[PATCH 6.18 000/193] 6.18.59-rc1 review

From: Greg Kroah-Hartman

Date: Fri Oct 23 2026 - 12:48:17 EST


This is the start of the stable review cycle for the 6.18.59 release.
There are 193 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sun, 25 Oct 2026 16:36:50 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.59-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.18.59-rc1

Paulo Alcantara <pc@xxxxxxxxxxxxx>
smb: client: drain outstanding I/O before truncating on O_TRUNC open

Michal Schmidt <mschmidt@xxxxxxxxxx>
ice: fix crash in ethtool offline loopback test

Alexander Lobakin <aleksander.lobakin@xxxxxxxxx>
ice: fix broken Rx on VFs

Michal Kubiak <michal.kubiak@xxxxxxxxx>
ice: switch to Page Pool

Michal Kubiak <michal.kubiak@xxxxxxxxx>
ice: drop page splitting and recycling

Michal Kubiak <michal.kubiak@xxxxxxxxx>
ice: remove legacy Rx and construct SKB

Paulo Alcantara <pc@xxxxxxxxxxxxx>
smb: client: fix data corruption with concurrent writes and O_TRUNC

Daehyeon Ko <4ncienth@xxxxxxxxx>
vsock/vmci: validate packet source for connected sockets

Ido Schimmel <idosch@xxxxxxxxxx>
ipv4: udp: Create exceptions before socket matching

Daehyeon Ko <4ncienth@xxxxxxxxx>
vsock/virtio: validate packet source for connected sockets

Bobby Eshleman <bobbyeshleman@xxxxxxxx>
virtio: set skb owner of virtio_transport_reset_no_sock() reply

Yao Kai <yaokai34@xxxxxxxxxx>
workqueue: Fix unbound pool lifetime for pending pwqs

Breno Leitao <leitao@xxxxxxxxxx>
workqueue: release pwq pools by pool type

Cen Zhang (Microsoft Security FORGE Labs) <cenzhang@xxxxxxxxxxxxxxxxxxx>
io_uring/cancel: don't spin on local work the task can't run

Jens Axboe <axboe@xxxxxxxxx>
io_uring/cancel: move cancelation code from io_uring.c to cancel.c

Jens Axboe <axboe@xxxxxxxxx>
io_uring/cancel: move __io_uring_cancel() into cancel.c

Jens Axboe <axboe@xxxxxxxxx>
io_uring/cancel: move request/task cancelation logic into cancel.c

Frank Sorenson <sorenson@xxxxxxxxxx>
cifs: add revalidation on FSCTL failure in smb2_duplicate_extents()

Huiwen He <hehuiwen@xxxxxxxxxx>
smb/client: refresh allocation size after duplicate extents

Donggeun Yoo <donggeunyoo.kernel@xxxxxxxxx>
tracing: Fix NULL dereference when copying keys for a field variable

Pengpeng Hou <pengpeng@xxxxxxxxxxx>
tracing: Bound histogram expression strings with seq_buf

Pengpeng Hou <pengpeng@xxxxxxxxxxx>
tracing: Use __free() for expr_str() buffer

Tom Zanussi <zanussi@xxxxxxxxxx>
tracing: Fix fully-qualified variable reference printing in histograms

Tejun Heo <tj@xxxxxxxxxx>
sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ

Jesse Zhang <Jesse.Zhang@xxxxxxx>
drm/amdgpu: free the userptr ranges when a CS fails after parser_bos

Taeyang Lee <0wn@xxxxxxxxx>
tracing: Keep the predicate limit separate from program capacity

Dmitry Kandybka <d.kandybka@xxxxxxxxx>
tracing: Fix ignored return value of resize_buffer_duplicate_size()

Hui Su <sh_def@xxxxxxx>
sched_ext: idle: Respect task affinity in restricted CPU selection

Dibin Moolakadan Subrahmanian <dibin.moolakadan.subrahmanian@xxxxxxxxx>
drm/i915/dmc: Harden DMC firmware payload parsing

Christian Brauner <brauner@xxxxxxxxxx>
ntfs3: free the sbi after a grace period

Baokun Li <libaokun1@xxxxxxxxxx>
fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()

YangWen <anmuxixixi@xxxxxxxxx>
ntfs3: fix double free of sbi->options->nls and clarify ownership of fc->fs_private

YangWen <anmuxixixi@xxxxxxxxx>
ntfs3: fix use-after-free of sbi->options in cmp_fnames

Laurence Oberman <loberman@xxxxxxxxxx>
scsi: st: Fix use-after-free race between st_remove() and st_open()

Paulo Alcantara <pc@xxxxxxxxxxxxx>
smb: client: fix multiuser mount with krb5

Frank Sorenson <sorenson@xxxxxxxxxx>
smb: client: fix heap overflow in cifs_do_set_acl()

Aohan Mei <henrymei@xxxxxxxxxxx>
net/sched: cls_flower: validate mask pointer after nla_next()

Aleksandr Khromov <haa@xxxxxxxxx>
ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in

Aleksandr Khromov <haa@xxxxxxxxx>
ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION

Aleksandr Khromov <haa@xxxxxxxxx>
ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION

Norbert Szetei <norbert@xxxxxxxxxxxx>
net: psp: do not inherit the Rx association on clone

Jun Yang <littleddfu@xxxxxxxxx>
net: bridge: mcast: don't truncate the port group walk on teardown

Christian Brauner <brauner@xxxxxxxxxx>
ext4: free the sbi after a grace period

Peter Ujfalusi <peter.ujfalusi@xxxxxxxxxxxxxxx>
ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture

Jann Horn <jannh@xxxxxxxxxx>
futex: Fix mm reuse handling for FUT_OFF_MMSHARED

Jesse Zhang <Jesse.Zhang@xxxxxxx>
drm/amdgpu: keep the eviction fence until the last handle is closed

Paolo Bonzini <pbonzini@xxxxxxxxxx>
KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes

Hyunwoo Kim <imv4bel@xxxxxxxxx>
KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots

Florian Westphal <fw@xxxxxxxxx>
netfilter: nft_byteorder: remove multi-register support

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
ACPI: tiny-power-button: Convert the driver to a platform one

David Rosca <david.rosca@xxxxxxx>
drm/amdgpu: Fix VCE 3 ring align_mask

Yosry Ahmed <yosry.ahmed@xxxxxxxxx>
KVM: SVM: Stop toggling virtual VMSAVE/VMLOAD on intercept recalc

Zihan Xi <zihanx@xxxxxxxxxx>
ipv4: avoid divide by zero in fib_rebalance

Niklas Schnelle <schnelle@xxxxxxxxxxxxx>
s390/pci: Fix leak of uninitialized kernel data in SCLP report

Aswin Karuvally <aswin@xxxxxxxxxxxxx>
s390/ctcm: Prevent XID null dereference

Florian Schauer <florian@xxxxxxxxxx>
page_pool: keep frag_offset aligned for odd-sized requests

Charles Vosburgh <theminershive@xxxxxxxxx>
sctp: validate chunk length in the inqueue parser

Chengfeng Ye <nicoyip.dev@xxxxxxxxx>
tipc: protect node reset trace dump with node lock

Tejun Heo <tj@xxxxxxxxxx>
workqueue: Annotate cb_lock nesting when draining a dead BH pool

Zqiang <qiang.zhang@xxxxxxxxx>
workqueue: Use raise_softirq() to trigger softirq in irq_work handler

Ilya Maximets <i.maximets@xxxxxxx>
netlink: specs: add missing mask attributes for conntrack dump

Ilya Maximets <i.maximets@xxxxxxx>
netlink: specs: fix the conntrack filter type

Christoph Hellwig <hch@xxxxxx>
xfs: fix zoned write iomap flags assignments

Carlos Maiolino <cem@xxxxxxxxxx>
xfs: fix capability check in xfs

Yun Zhou <yun.zhou@xxxxxxxxxxxxx>
xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf

Bryam Vargas <hexlabsecurity@xxxxxxxxx>
net/iucv: fix the recvmsg window update

Kaiwen Shi <skwkevin@xxxxxxxxxxxxxxxx>
mac802154: fix data race and NULL deref on local->assoc_dev

Chen Cheng <chencheng@xxxxxxxxx>
dm-integrity: require stable writes for internal hash modes

Ben Cressey <ben@xxxxxxxxxxx>
dm-integrity: fix infinite loop on discard with large tag size

Genjian Zhang <zhanggenjian@xxxxxxxxxx>
dm-ebs: fix incorrect device offset check in ebs_ctr()

Ben Cressey <ben@xxxxxxxxxxx>
dm-crypt: fix a tiny race condition in crypt_dec_pending

Benjamin Marzinski <bmarzins@xxxxxxxxxx>
dm cache: fix issue with background work locking

Ming-Hung Tsai <mtsai@xxxxxxxxxx>
dm cache: fix demotion stats in passthrough mode

Frank Sorenson <sorenson@xxxxxxxxxx>
cifs: don't update i_size in cifs_do_truncate without a cached handle

Etienne Perot <eperot@xxxxxxxxxx>
cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children

Cen Zhang (Microsoft Security FORGE Labs) <blbllhy@xxxxxxxxx>
tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)

Cen Zhang (Microsoft Security FORGE Labs) <blbllhy@xxxxxxxxx>
tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)

Heyang Tan <thy15333007817@xxxxxxx>
wifi: p54: validate firmware record lengths

Tengda Wu <wutengda@xxxxxxxxxxxxxxx>
tracing: Fix hist trigger timestamps for buffered events

Amit Machhiwal <amachhiw@xxxxxxxxxxxxx>
tracing: Do not initialize tracefs work if tracing is disabled

Taeyang Lee <0wn@xxxxxxxxx>
tracing: Check operator stack capacity before pushing

David Carlier <devnexen@xxxxxxxxx>
tracing: Take trace_types_lock when dropping the buffer_meta reference

Donggeun Yoo <donggeunyoo.kernel@xxxxxxxxx>
tracing: Fix the shift out of bounds in the log2 histogram modifier

Thomas Hellström <thomas.hellstrom@xxxxxxxxxxxxxxx>
drm/xe: Bump LRU for external objects on exec and rebind

Dibin Moolakadan Subrahmanian <dibin.moolakadan.subrahmanian@xxxxxxxxx>
drm/i915/dmc: Add sanity check for DMC load address

Dnyaneshwar Bhadane <dnyaneshwar.bhadane@xxxxxxxxx>
drm/i915/cx0_phy: Fix ARL-S host bridge detection

Christian König <ckoenig.leichtzumerken@xxxxxxxxx>
drm/exec: don't immediately add prelocked obj to array of locked objs

Jesse Zhang <Jesse.Zhang@xxxxxxx>
drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES

Jesse Zhang <Jesse.Zhang@xxxxxxx>
drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr

Timur Kristóf <timur.kristof@xxxxxxxxx>
drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang

Kenneth Feng <kenneth.feng@xxxxxxx>
drm/amd/pm: add zero fan stop temperature support on smu 14.0.2

Yehyeong Lee <yhlee@xxxxxxxxxxxxxxxxxx>
scsi: libiscsi: Validate the task named by a management response

Yehyeong Lee <yhlee@xxxxxxxxxxxxxxxxxx>
scsi: libiscsi: Validate the ITT reflected in a Reject PDU

Yehyeong Lee <yhlee@xxxxxxxxxxxxxxxxxx>
scsi: libiscsi: Reject a negative task index from parse_pdu_itt

Yehyeong Lee <yhlee@xxxxxxxxxxxxxxxxxx>
scsi: xen/scsifront: Check for a NULL shadow entry on a backend response

Stanley Jhu <stanleyjhu@xxxxxxxxxx>
scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies

Krystian Kaniewski <krystianmkaniewski@xxxxxxxxx>
ring-buffer: Fix false warning in ring_buffer_map_get_reader()

Donggeun Yoo <donggeunyoo.kernel@xxxxxxxxx>
ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()

David Carlier <devnexen@xxxxxxxxx>
ring-buffer: Do not show buffer_meta for CPUs without a buffer

Antoine Huret <antoine.huret@xxxxxxxx>
perf: Update cgroup time when rotating multiplexed events

Lorenzo Stoakes (ARM) <ljs@xxxxxxxxxx>
perf: Track the perf mlock gift separately

Wentao Liang <vulab@xxxxxxxxxxx>
i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()

Loic Poulain <loic.poulain@xxxxxxxxxxxxxxxx>
i2c: qcom-cci: Fix HALT_ACK reset request being dropped

Lee Jones <lee@xxxxxxxxxx>
tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields

Sasha Levin <sashal@xxxxxxxxxx>
tools: gpio: fix building from the top level with O=

Daehyeon Ko <4ncienth@xxxxxxxxx>
sctp: revalidate output stream after association connect wait

Mario Limonciello <mario.limonciello@xxxxxxx>
pinctrl: amd: Clear S4 wake bits when firmware has _AEI

Aohan Mei <henrymei@xxxxxxxxxxx>
net: rds: fix uninitialized trans dereference in CM event handler

Jérémy Jean <Jeremy.Jean@xxxxxxxxxxxxxxxxx>
net/sched: fix use-after-free in __tcf_action_put()

Eric Biggers <ebiggers@xxxxxxxxxx>
lib/crypto: poly1305: Use memzero_explicit() in poly1305_final()

Jérémy Jean <Jeremy.Jean@xxxxxxxxxxxxxxxxx>
lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state

Christian Brauner <brauner@xxxxxxxxxx>
namei: test for a negative dentry the way traverse_mounts() does

Christian Brauner <brauner@xxxxxxxxxx>
eventfs: Free the eventfs_inode after an rcu grace period too

Aviv Vaknin <vaknins33@xxxxxxxxx>
pid_namespace: make zap_pid_ns_processes() freezable

Kyle Zeng <kylebot@xxxxxxxxxx>
fsnotify: prevent mark additions during connector teardown

Amirmohammad Eftekhar <amirmohammadeftekhar@xxxxxxxxx>
KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry

EJ Campbell <ejc3@xxxxxxxx>
x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context

Cen Zhang (Microsoft) <cenzhang@xxxxxxxxxxxxxxxxxxx>
watch_queue: Fix note pool publication race in watch_queue_set_size()

Christian Brauner <brauner@xxxxxxxxxx>
unicode: free the map after a grace period

Sasha Levin <sashal@xxxxxxxxxx>
bootconfig: give the footer size static_assert a message

Sung Byeongchan <tjdqudcks0424@xxxxxxxxx>
autofs: ignore notification errors from a replaced pipe

Christian Brauner <brauner@xxxxxxxxxx>
afs: free the super info after a grace period

Igor Paunovic <royalnet026@xxxxxxxxx>
accel/rocket: search every core slot when a core is removed

Alexander Gruhlke <gruhlke@xxxxxxxxxxx>
PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV

John Ogness <john.ogness@xxxxxxxxxxxxx>
printk: Postpone kthread startup

Haris Okanovic <harisokn@xxxxxxxxxx>
perf: Fix perf_pmu_migrate_context() leaving events behind

Peng Fan <peng.fan@xxxxxxx>
gpio: mxc: fix race between gpiochip registration and IRQ domain setup

Peng Fan <peng.fan@xxxxxxx>
gpio: mxc: fix wakeup_pads bit operations

Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx>
gpio: mxc: use BIT() macro

Peng Fan <peng.fan@xxxxxxx>
gpio: mxc: fix both_edges bit operations

Peng Fan <peng.fan@xxxxxxx>
gpio: mxc: fix race between chained IRQ handler install and probe completion

Kent Gibson <warthog618@xxxxxxxxx>
gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths

Joas Antonio dos Santos <joasantonio108@xxxxxxxxx>
calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()

Alice Mikityanska <alice@xxxxxxxxxxxxx>
net/ipv6: Introduce payload_len helpers

Nicolai Buchwitz <nb@xxxxxxxxxxx>
net: bcmgenet: unshare the skb before writing the control block

Kyle Zeng <kylebot@xxxxxxxxxx>
netlink: avoid hashing the network namespace pointer

Xingui Yang <yangxingui@xxxxxxxxxx>
scsi: libsas: Fix SMP IO deadlock during HA resume

Martin Kaiser <martin@xxxxxxxxx>
tracing: probes: error if BTF is required but unavailable

Kyle Zeng <kylebot@xxxxxxxxxx>
pipe: preserve existing fasync readers on writer setup failure

Sasha Levin <sashal@xxxxxxxxxx>
samples: pidfd: fix userprogs typo

Cen Zhang <zzzccc427@xxxxxxxxx>
ocfs2/dlm: Protect the recovery list during debugfs reads

Erik Faye-Lund <erik.faye-lund@xxxxxxx>
drm/panthor: fix immortalis condition

Linfeng Sun <linfeng.sun.dev@xxxxxxxxx>
scsi: target: iscsi: Fix race in discovery auth updates

Laurence Oberman <loberman@xxxxxxxxxx>
scsi: st: Save the visited block for the partition the drive is in

Keith Busch <kbusch@xxxxxxxxxx>
nios2: fix __wsum type degradation in csum_fold()

Carlos Jones Jr <carlosjr.jones@xxxxxxxxxx>
spi: tegra114: assert CS GPIO for every transfer in a message

Bommu Krishnaiah <krishnaiah.bommu@xxxxxxxxx>
drm/xe/oa: Zero OA buffer at allocation

Niranjana Vishwanathapura <niranjana.vishwanathapura@xxxxxxxxx>
drm/xe: skip eviction of a BO with no resource

Mario Limonciello <mario.limonciello@xxxxxxx>
ASoC: amd: yc: disable MSI on resume

Alexandre Cassen <acassen@xxxxxxxxxxxx>
net/mlx5: HWS, fix flow meter offset within its bulk

Alexandre Cassen <acassen@xxxxxxxxxxxx>
net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool

Guangshuo Li <lgs201920130244@xxxxxxxxx>
accel/rocket: clear rdev on device init failure

Kyle Zeng <kylebot@xxxxxxxxxx>
netlink: reset skb headers before unicast and multicast filtering

Michael Reeves <michael.reeves077@xxxxxxxxx>
regmap: Drop map lock during cache init and exit

Francesco Lavra <flavra@xxxxxxxxxxxx>
regcache: Do not overwrite error code when finalizing cache after error

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
regcache: Add ->populate() callback to separate from ->init()

HyeongJun An <sammiee5311@xxxxxxxxx>
ASoC: nau8822: Fix the 128x oversampling switch bits

HyeongJun An <sammiee5311@xxxxxxxxx>
ASoC: wm8978: Fix the 128x oversampling switch bits

HyeongJun An <sammiee5311@xxxxxxxxx>
ASoC: max98371: Fix the Speaker DHT Min Volume bits

HyeongJun An <sammiee5311@xxxxxxxxx>
ASoC: pcm3168a: Fix the DAC zero flag polarity bit

HyeongJun An <sammiee5311@xxxxxxxxx>
ASoC: cs42l52: Fix the NG Type Switch bit

HyeongJun An <sammiee5311@xxxxxxxxx>
ASoC: cs42l56: Put the Limiter Cushion control on the limiter register

Avi Weiss <thnkslprpt@xxxxxxxxx>
ASoC: stm32: spdifrx: fix synchronization state check

Sergey Tiraspolsky <stiraspo@xxxxxxxxx>
ASoC: Intel: avs: Reset the stream unless it is already prepared

Allison Henderson <achender@xxxxxxxxxx>
net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure

Michal Luczaj <mhal@xxxxxxx>
vsock: treat TCP_CLOSING as once-established

Ming Yu <a0282524688@xxxxxxxxx>
gpio: nct6694: Mark the GPIO controller as sleeping

Dave Stevenson <dave.stevenson@xxxxxxxxxxxxxxx>
drm/vc4: hdmi: Move packet RAM enable to PM runtime

Pablo Mazzini <pmazzini@xxxxxxxxx>
pinctrl: sunxi: dt: do not accumulate npins across probe attempts

Adriel Santos <adriel@xxxxxxxxx>
pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12

Alexey Charkov <alchark@xxxxxxxxxxx>
power: supply: core: prevent unregistering a power supply while a callback runs

Svyatoslav Ryhel <clamor95@xxxxxxxxx>
power: supply: generic-adc-battery: Fix temperature IIO channel conversion

Len Brown <len.brown@xxxxxxxxx>
tools/power turbostat: Fix add_counter issue if > 24 counters.

Len Brown <len.brown@xxxxxxxxx>
tools/power turbostat: Fix PMT error path fd handling

Len Brown <len.brown@xxxxxxxxx>
tools/power turbostat: Fix CWF PMT off-by-one

Len Brown <len.brown@xxxxxxxxx>
tools/power turbostat: Fix fd_perf leak on reset

Gilberto Conde <gilbertorconde@xxxxxxxxx>
pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13

Konrad Dybcio <konrad.dybcio@xxxxxxxxxxxxxxxx>
pinctrl: qcom: qcs8300: Fix intr_target_width

Michael Kelley <mhkelley58@xxxxxxxxx>
Drivers: hv: Don't reset VMBus connection state on error/exit paths

Michael Kelley <mhkelley58@xxxxxxxxx>
x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()

Waiman Long <longman@xxxxxxxxxx>
Drivers: hv: Avoid infinite retry loop in init_vp_index()

Xueqin Luo <luoxueqin@xxxxxxxxxx>
power: supply: ds2780: Fix ds2780_get_capacity() returning raw value

Karl Mehltretter <kmehltretter@xxxxxxxxx>
power: supply: Fix maintenance charge table kernel-doc

David Oberhollenzer <david.oberhollenzer@xxxxxxxxxxxxx>
ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition

Jinhui Guo <guojinhui.liam@xxxxxxxxxxxxx>
soc/tegra: fuse: Add missing newline to APBMISC error message

Federico Parola <fparola@xxxxxxxxx>
kho: free phys_bits bitmaps using free_page() in __kho_abort()

Abel Vesa <abel.vesa@xxxxxxxxxxxxxxxx>
i2c: qcom-geni: Restore the source-clock selection policy

Bernard Pidoux <bernard.f6bvp@xxxxxxxxx>
rose: purge rose_neigh->queue on final teardown

Bernard Pidoux <bernard.f6bvp@xxxxxxxxx>
ax25: bound REJ-driven fast retransmits with the existing N2 counter

Harin Lee <me@xxxxxxxxx>
ALSA: ctxfi: Use correct DAIO type for da_desc

Harin Lee <me@xxxxxxxxx>
ALSA: ctxfi: Rename SPDIFI1 to SPDIFI_BAY

Takashi Iwai <tiwai@xxxxxxx>
ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization

Vadim Nikitushkin <bub4z0r@xxxxxxxxx>
drm/ttm: fix swapped-out resources never leaving their bulk_move range


-------------

Diffstat:

Documentation/netlink/specs/conntrack.yaml | 21 +-
Makefile | 4 +-
arch/arm/boot/dts/ti/omap/dra7xx-clocks.dtsi | 2 +-
arch/nios2/include/asm/checksum.h | 2 +-
arch/s390/pci/pci_sysfs.c | 3 +
arch/x86/hyperv/hv_init.c | 3 +-
arch/x86/kernel/kvm.c | 32 +-
arch/x86/kvm/mmu.h | 16 +-
arch/x86/kvm/mmu/mmu.c | 1 +
arch/x86/kvm/mmu/paging_tmpl.h | 2 +-
arch/x86/kvm/svm/svm.c | 10 +-
arch/x86/kvm/vmx/nested.c | 4 +-
block/bsg-lib.c | 13 +-
drivers/accel/rocket/rocket_device.c | 2 +
drivers/accel/rocket/rocket_device.h | 1 +
drivers/accel/rocket/rocket_drv.c | 7 +-
drivers/acpi/tiny-power-button.c | 27 +-
drivers/base/regmap/internal.h | 1 +
drivers/base/regmap/regcache-maple.c | 9 +-
drivers/base/regmap/regcache.c | 18 +-
drivers/gpio/gpio-mxc.c | 36 +-
drivers/gpio/gpio-nct6694.c | 2 +-
drivers/gpio/gpiolib.c | 9 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 6 +
drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 23 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 11 +-
drivers/gpu/drm/amd/amdgpu/sdma_v3_0.c | 25 +-
drivers/gpu/drm/amd/amdgpu/vce_v3_0.c | 2 +-
.../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 55 +-
drivers/gpu/drm/drm_exec.c | 77 ++-
drivers/gpu/drm/i915/display/intel_cx0_phy.c | 12 +-
drivers/gpu/drm/i915/display/intel_dmc.c | 76 ++-
drivers/gpu/drm/i915/display/intel_dmc_regs.h | 12 +
drivers/gpu/drm/panthor/panthor_hw.c | 2 +-
drivers/gpu/drm/ttm/ttm_bo.c | 2 +-
drivers/gpu/drm/vc4/vc4_hdmi.c | 20 +-
drivers/gpu/drm/xe/xe_bo.c | 6 +
drivers/gpu/drm/xe/xe_exec.c | 7 +-
drivers/gpu/drm/xe/xe_oa.c | 7 +
drivers/gpu/drm/xe/xe_vm.c | 31 +-
drivers/gpu/drm/xe/xe_vm.h | 2 +
drivers/hv/channel_mgmt.c | 12 +-
drivers/hv/connection.c | 1 -
drivers/hv/vmbus_drv.c | 1 -
drivers/i2c/busses/i2c-qcom-cci.c | 4 +-
drivers/i2c/busses/i2c-qcom-geni.c | 37 +-
drivers/i2c/busses/i2c-viai2c-wmt.c | 2 +-
drivers/md/dm-cache-target.c | 59 +-
drivers/md/dm-crypt.c | 3 +-
drivers/md/dm-ebs-target.c | 3 +-
drivers/md/dm-integrity.c | 6 +-
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 10 +
drivers/net/ethernet/intel/Kconfig | 1 +
drivers/net/ethernet/intel/ice/ice.h | 3 +-
drivers/net/ethernet/intel/ice/ice_base.c | 128 ++--
drivers/net/ethernet/intel/ice/ice_ethtool.c | 26 +-
drivers/net/ethernet/intel/ice/ice_lib.c | 16 +-
drivers/net/ethernet/intel/ice/ice_main.c | 21 +-
drivers/net/ethernet/intel/ice/ice_txrx.c | 647 +++------------------
drivers/net/ethernet/intel/ice/ice_txrx.h | 125 +---
drivers/net/ethernet/intel/ice/ice_txrx_lib.c | 69 ++-
drivers/net/ethernet/intel/ice/ice_txrx_lib.h | 9 -
drivers/net/ethernet/intel/ice/ice_xsk.c | 146 +----
drivers/net/ethernet/intel/ice/ice_xsk.h | 6 +-
drivers/net/ethernet/intel/ice/virt/queues.c | 6 +-
.../mellanox/mlx5/core/steering/hws/fs_hws.c | 5 +-
drivers/net/wireless/intersil/p54/fwio.c | 42 +-
drivers/pci/pci.c | 15 +-
drivers/pinctrl/pinctrl-amd.c | 9 +
drivers/pinctrl/qcom/pinctrl-ipq5018.c | 10 +-
drivers/pinctrl/qcom/pinctrl-qcs8300.c | 1 +
drivers/pinctrl/sunxi/pinctrl-sunxi-dt.c | 1 +
drivers/power/supply/ds2780_battery.c | 2 +-
drivers/power/supply/generic-adc-battery.c | 9 +-
drivers/power/supply/power_supply_core.c | 26 +-
drivers/s390/net/ctcm_mpc.c | 3 +-
drivers/scsi/libiscsi.c | 14 +-
drivers/scsi/libsas/sas_expander.c | 14 +-
drivers/scsi/mpi3mr/mpi3mr_app.c | 2 +-
drivers/scsi/scsi_transport_fc.c | 6 +-
drivers/scsi/scsi_transport_iscsi.c | 2 +-
drivers/scsi/scsi_transport_sas.c | 6 +-
drivers/scsi/st.c | 18 +-
drivers/scsi/xen-scsifront.c | 1 +
drivers/soc/tegra/fuse/tegra-apbmisc.c | 2 +-
drivers/spi/spi-tegra114.c | 7 +
drivers/target/iscsi/iscsi_target_configfs.c | 26 +-
drivers/ufs/core/ufs_bsg.c | 2 +-
fs/afs/internal.h | 2 +
fs/afs/super.c | 2 +-
fs/autofs/waitq.c | 25 +-
fs/ext4/ext4.h | 2 +
fs/ext4/extents_status.c | 7 +-
fs/ext4/extents_status.h | 1 +
fs/ext4/super.c | 13 +-
fs/namei.c | 3 +-
fs/notify/mark.c | 11 +
fs/ntfs3/ntfs_fs.h | 1 +
fs/ntfs3/super.c | 66 ++-
fs/ocfs2/dlm/dlmcommon.h | 2 +
fs/ocfs2/dlm/dlmdebug.c | 5 +-
fs/ocfs2/dlm/dlmrecovery.c | 2 +-
fs/pipe.c | 6 +-
fs/smb/client/cifsfs.c | 10 +-
fs/smb/client/cifssmb.c | 13 +-
fs/smb/client/connect.c | 21 +-
fs/smb/client/file.c | 38 +-
fs/smb/client/smb2ops.c | 35 +-
fs/smb/server/smb2pdu.c | 5 +
fs/tracefs/event_inode.c | 10 +-
fs/unicode/utf8-core.c | 21 +-
fs/xfs/libxfs/xfs_rtgroup.h | 6 +-
fs/xfs/libxfs/xfs_sb.c | 37 +-
fs/xfs/xfs_aops.c | 3 +-
fs/xfs/xfs_fsmap.c | 2 +-
fs/xfs/xfs_ioctl.c | 2 +-
fs/xfs/xfs_iomap.c | 3 +-
fs/xfs/xfs_iops.c | 2 +-
include/drm/drm_exec.h | 15 +-
include/linux/bsg-lib.h | 3 +-
include/linux/cgroup-defs.h | 5 +-
include/linux/fsnotify_backend.h | 1 +
include/linux/futex.h | 18 +-
include/linux/ipv6.h | 22 +
include/linux/maple_tree.h | 4 +
include/linux/mm_types.h | 3 +
include/linux/power_supply.h | 16 +-
include/linux/sched/user.h | 8 +-
include/linux/unicode.h | 1 +
include/net/af_vsock.h | 3 +
include/net/ipv6.h | 2 -
include/net/netfilter/nf_tables_ipv6.h | 4 +-
include/net/rose.h | 12 +
io_uring/cancel.c | 269 +++++++++
io_uring/cancel.h | 8 +-
io_uring/io_uring.c | 288 +--------
io_uring/io_uring.h | 13 +-
io_uring/sqpoll.c | 1 +
kernel/cgroup/cgroup.c | 6 +-
kernel/events/core.c | 33 +-
kernel/exit.c | 2 +-
kernel/futex/core.c | 79 +--
kernel/kexec_handover.c | 2 +-
kernel/pid_namespace.c | 2 +-
kernel/printk/printk.c | 2 +-
kernel/sched/ext.c | 13 +-
kernel/sched/ext_idle.c | 50 +-
kernel/sched/ext_internal.h | 5 +-
kernel/trace/ring_buffer.c | 13 +-
kernel/trace/trace.c | 13 +-
kernel/trace/trace_events_filter.c | 9 +-
kernel/trace/trace_events_hist.c | 101 ++--
kernel/trace/trace_probe.c | 3 +-
kernel/watch_queue.c | 11 +-
kernel/workqueue.c | 36 +-
lib/crypto/arm64/poly1305-armv8.pl | 2 +-
lib/crypto/poly1305.c | 2 +-
net/ax25/ax25_std_in.c | 36 ++
net/bridge/br_multicast.c | 13 +-
net/bridge/br_netfilter_ipv6.c | 2 +-
net/bridge/netfilter/nf_conntrack_bridge.c | 4 +-
net/core/page_pool.c | 3 +-
net/core/sock.c | 3 +
net/ipv4/fib_semantics.c | 2 +-
net/ipv4/tcp.c | 18 +-
net/ipv4/tcp_cong.c | 4 +-
net/ipv4/tcp_dctcp.c | 4 +-
net/ipv4/tcp_minisocks.c | 2 +-
net/ipv4/tcp_output.c | 2 +-
net/ipv4/udp.c | 11 +-
net/ipv6/calipso.c | 6 +-
net/ipv6/ip6_input.c | 2 +-
net/ipv6/ip6_offload.c | 7 +-
net/ipv6/output_core.c | 7 +-
net/iucv/af_iucv.c | 42 +-
net/mac802154/ieee802154_i.h | 7 +-
net/mac802154/main.c | 1 +
net/mac802154/scan.c | 51 +-
net/netfilter/ipvs/ip_vs_xmit.c | 2 +-
net/netfilter/nf_conntrack_ovs.c | 2 +-
net/netfilter/nf_log_syslog.c | 2 +-
net/netfilter/nft_byteorder.c | 51 +-
net/netlink/af_netlink.c | 10 +-
net/rds/rdma_transport.c | 38 +-
net/sched/act_api.c | 11 +-
net/sched/cls_flower.c | 5 +
net/sched/sch_cake.c | 2 +-
net/sctp/inqueue.c | 6 +-
net/sctp/socket.c | 33 +-
net/tipc/node.c | 2 +
net/vmw_vsock/af_vsock.c | 49 +-
net/vmw_vsock/virtio_transport_common.c | 9 +-
net/vmw_vsock/vmci_transport.c | 40 +-
samples/pidfd/Makefile | 2 +-
sound/pci/ctxfi/ctatc.c | 16 +-
sound/pci/ctxfi/ctdaio.c | 5 +-
sound/pci/ctxfi/ctdaio.h | 2 +-
sound/soc/amd/yc/pci-acp6x.c | 38 +-
sound/soc/codecs/cs42l52.c | 2 +-
sound/soc/codecs/cs42l56.c | 2 +-
sound/soc/codecs/max98371.c | 2 +-
sound/soc/codecs/nau8822.c | 4 +-
sound/soc/codecs/pcm3168a.c | 2 +-
sound/soc/codecs/wm8978.c | 4 +-
sound/soc/intel/avs/pcm.c | 2 +-
sound/soc/sof/ipc4-topology.c | 16 +-
sound/soc/stm/stm32_spdifrx.c | 2 +-
tools/bootconfig/main.c | 3 +-
tools/gpio/Makefile | 6 +
tools/power/x86/turbostat/turbostat.c | 24 +-
210 files changed, 2271 insertions(+), 1951 deletions(-)