From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 8ECAA32D7C7; Sat, 30 May 2026 16:11:05 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780157470; cv=none; b=tTHdYRSl10gU4Jg/eFGJWZFLLdk184HIW5QhCA/oVL+p8C4pV21bK0WozbYDU8pUU3/jhXjpHD2Gxr4dRbICkoWeQyHrtowD5a8FbSocP08qbyFl3tBfB9Fx7jUekfiXTeoarFXP0w5r/w0BSgC8eEO++4ZR8ayEShf7lnTjE9g= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780157470; c=relaxed/simple; bh=ZS4EKBLmHkoMUYnGEOeFwZ7SZfUQlv+utDf7HpUmuNI=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type; b=jPAiaSxrPbQRhHgjFh2Tbvpgab5XrPC6YNmSXnZiY1qyOCY75fcZyqut3sQISIJ17udU74UO2BYKEnyEKnQOCN3QFW+q2ybIJgcBY7b+ElpBRZm8okV+xMTnxgMGNqHA5ZUIWn4m1owv8r8i5E4cfM7Onu5Xtgf2ZeIraf2Zk8s= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=EuGER4xI; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="EuGER4xI" Received: by smtp.kernel.org (Postfix) with ESMTPSA id BD4881F00893; Sat, 30 May 2026 16:11:03 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1780157465; bh=fK00kvlDBC+OnZ117nQaayiyX2leH2LtzSmg9YnrHKE=; h=From:To:Cc:Subject:Date; b=EuGER4xIgZ2VcjNis7SzHRqNWjC56glUzhczv5MJksu2IU+ySM3c9UfCyDUNnjCQG YUDGOaYa35o6xTT1VYGE07CBRHSdpnBILyR+rvyA3i5i6CuVlcXssofo5VPKdBW7S0 u6qoE5JkPIrOvrH7QsxCS0Hf5mNiKYvAdvlj3JUc= From: Greg Kroah-Hartman To: stable@vger.kernel.org Cc: Greg Kroah-Hartman , patches@lists.linux.dev, linux-kernel@vger.kernel.org, torvalds@linux-foundation.org, akpm@linux-foundation.org, linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org, lkft-triage@lists.linaro.org, pavel@nabladev.com, jonathanh@nvidia.com, f.fainelli@gmail.com, sudipm.mukherjee@gmail.com, rwarsow@gmx.de, conor@kernel.org, hargar@microsoft.com, broonie@kernel.org, achill@achill.org, sr@sladewatkins.com Subject: [PATCH 5.10 000/589] 5.10.258-rc1 review Date: Sat, 30 May 2026 17:58:01 +0200 Message-ID: <20260530160224.570625122@linuxfoundation.org> X-Mailer: git-send-email 2.53.0 Precedence: bulk X-Mailing-List: patches@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: quilt/0.69 X-stable: review X-Patchwork-Hint: ignore X-KernelTest-Patch: http://kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.258-rc1.gz X-KernelTest-Tree: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git X-KernelTest-Branch: linux-5.10.y X-KernelTest-Patches: git://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git X-KernelTest-Version: 5.10.258-rc1 X-KernelTest-Deadline: 2026-06-01T16:02+00:00 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is the start of the stable review cycle for the 5.10.258 release. There are 589 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon, 01 Jun 2026 16:01:34 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.258-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman Linux 5.10.258-rc1 Oleksij Rempel net: usb: lan78xx: Fix double free issue with interrupt buffer allocation Bartosz Golaszewski gpio: cdev: check if uAPI v2 config attributes are correctly zeroed Andy Shevchenko gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n) Jani Nikula string: add mem_is_zero() helper to check if memory area is all zeros Rosen Penev net: ag71xx: check error for platform_get_irq David Carlier tracing: Avoid NULL return from hist_field_name() on truncation Rafael J. Wysocki platform/x86: intel-hid: Check ACPI_HANDLE() against NULL Jakub Kicinski net: tls: prevent chain-after-chain in plain text SG Jakub Kicinski net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring Chenguang Zhao ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics Lukas Bulwahn HID: quirks: really enable the intended work around for appledisplay Ethan Nelson-Moore net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference Linus Walleij net: ethernet: cortina: Carry over frag counter Andreas Haarmann-Thiemann net: ethernet: cortina: Drop half-assembled SKB Linus Walleij net: ethernet: cortina: Make RX SKB per-port Rosen Penev irqchip/ath79-cpu: Remove unused function Gabor Juhos phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access Bart Van Assche ice: fix locking in ice_dcb_rebuild() Guenter Roeck ARM: integrator: Fix early initialization David Gow kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS David Gow kunit: config: Enable KUNIT_DEBUGFS by default Abdurrahman Hussain hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors Abdurrahman Hussain hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() Abdurrahman Hussain hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() Abdurrahman Hussain hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple Abdurrahman Hussain hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR Abdurrahman Hussain hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer Abdurrahman Hussain hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer Abdurrahman Hussain hwmon: (pmbus/adm1266) reject implausible blackbox record_count Abdurrahman Hussain hwmon: (pmbus/adm1266) seed timestamp from the real-time clock Sven Eckelmann batman-adv: tt: fix negative tt_buff_len Sven Eckelmann batman-adv: tt: fix negative last_changeset_len Sven Eckelmann batman-adv: tp_meter: avoid use of uninit sender vars Sven Eckelmann batman-adv: bla: fix report_work leak on backbone_gw purge Sven Eckelmann batman-adv: frag: disallow unicast fragment in fragment Luxiao Xu batman-adv: fix tp_meter counter underflow during shutdown Ruide Cao batman-adv: fix fragment reassembly length accounting Sven Eckelmann batman-adv: dat: handle forward allocation error Ruijie Li batman-adv: clear current gateway during teardown Sven Eckelmann batman-adv: mcast: fix use-after-free in orig_node RCU release Harry Wentland drm/amd/display: Fix integer overflow in bios_get_image() Osama Abdelkader drm/bridge: megachips: remove bridge when irq request fails Michael Bommarito RDMA/siw: Reject MPA FPDU length underflow before signed receive math Johan Hovold spi: ti-qspi: fix use-after-free after DMA setup failure Johan Hovold spi: sprd: fix error pointer deref after DMA setup failure Michael Bommarito scsi: isci: Fix use-after-free in device removal path Masami Hiramatsu (Google) tracing: Do not call map->ops->elt_free() if elt_alloc() fails John Walker wifi: cfg80211: advance loop vars in cfg80211_merge_profile() Michael Bommarito ixgbevf: fix use-after-free in VEPA multicast source pruning Michael Bommarito ipv4: raw: reject IP_HDRINCL packets with ihl < 5 Kyle Farnung wifi: ath11k: clear shared SRNG pointer state on restart Minh Nguyen vsock/vmci: fix UAF when peer resets connection during handshake Steven Rostedt ring-buffer: Fix reporting of missed events in iterator Nan Li netfilter: ipset: stop hash:* range iteration at end Zhengchuan Liang netfilter: ip6t_hbh: reject oversized option lists Nicolai Buchwitz net: bcmgenet: keep RBUF EEE/PM disabled Zijing Yin phonet/pep: disable BH around forwarded sk_receive_skb() Mingyu Wang <25181214217@stu.xidian.edu.cn> Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Jann Horn Bluetooth: bnep: Fix UAF read of dev->name Takashi Iwai ALSA: asihpi: Fix potential OOB array access at reading cache Cássio Gabriel ALSA: ua101: Reject too-short USB descriptors Abdurrahman Hussain hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX Greg Kroah-Hartman sysfs: don't remove existing directory on update failure Asim Viladi Oglu Manizada smb: client: reject userspace cifs.spnego descriptions Ben Hutchings Revert "s390/cio: Fix device lifecycle handling in css_alloc_subchannel()" Vladimir Oltean net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() Sasha Levin Revert "x86/vdso: Fix output operand size of RDPID" Kees Cook selftests: lib.mk: Also install "config" and "settings" Pengpeng Hou s390/debug: Reject zero-length input before trimming a newline Allison Henderson net/rds: reset op_nents when zerocopy page pin fails Nicholas Carlini io-wq: check that the predecessor is hashed in io_wq_remove_pending() Johan Hovold drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup Gyeyoung Baek drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() Naval Alcalá iommu/vt-d: Disable DMAR for Intel Q35 IGFX Raphael Zimmer libceph: handle rbtree insertion error in decode_choose_args() Raphael Zimmer libceph: Fix potential out-of-bounds access in crush_decode() Raphael Zimmer libceph: Fix potential null-ptr-deref in decode_choose_args() Raphael Zimmer libceph: Fix potential out-of-bounds access in osdmap_decode() Ma Ke powerpc/warp: Fix error handling in pika_dtm_thread Viacheslav Dubeyko ceph: fix a buffer leak in __ceph_setxattr() Cássio Gabriel ALSA: usb-audio: Bound MIDI endpoint descriptor scans Chaitanya Kumar Borah drm/i915/dp: Fix VSC dynamic range signaling for RGB formats Sergio Correia audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV Zoran Ilievski net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled Li Xiasong netfilter: nft_ct: fix missing expect put in obj eval Sergio Correia audit: fix incorrect inheritable capability in CAPSET records Herbert Xu crypto: af_alg - Cap AEAD AD length to 0x80000000 Alexandre Belloni alarmtimer: Check RTC features instead of ops Alexandre Belloni rtc: allow rtc_read_alarm without read_alarm callback Eric Dumazet net/sched: sch_pie: annotate more data-races in pie_dump_stats() Qingqing Yang flow_dissector: Do not count vlan tags inside tunnel payload Qingfang Deng flow_dissector: do not dissect PPPoE PFC frames Yannick Vignon net/sched: taprio: Fix init procedure Filipe Manana btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() Timur Kristóf drm/amd/display: Read EDID from VBIOS embedded panel info Timur Kristóf drm/amd/display: Allow DCE link encoder without AUX registers Eric Dumazet net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) Weiming Shi bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() Beniamino Galvani ipv6: rename and move ip6_dst_lookup_tunnel() Beniamino Galvani ipv4: add new arguments to udp_tunnel_dst_lookup() Beniamino Galvani ipv4: remove "proto" argument from udp_tunnel_dst_lookup() Beniamino Galvani ipv4: rename and move ip_route_output_tunnel() Xin Long sctp: discard stale INIT after handshake completion Xin Long netfilter: skip recording stale or retransmitted INIT Christian A. Ehrhardt ASoC: codecs: ab8500: Fix casting of private data Heiko Schocher net: phy: dp83869: fix setting CLK_O_SEL field. Paul Geurts NFC: trf7970a: Ignore antenna noise when checking for RF field Morduan Zang net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit Zhan Jun net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() Ido Schimmel vrf: Fix a potential NPD when removing a port from a VRF Eric Dumazet net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() Eric Dumazet net/sched: sch_choke: annotate data-races in choke_dump_stats() Zhengchao Shao net: sched: choke: remove unused variables in struct choke_sched_data Stephen Hemminger net/sched: netem: validate slot configuration Stephen Hemminger net/sched: netem: fix queue limit check to include reordered packets Stephen Hemminger net/sched: netem: fix probability gaps in 4-state loss model Harshit Mogalapalli net: sched: sch_netem: Refactor code in 4-state loss generator Nikola Z. Ivanov netdevsim: zero initialize struct iphdr in dummy sk_buff Daan De Meyer cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() Enze Li scsi: sr: Add memory allocation failure handling for get_capabilities() Florian Westphal netfilter: nf_conntrack_sip: don't use simple_strtoul Jiexun Wang netfilter: xt_policy: fix strict mode inbound policy matching Timur Kristóf drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) Pablo Neira Ayuso netfilter: arp_tables: fix IEEE1394 ARP payload parsing Breno Leitao tracing: branch: Fix inverted check on stat tracer registration Mark Harmstone btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() Qu Wenruo btrfs: merge PAGE_CLEAR_DIRTY and PAGE_SET_WRITEBACK to PAGE_START_WRITEBACK Wolfram Sang mailbox: mailbox-test: make data_ready a per-instance variable Wolfram Sang mailbox: mailbox-test: initialize struct earlier Wolfram Sang mailbox: mailbox-test: don't free the reused channel Wolfram Sang mailbox: add sanity check for channel array cuitao cgroup/rdma: fix integer overflow in rdmacg_try_charge() Wolfram Sang mailbox: mailbox-test: free channels on probe error Yuho Choi fbdev: offb: fix PCI device reference leak on probe failure Anthony Pighin (Nokia) rtc: abx80x: Disable alarm feature if no interrupt attached Alexandre Belloni rtc: introduce features bitfield Bae Yeonju fs/adfs: validate nzones in adfs_validate_bblk() Kohei Enju vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() Lee Jones tipc: fix double-free in tipc_buf_append() Alexey Kodanev nfp: fix swapped arguments in nfp_encode_basic_qdr() calls Eric Dumazet net/sched: sch_sfb: annotate data-races in sfb_dump_stats() Eric Dumazet net/sched: sch_red: annotate data-races in red_dump_stats() Zhengchao Shao net: sched: gred/red: remove unused variables in struct red_stats Eric Dumazet net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() Eric Dumazet net/sched: sch_pie: annotate data-races in pie_dump_stats() Eric Dumazet net_sched: sch_hhf: annotate data-races in hhf_dump_stats() Michael Bommarito net/rds: zero per-item info buffer before handing it to visitors Jun Yan arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number Weiming Shi slip: bound decode() reads against the compressed packet length Weiming Shi slip: reject VJ receive packets on instances with no rstate array Fernando Fernandez Mancera netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check Fernando Fernandez Mancera netfilter: nfnetlink_osf: fix out-of-bounds read on option matching Yingnan Zhang <342144303@qq.com> ipvs: fix MTU check for GSO packets in tunnel mode Pablo Neira Ayuso netfilter: xtables: restrict several matches to inet family Florian Westphal netfilter: conntrack: remove sprintf usage Xiang Mei netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO Pablo Neira Ayuso netfilter: nft_osf: restrict it to ipv4 Weiming Shi openvswitch: cap upcall PID array size and pre-size vport replies Qingfang Deng pppoe: drop PFC frames Wojciech Drewek flow_dissector: Add PPPoE dissectors Boris Sukholitko flow_dissector: Add number of vlan tags dissector Boris Sukholitko dissector: do not set invalid PPP protocol Michael Bommarito sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks Eric Dumazet ipv6: fix possible UAF in icmpv6_rcv() Matt Vollrath e1000e: Unroll PTP in probe error handling Kohei Enju i40e: don't advertise IFF_SUPP_NOFCS Eric Dumazet tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) Vinicius Costa Gomes net/sched: taprio: fix use-after-free in advance_sched() on schedule switch Vladimir Oltean net/sched: taprio: rename close_time to end_time Vladimir Oltean net/sched: taprio: refactor one skb dequeue from TXQ to separate function Vladimir Oltean net/sched: taprio: continue with other TXQs if one dequeue() failed Vladimir Oltean net/sched: taprio: replace safety precautions with comments Vladimir Oltean net/sched: taprio: stop going through private ops for dequeue and peek Yannick Vignon net: taprio offload: enforce qdisc to netdev queue mapping Kurt Kanzenbach taprio: Handle short intervals and large packets Jiayuan Chen nexthop: fix IPv6 route referencing IPv4 nexthop Ido Schimmel nexthop: Emit a notification when a nexthop group is modified Dudu Lu net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys René Rebe PCMCIA: Fix garbled log messages for KERN_CONT Paul Moses crypto: ccp - copy IV using skcipher ivsize T Pratham crypto: sa2ul - Fix AEAD fallback algorithm names Geert Uytterhoeven lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() Konrad Dybcio clk: qcom: dispcc-sc7180: Add missing MDSS resets Konrad Dybcio dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets Geert Uytterhoeven clk: xgene: Fix mapping leak in xgene_pllclk_init() Arnd Bergmann clk: qoriq: avoid format string warning Sebastian Krzyszkowiak clk: imx8mq: Correct the CSI PHY sels Felix Gu clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() Felix Gu clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() Val Packett clk: qcom: dispcc-sm8250: Enable parents for pixel clocks Val Packett clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk Junrui Luo scsi: target: core: Fix integer overflow in UNMAP bounds check Yang Erkun scsi: sg: Resolve soft lockup issue when opening /dev/sgX Florian Westphal RDMA/core: Prefer NLA_NUL_STRING Fedor Pchelkin platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() Andy Shevchenko nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() Abdun Nihaal mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() Randy Dunlap tty: hvc_iucv: fix off-by-one in number of supported devices наб tty: hvc: remove HVC_IUCV_MAGIC Rafael J. Wysocki platform/surface: surfacepro3_button: Drop wakeup source on remove Chen Ni backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() Nuno Sa dev_printk: add new dev_err_probe() helpers Andy Shevchenko driver core: Move dev_err_probe() to where it belogs Greg Kroah-Hartman driver core: device.h: remove extern from function prototypes Arnaldo Carvalho de Melo perf util: Kill die() prototype, dead for a long time Leo Yan perf expr: Return -EINVAL for syntax error in expr__find_ids() Yu-Chun Lin pinctrl: abx500: Fix type of 'argument' variable Ian Rogers perf branch: Avoid incrementing NULL Ethan Tidmore pinctrl: pinctrl-pic32: Fix resource leak Daniel Borkmann bpf: Fix precedence bug in convert_bpf_ld_abs alignment check Oliver Neukum HID: usbhid: fix deadlock in hid_post_reset() Richard Genoud mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob Chen Ni mtd: physmap_of_gemini: Fix disabled pinctrl state check Denis Benato HID: asus: do not abort probe when not necessary Denis Benato HID: asus: make asus_resume adhere to linux kernel coding standards Daniel Hodges ima: check return value of crypto_shash_final() in boot aggregate Pengpeng Hou tracing: Rebuild full_name on each hist_field_name() call Frank Li dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() ZhengYuan Huang ocfs2: validate group add input before caching ZhengYuan Huang ocfs2: validate bg_bits during freefrag scan ZhengYuan Huang ocfs2: fix listxattr handling when the buffer is full Alok Tiwari soc: qcom: aoss: compare against normalized cooling state Junrui Luo ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison Junrui Luo ocfs2/dlm: validate qr_numregions in dlm_match_regions() David Heidelberg arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot Sumit Semwal arm64: dts: qcom: sdm845-xiaomi-beryllium: Add DSI and panel bits Dmitry Baryshkov soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available Mikko Perttunen memory: tegra30-emc: Fix dll_change check Mikko Perttunen memory: tegra124-emc: Fix dll_change check Rafał Miłecki ARM: dts: mediatek: mt7623: fix efuse fallback compatible Thomas Huth efi/capsule-loader: fix incorrect sizeof in phys array reallocation Jan Kara quota: Fix race of dquot_scan_active() with quota deactivation Ricardo B. Marlière ktest: Run POST_KTEST hooks on failure and cancellation Ricardo B. Marlière ktest: Honor empty per-test option overrides Ricardo B. Marlière ktest: Avoid undef warning when WARNINGS_FILE is unset Vidya Sagar PCI: tegra194: Disable direct speed change for Endpoint mode Vidya Sagar PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" Waiman Long selftest: memcg: skip memcg_sock test if address family not supported Jane Chu Documentation: fix a hugetlbfs reservation statement Gerd Bayer PCI: Enable AtomicOps only if Root Port supports them Shengjiu Wang ASoC: fsl_easrc: Change the type for iec958 channel status controls Shengjiu Wang ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() Shengjiu Wang ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() Felix Gu pmdomain: ti: omap_prm: Fix a reference leak on device node Akhil P Oommen drm/msm/a6xx: Use barriers while updating HFI Q headers Rob Clark drm/msm/a6xx: Fix HLSQ register dumping Lei Huang ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') Luke D. Jones ALSA: hda/realtek: Whitespace fix Timur Kristóf drm/amd/pm/ci: Fill DW8 fields from SMC Timur Kristóf drm/amd/pm/ci: Clear EnabledForActivity field for memory levels Timur Kristóf drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 Timur Kristóf drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs Timur Kristóf drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled Cássio Gabriel ALSA: core: Validate compress device numbers without dynamic minors Takashi Iwai ALSA: compress: Drop unused functions Sebastian Reichel drm/panel: simple: Correct G190EAN01 prepare timing Alexander Koskovich drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 Andy Shevchenko fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break Ethan Tidmore drm/sun4i: Fix resource leaks Felix Gu spi: fsl-qspi: Use reinit_completion() for repeated operations Junrui Luo dm log: fix out-of-bounds write due to region_count overflow Ming-Hung Tsai dm cache metadata: fix memory leak on metadata abort retry Ming-Hung Tsai dm cache: fix dirty mapping checking in passthrough mode switching Ming-Hung Tsai dm cache: support shrinking the origin device Ming-Hung Tsai dm cache: fix concurrent write failure in passthrough mode Ming-Hung Tsai dm cache policy smq: fix missing locks in invalidating cache blocks Ming-Hung Tsai dm cache: fix write path cache coherency in passthrough mode Ming-Hung Tsai dm cache: fix null-deref with concurrent writes in passthrough mode Sander Vanheule ASoC: sti: use managed regmap_field allocations Sander Vanheule ASoC: sti: Return errors from regmap_field_alloc() Alexander Konyukhov drm/komeda: fix integer overflow in AFBC framebuffer size check Dudu Lu Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp Pauli Virtanen Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER Jonathan Rissanen Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error Luiz Augusto von Dentz Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU Sun Jian bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb Taegu Ha ppp: require CAP_NET_ADMIN in target netns for unattached ioctls Greg Jumper net/rds: Restrict use of RDS/IB to the initial network namespace Håkon Bugge net/rds: Optimize rds_ib_laddr_check Jamal Hadi Salim net/sched: act_ct: Only release RCU read lock after ct_ft Mashiro Chen net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf Jiri Slaby (SUSE) 6pack: propagage new tty types Florian Westphal netfilter: nft_fwd_netdev: check ttl/hl before forwarding Justin Chen net: bcmgenet: fix off-by-one in bcmgenet_put_txcb Ethan Tidmore wifi: brcmfmac: Fix error pointer dereference Arend van Spriel brcmfmac: support chipsets with different core enumeration space Weiming Shi bpf: fix end-of-list detection in cgroup_storage_get_next_key() Sourabh Jain powerpc/crash: fix backup region offset update to elfcorehdr Duoming Zhou wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet Zilin Guan wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() Mario Limonciello (AMD) firmware: dmi: Correct an indexing error in dmi.h Bart Van Assche locking: Fix rwlock support in Brian Masney irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter Gopi Krishna Menon thermal/drivers/spear: Fix error condition for reading st,thermal-flags Danilo Krummrich devres: fix missing node debug info in devm_krealloc() Cole Leavitt pstore/ram: fix resource leak when ioremap() fails Deepanshu Kartikey nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() Bart Van Assche drbd: Balance RCU calls in drbd_adm_dump_devices() HyungJung Joo fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START Mingzhe Zou bcache: fix uninitialized closure object Dudu Lu vsock/virtio: fix accept queue count leak on transport mismatch Norbert Szetei vsock: fix buffer size clamping order Siwei Zhang Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_get_sndtimeo_cb() Sven Eckelmann batman-adv: bla: put backbone reference on failed claim hash insert Sven Eckelmann batman-adv: bla: only purge non-released claims Sven Eckelmann batman-adv: bla: prevent use-after-free when deleting claims Jiexun Wang batman-adv: stop caching unowned originator pointers in BAT IV Jiexun Wang batman-adv: reject new tp_meter sessions during teardown Lyes Bourennani batman-adv: fix integer overflow on buff_pos Ben Morris sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL Alex Deucher drm/amdgpu/pm: align Hawaii mclk workaround with radeon Alex Deucher drm/amdgpu/pm: add missing revision check for CI John B. Moore drm/amdgpu/sdma4: replace BUG_ON with WARN_ON in fence emission John B. Moore drm/amdgpu/gfx9: drop unnecessary 64-bit fence flag check in KIQ Alex Deucher drm/radeon: add missing revision check for CI Ashutosh Desai drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() Johan Hovold spi: mpc52xx: fix use-after-free on unbind Johan Hovold spi: orion: fix clock imbalance on registration failure Johan Hovold spi: imx: fix runtime pm leak on probe deferral Johan Hovold spi: mtk-nor: fix controller deregistration Sergey Shtylyov media: dib8000: avoid division by 0 in dib8000_set_dds() Johan Hovold regulator: act8945a: fix OF node reference imbalance Oliver Neukum media: rc: streamzap: Error handling in probe Oliver Neukum media: rc: xbox_remote: heed DMA restrictions Johan Hovold regulator: max77650: fix OF node reference imbalance Sakari Ailus staging: media: atomisp: Disallow all private IOCTLs Ricardo Ribalda media: uvcvideo: Enable VB2_DMABUF for metadata stream Jason Gunthorpe RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path Michael Bommarito RDMA/rxe: Reject unknown opcodes before ICRC processing Jason Gunthorpe RDMA/ocrdma: Don't NULL deref uctx on errors in ocrdma_copy_pd_uresp() Jason Gunthorpe RDMA/mlx4: Fix resource leak on error in mlx4_ib_create_srq() André Draszik power: supply: max17042: avoid overflow when determining health Lukas Wunner PCI/AER: Stop ruling out unbound devices as error source Shuai Xue PCI/AER: Clear only error bits in PCIe Device Status Vasily Gorbik s390/debug: Reject zero-length input in debug_input_flush_fn() Chaitanya Kulkarni nvmet: avoid recursive nvmet-wq flush in nvmet_ctrl_free Junrui Luo md/raid10: fix divide-by-zero in setup_geo() with zero far_copies Michael Bommarito isofs: validate block number from NFS file handle in isofs_export_iget Michael Bommarito isofs: validate Rock Ridge CE continuation extent against volume size Eric Biggers dm-verity-fec: correctly reject too-small hash devices Eric Biggers dm-verity-fec: correctly reject too-small FEC devices Mikulas Patocka dm: fix a buffer overflow in ioctl processing Mikulas Patocka dm: don't report warning when doing deferred remove Joseph Salisbury ASoC: fsl_easrc: fix comment typo Shrikanth Hegde cpuidle: powerpc: avoid double clear when breaking snooze Johan Hovold spi: topcliff-pch: fix use-after-free on unbind Thorsten Blum thermal/drivers/sprd: Fix raw temperature clamping in sprd_thm_rawdata_to_temp Thorsten Blum thermal/drivers/sprd: Fix temperature clamping in sprd_thm_temp_to_rawdata Michael Bommarito udf: reject descriptors with oversized CRC length Mingming Cao ibmveth: Disable GSO for packets with small MSS Hamza Mahfooz hv_sock: fix ARM64 support Hongling Zeng parisc: Fix IRQ leak in LASI driver Nan Li net/rds: handle zerocopy send cleanup before the message is queued Maoyi Xie ip6_gre: Use cached t->net in ip6erspan_changelink(). SeungJu Cheon sound: ua101: fix division by zero at probe Kai Zen net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo Miklos Szeredi fanotify: fix false positive on permission events Johan Hovold spi: zynqmp-gqspi: fix controller deregistration Siwei Zhang Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_state_change_cb() Siwei Zhang Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() Yilin Zhu ipv6: xfrm6: release dst on error in xfrm6_rcv_encap() Ruijie Li xfrm: provide message size for XFRM_MSG_MAPPING Cássio Gabriel ALSA: firewire-tascam: Do not drop unread control events Felix Gu usb: ulpi: fix memory leak on ulpi_register() error paths Fabio Porcedda USB: serial: option: add Telit Cinterion LE910Cx compositions Aaro Koskinen USB: omap_udc: DMA: Don't enable burst 4 mode Cássio Gabriel ALSA: usb-audio: Fix UAC3 cluster descriptor size check Takashi Iwai ALSA: usb-audio: Avoid potential endless loop in convert_chmap_v3() Greg Kroah-Hartman usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl Greg Kroah-Hartman usb: usblp: fix heap leak in IEEE 1284 device ID via short response Tristan Madani wifi: b43: enforce bounds check on firmware key index in b43_rx() Jiri Slaby (SUSE) wifi: ath5k: do not access array OOB Jeongjun Park wifi: rsi: fix kthread lifetime race between self-exit and external-stop Tristan Madani wifi: b43legacy: enforce bounds check on firmware key index in RX path Corey Minyard ipmi:ssif: NULL thread on error Corey Minyard ipmi:ssif: Remove unnecessary indention Corey Minyard ipmi:ssif: Clean up kthread on errors Corey Minyard ipmi:ssif: Fix a shutdown race Jamal Hadi Salim net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked Johan Hovold spi: rockchip: fix controller deregistration Shivam Kalra ACPI: video: force native backlight on HP OMEN 16 (8A44) Rajat Gupta fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free Corey Minyard ipmi:si: Return state to normal if message allocation fails Corey Minyard ipmi: Check event message buffer response for bad data Corey Minyard ipmi: Add limits to event and receive message requests Greg Kroah-Hartman scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show() Kai Ma netfilter: reject zero shift in nft_bitwise Deepanshu Kartikey ALSA: caiaq: fix usb_dev refcount leak on probe failure Arjan van de Ven drm/amdgpu: fix zero-size GDS range init on RDNA4 Greg Kroah-Hartman ipv6: rpl: reserve mac_len headroom when recompressed SRH grows Takashi Iwai ALSA: caiaq: Don't abort when no input device is available Takashi Iwai ALSA: caiaq: Fix potentially leftover ep1_in_urb at error path Douglas Anderson driver core: Add kernel-doc for DEV_FLAG_COUNT enum value Yucheng Lu crypto: authencesn - reject short ahash digests during instance creation Chen Zhao IB/core: Fix zero dmac race in neighbor resolution Junrui Luo dm mirror: fix integer overflow in create_dirty_log() Thorsten Blum crypto: atmel-tdes - fix DMA sync direction Haoxiang Li crypto: ccree - fix a memory leak in cc_mac_digest() Thomas Fourier crypto: hisilicon - Fix dma_unmap_single() direction Thorsten Blum crypto: atmel-ecc - Release client on allocation failure Thorsten Blum crypto: atmel-aes - Fix 3-page memory leak in atmel_aes_buff_cleanup Yiyang Chen taskstats: set version in TGID exit notifications Chia-Ming Chang inotify: fix watch count leak when fsnotify_add_inode_mark_locked() fails Junrui Luo md/raid5: validate payload size before accessing journal metadata Chia-Ming Chang md/raid5: fix soft lockup in retry_aligned_read() Sohei Koyama ext4: fix missing brelse() in ext4_xattr_inode_dec_ref_all() James Kim mtd: docg3: fix use-after-free in docg3_release() Jens Axboe io_uring/poll: fix backport of io_poll_add() changes Jens Axboe io_uring/poll: fix EPOLL_URING_WAKE sometimes not being honored Yosry Ahmed KVM: nSVM: Clear GIF on nested #VMEXIT(INVALID) Yosry Ahmed KVM: nSVM: Ensure AVIC is inhibited when restoring a vCPU to guest mode Yosry Ahmed KVM: nSVM: Sync interrupt shadow to cached vmcb12 after VMRUN of L2 Yosry Ahmed KVM: nSVM: Sync NextRIP to cached vmcb12 after VMRUN of L2 Yosry Ahmed KVM: nSVM: Mark all of vmcb02 dirty when restoring nested state Denis M. Karpov userfaultfd: allow registration of ranges below mmap_min_addr Jacqueline Wong tpm: tpm_tis: add error logging for data transfer Bin Liu mmc: block: use single block write in retry Arnd Bergmann tpm: avoid -Wunused-but-set-variable hkbinbin RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv Ruijie Li net/smc: avoid early lgr access in smc_clc_wait_msg Ao Zhou net: rds: fix MR cleanup on copy error Jonathan Santos iio: adc: ad7768-1: fix one-shot mode data acquisition Cássio Gabriel ALSA: 6fire: Fix input volume change detection Takashi Iwai ALSA: caiaq: Handle probe errors properly Cássio Gabriel ALSA: caiaq: Fix control_put() result and cache rollback Simon Liebold selftests/mqueue: Fix incorrectly named file Helge Deller parisc: _llseek syscall is only available for 32-bit userspace Cássio Gabriel ALSA: seq_oss: return full count for successful SEQ_FULLSIZE writes Harin Lee ALSA: ctxfi: Add fallback to default RSR for S/PDIF Cássio Gabriel ALSA: aoa: i2sbus: fix OF node lifetime handling Vasiliy Kovalev ext2: reject inodes with zero i_nlink and valid mode in ext2_iget() Manivannan Sadhasivam net: qrtr: ns: Fix use-after-free in driver remove() Chen Ni media: i2c: imx219: Check return value of devm_gpiod_get_optional() in imx219_probe() Josh Law lib/ts_kmp: fix integer overflow in pattern length calculation Rong Zhang Revert "ALSA: usb: Increase volume range that triggers a warning" Luxiao Xu net: strparser: fix skb_head leak in strp_abort_strp() Zhengchuan Liang net: caif: clear client service pointer on teardown Ziqing Chen ALSA: control: Validate buf_len before strnlen() in snd_ctl_elem_init_enum_names() Herbert Xu crypto: pcrypt - Fix handling of MAY_BACKLOG requests Michael Bommarito um: drivers: call kernel_strrchr() explicitly in cow_user.c Douglas Anderson driver core: Don't let a device probe until it's ready Herbert Xu padata: Remove comment for reorder_work Herbert Xu padata: Fix pd UAF once and for all Heming Zhao ocfs2: split transactions in dio completion to avoid credit exhaustion Sasha Levin Revert "riscv: Sparse-Memory/vmemmap out-of-bounds fix" Thomas Zimmermann firmware: google: framebuffer: Do not mark framebuffer as busy Tyllis Xu ibmasm: fix heap over-read in ibmasm_send_i2o_message() Tyllis Xu ibmasm: fix OOB reads in command_file_write due to missing size checks Tyllis Xu misc: ibmasm: fix OOB MMIO read in ibmasm_handle_mouse_interrupt() Michal Pecio usb: xhci: Make usb_host_endpoint.hcpriv survive endpoint_disable() Cássio Gabriel ALSA: usb-audio: Fix Audio Advantage Micro II SPDIF switch Cássio Gabriel ALSA: usb-audio: Avoid false E-MU sample-rate notifications Cássio Gabriel ALSA: usb-audio: stop parsing UAC2 rates at MAX_NR_RATES Anderson Nascimento rxrpc: Fix missing validation of ticket length in non-XDR key preparsing Sean Christopherson crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed Sean Christopherson crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed Sean Christopherson crypto: ccp: Don't attempt to copy CSR to userspace if PSP command failed Berk Cem Goksel ALSA: caiaq: take a reference on the USB device in create_card() Cryolitia PukNgae ALSA: usb-audio: apply quirk for MOONDROP JU Jiu Darrick J. Wong fuse: quiet down complaints in fuse_conn_limit_write Samuel Page fuse: reject oversized dirents in page cache David Howells rxrpc: Fix anonymous key handling Wang Jie rxrpc: only handle RESPONSE during service challenge Zhang Xiaoxu cifs: Fix connections leak when tlink setup failed David Howells rxrpc: Fix recvmsg() unconditional requeue Sasha Levin Revert "scsi: ufs: core: Improve SCSI abort handling" Jamie Iles i3c: fix uninitialized variable use in i2c setup Nathan Chancellor scripts/dtc: Remove unused dts_version in dtc-lexer.l Nathan Chancellor drm/amd/display: Do not add '-mhard-float' to calcs, dsc, and dcn30 FP files for clang Andrew Price gfs2: Validate i_depth for exhash directories Sebastian Krzyszkowiak arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage up to 0.85V Sebastian Krzyszkowiak Revert "arm64: dts: imx8mq-librem5: Set the DVS voltages lower" Sebastian Krzyszkowiak arm64: dts: imx8mq-librem5: Bump BUCK1 suspend voltage to 0.81V Sebastian Krzyszkowiak arm64: dts: imx8mq-librem5: Set the DVS voltages lower Martin Kepplinger arm64: dts: imx8mq-librem5: set regulators boot-on Guido Günther arm64: dts: imx8mq-librem5: Don't mark buck3 as always on Martin Kepplinger arm64: dts: imx8mq-librem5-r3: workaround i2c1 issue with 1GHz cpu voltage Breno Leitao mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() Joseph Qi ocfs2: fix possible deadlock between unlink and dio_end_io_write hongnanli fs/ocfs2: fix comments mentioning i_mutex Oleg Nesterov x86/uprobes: Fix XOL allocation failure for 32-bit tasks David Gow drivers: base: Free devm resources when unregistering a device Keith Busch blk-mq: use quiesced elevator switch when reinitializing queues Yuqi Xu rxrpc: reject undecryptable rxkad response tickets Joseph Qi ocfs2: fix out-of-bounds write in ocfs2_write_end_inline Deepanshu Kartikey ocfs2: validate inline data i_size during inode read Dmitry Antipov ocfs2: add inline inode consistency check to ocfs2_validate_inode_block() Yasuaki Torimaru xfrm: clear trailing padding in build_polexpire() David Howells rxrpc: Fix key quota calculation for multitoken keys Luxiao Xu rxrpc: fix reference count leak in rxrpc_server_keyring() Joonwon Kang mailbox: Prevent out-of-bounds access in of_mbox_index_xlate() Hari Bathini powerpc64/bpf: do not increment tailcall count when prog is NULL Leonid Ravich IB/mad: Don't call to function that might sleep while in atomic context Bart Van Assche scsi: ufs: core: Improve SCSI abort handling Chengfeng Ye ALSA: usb-audio: fix null pointer dereference on pointer cs_desc Waiman Long blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() Lee, Chun-Yi thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR Yongzhi Liu drm/amd/display: Fix memory leak Felix Fietkau wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure Alex Hung drm/amd/display: Add null checker before passing variables Minhong He ipv6: add NULL checks for idev in SRv6 paths Liu Jian bpf, sockmap: Fix an infinite loop error when len is 0 in tcp_bpf_recvmsg_parser() Marcelo Ricardo Leitner net/sched: act_ct: fix ref leak when switching zones Arun Easi scsi: qla2xxx: Fix crash when I/O abort times out Quinn Tran scsi: qla2xxx: Fix warning message due to adisc being flushed Cezar Bulinaru net: tap: NULL pointer derefence in dev_parse_header_protocol when skb->dev is null Jeongjun Park media: hackrf: fix to not free memory after the device is registered in hackrf_probe() Abd-Alrhman Masalkhi media: vidtv: fix pass-by-value structs causing MSAN warnings Deepanshu Kartikey nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map Jeongjun Park media: as102: fix to not free memory after the device is registered in as102_usb_probe() Mingzhe Zou bcache: fix cached_dev.sb_bio use-after-free and crash Berk Cem Goksel ALSA: 6fire: fix use-after-free on disconnect Abhishek Kumar media: em28xx: fix use-after-free in em28xx_v4l2_open() Ruslan Valiyev media: vidtv: fix nfeeds state corruption on start_streaming failure Ritesh Harjani (IBM) mm/kasan: fix double free for kasan pXds Sean Christopherson KVM: x86: Use scratch field in MMIO fragment to hold small write values Sasha Levin checkpatch: add support for Assisted-by tag Ricardo Ribalda media: uvcvideo: Use heuristic to find stream entity Thadeu Lima de Souza Cascardo media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID Ricardo Ribalda media: uvcvideo: Allow extra entities Guocai He Revert "wifi: cfg80211: stop NAN and P2P in cfg80211_leave" Pengpeng Hou rxrpc: proc: size address buffers for %pISpc output David Howells rxrpc: Fix call removal to use RCU safe deletion Andy Shevchenko ACPI: property: Constify stubs for CONFIG_ACPI=n case Sean Christopherson KVM: SEV: Drop WARN on large size for KVM_MEMORY_ENCRYPT_REG_REGION ZhengYuan Huang ocfs2: handle invalid dinode in ocfs2_group_extend Tejas Bharambe ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY Ruslan Valiyev media: vidtv: fix NULL pointer dereference in vidtv_channel_pmt_match_sections Harin Lee ALSA: ctxfi: Limit PTP to a single page Fabio Porcedda USB: serial: option: add Telit Cinterion FN990A MBIM composition Junrui Luo staging: sm750fb: fix division by zero in ps_to_hz() Greg Kroah-Hartman fbdev: udlfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Daniel Brát usb: storage: Expand range of matched versions for VL817 quirks entry Nathan Rebello usbip: validate number_of_packets in usbip_pack_ret_submit() Greg Kroah-Hartman usb: gadget: renesas_usb3: validate endpoint index in standard request handlers Greg Kroah-Hartman usb: gadget: f_phonet: fix skb frags[] overflow in pn_rx_complete() Greg Kroah-Hartman usb: gadget: f_ncm: validate minimum block_len in ncm_unwrap_ntb() Greg Kroah-Hartman fbdev: tdfxfb: avoid divide-by-zero on FBIOPUT_VSCREENINFO Greg Kroah-Hartman ALSA: fireworks: bound device-supplied status before string array lookup Greg Kroah-Hartman NFC: digital: Bounds check NFC-A cascade depth in SDD response handler Greg Kroah-Hartman net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() Greg Kroah-Hartman HID: core: clamp report_size in s32ton() to avoid undefined shift Greg Kroah-Hartman HID: alps: fix NULL pointer dereference in alps_raw_event() Lin YuChen staging: rtl8723bs: initialize le_tmp64 in rtw_BIP_verify() Greg Kroah-Hartman i2c: s3c24xx: check the size of the SMBUS message before using it Samuel Page can: raw: fix ro->uniq use-after-free in raw_rcv() Junxi Qian nfc: llcp: add missing return after LLCP_CLOSED checks Haoze Xie batman-adv: hold claim backbone gateways by reference Florian Westphal netfilter: nft_set_pipapo: do not rely on ZERO_SIZE_PTR Maciej W. Rozycki MIPS: mm: Rewrite TLB uniquification for the hidden bit feature Maciej W. Rozycki MIPS: mm: Suppress TLB uniquification on EHINV hardware Maciej W. Rozycki MIPS: Always record SEGBITS in cpu_data.vmbits Stefan Wiehler mips: mm: Allocate tlb_vpn array atomically Thomas Bogendoerfer MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow Sebastian Brzezinka drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat Florian Westphal netfilter: conntrack: add missing netlink policy validations Alice Mikityanska l2tp: Drop large packets with UDP encap Jiexun Wang af_unix: read UNIX_DIAG_VFS data under unix_state_lock Zhengchuan Liang netfilter: ip6t_eui64: reject invalid MAC header for all packets Ren Wei netfilter: xt_multiport: validate range encoding in checkentry Xiang Mei netfilter: nfnetlink_log: initialize nfgenmsg in NLMSG_DONE terminator Greg Kroah-Hartman xfrm_user: fix info leak in build_mapping() Steffen Klassert xfrm: Wait for RCU readers during policy netns exit Maciej Fijalkowski xsk: tighten UMEM headroom validation to account for tailroom and min frame Agalakov Daniil e1000: check return value of e1000_read_eeprom Pengpeng Hou tracing/probe: reject non-closed empty immediate strings Eric Dumazet net: lapbether: handle NETDEV_PRE_TYPE_CHANGE Peng Li net: lapbether: replace comparison to NULL with "lapbeth_get_x25_dev" Peng Li net: lapbether: remove trailing whitespaces Xie He net: lapbether: Close the LAPB device before its underlying Ethernet device closes Ruide Cao net: sched: act_csum: validate nested VLAN headers Maíra Canal drm/vc4: Protect madv read in vc4_gem_object_mmap() with madv_lock Maíra Canal drm/vc4: Fix a memory leak in hang state error path Maíra Canal drm/vc4: Fix memory leak of BO array in hang state Long Li PCI: hv: Set default NUMA node to 0 for devices without affinity info Sebastian Krzyszkowiak arm64: dts: imx8mq: Set the correct gpu_ahb clock frequency Tomasz Merta ASoC: stm32_sai: fix incorrect BCLK polarity for DSP_A/B, LEFT_J Pengpeng Hou wifi: brcmfmac: validate bsscfg indices in IF events Arthur Husband ata: ahci: force 32-bit DMA for JMicron JMB582/JMB585 Benoît Sevens HID: roccat: fix use-after-free in roccat_report_event leo vriska HID: quirks: add HID_QUIRK_ALWAYS_POLL for 8BitDo Pro 3 Kuninori Morimoto ASoC: soc-core: call missing INIT_LIST_HEAD() for card_aux_list Pengpeng Hou wifi: wl1251: validate packet IDs before indexing tx_frames Florian Westphal netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry César Montoya ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg0xxx Goldwyn Rodrigues btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file() Wenyuan Li <2063309626@qq.com> can: mcp251x: add error handling for power enable in open and resume Cássio Gabriel ASoC: SOF: topology: reject invalid vendor array size in token parser Arnd Bergmann ALSA: asihpi: avoid write overflow check warning ------------- Diffstat: Documentation/vm/hugetlbfs_reserv.rst | 2 +- Makefile | 4 +- arch/arm/boot/dts/mt7623.dtsi | 2 +- arch/arm/mach-integrator/integrator_cp.c | 13 +- .../boot/dts/amlogic/meson-gxl-s905d-p230.dts | 3 +- .../arm64/boot/dts/freescale/imx8mq-librem5-r3.dts | 6 + arch/arm64/boot/dts/freescale/imx8mq-librem5.dtsi | 16 +- arch/arm64/boot/dts/freescale/imx8mq.dtsi | 2 +- .../boot/dts/qcom/sdm845-xiaomi-beryllium.dts | 72 ++++ arch/mips/include/asm/cpu-features.h | 1 - arch/mips/include/asm/cpu-info.h | 2 - arch/mips/include/asm/mipsregs.h | 2 + arch/mips/kernel/cpu-probe.c | 13 +- arch/mips/kernel/cpu-r3k-probe.c | 2 + arch/mips/mm/tlb-r4k.c | 299 ++++++++++++++--- arch/parisc/kernel/syscalls/syscall.tbl | 2 +- arch/powerpc/kexec/file_load_64.c | 2 +- arch/powerpc/net/bpf_jit_comp64.c | 20 +- arch/powerpc/platforms/44x/warp.c | 2 + arch/riscv/include/asm/pgtable.h | 2 +- arch/s390/kernel/debug.c | 8 + arch/um/drivers/cow_user.c | 8 +- arch/x86/include/asm/segment.h | 8 +- arch/x86/kernel/uprobes.c | 24 ++ arch/x86/kvm/svm/nested.c | 11 + arch/x86/kvm/svm/sev.c | 11 +- arch/x86/kvm/svm/svm.c | 10 + arch/x86/kvm/x86.c | 14 +- block/blk-cgroup.c | 4 + block/blk-mq.c | 6 +- block/blk.h | 3 +- block/elevator.c | 4 +- crypto/af_alg.c | 2 + crypto/authencesn.c | 5 + crypto/pcrypt.c | 7 +- drivers/acpi/video_detect.c | 8 + drivers/ata/ahci.c | 14 + drivers/base/core.c | 26 ++ drivers/base/dd.c | 12 + drivers/base/devres.c | 2 + drivers/block/drbd/drbd_nl.c | 8 +- drivers/bluetooth/hci_ldisc.c | 51 ++- drivers/cdrom/cdrom.c | 73 ++-- drivers/char/ipmi/ipmi_si_intf.c | 70 +++- drivers/char/ipmi/ipmi_ssif.c | 74 +++- drivers/char/tpm/tpm_tis_core.c | 4 + drivers/clk/clk-qoriq.c | 17 +- drivers/clk/clk-xgene.c | 2 + drivers/clk/imx/clk-imx6q.c | 12 +- drivers/clk/imx/clk-imx8mq.c | 4 +- drivers/clk/qcom/dispcc-sc7180.c | 8 + drivers/clk/qcom/dispcc-sm8250.c | 6 +- drivers/cpuidle/cpuidle-powernv.c | 5 +- drivers/cpuidle/cpuidle-pseries.c | 5 +- drivers/crypto/atmel-aes.c | 2 +- drivers/crypto/atmel-ecc.c | 1 + drivers/crypto/atmel-tdes.c | 8 +- drivers/crypto/ccp/ccp-crypto-aes.c | 7 +- drivers/crypto/ccp/sev-dev.c | 19 +- drivers/crypto/ccree/cc_hash.c | 1 + drivers/crypto/hisilicon/sec/sec_algs.c | 2 +- drivers/crypto/sa2ul.c | 4 +- drivers/dma/mxs-dma.c | 1 + drivers/firmware/efi/capsule-loader.c | 2 +- drivers/firmware/google/framebuffer-coreboot.c | 2 +- drivers/gpio/gpiolib-cdev.c | 21 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 3 + drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 66 ++++ drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 3 - drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c | 4 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_debugfs.c | 72 +++- drivers/gpu/drm/amd/display/dc/bios/bios_parser.c | 62 ++++ .../drm/amd/display/dc/bios/bios_parser_helper.c | 9 +- drivers/gpu/drm/amd/display/dc/calcs/Makefile | 3 +- .../gpu/drm/amd/display/dc/dce/dce_link_encoder.c | 4 +- drivers/gpu/drm/amd/display/dc/dcn30/Makefile | 4 +- drivers/gpu/drm/amd/display/dc/dsc/Makefile | 3 +- .../amd/display/include/grph_object_ctrl_defs.h | 4 + drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c | 15 + .../gpu/drm/amd/pm/powerplay/smumgr/ci_smumgr.c | 28 +- .../drm/arm/display/komeda/komeda_framebuffer.c | 6 +- .../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 16 +- drivers/gpu/drm/drm_gem_framebuffer_helper.c | 4 +- drivers/gpu/drm/gma500/oaktrail_hdmi.c | 1 + drivers/gpu/drm/i915/display/intel_dp.c | 9 +- drivers/gpu/drm/i915/gt/intel_engine_heartbeat.c | 26 +- drivers/gpu/drm/msm/adreno/a6xx_gpu_state.c | 2 +- drivers/gpu/drm/msm/adreno/a6xx_hfi.c | 14 +- drivers/gpu/drm/msm/dsi/dsi_cfg.c | 4 +- drivers/gpu/drm/msm/dsi/dsi_cfg.h | 2 +- drivers/gpu/drm/panel/panel-simple.c | 2 +- drivers/gpu/drm/panfrost/panfrost_drv.c | 2 + drivers/gpu/drm/radeon/ci_dpm.c | 9 +- drivers/gpu/drm/sun4i/sun4i_backend.c | 3 +- drivers/gpu/drm/vc4/vc4_bo.c | 3 + drivers/gpu/drm/vc4/vc4_gem.c | 19 +- drivers/hid/hid-alps.c | 3 + drivers/hid/hid-asus.c | 28 +- drivers/hid/hid-core.c | 3 + drivers/hid/hid-ids.h | 3 + drivers/hid/hid-quirks.c | 3 +- drivers/hid/hid-roccat.c | 2 + drivers/hid/usbhid/hid-core.c | 2 +- drivers/hwmon/pmbus/adm1266.c | 32 +- drivers/i2c/busses/i2c-s3c2410.c | 7 +- drivers/i3c/master.c | 7 +- drivers/iio/adc/ad7768-1.c | 9 +- drivers/infiniband/core/addr.c | 3 + drivers/infiniband/core/iwpm_msg.c | 6 +- drivers/infiniband/core/mad.c | 5 - drivers/infiniband/hw/mlx4/srq.c | 4 +- drivers/infiniband/hw/ocrdma/ocrdma_verbs.c | 4 +- drivers/infiniband/hw/vmw_pvrdma/pvrdma_verbs.c | 2 +- drivers/infiniband/sw/rxe/rxe_recv.c | 14 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 15 + drivers/iommu/intel/iommu.c | 3 + drivers/irqchip/irq-ath79-cpu.c | 7 - drivers/irqchip/irq-pic32-evic.c | 2 +- drivers/mailbox/mailbox-test.c | 39 ++- drivers/mailbox/mailbox.c | 9 +- drivers/md/bcache/super.c | 8 + drivers/md/dm-cache-metadata.c | 24 +- drivers/md/dm-cache-metadata.h | 5 - drivers/md/dm-cache-policy-smq.c | 4 + drivers/md/dm-cache-target.c | 111 ++++-- drivers/md/dm-ioctl.c | 6 +- drivers/md/dm-log.c | 6 +- drivers/md/dm-raid1.c | 6 +- drivers/md/dm-verity-fec.c | 8 +- drivers/md/raid10.c | 2 + drivers/md/raid5-cache.c | 48 ++- drivers/md/raid5.c | 8 +- drivers/media/dvb-frontends/dib8000.c | 4 +- drivers/media/i2c/imx219.c | 3 + drivers/media/rc/streamzap.c | 12 +- drivers/media/rc/xbox_remote.c | 9 +- drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_channel.c | 4 + drivers/media/test-drivers/vidtv/vidtv_mux.c | 4 +- drivers/media/test-drivers/vidtv/vidtv_ts.c | 48 +-- drivers/media/test-drivers/vidtv/vidtv_ts.h | 4 +- drivers/media/usb/as102/as102_usb_drv.c | 2 + drivers/media/usb/em28xx/em28xx-video.c | 14 +- drivers/media/usb/hackrf/hackrf.c | 7 +- drivers/media/usb/uvc/uvc_driver.c | 81 +++-- drivers/media/usb/uvc/uvc_queue.c | 3 +- drivers/media/usb/uvc/uvcvideo.h | 9 +- drivers/memory/tegra/tegra124-emc.c | 2 +- drivers/memory/tegra/tegra30-emc.c | 6 +- drivers/mfd/mc13xxx-core.c | 2 +- drivers/misc/ibmasm/ibmasmfs.c | 7 + drivers/misc/ibmasm/lowlevel.c | 12 +- drivers/misc/ibmasm/remote.c | 5 + drivers/mmc/core/block.c | 12 +- drivers/mmc/core/queue.h | 3 + drivers/mtd/devices/docg3.c | 3 +- drivers/mtd/maps/physmap-gemini.c | 2 +- drivers/mtd/nand/raw/sunxi_nand.c | 6 +- drivers/net/bareudp.c | 24 +- drivers/net/can/spi/mcp251x.c | 29 +- drivers/net/dsa/sja1105/sja1105_static_config.c | 6 +- .../net/ethernet/aquantia/atlantic/aq_pci_func.c | 2 +- drivers/net/ethernet/atheros/ag71xx.c | 3 + drivers/net/ethernet/broadcom/genet/bcmgenet.c | 15 +- drivers/net/ethernet/cirrus/cs89x0.c | 2 - drivers/net/ethernet/cortina/gemini.c | 21 +- drivers/net/ethernet/ibm/ibmveth.c | 22 ++ drivers/net/ethernet/ibm/ibmveth.h | 1 + drivers/net/ethernet/intel/e1000/e1000_ethtool.c | 8 +- drivers/net/ethernet/intel/e1000e/netdev.c | 1 + drivers/net/ethernet/intel/i40e/i40e_main.c | 1 - drivers/net/ethernet/intel/ice/ice_dcb_lib.c | 4 +- drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 1 + .../ethernet/netronome/nfp/nfpcore/nfp_target.c | 17 +- drivers/net/hamradio/6pack.c | 39 ++- drivers/net/netdevsim/dev.c | 2 +- drivers/net/phy/dp83869.c | 13 +- drivers/net/ppp/ppp_generic.c | 5 +- drivers/net/ppp/pppoe.c | 8 +- drivers/net/slip/slhc.c | 49 ++- drivers/net/tap.c | 23 +- drivers/net/usb/cdc-phonet.c | 7 +- drivers/net/usb/lan78xx.c | 31 +- drivers/net/usb/rtl8150.c | 12 +- drivers/net/vrf.c | 15 +- drivers/net/wan/lapbether.c | 23 +- drivers/net/wireless/ath/ath11k/hal.c | 14 +- drivers/net/wireless/ath/ath5k/base.c | 3 +- drivers/net/wireless/ath/ath9k/channel.c | 6 +- drivers/net/wireless/broadcom/b43/xmit.c | 3 +- drivers/net/wireless/broadcom/b43legacy/xmit.c | 3 +- .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c | 3 +- .../wireless/broadcom/brcm80211/brcmfmac/chip.c | 31 +- .../wireless/broadcom/brcm80211/brcmfmac/chip.h | 5 +- .../wireless/broadcom/brcm80211/brcmfmac/fweh.c | 5 + .../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 3 +- .../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 12 +- .../net/wireless/broadcom/brcm80211/include/soc.h | 2 +- drivers/net/wireless/mac80211_hwsim.c | 1 - drivers/net/wireless/marvell/mwifiex/11n_aggr.c | 1 + drivers/net/wireless/realtek/rtlwifi/pci.c | 1 + drivers/net/wireless/rsi/rsi_common.h | 5 +- drivers/net/wireless/ti/wl1251/tx.c | 8 +- drivers/nfc/trf7970a.c | 3 +- drivers/nvme/target/core.c | 2 +- drivers/parisc/lasi.c | 12 +- drivers/pci/controller/dwc/pcie-tegra194.c | 10 +- drivers/pci/controller/pci-hyperv.c | 8 + drivers/pci/pci.c | 48 ++- drivers/pci/pcie/aer.c | 2 - drivers/pcmcia/rsrc_nonstatic.c | 6 +- drivers/phy/marvell/phy-mvebu-a3700-utmi.c | 5 +- drivers/pinctrl/nomadik/pinctrl-abx500.c | 2 +- drivers/pinctrl/pinctrl-pic32.c | 20 +- drivers/platform/x86/dell_rbu.c | 6 +- drivers/platform/x86/intel-hid.c | 6 +- drivers/platform/x86/surfacepro3_button.c | 1 + drivers/power/supply/max17042_battery.c | 2 +- drivers/regulator/act8945a-regulator.c | 3 +- drivers/regulator/max77650-regulator.c | 2 +- drivers/rtc/class.c | 5 + drivers/rtc/interface.c | 12 +- drivers/rtc/rtc-abx80x.c | 2 + drivers/s390/cio/css.c | 2 +- drivers/scsi/isci/host.c | 3 + drivers/scsi/qla2xxx/qla_init.c | 20 +- drivers/scsi/sg.c | 29 +- drivers/scsi/sr.c | 25 +- drivers/scsi/sr.h | 1 - drivers/soc/qcom/ocmem.c | 7 +- drivers/soc/qcom/qcom_aoss.c | 2 +- drivers/soc/ti/omap_prm.c | 1 + drivers/spi/spi-fsl-qspi.c | 3 +- drivers/spi/spi-imx.c | 1 + drivers/spi/spi-mpc52xx.c | 3 +- drivers/spi/spi-mtk-nor.c | 4 +- drivers/spi/spi-orion.c | 6 + drivers/spi/spi-rockchip.c | 4 +- drivers/spi/spi-sprd.c | 3 +- drivers/spi/spi-ti-qspi.c | 1 + drivers/spi/spi-topcliff-pch.c | 6 +- drivers/spi/spi-zynqmp-gqspi.c | 4 +- drivers/staging/media/atomisp/pci/atomisp_ioctl.c | 4 + drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/staging/sm750fb/sm750.c | 3 + drivers/target/target_core_configfs.c | 2 +- drivers/target/target_core_sbc.c | 3 +- .../intel/int340x_thermal/int3400_thermal.c | 9 +- drivers/thermal/spear_thermal.c | 2 +- drivers/thermal/sprd_thermal.c | 4 +- drivers/tty/hvc/hvc_iucv.c | 11 +- drivers/usb/class/usblp.c | 3 +- drivers/usb/common/ulpi.c | 5 +- drivers/usb/gadget/function/f_ncm.c | 4 +- drivers/usb/gadget/function/f_phonet.c | 9 + drivers/usb/gadget/udc/omap_udc.c | 4 - drivers/usb/gadget/udc/renesas_usb3.c | 7 +- drivers/usb/host/xhci.c | 1 - drivers/usb/serial/option.c | 6 + drivers/usb/storage/unusual_devs.h | 7 +- drivers/usb/usbip/usbip_common.c | 12 + drivers/vhost/net.c | 4 +- drivers/video/backlight/sky81452-backlight.c | 3 + drivers/video/fbdev/matrox/g450_pll.c | 2 +- drivers/video/fbdev/offb.c | 7 +- drivers/video/fbdev/tdfxfb.c | 3 + drivers/video/fbdev/udlfb.c | 34 +- fs/adfs/super.c | 3 + fs/btrfs/extent_io.c | 4 +- fs/btrfs/extent_io.h | 12 +- fs/btrfs/inode.c | 30 +- fs/ceph/xattr.c | 1 + fs/cifs/cifs_spnego.c | 16 + fs/cifs/connect.c | 17 +- fs/ext2/inode.c | 14 +- fs/ext4/xattr.c | 4 +- fs/fuse/control.c | 4 +- fs/fuse/readdir.c | 4 + fs/gfs2/dir.c | 6 +- fs/gfs2/glops.c | 4 + fs/isofs/export.c | 2 +- fs/isofs/rock.c | 9 + fs/nfs/blocklayout/blocklayout.c | 4 +- fs/nilfs2/dat.c | 3 + fs/nilfs2/ioctl.c | 6 + fs/notify/fsnotify.c | 2 +- fs/notify/inotify/inotify_user.c | 1 + fs/notify/mark.c | 18 +- fs/ocfs2/alloc.c | 2 +- fs/ocfs2/aops.c | 75 +++-- fs/ocfs2/cluster/nodemanager.c | 2 +- fs/ocfs2/dir.c | 4 +- fs/ocfs2/dlm/dlmdomain.c | 10 +- fs/ocfs2/file.c | 4 +- fs/ocfs2/inode.c | 33 +- fs/ocfs2/ioctl.c | 18 +- fs/ocfs2/localalloc.c | 6 +- fs/ocfs2/mmap.c | 7 +- fs/ocfs2/namei.c | 2 +- fs/ocfs2/ocfs2.h | 4 +- fs/ocfs2/ocfs2_trace.h | 10 +- fs/ocfs2/quota_global.c | 2 +- fs/ocfs2/resize.c | 22 +- fs/ocfs2/xattr.c | 6 +- fs/omfs/inode.c | 6 + fs/pstore/ram_core.c | 4 + fs/quota/dquot.c | 38 ++- fs/sysfs/group.c | 2 +- fs/udf/misc.c | 8 +- fs/userfaultfd.c | 2 - include/dt-bindings/clock/qcom,dispcc-sc7180.h | 7 +- include/linux/acpi.h | 6 +- include/linux/cdrom.h | 1 + include/linux/dev_printk.h | 10 + include/linux/device.h | 48 ++- include/linux/dmi.h | 5 + include/linux/fsnotify_backend.h | 1 + include/linux/kvm_host.h | 3 +- include/linux/padata.h | 4 - include/linux/ppp_defs.h | 30 ++ include/linux/printk.h | 5 +- include/linux/quotaops.h | 9 +- include/linux/rtc.h | 2 + include/linux/spinlock_up.h | 20 +- include/linux/string.h | 12 + include/linux/tpm_eventlog.h | 9 +- include/linux/uprobes.h | 1 + include/linux/usb.h | 3 +- include/net/flow_dissector.h | 22 ++ include/net/ipv6.h | 6 - include/net/mac80211.h | 4 + include/net/pie.h | 2 +- include/net/red.h | 1 - include/net/route.h | 6 - include/net/udp_tunnel.h | 15 + include/sound/compress_driver.h | 2 - include/trace/events/btrfs.h | 9 +- include/trace/events/ib_mad.h | 13 +- include/trace/events/rxrpc.h | 8 + include/uapi/linux/rtc.h | 5 + include/video/udlfb.h | 1 + io_uring/io-wq.c | 3 +- io_uring/io_uring.c | 35 +- kernel/audit.c | 4 + kernel/auditsc.c | 2 +- kernel/bpf/local_storage.c | 2 +- kernel/cgroup/rdma.c | 2 +- kernel/events/uprobes.c | 10 +- kernel/padata.c | 136 ++------ kernel/taskstats.c | 1 + kernel/time/alarmtimer.c | 2 +- kernel/trace/ring_buffer.c | 8 +- kernel/trace/trace_branch.c | 8 +- kernel/trace/trace_events_hist.c | 12 +- kernel/trace/trace_probe.c | 2 +- kernel/trace/tracing_map.c | 17 +- lib/kunit/Kconfig | 5 +- lib/ts_kmp.c | 18 +- mm/backing-dev.c | 5 +- mm/kasan/init.c | 8 +- net/batman-adv/bat_iv_ogm.c | 85 +++-- net/batman-adv/bridge_loop_avoidance.c | 92 +++-- net/batman-adv/distributed-arp-table.c | 3 + net/batman-adv/fragmentation.c | 58 +++- net/batman-adv/gateway_client.c | 4 + net/batman-adv/originator.c | 4 +- net/batman-adv/tp_meter.c | 32 +- net/batman-adv/types.h | 6 +- net/bluetooth/bnep/core.c | 2 +- net/bluetooth/hci_event.c | 3 - net/bluetooth/l2cap_core.c | 8 +- net/bluetooth/l2cap_sock.c | 9 + net/bpf/test_run.c | 20 +- net/caif/cfsrvl.c | 14 +- net/can/raw.c | 11 +- net/ceph/crush/crush.c | 6 +- net/ceph/osdmap.c | 14 +- net/core/filter.c | 2 +- net/core/flow_dissector.c | 79 ++++- net/core/rtnetlink.c | 1 + net/ethtool/bitset.c | 8 +- net/ipv4/netfilter/arp_tables.c | 18 +- net/ipv4/netfilter/arpt_mangle.c | 8 + net/ipv4/nexthop.c | 36 +- net/ipv4/raw.c | 2 +- net/ipv4/route.c | 48 --- net/ipv4/tcp.c | 3 +- net/ipv4/tcp_bpf.c | 3 + net/ipv4/udp_tunnel_core.c | 48 +++ net/ipv6/exthdrs.c | 13 +- net/ipv6/icmp.c | 10 +- net/ipv6/ip6_gre.c | 5 +- net/ipv6/ip6_output.c | 68 ---- net/ipv6/ip6_udp_tunnel.c | 69 ++++ net/ipv6/netfilter/ip6t_eui64.c | 3 +- net/ipv6/netfilter/ip6t_hbh.c | 4 + net/ipv6/seg6_hmac.c | 2 + net/ipv6/xfrm6_protocol.c | 4 +- net/l2tp/l2tp_core.c | 5 + net/mac80211/tx.c | 4 +- net/netfilter/ipset/ip_set_hash_ipmark.c | 6 +- net/netfilter/ipset/ip_set_hash_ipport.c | 5 +- net/netfilter/ipset/ip_set_hash_ipportip.c | 5 +- net/netfilter/ipset/ip_set_hash_ipportnet.c | 5 +- net/netfilter/ipvs/ip_vs_xmit.c | 19 +- net/netfilter/nf_conntrack_netlink.c | 2 +- net/netfilter/nf_conntrack_proto_sctp.c | 13 +- net/netfilter/nf_conntrack_sip.c | 152 +++++++-- net/netfilter/nf_nat_amanda.c | 2 +- net/netfilter/nf_nat_sip.c | 34 +- net/netfilter/nfnetlink_log.c | 8 +- net/netfilter/nfnetlink_osf.c | 45 ++- net/netfilter/nft_bitwise.c | 3 +- net/netfilter/nft_ct.c | 2 + net/netfilter/nft_fwd_netdev.c | 10 + net/netfilter/nft_osf.c | 6 +- net/netfilter/nft_set_pipapo.c | 21 +- net/netfilter/nft_set_pipapo_avx2.c | 20 +- net/netfilter/xt_mac.c | 34 +- net/netfilter/xt_multiport.c | 34 +- net/netfilter/xt_owner.c | 37 +- net/netfilter/xt_physdev.c | 29 +- net/netfilter/xt_policy.c | 2 +- net/netfilter/xt_realm.c | 2 +- net/nfc/digital_technology.c | 6 + net/nfc/llcp_core.c | 2 + net/openvswitch/datapath.c | 35 +- net/openvswitch/vport.c | 3 + net/phonet/pep.c | 19 +- net/qrtr/ns.c | 11 + net/rds/af_rds.c | 10 +- net/rds/connection.c | 14 + net/rds/ib.c | 24 +- net/rds/ib.h | 1 + net/rds/ib_rdma.c | 2 +- net/rds/message.c | 21 +- net/rds/rdma.c | 4 - net/rxrpc/call_object.c | 22 +- net/rxrpc/conn_event.c | 17 +- net/rxrpc/key.c | 12 +- net/rxrpc/proc.c | 26 +- net/rxrpc/recvmsg.c | 22 +- net/rxrpc/rxkad.c | 7 +- net/rxrpc/sendmsg.c | 2 +- net/sched/act_csum.c | 6 +- net/sched/act_ct.c | 23 +- net/sched/sch_cake.c | 15 +- net/sched/sch_choke.c | 28 +- net/sched/sch_fq_codel.c | 3 +- net/sched/sch_fq_pie.c | 19 +- net/sched/sch_gred.c | 3 - net/sched/sch_hhf.c | 19 +- net/sched/sch_netem.c | 57 +++- net/sched/sch_pie.c | 52 ++- net/sched/sch_red.c | 34 +- net/sched/sch_sfb.c | 54 +-- net/sched/sch_taprio.c | 371 +++++++++++---------- net/sctp/sm_statefuns.c | 6 + net/sctp/socket.c | 11 +- net/smc/smc_clc.c | 4 +- net/strparser/strparser.c | 8 + net/tipc/msg.c | 14 +- net/tls/tls_sw.c | 26 +- net/unix/diag.c | 21 +- net/vmw_vsock/af_vsock.c | 6 +- net/vmw_vsock/hyperv_transport.c | 4 +- net/vmw_vsock/virtio_transport_common.c | 3 +- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/core.c | 4 +- net/wireless/scan.c | 3 + net/xdp/xdp_umem.c | 3 +- net/xfrm/xfrm_policy.c | 2 + net/xfrm/xfrm_user.c | 4 + scripts/checkpatch.pl | 10 + scripts/dtc/dtc-lexer.l | 3 - security/integrity/ima/ima_crypto.c | 2 +- sound/aoa/soundbus/i2sbus/core.c | 9 +- sound/core/compress_offload.c | 75 ----- sound/core/control.c | 4 + sound/core/seq/oss/seq_oss_rw.c | 6 +- sound/core/sound.c | 7 + sound/firewire/fireworks/fireworks_command.c | 5 +- sound/firewire/tascam/tascam-hwdep.c | 1 + sound/pci/asihpi/hpicmn.c | 6 + sound/pci/asihpi/hpimsgx.c | 6 +- sound/pci/ctxfi/ctatc.c | 3 +- sound/pci/ctxfi/ctvmem.h | 2 +- sound/pci/hda/patch_realtek.c | 5 +- sound/soc/codecs/ab8500-codec.c | 6 +- sound/soc/fsl/fsl_easrc.c | 125 +++++-- sound/soc/soc-core.c | 1 + sound/soc/sof/topology.c | 2 +- sound/soc/sti/uniperif_player.c | 9 +- sound/soc/stm/stm32_sai_sub.c | 3 + sound/usb/6fire/chip.c | 17 +- sound/usb/6fire/control.c | 10 +- sound/usb/caiaq/control.c | 52 ++- sound/usb/caiaq/device.c | 39 ++- sound/usb/caiaq/input.c | 2 +- sound/usb/clock.c | 6 + sound/usb/format.c | 2 +- sound/usb/midi.c | 12 +- sound/usb/misc/ua101.c | 12 +- sound/usb/mixer.c | 14 +- sound/usb/mixer_quirks.c | 12 +- sound/usb/stream.c | 4 +- tools/perf/util/branch.h | 3 + tools/perf/util/expr.c | 3 +- tools/perf/util/util.h | 1 - tools/testing/ktest/ktest.pl | 35 +- tools/testing/selftests/cgroup/test_memcontrol.c | 11 +- tools/testing/selftests/lib.mk | 1 + .../testing/selftests/mqueue/{setting => settings} | 0 514 files changed, 4832 insertions(+), 2163 deletions(-)