This is the start of the stable review cycle for the 6.6.161 release. There are 168 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 30 Oct 2026 16:59:22 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.161-rc1... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 6.6.161-rc1

Christian Brauner brauner@kernel.org signal: allow taks to temporarily block TIF_NOTIFY_SIGNAL

Christian Brauner brauner@kernel.org pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper

Christian Brauner brauner@kernel.org ptrace: refuse to change the signal mask of a user worker

Christian Brauner brauner@kernel.org signal: don't retarget shared signals in a dying thread group

Christian Brauner brauner@kernel.org signal: only SIGKILL and the freezers interrupt a coredumping task

Christian Brauner brauner@kernel.org coredump: hold RCU while releasing parked threads

Aaron Ahmed aarnahmd@amazon.com ftrace: Initialize modname and offset in print_rec()

Weiming Shi bestswngs@gmail.com asymmetric_keys: reject trust keys without IDs

Srish Srinivasan ssrish@linux.ibm.com keys/trusted_keys: return immediately after TPM unseal failure

Stefano Garzarella sgarzare@redhat.com KEYS: trusted: Fix blob allocation size in tpm2_key_decode()

Adrian Martinez adrimg3196@gmail.com KEYS: Fix key_reject_and_link() race with keyring restriction

Cen Zhang zzzccc427@gmail.com keys: Protect the read method check against type removal

Kyle Zeng kylebot@openai.com keys: make keyring indexes independent of kernel addresses

Cen Zhang zzzccc427@gmail.com keys: Protect the type name while describing a key

Cen Zhang zzzccc427@gmail.com keys: Check the authorization payload in process keyring searches

Cen Zhang zzzccc427@gmail.com keys: Avoid the owner account dereference in named keyring lookup

Jens Axboe axboe@kernel.dk io_uring/poll: don't loop on HUP with multiple references

Jens Axboe axboe@kernel.dk io_uring/timeout: don't lose a cancel as io-wq arms a timeout

Jens Axboe axboe@kernel.dk io_uring/timeout: don't flush with the sequence behind the last flush

Jens Axboe axboe@kernel.dk io_uring/timeout: don't put a sequence target behind the last flush

Juanlu Herrero juanlu@fastmail.com io_uring/poll: avoid retry wakeup loss when dropping ownership

Josef Bacik josef@toxicpanda.com io_uring: look up the file before queueing to io-wq

Josef Bacik josef@toxicpanda.com io_uring/timeout: no ABS update of multishot timeouts

Josef Bacik josef@toxicpanda.com io_uring: don't pass restart error codes to userspace

Josef Bacik josef@toxicpanda.com io_uring/sqpoll: let the thread sleep on disabled rings

Josef Bacik josef@toxicpanda.com io_uring/timeout: keep repeat count on multishot update

Josef Bacik josef@toxicpanda.com io_uring/timeout: don't skip over reached sequences

Josef Bacik josef@toxicpanda.com io_uring/poll: drop stale double poll entry on rearm

Josef Bacik josef@toxicpanda.com io_uring/wait: look at all CQ waiters on wake up

Josef Bacik josef@toxicpanda.com io_uring: wake ring pollers for local task_work

Josef Bacik josef@toxicpanda.com io_uring/cancel: let CANCEL_ALL find parked requests

Jens Axboe axboe@kernel.dk io_uring/cancel: don't default to setting req->work.cancel_seq

Josef Bacik josef@toxicpanda.com io_uring/cancel: recognize "no timeout" on 32-bit

Josef Bacik josef@toxicpanda.com io_uring/cancel: don't forget that the work was running

Josef Bacik josef@toxicpanda.com io_uring/poll: don't lose a cancel as io-wq arms poll

Josef Bacik josef@toxicpanda.com io_uring/io-wq: let cancel find picked up hashed work

Josef Bacik josef@toxicpanda.com io_uring/io-wq: don't exit with a creation pending

Josef Bacik josef@toxicpanda.com io_uring/io-wq: don't strand work when a worker exits

Josef Bacik josef@toxicpanda.com io_uring: don't flood a cancelling task with task_work

Josef Bacik josef@toxicpanda.com io_uring/io-wq: don't hide a link from cancellations

Josef Bacik josef@toxicpanda.com io_uring/io-wq: don't lose the signal that ends work

Josef Bacik josef@toxicpanda.com io_uring/wait: don't spin on a stuck overflow list

Christian Brauner brauner@kernel.org io-wq: order the exit bit against worker creation task work

Lee Jones lee@kernel.org tracing/histograms: Verify event_call identity when updating synth_event refcount

Donggeun Yoo donggeunyoo.kernel@gmail.com tracing: Fix 64-bit and signed histogram fields on 32-bit kernels

Donggeun Yoo donggeunyoo.kernel@gmail.com tracing: Unregister field variable histograms when the command fails

Donggeun Yoo donggeunyoo.kernel@gmail.com tracing: Save the event file instead of the compatible histogram

Kyle Zeng kylebot@openai.com tracing: Reject incomplete event filter expressions

Pauli Virtanen pav@iki.fi Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn

Jonas Köppeler j.koeppeler@tu-berlin.de net_sched: codel: fix stale state for empty flows in fq_codel

Sasha Levin sashal@kernel.org Revert "srcu: Use irq_work to start GP in tiny SRCU"

Hangbin Liu liuhangbin@gmail.com bonding: do not set usable_slaves for broadcast mode

Tonghao Zhang tonghao@bamaicloud.com net: bonding: update the slave array for broadcast mode

Yun Zhou yun.zhou@windriver.com xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf

Frank Sorenson sorenson@redhat.com cifs: add revalidation on FSCTL failure in smb2_duplicate_extents()

Ben Cressey ben@cressey.dev dm-integrity: fix infinite loop on discard with large tag size

Jesse Zhang Jesse.Zhang@amd.com drm/amdgpu: free the userptr ranges when a CS fails after parser_bos

Dibin Moolakadan Subrahmanian dibin.moolakadan.subrahmanian@intel.com drm/i915/dmc: Harden DMC firmware payload parsing

Jann Horn jannh@google.com futex: Fix mm reuse handling for FUT_OFF_MMSHARED

Wentao Liang vulab@iscas.ac.cn i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()

David Carlier devnexen@gmail.com gtp: disable BH before calling udp_tunnel_xmit_skb()

Ido Schimmel idosch@nvidia.com ipv4: udp: Create exceptions before socket matching

Daehyeon Ko 4ncienth@gmail.com vsock/virtio: validate packet source for connected sockets

Cen Zhang (Microsoft Security FORGE Labs) cenzhang@linux.microsoft.com io_uring/cancel: don't spin on local work the task can't run

Chen Cheng chencheng@fnnas.com dm-integrity: require stable writes for internal hash modes

Taeyang Lee 0wn@theori.io tracing: Keep the predicate limit separate from program capacity

Peter Ujfalusi peter.ujfalusi@linux.intel.com ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture

Aviv Vaknin vaknins33@gmail.com pid_namespace: make zap_pid_ns_processes() freezable

Jens Axboe axboe@kernel.dk exit: move core of do_wait() into helper

Christian König ckoenig.leichtzumerken@gmail.com drm/exec: don't immediately add prelocked obj to array of locked objs

Stanley Jhu stanleyjhu@google.com scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies

Christian Brauner brauner@kernel.org ext4: free the sbi after a grace period

Christian Brauner brauner@kernel.org ntfs3: free the sbi after a grace period

Cen Zhang (Microsoft) cenzhang@linux.microsoft.com watch_queue: Fix note pool publication race in watch_queue_set_size()

K Prateek Nayak kprateek.nayak@amd.com kernel/watch_queue: Use pipe_buf() to retrieve the pipe buffer

Joseph Qi joseph.qi@linux.alibaba.com eventfs: fix SRCU read lock leak in eventfs_iterate()

Lorenzo Stoakes (ARM) ljs@kernel.org perf: Track the perf mlock gift separately

Laurence Oberman loberman@redhat.com scsi: st: Fix use-after-free race between st_remove() and st_open()

Paulo Alcantara pc@manguebit.org smb: client: fix multiuser mount with krb5

Frank Sorenson sorenson@redhat.com smb: client: fix heap overflow in cifs_do_set_acl()

Aohan Mei henrymei@tencent.com net/sched: cls_flower: validate mask pointer after nla_next()

Aleksandr Khromov haa@amicon.ru ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in

Aleksandr Khromov haa@amicon.ru ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION

Aleksandr Khromov haa@amicon.ru ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION

Jun Yang littleddfu@gmail.com net: bridge: mcast: don't truncate the port group walk on teardown

Kairui Song kasong@tencent.com mm, madvise: fix potential workingset node list_lru leaks

Hyunwoo Kim imv4bel@gmail.com KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots

Matt Fleming mfleming@cloudflare.com mm/huge_memory: initialise workingset state before folio split

David Rosca david.rosca@amd.com drm/amdgpu: Fix VCE 3 ring align_mask

Zihan Xi zihanx@nebusec.ai ipv4: avoid divide by zero in fib_rebalance

Niklas Schnelle schnelle@linux.ibm.com s390/pci: Fix leak of uninitialized kernel data in SCLP report

Aswin Karuvally aswin@linux.ibm.com s390/ctcm: Prevent XID null dereference

Florian Schauer florian@schauer.to page_pool: keep frag_offset aligned for odd-sized requests

Charles Vosburgh theminershive@gmail.com sctp: validate chunk length in the inqueue parser

Chengfeng Ye nicoyip.dev@gmail.com tipc: protect node reset trace dump with node lock

Carlos Maiolino cem@kernel.org xfs: fix capability check in xfs

Bryam Vargas hexlabsecurity@proton.me net/iucv: fix the recvmsg window update

Genjian Zhang zhanggenjian@kylinos.cn dm-ebs: fix incorrect device offset check in ebs_ctr()

Ben Cressey ben@cressey.dev dm-crypt: fix a tiny race condition in crypt_dec_pending

Benjamin Marzinski bmarzins@redhat.com dm cache: fix issue with background work locking

Ming-Hung Tsai mtsai@redhat.com dm cache: fix demotion stats in passthrough mode

Etienne Perot eperot@google.com cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children

Cen Zhang (Microsoft Security FORGE Labs) blbllhy@gmail.com tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)

Cen Zhang (Microsoft Security FORGE Labs) blbllhy@gmail.com tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)

Heyang Tan thy15333007817@163.com wifi: p54: validate firmware record lengths

Tengda Wu wutengda@huaweicloud.com tracing: Fix hist trigger timestamps for buffered events

Amit Machhiwal amachhiw@linux.ibm.com tracing: Do not initialize tracefs work if tracing is disabled

Taeyang Lee 0wn@theori.io tracing: Check operator stack capacity before pushing

Donggeun Yoo donggeunyoo.kernel@gmail.com tracing: Fix the shift out of bounds in the log2 histogram modifier

Jesse Zhang Jesse.Zhang@amd.com drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr

Timur Kristóf timur.kristof@gmail.com drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang

Yehyeong Lee yhlee@isslab.korea.ac.kr scsi: libiscsi: Validate the task named by a management response

Yehyeong Lee yhlee@isslab.korea.ac.kr scsi: libiscsi: Validate the ITT reflected in a Reject PDU

Yehyeong Lee yhlee@isslab.korea.ac.kr scsi: libiscsi: Reject a negative task index from parse_pdu_itt

Yehyeong Lee yhlee@isslab.korea.ac.kr scsi: xen/scsifront: Check for a NULL shadow entry on a backend response

Antoine Huret antoine.huret@bull.com perf: Update cgroup time when rotating multiplexed events

Loic Poulain loic.poulain@oss.qualcomm.com i2c: qcom-cci: Fix HALT_ACK reset request being dropped

Lee Jones lee@kernel.org tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields

Sasha Levin sashal@kernel.org tools: gpio: fix building from the top level with O=

Daehyeon Ko 4ncienth@gmail.com sctp: revalidate output stream after association connect wait

Mario Limonciello mario.limonciello@amd.com pinctrl: amd: Clear S4 wake bits when firmware has _AEI

Aohan Mei henrymei@tencent.com net: rds: fix uninitialized trans dereference in CM event handler

Jérémy Jean Jeremy.Jean@oss.cyber.gouv.fr net/sched: fix use-after-free in __tcf_action_put()

Christian Brauner brauner@kernel.org eventfs: Free the eventfs_inode after an rcu grace period too

Kyle Zeng kylebot@openai.com fsnotify: prevent mark additions during connector teardown

Amirmohammad Eftekhar amirmohammadeftekhar@gmail.com KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry

Christian Brauner brauner@kernel.org unicode: free the map after a grace period

Sung Byeongchan tjdqudcks0424@naver.com autofs: ignore notification errors from a replaced pipe

Haris Okanovic harisokn@amazon.com perf: Fix perf_pmu_migrate_context() leaving events behind

Peng Fan peng.fan@nxp.com gpio: mxc: fix wakeup_pads bit operations

Alexander Stein alexander.stein@ew.tq-group.com gpio: mxc: use BIT() macro

Peng Fan peng.fan@nxp.com gpio: mxc: fix both_edges bit operations

Bartosz Golaszewski bartosz.golaszewski@linaro.org gpio: mxc: use lock guards for the generic GPIO chip lock

Joas Antonio dos Santos joasantonio108@gmail.com calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()

Alice Mikityanska alice@isovalent.com net/ipv6: Introduce payload_len helpers

Nicolai Buchwitz nb@tipi-net.de net: bcmgenet: unshare the skb before writing the control block

Kyle Zeng kylebot@openai.com netlink: avoid hashing the network namespace pointer

Xingui Yang yangxingui@huawei.com scsi: libsas: Fix SMP IO deadlock during HA resume

Martin Kaiser martin@kaiser.cx tracing: probes: error if BTF is required but unavailable

Kyle Zeng kylebot@openai.com pipe: preserve existing fasync readers on writer setup failure

Sasha Levin sashal@kernel.org samples: pidfd: fix userprogs typo

Cen Zhang zzzccc427@gmail.com ocfs2/dlm: Protect the recovery list during debugfs reads

Linfeng Sun linfeng.sun.dev@gmail.com scsi: target: iscsi: Fix race in discovery auth updates

Laurence Oberman loberman@redhat.com scsi: st: Save the visited block for the partition the drive is in

Keith Busch kbusch@kernel.org nios2: fix __wsum type degradation in csum_fold()

Carlos Jones Jr carlosjr.jones@analog.com spi: tegra114: assert CS GPIO for every transfer in a message

Kyle Zeng kylebot@openai.com netlink: reset skb headers before unicast and multicast filtering

HyeongJun An sammiee5311@gmail.com ASoC: nau8822: Fix the 128x oversampling switch bits

HyeongJun An sammiee5311@gmail.com ASoC: wm8978: Fix the 128x oversampling switch bits

HyeongJun An sammiee5311@gmail.com ASoC: max98371: Fix the Speaker DHT Min Volume bits

HyeongJun An sammiee5311@gmail.com ASoC: pcm3168a: Fix the DAC zero flag polarity bit

HyeongJun An sammiee5311@gmail.com ASoC: cs42l52: Fix the NG Type Switch bit

HyeongJun An sammiee5311@gmail.com ASoC: cs42l56: Put the Limiter Cushion control on the limiter register

Avi Weiss thnkslprpt@gmail.com ASoC: stm32: spdifrx: fix synchronization state check

Sergey Tiraspolsky stiraspo@gmail.com ASoC: Intel: avs: Reset the stream unless it is already prepared

Allison Henderson achender@kernel.org net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure

Michal Luczaj mhal@rbox.co vsock: treat TCP_CLOSING as once-established

Adriel Santos adriel@adriel.eu pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12

Svyatoslav Ryhel clamor95@gmail.com power: supply: generic-adc-battery: Fix temperature IIO channel conversion

Gilberto Conde gilbertorconde@gmail.com pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13

Michael Kelley mhkelley58@gmail.com Drivers: hv: Don't reset VMBus connection state on error/exit paths

Waiman Long longman@redhat.com Drivers: hv: Avoid infinite retry loop in init_vp_index()

Xueqin Luo luoxueqin@kylinos.cn power: supply: ds2780: Fix ds2780_get_capacity() returning raw value

Karl Mehltretter kmehltretter@gmail.com power: supply: Fix maintenance charge table kernel-doc

Ojaswin Mujoo ojaswin@linux.ibm.com ext4: fallback to complex scan if aligned scan doesn't work

Abdul Wasey w453y.me@gmail.com mptcp: move the OoO check back into __mptcp_try_fallback()

Keith Busch kbusch@kernel.org blk-mq: reinsert cached request to the list

Keith Busch kbusch@kernel.org blk-mq: pop cached request if it is usable

-------------

Diffstat:

Makefile | 4 +- arch/nios2/include/asm/checksum.h | 2 +- arch/s390/pci/pci_sysfs.c | 3 + arch/x86/kvm/mmu/mmu.c | 4 +- arch/x86/kvm/vmx/nested.c | 4 +- block/blk-mq.c | 32 ++--- block/bsg-lib.c | 13 +- crypto/asymmetric_keys/restrict.c | 8 +- drivers/gpio/gpio-mxc.c | 69 +++++----- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 6 + drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 23 +--- drivers/gpu/drm/amd/amdgpu/sdma_v3_0.c | 25 +++- drivers/gpu/drm/amd/amdgpu/vce_v3_0.c | 2 +- drivers/gpu/drm/drm_exec.c | 77 ++++++----- drivers/gpu/drm/i915/display/intel_dmc.c | 21 ++- drivers/hv/channel_mgmt.c | 12 +- drivers/hv/connection.c | 1 - drivers/hv/vmbus_drv.c | 1 - drivers/i2c/busses/i2c-qcom-cci.c | 4 +- drivers/i2c/busses/i2c-wmt.c | 2 +- drivers/md/dm-cache-target.c | 59 ++++---- drivers/md/dm-crypt.c | 3 +- drivers/md/dm-ebs-target.c | 3 +- drivers/md/dm-integrity.c | 5 +- drivers/md/dm-table.c | 2 +- drivers/net/bonding/bond_main.c | 20 ++- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 10 ++ drivers/net/gtp.c | 2 + drivers/net/wireless/intersil/p54/fwio.c | 42 +++++- drivers/pinctrl/pinctrl-amd.c | 9 ++ drivers/pinctrl/qcom/pinctrl-ipq5018.c | 10 +- drivers/power/supply/ds2780_battery.c | 2 +- drivers/power/supply/generic-adc-battery.c | 9 +- drivers/s390/net/ctcm_mpc.c | 3 +- drivers/scsi/libiscsi.c | 14 +- drivers/scsi/libsas/sas_expander.c | 14 +- drivers/scsi/mpi3mr/mpi3mr_app.c | 2 +- drivers/scsi/scsi_transport_fc.c | 5 +- drivers/scsi/scsi_transport_iscsi.c | 3 +- drivers/scsi/scsi_transport_sas.c | 6 +- drivers/scsi/st.c | 18 ++- drivers/scsi/xen-scsifront.c | 1 + drivers/spi/spi-tegra114.c | 7 + drivers/target/iscsi/iscsi_target_configfs.c | 26 +++- drivers/ufs/core/ufs_bsg.c | 3 +- fs/autofs/waitq.c | 25 +++- fs/coredump.c | 16 +-- fs/ext4/ext4.h | 2 + fs/ext4/extents_status.c | 7 +- fs/ext4/extents_status.h | 1 + fs/ext4/mballoc.c | 21 +-- fs/ext4/super.c | 13 +- fs/notify/mark.c | 11 ++ fs/ntfs3/ntfs_fs.h | 1 + fs/ntfs3/super.c | 29 +++- fs/ocfs2/dlm/dlmcommon.h | 2 + fs/ocfs2/dlm/dlmdebug.c | 5 +- fs/ocfs2/dlm/dlmrecovery.c | 2 +- fs/pipe.c | 6 +- fs/smb/client/cifssmb.c | 13 +- fs/smb/client/connect.c | 21 ++- fs/smb/client/smb2ops.c | 7 +- fs/smb/server/smb2pdu.c | 5 + fs/tracefs/event_inode.c | 16 ++- fs/unicode/utf8-core.c | 21 ++- fs/xfs/libxfs/xfs_sb.c | 17 +-- fs/xfs/xfs_fsmap.c | 2 +- fs/xfs/xfs_ioctl.c | 2 +- fs/xfs/xfs_iops.c | 2 +- include/drm/drm_exec.h | 9 +- include/linux/bsg-lib.h | 3 +- include/linux/cgroup-defs.h | 5 +- include/linux/device-mapper.h | 5 + include/linux/fsnotify_backend.h | 1 + include/linux/futex.h | 14 +- include/linux/io_uring_types.h | 6 +- include/linux/ipv6.h | 22 +++ include/linux/key-type.h | 1 + include/linux/key.h | 5 + include/linux/mm_types.h | 3 + include/linux/power_supply.h | 6 +- include/linux/sched.h | 2 +- include/linux/sched/signal.h | 27 +++- include/linux/sched/user.h | 8 +- include/linux/srcutiny.h | 4 - include/linux/unicode.h | 1 + include/net/af_vsock.h | 3 + include/net/codel_impl.h | 1 + include/net/ipv6.h | 2 - include/net/netfilter/nf_tables_ipv6.h | 4 +- io_uring/cancel.c | 36 +++-- io_uring/cancel.h | 12 ++ io_uring/io-wq.c | 112 ++++++++++++--- io_uring/io-wq.h | 4 +- io_uring/io_uring.c | 144 +++++++++++++++----- io_uring/io_uring.h | 44 +++++- io_uring/poll.c | 48 +++++-- io_uring/rw.c | 18 --- io_uring/sqpoll.c | 7 + io_uring/tctx.c | 1 + io_uring/timeout.c | 88 +++++++++--- kernel/cgroup/cgroup.c | 6 +- kernel/events/core.c | 33 ++--- kernel/exit.c | 51 ++++--- kernel/fork.c | 3 + kernel/futex/core.c | 49 +++---- kernel/pid_namespace.c | 5 +- kernel/ptrace.c | 6 + kernel/rcu/srcutiny.c | 19 +-- kernel/signal.c | 4 + kernel/trace/ftrace.c | 4 +- kernel/trace/trace.c | 6 + kernel/trace/trace_events_filter.c | 15 ++- kernel/trace/trace_events_hist.c | 52 +++---- kernel/trace/trace_events_synth.c | 10 ++ kernel/trace/trace_probe.c | 3 +- kernel/trace/trace_synth.h | 1 + kernel/watch_queue.c | 16 ++- mm/huge_memory.c | 2 + mm/khugepaged.c | 3 + net/bluetooth/l2cap_core.c | 7 +- net/bluetooth/l2cap_sock.c | 2 + net/bridge/br_multicast.c | 13 +- net/bridge/br_netfilter_ipv6.c | 2 +- net/bridge/netfilter/nf_conntrack_bridge.c | 4 +- net/core/page_pool.c | 3 +- net/ipv4/fib_semantics.c | 2 +- net/ipv4/tcp.c | 18 ++- net/ipv4/tcp_cong.c | 4 +- net/ipv4/tcp_dctcp.c | 4 +- net/ipv4/tcp_minisocks.c | 2 +- net/ipv4/tcp_output.c | 2 +- net/ipv4/udp.c | 11 +- net/ipv6/calipso.c | 6 +- net/ipv6/ip6_input.c | 2 +- net/ipv6/ip6_offload.c | 7 +- net/ipv6/output_core.c | 7 +- net/iucv/af_iucv.c | 42 +++--- net/mptcp/protocol.c | 7 - net/mptcp/protocol.h | 8 ++ net/netfilter/ipvs/ip_vs_xmit.c | 2 +- net/netfilter/nf_conntrack_ovs.c | 2 +- net/netfilter/nf_log_syslog.c | 2 +- net/netlink/af_netlink.c | 10 +- net/rds/rdma_transport.c | 38 +++++- net/sched/act_api.c | 11 +- net/sched/cls_flower.c | 5 + net/sched/sch_cake.c | 2 +- net/sctp/inqueue.c | 6 +- net/sctp/socket.c | 33 +++-- net/tipc/node.c | 2 + net/vmw_vsock/af_vsock.c | 49 +++++-- net/vmw_vsock/virtio_transport_common.c | 3 +- samples/pidfd/Makefile | 2 +- security/keys/key.c | 13 +- security/keys/keyctl.c | 15 ++- security/keys/keyring.c | 150 +++++++++++---------- security/keys/process_keys.c | 5 +- security/keys/trusted-keys/trusted_tpm1.c | 4 +- security/keys/trusted-keys/trusted_tpm2.c | 2 +- sound/soc/codecs/cs42l52.c | 2 +- sound/soc/codecs/cs42l56.c | 2 +- sound/soc/codecs/max98371.c | 2 +- sound/soc/codecs/nau8822.c | 4 +- sound/soc/codecs/pcm3168a.c | 2 +- sound/soc/codecs/wm8978.c | 4 +- sound/soc/intel/avs/pcm.c | 2 +- sound/soc/sof/ipc4-topology.c | 16 ++- sound/soc/stm/stm32_spdifrx.c | 2 +- tools/gpio/Makefile | 6 + .../test.d/filter/event-filter-incomplete.tc | 24 ++++ 171 files changed, 1611 insertions(+), 736 deletions(-)