[PATCH 6.1 000/303] 6.1.184-rc1 review
From: Greg Kroah-Hartman
Date: Thu Aug 20 2026 - 13:54:46 EST
This is the start of the stable review cycle for the 6.1.184 release.
There are 303 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Sat, 22 Aug 2026 14:51:11 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.184-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.1.184-rc1
Zihan Xi <zihanx@xxxxxxxxxx>
Bluetooth: mgmt: fix pending command UAF in EIR updates
Pauli Virtanen <pav@xxxxxx>
Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync
Pauli Virtanen <pav@xxxxxx>
Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate
Edward Adam Davis <eadavis@xxxxxx>
Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
Robert Mader <robert.mader@xxxxxxxxxxxxx>
udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()
Gao Xiang <xiang@xxxxxxxxxx>
erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
Andrei Kuchynski <akuchynski@xxxxxxxxxxxx>
usb: typec: ucsi: Correct teardown ordering in ucsi_init() error path
Pedro Falcato <pfalcato@xxxxxxx>
RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_sync: Fix not using correct handle
Christian Brauner <brauner@xxxxxxxxxx>
binfmt_misc: use exe_file_deny_write_access() for the interpreter clone
Lorenzo Stoakes (ARM) <ljs@xxxxxxxxxx>
mm/huge_memory: fix huge_zero_pfn race
Baul Lee <baul.lee@xxxxxxxx>
net/x25: fix use-after-free of the socket by its timers
Siddharth Vadapalli <s-vadapalli@xxxxxx>
net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
Zhang Changzhong <zhangchangzhong@xxxxxxxxxx>
net/sched: cls_u32: skip hash tables in u32_bind_class()
Eric Dumazet <edumazet@xxxxxxxxxx>
af_packet: Don't send zero-byte data in tpacket_snd().
Rosen Penev <rosenp@xxxxxxxxx>
ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
Chuck Lever <cel@xxxxxxxxxx>
net/tls: Fail tls_sw_splice_read() after a failed async decrypt
Wei Fang <wei.fang@xxxxxxx>
net: packet: fix wrong transport_header when sending VLAN-tagged frame
Eric Dumazet <edumazet@xxxxxxxxxx>
macvlan: inherit needed_headroom and needed_tailroom from lowerdev
Eric Dumazet <edumazet@xxxxxxxxxx>
ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
Florian Westphal <fw@xxxxxxxxx>
netfilter: ipset: let destroy callbacks adjust ext mem size
Florian Westphal <fw@xxxxxxxxx>
netfilter: ipset: fix list type element drift bug
Jérémy Jean <Jeremy.Jean@xxxxxxxxxxxxxxxxx>
netfilter: flowtable: publish GC-visible tuple last
Alexey Velichayshiy <a.velichayshiy@xxxxxxxxx>
netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
Xiang Mei (Microsoft) <xmei5@xxxxxxx>
netfilter: ipset: fix refcount race between list:set GC and swap
Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>
crypto: ccm - Set rfc4309 maxauthsize from child
Jon Hunter <jonathanh@xxxxxxxxxx>
arm64: tegra: Add EL2 virtual timer interrupt for Tegra194
Zihan Xi <zihanx@xxxxxxxxxx>
netfilter: nf_conntrack: defer invalid log until after unlock
Florian Westphal <fw@xxxxxxxxx>
netfilter: conntrack: sctp: use nf log infrastructure for invalid packets
Hyunjung Ko <hj351016@xxxxxxxxx>
net/sched: act_ct: fix sk_buff leak when the header checks reject a packet
Xin Long <lucien.xin@xxxxxxxxx>
openvswitch: move key and ovs_cb update out of handle_fragments
Xin Long <lucien.xin@xxxxxxxxx>
net: sched: use skb_ip_totlen and iph_totlen
Xin Long <lucien.xin@xxxxxxxxx>
openvswitch: use skb_ip_totlen in conntrack
Paolo Bonzini <pbonzini@xxxxxxxxxx>
KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
Sun Jian <sun.jian.kdev@xxxxxxxxx>
veth: fix skb length accounting after XDP frag adjustment
Stanislav Fomichev <sdf@xxxxxxxxxx>
veth: Introduce veth_xdp_buff wrapper for xdp_buff
Lorenzo Stoakes (ARM) <ljs@xxxxxxxxxx>
mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer@xxxxxxx>
drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini
Tu Nguyen <tu.nguyen.xg@xxxxxxxxxxx>
can: rcar_canfd: change the initializing flow for clocks and resets
Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
can: rcar_canfd: Extract rcar_canfd_global_{,de}init()
Biju Das <biju.das.jz@xxxxxxxxxxxxxx>
can: rcar_canfd: Use devm_clk_get_optional() for RAM clk
Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
can: rcar_canfd: Invert reset assert order
Yang Wang <kevinyang.wang@xxxxxxx>
drm/amd/pm: fix pptable use-after-free
Yang Wang <kevinyang.wang@xxxxxxx>
drm/amd/pm: fix torn gpu metrics reads
Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure
Jonas Gorski <jonas.gorski@xxxxxxxx>
i2c: iproc: reset bus after timeout if START_BUSY is stuck
Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: bcm-iproc: remove printout on handled timeouts
Christian Brauner <brauner@xxxxxxxxxx>
binfmt_misc: restore write access when removing an entry
Amir Goldstein <amir73il@xxxxxxxxx>
fs: don't block write during exec on pre-content watched files
Amir Goldstein <amir73il@xxxxxxxxx>
fsnotify: opt-in for permission events at file open time
Dawei Feng <dawei.feng@xxxxxxxxxx>
ice: fix memory leak in ice_lbtest_prepare_rings()
Dawid Osuchowski <dawid.osuchowski@xxxxxxxxxxxxxxx>
ice: fix VF interrupts cleanup
Matt Fleming <mfleming@xxxxxxxxxxxxxx>
veth: convert frag_list skbs before running XDP
Chengfeng Ye <nicoyip.dev@xxxxxxxxx>
net: pktgen: fix proc entry use-after-free
Peter Seiderer <ps.report@xxxxxxx>
net: pktgen: fix code style (WARNING: Block comments)
David Carlier <devnexen@xxxxxxxxx>
igc: remove napi_synchronize() in igc_down()
Namjae Jeon <linkinjeon@xxxxxxxxxx>
ksmbd: reject repeated SMB2 NEGOTIATE requests
Namjae Jeon <linkinjeon@xxxxxxxxxx>
ksmbd: conn lock to serialize smb2 negotiate
Chengfeng Ye <nicoyip.dev@xxxxxxxxx>
Bluetooth: hci_sync: Fix advertising data UAFs
Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_core: Fix not handling hdev->le_num_of_adv_sets=1
Gustavo A. R. Silva <gustavoars@xxxxxxxxxx>
Bluetooth: hci_conn, hci_sync: Use __counted_by() to avoid -Wfamnae warnings
Kees Cook <keescook@xxxxxxxxxxxx>
overflow: Change DEFINE_FLEX to take __counted_by member
Gregory Price <gourry@xxxxxxxxxx>
mm/vmstat: fold stranded per-cpu node stats when a node comes online
Zihan Xi <xizh2024@xxxxxxxxxx>
Bluetooth: mgmt: fix UAF in pair command cancellation
Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: MGMT: Protect mgmt_pending list with its own lock
Dr. David Alan Gilbert <linux@xxxxxxxxxxx>
Bluetooth: MGMT: Remove unused mgmt_pending_find_data
Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
Michael Bommarito <michael.bommarito@xxxxxxxxx>
erofs: cap LZMA stream pool size
Jingbo Xu <jefflexu@xxxxxxxxxxxxxxxxx>
erofs: maintain cookies of share domain in self-contained list
Gao Xiang <xiang@xxxxxxxxxx>
erofs: tidy up internal.h
Kefeng Wang <wangkefeng.wang@xxxxxxxxxx>
mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE
David Hildenbrand <david@xxxxxxxxxx>
mm/migrate_device: page_remove_rmap() -> folio_remove_rmap_pte()
Namjae Jeon <linkinjeon@xxxxxxxxxx>
ksmbd: validate minimum PDU size for transform requests
ChenXiaoSong <chenxiaosong@xxxxxxxxxx>
smb/server: fix minimum SMB2 PDU size
ChenXiaoSong <chenxiaosong@xxxxxxxxxx>
smb/server: fix minimum SMB1 PDU size
Namjae Jeon <linkinjeon@xxxxxxxxxx>
ksmbd: rename smb2_get_msg to smb_get_msg
ChenXiaoSong <chenxiaosong@xxxxxxxxxx>
smb/server: rename include guard in smb_common.h
Christian Brauner <brauner@xxxxxxxxxx>
super: fix emergency thaw deadlock on frozen block devices
Wentao Guan <guanwentao@xxxxxxxxxxxxx>
ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL
Haofeng Li <lihaofeng@xxxxxxxxxx>
ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl
Ferry Meng <mengferry@xxxxxxxxxxxxxxxxx>
ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow
Aldo Ariel Panzardo <qwe.aldo@xxxxxxxxx>
net/sched: serialize qdisc_rtab_list against concurrent get/put
Shiming Cheng <shiming.cheng@xxxxxxxxxxxx>
net: gro: fix double aggregation of flush-marked skbs
Felix Fietkau <nbd@xxxxxxxx>
net: move skb_gro_receive_list from udp to core
Pavitra Jha <jhapavitra98@xxxxxxxxx>
libceph: fix two unsafe bare decodes in decode_lockers()
Chancel Liu <chancel.liu@xxxxxxx>
ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP
Max Kellermann <max.kellermann@xxxxxxxxx>
ceph: fix hanging __ceph_get_caps() with stale mds_wanted
Xiubo Li <xiubli@xxxxxxxxxx>
ceph: rename _to_client() to _to_fs_client()
Xiubo Li <xiubli@xxxxxxxxxx>
ceph: pass the mdsc to several helpers
Xiubo Li <xiubli@xxxxxxxxxx>
libceph: add doutc and *_client debug macros support
Xiang Mei <xmei5@xxxxxxx>
libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE
Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
libceph: Amend checking to fix `make W=1` build breakage
Max Kellermann <max.kellermann@xxxxxxxxx>
ceph: avoid fs reclaim while using current->journal_info
Zhiling Zou <roxy520tt@xxxxxxxxx>
sctp: avoid auth_enable sysctl UAF during netns teardown
Geliang Tang <tanggeliang@xxxxxxxxxx>
mptcp: pm: userspace: fix use-after-free in get_local_id
Geliang Tang <tanggeliang@xxxxxxxxxx>
mptcp: pm: use addr entry for get_local_id
Geliang Tang <tanggeliang@xxxxxxxxxx>
mptcp: add mptcp_userspace_pm_lookup_addr helper
Geliang Tang <tanggeliang@xxxxxxxxxx>
mptcp: pm: avoid code duplication to lookup endp
Alexander Usyskin <alexander.usyskin@xxxxxxxxx>
mei: bus: access mei_device under device_lock on cleanup
Kai Vehmanen <kai.vehmanen@xxxxxxxxxxxxxxx>
ALSA: hda: codecs: hdmi: disable keep-alive before audio format change
LiangCheng Wang <zaq14760@xxxxxxxxx>
wifi: brcmfmac: set F2 blocksize to 256 for BCM43752
Gokul Sivakumar <gokulkumar.sivakumar@xxxxxxxxxxxx>
wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW)
Fan Wu <fanwu01@xxxxxxxxxx>
wifi: brcmfmac: drain bus_reset work on device removal
Daniel Hodges <git@xxxxxxxxxxxxxxxx>
wifi: ath6kl: fix use-after-free in aggr_reset_state()
Sakari Ailus <sakari.ailus@xxxxxxxxxxxxxxx>
media: imx219: Fix maximum frame length in lines
Jai Luthra <jai.luthra@xxxxxxxxxxxxxxxx>
media: i2c: imx219: Rename VTS to FRM_LENGTH
David Plowman <david.plowman@xxxxxxxxxxxxxxx>
media: i2c: imx219: Correct the minimum vblanking value
Laurent Pinchart <laurent.pinchart@xxxxxxxxxxxxxxxx>
media: i2c: imx219: Drop IMX219_VTS_* macros
Jani Nikula <jani.nikula@xxxxxxxxx>
drm/i915/hdcp: check streams[] bounds before overflow
Jani Nikula <jani.nikula@xxxxxxxxx>
drm/i915/hdcp: require monotonically increasing seq_num_v
Suraj Kandpal <suraj.kandpal@xxxxxxxxx>
drm/i915/hdcp: Move to using intel_display in intel_hdcp
Jani Nikula <jani.nikula@xxxxxxxxx>
drm/i915/vrr: require valid min/max vfreq for VRR
Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable()
Timur Kristóf <timur.kristof@xxxxxxxxx>
drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr functions
Thomas Zimmermann <tzimmermann@xxxxxxx>
drm/tegra: fbdev: Remove offset into framebuffer memory
Jani Nikula <jani.nikula@xxxxxxxxx>
drm/displayid: fix Tiled Display Topology ID size
Andrei Kuchynski <akuchynski@xxxxxxxxxxxx>
usb: typec: ucsi: Fix race condition and ordering in port unregistration
Sergey Senozhatsky <senozhatsky@xxxxxxxxxxxx>
usb: typec: ucsi: split connector lock classes
Diogo Ivo <diogo.ivo@xxxxxxxxxxxxxxxxxx>
usb: typec: ucsi: Only enable supported notifications
Cen Zhang <zzzccc427@xxxxxxxxx>
usb: gadget: f_tcm: synchronize delayed set_alt with teardown
Vitor Soares <vitor.soares@xxxxxxxxxxx>
drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS()
Guangshuo Li <lgs201920130244@xxxxxxxxx>
usb: musb: omap2430: Do not put borrowed of_node in probe
Johan Hovold <johan@xxxxxxxxxx>
usb: musb: omap2430: clean up probe error handling
Venkatesh Srinivas <venkateshs@xxxxxxxxxxxx>
KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN
David Matlack <dmatlack@xxxxxxxxxx>
KVM: Introduce vcpu->wants_to_run
Alex Williamson <alex.williamson@xxxxxxxxxx>
vfio/pci: Fix racy bitfields and tighten struct layout
Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
Bluetooth: HCI: Remove HCI_AMP support
Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
Bluetooth: Remove usage of the deprecated ida_simple_xx() API
Reinette Chatre <reinette.chatre@xxxxxxxxx>
fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list
Peng Fan <peng.fan@xxxxxxx>
pmdomain: imx: Fix i.MX8MP power notifier
Bryam Vargas <hexlabsecurity@xxxxxxxxx>
ata: libata-core: Reject an invalid concurrent positioning ranges count
Dawei Feng <dawei.feng@xxxxxxxxxx>
octeontx2-pf: fix SQB pointer leak on init failure
Haoxiang Li <haoxiang_li2024@xxxxxxx>
net: ipa: fix SMEM state handle leaks in SMP2P init
Crystal Wood <crwood@xxxxxxxxxx>
tracing/osnoise: Call synchronize_rcu() when unregistering
Uladzislau Rezki (Sony) <urezki@xxxxxxxxx>
tracing: Rename kvfree_rcu() to kvfree_rcu_mightsleep()
Théo Lebrun <theo.lebrun@xxxxxxxxxxx>
net: macb: drop in-flight Tx SKBs on close
Wentao Liang <vulab@xxxxxxxxxxx>
ipmi: fix refcount leak in i_ipmi_request()
Breno Leitao <leitao@xxxxxxxxxx>
bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()
Breno Leitao <leitao@xxxxxxxxxx>
bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c
Rasmus Villemoes <linux@xxxxxxxxxxxxxxxxxx>
bootconfig: do not put quotes on cmdline items unless necessary
Sabrina Dubroca <sd@xxxxxxxxxxxxxxx>
espintcp: use sk_msg_free_partial to fix partial send
David Howells <dhowells@xxxxxxxxxx>
tcp_bpf, smc, tls, espintcp, siw: Reduce MSG_SENDPAGE_NOTLAST usage
David Howells <dhowells@xxxxxxxxxx>
siw: Inline do_tcp_sendpages()
David Howells <dhowells@xxxxxxxxxx>
espintcp: Inline do_tcp_sendpages()
David Howells <dhowells@xxxxxxxxxx>
tcp_bpf: Inline do_tcp_sendpages as it's now a wrapper around tcp_sendmsg
Bryam Vargas <hexlabsecurity@xxxxxxxxx>
net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked
Vladimir Oltean <vladimir.oltean@xxxxxxx>
net/sched: taprio: avoid calling child->ops->dequeue(child) twice
Junrui Luo <moonafterrain@xxxxxxxxxxx>
octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
Sergio Paracuellos <sergio.paracuellos@xxxxxxxxx>
gpio: mt7621: avoid corruption of shared interrupt trigger state
Runyu Xiao <runyu.xiao@xxxxxxxxxx>
gpio: tegra: do not call pinctrl for GPIO direction
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxx>
treewide: rename pinctrl_gpio_direction_input_new()
Maoyi Xie <maoyixie.tju@xxxxxxxxx>
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink
Zihan Xi <xizh2024@xxxxxxxxxx>
net/sched: act_ct: preserve tc_skb_cb across defragmentation
Dexuan Cui <decui@xxxxxxxxxxxxx>
net: mana: Validate the packet length reported by the NIC
Thomas Gleixner <tglx@xxxxxxxxxx>
locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
Guangshuo Li <lgs201920130244@xxxxxxxxx>
mmc: vub300: fix use-after-free on probe failure
Johan Hovold <johan@xxxxxxxxxx>
mmc: vub300: rename probe error labels
Johan Hovold <johan@xxxxxxxxxx>
mmc: vub300: fix use-after-free on disconnect
Maoyi Xie <maoyixie.tju@xxxxxxxxx>
wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()
Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
Input: ims-pcu - fix firmware leak in async update
Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
firmware_loader: introduce __free() cleanup hanler
Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm-verity: make error counter atomic
Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm-integrity: don't increment hash_offset twice
Heinz Mauelshagen <heinzm@xxxxxxxxxx>
dm: remove unnecessary braces from single statement blocks
Heinz Mauelshagen <heinzm@xxxxxxxxxx>
dm: add missing empty lines
Heinz Mauelshagen <heinzm@xxxxxxxxxx>
dm crypt: correct 'foo*' to 'foo *'
Heinz Mauelshagen <heinzm@xxxxxxxxxx>
dm: fix trailing statements
Mikulas Patocka <mpatocka@xxxxxxxxxx>
dm-verity: avoid double increment of &use_bh_wq_enabled
Souvik Banerjee <souvik@xxxxxxxxxxxx>
ovl: use linked upper dentry in copy-up tmpfile
Jann Horn <jannh@xxxxxxxxxx>
bpf,fork: wipe ->bpf_storage before bailouts that access it
Vincent Jardin <vjardin@xxxxxxx>
i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)
Stefan Eichenberger <stefan.eichenberger@xxxxxxxxxxx>
i2c: imx: separate atomic, dma and non-dma use case
Michael Bommarito <michael.bommarito@xxxxxxxxx>
thunderbolt: Prevent XDomain delayed work use-after-free on disconnect
Yiyang Chen <cyyzero16@xxxxxxxxx>
taskstats: retain dead thread stats in TGID queries
Oleg Nesterov <oleg@xxxxxxxxxx>
taskstats: fill_stats_for_tgid: use for_each_thread()
Maoyi Xie <maoyixie.tju@xxxxxxxxx>
net: thunderbolt: Fix frags[] overflow by bounding frame_count
Florian Fuchs <fuchsfl@xxxxxxxxx>
mtd: maps: vmu-flash: fix fault in unaligned fixup
Breno Leitao <leitao@xxxxxxxxxx>
9p: skip nlink update in cacheless mode to fix WARN_ON
Muchun Song <muchun.song@xxxxxxxxx>
mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE
Aneesh Kumar K.V <aneesh.kumar@xxxxxxxxxxxxx>
mm/vmemmap/devdax: fix kernel crash when probing devdax devices
Mike Rapoport (IBM) <rppt@xxxxxxxxxx>
mm: move most of core MM initialization to mm/mm_init.c
Michael Bommarito <michael.bommarito@xxxxxxxxx>
ntfs3: validate split-point offset in indx_insert_into_buffer
Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx>
fs/ntfs3: Undo critial modificatins to keep directory consistency
Fernando Fernandez Mancera <fmancera@xxxxxxx>
netfilter: nft_objref: validate objref and objrefmap expressions
Yue Haibing <yuehaibing@xxxxxxxxxx>
netfilter: nf_tables: Remove unused nft_reduce_is_readonly()
Jeremy Sowden <jeremy@xxxxxxxxxx>
netfilter: bitwise: rename some boolean operation functions
Florian Westphal <fw@xxxxxxxxx>
netfilter: nf_tables: drop unused 3rd argument from validate callback ops
Florian Westphal <fw@xxxxxxxxx>
netfilter: nf_tables: pass context structure to nft_parse_register_load
Wasim Nazir <wasim.nazir@xxxxxxxxxxxxxxxx>
remoteproc: qcom: Fix leak when custom dump_segments addition fails
Yogesh Lal <quic_ylal@xxxxxxxxxxx>
remoteproc: qcom: pas: Adjust the phys addr wrt the mem region
Mukesh Ojha <quic_mojha@xxxxxxxxxxx>
remoteproc: qcom: fix sparse warnings
Mukesh Ojha <quic_mojha@xxxxxxxxxxx>
remoteproc: qcom: replace kstrdup with kstrndup
Tristan Madani <tristan@xxxxxxxxxxxxxxxxxxx>
selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()
Casey Schaufler <casey@xxxxxxxxxxxxxxxx>
lsm: infrastructure management of the sock security
Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nf_conntrack_sip: validate skb_dst() before accessing it
Florian Westphal <fw@xxxxxxxxx>
netfilter: nf_conntrack_sip: remove net variable shadowing
Florian Westphal <fw@xxxxxxxxx>
netfilter: nft_set_pipapo: don't leak bad clone into future transaction
Florian Westphal <fw@xxxxxxxxx>
netfilter: nft_set_pipapo: move cloning of match info to insert/removal path
Florian Westphal <fw@xxxxxxxxx>
netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone
Florian Westphal <fw@xxxxxxxxx>
netfilter: nft_set_pipapo: merge deactivate helper into caller
Florian Westphal <fw@xxxxxxxxx>
netfilter: nft_set_pipapo: prepare walk function for on-demand clone
Florian Westphal <fw@xxxxxxxxx>
netfilter: nft_set_pipapo: make pipapo_clone helper return NULL
Florian Westphal <fw@xxxxxxxxx>
netfilter: nft_set_pipapo: move prove_locking helper around
Florian Westphal <fw@xxxxxxxxx>
netfilter: nft_set_pipapo: use GFP_KERNEL for insertions
Sumanth Korikkar <sumanthk@xxxxxxxxxxxxx>
s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init()
Thomas Richter <tmricht@xxxxxxxxxxxxx>
s390/cpum_cf: merge source files for CPU Measurement counter facility
Thomas Richter <tmricht@xxxxxxxxxxxxx>
s390/cpum_cf: remove in-kernel counting facility interface
Thomas Richter <tmricht@xxxxxxxxxxxxx>
s390/cpum_cf: move stccm_avail()
Thomas Richter <tmricht@xxxxxxxxxxxxx>
s390/cpum_cf: move cpum_cf_ctrset_size()
Cássio Gabriel <cassiogabrielcontato@xxxxxxxxx>
ASoC: mediatek: mt8192: Check runtime resume during probe
Tang Bin <tangbin@xxxxxxxxxxxxxxxxxxxx>
ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable
AngeloGioacchino Del Regno <angelogioacchino.delregno@xxxxxxxxxxxxx>
ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb
AngeloGioacchino Del Regno <angelogioacchino.delregno@xxxxxxxxxxxxx>
ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe()
AngeloGioacchino Del Regno <angelogioacchino.delregno@xxxxxxxxxxxxx>
ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable()
Peter Ujfalusi <peter.ujfalusi@xxxxxxxxxxxxxxx>
ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
Cássio Gabriel <cassiogabrielcontato@xxxxxxxxx>
ASoC: mediatek: mt8183: Check runtime resume during probe
Runyu Xiao <runyu.xiao@xxxxxxxxxx>
octeontx2-vf: clear stale mailbox IRQ state before request_irq()
Runyu Xiao <runyu.xiao@xxxxxxxxxx>
octeontx2-pf: clear stale mailbox IRQ state before request_irq()
Subbaraya Sundeep <sbhatta@xxxxxxxxxxx>
octeontx2: Annotate mmio regions as __iomem
Wentao Liang <vulab@xxxxxxxxxxx>
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()
Petr Machata <petrm@xxxxxxxxxx>
mlxsw: spectrum: On port enslavement to a LAG, join upper's bridges
Jason Wang <jasowang@xxxxxxxxxx>
VDUSE: avoid leaking information to userspace
Eugenio Pérez <eperezma@xxxxxxxxxx>
vduse: take out allocations from vduse_dev_alloc_coherent
Eugenio Pérez <eperezma@xxxxxxxxxx>
vduse: remove unused vaddr parameter of vduse_domain_free_coherent
Sheng Zhao <sheng.zhao@xxxxxxxxxxxxx>
vduse: Use fixed 4KB bounce pages for non-4KB page size
Li Xiasong <lixiasong1@xxxxxxxxxx>
tipc: restrict socket queue dumps in enqueue tracepoints
Jiacheng Yu <yujiacheng3@xxxxxxxxxx>
fbcon: Use correct type for vc_resize() return value
Thomas Zimmermann <tzimmermann@xxxxxxx>
fbcon: Rename struct fbcon_ops to struct fbcon_par
Li Daming <d4n.for.sec@xxxxxxxxx>
rxrpc: serialize kernel accept preallocation with socket teardown
Tapio Reijonen <tapio.reijonen@xxxxxxxxxxx>
serial: max310x: implement gpio_chip::get_direction()
Hugo Villeneuve <hvilleneuve@xxxxxxxxxxxx>
serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch)
Xu Rao <raoxu@xxxxxxxxxxxxx>
ALSA: hda: Fix cached processing coefficient verbs
Zhang Heng <zhangheng@xxxxxxxxxx>
ALSA: hda: conexant: Remove mic bias threshold override
Ricardo Robaina <rrobaina@xxxxxxxxxx>
audit: fix recursive locking deadlock in audit_dupe_exe()
Ricardo Robaina <rrobaina@xxxxxxxxxx>
audit: use 'unsigned int' instead of 'unsigned'
Jeff Layton <jlayton@xxxxxxxxxx>
audit: widen ino fields to u64
NeilBrown <neil@xxxxxxxxxx>
VFS/audit: introduce kern_path_parent() for audit
Bryam Vargas <hexlabsecurity@xxxxxxxxx>
Input: mms114 - reject an oversized device packet size
Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
Input: mms114 - fix touch indexing for MMS134S and MMS136
Haoxiang Li <haoxiang_li2024@xxxxxxx>
i2c: davinci: Unregister cpufreq notifier on probe failure
Sebastian Alba Vives <sebasjosue84@xxxxxxxxx>
fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()
Mikhail Gavrilov <mikhail.v.gavrilov@xxxxxxxxx>
dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning
Jason Gunthorpe <jgg@xxxxxxxx>
udmabuf: Do not create malformed scatterlists
Weinan Liu <wnliu@xxxxxxxxxx>
iommu/amd: Don't split flush for amd_iommu_domain_flush_all()
Matt Bobrowski <mattbobrowski@xxxxxxxxxx>
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
Pedro Falcato <pfalcato@xxxxxxx>
mm: do file ownership checks with the proper mount idmap
Alexandre Ghiti <alexghiti@xxxxxxxxxxxx>
riscv: Don't use PGD entries for the linear mapping
Xiang Mei <xmei5@xxxxxxx>
net: bonding: fix use-after-free in bond_xmit_broadcast()
Palmer Dabbelt <palmer@xxxxxxxxxxxx>
RISC-V: Provide pgtable_l5_enabled on rv32
Christoph Hellwig <hch@xxxxxx>
xfs: check v5 superblock features early
Long Li <leo.lilong@xxxxxxxxxx>
xfs: don't swallow dquot recovery verification errors
Long Li <leo.lilong@xxxxxxxxxx>
xfs: fix ilock leak on error in xfs_dq_get_next_id
David Rosca <david.rosca@xxxxxxx>
drm/amdgpu: Fix UVD decode image min size calculation
David Rosca <david.rosca@xxxxxxx>
drm/amdgpu: Implement insert_end for VCE 3
David Rosca <david.rosca@xxxxxxx>
drm/amdgpu: Reject UVD message with dimensions above 4096
Candice Li <candice.li@xxxxxxx>
drm/amdgpu: validate GEM_CREATE domain combinations
David Rosca <david.rosca@xxxxxxx>
drm/amdgpu: Reject UVD message with invalid number of h265 refs
Eric Farman <farman@xxxxxxxxxxxxx>
s390/vfio_ccw: Fix out of bounds check on CCW array
Eric Farman <farman@xxxxxxxxxxxxx>
s390/vfio_ccw: Ensure index for read/write regions are within range
Guangshuo Li <lgs201920130244@xxxxxxxxx>
drm/radeon: fix autosuspend cleanup during teardown
Pei Xiao <xiaopei01@xxxxxxxxxx>
mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition
Haibo Chen <haibo.chen@xxxxxxx>
mmc: sdhci: make tuning_err a signed int
Myeonghun Pak <mhun512@xxxxxxxxx>
mmc: sdhci: unmap the bounce buffer before device release
Zhan Xusheng <zhanxusheng1024@xxxxxxxxx>
mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit
Kefu Chai <k.chai@xxxxxxxxxxx>
libceph: tolerate addrvecs with multiple entries of the same type
Yiming Zhu <zhuyiming@xxxxxxxxxxxx>
ceph: fix MDS random selection readiness predicate
Raphael Zimmer <raphael.zimmer@xxxxxxxxxxxxx>
libceph: Avoid using invalid osd indices from primary_temp
Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
Input: sur40 - fix V4L error path cleanup
Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
Input: sur40 - fix input device registration ordering
Ali Ahmet Memis <ali@xxxxxxxxxxxxxx>
openrisc: signal: do not restore privileged SR bits on sigreturn
Josh Poimboeuf <jpoimboe@xxxxxxxxxx>
ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()
Pavitra Jha <jhapavitra98@xxxxxxxxx>
libceph: fix multiple unsafe decodes in decode_locker()
Thorsten Blum <thorsten.blum@xxxxxxxxx>
crypto: qce - fix error path in devm_qce_register_algs
Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue
Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
Input: synaptics-rmi4 - block s_input when F54 queue is busy
Bryam Vargas <hexlabsecurity@xxxxxxxxx>
Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer
Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
Input: synaptics-rmi4 - zero report size on F54 work error
George Wilson <gcwilson@xxxxxxxxxxxxx>
powerpc/pseries: lparcfg - fix kbuf[] underflow
Pengpeng Hou <pengpeng@xxxxxxxxxxx>
Input: iforce - validate input packet lengths
Zhefu Zhang <a723356@xxxxxxxxx>
Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard
Linmao Li <lilinmao@xxxxxxxxxx>
Input: psxpad-spi - set driver data before use
Richard Davies <richard@xxxxxxxxxxxx>
Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet
Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx>
Input: synaptics-rmi4 - fix F55 transmitter electrode count typo
George Wilson <gcwilson@xxxxxxxxxxxxx>
powerpc/pseries: pci - logic bug
Dawid Wróbel <me@xxxxxxxxxxxxxxx>
ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses
Peter Ujfalusi <peter.ujfalusi@xxxxxxxxxxxxxxx>
ASoC: cs35l41: sort the register default table
Peter Ujfalusi <peter.ujfalusi@xxxxxxxxxxxxxxx>
ASoC: cs4265: sort the register default table
Hidayath Khan <hidayath@xxxxxxxxxxxxx>
s390/qeth: validate user buffer length in SNMP and ARP query ioctls
Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
mptcp: options: reset DSS fields in case of unexpected size
Gang Yan <yangang@xxxxxxxxxx>
selftests: mptcp: join: mark tests with data corruption as failed
Bryam Vargas <hexlabsecurity@xxxxxxxxx>
selinux: do not cancel a policy conversion that never started
Bryam Vargas <hexlabsecurity@xxxxxxxxx>
selinux: reject a class permission count below its inherited common
Bryam Vargas <hexlabsecurity@xxxxxxxxx>
selinux: require every boolean value to be defined
Yizhou Zhao <zhaoyz24@xxxxxxxxxxxxxxxxxxxxx>
ipvs: separate destination availability state
Zhan Xusheng <zhanxusheng@xxxxxxxxxx>
fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy()
Chao Yu <chao@xxxxxxxxxx>
f2fs: fix UAF issue in f2fs_merge_page_bio()
Matthew Rosato <mjrosato@xxxxxxxxxxxxx>
KVM: s390: pci: Fix aisb calculation
Farhan Ali <alifm@xxxxxxxxxxxxx>
KVM: s390: pci: Fix resource leak on IRQ registration failure
Farhan Ali <alifm@xxxxxxxxxxxxx>
KVM: s390: pci: Fix missing error codes and memory unaccounting
Farhan Ali <alifm@xxxxxxxxxxxxx>
KVM: s390: pci: Fix memory accounting for pinned/unpinned pages
Jason Gunthorpe <jgg@xxxxxxxx>
kernel/user: Allow user_struct::locked_vm to be usable for iommufd
Chao Shi <coshi036@xxxxxxxxx>
block: stop the timeout timer when releasing a never added disk
-------------
Diffstat:
Makefile | 4 +-
arch/arm64/boot/dts/nvidia/tegra194.dtsi | 2 +
arch/arm64/kvm/arm.c | 2 +-
arch/mips/kvm/mips.c | 2 +-
arch/openrisc/include/asm/processor.h | 2 +
arch/openrisc/kernel/signal.c | 5 +-
arch/powerpc/kvm/powerpc.c | 2 +-
arch/powerpc/platforms/pseries/lparcfg.c | 2 +-
arch/powerpc/platforms/pseries/pci.c | 2 +-
arch/riscv/include/asm/pgtable-32.h | 3 +
arch/riscv/include/asm/pgtable.h | 1 -
arch/riscv/kvm/vcpu.c | 2 +-
arch/riscv/mm/init.c | 11 +-
arch/s390/include/asm/cpu_mcf.h | 112 ------
arch/s390/kernel/Makefile | 2 +-
arch/s390/kernel/perf_cpum_cf.c | 272 ++++++++++++-
arch/s390/kernel/perf_cpum_cf_common.c | 233 ------------
arch/s390/kernel/perf_pai_ext.c | 2 +-
arch/s390/kvm/kvm-s390.c | 2 +-
arch/s390/kvm/pci.c | 86 +++--
arch/s390/kvm/pci.h | 2 +
arch/x86/kernel/cpu/resctrl/rdtgroup.c | 12 +-
arch/x86/kvm/lapic.c | 2 +-
arch/x86/kvm/svm/sev.c | 34 +-
arch/x86/kvm/svm/svm.h | 1 +
arch/x86/kvm/x86.c | 4 +-
block/genhd.c | 12 +-
crypto/ccm.c | 2 +-
drivers/ata/libata-core.c | 18 +
drivers/ata/libata-scsi.c | 2 -
drivers/ata/libata.h | 9 +
drivers/bluetooth/btmrvl_main.c | 9 -
drivers/bluetooth/btrsi.c | 1 -
drivers/bluetooth/btsdio.c | 8 -
drivers/bluetooth/btusb.c | 5 -
drivers/bluetooth/hci_ldisc.c | 6 -
drivers/bluetooth/hci_serdev.c | 5 -
drivers/bluetooth/hci_uart.h | 1 -
drivers/bluetooth/hci_vhci.c | 10 +-
drivers/bluetooth/virtio_bt.c | 2 -
drivers/char/ipmi/ipmi_msghandler.c | 8 +
drivers/crypto/qce/core.c | 2 +-
drivers/dma-buf/udmabuf.c | 21 +-
drivers/fpga/dfl-afu-main.c | 3 +
drivers/gpio/gpio-mt7621.c | 2 +
drivers/gpio/gpio-mvebu.c | 4 +-
drivers/gpio/gpio-pxa.c | 4 +-
drivers/gpio/gpio-tegra.c | 18 +-
drivers/gpio/gpio-vf610.c | 4 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 30 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 21 ++
drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c | 30 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 11 +-
drivers/gpu/drm/amd/amdgpu/vce_v3_0.c | 26 +-
drivers/gpu/drm/amd/pm/amdgpu_dpm.c | 27 +-
drivers/gpu/drm/amd/pm/amdgpu_pm.c | 16 +-
drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h | 6 +-
drivers/gpu/drm/bridge/cdns-dsi.c | 11 +-
drivers/gpu/drm/drm_connector.c | 12 +-
drivers/gpu/drm/i915/display/intel_display_core.h | 3 +
drivers/gpu/drm/i915/display/intel_hdcp.c | 22 +-
drivers/gpu/drm/i915/display/intel_vrr.c | 10 +-
drivers/gpu/drm/i915/i915_driver.c | 3 +
drivers/gpu/drm/radeon/radeon_kms.c | 1 +
drivers/gpu/drm/tegra/fb.c | 8 +-
drivers/i2c/busses/i2c-bcm-iproc.c | 11 +-
drivers/i2c/busses/i2c-davinci.c | 4 +-
drivers/i2c/busses/i2c-imx.c | 126 +++++--
drivers/infiniband/sw/siw/siw_qp_tx.c | 17 +-
drivers/input/joystick/iforce/iforce-packets.c | 11 +-
drivers/input/joystick/iforce/iforce-usb.c | 3 +
drivers/input/joystick/psxpad-spi.c | 1 +
drivers/input/keyboard/atkbd.c | 8 +
drivers/input/misc/ims-pcu.c | 5 +-
drivers/input/mouse/focaltech.c | 2 +-
drivers/input/rmi4/rmi_f54.c | 43 ++-
drivers/input/rmi4/rmi_f55.c | 4 +-
drivers/input/touchscreen/mms114.c | 21 +-
drivers/input/touchscreen/sur40.c | 23 +-
drivers/iommu/amd/iommu.c | 3 +-
drivers/md/dm-bufio.c | 9 +
drivers/md/dm-cache-metadata.c | 6 +
drivers/md/dm-cache-policy-internal.h | 3 +
drivers/md/dm-cache-policy-smq.c | 2 +
drivers/md/dm-cache-target.c | 12 +-
drivers/md/dm-crypt.c | 20 +-
drivers/md/dm-era-target.c | 10 +-
drivers/md/dm-flakey.c | 4 +-
drivers/md/dm-integrity.c | 182 +++++----
drivers/md/dm-io.c | 25 +-
drivers/md/dm-ioctl.c | 18 +-
drivers/md/dm-kcopyd.c | 2 +
drivers/md/dm-log.c | 6 +
drivers/md/dm-mpath.c | 3 +
drivers/md/dm-rq.c | 2 +
drivers/md/dm-snap-persistent.c | 23 +-
drivers/md/dm-snap.c | 10 +-
drivers/md/dm-stats.c | 24 +-
drivers/md/dm-stripe.c | 10 +-
drivers/md/dm-sysfs.c | 1 +
drivers/md/dm-table.c | 3 +-
drivers/md/dm-thin-metadata.c | 5 +-
drivers/md/dm-thin.c | 5 +
drivers/md/dm-verity-target.c | 24 +-
drivers/md/dm-verity.h | 2 +-
drivers/md/dm-writecache.c | 54 ++-
drivers/md/persistent-data/dm-array.c | 4 +
drivers/md/persistent-data/dm-bitset.c | 1 +
drivers/md/persistent-data/dm-block-manager.c | 7 +-
drivers/md/persistent-data/dm-btree-internal.h | 1 +
drivers/md/persistent-data/dm-btree-remove.c | 5 +
drivers/md/persistent-data/dm-btree-spine.c | 6 +-
drivers/md/persistent-data/dm-btree.c | 10 +
drivers/md/persistent-data/dm-space-map-common.c | 6 +
drivers/md/persistent-data/dm-space-map-disk.c | 12 +-
drivers/md/persistent-data/dm-space-map-metadata.c | 3 +
.../md/persistent-data/dm-transaction-manager.c | 1 +
drivers/media/i2c/imx219.c | 47 +--
drivers/misc/mei/bus.c | 16 +-
drivers/mmc/host/atmel-mci.c | 2 +
drivers/mmc/host/omap_hsmmc.c | 2 +-
drivers/mmc/host/sdhci.c | 16 +
drivers/mmc/host/sdhci.h | 2 +-
drivers/mmc/host/vub300.c | 36 +-
drivers/mtd/maps/vmu-flash.c | 8 +-
drivers/net/bonding/bond_main.c | 2 +-
drivers/net/can/rcar/rcar_canfd.c | 177 +++++----
drivers/net/can/usb/gs_usb.c | 4 +-
drivers/net/ethernet/cadence/macb_main.c | 22 +-
drivers/net/ethernet/intel/ice/ice_ethtool.c | 10 +-
drivers/net/ethernet/intel/ice/ice_vf_lib.c | 27 ++
.../net/ethernet/intel/ice/ice_vf_lib_private.h | 1 +
drivers/net/ethernet/intel/ice/ice_virtchnl.c | 21 ++
drivers/net/ethernet/intel/igc/igc_main.c | 1 -
drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 14 +-
drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 1 +
.../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 9 +
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 14 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 13 +-
drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 92 ++++-
drivers/net/ethernet/microsoft/mana/mana_en.c | 13 +
drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +
drivers/net/ipa/ipa_smp2p.c | 30 +-
drivers/net/ipvlan/ipvlan_main.c | 4 +
drivers/net/macvlan.c | 4 +
drivers/net/thunderbolt.c | 8 +-
drivers/net/veth.c | 78 ++--
drivers/net/wireless/ath/ath6kl/txrx.c | 2 +-
.../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c | 16 +-
.../net/wireless/broadcom/brcm80211/brcmfmac/bus.h | 6 +
.../wireless/broadcom/brcm80211/brcmfmac/core.c | 45 ++-
.../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 6 +
.../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 8 +-
.../wireless/broadcom/brcm80211/brcmfmac/sdio.h | 1 +
.../net/wireless/broadcom/brcm80211/brcmfmac/usb.c | 3 +
drivers/net/wireless/marvell/libertas_tf/main.c | 2 +-
drivers/pinctrl/cirrus/pinctrl-lochnagar.c | 2 +-
drivers/pinctrl/core.c | 15 +-
drivers/pinctrl/intel/pinctrl-cherryview.c | 4 +-
drivers/pinctrl/intel/pinctrl-intel.c | 4 +-
drivers/pinctrl/intel/pinctrl-lynxpoint.c | 4 +-
drivers/pinctrl/mediatek/pinctrl-moore.c | 4 +-
drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 4 +-
drivers/pinctrl/mediatek/pinctrl-paris.c | 4 +-
drivers/pinctrl/nuvoton/pinctrl-npcm7xx.c | 4 +-
drivers/pinctrl/pinctrl-as3722.c | 4 +-
drivers/pinctrl/pinctrl-axp209.c | 2 +-
drivers/pinctrl/pinctrl-ingenic.c | 11 +-
drivers/pinctrl/pinctrl-ocelot.c | 4 +-
drivers/pinctrl/pinctrl-rk805.c | 4 +-
drivers/pinctrl/pinctrl-st.c | 4 +-
drivers/pinctrl/renesas/gpio.c | 4 +-
drivers/pinctrl/stm32/pinctrl-stm32.c | 4 +-
drivers/pinctrl/vt8500/pinctrl-wmt.c | 4 +-
drivers/remoteproc/qcom_common.c | 31 +-
drivers/remoteproc/qcom_common.h | 5 +-
drivers/remoteproc/qcom_q6v5_pas.c | 20 +-
drivers/s390/cio/vfio_ccw_async.c | 16 +
drivers/s390/cio/vfio_ccw_chp.c | 15 +
drivers/s390/cio/vfio_ccw_cp.c | 17 +-
drivers/s390/cio/vfio_ccw_ops.c | 7 +-
drivers/s390/net/qeth_core_main.c | 3 +
drivers/s390/net/qeth_l3_main.c | 5 +
drivers/soc/imx/imx8m-blk-ctrl.c | 27 +-
drivers/thunderbolt/xdomain.c | 40 +-
drivers/tty/serial/max310x.c | 20 +-
drivers/usb/gadget/function/f_tcm.c | 192 ++++++++--
drivers/usb/gadget/function/tcm.h | 13 +
drivers/usb/musb/omap2430.c | 25 +-
drivers/usb/typec/ucsi/ucsi.c | 95 +++--
drivers/usb/typec/ucsi/ucsi.h | 1 +
drivers/vdpa/vdpa_user/iova_domain.c | 161 +++++---
drivers/vdpa/vdpa_user/iova_domain.h | 13 +-
drivers/vdpa/vdpa_user/vduse_dev.c | 16 +-
drivers/video/fbdev/core/bitblit.c | 122 +++---
drivers/video/fbdev/core/fbcon.c | 420 ++++++++++-----------
drivers/video/fbdev/core/fbcon.h | 6 +-
drivers/video/fbdev/core/fbcon_ccw.c | 148 ++++----
drivers/video/fbdev/core/fbcon_cw.c | 148 ++++----
drivers/video/fbdev/core/fbcon_rotate.c | 44 +--
drivers/video/fbdev/core/fbcon_rotate.h | 6 +-
drivers/video/fbdev/core/fbcon_ud.c | 164 ++++----
drivers/video/fbdev/core/softcursor.c | 18 +-
drivers/video/fbdev/core/tileblit.c | 28 +-
fs/9p/vfs_inode.c | 9 +
fs/binfmt_elf.c | 4 +-
fs/binfmt_elf_fdpic.c | 4 +-
fs/binfmt_misc.c | 14 +-
fs/ceph/addr.c | 20 +-
fs/ceph/cache.c | 2 +-
fs/ceph/caps.c | 70 ++--
fs/ceph/debugfs.c | 4 +-
fs/ceph/dir.c | 24 +-
fs/ceph/export.c | 10 +-
fs/ceph/file.c | 35 +-
fs/ceph/inode.c | 14 +-
fs/ceph/ioctl.c | 8 +-
fs/ceph/mds_client.c | 51 ++-
fs/ceph/mds_client.h | 5 +-
fs/ceph/mdsmap.c | 5 +-
fs/ceph/snap.c | 18 +-
fs/ceph/super.c | 22 +-
fs/ceph/super.h | 13 +-
fs/ceph/xattr.c | 12 +-
fs/crypto/policy.c | 2 +-
fs/erofs/Kconfig | 15 +
fs/erofs/decompressor_lzma.c | 3 +-
fs/erofs/fscache.c | 44 +--
fs/erofs/internal.h | 87 ++---
fs/exec.c | 6 +-
fs/f2fs/data.c | 2 +-
fs/namei.c | 43 +++
fs/ntfs3/index.c | 44 ++-
fs/overlayfs/copy_up.c | 12 +-
fs/smb/server/auth.c | 4 +-
fs/smb/server/connection.c | 23 +-
fs/smb/server/connection.h | 5 +
fs/smb/server/oplock.c | 8 +-
fs/smb/server/smb2pdu.c | 78 ++--
fs/smb/server/smb2pdu.h | 9 -
fs/smb/server/smb_common.c | 43 ++-
fs/smb/server/smb_common.h | 15 +-
fs/smb/server/smbacl.c | 27 +-
fs/super.c | 19 +-
fs/xfs/libxfs/xfs_sb.c | 4 +-
fs/xfs/xfs_dquot.c | 3 +-
fs/xfs/xfs_dquot_item_recover.c | 2 +-
include/drm/drm_connector.h | 6 +-
include/drm/drm_displayid.h | 2 +-
include/linux/audit.h | 6 +-
include/linux/audit_arch.h | 12 +-
include/linux/bootconfig.h | 3 +
include/linux/bpf_lsm.h | 4 +
include/linux/ceph/ceph_debug.h | 38 ++
include/linux/ceph/mdsmap.h | 5 +-
include/linux/firmware.h | 3 +
include/linux/fs.h | 33 ++
include/linux/kvm_host.h | 1 +
include/linux/lsm_hooks.h | 1 +
include/linux/mm.h | 12 +
include/linux/mmc/sdio_ids.h | 2 +-
include/linux/namei.h | 1 +
include/linux/overflow.h | 68 ++++
include/linux/pinctrl/consumer.h | 13 +-
include/linux/sched/user.h | 2 +-
include/linux/thunderbolt.h | 3 +
include/linux/vfio_pci_core.h | 13 +-
include/net/bluetooth/hci.h | 114 ------
include/net/bluetooth/hci_core.h | 48 +--
include/net/bluetooth/hci_sync.h | 4 +
include/net/gro.h | 1 +
include/net/ip_vs.h | 7 +
include/net/netfilter/nf_tables.h | 11 +-
include/net/netfilter/nft_fib.h | 4 +-
include/net/netfilter/nft_meta.h | 3 +-
include/net/netfilter/nft_reject.h | 3 +-
include/uapi/linux/ip_vs.h | 6 -
include/uapi/linux/netfilter/nf_tables.h | 10 +-
include/uapi/linux/virtio_bt.h | 1 -
init/main.c | 39 --
kernel/audit.c | 2 +-
kernel/audit.h | 32 +-
kernel/audit_fsnotify.c | 39 +-
kernel/audit_tree.c | 2 +-
kernel/audit_watch.c | 42 ++-
kernel/auditfilter.c | 17 +-
kernel/auditsc.c | 6 +-
kernel/bpf/bpf_inode_storage.c | 9 +
kernel/fork.c | 20 +-
kernel/locking/spinlock_rt.c | 27 +-
kernel/taskstats.c | 67 ++--
kernel/trace/ftrace.c | 6 +-
kernel/trace/trace_osnoise.c | 4 +-
kernel/trace/trace_probe.c | 2 +-
kernel/user.c | 1 +
lib/bootconfig.c | 65 ++++
lib/compat_audit.c | 12 +-
mm/huge_memory.c | 49 ++-
mm/internal.h | 4 +
mm/madvise.c | 3 +-
mm/migrate_device.c | 42 ++-
mm/mincore.c | 3 +-
mm/mm_init.c | 150 ++++++++
mm/page_alloc.c | 160 +-------
mm/pagewalk.c | 10 +
mm/sparse-vmemmap.c | 3 +-
mm/vmalloc.c | 75 +++-
net/bluetooth/hci_conn.c | 24 +-
net/bluetooth/hci_core.c | 145 ++-----
net/bluetooth/hci_event.c | 150 +-------
net/bluetooth/hci_sock.c | 11 +-
net/bluetooth/hci_sync.c | 373 +++++++++---------
net/bluetooth/l2cap_core.c | 21 +-
net/bluetooth/mgmt.c | 367 +++++++++---------
net/bluetooth/mgmt_util.c | 49 +--
net/bluetooth/mgmt_util.h | 8 +-
net/bridge/netfilter/nft_reject_bridge.c | 3 +-
net/ceph/cls_lock_client.c | 21 +-
net/ceph/decode.c | 18 +-
net/ceph/osdmap.c | 9 +-
net/core/gro.c | 31 ++
net/core/pktgen.c | 43 ++-
net/ipv4/netfilter/nft_dup_ipv4.c | 4 +-
net/ipv4/tcp_bpf.c | 21 +-
net/ipv4/udp_offload.c | 29 --
net/ipv6/ip6_tunnel.c | 3 +
net/ipv6/netfilter/nft_dup_ipv6.c | 4 +-
net/mptcp/options.c | 8 +-
net/mptcp/pm.c | 9 +-
net/mptcp/pm_netlink.c | 29 +-
net/mptcp/pm_userspace.c | 87 +++--
net/mptcp/protocol.h | 6 +-
net/netfilter/ipset/ip_set_bitmap_gen.h | 2 +-
net/netfilter/ipset/ip_set_core.c | 19 +-
net/netfilter/ipset/ip_set_list_set.c | 10 +-
net/netfilter/ipvs/ip_vs_conn.c | 4 +-
net/netfilter/ipvs/ip_vs_core.c | 6 +-
net/netfilter/ipvs/ip_vs_ctl.c | 4 +-
net/netfilter/ipvs/ip_vs_dh.c | 4 +-
net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
net/netfilter/ipvs/ip_vs_lblcr.c | 8 +-
net/netfilter/nf_conntrack_proto.c | 6 +
net/netfilter/nf_conntrack_proto_sctp.c | 48 +--
net/netfilter/nf_conntrack_proto_tcp.c | 132 ++++---
net/netfilter/nf_conntrack_sip.c | 10 +-
net/netfilter/nf_flow_table_core.c | 7 +-
net/netfilter/nf_tables_api.c | 6 +-
net/netfilter/nf_tables_offload.c | 2 +-
net/netfilter/nft_bitwise.c | 38 +-
net/netfilter/nft_byteorder.c | 2 +-
net/netfilter/nft_cmp.c | 6 +-
net/netfilter/nft_compat.c | 6 +-
net/netfilter/nft_ct.c | 2 +-
net/netfilter/nft_dup_netdev.c | 2 +-
net/netfilter/nft_dynset.c | 4 +-
net/netfilter/nft_exthdr.c | 2 +-
net/netfilter/nft_fib.c | 3 +-
net/netfilter/nft_flow_offload.c | 3 +-
net/netfilter/nft_fwd_netdev.c | 9 +-
net/netfilter/nft_hash.c | 2 +-
net/netfilter/nft_immediate.c | 3 +-
net/netfilter/nft_lookup.c | 5 +-
net/netfilter/nft_masq.c | 7 +-
net/netfilter/nft_meta.c | 8 +-
net/netfilter/nft_nat.c | 11 +-
net/netfilter/nft_objref.c | 41 +-
net/netfilter/nft_osf.c | 3 +-
net/netfilter/nft_payload.c | 2 +-
net/netfilter/nft_queue.c | 5 +-
net/netfilter/nft_range.c | 2 +-
net/netfilter/nft_redir.c | 7 +-
net/netfilter/nft_reject.c | 3 +-
net/netfilter/nft_reject_inet.c | 3 +-
net/netfilter/nft_reject_netdev.c | 3 +-
net/netfilter/nft_rt.c | 3 +-
net/netfilter/nft_set_pipapo.c | 259 ++++++++-----
net/netfilter/nft_set_pipapo.h | 8 +
net/netfilter/nft_socket.c | 3 +-
net/netfilter/nft_synproxy.c | 3 +-
net/netfilter/nft_tproxy.c | 7 +-
net/netfilter/nft_xfrm.c | 3 +-
net/openvswitch/conntrack.c | 39 +-
net/packet/af_packet.c | 7 +-
net/rxrpc/call_accept.c | 27 +-
net/sched/act_ct.c | 41 +-
net/sched/cls_u32.c | 3 +
net/sched/sch_api.c | 24 +-
net/sched/sch_cake.c | 2 +-
net/sched/sch_taprio.c | 12 +-
net/sctp/protocol.c | 20 +-
net/sctp/sysctl.c | 9 +-
net/smc/smc_tx.c | 6 +-
net/tipc/socket.c | 6 +-
net/tls/tls_device.c | 4 +-
net/tls/tls_sw.c | 5 +
net/x25/af_x25.c | 4 +-
net/x25/x25_timer.c | 25 +-
net/xfrm/espintcp.c | 42 +--
security/apparmor/include/net.h | 6 +-
security/apparmor/lsm.c | 38 +-
security/apparmor/net.c | 2 +-
security/bpf/hooks.c | 3 +
security/security.c | 47 ++-
security/selinux/hooks.c | 95 +++--
security/selinux/include/objsec.h | 5 +
security/selinux/netlabel.c | 23 +-
security/selinux/ss/policydb.c | 31 ++
security/selinux/ss/services.c | 4 +-
security/smack/smack.h | 5 +
security/smack/smack_lsm.c | 70 ++--
security/smack/smack_netfilter.c | 4 +-
sound/hda/hdac_regmap.c | 4 +-
sound/pci/hda/patch_conexant.c | 3 -
sound/pci/hda/patch_hdmi.c | 48 ++-
sound/soc/codecs/cs35l41-lib.c | 2 +-
sound/soc/codecs/cs4265.c | 4 +-
sound/soc/codecs/lpass-wsa-macro.c | 8 +-
sound/soc/fsl/fsl_sai.c | 29 +-
sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 12 +-
sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 118 +++---
sound/soc/sof/ipc3-control.c | 34 +-
sound/soc/xilinx/xlnx_formatter_pcm.c | 10 +-
tools/testing/selftests/net/mptcp/mptcp_join.sh | 4 +-
virt/kvm/kvm_main.c | 3 +
424 files changed, 5764 insertions(+), 4185 deletions(-)