Lkft-triage February 2026

lkft-triage@lists.linaro.org

32 participants
38 discussions

[PATCH 5.15 000/203] 5.15.199-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.15.199 release. There are 203 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 07 Feb 2026 14:34:07 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.199-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.15.199-rc2 Edward Adam Davis <eadavis(a)qq.com> wifi: cfg80211: init wiphy_work before allocating rfkill fails Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: fully move wiphy work to unbound workqueue Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: cfg80211: cancel wiphy_work before freeing wiphy Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: fix wiphy delayed work queueing Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: use system_unbound_wq for wiphy work Nikola Z. Ivanov <zlatistiv(a)gmail.com> team: Move team device type change at the end of team_port_add Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: meson: mark the GPIO controller as sleeping Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: avoid dup SUB_CLOSED events after disconnect Laveesh Bansal <laveeshb(a)laveeshbansal.com> writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 Johan Hovold <johan(a)kernel.org> drm/imx/tve: fix probe device leak Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver Chen Ni <nichen(a)iscas.ac.cn> net/sched: act_ife: convert comma to semicolon JP Kobryn <inwardvessel(a)gmail.com> btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> drm/amdkfd: fix a memory leak in device_queue_manager_init() Marc Kleine-Budde <mkl(a)pengutronix.de> can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak Gyeyoung Baek <gye976(a)gmail.com> genirq/irq_sim: Initialize work context pointers properly Henry Martin <bsdhenrymartin(a)gmail.com> HID: uclogic: Add NULL check in uclogic_input_configured() Rahul Rameshbabu <sergeantsagara(a)protonmail.com> HID: uclogic: Correct devm device reference for hidinput input_dev name Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: move TDLS work to wiphy work Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: use wiphy work for sdata->work Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: add a work abstraction with special semantics Ying Hsu <yinghsu(a)chromium.org> Bluetooth: Fix hci_suspend_sync crash Alexis Lothoré <alexis.lothore(a)bootlin.com> net: stmmac: make sure that ptp_rate is not 0 before configuring EST Zqiang <qiang.zhang(a)linux.dev> usbnet: Fix using smp_processor_id() in preemptible code warnings Maninder Singh <maninder1.s(a)samsung.com> NFSD: fix race between nfsd registration and exports_proc Luís Henriques <lhenriques(a)suse.de> ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} Sabrina Dubroca <sd(a)queasysnail.net> espintcp: fix skb leaks Waiman Long <longman(a)redhat.com> blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() Bartlomiej Kubik <kubik.bartlomiej(a)gmail.com> fs/ntfs3: Initialize allocated memory before use Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency Gaosheng Cui <cuigaosheng1(a)huawei.com> drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED Pedro Demarchi Gomes <pedrodemargomes(a)gmail.com> ksm: use range-walk function to jump over holes in scan_get_next_rmap_item David Hildenbrand <david(a)redhat.com> mm/pagewalk: add walk_page_range_vma() Thomas Fourier <fourier.thomas(a)gmail.com> ksmbd: smbd: fix dma_unmap_sg() nents Alexander Usyskin <alexander.usyskin(a)intel.com> mei: trace: treat reg parameter as string Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> ALSA: scarlett2: Fix buffer overflow in config retrieval Nilay Shroff <nilay(a)linux.ibm.com> nvme: fix PCIe subsystem reset controller state transition Keith Busch <kbusch(a)kernel.org> nvme-pci: do not directly handle subsys reset fallout Daniel Wagner <dwagner(a)suse.de> nvme-fc: rename free_ctrl callback to match name pattern Brian Foster <bfoster(a)redhat.com> xfs: set max_agbno to allow sparse alloc of last full inode chunk Johan Hovold <johan(a)kernel.org> dmaengine: stm32: dmamux: fix device leak on route allocation Johan Hovold <johan(a)kernel.org> dmaengine: stm32: dmamux: fix OF node leak on route allocation failure Thorsten Blum <thorsten.blum(a)linux.dev> w1: therm: Fix off-by-one buffer overflow in alarms_store Yang Guang <yang.guang5(a)zte.com.cn> w1: w1_therm: use swap() to make code cleaner Geraldo Nascimento <geraldogabriel(a)gmail.com> arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() Johan Hovold <johan(a)kernel.org> iio: adc: exynos_adc: fix OF populate on driver rebind Rob Herring (Arm) <robh(a)kernel.org> of: platform: Use default match table for /firmware Ian Abbott <abbotti(a)mev.co.uk> comedi: Fix getting range information for subdevices 16 to 255 Kuniyuki Iwashima <kuniyu(a)google.com> tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). Sharath Chandra Vurukala <quic_sharathv(a)quicinc.com> net: Add locking to protect skb->dev access in ip_output Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: only reset subflow errors when propagated Thomas Fourier <fourier.thomas(a)gmail.com> scsi: qla2xxx: edif: Fix dma_free_coherent() size Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() Fabio Estevam <festevam(a)gmail.com> ASoC: fsl: imx-card: Do not force slot width to sample width Sai Sree Kartheek Adivi <s-adivi(a)ti.com> dma/pool: distinguish between missing and exhausted atomic pools Denis Sergeev <denserg.edu(a)gmail.com> gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler Kery Qi <qikeyu2017(a)gmail.com> scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() Martin Kaiser <martin(a)kaiser.cx> net: bridge: fix static key check Kuniyuki Iwashima <kuniyu(a)google.com> nfc: nci: Fix race between rfkill and nci_unregister_device(). Gal Pressman <gal(a)nvidia.com> net/mlx5e: Account for netdev stats in ndo_get_stats64 Yafang Shao <laoar.shao(a)gmail.com> net/mlx5e: Report rx_discards_phy via rx_dropped Gal Pressman <gal(a)nvidia.com> net/mlx5e: Expose rx_oversize_pkts_buffer counter Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Add HW definitions of vport debug counters Jesse Brandeburg <jbrandeburg(a)cloudflare.com> ice: stop counting UDP csum mismatch as rx_errors Kuniyuki Iwashima <kuniyu(a)google.com> nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). Kery Qi <qikeyu2017(a)gmail.com> rocker: fix memory leak in rocker_world_port_post_fini() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: use the right ifindex when replying to icmpv6 from localhost Zilin Guan <zilin(a)seu.edu.cn> net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() Zilin Guan <zilin(a)seu.edu.cn> net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() Jia-Hong Su <s11242586(a)gmail.com> Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Reject narrower access to pointer ctx fields Daniel Borkmann <daniel(a)iogearbox.net> bpf: Do not let BPF test infra emit invalid GSO types to stack Matthew Wilcox (Oracle) <willy(a)infradead.org> migrate: correct lock ordering for hugetlb file folios Marc Kleine-Budde <mkl(a)pengutronix.de> can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak Arnd Bergmann <arnd(a)arndb.de> irqchip/gic-v3-its: Avoid truncating memory addresses Fernand Sieber <sieberf(a)amazon.com> perf/x86/intel: Do not enable BTS for guests Jeongjun Park <aha310510(a)gmail.com> netrom: fix double-free in nr_route_frame() Chenghai Huang <huangchenghai2(a)huawei.com> uacce: ensure safe queue release with state management Yang Shen <shenyang39(a)huawei.com> uacce: implement mremap in uacce_vm_ops to return -EPERM Wenkai Lin <linwenkai6(a)hisilicon.com> uacce: fix cdev handling in the cleanup path Johan Hovold <johan(a)kernel.org> intel_th: fix device leak on output open() Johan Hovold <johan(a)kernel.org> slimbus: core: fix device reference leak on report present Johan Hovold <johan(a)kernel.org> slimbus: core: fix runtime PM imbalance on report present Thomas Fourier <fourier.thomas(a)gmail.com> octeontx2: Fix otx2_dma_map_page() error return code Zhaoyang Huang <zhaoyang.huang(a)unisoc.com> arm64: Set __nocfi on swsusp_arch_resume() Marek Vasut <marex(a)nabladev.com> wifi: rsi: Fix memory corruption due to not set vif driver data size Dan Carpenter <dan.carpenter(a)linaro.org> wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() Thomas Fourier <fourier.thomas(a)gmail.com> wifi: ath10k: fix dma_free_coherent() pointer Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix potential OOB access in audio mixer handling Kübrich, Andreas <andreas.kuebrich(a)spektra-dresden.de> iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl Pei Xiao <xiaopei01(a)kylinos.cn> iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver Tomas Melin <tomas.melin(a)vaisala.com> iio: adc: ad9467: fix ad9434 vref mask Weigang He <geoffreyhe2(a)gmail.com> of: fix reference count leak in of_alias_scan() Hans de Goede <johannes.goede(a)oss.qualcomm.com> leds: led-class: Only Add LED to leds_list when it is fully ready Cedric Xing <cedric.xing(a)intel.com> x86: make page fault handling disable interrupts properly Eric Dumazet <edumazet(a)google.com> net/sched: act_ife: avoid possible NULL deref Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Fix error handling Eric Dumazet <edumazet(a)google.com> bonding: provide a net pointer to __skb_flow_dissect() Andrey Vatoropin <a.vatoropin(a)crpt.ru> be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Don't clear SI SMC table when setting power limit Laurent Vivier <lvivier(a)redhat.com> usbnet: limit max_mtu based on device's hard_mtu Eric Dumazet <edumazet(a)google.com> ipv6: annotate data-race in ndisc_router_discovery() Eric Dumazet <edumazet(a)google.com> mISDN: annotate data-race around dev->work Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M Arun Raghavan <arunr(a)valvesoftware.com> ALSA: usb: Increase volume range that triggers a warning Cheng-Yu Lee <cylee12(a)realtek.com> regmap: Fix race condition in hwspinlock irqsave routine Pavel Zhigulin <Pavel.Zhigulin(a)kaspersky.com> iio: adc: ad7280a: handle spi_setup() errors in probe() Jonathan Cameron <Jonathan.Cameron(a)huawei.com> staging:iio:adc:ad7280a: Register define cleanup. Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection Andrew Cooper <andrew.cooper3(a)citrix.com> x86/kfence: avoid writing L1TF-vulnerable PTEs Long Li <longli(a)microsoft.com> scsi: storvsc: Process unsupported MODE_SENSE_10 feng <alec.jiang(a)gmail.com> Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA gongqi <550230171hxy(a)gmail.com> Input: i8042 - add quirks for MECHREVO Wujie 15X Pro Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> Revert "nfc/nci: Add the inconsistency check between the input data length and count" Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> w1: fix redundant counter decrement in w1_attach_slave_device() Ian Abbott <abbotti(a)mev.co.uk> comedi: dmm32at: serialize use of paged registers Taeyang Lee <0wn(a)theori.io> crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: Enforce that teql can only be used as root qdisc Dmitry Skorodumov <dskr99(a)gmail.com> ipvlan: Make the addrs_lock be per port Eric Dumazet <edumazet(a)google.com> l2tp: avoid one data-race in l2tp_tunnel_del_work() Kuniyuki Iwashima <kuniyu(a)google.com> fou: Don't allow 0 for FOU_ATTR_IPPROTO. Jakub Kicinski <kuba(a)kernel.org> net: fou: use policy and operation tables generated from the spec Jakub Kicinski <kuba(a)kernel.org> net: fou: rename the source for linking Jakub Kicinski <kuba(a)kernel.org> netlink: add a proto specification for FOU Kuniyuki Iwashima <kuniyu(a)google.com> gue: Fix skb memleak with inner IP protocol 0. Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: avoid misleading per-packet error log Xin Long <lucien.xin(a)gmail.com> sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT Ricardo B. Marlière <rbm(a)suse.com> selftests: net: fib-onlink-tests: Convert to use namespaces by default Hangbin Liu <liuhangbin(a)gmail.com> selftests/net: convert fib-onlink-tests.sh to run it in unique namespace Eric Dumazet <edumazet(a)google.com> bonding: limit BOND_MODE_8023AD to Ethernet devices Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: usb: dm9601: remove broken SR9700 support Wojtek Wasko <wwasko(a)nvidia.com> testptp: Add option to open PHC in readonly mode Mahesh Bandewar <maheshb(a)google.com> selftest/ptp: update ptp selftest to exercise the gettimex options Xabier Marquiegui <reibax(a)gmail.com> ptp: add testptp mask test Alex Maftei <alex.maftei(a)amd.com> selftests/ptp: Add -X option for testing PTP_SYS_OFFSET_PRECISE Alex Maftei <alex.maftei(a)amd.com> selftests/ptp: Add -x option for testing PTP_SYS_OFFSET_EXTENDED Rahul Rameshbabu <rrameshbabu(a)nvidia.com> testptp: Add support for testing ptp_clock_info .adjphase callback Maciek Machnikowski <maciek(a)machnikowski.net> testptp: add option to shift clock by nanoseconds Wojtek Wasko <wwasko(a)nvidia.com> ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. Wojtek Wasko <wwasko(a)nvidia.com> posix-clock: Store file pointer in struct posix_clock_context Linus Torvalds <torvalds(a)linux-foundation.org> Fix memory leak in posix_clock_open() Xabier Marquiegui <reibax(a)gmail.com> posix-clock: introduce posix_clock_context concept Robbie Ko <robbieko(a)synology.com> btrfs: fix deadlock in wait_current_trans() due to ignored transaction type Johan Hovold <johan(a)kernel.org> dmaengine: ti: k3-udma: fix device leak on udma lookup Johan Hovold <johan(a)kernel.org> dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Johan Hovold <johan(a)kernel.org> dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation Biju Das <biju.das.jz(a)bp.renesas.com> dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() Miaoqian Lin <linmq006(a)gmail.com> dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() Johan Hovold <johan(a)kernel.org> dmaengine: lpc18xx-dmamux: fix device leak on route allocation Johan Hovold <johan(a)kernel.org> dmaengine: idxd: fix device leaks on compat bind and unbind Johan Hovold <johan(a)kernel.org> dmaengine: bcm-sba-raid: fix device leak on probe Johan Hovold <johan(a)kernel.org> dmaengine: at_hdmac: fix device leak on of_dma_xlate() Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() Marek Vasut <marex(a)nabladev.com> drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel Lyude Paul <lyude(a)redhat.com> drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare Aboorva Devarajan <aboorvad(a)linux.ibm.com> mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free Xiaochen Shen <shenxiaochen(a)open-hieco.net> x86/resctrl: Fix memory bandwidth counter width for Hygon Xiaochen Shen <shenxiaochen(a)open-hieco.net> x86/resctrl: Add missing resctrl initialization for Hygon Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> EDAC/i3200: Fix a resource leak in i3200_probe1() Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> EDAC/x38: Fix a resource leak in x38_probe1() Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> hrtimer: Fix softirq base check in update_needs_ipi() Yang Erkun <yangerkun(a)huawei.com> ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref Ilikara Zheng <ilikara(a)aosc.io> nvme-pci: disable secondary temp for Wodposit WPBSNM8 Ethan Nelson-Moore <enelsonmoore(a)gmail.com> USB: serial: ftdi_sio: add support for PICAXE AXE027 cable Ulrich Mohr <u.mohr(a)semex-engcon.com> USB: serial: option: add Telit LE910 MBIM composition Huacai Chen <chenhuacai(a)kernel.org> USB: OHCI/UHCI: Add soft dependencies on ehci_platform Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: dwc3: Check for USB4 IP_NAME Wayne Chang <waynec(a)nvidia.com> phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 Luca Ceresoli <luca.ceresoli(a)bootlin.com> phy: rockchip: inno-usb2: fix communication disruption in gadget mode Louis Chauvet <louis.chauvet(a)bootlin.com> phy: rockchip: inno-usb2: fix disconnection in gadget mode Dan Williams <dan.j.williams(a)intel.com> x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts Jaroslav Kysela <perex(a)perex.cz> ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer Benjamin Tissoires <bentiss(a)kernel.org> HID: usbhid: paper over wrong bNumDescriptor field Haotian Zhang <vulab(a)iscas.ac.cn> dmaengine: omap-dma: fix dma_pool resource leak in error paths Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) Dan Carpenter <dan.carpenter(a)linaro.org> phy: stm32-usphyc: Fix off by one in probe() Suraj Gupta <suraj.gupta2(a)amd.com> dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing Sheetal <sheetal(a)nvidia.com> dmaengine: tegra-adma: Fix use-after-free Bagas Sanjaya <bagasdotme(a)gmail.com> mm, kfence: describe @slab parameter in __kfence_obj_info() Bagas Sanjaya <bagasdotme(a)gmail.com> textsearch: describe @list member in ts_ops search Emil Svendsen <emas(a)bang-olufsen.dk> ASoC: tlv320adcx140: fix word length Eric Dumazet <edumazet(a)google.com> net/sched: sch_qfq: do not free existing class in qfq_change_class() Gal Pressman <gal(a)nvidia.com> selftests: drv-net: fix RPS mask handling for high CPU numbers Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5e: Restore destroying state bit after profile cleanup Stefano Garzarella <sgarzare(a)redhat.com> vsock/test: add a final full barrier after run all tests Eric Dumazet <edumazet(a)google.com> ipv4: ip_gre: make ipgre_header() robust Eric Dumazet <edumazet(a)google.com> macvlan: fix possible UAF in macvlan_forward_source() Eric Dumazet <edumazet(a)google.com> net: update netdev_lock_{type,name} Eric Dumazet <edumazet(a)google.com> ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() Shivam Kumar <kumar.shivam43666(a)gmail.com> nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: remove boilerplate code Szymon Wilczek <swilczek.lx(a)gmail.com> can: etas_es58x: allow partial RX URB allocation to succeed Zilin Guan <zilin(a)seu.edu.cn> pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() ------------- Diffstat: Documentation/netlink/specs/fou.yaml | 130 ++++++++++ Makefile | 4 +- arch/arm64/boot/dts/rockchip/rk3399-nanopi-r4s.dts | 1 - arch/arm64/kernel/hibernate.c | 2 +- arch/x86/events/perf_event.h | 13 +- arch/x86/include/asm/kfence.h | 29 ++- arch/x86/kernel/cpu/resctrl/core.c | 21 +- arch/x86/kernel/cpu/resctrl/internal.h | 3 + arch/x86/mm/fault.c | 15 +- arch/x86/mm/kaslr.c | 10 +- block/blk-cgroup.c | 4 + crypto/authencesn.c | 6 + drivers/base/regmap/regmap.c | 4 +- drivers/bluetooth/hci_ldisc.c | 4 +- drivers/comedi/comedi.h | 2 +- drivers/comedi/comedi_fops.c | 2 +- drivers/comedi/drivers/dmm32at.c | 32 ++- drivers/comedi/range.c | 2 +- drivers/dma/at_hdmac.c | 9 +- drivers/dma/bcm-sba-raid.c | 6 +- drivers/dma/idxd/compat.c | 23 +- drivers/dma/lpc18xx-dmamux.c | 19 +- drivers/dma/qcom/gpi.c | 6 +- drivers/dma/sh/rz-dmac.c | 5 + drivers/dma/stm32-dmamux.c | 22 +- drivers/dma/tegra210-adma.c | 10 +- drivers/dma/ti/dma-crossbar.c | 18 +- drivers/dma/ti/k3-udma-private.c | 2 +- drivers/dma/ti/omap-dma.c | 4 + drivers/dma/xilinx/xilinx_dma.c | 7 +- drivers/edac/i3200_edac.c | 11 +- drivers/edac/x38_edac.c | 9 +- drivers/gpio/gpiolib-acpi.c | 2 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 18 +- drivers/gpu/drm/amd/pm/powerplay/si_dpm.c | 23 +- drivers/gpu/drm/imx/imx-tve.c | 13 + drivers/gpu/drm/nouveau/dispnv50/curs507a.c | 1 + drivers/gpu/drm/panel/panel-simple.c | 1 + drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 4 +- drivers/hid/hid-uclogic-core.c | 12 +- drivers/hid/usbhid/hid-core.c | 17 +- drivers/hwtracing/intel_th/core.c | 19 +- drivers/iio/adc/ad9467.c | 2 +- drivers/iio/adc/at91-sama5d2_adc.c | 1 + drivers/iio/adc/exynos_adc.c | 13 +- drivers/iio/dac/ad5686.c | 6 + drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 15 +- drivers/input/serio/i8042-acpipnpio.h | 18 ++ drivers/irqchip/irq-gic-v3-its.c | 8 +- drivers/isdn/mISDN/timerdev.c | 13 +- drivers/leds/led-class.c | 10 +- drivers/misc/mei/mei-trace.h | 18 +- drivers/misc/uacce/uacce.c | 42 ++- drivers/mmc/host/rtsx_pci_sdmmc.c | 41 +++ drivers/net/bonding/bond_main.c | 11 +- drivers/net/can/usb/ems_usb.c | 8 +- drivers/net/can/usb/esd_usb2.c | 9 +- drivers/net/can/usb/etas_es58x/es58x_core.c | 2 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 9 +- drivers/net/can/usb/mcba_usb.c | 8 +- drivers/net/can/usb/usb_8dev.c | 8 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 5 +- drivers/net/ethernet/emulex/benet/be_cmds.c | 3 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.h | 2 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 2 +- drivers/net/ethernet/intel/ice/ice_main.c | 1 - drivers/net/ethernet/marvell/mvpp2/mvpp2_cls.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 86 +++++-- .../ethernet/marvell/octeontx2/nic/otx2_common.h | 7 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 25 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 21 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.h | 4 + .../mellanox/mlx5/core/esw/acl/ingress_lgcy.c | 2 +- drivers/net/ethernet/rocker/rocker_main.c | 5 +- drivers/net/ethernet/stmicro/stmmac/dwmac5.c | 5 + .../net/ethernet/stmicro/stmmac/dwxgmac2_core.c | 5 + drivers/net/ipvlan/ipvlan.h | 2 +- drivers/net/ipvlan/ipvlan_core.c | 16 +- drivers/net/ipvlan/ipvlan_main.c | 49 ++-- drivers/net/macvlan.c | 20 +- drivers/net/team/team.c | 23 +- drivers/net/usb/dm9601.c | 4 - drivers/net/usb/usbnet.c | 11 +- drivers/net/wireless/ath/ath10k/ce.c | 16 +- .../net/wireless/marvell/mwifiex/11n_rxreorder.c | 6 +- drivers/net/wireless/rsi/rsi_91x_mac80211.c | 1 + drivers/nfc/virtual_ncidev.c | 4 - drivers/nvme/host/fabrics.c | 15 ++ drivers/nvme/host/fabrics.h | 1 + drivers/nvme/host/fc.c | 5 +- drivers/nvme/host/nvme.h | 14 +- drivers/nvme/host/pci.c | 41 +++ drivers/nvme/host/rdma.c | 1 + drivers/nvme/host/tcp.c | 1 + drivers/nvme/target/tcp.c | 28 +- drivers/of/base.c | 8 +- drivers/of/platform.c | 2 +- drivers/pci/Kconfig | 6 - drivers/phy/broadcom/phy-bcm-ns-usb3.c | 2 +- drivers/phy/rockchip/phy-rockchip-inno-usb2.c | 12 +- drivers/phy/st/phy-stm32-usbphyc.c | 2 +- drivers/phy/tegra/xusb-tegra186.c | 3 + drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/qcom/pinctrl-lpass-lpi.c | 17 ++ drivers/ptp/ptp_chardev.c | 37 ++- drivers/ptp/ptp_private.h | 16 +- drivers/scsi/be2iscsi/be_mgmt.c | 1 + drivers/scsi/qla2xxx/qla_os.c | 2 +- drivers/scsi/storvsc_drv.c | 3 +- drivers/slimbus/core.c | 19 +- drivers/staging/iio/adc/ad7280a.c | 283 +++++++++++---------- drivers/target/sbp/sbp_target.c | 4 +- drivers/usb/dwc3/core.c | 2 + drivers/usb/dwc3/core.h | 1 + drivers/usb/host/ohci-platform.c | 1 + drivers/usb/host/uhci-platform.c | 1 + drivers/usb/serial/ftdi_sio.c | 1 + drivers/usb/serial/ftdi_sio_ids.h | 2 + drivers/usb/serial/option.c | 1 + drivers/w1/slaves/w1_therm.c | 67 ++--- drivers/w1/w1.c | 2 - drivers/xen/xen-scsiback.c | 1 + fs/btrfs/relocation.c | 13 + fs/btrfs/transaction.c | 11 +- fs/ext4/ext4.h | 38 +-- fs/ext4/xattr.c | 1 + fs/fs-writeback.c | 14 +- fs/ksmbd/mgmt/tree_connect.c | 18 +- fs/ksmbd/mgmt/tree_connect.h | 1 - fs/ksmbd/smb2pdu.c | 3 - fs/ksmbd/transport_rdma.c | 15 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 2 +- fs/nfsd/nfsctl.c | 17 +- fs/ntfs3/inode.c | 7 +- fs/xfs/libxfs/xfs_ialloc.c | 11 +- include/drm/ttm/ttm_tt.h | 2 +- include/linux/kfence.h | 1 + include/linux/mlx5/mlx5_ifc.h | 27 +- include/linux/nvme.h | 3 + include/linux/pagewalk.h | 3 + include/linux/posix-clock.h | 39 ++- include/linux/textsearch.h | 1 + include/net/cfg80211.h | 95 ++++++- include/net/dst.h | 12 + include/net/nfc/nfc.h | 2 + include/sound/pcm.h | 2 +- kernel/bpf/cgroup.c | 8 +- kernel/dma/pool.c | 7 +- kernel/irq/irq_sim.c | 2 +- kernel/time/hrtimer.c | 2 +- kernel/time/posix-clock.c | 53 ++-- mm/Kconfig | 10 +- mm/ksm.c | 115 ++++++++- mm/migrate.c | 14 +- mm/page_alloc.c | 10 +- mm/pagewalk.c | 20 ++ net/bluetooth/hci_core.c | 4 + net/bpf/test_run.c | 5 + net/bridge/br_input.c | 2 +- net/can/j1939/transport.c | 10 +- net/core/dev.c | 25 +- net/core/filter.c | 25 +- net/ipv4/Makefile | 1 + net/ipv4/esp4.c | 4 +- net/ipv4/{fou.c => fou_core.c} | 50 +--- net/ipv4/fou_nl.c | 48 ++++ net/ipv4/fou_nl.h | 25 ++ net/ipv4/ip_gre.c | 11 +- net/ipv4/ip_output.c | 16 +- net/ipv6/esp6.c | 4 +- net/ipv6/icmp.c | 4 +- net/ipv6/ip6_tunnel.c | 2 +- net/ipv6/ndisc.c | 4 +- net/l2tp/l2tp_core.c | 4 +- net/mac80211/ibss.c | 8 +- net/mac80211/ieee80211_i.h | 6 +- net/mac80211/iface.c | 10 +- net/mac80211/mesh.c | 10 +- net/mac80211/mesh_hwmp.c | 6 +- net/mac80211/mlme.c | 13 +- net/mac80211/ocb.c | 6 +- net/mac80211/rx.c | 2 +- net/mac80211/scan.c | 2 +- net/mac80211/status.c | 5 +- net/mac80211/tdls.c | 11 +- net/mac80211/util.c | 2 +- net/mptcp/protocol.c | 13 +- net/netrom/nr_route.c | 13 +- net/nfc/core.c | 27 +- net/nfc/llcp_commands.c | 17 +- net/nfc/llcp_core.c | 4 +- net/nfc/nci/core.c | 4 +- net/sched/act_ife.c | 12 +- net/sched/sch_qfq.c | 8 +- net/sched/sch_teql.c | 5 + net/sctp/sm_statefuns.c | 10 +- net/tls/tls_device.c | 18 +- net/wireless/core.c | 131 +++++++++- net/wireless/core.h | 7 + net/wireless/sysfs.c | 8 +- net/xfrm/espintcp.c | 4 +- sound/core/oss/pcm_oss.c | 4 +- sound/core/pcm_native.c | 9 +- sound/pci/ctxfi/ctamixer.c | 2 + sound/soc/codecs/tlv320adcx140.c | 4 +- sound/soc/fsl/imx-card.c | 1 - sound/usb/mixer.c | 22 +- sound/usb/mixer_scarlett_gen2.c | 7 +- tools/testing/selftests/net/fib-onlink-tests.sh | 76 +++--- tools/testing/selftests/net/toeplitz.c | 4 +- tools/testing/selftests/ptp/testptp.c | 210 +++++++++++++-- tools/testing/vsock/util.c | 12 + 212 files changed, 2370 insertions(+), 884 deletions(-)

7 months, 2 weeks

[PATCH 5.10 000/160] 5.10.249-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.10.249 release. There are 160 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 07 Feb 2026 14:34:03 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.249-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.10.249-rc2 Johan Hovold <johan(a)kernel.org> drm/imx/tve: fix probe device leak Philipp Zabel <p.zabel(a)pengutronix.de> drm/imx: imx-tve: move initialization into probe Philipp Zabel <p.zabel(a)pengutronix.de> drm/imx: imx-tve: use local encoder and connector variables Henry Martin <bsdhenrymartin(a)gmail.com> HID: uclogic: Add NULL check in uclogic_input_configured() Rahul Rameshbabu <sergeantsagara(a)protonmail.com> HID: uclogic: Correct devm device reference for hidinput input_dev name Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: meson: mark the GPIO controller as sleeping Laveesh Bansal <laveeshb(a)laveeshbansal.com> writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Revert "selftests: Replace sleep with slowwait" Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: typo NULL check in _clone() function Eric Biggers <ebiggers(a)kernel.org> ipv6: sr: Fix MAC comparison to be constant-time Rob Herring (Arm) <robh(a)kernel.org> of: platform: Use default match table for /firmware Marc Kleine-Budde <mkl(a)pengutronix.de> can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak Ian Abbott <abbotti(a)mev.co.uk> comedi: Fix getting range information for subdevices 16 to 255 Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> drm/amdkfd: fix a memory leak in device_queue_manager_init() Pedro Demarchi Gomes <pedrodemargomes(a)gmail.com> ksm: use range-walk function to jump over holes in scan_get_next_rmap_item David Hildenbrand <david(a)redhat.com> mm/pagewalk: add walk_page_range_vma() Yang Yingliang <yangyingliang(a)huawei.com> driver core: fix potential null-ptr-deref in device_add() Alexander Usyskin <alexander.usyskin(a)intel.com> mei: trace: treat reg parameter as string Johan Hovold <johan(a)kernel.org> iio: adc: exynos_adc: fix OF populate on driver rebind Thorsten Blum <thorsten.blum(a)linux.dev> w1: therm: Fix off-by-one buffer overflow in alarms_store Yang Guang <yang.guang5(a)zte.com.cn> w1: w1_therm: use swap() to make code cleaner Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() Johan Hovold <johan(a)kernel.org> dmaengine: stm32: dmamux: fix device leak on route allocation Johan Hovold <johan(a)kernel.org> dmaengine: stm32: dmamux: fix OF node leak on route allocation failure Brian Foster <bfoster(a)redhat.com> xfs: set max_agbno to allow sparse alloc of last full inode chunk Nilay Shroff <nilay(a)linux.ibm.com> nvme: fix PCIe subsystem reset controller state transition Keith Busch <kbusch(a)kernel.org> nvme-pci: do not directly handle subsys reset fallout Daniel Wagner <dwagner(a)suse.de> nvme-fc: rename free_ctrl callback to match name pattern Chen Ni <nichen(a)iscas.ac.cn> net/sched: act_ife: convert comma to semicolon Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() Sai Sree Kartheek Adivi <s-adivi(a)ti.com> dma/pool: distinguish between missing and exhausted atomic pools Kery Qi <qikeyu2017(a)gmail.com> scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() Martin Kaiser <martin(a)kaiser.cx> net: bridge: fix static key check Kuniyuki Iwashima <kuniyu(a)google.com> nfc: nci: Fix race between rfkill and nci_unregister_device(). Gal Pressman <gal(a)nvidia.com> net/mlx5e: Account for netdev stats in ndo_get_stats64 Yafang Shao <laoar.shao(a)gmail.com> net/mlx5e: Report rx_discards_phy via rx_dropped Gal Pressman <gal(a)nvidia.com> net/mlx5e: Expose rx_oversize_pkts_buffer counter Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Add HW definitions of vport debug counters Jesse Brandeburg <jbrandeburg(a)cloudflare.com> ice: stop counting UDP csum mismatch as rx_errors Kuniyuki Iwashima <kuniyu(a)google.com> nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). Kery Qi <qikeyu2017(a)gmail.com> rocker: fix memory leak in rocker_world_port_post_fini() Zilin Guan <zilin(a)seu.edu.cn> net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() Zilin Guan <zilin(a)seu.edu.cn> net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() Jia-Hong Su <s11242586(a)gmail.com> Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work Jiri Slaby (SUSE) <jirislaby(a)kernel.org> fbcon: always restore the old font data in fbcon_do_set_font() Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> fbdev: fbcon: release buffer when fbcon_do_set_font() failed Shigeru Yoshida <syoshida(a)redhat.com> fbdev: fbcon: Properly revert changes when vc_resize() failed Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Reject narrower access to pointer ctx fields Daniel Borkmann <daniel(a)iogearbox.net> bpf: Do not let BPF test infra emit invalid GSO types to stack Matthew Wilcox (Oracle) <willy(a)infradead.org> migrate: correct lock ordering for hugetlb file folios Marc Kleine-Budde <mkl(a)pengutronix.de> can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak Arnd Bergmann <arnd(a)arndb.de> irqchip/gic-v3-its: Avoid truncating memory addresses Fernand Sieber <sieberf(a)amazon.com> perf/x86/intel: Do not enable BTS for guests Jeongjun Park <aha310510(a)gmail.com> netrom: fix double-free in nr_route_frame() Chenghai Huang <huangchenghai2(a)huawei.com> uacce: ensure safe queue release with state management Yang Shen <shenyang39(a)huawei.com> uacce: implement mremap in uacce_vm_ops to return -EPERM Wenkai Lin <linwenkai6(a)hisilicon.com> uacce: fix cdev handling in the cleanup path Johan Hovold <johan(a)kernel.org> intel_th: fix device leak on output open() Johan Hovold <johan(a)kernel.org> slimbus: core: fix device reference leak on report present Johan Hovold <johan(a)kernel.org> slimbus: core: fix runtime PM imbalance on report present Thomas Fourier <fourier.thomas(a)gmail.com> octeontx2: Fix otx2_dma_map_page() error return code Marek Vasut <marex(a)nabladev.com> wifi: rsi: Fix memory corruption due to not set vif driver data size Dan Carpenter <dan.carpenter(a)linaro.org> wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() Thomas Fourier <fourier.thomas(a)gmail.com> wifi: ath10k: fix dma_free_coherent() pointer Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix potential OOB access in audio mixer handling Kübrich, Andreas <andreas.kuebrich(a)spektra-dresden.de> iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl Pei Xiao <xiaopei01(a)kylinos.cn> iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver Tomas Melin <tomas.melin(a)vaisala.com> iio: adc: ad9467: fix ad9434 vref mask Weigang He <geoffreyhe2(a)gmail.com> of: fix reference count leak in of_alias_scan() Hans de Goede <johannes.goede(a)oss.qualcomm.com> leds: led-class: Only Add LED to leds_list when it is fully ready Eric Dumazet <edumazet(a)google.com> net/sched: act_ife: avoid possible NULL deref Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Fix error handling Eric Dumazet <edumazet(a)google.com> bonding: provide a net pointer to __skb_flow_dissect() Andrey Vatoropin <a.vatoropin(a)crpt.ru> be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Don't clear SI SMC table when setting power limit Xiang Chen <chenxiang66(a)hisilicon.com> scsi: hisi_sas: Use managed PCI functions Laurent Vivier <lvivier(a)redhat.com> usbnet: limit max_mtu based on device's hard_mtu Eric Dumazet <edumazet(a)google.com> mISDN: annotate data-race around dev->work Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M Arun Raghavan <arunr(a)valvesoftware.com> ALSA: usb: Increase volume range that triggers a warning David Jeffery <djeffery(a)redhat.com> scsi: core: Wake up the error handler when final completions race against each other Cheng-Yu Lee <cylee12(a)realtek.com> regmap: Fix race condition in hwspinlock irqsave routine Pavel Zhigulin <Pavel.Zhigulin(a)kaspersky.com> iio: adc: ad7280a: handle spi_setup() errors in probe() Jonathan Cameron <Jonathan.Cameron(a)huawei.com> staging:iio:adc:ad7280a: Register define cleanup. Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection Long Li <longli(a)microsoft.com> scsi: storvsc: Process unsupported MODE_SENSE_10 feng <alec.jiang(a)gmail.com> Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA gongqi <550230171hxy(a)gmail.com> Input: i8042 - add quirks for MECHREVO Wujie 15X Pro Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> w1: fix redundant counter decrement in w1_attach_slave_device() Ian Abbott <abbotti(a)mev.co.uk> comedi: dmm32at: serialize use of paged registers Taeyang Lee <0wn(a)theori.io> crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: Enforce that teql can only be used as root qdisc Dmitry Skorodumov <dskr99(a)gmail.com> ipvlan: Make the addrs_lock be per port Eric Dumazet <edumazet(a)google.com> l2tp: avoid one data-race in l2tp_tunnel_del_work() Kuniyuki Iwashima <kuniyu(a)google.com> fou: Don't allow 0 for FOU_ATTR_IPPROTO. Jakub Kicinski <kuba(a)kernel.org> net: fou: use policy and operation tables generated from the spec Jakub Kicinski <kuba(a)kernel.org> net: fou: rename the source for linking Jakub Kicinski <kuba(a)kernel.org> netlink: add a proto specification for FOU Kuniyuki Iwashima <kuniyu(a)google.com> gue: Fix skb memleak with inner IP protocol 0. Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: avoid misleading per-packet error log Xin Long <lucien.xin(a)gmail.com> sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT Zheng Yongjun <zhengyongjun3(a)huawei.com> sctp: sm_statefuns: Fix spelling mistakes Ricardo B. Marlière <rbm(a)suse.com> selftests: net: fib-onlink-tests: Convert to use namespaces by default Hangbin Liu <liuhangbin(a)gmail.com> selftests/net: convert fib-onlink-tests.sh to run it in unique namespace Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: usb: dm9601: remove broken SR9700 support Wojtek Wasko <wwasko(a)nvidia.com> ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. Wojtek Wasko <wwasko(a)nvidia.com> posix-clock: Store file pointer in struct posix_clock_context Linus Torvalds <torvalds(a)linux-foundation.org> Fix memory leak in posix_clock_open() Xabier Marquiegui <reibax(a)gmail.com> posix-clock: introduce posix_clock_context concept Martin Willi <martin(a)strongswan.org> macvlan: Fix leaking skb in source mode with nodst option Robbie Ko <robbieko(a)synology.com> btrfs: fix deadlock in wait_current_trans() due to ignored transaction type Johan Hovold <johan(a)kernel.org> dmaengine: ti: k3-udma: fix device leak on udma lookup Johan Hovold <johan(a)kernel.org> dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Johan Hovold <johan(a)kernel.org> dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation Johan Hovold <johan(a)kernel.org> dmaengine: lpc18xx-dmamux: fix device leak on route allocation Johan Hovold <johan(a)kernel.org> dmaengine: bcm-sba-raid: fix device leak on probe Johan Hovold <johan(a)kernel.org> dmaengine: at_hdmac: fix device leak on of_dma_xlate() Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() Marek Vasut <marex(a)nabladev.com> drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel Lyude Paul <lyude(a)redhat.com> drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare Xiaochen Shen <shenxiaochen(a)open-hieco.net> x86/resctrl: Add missing resctrl initialization for Hygon Xiaochen Shen <shenxiaochen(a)open-hieco.net> x86/resctrl: Fix memory bandwidth counter width for Hygon Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> EDAC/i3200: Fix a resource leak in i3200_probe1() Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> EDAC/x38: Fix a resource leak in x38_probe1() Yang Erkun <yangerkun(a)huawei.com> ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref Ethan Nelson-Moore <enelsonmoore(a)gmail.com> USB: serial: ftdi_sio: add support for PICAXE AXE027 cable Ulrich Mohr <u.mohr(a)semex-engcon.com> USB: serial: option: add Telit LE910 MBIM composition Huacai Chen <chenhuacai(a)loongson.cn> USB: OHCI/UHCI: Add soft dependencies on ehci_platform Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: dwc3: Check for USB4 IP_NAME Wayne Chang <waynec(a)nvidia.com> phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 Luca Ceresoli <luca.ceresoli(a)bootlin.com> phy: rockchip: inno-usb2: fix communication disruption in gadget mode Louis Chauvet <louis.chauvet(a)bootlin.com> phy: rockchip: inno-usb2: fix disconnection in gadget mode Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts Jaroslav Kysela <perex(a)perex.cz> ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer Benjamin Tissoires <bentiss(a)kernel.org> HID: usbhid: paper over wrong bNumDescriptor field Haotian Zhang <vulab(a)iscas.ac.cn> dmaengine: omap-dma: fix dma_pool resource leak in error paths Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) Dan Carpenter <dan.carpenter(a)linaro.org> phy: stm32-usphyc: Fix off by one in probe() Suraj Gupta <suraj.gupta2(a)amd.com> dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing Sheetal <sheetal(a)nvidia.com> dmaengine: tegra-adma: Fix use-after-free Bagas Sanjaya <bagasdotme(a)gmail.com> textsearch: describe @list member in ts_ops search Emil Svendsen <emas(a)bang-olufsen.dk> ASoC: tlv320adcx140: fix word length Eric Dumazet <edumazet(a)google.com> net/sched: sch_qfq: do not free existing class in qfq_change_class() Stefano Garzarella <sgarzare(a)redhat.com> vsock/test: add a final full barrier after run all tests Eric Dumazet <edumazet(a)google.com> ipv4: ip_gre: make ipgre_header() robust Eric Dumazet <edumazet(a)google.com> macvlan: fix possible UAF in macvlan_forward_source() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> macvlan: Use 'hash' iterators to simplify code Jethro Beekman <kernel(a)jbeekman.nl> macvlan: Add nodst option to macvlan type source Eric Dumazet <edumazet(a)google.com> ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() Shivam Kumar <kumar.shivam43666(a)gmail.com> nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: remove boilerplate code Zilin Guan <zilin(a)seu.edu.cn> pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() ------------- Diffstat: Documentation/netlink/specs/fou.yaml | 130 ++++++++++ Makefile | 4 +- arch/x86/events/perf_event.h | 13 +- arch/x86/kernel/cpu/resctrl/core.c | 21 +- arch/x86/kernel/cpu/resctrl/internal.h | 3 + crypto/authencesn.c | 6 + drivers/base/core.c | 1 + drivers/base/regmap/regmap.c | 4 +- drivers/bluetooth/hci_ldisc.c | 4 +- drivers/dma/at_hdmac.c | 9 +- drivers/dma/bcm-sba-raid.c | 6 +- drivers/dma/lpc18xx-dmamux.c | 19 +- drivers/dma/stm32-dmamux.c | 22 +- drivers/dma/tegra210-adma.c | 10 +- drivers/dma/ti/dma-crossbar.c | 18 +- drivers/dma/ti/k3-udma-private.c | 2 +- drivers/dma/ti/omap-dma.c | 4 + drivers/dma/xilinx/xilinx_dma.c | 7 +- drivers/edac/i3200_edac.c | 11 +- drivers/edac/x38_edac.c | 9 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 18 +- drivers/gpu/drm/amd/pm/powerplay/si_dpm.c | 23 +- drivers/gpu/drm/imx/imx-tve.c | 70 ++--- drivers/gpu/drm/nouveau/dispnv50/curs507a.c | 1 + drivers/gpu/drm/panel/panel-simple.c | 1 + drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 4 +- drivers/hid/hid-uclogic-core.c | 12 +- drivers/hid/usbhid/hid-core.c | 17 +- drivers/hwtracing/intel_th/core.c | 19 +- drivers/iio/adc/ad9467.c | 2 +- drivers/iio/adc/at91-sama5d2_adc.c | 1 + drivers/iio/adc/exynos_adc.c | 13 +- drivers/iio/dac/ad5686.c | 6 + drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 15 +- drivers/input/serio/i8042-acpipnpio.h | 18 ++ drivers/irqchip/irq-gic-v3-its.c | 8 +- drivers/isdn/mISDN/timerdev.c | 13 +- drivers/leds/led-class.c | 10 +- drivers/misc/mei/mei-trace.h | 18 +- drivers/misc/uacce/uacce.c | 42 ++- drivers/mmc/host/rtsx_pci_sdmmc.c | 41 +++ drivers/net/bonding/bond_main.c | 5 +- drivers/net/can/usb/ems_usb.c | 8 +- drivers/net/can/usb/esd_usb2.c | 9 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 9 +- drivers/net/can/usb/mcba_usb.c | 8 +- drivers/net/can/usb/usb_8dev.c | 8 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 5 +- drivers/net/ethernet/emulex/benet/be_cmds.c | 3 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.h | 2 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 2 +- drivers/net/ethernet/intel/ice/ice_main.c | 1 - drivers/net/ethernet/marvell/mvpp2/mvpp2_cls.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 86 +++++-- .../ethernet/marvell/octeontx2/nic/otx2_common.h | 7 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 22 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 21 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.h | 4 + .../mellanox/mlx5/core/esw/acl/ingress_lgcy.c | 2 +- drivers/net/ethernet/rocker/rocker_main.c | 5 +- drivers/net/ipvlan/ipvlan.h | 2 +- drivers/net/ipvlan/ipvlan_core.c | 16 +- drivers/net/ipvlan/ipvlan_main.c | 49 ++-- drivers/net/macvlan.c | 84 +++--- drivers/net/usb/dm9601.c | 4 - drivers/net/usb/usbnet.c | 9 +- drivers/net/wireless/ath/ath10k/ce.c | 16 +- .../net/wireless/marvell/mwifiex/11n_rxreorder.c | 6 +- drivers/net/wireless/rsi/rsi_91x_mac80211.c | 1 + drivers/nvme/host/fabrics.c | 15 ++ drivers/nvme/host/fabrics.h | 1 + drivers/nvme/host/fc.c | 5 +- drivers/nvme/host/nvme.h | 14 +- drivers/nvme/host/pci.c | 39 +++ drivers/nvme/host/rdma.c | 1 + drivers/nvme/host/tcp.c | 1 + drivers/nvme/target/tcp.c | 28 +- drivers/of/base.c | 8 +- drivers/of/platform.c | 2 +- drivers/phy/broadcom/phy-bcm-ns-usb3.c | 2 +- drivers/phy/rockchip/phy-rockchip-inno-usb2.c | 12 +- drivers/phy/st/phy-stm32-usbphyc.c | 2 +- drivers/phy/tegra/xusb-tegra186.c | 3 + drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/ptp/ptp_chardev.c | 37 ++- drivers/ptp/ptp_private.h | 16 +- drivers/scsi/be2iscsi/be_mgmt.c | 1 + drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 20 +- drivers/scsi/scsi_error.c | 11 +- drivers/scsi/scsi_lib.c | 8 + drivers/scsi/storvsc_drv.c | 3 +- drivers/slimbus/core.c | 19 +- drivers/staging/comedi/comedi.h | 2 +- drivers/staging/comedi/comedi_fops.c | 2 +- drivers/staging/comedi/drivers/dmm32at.c | 32 ++- drivers/staging/comedi/range.c | 2 +- drivers/staging/iio/adc/ad7280a.c | 283 +++++++++++---------- drivers/target/sbp/sbp_target.c | 4 +- drivers/usb/dwc3/core.c | 2 + drivers/usb/dwc3/core.h | 1 + drivers/usb/host/ohci-platform.c | 1 + drivers/usb/host/uhci-platform.c | 1 + drivers/usb/serial/ftdi_sio.c | 1 + drivers/usb/serial/ftdi_sio_ids.h | 2 + drivers/usb/serial/option.c | 1 + drivers/video/fbdev/core/fbcon.c | 34 ++- drivers/w1/slaves/w1_therm.c | 67 ++--- drivers/w1/w1.c | 2 - drivers/xen/xen-scsiback.c | 1 + fs/btrfs/transaction.c | 11 +- fs/ext4/xattr.c | 1 + fs/fs-writeback.c | 14 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 2 +- fs/xfs/libxfs/xfs_ialloc.c | 11 +- include/linux/mlx5/mlx5_ifc.h | 27 +- include/linux/nvme.h | 3 + include/linux/pagewalk.h | 3 + include/linux/posix-clock.h | 39 ++- include/linux/textsearch.h | 1 + include/net/nfc/nfc.h | 2 + include/sound/pcm.h | 2 +- include/uapi/linux/if_link.h | 1 + kernel/bpf/cgroup.c | 8 +- kernel/dma/pool.c | 7 +- kernel/time/posix-clock.c | 53 ++-- mm/ksm.c | 115 ++++++++- mm/migrate.c | 14 +- mm/pagewalk.c | 20 ++ net/bpf/test_run.c | 5 + net/bridge/br_input.c | 2 +- net/can/j1939/transport.c | 10 +- net/core/filter.c | 25 +- net/ipv4/Makefile | 1 + net/ipv4/{fou.c => fou_core.c} | 50 +--- net/ipv4/fou_nl.c | 48 ++++ net/ipv4/fou_nl.h | 25 ++ net/ipv4/ip_gre.c | 11 +- net/ipv6/ip6_tunnel.c | 2 +- net/ipv6/seg6_hmac.c | 3 +- net/l2tp/l2tp_core.c | 4 +- net/netfilter/nft_connlimit.c | 2 +- net/netrom/nr_route.c | 13 +- net/nfc/core.c | 27 +- net/nfc/llcp_commands.c | 17 +- net/nfc/llcp_core.c | 4 +- net/nfc/nci/core.c | 4 +- net/sched/act_ife.c | 12 +- net/sched/sch_qfq.c | 8 +- net/sched/sch_teql.c | 5 + net/sctp/sm_statefuns.c | 36 +-- sound/core/oss/pcm_oss.c | 4 +- sound/core/pcm_native.c | 9 +- sound/pci/ctxfi/ctamixer.c | 2 + sound/soc/codecs/tlv320adcx140.c | 4 +- sound/usb/mixer.c | 22 +- tools/testing/selftests/net/fcnal-test.sh | 2 +- tools/testing/selftests/net/fib-onlink-tests.sh | 76 +++--- tools/testing/vsock/util.c | 12 + 158 files changed, 1749 insertions(+), 769 deletions(-)

7 months, 2 weeks

[PATCH 6.18 000/122] 6.18.9-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.9 release. There are 122 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 06 Feb 2026 14:38:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.9-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.9-rc1 Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: avoid dup SUB_CLOSED events after disconnect Tejun Heo <tj(a)kernel.org> sched_ext: Fix SCX_KICK_WAIT to work reliably Tejun Heo <tj(a)kernel.org> sched_ext: Don't kick CPUs running higher classes Chen Ni <nichen(a)iscas.ac.cn> net/sched: act_ife: convert comma to semicolon John Ogness <john.ogness(a)linutronix.de> Revert "drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit)" Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> libbpf: Fix -Wdiscarded-qualifiers under C23 Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> gpiolib: acpi: Fix potential out-of-boundary left shift Nicolin Chen <nicolinc(a)nvidia.com> iommu/tegra241-cmdqv: Reset VCMDQ in tegra241_vcmdq_hw_init_user() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: Fix cond_exec handling in amdgpu_ib_schedule() Jon Doron <jond(a)wiz.io> drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx12: adjust KGQ reset sequence Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx12: fix wptr reset in KGQ init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: adjust KGQ reset sequence Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: fix wptr reset in KGQ init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx10: fix wptr reset in KGQ init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/soc21: fix xclk for APUs Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix smu v14 soft clock frequency setting issue Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix smu v13 soft clock frequency setting issue Johan Hovold <johan(a)kernel.org> drm/imx/tve: fix probe device leak Johan Hovold <johan(a)kernel.org> drm/msm/a6xx: fix bogus hwcg register updates Miguel Ojeda <ojeda(a)kernel.org> drm/tyr: depend on `COMMON_CLK` to fix build error Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/xe/xelp: Fix Wa_18022495364 Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer: Add compiler_builtins -> core dep SeungJong Ha <engineer.jjhama(a)gmail.com> scripts: generate_rust_analyzer: fix resolution of #[pin_data] macros Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer: compile sysroot with correct edition Onur Özkan <work(a)onurozkan.dev> scripts: generate_rust_analyzer: remove sysroot assertion Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer: Add pin_init_internal deps Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer: Add pin_init -> compiler_builtins dep Alexandre Courbot <acourbot(a)nvidia.com> rust: sync: refcount: always inline functions using build_assert with arguments Miguel Ojeda <ojeda(a)kernel.org> rust: sync: atomic: Provide stub for `rusttest` 32-bit hosts Alexandre Courbot <acourbot(a)nvidia.com> rust: bits: always inline functions using build_assert with arguments Jibin Zhang <jibin.zhang(a)mediatek.com> net: fix segmentation of forwarding fraglist GRO Kairui Song <kasong(a)tencent.com> mm/shmem, swap: fix race of truncate and swap entry split Jane Chu <jane.chu(a)oracle.com> mm/memory-failure: teach kill_accessing_process to accept hugetlb tail page pfn robin.kuo <robin.kuo(a)mediatek.com> mm, swap: restore swap_space attr aviod kernel panic Jane Chu <jane.chu(a)oracle.com> mm/memory-failure: fix missing ->mf_stats count in hugetlb poison Pimyn Girgis <pimyn(a)google.com> mm/kfence: randomize the freelist on initialization Qu Wenruo <wqu(a)suse.com> btrfs: do not strictly require dirty metadata threshold for metadata writepages Jan Kara <jack(a)suse.cz> flex_proportions: make fprop_new_period() hardirq safe Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: fix local endp not being tracked Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: check subflow errors in close events Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: check no dup close events after error Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: only reset subflow errors when propagated Andrey Ryabinin <ryabinin.a.a(a)gmail.com> mm/kasan: fix KASAN poisoning in vrealloc() Robin Murphy <robin.murphy(a)arm.com> gpio: rockchip: Stop calling pinctrl for set_direction Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine Ming Lei <ming.lei(a)redhat.com> nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference Kohei Enju <kohei(a)enjuk.jp> efivarfs: fix error propagation in efivar_entry_get() Thomas Fourier <fourier.thomas(a)gmail.com> scsi: qla2xxx: edif: Fix dma_free_coherent() size Chen Miao <chenmiao(a)openatom.club> kbuild: rust: clean libpin_init_internal in mrproper Martin Larsson <martin.larsson(a)actia.se> gpio: pca953x: mask interrupts in irq shutdown Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() Fabio Estevam <festevam(a)gmail.com> ASoC: fsl: imx-card: Do not force slot width to sample width Miguel Ojeda <ojeda(a)kernel.org> rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target Hang Shu <m18080292938(a)163.com> rust: rbtree: fix documentation typo in CursorMut peek_next method Han Gao <gaohan(a)iscas.ac.cn> riscv: compat: fix COMPAT_UTS_MACHINE definition Takashi Sakamoto <o-takashi(a)sakamocchi.jp> firewire: core: fix race condition against transaction list Steven Rostedt <rostedt(a)goodmis.org> perf: sched: Fix perf crash with new is_user_task() helper Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: meson: mark the GPIO controller as sleeping Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver Laveesh Bansal <laveeshb(a)laveeshbansal.com> writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 Peter Zijlstra <peterz(a)infradead.org> sched/deadline: Fix 'stuck' dl_server Peter Zijlstra <peterz(a)infradead.org> sched/deadline: Document dl_server Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/nvm: Fix double-free on aux add failure Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/nvm: Manage nvm aux cleanup with devres Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/configfs: Fix is_bound() pci_dev lifetime Sai Sree Kartheek Adivi <s-adivi(a)ti.com> dma/pool: distinguish between missing and exhausted atomic pools Shida Zhang <zhangshida(a)kylinos.cn> bcache: fix I/O accounting leak in detached_dev_do_request Shida Zhang <zhangshida(a)kylinos.cn> bcache: use bio cloning for detached device requests Shida Zhang <zhangshida(a)kylinos.cn> bcache: fix improper use of bi_end_io Oreoluwa Babatunde <oreoluwa.babatunde(a)oss.qualcomm.com> of: reserved_mem: Allow reserved_mem framework detect "cma=" kernel param Yuntao Wang <yuntao.wang(a)linux.dev> of/reserved_mem: Simplify the logic of fdt_scan_reserved_mem_reg_nodes() Ethan Zuo <yuxuan.zuo(a)outlook.com> kbuild: Fix permissions of modules.builtin.modinfo Nathan Chancellor <nathan(a)kernel.org> kbuild: rpm-pkg: Generate debuginfo package manually Doug Berger <opendmb(a)gmail.com> gpio: brcmstb: correct hwirq to bank map Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix race in power state check before mutex lock Yuhao Huang <nekowong743(a)gmail.com> gpio: virtuser: fix UAF in configfs release path Denis Sergeev <denserg.edu(a)gmail.com> gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler Tagir Garaev <tgaraev653(a)gmail.com> ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe: Skip address copy for sync-only execs Bard Liao <yung-chuan.liao(a)linux.intel.com> ASoC: soc-acpi-intel-ptl-match: fix name_prefix of rt1320-2 Kery Qi <qikeyu2017(a)gmail.com> scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() Benjamin Berg <benjamin.berg(a)intel.com> wifi: mac80211: correctly decode TTLM with default link map Benjamin Berg <benjamin.berg(a)intel.com> wifi: mac80211: apply advertised TTLM from association response Benjamin Berg <benjamin.berg(a)intel.com> wifi: mac80211: parse all TTLM entries Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Skip ESN replay window setup for IPsec crypto offload Parav Pandit <parav(a)nvidia.com> net/mlx5: Fix vhca_id access call trace use before alloc Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: Initialize events outside devlink lock Shay Drory <shayd(a)nvidia.com> net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect Wei Fang <wei.fang(a)nxp.com> net: phy: micrel: fix clk warning when removing the driver Daniel Zahka <daniel.zahka(a)gmail.com> net/mlx5e: don't assume psp tx skbs are ipv6 csum handling Martin Kaiser <martin(a)kaiser.cx> net: bridge: fix static key check Kuniyuki Iwashima <kuniyu(a)google.com> nfc: nci: Fix race between rfkill and nci_unregister_device(). Gal Pressman <gal(a)nvidia.com> net/mlx5e: Account for netdev stats in ndo_get_stats64 Mark Bloch <mbloch(a)nvidia.com> net/mlx5e: TC, delete flows only for existing peers Jesse Brandeburg <jbrandeburg(a)cloudflare.com> ice: stop counting UDP csum mismatch as rx_errors Aaron Ma <aaron.ma(a)canonical.com> ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues Kohei Enju <enjuk(a)amazon.com> ixgbe: don't initialize aci lock in ixgbe_recovery_probe() Kohei Enju <enjuk(a)amazon.com> ixgbe: fix memory leaks in the ixgbe_recovery_probe() path Nikolay Aleksandrov <razor(a)blackwall.org> bonding: fix use-after-free due to enslave fail after slave array update Kuniyuki Iwashima <kuniyu(a)google.com> nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). Vivian Wang <wangruikang(a)iscas.ac.cn> net: spacemit: Check for netif_carrier_ok() in emac_stats_update() Eric Dumazet <edumazet(a)google.com> mptcp: fix race in mptcp_pm_nl_flush_addrs_doit() Kery Qi <qikeyu2017(a)gmail.com> rocker: fix memory leak in rocker_world_port_post_fini() Zeng Chi <zengchi(a)kylinos.cn> net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() Kery Qi <qikeyu2017(a)gmail.com> net: wwan: t7xx: fix potential skb->frags overflow in RX path Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: use the right ifindex when replying to icmpv6 from localhost Zilin Guan <zilin(a)seu.edu.cn> net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() Edward Cree <ecree.xilinx(a)gmail.com> sfc: fix deadlock in RSS config read Eric Dumazet <edumazet(a)google.com> bonding: annotate data-races around slave->last_rx Zilin Guan <zilin(a)seu.edu.cn> octeon_ep: Fix memory leak in octep_device_setup() Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix early exit leak with fixed phy Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Zilin Guan <zilin(a)seu.edu.cn> net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() Jianpeng Chang <jianpeng.chang.cn(a)windriver.com> Bluetooth: MGMT: Fix memory leak in set_ssp_complete Jia-Hong Su <s11242586(a)gmail.com> Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work Zilin Guan <zilin(a)seu.edu.cn> can: at91_can: Fix memory leak in at91_can_probe() Qu Wenruo <wqu(a)suse.com> btrfs: zlib: fix the folio leak on S390 hardware acceleration Amir Goldstein <amir73il(a)gmail.com> readdir: require opt-in for d_type flags ------------- Diffstat: Makefile | 7 +- arch/arm64/configs/defconfig | 1 - arch/riscv/include/asm/compat.h | 2 +- drivers/bluetooth/hci_ldisc.c | 4 +- drivers/firewire/core-transaction.c | 19 +- drivers/gpio/gpio-brcmstb.c | 8 +- drivers/gpio/gpio-pca953x.c | 2 + drivers/gpio/gpio-rockchip.c | 8 - drivers/gpio/gpio-virtuser.c | 8 +- drivers/gpio/gpiolib-acpi-core.c | 21 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 7 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c | 5 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 25 +-- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 25 +-- drivers/gpu/drm/amd/amdgpu/soc21.c | 8 +- drivers/gpu/drm/amd/pm/amdgpu_dpm.c | 7 +- drivers/gpu/drm/amd/pm/swsmu/inc/smu_v13_0.h | 1 + drivers/gpu/drm/amd/pm/swsmu/inc/smu_v14_0.h | 1 + drivers/gpu/drm/amd/pm/swsmu/smu13/smu_v13_0.c | 1 + drivers/gpu/drm/amd/pm/swsmu/smu14/smu_v14_0.c | 1 + drivers/gpu/drm/drm_gem.c | 18 +- drivers/gpu/drm/imx/ipuv3/imx-tve.c | 13 ++ drivers/gpu/drm/msm/adreno/a6xx_catalog.c | 2 - drivers/gpu/drm/nouveau/nouveau_display.c | 2 - drivers/gpu/drm/tyr/Kconfig | 1 + drivers/gpu/drm/xe/xe_configfs.c | 3 +- drivers/gpu/drm/xe/xe_device.c | 2 - drivers/gpu/drm/xe/xe_exec.c | 6 +- drivers/gpu/drm/xe/xe_lrc.c | 2 +- drivers/gpu/drm/xe/xe_nvm.c | 55 +++--- drivers/gpu/drm/xe/xe_nvm.h | 2 - drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c | 3 + drivers/md/bcache/bcache.h | 9 + drivers/md/bcache/request.c | 82 ++++---- drivers/md/bcache/super.c | 12 +- drivers/net/bonding/bond_main.c | 28 +-- drivers/net/bonding/bond_options.c | 8 +- drivers/net/can/at91_can.c | 2 +- drivers/net/can/usb/gs_usb.c | 4 +- drivers/net/ethernet/broadcom/asp2/bcmasp_intf.c | 5 +- drivers/net/ethernet/intel/ice/ice_lib.c | 10 +- drivers/net/ethernet/intel/ice/ice_main.c | 1 - drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 26 +-- drivers/net/ethernet/marvell/mvpp2/mvpp2_cls.c | 2 +- .../net/ethernet/marvell/octeon_ep/octep_main.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/debugfs.c | 16 ++ .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 3 +- .../mellanox/mlx5/core/en_accel/psp_rxtx.c | 17 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 20 +- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 19 +- .../mellanox/mlx5/core/esw/acl/ingress_lgcy.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 2 +- drivers/net/ethernet/mellanox/mlx5/core/fs_cmd.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 36 ++-- .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 1 + .../ethernet/mellanox/mlx5/core/sf/dev/driver.c | 1 + drivers/net/ethernet/rocker/rocker_main.c | 5 +- drivers/net/ethernet/sfc/mcdi_filters.c | 7 +- drivers/net/ethernet/spacemit/k1_emac.c | 34 +++- drivers/net/phy/micrel.c | 17 +- drivers/net/wwan/t7xx/t7xx_hif_dpmaif_rx.c | 9 +- drivers/nvme/target/io-cmd-bdev.c | 3 +- drivers/of/of_reserved_mem.c | 44 +++-- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/pinctrl-rockchip.c | 9 +- drivers/pinctrl/qcom/Kconfig | 15 +- drivers/pinctrl/qcom/Makefile | 1 - drivers/pinctrl/qcom/pinctrl-lpass-lpi.c | 17 ++ drivers/pinctrl/qcom/pinctrl-sc7280-lpass-lpi.c | 3 + drivers/pinctrl/qcom/pinctrl-sm8350-lpass-lpi.c | 151 -------------- drivers/scsi/be2iscsi/be_mgmt.c | 1 + drivers/scsi/qla2xxx/qla_os.c | 2 +- drivers/target/sbp/sbp_target.c | 4 +- fs/btrfs/disk-io.c | 22 --- fs/btrfs/extent_io.c | 3 +- fs/btrfs/extent_io.h | 3 +- fs/btrfs/zlib.c | 1 + fs/efivarfs/vars.c | 2 +- fs/fs-writeback.c | 14 +- fs/readdir.c | 3 + include/linux/cma.h | 9 + include/linux/fs.h | 6 +- include/linux/kasan.h | 14 ++ include/linux/sched.h | 5 + include/net/bonding.h | 13 +- include/net/nfc/nfc.h | 2 + kernel/dma/contiguous.c | 16 +- kernel/dma/pool.c | 7 +- kernel/events/callchain.c | 2 +- kernel/events/core.c | 6 +- kernel/sched/deadline.c | 206 +++++++++++++++++++ kernel/sched/ext.c | 57 +++--- kernel/sched/ext_internal.h | 6 +- lib/flex_proportions.c | 5 +- mm/kasan/common.c | 21 ++ mm/kfence/core.c | 23 ++- mm/memory-failure.c | 99 ++++++---- mm/shmem.c | 45 +++-- mm/swap.h | 2 +- mm/swap_state.c | 3 +- mm/vmalloc.c | 7 +- net/bluetooth/mgmt.c | 3 + net/bridge/br_input.c | 2 +- net/core/filter.c | 2 + net/ipv4/tcp_offload.c | 3 +- net/ipv4/udp_offload.c | 3 +- net/ipv6/icmp.c | 4 +- net/ipv6/tcpv6_offload.c | 3 +- net/mac80211/ieee80211_i.h | 2 - net/mac80211/mlme.c | 217 ++++++++++++--------- net/mptcp/pm_kernel.c | 16 +- net/mptcp/protocol.c | 13 +- net/nfc/core.c | 27 ++- net/nfc/llcp_commands.c | 17 +- net/nfc/llcp_core.c | 4 +- net/nfc/nci/core.c | 4 +- net/sched/act_ife.c | 6 +- rust/kernel/bits.rs | 6 +- rust/kernel/rbtree.rs | 2 +- rust/kernel/sync/atomic/predefine.rs | 11 ++ rust/kernel/sync/refcount.rs | 3 +- scripts/Makefile.build | 2 +- scripts/Makefile.vmlinux | 3 +- scripts/generate_rust_analyzer.py | 40 +++- scripts/package/kernel.spec | 65 +++--- sound/hda/codecs/realtek/alc269.c | 1 + sound/soc/amd/yc/acp6x-mach.c | 8 + sound/soc/fsl/imx-card.c | 1 - sound/soc/intel/boards/sof_es8336.c | 2 +- sound/soc/intel/common/soc-acpi-intel-ptl-match.c | 2 +- tools/lib/bpf/libbpf.c | 7 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 81 +++++++- 133 files changed, 1285 insertions(+), 784 deletions(-)

7 months, 2 weeks

[PATCH 6.12 00/87] 6.12.69-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.69 release. There are 87 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 06 Feb 2026 14:38:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.69-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.69-rc1 Alexis Lothoré (eBPF Foundation) <alexis.lothore(a)bootlin.com> bpf/selftests: test_select_reuseport_kern: Remove unused header Long Li <longli(a)microsoft.com> RDMA/mana_ib: Handle net event for pointing to the current netdev Long Li <longli(a)microsoft.com> net: mana: Change the function signature of mana_get_primary_netdev_rcu Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: adjust KGQ reset sequence Laveesh Bansal <laveeshb(a)laveeshbansal.com> writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 Steven Rostedt <rostedt(a)goodmis.org> perf: sched: Fix perf crash with new is_user_task() helper Josh Poimboeuf <jpoimboe(a)kernel.org> perf: Simplify get_perf_callchain() user logic Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: avoid dup SUB_CLOSED events after disconnect Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins Chen Ni <nichen(a)iscas.ac.cn> net/sched: act_ife: convert comma to semicolon JP Kobryn <inwardvessel(a)gmail.com> btrfs: prevent use-after-free on folio private data in btrfs_subpage_clear_uptodate() John Ogness <john.ogness(a)linutronix.de> Revert "drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit)" Kang Yang <quic_kangyang(a)quicinc.com> wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode Pimyn Girgis <pimyn(a)google.com> mm/kfence: randomize the freelist on initialization Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> libbpf: Fix -Wdiscarded-qualifiers under C23 Thomas Fourier <fourier.thomas(a)gmail.com> ksmbd: smbd: fix dma_unmap_sg() nents David Howells <dhowells(a)redhat.com> rxrpc: Fix data-race warning and potential load/store tearing T.J. Mercier <tjmercier(a)google.com> cgroup: Fix kernfs_node UAF in css_free_rwork_fn Miguel Ojeda <ojeda(a)kernel.org> rust: kbuild: support `-Cjump-tables=n` for Rust 1.93.0 Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> gpiolib: acpi: Fix potential out-of-boundary left shift Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: Fix cond_exec handling in amdgpu_ib_schedule() Jon Doron <jond(a)wiz.io> drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx12: fix wptr reset in KGQ init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: fix wptr reset in KGQ init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx10: fix wptr reset in KGQ init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/soc21: fix xclk for APUs Johan Hovold <johan(a)kernel.org> drm/imx/tve: fix probe device leak Johan Hovold <johan(a)kernel.org> drm/msm/a6xx: fix bogus hwcg register updates Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer: Add compiler_builtins -> core dep Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer: compile sysroot with correct edition Onur Özkan <work(a)onurozkan.dev> scripts: generate_rust_analyzer: remove sysroot assertion Jibin Zhang <jibin.zhang(a)mediatek.com> net: fix segmentation of forwarding fraglist GRO Kairui Song <kasong(a)tencent.com> mm/shmem, swap: fix race of truncate and swap entry split Jane Chu <jane.chu(a)oracle.com> mm/memory-failure: teach kill_accessing_process to accept hugetlb tail page pfn Jane Chu <jane.chu(a)oracle.com> mm/memory-failure: fix missing ->mf_stats count in hugetlb poison Jan Kara <jack(a)suse.cz> flex_proportions: make fprop_new_period() hardirq safe Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: fix local endp not being tracked Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: check subflow errors in close events Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: check no dup close events after error Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: only reset subflow errors when propagated Andrey Ryabinin <ryabinin.a.a(a)gmail.com> mm/kasan: fix KASAN poisoning in vrealloc() Robin Murphy <robin.murphy(a)arm.com> gpio: rockchip: Stop calling pinctrl for set_direction Ming Lei <ming.lei(a)redhat.com> nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference Kohei Enju <kohei(a)enjuk.jp> efivarfs: fix error propagation in efivar_entry_get() Thomas Fourier <fourier.thomas(a)gmail.com> scsi: qla2xxx: edif: Fix dma_free_coherent() size Martin Larsson <martin.larsson(a)actia.se> gpio: pca953x: mask interrupts in irq shutdown Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() Fabio Estevam <festevam(a)gmail.com> ASoC: fsl: imx-card: Do not force slot width to sample width Miguel Ojeda <ojeda(a)kernel.org> rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target Hang Shu <m18080292938(a)163.com> rust: rbtree: fix documentation typo in CursorMut peek_next method Han Gao <gaohan(a)iscas.ac.cn> riscv: compat: fix COMPAT_UTS_MACHINE definition Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: meson: mark the GPIO controller as sleeping Peter Zijlstra <peterz(a)infradead.org> sched/deadline: Fix 'stuck' dl_server Peter Zijlstra <peterz(a)infradead.org> sched/deadline: Document dl_server Sai Sree Kartheek Adivi <s-adivi(a)ti.com> dma/pool: distinguish between missing and exhausted atomic pools Shida Zhang <zhangshida(a)kylinos.cn> bcache: fix I/O accounting leak in detached_dev_do_request Shida Zhang <zhangshida(a)kylinos.cn> bcache: use bio cloning for detached device requests Shida Zhang <zhangshida(a)kylinos.cn> bcache: fix improper use of bi_end_io Yuhao Huang <nekowong743(a)gmail.com> gpio: virtuser: fix UAF in configfs release path Denis Sergeev <denserg.edu(a)gmail.com> gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler Tagir Garaev <tgaraev653(a)gmail.com> ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion Kery Qi <qikeyu2017(a)gmail.com> scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Skip ESN replay window setup for IPsec crypto offload Parav Pandit <parav(a)nvidia.com> net/mlx5: Fix vhca_id access call trace use before alloc Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: Initialize events outside devlink lock Shay Drory <shayd(a)nvidia.com> net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect Wei Fang <wei.fang(a)nxp.com> net: phy: micrel: fix clk warning when removing the driver Martin Kaiser <martin(a)kaiser.cx> net: bridge: fix static key check Kuniyuki Iwashima <kuniyu(a)google.com> nfc: nci: Fix race between rfkill and nci_unregister_device(). Mark Bloch <mbloch(a)nvidia.com> net/mlx5e: TC, delete flows only for existing peers Jesse Brandeburg <jbrandeburg(a)cloudflare.com> ice: stop counting UDP csum mismatch as rx_errors Aaron Ma <aaron.ma(a)canonical.com> ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues Kuniyuki Iwashima <kuniyu(a)google.com> nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). Kery Qi <qikeyu2017(a)gmail.com> rocker: fix memory leak in rocker_world_port_post_fini() Kery Qi <qikeyu2017(a)gmail.com> net: wwan: t7xx: fix potential skb->frags overflow in RX path Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: use the right ifindex when replying to icmpv6 from localhost Zilin Guan <zilin(a)seu.edu.cn> net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() Eric Dumazet <edumazet(a)google.com> bonding: annotate data-races around slave->last_rx Zilin Guan <zilin(a)seu.edu.cn> octeon_ep: Fix memory leak in octep_device_setup() Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix early exit leak with fixed phy Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Zilin Guan <zilin(a)seu.edu.cn> net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() Jianpeng Chang <jianpeng.chang.cn(a)windriver.com> Bluetooth: MGMT: Fix memory leak in set_ssp_complete Jia-Hong Su <s11242586(a)gmail.com> Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work Zilin Guan <zilin(a)seu.edu.cn> can: at91_can: Fix memory leak in at91_can_probe() ------------- Diffstat: Makefile | 4 +- arch/arm64/configs/defconfig | 1 - arch/riscv/include/asm/compat.h | 2 +- arch/x86/Makefile | 2 +- drivers/bluetooth/hci_ldisc.c | 4 +- drivers/gpio/gpio-pca953x.c | 2 + drivers/gpio/gpio-rockchip.c | 8 - drivers/gpio/gpio-virtuser.c | 8 +- drivers/gpio/gpiolib-acpi-core.c | 21 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 7 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c | 5 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 47 ++--- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/soc21.c | 8 +- drivers/gpu/drm/imx/ipuv3/imx-tve.c | 13 ++ drivers/gpu/drm/msm/adreno/a6xx_catalog.c | 2 - drivers/gpu/drm/nouveau/nouveau_display.c | 2 - drivers/infiniband/hw/mana/device.c | 54 +++++- drivers/infiniband/hw/mana/mana_ib.h | 2 + drivers/md/bcache/bcache.h | 9 + drivers/md/bcache/request.c | 82 ++++---- drivers/md/bcache/super.c | 12 +- drivers/net/bonding/bond_main.c | 18 +- drivers/net/bonding/bond_options.c | 8 +- drivers/net/can/at91_can.c | 2 +- drivers/net/can/usb/gs_usb.c | 4 +- drivers/net/ethernet/broadcom/asp2/bcmasp_intf.c | 5 +- drivers/net/ethernet/intel/ice/ice_lib.c | 10 +- drivers/net/ethernet/intel/ice/ice_main.c | 1 - drivers/net/ethernet/marvell/mvpp2/mvpp2_cls.c | 2 +- .../net/ethernet/marvell/octeon_ep/octep_main.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/debugfs.c | 16 ++ .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 19 +- .../mellanox/mlx5/core/esw/acl/ingress_lgcy.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/fs_cmd.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 36 ++-- .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 1 + .../ethernet/mellanox/mlx5/core/sf/dev/driver.c | 1 + drivers/net/ethernet/microsoft/mana/mana_en.c | 22 ++- drivers/net/ethernet/rocker/rocker_main.c | 5 +- drivers/net/phy/micrel.c | 17 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 10 +- drivers/net/wwan/t7xx/t7xx_hif_dpmaif_rx.c | 9 +- drivers/nvme/target/io-cmd-bdev.c | 3 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/pinctrl-rockchip.c | 9 +- drivers/pinctrl/qcom/Kconfig | 15 +- drivers/pinctrl/qcom/Makefile | 1 - drivers/pinctrl/qcom/pinctrl-lpass-lpi.c | 17 ++ drivers/pinctrl/qcom/pinctrl-sc7280-lpass-lpi.c | 3 + drivers/pinctrl/qcom/pinctrl-sm8350-lpass-lpi.c | 151 --------------- drivers/scsi/be2iscsi/be_mgmt.c | 1 + drivers/scsi/qla2xxx/qla_os.c | 2 +- drivers/target/sbp/sbp_target.c | 4 +- fs/btrfs/relocation.c | 14 ++ fs/efivarfs/vars.c | 2 +- fs/fs-writeback.c | 14 +- fs/smb/server/transport_rdma.c | 15 +- include/linux/kasan.h | 14 ++ include/linux/sched.h | 5 + include/net/bonding.h | 13 +- include/net/mana/mana.h | 4 +- include/net/nfc/nfc.h | 2 + kernel/cgroup/cgroup.c | 2 +- kernel/dma/pool.c | 7 +- kernel/events/callchain.c | 20 +- kernel/events/core.c | 6 +- kernel/sched/deadline.c | 206 +++++++++++++++++++++ lib/flex_proportions.c | 5 +- mm/kasan/common.c | 21 +++ mm/kfence/core.c | 23 ++- mm/memory-failure.c | 99 ++++++---- mm/shmem.c | 45 +++-- mm/vmalloc.c | 7 +- net/bluetooth/mgmt.c | 3 + net/bridge/br_input.c | 2 +- net/core/filter.c | 2 + net/ipv4/tcp_offload.c | 3 +- net/ipv4/udp_offload.c | 3 +- net/ipv6/icmp.c | 4 +- net/ipv6/tcpv6_offload.c | 3 +- net/mptcp/protocol.c | 13 +- net/nfc/core.c | 27 ++- net/nfc/llcp_commands.c | 17 +- net/nfc/llcp_core.c | 4 +- net/nfc/nci/core.c | 4 +- net/rxrpc/ar-internal.h | 9 +- net/rxrpc/conn_event.c | 2 +- net/rxrpc/output.c | 10 +- net/rxrpc/peer_event.c | 17 +- net/rxrpc/proc.c | 4 +- net/rxrpc/rxkad.c | 4 +- net/sched/act_ife.c | 6 +- rust/kernel/rbtree.rs | 2 +- scripts/Makefile.build | 2 +- scripts/generate_rust_analyzer.py | 34 +++- sound/soc/amd/yc/acp6x-mach.c | 8 + sound/soc/fsl/imx-card.c | 1 - sound/soc/intel/boards/sof_es8336.c | 2 +- tools/lib/bpf/libbpf.c | 4 +- .../bpf/progs/test_select_reuseport_kern.c | 1 - tools/testing/selftests/net/mptcp/mptcp_join.sh | 81 +++++++- 104 files changed, 1001 insertions(+), 498 deletions(-)

7 months, 2 weeks

[PATCH 6.6 00/72] 6.6.123-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.123 release. There are 72 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 06 Feb 2026 14:38:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.123-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.123-rc1 Alexis Lothoré (eBPF Foundation) <alexis.lothore(a)bootlin.com> bpf/selftests: test_select_reuseport_kern: Remove unused header Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Revert "net: Remove conditional threaded-NAPI wakeup based on task state." Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Revert "net: Allow to use SMP threads for backlog NAPI." Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display: use udelay rather than fsleep Eric Dumazet <edumazet(a)google.com> ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple() Marios Makassikis <mmakassikis(a)freebox.fr> ksmbd: fix recursive locking in RPC handle list access e.kubanski <e.kubanski(a)partner.samsung.com> xsk: Fix race condition in AF_XDP generic RX path Jon Doron <jond(a)wiz.io> drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: Don't use sw fault filter if retry cam enabled Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: avoid dup SUB_CLOSED events after disconnect Laveesh Bansal <laveeshb(a)laveeshbansal.com> writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 Steven Rostedt <rostedt(a)goodmis.org> perf: sched: Fix perf crash with new is_user_task() helper Johan Hovold <johan(a)kernel.org> drm/msm/a6xx: fix bogus hwcg register updates Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check Chen Ni <nichen(a)iscas.ac.cn> net/sched: act_ife: convert comma to semicolon JP Kobryn <inwardvessel(a)gmail.com> btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() Robert McClinton <rbmccav(a)gmail.com> drm/radeon: delete radeon_fence_process in is_signaled, no deadlock Nikola Z. Ivanov <zlatistiv(a)gmail.com> team: Move team device type change at the end of team_port_add Kang Yang <quic_kangyang(a)quicinc.com> wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: move TDLS work to wiphy work Yunseong Kim <ysk(a)kzalloc.com> ksmbd: Fix race condition in RPC handle list access Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV Thomas Fourier <fourier.thomas(a)gmail.com> ksmbd: smbd: fix dma_unmap_sg() nents Alexander Usyskin <alexander.usyskin(a)intel.com> mei: trace: treat reg parameter as string Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Fix restoration of SVE context Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Consistently read FPSIMD context Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state Pimyn Girgis <pimyn(a)google.com> mm/kfence: randomize the freelist on initialization Robin Murphy <robin.murphy(a)arm.com> gpio: rockchip: Stop calling pinctrl for set_direction Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: fix wptr reset in KGQ init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx10: fix wptr reset in KGQ init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/soc21: fix xclk for APUs Johan Hovold <johan(a)kernel.org> drm/imx/tve: fix probe device leak Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer: Add compiler_builtins -> core dep Jan Kara <jack(a)suse.cz> flex_proportions: make fprop_new_period() hardirq safe Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: fix local endp not being tracked Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: check subflow errors in close events Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: check no dup close events after error Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: only reset subflow errors when propagated Kohei Enju <kohei(a)enjuk.jp> efivarfs: fix error propagation in efivar_entry_get() Thomas Fourier <fourier.thomas(a)gmail.com> scsi: qla2xxx: edif: Fix dma_free_coherent() size Martin Larsson <martin.larsson(a)actia.se> gpio: pca953x: mask interrupts in irq shutdown Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() Fabio Estevam <festevam(a)gmail.com> ASoC: fsl: imx-card: Do not force slot width to sample width Miguel Ojeda <ojeda(a)kernel.org> rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target Han Gao <gaohan(a)iscas.ac.cn> riscv: compat: fix COMPAT_UTS_MACHINE definition Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: meson: mark the GPIO controller as sleeping Sai Sree Kartheek Adivi <s-adivi(a)ti.com> dma/pool: distinguish between missing and exhausted atomic pools Denis Sergeev <denserg.edu(a)gmail.com> gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler Tagir Garaev <tgaraev653(a)gmail.com> ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion Kery Qi <qikeyu2017(a)gmail.com> scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Skip ESN replay window setup for IPsec crypto offload Martin Kaiser <martin(a)kaiser.cx> net: bridge: fix static key check Kuniyuki Iwashima <kuniyu(a)google.com> nfc: nci: Fix race between rfkill and nci_unregister_device(). Gal Pressman <gal(a)nvidia.com> net/mlx5e: Account for netdev stats in ndo_get_stats64 Yafang Shao <laoar.shao(a)gmail.com> net/mlx5e: Report rx_discards_phy via rx_dropped Mark Bloch <mbloch(a)nvidia.com> net/mlx5e: TC, delete flows only for existing peers Jesse Brandeburg <jbrandeburg(a)cloudflare.com> ice: stop counting UDP csum mismatch as rx_errors Kuniyuki Iwashima <kuniyu(a)google.com> nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). Kery Qi <qikeyu2017(a)gmail.com> rocker: fix memory leak in rocker_world_port_post_fini() Kery Qi <qikeyu2017(a)gmail.com> net: wwan: t7xx: fix potential skb->frags overflow in RX path Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: use the right ifindex when replying to icmpv6 from localhost Zilin Guan <zilin(a)seu.edu.cn> net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() Eric Dumazet <edumazet(a)google.com> bonding: annotate data-races around slave->last_rx Zilin Guan <zilin(a)seu.edu.cn> octeon_ep: Fix memory leak in octep_device_setup() Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix early exit leak with fixed phy Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Zilin Guan <zilin(a)seu.edu.cn> net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() Jia-Hong Su <s11242586(a)gmail.com> Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work ------------- Diffstat: Makefile | 4 +- arch/arm64/kernel/signal.c | 92 ++++++----- arch/riscv/include/asm/compat.h | 2 +- drivers/bluetooth/hci_ldisc.c | 4 +- drivers/gpio/gpio-pca953x.c | 2 + drivers/gpio/gpio-rockchip.c | 8 - drivers/gpio/gpiolib-acpi.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h | 3 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/soc21.c | 8 +- drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c | 2 +- drivers/gpu/drm/imx/ipuv3/imx-tve.c | 13 ++ drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 2 - drivers/gpu/drm/radeon/radeon_fence.c | 8 - drivers/misc/mei/mei-trace.h | 18 +-- drivers/net/bonding/bond_main.c | 18 ++- drivers/net/bonding/bond_options.c | 8 +- drivers/net/can/usb/gs_usb.c | 4 +- drivers/net/ethernet/broadcom/asp2/bcmasp_intf.c | 5 +- drivers/net/ethernet/intel/ice/ice_main.c | 1 - drivers/net/ethernet/marvell/mvpp2/mvpp2_cls.c | 2 +- .../net/ethernet/marvell/octeon_ep/octep_main.c | 2 +- .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 19 ++- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 19 ++- .../mellanox/mlx5/core/esw/acl/ingress_lgcy.c | 2 +- drivers/net/ethernet/rocker/rocker_main.c | 5 +- drivers/net/tap.c | 6 +- drivers/net/team/team.c | 23 ++- drivers/net/tun.c | 6 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 10 +- drivers/net/wwan/t7xx/t7xx_hif_dpmaif_rx.c | 9 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/pinctrl-rockchip.c | 9 +- drivers/pinctrl/qcom/Kconfig | 15 +- drivers/pinctrl/qcom/Makefile | 1 - drivers/pinctrl/qcom/pinctrl-lpass-lpi.c | 17 ++ drivers/pinctrl/qcom/pinctrl-sc7280-lpass-lpi.c | 3 + drivers/pinctrl/qcom/pinctrl-sm8350-lpass-lpi.c | 167 -------------------- drivers/scsi/be2iscsi/be_mgmt.c | 1 + drivers/scsi/qla2xxx/qla_os.c | 2 +- drivers/target/sbp/sbp_target.c | 4 +- fs/btrfs/relocation.c | 13 ++ fs/efivarfs/vars.c | 2 +- fs/fs-writeback.c | 14 +- fs/smb/server/mgmt/user_session.c | 21 ++- fs/smb/server/smb2pdu.c | 9 +- fs/smb/server/transport_ipc.c | 12 ++ fs/smb/server/transport_rdma.c | 15 +- include/linux/ptr_ring.h | 17 +- include/linux/sched.h | 5 + include/linux/skb_array.h | 14 +- include/net/bonding.h | 13 +- include/net/nfc/nfc.h | 2 + include/net/xdp_sock.h | 3 - include/net/xsk_buff_pool.h | 2 + kernel/dma/pool.c | 7 +- kernel/events/callchain.c | 2 +- kernel/events/core.c | 6 +- lib/flex_proportions.c | 5 +- mm/kfence/core.c | 23 ++- net/bridge/br_input.c | 2 +- net/core/dev.c | 172 +++++++-------------- net/ipv6/icmp.c | 4 +- net/mac80211/ieee80211_i.h | 4 +- net/mac80211/mlme.c | 7 +- net/mac80211/tdls.c | 11 +- net/mptcp/protocol.c | 13 +- net/nfc/core.c | 27 +++- net/nfc/llcp_commands.c | 17 +- net/nfc/llcp_core.c | 4 +- net/nfc/nci/core.c | 4 +- net/sched/act_ife.c | 6 +- net/sched/sch_generic.c | 4 +- net/xdp/xsk.c | 6 +- net/xdp/xsk_buff_pool.c | 1 + scripts/Makefile.build | 2 +- scripts/generate_rust_analyzer.py | 2 +- sound/soc/amd/yc/acp6x-mach.c | 8 + sound/soc/fsl/imx-card.c | 1 - sound/soc/intel/boards/sof_es8336.c | 2 +- sound/usb/endpoint.c | 3 +- .../bpf/progs/test_select_reuseport_kern.c | 1 - tools/testing/selftests/net/mptcp/mptcp_join.sh | 81 +++++++++- 88 files changed, 576 insertions(+), 543 deletions(-)

7 months, 2 weeks

[PATCH 5.10 000/161] 5.10.249-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.10.249 release. There are 161 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 06 Feb 2026 14:38:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.249-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.10.249-rc1 Johan Hovold <johan(a)kernel.org> drm/imx/tve: fix probe device leak Philipp Zabel <p.zabel(a)pengutronix.de> drm/imx: imx-tve: move initialization into probe Philipp Zabel <p.zabel(a)pengutronix.de> drm/imx: imx-tve: use local encoder and connector variables Henry Martin <bsdhenrymartin(a)gmail.com> HID: uclogic: Add NULL check in uclogic_input_configured() Rahul Rameshbabu <sergeantsagara(a)protonmail.com> HID: uclogic: Correct devm device reference for hidinput input_dev name Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: meson: mark the GPIO controller as sleeping Laveesh Bansal <laveeshb(a)laveeshbansal.com> writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Revert "selftests: Replace sleep with slowwait" Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: typo NULL check in _clone() function Eric Biggers <ebiggers(a)kernel.org> ipv6: sr: Fix MAC comparison to be constant-time Rob Herring (Arm) <robh(a)kernel.org> of: platform: Use default match table for /firmware Marc Kleine-Budde <mkl(a)pengutronix.de> can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak Ian Abbott <abbotti(a)mev.co.uk> comedi: Fix getting range information for subdevices 16 to 255 Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> drm/amdkfd: fix a memory leak in device_queue_manager_init() Pedro Demarchi Gomes <pedrodemargomes(a)gmail.com> ksm: use range-walk function to jump over holes in scan_get_next_rmap_item David Hildenbrand <david(a)redhat.com> mm/pagewalk: add walk_page_range_vma() Yang Yingliang <yangyingliang(a)huawei.com> driver core: fix potential null-ptr-deref in device_add() Alexander Usyskin <alexander.usyskin(a)intel.com> mei: trace: treat reg parameter as string Johan Hovold <johan(a)kernel.org> iio: adc: exynos_adc: fix OF populate on driver rebind Thorsten Blum <thorsten.blum(a)linux.dev> w1: therm: Fix off-by-one buffer overflow in alarms_store Yang Guang <yang.guang5(a)zte.com.cn> w1: w1_therm: use swap() to make code cleaner Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() Johan Hovold <johan(a)kernel.org> dmaengine: stm32: dmamux: fix device leak on route allocation Johan Hovold <johan(a)kernel.org> dmaengine: stm32: dmamux: fix OF node leak on route allocation failure Brian Foster <bfoster(a)redhat.com> xfs: set max_agbno to allow sparse alloc of last full inode chunk Nilay Shroff <nilay(a)linux.ibm.com> nvme: fix PCIe subsystem reset controller state transition Keith Busch <kbusch(a)kernel.org> nvme-pci: do not directly handle subsys reset fallout Daniel Wagner <dwagner(a)suse.de> nvme-fc: rename free_ctrl callback to match name pattern Chen Ni <nichen(a)iscas.ac.cn> net/sched: act_ife: convert comma to semicolon Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() Sai Sree Kartheek Adivi <s-adivi(a)ti.com> dma/pool: distinguish between missing and exhausted atomic pools Kery Qi <qikeyu2017(a)gmail.com> scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() Martin Kaiser <martin(a)kaiser.cx> net: bridge: fix static key check Kuniyuki Iwashima <kuniyu(a)google.com> nfc: nci: Fix race between rfkill and nci_unregister_device(). Gal Pressman <gal(a)nvidia.com> net/mlx5e: Account for netdev stats in ndo_get_stats64 Yafang Shao <laoar.shao(a)gmail.com> net/mlx5e: Report rx_discards_phy via rx_dropped Gal Pressman <gal(a)nvidia.com> net/mlx5e: Expose rx_oversize_pkts_buffer counter Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Add HW definitions of vport debug counters Jesse Brandeburg <jbrandeburg(a)cloudflare.com> ice: stop counting UDP csum mismatch as rx_errors Kuniyuki Iwashima <kuniyu(a)google.com> nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). Kery Qi <qikeyu2017(a)gmail.com> rocker: fix memory leak in rocker_world_port_post_fini() Zilin Guan <zilin(a)seu.edu.cn> net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() Zilin Guan <zilin(a)seu.edu.cn> net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() Jia-Hong Su <s11242586(a)gmail.com> Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work Jiri Slaby (SUSE) <jirislaby(a)kernel.org> fbcon: always restore the old font data in fbcon_do_set_font() Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> fbdev: fbcon: release buffer when fbcon_do_set_font() failed Shigeru Yoshida <syoshida(a)redhat.com> fbdev: fbcon: Properly revert changes when vc_resize() failed Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Reject narrower access to pointer ctx fields Daniel Borkmann <daniel(a)iogearbox.net> bpf: Do not let BPF test infra emit invalid GSO types to stack Matthew Wilcox (Oracle) <willy(a)infradead.org> migrate: correct lock ordering for hugetlb file folios Marc Kleine-Budde <mkl(a)pengutronix.de> can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak Arnd Bergmann <arnd(a)arndb.de> irqchip/gic-v3-its: Avoid truncating memory addresses Fernand Sieber <sieberf(a)amazon.com> perf/x86/intel: Do not enable BTS for guests Jeongjun Park <aha310510(a)gmail.com> netrom: fix double-free in nr_route_frame() Chenghai Huang <huangchenghai2(a)huawei.com> uacce: ensure safe queue release with state management Yang Shen <shenyang39(a)huawei.com> uacce: implement mremap in uacce_vm_ops to return -EPERM Wenkai Lin <linwenkai6(a)hisilicon.com> uacce: fix cdev handling in the cleanup path Johan Hovold <johan(a)kernel.org> intel_th: fix device leak on output open() Johan Hovold <johan(a)kernel.org> slimbus: core: fix device reference leak on report present Johan Hovold <johan(a)kernel.org> slimbus: core: fix runtime PM imbalance on report present Thomas Fourier <fourier.thomas(a)gmail.com> octeontx2: Fix otx2_dma_map_page() error return code Marek Vasut <marex(a)nabladev.com> wifi: rsi: Fix memory corruption due to not set vif driver data size Dan Carpenter <dan.carpenter(a)linaro.org> wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() Thomas Fourier <fourier.thomas(a)gmail.com> wifi: ath10k: fix dma_free_coherent() pointer Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix potential OOB access in audio mixer handling Kübrich, Andreas <andreas.kuebrich(a)spektra-dresden.de> iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl Pei Xiao <xiaopei01(a)kylinos.cn> iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver Tomas Melin <tomas.melin(a)vaisala.com> iio: adc: ad9467: fix ad9434 vref mask Weigang He <geoffreyhe2(a)gmail.com> of: fix reference count leak in of_alias_scan() Hans de Goede <johannes.goede(a)oss.qualcomm.com> leds: led-class: Only Add LED to leds_list when it is fully ready Eric Dumazet <edumazet(a)google.com> net/sched: act_ife: avoid possible NULL deref Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Fix error handling Eric Dumazet <edumazet(a)google.com> bonding: provide a net pointer to __skb_flow_dissect() Andrey Vatoropin <a.vatoropin(a)crpt.ru> be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Don't clear SI SMC table when setting power limit Xiang Chen <chenxiang66(a)hisilicon.com> scsi: hisi_sas: Use managed PCI functions Laurent Vivier <lvivier(a)redhat.com> usbnet: limit max_mtu based on device's hard_mtu Eric Dumazet <edumazet(a)google.com> mISDN: annotate data-race around dev->work Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M Arun Raghavan <arunr(a)valvesoftware.com> ALSA: usb: Increase volume range that triggers a warning David Jeffery <djeffery(a)redhat.com> scsi: core: Wake up the error handler when final completions race against each other Cheng-Yu Lee <cylee12(a)realtek.com> regmap: Fix race condition in hwspinlock irqsave routine Pavel Zhigulin <Pavel.Zhigulin(a)kaspersky.com> iio: adc: ad7280a: handle spi_setup() errors in probe() Jonathan Cameron <Jonathan.Cameron(a)huawei.com> staging:iio:adc:ad7280a: Register define cleanup. Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection Long Li <longli(a)microsoft.com> scsi: storvsc: Process unsupported MODE_SENSE_10 feng <alec.jiang(a)gmail.com> Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA gongqi <550230171hxy(a)gmail.com> Input: i8042 - add quirks for MECHREVO Wujie 15X Pro Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> w1: fix redundant counter decrement in w1_attach_slave_device() Ian Abbott <abbotti(a)mev.co.uk> comedi: dmm32at: serialize use of paged registers Taeyang Lee <0wn(a)theori.io> crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: Enforce that teql can only be used as root qdisc Dmitry Skorodumov <dskr99(a)gmail.com> ipvlan: Make the addrs_lock be per port Eric Dumazet <edumazet(a)google.com> l2tp: avoid one data-race in l2tp_tunnel_del_work() Kuniyuki Iwashima <kuniyu(a)google.com> fou: Don't allow 0 for FOU_ATTR_IPPROTO. Jakub Kicinski <kuba(a)kernel.org> net: fou: use policy and operation tables generated from the spec Jakub Kicinski <kuba(a)kernel.org> net: fou: rename the source for linking Jakub Kicinski <kuba(a)kernel.org> netlink: add a proto specification for FOU Kuniyuki Iwashima <kuniyu(a)google.com> gue: Fix skb memleak with inner IP protocol 0. Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: avoid misleading per-packet error log Xin Long <lucien.xin(a)gmail.com> sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT Zheng Yongjun <zhengyongjun3(a)huawei.com> sctp: sm_statefuns: Fix spelling mistakes Ricardo B. Marlière <rbm(a)suse.com> selftests: net: fib-onlink-tests: Convert to use namespaces by default Hangbin Liu <liuhangbin(a)gmail.com> selftests/net: convert fib-onlink-tests.sh to run it in unique namespace Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: usb: dm9601: remove broken SR9700 support Wojtek Wasko <wwasko(a)nvidia.com> ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. Wojtek Wasko <wwasko(a)nvidia.com> posix-clock: Store file pointer in struct posix_clock_context Linus Torvalds <torvalds(a)linux-foundation.org> Fix memory leak in posix_clock_open() Xabier Marquiegui <reibax(a)gmail.com> posix-clock: introduce posix_clock_context concept Martin Willi <martin(a)strongswan.org> macvlan: Fix leaking skb in source mode with nodst option Robbie Ko <robbieko(a)synology.com> btrfs: fix deadlock in wait_current_trans() due to ignored transaction type Johan Hovold <johan(a)kernel.org> dmaengine: ti: k3-udma: fix device leak on udma lookup Johan Hovold <johan(a)kernel.org> dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Johan Hovold <johan(a)kernel.org> dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation Johan Hovold <johan(a)kernel.org> dmaengine: lpc18xx-dmamux: fix device leak on route allocation Johan Hovold <johan(a)kernel.org> dmaengine: bcm-sba-raid: fix device leak on probe Johan Hovold <johan(a)kernel.org> dmaengine: at_hdmac: fix device leak on of_dma_xlate() Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() Marek Vasut <marex(a)nabladev.com> drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel Lyude Paul <lyude(a)redhat.com> drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare Xiaochen Shen <shenxiaochen(a)open-hieco.net> x86/resctrl: Add missing resctrl initialization for Hygon Xiaochen Shen <shenxiaochen(a)open-hieco.net> x86/resctrl: Fix memory bandwidth counter width for Hygon Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> EDAC/i3200: Fix a resource leak in i3200_probe1() Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> EDAC/x38: Fix a resource leak in x38_probe1() Yang Erkun <yangerkun(a)huawei.com> ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref Ethan Nelson-Moore <enelsonmoore(a)gmail.com> USB: serial: ftdi_sio: add support for PICAXE AXE027 cable Ulrich Mohr <u.mohr(a)semex-engcon.com> USB: serial: option: add Telit LE910 MBIM composition Huacai Chen <chenhuacai(a)loongson.cn> USB: OHCI/UHCI: Add soft dependencies on ehci_platform Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: dwc3: Check for USB4 IP_NAME Wayne Chang <waynec(a)nvidia.com> phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 Louis Chauvet <louis.chauvet(a)bootlin.com> phy: rockchip: inno-usb2: fix disconnection in gadget mode Luca Ceresoli <luca.ceresoli(a)bootlin.com> phy: rockchip: inno-usb2: fix communication disruption in gadget mode Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts Jaroslav Kysela <perex(a)perex.cz> ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer Benjamin Tissoires <bentiss(a)kernel.org> HID: usbhid: paper over wrong bNumDescriptor field Haotian Zhang <vulab(a)iscas.ac.cn> dmaengine: omap-dma: fix dma_pool resource leak in error paths Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) Dan Carpenter <dan.carpenter(a)linaro.org> phy: stm32-usphyc: Fix off by one in probe() Suraj Gupta <suraj.gupta2(a)amd.com> dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing Sheetal <sheetal(a)nvidia.com> dmaengine: tegra-adma: Fix use-after-free Bagas Sanjaya <bagasdotme(a)gmail.com> textsearch: describe @list member in ts_ops search Emil Svendsen <emas(a)bang-olufsen.dk> ASoC: tlv320adcx140: fix word length Eric Dumazet <edumazet(a)google.com> net/sched: sch_qfq: do not free existing class in qfq_change_class() Stefano Garzarella <sgarzare(a)redhat.com> vsock/test: add a final full barrier after run all tests Eric Dumazet <edumazet(a)google.com> ipv4: ip_gre: make ipgre_header() robust Eric Dumazet <edumazet(a)google.com> macvlan: fix possible UAF in macvlan_forward_source() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> macvlan: Use 'hash' iterators to simplify code Jethro Beekman <kernel(a)jbeekman.nl> macvlan: Add nodst option to macvlan type source Eric Dumazet <edumazet(a)google.com> ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() Qu Wenruo <wqu(a)suse.com> btrfs: send: check for inline extents in range_is_hole_in_parent() Shivam Kumar <kumar.shivam43666(a)gmail.com> nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: remove boilerplate code Zilin Guan <zilin(a)seu.edu.cn> pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() ------------- Diffstat: Documentation/netlink/specs/fou.yaml | 130 ++++++++++ Makefile | 4 +- arch/x86/events/perf_event.h | 13 +- arch/x86/kernel/cpu/resctrl/core.c | 21 +- arch/x86/kernel/cpu/resctrl/internal.h | 3 + crypto/authencesn.c | 6 + drivers/base/core.c | 1 + drivers/base/regmap/regmap.c | 4 +- drivers/bluetooth/hci_ldisc.c | 4 +- drivers/dma/at_hdmac.c | 9 +- drivers/dma/bcm-sba-raid.c | 6 +- drivers/dma/lpc18xx-dmamux.c | 19 +- drivers/dma/stm32-dmamux.c | 22 +- drivers/dma/tegra210-adma.c | 10 +- drivers/dma/ti/dma-crossbar.c | 18 +- drivers/dma/ti/k3-udma-private.c | 2 +- drivers/dma/ti/omap-dma.c | 4 + drivers/dma/xilinx/xilinx_dma.c | 7 +- drivers/edac/i3200_edac.c | 11 +- drivers/edac/x38_edac.c | 9 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 18 +- drivers/gpu/drm/amd/pm/powerplay/si_dpm.c | 23 +- drivers/gpu/drm/imx/imx-tve.c | 70 ++--- drivers/gpu/drm/nouveau/dispnv50/curs507a.c | 1 + drivers/gpu/drm/panel/panel-simple.c | 1 + drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 4 +- drivers/hid/hid-uclogic-core.c | 12 +- drivers/hid/usbhid/hid-core.c | 17 +- drivers/hwtracing/intel_th/core.c | 19 +- drivers/iio/adc/ad9467.c | 2 +- drivers/iio/adc/at91-sama5d2_adc.c | 1 + drivers/iio/adc/exynos_adc.c | 13 +- drivers/iio/dac/ad5686.c | 6 + drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 15 +- drivers/input/serio/i8042-acpipnpio.h | 18 ++ drivers/irqchip/irq-gic-v3-its.c | 8 +- drivers/isdn/mISDN/timerdev.c | 13 +- drivers/leds/led-class.c | 10 +- drivers/misc/mei/mei-trace.h | 18 +- drivers/misc/uacce/uacce.c | 42 ++- drivers/mmc/host/rtsx_pci_sdmmc.c | 41 +++ drivers/net/bonding/bond_main.c | 5 +- drivers/net/can/usb/ems_usb.c | 8 +- drivers/net/can/usb/esd_usb2.c | 9 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 9 +- drivers/net/can/usb/mcba_usb.c | 8 +- drivers/net/can/usb/usb_8dev.c | 8 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 5 +- drivers/net/ethernet/emulex/benet/be_cmds.c | 3 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.h | 2 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 2 +- drivers/net/ethernet/intel/ice/ice_main.c | 1 - drivers/net/ethernet/marvell/mvpp2/mvpp2_cls.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 86 +++++-- .../ethernet/marvell/octeontx2/nic/otx2_common.h | 7 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 22 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 21 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.h | 4 + .../mellanox/mlx5/core/esw/acl/ingress_lgcy.c | 2 +- drivers/net/ethernet/rocker/rocker_main.c | 5 +- drivers/net/ipvlan/ipvlan.h | 2 +- drivers/net/ipvlan/ipvlan_core.c | 16 +- drivers/net/ipvlan/ipvlan_main.c | 49 ++-- drivers/net/macvlan.c | 84 +++--- drivers/net/usb/dm9601.c | 4 - drivers/net/usb/usbnet.c | 9 +- drivers/net/wireless/ath/ath10k/ce.c | 16 +- .../net/wireless/marvell/mwifiex/11n_rxreorder.c | 6 +- drivers/net/wireless/rsi/rsi_91x_mac80211.c | 1 + drivers/nvme/host/fabrics.c | 15 ++ drivers/nvme/host/fabrics.h | 1 + drivers/nvme/host/fc.c | 5 +- drivers/nvme/host/nvme.h | 14 +- drivers/nvme/host/pci.c | 39 +++ drivers/nvme/host/rdma.c | 1 + drivers/nvme/host/tcp.c | 1 + drivers/nvme/target/tcp.c | 28 +- drivers/of/base.c | 8 +- drivers/of/platform.c | 2 +- drivers/phy/broadcom/phy-bcm-ns-usb3.c | 2 +- drivers/phy/rockchip/phy-rockchip-inno-usb2.c | 12 +- drivers/phy/st/phy-stm32-usbphyc.c | 2 +- drivers/phy/tegra/xusb-tegra186.c | 3 + drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/ptp/ptp_chardev.c | 37 ++- drivers/ptp/ptp_private.h | 16 +- drivers/scsi/be2iscsi/be_mgmt.c | 1 + drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 20 +- drivers/scsi/scsi_error.c | 11 +- drivers/scsi/scsi_lib.c | 8 + drivers/scsi/storvsc_drv.c | 3 +- drivers/slimbus/core.c | 19 +- drivers/staging/comedi/comedi.h | 2 +- drivers/staging/comedi/comedi_fops.c | 2 +- drivers/staging/comedi/drivers/dmm32at.c | 32 ++- drivers/staging/comedi/range.c | 2 +- drivers/staging/iio/adc/ad7280a.c | 283 +++++++++++---------- drivers/target/sbp/sbp_target.c | 4 +- drivers/usb/dwc3/core.c | 2 + drivers/usb/dwc3/core.h | 1 + drivers/usb/host/ohci-platform.c | 1 + drivers/usb/host/uhci-platform.c | 1 + drivers/usb/serial/ftdi_sio.c | 1 + drivers/usb/serial/ftdi_sio_ids.h | 2 + drivers/usb/serial/option.c | 1 + drivers/video/fbdev/core/fbcon.c | 34 ++- drivers/w1/slaves/w1_therm.c | 67 ++--- drivers/w1/w1.c | 2 - drivers/xen/xen-scsiback.c | 1 + fs/btrfs/send.c | 2 + fs/btrfs/transaction.c | 11 +- fs/ext4/xattr.c | 1 + fs/fs-writeback.c | 14 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 2 +- fs/xfs/libxfs/xfs_ialloc.c | 11 +- include/linux/mlx5/mlx5_ifc.h | 27 +- include/linux/nvme.h | 3 + include/linux/pagewalk.h | 3 + include/linux/posix-clock.h | 39 ++- include/linux/textsearch.h | 1 + include/net/nfc/nfc.h | 2 + include/sound/pcm.h | 2 +- include/uapi/linux/if_link.h | 1 + kernel/bpf/cgroup.c | 8 +- kernel/dma/pool.c | 7 +- kernel/time/posix-clock.c | 53 ++-- mm/ksm.c | 115 ++++++++- mm/migrate.c | 14 +- mm/pagewalk.c | 20 ++ net/bpf/test_run.c | 5 + net/bridge/br_input.c | 2 +- net/can/j1939/transport.c | 10 +- net/core/filter.c | 25 +- net/ipv4/Makefile | 1 + net/ipv4/{fou.c => fou_core.c} | 50 +--- net/ipv4/fou_nl.c | 48 ++++ net/ipv4/fou_nl.h | 25 ++ net/ipv4/ip_gre.c | 11 +- net/ipv6/ip6_tunnel.c | 2 +- net/ipv6/seg6_hmac.c | 3 +- net/l2tp/l2tp_core.c | 4 +- net/netfilter/nft_connlimit.c | 2 +- net/netrom/nr_route.c | 13 +- net/nfc/core.c | 27 +- net/nfc/llcp_commands.c | 17 +- net/nfc/llcp_core.c | 4 +- net/nfc/nci/core.c | 4 +- net/sched/act_ife.c | 12 +- net/sched/sch_qfq.c | 8 +- net/sched/sch_teql.c | 5 + net/sctp/sm_statefuns.c | 36 +-- sound/core/oss/pcm_oss.c | 4 +- sound/core/pcm_native.c | 9 +- sound/pci/ctxfi/ctamixer.c | 2 + sound/soc/codecs/tlv320adcx140.c | 4 +- sound/usb/mixer.c | 22 +- tools/testing/selftests/net/fcnal-test.sh | 2 +- tools/testing/selftests/net/fib-onlink-tests.sh | 76 +++--- tools/testing/vsock/util.c | 12 + 159 files changed, 1751 insertions(+), 769 deletions(-)

7 months, 2 weeks

[PATCH 6.1 000/280] 6.1.162-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.162 release. There are 280 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 06 Feb 2026 14:38:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.162-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.162-rc1 Marios Makassikis <mmakassikis(a)freebox.fr> ksmbd: fix recursive locking in RPC handle list access Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver Johan Hovold <johan(a)kernel.org> drm/imx/tve: fix probe device leak Laveesh Bansal <laveeshb(a)laveeshbansal.com> writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 Pimyn Girgis <pimyn(a)google.com> mm/kfence: randomize the freelist on initialization Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: avoid dup SUB_CLOSED events after disconnect Chen Ni <nichen(a)iscas.ac.cn> net/sched: act_ife: convert comma to semicolon JP Kobryn <inwardvessel(a)gmail.com> btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() Robert McClinton <rbmccav(a)gmail.com> drm/radeon: delete radeon_fence_process in is_signaled, no deadlock Mike Christie <michael.christie(a)oracle.com> vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint Yunseong Kim <ysk(a)kzalloc.com> ksmbd: Fix race condition in RPC handle list access Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in ksmbd_session_rpc_open Xin Long <lucien.xin(a)gmail.com> sctp: linearize cloned gso packets in sctp_rcv Alexis Lothoré <alexis.lothore(a)bootlin.com> net: stmmac: make sure that ptp_rate is not 0 before configuring EST Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV Zqiang <qiang.zhang(a)linux.dev> usbnet: Fix using smp_processor_id() in preemptible code warnings Maninder Singh <maninder1.s(a)samsung.com> NFSD: fix race between nfsd registration and exports_proc Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Fix NULL pointer dereference in gfs2_log_flush Gavin Li <gavinl(a)nvidia.com> Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" Waiman Long <longman(a)redhat.com> blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() Bartlomiej Kubik <kubik.bartlomiej(a)gmail.com> fs/ntfs3: Initialize allocated memory before use Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> iomap: Fix possible overflow condition in iomap_write_delalloc_scan Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - flush misc workqueue during device shutdown Alex Hung <alex.hung(a)amd.com> drm/amd/display: Check dce_hwseq before dereferencing it Harry Yoo <harry.yoo(a)oracle.com> Revert "mm/mprotect: delete pmd_none_or_clear_bad_unless_trans_huge()" Marc Kleine-Budde <mkl(a)pengutronix.de> can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> drm/amdkfd: fix a memory leak in device_queue_manager_init() Gyeyoung Baek <gye976(a)gmail.com> genirq/irq_sim: Initialize work context pointers properly Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: move TDLS work to wiphy work Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: use wiphy work for sdata->work Nikola Z. Ivanov <zlatistiv(a)gmail.com> team: Move team device type change at the end of team_port_add Sean Christopherson <seanjc(a)google.com> x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 Johan Hovold <johan(a)kernel.org> ASoC: codecs: wsa883x: fix unnecessary initialisation Johan Hovold <johan(a)kernel.org> ASoC: codecs: wsa881x: fix unnecessary initialisation Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa881x: Drop unused version readout Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa881x: Use proper shutdown GPIO polarity Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> ASoC: codecs: wsa881x: Simplify &pdev->dev in probe Wentao Liang <vulab(a)iscas.ac.cn> phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() Dragan Simic <dsimic(a)manjaro.org> phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path Sebastian Reichel <sebastian.reichel(a)collabora.com> phy: phy-rockchip-inno-usb2: simplify phy clock handling Nilay Shroff <nilay(a)linux.ibm.com> nvme: fix PCIe subsystem reset controller state transition Keith Busch <kbusch(a)kernel.org> nvme-pci: do not directly handle subsys reset fallout Daniel Wagner <dwagner(a)suse.de> nvme-fc: rename free_ctrl callback to match name pattern Fiona Klute <fiona.klute(a)gmx.de> iio: chemical: scd4x: fix reported channel endianness Johan Hovold <johan(a)kernel.org> iio: adc: exynos_adc: fix OF populate on driver rebind Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> ALSA: scarlett2: Fix buffer overflow in config retrieval Shawn Lin <shawn.lin(a)rock-chips.com> mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode Shawn Lin <shawn.lin(a)rock-chips.com> mmc: sdhci-of-dwcmshc: Update DLL and pre-change delay for rockchip platform Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Fix restoration of SVE context Alexander Usyskin <alexander.usyskin(a)intel.com> mei: trace: treat reg parameter as string Thomas Fourier <fourier.thomas(a)gmail.com> ksmbd: smbd: fix dma_unmap_sg() nents Ming Qian <ming.qian(a)oss.nxp.com> pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu Brian Foster <bfoster(a)redhat.com> xfs: set max_agbno to allow sparse alloc of last full inode chunk Ryan Roberts <ryan.roberts(a)arm.com> mm: kmsan: fix poisoning of high-order non-compound pages Johan Hovold <johan(a)kernel.org> dmaengine: stm32: dmamux: fix device leak on route allocation Vlastimil Babka <vbabka(a)suse.cz> mm/page_alloc: prevent pcp corruption with SMP=n Johan Hovold <johan(a)kernel.org> dmaengine: stm32: dmamux: fix OF node leak on route allocation failure Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() Dawei Li <set_pte_at(a)outlook.com> xen: make remove callback of xen driver void returned Geraldo Nascimento <geraldogabriel(a)gmail.com> arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s David Hildenbrand (Red Hat) <david(a)kernel.org> mm/rmap: fix two comments related to huge_pmd_unshare() Robin Murphy <robin.murphy(a)arm.com> gpio: rockchip: Stop calling pinctrl for set_direction Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: fix wptr reset in KGQ init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx10: fix wptr reset in KGQ init Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/soc21: fix xclk for APUs Tamir Duberstein <tamird(a)kernel.org> scripts: generate_rust_analyzer: Add compiler_builtins -> core dep Jan Kara <jack(a)suse.cz> flex_proportions: make fprop_new_period() hardirq safe Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: only reset subflow errors when propagated Kohei Enju <kohei(a)enjuk.jp> efivarfs: fix error propagation in efivar_entry_get() Thomas Fourier <fourier.thomas(a)gmail.com> scsi: qla2xxx: edif: Fix dma_free_coherent() size Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() Fabio Estevam <festevam(a)gmail.com> ASoC: fsl: imx-card: Do not force slot width to sample width Han Gao <gaohan(a)iscas.ac.cn> riscv: compat: fix COMPAT_UTS_MACHINE definition Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: meson: mark the GPIO controller as sleeping Sai Sree Kartheek Adivi <s-adivi(a)ti.com> dma/pool: distinguish between missing and exhausted atomic pools Denis Sergeev <denserg.edu(a)gmail.com> gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler Tagir Garaev <tgaraev653(a)gmail.com> ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion Kery Qi <qikeyu2017(a)gmail.com> scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() Martin Kaiser <martin(a)kaiser.cx> net: bridge: fix static key check Kuniyuki Iwashima <kuniyu(a)google.com> nfc: nci: Fix race between rfkill and nci_unregister_device(). Gal Pressman <gal(a)nvidia.com> net/mlx5e: Account for netdev stats in ndo_get_stats64 Yafang Shao <laoar.shao(a)gmail.com> net/mlx5e: Report rx_discards_phy via rx_dropped Jesse Brandeburg <jbrandeburg(a)cloudflare.com> ice: stop counting UDP csum mismatch as rx_errors Kuniyuki Iwashima <kuniyu(a)google.com> nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). Kery Qi <qikeyu2017(a)gmail.com> rocker: fix memory leak in rocker_world_port_post_fini() Kery Qi <qikeyu2017(a)gmail.com> net: wwan: t7xx: fix potential skb->frags overflow in RX path Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: use the right ifindex when replying to icmpv6 from localhost Zilin Guan <zilin(a)seu.edu.cn> net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() Eric Dumazet <edumazet(a)google.com> bonding: annotate data-races around slave->last_rx Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): fix error message Zilin Guan <zilin(a)seu.edu.cn> net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() Jia-Hong Su <s11242586(a)gmail.com> Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Reject narrower access to pointer ctx fields Daniel Borkmann <daniel(a)iogearbox.net> bpf: Do not let BPF test infra emit invalid GSO types to stack Matthew Wilcox (Oracle) <willy(a)infradead.org> migrate: correct lock ordering for hugetlb file folios Marc Kleine-Budde <mkl(a)pengutronix.de> can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak Arnd Bergmann <arnd(a)arndb.de> irqchip/gic-v3-its: Avoid truncating memory addresses Fernand Sieber <sieberf(a)amazon.com> perf/x86/intel: Do not enable BTS for guests Jeongjun Park <aha310510(a)gmail.com> netrom: fix double-free in nr_route_frame() Chenghai Huang <huangchenghai2(a)huawei.com> uacce: ensure safe queue release with state management Yang Shen <shenyang39(a)huawei.com> uacce: implement mremap in uacce_vm_ops to return -EPERM Wenkai Lin <linwenkai6(a)hisilicon.com> uacce: fix cdev handling in the cleanup path Johan Hovold <johan(a)kernel.org> intel_th: fix device leak on output open() Johan Hovold <johan(a)kernel.org> slimbus: core: fix device reference leak on report present Johan Hovold <johan(a)kernel.org> slimbus: core: fix runtime PM imbalance on report present Thomas Fourier <fourier.thomas(a)gmail.com> octeontx2: Fix otx2_dma_map_page() error return code Zhaoyang Huang <zhaoyang.huang(a)unisoc.com> arm64: Set __nocfi on swsusp_arch_resume() Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA Marek Vasut <marex(a)nabladev.com> wifi: rsi: Fix memory corruption due to not set vif driver data size Dan Carpenter <dan.carpenter(a)linaro.org> wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() Thomas Fourier <fourier.thomas(a)gmail.com> wifi: ath10k: fix dma_free_coherent() pointer Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix potential OOB access in audio mixer handling Kübrich, Andreas <andreas.kuebrich(a)spektra-dresden.de> iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl Pei Xiao <xiaopei01(a)kylinos.cn> iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver Tomas Melin <tomas.melin(a)vaisala.com> iio: adc: ad9467: fix ad9434 vref mask Rob Herring (Arm) <robh(a)kernel.org> of: platform: Use default match table for /firmware Weigang He <geoffreyhe2(a)gmail.com> of: fix reference count leak in of_alias_scan() Hans de Goede <johannes.goede(a)oss.qualcomm.com> leds: led-class: Only Add LED to leds_list when it is fully ready Cedric Xing <cedric.xing(a)intel.com> x86: make page fault handling disable interrupts properly Eric Dumazet <edumazet(a)google.com> net/sched: act_ife: avoid possible NULL deref Melbin K Mathew <mlbnkm1(a)gmail.com> vsock/virtio: cap TX credit to local buffer size Melbin K Mathew <mlbnkm1(a)gmail.com> vsock/virtio: fix potential underflow in virtio_transport_get_credit() Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Fix error handling Eric Dumazet <edumazet(a)google.com> bonding: provide a net pointer to __skb_flow_dissect() Taehee Yoo <ap420073(a)gmail.com> selftests: net: amt: wait longer for connection before sending packets Andrey Vatoropin <a.vatoropin(a)crpt.ru> be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Don't clear SI SMC table when setting power limit Laurent Vivier <lvivier(a)redhat.com> usbnet: limit max_mtu based on device's hard_mtu Eric Dumazet <edumazet(a)google.com> ipv6: annotate data-race in ndisc_router_discovery() Eric Dumazet <edumazet(a)google.com> mISDN: annotate data-race around dev->work Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M Yun Lu <luyun(a)kylinos.cn> netdevsim: fix a race issue related to the operation on bpf_bound_progs list Arun Raghavan <arunr(a)valvesoftware.com> ALSA: usb: Increase volume range that triggers a warning David Jeffery <djeffery(a)redhat.com> scsi: core: Wake up the error handler when final completions race against each other Naohiko Shimizu <naohiko.shimizu(a)gmail.com> riscv: clocksource: Fix stimecmp update hazard on RV32 Arkadiusz Kozdra <floss(a)arusekk.pl> kconfig: fix static linking of nconf Masahiro Yamada <masahiroy(a)kernel.org> kconfig: refactor Makefile to reduce process forks Cheng-Yu Lee <cylee12(a)realtek.com> regmap: Fix race condition in hwspinlock irqsave routine Felix Gu <gu_0233(a)qq.com> spi: spi-sprd-adi: Fix double free in probe error path Yang Yingliang <yangyingliang(a)huawei.com> spi: sprd-adi: switch to use spi_alloc_host() Andrew Davis <afd(a)ti.com> spi: sprd: adi: Use devm_register_restart_handler() Yang Li <yang.lee(a)linux.alibaba.com> spi: sprd-adi: Use devm_platform_get_and_ioremap_resource() Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> spi: sprd-adi: Convert to platform remove callback returning void Pavel Zhigulin <Pavel.Zhigulin(a)kaspersky.com> iio: adc: ad7280a: handle spi_setup() errors in probe() Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection Ian Abbott <abbotti(a)mev.co.uk> comedi: Fix getting range information for subdevices 16 to 255 Andrew Cooper <andrew.cooper3(a)citrix.com> x86/kfence: avoid writing L1TF-vulnerable PTEs Geraldo Nascimento <geraldogabriel(a)gmail.com> arm64: dts: rockchip: remove dangerous max-link-speed from helios64 Long Li <longli(a)microsoft.com> scsi: storvsc: Process unsupported MODE_SENSE_10 feng <alec.jiang(a)gmail.com> Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA gongqi <550230171hxy(a)gmail.com> Input: i8042 - add quirks for MECHREVO Wujie 15X Pro Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> Revert "nfc/nci: Add the inconsistency check between the input data length and count" Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> w1: fix redundant counter decrement in w1_attach_slave_device() Thorsten Blum <thorsten.blum(a)linux.dev> w1: therm: Fix off-by-one buffer overflow in alarms_store Ian Abbott <abbotti(a)mev.co.uk> comedi: dmm32at: serialize use of paged registers Marnix Rijnart <marnix.rijnart(a)iwell.eu> serial: 8250_pci: Fix broken RS485 for F81504/508/512 Taeyang Lee <0wn(a)theori.io> crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: Enforce that teql can only be used as root qdisc Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2: cn10k: fix RX flowid TCAM mask handling Dmitry Skorodumov <dskr99(a)gmail.com> ipvlan: Make the addrs_lock be per port Eric Dumazet <edumazet(a)google.com> l2tp: avoid one data-race in l2tp_tunnel_del_work() Kuniyuki Iwashima <kuniyu(a)google.com> fou: Don't allow 0 for FOU_ATTR_IPPROTO. Jakub Kicinski <kuba(a)kernel.org> net: fou: use policy and operation tables generated from the spec Jakub Kicinski <kuba(a)kernel.org> net: fou: rename the source for linking Jakub Kicinski <kuba(a)kernel.org> netlink: add a proto specification for FOU Kuniyuki Iwashima <kuniyu(a)google.com> gue: Fix skb memleak with inner IP protocol 0. Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: avoid misleading per-packet error log Xin Long <lucien.xin(a)gmail.com> sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error Ricardo B. Marlière <rbm(a)suse.com> selftests: net: fib-onlink-tests: Convert to use namespaces by default Hangbin Liu <liuhangbin(a)gmail.com> selftests/net: convert fib-onlink-tests.sh to run it in unique namespace Eric Dumazet <edumazet(a)google.com> bonding: limit BOND_MODE_8023AD to Ethernet devices Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: usb: dm9601: remove broken SR9700 support Niklas Cassel <cassel(a)kernel.org> ata: libata: Print features also for ATAPI devices Niklas Cassel <cassel(a)kernel.org> ata: libata: Call ata_dev_config_lpm() for ATAPI devices Damien Le Moal <dlemoal(a)kernel.org> ata: libata-core: Introduce ata_dev_config_lpm() Damien Le Moal <damien.lemoal(a)opensource.wdc.com> ata: libata: cleanup fua support detection Damien Le Moal <damien.lemoal(a)opensource.wdc.com> ata: libata: Introduce ata_ncq_supported() Niklas Cassel <cassel(a)kernel.org> ata: libata: Add cpr_log to ata_dev_print_features() early return Mark Harmstone <mark(a)harmstone.com> btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links Wojtek Wasko <wwasko(a)nvidia.com> testptp: Add option to open PHC in readonly mode Mahesh Bandewar <maheshb(a)google.com> selftest/ptp: update ptp selftest to exercise the gettimex options Xabier Marquiegui <reibax(a)gmail.com> ptp: add testptp mask test Alex Maftei <alex.maftei(a)amd.com> selftests/ptp: Add -X option for testing PTP_SYS_OFFSET_PRECISE Alex Maftei <alex.maftei(a)amd.com> selftests/ptp: Add -x option for testing PTP_SYS_OFFSET_EXTENDED Rahul Rameshbabu <rrameshbabu(a)nvidia.com> testptp: Add support for testing ptp_clock_info .adjphase callback Wojtek Wasko <wwasko(a)nvidia.com> ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. Wojtek Wasko <wwasko(a)nvidia.com> posix-clock: Store file pointer in struct posix_clock_context Linus Torvalds <torvalds(a)linux-foundation.org> Fix memory leak in posix_clock_open() Xabier Marquiegui <reibax(a)gmail.com> posix-clock: introduce posix_clock_context concept Ming Lei <ming.lei(a)redhat.com> io_uring: move local task_work in exit cancel loop Robbie Ko <robbieko(a)synology.com> btrfs: fix deadlock in wait_current_trans() due to ignored transaction type Johan Hovold <johan(a)kernel.org> dmaengine: ti: k3-udma: fix device leak on udma lookup Johan Hovold <johan(a)kernel.org> dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Johan Hovold <johan(a)kernel.org> dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation Biju Das <biju.das.jz(a)bp.renesas.com> dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() Miaoqian Lin <linmq006(a)gmail.com> dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() Johan Hovold <johan(a)kernel.org> dmaengine: lpc18xx-dmamux: fix device leak on route allocation Johan Hovold <johan(a)kernel.org> dmaengine: idxd: fix device leaks on compat bind and unbind Johan Hovold <johan(a)kernel.org> dmaengine: dw: dmamux: fix OF node leak on route allocation failure Johan Hovold <johan(a)kernel.org> dmaengine: bcm-sba-raid: fix device leak on probe Johan Hovold <johan(a)kernel.org> dmaengine: at_hdmac: fix device leak on of_dma_xlate() Janne Grunau <j(a)jannau.net> dmaengine: apple-admac: Add "apple,t8103-admac" compatible Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() Marek Vasut <marex(a)nabladev.com> drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel Lyude Paul <lyude(a)redhat.com> drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare Mario Limonciello (AMD) <superm1(a)kernel.org> drm/amd: Clean up kfd node on surprise disconnect Lisa Robinson <lisa(a)bytefly.space> LoongArch: Fix PMU counter allocation for mixed-type event groups SeongJae Park <sj(a)kernel.org> mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure Aboorva Devarajan <aboorvad(a)linux.ibm.com> mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free Xiaochen Shen <shenxiaochen(a)open-hieco.net> x86/resctrl: Fix memory bandwidth counter width for Hygon Xiaochen Shen <shenxiaochen(a)open-hieco.net> x86/resctrl: Add missing resctrl initialization for Hygon Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> EDAC/i3200: Fix a resource leak in i3200_probe1() Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> EDAC/x38: Fix a resource leak in x38_probe1() Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> hrtimer: Fix softirq base check in update_needs_ipi() Yang Erkun <yangerkun(a)huawei.com> ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref Ilikara Zheng <ilikara(a)aosc.io> nvme-pci: disable secondary temp for Wodposit WPBSNM8 Ethan Nelson-Moore <enelsonmoore(a)gmail.com> USB: serial: ftdi_sio: add support for PICAXE AXE027 cable Ulrich Mohr <u.mohr(a)semex-engcon.com> USB: serial: option: add Telit LE910 MBIM composition Huacai Chen <chenhuacai(a)kernel.org> USB: OHCI/UHCI: Add soft dependencies on ehci_platform Johannes Brüderl <johannes.bruederl(a)gmail.com> usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: dwc3: Check for USB4 IP_NAME Wayne Chang <waynec(a)nvidia.com> phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 Louis Chauvet <louis.chauvet(a)bootlin.com> phy: rockchip: inno-usb2: fix disconnection in gadget mode Rafael Beims <rafael.beims(a)toradex.com> phy: freescale: imx8m-pcie: assert phy reset during power on Luca Ceresoli <luca.ceresoli(a)bootlin.com> phy: rockchip: inno-usb2: fix communication disruption in gadget mode Dan Williams <dan.j.williams(a)intel.com> x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts Ondrej Ille <ondrej.ille(a)gmail.com> can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak Jaroslav Kysela <perex(a)perex.cz> ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer Brian Kao <powenkao(a)google.com> scsi: core: Fix error handler encryption support Benjamin Tissoires <bentiss(a)kernel.org> HID: usbhid: paper over wrong bNumDescriptor field Haotian Zhang <vulab(a)iscas.ac.cn> dmaengine: omap-dma: fix dma_pool resource leak in error paths Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) Dan Carpenter <dan.carpenter(a)linaro.org> phy: stm32-usphyc: Fix off by one in probe() Suraj Gupta <suraj.gupta2(a)amd.com> dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing Sheetal <sheetal(a)nvidia.com> dmaengine: tegra-adma: Fix use-after-free Bagas Sanjaya <bagasdotme(a)gmail.com> mm, kfence: describe @slab parameter in __kfence_obj_info() Bagas Sanjaya <bagasdotme(a)gmail.com> textsearch: describe @list member in ts_ops search Emil Svendsen <emas(a)bang-olufsen.dk> ASoC: tlv320adcx140: fix word length Emil Svendsen <emas(a)bang-olufsen.dk> ASoC: tlv320adcx140: fix null pointer Eric Dumazet <edumazet(a)google.com> net/sched: sch_qfq: do not free existing class in qfq_change_class() Gal Pressman <gal(a)nvidia.com> selftests: drv-net: fix RPS mask handling for high CPU numbers Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Fix use-after-free in inet6_addr_del(). Aditya Garg <gargaditya(a)linux.microsoft.com> net: hv_netvsc: reject RSS hash key programming without RX indirection table Shradha Gupta <shradhagupta(a)linux.microsoft.com> hv_netvsc: Allocate rx indirection table size dynamically Jiasheng Jiang <jiashengjiangcool(a)gmail.com> btrfs: fix memory leaks in create_space_info() error paths Naohiro Aota <naohiro.aota(a)wdc.com> btrfs: introduce btrfs_space_info sub-group Naohiro Aota <naohiro.aota(a)wdc.com> btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() Naohiro Aota <naohiro.aota(a)wdc.com> btrfs: factor out init_space_info() from create_space_info() Boris Burkov <boris(a)bur.io> btrfs: store fs_info in space_info Josef Bacik <josef(a)toxicpanda.com> btrfs: move flush related definitions to space-info.h Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5e: Restore destroying state bit after profile cleanup Stefano Garzarella <sgarzare(a)redhat.com> vsock/test: add a final full barrier after run all tests Eric Dumazet <edumazet(a)google.com> ipv4: ip_gre: make ipgre_header() robust Eric Dumazet <edumazet(a)google.com> macvlan: fix possible UAF in macvlan_forward_source() Eric Dumazet <edumazet(a)google.com> net: update netdev_lock_{type,name} Eric Dumazet <edumazet(a)google.com> ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() Qu Wenruo <wqu(a)suse.com> btrfs: send: check for inline extents in range_is_hole_in_parent() Shivam Kumar <kumar.shivam43666(a)gmail.com> nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: remove boilerplate code Szymon Wilczek <swilczek.lx(a)gmail.com> can: etas_es58x: allow partial RX URB allocation to succeed Zilin Guan <zilin(a)seu.edu.cn> pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() Jianbo Liu <jianbol(a)nvidia.com> xfrm: Fix inner mode lookup in tunnel mode GSO segmentation Andreas Gruenbacher <agruenba(a)redhat.com> Revert "gfs2: Fix use of bio_chain" Morduan Zang <zhangdandan(a)uniontech.com> efi/cper: Fix cper_bits_to_str buffer handling and return value Peng Fan <peng.fan(a)nxp.com> firmware: imx: scu-irq: Set mu_resource_id before get handle ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 3 + Documentation/netlink/specs/fou.yaml | 130 ++++++++++++++ Makefile | 4 +- arch/arm64/boot/dts/qcom/sc8280xp.dtsi | 16 +- .../boot/dts/rockchip/rk3399-kobol-helios64.dts | 1 - arch/arm64/boot/dts/rockchip/rk3399-nanopi-r4s.dts | 1 - arch/arm64/kernel/hibernate.c | 2 +- arch/arm64/kernel/signal.c | 26 ++- arch/loongarch/kernel/perf_event.c | 21 ++- arch/riscv/include/asm/compat.h | 2 +- arch/x86/events/perf_event.h | 13 +- arch/x86/include/asm/kfence.h | 29 ++- arch/x86/kernel/cpu/resctrl/core.c | 21 ++- arch/x86/kernel/cpu/resctrl/internal.h | 3 + arch/x86/kernel/fpu/core.c | 32 +++- arch/x86/kvm/x86.c | 9 + arch/x86/mm/fault.c | 15 +- arch/x86/mm/kaslr.c | 10 +- block/blk-cgroup.c | 4 + crypto/authencesn.c | 6 + drivers/ata/libata-core.c | 62 ++++++- drivers/ata/libata-scsi.c | 30 +--- drivers/base/regmap/regmap.c | 4 +- drivers/block/xen-blkback/xenbus.c | 4 +- drivers/block/xen-blkfront.c | 3 +- drivers/bluetooth/hci_ldisc.c | 4 +- drivers/char/tpm/xen-tpmfront.c | 3 +- drivers/clocksource/timer-riscv.c | 3 +- drivers/comedi/comedi_fops.c | 2 +- drivers/comedi/drivers/dmm32at.c | 32 +++- drivers/comedi/range.c | 2 +- drivers/crypto/qat/qat_common/adf_common_drv.h | 1 + drivers/crypto/qat/qat_common/adf_init.c | 1 + drivers/crypto/qat/qat_common/adf_isr.c | 5 + drivers/dma/apple-admac.c | 1 + drivers/dma/at_hdmac.c | 9 +- drivers/dma/bcm-sba-raid.c | 6 +- drivers/dma/dw/rzn1-dmamux.c | 4 +- drivers/dma/idxd/compat.c | 23 ++- drivers/dma/lpc18xx-dmamux.c | 19 +- drivers/dma/qcom/gpi.c | 6 +- drivers/dma/sh/rz-dmac.c | 5 + drivers/dma/stm32-dmamux.c | 22 ++- drivers/dma/tegra210-adma.c | 10 +- drivers/dma/ti/dma-crossbar.c | 18 +- drivers/dma/ti/k3-udma-private.c | 2 +- drivers/dma/ti/omap-dma.c | 4 + drivers/dma/xilinx/xilinx_dma.c | 7 +- drivers/edac/i3200_edac.c | 11 +- drivers/edac/x38_edac.c | 9 +- drivers/firmware/efi/cper.c | 2 +- drivers/firmware/imx/imx-scu-irq.c | 24 +-- drivers/gpio/gpio-rockchip.c | 8 - drivers/gpio/gpiolib-acpi.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h | 3 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/soc21.c | 8 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 18 +- .../amd/display/dc/dce110/dce110_hw_sequencer.c | 3 +- drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 23 +-- drivers/gpu/drm/imx/imx-tve.c | 13 ++ drivers/gpu/drm/nouveau/dispnv50/curs507a.c | 1 + drivers/gpu/drm/panel/panel-simple.c | 1 + drivers/gpu/drm/radeon/radeon_fence.c | 8 - drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 4 +- drivers/gpu/drm/xen/xen_drm_front.c | 3 +- drivers/hid/usbhid/hid-core.c | 17 +- drivers/hwtracing/intel_th/core.c | 19 +- drivers/iio/adc/ad7280a.c | 4 +- drivers/iio/adc/ad9467.c | 2 +- drivers/iio/adc/at91-sama5d2_adc.c | 1 + drivers/iio/adc/exynos_adc.c | 13 +- drivers/iio/chemical/scd4x.c | 6 +- drivers/iio/dac/ad5686.c | 6 + drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 15 +- drivers/input/misc/xen-kbdfront.c | 5 +- drivers/input/serio/i8042-acpipnpio.h | 18 ++ drivers/irqchip/irq-gic-v3-its.c | 8 +- drivers/isdn/mISDN/timerdev.c | 13 +- drivers/leds/led-class.c | 10 +- drivers/misc/mei/mei-trace.h | 18 +- drivers/misc/uacce/uacce.c | 42 ++++- drivers/mmc/host/rtsx_pci_sdmmc.c | 41 +++++ drivers/mmc/host/sdhci-of-dwcmshc.c | 20 ++- drivers/net/bonding/bond_main.c | 29 +-- drivers/net/bonding/bond_options.c | 8 +- drivers/net/can/ctucanfd/ctucanfd_base.c | 2 +- drivers/net/can/usb/ems_usb.c | 8 +- drivers/net/can/usb/esd_usb.c | 9 +- drivers/net/can/usb/etas_es58x/es58x_core.c | 2 +- drivers/net/can/usb/gs_usb.c | 11 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 9 +- drivers/net/can/usb/mcba_usb.c | 8 +- drivers/net/can/usb/usb_8dev.c | 8 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 5 +- drivers/net/ethernet/emulex/benet/be_cmds.c | 3 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.h | 2 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 2 +- drivers/net/ethernet/intel/ice/ice_main.c | 1 - drivers/net/ethernet/marvell/mvpp2/mvpp2_cls.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 86 ++++++--- .../ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 2 +- .../ethernet/marvell/octeontx2/nic/otx2_common.h | 7 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 22 ++- .../mellanox/mlx5/core/esw/acl/ingress_lgcy.c | 2 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 19 -- drivers/net/ethernet/rocker/rocker_main.c | 5 +- drivers/net/ethernet/stmicro/stmmac/dwmac5.c | 5 + .../net/ethernet/stmicro/stmmac/dwxgmac2_core.c | 5 + drivers/net/hyperv/hyperv_net.h | 5 +- drivers/net/hyperv/netvsc_drv.c | 13 +- drivers/net/hyperv/rndis_filter.c | 29 ++- drivers/net/ipvlan/ipvlan.h | 2 +- drivers/net/ipvlan/ipvlan_core.c | 16 +- drivers/net/ipvlan/ipvlan_main.c | 49 +++--- drivers/net/macvlan.c | 20 ++- drivers/net/netdevsim/bpf.c | 6 + drivers/net/netdevsim/dev.c | 2 + drivers/net/netdevsim/netdevsim.h | 1 + drivers/net/team/team.c | 23 ++- drivers/net/usb/dm9601.c | 4 - drivers/net/usb/usbnet.c | 11 +- drivers/net/wireless/ath/ath10k/ce.c | 16 +- .../net/wireless/marvell/mwifiex/11n_rxreorder.c | 6 +- drivers/net/wireless/rsi/rsi_91x_mac80211.c | 1 + drivers/net/wwan/t7xx/t7xx_hif_dpmaif_rx.c | 9 +- drivers/net/xen-netback/xenbus.c | 3 +- drivers/net/xen-netfront.c | 4 +- drivers/nfc/virtual_ncidev.c | 4 - drivers/nvme/host/fabrics.c | 15 ++ drivers/nvme/host/fabrics.h | 1 + drivers/nvme/host/fc.c | 5 +- drivers/nvme/host/nvme.h | 14 +- drivers/nvme/host/pci.c | 41 +++++ drivers/nvme/host/rdma.c | 1 + drivers/nvme/host/tcp.c | 1 + drivers/nvme/target/tcp.c | 28 ++- drivers/of/base.c | 8 +- drivers/of/platform.c | 2 +- drivers/pci/Kconfig | 6 - drivers/pci/xen-pcifront.c | 4 +- drivers/phy/broadcom/phy-bcm-ns-usb3.c | 2 +- drivers/phy/freescale/phy-fsl-imx8m-pcie.c | 3 +- drivers/phy/rockchip/phy-rockchip-inno-usb2.c | 56 +++--- drivers/phy/st/phy-stm32-usbphyc.c | 2 +- drivers/phy/tegra/xusb-tegra186.c | 3 + drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/pinctrl-rockchip.c | 9 +- drivers/pinctrl/qcom/pinctrl-lpass-lpi.c | 17 ++ drivers/ptp/ptp_chardev.c | 37 +++- drivers/ptp/ptp_private.h | 16 +- drivers/scsi/be2iscsi/be_mgmt.c | 1 + drivers/scsi/qla2xxx/qla_os.c | 2 +- drivers/scsi/scsi_error.c | 35 +++- drivers/scsi/scsi_lib.c | 8 + drivers/scsi/storvsc_drv.c | 3 +- drivers/scsi/xen-scsifront.c | 4 +- drivers/slimbus/core.c | 19 +- drivers/soc/imx/imx8m-blk-ctrl.c | 11 +- drivers/spi/spi-sprd-adi.c | 67 ++----- drivers/target/sbp/sbp_target.c | 4 +- drivers/tty/hvc/hvc_xen.c | 4 +- drivers/tty/serial/8250/8250_pci.c | 2 +- drivers/usb/core/config.c | 5 + drivers/usb/core/quirks.c | 3 + drivers/usb/dwc3/core.c | 2 + drivers/usb/dwc3/core.h | 1 + drivers/usb/host/ohci-platform.c | 1 + drivers/usb/host/uhci-platform.c | 1 + drivers/usb/host/xen-hcd.c | 4 +- drivers/usb/serial/ftdi_sio.c | 1 + drivers/usb/serial/ftdi_sio_ids.h | 2 + drivers/usb/serial/option.c | 1 + drivers/vhost/scsi.c | 24 +-- drivers/video/fbdev/xen-fbfront.c | 6 +- drivers/w1/slaves/w1_therm.c | 60 ++----- drivers/w1/w1.c | 2 - drivers/xen/pvcalls-back.c | 3 +- drivers/xen/pvcalls-front.c | 3 +- drivers/xen/xen-pciback/xenbus.c | 4 +- drivers/xen/xen-scsiback.c | 5 +- fs/btrfs/block-group.c | 60 ++++--- fs/btrfs/ctree.h | 59 ------- fs/btrfs/delayed-inode.c | 1 + fs/btrfs/disk-io.c | 2 +- fs/btrfs/inode-item.c | 1 + fs/btrfs/props.c | 1 + fs/btrfs/relocation.c | 14 ++ fs/btrfs/send.c | 2 + fs/btrfs/space-info.c | 76 ++++++-- fs/btrfs/space-info.h | 69 ++++++++ fs/btrfs/sysfs.c | 18 +- fs/btrfs/transaction.c | 11 +- fs/efivarfs/vars.c | 2 +- fs/ext4/xattr.c | 1 + fs/fs-writeback.c | 14 +- fs/gfs2/log.c | 3 +- fs/gfs2/lops.c | 2 +- fs/gfs2/super.c | 4 + fs/iomap/buffered-io.c | 2 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 2 +- fs/nfsd/nfsctl.c | 17 +- fs/ntfs3/inode.c | 7 +- fs/smb/server/mgmt/user_session.c | 35 ++-- fs/smb/server/mgmt/user_session.h | 1 + fs/smb/server/smb2pdu.c | 9 +- fs/smb/server/transport_ipc.c | 12 ++ fs/smb/server/transport_rdma.c | 15 +- fs/xfs/libxfs/xfs_ialloc.c | 11 +- include/linux/kfence.h | 1 + include/linux/libata.h | 36 ++-- include/linux/nvme.h | 3 + include/linux/posix-clock.h | 39 ++++- include/linux/textsearch.h | 1 + include/linux/usb/quirks.h | 3 + include/net/bonding.h | 13 +- include/net/nfc/nfc.h | 2 + include/scsi/scsi_eh.h | 6 + include/sound/pcm.h | 2 +- include/uapi/linux/comedi.h | 2 +- include/xen/xenbus.h | 2 +- io_uring/io_uring.c | 8 +- kernel/bpf/cgroup.c | 8 +- kernel/dma/pool.c | 7 +- kernel/irq/irq_sim.c | 2 +- kernel/time/hrtimer.c | 2 +- kernel/time/posix-clock.c | 53 ++++-- lib/flex_proportions.c | 5 +- mm/Kconfig | 10 +- mm/damon/sysfs.c | 15 +- mm/kfence/core.c | 23 ++- mm/kmsan/shadow.c | 3 +- mm/migrate.c | 12 +- mm/mprotect.c | 101 ++++++----- mm/page_alloc.c | 47 ++++- mm/rmap.c | 20 +-- net/9p/trans_xen.c | 3 +- net/bpf/test_run.c | 5 + net/bridge/br_input.c | 2 +- net/can/j1939/transport.c | 10 +- net/core/dev.c | 25 ++- net/core/filter.c | 25 ++- net/ipv4/Makefile | 1 + net/ipv4/esp4_offload.c | 4 +- net/ipv4/{fou.c => fou_core.c} | 50 ++---- net/ipv4/fou_nl.c | 48 +++++ net/ipv4/fou_nl.h | 25 +++ net/ipv4/ip_gre.c | 11 +- net/ipv6/addrconf.c | 4 +- net/ipv6/esp6_offload.c | 4 +- net/ipv6/icmp.c | 4 +- net/ipv6/ip6_tunnel.c | 2 +- net/ipv6/ndisc.c | 4 +- net/l2tp/l2tp_core.c | 4 +- net/mac80211/ibss.c | 8 +- net/mac80211/ieee80211_i.h | 6 +- net/mac80211/iface.c | 10 +- net/mac80211/mesh.c | 10 +- net/mac80211/mesh_hwmp.c | 6 +- net/mac80211/mlme.c | 13 +- net/mac80211/ocb.c | 6 +- net/mac80211/rx.c | 2 +- net/mac80211/scan.c | 2 +- net/mac80211/status.c | 6 +- net/mac80211/tdls.c | 11 +- net/mac80211/util.c | 2 +- net/mptcp/protocol.c | 13 +- net/netrom/nr_route.c | 13 +- net/nfc/core.c | 27 ++- net/nfc/llcp_commands.c | 17 +- net/nfc/llcp_core.c | 4 +- net/nfc/nci/core.c | 4 +- net/sched/act_ife.c | 12 +- net/sched/sch_qfq.c | 8 +- net/sched/sch_teql.c | 5 + net/sctp/input.c | 2 +- net/sctp/sm_statefuns.c | 10 +- net/vmw_vsock/virtio_transport_common.c | 30 +++- scripts/generate_rust_analyzer.py | 2 +- scripts/kconfig/.gitignore | 4 +- scripts/kconfig/Makefile | 45 ++--- scripts/kconfig/gconf-cfg.sh | 7 +- scripts/kconfig/mconf-cfg.sh | 25 +-- scripts/kconfig/nconf-cfg.sh | 28 +-- scripts/kconfig/qconf-cfg.sh | 10 +- scripts/remove-stale-files | 2 + sound/core/oss/pcm_oss.c | 4 +- sound/core/pcm_native.c | 9 +- sound/pci/ctxfi/ctamixer.c | 2 + sound/soc/amd/yc/acp6x-mach.c | 8 + sound/soc/codecs/tlv320adcx140.c | 8 +- sound/soc/codecs/wsa881x.c | 54 ++++-- sound/soc/codecs/wsa883x.c | 9 + sound/soc/fsl/imx-card.c | 1 - sound/soc/intel/boards/sof_es8336.c | 2 +- sound/usb/mixer.c | 22 ++- sound/usb/mixer_scarlett2.c | 7 +- sound/xen/xen_snd_front.c | 3 +- tools/testing/selftests/net/amt.sh | 7 +- tools/testing/selftests/net/fib-onlink-tests.sh | 76 ++++---- tools/testing/selftests/net/toeplitz.c | 4 +- tools/testing/selftests/ptp/testptp.c | 194 +++++++++++++++++++-- tools/testing/vsock/util.c | 12 ++ 306 files changed, 2737 insertions(+), 1248 deletions(-)

7 months, 2 weeks

[PATCH 5.15 000/206] 5.15.199-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.15.199 release. There are 206 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 06 Feb 2026 14:38:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.199-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.15.199-rc1 Edward Adam Davis <eadavis(a)qq.com> wifi: cfg80211: init wiphy_work before allocating rfkill fails Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: fully move wiphy work to unbound workqueue Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: cfg80211: cancel wiphy_work before freeing wiphy Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: fix wiphy delayed work queueing Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: use system_unbound_wq for wiphy work Nikola Z. Ivanov <zlatistiv(a)gmail.com> team: Move team device type change at the end of team_port_add Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: meson: mark the GPIO controller as sleeping Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: avoid dup SUB_CLOSED events after disconnect Laveesh Bansal <laveeshb(a)laveeshbansal.com> writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 Johan Hovold <johan(a)kernel.org> drm/imx/tve: fix probe device leak Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver Pimyn Girgis <pimyn(a)google.com> mm/kfence: randomize the freelist on initialization Chen Ni <nichen(a)iscas.ac.cn> net/sched: act_ife: convert comma to semicolon JP Kobryn <inwardvessel(a)gmail.com> btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> drm/amdkfd: fix a memory leak in device_queue_manager_init() Marc Kleine-Budde <mkl(a)pengutronix.de> can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak Gyeyoung Baek <gye976(a)gmail.com> genirq/irq_sim: Initialize work context pointers properly Henry Martin <bsdhenrymartin(a)gmail.com> HID: uclogic: Add NULL check in uclogic_input_configured() Rahul Rameshbabu <sergeantsagara(a)protonmail.com> HID: uclogic: Correct devm device reference for hidinput input_dev name Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: move TDLS work to wiphy work Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: use wiphy work for sdata->work Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: add a work abstraction with special semantics Ying Hsu <yinghsu(a)chromium.org> Bluetooth: Fix hci_suspend_sync crash Alexis Lothoré <alexis.lothore(a)bootlin.com> net: stmmac: make sure that ptp_rate is not 0 before configuring EST Zqiang <qiang.zhang(a)linux.dev> usbnet: Fix using smp_processor_id() in preemptible code warnings Maninder Singh <maninder1.s(a)samsung.com> NFSD: fix race between nfsd registration and exports_proc Luís Henriques <lhenriques(a)suse.de> ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} Sabrina Dubroca <sd(a)queasysnail.net> espintcp: fix skb leaks Waiman Long <longman(a)redhat.com> blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() Bartlomiej Kubik <kubik.bartlomiej(a)gmail.com> fs/ntfs3: Initialize allocated memory before use Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency Gaosheng Cui <cuigaosheng1(a)huawei.com> drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED Pedro Demarchi Gomes <pedrodemargomes(a)gmail.com> ksm: use range-walk function to jump over holes in scan_get_next_rmap_item David Hildenbrand <david(a)redhat.com> mm/pagewalk: add walk_page_range_vma() Thomas Fourier <fourier.thomas(a)gmail.com> ksmbd: smbd: fix dma_unmap_sg() nents Alexander Usyskin <alexander.usyskin(a)intel.com> mei: trace: treat reg parameter as string Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> ALSA: scarlett2: Fix buffer overflow in config retrieval Nilay Shroff <nilay(a)linux.ibm.com> nvme: fix PCIe subsystem reset controller state transition Keith Busch <kbusch(a)kernel.org> nvme-pci: do not directly handle subsys reset fallout Daniel Wagner <dwagner(a)suse.de> nvme-fc: rename free_ctrl callback to match name pattern Brian Foster <bfoster(a)redhat.com> xfs: set max_agbno to allow sparse alloc of last full inode chunk Johan Hovold <johan(a)kernel.org> dmaengine: stm32: dmamux: fix device leak on route allocation Johan Hovold <johan(a)kernel.org> dmaengine: stm32: dmamux: fix OF node leak on route allocation failure Thorsten Blum <thorsten.blum(a)linux.dev> w1: therm: Fix off-by-one buffer overflow in alarms_store Yang Guang <yang.guang5(a)zte.com.cn> w1: w1_therm: use swap() to make code cleaner Geraldo Nascimento <geraldogabriel(a)gmail.com> arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() Johan Hovold <johan(a)kernel.org> iio: adc: exynos_adc: fix OF populate on driver rebind Rob Herring (Arm) <robh(a)kernel.org> of: platform: Use default match table for /firmware Ian Abbott <abbotti(a)mev.co.uk> comedi: Fix getting range information for subdevices 16 to 255 Kuniyuki Iwashima <kuniyu(a)google.com> tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). Sharath Chandra Vurukala <quic_sharathv(a)quicinc.com> net: Add locking to protect skb->dev access in ip_output Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: only reset subflow errors when propagated Thomas Fourier <fourier.thomas(a)gmail.com> scsi: qla2xxx: edif: Fix dma_free_coherent() size Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() Fabio Estevam <festevam(a)gmail.com> ASoC: fsl: imx-card: Do not force slot width to sample width Sai Sree Kartheek Adivi <s-adivi(a)ti.com> dma/pool: distinguish between missing and exhausted atomic pools Denis Sergeev <denserg.edu(a)gmail.com> gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler Kery Qi <qikeyu2017(a)gmail.com> scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() Martin Kaiser <martin(a)kaiser.cx> net: bridge: fix static key check Kuniyuki Iwashima <kuniyu(a)google.com> nfc: nci: Fix race between rfkill and nci_unregister_device(). Gal Pressman <gal(a)nvidia.com> net/mlx5e: Account for netdev stats in ndo_get_stats64 Yafang Shao <laoar.shao(a)gmail.com> net/mlx5e: Report rx_discards_phy via rx_dropped Gal Pressman <gal(a)nvidia.com> net/mlx5e: Expose rx_oversize_pkts_buffer counter Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5: Add HW definitions of vport debug counters Jesse Brandeburg <jbrandeburg(a)cloudflare.com> ice: stop counting UDP csum mismatch as rx_errors Kuniyuki Iwashima <kuniyu(a)google.com> nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). Kery Qi <qikeyu2017(a)gmail.com> rocker: fix memory leak in rocker_world_port_post_fini() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: use the right ifindex when replying to icmpv6 from localhost Zilin Guan <zilin(a)seu.edu.cn> net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() Zilin Guan <zilin(a)seu.edu.cn> net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() Jia-Hong Su <s11242586(a)gmail.com> Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Reject narrower access to pointer ctx fields Daniel Borkmann <daniel(a)iogearbox.net> bpf: Do not let BPF test infra emit invalid GSO types to stack Matthew Wilcox (Oracle) <willy(a)infradead.org> migrate: correct lock ordering for hugetlb file folios Marc Kleine-Budde <mkl(a)pengutronix.de> can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak Marc Kleine-Budde <mkl(a)pengutronix.de> can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak Arnd Bergmann <arnd(a)arndb.de> irqchip/gic-v3-its: Avoid truncating memory addresses Fernand Sieber <sieberf(a)amazon.com> perf/x86/intel: Do not enable BTS for guests Jeongjun Park <aha310510(a)gmail.com> netrom: fix double-free in nr_route_frame() Chenghai Huang <huangchenghai2(a)huawei.com> uacce: ensure safe queue release with state management Yang Shen <shenyang39(a)huawei.com> uacce: implement mremap in uacce_vm_ops to return -EPERM Wenkai Lin <linwenkai6(a)hisilicon.com> uacce: fix cdev handling in the cleanup path Johan Hovold <johan(a)kernel.org> intel_th: fix device leak on output open() Johan Hovold <johan(a)kernel.org> slimbus: core: fix device reference leak on report present Johan Hovold <johan(a)kernel.org> slimbus: core: fix runtime PM imbalance on report present Thomas Fourier <fourier.thomas(a)gmail.com> octeontx2: Fix otx2_dma_map_page() error return code Zhaoyang Huang <zhaoyang.huang(a)unisoc.com> arm64: Set __nocfi on swsusp_arch_resume() Marek Vasut <marex(a)nabladev.com> wifi: rsi: Fix memory corruption due to not set vif driver data size Dan Carpenter <dan.carpenter(a)linaro.org> wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() Thomas Fourier <fourier.thomas(a)gmail.com> wifi: ath10k: fix dma_free_coherent() pointer Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function Berk Cem Goksel <berkcgoksel(a)gmail.com> ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Fix potential OOB access in audio mixer handling Kübrich, Andreas <andreas.kuebrich(a)spektra-dresden.de> iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl Pei Xiao <xiaopei01(a)kylinos.cn> iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver Tomas Melin <tomas.melin(a)vaisala.com> iio: adc: ad9467: fix ad9434 vref mask Weigang He <geoffreyhe2(a)gmail.com> of: fix reference count leak in of_alias_scan() Hans de Goede <johannes.goede(a)oss.qualcomm.com> leds: led-class: Only Add LED to leds_list when it is fully ready Cedric Xing <cedric.xing(a)intel.com> x86: make page fault handling disable interrupts properly Eric Dumazet <edumazet(a)google.com> net/sched: act_ife: avoid possible NULL deref Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Fix error handling Eric Dumazet <edumazet(a)google.com> bonding: provide a net pointer to __skb_flow_dissect() Andrey Vatoropin <a.vatoropin(a)crpt.ru> be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Don't clear SI SMC table when setting power limit Laurent Vivier <lvivier(a)redhat.com> usbnet: limit max_mtu based on device's hard_mtu Eric Dumazet <edumazet(a)google.com> ipv6: annotate data-race in ndisc_router_discovery() Eric Dumazet <edumazet(a)google.com> mISDN: annotate data-race around dev->work Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue Jijie Shao <shaojijie(a)huawei.com> net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M Arun Raghavan <arunr(a)valvesoftware.com> ALSA: usb: Increase volume range that triggers a warning Cheng-Yu Lee <cylee12(a)realtek.com> regmap: Fix race condition in hwspinlock irqsave routine Pavel Zhigulin <Pavel.Zhigulin(a)kaspersky.com> iio: adc: ad7280a: handle spi_setup() errors in probe() Jonathan Cameron <Jonathan.Cameron(a)huawei.com> staging:iio:adc:ad7280a: Register define cleanup. Francesco Lavra <flavra(a)baylibre.com> iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection Andrew Cooper <andrew.cooper3(a)citrix.com> x86/kfence: avoid writing L1TF-vulnerable PTEs Long Li <longli(a)microsoft.com> scsi: storvsc: Process unsupported MODE_SENSE_10 feng <alec.jiang(a)gmail.com> Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA gongqi <550230171hxy(a)gmail.com> Input: i8042 - add quirks for MECHREVO Wujie 15X Pro Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> Revert "nfc/nci: Add the inconsistency check between the input data length and count" Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> w1: fix redundant counter decrement in w1_attach_slave_device() Ian Abbott <abbotti(a)mev.co.uk> comedi: dmm32at: serialize use of paged registers Taeyang Lee <0wn(a)theori.io> crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: Enforce that teql can only be used as root qdisc Dmitry Skorodumov <dskr99(a)gmail.com> ipvlan: Make the addrs_lock be per port Eric Dumazet <edumazet(a)google.com> l2tp: avoid one data-race in l2tp_tunnel_del_work() Kuniyuki Iwashima <kuniyu(a)google.com> fou: Don't allow 0 for FOU_ATTR_IPPROTO. Jakub Kicinski <kuba(a)kernel.org> net: fou: use policy and operation tables generated from the spec Jakub Kicinski <kuba(a)kernel.org> net: fou: rename the source for linking Jakub Kicinski <kuba(a)kernel.org> netlink: add a proto specification for FOU Kuniyuki Iwashima <kuniyu(a)google.com> gue: Fix skb memleak with inner IP protocol 0. Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: avoid misleading per-packet error log Xin Long <lucien.xin(a)gmail.com> sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT Ricardo B. Marlière <rbm(a)suse.com> selftests: net: fib-onlink-tests: Convert to use namespaces by default Hangbin Liu <liuhangbin(a)gmail.com> selftests/net: convert fib-onlink-tests.sh to run it in unique namespace Eric Dumazet <edumazet(a)google.com> bonding: limit BOND_MODE_8023AD to Ethernet devices Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: usb: dm9601: remove broken SR9700 support Wojtek Wasko <wwasko(a)nvidia.com> testptp: Add option to open PHC in readonly mode Mahesh Bandewar <maheshb(a)google.com> selftest/ptp: update ptp selftest to exercise the gettimex options Xabier Marquiegui <reibax(a)gmail.com> ptp: add testptp mask test Alex Maftei <alex.maftei(a)amd.com> selftests/ptp: Add -X option for testing PTP_SYS_OFFSET_PRECISE Alex Maftei <alex.maftei(a)amd.com> selftests/ptp: Add -x option for testing PTP_SYS_OFFSET_EXTENDED Rahul Rameshbabu <rrameshbabu(a)nvidia.com> testptp: Add support for testing ptp_clock_info .adjphase callback Maciek Machnikowski <maciek(a)machnikowski.net> testptp: add option to shift clock by nanoseconds Wojtek Wasko <wwasko(a)nvidia.com> ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. Wojtek Wasko <wwasko(a)nvidia.com> posix-clock: Store file pointer in struct posix_clock_context Linus Torvalds <torvalds(a)linux-foundation.org> Fix memory leak in posix_clock_open() Xabier Marquiegui <reibax(a)gmail.com> posix-clock: introduce posix_clock_context concept Robbie Ko <robbieko(a)synology.com> btrfs: fix deadlock in wait_current_trans() due to ignored transaction type Johan Hovold <johan(a)kernel.org> dmaengine: ti: k3-udma: fix device leak on udma lookup Johan Hovold <johan(a)kernel.org> dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation Johan Hovold <johan(a)kernel.org> dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation Biju Das <biju.das.jz(a)bp.renesas.com> dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() Miaoqian Lin <linmq006(a)gmail.com> dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() Johan Hovold <johan(a)kernel.org> dmaengine: lpc18xx-dmamux: fix device leak on route allocation Johan Hovold <johan(a)kernel.org> dmaengine: idxd: fix device leaks on compat bind and unbind Johan Hovold <johan(a)kernel.org> dmaengine: bcm-sba-raid: fix device leak on probe Johan Hovold <johan(a)kernel.org> dmaengine: at_hdmac: fix device leak on of_dma_xlate() Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() Marek Vasut <marex(a)nabladev.com> drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel Lyude Paul <lyude(a)redhat.com> drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare Mario Limonciello (AMD) <superm1(a)kernel.org> drm/amd: Clean up kfd node on surprise disconnect Aboorva Devarajan <aboorvad(a)linux.ibm.com> mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free Xiaochen Shen <shenxiaochen(a)open-hieco.net> x86/resctrl: Fix memory bandwidth counter width for Hygon Xiaochen Shen <shenxiaochen(a)open-hieco.net> x86/resctrl: Add missing resctrl initialization for Hygon Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> EDAC/i3200: Fix a resource leak in i3200_probe1() Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> EDAC/x38: Fix a resource leak in x38_probe1() Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> hrtimer: Fix softirq base check in update_needs_ipi() Yang Erkun <yangerkun(a)huawei.com> ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref Ilikara Zheng <ilikara(a)aosc.io> nvme-pci: disable secondary temp for Wodposit WPBSNM8 Ethan Nelson-Moore <enelsonmoore(a)gmail.com> USB: serial: ftdi_sio: add support for PICAXE AXE027 cable Ulrich Mohr <u.mohr(a)semex-engcon.com> USB: serial: option: add Telit LE910 MBIM composition Huacai Chen <chenhuacai(a)kernel.org> USB: OHCI/UHCI: Add soft dependencies on ehci_platform Thinh Nguyen <Thinh.Nguyen(a)synopsys.com> usb: dwc3: Check for USB4 IP_NAME Wayne Chang <waynec(a)nvidia.com> phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 Louis Chauvet <louis.chauvet(a)bootlin.com> phy: rockchip: inno-usb2: fix disconnection in gadget mode Luca Ceresoli <luca.ceresoli(a)bootlin.com> phy: rockchip: inno-usb2: fix communication disruption in gadget mode Dan Williams <dan.j.williams(a)intel.com> x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts Jaroslav Kysela <perex(a)perex.cz> ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer Benjamin Tissoires <bentiss(a)kernel.org> HID: usbhid: paper over wrong bNumDescriptor field Haotian Zhang <vulab(a)iscas.ac.cn> dmaengine: omap-dma: fix dma_pool resource leak in error paths Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) Dan Carpenter <dan.carpenter(a)linaro.org> phy: stm32-usphyc: Fix off by one in probe() Suraj Gupta <suraj.gupta2(a)amd.com> dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing Sheetal <sheetal(a)nvidia.com> dmaengine: tegra-adma: Fix use-after-free Bagas Sanjaya <bagasdotme(a)gmail.com> mm, kfence: describe @slab parameter in __kfence_obj_info() Bagas Sanjaya <bagasdotme(a)gmail.com> textsearch: describe @list member in ts_ops search Emil Svendsen <emas(a)bang-olufsen.dk> ASoC: tlv320adcx140: fix word length Eric Dumazet <edumazet(a)google.com> net/sched: sch_qfq: do not free existing class in qfq_change_class() Gal Pressman <gal(a)nvidia.com> selftests: drv-net: fix RPS mask handling for high CPU numbers Saeed Mahameed <saeedm(a)nvidia.com> net/mlx5e: Restore destroying state bit after profile cleanup Stefano Garzarella <sgarzare(a)redhat.com> vsock/test: add a final full barrier after run all tests Eric Dumazet <edumazet(a)google.com> ipv4: ip_gre: make ipgre_header() robust Eric Dumazet <edumazet(a)google.com> macvlan: fix possible UAF in macvlan_forward_source() Eric Dumazet <edumazet(a)google.com> net: update netdev_lock_{type,name} Eric Dumazet <edumazet(a)google.com> ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() Qu Wenruo <wqu(a)suse.com> btrfs: send: check for inline extents in range_is_hole_in_parent() Shivam Kumar <kumar.shivam43666(a)gmail.com> nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: remove boilerplate code Szymon Wilczek <swilczek.lx(a)gmail.com> can: etas_es58x: allow partial RX URB allocation to succeed Zilin Guan <zilin(a)seu.edu.cn> pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() ------------- Diffstat: Documentation/netlink/specs/fou.yaml | 130 ++++++++++ Makefile | 4 +- arch/arm64/boot/dts/rockchip/rk3399-nanopi-r4s.dts | 1 - arch/arm64/kernel/hibernate.c | 2 +- arch/x86/events/perf_event.h | 13 +- arch/x86/include/asm/kfence.h | 29 ++- arch/x86/kernel/cpu/resctrl/core.c | 21 +- arch/x86/kernel/cpu/resctrl/internal.h | 3 + arch/x86/mm/fault.c | 15 +- arch/x86/mm/kaslr.c | 10 +- block/blk-cgroup.c | 4 + crypto/authencesn.c | 6 + drivers/base/regmap/regmap.c | 4 +- drivers/bluetooth/hci_ldisc.c | 4 +- drivers/comedi/comedi.h | 2 +- drivers/comedi/comedi_fops.c | 2 +- drivers/comedi/drivers/dmm32at.c | 32 ++- drivers/comedi/range.c | 2 +- drivers/dma/at_hdmac.c | 9 +- drivers/dma/bcm-sba-raid.c | 6 +- drivers/dma/idxd/compat.c | 23 +- drivers/dma/lpc18xx-dmamux.c | 19 +- drivers/dma/qcom/gpi.c | 6 +- drivers/dma/sh/rz-dmac.c | 5 + drivers/dma/stm32-dmamux.c | 22 +- drivers/dma/tegra210-adma.c | 10 +- drivers/dma/ti/dma-crossbar.c | 18 +- drivers/dma/ti/k3-udma-private.c | 2 +- drivers/dma/ti/omap-dma.c | 4 + drivers/dma/xilinx/xilinx_dma.c | 7 +- drivers/edac/i3200_edac.c | 11 +- drivers/edac/x38_edac.c | 9 +- drivers/gpio/gpiolib-acpi.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 8 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 18 +- drivers/gpu/drm/amd/pm/powerplay/si_dpm.c | 23 +- drivers/gpu/drm/imx/imx-tve.c | 13 + drivers/gpu/drm/nouveau/dispnv50/curs507a.c | 1 + drivers/gpu/drm/panel/panel-simple.c | 1 + drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 4 +- drivers/hid/hid-uclogic-core.c | 12 +- drivers/hid/usbhid/hid-core.c | 17 +- drivers/hwtracing/intel_th/core.c | 19 +- drivers/iio/adc/ad9467.c | 2 +- drivers/iio/adc/at91-sama5d2_adc.c | 1 + drivers/iio/adc/exynos_adc.c | 13 +- drivers/iio/dac/ad5686.c | 6 + drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 15 +- drivers/input/serio/i8042-acpipnpio.h | 18 ++ drivers/irqchip/irq-gic-v3-its.c | 8 +- drivers/isdn/mISDN/timerdev.c | 13 +- drivers/leds/led-class.c | 10 +- drivers/misc/mei/mei-trace.h | 18 +- drivers/misc/uacce/uacce.c | 42 ++- drivers/mmc/host/rtsx_pci_sdmmc.c | 41 +++ drivers/net/bonding/bond_main.c | 11 +- drivers/net/can/usb/ems_usb.c | 8 +- drivers/net/can/usb/esd_usb2.c | 9 +- drivers/net/can/usb/etas_es58x/es58x_core.c | 2 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_core.c | 9 +- drivers/net/can/usb/mcba_usb.c | 8 +- drivers/net/can/usb/usb_8dev.c | 8 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 5 +- drivers/net/ethernet/emulex/benet/be_cmds.c | 3 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_cmd.h | 2 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 2 +- drivers/net/ethernet/intel/ice/ice_main.c | 1 - drivers/net/ethernet/marvell/mvpp2/mvpp2_cls.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 86 +++++-- .../ethernet/marvell/octeontx2/nic/otx2_common.h | 7 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 25 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 21 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.h | 4 + .../mellanox/mlx5/core/esw/acl/ingress_lgcy.c | 2 +- drivers/net/ethernet/rocker/rocker_main.c | 5 +- drivers/net/ethernet/stmicro/stmmac/dwmac5.c | 5 + .../net/ethernet/stmicro/stmmac/dwxgmac2_core.c | 5 + drivers/net/ipvlan/ipvlan.h | 2 +- drivers/net/ipvlan/ipvlan_core.c | 16 +- drivers/net/ipvlan/ipvlan_main.c | 49 ++-- drivers/net/macvlan.c | 20 +- drivers/net/team/team.c | 23 +- drivers/net/usb/dm9601.c | 4 - drivers/net/usb/usbnet.c | 11 +- drivers/net/wireless/ath/ath10k/ce.c | 16 +- .../net/wireless/marvell/mwifiex/11n_rxreorder.c | 6 +- drivers/net/wireless/rsi/rsi_91x_mac80211.c | 1 + drivers/nfc/virtual_ncidev.c | 4 - drivers/nvme/host/fabrics.c | 15 ++ drivers/nvme/host/fabrics.h | 1 + drivers/nvme/host/fc.c | 5 +- drivers/nvme/host/nvme.h | 14 +- drivers/nvme/host/pci.c | 41 +++ drivers/nvme/host/rdma.c | 1 + drivers/nvme/host/tcp.c | 1 + drivers/nvme/target/tcp.c | 28 +- drivers/of/base.c | 8 +- drivers/of/platform.c | 2 +- drivers/pci/Kconfig | 6 - drivers/phy/broadcom/phy-bcm-ns-usb3.c | 2 +- drivers/phy/rockchip/phy-rockchip-inno-usb2.c | 12 +- drivers/phy/st/phy-stm32-usbphyc.c | 2 +- drivers/phy/tegra/xusb-tegra186.c | 3 + drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/qcom/pinctrl-lpass-lpi.c | 17 ++ drivers/ptp/ptp_chardev.c | 37 ++- drivers/ptp/ptp_private.h | 16 +- drivers/scsi/be2iscsi/be_mgmt.c | 1 + drivers/scsi/qla2xxx/qla_os.c | 2 +- drivers/scsi/storvsc_drv.c | 3 +- drivers/slimbus/core.c | 19 +- drivers/staging/iio/adc/ad7280a.c | 283 +++++++++++---------- drivers/target/sbp/sbp_target.c | 4 +- drivers/usb/dwc3/core.c | 2 + drivers/usb/dwc3/core.h | 1 + drivers/usb/host/ohci-platform.c | 1 + drivers/usb/host/uhci-platform.c | 1 + drivers/usb/serial/ftdi_sio.c | 1 + drivers/usb/serial/ftdi_sio_ids.h | 2 + drivers/usb/serial/option.c | 1 + drivers/w1/slaves/w1_therm.c | 67 ++--- drivers/w1/w1.c | 2 - drivers/xen/xen-scsiback.c | 1 + fs/btrfs/relocation.c | 13 + fs/btrfs/send.c | 2 + fs/btrfs/transaction.c | 11 +- fs/ext4/ext4.h | 38 +-- fs/ext4/xattr.c | 1 + fs/fs-writeback.c | 14 +- fs/ksmbd/mgmt/tree_connect.c | 18 +- fs/ksmbd/mgmt/tree_connect.h | 1 - fs/ksmbd/smb2pdu.c | 3 - fs/ksmbd/transport_rdma.c | 15 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 2 +- fs/nfsd/nfsctl.c | 17 +- fs/ntfs3/inode.c | 7 +- fs/xfs/libxfs/xfs_ialloc.c | 11 +- include/drm/ttm/ttm_tt.h | 2 +- include/linux/kfence.h | 1 + include/linux/mlx5/mlx5_ifc.h | 27 +- include/linux/nvme.h | 3 + include/linux/pagewalk.h | 3 + include/linux/posix-clock.h | 39 ++- include/linux/textsearch.h | 1 + include/net/cfg80211.h | 95 ++++++- include/net/dst.h | 12 + include/net/nfc/nfc.h | 2 + include/sound/pcm.h | 2 +- kernel/bpf/cgroup.c | 8 +- kernel/dma/pool.c | 7 +- kernel/irq/irq_sim.c | 2 +- kernel/time/hrtimer.c | 2 +- kernel/time/posix-clock.c | 53 ++-- mm/Kconfig | 10 +- mm/kfence/core.c | 24 +- mm/ksm.c | 115 ++++++++- mm/migrate.c | 14 +- mm/page_alloc.c | 10 +- mm/pagewalk.c | 20 ++ net/bluetooth/hci_core.c | 4 + net/bpf/test_run.c | 5 + net/bridge/br_input.c | 2 +- net/can/j1939/transport.c | 10 +- net/core/dev.c | 25 +- net/core/filter.c | 25 +- net/ipv4/Makefile | 1 + net/ipv4/esp4.c | 4 +- net/ipv4/{fou.c => fou_core.c} | 50 +--- net/ipv4/fou_nl.c | 48 ++++ net/ipv4/fou_nl.h | 25 ++ net/ipv4/ip_gre.c | 11 +- net/ipv4/ip_output.c | 16 +- net/ipv6/esp6.c | 4 +- net/ipv6/icmp.c | 4 +- net/ipv6/ip6_tunnel.c | 2 +- net/ipv6/ndisc.c | 4 +- net/l2tp/l2tp_core.c | 4 +- net/mac80211/ibss.c | 8 +- net/mac80211/ieee80211_i.h | 6 +- net/mac80211/iface.c | 10 +- net/mac80211/mesh.c | 10 +- net/mac80211/mesh_hwmp.c | 6 +- net/mac80211/mlme.c | 13 +- net/mac80211/ocb.c | 6 +- net/mac80211/rx.c | 2 +- net/mac80211/scan.c | 2 +- net/mac80211/status.c | 5 +- net/mac80211/tdls.c | 11 +- net/mac80211/util.c | 2 +- net/mptcp/protocol.c | 13 +- net/netrom/nr_route.c | 13 +- net/nfc/core.c | 27 +- net/nfc/llcp_commands.c | 17 +- net/nfc/llcp_core.c | 4 +- net/nfc/nci/core.c | 4 +- net/sched/act_ife.c | 12 +- net/sched/sch_qfq.c | 8 +- net/sched/sch_teql.c | 5 + net/sctp/sm_statefuns.c | 10 +- net/tls/tls_device.c | 18 +- net/wireless/core.c | 131 +++++++++- net/wireless/core.h | 7 + net/wireless/sysfs.c | 8 +- net/xfrm/espintcp.c | 4 +- sound/core/oss/pcm_oss.c | 4 +- sound/core/pcm_native.c | 9 +- sound/pci/ctxfi/ctamixer.c | 2 + sound/soc/codecs/tlv320adcx140.c | 4 +- sound/soc/fsl/imx-card.c | 1 - sound/usb/mixer.c | 22 +- sound/usb/mixer_scarlett_gen2.c | 7 +- tools/testing/selftests/net/fib-onlink-tests.sh | 76 +++--- tools/testing/selftests/net/toeplitz.c | 4 +- tools/testing/selftests/ptp/testptp.c | 210 +++++++++++++-- tools/testing/vsock/util.c | 12 + 215 files changed, 2400 insertions(+), 888 deletions(-)

7 months, 2 weeks

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage February 2026