[PATCH 6.12 000/113] 6.12.70-rc1 review

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

This is the start of the stable review cycle for the 6.12.70 release.
There are 113 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed, 11 Feb 2026 14:22:44 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.70-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 6.12.70-rc1

Werner Sembach <wse@tuxedocomputers.com>
    ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU.

Vishwaroop A <va@nvidia.com>
    spi: tegra114: Preserve SPI mode bits in def_command1_reg

Felix Gu <ustc.gu@gmail.com>
    spi: tegra: Fix a memory leak in tegra_slink_probe()

Breno Leitao <leitao@debian.org>
    spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer

Breno Leitao <leitao@debian.org>
    spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer

Breno Leitao <leitao@debian.org>
    spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one

Breno Leitao <leitao@debian.org>
    spi: tegra210-quad: Move curr_xfer read inside spinlock

Breno Leitao <leitao@debian.org>
    spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer

Chris Bainbridge <chris.bainbridge@gmail.com>
    ASoC: amd: fix memory leak in acp3x pdm dma ops

Sergey Shtylyov <s.shtylyov@auroraos.dev>
    ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update()

Shigeru Yoshida <syoshida@redhat.com>
    ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF

Andrew Fasano <andrew.fasano@nist.gov>
    netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()

Arnd Bergmann <arnd@arndb.de>
    hwmon: (occ) Mark occ_init_attribute() as __printf

Karthik Poosa <karthik.poosa@intel.com>
    drm/xe/pm: Disable D3Cold for BMG only on specific platforms

Rodrigo Vivi <rodrigo.vivi@intel.com>
    drm/xe/pm: Also avoid missing outer rpm warning on system suspend

Shuicheng Lin <shuicheng.lin@intel.com>
    drm/xe/query: Fix topology query pointer advance

Jacob Keller <jacob.e.keller@intel.com>
    drm/mgag200: fix mgag200_bmc_stop_scanout()

Paolo Abeni <pabeni@redhat.com>
    net: gro: fix outer network offset

Chen Ni <nichen@iscas.ac.cn>
    net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi()

Melissa Wen <mwen@igalia.com>
    drm/amd/display: fix wrong color value mapping on MCM shaper LUT

Daniel Hodges <hodgesd@meta.com>
    tipc: use kfree_sensitive() for session key material

Jakub Kicinski <kuba@kernel.org>
    net: don't touch dev->stats in BPF redirect paths

Sergey Senozhatsky <senozhatsky@chromium.org>
    net: usb: r8152: fix resume reset deadlock

Eric Dumazet <edumazet@google.com>
    macvlan: fix error recovery in macvlan_common_newlink()

Marek Behún <kabel@kernel.org>
    net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module

Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
    net: sfp: convert sfp quirks to modify struct sfp_module_support

Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
    net: sfp: pre-parse the module support

Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
    net: phy: add phy_interface_copy()

Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
    net: phy: add phy_interface_weight()

Junrui Luo <moonafterrain@outlook.com>
    dpaa2-switch: add bounds check for if_id in IRQ handler

Zilin Guan <zilin@seu.edu.cn>
    net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup

Zilin Guan <zilin@seu.edu.cn>
    net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup

Zilin Guan <zilin@seu.edu.cn>
    net: liquidio: Initialize netdev pointer before queue setup

Junrui Luo <moonafterrain@outlook.com>
    dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero

Eric Dumazet <edumazet@google.com>
    net/sched: cls_u32: use skb_header_pointer_careful()

Eric Dumazet <edumazet@google.com>
    net: add skb_header_pointer_careful() helper

ChenXiaoSong <chenxiaosong@kylinos.cn>
    smb/client: fix memory leak in smb2_open_file()

Ricardo Neri <ricardo.neri-calderon@linux.intel.com>
    platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable

Mario Limonciello <mario.limonciello@amd.com>
    platform/x86: hp-bioscfg: Skip empty attribute names

Kaushlendra Kumar <kaushlendra.kumar@intel.com>
    platform/x86: intel_telemetry: Fix PSS event register mask

Rafael J. Wysocki <rafael.j.wysocki@intel.com>
    platform/x86: toshiba_haps: Fix memory leaks in add/remove routines

Martin Hamilton <m@martinh.net>
    ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio

Qu Wenruo <wqu@suse.com>
    btrfs: reject new transactions if the fs is fully read-only

Miri Korenblit <miriam.rachel.korenblit@intel.com>
    wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice

Miri Korenblit <miriam.rachel.korenblit@intel.com>
    wifi: mac80211: correctly check if CSA is active

Maurizio Lombardi <mlombard@redhat.com>
    scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()

Tim Guttzeit <t.guttzeit@tuxedocomputers.com>
    ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU

Maurizio Lombardi <mlombard@redhat.com>
    scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()

Veerendranath Jakkam <veerendranath.jakkam@oss.qualcomm.com>
    wifi: cfg80211: Fix bitrate calculation overflow for HE rates

Kaushlendra Kumar <kaushlendra.kumar@intel.com>
    regmap: maple: free entry on mas_store_gfp() failure

Devyn Liu <liudingyuan@h-partners.com>
    spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization

Dimitrios Katsaros <patcherwork@gmail.com>
    ASoC: tlv320adcx140: Propagate error codes during probe

Radhi Bajahaw <bajahawradhi@gmail.com>
    ASoC: amd: yc: Fix microphone on ASUS M6500RE

Hannes Reinecke <hare@kernel.org>
    nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()

Chaitanya Kulkarni <ckulkarnilinux@gmail.com>
    nvme-fc: release admin tagset if init fails

Shengjiu Wang <shengjiu.wang@nxp.com>
    ASoC: simple-card-utils: Check device node before overwrite direction

Kery Qi <qikeyu2017@gmail.com>
    ASoC: davinci-evm: Fix reference leak in davinci_evm_probe

Baochen Qiang <baochen.qiang@oss.qualcomm.com>
    wifi: mac80211: collect station statistics earlier when disconnect

Dennis Marttinen <twelho@welho.tech>
    HID: logitech: add HID++ support for Logitech MX Anywhere 3S

Wupeng Ma <mawupeng1@huawei.com>
    ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free

Perry Yuan <perry.yuan@amd.com>
    drm/amd/pm: Disable MMIO access during SMU Mode 1 reset

Rodrigo Lugathe da Conceição Alves <lugathe2@gmail.com>
    HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101)

Kwok Kin Ming <kenkinming2002@gmail.com>
    HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()

Chris Chiu <chris.chiu@canonical.com>
    HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list

Daniel Gomez <da.gomez@samsung.com>
    netfilter: replace -EEXIST with -EBUSY

Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
    PCI: qcom: Remove ASPM L0s support for MSM8996 SoC

Ruslan Krupitsa <krupitsarus@outlook.com>
    ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk

Matouš Lánský <matouslansky@post.cz>
    ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55

Siarhei Vishniakou <svv@google.com>
    HID: playstation: Center initial joystick axes to prevent spurious events

Zhang Lixu <lixu.zhang@intel.com>
    HID: intel-ish-hid: Reset enum_devices_done before enumeration

Lukas Gerlach <lukas.gerlach@cispa.de>
    riscv: Sanitize syscall table indexing under speculation

Filipe Manana <fdmanana@suse.com>
    btrfs: fix reservation leak in some error paths when inserting inline extent

DaytonCL <artem749507@gmail.com>
    HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL

Zhang Lixu <lixu.zhang@intel.com>
    HID: intel-ish-hid: Update ishtp bus match to support device ID table

ZhangGuoDong <zhangguodong@kylinos.cn>
    smb/server: fix refcount leak in parse_durable_handle_context()

Chenghao Duan <duanchenghao@kylinos.cn>
    LoongArch: Enable exception fixup for specific ADE subcode

ZhangGuoDong <zhangguodong@kylinos.cn>
    smb/server: fix refcount leak in smb2_open()

FengWei Shih <dannyshih@synology.com>
    md: suspend array while updating raid_disks via sysfs

Huacai Chen <chenhuacai@kernel.org>
    LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED

ZhangGuoDong <zhangguodong@kylinos.cn>
    smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()

shechenglong <shechenglong@xfusion.com>
    block,bfq: fix aux stat accumulation destination

Ethan Nelson-Moore <enelsonmoore@gmail.com>
    net: usb: sr9700: support devices with virtual driver CD

Peter Åstrand <astrand@lysator.liu.se>
    wifi: wlcore: ensure skb headroom before skb_push

Moon Hee Lee <moonhee.lee.ca@gmail.com>
    wifi: mac80211: ocb: skip rx_no_sta when interface is not joined

Steven Rostedt <rostedt@goodmis.org>
    tracing: Fix ftrace event field alignments

Andrii Nakryiko <andrii@kernel.org>
    procfs: avoid fetching build ID while holding VMA lock

Zhiquan Li <zhiquan_li@163.com>
    KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures

Carlos Llamas <cmllamas@google.com>
    binderfs: fix ida_alloc_max() upper bound

Carlos Llamas <cmllamas@google.com>
    binder: fix BR_FROZEN_REPLY error log

Kang Chen <k.chen@smail.nju.edu.cn>
    hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()

Ming Lei <ming.lei@redhat.com>
    ublk: fix deadlock when reading partition table

Todd Brandt <todd.e.brandt@intel.com>
    tools/power turbostat: fix GCC9 build regression

Lukas Wunner <lukas@wunner.de>
    PCI/ERR: Ensure error recoverability at all times

Sean Christopherson <seanjc@google.com>
    KVM: Don't clobber irqfd routing type when deassigning irqfd

Bert Karwatzki <spasswolf@web.de>
    Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"

Kairui Song <kasong@tencent.com>
    mm, shmem: prevent infinite loop on truncate race

Max Yuan <maxyuan@google.com>
    gve: Correct ethtool rx_dropped calculation

Debarghya Kundu <debarghyak@google.com>
    gve: Fix stats report corruption on queue count change

Daniel Vogelbacher <daniel@chaospixel.com>
    ceph: fix oops due to invalid pointer for kfree() in parse_longname()

Thomas Weissschuh <thomas.weissschuh@linutronix.de>
    ARM: 9468/1: fix memset64() on big-endian

Ilya Dryomov <idryomov@gmail.com>
    rbd: check for EOD after exclusive lock is ensured to be held

Viacheslav Dubeyko <Slava.Dubeyko@ibm.com>
    ceph: fix NULL pointer dereference in ceph_mds_auth_match()

Hao Ge <hao.ge@linux.dev>
    mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single

Xu Yang <xu.yang_2@nxp.com>
    pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains

Xu Yang <xu.yang_2@nxp.com>
    pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup

Jacky Bai <ping.bai@nxp.com>
    pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset

Xu Yang <xu.yang_2@nxp.com>
    pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup

Gabor Juhos <j4g8y7@gmail.com>
    pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state

Takashi Iwai <tiwai@suse.de>
    ALSA: aloop: Fix racy access at PCM trigger

Kaushlendra Kumar <kaushlendra.kumar@intel.com>
    platform/x86: intel_telemetry: Fix swapped arrays in PSS output

Andrew Cooper <andrew.cooper3@citrix.com>
    x86/kfence: fix booting on 32bit non-PAE systems

Josh Poimboeuf <jpoimboe@kernel.org>
    x86/vmware: Fix hypercall clobbers

YunJe Shin <yjshin0438@gmail.com>
    nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec


-------------

Diffstat:

 Makefile                                           |  4 +-
 arch/arm/include/asm/string.h                      |  5 +-
 arch/loongarch/kernel/traps.c                      |  5 ++
 arch/loongarch/mm/cache.c                          |  8 +--
 arch/riscv/kernel/traps.c                          |  4 +-
 arch/x86/include/asm/kfence.h                      |  7 +-
 arch/x86/include/asm/vmware.h                      |  4 +-
 block/bfq-cgroup.c                                 |  2 +-
 drivers/android/binder.c                           |  5 +-
 drivers/android/binderfs.c                         |  8 +--
 drivers/base/regmap/regcache-maple.c               | 11 +--
 drivers/block/rbd.c                                | 33 +++++----
 drivers/block/ublk_drv.c                           | 30 +++++++-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |  3 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c            |  3 -
 .../gpu/drm/amd/display/dc/dcn30/dcn30_cm_common.c |  7 +-
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c   |  7 +-
 .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c   |  9 ++-
 drivers/gpu/drm/mgag200/mgag200_bmc.c              | 31 ++++----
 drivers/gpu/drm/mgag200/mgag200_drv.h              |  6 ++
 drivers/gpu/drm/xe/xe_pm.c                         | 17 +++--
 drivers/gpu/drm/xe/xe_query.c                      |  2 +-
 drivers/hid/hid-ids.h                              |  4 ++
 drivers/hid/hid-logitech-hidpp.c                   |  2 +
 drivers/hid/hid-multitouch.c                       |  1 +
 drivers/hid/hid-playstation.c                      |  5 ++
 drivers/hid/hid-quirks.c                           |  2 +
 drivers/hid/i2c-hid/i2c-hid-core.c                 |  1 +
 drivers/hid/intel-ish-hid/ishtp-hid-client.c       |  1 +
 drivers/hid/intel-ish-hid/ishtp/bus.c              | 12 +++-
 drivers/hwmon/occ/common.c                         |  1 +
 drivers/md/md.c                                    |  4 +-
 drivers/net/ethernet/adi/adin1110.c                |  3 +
 drivers/net/ethernet/cavium/liquidio/lio_main.c    | 39 +++++-----
 drivers/net/ethernet/cavium/liquidio/lio_vf_main.c |  4 +-
 .../net/ethernet/freescale/dpaa2/dpaa2-switch.c    | 10 +++
 drivers/net/ethernet/google/gve/gve_ethtool.c      | 77 +++++++++++++-------
 drivers/net/ethernet/google/gve/gve_main.c         |  4 +-
 drivers/net/macvlan.c                              |  5 +-
 drivers/net/phy/sfp-bus.c                          | 83 +++++++++++++++-------
 drivers/net/phy/sfp.c                              | 51 ++++++-------
 drivers/net/phy/sfp.h                              |  4 +-
 drivers/net/usb/r8152.c                            | 29 ++++----
 drivers/net/usb/sr9700.c                           |  5 ++
 drivers/net/wireless/ti/wlcore/tx.c                |  5 ++
 drivers/nvme/host/fc.c                             |  2 +
 drivers/nvme/target/tcp.c                          | 26 +++++--
 drivers/pci/bus.c                                  |  3 +
 drivers/pci/controller/dwc/pcie-qcom.c             |  4 +-
 drivers/pci/pci.c                                  |  3 -
 drivers/platform/x86/hp/hp-bioscfg/bioscfg.c       |  5 ++
 drivers/platform/x86/intel/intel_plr_tpmi.c        |  2 +-
 drivers/platform/x86/intel/telemetry/debugfs.c     |  4 +-
 drivers/platform/x86/intel/telemetry/pltdrv.c      |  2 +-
 drivers/platform/x86/toshiba_haps.c                |  2 +-
 drivers/pmdomain/imx/gpcv2.c                       |  8 +--
 drivers/pmdomain/imx/imx8m-blk-ctrl.c              |  2 +-
 drivers/pmdomain/imx/imx8mp-blk-ctrl.c             | 30 ++++++++
 drivers/pmdomain/qcom/rpmpd.c                      |  2 +-
 drivers/spi/spi-hisi-kunpeng.c                     |  4 +-
 drivers/spi/spi-tegra114.c                         |  3 +
 drivers/spi/spi-tegra20-slink.c                    |  6 +-
 drivers/spi/spi-tegra210-quad.c                    | 36 ++++++++--
 drivers/target/iscsi/iscsi_target_util.c           | 10 ++-
 fs/btrfs/disk-io.c                                 | 13 ++++
 fs/btrfs/fs.h                                      |  8 +++
 fs/btrfs/inode.c                                   | 16 +++--
 fs/ceph/crypto.c                                   |  9 +--
 fs/ceph/mds_client.c                               |  5 +-
 fs/ceph/mdsmap.c                                   | 26 +++++--
 fs/ceph/mdsmap.h                                   |  1 +
 fs/ceph/super.h                                    | 16 ++++-
 fs/hfsplus/dir.c                                   |  2 +-
 fs/hfsplus/hfsplus_fs.h                            |  8 ++-
 fs/hfsplus/unicode.c                               | 24 +++++--
 fs/hfsplus/xattr.c                                 |  6 +-
 fs/proc/task_mmu.c                                 | 42 +++++++----
 fs/smb/client/smb2file.c                           |  1 +
 fs/smb/server/smb2pdu.c                            |  8 ++-
 include/linux/buildid.h                            |  3 +
 include/linux/ceph/ceph_fs.h                       |  6 ++
 include/linux/phy.h                                | 10 +++
 include/linux/sfp.h                                | 22 ++++++
 include/linux/skbuff.h                             | 12 ++++
 kernel/trace/ring_buffer.c                         |  2 +
 kernel/trace/trace.h                               |  7 +-
 kernel/trace/trace_entries.h                       | 26 +++----
 kernel/trace/trace_export.c                        | 21 ++++--
 lib/buildid.c                                      | 42 +++++++----
 mm/shmem.c                                         | 23 +++---
 mm/slub.c                                          |  6 +-
 net/bridge/netfilter/ebtables.c                    |  2 +-
 net/core/filter.c                                  |  8 +--
 net/core/gro.c                                     |  2 +
 net/ipv6/ip6_fib.c                                 |  3 +-
 net/mac80211/iface.c                               |  8 ++-
 net/mac80211/key.c                                 |  3 +-
 net/mac80211/ocb.c                                 |  3 +
 net/mac80211/sta_info.c                            |  7 +-
 net/netfilter/nf_log.c                             |  4 +-
 net/netfilter/nf_tables_api.c                      |  2 +-
 net/netfilter/x_tables.c                           |  2 +-
 net/sched/cls_u32.c                                | 13 ++--
 net/tipc/crypto.c                                  |  4 +-
 net/wireless/util.c                                |  8 ++-
 sound/drivers/aloop.c                              | 62 +++++++++-------
 sound/pci/hda/patch_realtek.c                      | 27 ++++++-
 sound/soc/amd/renoir/acp3x-pdm-dma.c               |  2 +
 sound/soc/amd/yc/acp6x-mach.c                      |  7 ++
 sound/soc/codecs/tlv320adcx140.c                   |  3 +
 sound/soc/generic/simple-card-utils.c              |  4 +-
 sound/soc/ti/davinci-evm.c                         | 39 +++++++---
 sound/usb/mixer_quirks.c                           |  9 +--
 tools/power/x86/turbostat/turbostat.c              | 15 ++--
 tools/testing/selftests/kvm/Makefile               |  1 +
 virt/kvm/eventfd.c                                 | 44 ++++++------
 116 files changed, 943 insertions(+), 421 deletions(-)