Lkft-triage February 2026

lkft-triage@lists.linaro.org

32 participants
38 discussions

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.72 release. There are 24 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 15 Feb 2026 13:46:52 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.72-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.72-rc1 Danilo Krummrich <dakr(a)kernel.org> gpio: omap: do not register driver in probe() Ali Tariq <alitariq45892(a)gmail.com> wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add Liu Song <liu.song13(a)zte.com.cn> PCI: endpoint: Avoid creating sub-groups asynchronously Darrick J. Wong <djwong(a)kernel.org> xfs: fix UAF in xchk_btree_check_block_owner Chao Yu <chao(a)kernel.org> erofs: fix UAF issue for file-backed mounts w/ directio option Eric Dumazet <edumazet(a)google.com> mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() Daniele Palmas <dnlplm(a)gmail.com> bus: mhi: host: pci_generic: Add Telit FE990B40 modem support Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Query FW again before proceeding with login Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Free sp in error path to fix system crash Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Delay module unload while fabric scan in progress Shreyas Deodhar <sdeodhar(a)marvell.com> scsi: qla2xxx: Allow recovery for tape devices Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Validate sp before freeing associated memory Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() Edward Adam Davis <eadavis(a)qq.com> nilfs2: Fix potential block overflow that cause system hang Bibo Mao <maobibo(a)loongson.cn> crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req Bibo Mao <maobibo(a)loongson.cn> crypto: virtio - Add spinlock protection with virtqueue notification Kees Cook <kees(a)kernel.org> crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly Thorsten Blum <thorsten.blum(a)linux.dev> crypto: octeontx - Fix length check to avoid truncation in ucode_load_store Thorsten Blum <thorsten.blum(a)linux.dev> crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode Zenm Chen <zenmchen(a)gmail.com> Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB Gui-Dong Han <hanguidong02(a)gmail.com> driver core: enforce device_lock for driver_match_device() Henrique Carvalho <henrique.carvalho(a)suse.com> smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: split cached_fid bitfields to avoid shared-byte RMW races ------------- Diffstat: Makefile | 4 +-- drivers/base/base.h | 9 +++++ drivers/base/bus.c | 2 +- drivers/base/dd.c | 2 +- drivers/bluetooth/btusb.c | 2 ++ drivers/bus/mhi/host/pci_generic.c | 13 +++++++ drivers/crypto/intel/iaa/iaa_crypto_main.c | 12 +++---- drivers/crypto/marvell/octeontx/otx_cptpf_ucode.c | 2 +- drivers/crypto/omap-crypto.c | 2 +- drivers/crypto/virtio/virtio_crypto_core.c | 5 +++ .../crypto/virtio/virtio_crypto_skcipher_algs.c | 2 -- drivers/gpio/gpio-omap.c | 22 +++++++++--- drivers/net/wireless/realtek/rtl8xxxu/core.c | 1 + drivers/net/wireless/realtek/rtw88/main.c | 4 +-- drivers/pci/endpoint/pci-ep-cfs.c | 15 +++----- drivers/scsi/qla2xxx/qla_gs.c | 41 +++++++++++----------- drivers/scsi/qla2xxx/qla_init.c | 28 +++++++++------ drivers/scsi/qla2xxx/qla_isr.c | 19 ++++++++-- drivers/scsi/qla2xxx/qla_os.c | 3 +- fs/erofs/fileio.c | 7 +++- fs/nilfs2/sufile.c | 4 +++ fs/smb/client/cached_dir.h | 8 ++--- fs/smb/server/server.c | 6 ++-- fs/smb/server/transport_tcp.c | 3 +- fs/xfs/scrub/btree.c | 7 ++-- net/mptcp/pm_netlink.c | 16 +++++++-- 26 files changed, 159 insertions(+), 80 deletions(-)

7 months, 1 week

[PATCH 6.19 00/49] 6.19.1-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.19.1 release. There are 49 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 15 Feb 2026 13:46:52 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.19.1-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.19.1-rc1 Ali Tariq <alitariq45892(a)gmail.com> wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add Liu Song <liu.song13(a)zte.com.cn> PCI: endpoint: Avoid creating sub-groups asynchronously Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free Darrick J. Wong <djwong(a)kernel.org> xfs: fix UAF in xchk_btree_check_block_owner Chao Yu <chao(a)kernel.org> erofs: fix UAF issue for file-backed mounts w/ directio option Gui-Dong Han <hanguidong02(a)gmail.com> bus: fsl-mc: fix use-after-free in driver_override_show() Thomas Gleixner <tglx(a)kernel.org> sched/mmcid: Don't assume CID is CPU owned on mode switch Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Query FW again before proceeding with login Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Free sp in error path to fix system crash Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Delay module unload while fabric scan in progress Shreyas Deodhar <sdeodhar(a)marvell.com> scsi: qla2xxx: Allow recovery for tape devices Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Validate sp before freeing associated memory Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() Mehdi Ben Hadj Khelifa <mehdi.benhadjkhelifa(a)gmail.com> hfs: ensure sb->s_fs_info is always cleaned up Edward Adam Davis <eadavis(a)qq.com> nilfs2: Fix potential block overflow that cause system hang Bibo Mao <maobibo(a)loongson.cn> crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req Bibo Mao <maobibo(a)loongson.cn> crypto: virtio - Add spinlock protection with virtqueue notification Kees Cook <kees(a)kernel.org> crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly Thorsten Blum <thorsten.blum(a)linux.dev> crypto: octeontx - Fix length check to avoid truncation in ucode_load_store Thorsten Blum <thorsten.blum(a)linux.dev> crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 Zenm Chen <zenmchen(a)gmail.com> Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB Gui-Dong Han <hanguidong02(a)gmail.com> driver core: enforce device_lock for driver_match_device() Stefan Metzmacher <metze(a)samba.org> smb: client: let send_done handle a completion without IB_SEND_SIGNALED Stefan Metzmacher <metze(a)samba.org> smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() Stefan Metzmacher <metze(a)samba.org> smb: client: fix last send credit problem causing disconnects Stefan Metzmacher <metze(a)samba.org> smb: client: make use of smbdirect_socket.send_io.bcredits Stefan Metzmacher <metze(a)samba.org> smb: client: use smbdirect_send_batch processing Stefan Metzmacher <metze(a)samba.org> smb: client: introduce and use smbd_{alloc, free}_send_io() Stefan Metzmacher <metze(a)samba.org> smb: client: split out smbd_ib_post_send() Stefan Metzmacher <metze(a)samba.org> smb: client: port and use the wait_for_credits logic used by server Stefan Metzmacher <metze(a)samba.org> smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() Stefan Metzmacher <metze(a)samba.org> smb: client: remove pointless sc->recv_io.credits.count rollback Stefan Metzmacher <metze(a)samba.org> smb: client: let smbd_post_send() make use of request->wr Stefan Metzmacher <metze(a)samba.org> smb: client: let recv_done() queue a refill when the peer is low on credits Stefan Metzmacher <metze(a)samba.org> smb: client: make use of smbdirect_socket.recv_io.credits.available Stefan Metzmacher <metze(a)samba.org> smb: server: let send_done handle a completion without IB_SEND_SIGNALED Stefan Metzmacher <metze(a)samba.org> smb: server: fix last send credit problem causing disconnects Stefan Metzmacher <metze(a)samba.org> smb: server: make use of smbdirect_socket.send_io.bcredits Stefan Metzmacher <metze(a)samba.org> smb: server: let recv_done() queue a refill when the peer is low on credits Stefan Metzmacher <metze(a)samba.org> smb: server: make use of smbdirect_socket.recv_io.credits.available Stefan Metzmacher <metze(a)samba.org> smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* Stefan Metzmacher <metze(a)samba.org> smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available Henrique Carvalho <henrique.carvalho(a)suse.com> smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: add chann_lock to protect ksmbd_chann_list xarray Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: split cached_fid bitfields to avoid shared-byte RMW races Li Chen <me(a)linux.beauty> io_uring: allow io-wq workers to exit when unused Li Chen <me(a)linux.beauty> io_uring/io-wq: add exit-on-idle state ------------- Diffstat: Makefile | 4 +- drivers/base/base.h | 9 + drivers/base/bus.c | 2 +- drivers/base/dd.c | 2 +- drivers/bluetooth/btusb.c | 2 + drivers/bus/fsl-mc/fsl-mc-bus.c | 6 +- drivers/crypto/intel/iaa/iaa_crypto_main.c | 12 +- drivers/crypto/marvell/octeontx/otx_cptpf_ucode.c | 2 +- drivers/crypto/omap-crypto.c | 2 +- drivers/crypto/virtio/virtio_crypto_core.c | 5 + .../crypto/virtio/virtio_crypto_skcipher_algs.c | 2 - drivers/gpu/drm/exynos/exynos_drm_vidi.c | 38 +- drivers/net/wireless/realtek/rtl8xxxu/core.c | 1 + drivers/net/wireless/realtek/rtw88/main.c | 4 +- drivers/pci/endpoint/pci-ep-cfs.c | 15 +- drivers/scsi/qla2xxx/qla_gs.c | 41 +- drivers/scsi/qla2xxx/qla_init.c | 28 +- drivers/scsi/qla2xxx/qla_isr.c | 19 +- drivers/scsi/qla2xxx/qla_os.c | 3 +- fs/erofs/fileio.c | 7 +- fs/hfs/mdb.c | 35 +- fs/hfs/super.c | 10 +- fs/nilfs2/sufile.c | 4 + fs/smb/client/cached_dir.h | 8 +- fs/smb/client/smbdirect.c | 523 ++++++++++++++++----- fs/smb/common/smbdirect/smbdirect_socket.h | 18 + fs/smb/server/mgmt/user_session.c | 5 + fs/smb/server/mgmt/user_session.h | 1 + fs/smb/server/server.c | 6 +- fs/smb/server/smb2pdu.c | 12 +- fs/smb/server/transport_rdma.c | 147 +++++- fs/smb/server/transport_tcp.c | 3 +- fs/xfs/scrub/btree.c | 7 +- io_uring/io-wq.c | 27 +- io_uring/io-wq.h | 1 + io_uring/tctx.c | 11 + kernel/sched/core.c | 7 +- kernel/sched/sched.h | 6 +- sound/hda/codecs/conexant.c | 1 + 39 files changed, 788 insertions(+), 248 deletions(-)

7 months, 1 week

[PATCH 6.18 00/49] 6.18.11-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.11 release. There are 49 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 15 Feb 2026 13:46:52 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.11-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.11-rc1 Danilo Krummrich <dakr(a)kernel.org> gpio: omap: do not register driver in probe() Ali Tariq <alitariq45892(a)gmail.com> wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add Liu Song <liu.song13(a)zte.com.cn> PCI: endpoint: Avoid creating sub-groups asynchronously Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free Darrick J. Wong <djwong(a)kernel.org> xfs: fix UAF in xchk_btree_check_block_owner Chao Yu <chao(a)kernel.org> erofs: fix UAF issue for file-backed mounts w/ directio option Gui-Dong Han <hanguidong02(a)gmail.com> bus: fsl-mc: fix use-after-free in driver_override_show() Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Query FW again before proceeding with login Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Free sp in error path to fix system crash Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Delay module unload while fabric scan in progress Shreyas Deodhar <sdeodhar(a)marvell.com> scsi: qla2xxx: Allow recovery for tape devices Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Validate sp before freeing associated memory Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() Mehdi Ben Hadj Khelifa <mehdi.benhadjkhelifa(a)gmail.com> hfs: ensure sb->s_fs_info is always cleaned up Edward Adam Davis <eadavis(a)qq.com> nilfs2: Fix potential block overflow that cause system hang Bibo Mao <maobibo(a)loongson.cn> crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req Bibo Mao <maobibo(a)loongson.cn> crypto: virtio - Add spinlock protection with virtqueue notification Kees Cook <kees(a)kernel.org> crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly Thorsten Blum <thorsten.blum(a)linux.dev> crypto: octeontx - Fix length check to avoid truncation in ucode_load_store Thorsten Blum <thorsten.blum(a)linux.dev> crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 Zenm Chen <zenmchen(a)gmail.com> Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB Gui-Dong Han <hanguidong02(a)gmail.com> driver core: enforce device_lock for driver_match_device() Stefan Metzmacher <metze(a)samba.org> smb: client: let send_done handle a completion without IB_SEND_SIGNALED Stefan Metzmacher <metze(a)samba.org> smb: client: let smbd_post_send_negotiate_req() use smbd_post_send() Stefan Metzmacher <metze(a)samba.org> smb: client: fix last send credit problem causing disconnects Stefan Metzmacher <metze(a)samba.org> smb: client: make use of smbdirect_socket.send_io.bcredits Stefan Metzmacher <metze(a)samba.org> smb: client: use smbdirect_send_batch processing Stefan Metzmacher <metze(a)samba.org> smb: client: introduce and use smbd_{alloc, free}_send_io() Stefan Metzmacher <metze(a)samba.org> smb: client: split out smbd_ib_post_send() Stefan Metzmacher <metze(a)samba.org> smb: client: port and use the wait_for_credits logic used by server Stefan Metzmacher <metze(a)samba.org> smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter() Stefan Metzmacher <metze(a)samba.org> smb: client: remove pointless sc->recv_io.credits.count rollback Stefan Metzmacher <metze(a)samba.org> smb: client: let smbd_post_send() make use of request->wr Stefan Metzmacher <metze(a)samba.org> smb: client: let recv_done() queue a refill when the peer is low on credits Stefan Metzmacher <metze(a)samba.org> smb: client: make use of smbdirect_socket.recv_io.credits.available Stefan Metzmacher <metze(a)samba.org> smb: server: let send_done handle a completion without IB_SEND_SIGNALED Stefan Metzmacher <metze(a)samba.org> smb: server: fix last send credit problem causing disconnects Stefan Metzmacher <metze(a)samba.org> smb: server: make use of smbdirect_socket.send_io.bcredits Stefan Metzmacher <metze(a)samba.org> smb: server: let recv_done() queue a refill when the peer is low on credits Stefan Metzmacher <metze(a)samba.org> smb: server: make use of smbdirect_socket.recv_io.credits.available Stefan Metzmacher <metze(a)samba.org> smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.* Stefan Metzmacher <metze(a)samba.org> smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available Henrique Carvalho <henrique.carvalho(a)suse.com> smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: add chann_lock to protect ksmbd_chann_list xarray Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: split cached_fid bitfields to avoid shared-byte RMW races Li Chen <me(a)linux.beauty> io_uring: allow io-wq workers to exit when unused Li Chen <me(a)linux.beauty> io_uring/io-wq: add exit-on-idle state ------------- Diffstat: Makefile | 4 +- drivers/base/base.h | 9 + drivers/base/bus.c | 2 +- drivers/base/dd.c | 2 +- drivers/bluetooth/btusb.c | 2 + drivers/bus/fsl-mc/fsl-mc-bus.c | 6 +- drivers/crypto/intel/iaa/iaa_crypto_main.c | 12 +- drivers/crypto/marvell/octeontx/otx_cptpf_ucode.c | 2 +- drivers/crypto/omap-crypto.c | 2 +- drivers/crypto/virtio/virtio_crypto_core.c | 5 + .../crypto/virtio/virtio_crypto_skcipher_algs.c | 2 - drivers/gpio/gpio-omap.c | 22 +- drivers/gpu/drm/exynos/exynos_drm_vidi.c | 38 +- drivers/net/wireless/realtek/rtl8xxxu/core.c | 1 + drivers/net/wireless/realtek/rtw88/main.c | 4 +- drivers/pci/endpoint/pci-ep-cfs.c | 15 +- drivers/scsi/qla2xxx/qla_gs.c | 41 +- drivers/scsi/qla2xxx/qla_init.c | 28 +- drivers/scsi/qla2xxx/qla_isr.c | 19 +- drivers/scsi/qla2xxx/qla_os.c | 3 +- fs/erofs/fileio.c | 7 +- fs/hfs/mdb.c | 35 +- fs/hfs/super.c | 10 +- fs/nilfs2/sufile.c | 4 + fs/smb/client/cached_dir.h | 8 +- fs/smb/client/smbdirect.c | 523 ++++++++++++++++----- fs/smb/common/smbdirect/smbdirect_socket.h | 18 + fs/smb/server/mgmt/user_session.c | 5 + fs/smb/server/mgmt/user_session.h | 1 + fs/smb/server/server.c | 6 +- fs/smb/server/smb2pdu.c | 12 +- fs/smb/server/transport_rdma.c | 147 +++++- fs/smb/server/transport_tcp.c | 3 +- fs/xfs/scrub/btree.c | 7 +- io_uring/io-wq.c | 27 +- io_uring/io-wq.h | 1 + io_uring/tctx.c | 11 + sound/hda/codecs/conexant.c | 1 + 38 files changed, 799 insertions(+), 246 deletions(-)

7 months, 1 week

[PATCH 6.6 00/25] 6.6.125-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.125 release. There are 25 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 15 Feb 2026 13:46:52 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.125-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.125-rc1 Danilo Krummrich <dakr(a)kernel.org> gpio: omap: do not register driver in probe() Eric Dumazet <edumazet(a)google.com> mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: pm: ensure unknown flags are ignored Khairul Anuar Romli <khairul.anuar.romli(a)altera.com> spi: cadence-quadspi: Implement refcount to handle unbind during busy Konstantin Shkolnyy <kshk(a)linux.ibm.com> vsock/test: verify socket options after setting them Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_pipapo: prevent overflow in lookup table allocation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: missing objects with no memcg accounting Jeff Layton <jlayton(a)kernel.org> nfsd: don't ignore the return code of svc_proc_register() Marek Behún <kabel(a)kernel.org> net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Query FW again before proceeding with login Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Free sp in error path to fix system crash Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Delay module unload while fabric scan in progress Shreyas Deodhar <sdeodhar(a)marvell.com> scsi: qla2xxx: Allow recovery for tape devices Anil Gurumurthy <agurumurthy(a)marvell.com> scsi: qla2xxx: Validate sp before freeing associated memory Bitterblue Smith <rtl8821cerfe2(a)gmail.com> wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon() Edward Adam Davis <eadavis(a)qq.com> nilfs2: Fix potential block overflow that cause system hang Bibo Mao <maobibo(a)loongson.cn> crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req Bibo Mao <maobibo(a)loongson.cn> crypto: virtio - Add spinlock protection with virtqueue notification Kees Cook <kees(a)kernel.org> crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly Thorsten Blum <thorsten.blum(a)linux.dev> crypto: octeontx - Fix length check to avoid truncation in ucode_load_store Zenm Chen <zenmchen(a)gmail.com> Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB Gui-Dong Han <hanguidong02(a)gmail.com> driver core: enforce device_lock for driver_match_device() Henrique Carvalho <henrique.carvalho(a)suse.com> smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: split cached_fid bitfields to avoid shared-byte RMW races ------------- Diffstat: Makefile | 4 +- drivers/base/base.h | 9 ++ drivers/base/bus.c | 2 +- drivers/base/dd.c | 2 +- drivers/bluetooth/btusb.c | 2 + drivers/crypto/marvell/octeontx/otx_cptpf_ucode.c | 2 +- drivers/crypto/omap-crypto.c | 2 +- drivers/crypto/virtio/virtio_crypto_core.c | 5 + .../crypto/virtio/virtio_crypto_skcipher_algs.c | 2 - drivers/gpio/gpio-omap.c | 22 +++- drivers/net/phy/sfp.c | 2 + drivers/net/wireless/realtek/rtw88/main.c | 4 +- drivers/scsi/qla2xxx/qla_gs.c | 41 +++--- drivers/scsi/qla2xxx/qla_init.c | 28 ++-- drivers/scsi/qla2xxx/qla_isr.c | 19 ++- drivers/scsi/qla2xxx/qla_os.c | 3 +- drivers/spi/spi-cadence-quadspi.c | 34 +++++ fs/nfsd/nfsctl.c | 9 +- fs/nfsd/stats.c | 4 +- fs/nfsd/stats.h | 2 +- fs/nilfs2/sufile.c | 4 + fs/smb/client/cached_dir.h | 8 +- fs/smb/server/server.c | 6 +- fs/smb/server/transport_tcp.c | 3 +- net/mptcp/pm_netlink.c | 16 ++- net/netfilter/nf_tables_api.c | 2 +- net/netfilter/nft_compat.c | 6 +- net/netfilter/nft_log.c | 2 +- net/netfilter/nft_meta.c | 2 +- net/netfilter/nft_numgen.c | 2 +- net/netfilter/nft_set_pipapo.c | 64 ++++++--- net/netfilter/nft_tunnel.c | 5 +- tools/testing/selftests/net/mptcp/pm_netlink.sh | 4 + tools/testing/selftests/net/mptcp/pm_nl_ctl.c | 11 ++ tools/testing/vsock/control.c | 9 +- tools/testing/vsock/util.c | 143 +++++++++++++++++++++ tools/testing/vsock/util.h | 7 + tools/testing/vsock/vsock_test.c | 29 ++--- 38 files changed, 406 insertions(+), 115 deletions(-)

7 months, 1 week

[PATCH 6.18 000/175] 6.18.10-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.10 release. There are 175 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 11 Feb 2026 14:22:44 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.10-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.10-rc1 Nathan Chancellor <nathan(a)kernel.org> riscv: Add intermediate cast to 'unsigned long' in __get_user_asm Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Use the right limit for PCM OOB check Werner Sembach <wse(a)tuxedocomputers.com> ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. Vishwaroop A <va(a)nvidia.com> spi: tegra114: Preserve SPI mode bits in def_command1_reg Felix Gu <ustc.gu(a)gmail.com> spi: tegra: Fix a memory leak in tegra_slink_probe() Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer check in IRQ handler Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Move curr_xfer read inside spinlock Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer Guodong Xu <guodong(a)riscstar.com> regulator: spacemit-p1: Fix n_voltages for BUCK and LDO regulators LI Qingwu <Qing-wu.Li(a)leica-geosystems.com.cn> i2c: imx: preserve error state in block data length handler Chen Ni <nichen(a)iscas.ac.cn> gpio: loongson-64bit: Fix incorrect NULL check after devm_kcalloc() Chris Bainbridge <chris.bainbridge(a)gmail.com> ASoC: amd: fix memory leak in acp3x pdm dma ops Sergey Shtylyov <s.shtylyov(a)auroraos.dev> ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() Richard Fitzgerald <rf(a)opensource.cirrus.com> firmware: cs_dsp: rate-limit log messages in KUnit builds Richard Fitzgerald <rf(a)opensource.cirrus.com> firmware: cs_dsp: Factor out common debugfs string read Shigeru Yoshida <syoshida(a)redhat.com> ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF Keith Busch <kbusch(a)kernel.org> nvme-pci: handle changing device dma map requirements Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/guc: Fix CFI violation in debugfs access. Andrew Fasano <andrew.fasano(a)nist.gov> netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() Arnd Bergmann <arnd(a)arndb.de> hwmon: (occ) Mark occ_init_attribute() as __printf Karthik Poosa <karthik.poosa(a)intel.com> drm/xe/pm: Disable D3Cold for BMG only on specific platforms Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/query: Fix topology query pointer advance Jacob Keller <jacob.e.keller(a)intel.com> drm/mgag200: fix mgag200_bmc_stop_scanout() Paolo Abeni <pabeni(a)redhat.com> net: gro: fix outer network offset Eric Dumazet <edumazet(a)google.com> net: add proper RCU protection to /proc/net/ptype Chen Ni <nichen(a)iscas.ac.cn> net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() Melissa Wen <mwen(a)igalia.com> drm/amd/display: fix wrong color value mapping on MCM shaper LUT Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: mvm: pause TCM on fast resume Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: mld: cancel mlo_scan_start_wk Claudiu Manoil <claudiu.manoil(a)nxp.com> net: enetc: Convert 16-bit register reads to 32-bit for ENETC v4 Claudiu Manoil <claudiu.manoil(a)nxp.com> net: enetc: Convert 16-bit register writes to 32-bit for ENETC v4 Claudiu Manoil <claudiu.manoil(a)nxp.com> net: enetc: Remove CBDR cacheability AXI settings for ENETC v4 Claudiu Manoil <claudiu.manoil(a)nxp.com> net: enetc: Remove SI/BDR cacheability AXI settings for ENETC v4 Daniel Hodges <hodgesd(a)meta.com> tipc: use kfree_sensitive() for session key material Jakub Kicinski <kuba(a)kernel.org> net: rss: fix reporting RXH_XFRM_NO_CHANGE as input_xfrm for contexts Jiayuan Chen <jiayuan.chen(a)shopee.com> linkwatch: use __dev_put() in callers to prevent UAF Pavel Begunkov <asml.silence(a)gmail.com> io_uring/zcrx: fix page array leak Jakub Kicinski <kuba(a)kernel.org> net: don't touch dev->stats in BPF redirect paths Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() Sergey Senozhatsky <senozhatsky(a)chromium.org> net: usb: r8152: fix resume reset deadlock Eric Dumazet <edumazet(a)google.com> macvlan: fix error recovery in macvlan_common_newlink() Marek Behún <kabel(a)kernel.org> net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module Mohammad Heib <mheib(a)redhat.com> i40e: drop udp_tunnel_get_rx_info() call from i40e_open() Mohammad Heib <mheib(a)redhat.com> ice: drop udp_tunnel_get_rx_info() call from ndo_open() Aaron Ma <aaron.ma(a)canonical.com> ice: Fix PTP NULL pointer dereference during VSI rebuild Jacob Keller <jacob.e.keller(a)intel.com> ice: PTP: fix missing timestamps on E825 hardware Grzegorz Nitka <grzegorz.nitka(a)intel.com> ice: fix missing TX timestamps interrupts on E825 devices Junrui Luo <moonafterrain(a)outlook.com> dpaa2-switch: add bounds check for if_id in IRQ handler Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Initialize netdev pointer before queue setup Junrui Luo <moonafterrain(a)outlook.com> dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero Eric Dumazet <edumazet(a)google.com> net/sched: cls_u32: use skb_header_pointer_careful() Eric Dumazet <edumazet(a)google.com> net: add skb_header_pointer_careful() helper leobannocloutier(a)gmail.com <leobannocloutier(a)gmail.com> hwmon: (dell-smm) Add Dell G15 5510 to fan control whitelist ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/client: fix memory leak in smb2_open_file() Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable Mario Limonciello <mario.limonciello(a)amd.com> platform/x86: hp-bioscfg: Skip empty attribute names Kaushlendra Kumar <kaushlendra.kumar(a)intel.com> platform/x86: intel_telemetry: Fix PSS event register mask Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: toshiba_haps: Fix memory leaks in add/remove routines Alex Deucher <alexander.deucher(a)amd.com> Revert "drm/amd/display: pause the workload setting in dm" Ian Rogers <irogers(a)google.com> tracing: Avoid possible signed 64-bit truncation Martin Hamilton <m(a)martinh.net> ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio Qu Wenruo <wqu(a)suse.com> btrfs: reject new transactions if the fs is fully read-only Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice Edward Adam Davis <eadavis(a)qq.com> btrfs: sync read disk super and set block size Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: correctly check if CSA is active Qiang Ma <maqianga(a)uniontech.com> btrfs: fix Wmaybe-uninitialized warning in replay_one_buffer() Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() Tim Guttzeit <t.guttzeit(a)tuxedocomputers.com> ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU Jens Axboe <axboe(a)kernel.dk> io_uring/rw: free potentially allocated iovec on cache put failure Nathan Chancellor <nathan(a)kernel.org> riscv: Use 64-bit variable for output in __get_user_asm Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() Veerendranath Jakkam <veerendranath.jakkam(a)oss.qualcomm.com> wifi: cfg80211: Fix bitrate calculation overflow for HE rates Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> spi: intel-pci: Add support for Nova Lake SPI serial flash Lianqin Hu <hulianqin(a)vivo.com> ALSA: usb-audio: Add delay quirk for MOONDROP Moonriver2 Ti Kaushlendra Kumar <kaushlendra.kumar(a)intel.com> regmap: maple: free entry on mas_store_gfp() failure Devyn Liu <liudingyuan(a)h-partners.com> spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization Shenghao Ding <shenghao-ding(a)ti.com> ALSA: hda/tas2781: Add newly-released HP laptop Dimitrios Katsaros <patcherwork(a)gmail.com> ASoC: tlv320adcx140: Propagate error codes during probe Radhi Bajahaw <bajahawradhi(a)gmail.com> ASoC: amd: yc: Fix microphone on ASUS M6500RE Hannes Reinecke <hare(a)kernel.org> nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() Edward Adam Davis <eadavis(a)qq.com> ALSA: usb-audio: Prevent excessive number of frames Chaitanya Kulkarni <ckulkarnilinux(a)gmail.com> nvme-fc: release admin tagset if init fails Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: simple-card-utils: Check device node before overwrite direction Kery Qi <qikeyu2017(a)gmail.com> ASoC: davinci-evm: Fix reference leak in davinci_evm_probe Guodong Xu <guodong(a)riscstar.com> dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Deep Harsora <Deep_Harsora(a)dell.com> ASoC: Intel: sof_sdw: Add new quirks for PTL on Dell with CS42L43 Baochen Qiang <baochen.qiang(a)oss.qualcomm.com> wifi: mac80211: collect station statistics earlier when disconnect Arnoud Willemsen <mail(a)lynthium.com> HID: Elecom: Add support for ELECOM M-XT3DRBK (018C) Dennis Marttinen <twelho(a)welho.tech> HID: logitech: add HID++ support for Logitech MX Anywhere 3S Martin Kaiser <martin(a)kaiser.cx> riscv: trace: fix snapshot deadlock with sbi ecall Wupeng Ma <mawupeng1(a)huawei.com> ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free Perry Yuan <perry.yuan(a)amd.com> drm/amd/pm: Disable MMIO access during SMU Mode 1 reset Rodrigo Lugathe da Conceição Alves <lugathe2(a)gmail.com> HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) Even Xu <even.xu(a)intel.com> HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer Kwok Kin Ming <kenkinming2002(a)gmail.com> HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() Chris Chiu <chris.chiu(a)canonical.com> HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list Nathan Chancellor <nathan(a)kernel.org> drm/amd/display: Reduce number of arguments of dcn30's CalculatePrefetchSchedule() Daniel Gomez <da.gomez(a)samsung.com> netfilter: replace -EEXIST with -EBUSY Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: qcom: Remove ASPM L0s support for MSM8996 SoC Ruslan Krupitsa <krupitsarus(a)outlook.com> ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk Brendan Jackman <jackmanb(a)google.com> x86/sev: Disable GCOV on noinstr object Matouš Lánský <matouslansky(a)post.cz> ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 Siarhei Vishniakou <svv(a)google.com> HID: playstation: Center initial joystick axes to prevent spurious events Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: Reset enum_devices_done before enumeration Lukas Gerlach <lukas.gerlach(a)cispa.de> riscv: Sanitize syscall table indexing under speculation Filipe Manana <fdmanana(a)suse.com> btrfs: fix reservation leak in some error paths when inserting inline extent DaytonCL <artem749507(a)gmail.com> HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: Update ishtp bus match to support device ID table Filipe Manana <fdmanana(a)suse.com> btrfs: do not free data reservation in fallback from inline due to -ENOSPC ZhangGuoDong <zhangguodong(a)kylinos.cn> smb/server: fix refcount leak in parse_durable_handle_context() Chenghao Duan <duanchenghao(a)kylinos.cn> LoongArch: Enable exception fixup for specific ADE subcode Alexandre Negrel <alexandre(a)negrel.dev> io_uring: use GFP_NOWAIT for overflow CQEs on legacy rings ZhangGuoDong <zhangguodong(a)kylinos.cn> smb/server: fix refcount leak in smb2_open() FengWei Shih <dannyshih(a)synology.com> md: suspend array while updating raid_disks via sysfs Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED ZhangGuoDong <zhangguodong(a)kylinos.cn> smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() shechenglong <shechenglong(a)xfusion.com> block,bfq: fix aux stat accumulation destination Dmytro Bagrii <dimich.dmb(a)gmail.com> platform/x86: dell-lis3lv02d: Add Latitude 5400 Yao Zi <ziyao(a)disroot.org> wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: usb: sr9700: support devices with virtual driver CD Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't WARN for connections on invalid channels Peter Åstrand <astrand(a)lysator.liu.se> wifi: wlcore: ensure skb headroom before skb_push Moon Hee Lee <moonhee.lee.ca(a)gmail.com> wifi: mac80211: ocb: skip rx_no_sta when interface is not joined Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix ftrace event field alignments Carlos Llamas <cmllamas(a)google.com> binderfs: fix ida_alloc_max() upper bound Carlos Llamas <cmllamas(a)google.com> binder: fix BR_FROZEN_REPLY error log Carlos Llamas <cmllamas(a)google.com> binder: fix UAF in binder_netlink_report() Carlos Llamas <cmllamas(a)google.com> rust_binderfs: fix ida_alloc_max() upper bound Alice Ryhl <aliceryhl(a)google.com> rust_binder: add additional alignment checks Alice Ryhl <aliceryhl(a)google.com> rust_binder: correctly handle FDA objects of length zero Peter Zijlstra <peterz(a)infradead.org> sched/fair: Have SD_SERIALIZE affect newidle balancing Tim Chen <tim.c.chen(a)linux.intel.com> sched/fair: Skip sched_balance_running cmpxchg when balance is not due Daniele Palmas <dnlplm(a)gmail.com> bus: mhi: host: pci_generic: Add Telit FE990B40 modem support Lukas Wunner <lukas(a)wunner.de> treewide: Drop pci_save_state() after pci_restore_state() Lukas Wunner <lukas(a)wunner.de> PCI/ERR: Ensure error recoverability at all times Gabor Juhos <j4g8y7(a)gmail.com> hwmon: (gpio-fan) Allow to stop FANs when CONFIG_PM is disabled Gabor Juhos <j4g8y7(a)gmail.com> hwmon: (gpio-fan) Fix set_rpm() return value Sean Christopherson <seanjc(a)google.com> KVM: Don't clobber irqfd routing type when deassigning irqfd Zhiquan Li <zhiquan_li(a)163.com> KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures Tomas Hlavacek <tmshlvck(a)gmail.com> net: spacemit: k1-emac: fix jumbo frame support Kevin Hao <haokexin(a)gmail.com> net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue Kevin Hao <haokexin(a)gmail.com> net: cpsw: Execute ndo_set_rx_mode callback in a work queue Dave Airlie <airlied(a)redhat.com> nouveau/gsp: fix suspend/resume regression on r570 firmware Dave Airlie <airlied(a)redhat.com> nouveau/gsp: use rpc sequence numbers properly. Dave Airlie <airlied(a)redhat.com> nouveau: add a third state to the fini handler. Bert Karwatzki <spasswolf(a)web.de> Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" Kairui Song <kasong(a)tencent.com> mm, shmem: prevent infinite loop on truncate race Max Yuan <maxyuan(a)google.com> gve: Correct ethtool rx_dropped calculation Debarghya Kundu <debarghyak(a)google.com> gve: Fix stats report corruption on queue count change Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Set minimum version for set_hw_resource_1 on gfx11 to 0x52 Chen Ridong <chenridong(a)huawei.com> cgroup/dmem: avoid pool UAF Chen Ridong <chenridong(a)huawei.com> cgroup/dmem: avoid rcu warning when unregister region Chen Ridong <chenridong(a)huawei.com> cgroup/dmem: fix NULL pointer dereference when setting max Daniel Vogelbacher <daniel(a)chaospixel.com> ceph: fix oops due to invalid pointer for kfree() in parse_longname() Thomas Weissschuh <thomas.weissschuh(a)linutronix.de> ARM: 9468/1: fix memset64() on big-endian Ilya Dryomov <idryomov(a)gmail.com> rbd: check for EOD after exclusive lock is ensured to be held Viacheslav Dubeyko <Slava.Dubeyko(a)ibm.com> ceph: fix NULL pointer dereference in ceph_mds_auth_match() Hao Ge <hao.ge(a)linux.dev> mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single Andrii Nakryiko <andrii(a)kernel.org> procfs: avoid fetching build ID while holding VMA lock Xu Yang <xu.yang_2(a)nxp.com> pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains Xu Yang <xu.yang_2(a)nxp.com> pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup Jacky Bai <ping.bai(a)nxp.com> pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset Xu Yang <xu.yang_2(a)nxp.com> pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup Gabor Juhos <j4g8y7(a)gmail.com> pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state Takashi Iwai <tiwai(a)suse.de> ALSA: aloop: Fix racy access at PCM trigger Kaushlendra Kumar <kaushlendra.kumar(a)intel.com> platform/x86: intel_telemetry: Fix swapped arrays in PSS output Sean Christopherson <seanjc(a)google.com> KVM: x86: Explicitly configure supported XSS from {svm,vmx}_set_cpu_caps() Andrew Cooper <andrew.cooper3(a)citrix.com> x86/kfence: fix booting on 32bit non-PAE systems Josh Poimboeuf <jpoimboe(a)kernel.org> x86/vmware: Fix hypercall clobbers YunJe Shin <yjshin0438(a)gmail.com> nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec ------------- Diffstat: Makefile | 4 +- arch/arm/include/asm/string.h | 5 +- arch/loongarch/kernel/traps.c | 5 + arch/loongarch/mm/cache.c | 8 +- arch/riscv/include/asm/uaccess.h | 14 +- arch/riscv/kernel/Makefile | 15 +- arch/riscv/kernel/traps.c | 4 +- arch/x86/coco/sev/Makefile | 2 + arch/x86/include/asm/kfence.h | 7 +- arch/x86/include/asm/vmware.h | 4 +- arch/x86/kvm/svm/svm.c | 2 + arch/x86/kvm/vmx/vmx.c | 2 + arch/x86/kvm/x86.c | 30 +-- arch/x86/kvm/x86.h | 2 + block/bfq-cgroup.c | 2 +- drivers/android/binder.c | 19 +- drivers/android/binder/rust_binderfs.c | 8 +- drivers/android/binder/thread.rs | 109 +++++---- drivers/android/binderfs.c | 8 +- drivers/base/regmap/regcache-maple.c | 11 +- drivers/block/rbd.c | 33 ++- drivers/bus/mhi/host/pci_generic.c | 13 ++ drivers/crypto/intel/qat/qat_common/adf_aer.c | 2 - drivers/dma/ioat/init.c | 1 - drivers/dma/mmp_pdma.c | 6 + drivers/firmware/cirrus/cs_dsp.c | 82 +++++-- drivers/firmware/cirrus/cs_dsp.h | 18 ++ drivers/firmware/cirrus/test/cs_dsp_test_bin.c | 22 +- .../firmware/cirrus/test/cs_dsp_test_bin_error.c | 24 +- drivers/firmware/cirrus/test/cs_dsp_test_wmfw.c | 26 ++- .../firmware/cirrus/test/cs_dsp_test_wmfw_error.c | 24 +- drivers/firmware/cirrus/test/cs_dsp_tests.c | 1 + drivers/gpio/gpio-loongson-64bit.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 3 - drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 2 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 11 - .../gpu/drm/amd/display/dc/dcn30/dcn30_cm_common.c | 7 +- .../amd/display/dc/dml/dcn30/display_mode_vba_30.c | 258 ++++++--------------- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 7 +- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 9 +- drivers/gpu/drm/mgag200/mgag200_bmc.c | 31 +-- drivers/gpu/drm/mgag200/mgag200_drv.h | 6 + drivers/gpu/drm/nouveau/include/nvif/client.h | 2 +- drivers/gpu/drm/nouveau/include/nvif/driver.h | 2 +- drivers/gpu/drm/nouveau/include/nvkm/core/device.h | 3 +- drivers/gpu/drm/nouveau/include/nvkm/core/engine.h | 2 +- drivers/gpu/drm/nouveau/include/nvkm/core/object.h | 5 +- drivers/gpu/drm/nouveau/include/nvkm/core/oproxy.h | 2 +- drivers/gpu/drm/nouveau/include/nvkm/core/subdev.h | 4 +- .../drm/nouveau/include/nvkm/core/suspend_state.h | 11 + drivers/gpu/drm/nouveau/include/nvkm/subdev/gsp.h | 6 + drivers/gpu/drm/nouveau/nouveau_drm.c | 2 +- drivers/gpu/drm/nouveau/nouveau_nvif.c | 10 +- drivers/gpu/drm/nouveau/nvif/client.c | 4 +- drivers/gpu/drm/nouveau/nvkm/core/engine.c | 4 +- drivers/gpu/drm/nouveau/nvkm/core/ioctl.c | 4 +- drivers/gpu/drm/nouveau/nvkm/core/object.c | 20 +- drivers/gpu/drm/nouveau/nvkm/core/oproxy.c | 2 +- drivers/gpu/drm/nouveau/nvkm/core/subdev.c | 18 +- drivers/gpu/drm/nouveau/nvkm/core/uevent.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/ce/ga100.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/ce/priv.h | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 22 +- drivers/gpu/drm/nouveau/nvkm/engine/device/pci.c | 4 +- drivers/gpu/drm/nouveau/nvkm/engine/device/priv.h | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/device/user.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/disp/base.c | 4 +- drivers/gpu/drm/nouveau/nvkm/engine/disp/chan.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/falcon.c | 4 +- drivers/gpu/drm/nouveau/nvkm/engine/fifo/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/fifo/uchan.c | 6 +- drivers/gpu/drm/nouveau/nvkm/engine/gr/base.c | 4 +- drivers/gpu/drm/nouveau/nvkm/engine/gr/gf100.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/gr/nv04.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/gr/nv10.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/gr/nv20.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/gr/nv20.h | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/gr/nv40.c | 4 +- drivers/gpu/drm/nouveau/nvkm/engine/mpeg/nv44.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/sec2/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/engine/xtensa.c | 4 +- drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/bar/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/devinit/base.c | 4 +- drivers/gpu/drm/nouveau/nvkm/subdev/fault/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/fault/user.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/gpio/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/gsp/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/gsp/gh100.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/gsp/priv.h | 8 +- .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/fbsr.c | 2 +- .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/gsp.c | 8 +- .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/rpc.c | 6 + .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/fbsr.c | 8 +- .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/gsp.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/gsp/rm/rm.h | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/gsp/tu102.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/i2c/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/instmem/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/pci/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/pmu/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/therm/base.c | 6 +- drivers/gpu/drm/nouveau/nvkm/subdev/timer/base.c | 2 +- drivers/gpu/drm/xe/xe_guc.c | 6 +- drivers/gpu/drm/xe/xe_guc.h | 2 +- drivers/gpu/drm/xe/xe_pm.c | 13 +- drivers/gpu/drm/xe/xe_query.c | 2 +- drivers/hid/hid-elecom.c | 15 +- drivers/hid/hid-ids.h | 7 +- drivers/hid/hid-logitech-hidpp.c | 2 + drivers/hid/hid-multitouch.c | 1 + drivers/hid/hid-playstation.c | 5 + drivers/hid/hid-quirks.c | 5 +- drivers/hid/i2c-hid/i2c-hid-core.c | 1 + drivers/hid/intel-ish-hid/ishtp-hid-client.c | 1 + drivers/hid/intel-ish-hid/ishtp/bus.c | 12 +- .../hid/intel-thc-hid/intel-thc/intel-thc-dma.c | 5 + drivers/hwmon/acpi_power_meter.c | 17 +- drivers/hwmon/dell-smm-hwmon.c | 8 + drivers/hwmon/gpio-fan.c | 6 +- drivers/hwmon/occ/common.c | 1 + drivers/i2c/busses/i2c-imx.c | 3 +- drivers/md/md.c | 4 +- drivers/net/ethernet/adi/adin1110.c | 3 + drivers/net/ethernet/broadcom/bnx2.c | 2 - drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 1 - drivers/net/ethernet/broadcom/tg3.c | 1 - drivers/net/ethernet/cavium/liquidio/lio_main.c | 39 ++-- drivers/net/ethernet/cavium/liquidio/lio_vf_main.c | 4 +- drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 1 - drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 2 - .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 10 + drivers/net/ethernet/freescale/enetc/enetc.c | 11 +- drivers/net/ethernet/freescale/enetc/enetc4_pf.c | 6 +- drivers/net/ethernet/freescale/enetc/enetc_cbdr.c | 4 - drivers/net/ethernet/freescale/enetc/enetc_hw.h | 17 +- drivers/net/ethernet/google/gve/gve_ethtool.c | 77 +++--- drivers/net/ethernet/google/gve/gve_main.c | 4 +- drivers/net/ethernet/hisilicon/hibmcge/hbg_err.c | 1 - drivers/net/ethernet/intel/e1000e/netdev.c | 1 - drivers/net/ethernet/intel/fm10k/fm10k_pci.c | 6 - drivers/net/ethernet/intel/i40e/i40e_main.c | 2 - drivers/net/ethernet/intel/ice/ice_main.c | 28 +-- drivers/net/ethernet/intel/ice/ice_ptp.c | 179 ++++++++------ drivers/net/ethernet/intel/ice/ice_ptp.h | 18 +- drivers/net/ethernet/intel/igb/igb_main.c | 2 - drivers/net/ethernet/intel/igc/igc_main.c | 2 - drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 1 - drivers/net/ethernet/mellanox/mlx4/main.c | 1 - drivers/net/ethernet/mellanox/mlx5/core/main.c | 1 - drivers/net/ethernet/meta/fbnic/fbnic_pci.c | 1 - drivers/net/ethernet/microchip/lan743x_main.c | 1 - drivers/net/ethernet/myricom/myri10ge/myri10ge.c | 4 - drivers/net/ethernet/neterion/s2io.c | 1 - drivers/net/ethernet/spacemit/k1_emac.c | 21 +- drivers/net/ethernet/ti/cpsw.c | 41 +++- drivers/net/ethernet/ti/cpsw_new.c | 34 ++- drivers/net/ethernet/ti/cpsw_priv.h | 1 + drivers/net/macvlan.c | 5 +- drivers/net/phy/sfp.c | 2 + drivers/net/usb/r8152.c | 29 +-- drivers/net/usb/sr9700.c | 5 + drivers/net/wireless/intel/iwlwifi/mld/iface.c | 2 - drivers/net/wireless/intel/iwlwifi/mld/mac80211.c | 2 + drivers/net/wireless/intel/iwlwifi/mld/ptp.c | 7 + drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 6 +- drivers/net/wireless/intel/iwlwifi/mvm/ptp.c | 7 + drivers/net/wireless/ti/wlcore/tx.c | 5 + drivers/nvme/host/fc.c | 2 + drivers/nvme/host/pci.c | 45 ++-- drivers/nvme/target/tcp.c | 26 ++- drivers/pci/bus.c | 3 + drivers/pci/controller/dwc/pcie-qcom.c | 4 +- drivers/pci/pci.c | 3 - drivers/pci/pcie/portdrv.c | 1 - drivers/platform/x86/dell/dell-lis3lv02d.c | 1 + drivers/platform/x86/hp/hp-bioscfg/bioscfg.c | 5 + drivers/platform/x86/intel/plr_tpmi.c | 2 +- drivers/platform/x86/intel/telemetry/debugfs.c | 4 +- drivers/platform/x86/intel/telemetry/pltdrv.c | 2 +- drivers/platform/x86/toshiba_haps.c | 2 +- drivers/pmdomain/imx/gpcv2.c | 8 +- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 2 +- drivers/pmdomain/imx/imx8mp-blk-ctrl.c | 30 +++ drivers/pmdomain/qcom/rpmpd.c | 2 +- drivers/regulator/spacemit-p1.c | 6 +- drivers/scsi/bfa/bfad.c | 1 - drivers/scsi/csiostor/csio_init.c | 1 - drivers/scsi/ipr.c | 1 - drivers/scsi/lpfc/lpfc_init.c | 6 - drivers/scsi/qla2xxx/qla_os.c | 5 - drivers/scsi/qla4xxx/ql4_os.c | 5 - drivers/spi/spi-hisi-kunpeng.c | 4 +- drivers/spi/spi-intel-pci.c | 1 + drivers/spi/spi-tegra114.c | 3 + drivers/spi/spi-tegra20-slink.c | 6 +- drivers/spi/spi-tegra210-quad.c | 56 ++++- drivers/target/iscsi/iscsi_target_util.c | 10 +- drivers/tty/serial/8250/8250_pci.c | 1 - drivers/tty/serial/jsm/jsm_driver.c | 1 - fs/btrfs/disk-io.c | 13 ++ fs/btrfs/fs.h | 8 + fs/btrfs/inode.c | 22 +- fs/btrfs/tree-log.c | 2 +- fs/btrfs/volumes.c | 2 + fs/ceph/crypto.c | 9 +- fs/ceph/mds_client.c | 5 +- fs/ceph/mdsmap.c | 26 ++- fs/ceph/mdsmap.h | 1 + fs/ceph/super.h | 16 +- fs/proc/task_mmu.c | 42 ++-- fs/smb/client/smb2file.c | 1 + fs/smb/server/smb2pdu.c | 8 +- include/linux/buildid.h | 3 + include/linux/ceph/ceph_fs.h | 6 + include/linux/firmware/cirrus/cs_dsp.h | 4 +- include/linux/skbuff.h | 12 + io_uring/io_uring.c | 2 +- io_uring/rw.c | 15 +- io_uring/zcrx.c | 1 + kernel/cgroup/dmem.c | 70 +++++- kernel/sched/fair.c | 54 ++--- kernel/trace/ring_buffer.c | 2 + kernel/trace/trace.c | 8 +- kernel/trace/trace.h | 7 +- kernel/trace/trace_entries.h | 32 +-- kernel/trace/trace_export.c | 21 +- lib/buildid.c | 42 +++- mm/shmem.c | 23 +- mm/slub.c | 6 +- net/bridge/netfilter/ebtables.c | 2 +- net/core/filter.c | 8 +- net/core/gro.c | 2 + net/core/link_watch.c | 20 +- net/core/net-procfs.c | 50 ++-- net/ethtool/common.c | 3 - net/ethtool/rss.c | 9 +- net/ipv6/ip6_fib.c | 3 +- net/mac80211/iface.c | 8 +- net/mac80211/key.c | 3 +- net/mac80211/mlme.c | 5 +- net/mac80211/ocb.c | 3 + net/mac80211/sta_info.c | 7 +- net/netfilter/nf_log.c | 4 +- net/netfilter/nf_tables_api.c | 2 +- net/netfilter/x_tables.c | 2 +- net/sched/cls_u32.c | 13 +- net/tipc/crypto.c | 4 +- net/wireless/util.c | 8 +- sound/drivers/aloop.c | 62 ++--- sound/hda/codecs/realtek/alc269.c | 27 ++- sound/hda/codecs/side-codecs/tas2781_hda_i2c.c | 5 +- sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 + sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/tlv320adcx140.c | 3 + sound/soc/generic/simple-card-utils.c | 4 +- sound/soc/intel/boards/sof_sdw.c | 8 + sound/soc/ti/davinci-evm.c | 39 +++- sound/usb/mixer_quirks.c | 9 +- sound/usb/pcm.c | 3 +- sound/usb/quirks.c | 2 + tools/testing/selftests/kvm/Makefile.kvm | 1 + virt/kvm/eventfd.c | 44 ++-- 265 files changed, 1872 insertions(+), 1033 deletions(-)

7 months, 1 week

[PATCH 6.12 000/113] 6.12.70-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.70 release. There are 113 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 11 Feb 2026 14:22:44 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.70-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.70-rc1 Werner Sembach <wse(a)tuxedocomputers.com> ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. Vishwaroop A <va(a)nvidia.com> spi: tegra114: Preserve SPI mode bits in def_command1_reg Felix Gu <ustc.gu(a)gmail.com> spi: tegra: Fix a memory leak in tegra_slink_probe() Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Move curr_xfer read inside spinlock Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer Chris Bainbridge <chris.bainbridge(a)gmail.com> ASoC: amd: fix memory leak in acp3x pdm dma ops Sergey Shtylyov <s.shtylyov(a)auroraos.dev> ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update() Shigeru Yoshida <syoshida(a)redhat.com> ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF Andrew Fasano <andrew.fasano(a)nist.gov> netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() Arnd Bergmann <arnd(a)arndb.de> hwmon: (occ) Mark occ_init_attribute() as __printf Karthik Poosa <karthik.poosa(a)intel.com> drm/xe/pm: Disable D3Cold for BMG only on specific platforms Rodrigo Vivi <rodrigo.vivi(a)intel.com> drm/xe/pm: Also avoid missing outer rpm warning on system suspend Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/query: Fix topology query pointer advance Jacob Keller <jacob.e.keller(a)intel.com> drm/mgag200: fix mgag200_bmc_stop_scanout() Paolo Abeni <pabeni(a)redhat.com> net: gro: fix outer network offset Chen Ni <nichen(a)iscas.ac.cn> net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi() Melissa Wen <mwen(a)igalia.com> drm/amd/display: fix wrong color value mapping on MCM shaper LUT Daniel Hodges <hodgesd(a)meta.com> tipc: use kfree_sensitive() for session key material Jakub Kicinski <kuba(a)kernel.org> net: don't touch dev->stats in BPF redirect paths Sergey Senozhatsky <senozhatsky(a)chromium.org> net: usb: r8152: fix resume reset deadlock Eric Dumazet <edumazet(a)google.com> macvlan: fix error recovery in macvlan_common_newlink() Marek Behún <kabel(a)kernel.org> net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: sfp: convert sfp quirks to modify struct sfp_module_support Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: sfp: pre-parse the module support Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: phy: add phy_interface_copy() Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: phy: add phy_interface_weight() Junrui Luo <moonafterrain(a)outlook.com> dpaa2-switch: add bounds check for if_id in IRQ handler Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Initialize netdev pointer before queue setup Junrui Luo <moonafterrain(a)outlook.com> dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero Eric Dumazet <edumazet(a)google.com> net/sched: cls_u32: use skb_header_pointer_careful() Eric Dumazet <edumazet(a)google.com> net: add skb_header_pointer_careful() helper ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/client: fix memory leak in smb2_open_file() Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable Mario Limonciello <mario.limonciello(a)amd.com> platform/x86: hp-bioscfg: Skip empty attribute names Kaushlendra Kumar <kaushlendra.kumar(a)intel.com> platform/x86: intel_telemetry: Fix PSS event register mask Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: toshiba_haps: Fix memory leaks in add/remove routines Martin Hamilton <m(a)martinh.net> ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio Qu Wenruo <wqu(a)suse.com> btrfs: reject new transactions if the fs is fully read-only Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: correctly check if CSA is active Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() Tim Guttzeit <t.guttzeit(a)tuxedocomputers.com> ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() Veerendranath Jakkam <veerendranath.jakkam(a)oss.qualcomm.com> wifi: cfg80211: Fix bitrate calculation overflow for HE rates Kaushlendra Kumar <kaushlendra.kumar(a)intel.com> regmap: maple: free entry on mas_store_gfp() failure Devyn Liu <liudingyuan(a)h-partners.com> spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization Dimitrios Katsaros <patcherwork(a)gmail.com> ASoC: tlv320adcx140: Propagate error codes during probe Radhi Bajahaw <bajahawradhi(a)gmail.com> ASoC: amd: yc: Fix microphone on ASUS M6500RE Hannes Reinecke <hare(a)kernel.org> nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() Chaitanya Kulkarni <ckulkarnilinux(a)gmail.com> nvme-fc: release admin tagset if init fails Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: simple-card-utils: Check device node before overwrite direction Kery Qi <qikeyu2017(a)gmail.com> ASoC: davinci-evm: Fix reference leak in davinci_evm_probe Baochen Qiang <baochen.qiang(a)oss.qualcomm.com> wifi: mac80211: collect station statistics earlier when disconnect Dennis Marttinen <twelho(a)welho.tech> HID: logitech: add HID++ support for Logitech MX Anywhere 3S Wupeng Ma <mawupeng1(a)huawei.com> ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free Perry Yuan <perry.yuan(a)amd.com> drm/amd/pm: Disable MMIO access during SMU Mode 1 reset Rodrigo Lugathe da Conceição Alves <lugathe2(a)gmail.com> HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) Kwok Kin Ming <kenkinming2002(a)gmail.com> HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() Chris Chiu <chris.chiu(a)canonical.com> HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list Daniel Gomez <da.gomez(a)samsung.com> netfilter: replace -EEXIST with -EBUSY Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: qcom: Remove ASPM L0s support for MSM8996 SoC Ruslan Krupitsa <krupitsarus(a)outlook.com> ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk Matouš Lánský <matouslansky(a)post.cz> ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55 Siarhei Vishniakou <svv(a)google.com> HID: playstation: Center initial joystick axes to prevent spurious events Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: Reset enum_devices_done before enumeration Lukas Gerlach <lukas.gerlach(a)cispa.de> riscv: Sanitize syscall table indexing under speculation Filipe Manana <fdmanana(a)suse.com> btrfs: fix reservation leak in some error paths when inserting inline extent DaytonCL <artem749507(a)gmail.com> HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: Update ishtp bus match to support device ID table ZhangGuoDong <zhangguodong(a)kylinos.cn> smb/server: fix refcount leak in parse_durable_handle_context() Chenghao Duan <duanchenghao(a)kylinos.cn> LoongArch: Enable exception fixup for specific ADE subcode ZhangGuoDong <zhangguodong(a)kylinos.cn> smb/server: fix refcount leak in smb2_open() FengWei Shih <dannyshih(a)synology.com> md: suspend array while updating raid_disks via sysfs Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED ZhangGuoDong <zhangguodong(a)kylinos.cn> smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() shechenglong <shechenglong(a)xfusion.com> block,bfq: fix aux stat accumulation destination Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: usb: sr9700: support devices with virtual driver CD Peter Åstrand <astrand(a)lysator.liu.se> wifi: wlcore: ensure skb headroom before skb_push Moon Hee Lee <moonhee.lee.ca(a)gmail.com> wifi: mac80211: ocb: skip rx_no_sta when interface is not joined Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix ftrace event field alignments Andrii Nakryiko <andrii(a)kernel.org> procfs: avoid fetching build ID while holding VMA lock Zhiquan Li <zhiquan_li(a)163.com> KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures Carlos Llamas <cmllamas(a)google.com> binderfs: fix ida_alloc_max() upper bound Carlos Llamas <cmllamas(a)google.com> binder: fix BR_FROZEN_REPLY error log Kang Chen <k.chen(a)smail.nju.edu.cn> hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() Ming Lei <ming.lei(a)redhat.com> ublk: fix deadlock when reading partition table Todd Brandt <todd.e.brandt(a)intel.com> tools/power turbostat: fix GCC9 build regression Lukas Wunner <lukas(a)wunner.de> PCI/ERR: Ensure error recoverability at all times Sean Christopherson <seanjc(a)google.com> KVM: Don't clobber irqfd routing type when deassigning irqfd Bert Karwatzki <spasswolf(a)web.de> Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" Kairui Song <kasong(a)tencent.com> mm, shmem: prevent infinite loop on truncate race Max Yuan <maxyuan(a)google.com> gve: Correct ethtool rx_dropped calculation Debarghya Kundu <debarghyak(a)google.com> gve: Fix stats report corruption on queue count change Daniel Vogelbacher <daniel(a)chaospixel.com> ceph: fix oops due to invalid pointer for kfree() in parse_longname() Thomas Weissschuh <thomas.weissschuh(a)linutronix.de> ARM: 9468/1: fix memset64() on big-endian Ilya Dryomov <idryomov(a)gmail.com> rbd: check for EOD after exclusive lock is ensured to be held Viacheslav Dubeyko <Slava.Dubeyko(a)ibm.com> ceph: fix NULL pointer dereference in ceph_mds_auth_match() Hao Ge <hao.ge(a)linux.dev> mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single Xu Yang <xu.yang_2(a)nxp.com> pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains Xu Yang <xu.yang_2(a)nxp.com> pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup Jacky Bai <ping.bai(a)nxp.com> pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset Xu Yang <xu.yang_2(a)nxp.com> pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup Gabor Juhos <j4g8y7(a)gmail.com> pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state Takashi Iwai <tiwai(a)suse.de> ALSA: aloop: Fix racy access at PCM trigger Kaushlendra Kumar <kaushlendra.kumar(a)intel.com> platform/x86: intel_telemetry: Fix swapped arrays in PSS output Andrew Cooper <andrew.cooper3(a)citrix.com> x86/kfence: fix booting on 32bit non-PAE systems Josh Poimboeuf <jpoimboe(a)kernel.org> x86/vmware: Fix hypercall clobbers YunJe Shin <yjshin0438(a)gmail.com> nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec ------------- Diffstat: Makefile | 4 +- arch/arm/include/asm/string.h | 5 +- arch/loongarch/kernel/traps.c | 5 ++ arch/loongarch/mm/cache.c | 8 +-- arch/riscv/kernel/traps.c | 4 +- arch/x86/include/asm/kfence.h | 7 +- arch/x86/include/asm/vmware.h | 4 +- block/bfq-cgroup.c | 2 +- drivers/android/binder.c | 5 +- drivers/android/binderfs.c | 8 +-- drivers/base/regmap/regcache-maple.c | 11 +-- drivers/block/rbd.c | 33 +++++---- drivers/block/ublk_drv.c | 30 +++++++- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 3 - .../gpu/drm/amd/display/dc/dcn30/dcn30_cm_common.c | 7 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 7 +- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 9 ++- drivers/gpu/drm/mgag200/mgag200_bmc.c | 31 ++++---- drivers/gpu/drm/mgag200/mgag200_drv.h | 6 ++ drivers/gpu/drm/xe/xe_pm.c | 17 +++-- drivers/gpu/drm/xe/xe_query.c | 2 +- drivers/hid/hid-ids.h | 4 ++ drivers/hid/hid-logitech-hidpp.c | 2 + drivers/hid/hid-multitouch.c | 1 + drivers/hid/hid-playstation.c | 5 ++ drivers/hid/hid-quirks.c | 2 + drivers/hid/i2c-hid/i2c-hid-core.c | 1 + drivers/hid/intel-ish-hid/ishtp-hid-client.c | 1 + drivers/hid/intel-ish-hid/ishtp/bus.c | 12 +++- drivers/hwmon/occ/common.c | 1 + drivers/md/md.c | 4 +- drivers/net/ethernet/adi/adin1110.c | 3 + drivers/net/ethernet/cavium/liquidio/lio_main.c | 39 +++++----- drivers/net/ethernet/cavium/liquidio/lio_vf_main.c | 4 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 10 +++ drivers/net/ethernet/google/gve/gve_ethtool.c | 77 +++++++++++++------- drivers/net/ethernet/google/gve/gve_main.c | 4 +- drivers/net/macvlan.c | 5 +- drivers/net/phy/sfp-bus.c | 83 +++++++++++++++------- drivers/net/phy/sfp.c | 51 ++++++------- drivers/net/phy/sfp.h | 4 +- drivers/net/usb/r8152.c | 29 ++++---- drivers/net/usb/sr9700.c | 5 ++ drivers/net/wireless/ti/wlcore/tx.c | 5 ++ drivers/nvme/host/fc.c | 2 + drivers/nvme/target/tcp.c | 26 +++++-- drivers/pci/bus.c | 3 + drivers/pci/controller/dwc/pcie-qcom.c | 4 +- drivers/pci/pci.c | 3 - drivers/platform/x86/hp/hp-bioscfg/bioscfg.c | 5 ++ drivers/platform/x86/intel/intel_plr_tpmi.c | 2 +- drivers/platform/x86/intel/telemetry/debugfs.c | 4 +- drivers/platform/x86/intel/telemetry/pltdrv.c | 2 +- drivers/platform/x86/toshiba_haps.c | 2 +- drivers/pmdomain/imx/gpcv2.c | 8 +-- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 2 +- drivers/pmdomain/imx/imx8mp-blk-ctrl.c | 30 ++++++++ drivers/pmdomain/qcom/rpmpd.c | 2 +- drivers/spi/spi-hisi-kunpeng.c | 4 +- drivers/spi/spi-tegra114.c | 3 + drivers/spi/spi-tegra20-slink.c | 6 +- drivers/spi/spi-tegra210-quad.c | 36 ++++++++-- drivers/target/iscsi/iscsi_target_util.c | 10 ++- fs/btrfs/disk-io.c | 13 ++++ fs/btrfs/fs.h | 8 +++ fs/btrfs/inode.c | 16 +++-- fs/ceph/crypto.c | 9 +-- fs/ceph/mds_client.c | 5 +- fs/ceph/mdsmap.c | 26 +++++-- fs/ceph/mdsmap.h | 1 + fs/ceph/super.h | 16 ++++- fs/hfsplus/dir.c | 2 +- fs/hfsplus/hfsplus_fs.h | 8 ++- fs/hfsplus/unicode.c | 24 +++++-- fs/hfsplus/xattr.c | 6 +- fs/proc/task_mmu.c | 42 +++++++---- fs/smb/client/smb2file.c | 1 + fs/smb/server/smb2pdu.c | 8 ++- include/linux/buildid.h | 3 + include/linux/ceph/ceph_fs.h | 6 ++ include/linux/phy.h | 10 +++ include/linux/sfp.h | 22 ++++++ include/linux/skbuff.h | 12 ++++ kernel/trace/ring_buffer.c | 2 + kernel/trace/trace.h | 7 +- kernel/trace/trace_entries.h | 26 +++---- kernel/trace/trace_export.c | 21 ++++-- lib/buildid.c | 42 +++++++---- mm/shmem.c | 23 +++--- mm/slub.c | 6 +- net/bridge/netfilter/ebtables.c | 2 +- net/core/filter.c | 8 +-- net/core/gro.c | 2 + net/ipv6/ip6_fib.c | 3 +- net/mac80211/iface.c | 8 ++- net/mac80211/key.c | 3 +- net/mac80211/ocb.c | 3 + net/mac80211/sta_info.c | 7 +- net/netfilter/nf_log.c | 4 +- net/netfilter/nf_tables_api.c | 2 +- net/netfilter/x_tables.c | 2 +- net/sched/cls_u32.c | 13 ++-- net/tipc/crypto.c | 4 +- net/wireless/util.c | 8 ++- sound/drivers/aloop.c | 62 +++++++++------- sound/pci/hda/patch_realtek.c | 27 ++++++- sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 + sound/soc/amd/yc/acp6x-mach.c | 7 ++ sound/soc/codecs/tlv320adcx140.c | 3 + sound/soc/generic/simple-card-utils.c | 4 +- sound/soc/ti/davinci-evm.c | 39 +++++++--- sound/usb/mixer_quirks.c | 9 +-- tools/power/x86/turbostat/turbostat.c | 15 ++-- tools/testing/selftests/kvm/Makefile | 1 + virt/kvm/eventfd.c | 44 ++++++------ 116 files changed, 943 insertions(+), 421 deletions(-)

7 months, 1 week

[PATCH 6.1 00/69] 6.1.163-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.163 release. There are 69 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 11 Feb 2026 14:22:44 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.163-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.163-rc1 Werner Sembach <wse(a)tuxedocomputers.com> ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU. Felix Gu <ustc.gu(a)gmail.com> spi: tegra: Fix a memory leak in tegra_slink_probe() Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Move curr_xfer read inside spinlock Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer Lu Baolu <baolu.lu(a)linux.intel.com> iommu: disable SVA when CONFIG_X86 is set Björn Töpel <bjorn(a)rivosinc.com> riscv: uprobes: Add missing fence.i after building the XOL buffer Kang Chen <k.chen(a)smail.nju.edu.cn> hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() Chris Bainbridge <chris.bainbridge(a)gmail.com> ASoC: amd: fix memory leak in acp3x pdm dma ops Andrew Fasano <andrew.fasano(a)nist.gov> netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() Arnd Bergmann <arnd(a)arndb.de> hwmon: (occ) Mark occ_init_attribute() as __printf Jacob Keller <jacob.e.keller(a)intel.com> drm/mgag200: fix mgag200_bmc_stop_scanout() Daniel Hodges <hodgesd(a)meta.com> tipc: use kfree_sensitive() for session key material Jakub Kicinski <kuba(a)kernel.org> net: don't touch dev->stats in BPF redirect paths Eric Dumazet <edumazet(a)google.com> macvlan: fix error recovery in macvlan_common_newlink() Junrui Luo <moonafterrain(a)outlook.com> dpaa2-switch: add bounds check for if_id in IRQ handler Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Initialize netdev pointer before queue setup Junrui Luo <moonafterrain(a)outlook.com> dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/client: fix memory leak in smb2_open_file() Kaushlendra Kumar <kaushlendra.kumar(a)intel.com> platform/x86: intel_telemetry: Fix PSS event register mask Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: toshiba_haps: Fix memory leaks in add/remove routines Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() Tim Guttzeit <t.guttzeit(a)tuxedocomputers.com> ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() Veerendranath Jakkam <veerendranath.jakkam(a)oss.qualcomm.com> wifi: cfg80211: Fix bitrate calculation overflow for HE rates Dimitrios Katsaros <patcherwork(a)gmail.com> ASoC: tlv320adcx140: Propagate error codes during probe Chaitanya Kulkarni <ckulkarnilinux(a)gmail.com> nvme-fc: release admin tagset if init fails Kery Qi <qikeyu2017(a)gmail.com> ASoC: davinci-evm: Fix reference leak in davinci_evm_probe Baochen Qiang <baochen.qiang(a)oss.qualcomm.com> wifi: mac80211: collect station statistics earlier when disconnect Wupeng Ma <mawupeng1(a)huawei.com> ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free Rodrigo Lugathe da Conceição Alves <lugathe2(a)gmail.com> HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) Kwok Kin Ming <kenkinming2002(a)gmail.com> HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report() Chris Chiu <chris.chiu(a)canonical.com> HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list Daniel Gomez <da.gomez(a)samsung.com> netfilter: replace -EEXIST with -EBUSY Ruslan Krupitsa <krupitsarus(a)outlook.com> ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk Siarhei Vishniakou <svv(a)google.com> HID: playstation: Center initial joystick axes to prevent spurious events Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: Reset enum_devices_done before enumeration Filipe Manana <fdmanana(a)suse.com> btrfs: fix reservation leak in some error paths when inserting inline extent DaytonCL <artem749507(a)gmail.com> HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: Update ishtp bus match to support device ID table Chenghao Duan <duanchenghao(a)kylinos.cn> LoongArch: Enable exception fixup for specific ADE subcode Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED ZhangGuoDong <zhangguodong(a)kylinos.cn> smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() shechenglong <shechenglong(a)xfusion.com> block,bfq: fix aux stat accumulation destination Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: usb: sr9700: support devices with virtual driver CD Peter Åstrand <astrand(a)lysator.liu.se> wifi: wlcore: ensure skb headroom before skb_push Moon Hee Lee <moonhee.lee.ca(a)gmail.com> wifi: mac80211: ocb: skip rx_no_sta when interface is not joined Zhiquan Li <zhiquan_li(a)163.com> KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures Max Yuan <maxyuan(a)google.com> gve: Correct ethtool rx_dropped calculation Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix ftrace event field alignments Debarghya Kundu <debarghyak(a)google.com> gve: Fix stats report corruption on queue count change Xu Yang <xu.yang_2(a)nxp.com> pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains Xu Yang <xu.yang_2(a)nxp.com> pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup Xu Yang <xu.yang_2(a)nxp.com> pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup Carlos Llamas <cmllamas(a)google.com> binderfs: fix ida_alloc_max() upper bound Carlos Llamas <cmllamas(a)google.com> binder: fix BR_FROZEN_REPLY error log Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX Sean Christopherson <seanjc(a)google.com> KVM: Don't clobber irqfd routing type when deassigning irqfd Bert Karwatzki <spasswolf(a)web.de> Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem" Thomas Weissschuh <thomas.weissschuh(a)linutronix.de> ARM: 9468/1: fix memset64() on big-endian Ilya Dryomov <idryomov(a)gmail.com> rbd: check for EOD after exclusive lock is ensured to be held Kaushlendra Kumar <kaushlendra.kumar(a)intel.com> platform/x86: intel_telemetry: Fix swapped arrays in PSS output Andrew Cooper <andrew.cooper3(a)citrix.com> x86/kfence: fix booting on 32bit non-PAE systems YunJe Shin <yjshin0438(a)gmail.com> nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec ------------- Diffstat: Makefile | 4 +- arch/arm/include/asm/string.h | 5 ++- arch/loongarch/kernel/traps.c | 5 +++ arch/loongarch/mm/cache.c | 8 ++-- arch/riscv/kernel/probes/uprobes.c | 10 +---- arch/x86/include/asm/kfence.h | 7 ++-- block/bfq-cgroup.c | 2 +- drivers/android/binder.c | 5 ++- drivers/android/binderfs.c | 8 ++-- drivers/block/rbd.c | 33 ++++++++++------ drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 3 -- drivers/gpu/drm/mgag200/mgag200_bmc.c | 31 ++++++--------- drivers/gpu/drm/mgag200/mgag200_drv.h | 6 +++ drivers/hid/hid-ids.h | 4 ++ drivers/hid/hid-multitouch.c | 1 + drivers/hid/hid-playstation.c | 5 +++ drivers/hid/hid-quirks.c | 2 + drivers/hid/i2c-hid/i2c-hid-core.c | 1 + drivers/hid/intel-ish-hid/ishtp-hid-client.c | 1 + drivers/hid/intel-ish-hid/ishtp/bus.c | 12 +++++- drivers/hwmon/occ/common.c | 1 + drivers/iommu/iommu.c | 3 ++ drivers/net/ethernet/cavium/liquidio/lio_main.c | 39 +++++++++--------- drivers/net/ethernet/cavium/liquidio/lio_vf_main.c | 4 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 10 +++++ drivers/net/ethernet/google/gve/gve_ethtool.c | 46 ++++++++++++++-------- drivers/net/ethernet/google/gve/gve_main.c | 4 +- drivers/net/macvlan.c | 5 ++- drivers/net/usb/sr9700.c | 5 +++ drivers/net/wireless/ti/wlcore/tx.c | 5 +++ drivers/nvme/host/fc.c | 2 + drivers/nvme/target/tcp.c | 17 ++++++++ drivers/platform/x86/intel/telemetry/debugfs.c | 4 +- drivers/platform/x86/intel/telemetry/pltdrv.c | 2 +- drivers/platform/x86/toshiba_haps.c | 2 +- drivers/soc/imx/imx8m-blk-ctrl.c | 2 +- drivers/soc/imx/imx8mp-blk-ctrl.c | 30 ++++++++++++++ drivers/spi/spi-tegra20-slink.c | 6 ++- drivers/spi/spi-tegra210-quad.c | 36 +++++++++++++++-- drivers/target/iscsi/iscsi_target_util.c | 10 ++++- fs/btrfs/inode.c | 16 +++++--- fs/hfsplus/dir.c | 2 +- fs/hfsplus/hfsplus_fs.h | 8 +++- fs/hfsplus/unicode.c | 24 ++++++++--- fs/hfsplus/xattr.c | 6 +-- fs/smb/client/smb2file.c | 1 + fs/smb/server/smb2pdu.c | 5 ++- kernel/trace/ring_buffer.c | 2 + kernel/trace/trace.h | 7 +++- kernel/trace/trace_entries.h | 14 +++---- kernel/trace/trace_export.c | 21 +++++++--- net/bridge/netfilter/ebtables.c | 2 +- net/core/filter.c | 8 ++-- net/mac80211/key.c | 3 +- net/mac80211/ocb.c | 3 ++ net/mac80211/sta_info.c | 7 ++-- net/netfilter/nf_log.c | 4 +- net/netfilter/nf_tables_api.c | 2 +- net/netfilter/nft_set_pipapo.c | 8 ++++ net/netfilter/x_tables.c | 2 +- net/tipc/crypto.c | 4 +- net/wireless/util.c | 8 ++-- sound/pci/hda/patch_realtek.c | 2 + sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 + sound/soc/codecs/tlv320adcx140.c | 3 ++ sound/soc/ti/davinci-evm.c | 39 ++++++++++++++---- tools/testing/selftests/kvm/Makefile | 1 + virt/kvm/eventfd.c | 44 +++++++++++---------- 68 files changed, 440 insertions(+), 194 deletions(-)

7 months, 1 week

[PATCH 5.15 00/75] 5.15.200-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.15.200 release. There are 75 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 11 Feb 2026 14:22:44 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.200-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.15.200-rc1 Varun Prakash <varun(a)chelsio.com> nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() Felix Gu <ustc.gu(a)gmail.com> spi: tegra: Fix a memory leak in tegra_slink_probe() Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Move curr_xfer read inside spinlock Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer Lu Baolu <baolu.lu(a)linux.intel.com> iommu: disable SVA when CONFIG_X86 is set Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_event: call disconnect callback before deleting conn Max Yuan <maxyuan(a)google.com> gve: Correct ethtool rx_dropped calculation Debarghya Kundu <debarghyak(a)google.com> gve: Fix stats report corruption on queue count change Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix ftrace event field alignments Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Fix NULL pointer dereference in gfs2_log_flush Kang Chen <k.chen(a)smail.nju.edu.cn> hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() Björn Töpel <bjorn(a)rivosinc.com> riscv: uprobes: Add missing fence.i after building the XOL buffer Chris Bainbridge <chris.bainbridge(a)gmail.com> ASoC: amd: fix memory leak in acp3x pdm dma ops YunJe Shin <yjshin0438(a)gmail.com> nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec Fabio M. De Francesco <fmdefrancesco(a)gmail.com> nvmet-tcp: don't map pages which can't come from HIGHMEM Sagi Grimberg <sagi(a)grimberg.me> nvmet-tcp: fix regression in data_digest calculation Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: fix memory leak when performing a controller reset Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: add an helper to free the cmd buffers Andrew Fasano <andrew.fasano(a)nist.gov> netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() Arnd Bergmann <arnd(a)arndb.de> hwmon: (occ) Mark occ_init_attribute() as __printf Daniel Hodges <hodgesd(a)meta.com> tipc: use kfree_sensitive() for session key material Eric Dumazet <edumazet(a)google.com> macvlan: fix error recovery in macvlan_common_newlink() Junrui Luo <moonafterrain(a)outlook.com> dpaa2-switch: add bounds check for if_id in IRQ handler Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Initialize netdev pointer before queue setup Junrui Luo <moonafterrain(a)outlook.com> dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero Kaushlendra Kumar <kaushlendra.kumar(a)intel.com> platform/x86: intel_telemetry: Fix PSS event register mask Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: toshiba_haps: Fix memory leaks in add/remove routines Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() Veerendranath Jakkam <veerendranath.jakkam(a)oss.qualcomm.com> wifi: cfg80211: Fix bitrate calculation overflow for HE rates Dimitrios Katsaros <patcherwork(a)gmail.com> ASoC: tlv320adcx140: Propagate error codes during probe Kery Qi <qikeyu2017(a)gmail.com> ASoC: davinci-evm: Fix reference leak in davinci_evm_probe Baochen Qiang <baochen.qiang(a)oss.qualcomm.com> wifi: mac80211: collect station statistics earlier when disconnect Wupeng Ma <mawupeng1(a)huawei.com> ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free Rodrigo Lugathe da Conceição Alves <lugathe2(a)gmail.com> HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) Chris Chiu <chris.chiu(a)canonical.com> HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list Daniel Gomez <da.gomez(a)samsung.com> netfilter: replace -EEXIST with -EBUSY Ruslan Krupitsa <krupitsarus(a)outlook.com> ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk Siarhei Vishniakou <svv(a)google.com> HID: playstation: Center initial joystick axes to prevent spurious events Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: Reset enum_devices_done before enumeration DaytonCL <artem749507(a)gmail.com> HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL ZhangGuoDong <zhangguodong(a)kylinos.cn> smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe() shechenglong <shechenglong(a)xfusion.com> block,bfq: fix aux stat accumulation destination Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: usb: sr9700: support devices with virtual driver CD Peter Åstrand <astrand(a)lysator.liu.se> wifi: wlcore: ensure skb headroom before skb_push Moon Hee Lee <moonhee.lee.ca(a)gmail.com> wifi: mac80211: ocb: skip rx_no_sta when interface is not joined Carlos Llamas <cmllamas(a)google.com> binderfs: fix ida_alloc_max() upper bound Yipeng Zou <zouyipeng(a)huawei.com> timers: Fix NULL function pointer race in timer_shutdown_sync() Thomas Gleixner <tglx(a)linutronix.de> Bluetooth: hci_qca: Fix the teardown problem for real Steven Rostedt (Google) <rostedt(a)goodmis.org> timers: Update the documentation to reflect on the new timer_shutdown() API Thomas Gleixner <tglx(a)linutronix.de> timers: Provide timer_shutdown[_sync]() Thomas Gleixner <tglx(a)linutronix.de> timers: Add shutdown mechanism to the internal functions Thomas Gleixner <tglx(a)linutronix.de> timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode Thomas Gleixner <tglx(a)linutronix.de> timers: Silently ignore timers with a NULL function Thomas Gleixner <tglx(a)linutronix.de> Documentation: Replace del_timer/del_timer_sync() Thomas Gleixner <tglx(a)linutronix.de> timers: Rename del_timer() to timer_delete() Thomas Gleixner <tglx(a)linutronix.de> timers: Replace BUG_ON()s Thomas Gleixner <tglx(a)linutronix.de> timers: Get rid of del_singleshot_timer_sync() Steven Rostedt (Google) <rostedt(a)goodmis.org> clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function Steven Rostedt (Google) <rostedt(a)goodmis.org> clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function Steven Rostedt (Google) <rostedt(a)goodmis.org> ARM: spear: Do not use timer namespace for timer_shutdown() function Thomas Gleixner <tglx(a)linutronix.de> Documentation: Remove bogus claim about del_timer_sync() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX Pimyn Girgis <pimyn(a)google.com> mm/kfence: randomize the freelist on initialization Sean Christopherson <seanjc(a)google.com> KVM: Don't clobber irqfd routing type when deassigning irqfd Thomas Weissschuh <thomas.weissschuh(a)linutronix.de> ARM: 9468/1: fix memset64() on big-endian Ilya Dryomov <idryomov(a)gmail.com> rbd: check for EOD after exclusive lock is ensured to be held Kaushlendra Kumar <kaushlendra.kumar(a)intel.com> platform/x86: intel_telemetry: Fix swapped arrays in PSS output Andrew Cooper <andrew.cooper3(a)citrix.com> x86/kfence: fix booting on 32bit non-PAE systems ------------- Diffstat: .../RCU/Design/Requirements/Requirements.rst | 2 +- Documentation/core-api/local_ops.rst | 2 +- Documentation/kernel-hacking/locking.rst | 17 +- Documentation/timers/hrtimers.rst | 2 +- .../translations/it_IT/kernel-hacking/locking.rst | 14 +- .../translations/zh_CN/core-api/local_ops.rst | 2 +- Makefile | 4 +- arch/arm/include/asm/string.h | 5 +- arch/arm/mach-spear/time.c | 8 +- arch/riscv/kernel/probes/uprobes.c | 10 +- arch/x86/include/asm/kfence.h | 7 +- block/bfq-cgroup.c | 2 +- drivers/android/binderfs.c | 8 +- drivers/block/rbd.c | 33 +- drivers/bluetooth/hci_qca.c | 10 +- drivers/char/tpm/tpm-dev-common.c | 4 +- drivers/clocksource/arm_arch_timer.c | 12 +- drivers/clocksource/timer-sp804.c | 6 +- drivers/hid/hid-ids.h | 4 + drivers/hid/hid-multitouch.c | 1 + drivers/hid/hid-playstation.c | 5 + drivers/hid/hid-quirks.c | 2 + drivers/hid/intel-ish-hid/ishtp-hid-client.c | 1 + drivers/hwmon/occ/common.c | 1 + drivers/iommu/iommu.c | 3 + drivers/net/ethernet/cavium/liquidio/lio_main.c | 39 +-- drivers/net/ethernet/cavium/liquidio/lio_vf_main.c | 4 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 10 + drivers/net/ethernet/google/gve/gve_ethtool.c | 46 ++- drivers/net/ethernet/google/gve/gve_main.c | 4 +- drivers/net/macvlan.c | 5 +- drivers/net/usb/sr9700.c | 5 + drivers/net/wireless/ti/wlcore/tx.c | 5 + drivers/nvme/target/tcp.c | 100 +++--- drivers/platform/x86/intel/telemetry/debugfs.c | 4 +- drivers/platform/x86/intel/telemetry/pltdrv.c | 2 +- drivers/platform/x86/toshiba_haps.c | 2 +- drivers/spi/spi-tegra20-slink.c | 6 +- drivers/spi/spi-tegra210-quad.c | 36 ++- drivers/staging/wlan-ng/hfa384x_usb.c | 4 +- drivers/staging/wlan-ng/prism2usb.c | 6 +- drivers/target/iscsi/iscsi_target_util.c | 10 +- fs/gfs2/log.c | 3 +- fs/gfs2/super.c | 4 + fs/hfsplus/dir.c | 2 +- fs/hfsplus/hfsplus_fs.h | 8 +- fs/hfsplus/unicode.c | 24 +- fs/hfsplus/xattr.c | 6 +- fs/ksmbd/smb2pdu.c | 5 +- include/linux/timer.h | 17 +- kernel/time/timer.c | 342 ++++++++++++++++----- kernel/trace/ring_buffer.c | 2 + kernel/trace/trace.h | 7 +- kernel/trace/trace_entries.h | 14 +- kernel/trace/trace_export.c | 21 +- mm/kfence/core.c | 25 +- net/bluetooth/hci_event.c | 3 + net/bridge/netfilter/ebtables.c | 2 +- net/mac80211/key.c | 3 +- net/mac80211/ocb.c | 3 + net/mac80211/sta_info.c | 7 +- net/netfilter/nf_log.c | 4 +- net/netfilter/nf_tables_api.c | 2 +- net/netfilter/nft_set_pipapo.c | 8 + net/netfilter/x_tables.c | 2 +- net/sunrpc/xprt.c | 2 +- net/tipc/crypto.c | 4 +- net/wireless/util.c | 8 +- sound/pci/hda/patch_realtek.c | 1 + sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 + sound/soc/codecs/tlv320adcx140.c | 3 + sound/soc/ti/davinci-evm.c | 39 ++- virt/kvm/eventfd.c | 44 +-- 73 files changed, 746 insertions(+), 324 deletions(-)

7 months, 1 week

[PATCH 5.10 00/41] 5.10.250-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.10.250 release. There are 41 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 11 Feb 2026 14:22:44 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.250-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.10.250-rc1 Varun Prakash <varun(a)chelsio.com> nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() Max Yuan <maxyuan(a)google.com> gve: Correct ethtool rx_dropped calculation Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix ftrace event field alignments Debarghya Kundu <debarghyak(a)google.com> gve: Fix stats report corruption on queue count change Kaushlendra Kumar <kaushlendra.kumar(a)intel.com> platform/x86: intel_telemetry: Fix swapped arrays in PSS output Chris Bainbridge <chris.bainbridge(a)gmail.com> ASoC: amd: fix memory leak in acp3x pdm dma ops YunJe Shin <yjshin0438(a)gmail.com> nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec Fabio M. De Francesco <fmdefrancesco(a)gmail.com> nvmet-tcp: don't map pages which can't come from HIGHMEM Sagi Grimberg <sagi(a)grimberg.me> nvmet-tcp: fix regression in data_digest calculation Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: fix memory leak when performing a controller reset Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: add an helper to free the cmd buffers Arnd Bergmann <arnd(a)arndb.de> hwmon: (occ) Mark occ_init_attribute() as __printf Daniel Hodges <hodgesd(a)meta.com> tipc: use kfree_sensitive() for session key material Eric Dumazet <edumazet(a)google.com> macvlan: fix error recovery in macvlan_common_newlink() Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup Zilin Guan <zilin(a)seu.edu.cn> net: liquidio: Initialize netdev pointer before queue setup Kaushlendra Kumar <kaushlendra.kumar(a)intel.com> platform/x86: intel_telemetry: Fix PSS event register mask Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: toshiba_haps: Fix memory leaks in add/remove routines Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() Maurizio Lombardi <mlombard(a)redhat.com> scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() Veerendranath Jakkam <veerendranath.jakkam(a)oss.qualcomm.com> wifi: cfg80211: Fix bitrate calculation overflow for HE rates Dimitrios Katsaros <patcherwork(a)gmail.com> ASoC: tlv320adcx140: Propagate error codes during probe Kery Qi <qikeyu2017(a)gmail.com> ASoC: davinci-evm: Fix reference leak in davinci_evm_probe Baochen Qiang <baochen.qiang(a)oss.qualcomm.com> wifi: mac80211: collect station statistics earlier when disconnect Wupeng Ma <mawupeng1(a)huawei.com> ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free Rodrigo Lugathe da Conceição Alves <lugathe2(a)gmail.com> HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101) Chris Chiu <chris.chiu(a)canonical.com> HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list Ruslan Krupitsa <krupitsarus(a)outlook.com> ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: Reset enum_devices_done before enumeration DaytonCL <artem749507(a)gmail.com> HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL shechenglong <shechenglong(a)xfusion.com> block,bfq: fix aux stat accumulation destination Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: usb: sr9700: support devices with virtual driver CD Peter Åstrand <astrand(a)lysator.liu.se> wifi: wlcore: ensure skb headroom before skb_push Moon Hee Lee <moonhee.lee.ca(a)gmail.com> wifi: mac80211: ocb: skip rx_no_sta when interface is not joined Carlos Llamas <cmllamas(a)google.com> binderfs: fix ida_alloc_max() upper bound Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX Sean Christopherson <seanjc(a)google.com> KVM: Don't clobber irqfd routing type when deassigning irqfd Thomas Weissschuh <thomas.weissschuh(a)linutronix.de> ARM: 9468/1: fix memset64() on big-endian Ilya Dryomov <idryomov(a)gmail.com> rbd: check for EOD after exclusive lock is ensured to be held ------------- Diffstat: Makefile | 4 +- arch/arm/include/asm/string.h | 5 +- block/bfq-cgroup.c | 2 +- drivers/android/binderfs.c | 8 +- drivers/block/rbd.c | 33 ++++--- drivers/hid/hid-ids.h | 4 + drivers/hid/hid-multitouch.c | 1 + drivers/hid/hid-quirks.c | 2 + drivers/hid/intel-ish-hid/ishtp-hid-client.c | 1 + drivers/hwmon/occ/common.c | 1 + drivers/net/ethernet/cavium/liquidio/lio_main.c | 39 ++++---- drivers/net/ethernet/cavium/liquidio/lio_vf_main.c | 4 +- drivers/net/ethernet/google/gve/gve_ethtool.c | 46 ++++++---- drivers/net/ethernet/google/gve/gve_main.c | 4 +- drivers/net/macvlan.c | 5 +- drivers/net/usb/sr9700.c | 5 ++ drivers/net/wireless/ti/wlcore/tx.c | 5 ++ drivers/nvme/target/tcp.c | 100 ++++++++++----------- drivers/platform/x86/intel_telemetry_debugfs.c | 4 +- drivers/platform/x86/intel_telemetry_pltdrv.c | 2 +- drivers/platform/x86/toshiba_haps.c | 2 +- drivers/target/iscsi/iscsi_target_util.c | 10 ++- kernel/trace/ring_buffer.c | 2 + kernel/trace/trace.h | 7 +- kernel/trace/trace_entries.h | 14 +-- kernel/trace/trace_export.c | 21 +++-- net/mac80211/key.c | 3 +- net/mac80211/ocb.c | 3 + net/mac80211/sta_info.c | 7 +- net/netfilter/nft_set_pipapo.c | 8 ++ net/tipc/crypto.c | 4 +- net/wireless/util.c | 8 +- sound/pci/hda/patch_realtek.c | 1 + sound/soc/amd/renoir/acp3x-pdm-dma.c | 2 + sound/soc/codecs/tlv320adcx140.c | 3 + sound/soc/ti/davinci-evm.c | 39 ++++++-- virt/kvm/eventfd.c | 34 +++---- 37 files changed, 272 insertions(+), 171 deletions(-)

7 months, 1 week

[PATCH 6.1 000/276] 6.1.162-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.162 release. There are 276 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 07 Feb 2026 14:34:05 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.162-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.162-rc2 Marios Makassikis <mmakassikis(a)freebox.fr> ksmbd: fix recursive locking in RPC handle list access Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver Johan Hovold <johan(a)kernel.org> drm/imx/tve: fix probe device leak Laveesh Bansal <laveeshb(a)laveeshbansal.com> writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 Pimyn Girgis <pimyn(a)google.com> mm/kfence: randomize the freelist on initialization Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: avoid dup SUB_CLOSED events after disconnect Chen Ni <nichen(a)iscas.ac.cn> net/sched: act_ife: convert comma to semicolon JP Kobryn <inwardvessel(a)gmail.com> btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() Robert McClinton <rbmccav(a)gmail.com> drm/radeon: delete radeon_fence_process in is_signaled, no deadlock Mike Christie <michael.christie(a)oracle.com> vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint Yunseong Kim <ysk(a)kzalloc.com> ksmbd: Fix race condition in RPC handle list access Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in ksmbd_session_rpc_open Xin Long <lucien.xin(a)gmail.com> sctp: linearize cloned gso packets in sctp_rcv Alexis Lothoré <alexis.lothore(a)bootlin.com> net: stmmac: make sure that ptp_rate is not 0 before configuring EST Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV Zqiang <qiang.zhang(a)linux.dev> usbnet: Fix using smp_processor_id() in preemptible code warnings Maninder Singh <maninder1.s(a)samsung.com> NFSD: fix race between nfsd registration and exports_proc Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Fix NULL pointer dereference in gfs2_log_flush Gavin Li <gavinl(a)nvidia.com> Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" Waiman Long <longman(a)redhat.com> blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() Bartlomiej Kubik <kubik.bartlomiej(a)gmail.com> fs/ntfs3: Initialize allocated memory before use Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> iomap: Fix possible overflow condition in iomap_write_delalloc_scan Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - flush misc workqueue during device shutdown Alex Hung <alex.hung(a)amd.com> drm/amd/display: Check dce_hwseq before dereferencing it Harry Yoo <harry.yoo(a)oracle.com> Revert "mm/mprotect: delete pmd_none_or_clear_bad_unless_trans_huge()" Marc Kleine-Budde <mkl(a)pengutronix.de> can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> drm/amdkfd: fix a memory leak in device_queue_manager_init() Gyeyoung Baek <gye976(a)gmail.com> genirq/irq_sim: Initialize work context pointers properly Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: move TDLS work to wiphy work Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: use wiphy work for sdata->work Nikola Z. Ivanov <zlatistiv(a)gmail.com> team: Move team device type change at the end of team_port_add Sean Christopherson <seanjc(a)google.com> x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 Johan Hovold <johan(a)kernel.org> ASoC: codecs: wsa883x: fix unnecessary initialisation Johan Hovold <johan(a)kernel.org> ASoC: codecs: wsa881x: fix unnecessary initialisation Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa881x: Drop unused version readout Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa881x: Use proper shutdown GPIO polarity Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa881x: Simplify &pdev->dev in probe Wentao Liang <vulab(a)iscas.ac.cn> phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() Dragan Simic <dsimic(a)manjaro.org> phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path Sebastian Reichel <sebastian.reichel(a)collabora.com> phy: phy-rockchip-inno-usb2: simplify phy clock handling Nilay Shroff <nilay(a)linux.ibm.com> nvme: fix PCIe subsystem reset controller state transition Keith Busch <kbusch(a)kernel.org> nvme-pci: do not directly handle subsys reset fallout Daniel Wagner <dwagner(a)suse.de> nvme-fc: rename free_ctrl callback to match name pattern Fiona Klute <fiona.klute(a)gmx.de> iio: chemical: scd4x: fix reported channel endianness Johan Hovold <johan(a)kernel.org> iio: adc: exynos_adc: fix OF populate on driver rebind Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> ALSA: scarlett2: Fix buffer overflow in config retrieval Shawn Lin <shawn.lin(a)rock-chips.com> mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode Shawn Lin <shawn.lin(a)rock-chips.com> mmc: sdhci-of-dwcmshc: Update DLL and pre-change delay for rockchip platform Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Fix restoration of SVE context Alexander Usyskin <alexander.usyskin(a)intel.com> mei: trace: treat reg parameter as string Thomas Fourier <fourier.thomas(a)gmail.com> ksmbd: smbd: fix dma_unmap_sg() nents Ming Qian <ming.qian(a)oss.nxp.com> pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu Brian Foster <bfoster(a)redhat.com> xfs: set max_agbno to allow sparse alloc of last full inode chunk Ryan Roberts <ryan.roberts(a)arm.com> mm: kmsan: fix poisoning of high-order non-compound pages Johan Hovold <johan(a)kernel.org> dmaengine: stm32: dmamux: fix device leak on route allocation Vlastimil Babka <vbabka(a)suse.cz> mm/page_alloc: prevent pcp corruption with SMP=n Johan Hovold <johan(a)kernel.org> dmaengine: stm32: dmamux: fix OF node leak on route allocation failure Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() Dawei Li <set_pte_at(a)outlook.com> xen: make remove callback of xen driver void returned Geraldo Nascimento <geraldogabriel(a)gmail.com> arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s David Hildenbrand (Red Hat) <david(a)kernel.org> mm/rmap: fix two comments related to huge_pmd_unshare() Robin Murphy <robin.murphy(a)arm.com> gpio: rockchip: Stop calling pinctrl for set_direction Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: fix wptr reset in KGQ init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx10: fix wptr reset in KGQ init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/soc21: fix xclk for APUs Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer: Add compiler_builtins -> core dep Jan Kara <jack(a)suse.cz> flex_proportions: make fprop_new_period() hardirq safe Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: only reset subflow errors when propagated Kohei Enju <kohei(a)enjuk.jp> efivarfs: fix error propagation in efivar_entry_get() Thomas Fourier <fourier.thomas(a)gmail.com> scsi: qla2xxx: edif: Fix dma_free_coherent() size Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() Fabio Estevam <festevam(a)gmail.com> ASoC: fsl: imx-card: Do not force slot width to sample width Han Gao <gaohan(a)iscas.ac.cn> riscv: compat: fix COMPAT_UTS_MACHINE definition Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: meson: mark the GPIO controller as sleeping Sai Sree Kartheek Adivi <s-adivi(a)ti.com> dma/pool: distinguish between missing and exhausted atomic pools Denis Sergeev <denserg.edu(a)gmail.com> gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler Tagir Garaev <tgaraev653(a)gmail.com> ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion Kery Qi <qikeyu2017(a)gmail.com> scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() Martin Kaiser <martin(a)kaiser.cx> net: bridge: fix static key check Kuniyuki Iwashima <kuniyu(a)google.com> nfc: nci: Fix race between rfkill and nci_unregister_device(). Gal Pressman <gal(a)nvidia.com> net/mlx5e: Account for netdev stats in ndo_get_stats64 Yafang Shao <laoar.shao(a)gmail.com> net/mlx5e: Report rx_discards_phy via rx_dropped Jesse Brandeburg <jbrandeburg(a)cloudflare.com> ice: stop counting UDP csum mismatch as rx_errors Kuniyuki Iwashima <kuniyu(a)google.com> nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). Kery Qi <qikeyu2017(a)gmail.com> rocker: fix memory leak in rocker_world_port_post_fini() Kery Qi <qikeyu2017(a)gmail.com> net: wwan: t7xx: fix potential skb->frags overflow in RX path Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: use the right ifindex when replying to icmpv6 from localhost Zilin Guan <zilin(a)seu.edu.cn> net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() Eric Dumazet <edumazet(a)google.com> bonding: annotate data-races around slave->last_rx Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Zilin Guan <zilin(a)seu.edu.cn> net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() Jia-Hong Su <s11242586(a)gmail.com> Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Reject narrower access to pointer ctx fields Daniel Borkmann <daniel(a)iogearbox.net> bpf: Do not let BPF test infra emit invalid GSO types to stack Matthew Wilcox (Oracle) <willy(a)infradead.org> migrate: correct lock ordering for hugetlb file folios Marc Kleine-Budde <mkl(a)pengutronix.de> can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak Arnd Bergmann <arnd(a)arndb.de> irqchip/gic-v3-its: Avoid truncating memory addresses Fernand Sieber <sieberf(a)amazon.com> perf/x86/intel: Do not enable BTS for guests Jeongjun Park <aha310510(a)gmail.com> netrom: fix double-free in nr_route_frame() Chenghai Huang <huangchenghai2(a)huawei.com> uacce: ensure safe queue release with state management Yang Shen <shenyang39(a)huawei.com> uacce: implement mremap in uacce_vm_ops to return -EPERM Wenkai Lin <linwenkai6(a)hisilicon.com> uacce: fix cdev handling in the cleanup path Johan Hovold <johan(a)kernel.org> intel_th: fix device leak on output open() Johan Hovold <johan(a)kernel.org> slimbus: core: fix device reference leak on report present Johan Hovold <johan(a)kernel.org> slimbus: core: fix runtime PM imbalance on report present Thomas Fourier <fourier.thomas(a)gmail.com> octeontx2: Fix otx2_dma_map_page() error return code Zhaoyang Huang <zhaoyang.huang(a)unisoc.com> arm64: Set __nocfi on swsusp_arch_resume() Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA Marek Vasut <marex(a)nabladev.com> wifi: rsi: Fix memory corruption due to not set vif driver data size Dan Carpenter <dan.carpenter(a)linaro.org> wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() Thomas Fourier <fourier.thomas(a)gmail.com> wifi: ath10k: fix dma_free_coherent() pointer Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix potential OOB access in audio mixer handling Kübrich, Andreas <andreas.kuebrich(a)spektra-dresden.de> iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl Pei Xiao <xiaopei01(a)kylinos.cn> iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver Tomas Melin <tomas.melin(a)vaisala.com> iio: adc: ad9467: fix ad9434 vref mask Rob Herring (Arm) <robh(a)kernel.org> of: platform: Use default match table for /firmware Weigang He <geoffreyhe2(a)gmail.com> of: fix reference count leak in of_alias_scan() Hans de Goede <johannes.goede(a)oss.qualcomm.com> leds: led-class: Only Add LED to leds_list when it is fully ready Cedric Xing <cedric.xing(a)intel.com> x86: make page fault handling disable interrupts properly Eric Dumazet <edumazet(a)google.com> net/sched: act_ife: avoid possible NULL deref Melbin K Mathew <mlbnkm1(a)gmail.com> vsock/virtio: cap TX credit to local buffer size Melbin K Mathew <mlbnkm1(a)gmail.com> vsock/virtio: fix potential underflow in virtio_transport_get_credit() Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Fix error handling Eric Dumazet <edumazet(a)google.com> bonding: provide a net pointer to __skb_flow_dissect() Taehee Yoo <ap420073(a)gmail.com> selftests: net: amt: wait longer for connection before sending packets Andrey Vatoropin <a.vatoropin(a)crpt.ru> be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Don't clear SI SMC table when setting power limit Laurent Vivier <lvivier(a)redhat.com> usbnet: limit max_mtu based on device's hard_mtu Eric Dumazet <edumazet(a)google.com> ipv6: annotate data-race in ndisc_router_discovery() Eric Dumazet <edumazet(a)google.com> mISDN: annotate data-race around dev->work Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M Yun Lu <luyun(a)kylinos.cn> netdevsim: fix a race issue related to the operation on bpf_bound_progs list Arun Raghavan <arunr(a)valvesoftware.com> ALSA: usb: Increase volume range that triggers a warning David Jeffery <djeffery(a)redhat.com> scsi: core: Wake up the error handler when final completions race against each other Naohiko Shimizu <naohiko.shimizu(a)gmail.com> riscv: clocksource: Fix stimecmp update hazard on RV32 Cheng-Yu Lee <cylee12(a)realtek.com> regmap: Fix race condition in hwspinlock irqsave routine Felix Gu <gu_0233(a)qq.com> spi: spi-sprd-adi: Fix double free in probe error path Yang Yingliang <yangyingliang(a)huawei.com> spi: sprd-adi: switch to use spi_alloc_host() Andrew Davis <afd(a)ti.com> spi: sprd: adi: Use devm_register_restart_handler() Yang Li <yang.lee(a)linux.alibaba.com> spi: sprd-adi: Use devm_platform_get_and_ioremap_resource() Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> spi: sprd-adi: Convert to platform remove callback returning void Pavel Zhigulin <Pavel.Zhigulin(a)kaspersky.com> iio: adc: ad7280a: handle spi_setup() errors in probe() Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection Ian Abbott <abbotti(a)mev.co.uk> comedi: Fix getting range information for subdevices 16 to 255 Andrew Cooper <andrew.cooper3(a)citrix.com> x86/kfence: avoid writing L1TF-vulnerable PTEs Geraldo Nascimento <geraldogabriel(a)gmail.com> arm64: dts: rockchip: remove dangerous max-link-speed from helios64 Long Li <longli(a)microsoft.com> scsi: storvsc: Process unsupported MODE_SENSE_10 feng <alec.jiang(a)gmail.com> Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA gongqi <550230171hxy(a)gmail.com> Input: i8042 - add quirks for MECHREVO Wujie 15X Pro Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> Revert "nfc/nci: Add the inconsistency check between the input data length and count" Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> w1: fix redundant counter decrement in w1_attach_slave_device() Thorsten Blum <thorsten.blum(a)linux.dev> w1: therm: Fix off-by-one buffer overflow in alarms_store Ian Abbott <abbotti(a)mev.co.uk> comedi: dmm32at: serialize use of paged registers Marnix Rijnart <marnix.rijnart(a)iwell.eu> serial: 8250_pci: Fix broken RS485 for F81504/508/512 Taeyang Lee <0wn(a)theori.io> crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: Enforce that teql can only be used as root qdisc Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2: cn10k: fix RX flowid TCAM mask handling Dmitry Skorodumov <dskr99(a)gmail.com> ipvlan: Make the addrs_lock be per port Eric Dumazet <edumazet(a)google.com> l2tp: avoid one data-race in l2tp_tunnel_del_work() Kuniyuki Iwashima <kuniyu(a)google.com> fou: Don't allow 0 for FOU_ATTR_IPPROTO. Jakub Kicinski <kuba(a)kernel.org> net: fou: use policy and operation tables generated from the spec Jakub Kicinski <kuba(a)kernel.org> net: fou: rename the source for linking Jakub Kicinski <kuba(a)kernel.org> netlink: add a proto specification for FOU Kuniyuki Iwashima <kuniyu(a)google.com> gue: Fix skb memleak with inner IP protocol 0. Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: avoid misleading per-packet error log Xin Long <lucien.xin(a)gmail.com> sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error Ricardo B. Marlière <rbm(a)suse.com> selftests: net: fib-onlink-tests: Convert to use namespaces by default Hangbin Liu <liuhangbin(a)gmail.com> selftests/net: convert fib-onlink-tests.sh to run it in unique namespace Eric Dumazet <edumazet(a)google.com> bonding: limit BOND_MODE_8023AD to Ethernet devices Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: usb: dm9601: remove broken SR9700 support Niklas Cassel <cassel(a)kernel.org> ata: libata: Print features also for ATAPI devices Niklas Cassel <cassel(a)kernel.org> ata: libata: Call ata_dev_config_lpm() for ATAPI devices Damien Le Moal <dlemoal(a)kernel.org> ata: libata-core: Introduce ata_dev_config_lpm() Damien Le Moal <damien.lemoal(a)opensource.wdc.com> ata: libata: cleanup fua support detection Damien Le Moal <damien.lemoal(a)opensource.wdc.com> ata: libata: Introduce ata_ncq_supported() Niklas Cassel <cassel(a)kernel.org> ata: libata: Add cpr_log to ata_dev_print_features() early return Mark Harmstone <mark(a)harmstone.com> btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links Wojtek Wasko <wwasko(a)nvidia.com> testptp: Add option to open PHC in readonly mode Mahesh Bandewar <maheshb(a)google.com> selftest/ptp: update ptp selftest to exercise the gettimex options Xabier Marquiegui <reibax(a)gmail.com> ptp: add testptp mask test Alex Maftei <alex.maftei(a)amd.com> selftests/ptp: Add -X option for testing PTP_SYS_OFFSET_PRECISE Alex Maftei <alex.maftei(a)amd.com> selftests/ptp: Add -x option for testing PTP_SYS_OFFSET_EXTENDED Rahul Rameshbabu <rrameshbabu(a)nvidia.com> testptp: Add support for testing ptp_clock_info .adjphase callback Wojtek Wasko <wwasko(a)nvidia.com> ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. Wojtek Wasko <wwasko(a)nvidia.com> posix-clock: Store file pointer in struct posix_clock_context Linus Torvalds <torvalds(a)linux-foundation.org> Fix memory leak in posix_clock_open() Xabier Marquiegui <reibax(a)gmail.com> posix-clock: introduce posix_clock_context concept Ming Lei <ming.lei(a)redhat.com> io_uring: move local task_work in exit cancel loop Robbie Ko <robbieko(a)synology.com> btrfs: fix deadlock in wait_current_trans() due to ignored transaction type Johan Hovold <johan(a)kernel.org> dmaengine: ti: k3-udma: fix device leak on udma lookup Johan Hovold <johan(a)kernel.org> dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Johan Hovold <johan(a)kernel.org> dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation Biju Das <biju.das.jz(a)bp.renesas.com> dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() Miaoqian Lin <linmq006(a)gmail.com> dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() Johan Hovold <johan(a)kernel.org> dmaengine: lpc18xx-dmamux: fix device leak on route allocation Johan Hovold <johan(a)kernel.org> dmaengine: idxd: fix device leaks on compat bind and unbind Johan Hovold <johan(a)kernel.org> dmaengine: dw: dmamux: fix OF node leak on route allocation failure Johan Hovold <johan(a)kernel.org> dmaengine: bcm-sba-raid: fix device leak on probe Johan Hovold <johan(a)kernel.org> dmaengine: at_hdmac: fix device leak on of_dma_xlate() Janne Grunau <j(a)jannau.net> dmaengine: apple-admac: Add "apple,t8103-admac" compatible Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() Marek Vasut <marex(a)nabladev.com> drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel Lyude Paul <lyude(a)redhat.com> drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare Lisa Robinson <lisa(a)bytefly.space> LoongArch: Fix PMU counter allocation for mixed-type event groups SeongJae Park <sj(a)kernel.org> mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure Aboorva Devarajan <aboorvad(a)linux.ibm.com> mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free Xiaochen Shen <shenxiaochen(a)open-hieco.net> x86/resctrl: Fix memory bandwidth counter width for Hygon Xiaochen Shen <shenxiaochen(a)open-hieco.net> x86/resctrl: Add missing resctrl initialization for Hygon Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> EDAC/i3200: Fix a resource leak in i3200_probe1() Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> EDAC/x38: Fix a resource leak in x38_probe1() Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> hrtimer: Fix softirq base check in update_needs_ipi() Yang Erkun <yangerkun(a)huawei.com> ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref Ilikara Zheng <ilikara(a)aosc.io> nvme-pci: disable secondary temp for Wodposit WPBSNM8 Ethan Nelson-Moore <enelsonmoore(a)gmail.com> USB: serial: ftdi_sio: add support for PICAXE AXE027 cable Ulrich Mohr <u.mohr(a)semex-engcon.com> USB: serial: option: add Telit LE910 MBIM composition Huacai Chen <chenhuacai(a)kernel.org> USB: OHCI/UHCI: Add soft dependencies on ehci_platform Johannes Brüderl <johannes.bruederl(a)gmail.com> usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: dwc3: Check for USB4 IP_NAME Wayne Chang <waynec(a)nvidia.com> phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 Rafael Beims <rafael.beims(a)toradex.com> phy: freescale: imx8m-pcie: assert phy reset during power on Luca Ceresoli <luca.ceresoli(a)bootlin.com> phy: rockchip: inno-usb2: fix communication disruption in gadget mode Louis Chauvet <louis.chauvet(a)bootlin.com> phy: rockchip: inno-usb2: fix disconnection in gadget mode Dan Williams <dan.j.williams(a)intel.com> x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts Ondrej Ille <ondrej.ille(a)gmail.com> can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak Jaroslav Kysela <perex(a)perex.cz> ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer Brian Kao <powenkao(a)google.com> scsi: core: Fix error handler encryption support Benjamin Tissoires <bentiss(a)kernel.org> HID: usbhid: paper over wrong bNumDescriptor field Haotian Zhang <vulab(a)iscas.ac.cn> dmaengine: omap-dma: fix dma_pool resource leak in error paths Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) Dan Carpenter <dan.carpenter(a)linaro.org> phy: stm32-usphyc: Fix off by one in probe() Suraj Gupta <suraj.gupta2(a)amd.com> dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing Sheetal <sheetal(a)nvidia.com> dmaengine: tegra-adma: Fix use-after-free Bagas Sanjaya <bagasdotme(a)gmail.com> mm, kfence: describe @slab parameter in __kfence_obj_info() Bagas Sanjaya <bagasdotme(a)gmail.com> textsearch: describe @list member in ts_ops search Emil Svendsen <emas(a)bang-olufsen.dk> ASoC: tlv320adcx140: fix word length Emil Svendsen <emas(a)bang-olufsen.dk> ASoC: tlv320adcx140: fix null pointer Eric Dumazet <edumazet(a)google.com> net/sched: sch_qfq: do not free existing class in qfq_change_class() Gal Pressman <gal(a)nvidia.com> selftests: drv-net: fix RPS mask handling for high CPU numbers Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Fix use-after-free in inet6_addr_del(). Aditya Garg <gargaditya(a)linux.microsoft.com> net: hv_netvsc: reject RSS hash key programming without RX indirection table Shradha Gupta <shradhagupta(a)linux.microsoft.com> hv_netvsc: Allocate rx indirection table size dynamically Jiasheng Jiang <jiashengjiangcool(a)gmail.com> btrfs: fix memory leaks in create_space_info() error paths Naohiro Aota <naohiro.aota(a)wdc.com> btrfs: introduce btrfs_space_info sub-group Naohiro Aota <naohiro.aota(a)wdc.com> btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() Naohiro Aota <naohiro.aota(a)wdc.com> btrfs: factor out init_space_info() from create_space_info() Boris Burkov <boris(a)bur.io> btrfs: store fs_info in space_info Josef Bacik <josef(a)toxicpanda.com> btrfs: move flush related definitions to space-info.h Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5e: Restore destroying state bit after profile cleanup Stefano Garzarella <sgarzare(a)redhat.com> vsock/test: add a final full barrier after run all tests Eric Dumazet <edumazet(a)google.com> ipv4: ip_gre: make ipgre_header() robust Eric Dumazet <edumazet(a)google.com> macvlan: fix possible UAF in macvlan_forward_source() Eric Dumazet <edumazet(a)google.com> net: update netdev_lock_{type,name} Eric Dumazet <edumazet(a)google.com> ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() Shivam Kumar <kumar.shivam43666(a)gmail.com> nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: remove boilerplate code Szymon Wilczek <swilczek.lx(a)gmail.com> can: etas_es58x: allow partial RX URB allocation to succeed Zilin Guan <zilin(a)seu.edu.cn> pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() Jianbo Liu <jianbol(a)nvidia.com> xfrm: Fix inner mode lookup in tunnel mode GSO segmentation Andreas Gruenbacher <agruenba(a)redhat.com> Revert "gfs2: Fix use of bio_chain" Morduan Zang <zhangdandan(a)uniontech.com> efi/cper: Fix cper_bits_to_str buffer handling and return value Peng Fan <peng.fan(a)nxp.com> firmware: imx: scu-irq: Set mu_resource_id before get handle ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 3 + Documentation/netlink/specs/fou.yaml | 130 ++++++++++++++ Makefile | 4 +- arch/arm64/boot/dts/qcom/sc8280xp.dtsi | 16 +- .../boot/dts/rockchip/rk3399-kobol-helios64.dts | 1 - arch/arm64/boot/dts/rockchip/rk3399-nanopi-r4s.dts | 1 - arch/arm64/kernel/hibernate.c | 2 +- arch/arm64/kernel/signal.c | 26 ++- arch/loongarch/kernel/perf_event.c | 21 ++- arch/riscv/include/asm/compat.h | 2 +- arch/x86/events/perf_event.h | 13 +- arch/x86/include/asm/kfence.h | 29 ++- arch/x86/kernel/cpu/resctrl/core.c | 21 ++- arch/x86/kernel/cpu/resctrl/internal.h | 3 + arch/x86/kernel/fpu/core.c | 32 +++- arch/x86/kvm/x86.c | 9 + arch/x86/mm/fault.c | 15 +- arch/x86/mm/kaslr.c | 10 +- block/blk-cgroup.c | 4 + crypto/authencesn.c | 6 + drivers/ata/libata-core.c | 62 ++++++- drivers/ata/libata-scsi.c | 30 +--- drivers/base/regmap/regmap.c | 4 +- drivers/block/xen-blkback/xenbus.c | 4 +- drivers/block/xen-blkfront.c | 3 +- drivers/bluetooth/hci_ldisc.c | 4 +- drivers/char/tpm/xen-tpmfront.c | 3 +- drivers/clocksource/timer-riscv.c | 3 +- drivers/comedi/comedi_fops.c | 2 +- drivers/comedi/drivers/dmm32at.c | 32 +++- drivers/comedi/range.c | 2 +- drivers/crypto/qat/qat_common/adf_common_drv.h | 1 + drivers/crypto/qat/qat_common/adf_init.c | 1 + drivers/crypto/qat/qat_common/adf_isr.c | 5 + drivers/dma/apple-admac.c | 1 + drivers/dma/at_hdmac.c | 9 +- drivers/dma/bcm-sba-raid.c | 6 +- drivers/dma/dw/rzn1-dmamux.c | 4 +- drivers/dma/idxd/compat.c | 23 ++- drivers/dma/lpc18xx-dmamux.c | 19 +- drivers/dma/qcom/gpi.c | 6 +- drivers/dma/sh/rz-dmac.c | 5 + drivers/dma/stm32-dmamux.c | 22 ++- drivers/dma/tegra210-adma.c | 10 +- drivers/dma/ti/dma-crossbar.c | 18 +- drivers/dma/ti/k3-udma-private.c | 2 +- drivers/dma/ti/omap-dma.c | 4 + drivers/dma/xilinx/xilinx_dma.c | 7 +- drivers/edac/i3200_edac.c | 11 +- drivers/edac/x38_edac.c | 9 +- drivers/firmware/efi/cper.c | 2 +- drivers/firmware/imx/imx-scu-irq.c | 24 +-- drivers/gpio/gpio-rockchip.c | 8 - drivers/gpio/gpiolib-acpi.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h | 3 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/soc21.c | 8 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 18 +- .../amd/display/dc/dce110/dce110_hw_sequencer.c | 3 +- drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 23 +-- drivers/gpu/drm/imx/imx-tve.c | 13 ++ drivers/gpu/drm/nouveau/dispnv50/curs507a.c | 1 + drivers/gpu/drm/panel/panel-simple.c | 1 + drivers/gpu/drm/radeon/radeon_fence.c | 8 - drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 4 +- drivers/gpu/drm/xen/xen_drm_front.c | 3 +- drivers/hid/usbhid/hid-core.c | 17 +- drivers/hwtracing/intel_th/core.c | 19 +- drivers/iio/adc/ad7280a.c | 4 +- drivers/iio/adc/ad9467.c | 2 +- drivers/iio/adc/at91-sama5d2_adc.c | 1 + drivers/iio/adc/exynos_adc.c | 13 +- drivers/iio/chemical/scd4x.c | 6 +- drivers/iio/dac/ad5686.c | 6 + drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 15 +- drivers/input/misc/xen-kbdfront.c | 5 +- drivers/input/serio/i8042-acpipnpio.h | 18 ++ drivers/irqchip/irq-gic-v3-its.c | 8 +- drivers/isdn/mISDN/timerdev.c | 13 +- drivers/leds/led-class.c | 10 +- drivers/misc/mei/mei-trace.h | 18 +- drivers/misc/uacce/uacce.c | 42 ++++- drivers/mmc/host/rtsx_pci_sdmmc.c | 41 +++++ drivers/mmc/host/sdhci-of-dwcmshc.c | 20 ++- drivers/net/bonding/bond_main.c | 29 +-- drivers/net/bonding/bond_options.c | 8 +- drivers/net/can/ctucanfd/ctucanfd_base.c | 2 +- drivers/net/can/usb/ems_usb.c | 8 +- drivers/net/can/usb/esd_usb.c | 9 +- drivers/net/can/usb/etas_es58x/es58x_core.c | 2 +- drivers/net/can/usb/gs_usb.c | 11 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 9 +- drivers/net/can/usb/mcba_usb.c | 8 +- drivers/net/can/usb/usb_8dev.c | 8 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 5 +- drivers/net/ethernet/emulex/benet/be_cmds.c | 3 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.h | 2 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 2 +- drivers/net/ethernet/intel/ice/ice_main.c | 1 - drivers/net/ethernet/marvell/mvpp2/mvpp2_cls.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 86 ++++++--- .../ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 2 +- .../ethernet/marvell/octeontx2/nic/otx2_common.h | 7 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 22 ++- .../mellanox/mlx5/core/esw/acl/ingress_lgcy.c | 2 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 19 -- drivers/net/ethernet/rocker/rocker_main.c | 5 +- drivers/net/ethernet/stmicro/stmmac/dwmac5.c | 5 + .../net/ethernet/stmicro/stmmac/dwxgmac2_core.c | 5 + drivers/net/hyperv/hyperv_net.h | 5 +- drivers/net/hyperv/netvsc_drv.c | 13 +- drivers/net/hyperv/rndis_filter.c | 29 ++- drivers/net/ipvlan/ipvlan.h | 2 +- drivers/net/ipvlan/ipvlan_core.c | 16 +- drivers/net/ipvlan/ipvlan_main.c | 49 +++--- drivers/net/macvlan.c | 20 ++- drivers/net/netdevsim/bpf.c | 6 + drivers/net/netdevsim/dev.c | 2 + drivers/net/netdevsim/netdevsim.h | 1 + drivers/net/team/team.c | 23 ++- drivers/net/usb/dm9601.c | 4 - drivers/net/usb/usbnet.c | 11 +- drivers/net/wireless/ath/ath10k/ce.c | 16 +- .../net/wireless/marvell/mwifiex/11n_rxreorder.c | 6 +- drivers/net/wireless/rsi/rsi_91x_mac80211.c | 1 + drivers/net/wwan/t7xx/t7xx_hif_dpmaif_rx.c | 9 +- drivers/net/xen-netback/xenbus.c | 3 +- drivers/net/xen-netfront.c | 4 +- drivers/nfc/virtual_ncidev.c | 4 - drivers/nvme/host/fabrics.c | 15 ++ drivers/nvme/host/fabrics.h | 1 + drivers/nvme/host/fc.c | 5 +- drivers/nvme/host/nvme.h | 14 +- drivers/nvme/host/pci.c | 41 +++++ drivers/nvme/host/rdma.c | 1 + drivers/nvme/host/tcp.c | 1 + drivers/nvme/target/tcp.c | 28 ++- drivers/of/base.c | 8 +- drivers/of/platform.c | 2 +- drivers/pci/Kconfig | 6 - drivers/pci/xen-pcifront.c | 4 +- drivers/phy/broadcom/phy-bcm-ns-usb3.c | 2 +- drivers/phy/freescale/phy-fsl-imx8m-pcie.c | 3 +- drivers/phy/rockchip/phy-rockchip-inno-usb2.c | 56 +++--- drivers/phy/st/phy-stm32-usbphyc.c | 2 +- drivers/phy/tegra/xusb-tegra186.c | 3 + drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/pinctrl-rockchip.c | 9 +- drivers/pinctrl/qcom/pinctrl-lpass-lpi.c | 17 ++ drivers/ptp/ptp_chardev.c | 37 +++- drivers/ptp/ptp_private.h | 16 +- drivers/scsi/be2iscsi/be_mgmt.c | 1 + drivers/scsi/qla2xxx/qla_os.c | 2 +- drivers/scsi/scsi_error.c | 35 +++- drivers/scsi/scsi_lib.c | 8 + drivers/scsi/storvsc_drv.c | 3 +- drivers/scsi/xen-scsifront.c | 4 +- drivers/slimbus/core.c | 19 +- drivers/soc/imx/imx8m-blk-ctrl.c | 11 +- drivers/spi/spi-sprd-adi.c | 67 ++----- drivers/target/sbp/sbp_target.c | 4 +- drivers/tty/hvc/hvc_xen.c | 4 +- drivers/tty/serial/8250/8250_pci.c | 2 +- drivers/usb/core/config.c | 5 + drivers/usb/core/quirks.c | 3 + drivers/usb/dwc3/core.c | 2 + drivers/usb/dwc3/core.h | 1 + drivers/usb/host/ohci-platform.c | 1 + drivers/usb/host/uhci-platform.c | 1 + drivers/usb/host/xen-hcd.c | 4 +- drivers/usb/serial/ftdi_sio.c | 1 + drivers/usb/serial/ftdi_sio_ids.h | 2 + drivers/usb/serial/option.c | 1 + drivers/vhost/scsi.c | 24 +-- drivers/video/fbdev/xen-fbfront.c | 6 +- drivers/w1/slaves/w1_therm.c | 60 ++----- drivers/w1/w1.c | 2 - drivers/xen/pvcalls-back.c | 3 +- drivers/xen/pvcalls-front.c | 3 +- drivers/xen/xen-pciback/xenbus.c | 4 +- drivers/xen/xen-scsiback.c | 5 +- fs/btrfs/block-group.c | 60 ++++--- fs/btrfs/ctree.h | 59 ------- fs/btrfs/delayed-inode.c | 1 + fs/btrfs/disk-io.c | 2 +- fs/btrfs/inode-item.c | 1 + fs/btrfs/props.c | 1 + fs/btrfs/relocation.c | 14 ++ fs/btrfs/space-info.c | 76 ++++++-- fs/btrfs/space-info.h | 69 ++++++++ fs/btrfs/sysfs.c | 18 +- fs/btrfs/transaction.c | 11 +- fs/efivarfs/vars.c | 2 +- fs/ext4/xattr.c | 1 + fs/fs-writeback.c | 14 +- fs/gfs2/log.c | 3 +- fs/gfs2/lops.c | 2 +- fs/gfs2/super.c | 4 + fs/iomap/buffered-io.c | 2 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 2 +- fs/nfsd/nfsctl.c | 17 +- fs/ntfs3/inode.c | 7 +- fs/smb/server/mgmt/user_session.c | 35 ++-- fs/smb/server/mgmt/user_session.h | 1 + fs/smb/server/smb2pdu.c | 9 +- fs/smb/server/transport_ipc.c | 12 ++ fs/smb/server/transport_rdma.c | 15 +- fs/xfs/libxfs/xfs_ialloc.c | 11 +- include/linux/kfence.h | 1 + include/linux/libata.h | 36 ++-- include/linux/nvme.h | 3 + include/linux/posix-clock.h | 39 ++++- include/linux/textsearch.h | 1 + include/linux/usb/quirks.h | 3 + include/net/bonding.h | 13 +- include/net/nfc/nfc.h | 2 + include/scsi/scsi_eh.h | 6 + include/sound/pcm.h | 2 +- include/uapi/linux/comedi.h | 2 +- include/xen/xenbus.h | 2 +- io_uring/io_uring.c | 8 +- kernel/bpf/cgroup.c | 8 +- kernel/dma/pool.c | 7 +- kernel/irq/irq_sim.c | 2 +- kernel/time/hrtimer.c | 2 +- kernel/time/posix-clock.c | 53 ++++-- lib/flex_proportions.c | 5 +- mm/Kconfig | 10 +- mm/damon/sysfs.c | 15 +- mm/kfence/core.c | 23 ++- mm/kmsan/shadow.c | 3 +- mm/migrate.c | 12 +- mm/mprotect.c | 101 ++++++----- mm/page_alloc.c | 47 ++++- mm/rmap.c | 20 +-- net/9p/trans_xen.c | 3 +- net/bpf/test_run.c | 5 + net/bridge/br_input.c | 2 +- net/can/j1939/transport.c | 10 +- net/core/dev.c | 25 ++- net/core/filter.c | 25 ++- net/ipv4/Makefile | 1 + net/ipv4/esp4_offload.c | 4 +- net/ipv4/{fou.c => fou_core.c} | 50 ++---- net/ipv4/fou_nl.c | 48 +++++ net/ipv4/fou_nl.h | 25 +++ net/ipv4/ip_gre.c | 11 +- net/ipv6/addrconf.c | 4 +- net/ipv6/esp6_offload.c | 4 +- net/ipv6/icmp.c | 4 +- net/ipv6/ip6_tunnel.c | 2 +- net/ipv6/ndisc.c | 4 +- net/l2tp/l2tp_core.c | 4 +- net/mac80211/ibss.c | 8 +- net/mac80211/ieee80211_i.h | 6 +- net/mac80211/iface.c | 10 +- net/mac80211/mesh.c | 10 +- net/mac80211/mesh_hwmp.c | 6 +- net/mac80211/mlme.c | 13 +- net/mac80211/ocb.c | 6 +- net/mac80211/rx.c | 2 +- net/mac80211/scan.c | 2 +- net/mac80211/status.c | 6 +- net/mac80211/tdls.c | 11 +- net/mac80211/util.c | 2 +- net/mptcp/protocol.c | 13 +- net/netrom/nr_route.c | 13 +- net/nfc/core.c | 27 ++- net/nfc/llcp_commands.c | 17 +- net/nfc/llcp_core.c | 4 +- net/nfc/nci/core.c | 4 +- net/sched/act_ife.c | 12 +- net/sched/sch_qfq.c | 8 +- net/sched/sch_teql.c | 5 + net/sctp/input.c | 2 +- net/sctp/sm_statefuns.c | 10 +- net/vmw_vsock/virtio_transport_common.c | 30 +++- scripts/generate_rust_analyzer.py | 2 +- sound/core/oss/pcm_oss.c | 4 +- sound/core/pcm_native.c | 9 +- sound/pci/ctxfi/ctamixer.c | 2 + sound/soc/amd/yc/acp6x-mach.c | 8 + sound/soc/codecs/tlv320adcx140.c | 8 +- sound/soc/codecs/wsa881x.c | 54 ++++-- sound/soc/codecs/wsa883x.c | 9 + sound/soc/fsl/imx-card.c | 1 - sound/soc/intel/boards/sof_es8336.c | 2 +- sound/usb/mixer.c | 22 ++- sound/usb/mixer_scarlett2.c | 7 +- sound/xen/xen_snd_front.c | 3 +- tools/testing/selftests/net/amt.sh | 7 +- tools/testing/selftests/net/fib-onlink-tests.sh | 76 ++++---- tools/testing/selftests/net/toeplitz.c | 4 +- tools/testing/selftests/ptp/testptp.c | 194 +++++++++++++++++++-- tools/testing/vsock/util.c | 12 ++ 298 files changed, 2656 insertions(+), 1198 deletions(-)

7 months, 2 weeks

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage February 2026