* [PATCH 6.1 0000/1067] 6.1.178-rc1 review
@ 2026-07-21 15:10 Greg Kroah-Hartman
2026-07-21 15:20 ` [PATCH 6.1 0610/1067] rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Greg Kroah-Hartman
` (5 more replies)
0 siblings, 6 replies; 7+ messages in thread
From: Greg Kroah-Hartman @ 2026-07-21 15:10 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, linux-kernel, torvalds, akpm, linux,
shuah, patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
This is the start of the stable review cycle for the 6.1.178 release.
There are 1067 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 23 Jul 2026 15:23:00 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.178-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Linux 6.1.178-rc1
HyeongJun An <sammiee5311@gmail.com>
ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_icm42600: fix timestamp clock period by using lower value
Takashi Iwai <tiwai@suse.de>
ALSA: seq: Check UMP support for midi_version change
Takashi Iwai <tiwai@suse.de>
ALSA: seq: Skip event type filtering for UMP events
Pavel Skripkin <paskripkin@gmail.com>
bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
Edward Adam Davis <eadavis@qq.com>
Bluetooth: Ignore too large handle values in BIG
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: invensense: fix odr switching to same value
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_mpu6050: fix frequency setting when chip is off
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: fix syncs DMA memory with different direction
Shyam Prasad N <sprasad@microsoft.com>
cifs: fix lock ordering while disabling multichannel
Liming Wu <liming.wu@jaguarmicro.com>
tools/virtio: Add dma sync api for virtio test
Takashi Iwai <tiwai@suse.de>
ALSA: seq: Avoid confusion of aligned read size
Danilo Krummrich <dakr@kernel.org>
driver core: Guard deferred probe timeout extension with delayed_work_pending()
Danilo Krummrich <dakr@kernel.org>
driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout()
Easwar Hariharan <eahariha@linux.microsoft.com>
jiffies: Cast to unsigned long in secs_to_jiffies() conversion
Easwar Hariharan <eahariha@linux.microsoft.com>
jiffies: Define secs_to_jiffies()
Baokun Li <libaokun@linux.alibaba.com>
writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount()
Jan Kara <jack@suse.cz>
writeback: Fix use after free in inode_switch_wbs_work_fn()
Stig Hornang <stig@hornang.me>
Bluetooth: L2CAP: fix tx ident leak for commands without a response
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: L2CAP: Fix regressions caused by reusing ident
Randy Dunlap <rdunlap@infradead.org>
seqlock: fix scoped_seqlock_read kernel-doc
Marc Zyngier <maz@kernel.org>
KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers
SeongJae Park <sj@kernel.org>
mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs()
SeongJae Park <sj@kernel.org>
mm/damon/core: make charge_addr_from aware of end-address exclusivity
Qu Wenruo <wqu@suse.com>
btrfs: fix incorrect buffered IO fallback for append direct writes
Qu Wenruo <wqu@suse.com>
btrfs: fix false IO failure after falling back to buffered write
Wentao Liang <vulab@iscas.ac.cn>
regulator: scmi: fix of_node refcount leak in scmi_regulator_probe()
Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org>
regulator: scmi: Simplify with scoped for each OF child loop
Ricardo Robaina <rrobaina@redhat.com>
audit: fix potential integer overflow in audit_log_n_hex()
Ricardo Robaina <rrobaina@redhat.com>
audit: add audit_log_nf_skb helper function
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - validate RSA CRT component lengths
Qu Wenruo <wqu@suse.com>
btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC
Ahsan Atta <ahsan.atta@intel.com>
crypto: qat - fix restarting state leak on allocation failure
Neill Kapron <nkapron@google.com>
usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile
Chaitanya Kulkarni <kch@nvidia.com>
nvmet: remove superfluous initialization
Thorsten Blum <thorsten.blum@linux.dev>
crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A
Uwe Kleine-König <u.kleine-koenig@baylibre.com>
crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0
Krzysztof Kozlowski <krzysztof.kozlowski@linaro.org>
crypto: atmel-sha204a - Mark OF related data as maybe unused
Tyler Baker <tyler.baker@oss.qualcomm.com>
usb: gadget: f_fs: initialize reset_work at allocation time
Andy Yan <andyshrk@163.com>
usb: typec: tcpm: Fix VDM type for Enter Mode commands
Mauricio Faria de Oliveira <mfo@igalia.com>
usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
Oliver Neukum <oneukum@suse.com>
usb: iowarrior: remove inherent race with minor number
Vlad Poenaru <vlad.wing@gmail.com>
bpf: Allow LPM map access from sleepable BPF programs
Andrii Nakryiko <andrii@kernel.org>
bpf: Consistently use bpf_rcu_lock_held() everywhere
Tristan Madani <tristan@talencesecurity.com>
hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length
Viacheslav Dubeyko <slava@dubeyko.com>
hfs/hfsplus: prevent getting negative values of offset/length
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
serial: 8250_mid: Disable DMA for selected platforms
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
serial: 8250_mid: Remove 8250_pci usage
Manish Khadka <maskmemanish@gmail.com>
HID: appleir: fix UAF on pending key_up_timer in remove()
Thomas Gleixner <tglx@linutronix.de>
treewide: Switch/rename to timer_delete[_sync]()
Jann Horn <jannh@google.com>
proc: protect ptrace_may_access() with exec_update_lock (part 1)
Oleg Nesterov <oleg@redhat.com>
seqlock: Change do_task_stat() to use scoped_seqlock_read()
Peter Zijlstra <peterz@infradead.org>
seqlock: Introduce scoped_seqlock_read()
Trung Nguyen <trungnh@cystack.net>
HID: multitouch: fix out-of-bounds bit access on mt_io_flags
Angela Czubak <aczubak@google.com>
HID: add haptics page defines
Jann Horn <jannh@google.com>
proc: protect ptrace_may_access() with exec_update_lock (FD links)
Christoph Hellwig <hch@lst.de>
proc: rename proc_setattr to proc_nochmod_setattr
Tyler Hicks (Microsoft) <code@tyhicks.com>
proc: Move fdinfo PTRACE_MODE_READ check into the inode .permission operation
Thomas Weißschuh <linux@weissschuh.net>
proc: use generic setattr() for /proc/$PID/net
Zide Chen <zide.chen@intel.com>
perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box()
Baokun Li <libaokun@linux.alibaba.com>
writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs()
Jan Kara <jack@suse.cz>
writeback: Avoid contention on wb->list_lock when switching inodes
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: track the connection owning a byte-range lock
DaeMyung Kang <charsyam@gmail.com>
ksmbd: centralize ksmbd_conn final release to plug transport leak
DaeMyung Kang <charsyam@gmail.com>
ksmbd: destroy async_ida in ksmbd_conn_free()
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger
ZhangGuoDong <zhangguodong@kylinos.cn>
smb: move smb_version_values to common/smbglob.h
ZhangGuoDong <zhangguodong@kylinos.cn>
smb: move some duplicate definitions to common/cifsglob.h
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: use opener credentials for FSCTL mutations
Michael Bommarito <michael.bommarito@gmail.com>
smb: client: resolve SWN tcon from live registrations
David Howells <dhowells@redhat.com>
cifs: Add tracing for the cifs_tcon struct refcounting
David Howells <dhowells@redhat.com>
cifs: Fix reacquisition of volume cookie on still-live connection
Shyam Prasad N <sprasad@microsoft.com>
cifs: after disabling multichannel, mark tcon for reconnect
Shyam Prasad N <sprasad@microsoft.com>
cifs: handle when server stops supporting multichannel
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO
Runyu Xiao <runyu.xiao@seu.edu.cn>
Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock
Hyunwoo Kim <imv4bel@gmail.com>
Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del()
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: L2CAP: Fix not tracking outstanding TX ident
Siwei Zhang <oss@fourdim.xyz>
Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb()
Pauli Virtanen <pav@iki.fi>
Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister
Sungwoo Kim <iam@sung-woo.kim>
Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()
Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Bluetooth: Remove BT_HS
Ziyang Xuan <william.xuanziyang@huawei.com>
Bluetooth: Make handle of hci_conn be unique
Florian Westphal <fw@strlen.de>
netfilter: ebtables: zero chainstack array
Qianfeng Rong <rongqianfeng@vivo.com>
netfilter: ebtables: Use vmalloc_array() to improve code
Qi Zheng <zhengqi.arch@bytedance.com>
mm: shrinker: fix NULL pointer dereference in debugfs
John Keeping <john@metanate.com>
mm: shrinkers: fix debugfs file permissions
Runyu Xiao <runyu.xiao@seu.edu.cn>
gpio: sch: use raw_spinlock_t in the irq startup path
Runyu Xiao <runyu.xiao@seu.edu.cn>
coresight: etb10: restore atomic_t for shared reading state
Shakeel Butt <shakeel.butt@linux.dev>
mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show()
Qi Zheng <zhengqi.arch@bytedance.com>
mm: shrinker: remove redundant shrinker_rwsem in debugfs operations
Marco Nenciarini <mnencia@kcore.it>
PCI: Skip Resizable BAR restore on read error
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Move Resizable BAR code to rebar.c
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Add kerneldoc for pci_resize_resource()
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Fix restoring BARs on BAR resize rollback path
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Free saved list without holding pci_bus_sem
Ilpo Järvinen <ilpo.jarvinen@linux.intel.com>
PCI: Prevent resource tree corruption when BAR resize fails
Giovanni Cabiddu <giovanni.cabiddu@intel.com>
crypto: qat - fix VF2PF work teardown race in adf_disable_sriov()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr()
Nikolay Kulikov <nikolayof23@gmail.com>
staging: rtl8723bs: fix spaces around binary operators
William Hansen-Baird <william.hansen.baird@gmail.com>
staging: rtl8723bs: core: move constants to right side in comparison
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: mediatek: Fix IRQ domain leak when port fails to enable
Christian Marangi <ansuelsmth@gmail.com>
PCI: mediatek: Use generic MACRO for TPVPERL delay
Christian Marangi <ansuelsmth@gmail.com>
PCI: mediatek: Convert bool to single quirks entry and bitmap
Jiri Slaby (SUSE) <jirislaby@kernel.org>
PCI: controller: Use dev_fwnode() instead of of_fwnode_handle()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie()
Franziska Naepelt <franziska.naepelt@googlemail.com>
staging: rtl8723bs: Fix space issues
Franziska Naepelt <franziska.naepelt@googlemail.com>
staging: rtl8723bs: Fix indentation issues
Richard Zhu <hongxing.zhu@nxp.com>
PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling
Alex Williamson <alex.williamson@nvidia.com>
vfio/mlx5: Fix racy bitfields and tighten struct layout
Mahesh Vaidya <mahesh.vaidya@altera.com>
PCI: altera: Fix resource leaks on probe failure
Alex Williamson <alex.williamson@nvidia.com>
vfio/pci: Latch disable_idle_d3 per device
Raghavendra Rao Ananta <rananta@google.com>
vfio/pci: Use a private flag to prevent power state change with VFs
Reinette Chatre <reinette.chatre@intel.com>
vfio/pci: Use bitfield for struct vfio_pci_core_device flags
Herman van Hazendonk <github.com@herrie.org>
iio: common: st_sensors: honour channel endianness in read_axis_data
Alexander Lobakin <aleksander.lobakin@intel.com>
bitops: make BYTES_TO_BITS() treewide-available
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: aoa: check snd_ctl_new1() return value
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_icm42600: stabilized timestamp in interrupt
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: invensense: fix timestamp glitches when switching frequency
Colin Ian King <colin.i.king@gmail.com>
iio: invensense: remove redundant initialization of variable period
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_mpu6050: use the common inv_sensors timestamp module
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: make invensense timestamp module generic
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: move inv_icm42600 timestamp module in common
Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@tdk.com>
iio: imu: inv_icm42600: make timestamp module chip independent
Zhang Lixu <lixu.zhang@intel.com>
iio: hid-sensor-rotation: Fix stale or zero output when reading raw values
Runyu Xiao <runyu.xiao@seu.edu.cn>
iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup
Sandipan Das <sandipan.das@amd.com>
perf/x86/amd/brs: Fix kernel address leakage
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: rawnand: fsl_ifc: return errors for failed page reads
Runyu Xiao <runyu.xiao@seu.edu.cn>
mmc: vub300: defer reset until cmd_mutex is unlocked
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: mchp23k256: use SPI match data for chip caps
Pengpeng Hou <pengpeng@iscas.ac.cn>
mtd: onenand: samsung: report DMA completion timeouts
Rafael Beims <rafael.beims@toradex.com>
wifi: mwifiex: fix permanently busy scans after multiple roam iterations
Zhiling Zou <roxy520tt@gmail.com>
wifi: mac80211: free ack status frame on TX header build failure
Junrui Luo <moonafterrain@outlook.com>
powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access()
Zhao Dongdong <zhaodongdong@kylinos.cn>
reset: sunxi: fix memory region leak on ioremap failure
Robby Cai <robby.cai@nxp.com>
reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ
Julian Anastasov <ja@ssi.bg>
ipvs: fix more places with wrong ipv6 transport offsets
Maoyi Xie <maoyixie.tju@gmail.com>
memstick: ms_block: reject a card that reports too many blocks
James Raphael Tiovalen <jamestiotio@gmail.com>
macsec: fix promiscuity refcount leak in macsec_dev_open()
Xuanqiang Luo <luoxuanqiang@kylinos.cn>
llc: fix SAP refcount leak when creating incoming sockets
Laxman Acharya Padhya <acharyalaxman8848@gmail.com>
Bluetooth: btrtl: validate firmware patch bounds
Asim Viladi Oglu Manizada <manizada@pm.me>
net: openvswitch: reject oversized nested action attrs
Abhishek Ojha <Abhishek.ojha@savoirfairelinux.com>
regulator: ltc3676: Fix incorrect IRQSTAT bit offsets
Dawei Feng <dawei.feng@seu.edu.cn>
wifi: mac80211: fix memory leak in ieee80211_register_hw()
Runyu Xiao <runyu.xiao@seu.edu.cn>
wifi: rt2x00: avoid full teardown before work setup in probe
Thorsten Blum <thorsten.blum@linux.dev>
powerpc/pseries: fix memory leak on krealloc failure in papr_init
Farhad Alemi <farhad.alemi@berkeley.edu>
cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed
Tao Liu <ltao@redhat.com>
riscv: Prevent NULL pointer dereference in machine_kexec_prepare()
Michael Bommarito <michael.bommarito@gmail.com>
drbd: reject data replies with an out-of-range payload size
Daehyeon Ko <4ncienth@gmail.com>
macsec: don't read an unset MAC header in macsec_encrypt()
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: use parsed transport offset in SCTP state lookup
Shuangpeng Bai <shuangpeng.kernel@gmail.com>
llc: fix SAP refcount leak in llc_ui_autobind()
Yousef Alhouseen <alhouseenyousef@gmail.com>
mac802154: remove interfaces with RCU list deletion
Gerald Schaefer <gerald.schaefer@linux.ibm.com>
s390/monwriter: Reject buffer reuse with different data length
HyeongJun An <sammiee5311@gmail.com>
hwmon: (asus_atk0110) Check package count before accessing element
Maoyi Xie <maoyixie.tju@gmail.com>
net: wwan: iosm: bound device offsets in the MUX downlink decoder
Wentao Liang <vulab@iscas.ac.cn>
ata: pata_pxa: Fix DMA channel leak on probe error
Bryam Vargas <hexlabsecurity@proton.me>
orangefs: keep the readdir entry size 64-bit in fill_from_part()
Masami Hiramatsu (Google) <mhiramat@kernel.org>
tracing/probes: Fix double addition of offset for @+FOFFSET
Bryam Vargas <hexlabsecurity@proton.me>
net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked
Andrea Righi <arighi@nvidia.com>
net: lan743x: Initialize eth_syslock spinlock before use
Haoxiang Li <haoxiang_li2024@163.com>
fsl/fman: Free init resources on KeyGen failure in fman_init()
Runyu Xiao <runyu.xiao@seu.edu.cn>
hwmon: (occ) unregister sysfs devices outside occ lock
Haoxiang Li <haoxiang_li2024@163.com>
net: liquidio: fix BAR resource leak on PF number failure
Pengpeng Hou <pengpeng@iscas.ac.cn>
hwmon: (w83793) remove vrm sysfs file on probe failure
Pengpeng Hou <pengpeng@iscas.ac.cn>
hwmon: (w83627hf) remove VID sysfs files on error and remove
Conor Dooley <conor.dooley@microchip.com>
rtc: mpfs: fix counter upload completion condition
Abdun Nihaal <nihaal@cse.iitm.ac.in>
bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp()
Hongchen Zhang <zhanghongchen@loongson.cn>
LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()
Sven Eckelmann <sven@narfation.org>
batman-adv: clean untagged VLAN on netdev registration failure
Sven Eckelmann <sven@narfation.org>
batman-adv: ensure minimal ethernet header on TX
Sven Eckelmann <sven@narfation.org>
batman-adv: retrieve ethhdr after potential skb realloc on RX
Liew Rui Yan <aethernet65535@gmail.com>
mm/damon/reclaim: fix typo in damon_reclaim_timer_fn()
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants
Shitalkumar Gandhi <shital.gandhi45@gmail.com>
ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit
Shitalkumar Gandhi <shital.gandhi45@gmail.com>
ieee802154: ca8210: fix cas_ctl leak on spi_async failure
Michael Bommarito <michael.bommarito@gmail.com>
ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation
Michael Bommarito <michael.bommarito@gmail.com>
ieee802154: admin-gate legacy LLSEC dump operations
Maoyi Xie <maoyixie.tju@gmail.com>
net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
Maoyi Xie <maoyixie.tju@gmail.com>
net: ipip: require CAP_NET_ADMIN in the device netns for changelink
Maoyi Xie <maoyixie.tju@gmail.com>
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
Maoyi Xie <maoyixie.tju@gmail.com>
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink
Dawei Feng <dawei.feng@seu.edu.cn>
net: ena: clean up XDP TX queues when regular TX setup fails
Haoxiang Li <haoxiang_li2024@163.com>
net: ixp4xx_hss: fix duplicate HDLC netdev allocation
Haoxiang Li <haoxiang_li2024@163.com>
net: wwan: t7xx: destroy DMA pool on CLDMA late init failure
Maoyi Xie <maoyixie.tju@gmail.com>
net: sit: require CAP_NET_ADMIN in the device netns for changelink
Andreas Kemnade <andreas@kemnade.info>
gpios: palmas: add .get_direction() op
Paul Louvel <paul.louvel@bootlin.com>
gpio-f7188x: Add support for NCT6126D version B
Bradley Morgan <include@grrlz.net>
cpu: hotplug: Bound hotplug states sysfs output
Bradley Morgan <include@grrlz.net>
cpu: hotplug: Preserve per instance callback errors
Zhan Xusheng <zhanxusheng1024@gmail.com>
posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu()
Doruk Tan Ozturk <doruk@0sec.ai>
net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix type confusion in CDC union descriptor parsing
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix race condition in reset_device sysfs callback
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix DMA mapping violation in line setup
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - add response length checks
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - validate control endpoint type
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - release data interface on disconnect
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: ims-pcu - fix use-after-free and double-free in disconnect
Haoxiang Li <haoxiang_li2024@163.com>
scsi: elx: efct: Fix I/O leak on unsupported additional CDB
WenTao Liang <vulab@iscas.ac.cn>
scsi: elx: efct: Fix refcount leak in efct_hw_io_abort()
Bryam Vargas <hexlabsecurity@proton.me>
scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
Bryam Vargas <hexlabsecurity@proton.me>
scsi: target: Bound PR-OUT TransportID parsing to the received buffer
Michael Bommarito <michael.bommarito@gmail.com>
scsi: xen: scsiback: Free unsubmitted command instead of double-putting it
Michael Bommarito <michael.bommarito@gmail.com>
scsi: xen: scsiback: Free the command tag on the TMR submit-failure path
Xu Rao <raoxu@uniontech.com>
scsi: sg: Report request-table problems when any status is set
Abdun Nihaal <nihaal@cse.iitm.ac.in>
scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()
Haoxiang Li <haoxiang_li2024@163.com>
scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path
Mikulas Patocka <mpatocka@redhat.com>
dm-verity: increase sprintf buffer size
Mikulas Patocka <mpatocka@redhat.com>
dm-verity: fix a possible NULL pointer dereference
Mikulas Patocka <mpatocka@redhat.com>
dm_early_create: fix freeing used table on dm_resume failure
Mikulas Patocka <mpatocka@redhat.com>
dm-stats: fix merge accounting
Mikulas Patocka <mpatocka@redhat.com>
dm-stats: fix dm_jiffies_to_msec64
Benjamin Marzinski <bmarzins@redhat.com>
dm-log: fix a bitset_size overflow on 32bit machines
Mikulas Patocka <mpatocka@redhat.com>
dm-bufio: fix wrong count calculation in dm_bufio_issue_discard
Samuel Moelius <sam.moelius@trailofbits.com>
dm era: fix out-of-bounds memory access for non-zero start sector
Ming-Hung Tsai <mtsai@redhat.com>
dm thin metadata: fix metadata snapshot consistency on commit failure
Genjian Zhang <zhanggenjian@kylinos.cn>
dm thin metadata: fix superblock refcount leak on snapshot shadow failure
Haoxiang Li <haoxiang_li2024@163.com>
net: sparx5: unregister blocking notifier on init failure
Jiri Olsa <jolsa@kernel.org>
bpf: Add missing access_ok call to copy_user_syms
Oliver Hartkopp <socketcan@hartkopp.net>
can: bcm: add missing rcu list annotations and operations
Oliver Hartkopp <socketcan@hartkopp.net>
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure
Lee Jones <lee@kernel.org>
can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF
Oliver Hartkopp <socketcan@hartkopp.net>
can: isotp: use unconditional synchronize_rcu() in isotp_release()
Fan Wu <fanwu01@zju.edu.cn>
can: esd_usb: kill anchored URBs before freeing netdevs
Bryam Vargas <hexlabsecurity@proton.me>
nvmet-rdma: handle inline data with a nonzero offset
Weiming Shi <bestswngs@gmail.com>
sctp: validate STALE_COOKIE cause length before reading staleness
Kunihiko Hayashi <hayashi.kunihiko@socionext.com>
spi: uniphier: Fix completion initialization order before devm_request_irq()
Wang Yan <wangyan01@kylinos.cn>
time: Fix off-by-one in compat settimeofday() usec validation
Jaewon Yang <yong010301@gmail.com>
tpm: Make the TPM character devices non-seekable
Thorsten Blum <thorsten.blum@linux.dev>
tpm: fix event_size output in tpm1_binary_bios_measurements_show
Maoyi Xie <maoyixie.tju@gmail.com>
xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink
Sanman Pradhan <psanman@juniper.net>
xfrm: use compat translator only for u64 alignment mismatch
Wentao Liang <vulab@iscas.ac.cn>
xen/gntdev: fix error handling in ioctl
Xuanqiang Luo <luoxuanqiang@kylinos.cn>
i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource()
Roman Vivchar <rva333@protonmail.com>
i2c: mediatek: fix WRRD for SoCs without auto_restart option
Joshua Crofts <joshua.crofts1@gmail.com>
hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig
Ibrahim Hashimov <security@auditcode.ai>
ksmbd: fix integer overflow in set_file_allocation_info()
Fredric Cover <fredric.cover.lkernel@gmail.com>
smb: client: use kvzalloc() for megabyte buffer in simple fallocate
Frank Li <Frank.Li@nxp.com>
dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK
Kartik Rajput <kkartik@nvidia.com>
dmaengine: tegra: Fix burst size calculation
Jarkko Sakkinen <jarkko@kernel.org>
tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()
Bhargav Joshi <j.bhargav.u@gmail.com>
irqchip/crossbar: Use correct index in crossbar_domain_free()
Florian Fuchs <fuchsfl@gmail.com>
mtd: maps: vmu-flash: fix NULL pointer dereference in initialization
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: spi-nor: swp: Improve locking user experience
Sebastian Alba Vives <sebasjosue84@gmail.com>
fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header()
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path
Michael Bommarito <michael.bommarito@gmail.com>
ocfs2: reject non-inline dinodes with i_size and zero i_clusters
Michael Bommarito <michael.bommarito@gmail.com>
ocfs2: reject dinodes whose i_rdev disagrees with the file type
Michael Bommarito <michael.bommarito@gmail.com>
ocfs2: reject dinodes with non-canonical i_mode type
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: add journal NULL check in ocfs2_checkpoint_inode()
Ian Bridges <icb@fastmail.org>
ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits
Kyle Zeng <kylebot@openai.com>
ocfs2: avoid moving extents to occupied clusters
Arseniy Krasnov <avkrasnov@rulkc.org>
mtd: rawnand: fix condition in 'nand_select_target()'
Vasiliy Kovalev <kovalev@altlinux.org>
net/9p: fix infinite loop in p9_client_rpc on fatal signal
Bastien Curutchet <bastien.curutchet@bootlin.com>
mtd: rawnand: pl353: fix probe resource allocation
Tristan Madani <tristan@talencesecurity.com>
ocfs2: use kzalloc for quota recovery bitmap allocation
Ionut Nechita <ionut.nechita@windriver.com>
scsi: sas: Skip opt_sectors when DMA reports no real optimization hint
Martin Wilck <martin.wilck@suse.com>
scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished()
Ruoyu Wang <ruoyuw560@gmail.com>
mtd: slram: remove failed entries from the device list
Krzysztof Wilczyński <kwilczynski@kernel.org>
proc: only bump parent nlink when registering directories
Zishun Yi <vulab@iscas.ac.cn>
riscv: cacheinfo: Fix node reference leak in populate_cache_leaves
Aaron Tomlin <atomlin@atomlin.com>
mips: sched: Fix CPUMASK_OFFSTACK memory corruption
WenTao Liang <vulab@iscas.ac.cn>
power: supply: charger-manager: fix refcount leak in is_full_charged()
Tristan Madani <tristan@talencesecurity.com>
ntfs3: fix out-of-bounds read in decompress_lznt
Michael Bommarito <michael.bommarito@gmail.com>
ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head
Michael Bommarito <michael.bommarito@gmail.com>
ntfs3: cap RESTART_TABLE free-chain walker at rt->used
Michael Bommarito <michael.bommarito@gmail.com>
fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
Michael Bommarito <michael.bommarito@gmail.com>
fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: validate lcns_follow in log_replay conversion
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: bound attr_off in UpdateResidentValue against data_off
Michael Bommarito <michael.bommarito@gmail.com>
fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: bound DeleteIndexEntryAllocation memmove length
Zhan Xusheng <zhanxusheng1024@gmail.com>
fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename
Ma Ke <make24@iscas.ac.cn>
power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf()
Johan Hovold <johan@kernel.org>
MIPS: ip22-gio: fix device reference leak in probe
Johan Hovold <johan@kernel.org>
MIPS: ip22-gio: fix kfree() of static object
Johan Hovold <johan@kernel.org>
MIPS: ip22-gio: fix gio device memory leak
Chuck Lever <chuck.lever@oracle.com>
lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure
Chuck Lever <chuck.lever@oracle.com>
lockd: Plug nlm_file leak when nlm_do_fopen() fails
Abdun Nihaal <nihaal@cse.iitm.ac.in>
nvdimm/btt: Free arena sub-allocations on discover_arenas() error path
Abdun Nihaal <nihaal@cse.iitm.ac.in>
nvdimm/btt: Free arenas on btt_init() error paths
Junrui Luo <moonafterrain@outlook.com>
jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()
Pauli Virtanen <pav@iki.fi>
Bluetooth: SCO: hold sk properly in sco_conn_ready
Pauli Virtanen <pav@iki.fi>
Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready
Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
mfd: tps6586x: Fix OF node refcount
Sven Eckelmann <sven@narfation.org>
batman-adv: tt: prevent TVLV OOB check overflow
Sven Eckelmann <sven@narfation.org>
batman-adv: frag: fix primary_if leak on failed linearization
Sven Eckelmann <sven@narfation.org>
batman-adv: frag: free unfragmentable packet
Sven Eckelmann <sven@narfation.org>
batman-adv: fix VLAN priority offset
Sven Eckelmann <sven@narfation.org>
batman-adv: tt: avoid request storms during pending request
Sven Eckelmann <sven@narfation.org>
batman-adv: dat: fix tie-break for candidate selection
Sven Eckelmann <sven@narfation.org>
batman-adv: dat: ensure accessible eth_hdr proto field
Sven Eckelmann <sven@narfation.org>
batman-adv: bla: reacquire gw address after skb realloc
Sven Eckelmann <sven@narfation.org>
batman-adv: dat: acquire ARP hw source only after skb realloc
Sven Eckelmann <sven@narfation.org>
batman-adv: access unicast_ttvn skb->data only after skb realloc
Sven Eckelmann <sven@narfation.org>
batman-adv: gw: acquire ethernet header only after skb realloc
Sandipan Das <sandipan.das@amd.com>
perf/x86/amd/lbr: Fix kernel address leakage
Thorsten Blum <thorsten.blum@linux.dev>
x86/boot: Reject too long acpi_rsdp= values
Thorsten Blum <thorsten.blum@linux.dev>
x86/boot: Validate console=uart8250 baud rate to fix early boot hang
Ali Ahmet MEMIS <dev@unknownbbqr.xyz>
tools/power/x86/intel-speed-select: Harden daemon pidfile open
Guangshuo Li <lgs201920130244@gmail.com>
mfd: sm501: Fix reference leak on failed device registration
Armin Wolf <W_Armin@gmx.de>
leds: uleds: Fix potential buffer overread
Stephen Smalley <stephen.smalley.work@gmail.com>
selinux: check connect-related permissions on TCP Fast Open
Wang Jun <1742789905@qq.com>
soc: fsl: qe: panic on ioremap() failure in qe_reset()
Siddharth Vadapalli <s-vadapalli@ti.com>
soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy
Guangshuo Li <lgs201920130244@gmail.com>
gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path
Xiang Mei (Microsoft) <xmei5@asu.edu>
netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment()
Wyatt Feng <bronzed_45_vested@icloud.com>
netfilter: xt_nat: reject unsupported target families
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
netfilter: ecache: fix inverted time_after() check
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
netfilter: nf_conncount: fix zone comparison in tuple dedup
Xiang Mei <xmei5@asu.edu>
netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
Florian Westphal <fw@strlen.de>
netfilter: nf_nat_sip: reload possible stale data pointer
Haoze Xie <royenheart@gmail.com>
netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst
Wyatt Feng <bronzed_45_vested@icloud.com>
netfilter: xt_cluster: reject template conntracks in hash match
David Carlier <devnexen@gmail.com>
netfilter: nfnl_cthelper: apply per-class values when updating policies
Muhammad Bilal <meatuni001@gmail.com>
netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read
Srinivas Kandagatla <srinivas.kandagatla@oss.qualcomm.com>
ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: tridentfb: fix potential memory leak in trident_pci_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: s3fb: fix potential memory leak in s3_pci_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: i740fb: fix potential memory leak in i740fb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: radeon: fix potential memory leak in radeonfb_pci_register()
Li RongQing <lirongqing@baidu.com>
fbdev: sm712: Fix operator precedence in big_swap macro
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: hecubafb: fix potential memory leak in hecubafb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe()
Abdun Nihaal <nihaal@cse.iitm.ac.in>
fbdev: metronomefb: fix potential memory leak in metronomefb_probe()
Sean Christopherson <seanjc@google.com>
KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs
Matthew Rosato <mjrosato@linux.ibm.com>
KVM: s390: pci: Fix handling of AIF enable without AISB
Hyunwoo Kim <imv4bel@gmail.com>
KVM: arm64: vgic: Check the interrupt is still ours before migrating it
Haoxiang Li <haoxiang_li2024@163.com>
KVM: s390: pci: Fix GISC refcount leak on AIF enable failure
Nickolay Goppen <setotau@mainlining.org>
arm64: dts: qcom: sdm630: describe adsp_mem region properly
Mark Rutland <mark.rutland@arm.com>
arm64: fpsimd: Fix type mismatch in sve_{save,load}_state()
Yong Wang <edragain@163.com>
net: ife: require ETH_HLEN to be pullable in ife_decode()
Zhengchuan Liang <zcliangcn@gmail.com>
net: atm: reject out-of-range traffic classes in QoS validation
Michael Bommarito <michael.bommarito@gmail.com>
net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post()
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get
Peter Ujfalusi <peter.ujfalusi@linux.intel.com>
ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc
Zhang Tianci <zhangtianci.1997@bytedance.com>
vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter
Wentao Liang <vulab@iscas.ac.cn>
mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace()
Guangshuo Li <lgs201920130244@gmail.com>
smb: client: fix overflow in passthrough ioctl bounds check
Harman Kalra <hkalra@marvell.com>
octeontx2-af: fix VF bringup affecting PF promiscuous state
Li RongQing <lirongqing@baidu.com>
net/mlx5: Fix L3 tunnel entropy refcount leak
Timur Tabi <ttabi@nvidia.com>
regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK
Douglas Anderson <dianders@chromium.org>
regulator: core: Make regulator_lock_two() logic easier to follow
Cao Guanghui <caoguanghui@kylinos.cn>
dm era: fix NULL pointer dereference in metadata_open()
Guangshuo Li <lgs201920130244@gmail.com>
cifs: validate DFS referral string offsets
Julian Anastasov <ja@ssi.bg>
ipvs: ensure inner headers in ICMP errors are in headroom
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: fix PMTU for GUE/GRE tunnel ICMP errors
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: use parsed transport offset in TCP state lookup
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
ipvs: pass parsed transport offset to state handlers
Eric Dumazet <edumazet@google.com>
ipv6: mcast: Fix potential UAF in MLD delayed work
Kuniyuki Iwashima <kuniyu@google.com>
ipv6: mcast: Replace locking comments with lockdep annotations.
Suman Ghosh <sumang@marvell.com>
octeontx2-pf: check DMAC extraction support before filtering
Samuel Moelius <sam.moelius@trailofbits.com>
net/sched: cake: reject overhead values that underflow length
Enrico Pozzobon <enrico.pozzobon@dissecto.com>
net: usb: lan78xx: disable VLAN filter in promiscuous mode
Oleksij Rempel <linux@rempel-privat.de>
net: usb: lan78xx: move functions to avoid forward definitions
Hui Wang <hui.wang@canonical.com>
ring-buffer: Fix event length with forced 8-byte alignment
Weiming Shi <bestswngs@gmail.com>
Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup()
Pauli Virtanen <pav@iki.fi>
Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length
Cen Zhang <zzzccc427@gmail.com>
Bluetooth: MGMT: Fix adv monitor add failure cleanup
Eric Dumazet <edumazet@google.com>
amt: fix size calculation in amt_get_size()
Xiang Mei <xmei5@asu.edu>
net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket
Xiang Mei <xmei5@asu.edu>
net: qualcomm: rmnet: validate MAP frame length before ingress parsing
Daniele Palmas <dnlplm@gmail.com>
net: qualcomm: rmnet: add tx packets aggregation
Shigeru Yoshida <syoshida@redhat.com>
qede: fix off-by-one in BD ring consumption on build_skb failure
Feng Liu <feliu@nvidia.com>
net/mlx5e: Fix HV VHCA stats agent registration race
Feng Liu <feliu@nvidia.com>
net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation
Wyatt Feng <bronzed_45_vested@icloud.com>
netfilter: xt_connmark: reject invalid shift parameters
Zhixing Chen <running910@gmail.com>
netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop
Feng Wu <wufengwufengwufeng@gmail.com>
netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt()
Wyatt Feng <bronzed_45_vested@icloud.com>
netfilter: xt_u32: reject invalid shift counts
Qihang <q.h.hack.winter@gmail.com>
gue: validate REMCSUM private option length
Xiang Mei <xmei5@asu.edu>
net: usb: net1080: validate packet_len before pad-byte access in rx_fixup
Anshuman Khandual <anshuman.khandual@arm.com>
arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range()
Ryan Roberts <ryan.roberts@arm.com>
arm64/mm: convert ptep_clear() to ptep_get_and_clear()
Lee Jones <lee@kernel.org>
HID: core: Fix OOB read in hid_get_report for numbered reports
Georgiy Osokin <g.osokin@auroraos.dev>
HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait()
Myeonghun Pak <mhun512@gmail.com>
ata: sata_gemini: unwind clocks on IDE pinctrl errors
David Howells <dhowells@redhat.com>
afs: Fix unchecked-length string display in debug statement
David Howells <dhowells@redhat.com>
afs: Fix the volume AFS_VOLUME_RM_TREE is set on
David Howells <dhowells@redhat.com>
afs: Fix vllist leak
David Howells <dhowells@redhat.com>
afs: Fix callback service message parsers to pass through -EAGAIN
Zilin Guan <zilin@seu.edu.cn>
afs: use kvfree() to free memory allocated by kvcalloc()
Dan Carpenter <error27@gmail.com>
afs: Fix error code in afs_extract_vl_addrs()
Samuel Moelius <sam.moelius@trailofbits.com>
net/sched: hhf: clear heavy-hitter state on reset
Viacheslav Bocharov <v@baodeep.com>
pinctrl: meson: restore non-sleeping GPIO access
Vladimir Zapolskiy <vz@kernel.org>
gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe
Sechang Lim <rhkrqnwk98@gmail.com>
net/sched: act_bpf: use rcu_dereference_bh() to read the filter
Gleb Markov <markov.gi@npc-ksb.ru>
cxgb4: Fix decode strings dump for T6 adapters
Longjun Tang <tanglongjun@kylinos.cn>
virtio_net: disable cb when NAPI is busy-polled
Qingshuang Fu <fuqingshuang@kylinos.cn>
irqchip/ts4800: Fix missing chained handler cleanup on remove
Yuho Choi <dbgh9129@gmail.com>
irqchip/gic-v3-its: Fix OF node reference leak
Martin Kaiser <martin@kaiser.cx>
tracing: eprobe: read the complete FILTER_PTR_STRING pointer
Masami Hiramatsu (Google) <mhiramat@kernel.org>
tracing/events: Fix to check the simple_tsk_fn creation
Ido Schimmel <idosch@nvidia.com>
bridge: stp: Fix a potential use-after-free when deleting a bridge
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF
Rosen Penev <rosenp@gmail.com>
net: gianfar: dispose irq mappings on probe failure and device removal
Petr Wozniak <petr.wozniak@gmail.com>
net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy
Xiang Mei <xmei5@asu.edu>
usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup()
Matti Vaittinen <mazziesaccount@gmail.com>
hwmon: adm1275: Prevent reading uninitialized stack
Wei Fang <wei.fang@nxp.com>
net: enetc: check the number of BDs needed for xdp_frame
Matvey Kovalev <matvey.kovalev@ispras.ru>
qede: fix out-of-bounds check for cqe->len_list[]
Nuoqi Gui <gnq25@mails.tsinghua.edu.cn>
seg6: validate SRH length before reading fixed fields
Pengpeng Hou <pengpeng@iscas.ac.cn>
gpio: htc-egpio: use managed gpiochip registration
Pengpeng Hou <pengpeng@iscas.ac.cn>
gpio: mvebu: fail probe if gpiochip registration fails
Pengpeng Hou <pengpeng@iscas.ac.cn>
spi: sh-msiof: abort transfers when reset times out
Martin Kaiser <martin@kaiser.cx>
tracing: probes: fix typo in a log message
Rob Herring (Arm) <robh@kernel.org>
dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback
Shengjiu Wang <shengjiu.wang@nxp.com>
ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count
Ruoyu Wang <ruoyuw560@gmail.com>
net: sungem: fix probe error cleanup
Yun Zhou <yun.zhou@windriver.com>
net: mvneta: re-enable percpu interrupt on resume
Haoxiang Li <haoxiang_li2024@163.com>
rtc: cmos: unregister HPET IRQ handler on probe failure
Fredrik M Olsson <fredrik.m.olsson@axis.com>
rtc: ds1307: Fix off-by-one issue with wday for rx8130
Huiwen He <hehuiwen@kylinos.cn>
smb/client: preserve errors from smb2_set_sparse()
Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: fix error handling in disable_policy sysctl
Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: fix error handling in forwarding sysctl
Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: fix error handling in ignore_routes_with_linkdown sysctl
Fernando Fernandez Mancera <fmancera@suse.de>
ipv6: fix error handling in disable_ipv6 sysctl
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle
Eric Dumazet <edumazet@google.com>
veth: fix NAPI leak in XDP enable error path
Aleksandrova Alyona <aga@itb.spb.ru>
net: dsa: sja1105: round up PTP perout pin duration
Xiang Mei <xmei5@asu.edu>
net, bpf: check master for NULL in xdp_master_redirect()
Krzysztof Wilczyński <kwilczynski@kernel.org>
alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs
Krzysztof Wilczyński <kwilczynski@kernel.org>
alpha/PCI: Add security_locked_down() check to pci_mmap_resource()
Koichiro Den <den@valinux.co.jp>
NTB: epf: Fix doorbell bitmask and IRQ vector handling
Koichiro Den <den@valinux.co.jp>
NTB: epf: Report 0-based doorbell vector via ntb_db_event()
Koichiro Den <den@valinux.co.jp>
NTB: epf: Make db_valid_mask cover only real doorbell bits
Runyu Xiao <runyu.xiao@seu.edu.cn>
netfilter: nft_synproxy: stop bypassing the priv->info snapshot
Fernando Fernandez Mancera <fmancera@suse.de>
netfilter: nf_conncount: prevent connlimit drops for early confirmed ct
Mathias Krause <minipli@grsecurity.net>
netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init()
Bradley Morgan <include@grrlz.net>
bpf: Disable xfrm_decode_session hook attachment
Xu Kuohai <xukuohai@huawei.com>
bpf, lsm: Add disabled BPF LSM hook list
Kuniyuki Iwashima <kuniyu@google.com>
ipv4: fib: Don't ignore error route in local/main tables.
Xiang Mei <xmei5@asu.edu>
ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE
Stepan Ionichev <sozdayvek@gmail.com>
rtc: msc313: fix NULL deref in shared IRQ handler at probe
Lukasz Czapnik <lukasz.czapnik@intel.com>
ice: fix AQ error code comparison in ice_set_pauseparam()
Dawid Osuchowski <dawid.osuchowski@linux.intel.com>
ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0
Xiang Mei <xmei5@asu.edu>
drm/edid: fix OOB read in drm_parse_tiled_block()
Avinash Duduskar <avinash.duduskar@gmail.com>
bpf: zero-initialize the fib lookup flow struct
Nuoqi Gui <gnq25@mails.tsinghua.edu.cn>
bpf: Fix stack slot index in nospec checks
Ronan Dalton <ronan.dalton@alliedtelesis.co.nz>
rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231
Antoni Pokusinski <apokusinski01@gmail.com>
rtc: abx80x: fix the RTC_VL_CLR clearing all status flags
Geetha sowjanya <gakula@marvell.com>
octeontx2-pf: mcs: Fix mcs resources free on PF shutdown
Subbaraya Sundeep <sbhatta@marvell.com>
octeontx2-pf: Clear stats of all resources when freeing resources
Geetha sowjanya <gakula@marvell.com>
octeontx2-af: mcs: Fix unsupported secy stats read
Ruoyu Wang <ruoyuw560@gmail.com>
net: marvell: prestera: initialize err in prestera_port_sfp_bind
Aboorva Devarajan <aboorvad@linux.ibm.com>
selftests/mm: fix exclusive_cow test fork() handling
Sayali Patil <sayalip@linux.ibm.com>
selftests/mm: allow PUD-level entries in compound testcase of hmm tests
Sayali Patil <sayalip@linux.ibm.com>
selftests/mm: clarify alternate unmapping in compaction_test
Bhargav Joshi <j.bhargav.u@gmail.com>
irqchip/crossbar: Fix parent domain resource leak
Florian Westphal <fw@strlen.de>
netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak
Florian Westphal <fw@strlen.de>
netfilter: nf_reject: skip iphdr options when looking for icmp header
Jozsef Kadlecsik <kadlec@netfilter.org>
netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer()
Jozsef Kadlecsik <kadlec@netfilter.org>
netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types
Jozsef Kadlecsik <kadlec@netfilter.org>
netfilter: ipset: annotate "pos" for concurrent readers/writers
Jozsef Kadlecsik <kadlec@netfilter.org>
netfilter: ipset: Fix data race between add and dump in all hash types
Abd-Alrhman Masalkhi <abd.masalkhi@gmail.com>
md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry
Aleksandr Nogikh <nogikh@google.com>
ieee802154: fix kernel-infoleak in dgram_recvmsg()
Ivan Abramov <i.abramov@mt-integration.ru>
ieee802154: Remove WARN_ON() in cfg802154_pernet_exit()
Xu Rao <raoxu@uniontech.com>
ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone()
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
ACPI: resource: Amend kernel-doc style
Ricardo Neri <ricardo.neri-calderon@linux.intel.com>
thermal: intel: Fix dangling resources on thermal_throttle_online() failure
Breno Leitao <leitao@debian.org>
arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS
Yun Zhou <yun.zhou@windriver.com>
flow_dissector: check device type before reading ETH_ADDRS
Ioana Ciornei <ioana.ciornei@nxp.com>
dpaa2-switch: fix VLAN upper check not rejecting bridge join
Xiang Mei <xmei5@asu.edu>
virtio-net: fix len check in receive_big()
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: introduce dma sync api for virtqueue
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: introduce dma map api for virtqueue
Xuan Zhuo <xuanzhuo@linux.alibaba.com>
virtio_ring: introduce virtqueue_set_dma_premapped()
Quang Nguyen <quang.nguyen.wx@renesas.com>
spi: rpc-if: Use correct device for hardware reinitialization on resume
Mark Tomlinson <mark.tomlinson@alliedtelesis.co.nz>
PCI: iproc: Restore .map_irq() for the platform bus driver
Xin Long <lucien.xin@gmail.com>
sctp: hold socket lock when dumping endpoints in sctp_diag
Jakub Kicinski <kuba@kernel.org>
net: psample: fix info leak in PSAMPLE_ATTR_DATA
Ratheesh Kannoth <rkannoth@marvell.com>
octeontx2-pf: Fix leak of SQ timestamp buffer on teardown
Thadeu Lima de Souza Cascardo <cascardo@igalia.com>
drm/amdgpu: initialize irq.lock spinlock earlier
Mario Limonciello <mario.limonciello@amd.com>
drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm
Yunxiang Li <Yunxiang.Li@amd.com>
drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free
Sen Wang <sen@ti.com>
ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode
Arnaldo Carvalho de Melo <acme@redhat.com>
perf machine: Use snprintf() for guestmount path construction
Eric Dumazet <edumazet@google.com>
xfrm: validate selector family and prefixlen during match
Eric Dumazet <edumazet@google.com>
xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[]
Mike Yu <yumike@google.com>
xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path
Steffen Klassert <steffen.klassert@secunet.com>
xfrm: Use the XFRM_GRO to indicate a GRO call on input
Leon Romanovsky <leon@kernel.org>
xfrm: add new packet offload flag
Jisheng Zhang <jszhang@kernel.org>
spi: dw: fix wrong BAUDR setting after resume
Arnaldo Carvalho de Melo <acme@redhat.com>
perf bpf: Bounds-check array offsets in bpil_offs_to_addr()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf bpf: Validate func_info_rec_size and sub_id in synthesize_bpf_prog_name()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Use snprintf() for root_dir path construction
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Break infinite loop on zero-filled notes in sysfs__read_build_id()
Pengpeng Hou <pengpeng@iscas.ac.cn>
sparc: led: avoid trimming a newline from empty writes
John Johansen <john.johansen@canonical.com>
apparmor: fix label can not be immediately before a declaration
Adrian Hunter <adrian.hunter@intel.com>
i3c: master: Prevent reuse of dynamic address on device add failure
Zygmunt Krynicki <me@zygoon.pl>
apparmor: put secmark label after secid lookup
Zygmunt Krynicki <me@zygoon.pl>
apparmor: aa_getprocattr free procattr leak on format failure
Maxime Bélair <maxime.belair@canonical.com>
apparmor: fix potential UAF in aa_replace_profiles
Ryan Lee <ryan.lee@canonical.com>
apparmor: grab ns lock and refresh when looking up changehat child profiles
Zygmunt Krynicki <me@zygoon.pl>
apparmor: aa_label_alloc use aa_label_free on alloc failure
Ruoyu Wang <ruoyuw560@gmail.com>
apparmor: check label build before no_new_privs test
Andrew Morton <akpm@linux-foundation.org>
security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref()
Yuanhe Shu <xiangzao@linux.alibaba.com>
Revert "PCI/MSI: Unmap MSI-X region on error"
Manivannan Sadhasivam <manivannan.sadhasivam@oss.qualcomm.com>
PCI: mediatek: Use actual physical address instead of virt_to_phys()
Ryder Lee <ryder.lee@mediatek.com>
PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Add bounds checks to read_build_id() note iteration in minimal build
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Add bounds checks to elf_read_build_id() note iteration
Arnaldo Carvalho de Melo <acme@redhat.com>
perf bpf: Add NULL check for btf__type_by_id() in synthesize_bpf_prog_name()
Arnaldo Carvalho de Melo <acme@redhat.com>
tools lib api: Fix mount_overload() snprintf truncation and toupper range
Arnaldo Carvalho de Melo <acme@redhat.com>
tools lib api: Fix filename__write_int() writing uninitialized stack data
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Bounds-check descsz in sysfs__read_build_id() GNU fallback
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Fix thread__set_comm_from_proc() on empty comm file
Arnaldo Carvalho de Melo <acme@redhat.com>
perf intel-pt: Fix snprintf size tracking bug in insn decoder
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Bounds-check .gnu_debuglink section data
Arnaldo Carvalho de Melo <acme@redhat.com>
perf symbols: Fix signed overflow in sysfs__read_build_id() size check
Arnaldo Carvalho de Melo <acme@redhat.com>
tools lib api: Fix missing null termination in filename__read_int/ull()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty sysfs file
Arnaldo Carvalho de Melo <acme@redhat.com>
perf pmu: Fix pmu_id() heap underwrite on empty identifier file
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Return sendctx slot after Send preparation failure
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Repost Receive buffers for malformed replies
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Sanitize the reply credit grant after parsing
Chris Mason <clm@meta.com>
xprtrdma: Fix bcall rep leak and unbounded peek
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Resize reply buffers before reposting receives
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Document and assert reply-handler invariants
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Check frwr_wp_create() during connect
Arnaldo Carvalho de Melo <acme@redhat.com>
perf hists: Fix snprintf() in hists__scnprintf_title() UID filter path
Arnaldo Carvalho de Melo <acme@redhat.com>
perf bpf: Use scnprintf() in snprintf_hex() and synthesize_bpf_prog_name()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf sched: Fix idle-hist callchain display using wrong rb_first variant
Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com>
PCI: rcar-host: Remove unused LIST_HEAD(res)
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Use perf_env__get_cpu_topology() in machine__resolve()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Fix get_max_num() size_t underflow on empty sysfs file
Li RongQing <lirongqing@baidu.com>
PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro
Mike Snitzer <snitzer@kernel.org>
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write
Mike Snitzer <snitzer@kernel.org>
NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors
Dai Ngo <dai.ngo@oracle.com>
NFSv4/pnfs: defer return_range callbacks until after inode unlock
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Decouple req recycling from RPC completion
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Use sendctx DMA state for Send signaling
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Post receive buffers after RPC completion
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Avoid 250 ms delay on backlog wakeup
Chuck Lever <chuck.lever@oracle.com>
xprtrdma: Remove temp allocation of rpcrdma_rep objects
Sagi Grimberg <sagi@grimberg.me>
pNFS/filelayout: fix cheking if a layout is striped
Phillip Varney <pbvarney@protonmail.com>
clk: qcom: a53: Corrected frequency multiplier for 1152MHz
Nuno Sá <nuno.sa@analog.com>
dmaengine: Fix possible use after free
Icenowy Zheng <zhengxingda@iscas.ac.cn>
dmaengine: qcom: gpi: set DMA_PRIVATE capability
Arnaldo Carvalho de Melo <acme@redhat.com>
perf c2c: Fix use-after-free in he__get_c2c_hists() error path
Arnaldo Carvalho de Melo <acme@redhat.com>
perf mmap: Fix NULL deref in aio cleanup on alloc failure
Arnaldo Carvalho de Melo <acme@redhat.com>
perf sched: Replace BUG_ON and add NULL checks in replay event helpers
Arnaldo Carvalho de Melo <acme@redhat.com>
perf sched: Clean up idle_threads entry on init failure
Arnaldo Carvalho de Melo <acme@redhat.com>
perf mmap: Guard cpu__get_node() return in aio_bind()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf tools: Add bounds check to cpu__get_node()
Arnaldo Carvalho de Melo <acme@redhat.com>
perf sched: Fix NULL dereference in latency_runtime_event
Arnaldo Carvalho de Melo <acme@redhat.com>
perf sched: Replace BUG_ON on invalid CPU with graceful skip
Rui Qi <qirui.001@bytedance.com>
perf: Fix off-by-one stack buffer overflow in kallsyms__parse()
Shengjiu Wang <shengjiu.wang@nxp.com>
dmaengine: imx-sdma: Refine spba bus searching in probe
Srinivasan Shanmugam <srinivasan.shanmugam@amd.com>
drm/amd/display: Add missing kdoc for ALLM parameters
Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
fs/ntfs3: add bounds check to run_get_highest_vcn()
Rosen Penev <rosenp@gmail.com>
HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter
Yuho Choi <dbgh9129@gmail.com>
clk: at91: keep securam node alive while mapping it
Sanjay Chitroda <sanjayembeddedse@gmail.com>
iio: accel: mma8452: handle I2C read error(s) in mma8452_read()
Guilherme Ivo Bozi <guilherme.bozi@usp.br>
iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling
Joshua Crofts <joshua.crofts1@gmail.com>
iio: magnetometer: ak8975: fix potential kernel stack memory leak
Joshua Crofts <joshua.crofts1@gmail.com>
iio: light: si1133: prevent race condition on timeout
Joshua Crofts <joshua.crofts1@gmail.com>
iio: light: si1133: reset counter to prevent race condition
Arnaldo Carvalho de Melo <acme@redhat.com>
perf header: Sanity check HEADER_EVENT_DESC attr.size before swap
James Kim <james010kim@gmail.com>
char: tlclk: fix use-after-free in tlclk_cleanup()
Seungjin Bae <eeodqql09@gmail.com>
usb: host: max3421: Reject hub port requests for non-existent ports
Seungjin Bae <eeodqql09@gmail.com>
usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control()
Guangshuo Li <lgs201920130244@gmail.com>
staging: most: video: avoid double free on video register failure
Sergey Senozhatsky <senozhatsky@chromium.org>
mailbox: mtk-adsp: fix UAF during device teardown
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
phy: phy-can-transceiver: Check driver match and driver data against NULL
Sumit Kumar <sumit.kumar@oss.qualcomm.com>
bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker()
Rong Zhang <i@rong.moe>
PCI: loongson: Do not ignore downstream devices on external bridges
Ian Rogers <irogers@google.com>
perf sched: Add missing mmap2 handler in timehist
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
platform/x86: xo15-ebook: Fix wakeup source and GPE handling
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
x86/platform/olpc: xo15: Drop wakeup source on driver removal
Guixin Liu <kanie@linux.alibaba.com>
PCI: Check ROM header and data structure addr before accessing
Guixin Liu <kanie@linux.alibaba.com>
PCI: Introduce named defines for PCI ROM
Carlos Bilbao <carlos.bilbao@kernel.org>
PCI/ASPM: Don't reconfigure ASPM entering low-power state
Leo Yan <leo.yan@arm.com>
coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore
Yingchao Deng <yingchao.deng@oss.qualcomm.com>
coresight: cti: Fix DT filter signals silently ignored
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: nvec: fix use-after-free in nvec_rx_completed()
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
net/9p: fix race condition on rdma->state in trans_rdma.c
Aleksandr Nogikh <nogikh@google.com>
ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write
Guangshuo Li <lgs201920130244@gmail.com>
ksmbd: fix use-after-free in same_client_has_lease()
Eric Dumazet <edumazet@google.com>
tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF)
Eric Dumazet <edumazet@google.com>
tipc: fix UAF in tipc_l2_send_msg()
Gui-Dong Han <hanguidong02@gmail.com>
KEYS: Use acquire when reading state in keyring search
Aboorva Devarajan <aboorvad@linux.ibm.com>
powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus
Aboorva Devarajan <aboorvad@linux.ibm.com>
powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down
Aboorva Devarajan <aboorvad@linux.ibm.com>
powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del
Yadan Fan <ydfan@suse.com>
MIPS: mm: Fix out-of-bounds write in maar_res_walk()
Sechang Lim <rhkrqnwk98@gmail.com>
bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check
Weiming Shi <bestswngs@gmail.com>
bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data()
Leon Hwang <leon.hwang@linux.dev>
bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket
Huiwen He <hehuiwen@kylinos.cn>
smb/client: always return a value for FS_IOC_GETFLAGS
Jian Zhang <zhangjian496@huawei.com>
cifs: remove all cifs files before kill super
Takashi Iwai <tiwai@suse.de>
ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait()
Florian Westphal <fw@strlen.de>
netfilter: nf_conncount: callers must hold rcu read lock
Runyu Xiao <runyu.xiao@seu.edu.cn>
kcm: use WRITE_ONCE() when changing lower socket callbacks
Ovidiu Panait <ovidiu.panait.rb@renesas.com>
net: bcmgenet: Use weighted round-robin TX DMA arbitration
Dragos Tatulea <dtatulea@nvidia.com>
net/mlx5: Check max_macs devlink param value against max capability
Sun Jian <sun.jian.kdev@gmail.com>
bpf: Run generic devmap egress prog on private skb
Aditya Garg <gargaditya@linux.microsoft.com>
net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check
Aditya Garg <gargaditya@linux.microsoft.com>
net: mana: initialize gdma queue id to INVALID_QUEUE_ID
Victor Nogueira <victor@mojatatu.com>
net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
Victor Nogueira <victor@mojatatu.com>
net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen
Lucas Tsai <lucas_tsai@richtek.com>
power: supply: core: fix supplied_from allocations
Guangshuo Li <lgs201920130244@gmail.com>
ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO
Lars Pöschel <lars.poeschel@edag.com>
spi: xilinx: use FIFO occupancy register to determine buffer size
Herbert Xu <herbert@gondor.apana.org.au>
crypto: rng - Free default RNG on module exit
Felix Gu <ustc.gu@gmail.com>
crypto: cavium/cpt - fix DMA cleanup using wrong loop index
Felix Gu <ustc.gu@gmail.com>
crypto: marvell/octeontx - fix DMA cleanup using wrong loop index
Dave Jiang <dave.jiang@intel.com>
cxl/test: Add check after kzalloc() memory in alloc_mock_res()
Michael Bommarito <michael.bommarito@gmail.com>
tipc: reject inverted service ranges from peer bindings
Michael Bommarito <michael.bommarito@gmail.com>
tipc: prevent snt_unacked underflow on CONN_ACK
Michael Bommarito <michael.bommarito@gmail.com>
tipc: require net admin for TIPCv2 netlink mutators
Victor Nogueira <victor@mojatatu.com>
net/sched: sch_hfsc: Don't make class passive twice
Xin Long <lucien.xin@gmail.com>
sctp: validate embedded address parameter length
Xiang Mei <xmei5@asu.edu>
bridge: cfm: reject invalid CCM interval at configuration time
Kuniyuki Iwashima <kuniyu@google.com>
net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().
Jamal Hadi Salim <jhs@mojatatu.com>
net/sched: cls_flow: Dont expose folded kernel pointers
HyeongJun An <sammiee5311@gmail.com>
ASoC: tegra: tegra210_ahub: Validate written enum value
HyeongJun An <sammiee5311@gmail.com>
ASoC: fsl: fsl_audmix: Validate written enum values
HyeongJun An <sammiee5311@gmail.com>
ASoC: codecs: hdac_hdmi: Validate written enum value
Leon Romanovsky <leon@kernel.org>
RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one
Maher Sanalla <msanalla@nvidia.com>
RDMA/mlx5: Fix undefined shift of user RQ WQE size
Patrisious Haddad <phaddad@nvidia.com>
RDMA/mlx5: Remove raw RSS QP restrack tracking
Maxwell Doose <m32285159@gmail.com>
fs: efs: remove unneeded debug prints
Samuel Moelius <sam.moelius@trailofbits.com>
Bluetooth: hci: validate codec capability element length
Weiming Shi <bestswngs@gmail.com>
Bluetooth: eir: Fix stack OOB write when prepending the Flags AD
Heiko Carstens <hca@linux.ibm.com>
s390/process: Fix kernel thread function pointer type
Daniel Borkmann <daniel@iogearbox.net>
bpf: Tighten cgroup storage cookie checks for prog arrays
Dave Jiang <dave.jiang@intel.com>
cxl/test: Fix integer overflow in mock LSA bounds checks
Yonghong Song <yonghong.song@linux.dev>
selftests/bpf: Fix bpf_iter/task_vma test
Louis Scalbert <louis.scalbert@6wind.com>
bonding: 3ad: fix mux port state on oper down
longlong yan <yanlonglong@kylinos.cn>
tools/virtio: check mmap return value in vringh_test
Qing Ming <a0yami@mailbox.org>
vhost/net: complete zerocopy ubufs only once
Zhang Tianci <zhangtianci.1997@bytedance.com>
vduse: Requeue failed read to send_list head
Qihang Tang <q.h.hack.winter@gmail.com>
vhost/vdpa: validate virtqueue index in mmap and fault paths
Qihang Tang <q.h.hack.winter@gmail.com>
vduse: hold vduse_lock across IDR lookup in open path
Jason Gunthorpe <jgg@ziepe.ca>
IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified
Johannes Thumshirn <johannes.thumshirn@wdc.com>
btrfs: zoned: don't account data relocation space-info in statfs free space
David Laight <david.laight.linux@gmail.com>
fbdev: sm501fb: Fix buffer errors in OF binding code
Filipe Manana <fdmanana@suse.com>
btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs()
Bjoern A. Zeeb <bz@FreeBSD.org>
wifi: mt76: fix argument to ieee80211_is_first_frag()
Wolfram Sang <wsa+renesas@sang-engineering.com>
hwspinlock: qcom: avoid uninitialized struct members
Hui Zhu <zhuhui@kylinos.cn>
vmalloc: fix NULL pointer dereference in is_vm_area_hugepages()
Luca Leonardo Scorcia <l.scorcia@gmail.com>
pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39
Luca Leonardo Scorcia <l.scorcia@gmail.com>
pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39
David Disseldorp <ddiss@suse.de>
scsi: target: Fix hexadecimal CHAP_I handling
Yuho Choi <dbgh9129@gmail.com>
watchdog: unregister PM notifier on watchdog unregister
Al Viro <viro@zeniv.linux.org.uk>
configfs: fix lockless traversals of ->s_children
Dmitry Vyukov <dvyukov@google.com>
firmware_loader: Fix recursive lock in device_cache_fw_images()
Felix Gu <ustc.gu@gmail.com>
spi: ep93xx: fix double-free of zeropage on DMA setup failure
Jason Gunthorpe <jgg@ziepe.ca>
IB/mlx5: Properly support implicit ODP rereg_mr
Jason Gunthorpe <jgg@ziepe.ca>
IB/mlx5: Don't take the rereg_mr fallback without a new translation
Pengjie Zhang <zhangpengjie2@huawei.com>
cpufreq: Documentation: fix conservative governor freq_step description
Yuho Choi <dbgh9129@gmail.com>
ACPI: IPMI: Fix message kref handling on dead device
Kyle Zeng <kylebot@openai.com>
ALSA: seq: Clear variable event pointer on read
Takashi Iwai <tiwai@suse.de>
ALSA: seq: Add UMP support
Takashi Iwai <tiwai@suse.de>
ALSA: seq: Introduce SNDRV_SEQ_IOCTL_USER_PVERSION ioctl
Rui Qi <qirui.001@bytedance.com>
riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe
Tristan Madani <tristan@talencesecurity.com>
wifi: wcn36xx: fix OOB read from short trigger BA firmware response
Tristan Madani <tristan@talencesecurity.com>
wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication
Tristan Madani <tristan@talencesecurity.com>
wifi: wcn36xx: fix heap overflow from oversized firmware HAL response
Leon Hwang <leon.hwang@linux.dev>
bpf: Update transport_header when encapsulating UDP tunnel in lwt
Leon Hwang <leon.hwang@linux.dev>
bpf: Check tail zero of bpf_prog_info
Jacob Moroni <jmoroni@google.com>
RDMA/irdma: Fix OOB read during CQ MR registration
Jason Gunthorpe <jgg@ziepe.ca>
IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path()
Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp
Fernando Fernandez Mancera <fmancera@suse.de>
netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock
Fernando Fernandez Mancera <fmancera@suse.de>
netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures
Joseph Qi <joseph.qi@linux.alibaba.com>
ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release()
Zhang Cen <rollkingzzc@gmail.com>
ocfs2/dlm: require a ref for locking_state debugfs open
Zhang Cen <rollkingzzc@gmail.com>
ocfs2: reject FITRIM ranges shorter than a cluster
Dmitry Antipov <dmantipov@yandex.ru>
ocfs2: fix buffer head management in ocfs2_read_blocks()
Zhang Cen <rollkingzzc@gmail.com>
ocfs2: rebase copied fsdlm LVB pointers in locking_state
Sandipan Das <sandipan.das@amd.com>
perf/x86/amd/core: Always use the NMI latency mitigation
Woojin Ji <random6.xyz@gmail.com>
bpftool: Use libbpf error code for flow dissector query
Al Viro <viro@zeniv.linux.org.uk>
configfs_lookup(): don't leave ->s_dentry dangling on failure
Alexander Potapenko <glider@google.com>
lib/test_meminit: use && for bools
Guanyou.Chen <chenguanyou9338@gmail.com>
sched: restore timer_slack_ns when resetting RT policy on fork
Sang-Heon Jeon <ekffu200098@gmail.com>
mm/fake-numa: fix under-allocation detection in uniform split
Deepanshu Kartikey <kartikey406@gmail.com>
bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
Dan Carpenter <error27@gmail.com>
scsi: pm8001: Fix error code in non_fatal_log_show()
Martin Wilck <martin.wilck@suse.com>
scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans"
Alison Schofield <alison.schofield@intel.com>
nvdimm/btt: Handle preemption in BTT lane acquisition
Yuho Choi <dbgh9129@gmail.com>
ARM: imx31: Fix IIM mapping leak in revision check
Yuho Choi <dbgh9129@gmail.com>
ARM: imx3: Fix CCM node reference leak
Zhang Yi <yi.zhang@huawei.com>
ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback
Chen Cheng <chencheng@fnnas.com>
md/raid10: reset read_slot when reusing r10bio for discard
Renjiang Han <renjiang.han@oss.qualcomm.com>
media: qcom: venus: relax encoder frame/blur step size on v6
Renjiang Han <renjiang.han@oss.qualcomm.com>
media: qcom: venus: relax encoder frame/blur dimension steps on v4
Renjiang Han <renjiang.han@oss.qualcomm.com>
media: qcom: venus: drop extra padding in NV12 raw size calculation
Tristan Madani <tristmd@gmail.com>
RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path
Tristan Madani <tristmd@gmail.com>
RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe
zhoumin <teczm@foxmail.com>
EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info
Jessica Zhang <jessica.zhang@oss.qualcomm.com>
drm/msm/dp: Fix the ISR_* enum values
Jessica Zhang <jessica.zhang@oss.qualcomm.com>
drm/msm/dp: fix HPD state status bit shift value
Weili Qian <qianweili@huawei.com>
crypto: hisilicon/qm - disable error report before flr
Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
ocfs2: kill osb->system_file_mutex lock
ZhengYuan Huang <gality369@gmail.com>
ocfs2: don't BUG_ON an invalid journal dinode
Dan Carpenter <error27@gmail.com>
rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc()
Davidlohr Bueso <dave@stgolabs.net>
dax/kmem: account for partial discontiguous resource upon removal
Carlos Llamas <cmllamas@google.com>
libbpf: Fix UAF in strset__add_str()
Michael Bommarito <michael.bommarito@gmail.com>
libbpf: Harden parse_vma_segs() path parsing
Timur Tabi <ttabi@nvidia.com>
drm/nouveau/bios: specify correct display fuse register for Ampere and Ada
Mikko Perttunen <mperttunen@nvidia.com>
drm/tegra: Fix iommu_map_sgtable() return value check
Mikko Perttunen <mperttunen@nvidia.com>
gpu: host1x: Fix iommu_map_sgtable() return value check
Felix Gu <ustc.gu@gmail.com>
drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output()
Mikko Perttunen <mperttunen@nvidia.com>
gpu: host1x: Allow entries in BO caches to be freed
Jiayuan Chen <jiayuan.chen@linux.dev>
net/sched: cls_bpf: prevent unbounded recursion in offload rollback
Eric Dumazet <edumazet@google.com>
ipv6: guard against possible NULL deref in __in6_dev_stats_get()
Breno Leitao <leitao@debian.org>
workqueue: drop spurious '*' from print_worker_info() fn declaration
Nilay Shroff <nilay@linux.ibm.com>
nvme-multipath: fix flex array size in struct nvme_ns_head
Zhang Cen <rollkingzzc@gmail.com>
ALSA: seq: midi: Serialize output teardown with event_input
Miquel Raynal <miquel.raynal@bootlin.com>
mtd: spi-nor: Drop duplicate Kconfig dependency
Rosen Penev <rosenp@gmail.com>
mips: n64: add __iomem for writel call
Rosen Penev <rosenp@gmail.com>
mips: ralink: mt7621: add missing __iomem
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: DEC: Remove do_IRQ() call indirection
Maciej W. Rozycki <macro@orcam.me.uk>
MIPS: Fix big-endian stack argument fetching in o32 wrapper
Jiakai Xu <xujiakai24@mails.ucas.ac.cn>
PM: sleep: Use complete() in device_pm_sleep_init()
Tao Cui <cuitao@kylinos.cn>
RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup
Lianfa Weng <wenglianfa@huawei.com>
RDMA/hns: Fix warning in poll cq direct mode
Guangshuo Li <lgs201920130244@gmail.com>
IB/mlx4: Fix refcount leak in add_port() error path
Jacob Moroni <jmoroni@google.com>
RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs
Samuel Holland <samuel@sholland.org>
bus: sunxi-rsb: Always check register address validity
Ronaldo Nunez <rnunez@baylibre.com>
pwm: imx27: Fix variable truncation in .apply()
Lifeng Zheng <zhenglifeng1@huawei.com>
cpufreq: conservative: Simplify frequency limit handling
Pengjie Zhang <zhangpengjie2@huawei.com>
cpufreq: Documentation: fix sampling_down_factor range
Zhang Yuwei <zhangyuwei20@huawei.com>
driver core: Use mod_delayed_work to prevent lost deferred probe work
Stepan Ionichev <sozdayvek@gmail.com>
device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id()
Geert Uytterhoeven <geert+renesas@glider.be>
firmware: arm_scmi: Fix OOB in scmi_power_name_get()
Sven Püschel <s.pueschel@pengutronix.de>
media: rockchip: rga: fix too small buffer size
Eric Dumazet <edumazet@google.com>
net/sched: sch_drr: annotate data-races around cl->deficit
Greg Kroah-Hartman <gregkh@linuxfoundation.org>
sysfs: clamp show() return value in sysfs_kf_read()
Sudeep Holla <sudeep.holla@kernel.org>
firmware: arm_scmi: Read sensor config as 32-bit value
Zilin Guan <zilin@seu.edu.cn>
media: atomisp: Fix memory leak in atomisp_fixed_pattern_table()
Sara Venkatesh <sarajvenkatesh@gmail.com>
RDMA/srpt: fix integer overflow in immediate data length check
Prathamesh Deshpande <prathameshdeshpande7@gmail.com>
RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference
Alexander Chesnokov <Alexander.Chesnokov@kaspersky.com>
RDMA/hns: Fix arithmetic overflow in calc_hem_config()
Linmao Li <lilinmao@kylinos.cn>
ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD
Eric Dumazet <edumazet@google.com>
net/sched: sch_htb: annotate data-races (I)
Eric Dumazet <edumazet@google.com>
net/sched: sch_htb: do not change sch->flags in htb_dump()
Sean Christopherson <seanjc@google.com>
crypto: ccp - Treat zero-length cert chain as query for blob lengths
Eric Dumazet <edumazet@google.com>
net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats()
Rafael J. Wysocki <rafael.j.wysocki@intel.com>
thermal: hwmon: Fix critical temperature attribute removal
Pengpeng Hou <pengpeng@iscas.ac.cn>
evm: terminate and bound the evm_xattrs read buffer
Lin He <helin52@huawei.com>
drm/hisilicon/hibmc: use clock to look up the PLL value
Lin He <helin52@huawei.com>
drm/hisilicon/hibmc: move display contrl config to hibmc_probe()
Cristian Marussi <cristian.marussi@arm.com>
clk: scmi: Fix clock rate rounding
Chen-Yu Tsai <wenst@chromium.org>
arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host
Sean Christopherson <seanjc@google.com>
iommu/amd: Fix a stale comment about which legacy mode is user visible
Weiming Shi <bestswngs@gmail.com>
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
Thorsten Blum <thorsten.blum@linux.dev>
crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
Lothar Rubusch <l.rubusch@gmail.com>
crypto: atmel-sha204a - fix blocking and non-blocking rng logic
Kuniyuki Iwashima <kuniyu@google.com>
vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive().
Weixin Guo <2298701336@qq.com>
arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc
Felix Gu <ustc.gu@gmail.com>
pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path
Samuel Holland <samuel@sholland.org>
media: cedrus: Fix failure to clean up hardware on probe failure
Felix Gu <ustc.gu@gmail.com>
watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure
Yingjie Gao <gaoyingjie@uniontech.com>
watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH
Jihed Chaibi <jihed.chaibi.dev@gmail.com>
ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint
Tristan Madani <tristan@talencesecurity.com>
wifi: ath9k: fix OOB access from firmware tx status queue ID
Xingjing Deng <micro6947@gmail.com>
kconfig: fix potential NULL pointer dereference in conf_askvalue
Tristan Madani <tristan@talencesecurity.com>
wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer
Danilo Krummrich <dakr@kernel.org>
driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()
Srinivasan Shanmugam <srinivasan.shanmugam@amd.com>
drm/amdkfd: Validate CRIU-restored IDs before idr_alloc
Jon Hunter <jonathanh@nvidia.com>
arm64: tegra: Fix Tegra234 MGBE PTP clock
Louis Kotze <loukot@gmail.com>
wifi: cfg80211: fix grammar in MLO group key error message
Baolin Liu <liubaolin@kylinos.cn>
Documentation: proc: fix section numbering in table of contents
Aaron Tomlin <atomlin@atomlin.com>
libbpf: Report error when a negative kprobe offset is specified
Yuho Choi <dbgh9129@gmail.com>
drm/radeon: fix memory leak in radeon_ring_restore() on lock failure
Werner Kasselman <werner@verivus.ai>
drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch()
Tomi Valkeinen <tomi.valkeinen@ideasonboard.com>
drm/tidss: Drop extra drm_mode_config_reset() call
Ian Bridges <icb@fastmail.org>
fbcon: fix NULL pointer dereference for a console without vc_data
David Howells <dhowells@redhat.com>
afs: Fix further netns teardown to cancel the preallocation charger
Matvey Kovalev <matvey.kovalev@ispras.ru>
afs: fix NULL pointer dereference in afs_get_tree()
David Howells <dhowells@redhat.com>
afs: Fix netns teardown to cancel the preallocation charger
Matthias Feser <mfe@KBSgmbhfr.onmicrosoft.com>
serial: 8250_omap: clear rx_running on zero-length DMA completes
Stephan Gerhold <stephan.gerhold@linaro.org>
serial: msm: Disable DMA for kernel console UART
Guoniu Zhou <guoniu.zhou@oss.nxp.com>
dt-bindings: power: imx93: Add MIPI PHY power domain
Chen-Yu Tsai <wens@kernel.org>
dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Fix buffer sequence in frame gaps
Ricardo Ribalda <ribalda@chromium.org>
media: uvcvideo: Avoid partial metadata buffers
Eric Biggers <ebiggers@kernel.org>
crypto: hisi-trng - Remove crypto_rng interface
Eric Biggers <ebiggers@kernel.org>
crypto: af_alg - Remove zero-copy support from skcipher and aead
Eric Biggers <ebiggers@kernel.org>
crypto: crypto4xx - Remove insecure and unused rng_alg
Herbert Xu <herbert@gondor.apana.org.au>
crypto: crypto4xx - Remove ahash-related code
Stephen Dolan <sdolan@janestreet.com>
x86/mm: Fix check/use ordering in switch_mm_irqs_off()
Eric Biggers <ebiggers@kernel.org>
crypto: sun4i-ss - Remove insecure and unused rng_alg
Sagi Grimberg <sagi@grimberg.me>
nvmet-tcp: Fix potential UAF when ddgst mismatch
Shivam Kumar <kumar.shivam43666@gmail.com>
nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path
Vladimir Oltean <vladimir.oltean@nxp.com>
net: dsa: tag_ksz: do not rely on skb_mac_header() in TX paths
Yichong Chen <chenyichong@uniontech.com>
tools/mm/slabinfo: fix total_objects attribute name
Muhammet Kaan KILINÇ <muhammetkaankilinc@gmail.com>
crypto: algif_skcipher - force synchronous processing on trees without ctx->state
Shashank A P <shashank.ap@samsung.com>
fs: quota: create dedicated workqueue for quota_release_work
Adam Li <adamli@os.amperecomputing.com>
sched/fair: Only update stats for allowed CPUs when looking for dst group
ChenXiaoSong <chenxiaosong@kylinos.cn>
smb/server: do not require delete access for non-replacing links
Darrick J. Wong <djwong@kernel.org>
xfs: resample the data fork mapping after cycling ILOCK
Weiming Shi <bestswngs@gmail.com>
xfs: fail recovery on a committed log item with no regions
Shoichiro Miyamoto <shoichiro.miyamoto@gmail.com>
smb: client: reject overlapping data areas in SMB2 responses
Wongi Lee <qw3rtyp0@gmail.com>
ipv4: account for fraggap on the paged allocation path
Joanne Koong <joannelkoong@gmail.com>
fuse: re-lock request before returning from fuse_ref_folio()
Alberto Ruiz <aruiz@redhat.com>
fuse: fix device node leak in cuse_process_init_reply()
Michael Bommarito <michael.bommarito@gmail.com>
RDMA/siw: bound Read Response placement to the RREAD length
Zhenhao Wan <whi4ed0g@gmail.com>
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: maplecontrol - set driver data before registering input device
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: maplemouse - set driver data before registering input device
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: maple_keyb - set driver data before registering input device
Dmitry Torokhov <dmitry.torokhov@gmail.com>
Input: mms114 - fix multi-touch slot corruption
Florian Fuchs <fuchsfl@gmail.com>
Input: maplemouse - fix NULL pointer dereference in open()
Bryam Vargas <hexlabsecurity@proton.me>
Input: touchwin - reset the packet index on every complete packet
Bryam Vargas <hexlabsecurity@proton.me>
Input: iforce - bound the device-reported force-feedback effect index
Bryam Vargas <hexlabsecurity@proton.me>
Input: goodix - clamp the device-reported contact count
Ranjan Kumar <kumarranja@chromium.org>
Input: elan_i2c - prevent division by zero and arithmetic underflow
Bryam Vargas <hexlabsecurity@proton.me>
Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count
Bryam Vargas <hexlabsecurity@proton.me>
Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count
Haoxiang Li <haoxiang_li2024@163.com>
Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure
Guillermo Rodríguez <guille.rodriguez@gmail.com>
i2c: stm32f7: truncate clock period instead of rounding it
Johan Hovold <johan@kernel.org>
i2c: core: fix adapter deregistration race
Mikhail Gavrilov <mikhail.v.gavrilov@gmail.com>
udmabuf: fix DMA direction mismatch in release_udmabuf()
Sean Christopherson <seanjc@google.com>
KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode
Sean Christopherson <seanjc@google.com>
KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs
Koichiro Den <den@valinux.co.jp>
NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr()
Bryam Vargas <hexlabsecurity@proton.me>
exfat: bound uniname advance in exfat_find_dir_entry()
Andrii Kuchmenko <capyenglishlite@gmail.com>
module: decompress: check return value of module_extend_max_pages()
Benjamin Coddington <ben.coddington@hammerspace.com>
NFSv4: include MAY_WRITE in open permission mask for O_TRUNC
Huihui Huang <hhhuang@smu.edu.sg>
tracing: Prevent out-of-bounds read in glob matching
Janne Grunau <j@jannau.net>
watchdog: apple: Add "apple,t8103-wdt" compatible
Vasily Khoruzhick <vasilykh@arista.com>
EDAC/i10nm: Don't fail probing if ADXL is missing
Carlos Song <carlos.song@nxp.com>
spi: fsl-lpspi: terminate the RX channel on TX prepare failure path
Carlos Song <carlos.song@nxp.com>
spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync()
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos - move code in current_desc_hdr() into a standalone function
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1
Paul Louvel <paul.louvel@bootlin.com>
crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header
Eric Biggers <ebiggers@kernel.org>
crypto: drbg - Fix the fips_enabled priority boost
Eric Biggers <ebiggers@kernel.org>
crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels
Eric Biggers <ebiggers@kernel.org>
crypto: drbg - Fix returning success on failure in CTR_DRBG
Ruijie Li <ruijieli51@gmail.com>
crypto: pcrypt - restore callback for non-parallel fallback
Anastasia Tishchenko <sv3iry@gmail.com>
crypto: ecc - Fix carry overflow in vli multiplication
Thorsten Blum <thorsten.blum@linux.dev>
crypto: caam - use print_hex_dump_devel to guard key hex dumps again
Thorsten Blum <thorsten.blum@linux.dev>
crypto: caam - use print_hex_dump_devel to guard key hex dumps
Bryam Vargas <hexlabsecurity@proton.me>
isofs: bound Rock Ridge symlink components to the SL record
Bryam Vargas <hexlabsecurity@proton.me>
partitions: aix: bound the pp_count scan to the ppe array
Qu Wenruo <wqu@suse.com>
btrfs: do not trim a device which is not writeable
Achkinazi, Igor <Igor.Achkinazi@dell.com>
nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks
Mikulas Patocka <mpatocka@redhat.com>
dm-ioctl: report an error if a device has no table
Bryam Vargas <hexlabsecurity@proton.me>
udf: validate sparing table length as an entry count, not a byte count
Bryam Vargas <hexlabsecurity@proton.me>
udf: validate VAT header length against the VAT inode size
Michael Bommarito <michael.bommarito@gmail.com>
udf: validate free block extents against the partition length
Heinrich Schuchardt <heinrich.schuchardt@canonical.com>
efivarfs: fix statfs() on efivarfs
Anisse Astier <an.astier@criteo.com>
efivarfs: expose used and total size
Liviu Stan <liviu.stan@analog.com>
iio: temperature: ltc2983: Fix n_wires default bypassing rotation check
Paul Menzel <pmenzel@molgen.mpg.de>
usb: typec: ucsi: cancel pending work on system suspend
Fan Wu <fanwu01@zju.edu.cn>
usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove
Madhu M <madhu.m@intel.com>
usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode
Andrei Kuchynski <akuchynski@chromium.org>
usb: typec: ucsi: Invert DisplayPort role assignment
Badhri Jagan Sridharan <badhri@google.com>
usb: typec: tcpm: Validate SVID index in svdm_consume_modes()
Shuangpeng Bai <shuangpeng.kernel@gmail.com>
usb: typec: class: drop PD lookup reference
Myeonghun Pak <mhun512@gmail.com>
usb: typec: anx7411: use devm_pm_runtime_enable()
Sam Day <me@samcday.com>
usbip: vudc: fix NULL deref in vep_dequeue()
Yichong Chen <chenyichong@uniontech.com>
usbip: tools: support SuperSpeedPlus devices
Xu Rao <raoxu@uniontech.com>
USB: usb-storage: ene_ub6250: restore media-ready check
Johan Hovold <johan@kernel.org>
USB: ulpi: fix memory leak on registration failure
Johan Hovold <johan@kernel.org>
USB: serial: digi_acceleport: fix write buffer corruption
Johan Hovold <johan@kernel.org>
USB: serial: digi_acceleport: fix hard lockup on disconnect
Johan Hovold <johan@kernel.org>
USB: serial: digi_acceleport: fix broken rx after throttle
Fabio Porcedda <fabio.porcedda@gmail.com>
USB: serial: option: add Telit Cinterion FE990D50 compositions
Johan Hovold <johan@kernel.org>
USB: serial: keyspan_pda: fix information leak
Haoxiang Li <haoxiang_li2024@163.com>
usb: mtu3: unmap request DMA on queue failure
Myeonghun Pak <mhun512@gmail.com>
USB: misc: uss720: unregister parport on probe failure
Xu Rao <raoxu@uniontech.com>
USB: storage: include US_FL_NO_SAME in quirks mask
Myeonghun Pak <mhun512@gmail.com>
usb: sl811-hcd: disable controller wakeup on remove
Johan Hovold <johan@kernel.org>
USB: legousbtower: fix use-after-free on disconnect race
Erich E. Hoover <erich.e.hoover@gmail.com>
USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD
Johan Hovold <johan@kernel.org>
USB: iowarrior: fix use-after-free on disconnect
Johan Hovold <johan@kernel.org>
USB: ldusb: fix use-after-free on disconnect race
Johan Hovold <johan@kernel.org>
USB: idmouse: fix use-after-free on disconnect race
Jimmy Hu <hhhuuu@google.com>
usb: gadget: udc: Fix use-after-free in gadget_match_driver
Maoyi Xie <maoyixie.tju@gmail.com>
usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler
WenTao Liang <vulab@iscas.ac.cn>
usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume()
Rodrigo Lugathe da Conceição Alves <lugathe2@gmail.com>
USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub
Haoxiang Li <haoxiang_li2024@163.com>
usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info()
Jared Baldridge <jrb@expunge.us>
usb: cdc_acm: Add quirk for Uniden BC125AT scanner
Maoyi Xie <maoyixie.tju@gmail.com>
net: usb: kalmia: bound RX frame length in kalmia_rx_fixup()
Dawei Feng <dawei.feng@seu.edu.cn>
bpf: Restore sysctl new-value from 1 to 0
Zhao Zhang <zzhan461@ucr.edu>
bpf: Reject fragmented frames in devmap
Alexey Nepomnyashih <sdl@nppct.ru>
xfs: fix unreachable BIGTIME check in dquot flush validation
Yousef Alhouseen <alhouseenyousef@gmail.com>
xfs: use null daddr for unset first bad log block
Deepanshu Kartikey <kartikey406@gmail.com>
nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers
Tristan Madani <tristan@talencesecurity.com>
hfs/hfsplus: zero-initialize buffer in hfs_bnode_read
Srinivas Pandruvada <srinivas.pandruvada@linux.intel.com>
HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads
Maoyi Xie <maoyixie.tju@gmail.com>
HID: lg-g15: cancel pending work on remove to fix a use-after-free
Manish Khadka <maskmemanish@gmail.com>
HID: letsketch: fix UAF on inrange_timer at driver unbind
Myeonghun Pak <mhun512@gmail.com>
HID: wacom: stop hardware after post-start probe failures
Lukas Wunner <lukas@wunner.de>
X.509: Fix validation of ASN.1 certificate header
Kartik Rajput <kkartik@nvidia.com>
clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances
WenTao Liang <vulab@iscas.ac.cn>
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
Yuho Choi <dbgh9129@gmail.com>
cpufreq: pcc: fix use-after-free and double free in _OSC evaluation
Tianxiang Chen <nanmu@xiaomi.com>
cpufreq: Fix hotplug-suspend race during reboot
Steven Rostedt <rostedt@goodmis.org>
sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT
Fushuai Wang <wangfushuai@baidu.com>
cpufreq: intel_pstate: Sync policy->cur during CPU offline
Guangshuo Li <lgs201920130244@gmail.com>
firmware_loader: fix device reference leak in firmware_upload_register()
Norbert Manthey <nmanthey@amazon.de>
smb: client: mask server-provided mode to 07777 in modefromsid
Zihan Xi <xizh2024@lzu.edu.cn>
smb: client: harden POSIX SID length parsing
Zihan Xi <xizh2024@lzu.edu.cn>
smb: client: use unaligned reads in parse_posix_ctxt()
Haoxiang Li <haoxiang_li2024@163.com>
smb: client: Fix next buffer leak in receive_encrypted_standard()
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: add per-handle permission check to FILE_LINK_INFORMATION
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: run set info with opener credentials
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: require source read access for duplicate extents
Davide Ornaghi <d.ornaghi97@gmail.com>
ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation
Namjae Jeon <linkinjeon@kernel.org>
ksmbd: serialize QUERY_DIRECTORY requests per file
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: add a permission check for FSCTL_SET_ZERO_DATA
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE
Sebastian Andrzej Siewior <bigeasy@linutronix.de>
net: Drop the lock in skb_may_tx_timestamp()
Muhammad Bilal <meatuni001@gmail.com>
Bluetooth: L2CAP: validate option length before reading conf opt value
Yousef Alhouseen <alhouseenyousef@gmail.com>
Bluetooth: fix UAF in bt_accept_dequeue()
Yousef Alhouseen <alhouseenyousef@gmail.com>
Bluetooth: bnep: pin L2CAP connection during netdev registration
Sergey Senozhatsky <senozhatsky@chromium.org>
Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work()
Xiang Mei <xmei5@asu.edu>
netfilter: ebtables: terminate table name before find_table_lock()
Florian Westphal <fw@strlen.de>
netfilter: ebtables: module names must be null-terminated
Pratham Gupta <pratham36gupta@gmail.com>
netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump
Andrei Kuchynski <akuchynski@chromium.org>
mfd: cros_ec: Delay dev_set_drvdata() until probe success
Wyatt Feng <bronzed_45_vested@icloud.com>
net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes
Yuyang Huang <yuyanghuang@google.com>
ipv4: igmp: remove multicast group from hash table on device destruction
Runyu Xiao <runyu.xiao@seu.edu.cn>
io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item
Runyu Xiao <runyu.xiao@seu.edu.cn>
gpio: eic-sprd: use raw_spinlock_t in the irq startup path
Koichiro Den <den@valinux.co.jp>
NTB: epf: Avoid calling pci_irq_vector() from hardirq context
Yunpeng Tian <shionthanatos@gmail.com>
fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns
Thomas Gleixner <tglx@kernel.org>
debugobjects: Plug race against a concurrent OOM disable
Chi Wang <wangchi@kylinos.cn>
audit: Fix data races of skb_queue_len() readers on audit_queue
Zijing Yin <yzjaurora@gmail.com>
net: af_key: initialize alg_key_len for IPComp states
Gil Portnoy <dddhkts1@gmail.com>
ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL
Dawei Feng <dawei.feng@seu.edu.cn>
crypto: amlogic - avoid double cleanup in meson_crypto_probe()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB write in HT_caps_handler()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl()
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop
Alexandru Hossu <hossu.alexandru@gmail.com>
staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth()
Arnd Bergmann <arnd@arndb.de>
staging: media: atomisp: reduce load_primary_binaries() stack usage
Ricardo Ribalda <ribalda@chromium.org>
media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe
Hao-Qun Huang <alvinhuang0603@gmail.com>
staging: vme_user: fix location monitor leak in tsi148 bridge
Hao-Qun Huang <alvinhuang0603@gmail.com>
staging: vme_user: fix location monitor leak in fake bridge
Shoichiro Miyamoto <shoichiro.miyamoto@gmail.com>
smb: client: restrict implied bcc[0] exemption to responses without data area
Michael Tautschnig <tautschn@amazon.com>
staging: vme_user: bound slave read/write to the kern_buf size
Samuel Page <sam@bynar.io>
tipc: fix out-of-bounds read in broadcast Gap ACK blocks
Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
6lowpan: fix NHC entry use-after-free on error path
Runyu Xiao <runyu.xiao@seu.edu.cn>
usb: dwc3: run gadget disconnect from sleepable suspend context
Alan Stern <stern@rowland.harvard.edu>
USB: chaoskey: Fix slab-use-after-free in chaoskey_release()
Michael Bommarito <michael.bommarito@gmail.com>
hwrng: virtio: clamp device-reported used.len at copy_data()
Johan Hovold <johan@kernel.org>
virtio-mmio: fix device release warning on module unload
Xiang Mei <xmei5@asu.edu>
netfilter: ipset: fix race between dump and ip_set_list resize
SeongJae Park <sj@kernel.org>
mm/damon/ops-common: handle extreme intervals in damon_hot_score()
Ratheesh Kannoth <rkannoth@marvell.com>
PCI: host-common: Request bus reassignment when not probe-only
Mahesh Vaidya <mahesh.vaidya@altera.com>
PCI: altera: Do not dispose parent IRQ mapping
胡连勤 <hulianqin@vivo.com>
usb: xhci: Fix sleep in atomic context in xhci_free_streams()
Carlos Llamas <cmllamas@google.com>
binder: fix UAF in binder_free_transaction()
Carlos Llamas <cmllamas@google.com>
binder: fix UAF in binder_thread_release()
Johan Hovold <johan@kernel.org>
Bluetooth: btusb: fix wakeup source leak on probe failure
Johan Hovold <johan@kernel.org>
Bluetooth: btusb: fix use-after-free on marvell probe failure
Johan Hovold <johan@kernel.org>
Bluetooth: btusb: fix use-after-free on registration failure
Alex Williamson <alex.williamson@nvidia.com>
vfio/pci: Release the VGA arbiter client on register_device() failure
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Update Babyface Pro control caches only after successful writes
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Roll back quirk control caches on write errors
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put()
Darvell Long <contact@darvell.me>
ALSA: usb-audio: avoid kobject path lookup in DualSense match
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: ice1712: check snd_ctl_new1() return value
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: gus: check snd_ctl_new1() return value
Maoyi Xie <maoyixie.tju@gmail.com>
ALSA: firewire: isight: bound the sample count to the packet payload
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: es1938: check snd_ctl_new1() return value
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: cmipci: check snd_ctl_new1() return value
Maoyi Xie <maoyixie.tju@gmail.com>
ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser
Zhao Dongdong <zhaodongdong@kylinos.cn>
ALSA: ymfpci: check snd_ctl_new1() return value
Cássio Gabriel <cassiogabrielcontato@gmail.com>
ALSA: virtio: Add missing 384 kHz PCM rate mapping
Liviu Stan <liviu.stan@analog.com>
iio: temperature: ltc2983: Fix reinit_completion() called after conversion start
Andy Shevchenko <andriy.shevchenko@linux.intel.com>
iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call
Javier Carrasco <javier.carrasco.cruz@gmail.com>
iio: light: veml6030: fix channel type when pushing events
Stepan Ionichev <sozdayvek@gmail.com>
iio: light: tsl2591: return actual error from probe IRQ failure
Joshua Crofts <joshua.crofts1@gmail.com>
iio: light: opt3001: fix missing state reset on timeout
Biren Pandya <birenpandya@gmail.com>
iio: light: gp2ap002: fix runtime PM leak on read error
Vidhu Sarwal <vidhu.linux@gmail.com>
iio: light: al3010: fix incorrect scale for the highest gain range
Andreas Kempe <andreas.kempe@actia.se>
iio: imu: st_lsm6dsx: deselect shub page before reading whoami
Runyu Xiao <runyu.xiao@seu.edu.cn>
iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ
Stepan Ionichev <sozdayvek@gmail.com>
iio: gyro: bmg160: wait full startup time after mode change at probe
Stepan Ionichev <sozdayvek@gmail.com>
iio: gyro: bmg160: bail out when bandwidth/filter is not in table
Lars-Peter Clausen <lars@metafoo.de>
iio: event: Fix event FIFO reset race
Maxwell Doose <m32285159@gmail.com>
iio: chemical: scd30: Cleanup initializations and fix sign-extension bug
Pengpeng Hou <pengpeng@iscas.ac.cn>
iio: adc: ti-ads124s08: Return reset GPIO lookup errors
Maxwell Doose <m32285159@gmail.com>
iio: adc: spear: Initialize completion before requesting IRQ
Maxwell Doose <m32285159@gmail.com>
iio: adc: lpc32xx: Initialize completion before requesting IRQ
Biren Pandya <birenpandya@gmail.com>
iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error
Bryam Vargas <hexlabsecurity@proton.me>
iio: accel: bmc150: clamp the device-reported FIFO frame count
Griffin Kroah-Hartman <griffin@kroah.com>
usb: gadget: function: rndis: add length check for header
Griffin Kroah-Hartman <griffin@kroah.com>
usb: gadget: function: rndis: add length check to response query
Jonas Jelonek <jelonek.jonas@gmail.com>
MIPS: smp: report dying CPU to RCU in stop_this_cpu()
Philo Lu <lulie@linux.alibaba.com>
virtio_net: Support dynamic rss indirection table size
Taeyang Lee <0wn@theori.io>
perf/core: Detach event groups during remove_on_exec
Alice Ryhl <aliceryhl@google.com>
rust: Kbuild: set frame-pointer llvm module flag for CONFIG_FRAME_POINTER
Jeremy Linton <jeremy.linton@arm.com>
ACPI: CPPC: Suppress UBSAN warning caused by field misuse
Christian Brauner <brauner@kernel.org>
eventpoll: fix ep_remove struct eventpoll / struct file UAF
Christian Brauner <brauner@kernel.org>
eventpoll: move epi_fget() up
Christian Brauner <brauner@kernel.org>
eventpoll: rename ep_remove_safe() back to ep_remove()
Christian Brauner <brauner@kernel.org>
eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}()
Christian Brauner <brauner@kernel.org>
eventpoll: kill __ep_remove()
Christian Brauner <brauner@kernel.org>
eventpoll: split __ep_remove()
Christian Brauner <brauner@kernel.org>
eventpoll: use hlist_is_singular_node() in __ep_remove()
Christian Brauner <brauner@kernel.org>
file: add fput() cleanup helper
Linus Torvalds <torvalds@linux-foundation.org>
eventpoll: don't decrement ep refcount while still holding the ep mutex
Florian Fainelli <florian.fainelli@broadcom.com>
perf trace beauty fcntl: Fix build with older kernel headers
Claudia Draghicescu <claudia.rosu@nxp.com>
Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID
Jiayuan Chen <jiayuan.chen@shopee.com>
mm/vmscan: flush deferred TLB before freeing large folios
NeilBrown <neil@brown.name>
nfsd: change nfs4_client_to_reclaim() to allocate data
NeilBrown <neilb@ownmail.net>
nfsd: move name lookup out of nfsd4_list_rec_dir()
John Johansen <john.johansen@canonical.com>
apparmor: advertise the tcp fast open fix is applied
Trond Myklebust <trond.myklebust@hammerspace.com>
nfsd: Don't reset the write verifier on a commit EAGAIN
Michael Bommarito <michael.bommarito@gmail.com>
NFSv4/flexfiles: reject zero filehandle version count
Mingyu Wang <25181214217@stu.xidian.edu.cn>
fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font()
Johan Hovold <johan@kernel.org>
i2c: core: fix adapter registration race
Johan Hovold <johan@kernel.org>
i2c: core: fix adapter debugfs creation
Johan Hovold <johan@kernel.org>
i2c: core: fix NULL-deref on adapter registration failure
Johan Hovold <johan@kernel.org>
i2c: core: fix hang on adapter registration failure
Johan Hovold <johan@kernel.org>
i2c: core: fix irq domain leak on adapter registration failure
Yuho Choi <dbgh9129@gmail.com>
rpmsg: char: Fix use-after-free on probe error path
Denis Arefev <arefev@swemel.ru>
block: Avoid mounting the bdev pseudo-filesystem in userspace
Sean Christopherson <seanjc@google.com>
KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned()
Keshav Verma <iganschel@gmail.com>
f2fs: fix listxattr handling of corrupted xattr entries
Chao Yu <chao@kernel.org>
f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs()
Ruipeng Qi <ruipengqi3@gmail.com>
f2fs: fix potential deadlock in f2fs_balance_fs()
Bryam Vargas <hexlabsecurity@proton.me>
f2fs: bound i_inline_xattr_size for non-inline-xattr inodes
Wenjie Qi <qwjhust@gmail.com>
f2fs: validate orphan inode entry count
Wenjie Qi <qwjhust@gmail.com>
f2fs: keep atomic write retry from zeroing original data
Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
device property: initialize the remaining fields of fwnode_handle in fwnode_init()
Maoyi Xie <maoyixie.tju@gmail.com>
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd
Uwe Kleine-König <u.kleine-koenig@pengutronix.de>
slimbus: Convert to platform remove callback returning void
Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership
Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
slimbus: qcom-ngd-ctrl: Fix probe error path ordering
Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
slimbus: qcom-ngd-ctrl: Fix up platform_driver registration
Pedro Tammela <pctammela@mojatatu.com>
net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys
Kiryl Shutsemau <kas@kernel.org>
userfaultfd: gate must_wait writability check on pte_present()
Huacai Chen <chenhuacai@kernel.org>
LoongArch: Report dying CPU to RCU in stop_this_cpu()
Jeff Layton <jlayton@kernel.org>
nfsd: reset write verifier on deferred writeback errors
Chris Mason <clm@meta.com>
nfsd: release layout stid on setlease failure
Daniel Borkmann <daniel@iogearbox.net>
bpf, arm64: Reject out-of-range B.cond targets
Chaitanya Kulkarni <kch@nvidia.com>
nvmet-tcp: fix race between ICReq handling and queue teardown
-------------
Diffstat:
Documentation/admin-guide/pm/cpufreq.rst | 6 +-
Documentation/crypto/userspace-if.rst | 31 +-
.../media/allwinner,sun4i-a10-video-engine.yaml | 10 +
.../devicetree/bindings/net/renesas,ether.yaml | 3 +-
Documentation/driver-api/nvdimm/btt.rst | 5 +-
Documentation/driver-api/pci/pci.rst | 3 +
Documentation/filesystems/proc.rst | 14 +-
Makefile | 7 +-
arch/alpha/kernel/pci-sysfs.c | 13 +-
arch/arm/boot/dts/am335x-sl50.dts | 4 +-
arch/arm/configs/sunxi_defconfig | 1 -
arch/arm/mach-imx/cpu-imx31.c | 9 +-
arch/arm/mach-imx/mm-imx3.c | 2 +
arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi | 2 +-
arch/arm64/boot/dts/nvidia/tegra234.dtsi | 8 +-
arch/arm64/boot/dts/qcom/sdm630.dtsi | 9 +-
arch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts | 2 +-
arch/arm64/kernel/entry-fpsimd.S | 8 +-
arch/arm64/kernel/hw_breakpoint.c | 9 +
arch/arm64/kvm/vgic/vgic-its.c | 2 +
arch/arm64/kvm/vgic/vgic.c | 11 +-
arch/arm64/lib/insn.c | 2 +
arch/arm64/mm/hugetlbpage.c | 2 +-
arch/arm64/mm/mmu.c | 11 +-
arch/loongarch/include/asm/pgtable.h | 4 +
arch/loongarch/kernel/smp.c | 1 +
arch/mips/dec/int-handler.S | 2 +-
arch/mips/dec/prom/init.c | 6 +-
arch/mips/dec/setup.c | 6 -
arch/mips/fw/lib/call_o32.S | 2 +-
arch/mips/include/asm/dec/prom.h | 15 +-
arch/mips/kernel/mips-mt-fpaff.c | 28 +-
arch/mips/kernel/smp.c | 2 +
arch/mips/mm/init.c | 12 +-
arch/mips/n64/init.c | 2 +-
arch/mips/ralink/mt7621.c | 2 +-
arch/mips/sgi-ip22/ip22-gio.c | 7 +-
arch/powerpc/kexec/core_64.c | 4 +-
arch/powerpc/perf/core-fsl-emb.c | 3 +-
arch/powerpc/platforms/cell/spufs/file.c | 6 +-
arch/powerpc/platforms/powernv/setup.c | 3 +-
.../platforms/pseries/papr_platform_attributes.c | 8 +-
arch/riscv/kernel/cacheinfo.c | 2 +-
arch/riscv/kernel/machine_kexec.c | 3 +
arch/riscv/kernel/stacktrace.c | 2 +-
arch/s390/kernel/process.c | 2 +-
arch/s390/kvm/pci.c | 12 +-
arch/sparc/kernel/led.c | 2 +-
arch/x86/boot/compressed/acpi.c | 7 +-
arch/x86/boot/early_serial_console.c | 11 +-
arch/x86/events/amd/brs.c | 10 +-
arch/x86/events/amd/core.c | 6 +-
arch/x86/events/amd/lbr.c | 3 +-
arch/x86/events/intel/uncore_snb.c | 7 -
arch/x86/kvm/lapic.c | 8 +-
arch/x86/kvm/vmx/vmx.c | 38 +-
arch/x86/mm/numa_emulation.c | 17 +-
arch/x86/mm/tlb.c | 16 +-
arch/x86/platform/efi/quirks.c | 8 +
arch/x86/platform/olpc/olpc-xo15-sci.c | 1 +
block/bdev.c | 4 -
block/partitions/aix.c | 9 +
crypto/af_alg.c | 2 +-
crypto/algif_skcipher.c | 49 +-
crypto/asymmetric_keys/verify_pefile.c | 2 +
crypto/asymmetric_keys/x509_loader.c | 2 +-
crypto/drbg.c | 4 +-
crypto/ecc.c | 31 +-
crypto/ecrdsa.c | 2 +-
crypto/pcrypt.c | 4 +
crypto/rng.c | 11 +
drivers/acpi/acpi_ipmi.c | 4 +-
drivers/acpi/cppc_acpi.c | 11 +-
drivers/acpi/nfit/core.c | 15 +-
drivers/acpi/resource.c | 6 +-
drivers/android/binder.c | 19 +-
drivers/ata/pata_pxa.c | 1 +
drivers/ata/sata_gemini.c | 2 +-
drivers/base/dd.c | 7 +-
drivers/base/firmware_loader/main.c | 3 +-
drivers/base/firmware_loader/sysfs_upload.c | 8 +-
drivers/base/power/main.c | 6 +-
drivers/base/property.c | 4 +-
drivers/block/drbd/drbd_receiver.c | 5 +
drivers/bluetooth/bpa10x.c | 8 +-
drivers/bluetooth/btmtksdio.c | 2 +-
drivers/bluetooth/btrtl.c | 5 +-
drivers/bluetooth/btusb.c | 37 +-
drivers/bus/mhi/ep/main.c | 9 +-
drivers/bus/sunxi-rsb.c | 3 +
drivers/char/hw_random/virtio-rng.c | 23 +-
drivers/char/tlclk.c | 4 +
drivers/char/tpm/eventlog/tpm1.c | 4 +-
drivers/char/tpm/tpm-dev.c | 2 +-
drivers/char/tpm/tpm_tis_core.c | 35 +-
drivers/char/tpm/tpmrm-dev.c | 2 +-
drivers/clk/at91/pmc.c | 2 +-
drivers/clk/clk-scmi.c | 4 +-
drivers/clk/qcom/a53-pll.c | 2 +-
drivers/clocksource/timer-tegra186.c | 3 +-
drivers/cpufreq/cpufreq.c | 2 +
drivers/cpufreq/cpufreq_conservative.c | 12 +-
drivers/cpufreq/intel_pstate.c | 6 +-
drivers/cpufreq/pcc-cpufreq.c | 2 +
drivers/crypto/allwinner/Kconfig | 8 -
drivers/crypto/allwinner/sun4i-ss/Makefile | 1 -
drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 36 -
drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 69 --
drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h | 20 -
drivers/crypto/amcc/crypto4xx_alg.c | 106 --
drivers/crypto/amcc/crypto4xx_core.c | 130 +-
drivers/crypto/amcc/crypto4xx_core.h | 11 -
drivers/crypto/amcc/crypto4xx_reg_def.h | 11 -
drivers/crypto/amlogic/amlogic-gxl-core.c | 2 +-
drivers/crypto/atmel-ecc.c | 2 +-
drivers/crypto/atmel-sha204a.c | 31 +-
drivers/crypto/caam/caamalg.c | 12 +-
drivers/crypto/caam/caamalg_qi.c | 12 +-
drivers/crypto/caam/caamalg_qi2.c | 12 +-
drivers/crypto/caam/caamhash.c | 4 +-
drivers/crypto/caam/key_gen.c | 4 +-
drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 +-
drivers/crypto/ccp/sev-dev.c | 3 +-
drivers/crypto/hisilicon/Kconfig | 1 -
drivers/crypto/hisilicon/qm.c | 4 +-
drivers/crypto/hisilicon/trng/trng.c | 298 +----
drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 +-
drivers/crypto/qat/qat_common/adf_accel_devices.h | 2 +
drivers/crypto/qat/qat_common/adf_aer.c | 7 +-
drivers/crypto/qat/qat_common/adf_common_drv.h | 2 +
drivers/crypto/qat/qat_common/adf_isr.c | 39 +
drivers/crypto/qat/qat_common/adf_sriov.c | 20 +-
drivers/crypto/qat/qat_common/qat_asym_algs.c | 10 +-
drivers/crypto/talitos.c | 221 +++-
drivers/crypto/talitos.h | 2 +
drivers/dax/kmem.c | 6 +
drivers/dma-buf/udmabuf.c | 5 +-
drivers/dma/dmaengine.c | 3 +-
drivers/dma/dw-edma/dw-edma-core.h | 2 +-
drivers/dma/dw-edma/dw-edma-v0-core.c | 6 +
drivers/dma/imx-sdma.c | 4 +-
drivers/dma/qcom/gpi.c | 1 +
drivers/dma/tegra186-gpc-dma.c | 7 +
drivers/edac/i10nm_base.c | 14 +-
drivers/edac/skx_common.c | 3 +
drivers/firmware/arm_scmi/power.c | 6 +-
drivers/firmware/arm_scmi/sensors.c | 2 +-
drivers/firmware/efi/efi.c | 1 +
drivers/firmware/efi/vars.c | 12 +
drivers/fpga/microchip-spi.c | 3 +
drivers/gpio/gpio-eic-sprd.c | 8 +-
drivers/gpio/gpio-f7188x.c | 6 +-
drivers/gpio/gpio-htc-egpio.c | 6 +-
drivers/gpio/gpio-mvebu.c | 5 +-
drivers/gpio/gpio-palmas.c | 19 +
drivers/gpio/gpio-sch.c | 32 +-
drivers/gpio/gpio-timberdale.c | 2 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 16 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 25 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 2 -
drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 3 +
drivers/gpu/drm/amd/amdkfd/kfd_events.c | 5 +
drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 1 +
.../amd/display/modules/info_packet/info_packet.c | 2 +
drivers/gpu/drm/drm_edid.c | 8 +
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c | 78 +-
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 11 +
drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 22 -
drivers/gpu/drm/i915/gt/intel_region_lmem.c | 2 +-
drivers/gpu/drm/msm/dp/dp_display.c | 4 +-
drivers/gpu/drm/msm/dp/dp_reg.h | 4 +-
.../gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c | 3 +-
drivers/gpu/drm/radeon/radeon_ring.c | 4 +-
drivers/gpu/drm/tegra/dc.c | 4 +-
drivers/gpu/drm/tegra/gem.c | 22 +-
drivers/gpu/drm/tegra/submit.c | 3 +-
drivers/gpu/drm/tidss/tidss_kms.c | 2 -
drivers/gpu/host1x/bus.c | 62 +-
drivers/gpu/host1x/job.c | 10 +-
drivers/hid/hid-appleir.c | 45 +-
drivers/hid/hid-core.c | 7 +
drivers/hid/hid-letsketch.c | 36 +-
drivers/hid/hid-lg-g15.c | 16 +
drivers/hid/hid-logitech-hidpp.c | 1 -
drivers/hid/hid-multitouch.c | 32 +-
drivers/hid/hid-picolcd_core.c | 3 +-
drivers/hid/hid-sensor-hub.c | 77 +-
drivers/hid/wacom_sys.c | 12 +-
drivers/hwmon/Kconfig | 1 +
drivers/hwmon/asus_atk0110.c | 3 +
drivers/hwmon/occ/common.c | 34 +-
drivers/hwmon/occ/common.h | 1 +
drivers/hwmon/pmbus/adm1275.c | 2 +-
drivers/hwmon/w83627hf.c | 4 +
drivers/hwmon/w83793.c | 1 +
drivers/hwspinlock/qcom_hwspinlock.c | 5 +-
.../hwtracing/coresight/coresight-cti-platform.c | 1 +
drivers/hwtracing/coresight/coresight-etb10.c | 6 +-
drivers/hwtracing/coresight/coresight-etm4x-core.c | 4 +-
drivers/i2c/busses/i2c-mlxbf.c | 4 +-
drivers/i2c/busses/i2c-mt65xx.c | 2 +-
drivers/i2c/busses/i2c-stm32f7.c | 9 +-
drivers/i2c/i2c-core-base.c | 85 +-
drivers/i3c/master.c | 19 +-
drivers/iio/accel/bmc150-accel-core.c | 2 +
drivers/iio/accel/kxsd9.c | 5 +-
drivers/iio/accel/mma8452.c | 2 +
drivers/iio/adc/lpc32xx_adc.c | 4 +-
drivers/iio/adc/spear_adc.c | 3 +-
drivers/iio/adc/ti-ads124s08.c | 3 +-
drivers/iio/adc/xilinx-ams.c | 5 +
drivers/iio/chemical/scd30_core.c | 19 +-
drivers/iio/common/Kconfig | 1 +
drivers/iio/common/Makefile | 1 +
drivers/iio/common/inv_sensors/Kconfig | 7 +
drivers/iio/common/inv_sensors/Makefile | 6 +
.../inv_sensors/inv_sensors_timestamp.c} | 120 +-
drivers/iio/common/st_sensors/st_sensors_core.c | 23 +-
drivers/iio/gyro/bmg160_core.c | 16 +-
drivers/iio/imu/adis_trigger.c | 2 +-
drivers/iio/imu/bmi160/bmi160_core.c | 3 +-
drivers/iio/imu/inv_icm42600/Kconfig | 1 +
drivers/iio/imu/inv_icm42600/Makefile | 1 -
drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 35 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 61 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 3 +
drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 24 +-
drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 35 +-
.../iio/imu/inv_icm42600/inv_icm42600_timestamp.h | 85 --
drivers/iio/imu/inv_mpu6050/Kconfig | 1 +
drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 30 +-
drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h | 18 +-
drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c | 85 +-
drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c | 11 +-
drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 21 +-
drivers/iio/industrialio-event.c | 5 +-
drivers/iio/light/al3010.c | 2 +-
drivers/iio/light/gp2ap002.c | 2 +-
drivers/iio/light/opt3001.c | 6 +-
drivers/iio/light/si1133.c | 14 +-
drivers/iio/light/tsl2591.c | 6 +-
drivers/iio/light/veml6030.c | 8 +-
drivers/iio/magnetometer/ak8975.c | 15 +
drivers/iio/orientation/hid-sensor-rotation.c | 40 +-
drivers/iio/temperature/ltc2983.c | 5 +-
drivers/infiniband/core/cm.c | 13 +-
drivers/infiniband/core/counters.c | 2 +-
drivers/infiniband/hw/hns/hns_roce_hem.c | 8 +-
drivers/infiniband/hw/hns/hns_roce_main.c | 2 +-
drivers/infiniband/hw/irdma/verbs.c | 18 +-
drivers/infiniband/hw/irdma/verbs.h | 1 -
drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 +
drivers/infiniband/hw/mlx4/mr.c | 9 +-
drivers/infiniband/hw/mlx4/sysfs.c | 45 +-
drivers/infiniband/hw/mlx5/devx.c | 30 +-
drivers/infiniband/hw/mlx5/main.c | 2 +-
drivers/infiniband/hw/mlx5/mr.c | 17 +-
drivers/infiniband/hw/mlx5/qp.c | 12 +-
drivers/infiniband/sw/rxe/rxe_resp.c | 33 +-
drivers/infiniband/sw/siw/siw_qp_rx.c | 9 +
drivers/infiniband/ulp/rtrs/rtrs-srv.c | 5 +-
drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +-
drivers/input/joystick/iforce/iforce-packets.c | 18 +-
drivers/input/joystick/maplecontrol.c | 3 +-
drivers/input/keyboard/maple_keyb.c | 4 +-
drivers/input/misc/ims-pcu.c | 117 +-
drivers/input/mouse/elan_i2c_core.c | 36 +-
drivers/input/mouse/maplemouse.c | 9 +-
drivers/input/rmi4/rmi_bus.c | 4 +-
drivers/input/rmi4/rmi_f30.c | 2 +-
drivers/input/rmi4/rmi_f3a.c | 2 +-
drivers/input/touchscreen/goodix.c | 3 +-
drivers/input/touchscreen/mms114.c | 2 +-
drivers/input/touchscreen/touchwin.c | 15 +-
drivers/iommu/amd/amd_iommu_types.h | 11 +-
drivers/irqchip/irq-crossbar.c | 10 +-
drivers/irqchip/irq-gic-v3-its.c | 6 +-
drivers/irqchip/irq-ts4800.c | 10 +
drivers/leds/uleds.c | 3 +-
drivers/mailbox/mtk-adsp-mailbox.c | 9 +-
drivers/md/dm-bufio.c | 4 +-
drivers/md/dm-era-target.c | 10 +-
drivers/md/dm-ioctl.c | 7 +-
drivers/md/dm-log.c | 3 +
drivers/md/dm-stats.c | 10 +-
drivers/md/dm-thin-metadata.c | 67 +-
drivers/md/dm-verity-loadpin.c | 2 +-
drivers/md/dm-verity-target.c | 2 +-
drivers/md/raid1.c | 6 +
drivers/md/raid10.c | 1 +
drivers/media/platform/qcom/venus/helpers.c | 4 +-
.../media/platform/qcom/venus/hfi_platform_v4.c | 20 +-
.../media/platform/qcom/venus/hfi_platform_v6.c | 16 +-
drivers/media/platform/rockchip/rga/rga-hw.c | 2 +-
drivers/media/platform/rockchip/rga/rga-hw.h | 2 +-
drivers/media/usb/uvc/uvc_video.c | 30 +-
drivers/memstick/core/ms_block.c | 4 +
drivers/mfd/cros_ec_dev.c | 3 +-
drivers/mfd/sm501.c | 4 +-
drivers/mfd/tps6586x.c | 2 +-
drivers/mmc/host/vub300.c | 26 +-
drivers/mtd/devices/mchp23k256.c | 2 +-
drivers/mtd/devices/slram.c | 22 +-
drivers/mtd/maps/vmu-flash.c | 1 +
drivers/mtd/nand/onenand/onenand_samsung.c | 7 +-
drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 +-
drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 +-
drivers/mtd/nand/raw/lpc32xx_slc.c | 12 +-
drivers/mtd/nand/raw/nand_base.c | 2 +-
drivers/mtd/nand/raw/pl35x-nand-controller.c | 2 +-
drivers/mtd/spi-nor/Kconfig | 1 -
drivers/mtd/spi-nor/swp.c | 11 +-
drivers/net/amt.c | 6 +-
drivers/net/bonding/bond_3ad.c | 1 +
drivers/net/can/usb/esd_usb.c | 5 +-
drivers/net/dsa/sja1105/sja1105_ptp.c | 2 +-
drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 +-
drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +-
drivers/net/ethernet/broadcom/genet/bcmgenet.c | 23 +-
.../ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 +-
drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 -
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +-
drivers/net/ethernet/freescale/enetc/enetc.c | 7 +
drivers/net/ethernet/freescale/fman/fman.c | 4 +-
drivers/net/ethernet/freescale/gianfar.c | 16 +-
drivers/net/ethernet/intel/ice/ice_common.c | 1 -
drivers/net/ethernet/intel/ice/ice_ethtool.c | 12 +-
drivers/net/ethernet/intel/ice/ice_vf_lib.c | 2 +-
drivers/net/ethernet/marvell/mvneta.c | 3 +
drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 6 +-
.../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 3 +-
.../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 4 +-
.../ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 10 +-
.../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 44 +-
.../net/ethernet/marvell/prestera/prestera_main.c | 2 +-
.../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c | 29 +-
.../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 47 +-
.../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c | 8 +-
.../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h | 6 +-
.../net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 +-
drivers/net/ethernet/mellanox/mlx5/core/main.c | 12 +-
.../net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 +
drivers/net/ethernet/microchip/lan743x_main.c | 2 +-
.../ethernet/microchip/sparx5/sparx5_switchdev.c | 4 +-
drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 +
drivers/net/ethernet/microsoft/mana/mana_en.c | 3 +-
drivers/net/ethernet/qlogic/qede/qede_fp.c | 9 +-
drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c | 5 +
drivers/net/ethernet/qualcomm/rmnet/rmnet_config.h | 20 +
.../net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 23 +-
drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 7 +
.../net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 269 +++-
drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.c | 9 +-
drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.h | 1 +
drivers/net/ethernet/sun/sungem.c | 13 +-
drivers/net/ieee802154/ca8210.c | 9 +-
drivers/net/macsec.c | 9 +-
drivers/net/phy/sfp.c | 1 +
drivers/net/usb/gl620a.c | 6 +-
drivers/net/usb/kalmia.c | 8 +
drivers/net/usb/lan78xx.c | 318 ++---
drivers/net/usb/net1080.c | 2 +-
drivers/net/veth.c | 2 +
drivers/net/virtio_net.c | 55 +-
drivers/net/vxlan/vxlan_core.c | 8 +-
drivers/net/wan/ixp4xx_hss.c | 4 +-
drivers/net/wireless/ath/ath9k/xmit.c | 5 +
drivers/net/wireless/ath/wcn36xx/smd.c | 13 +
drivers/net/wireless/marvell/mwifiex/join.c | 1 -
drivers/net/wireless/mediatek/mt76/mac80211.c | 2 +-
drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 +-
drivers/net/wireless/realtek/rtw88/pci.c | 5 +
drivers/net/wwan/iosm/iosm_ipc_mux_codec.c | 40 +-
drivers/net/wwan/t7xx/t7xx_hif_cldma.c | 3 +
drivers/ntb/hw/epf/ntb_hw_epf.c | 89 +-
drivers/nvdimm/btt.c | 14 +-
drivers/nvdimm/nd.h | 11 +-
drivers/nvdimm/region_devs.c | 66 +-
drivers/nvme/host/core.c | 2 +-
drivers/nvme/host/multipath.c | 6 +
drivers/nvme/target/fabrics-cmd.c | 4 +-
drivers/nvme/target/rdma.c | 18 +-
drivers/nvme/target/tcp.c | 34 +-
drivers/pci/Makefile | 2 +-
drivers/pci/controller/dwc/pci-imx6.c | 5 +-
drivers/pci/controller/dwc/pcie-designware-host.c | 2 +-
.../pci/controller/mobiveil/pcie-mobiveil-host.c | 8 +-
drivers/pci/controller/pci-host-common.c | 4 +
drivers/pci/controller/pci-loongson.c | 31 +-
drivers/pci/controller/pcie-altera-msi.c | 2 +-
drivers/pci/controller/pcie-altera.c | 32 +-
drivers/pci/controller/pcie-iproc-bcma.c | 2 +-
drivers/pci/controller/pcie-iproc-platform.c | 2 +-
drivers/pci/controller/pcie-iproc.c | 1 -
drivers/pci/controller/pcie-iproc.h | 2 -
drivers/pci/controller/pcie-mediatek-gen3.c | 4 +-
drivers/pci/controller/pcie-mediatek.c | 132 +-
drivers/pci/controller/pcie-rcar-host.c | 1 -
drivers/pci/controller/pcie-xilinx-nwl.c | 2 +-
drivers/pci/endpoint/functions/pci-epf-ntb.c | 21 +-
drivers/pci/endpoint/functions/pci-epf-vntb.c | 9 +-
drivers/pci/msi/msi.c | 4 +-
drivers/pci/pci-sysfs.c | 14 +-
drivers/pci/pci.c | 139 ---
drivers/pci/pci.h | 7 +
drivers/pci/rebar.c | 218 ++++
drivers/pci/rom.c | 149 ++-
drivers/pci/setup-bus.c | 104 +-
drivers/pci/setup-res.c | 53 -
drivers/phy/phy-can-transceiver.c | 3 +
drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 +-
drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 +-
drivers/pinctrl/meson/pinctrl-meson.c | 2 +-
drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 +-
drivers/platform/x86/xo15-ebook.c | 7 +-
drivers/power/supply/charger-manager.c | 6 +-
drivers/power/supply/cpcap-battery.c | 11 +-
drivers/power/supply/power_supply_core.c | 11 +-
drivers/pwm/pwm-imx27.c | 8 +-
drivers/rapidio/devices/tsi721.c | 3 +-
drivers/regulator/core.c | 29 +-
drivers/regulator/ltc3676.c | 10 +-
drivers/regulator/scmi-regulator.c | 6 +-
drivers/reset/reset-imx7.c | 6 +
drivers/reset/reset-sunxi.c | 4 +-
drivers/rpmsg/rpmsg_char.c | 12 +-
drivers/rtc/rtc-abx80x.c | 3 +-
drivers/rtc/rtc-cmos.c | 6 +
drivers/rtc/rtc-ds1307.c | 30 +-
drivers/rtc/rtc-mpfs.c | 2 +-
drivers/rtc/rtc-msc313.c | 4 +-
drivers/s390/char/monwriter.c | 3 +
drivers/scsi/elx/efct/efct_hw.c | 2 +
drivers/scsi/elx/efct/efct_unsol.c | 1 +
drivers/scsi/hpsa.c | 4 +
drivers/scsi/lpfc/lpfc_init.c | 3 +-
drivers/scsi/pm8001/pm8001_ctl.c | 5 +-
drivers/scsi/scsi_scan.c | 2 +-
drivers/scsi/scsi_transport_sas.c | 101 +-
drivers/scsi/sg.c | 7 +-
drivers/scsi/smartpqi/smartpqi_init.c | 2 +-
drivers/slimbus/qcom-ctrl.c | 5 +-
drivers/slimbus/qcom-ngd-ctrl.c | 100 +-
drivers/soc/fsl/qe/qe.c | 3 +
drivers/soc/ti/k3-ringacc.c | 4 +-
drivers/spi/spi-dw.h | 1 +
drivers/spi/spi-ep93xx.c | 1 +
drivers/spi/spi-fsl-lpspi.c | 18 +-
drivers/spi/spi-rpc-if.c | 6 +-
drivers/spi/spi-sh-msiof.c | 10 +-
drivers/spi/spi-uniphier.c | 4 +-
drivers/spi/spi-xilinx.c | 11 +-
drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 +-
drivers/staging/media/atomisp/pci/sh_css.c | 6 +-
drivers/staging/media/ipu3/ipu3-css-params.c | 8 +-
drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +-
drivers/staging/most/video/video.c | 7 +-
drivers/staging/nvec/nvec.c | 4 +-
drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 93 +-
drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 20 +-
drivers/staging/rtl8723bs/core/rtw_security.c | 2 +-
drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 23 +-
drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 88 +-
drivers/staging/vme_user/vme_fake.c | 8 +
drivers/staging/vme_user/vme_tsi148.c | 8 +
drivers/staging/vme_user/vme_user.c | 22 +
drivers/target/iscsi/iscsi_target_auth.c | 6 +-
drivers/target/target_core_fabric_lib.c | 89 +-
drivers/target/target_core_internal.h | 3 +-
drivers/target/target_core_pr.c | 12 +-
drivers/thermal/intel/therm_throt.c | 7 +-
drivers/thermal/thermal_hwmon.c | 5 +-
drivers/tty/serial/8250/8250_mid.c | 31 +-
drivers/tty/serial/8250/8250_omap.c | 3 +-
drivers/tty/serial/msm_serial.c | 3 +-
drivers/usb/atm/ueagle-atm.c | 36 +-
drivers/usb/cdns3/cdnsp-mem.c | 2 +
drivers/usb/class/cdc-acm.c | 3 +
drivers/usb/common/ulpi.c | 23 +-
drivers/usb/core/quirks.c | 6 +
drivers/usb/dwc3/dwc3-meson-g12a.c | 14 +-
drivers/usb/dwc3/gadget.c | 43 +-
drivers/usb/gadget/composite.c | 5 +-
drivers/usb/gadget/function/f_fs.c | 5 +-
drivers/usb/gadget/function/rndis.c | 20 +-
drivers/usb/gadget/udc/core.c | 29 +-
drivers/usb/host/max3421-hcd.c | 8 +
drivers/usb/host/sl811-hcd.c | 1 +
drivers/usb/host/xhci.c | 11 +-
drivers/usb/misc/chaoskey.c | 1 -
drivers/usb/misc/idmouse.c | 45 +-
drivers/usb/misc/iowarrior.c | 21 +-
drivers/usb/misc/ldusb.c | 38 +-
drivers/usb/misc/legousbtower.c | 37 +-
drivers/usb/misc/uss720.c | 5 +-
drivers/usb/mtu3/mtu3_gadget.c | 1 +
drivers/usb/serial/digi_acceleport.c | 43 +-
drivers/usb/serial/keyspan_pda.c | 2 +-
drivers/usb/serial/option.c | 16 +
drivers/usb/storage/ene_ub6250.c | 3 +-
drivers/usb/storage/usb.c | 2 +-
drivers/usb/typec/anx7411.c | 4 +-
drivers/usb/typec/class.c | 1 +
drivers/usb/typec/tcpm/tcpm.c | 7 +-
drivers/usb/typec/ucsi/displayport.c | 7 +-
drivers/usb/typec/ucsi/ucsi.c | 20 +
drivers/usb/typec/ucsi/ucsi.h | 1 +
drivers/usb/typec/ucsi/ucsi_acpi.c | 10 +-
drivers/usb/typec/ucsi/ucsi_ccg.c | 2 +-
drivers/usb/usbip/vudc.h | 1 -
drivers/usb/usbip/vudc_dev.c | 4 +-
drivers/vdpa/vdpa_user/vduse_dev.c | 72 +-
drivers/vfio/pci/mlx5/cmd.h | 13 +-
drivers/vfio/pci/vfio_pci_core.c | 37 +-
drivers/vhost/net.c | 15 +-
drivers/vhost/vdpa.c | 29 +-
drivers/video/fbdev/aty/radeon_base.c | 1 +
drivers/video/fbdev/broadsheetfb.c | 8 +-
drivers/video/fbdev/carminefb.c | 1 +
drivers/video/fbdev/core/fbcon.c | 14 +-
drivers/video/fbdev/hecubafb.c | 6 +-
drivers/video/fbdev/i740fb.c | 1 +
drivers/video/fbdev/metronomefb.c | 8 +-
drivers/video/fbdev/nvidia/nvidia.c | 1 +
drivers/video/fbdev/s3fb.c | 1 +
drivers/video/fbdev/sm501fb.c | 16 +-
drivers/video/fbdev/sm712.h | 2 +-
drivers/video/fbdev/tdfxfb.c | 1 +
drivers/video/fbdev/tridentfb.c | 1 +
drivers/video/fbdev/uvesafb.c | 4 +-
drivers/virtio/virtio_mmio.c | 26 +-
drivers/virtio/virtio_ring.c | 196 +++
drivers/watchdog/apple_wdt.c | 1 +
drivers/watchdog/sp5100_tco.c | 3 +-
drivers/watchdog/sprd_wdt.c | 5 +-
drivers/watchdog/watchdog_core.c | 3 +
drivers/xen/gntdev.c | 8 +-
drivers/xen/xen-scsiback.c | 30 +-
fs/afs/cell.c | 2 +
fs/afs/cmservice.c | 2 -
fs/afs/fs_operation.c | 2 +-
fs/afs/rxrpc.c | 11 +-
fs/afs/super.c | 3 +-
fs/afs/vl_list.c | 10 +-
fs/afs/volume.c | 2 +-
fs/btrfs/ctree.h | 2 +
fs/btrfs/extent-tree.c | 17 +-
fs/btrfs/file.c | 12 +-
fs/btrfs/inode.c | 149 ++-
fs/btrfs/ordered-data.c | 12 +
fs/btrfs/ordered-data.h | 2 +
fs/btrfs/reflink.c | 5 +-
fs/btrfs/super.c | 3 +-
fs/configfs/dir.c | 57 +-
fs/efivarfs/super.c | 45 +-
fs/efs/file.c | 21 +-
fs/eventpoll.c | 152 +--
fs/exfat/dir.c | 13 +-
fs/ext4/ioctl.c | 12 +-
fs/f2fs/checkpoint.c | 14 +-
fs/f2fs/data.c | 45 +-
fs/f2fs/f2fs.h | 1 +
fs/f2fs/inode.c | 13 +-
fs/f2fs/segment.c | 8 +
fs/f2fs/xattr.c | 7 +-
fs/fs-writeback.c | 133 +-
fs/fuse/cuse.c | 4 +-
fs/fuse/dev.c | 2 +-
fs/hfs/bfind.c | 2 +-
fs/hfs/bnode.c | 56 +-
fs/hfs/brec.c | 2 +-
fs/hfs/btree.c | 2 +-
fs/hfs/btree.h | 71 +-
fs/hfs/hfs_fs.h | 88 +-
fs/hfs/inode.c | 3 +-
fs/hfsplus/bfind.c | 2 +-
fs/hfsplus/bnode.c | 62 +-
fs/hfsplus/brec.c | 2 +-
fs/hfsplus/btree.c | 2 +-
fs/hfsplus/hfsplus_fs.h | 40 +-
fs/isofs/rock.c | 11 +
fs/jbd2/journal.c | 2 +
fs/lockd/svcsubs.c | 4 +-
fs/nfs/callback_proc.c | 9 +-
fs/nfs/dir.c | 2 +
fs/nfs/filelayout/filelayout.c | 2 +
fs/nfs/flexfilelayout/flexfilelayout.c | 33 +
fs/nfs/flexfilelayout/flexfilelayout.h | 16 +
fs/nfs/pnfs.c | 4 +-
fs/nfsd/nfs4layouts.c | 4 +-
fs/nfsd/nfs4recover.c | 120 +-
fs/nfsd/nfs4state.c | 22 +-
fs/nfsd/vfs.c | 42 +-
fs/nilfs2/segment.c | 22 +
fs/ntfs3/fslog.c | 106 +-
fs/ntfs3/index.c | 31 +-
fs/ntfs3/lznt.c | 2 +-
fs/ntfs3/namei.c | 2 +-
fs/ntfs3/ntfs_fs.h | 3 +-
fs/ntfs3/run.c | 9 +-
fs/ocfs2/alloc.c | 2 +-
fs/ocfs2/aops.c | 13 +-
fs/ocfs2/buffer_head_io.c | 7 +-
fs/ocfs2/dlm/dlmdebug.c | 16 +-
fs/ocfs2/dlmglue.c | 17 +
fs/ocfs2/inode.c | 150 ++-
fs/ocfs2/journal.c | 13 +-
fs/ocfs2/journal.h | 3 +
fs/ocfs2/move_extents.c | 4 +-
fs/ocfs2/ocfs2.h | 2 -
fs/ocfs2/quota_local.c | 2 +-
fs/ocfs2/stack_user.c | 10 +-
fs/ocfs2/super.c | 2 -
fs/ocfs2/sysfile.c | 9 +-
fs/orangefs/dir.c | 7 +-
fs/proc/array.c | 15 +-
fs/proc/base.c | 184 ++-
fs/proc/fd.c | 71 +-
fs/proc/generic.c | 9 +-
fs/proc/internal.h | 6 +-
fs/proc/namespaces.c | 16 +-
fs/proc/proc_net.c | 1 +
fs/quota/dquot.c | 10 +-
fs/smb/client/cifs_swn.c | 329 ++++-
fs/smb/client/cifsacl.c | 2 +-
fs/smb/client/cifsfs.c | 2 +
fs/smb/client/cifsglob.h | 44 +-
fs/smb/client/cifsproto.h | 10 +-
fs/smb/client/connect.c | 38 +-
fs/smb/client/dfs_cache.c | 2 +-
fs/smb/client/fscache.c | 20 +
fs/smb/client/ioctl.c | 12 +-
fs/smb/client/misc.c | 23 +-
fs/smb/client/sess.c | 69 +-
fs/smb/client/smb2misc.c | 62 +-
fs/smb/client/smb2ops.c | 55 +-
fs/smb/client/smb2pdu.c | 92 +-
fs/smb/client/smb2transport.c | 2 +
fs/smb/client/trace.h | 95 +-
fs/smb/client/transport.c | 2 +-
fs/smb/common/cifsglob.h | 61 +
fs/smb/server/connection.c | 49 +-
fs/smb/server/connection.h | 3 +
fs/smb/server/oplock.c | 10 +-
fs/smb/server/smb2misc.c | 2 +-
fs/smb/server/smb2ops.c | 28 +-
fs/smb/server/smb2pdu.c | 152 ++-
fs/smb/server/smb_common.h | 43 +-
fs/smb/server/vfs.c | 22 +-
fs/smb/server/vfs_cache.c | 31 +-
fs/smb/server/vfs_cache.h | 3 +
fs/sysfs/file.c | 4 +
fs/udf/balloc.c | 5 +-
fs/udf/super.c | 11 +-
fs/userfaultfd.c | 14 +-
fs/xfs/xfs_dquot.c | 16 +-
fs/xfs/xfs_log_recover.c | 15 +-
fs/xfs/xfs_reflink.c | 36 +
include/crypto/drbg.h | 18 +-
include/dt-bindings/power/fsl,imx93-power.h | 1 +
include/linux/audit.h | 8 +
include/linux/backing-dev-defs.h | 4 +
include/linux/bitops.h | 2 +
include/linux/bpf.h | 3 +
include/linux/bpf_local_storage.h | 3 -
include/linux/damon.h | 8 +-
include/linux/device.h | 5 +-
include/linux/efi.h | 11 +
include/linux/f2fs_fs.h | 3 +
include/linux/file.h | 2 +
include/linux/fwnode.h | 2 +
include/linux/glob.h | 1 +
include/linux/hid-sensor-hub.h | 25 +
include/linux/hid.h | 29 +
include/linux/host1x.h | 7 +
include/linux/iio/common/inv_sensors_timestamp.h | 94 ++
include/linux/jiffies.h | 13 +
include/linux/pci.h | 4 +-
include/linux/seqlock.h | 110 ++
include/linux/sunrpc/xprt.h | 2 +
include/linux/vfio_pci_core.h | 24 +-
include/linux/virtio.h | 18 +
include/linux/vmalloc.h | 4 +-
include/linux/writeback.h | 2 +
include/net/addrconf.h | 10 +-
include/net/bluetooth/hci.h | 19 +-
include/net/bluetooth/hci_core.h | 9 +-
include/net/bluetooth/l2cap.h | 54 +-
include/net/fib_rules.h | 5 +
include/net/gue.h | 2 +-
include/net/ip_fib.h | 7 +-
include/net/ip_vs.h | 3 +-
include/net/netfilter/nf_queue.h | 1 +
include/net/rtnetlink.h | 2 +
include/net/sctp/sctp.h | 3 +-
include/net/sock.h | 2 +-
include/net/xfrm.h | 22 +-
include/sound/asequencer.h | 4 +
include/sound/seq_kernel.h | 8 +
include/uapi/linux/bpf.h | 1 +
include/uapi/linux/xfrm.h | 6 +
include/uapi/sound/asequencer.h | 54 +-
io_uring/io-wq.c | 2 +-
kernel/audit.c | 85 +-
kernel/bpf/bpf_lsm.c | 34 +-
kernel/bpf/cgroup.c | 2 +-
kernel/bpf/core.c | 2 +-
kernel/bpf/devmap.c | 19 +
kernel/bpf/hashtab.c | 21 +-
kernel/bpf/helpers.c | 12 +-
kernel/bpf/inode.c | 13 +-
kernel/bpf/lpm_trie.c | 10 +-
kernel/bpf/syscall.c | 5 +-
kernel/bpf/verifier.c | 3 +-
kernel/cgroup/cpuset.c | 7 +-
kernel/cpu.c | 20 +-
kernel/events/core.c | 14 +-
kernel/module/decompress.c | 2 +
kernel/sched/core.c | 1 +
kernel/sched/fair.c | 2 +-
kernel/sched/features.h | 8 +
kernel/time/posix-cpu-timers.c | 3 +-
kernel/time/time.c | 2 +-
kernel/trace/bpf_trace.c | 11 +-
kernel/trace/ring_buffer.c | 3 +-
kernel/trace/trace_eprobe.c | 2 +-
kernel/trace/trace_events_filter.c | 6 +-
kernel/trace/trace_probe.c | 3 +-
kernel/trace/trace_probe.h | 2 +-
kernel/workqueue.c | 2 +-
lib/debugobjects.c | 17 +
lib/glob.c | 31 +-
lib/test_meminit.c | 2 +-
mm/backing-dev.c | 5 +
mm/damon/core.c | 2 +-
mm/damon/ops-common.c | 1 +
mm/damon/reclaim.c | 2 +-
mm/damon/sysfs.c | 9 +-
mm/shrinker_debug.c | 30 +-
mm/vmscan.c | 6 +-
net/6lowpan/nhc.c | 2 +-
net/9p/client.c | 2 +
net/9p/trans_rdma.c | 19 +-
net/atm/common.c | 2 +
net/batman-adv/distributed-arp-table.c | 30 +-
net/batman-adv/fragmentation.c | 8 +-
net/batman-adv/gateway_client.c | 3 +-
net/batman-adv/main.c | 13 +-
net/batman-adv/routing.c | 3 +-
net/batman-adv/soft-interface.c | 17 +-
net/batman-adv/soft-interface.h | 2 +
net/batman-adv/translation-table.c | 5 +-
net/bluetooth/6lowpan.c | 35 +-
net/bluetooth/Kconfig | 8 -
net/bluetooth/Makefile | 1 -
net/bluetooth/a2mp.c | 1054 ----------------
net/bluetooth/a2mp.h | 154 ---
net/bluetooth/af_bluetooth.c | 17 +-
net/bluetooth/amp.c | 591 ---------
net/bluetooth/amp.h | 61 -
net/bluetooth/bnep/core.c | 27 +-
net/bluetooth/eir.c | 8 +-
net/bluetooth/hci_codec.c | 2 +-
net/bluetooth/hci_conn.c | 60 +-
net/bluetooth/hci_core.c | 65 +-
net/bluetooth/hci_event.c | 66 +-
net/bluetooth/hci_sync.c | 24 +
net/bluetooth/iso.c | 16 +-
net/bluetooth/l2cap_core.c | 1306 +++-----------------
net/bluetooth/l2cap_sock.c | 125 +-
net/bluetooth/mgmt.c | 75 +-
net/bluetooth/msft.c | 2 +-
net/bluetooth/sco.c | 62 +-
net/bluetooth/smp.c | 27 +-
net/bridge/br_cfm.c | 6 +
net/bridge/br_cfm_netlink.c | 4 +-
net/bridge/br_if.c | 3 +
net/bridge/br_stp.c | 3 +-
net/bridge/netfilter/ebtables.c | 22 +-
net/bridge/netfilter/nft_meta_bridge.c | 4 +-
net/can/bcm.c | 127 +-
net/can/isotp.c | 9 +-
net/core/fib_rules.c | 6 +-
net/core/filter.c | 28 +-
net/core/flow_dissector.c | 12 +-
net/core/lwt_bpf.c | 12 +
net/core/rtnetlink.c | 8 +
net/core/skbuff.c | 23 +-
net/dsa/tag_ksz.c | 18 +-
net/ieee802154/core.c | 2 +-
net/ieee802154/header_ops.c | 9 +-
net/ieee802154/ieee802154.h | 17 +
net/ieee802154/netlink.c | 36 +-
net/ife/ife.c | 2 +-
net/ipv4/esp4_offload.c | 2 +-
net/ipv4/igmp.c | 1 +
net/ipv4/ip_gre.c | 6 +
net/ipv4/ip_output.c | 4 +-
net/ipv4/ip_vti.c | 3 +
net/ipv4/ipip.c | 3 +
net/ipv4/netfilter/nf_reject_ipv4.c | 2 +-
net/ipv4/sysctl_net_ipv4.c | 10 +-
net/ipv4/tcp_output.c | 4 +-
net/ipv6/addrconf.c | 23 +-
net/ipv6/esp6_offload.c | 2 +-
net/ipv6/ip6_gre.c | 6 +
net/ipv6/ip6_vti.c | 3 +
net/ipv6/mcast.c | 165 ++-
net/ipv6/netfilter.c | 4 +-
net/ipv6/netfilter/ip6t_ah.c | 5 +
net/ipv6/netfilter/ip6t_hbh.c | 1 +
net/ipv6/netfilter/ip6t_rt.c | 3 +-
net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +-
net/ipv6/route.c | 9 +-
net/ipv6/seg6.c | 3 +
net/ipv6/sit.c | 3 +
net/kcm/kcmsock.c | 8 +-
net/key/af_key.c | 1 +
net/llc/af_llc.c | 1 +
net/llc/llc_conn.c | 1 -
net/mac80211/main.c | 3 +-
net/mac80211/tx.c | 17 +-
net/mac802154/iface.c | 2 +-
net/netfilter/ipset/ip_set_core.c | 12 +-
net/netfilter/ipset/ip_set_hash_gen.h | 67 +-
net/netfilter/ipvs/ip_vs_app.c | 10 +-
net/netfilter/ipvs/ip_vs_conn.c | 4 +-
net/netfilter/ipvs/ip_vs_core.c | 36 +-
net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +-
net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +-
net/netfilter/ipvs/ip_vs_proto_udp.c | 3 +-
net/netfilter/nf_conncount.c | 23 +-
net/netfilter/nf_conntrack_core.c | 18 +-
net/netfilter/nf_conntrack_ecache.c | 2 +-
net/netfilter/nf_conntrack_irc.c | 6 +-
net/netfilter/nf_conntrack_netlink.c | 2 +-
net/netfilter/nf_conntrack_seqadj.c | 2 +
net/netfilter/nf_nat_core.c | 10 +
net/netfilter/nf_nat_sip.c | 11 +
net/netfilter/nf_queue.c | 14 +
net/netfilter/nfnetlink_cthelper.c | 4 +-
net/netfilter/nfnetlink_osf.c | 6 +-
net/netfilter/nfnetlink_queue.c | 3 +
net/netfilter/nft_log.c | 58 +-
net/netfilter/nft_synproxy.c | 9 +-
net/netfilter/xt_AUDIT.c | 58 +-
net/netfilter/xt_cluster.c | 2 +-
net/netfilter/xt_connmark.c | 14 +-
net/netfilter/xt_nat.c | 9 +
net/netfilter/xt_rateest.c | 2 +-
net/netfilter/xt_u32.c | 12 +-
net/openvswitch/conntrack.c | 2 +-
net/openvswitch/flow_netlink.c | 201 ++-
net/psample/psample.c | 6 +-
net/qrtr/af_qrtr.c | 2 +-
net/sched/act_bpf.c | 2 +-
net/sched/act_pedit.c | 11 +-
net/sched/cls_api.c | 3 +
net/sched/cls_bpf.c | 10 +-
net/sched/cls_flow.c | 12 +-
net/sched/sch_cake.c | 5 +-
net/sched/sch_codel.c | 48 +-
net/sched/sch_drr.c | 8 +-
net/sched/sch_fq_codel.c | 41 +-
net/sched/sch_hfsc.c | 24 +-
net/sched/sch_hhf.c | 27 +
net/sched/sch_htb.c | 14 +-
net/sched/sch_multiq.c | 2 +-
net/sched/sch_teql.c | 126 +-
net/sctp/diag.c | 67 +-
net/sctp/sm_make_chunk.c | 10 +-
net/sctp/sm_statefuns.c | 23 +-
net/sctp/socket.c | 29 +-
net/smc/smc_cdc.c | 15 +-
net/socket.c | 2 +-
net/sunrpc/xprt.c | 16 +
net/sunrpc/xprtrdma/backchannel.c | 5 +-
net/sunrpc/xprtrdma/frwr_ops.c | 2 +-
net/sunrpc/xprtrdma/rpc_rdma.c | 172 ++-
net/sunrpc/xprtrdma/transport.c | 85 +-
net/sunrpc/xprtrdma/verbs.c | 167 ++-
net/sunrpc/xprtrdma/xprt_rdma.h | 7 +-
net/tipc/bcast.c | 22 +-
net/tipc/bcast.h | 2 +-
net/tipc/bearer.c | 1 +
net/tipc/name_distr.c | 13 +-
net/tipc/netlink.c | 12 +
net/tipc/node.c | 15 +-
net/tipc/socket.c | 3 +
net/wireless/nl80211.c | 2 +-
net/xfrm/xfrm_device.c | 3 +
net/xfrm/xfrm_input.c | 6 +-
net/xfrm/xfrm_interface_core.c | 3 +
net/xfrm/xfrm_policy.c | 32 +-
net/xfrm/xfrm_state.c | 2 +-
net/xfrm/xfrm_user.c | 22 +-
samples/trace_events/trace-events-sample.c | 4 +
scripts/kconfig/conf.c | 6 +-
security/apparmor/apparmorfs.c | 2 +
security/apparmor/domain.c | 58 +-
security/apparmor/label.c | 2 +-
security/apparmor/net.c | 2 +
security/apparmor/policy.c | 5 +-
security/apparmor/procattr.c | 2 +
security/integrity/evm/evm_secfs.c | 16 +-
security/keys/keyring.c | 2 +-
security/selinux/hooks.c | 19 +-
sound/aoa/fabrics/layout.c | 6 +
sound/core/init.c | 11 +-
sound/core/seq/Kconfig | 7 +
sound/core/seq/seq_clientmgr.c | 174 ++-
sound/core/seq/seq_clientmgr.h | 2 +
sound/core/seq/seq_compat.c | 1 +
sound/core/seq/seq_memory.c | 10 +-
sound/core/seq/seq_memory.h | 19 +-
sound/core/seq/seq_midi.c | 55 +-
sound/firewire/isight.c | 3 +-
sound/isa/gus/gus_pcm.c | 2 +
sound/pci/cmipci.c | 6 +
sound/pci/es1938.c | 2 +
sound/pci/ice1712/aureon.c | 2 +
sound/pci/ice1712/ice1712.c | 8 +
sound/pci/ice1712/ice1724.c | 6 +
sound/pci/ymfpci/ymfpci_main.c | 6 +
sound/soc/codecs/adau1372.c | 5 +
sound/soc/codecs/hdac_hdmi.c | 4 +-
sound/soc/codecs/tlv320aic3x.c | 25 +-
sound/soc/fsl/fsl_asrc_dma.c | 20 +
sound/soc/fsl/fsl_audmix.c | 6 +
sound/soc/qcom/qdsp6/q6apm.c | 8 +
sound/soc/sof/ipc3-control.c | 52 +-
sound/soc/tegra/tegra210_ahub.c | 4 +-
sound/usb/caiaq/input.c | 2 +-
sound/usb/mixer_quirks.c | 101 +-
sound/usb/mixer_scarlett.c | 4 +-
sound/usb/mixer_us16x08.c | 127 +-
sound/virtio/virtio_pcm.c | 3 +-
sound/virtio/virtio_pcm_ops.c | 3 +-
tools/bpf/bpftool/net.c | 4 +-
tools/include/linux/bitops.h | 2 +
tools/include/uapi/linux/bpf.h | 1 +
tools/lib/api/fs/fs.c | 19 +-
tools/lib/bpf/libbpf.c | 9 +-
tools/lib/bpf/strset.c | 62 +-
tools/lib/bpf/usdt.c | 16 +-
tools/lib/symbol/kallsyms.c | 5 +-
tools/perf/builtin-c2c.c | 1 +
tools/perf/builtin-sched.c | 63 +-
tools/perf/trace/beauty/fcntl.c | 16 +
tools/perf/util/bpf-event.c | 18 +-
tools/perf/util/bpf-utils.c | 16 +
tools/perf/util/cpumap.c | 10 +
tools/perf/util/event.c | 15 +-
tools/perf/util/header.c | 54 +
tools/perf/util/hist.c | 7 +-
.../util/intel-pt-decoder/intel-pt-insn-decoder.c | 11 +-
tools/perf/util/machine.c | 10 +-
tools/perf/util/mmap.c | 18 +-
tools/perf/util/pmu.c | 10 +-
tools/perf/util/probe-finder.c | 4 +-
tools/perf/util/symbol-elf.c | 48 +-
tools/perf/util/symbol-minimal.c | 11 +-
tools/perf/util/symbol.c | 2 +-
tools/perf/util/thread.c | 5 +
tools/power/x86/intel-speed-select/isst-daemon.c | 9 +-
tools/testing/cxl/test/cxl.c | 8 +-
tools/testing/cxl/test/mem.c | 4 +-
.../selftests/bpf/progs/bpf_iter_task_vma.c | 2 +-
tools/testing/selftests/vm/compaction_test.c | 3 +
tools/testing/selftests/vm/hmm-tests.c | 63 +-
tools/usb/usbip/libsrc/usbip_common.c | 2 +
tools/usb/usbip/libsrc/usbip_device_driver.c | 4 +
tools/usb/usbip/libsrc/vhci_driver.c | 1 +
tools/virtio/linux/dma-mapping.h | 12 +
tools/virtio/vringh_test.c | 5 +
tools/vm/slabinfo.c | 4 +-
virt/kvm/eventfd.c | 12 +-
virt/kvm/kvm_main.c | 16 +-
979 files changed, 11753 insertions(+), 8931 deletions(-)
^ permalink raw reply [flat|nested] 7+ messages in thread
* [PATCH 6.1 0610/1067] rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231
2026-07-21 15:10 [PATCH 6.1 0000/1067] 6.1.178-rc1 review Greg Kroah-Hartman
@ 2026-07-21 15:20 ` Greg Kroah-Hartman
2026-07-21 15:21 ` [PATCH 6.1 0680/1067] arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Greg Kroah-Hartman
` (4 subsequent siblings)
5 siblings, 0 replies; 7+ messages in thread
From: Greg Kroah-Hartman @ 2026-07-21 15:20 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, Ronan Dalton, linux-rtc,
linux-kernel, Alexandre Belloni, Tyler Hicks, Sasha Levin,
Meagan Lloyd, Rodolfo Giometti, Chris Packham
6.1-stable review patch. If anyone has any objections, please let me know.
------------------
From: Ronan Dalton <ronan.dalton@alliedtelesis.co.nz>
[ Upstream commit a091e1ba3b68cabc9caedafc6f81d9fe9b3b2200 ]
Prior to commit 48458654659c ("rtc: ds1307: remove clear of oscillator
stop flag (OSF) in probe"), the oscillator stop flag (OSF) bit was
checked during device probe for the ds1337, ds1339, ds1341, and ds3231
chips; if it was set, it would be cleared and a warning would be logged
saying "SET TIME!". Since that commit, the OSF bit is no longer cleared,
but the warning is still printed.
Directly following that commit, there was no way to get rid of this
warning because nothing cleared the OSF bit on these chips.
The commit associated with the previous commit, 523923cfd5d6 ("rtc:
ds1307: handle oscillator stop flag (OSF) for ds1341"), made proper use
of the OSF when getting and setting the time in the RTC. However, the
other RTC variants ds1337, ds1339 and ds3231 didn't have a corresponding
change made.
Given that the OSF bit is no longer cleared at probe time when it is
set, the remaining three chips should have the same handling as the
ds1341 chip has for the OSF bit.
Fix the issue on the ds1337, ds1339 and ds3231 chips by applying the
same logic as the ds1341 has to these chips.
Note that any devices brought up between the first referenced commit and
this one may begin mistrusting the time reported by the RTC until it is
set again, if the bit was never explicitly cleared.
Note that only the ds1339 was tested with this change, but the
datasheets for the other chips contain essentially identical
descriptions of the OSF bit so the same change should work.
Signed-off-by: Ronan Dalton <ronan.dalton@alliedtelesis.co.nz>
Cc: linux-rtc@vger.kernel.org
Cc: linux-kernel@vger.kernel.org
Cc: Alexandre Belloni <alexandre.belloni@bootlin.com>
Cc: Tyler Hicks <code@tyhicks.com>
Cc: Sasha Levin <sashal@kernel.org>
Cc: Meagan Lloyd <meaganlloyd@linux.microsoft.com>
Cc: Rodolfo Giometti <giometti@enneenne.com>
Cc: Chris Packham <chris.packham@alliedtelesis.co.nz>
Fixes: 48458654659c ("rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe")
Reviewed-by: Meagan Lloyd <meaganlloyd@linux.microsoft.com>
Reviewed-by: Tyler Hicks <code@tyhicks.com>
Link: https://patch.msgid.link/20260508032518.3696705-2-ronan.dalton@alliedtelesis.co.nz
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
drivers/rtc/rtc-ds1307.c | 28 +++++++++++++++++-----------
1 file changed, 17 insertions(+), 11 deletions(-)
diff --git a/drivers/rtc/rtc-ds1307.c b/drivers/rtc/rtc-ds1307.c
index 6d82fb45e9a83b..e5140e7477a419 100644
--- a/drivers/rtc/rtc-ds1307.c
+++ b/drivers/rtc/rtc-ds1307.c
@@ -263,6 +263,16 @@ static int ds1307_get_time(struct device *dev, struct rtc_time *t)
if (tmp & DS1338_BIT_OSF)
return -EINVAL;
break;
+ case ds_1337:
+ case ds_1339:
+ case ds_1341:
+ case ds_3231:
+ ret = regmap_read(ds1307->regmap, DS1337_REG_STATUS, &tmp);
+ if (ret)
+ return ret;
+ if (tmp & DS1337_BIT_OSF)
+ return -EINVAL;
+ break;
case ds_1340:
if (tmp & DS1340_BIT_nEOSC)
return -EINVAL;
@@ -273,13 +283,6 @@ static int ds1307_get_time(struct device *dev, struct rtc_time *t)
if (tmp & DS1340_BIT_OSF)
return -EINVAL;
break;
- case ds_1341:
- ret = regmap_read(ds1307->regmap, DS1337_REG_STATUS, &tmp);
- if (ret)
- return ret;
- if (tmp & DS1337_BIT_OSF)
- return -EINVAL;
- break;
case ds_1388:
ret = regmap_read(ds1307->regmap, DS1388_REG_FLAG, &tmp);
if (ret)
@@ -374,14 +377,17 @@ static int ds1307_set_time(struct device *dev, struct rtc_time *t)
regmap_update_bits(ds1307->regmap, DS1307_REG_CONTROL,
DS1338_BIT_OSF, 0);
break;
- case ds_1340:
- regmap_update_bits(ds1307->regmap, DS1340_REG_FLAG,
- DS1340_BIT_OSF, 0);
- break;
+ case ds_1337:
+ case ds_1339:
case ds_1341:
+ case ds_3231:
regmap_update_bits(ds1307->regmap, DS1337_REG_STATUS,
DS1337_BIT_OSF, 0);
break;
+ case ds_1340:
+ regmap_update_bits(ds1307->regmap, DS1340_REG_FLAG,
+ DS1340_BIT_OSF, 0);
+ break;
case ds_1388:
regmap_update_bits(ds1307->regmap, DS1388_REG_FLAG,
DS1388_BIT_OSF, 0);
--
2.53.0
^ permalink raw reply related [flat|nested] 7+ messages in thread
* [PATCH 6.1 0680/1067] arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range()
2026-07-21 15:10 [PATCH 6.1 0000/1067] 6.1.178-rc1 review Greg Kroah-Hartman
2026-07-21 15:20 ` [PATCH 6.1 0610/1067] rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Greg Kroah-Hartman
@ 2026-07-21 15:21 ` Greg Kroah-Hartman
2026-07-21 17:03 ` [PATCH 6.1 0000/1067] 6.1.178-rc1 review Florian Fainelli
` (3 subsequent siblings)
5 siblings, 0 replies; 7+ messages in thread
From: Greg Kroah-Hartman @ 2026-07-21 15:21 UTC (permalink / raw)
To: stable
Cc: Greg Kroah-Hartman, patches, Catalin Marinas, Will Deacon,
Ryan Roberts, David Hildenbrand, linux-arm-kernel, linux-kernel,
Ben Hutchings, Anshuman Khandual, Sasha Levin
6.1-stable review patch. If anyone has any objections, please let me know.
------------------
From: Anshuman Khandual <anshuman.khandual@arm.com>
[ Upstream commit ff4c5a0de1f2ef7737a8688a86e19301e567020d ]
Commit 48478b9f7913 ("arm64/mm: Enable batched TLB flush in
unmap_hotplug_range") inadvertently introduced redundant TLB
invalidation when clearing a block entry, resulting in unnecessary
broadcast invalidation on CPUs without support for range-based
invalidation.
Re-introduce the old behaviour, along with some expanded comments to
help people working in this area next time around.
Cc: Catalin Marinas <catalin.marinas@arm.com>
Cc: Will Deacon <will@kernel.org>
Cc: Ryan Roberts <ryan.roberts@arm.com>
Cc: David Hildenbrand <david@kernel.org>
Cc: linux-arm-kernel@lists.infradead.org
Cc: linux-kernel@vger.kernel.org
Reported-by: Ben Hutchings <ben@decadent.org.uk>
Closes: https://lore.kernel.org/all/b0d5836032ce3135bfc473f6bff791306d086925.camel@decadent.org.uk/
Fixes: 48478b9f7913 ("arm64/mm: Enable batched TLB flush in unmap_hotplug_range()")
Signed-off-by: Anshuman Khandual <anshuman.khandual@arm.com>
Reviewed-by: David Hildenbrand (Arm) <david@kernel.org>
Reviewed-by: Catalin Marinas <catalin.marinas@arm.com>
[will: Reword comments and commit message]
Signed-off-by: Will Deacon <will@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
arch/arm64/mm/mmu.c | 11 +++++++++--
1 file changed, 9 insertions(+), 2 deletions(-)
diff --git a/arch/arm64/mm/mmu.c b/arch/arm64/mm/mmu.c
index 3d7f9732201667..72fb70f2bfb203 100644
--- a/arch/arm64/mm/mmu.c
+++ b/arch/arm64/mm/mmu.c
@@ -956,7 +956,13 @@ static void unmap_hotplug_pmd_range(pud_t *pudp, unsigned long addr,
if (free_mapped) {
/* CONT blocks are not supported in the vmemmap */
WARN_ON(pmd_cont(pmd));
- flush_tlb_kernel_range(addr, addr + PMD_SIZE);
+ /*
+ * Invalidating a block entry requires just
+ * a single overlapping TLB invalidation,
+ * so limit the range of the flush to a single
+ * page.
+ */
+ flush_tlb_kernel_range(addr, addr + PAGE_SIZE);
free_hotplug_page_range(pmd_page(pmd),
PMD_SIZE, altmap);
}
@@ -986,7 +992,8 @@ static void unmap_hotplug_pud_range(p4d_t *p4dp, unsigned long addr,
if (pud_sect(pud)) {
pud_clear(pudp);
if (free_mapped) {
- flush_tlb_kernel_range(addr, addr + PUD_SIZE);
+ /* See comment in unmap_hotplug_pmd_range(). */
+ flush_tlb_kernel_range(addr, addr + PAGE_SIZE);
free_hotplug_page_range(pud_page(pud),
PUD_SIZE, altmap);
}
--
2.53.0
^ permalink raw reply related [flat|nested] 7+ messages in thread
* Re: [PATCH 6.1 0000/1067] 6.1.178-rc1 review
2026-07-21 15:10 [PATCH 6.1 0000/1067] 6.1.178-rc1 review Greg Kroah-Hartman
2026-07-21 15:20 ` [PATCH 6.1 0610/1067] rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Greg Kroah-Hartman
2026-07-21 15:21 ` [PATCH 6.1 0680/1067] arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Greg Kroah-Hartman
@ 2026-07-21 17:03 ` Florian Fainelli
2026-07-21 22:20 ` Brett A C Sheffield
` (2 subsequent siblings)
5 siblings, 0 replies; 7+ messages in thread
From: Florian Fainelli @ 2026-07-21 17:03 UTC (permalink / raw)
To: Greg Kroah-Hartman, stable
Cc: patches, linux-kernel, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, sudipm.mukherjee, rwarsow, conor,
hargar, broonie, achill, sr
On 7/21/26 08:10, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.1.178 release.
> There are 1067 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Thu, 23 Jul 2026 15:23:00 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.178-rc1.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
perf also fails to build with:
In file included from builtin-sched.c:28:
builtin-sched.c: In function 'latency_switch_event':
builtin-sched.c:1182:34: error: 'struct perf_sample' has no member named
'file_offset'
1182 | sample->file_offset, cpu);
| ^~
util/debug.h:24:44: note: in definition of macro 'pr_warning'
24 | eprintf(0, verbose, pr_fmt(fmt), ##__VA_ARGS__)
| ^~~~~~~~~~~
builtin-sched.c: In function 'latency_runtime_event':
builtin-sched.c:1260:34: error: 'struct perf_sample' has no member named
'file_offset'
1260 | sample->file_offset, cpu);
| ^~
util/debug.h:24:44: note: in definition of macro 'pr_warning'
24 | eprintf(0, verbose, pr_fmt(fmt), ##__VA_ARGS__)
| ^~~~~~~~~~~
builtin-sched.c: In function 'map_switch_event':
builtin-sched.c:1622:34: error: 'struct perf_sample' has no member named
'file_offset'
1622 | sample->file_offset, this_cpu.cpu);
| ^~
util/debug.h:24:44: note: in definition of macro 'pr_warning'
24 | eprintf(0, verbose, pr_fmt(fmt), ##__VA_ARGS__)
| ^~~~~~~~~~~
make[5]: ***
[/local/users/fainelli/buildroot/output/arm/build/linux-custom/tools/build/Makefile.build:96:
/local/users/fainelli/buildroot/output/arm/build/linux-custom/tools/perf/builtin-sched.o]
Error 1
It looks like we need to backport 7a490187f22b ("perf sample: Add
file_offset field to struct perf_sample") and pay attention to struct
perf_sample being defined in tools/perf/util/event.h in this older
kernel version, whereas the upstream commit modifies
tools/perf/util/sample.h (which was introduced later).
--
Florian
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [PATCH 6.1 0000/1067] 6.1.178-rc1 review
2026-07-21 15:10 [PATCH 6.1 0000/1067] 6.1.178-rc1 review Greg Kroah-Hartman
` (2 preceding siblings ...)
2026-07-21 17:03 ` [PATCH 6.1 0000/1067] 6.1.178-rc1 review Florian Fainelli
@ 2026-07-21 22:20 ` Brett A C Sheffield
2026-07-22 1:51 ` Peter Schneider
2026-07-22 6:19 ` Francesco Dolcini
5 siblings, 0 replies; 7+ messages in thread
From: Brett A C Sheffield @ 2026-07-21 22:20 UTC (permalink / raw)
To: gregkh
Cc: stable, patches, linux-kernel, torvalds, akpm, linux, shuah,
patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr,
Brett A C Sheffield
# Librecast Test Results
020/020 [ OK ] liblcrq
010/010 [ OK ] libmld
120/120 [ OK ] liblibrecast
CPU/kernel: Linux auntie 6.1.178-rc1-01068-g94b750943692 #1 SMP PREEMPT_DYNAMIC Tue Jul 21 20:33:52 -00 2026 x86_64 AMD Ryzen 9 9950X 16-Core Processor AuthenticAMD GNU/Linux
Tested-by: Brett A C Sheffield <bacs@librecast.net>
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [PATCH 6.1 0000/1067] 6.1.178-rc1 review
2026-07-21 15:10 [PATCH 6.1 0000/1067] 6.1.178-rc1 review Greg Kroah-Hartman
` (3 preceding siblings ...)
2026-07-21 22:20 ` Brett A C Sheffield
@ 2026-07-22 1:51 ` Peter Schneider
2026-07-22 6:19 ` Francesco Dolcini
5 siblings, 0 replies; 7+ messages in thread
From: Peter Schneider @ 2026-07-22 1:51 UTC (permalink / raw)
To: Greg Kroah-Hartman, stable
Cc: patches, linux-kernel, torvalds, akpm, linux, shuah, patches,
lkft-triage, pavel, jonathanh, f.fainelli, sudipm.mukherjee,
rwarsow, conor, hargar, broonie, achill, sr
Am 21.07.2026 um 17:10 schrieb Greg Kroah-Hartman:
> This is the start of the stable review cycle for the 6.1.178 release.
> There are 1067 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
Builds, boots and works on my 2-socket Ivy Bridge Xeon E5-2697 v2 server. No dmesg oddities or regressions found.
Tested-by: Peter Schneider <pschneider1968@googlemail.com>
Beste Grüße,
Peter Schneider
--
Climb the mountain not to plant your flag, but to embrace the challenge,
enjoy the air and behold the view. Climb it so you can see the world,
not so the world can see you. -- David McCullough Jr.
OpenPGP: 0xA3828BD796CCE11A8CADE8866E3A92C92C3FF244
Download: https://www.peters-netzplatz.de/download/pschneider1968_pub.asc
https://keys.mailvelope.com/pks/lookup?op=get&search=pschneider1968@googlemail.com
https://keys.mailvelope.com/pks/lookup?op=get&search=pschneider1968@gmail.com
^ permalink raw reply [flat|nested] 7+ messages in thread
* Re: [PATCH 6.1 0000/1067] 6.1.178-rc1 review
2026-07-21 15:10 [PATCH 6.1 0000/1067] 6.1.178-rc1 review Greg Kroah-Hartman
` (4 preceding siblings ...)
2026-07-22 1:51 ` Peter Schneider
@ 2026-07-22 6:19 ` Francesco Dolcini
5 siblings, 0 replies; 7+ messages in thread
From: Francesco Dolcini @ 2026-07-22 6:19 UTC (permalink / raw)
To: Greg Kroah-Hartman
Cc: stable, patches, linux-kernel, torvalds, akpm, linux, shuah,
patches, lkft-triage, pavel, jonathanh, f.fainelli,
sudipm.mukherjee, rwarsow, conor, hargar, broonie, achill, sr
Hello Greg
On Tue, Jul 21, 2026 at 05:10:01PM +0200, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.1.178 release.
> There are 1067 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
It does not build to me.
file_offset in struct perf_sample missing?
07-21:17:58:43 | arm-tdx-linux-gnueabi-gcc -march=armv7-a -mthumb -mfpu=neon -mfloat-abi=hard -fstack-protector-strong -O2 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -O2 -pipe -g -feliminate-unused-debug-types -fmacro-prefix-map=/workdir/oe/tmp/work/apalis_imx6-tdx-linux-gnueabi/perf/1.0-r9=/usr/src/debug/perf/1.0-r9 -fdebug-prefix-map=/workdir/oe/tmp/work/apalis_imx6-tdx-linux-gnueabi/perf/1.0-r9=/usr/src/debug/perf/1.0-r9 -fdebug-prefix-map=/workdir/oe/tmp/work/apalis_imx6-tdx-linux-gnueabi/perf/1.0-r9/recipe-sysroot= -fdebug-prefix-map=/workdir/oe/tmp/work/apalis_imx6-tdx-linux-gnueabi/perf/1.0-r9/recipe-sysroot-native= --sysroot=/workdir/oe/tmp/work/apalis_imx6-tdx-linux-gnueabi/perf/1.0-r9/recipe-sysroot -Wp,-MD,/workdir/oe/tmp/work/apalis_imx6-tdx-linux-gnueabi/perf/1.0-r9/perf-1.0/libbpf/staticobjs/.nlattr.o.d -Wp,-MT,/workdir/oe/tmp/work/apalis_imx6-tdx-linux-gnueabi/perf/1.0-r9/perf-1.0/libbpf/staticobjs/nlattr.o -ldw -std=gnu89 -Wbad-function-cast -Wdeclaration-after-statement -Wformat-security -Wformat-y2k -Winit-self -Wmissing-declarations -Wmissing-prototypes -Wnested-externs -Wno-system-headers -Wold-style-definition -Wpacked -Wredundant-decls -Wstrict-prototypes -Wswitch-default -Wswitch-enum -Wundef -Wwrite-strings -Wformat -Wno-type-limits -Wstrict-aliasing=3 -Wshadow -Wno-switch-enum -Werror -Wall -I/workdir/oe/tmp/work/apalis_imx6-tdx-linux-gnueabi/perf/1.0-r9/perf-1.0/libbpf/ -I/workdir/oe/tmp/work/apalis_imx6-tdx-linux-gnueabi/perf/1.0-r9/perf-1.0/tools/include -I/workdir/oe/tmp/work/apalis_imx6-tdx-linux-gnueabi/perf/1.0-r9/perf-1.0/tools/include/uapi -fvisibility=hidden -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -D"BUILD_STR(s)=#s" -c -o /workdir/oe/tmp/work/apalis_imx6-tdx-linux-gnueabi/perf/1.0-r9/perf-1.0/libbpf/staticobjs/nlattr.o nlattr.c
07-21:17:58:43 | In file included from builtin-sched.c:28:
07-21:17:58:43 | builtin-sched.c: In function 'latency_switch_event':
07-21:17:58:43 | builtin-sched.c:1182:34: error: 'struct perf_sample' has no member named 'file_offset'
07-21:17:58:43 | 1182 | sample->file_offset, cpu);
07-21:17:58:43 | | ^~
07-21:17:58:43 | util/debug.h:24:44: note: in definition of macro 'pr_warning'
07-21:17:58:43 | 24 | eprintf(0, verbose, pr_fmt(fmt), ##__VA_ARGS__)
07-21:17:58:43 | | ^~~~~~~~~~~
07-21:17:58:43 | builtin-sched.c: In function 'latency_runtime_event':
07-21:17:58:43 | builtin-sched.c:1260:34: error: 'struct perf_sample' has no member named 'file_offset'
07-21:17:58:43 | 1260 | sample->file_offset, cpu);
07-21:17:58:43 | | ^~
07-21:17:58:43 | util/debug.h:24:44: note: in definition of macro 'pr_warning'
07-21:17:58:43 | 24 | eprintf(0, verbose, pr_fmt(fmt), ##__VA_ARGS__)
07-21:17:58:43 | | ^~~~~~~~~~~
07-21:17:58:43 | builtin-sched.c: In function 'map_switch_event':
07-21:17:58:43 | builtin-sched.c:1622:34: error: 'struct perf_sample' has no member named 'file_offset'
07-21:17:58:43 | 1622 | sample->file_offset, this_cpu.cpu);
07-21:17:58:43 | | ^~
07-21:17:58:43 | util/debug.h:24:44: note: in definition of macro 'pr_warning'
07-21:17:58:43 | 24 | eprintf(0, verbose, pr_fmt(fmt), ##__VA_ARGS__)
07-21:17:58:43 | | ^~~~~~~~~~~
07-21:17:58:43 | make -f /workdir/oe/tmp/work/apalis_imx6-tdx-linux-gnueabi/perf/1.0-r9/perf-1.0/tools/build/Makefile.build dir=./arch obj=perf
Francesco
^ permalink raw reply [flat|nested] 7+ messages in thread
end of thread, other threads:[~2026-07-22 6:19 UTC | newest]
Thread overview: 7+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-07-21 15:10 [PATCH 6.1 0000/1067] 6.1.178-rc1 review Greg Kroah-Hartman
2026-07-21 15:20 ` [PATCH 6.1 0610/1067] rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Greg Kroah-Hartman
2026-07-21 15:21 ` [PATCH 6.1 0680/1067] arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Greg Kroah-Hartman
2026-07-21 17:03 ` [PATCH 6.1 0000/1067] 6.1.178-rc1 review Florian Fainelli
2026-07-21 22:20 ` Brett A C Sheffield
2026-07-22 1:51 ` Peter Schneider
2026-07-22 6:19 ` Francesco Dolcini
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox