxxx>
KVM: SEV: Decouple the need to sync the GHCB SA from the need to free the SA
Sean Christopherson <seanjc@xxxxxxxxxx>
KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying
Inochi Amaoto <inochiama@xxxxxxxxx>
mmc: litex_mmc: Use DIV_ROUND_UP for more accurate clock calculation
Alice Ryhl <aliceryhl@xxxxxxxxxx>
rust: kasan/kbuild: fix rustc-option when cross-compiling
Alice Ryhl <aliceryhl@xxxxxxxxxx>
rust: arm64: set uwtable llvm module flag for CONFIG_UNWIND_TABLES
Miguel Ojeda <ojeda@xxxxxxxxxx>
rust: x86: support Rust >= 1.98.0 target spec
Masami Hiramatsu (Google) <mhiramat@xxxxxxxxxx>
tracing/probes: Point the error offset correctly for eprobe argument error
Andrzej Kacprowski <andrzej.kacprowski@xxxxxxxxxxxxxxx>
accel/ivpu: Fix signed integer truncation in IPC receive
Andrzej Kacprowski <andrzej.kacprowski@xxxxxxxxxxxxxxx>
accel/ivpu: Add buffer overflow check in MS get_info_ioctl
Andrzej Kacprowski <andrzej.kacprowski@xxxxxxxxxxxxxxx>
accel/ivpu: Add bounds checks for firmware log indices
Manivannan Sadhasivam <manivannan.sadhasivam@xxxxxxxxxxxxxxxx>
soc: qcom: ice: Fix race between qcom_ice_probe() and of_qcom_ice_get()
Michael Bommarito <michael.bommarito@xxxxxxxxx>
Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig
Yuqi Xu <xuyq21@xxxxxxxxxx>
Bluetooth: hci_sync: reject oversized Broadcast Announcement prepend
Georgiy Osokin <g.osokin@xxxxxxxxxxxx>
tee: shm: fix shm leak in register_shm_helper()
Tristan Madani <tristan@xxxxxxxxxxxxxxxxxxx>
netfilter: nft_tunnel: fix use-after-free on object destroy
Wentao Liang <vulab@xxxxxxxxxxx>
drm/xe: fix refcount leak in xe_range_fence_insert()
Alexander A. Klimov <grandmaster@xxxxxxxxxxxx>
drm/vc4: fix krealloc() memory leak
Dmitry Osipenko <dmitry.osipenko@xxxxxxxxxxxxx>
drm/virtio: Fix driver removal with disabled KMS
Pengyu Luo <mitltlatltl@xxxxxxxxx>
clk: qcom: dispcc-sc8280xp: Don't park mdp_clk_src at registration time
Kuan-Wei Chiu <visitorckw@xxxxxxxxx>
clk: samsung: gs101: Fix missing USI7_USI DIV clock in peric0_clk_regs
Hans de Goede <johannes.goede@xxxxxxxxxxxxxxxx>
clk: qcom: x1e80100-dispcc: Stop disp_cc_mdss_mdp_clk_src from getting parked
Dongli Zhang <dongli.zhang@xxxxxxxxxx>
KVM: VMX: Update SVI during runtime APICv activation
Qi Tang <tpluszz77@xxxxxxxxx>
xfrm: hold dev ref until after transport_finish NF_HOOK
Jianbo Liu <jianbol@xxxxxxxxxx>
xfrm: hold device only for the asynchronous decryption
Jan Kara <jack@xxxxxxx>
writeback: Fix use after free in inode_switch_wbs_work_fn()
Jan Kara <jack@xxxxxxx>
writeback: Avoid contention on wb->list_lock when switching inodes
Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: ctnetlink: ensure safe access to master conntrack
Ido Schimmel <idosch@xxxxxxxxxx>
ipv6: Fix a potential NPD in cleanup_prefix_route()
Til Kaiser <mail@xxxxxxxx>
net: mvpp2: build skb from XDP-adjusted data on XDP_PASS
Til Kaiser <mail@xxxxxxxx>
net: mvpp2: refill RX buffers before XDP or skb use
Lorenzo Bianconi <lorenzo@xxxxxxxxxx>
net: mvpp2: Add metadata support for xdp mode
Til Kaiser <mail@xxxxxxxx>
net: mvpp2: limit XDP frame size to the RX buffer
Til Kaiser <mail@xxxxxxxx>
net: mvpp2: sync RX data at the hardware packet offset
Florian Westphal <fw@xxxxxxxxx>
netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
Xiang Mei <xmei5@xxxxxxx>
netfilter: nf_log: validate MAC header was set before dumping it
Kyle Zeng <kylebot@xxxxxxxxxx>
netfilter: x_tables: avoid leaking percpu counter pointers
Weiming Shi <bestswngs@xxxxxxxxx>
netfilter: nf_conntrack: destroy stale expectfn expectations on unregister
Florian Westphal <fw@xxxxxxxxx>
netfilter: revalidate bridge ports
Breno Leitao <leitao@xxxxxxxxxx>
rds: mark snapshot pages dirty in rds_info_getsockopt()
Eric Dumazet <edumazet@xxxxxxxxxx>
ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
Weiming Shi <bestswngs@xxxxxxxxx>
net/rds: fix NULL deref in rds_ib_send_cqe_handler() on masked atomic completion
Kyle Zeng <kylebot@xxxxxxxxxx>
net: guard timestamp cmsgs to real error queue skbs
Michael Bommarito <michael.bommarito@xxxxxxxxx>
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
Ruoyu Wang <ruoyuw560@xxxxxxxxx>
gpio: zynq: fix runtime PM leak on remove
Chih Kai Hsu <hsu.chih.kai@xxxxxxxxxxx>
r8152: handle the return value of usb_reset_device()
Adrian Moreno <amorenoz@xxxxxxxxxx>
net: openvswitch: fix possible kfree_skb of ERR_PTR
Kyle Zeng <kylebot@xxxxxxxxxx>
ipv6: sit: reload inner IPv6 header after GSO offloads
Fushuai Wang <wangfushuai@xxxxxxxxx>
net/mlx5: Use effective affinity mask for IRQ selection
Dragos Tatulea <dtatulea@xxxxxxxxxx>
net/mlx5e: xsk: Fix DMA and xdp_frame leak on XDP_TX xmit failure
Dragos Tatulea <dtatulea@xxxxxxxxxx>
net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list
Mingyu Wang <25181214217@xxxxxxxxxxxxxxxxx>
net: qrtr: fix refcount saturation and potential UAF in qrtr_port_remove
Maxime Chevallier <maxime.chevallier@xxxxxxxxxxx>
net: phy: clean the sfp upstream if phy probing fails
Jakub Kicinski <kuba@xxxxxxxxxx>
netdev: fix double-free in netdev_nl_bind_rx_doit()
Rosen Penev <rosenp@xxxxxxxxx>
net: ibm: emac: Fix use-after-free during device removal
Yao Sang <sangyao@xxxxxxxxxx>
net/mlx4: avoid GCC 10 __bad_copy_from() false positive
HanQuan <eilaimemedsnaimel@xxxxxxxxx>
net: add pskb_may_pull() to skb_gro_receive_list()
Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: restrict SO_ATTACH_FILTER to priv users
Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
ASoC: wm_adsp: Fix NULL dereference when removing firmware controls
Yun Zhou <yun.zhou@xxxxxxxxxxxxx>
gpio: mvebu: fix NULL pointer dereference in suspend/resume
Chenguang Zhao <zhaochenguang@xxxxxxxxxx>
netlabel: validate unlabeled address and mask attribute lengths
Sanghyun Park <sanghyun.park.cnu@xxxxxxxxx>
xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()
Li RongQing <lirongqing@xxxxxxxxx>
dma-debug: fix physical address retrieval in debug_dma_sync_sg_for_device
Brian Foster <bfoster@xxxxxxxxxx>
iomap: don't revert iov_iter on partially completed buffered writes
Mark Rutland <mark.rutland@xxxxxxx>
arm64: tlb: Optimize ARM64_WORKAROUND_REPEAT_TLBI
Mark Rutland <mark.rutland@xxxxxxx>
arm64: tlb: Allow XZR argument to TLBI ops
Weiming Shi <bestswngs@xxxxxxxxx>
tap: free page on error paths in tap_get_user_xdp()
Gabriele Monaco <gmonaco@xxxxxxxxxx>
tools/rv: Fix cleanup after failed trace setup
Johan Hovold <johan@xxxxxxxxxx>
spi: cadence-quadspi: fix unclocked access on unbind
Steven Chen <chenste@xxxxxxxxxxxxxxxxxxx>
ima: kexec: move IMA log copy from kexec load to execute
Steven Chen <chenste@xxxxxxxxxxxxxxxxxxx>
ima: kexec: skip IMA segment validation after kexec soft reboot
Kyle Zeng <kylebot@xxxxxxxxxx>
ALSA: seq: dummy: fix UMP event stack overread
Ji'an Zhou <eilaimemedsnaimel@xxxxxxxxx>
ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams
Naveen Kumar Chaudhary <naveen.osdev@xxxxxxxxx>
time: Fix off-by-one in settimeofday() usec validation
Aleksandr Nogikh <nogikh@xxxxxxxxxx>
signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads()
Rui Qi <qirui.001@xxxxxxxxxxxxx>
ipmi: Fix rcu_read_unlock to srcu_read_unlock in handle_read_event_rsp
Xin Long <lucien.xin@xxxxxxxxx>
sctp: purge outqueue on stale COOKIE-ECHO handling
Yizhou Zhao <zhaoyz24@xxxxxxxxxxxxxxxxxxxxx>
net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
Eric Dumazet <edumazet@xxxxxxxxxx>
ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()
Andy Roulin <aroulin@xxxxxxxxxx>
vxlan: vnifilter: fix spurious notification on VNI update
Andy Roulin <aroulin@xxxxxxxxxx>
vxlan: vnifilter: send notification on VNI add
Nithin Dabilpuram <ndabilpuram@xxxxxxxxxxx>
octeontx2-af: npc: Fix CPT channel mask in npc_install_flow
Rajat Gupta <rajat.gupta@xxxxxxxxxxxxxxxx>
net/sched: fix pedit partial COW leading to page cache corruption
Eric Dumazet <edumazet@xxxxxxxxxx>
net_sched: act_pedit: use RCU in tcf_pedit_dump()
Lorenzo Bianconi <lorenzo@xxxxxxxxxx>
net: ethernet: mtk_eth_soc: Fix use-after-free in metadata dst teardown
Kurt Kanzenbach <kurt@xxxxxxxxxxxxx>
ptp: vclock: Switch from RCU to SRCU
Eric Dumazet <edumazet@xxxxxxxxxx>
ipv4: restrict IPOPT_SSRR and IPOPT_LSRR options
Suman Ghosh <sumang@xxxxxxxxxxx>
octeontx2-af: Fix initialization of mcam's entry2target_pffunc field
Geetha sowjanya <gakula@xxxxxxxxxxx>
octeontx2-pf: Fix NDC sync operation errors
Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: MGMT: Fix backward compatibility with userspace
SeungJu Cheon <suunj1331@xxxxxxxxx>
Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls
Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: ISO: Fix not using bc_sid as advertisement SID
Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: ISO: Fix not releasing hdev reference on iso_conn_big_sync
Bharath Reddy <kbreddy.rpbc@xxxxxxxxx>
Bluetooth: fix memory leak in error path of hci_alloc_dev()
Zhang Cen <rollkingzzc@xxxxxxxxx>
Bluetooth: bnep: reject short frames before parsing
Dudu Lu <phx0fer@xxxxxxxxx>
Bluetooth: bnep: fix incorrect length parsing in bnep_rx_frame() extension handling
SeungJu Cheon <suunj1331@xxxxxxxxx>
Bluetooth: RFCOMM: validate skb length in MCC handlers
Zhang Cen <rollkingzzc@xxxxxxxxx>
Bluetooth: MGMT: validate advertising TLV before type checks
Zhang Cen <rollkingzzc@xxxxxxxxx>
Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()
Tapio Reijonen <tapio.reijonen@xxxxxxxxxxx>
net: fec: fix pinctrl default state restore order on resume
David Thompson <davthompson@xxxxxxxxxx>
net: lan743x: permit VLAN-tagged packets up to configured MTU
Yizhou Zhao <zhaoyz24@xxxxxxxxxxxxxxxxxxxxx>
net: garp: fix unsigned integer underflow in garp_pdu_parse_attr
Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
hsr: Remove WARN_ONCE() in hsr_addr_is_self().
Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
net: Annotate sk->sk_write_space() for UDP SOCKMAP.
Oscar Maes <oscmaes92@xxxxxxxxx>
pcnet32: stop holding device spin lock during napi_complete_done
Deepanshu Kartikey <kartikey406@xxxxxxxxx>
wifi: mac80211: limit injected antenna index in ieee80211_parse_tx_radiotap
Yicong Hui <yiconghui@xxxxxxxxx>
drm/imx: Fix three kernel-doc warnings in dcss-scaler.c
Mark Bloch <mbloch@xxxxxxxxxx>
devlink: Release nested relation on devlink free
Lee Jones <lee@xxxxxxxxxx>
l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()
Yizhou Zhao <zhaoyz24@xxxxxxxxxxxxxxxxxxxxx>
6lowpan: fix off-by-one in multicast context address compression
Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
net/sched: act_api: use RCU with deferred freeing for action lifecycle
Guangshuo Li <lgs201920130244@xxxxxxxxx>
dm cache policy smq: check allocation under invalidate lock
Yiming Qian <yimingqian591@xxxxxxxxx>
netfilter: bridge: make ebt_snat ARP rewrite writable
Jiayuan Chen <jiayuan.chen@xxxxxxxxx>
netfilter: nft_ct: bail out on template ct in get eval
Florian Westphal <fw@xxxxxxxxx>
netfilter: conntrack_irc: fix possible out-of-bounds read
Fernando Fernandez Mancera <fmancera@xxxxxxx>
netfilter: synproxy: add mutex to guard hook reference counting
Julian Anastasov <ja@xxxxxx>
ipvs: clear the svc scheduler ptr early on edit
Fernando Fernandez Mancera <fmancera@xxxxxxx>
netfilter: xt_NFQUEUE: prefer raw_smp_processor_id
Gil Portnoy <dddhkts1@xxxxxxxxx>
ksmbd: fix NULL-deref of opinfo->conn in oplock/lease break notifiers
Gao Xiang <xiang@xxxxxxxxxx>
erofs: fix use-after-free on sbi->sync_decompress
Gao Xiang <xiang@xxxxxxxxxx>
erofs: tidy up synchronous decompression
Chunhai Guo <guochunhai@xxxxxxxx>
erofs: add sysfs node to drop internal caches
Manivannan Sadhasivam <manivannan.sadhasivam@xxxxxxxxxxxxxxxx>
soc: qcom: ice: Return -ENODEV if the ICE platform device is not found
Amirreza Zarrabi <amirreza.zarrabi@xxxxxxxxxxxxxxxx>
tee: optee: prevent use-after-free when the client exits before the supplicant
Nicolò Coccia <n.coccia96@xxxxxxxxx>
net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS
Ido Schimmel <idosch@xxxxxxxxxx>
ipv6: mcast: Fix use-after-free when processing MLD queries
Mingyu Wang <25181214217@xxxxxxxxxxxxxxxxx>
i2c: dev: prevent integer overflow in I2C_TIMEOUT ioctl
Johannes Berg <johannes.berg@xxxxxxxxx>
wifi: remove zero-length arrays
Robert Marko <robert.marko@xxxxxxxxxx>
net: phy: micrel: fix LAN8814 QSGMII soft reset
Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx>
ARM: fix branch predictor hardening
Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx>
ARM: fix hash_name() fault
Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx>
ARM: allow __do_kernel_fault() to report execution of memory faults
Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx>
ARM: group is_permission_fault() with is_translation_fault()
Johan Hovold <johan@xxxxxxxxxx>
USB: serial: mct_u232: fix memory corruption with small endpoint
Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
bpf: Free reuseport cBPF prog after RCU grace period.
-------------
Diffstat:
Documentation/ABI/testing/sysfs-fs-erofs | 25 ++++-
Documentation/arch/arm64/silicon-errata.rst | 48 ++++++++
Makefile | 7 +-
arch/arm/include/asm/io.h | 15 ++-
arch/arm/kernel/entry-armv.S | 2 +-
arch/arm/mach-socfpga/platsmp.c | 1 +
arch/arm/mm/alignment.c | 6 +-
arch/arm/mm/fault.c | 100 ++++++++++++-----
arch/arm64/Kconfig | 50 +++++++++
arch/arm64/Makefile | 3 +
arch/arm64/include/asm/cputype.h | 6 +
arch/arm64/include/asm/tlbflush.h | 63 ++++++-----
arch/arm64/kernel/cpu_errata.c | 34 +++++-
arch/arm64/kernel/sys_compat.c | 2 +-
arch/arm64/kvm/hyp/nvhe/mm.c | 2 +-
arch/arm64/kvm/hyp/nvhe/tlb.c | 8 +-
arch/arm64/kvm/hyp/pgtable.c | 2 +-
arch/arm64/kvm/hyp/vhe/tlb.c | 10 +-
arch/x86/Makefile | 4 +
arch/x86/Makefile.um | 8 ++
arch/x86/kvm/svm/sev.c | 27 ++---
arch/x86/kvm/vmx/vmx.c | 9 --
arch/x86/kvm/x86.c | 7 ++
block/blk-zoned.c | 32 +++++-
drivers/accel/ivpu/ivpu_fw_log.c | 5 +
drivers/accel/ivpu/ivpu_ipc.c | 2 +-
drivers/accel/ivpu/ivpu_ms.c | 7 ++
drivers/base/bus.c | 11 +-
drivers/block/zram/zram_drv.c | 2 +-
drivers/char/ipmi/ipmi_msghandler.c | 2 +-
drivers/char/ipmi/ipmi_ssif.c | 29 +++--
drivers/clk/qcom/dispcc-sc8280xp.c | 4 +-
drivers/clk/qcom/dispcc-x1e80100.c | 2 +-
drivers/clk/samsung/clk-gs101.c | 2 +-
drivers/gpio/gpio-mvebu.c | 4 +-
drivers/gpio/gpio-zynq.c | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 4 +-
.../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 2 +-
drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v11.c | 49 +++++++--
.../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 5 +
drivers/gpu/drm/amd/display/dc/basics/vector.c | 4 +-
drivers/gpu/drm/amd/display/dc/bios/bios_parser.c | 15 ++-
drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c | 81 +++++++++-----
.../drm/amd/display/dc/bios/bios_parser_helper.h | 5 +
drivers/gpu/drm/amd/display/dc/dce/dce_transform.c | 10 +-
.../drm/amd/display/dc/dce110/dce110_opp_csc_v.c | 10 +-
.../gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c | 3 +-
.../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 32 +++---
.../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 32 +++---
.../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_0_ppt.c | 3 +-
.../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 1 -
drivers/gpu/drm/i915/gem/i915_gem_phys.c | 19 +++-
drivers/gpu/drm/imx/dcss/dcss-scaler.c | 3 +
drivers/gpu/drm/v3d/v3d_sched.c | 3 +-
drivers/gpu/drm/vc4/vc4_validate_shaders.c | 13 ++-
drivers/gpu/drm/virtio/virtgpu_drv.c | 5 +-
drivers/gpu/drm/virtio/virtgpu_submit.c | 4 +-
drivers/gpu/drm/xe/xe_guc_submit.c | 2 +-
drivers/gpu/drm/xe/xe_range_fence.c | 2 +
drivers/i2c/busses/i2c-qcom-cci.c | 2 +-
drivers/i2c/busses/i2c-stm32f7.c | 6 +-
drivers/i2c/busses/i2c-tegra.c | 53 +++++----
drivers/i2c/i2c-dev.c | 9 +-
drivers/infiniband/core/Makefile | 2 +-
drivers/infiniband/core/iter.c | 43 ++++++++
drivers/infiniband/core/umem.c | 16 +++
drivers/infiniband/core/umem_dmabuf.c | 77 ++++++++++---
drivers/infiniband/core/verbs.c | 38 -------
drivers/infiniband/hw/bnxt_re/qplib_res.c | 2 +-
drivers/infiniband/hw/cxgb4/mem.c | 2 +-
drivers/infiniband/hw/efa/efa_verbs.c | 2 +-
drivers/infiniband/hw/erdma/erdma_verbs.c | 2 +-
drivers/infiniband/hw/hns/hns_roce_alloc.c | 2 +-
drivers/infiniband/hw/hns/hns_roce_mr.c | 4 +
drivers/infiniband/hw/irdma/main.h | 2 +-
drivers/infiniband/hw/irdma/verbs.c | 4 +
drivers/infiniband/hw/mana/mana_ib.h | 2 +-
drivers/infiniband/hw/mlx4/mr.c | 5 +
drivers/infiniband/hw/mlx5/mem.c | 1 +
drivers/infiniband/hw/mlx5/mr.c | 4 +
drivers/infiniband/hw/mlx5/umr.c | 1 +
drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
drivers/infiniband/hw/ocrdma/ocrdma_verbs.c | 2 +-
drivers/infiniband/hw/qedr/verbs.c | 2 +-
drivers/infiniband/hw/vmw_pvrdma/pvrdma.h | 2 +-
drivers/infiniband/sw/rxe/rxe_verbs.c | 5 +
drivers/infiniband/ulp/isert/ib_isert.c | 6 +
drivers/infiniband/ulp/srp/ib_srp.c | 30 ++++-
drivers/input/keyboard/atkbd.c | 15 +++
drivers/mailbox/mailbox.c | 15 +--
drivers/mailbox/tegra-hsp.c | 2 +-
drivers/md/dm-cache-policy-smq.c | 12 +-
drivers/misc/fastrpc.c | 107 +++++++++++-------
drivers/mmc/core/mmc.c | 4 +-
drivers/mmc/host/dw_mmc-rockchip.c | 17 +++
drivers/mmc/host/litex_mmc.c | 20 +++-
drivers/mmc/host/renesas_sdhi_internal_dmac.c | 1 +
drivers/mmc/host/sdhci.c | 1 +
drivers/net/bonding/bond_main.c | 4 +-
drivers/net/ethernet/amd/pcnet32.c | 4 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 +-
drivers/net/ethernet/freescale/fec_main.c | 3 +-
drivers/net/ethernet/ibm/emac/core.c | 9 +-
drivers/net/ethernet/marvell/mv643xx_eth.c | 2 +-
drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 75 ++++++++-----
drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 2 +-
drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 1 +
.../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 36 +++---
.../net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 2 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 2 +-
drivers/net/ethernet/mediatek/mtk_eth_soc.c | 2 +-
drivers/net/ethernet/mellanox/mlx4/cq.c | 9 +-
drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 6 +-
drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 10 +-
drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 13 +--
.../net/ethernet/mellanox/mlx5/core/irq_affinity.c | 5 +-
drivers/net/ethernet/mellanox/mlx5/core/vport.c | 72 +++++++++---
drivers/net/ethernet/microchip/lan743x_main.c | 32 ++++++
drivers/net/ethernet/microchip/lan743x_main.h | 1 +
drivers/net/ethernet/realtek/rtase/rtase_main.c | 7 +-
drivers/net/hyperv/netvsc.c | 19 +++-
drivers/net/phy/micrel.c | 15 +--
drivers/net/phy/phy_device.c | 6 +
drivers/net/tap.c | 2 +
drivers/net/usb/r8152.c | 7 +-
drivers/net/vxlan/vxlan_vnifilter.c | 5 +-
drivers/nvmem/core.c | 12 +-
drivers/nvmem/layouts/onie-tlv.c | 3 +-
drivers/pinctrl/pinctrl-mcp23s08_spi.c | 5 +-
drivers/pmdomain/imx/gpc.c | 2 +-
drivers/ptp/ptp_vclock.c | 14 ++-
drivers/slimbus/qcom-ngd-ctrl.c | 122 +++++++++++++--------
drivers/soc/qcom/ice.c | 40 +++++--
drivers/spi/spi-cadence-quadspi.c | 5 +-
drivers/tee/optee/supp.c | 107 ++++++++++++------
drivers/tee/tee_shm.c | 2 +-
drivers/thunderbolt/property.c | 6 +
drivers/thunderbolt/xdomain.c | 14 ++-
drivers/usb/serial/io_ti.c | 11 ++
drivers/usb/serial/kl5kusb105.c | 4 +-
drivers/usb/serial/mct_u232.c | 21 ++--
drivers/usb/serial/option.c | 3 +
fs/erofs/internal.h | 7 +-
fs/erofs/super.c | 3 +-
fs/erofs/sysfs.c | 19 +++-
fs/erofs/zdata.c | 36 +++---
fs/fcntl.c | 8 +-
fs/fs-writeback.c | 101 +++++++++++------
fs/fuse/dev.c | 9 +-
fs/iomap/buffered-io.c | 4 -
fs/qnx6/dir.c | 8 +-
fs/smb/server/oplock.c | 15 ++-
fs/smb/server/smb2pdu.c | 11 ++
include/linux/backing-dev-defs.h | 4 +
include/linux/hugetlb.h | 8 --
include/linux/ieee80211.h | 18 +--
include/linux/kexec.h | 3 +
include/linux/mailbox_controller.h | 3 +
include/linux/mlx5/vport.h | 4 +-
include/linux/mm.h | 8 --
include/linux/writeback.h | 2 +
include/net/act_api.h | 1 +
include/net/bluetooth/hci_core.h | 9 +-
include/net/bluetooth/hci_sync.h | 4 +-
include/net/bluetooth/l2cap.h | 1 +
include/net/ip.h | 8 ++
include/net/ip_vs.h | 3 +-
include/net/netfilter/nf_conntrack_core.h | 5 +
include/net/netfilter/nf_conntrack_helper.h | 1 +
include/net/secure_seq.h | 45 ++++++--
include/net/sock.h | 1 +
include/net/tc_act/tc_pedit.h | 2 +-
include/net/tcp.h | 6 +-
include/rdma/ib_umem.h | 48 +++-----
include/rdma/ib_verbs.h | 48 --------
include/rdma/iter.h | 88 +++++++++++++++
io_uring/io_uring.c | 2 +-
io_uring/kbuf.c | 1 -
io_uring/net.c | 3 +-
ipc/shm.c | 10 +-
kernel/dma/debug.c | 2 +-
kernel/kexec_file.c | 33 +++++-
kernel/pid.c | 8 +-
kernel/sched/ext.c | 9 +-
kernel/signal.c | 1 +
kernel/time/time.c | 2 +-
kernel/time/timer_migration.c | 8 +-
kernel/trace/trace_probe.c | 2 -
mm/backing-dev.c | 5 +
mm/damon/ops-common.c | 4 +-
mm/huge_memory.c | 2 +
mm/hugetlb.c | 70 ++++++------
mm/memory-failure.c | 19 ++--
net/6lowpan/iphc.c | 4 +-
net/802/garp.c | 2 +-
net/802/mrp.c | 9 ++
net/bluetooth/bnep/core.c | 50 ++++++---
net/bluetooth/hci_conn.c | 31 ++++--
net/bluetooth/hci_core.c | 16 ++-
net/bluetooth/hci_sync.c | 25 ++++-
net/bluetooth/hci_sysfs.c | 6 +-
net/bluetooth/iso.c | 71 ++++++++----
net/bluetooth/l2cap_core.c | 46 ++++++++
net/bluetooth/mgmt.c | 17 +--
net/bluetooth/rfcomm/core.c | 69 ++++++++----
net/bluetooth/rfcomm/sock.c | 26 ++++-
net/bridge/netfilter/ebt_dnat.c | 4 +-
net/bridge/netfilter/ebt_redirect.c | 16 ++-
net/bridge/netfilter/ebt_snat.c | 3 +
net/core/filter.c | 15 ++-
net/core/gro.c | 5 +
net/core/netdev-genl.c | 4 +-
net/core/secure_seq.c | 80 +++++---------
net/core/skbuff.c | 6 +-
net/core/sock.c | 13 ++-
net/devlink/core.c | 2 +
net/hsr/hsr_framereg.c | 4 +-
net/ieee802154/6lowpan/tx.c | 5 +
net/ipv4/inet_fragment.c | 3 +
net/ipv4/ip_fragment.c | 3 -
net/ipv4/ip_options.c | 4 +
net/ipv4/netfilter/arp_tables.c | 15 +--
net/ipv4/netfilter/ip_tables.c | 15 +--
net/ipv4/netfilter/nf_nat_h323.c | 2 +
net/ipv4/netfilter/nft_fib_ipv4.c | 2 +-
net/ipv4/syncookies.c | 19 ++--
net/ipv4/tcp.c | 44 ++++----
net/ipv4/tcp_fastopen.c | 2 +-
net/ipv4/tcp_input.c | 22 ++--
net/ipv4/tcp_ipv4.c | 84 +++++++-------
net/ipv4/tcp_minisocks.c | 11 +-
net/ipv4/tcp_output.c | 12 +-
net/ipv4/tcp_timer.c | 4 +-
net/ipv4/udp.c | 8 ++
net/ipv4/xfrm4_input.c | 5 +-
net/ipv6/addrconf.c | 6 +-
net/ipv6/ip6_vti.c | 2 +
net/ipv6/mcast.c | 8 +-
net/ipv6/netfilter/ip6_tables.c | 15 +--
net/ipv6/netfilter/nft_fib_ipv6.c | 2 +-
net/ipv6/sit.c | 1 +
net/ipv6/syncookies.c | 11 +-
net/ipv6/tcp_ipv6.c | 37 +++----
net/ipv6/xfrm6_input.c | 5 +-
net/l2tp/l2tp_ppp.c | 92 +++++++++-------
net/mac80211/tx.c | 4 +-
net/mptcp/options.c | 73 ++++++------
net/mptcp/pm.c | 15 +--
net/mptcp/pm_userspace.c | 13 ++-
net/mptcp/protocol.c | 10 +-
net/mptcp/protocol.h | 7 +-
net/mptcp/sockopt.c | 8 +-
net/netfilter/ipvs/ip_vs_ctl.c | 13 ++-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +--
net/netfilter/ipvs/ip_vs_proto_tcp.c | 21 ++--
net/netfilter/ipvs/ip_vs_proto_udp.c | 20 ++--
net/netfilter/ipvs/ip_vs_sched.c | 14 +--
net/netfilter/nf_conntrack_ecache.c | 2 +
net/netfilter/nf_conntrack_expect.c | 10 +-
net/netfilter/nf_conntrack_helper.c | 19 ++++
net/netfilter/nf_conntrack_irc.c | 4 +-
net/netfilter/nf_conntrack_netlink.c | 28 +++--
net/netfilter/nf_log_syslog.c | 4 +-
net/netfilter/nf_nat_core.c | 2 +
net/netfilter/nf_nat_sip.c | 1 +
net/netfilter/nf_synproxy_core.c | 24 +++-
net/netfilter/nfnetlink_log.c | 23 +++-
net/netfilter/nfnetlink_queue.c | 64 +++++++++--
net/netfilter/nft_ct.c | 8 +-
net/netfilter/nft_ct_fast.c | 2 +-
net/netfilter/nft_exthdr.c | 3 +
net/netfilter/nft_fib.c | 6 +
net/netfilter/nft_tunnel.c | 2 +-
net/netfilter/xt_NFQUEUE.c | 2 +-
net/netlabel/netlabel_unlabeled.c | 30 ++---
net/openvswitch/datapath.c | 1 +
net/qrtr/af_qrtr.c | 4 +-
net/rds/ib_cm.c | 1 +
net/rds/ib_send.c | 2 +
net/rds/info.c | 2 +-
net/sched/act_api.c | 7 +-
net/sched/act_pedit.c | 97 ++++++++--------
net/sctp/diag.c | 17 +--
net/sctp/input.c | 8 ++
net/sctp/sm_statefuns.c | 6 +-
net/sctp/stream.c | 6 +-
net/smc/af_smc.c | 17 ++-
net/socket.c | 11 +-
net/vmw_vsock/virtio_transport_common.c | 11 +-
net/vmw_vsock/vmci_transport.c | 4 +-
net/wireless/nl80211.c | 3 +
net/xfrm/espintcp.c | 4 +
net/xfrm/xfrm_input.c | 25 +++--
net/xfrm/xfrm_policy.c | 13 +--
scripts/Makefile.compiler | 2 +-
scripts/generate_rust_target.rs | 8 +-
security/integrity/ima/ima_kexec.c | 46 +++++---
sound/core/pcm_native.c | 7 +-
sound/core/seq/seq_dummy.c | 15 ++-
sound/core/timer.c | 17 +--
sound/soc/codecs/wm_adsp.c | 3 +
sound/soc/fsl/fsl_sai.c | 2 +-
.../test.d/dynevent/eprobes_syntax_errors.tc | 2 +-
tools/testing/selftests/net/mptcp/mptcp_join.sh | 4 +
tools/testing/selftests/ptp/testptp.c | 62 +----------
tools/verification/rv/src/in_kernel.c | 2 +-
virt/kvm/kvm_main.c | 3 +-
307 files changed, 3040 insertions(+), 1602 deletions(-)