From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 337B43FFAB5; Thu, 12 Mar 2026 20:12:22 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773346343; cv=none; b=N05VZy0DAytMIRaQCHUOJFx2wI0rMoaFOX6nfIGAJ6pz73AhYaun2qzWm8CoV00NWEuPaU77wJ19WpEoVkpLrTw3FZ2X0QIJi1RpZcw6AEmUkskaZxFaVYtVIIGsoO9DuPnj5hO+n7mdqsH04x7WFe8Uiq1qizq9rzH/SfxtQtc= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1773346343; c=relaxed/simple; bh=+JHtm3yVRkPviqjlgQZXhjjTRA8YGdzzOJv3pPnojDI=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type; b=rKdNkXpiPkGTDEl6H51WnToKI6ooxNZmfUBhTRdWfYR83+Rn01XS6b4J3I9jj5bwHcDyfqLRmJF4H/HcMH/EPxjuk15DzHcp8wBY1AoC/Ds5bmfCOvklbn/CNauBqowCsHjAVMNHBDQKE9soHr8yd9bo0g4b7L7HQyx9XztFSrQ= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=oK0yTuF5; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="oK0yTuF5" Received: by smtp.kernel.org (Postfix) with ESMTPSA id B4A84C4CEF7; Thu, 12 Mar 2026 20:12:21 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1773346342; bh=+JHtm3yVRkPviqjlgQZXhjjTRA8YGdzzOJv3pPnojDI=; h=From:To:Cc:Subject:Date:From; b=oK0yTuF5ZAkAqYpFobntoabsimsUya5KZWTuvRQIOelOkccIeCU0gVsIe2yC4zGe2 IHY0vGY9dTC66GNYkzcAoR7AXCHwiJSGatSj1um0N4/MoHE8PJsU1m3c5fJ0ObVusv S9vTQAIppd4O1dELfUQxUMszzyc5hk3WCTKHVlxA= From: Greg Kroah-Hartman To: stable@vger.kernel.org Cc: Greg Kroah-Hartman , patches@lists.linux.dev, linux-kernel@vger.kernel.org, torvalds@linux-foundation.org, akpm@linux-foundation.org, linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org, lkft-triage@lists.linaro.org, pavel@nabladev.com, jonathanh@nvidia.com, f.fainelli@gmail.com, sudipm.mukherjee@gmail.com, rwarsow@gmx.de, conor@kernel.org, hargar@microsoft.com, broonie@kernel.org, achill@achill.org, sr@sladewatkins.com Subject: [PATCH 6.12 000/265] 6.12.77-rc1 review Date: Thu, 12 Mar 2026 21:06:27 +0100 Message-ID: <20260312201018.128816016@linuxfoundation.org> X-Mailer: git-send-email 2.53.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: quilt/0.69 X-stable: review X-Patchwork-Hint: ignore X-KernelTest-Patch: http://kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.77-rc1.gz X-KernelTest-Tree: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git X-KernelTest-Branch: linux-6.12.y X-KernelTest-Patches: git://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git X-KernelTest-Version: 6.12.77-rc1 X-KernelTest-Deadline: 2026-03-14T20:10+00:00 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is the start of the stable review cycle for the 6.12.77 release. There are 265 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 13 Mar 2026 20:09:29 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.77-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman Linux 6.12.77-rc1 Guenter Roeck ata: libata-eh: Fix detection of deferred qc timeouts Niklas Cassel ata: libata: cancel pending work after clearing deferred_qc Damien Le Moal ata: libata-eh: correctly handle deferred qc timeouts Damien Le Moal ata: libata-core: fix cancellation of a port deferred qc work Baokun Li ext4: fix potential null deref in ext4_mb_init() John Johansen apparmor: fix race between freeing data and fs accessing it John Johansen apparmor: fix race on rawdata dereference John Johansen apparmor: fix differential encoding verification John Johansen apparmor: fix unprivileged local user can do privileged policy management John Johansen apparmor: Fix double free of ns_name in aa_replace_profiles() Massimiliano Pellizzer apparmor: fix missing bounds check on DEFAULT table in verify_dfa() Massimiliano Pellizzer apparmor: fix side-effect bug in match_char() macro usage John Johansen apparmor: fix: limit the number of levels of policy namespaces Massimiliano Pellizzer apparmor: replace recursive profile removal with iterative approach Massimiliano Pellizzer apparmor: fix memory leak in verify_header Massimiliano Pellizzer apparmor: validate DFA start states are in bounds in unpack_pdb Victor Nogueira net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks Guenter Roeck tracing: Add NULL pointer check to trigger_data_free() Yifan Wu selftest/arm64: Fix sve2p1_sigill() to hwcap test Larysa Zaremba xdp: produce a warning when calculated tailroom is negative Larysa Zaremba i40e: use xdp.frame_sz as XDP RxQ info frag_size Larysa Zaremba i40e: fix registering XDP RxQ info Larysa Zaremba xsk: introduce helper to determine rxq->frag_size Larysa Zaremba xdp: use modulo operation to calculate XDP frag tailroom Jamal Hadi Salim net/sched: act_ife: Fix metalist update behavior Jiayuan Chen net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop Fernando Fernandez Mancera net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled Fernando Fernandez Mancera net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled Sun Jian selftests/harness: order TEST_F and XFAIL_ADD constructors Wake Liu kselftest/harness: Use helper to avoid zero-size memset warning Lorenzo Bianconi net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() Florian Westphal netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Ovidiu Panait net: stmmac: Fix error handling in VLAN add and delete paths Jakub Kicinski nfc: rawsock: cancel tx_work before socket teardown Jakub Kicinski nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback Jakub Kicinski nfc: nci: free skb on nci_transceive early error paths Eric Dumazet net_sched: sch_fq: clear q->band_pkt_count[] in fq_reset() Ian Ray net: nfc: nci: Fix zero-length proprietary notifications Koichiro Den net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Olivier Sobrie hwmon: (max6639) fix inverted polarity Naresh Solanki hwmon: (max6639) : Configure based on DT property Sungwoo Kim nvme: fix memory allocation in nvme_pr_read_keys() Stefan Hajnoczi nvme: reject invalid pr_read_keys() num_keys values Shuicheng Lin drm/xe/reg_sr: Fix leak on xa_store failure Charles Haithcock i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" Yujie Liu drm/sched: Fix kernel-doc warning for drm_sched_job_done() Raju Rangoju amd-xgbe: fix sleep while atomic on suspend/resume Yung Chih Su net: ipv4: fix ARM64 alignment fault in multipath hash seed Jakub Kicinski ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() ZhangGuoDong smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() ZhangGuoDong smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() Lang Xu bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim Kohei Enju iavf: fix netdev->max_mtu to respect actual hardware limit David Thomson xen/acpi-processor: fix _CST detection using undersized evaluation buffer Allison Henderson net/rds: Fix circular locking dependency in rds_tcp_tune Eric Dumazet indirect_call_wrapper: do not reevaluate function pointer Lorenzo Bianconi wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Lorenzo Bianconi wifi: mt76: mt7925: Fix possible oob access in mt7925_mac_write_txwi_80211() Lorenzo Bianconi wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() Bart Van Assche wifi: wlcore: Fix a locking bug Bart Van Assche wifi: cw1200: Fix locking in error paths Vimlesh Kumar octeon_ep_vf: avoid compiler and IQ/OQ reordering Vimlesh Kumar octeon_ep_vf: Relocate counter updates before NAPI Vimlesh Kumar octeon_ep: avoid compiler and IQ/OQ reordering Vimlesh Kumar octeon_ep: Relocate counter updates before NAPI Jiayuan Chen bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded Mieczyslaw Nalewaj net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value Shuvam Pandey kunit: tool: copy caller args in run_kernel to prevent mutation Alexandre Courbot rust: kunit: fix warning when !CONFIG_PRINTK Matthew Brost drm/xe: Do not preempt fence signaling CS instructions Sebastian Krzyszkowiak wifi: rsi: Don't default to -EOPNOTSUPP in rsi_mac80211_config Alban Bedel can: mcp251x: fix deadlock in error path of mcp251x_open Oliver Hartkopp can: bcm: fix locking for bcm_op runtime updates Raju Rangoju amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds MD Danish Anwar net: ti: icssg-prueth: Fix ping failure after offload mode setup when link speed is not 1G Jiayuan Chen atm: lec: fix null-ptr-deref in lec_arp_clear_vccs Guenter Roeck dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Nikhil P. Rao xsk: Fix zero-copy AF_XDP fragment drop Nikhil P. Rao xsk: Fix fragment node deletion to prevent buffer leak Maciej Fijalkowski xsk: s/free_list_node/list_node/ Maciej Fijalkowski xsk: Get rid of xdp_buff_xsk::xskb_list_node Chintan Vankar net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table Francesco Lavra drm/solomon: Fix page start when updating rectangle in page addressing mode Vitaly Lifshits e1000e: clear DPG_EN after reset to avoid autonomous power-gating Thomas Gleixner i40e: Fix preempt count leak in napi poll tracepoint Brian Vazquez idpf: change IRQ naming to match netdev and ethtool queue numbering Bart Van Assche hwmon: (it87) Check the it87_lock() return value Felix Gu pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() Ian Ray HID: multitouch: new class MT_CLS_EGALAX_P80H84 Brian Howard HID: multitouch: add quirks for Lenovo Yoga Book 9i Kerem Karabay HID: multitouch: add device ID for Apple Touch Bar Kerem Karabay HID: multitouch: Get the contact ID from HID_DG_TRANSDUCER_INDEX fields in case of Apple Touch Bar Jonathan Teh platform/x86: thinkpad_acpi: Fix errors reading battery thresholds Florian Eckert pinctrl: equilibrium: fix warning trace on load Florian Eckert pinctrl: equilibrium: rename irq_chip function callbacks Hao Yu hwmon: (aht10) Fix initialization commands for AHT20 Akhilesh Patil hwmon: (aht10) Add support for dht20 Ming Lei nvme: fix admin queue leak on controller reset Nathan Chancellor ACPI: APEI: GHES: Disable KASAN instrumentation when compile testing with clang < 18 Qu Wenruo btrfs: always fallback to buffered write if the inode requires checksum Huacai Chen net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz Thomas Weißschuh ARM: clean up the memset64() C wrapper Al Viro xattr: switch to CLASS(fd) Matthieu Baerts (NGI0) selftests: mptcp: join: check removing signal+subflow endp Paolo Abeni selftests: mptcp: more stable simult_flows tests Junxiao Bi scsi: core: Fix refcount leak for tagset_refcnt Thorsten Blum smb: client: Don't log plaintext credentials in cifs_set_cifscreds Paulo Alcantara smb: client: fix broken multichannel with krb5+signing Henrique Carvalho smb: client: fix cifs_pick_channel when channels are equally loaded Christoph Böhmwalder drbd: fix null-pointer dereference on local read error Lars Ellenberg drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Phillip Lougher Squashfs: check metadata block offset is within range Prithvi Tambewagh scsi: target: Fix recursive locking in __configfs_open_file() Qing Wang tracing: Fix WARN_ON in tracing_buffers_mmap_close Kuniyuki Iwashima nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). Davide Caratti net/sched: ets: fix divide by zero in the offload path Jason Gunthorpe RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() Jason Gunthorpe IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Vahagn Vardanian wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() Ariel Silver wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration Daniil Dulov wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() Johannes Berg wifi: radiotap: reject radiotap with unknown bits Jun Seo ALSA: usb-audio: Use correct version for UAC3 header validation Kurt Borja platform/x86: dell-wmi: Add audio/mic mute key codes Thorsten Blum platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data Mike Rapoport (Microsoft) x86/efi: defer freeing of boot services memory Greg Kroah-Hartman HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them Greg Kroah-Hartman can: usb: f81604: handle bulk write errors properly Greg Kroah-Hartman can: usb: f81604: handle short interrupt urb messages properly Greg Kroah-Hartman can: usb: etas_es58x: correctly anchor the urb in the read bulk callback Greg Kroah-Hartman can: ucan: Fix infinite loop from zero-length messages Greg Kroah-Hartman can: usb: f81604: correctly anchor the urb in the read bulk callback Greg Kroah-Hartman can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message Greg Kroah-Hartman net: usb: pegasus: validate USB endpoints Greg Kroah-Hartman net: usb: kalmia: validate USB endpoints Greg Kroah-Hartman net: usb: kaweth: validate USB endpoints Greg Kroah-Hartman nfc: pn533: properly drop the usb interface reference on disconnect Jens Axboe media: dvb-core: fix wrong reinitialization of ringbuffer on reopen Christian Brauner namespace: fix proc mount iteration Jann Horn eventpoll: Fix integer overflow in ep_loop_check_proc() Ethan Nelson-Moore net: arcnet: com20020-pci: fix support for 2.5Mbit cards Takashi Iwai ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 Lewis Mason ALSA: hda/realtek: Add quirk for Samsung Galaxy Book3 Pro 360 (NP965QFG) Eric Naim ALSA: hda/realtek: Add quirk for Gigabyte G5 KF5 (2023) Tiezhu Yang LoongArch: Remove some extern variables in source files Tiezhu Yang LoongArch: Handle percpu handler address for ORC unwinder Tiezhu Yang LoongArch: Remove unnecessary checks for ORC unwinder Sebastian Andrzej Siewior LoongArch/orc: Use RCU in all users of __module_address(). Namjae Jeon ksmbd: add chann_lock to protect ksmbd_chann_list xarray Namjae Jeon ksmbd: check return value of xa_store() in krb5_authenticate Gui-Dong Han hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race Takashi Iwai ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 Mario Limonciello drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() Thomas Richard (TI) usb: cdns3: fix role switching during resume Théo Lebrun usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() Hongyu Xie usb: cdns3: remove redundant if branch Naohiro Aota btrfs: zoned: fixup last alloc pointer after extent removal for RAID0/10 Miquel Sabaté Solà btrfs: define the AUTO_KFREE/AUTO_KVFREE helper macros Naohiro Aota btrfs: zoned: fix stripe width calculation Naohiro Aota btrfs: zoned: fixup last alloc pointer after extent removal for DUP Naohiro Aota btrfs: zoned: fixup last alloc pointer after extent removal for RAID1 Johannes Thumshirn btrfs: zoned: fix alloc_offset calculation for partly conventional block groups Sun YangKai btrfs: fix periodic reclaim condition Filipe Manana btrfs: fix reclaimed bytes accounting after automatic block group reclaim Filipe Manana btrfs: get used bytes while holding lock at btrfs_reclaim_bgs_work() David Sterba btrfs: drop unused parameter fs_info from do_reclaim_sweep() Breno Leitao uprobes: Fix incorrect lockdep condition in filter_chain() Andrii Nakryiko uprobes: switch to RCU Tasks Trace flavor for better performance Jeongjun Park drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free Wentao Liang drm/exynos/vidi: Remove redundant error handling in vidi_get_modes() Jeongjun Park drm/exynos: vidi: fix to avoid directly dereferencing user pointer Harshit Mogalapalli of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range() Harshit Mogalapalli ima: verify the previous kernel's IMA buffer lies in addressable RAM Steven Chen ima: kexec: define functions to copy IMA log at soft boot Steven Chen kexec: define functions to map and unmap segments Steven Chen ima: define and call ima_alloc_kexec_file_buf() Steven Chen ima: rename variable the seq_file "file" to "ima_kexec_file" Breno Leitao ima: kexec: silence RCU list traversal warning Johan Hovold clk: tegra: tegra124-emc: fix device leak on set_rate() Shawn Lin arm64: dts: rockchip: Fix rk3588 PCIe range mappings Shawn Lin arm64: dts: rockchip: Fix rk356x PCIe range mappings Jinhui Guo iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode Minseong Kim Input: synaptics_i2c - guard polling restart in resume Marco Crivellari Input: synaptics_i2c - replace use of system_wq with system_dfl_wq Marco Crivellari workqueue: Add system_percpu_wq and system_dfl_wq Jan Kara ext4: always allocate blocks only from groups inode can use Baokun Li ext4: implement linear-like traversal across order xarrays Baokun Li ext4: refactor choose group to scan group Baokun Li ext4: convert free groups order lists to xarrays Baokun Li ext4: factor out ext4_mb_scan_group() Baokun Li ext4: factor out ext4_mb_might_prefetch() Baokun Li ext4: factor out __ext4_mb_scan_group() Baokun Li ext4: add ext4_try_lock_group() to skip busy groups Joonwon Kang mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() Anup Patel mailbox: Allow controller specific mapping using fwnode Peng Fan mailbox: Use guard/scoped_guard for con_mutex Peng Fan mailbox: Use dev_err when there is error Tudor Ambarus mailbox: remove unused header files Tudor Ambarus mailbox: sort headers alphabetically Tudor Ambarus mailbox: don't protect of_parse_phandle_with_args with con_mutex Zhang Yi ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O Yang Erkun ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT Johan Hovold drm/tegra: dsi: fix device leak on probe Damien Le Moal ata: libata-scsi: avoid Non-NCQ command starvation Damien Le Moal ata: libata: Introduce ata_port_eh_scheduled() Damien Le Moal ata: libata: Remove ATA_DFLAG_ZAC device flag Damien Le Moal ata: libata-scsi: Remove struct ata_scsi_args Damien Le Moal ata: libata-scsi: Document all VPD page inquiry actors Damien Le Moal ata: libata-scsi: Refactor ata_scsiop_maint_in() Damien Le Moal ata: libata-scsi: Refactor ata_scsiop_read_cap() Damien Le Moal ata: libata-scsi: Refactor ata_scsi_simulate() Sean Christopherson KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() Ricardo Ribalda media: dw9714: Fix powerup sequence Matthias Fend media: dw9714: add support for powerdown pin Matthias Fend media: dw9714: move power sequences to dedicated functions Zilin Guan media: tegra-video: Fix memory leak in __tegra_channel_try_format() Ilpo Järvinen PCI: Use resource_set_range() that correctly sets ->end Ilpo Järvinen resource: Add resource set range and size helpers Niklas Cassel Revert "PCI: qcom: Don't wait for link if we can detect Link Up" Krishna chaitanya chundru PCI: qcom: Don't wait for link if we can detect Link Up Niklas Cassel Revert "PCI: dw-rockchip: Don't wait for link since we can detect Link Up" Niklas Cassel PCI: dw-rockchip: Don't wait for link since we can detect Link Up Johan Hovold memory: mtk-smi: fix device leak on larb probe Johan Hovold memory: mtk-smi: fix device leaks on common probe Yazen Ghannam x86/acpi/boot: Correct acpi_is_processor_usable() check again Bjorn Helgaas PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value Kohei Enju bpf: Fix stack-out-of-bounds write in devmap Fuad Tabba bpf, arm64: Force 8-byte alignment for JIT buffer to prevent atomic tearing Mark Harmstone btrfs: fix compat mask in error messages in btrfs_check_features() Mark Harmstone btrfs: print correct subvol num if active swapfile prevents deletion Mark Harmstone btrfs: fix warning in scrub_verify_one_metadata() Mark Harmstone btrfs: fix objectid value in error message in check_extent_data_ref() Mark Harmstone btrfs: fix incorrect key offset in error message in check_dev_extent_item() Richard Fitzgerald ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() Kuninori Morimoto ALSA: pci: hda: use snd_kcontrol_chip() Bart Van Assche drm/amdgpu: Fix locking bugs in error paths Thorsten Blum drm/amdgpu: Replace kzalloc + copy_from_user with memdup_user Bart Van Assche drm/amdgpu: Unlock a mutex before destroying it Niklas Cassel PCI: dwc: ep: Flush MSI-X write before unmapping its ATU entry Niklas Cassel PCI: dwc: ep: Use align addr function for dw_pcie_ep_raise_{msi,msix}_irq() Damien Le Moal PCI: dwc: endpoint: Implement the pci_epc_ops::align_addr() operation Damien Le Moal PCI: endpoint: Introduce pci_epc_mem_map()/unmap() Damien Le Moal PCI: endpoint: Introduce pci_epc_function_is_valid() Heiko Carstens s390/vtime: Fix virtual timer forwarding Heiko Carstens s390/idle: Fix cpu idle exit cpu time accounting Peter Zijlstra perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Takashi Iwai ALSA: usb-audio: Use inclusive terms Takashi Iwai ALSA: usb-audio: Cap the packet size pre-calculations Peter Wang scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume Waiman Long cgroup/cpuset: Fix incorrect use of cpuset_update_tasks_cpumask() in update_cpumasks_hier() Mathieu Desnoyers rseq: Clarify rseq registration rseq_size bound check comment Peter Zijlstra sched/fair: Fix lag clamp Peter Zijlstra sched/fair: Fix EEVDF entity placement bug causing scheduling lag Andrew Cooper x86/fred: Correct speculative safety in fred_extint() Geoffrey D. Bennett ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices Geoffrey D. Bennett ALSA: scarlett2: Fix DSP filter control array handling Geoffrey D. Bennett ALSA: scarlett2: Fix redeclaration of loop variable Salomon Dushimirimana scsi: pm8001: Fix use-after-free in pm8001_queue_command() Mathias Krause scsi: lpfc: Properly set WC for DPP mapping Nam Cao irqchip/sifive-plic: Fix frozen interrupt due to affinity setting Fuad Tabba KVM: arm64: Hide S1POE from guests when not supported by the host Oliver Upton KVM: arm64: Advertise support for FEAT_SCTLR2 Felix Gu drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() Ian Forbes drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Brad Spengler drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release ------------- Diffstat: Documentation/hwmon/aht10.rst | 10 +- Makefile | 4 +- arch/Kconfig | 1 + arch/arm/include/asm/string.h | 14 +- arch/arm64/boot/dts/rockchip/rk3568.dtsi | 4 +- arch/arm64/boot/dts/rockchip/rk356x.dtsi | 2 +- arch/arm64/boot/dts/rockchip/rk3588-base.dtsi | 4 +- arch/arm64/boot/dts/rockchip/rk3588-extra.dtsi | 6 +- arch/arm64/kvm/sys_regs.c | 10 +- arch/arm64/net/bpf_jit_comp.c | 2 +- arch/loongarch/include/asm/setup.h | 3 + arch/loongarch/kernel/unwind_orc.c | 32 +- arch/loongarch/kernel/unwind_prologue.c | 4 - arch/loongarch/mm/tlb.c | 1 - arch/s390/include/asm/idle.h | 1 + arch/s390/kernel/idle.c | 13 +- arch/s390/kernel/irq.c | 10 +- arch/s390/kernel/vtime.c | 18 +- arch/x86/entry/entry_fred.c | 5 +- arch/x86/include/asm/efi.h | 2 +- arch/x86/kernel/acpi/boot.c | 12 +- arch/x86/kernel/cpu/topology.c | 15 - arch/x86/kvm/x86.c | 3 +- arch/x86/platform/efi/efi.c | 2 +- arch/x86/platform/efi/quirks.c | 55 +- drivers/acpi/apei/Makefile | 4 + drivers/ata/libata-core.c | 18 +- drivers/ata/libata-eh.c | 31 +- drivers/ata/libata-scsi.c | 546 +++++++++++----- drivers/ata/libata.h | 14 + drivers/block/drbd/drbd_actlog.c | 53 +- drivers/block/drbd/drbd_interval.h | 5 +- drivers/block/drbd/drbd_req.c | 3 +- drivers/clk/tegra/clk-tegra124-emc.c | 2 +- drivers/firmware/efi/mokvar-table.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_aca.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c | 32 +- drivers/gpu/drm/exynos/exynos_drm_vidi.c | 61 +- drivers/gpu/drm/logicvc/logicvc_drm.c | 4 +- drivers/gpu/drm/scheduler/sched_main.c | 1 + drivers/gpu/drm/solomon/ssd130x.c | 6 +- drivers/gpu/drm/tegra/dsi.c | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 9 +- drivers/gpu/drm/xe/xe_reg_sr.c | 4 +- drivers/gpu/drm/xe/xe_ring_ops.c | 9 + drivers/hid/Kconfig | 1 + drivers/hid/hid-cmedia.c | 2 +- drivers/hid/hid-creative-sb0540.c | 2 +- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-multitouch.c | 116 +++- drivers/hid/hid-zydacron.c | 2 +- drivers/hwmon/Kconfig | 6 +- drivers/hwmon/aht10.c | 21 +- drivers/hwmon/it87.c | 5 +- drivers/hwmon/max16065.c | 26 +- drivers/hwmon/max6639.c | 83 ++- drivers/i2c/busses/i2c-i801.c | 14 +- drivers/infiniband/hw/irdma/verbs.c | 2 +- drivers/infiniband/hw/mthca/mthca_provider.c | 5 +- drivers/input/mouse/synaptics_i2c.c | 13 +- drivers/iommu/intel/pasid.c | 8 + drivers/irqchip/irq-sifive-plic.c | 7 +- drivers/mailbox/mailbox.c | 132 ++-- drivers/media/dvb-core/dmxdev.c | 4 +- drivers/media/i2c/Kconfig | 2 +- drivers/media/i2c/dw9714.c | 56 +- drivers/memory/mtk-smi.c | 3 + drivers/net/arcnet/com20020-pci.c | 16 +- drivers/net/bonding/bond_main.c | 9 +- drivers/net/bonding/bond_options.c | 2 + drivers/net/can/spi/mcp251x.c | 15 +- drivers/net/can/usb/ems_usb.c | 7 +- drivers/net/can/usb/etas_es58x/es58x_core.c | 8 +- drivers/net/can/usb/f81604.c | 45 +- drivers/net/can/usb/ucan.c | 2 +- drivers/net/dsa/realtek/rtl8365mb.c | 2 +- drivers/net/ethernet/amd/xgbe/xgbe-common.h | 2 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 10 - drivers/net/ethernet/amd/xgbe/xgbe-main.c | 1 - drivers/net/ethernet/amd/xgbe/xgbe.h | 3 - .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 3 +- drivers/net/ethernet/intel/e1000e/defines.h | 1 + drivers/net/ethernet/intel/e1000e/ich8lan.c | 9 + drivers/net/ethernet/intel/i40e/i40e_main.c | 41 +- drivers/net/ethernet/intel/i40e/i40e_trace.h | 2 +- drivers/net/ethernet/intel/i40e/i40e_txrx.c | 5 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 17 +- drivers/net/ethernet/intel/idpf/idpf_txrx.c | 2 +- .../net/ethernet/marvell/octeon_ep/octep_main.c | 48 +- drivers/net/ethernet/marvell/octeon_ep/octep_rx.c | 27 +- .../ethernet/marvell/octeon_ep_vf/octep_vf_main.c | 50 +- .../ethernet/marvell/octeon_ep_vf/octep_vf_rx.c | 28 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 15 +- .../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 2 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 18 +- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +- drivers/net/ethernet/ti/cpsw_ale.c | 9 +- drivers/net/ethernet/ti/icssg/icssg_prueth.c | 8 + drivers/net/usb/kalmia.c | 7 + drivers/net/usb/kaweth.c | 13 + drivers/net/usb/pegasus.c | 13 +- drivers/net/vxlan/vxlan_core.c | 5 + .../net/wireless/mediatek/mt76/mt76_connac_mac.c | 1 + drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 1 + drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 1 + drivers/net/wireless/rsi/rsi_91x_mac80211.c | 2 +- drivers/net/wireless/st/cw1200/pm.c | 2 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/nfc/pn533/usb.c | 1 + drivers/nvme/host/core.c | 7 + drivers/nvme/host/pr.c | 10 +- drivers/of/kexec.c | 15 +- drivers/pci/controller/dwc/pcie-designware-ep.c | 38 +- drivers/pci/endpoint/pci-epc-core.c | 182 ++++-- drivers/pci/probe.c | 6 +- drivers/pinctrl/cirrus/pinctrl-cs42l43.c | 5 +- drivers/pinctrl/pinctrl-equilibrium.c | 31 +- drivers/platform/x86/dell/dell-wmi-base.c | 6 + .../dell/dell-wmi-sysman/passwordattr-interface.c | 1 - drivers/platform/x86/thinkpad_acpi.c | 6 +- drivers/scsi/lpfc/lpfc_init.c | 2 + drivers/scsi/lpfc/lpfc_sli.c | 36 +- drivers/scsi/lpfc/lpfc_sli4.h | 3 + drivers/scsi/pm8001/pm8001_sas.c | 5 +- drivers/scsi/scsi_scan.c | 1 + drivers/staging/media/tegra-video/vi.c | 13 +- drivers/target/target_core_configfs.c | 15 +- drivers/ufs/core/ufshcd.c | 18 +- drivers/usb/cdns3/core.c | 11 +- drivers/xen/xen-acpi-processor.c | 7 +- fs/btrfs/block-group.c | 43 +- fs/btrfs/direct-io.c | 16 + fs/btrfs/disk-io.c | 6 +- fs/btrfs/inode.c | 2 +- fs/btrfs/misc.h | 7 + fs/btrfs/scrub.c | 2 +- fs/btrfs/space-info.c | 22 +- fs/btrfs/tree-checker.c | 4 +- fs/btrfs/zoned.c | 271 +++++++- fs/eventpoll.c | 5 +- fs/ext4/ext4.h | 43 +- fs/ext4/extents.c | 20 +- fs/ext4/mballoc-test.c | 4 - fs/ext4/mballoc.c | 718 ++++++++++++--------- fs/ext4/mballoc.h | 9 +- fs/namespace.c | 20 +- fs/nfsd/nfsctl.c | 2 +- fs/smb/client/connect.c | 1 - fs/smb/client/smb2inode.c | 4 +- fs/smb/client/smb2pdu.c | 24 +- fs/smb/client/transport.c | 21 +- fs/smb/server/mgmt/user_session.c | 5 + fs/smb/server/mgmt/user_session.h | 1 + fs/smb/server/smb2pdu.c | 21 +- fs/squashfs/cache.c | 3 + fs/xattr.c | 35 +- include/linux/ima.h | 4 + include/linux/indirect_call_wrapper.h | 18 +- include/linux/ioport.h | 32 + include/linux/kexec.h | 6 + include/linux/libata.h | 4 +- include/linux/mailbox_client.h | 2 +- include/linux/mailbox_controller.h | 9 +- include/linux/pci-epc.h | 38 ++ include/linux/platform_data/max6639.h | 15 - include/linux/ring_buffer.h | 1 + include/linux/sched.h | 1 + include/linux/workqueue.h | 8 +- include/net/act_api.h | 1 + include/net/bonding.h | 1 + include/net/ip_fib.h | 2 +- include/net/netfilter/nf_tables.h | 5 + include/net/sch_generic.h | 10 + include/net/tc_act/tc_ife.h | 4 +- include/net/xdp_sock_drv.h | 24 +- include/net/xsk_buff_pool.h | 3 +- include/uapi/linux/pci_regs.h | 2 +- kernel/bpf/devmap.c | 22 +- kernel/bpf/trampoline.c | 4 +- kernel/cgroup/cpuset.c | 2 +- kernel/events/core.c | 42 +- kernel/events/uprobes.c | 38 +- kernel/kexec_core.c | 54 ++ kernel/rseq.c | 5 +- kernel/sched/fair.c | 184 ++---- kernel/trace/ring_buffer.c | 21 + kernel/trace/trace.c | 13 + kernel/trace/trace_events_trigger.c | 3 + kernel/workqueue.c | 13 +- net/atm/lec.c | 26 +- net/bridge/br_device.c | 2 +- net/bridge/br_input.c | 2 +- net/can/bcm.c | 1 + net/core/filter.c | 6 +- net/ipv4/sysctl_net_ipv4.c | 5 +- net/ipv6/route.c | 11 +- net/mac80211/mesh.c | 3 + net/mac80211/mlme.c | 3 + net/netfilter/nf_tables_api.c | 5 - net/netfilter/nft_set_pipapo.c | 51 +- net/netfilter/nft_set_pipapo.h | 2 + net/nfc/nci/core.c | 21 +- net/nfc/nci/data.c | 12 +- net/nfc/rawsock.c | 11 + net/rds/tcp.c | 14 +- net/sched/act_ct.c | 6 + net/sched/act_ife.c | 93 ++- net/sched/cls_api.c | 7 + net/sched/sch_ets.c | 12 +- net/sched/sch_fq.c | 1 + net/wireless/core.c | 1 + net/wireless/radiotap.c | 4 +- net/xdp/xsk.c | 30 +- net/xdp/xsk_buff_pool.c | 15 +- rust/kernel/kunit.rs | 8 + security/apparmor/apparmorfs.c | 225 ++++--- security/apparmor/include/label.h | 16 +- security/apparmor/include/lib.h | 12 + security/apparmor/include/match.h | 1 + security/apparmor/include/policy.h | 10 +- security/apparmor/include/policy_ns.h | 2 + security/apparmor/include/policy_unpack.h | 83 ++- security/apparmor/label.c | 12 +- security/apparmor/match.c | 58 +- security/apparmor/policy.c | 77 ++- security/apparmor/policy_ns.c | 2 + security/apparmor/policy_unpack.c | 65 +- security/integrity/ima/ima_kexec.c | 148 ++++- sound/pci/hda/cs35l56_hda.c | 14 +- sound/pci/hda/patch_conexant.c | 11 + sound/pci/hda/patch_realtek.c | 2 + sound/usb/endpoint.c | 9 +- sound/usb/mixer_scarlett2.c | 14 +- sound/usb/quirks.c | 2 +- sound/usb/validate.c | 2 +- tools/testing/kunit/kunit_kernel.py | 6 +- tools/testing/kunit/kunit_tool_test.py | 26 + tools/testing/selftests/arm64/abi/hwcap.c | 4 +- tools/testing/selftests/kselftest_harness.h | 15 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 13 + tools/testing/selftests/net/mptcp/simult_flows.sh | 11 +- 243 files changed, 3739 insertions(+), 1793 deletions(-)