From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id DC0214B0492; Mon, 17 Aug 2026 13:39:28 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786973971; cv=none; b=UNjHBeugnZH+CBIQ0tfj07aQAq7l39x9yBFj+HMzI9+jOSP2LkPR8/p6IwaQZDD3z1ygCzpRTAeJSBSuQdc2FT1HA2OYrbc6U+og68QB8FfklyGDPPk282ZvtPUursJMNZ6oCgW3g0/v9+jdR28H3kz21GGDpW6YCqVr3CUqXD8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786973971; c=relaxed/simple; bh=FgifjokAWisON8Q4iAbn48bmE3uGoXvbGEadE7dnAoI=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type; b=U0+9fJTY4mufIdWN3KpVXNcNXrbyauNMvoLrpuFkMhWwiI1cEn/Dm0J2A5msSiqIiMfHC/HQpFg4o+LK4BMTrEFh62CjhSfhK6ZzcG00LNsMNJ4fcHx5iMoc4Xnl8RgqXgl1/otHM+/o6wlN47pwVKf9SoX1HCSBVIAO5hW5KBY= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=zQ7LGSYK; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="zQ7LGSYK" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 3D1CC1F000E9; Mon, 17 Aug 2026 13:39:27 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1786973968; bh=cseho2ZIrNPESvZRUu+ikMwWNbisCUeZ3qd0dIkH0Bo=; h=From:To:Cc:Subject:Date; b=zQ7LGSYKCuR+dLj8JMuCtqLxSPQw7puJFHKf5dOgXvl5wP+q/1ayLioJnRa+C8UDj V+mjjugebRr39ENMO/APMKXzYdD0znnC9FIHAQqoxXSQ6fJYmyYvgd+la45qBF0CBr ZuzI9m0UHnOZFbXIuQ9hu/BtZL6iajoDv4Nrgr/Q= From: Greg Kroah-Hartman To: stable@vger.kernel.org Cc: Greg Kroah-Hartman , patches@lists.linux.dev, linux-kernel@vger.kernel.org, torvalds@linux-foundation.org, akpm@linux-foundation.org, linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org, lkft-triage@lists.linaro.org, pavel@nabladev.com, jonathanh@nvidia.com, f.fainelli@gmail.com, sudipm.mukherjee@gmail.com, rwarsow@gmx.de, conor@kernel.org, hargar@microsoft.com, broonie@kernel.org, achill@achill.org, sr@sladewatkins.com Subject: [PATCH 7.1 000/271] 7.1.9-rc1 review Date: Mon, 17 Aug 2026 15:28:45 +0200 Message-ID: <20260817132536.752504388@linuxfoundation.org> X-Mailer: git-send-email 2.55.0 Precedence: bulk X-Mailing-List: patches@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: quilt/0.69 X-stable: review X-Patchwork-Hint: ignore X-KernelTest-Patch: http://kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.9-rc1.gz X-KernelTest-Tree: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git X-KernelTest-Branch: linux-7.1.y X-KernelTest-Patches: git://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git X-KernelTest-Version: 7.1.9-rc1 X-KernelTest-Deadline: 2026-08-19T13:25+00:00 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is the start of the stable review cycle for the 7.1.9 release. There are 271 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 19 Aug 2026 13:23:44 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.9-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman Linux 7.1.9-rc1 Xu Rao thunderbolt: Fix bandwidth group reservation indexing Bryam Vargas thunderbolt: Bound the DROM dual link port number before indexing sw->ports Qing Ming sctp: clear new_transport when removing a peer Yuxiang Yang sctp: fix use-after-free of cached ASCONF chunk Baul Lee sctp: keep chunk->transport in step with the list it is queued on Xu Rao scsi: scsi_debug: Negate wrapped memcmp() result Chengfeng Ye bpf, sockmap: Fix sk_redir use-after-free in send verdict Eric Biggers fsverity: Fix silent truncation in bpf_get_fsverity_digest() Eric Biggers fsverity: Fix bpf_get_fsverity_digest() dynptr assumptions Hugh Dickins mm/filemap: __filemap_add_folio() restore index before retrying Mimi Zohar ima: Instantiate file_truncate and path_truncate hooks Tejun Heo sched_ext: Take cgroup_lock() first in scx_cgroup_lock() Tejun Heo sched/psi: Create the psimon kthread outside of cgroup_mutex Tejun Heo sched/psi: Shut down rtpoll_timer in psi_cgroup_free() Zhan Xusheng fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() Andrey Albershteyn fs,fsverity: remove check for fsverity being enabled in setattr_prepare() Zhiling Zou ip6_tunnel: clear skb2->cb[] in ip6ip6_err() Yuejie Shi ipv6: fix Route Information option length validation Lorenzo Stoakes (ARM) mm/ptdump: always stabilise against page table freeing using init_mm Zhiling Zou mm/page_table_check: skip special zero mappings Tengda Wu ring-buffer: Use current_context for safe per-CPU buffer swap Vincent Donnefort ring-buffer: Initialise reader page order in rb_allocate_cpu_buffer() Ahmad Byagowi ptp: ocp: Fix board ID over-read Rafael J. Wysocki Revert "thermal: hwmon: Register a hwmon device for each thermal zone" Rafael J. Wysocki Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Vincent Donnefort ring-buffer: Prevent resizing of persistent ring buffer Steven Rostedt eventfs: Use children field for rcu head and add memory barriers Shuangpeng Bai eventfs: Fix use-after-free in eventfs_remove_rec() Sean Christopherson KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Paolo Bonzini KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Frank Sorenson smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() Shuangpeng Bai smb: client: Fix use-after-free in cifs_try_adding_channels() Jun Yang tipc: read le->link under the node lock in tipc_node_link_down() chanyoung tls: don't leave a full plaintext sk_msg ring unpushed Jérémy Jean tls: rx: restore msg_iter before TLS 1.3 optimistic retry Jun Yang vhost: reset the vring metadata cache on vring reconfiguration Sun Jian veth: fix skb length accounting after XDP frag adjustment Weiming Shi vsock/virtio: avoid refilling the RX queue after teardown Weiming Shi vsock/virtio: read virtqueues under worker locks Baul Lee vxlan: do not arm the ageing timer on a device that is down Zhiling Zou xdp: reject clones that overrun skb_shared_info tailroom Breno Leitao x86/mce: Set up the polling timer before CMCI discovery Rik van Riel x86/CPU: Add a tlbi= cmdline switch Lorenzo Stoakes (ARM) arm64: remove redundant concurrent ptdump UAF mitigation Hidayath Khan dibs: initialise dibs->lock in dibs_dev_alloc() Asad Kamal Revert "drm/amdgpu: fix aperture mapping leak" Christian Brauner binfmt_misc: don't warn when the mount is completed from another user namespace Christian Brauner ovl: don't warn when the mount is completed from another user namespace Hyunjung Ko net/sched: act_gact, act_police: range check the fallback control action Hyunjung Ko net/sched: act_ct: fix sk_buff leak when the header checks reject a packet Yangyu Chen net: atlantic: free RX pages of consumed but not refilled buffers Yangyu Chen net: atlantic: free stranded TX buffers on ring deinit Zihan Xi netfilter: nf_conntrack: defer invalid log until after unlock Zhiling Zou netfilter: bridge: release template ct on non-IP path Koichiro Den NTB: ntb_netdev: Preserve RX queue depth on allocation failure Pavel Begunkov net: devmem: prevent net-iov / page mixing Baul Lee net/x25: fix use-after-free of the socket by its timers Alexandra Winter net/dibs: Correct freeing of dmb_clientid_arr Kyle Zeng ipv6: prevent in6_dev_get() from resurrecting inet6_dev Daming Li net: smc: fix splice entry lifetime imbalance in smc_rx_splice Ahmed Naseef net: phy: mediatek: fix TX blink masks using the RX bits Lorenzo Stoakes (ARM) mm/huge_memory: fix huge_zero_pfn race Matt Fleming mm/huge_memory: initialise workingset state before folio split Hui Su tracing: Fix NULL pointer dereference in module event cache removal Vincent Donnefort ring-buffer: Prevent subbuf order change when resizing is disabled Rik van Riel fbdev: bitblit: bound-check glyph index in bit_cursor() Michael Wu tracing: Fix race between update_event_fields and, event_define_fields Aditya Chillara perf/core: Fix group leader use-after-free after sibling detach Maíra Canal drm/v3d: Serialize the scheduler timeout handlers Baul Lee ALSA: us144mkii: re-anchor capture URBs on resubmission Xu Rao ALSA: hda/tas2781: fix ACPI reference handling Baul Lee ALSA: FCP: fix OOB write in fcp_meter_ctl_get() Baul Lee ALSA: usx2y: bound the hwdep mmap fault offset Takashi Iwai ALSA: usb: Fix UAF at delayed release of MIDI2 EPs SJ Park mm/damon: adjust isolated pages stat for DAMOS_MIGRATE_{HOT,COLD} SJ Park samples/damon/mtier: error out for zero quota goal target values liyouhong mm/damon/ops-common: putback folios on invalid migrate nid SJ Park mm/damon/lru_sort: error out for >10000 active_mem_bp Hui Su ring-buffer: Fix crash passing ERR_PTR to kthread_stop() Eddie Lin misc: fastrpc: fix memory leak in fastrpc_channel_ctx_free Junrui Luo misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke Ekansh Gupta misc: fastrpc: Remove buffer from list prior to unmap operation Anandu Krishnan E misc: fastrpc: fix channel ctx ref leak when session alloc fails Ekansh Gupta misc: fastrpc: Fix initial memory allocation for Audio PD memory pool Mariano Baragiola staging: rtl8723bs: validate monitor transmit frame lengths Panagiotis Petrakopoulos staging: rtl8723bs: fix missing shared-key auth challenge length check Muhammad Bilal staging: rtl8723bs: fix OOB read in WMM_param_handler() Muhammad Bilal staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() Fan Wu serial: amba-pl011: synchronize DMA teardown Fan Wu serial: amba-pl011: cancel RS485 hrtimers after freeing IRQ Fan Wu serial: amba-pl011: fix indefinite RS485 post-send delay Ryan Wilbur serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx Cunhao Lu <1579567540@qq.com> serial: 8250_dma: Clear stale RX state on shutdown Luca Fresi serial: sc16is7xx: enable THRI before filling TX FIFO Jan Sebastian Götte serial: qcom-geni: fix TX DMA buffer flush Alice Ryhl rust_binder: do not query current thread for all ioctls Mathieu Dubois-Briand nvmem: layouts: Add fixed-layout driver Aelin Reidel nvmem: apple-spmi-nvmem: wrap regmap calls to satisfy CFI Alexander Usyskin mei: pull kvfree out of spinlock Chengfeng Ye ipv4: fix use-after-free in fib_nhc_update_mtu() Zihan Xi ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops Michal Luczaj selftests/bpf: Adapt sockmap update error handling Michal Luczaj selftests/bpf: Ensure UDP sockets are bound Nils Helmig Bluetooth: btusb: Add TP-Link UB600 for Realtek 8761BUV Alexej Sidorenko Bluetooth: btrtl: fix RTL8761B/BU broken LE extended scan Maciej Fijalkowski selftests/xsk: account reclaimed invalid Tx descriptors Maciej Fijalkowski selftests/xsk: fix too-many-frags multi-buffer Tx test Keno Fischer futex: Prevent robust futex exit race some more Alex Deucher Revert "drm/amd/display: Fix backlight max_brightness to match exported range" Baul Lee net: bridge: mrp: fix uninitialised bytes on the wire Chengfeng Ye netfilter: ebt_nflog: pin the NFLOG backend Philipp David igc: fix netdev not re-attached after resume if interface is down Zihan Xi mac802154: fix netdev use-after-free in beacon worker Zhiling Zou inet: frags: publish queues before arming timer Qihang Tang net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header Sergey V. Frolov net: octeontx2-pf: Fix UB in shift operation Zijie Huang net/sched: reject overly deep qdisc hierarchies Zhiling Zou net: openvswitch: reallocate update replies for mismatched IDs Sun Jian net: fix skb length accounting after generic XDP frag adjustment Zihan Xi packet: synchronize pressure clearing with ring reconfiguration Doruk Tan Ozturk net/packet: reset the MAC header on the packet-socket transmit path Qihang Tang packet: use consistent hard_header_len in TX_RING send path Qihang Tang packet: use consistent hard_header_len in non-ring send paths Kyle Zeng ipvs: clear IPv4 options after rebasing tunnel ICMP errors Yizhou Zhao ipvs: separate destination availability state Julian Anastasov ipvs: properly update the overload flag on dest edit Julian Anastasov ipvs: add totalconns for dest Zhiling Zou ipvs: stop estimator after disabled calc phase Lincoln Wallace ima: fix out-of-bounds read in xattr_verify() Lorenzo Stoakes (ARM) mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF Dmitry Torokhov Input: evdev - fix information leak in evdev_pass_values() Andy Lutomirski mm: fix incorrect flush address in direct page table reclaim Joshua Rogers vt: stabilize tty reference in kbd_keycode with tty_port_tty_get Joshua Rogers vt: add permission check for KDSKBMETA ioctl Laurent Vivier usbnet: cap max_mtu for drivers without bind callback Doruk Tan Ozturk net: usb: ipheth: fix carrier_work UAF on disconnect Yi Cong net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() Sonali Pradhan usb: gadget: f_ncm: Use unsigned int for ndp_index Pawel Laszczak usb: cdnsp: fix incorrect endian conversions for APB timeout register Xu Rao thunderbolt: icm: Preserve USB4 proxy data-valid bit Lachlan Hodges usb: xhci: use BIT_ULL for CRCR bits to fix incorrect 64bit mask Aleksandr Nogikh usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() Jiangshan Yi usb: misc: usbio: check ibuf_len against rxbuf_len in bulk msg Ishaan Dandekar usb: quirks: Add ShanWan gamepad to quirk list Nikhil Solanke usb: core: Add quirk for 255-bytes initial config read Baul Lee ALSA: usb-audio: fix OOB write on Type II inbound URBs Dmitry Torokhov Input: evdev - sanitize event type index when fetching event masks Dongli Zhang net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() Takashi Iwai ALSA: usb-audio: Fix sticky mixer regressions on M-Audio Fast Track Ultra Ali Ahmet Memis hwmon: (corsair-psu) serialize debugfs access against hwmon Guenter Roeck hwmon: Support guard() and scoped_guard for subsystem locks Guenter Roeck hwmon: (ltc4282) Fix parsing adi,current-limit-sense-microvolt Guenter Roeck hwmon: (ltc4282) Clamp negative current limits Guenter Roeck hwmon: (ltc4282) Avoid overflow in maximum power calculation Qingshuang Fu hwmon: (ads7828) Fix external VREF regulator handling Wilken Gottwalt hwmon: (corsair-psu) fix possible out-of-bounds access on missing string termination Kumar Kartikeya Dwivedi rqspinlock: Reset tail when preserving queue on deadlock Hongyan Xu watchdog: at91sam9_wdt: prevent timer rearm during teardown Maximilian Immanuel Brandtner tls: don't abort the connection on signal-interrupted sends Xin Long sctp: clear control chunk transport if it is being removed Eric Dumazet net/atm: fix slab-out-of-bounds read in vcc_setsockopt() Alexandra Winter s390/ism: Fix UAF of sba and ieq during ism_dev_exit() Bhargava Marreddy bnge: Fix resource leak in bnge_init_nic() error path Hongyan Xu ata: pata_sl82c105: fix bridge revision use-after-free Fan XinRan net: thunderbolt: Tear down DMA paths before stopping the rings Łukasz Patron net: qrtr: ns: Raise lookup limit to 128 Sidraya Jayagond net/smc: fix TOCTOU race between smc_listen_out() and listener close Eric Dumazet net: remove WARN_ON_ONCE() from sk_mc_loop() Pengpeng Hou net: prestera: validate firmware header length Henry Martin net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length Eric Dumazet netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() Jiayuan Chen tcp: fix TFO max_qlen accounting across reuseport migration Luxiao Xu bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie Qing Luo sctp: fix addip_serial increment on ASCONF_ACK allocation failure Keegan Freyhof bnxt_en: Fix PTP PPS setting bug Michael Chan bnxt_en: Disable EOP for TPA on all chips to prevent data corruption Shravya KN bnxt_en: Refresh VNIC default ring on queue restart if needed Shravya KN bnxt_en: Determine and store default RX ring in vnic structure Shravya KN bnxt_en: Move RSS table fill outside __bnxt_hwrm_vnic_set_rss() Bobby Eshleman net/mlx5e: fix BQL reset on SQ re-activation Alok Tiwari bnge: use int for bnge_fix_rings_count() return value Stefan Agner net: stmmac: resume PHY before hardware setup when opening the interface Martin Kaiser selftests/ftrace: refactor eprobes test to fix argument checks Guenter Roeck hwmon: (pmbus/lm25066) Fix PMBus coefficient calculations Qingshuang Fu hwmon: (nzxt-smart2) Check return value of init_device() in probe Marcin Bernatowicz drm/xe/uc: Apply RCS/CCS yield policy to SR-IOV VFs Michał Winiarski drm/xe: Fix memory leak in exec_queue_set_hang_replay_state() Jamal Hadi Salim net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers Cen Zhang (Microsoft) net/openvswitch: check Ethernet header length in key_extract() Jia Jia vhost-scsi: reject feature changes after endpoint Linfeng Sun vhost-scsi: Validate T10 PI scatterlist counts Toke Høiland-Jørgensen net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter Xuanqiang Luo udp: fix potential use-after-free in tunnel segmentation Alok Tiwari bnge: Fix NULL pointer dereference in aux device release Stanislav Fomichev xsk: validate metadata when processing requests Stanislav Fomichev xsk: move xsk_tx_metadata_request() to xdp_sock_drv.h Stanislav Fomichev xsk: validate launch-time metadata size Stanislav Fomichev xsk: clear metadata pointer when no timestamp is requested Stanislav Fomichev xsk: pass TX metadata pointer by reference Stanislav Fomichev xsk: require at least 16 bytes of TX metadata Will Chen bnxt: fix memory leak in bnxt_queue_mem_alloc error cases Nathan Gao tcp: do not change rcv_ssthresh in tcp_measure_rcv_mss() Guenter Roeck hwmon: (pmbus) Fix type confusion in notification logic Guenter Roeck hwmon: (pmbus/core) Avoid race condition during probe Christian Borntraeger vdpa/mlx5: Fix buffer length in create_direct_keys() Yousef Alhouseen vhost/vdpa: reject overflowing PA map page counts on 32-bit Linfeng Sun  vhost_iotlb: bound map allocation in add_range Rong Zhang ALSA: usb-audio: Add QUIRK_FLAG_MIXER_GET_CUR_BROKEN for Logitech PRO X 2 LIGHTSPEED Rong Zhang ALSA: usb-audio: Add QUIRK_FLAG_MIXER_GET_CUR_BROKEN Jose Fernandez (Anthropic) bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() Babanpreet Singh counter: microchip-tcb-capture: Fix DT channel validation Chengfeng Ye bpf: Fix netns reference imbalance in conntrack kfuncs Lizhi Hou accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages() Michael Guralnik net/mlx5: fw_tracer, return NULL on create error Or Har-Toov devlink: fix net namespace reference leak in reload Jiawen Liu <1298662399@qq.com> net: hisilicon: hix5hd2_gmac: remove redundant NAPI delete Jamal Hadi Salim net/sched: cls_route: fix fastmap use-after-free on filter Mahanta Jambigi net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() Yiyang Chen bpf: Propagate untrusted pointer state in commuted arithmetic Yiyang Chen bpf: Preserve pointer state for commuted arithmetic Lizhi Hou accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() Qu Wenruo btrfs: initialize inode mapping flags for cached inodes Dmitry Antipov btrfs: fix memory leak in btrfs_do_encoded_write() David Lee btrfs: lzo: reject inline extents without valid headers Qu Wenruo btrfs: lzo: add error message for invalid headers Matti Vaittinen watchdog: bd96801_wdt: Fix timeout for enabled WDG Julian Anastasov ipvs: return the csum validation for forward hook Julian Anastasov ipvs: avoid out-of-bounds write in ip_vs_nat_icmp Jozsef Kadlecsik netfilter: ipset: switch ext_size to atomic64_t Nikhil P. Rao pds_core: cancel pending PCI reset work on AER recovery Nikhil P. Rao pds_core: keep the health thread stopped during reset Shay Drory net/mlx5e: TC, Check if flow is PEER before acquiring devcom lock Satish Kharat enic: fix tx_hang_reset use-after-free on device removal Xiang Mei (Microsoft) bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor Fan Ye Revert "net: thunderbolt: Enable end-to-end flow control also in transmit" Jijie Shao net: hns3: fix speed configuration residue after driver reload Pengpeng Hou drm/bridge: ps8640: propagate AUX transfer register errors Qingfang Deng ovpn: fix incorrect use of rcu_access_pointer() Antonio Quartulli ovpn: ensure TCP vars are initialized first Antonio Quartulli ovpn: disable IPv4 redirects on MP interfaces Antonio Quartulli ovpn: hash floated peer by transport identity only Antonio Quartulli ovpn: zero-initialize sockaddr before learning a floated endpoint Antonio Quartulli ovpn: ensure socket is owned by ovpn before deref sk_user_data Antonio Quartulli ovpn: rehash peer in by_transp_addr table on CMD_PEER_SET Antonio Quartulli ovpn: skip rehash for peers already removed from by_id Rosen Penev ARM: dts: BCM5301X: fix PCIe controller 2 second interrupt Ralf Lici ovpn: add missing rtnl_link_ops->get_size callback Hans Ulli Kroll pinctrl: qcom: ipq806x: mark pci reset as a GPIO pin function Hans Ulli Kroll pinctrl: qcom: ipq806x: mark gpio as a GPIO pin function Kuba Piecuch selftests/sched_ext: Handle sleeping task affinity changes in numa test Yuho Choi ARM: npcm: Fix OF node refcount leaks in SMP setup Yun Zhou xfs: handle NULL b_addr in xfs_buf_free Karthikeyan KS soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read Daniel Drake arm64: dts: broadcom: bcm2712: Remove non-functional EL2 virtual timer Anna Schumaker NFS: Decrement refcounts if allocating nfs_free_stateid_data fails Anna Schumaker NFS: Pin the 'struct nfs_server' during a FREE_STATEID call Tejun Heo sched_ext: Don't enable non-ext tasks in the sub-sched task loops Tejun Heo sched_ext: Skip sub-disable teardown for never-linked sub-schedulers Tejun Heo sched_ext: Reject setting disallow from init_task outside the enable path Dmitry Baryshkov arm64: dts: qcom: sdm850-lenovo-yoga-c630: lower PSCI cluster idle Alexander Koskovich arm64: dts: qcom: sm8650: Fix IPA IMEM slice Krzysztof Kozlowski arm64: dts: qcom: monaco: Add default GIC address cells Akhil P Oommen arm64: dts: qcom: purwa: Fix GPU IOMMU property Bjorn Andersson arm64: dts: qcom: glymur: fix QUP serial engine IRQs Bjorn Andersson arm64: dts: qcom: glymur: fix PCIe SMMU interrupts Ray Wu drm/amd/display: Check for tg ops in dce110_set_avmute Ray Wu drm/amd/display: Add AV mute wait frames to dce110_set_avmute Mark Tomlinson gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Mykyta Yatsenko selftests/bpf: Add tests for sleepable tracepoint programs Michal Luczaj selftests/bpf: Fail unbound UDP on sockmap update Al Viro mount: honour SB_NOUSER in the new mount API ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 9 ++ Documentation/hwmon/hwmon-kernel-api.rst | 7 +- Documentation/sound/alsa-configuration.rst | 12 ++ MAINTAINERS | 5 + Makefile | 4 +- arch/arm/boot/dts/broadcom/bcm-ns.dtsi | 2 +- arch/arm/mach-npcm/platsmp.c | 2 + arch/arm64/boot/dts/broadcom/bcm2712.dtsi | 2 - arch/arm64/boot/dts/qcom/glymur.dtsi | 32 ++-- arch/arm64/boot/dts/qcom/monaco.dtsi | 1 + arch/arm64/boot/dts/qcom/purwa.dtsi | 2 + .../boot/dts/qcom/sdm850-lenovo-yoga-c630.dts | 4 + arch/arm64/boot/dts/qcom/sm8650.dtsi | 4 +- arch/arm64/include/asm/ptdump.h | 2 - arch/arm64/mm/mmu.c | 43 +----- arch/arm64/mm/ptdump.c | 11 +- arch/x86/kernel/cpu/common.c | 10 ++ arch/x86/kernel/cpu/mce/core.c | 2 +- arch/x86/kvm/mmu/mmu.c | 3 + arch/x86/kvm/svm/sev.c | 34 ++-- arch/x86/kvm/svm/svm.h | 1 + drivers/accel/amdxdna/amdxdna_gem.c | 47 +++--- drivers/android/binder/process.rs | 12 +- drivers/ata/pata_sl82c105.c | 4 +- drivers/bluetooth/btrtl.c | 13 ++ drivers/bluetooth/btusb.c | 2 + drivers/counter/microchip-tcb-capture.c | 4 +- drivers/dibs/dibs_loopback.c | 1 - drivers/dibs/dibs_main.c | 16 +- drivers/gpio/gpio-pca953x.c | 19 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 35 +++-- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 6 +- .../drm/amd/display/dc/hwss/dce110/dce110_hwseq.c | 24 ++- drivers/gpu/drm/bridge/parade-ps8640.c | 27 +++- drivers/gpu/drm/v3d/v3d_drv.h | 6 + drivers/gpu/drm/v3d/v3d_sched.c | 9 +- drivers/gpu/drm/xe/xe_exec_queue.c | 3 + drivers/gpu/drm/xe/xe_uc.c | 7 +- drivers/hwmon/ads7828.c | 11 +- drivers/hwmon/corsair-psu.c | 8 +- drivers/hwmon/ltc4282.c | 20 ++- drivers/hwmon/nzxt-smart2.c | 6 +- drivers/hwmon/pmbus/lm25066.c | 5 +- drivers/hwmon/pmbus/pmbus_core.c | 65 +++++--- drivers/input/evdev.c | 27 ++-- drivers/misc/fastrpc.c | 27 ++-- drivers/misc/mei/client.c | 25 +-- drivers/net/bonding/bond_alb.c | 10 +- drivers/net/ethernet/amd/pds_core/core.h | 1 + drivers/net/ethernet/amd/pds_core/main.c | 14 +- drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 51 +++++- drivers/net/ethernet/aquantia/atlantic/aq_ring.h | 1 + drivers/net/ethernet/aquantia/atlantic/aq_vec.c | 2 +- drivers/net/ethernet/broadcom/bnge/bnge_auxr.c | 9 +- drivers/net/ethernet/broadcom/bnge/bnge_netdev.c | 2 - drivers/net/ethernet/broadcom/bnge/bnge_resc.c | 3 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 64 +++++--- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 + drivers/net/ethernet/broadcom/bnxt/bnxt_ptp.c | 7 +- drivers/net/ethernet/cisco/enic/enic_main.c | 5 +- drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 1 - .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 6 +- drivers/net/ethernet/intel/igc/igc_main.c | 10 +- .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 6 +- .../net/ethernet/marvell/prestera/prestera_pci.c | 3 + .../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 16 +- drivers/net/ethernet/mellanox/mlx5/core/en.h | 2 +- .../net/ethernet/mellanox/mlx5/core/en/tc_priv.h | 1 + drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 15 +- drivers/net/ethernet/mellanox/mlx5/core/en/xdp.h | 4 +- .../net/ethernet/mellanox/mlx5/core/en/xsk/tx.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 4 +- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 4 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 13 +- drivers/net/ntb_netdev.c | 15 +- drivers/net/ovpn/main.c | 64 +++++--- drivers/net/ovpn/netlink.c | 6 + drivers/net/ovpn/peer.c | 172 +++++++++++++++------ drivers/net/ovpn/peer.h | 1 + drivers/net/ovpn/socket.c | 9 ++ drivers/net/phy/mediatek/mtk.h | 8 +- drivers/net/tap.c | 24 +-- drivers/net/thunderbolt/main.c | 33 ++-- drivers/net/usb/ax88179_178a.c | 4 +- drivers/net/usb/ipheth.c | 11 +- drivers/net/usb/usbnet.c | 3 +- drivers/net/veth.c | 22 ++- drivers/net/vxlan/vxlan_core.c | 2 +- drivers/nvmem/apple-spmi-nvmem.c | 20 ++- drivers/nvmem/core.c | 24 +-- drivers/nvmem/internals.h | 2 + drivers/nvmem/layouts.c | 11 -- drivers/nvmem/layouts/Makefile | 1 + drivers/nvmem/layouts/fixed-layout.c | 58 +++++++ drivers/pinctrl/qcom/pinctrl-ipq8064.c | 8 +- drivers/pinctrl/qcom/pinctrl-msm.h | 5 + drivers/ptp/ptp_ocp.c | 4 +- drivers/s390/net/ism_drv.c | 19 ++- drivers/scsi/scsi_debug.c | 4 +- drivers/soc/aspeed/Makefile | 1 + drivers/soc/aspeed/aspeed-lpc-snoop.c | 38 +++-- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 3 + drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 2 +- drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 3 + drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 4 + drivers/thermal/thermal_hwmon.c | 154 ++++++++++++------ drivers/thunderbolt/eeprom.c | 9 +- drivers/thunderbolt/icm.c | 2 +- drivers/thunderbolt/tb.c | 2 +- drivers/tty/serial/8250/8250_dma.c | 12 +- drivers/tty/serial/8250/8250_of.c | 38 +++++ drivers/tty/serial/amba-pl011.c | 86 +++++++---- drivers/tty/serial/qcom_geni_serial.c | 43 +++--- drivers/tty/serial/sc16is7xx.c | 3 + drivers/tty/vt/keyboard.c | 5 +- drivers/tty/vt/vt_ioctl.c | 2 + drivers/usb/atm/cxacru.c | 2 + drivers/usb/cdns3/cdnsp-gadget.c | 4 +- drivers/usb/core/config.c | 32 +++- drivers/usb/core/quirks.c | 7 + drivers/usb/gadget/function/f_ncm.c | 2 +- drivers/usb/host/xhci.h | 12 +- drivers/usb/misc/usbio.c | 2 +- drivers/vdpa/mlx5/core/mlx5_vdpa.h | 2 + drivers/vdpa/mlx5/core/mr.c | 8 +- drivers/vdpa/mlx5/core/resources.c | 11 +- drivers/vdpa/vdpa_sim/vdpa_sim.c | 10 +- drivers/vdpa/vdpa_user/iova_domain.c | 11 +- drivers/vhost/iotlb.c | 47 ++++-- drivers/vhost/scsi.c | 17 ++ drivers/vhost/vdpa.c | 18 ++- drivers/vhost/vhost.c | 16 ++ drivers/video/fbdev/core/bitblit.c | 9 +- drivers/watchdog/at91sam9_wdt.c | 4 +- drivers/watchdog/bd96801_wdt.c | 5 +- fs/attr.c | 2 +- fs/binfmt_misc.c | 3 +- fs/btrfs/inode.c | 4 +- fs/btrfs/lzo.c | 16 +- fs/crypto/policy.c | 2 +- fs/namespace.c | 4 + fs/nfs/nfs4proc.c | 17 +- fs/overlayfs/super.c | 3 +- fs/smb/client/sess.c | 2 +- fs/smb/client/smb1transport.c | 28 +++- fs/tracefs/event_inode.c | 28 +++- fs/tracefs/internal.h | 4 +- fs/verity/measure.c | 15 +- fs/xfs/xfs_buf.c | 2 +- include/linux/dibs.h | 2 +- include/linux/hwmon.h | 3 + include/linux/mmap_lock.h | 1 + include/linux/netdevice.h | 11 +- include/linux/netfilter/ipset/ip_set.h | 2 +- include/linux/nvmem-provider.h | 6 + include/linux/psi.h | 4 +- include/linux/sched/ext.h | 10 +- include/linux/usb/quirks.h | 3 + include/net/act_api.h | 19 +++ include/net/addrconf.h | 4 +- include/net/ip_vs.h | 48 +++--- include/net/libeth/xsk.h | 2 +- include/net/route.h | 2 + include/net/sch_generic.h | 1 + include/net/xdp_sock.h | 47 +----- include/net/xdp_sock_drv.h | 77 +++++++-- include/uapi/linux/ip_vs.h | 6 - kernel/bpf/rqspinlock.c | 5 +- kernel/bpf/verifier.c | 29 ++-- kernel/cgroup/cgroup.c | 23 ++- kernel/events/core.c | 67 ++++---- kernel/futex/core.c | 85 ++++++---- kernel/sched/ext.c | 47 ++++-- kernel/sched/psi.c | 75 +++++++-- kernel/trace/ring_buffer.c | 15 +- kernel/trace/trace_events.c | 4 +- mm/damon/lru_sort.c | 2 + mm/damon/ops-common.c | 13 +- mm/damon/paddr.c | 2 + mm/damon/vaddr.c | 3 +- mm/filemap.c | 6 + mm/huge_memory.c | 53 ++++--- mm/memory.c | 2 +- mm/page_table_check.c | 20 ++- mm/pagewalk.c | 36 +++-- mm/ptdump.c | 7 + mm/vmalloc.c | 40 +++-- net/atm/common.c | 14 +- net/bridge/br_mrp.c | 6 +- net/bridge/netfilter/ebt_nflog.c | 17 +- net/bridge/netfilter/nf_conntrack_bridge.c | 1 + net/core/datagram.c | 3 + net/core/dev.c | 10 +- net/core/filter.c | 4 +- net/core/sock.c | 1 - net/core/xdp.c | 2 +- net/devlink/dev.c | 1 + net/ipv4/fib_semantics.c | 101 +++++++----- net/ipv4/inet_connection_sock.c | 20 ++- net/ipv4/inet_fragment.c | 10 +- net/ipv4/route.c | 29 ++++ net/ipv4/tcp_bpf.c | 2 + net/ipv4/tcp_input.c | 2 +- net/ipv4/tcp_ipv4.c | 43 +++--- net/ipv4/udp_offload.c | 4 +- net/ipv6/ip6_tunnel.c | 3 + net/ipv6/route.c | 8 +- net/mac802154/scan.c | 4 + net/ncsi/ncsi-netlink.c | 4 + net/netfilter/ipset/ip_set_bitmap_gen.h | 4 +- net/netfilter/ipset/ip_set_core.c | 6 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipset/ip_set_list_set.c | 4 +- net/netfilter/ipvs/ip_vs_conn.c | 45 ++---- net/netfilter/ipvs/ip_vs_core.c | 76 ++++----- net/netfilter/ipvs/ip_vs_ctl.c | 81 ++++++++-- net/netfilter/ipvs/ip_vs_dh.c | 4 +- net/netfilter/ipvs/ip_vs_est.c | 10 +- net/netfilter/ipvs/ip_vs_lblc.c | 2 +- net/netfilter/ipvs/ip_vs_lblcr.c | 8 +- net/netfilter/ipvs/ip_vs_lc.c | 4 +- net/netfilter/ipvs/ip_vs_proto_sctp.c | 4 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 2 - net/netfilter/ipvs/ip_vs_sync.c | 7 +- net/netfilter/ipvs/ip_vs_xmit.c | 6 +- net/netfilter/nf_conntrack_bpf.c | 72 ++++++--- net/netfilter/nf_conntrack_proto.c | 6 + net/netfilter/nf_conntrack_proto_sctp.c | 12 +- net/netfilter/nf_conntrack_proto_tcp.c | 132 ++++++++++------ net/netfilter/nf_flow_table_ip.c | 3 + net/openvswitch/datapath.c | 29 +++- net/openvswitch/flow.c | 11 +- net/packet/af_packet.c | 72 ++++++--- net/qrtr/ns.c | 2 +- net/sched/act_ct.c | 29 +++- net/sched/act_gact.c | 5 + net/sched/act_police.c | 6 + net/sched/cls_api.c | 17 +- net/sched/cls_route.c | 35 +++-- net/sched/sch_api.c | 9 ++ net/sched/sch_cake.c | 1 - net/sctp/associola.c | 11 +- net/sctp/outqueue.c | 1 + net/sctp/sm_make_chunk.c | 3 +- net/sctp/sm_statefuns.c | 6 +- net/smc/af_smc.c | 3 +- net/smc/smc_llc.c | 3 +- net/smc/smc_rx.c | 19 +-- net/tipc/node.c | 15 +- net/tls/tls_sw.c | 18 ++- net/vmw_vsock/virtio_transport.c | 14 +- net/x25/af_x25.c | 4 +- net/x25/x25_timer.c | 25 +-- net/xdp/xdp_umem.c | 2 + net/xdp/xsk.c | 11 +- net/xdp/xsk_buff_pool.c | 6 +- samples/damon/mtier.c | 3 + security/integrity/ima/ima_appraise.c | 9 +- security/integrity/ima/ima_main.c | 39 +++++ sound/hda/codecs/side-codecs/tas2781_hda_spi.c | 3 +- sound/usb/endpoint.c | 6 +- sound/usb/fcp.c | 10 +- sound/usb/midi2.c | 9 ++ sound/usb/mixer.c | 60 +++++-- sound/usb/mixer.h | 1 + sound/usb/quirks.c | 7 + sound/usb/usbaudio.h | 13 ++ sound/usb/usx2y/us144mkii_capture.c | 1 + sound/usb/usx2y/usX2Yhwdep.c | 2 + sound/usb/usx2y/usx2yhwdeppcm.c | 2 + .../selftests/bpf/prog_tests/sockmap_basic.c | 6 +- .../selftests/bpf/prog_tests/sockmap_listen.c | 21 +-- tools/testing/selftests/bpf/prog_tests/test_xsk.c | 50 +++--- tools/testing/selftests/bpf/test_maps.c | 13 +- tools/testing/selftests/bpf/verifier/sleepable.c | 17 +- .../ftrace/test.d/dynevent/add_remove_eprobe.tc | 16 +- tools/testing/selftests/net/tls.c | 57 +++++++ tools/testing/selftests/sched_ext/numa.bpf.c | 13 +- 279 files changed, 3087 insertions(+), 1355 deletions(-)