[PATCH 6.12 000/181] 6.12.104-rc1 review

From: Greg Kroah-Hartman

Date: Mon Aug 17 2026 - 11:24:48 EST


This is the start of the stable review cycle for the 6.12.104 release.
There are 181 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.104-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.12.104-rc1

Xiang Mei (Microsoft) <xmei5@xxxxxxx>
bpf: tcp: fix double sock release on batch realloc

Xu Rao <raoxu@xxxxxxxxxxxxx>
thunderbolt: Fix bandwidth group reservation indexing

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
thunderbolt: Bound the DROM dual link port number before indexing sw->ports

Qing Ming <a0yami@xxxxxxxxxxx>
sctp: clear new_transport when removing a peer

Yuxiang Yang <yangyx22@xxxxxxxxxxxxxxxxxxxxx>
sctp: fix use-after-free of cached ASCONF chunk

Baul Lee <baul.lee@xxxxxxxx>
sctp: keep chunk->transport in step with the list it is queued on

Xu Rao <raoxu@xxxxxxxxxxxxx>
scsi: scsi_debug: Negate wrapped memcmp() result

Chengfeng Ye <nicoyip.dev@xxxxxxxxx>
bpf, sockmap: Fix sk_redir use-after-free in send verdict

Eric Biggers <ebiggers@xxxxxxxxxx>
fsverity: Fix silent truncation in bpf_get_fsverity_digest()

Eric Biggers <ebiggers@xxxxxxxxxx>
fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions

Mimi Zohar <zohar@xxxxxxxxxxxxx>
ima: Instantiate file_truncate and path_truncate hooks

Tejun Heo <tj@xxxxxxxxxx>
sched/psi: Shut down rtpoll_timer in psi_cgroup_free()

Zhan Xusheng <zhanxusheng@xxxxxxxxxx>
fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()

Zhiling Zou <zhilinz@xxxxxxxxxx>
ip6_tunnel: clear skb2->cb[] in ip6ip6_err()

Yuejie Shi <syjcnss@xxxxxxxxx>
ipv6: fix Route Information option length validation

Tengda Wu <wutengda@xxxxxxxxxxxxxxx>
ring-buffer: Use current_context for safe per-CPU buffer swap

Ahmad Byagowi <ahmadexp@xxxxxxxxx>
ptp: ocp: Fix board ID over-read

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
Revert "thermal/drivers/hwmon: Cleanup coding style a bit"

Steven Rostedt <rostedt@xxxxxxxxxxx>
eventfs: Use children field for rcu head and add memory barriers

Shuangpeng Bai <shuangpeng.kernel@xxxxxxxxx>
eventfs: Fix use-after-free in eventfs_remove_rec()

Sean Christopherson <seanjc@xxxxxxxxxx>
KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

Shuangpeng Bai <shuangpeng.kernel@xxxxxxxxx>
smb: client: Fix use-after-free in cifs_try_adding_channels()

Jun Yang <junvyyang@xxxxxxxxxxx>
tipc: read le->link under the node lock in tipc_node_link_down()

chanyoung <ppoo1220@xxxxxxxxx>
tls: don't leave a full plaintext sk_msg ring unpushed

Jun Yang <junvyyang@xxxxxxxxxxx>
vhost: reset the vring metadata cache on vring reconfiguration

Sun Jian <sun.jian.kdev@xxxxxxxxx>
veth: fix skb length accounting after XDP frag adjustment

Weiming Shi <bestswngs@xxxxxxxxx>
vsock/virtio: avoid refilling the RX queue after teardown

Weiming Shi <bestswngs@xxxxxxxxx>
vsock/virtio: read virtqueues under worker locks

Baul Lee <baul.lee@xxxxxxxx>
vxlan: do not arm the ageing timer on a device that is down

Zhiling Zou <zhilinz@xxxxxxxxxx>
xdp: reject clones that overrun skb_shared_info tailroom

Asad Kamal <asad.kamal@xxxxxxx>
Revert "drm/amdgpu: fix aperture mapping leak"

Christian Brauner <brauner@xxxxxxxxxx>
binfmt_misc: don't warn when the mount is completed from another user namespace

Christian Brauner <brauner@xxxxxxxxxx>
ovl: don't warn when the mount is completed from another user namespace

Hyunjung Ko <hj351016@xxxxxxxxx>
net/sched: act_gact, act_police: range check the fallback control action

Hyunjung Ko <hj351016@xxxxxxxxx>
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet

Yangyu Chen <cyy@xxxxxxxxxxxx>
net: atlantic: free RX pages of consumed but not refilled buffers

Yangyu Chen <cyy@xxxxxxxxxxxx>
net: atlantic: free stranded TX buffers on ring deinit

Zihan Xi <zihanx@xxxxxxxxxx>
netfilter: nf_conntrack: defer invalid log until after unlock

Zhiling Zou <zhilinz@xxxxxxxxxx>
netfilter: bridge: release template ct on non-IP path

Kyle Zeng <kylebot@xxxxxxxxxx>
ipv6: prevent in6_dev_get() from resurrecting inet6_dev

Daming Li <d4n.for.sec@xxxxxxxxx>
net: smc: fix splice entry lifetime imbalance in smc_rx_splice

Lorenzo Stoakes (ARM) <ljs@xxxxxxxxxx>
mm/huge_memory: fix huge_zero_pfn race

Vincent Donnefort <vdonnefort@xxxxxxxxxx>
ring-buffer: Prevent subbuf order change when resizing is disabled

Rik van Riel <riel@xxxxxxxxxxx>
fbdev: bitblit: bound-check glyph index in bit_cursor()

Michael Wu <michael@xxxxxxxxxxxxxxxxx>
tracing: Fix race between update_event_fields and, event_define_fields

Baul Lee <baul.lee@xxxxxxxx>
ALSA: usx2y: bound the hwdep mmap fault offset

Takashi Iwai <tiwai@xxxxxxx>
ALSA: usb: Fix UAF at delayed release of MIDI2 EPs

Hui Su <sh_def@xxxxxxx>
ring-buffer: Fix crash passing ERR_PTR to kthread_stop()

Eddie Lin <eddie.lin@xxxxxxxxxxxxxxxx>
misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free

Junrui Luo <moonafterrain@xxxxxxxxxxx>
misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke

Ekansh Gupta <ekansh.gupta@xxxxxxxxxxxxxxxx>
misc: fastrpc: Remove buffer from list prior to unmap operation

Anandu Krishnan E <anandu.e@xxxxxxxxxxxxxxxx>
misc: fastrpc: fix channel ctx ref leak when session alloc fails

Mariano Baragiola <mbaragiola@xxxxxxxxx>
staging: rtl8723bs: validate monitor transmit frame lengths

Panagiotis Petrakopoulos <npetrakopoulos2003@xxxxxxxxx>
staging: rtl8723bs: fix missing shared-key auth challenge length check

Muhammad Bilal <meatuni001@xxxxxxxxx>
staging: rtl8723bs: fix OOB read in WMM_param_handler()

Muhammad Bilal <meatuni001@xxxxxxxxx>
staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie()

Cunhao Lu <1579567540@xxxxxx>
serial: 8250_dma: Clear stale RX state on shutdown

Jan Sebastian Götte <linux@xxxxxxxx>
serial: qcom-geni: fix TX DMA buffer flush

Mathieu Dubois-Briand <mathieu.dubois-briand@xxxxxxxxxxx>
nvmem: layouts: Add fixed-layout driver

Alexander Usyskin <alexander.usyskin@xxxxxxxxx>
mei: pull kvfree out of spinlock

Chengfeng Ye <nicoyip.dev@xxxxxxxxx>
ipv4: fix use-after-free in fib_nhc_update_mtu()

Zihan Xi <zihanx@xxxxxxxxxx>
ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops

Michal Luczaj <mhal@xxxxxxx>
selftests/bpf: Adapt sockmap update error handling

Michal Luczaj <mhal@xxxxxxx>
selftests/bpf: Ensure UDP sockets are bound

Claudiu Beznea <claudiu.beznea.uj@xxxxxxxxxxxxxx>
pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP

Kees Cook <kees@xxxxxxxxxx>
kunit/fortify: Add back "volatile" for sizeof() constants

Kees Cook <kees@xxxxxxxxxx>
kunit/fortify: Replace "volatile" with OPTIMIZER_HIDE_VAR()

Keno Fischer <keno@xxxxxxxxxxxxxxxxxx>
futex: Prevent robust futex exit race some more

Ashish Kalra <ashish.kalra@xxxxxxx>
crypto: ccp - Abort doing SEV INIT if SNP INIT fails

Michael Roth <michael.roth@xxxxxxx>
crypto: ccp - Fix checks for SNP_VLEK_LOAD input buffer length

Ashish Kalra <ashish.kalra@xxxxxxx>
KVM: SVM: Add support to initialize SEV/SNP functionality in KVM

Ashish Kalra <ashish.kalra@xxxxxxx>
crypto: ccp - Add new SEV/SNP platform shutdown API

Harshal Dev <harshal.dev@xxxxxxxxxxxxxxxx>
dt-bindings: crypto: qcom,ice: Fix missing power-domain and iface clk

Keith Busch <kbusch@xxxxxxxxxx>
blk-mq: reinsert cached request to the list

Keith Busch <kbusch@xxxxxxxxxx>
blk-mq: pop cached request if it is usable

Bart Van Assche <bvanassche@xxxxxxx>
block: Reorder the request allocation code in blk_mq_submit_bio()

Matthew Rosato <mjrosato@xxxxxxxxxxxxx>
KVM: s390: pci: Fix aisb calculation

Farhan Ali <alifm@xxxxxxxxxxxxx>
KVM: s390: pci: Fix resource leak on IRQ registration failure

Farhan Ali <alifm@xxxxxxxxxxxxx>
KVM: s390: pci: Fix missing error codes and memory unaccounting

Farhan Ali <alifm@xxxxxxxxxxxxx>
KVM: s390: pci: Fix memory accounting for pinned/unpinned pages

Baul Lee <baul.lee@xxxxxxxx>
net: bridge: mrp: fix uninitialised bytes on the wire

Chengfeng Ye <nicoyip.dev@xxxxxxxxx>
netfilter: ebt_nflog: pin the NFLOG backend

Zihan Xi <zihanx@xxxxxxxxxx>
mac802154: fix netdev use-after-free in beacon worker

Qihang Tang <q.h.hack.winter@xxxxxxxxx>
net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header

Sergey V. Frolov <Sergey.V.Frolov@xxxxxxxxxxxxx>
net: octeontx2-pf: Fix UB in shift operation

Zijie Huang <milkory@xxxxxxxxxxx>
net/sched: reject overly deep qdisc hierarchies

Zhiling Zou <zhilinz@xxxxxxxxxx>
net: openvswitch: reallocate update replies for mismatched IDs

Sun Jian <sun.jian.kdev@xxxxxxxxx>
net: fix skb length accounting after generic XDP frag adjustment

Zihan Xi <zihanx@xxxxxxxxxx>
packet: synchronize pressure clearing with ring reconfiguration

Doruk Tan Ozturk <doruk@xxxxxxx>
net/packet: reset the MAC header on the packet-socket transmit path

Qihang Tang <q.h.hack.winter@xxxxxxxxx>
packet: use consistent hard_header_len in TX_RING send path

Qihang Tang <q.h.hack.winter@xxxxxxxxx>
packet: use consistent hard_header_len in non-ring send paths

Kyle Zeng <kylebot@xxxxxxxxxx>
ipvs: clear IPv4 options after rebasing tunnel ICMP errors

Julian Anastasov <ja@xxxxxx>
ipvs: properly update the overload flag on dest edit

Julian Anastasov <ja@xxxxxx>
ipvs: add totalconns for dest

Zhiling Zou <zhilinz@xxxxxxxxxx>
ipvs: stop estimator after disabled calc phase

Lincoln Wallace <locnnil0@xxxxxxxxx>
ima: fix out-of-bounds read in xattr_verify()

Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
Input: evdev - fix information leak in evdev_pass_values()

Joshua Rogers <linux@xxxxxxxxx>
vt: stabilize tty reference in kbd_keycode with tty_port_tty_get

Joshua Rogers <linux@xxxxxxxxx>
vt: add permission check for KDSKBMETA ioctl

Doruk Tan Ozturk <doruk@xxxxxxx>
net: usb: ipheth: fix carrier_work UAF on disconnect

Yi Cong <yicong@xxxxxxxxxx>
net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup()

Sonali Pradhan <sonalipradhan@xxxxxxxxxx>
usb: gadget: f_ncm: Use unsigned int for ndp_index

Pawel Laszczak <pawell@xxxxxxxxxxx>
usb: cdnsp: fix incorrect endian conversions for APB timeout register

Xu Rao <raoxu@xxxxxxxxxxxxx>
thunderbolt: icm: Preserve USB4 proxy data-valid bit

Aleksandr Nogikh <nogikh@xxxxxxxxxx>
usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm()

Baul Lee <baul.lee@xxxxxxxx>
ALSA: usb-audio: fix OOB write on Type II inbound URBs

Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
Input: evdev - sanitize event type index when fetching event masks

Guillaume Morin <guillaume@xxxxxxxxxxx>
swapfile: call cond_resched() before locking si->lock

Mikhail Kshevetskiy <mikhail.kshevetskiy@xxxxxxxxx>
mtd: spinand: repeat reading in regular mode if continuous reading fails

Mikhail Kshevetskiy <mikhail.kshevetskiy@xxxxxxxxx>
mtd: spinand: try a regular dirmap if creating a dirmap for continuous reading fails

Mikhail Kshevetskiy <mikhail.kshevetskiy@xxxxxxxxx>
mtd: spinand: fix direct mapping creation sizes

Larisa Grigore <larisa.grigore@xxxxxxx>
spi: spi-fsl-dspi: Avoid setup_accel logic for DMA transfers

Mehmet Fide <mehmet.fide@xxxxxxxxxxxxxxxxxx>
net: fec: do not release NULL pages when RX buffer allocation fails

Zeng Jingxiang <linuszeng@xxxxxxxxxxx>
mm/vmscan: wake up flushers conditionally to avoid cgroup OOM

Guenter Roeck <linux@xxxxxxxxxxxx>
hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvolt

Guenter Roeck <linux@xxxxxxxxxxxx>
hwmon: (ltc4282) Clamp negative current limits

Guenter Roeck <linux@xxxxxxxxxxxx>
hwmon: (ltc4282) Avoid overflow in maximum power calculation

Qingshuang Fu <fuqingshuang@xxxxxxxxxx>
hwmon: (ads7828) Fix external VREF regulator handling

Wilken Gottwalt <wilken.gottwalt@xxxxxxxxxx>
hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination

Maximilian Immanuel Brandtner <maxbr@xxxxxxxxxxxxx>
tls: don't abort the connection on signal-interrupted sends

Xin Long <lucien.xin@xxxxxxxxx>
sctp: clear control chunk transport if it is being removed

Eric Dumazet <edumazet@xxxxxxxxxx>
net/atm: fix slab-out-of-bounds read in vcc_setsockopt()

Hongyan Xu <getshell@xxxxxxxxxx>
ata: pata_sl82c105: fix bridge revision use-after-free

Fan XinRan <shinjiangjiang@xxxxxxxxx>
net: thunderbolt: Tear down DMA paths before stopping the rings

Sidraya Jayagond <sidraya@xxxxxxxxxxxxx>
net/smc: fix TOCTOU race between smc_listen_out() and listener close

Eric Dumazet <edumazet@xxxxxxxxxx>
net: remove WARN_ON_ONCE() from sk_mc_loop()

Pengpeng Hou <pengpeng@xxxxxxxxxxx>
net: prestera: validate firmware header length

Henry Martin <bsdhenrymartin@xxxxxxxxx>
net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length

Jiayuan Chen <jiayuan.chen@xxxxxxxxx>
tcp: fix TFO max_qlen accounting across reuseport migration

Qing Luo <luoqing@xxxxxxxxxx>
sctp: fix addip_serial increment on ASCONF_ACK allocation failure

Keegan Freyhof <keegan.freyhof@xxxxxxxxxxxx>
bnxt_en: Fix PTP PPS setting bug

Shravya KN <shravya.k-n@xxxxxxxxxxxx>
bnxt_en: Refresh VNIC default ring on queue restart if needed

Shravya KN <shravya.k-n@xxxxxxxxxxxx>
bnxt_en: Determine and store default RX ring in vnic structure

Shravya KN <shravya.k-n@xxxxxxxxxxxx>
bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss()

Martin Kaiser <martin@xxxxxxxxx>
selftests/ftrace: refactor eprobes test to fix argument checks

Guenter Roeck <linux@xxxxxxxxxxxx>
hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations

Qingshuang Fu <fuqingshuang@xxxxxxxxxx>
hwmon: (nzxt-smart2) Check return value of init_device() in probe

Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers

Cen Zhang (Microsoft) <blbllhy@xxxxxxxxx>
net/openvswitch: check Ethernet header length in key_extract()

Toke Høiland-Jørgensen <toke@xxxxxxx>
net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter

Xuanqiang Luo <luoxuanqiang@xxxxxxxxxx>
udp: fix potential use-after-free in tunnel segmentation

Stanislav Fomichev <sdf.kernel@xxxxxxxxx>
xsk: require at least 16 bytes of TX metadata

Nathan Gao <zcgao@xxxxxxxxxx>
tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss()

Christian Borntraeger <borntraeger@xxxxxxxxxxxxx>
vdpa/mlx5: Fix buffer length in create_direct_keys()

Yousef Alhouseen <alhouseenyousef@xxxxxxxxx>
vhost/vdpa: reject overflowing PA map page counts on 32-bit

Jose Fernandez (Anthropic) <jose.fernandez@xxxxxxxxx>
bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()

Jordan Rife <jordan@xxxxxxxx>
bpf: tcp: Avoid socket skips and repeats during iteration

Jordan Rife <jordan@xxxxxxxx>
bpf: tcp: Use bpf_tcp_iter_batch_item for bpf_tcp_iter_state batch items

Jordan Rife <jordan@xxxxxxxx>
bpf: tcp: Get rid of st_bucket_done

Jordan Rife <jordan@xxxxxxxx>
bpf: tcp: Make sure iter->batch always contains a full bucket snapshot

Jordan Rife <jordan@xxxxxxxx>
bpf: tcp: Make mem flags configurable through bpf_iter_tcp_realloc_batch

Babanpreet Singh <bbnpreetsingh@xxxxxxxxx>
counter: microchip-tcb-capture: Fix DT channel validation

Michael Guralnik <michaelgur@xxxxxxxxxx>
net/mlx5: fw_tracer, return NULL on create error

Or Har-Toov <ohartoov@xxxxxxxxxx>
devlink: fix net namespace reference leak in reload

Jiawen Liu <1298662399@xxxxxx>
net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete

Jamal Hadi Salim <jhs@xxxxxxxxxxxx>
net/sched: cls_route: fix fastmap use-after-free on filter

Mahanta Jambigi <mjambigi@xxxxxxxxxxxxx>
net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()

Yiyang Chen <chenyy23@xxxxxxxxxxxxxxxxxxxxx>
bpf: Preserve pointer state for commuted arithmetic

Dmitry Antipov <dmantipov@xxxxxxxxx>
btrfs: fix memory leak in btrfs_do_encoded_write()

Matti Vaittinen <mazziesaccount@xxxxxxxxx>
watchdog: bd96801_wdt: Fix timeout for enabled WDG

Julian Anastasov <ja@xxxxxx>
ipvs: return the csum validation for forward hook

Julian Anastasov <ja@xxxxxx>
ipvs: avoid out-of-bounds write in ip_vs_nat_icmp

Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxx>
netfilter: ipset: switch ext_size to atomic64_t

Nikhil P. Rao <nikhil.rao@xxxxxxx>
pds_core: cancel pending PCI reset work on AER recovery

Nikhil P. Rao <nikhil.rao@xxxxxxx>
pds_core: keep the health thread stopped during reset

Shay Drory <shayd@xxxxxxxxxx>
net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock

Satish Kharat <satishkh@xxxxxxxxx>
enic: fix tx_hang_reset use-after-free on device removal

Xiang Mei (Microsoft) <xmei5@xxxxxxx>
bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor

Fan Ye <fy15309206903@xxxxxxxxx>
Revert "net: thunderbolt: Enable end-to-end flow control also in transmit"

Jijie Shao <shaojijie@xxxxxxxxxx>
net: hns3: fix speed configuration residue after driver reload

Pengpeng Hou <pengpeng@xxxxxxxxxxx>
drm/bridge: ps8640: propagate AUX transfer register errors

Rosen Penev <rosenp@xxxxxxxxx>
ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt

Yuho Choi <dbgh9129@xxxxxxxxx>
ARM: npcm: Fix OF node refcount leaks in SMP setup

Daniel Drake <dan@xxxxxxxxxxxxxxx>
arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timer

Anna Schumaker <anna.schumaker@xxxxxxxxxxxxxxx>
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

Harald Freudenberger <freude@xxxxxxxxxxxxx>
s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey()

Ray Wu <ray.wu@xxxxxxx>
drm/amd/display: Check for tg ops in dce110_set_avmute

Ray Wu <ray.wu@xxxxxxx>
drm/amd/display: Add AV mute wait frames to dce110_set_avmute

Michal Luczaj <mhal@xxxxxxx>
selftests/bpf: Fail unbound UDP on sockmap update

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
mount: honour SB_NOUSER in the new mount API


-------------

Diffstat:

.../bindings/crypto/qcom,inline-crypto-engine.yaml | 16 +-
MAINTAINERS | 5 +
Makefile | 4 +-
arch/arm/boot/dts/broadcom/bcm-ns.dtsi | 2 +-
arch/arm/mach-npcm/platsmp.c | 2 +
arch/arm64/boot/dts/broadcom/bcm2712.dtsi | 2 -
arch/s390/kvm/pci.c | 86 ++++--
arch/s390/kvm/pci.h | 2 +
arch/x86/kvm/mmu/mmu.c | 3 +
arch/x86/kvm/svm/sev.c | 12 +
block/blk-mq.c | 38 +--
drivers/ata/pata_sl82c105.c | 4 +-
drivers/counter/microchip-tcb-capture.c | 4 +-
drivers/crypto/ccp/sev-dev.c | 17 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +
drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 35 +--
.../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 24 +-
drivers/gpu/drm/bridge/parade-ps8640.c | 27 +-
drivers/hwmon/ads7828.c | 11 +-
drivers/hwmon/corsair-psu.c | 4 +-
drivers/hwmon/ltc4282.c | 20 +-
drivers/hwmon/nzxt-smart2.c | 6 +-
drivers/hwmon/pmbus/lm25066.c | 5 +-
drivers/input/evdev.c | 27 +-
drivers/misc/fastrpc.c | 19 +-
drivers/misc/mei/client.c | 25 +-
drivers/mtd/nand/spi/core.c | 74 ++++--
drivers/net/bonding/bond_alb.c | 10 +-
drivers/net/ethernet/amd/pds_core/core.h | 1 +
drivers/net/ethernet/amd/pds_core/main.c | 14 +-
drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 51 +++-
drivers/net/ethernet/aquantia/atlantic/aq_ring.h | 1 +
drivers/net/ethernet/aquantia/atlantic/aq_vec.c | 2 +-
drivers/net/ethernet/broadcom/bnxt/bnxt.c | 50 ++--
drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 +
drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c | 7 +-
drivers/net/ethernet/cisco/enic/enic_main.c | 5 +-
drivers/net/ethernet/freescale/fec_main.c | 11 +-
drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 1 -
.../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 6 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 6 +-
.../net/ethernet/marvell/prestera/prestera_pci.c | 3 +
.../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 16 +-
.../net/ethernet/mellanox/mlx5/core/en/tc_priv.h | 1 +
drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 4 +-
drivers/net/thunderbolt/main.c | 33 ++-
drivers/net/usb/ax88179_178a.c | 4 +-
drivers/net/usb/ipheth.c | 11 +-
drivers/net/veth.c | 22 +-
drivers/net/vxlan/vxlan_core.c | 2 +-
drivers/nvmem/core.c | 24 +-
drivers/nvmem/internals.h | 2 +
drivers/nvmem/layouts.c | 11 -
drivers/nvmem/layouts/Makefile | 1 +
drivers/nvmem/layouts/fixed-layout.c | 58 ++++
drivers/pinctrl/renesas/pinctrl-rzg2l.c | 4 +-
drivers/ptp/ptp_ocp.c | 4 +-
drivers/s390/crypto/zcrypt_ccamisc.c | 20 +-
drivers/scsi/scsi_debug.c | 4 +-
drivers/spi/spi-fsl-dspi.c | 13 +-
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 3 +
drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 2 +-
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 3 +
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 4 +
drivers/thermal/thermal_hwmon.c | 3 +-
drivers/thunderbolt/eeprom.c | 9 +-
drivers/thunderbolt/icm.c | 2 +-
drivers/thunderbolt/tb.c | 2 +-
drivers/tty/serial/8250/8250_dma.c | 12 +-
drivers/tty/serial/qcom_geni_serial.c | 43 +--
drivers/tty/vt/keyboard.c | 5 +-
drivers/tty/vt/vt_ioctl.c | 2 +
drivers/usb/atm/cxacru.c | 2 +
drivers/usb/cdns3/cdnsp-gadget.c | 4 +-
drivers/usb/gadget/function/f_ncm.c | 2 +-
drivers/vdpa/mlx5/core/mr.c | 3 +-
drivers/vhost/vdpa.c | 9 +-
drivers/vhost/vhost.c | 8 +
drivers/video/fbdev/core/bitblit.c | 9 +-
drivers/watchdog/bd96801_wdt.c | 5 +-
fs/binfmt_misc.c | 3 +-
fs/btrfs/inode.c | 1 +
fs/crypto/policy.c | 2 +-
fs/namespace.c | 5 +
fs/nfs/nfs4proc.c | 5 +
fs/overlayfs/super.c | 3 +-
fs/smb/client/sess.c | 2 +-
fs/tracefs/event_inode.c | 28 +-
fs/tracefs/internal.h | 4 +-
fs/verity/measure.c | 15 +-
include/linux/netdevice.h | 11 +-
include/linux/netfilter/ipset/ip_set.h | 2 +-
include/linux/nvmem-provider.h | 6 +
include/linux/psp-sev.h | 3 +
include/net/act_api.h | 19 ++
include/net/addrconf.h | 4 +-
include/net/ip_vs.h | 41 +--
include/net/route.h | 2 +
include/net/sch_generic.h | 1 +
kernel/bpf/verifier.c | 15 +-
kernel/futex/core.c | 85 ++++--
kernel/sched/psi.c | 6 +
kernel/trace/ring_buffer.c | 12 +-
kernel/trace/trace_events.c | 2 +
lib/fortify_kunit.c | 139 +++++-----
mm/huge_memory.c | 49 ++--
mm/swapfile.c | 2 +-
mm/vmscan.c | 25 +-
net/atm/common.c | 14 +-
net/bridge/br_mrp.c | 6 +-
net/bridge/netfilter/ebt_nflog.c | 17 +-
net/bridge/netfilter/nf_conntrack_bridge.c | 1 +
net/core/dev.c | 10 +-
net/core/sock.c | 1 -
net/core/xdp.c | 2 +-
net/devlink/dev.c | 1 +
net/ipv4/fib_semantics.c | 101 ++++---
net/ipv4/inet_connection_sock.c | 20 +-
net/ipv4/route.c | 29 ++
net/ipv4/tcp_bpf.c | 2 +
net/ipv4/tcp_input.c | 2 +-
net/ipv4/tcp_ipv4.c | 293 +++++++++++++++------
net/ipv4/udp_offload.c | 4 +-
net/ipv6/ip6_tunnel.c | 3 +
net/ipv6/route.c | 8 +-
net/mac802154/scan.c | 4 +
net/ncsi/ncsi-netlink.c | 4 +
net/netfilter/ipset/ip_set_bitmap_gen.h | 4 +-
net/netfilter/ipset/ip_set_core.c | 6 +-
net/netfilter/ipset/ip_set_hash_gen.h | 2 +-
net/netfilter/ipset/ip_set_list_set.c | 4 +-
net/netfilter/ipvs/ip_vs_conn.c | 41 +--
net/netfilter/ipvs/ip_vs_core.c | 70 ++---
net/netfilter/ipvs/ip_vs_ctl.c | 77 +++++-
net/netfilter/ipvs/ip_vs_est.c | 10 +-
net/netfilter/ipvs/ip_vs_lc.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 4 +-
net/netfilter/ipvs/ip_vs_proto_tcp.c | 2 -
net/netfilter/ipvs/ip_vs_sync.c | 7 +-
net/netfilter/ipvs/ip_vs_xmit.c | 2 +-
net/netfilter/nf_conntrack_proto.c | 6 +
net/netfilter/nf_conntrack_proto_sctp.c | 12 +-
net/netfilter/nf_conntrack_proto_tcp.c | 132 ++++++----
net/openvswitch/datapath.c | 29 +-
net/openvswitch/flow.c | 11 +-
net/packet/af_packet.c | 72 +++--
net/sched/act_ct.c | 29 +-
net/sched/act_gact.c | 5 +
net/sched/act_police.c | 6 +
net/sched/cls_api.c | 17 +-
net/sched/cls_route.c | 35 ++-
net/sched/sch_api.c | 9 +
net/sched/sch_cake.c | 1 -
net/sctp/associola.c | 11 +-
net/sctp/outqueue.c | 1 +
net/sctp/sm_make_chunk.c | 3 +-
net/sctp/sm_statefuns.c | 6 +-
net/smc/af_smc.c | 3 +-
net/smc/smc_llc.c | 3 +-
net/smc/smc_rx.c | 19 +-
net/tipc/node.c | 15 +-
net/tls/tls_sw.c | 16 +-
net/vmw_vsock/virtio_transport.c | 14 +-
net/xdp/xdp_umem.c | 2 +
security/integrity/ima/ima_appraise.c | 9 +-
security/integrity/ima/ima_main.c | 39 +++
sound/usb/endpoint.c | 6 +-
sound/usb/midi2.c | 9 +
sound/usb/usx2y/usX2Yhwdep.c | 2 +
sound/usb/usx2y/usx2yhwdeppcm.c | 2 +
.../selftests/bpf/prog_tests/sockmap_basic.c | 6 +-
.../selftests/bpf/prog_tests/sockmap_listen.c | 21 +-
tools/testing/selftests/bpf/test_maps.c | 13 +-
.../ftrace/test.d/dynevent/add_remove_eprobe.tc | 16 +-
174 files changed, 1957 insertions(+), 881 deletions(-)