From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 5CDE448097E; Thu, 20 Aug 2026 17:36:55 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787247417; cv=none; b=XTo2RFBXijcVfPF3WwCGMSUfsT94jMq+pN4qNi4zlQERFYZJCO2ymoZgOVkphteUneIvGZzbShhdUf0QflLS8D6iDDQiCZYtfGwmFFhJwlP4bdL7hS1Bc4CLEWGkqlbE15kA19ClKkb4CUw0i4cNdrEb6wEro1rPQC7xOheyCZw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1787247417; c=relaxed/simple; bh=AsTEMZuh6CcWMsN56FQURsqoJXRD1Q/1qRb8LK28+ew=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type; b=eq3YBs471Uf1bjsxD6VQLwbFf+xz6OPWLU6s+ayiisbZ9hKSNb7pl/E6VtOKwy1675cKXZLrop83GJxyzWwJ0UtXroImKrwTPkARBD5sX/nlqFdiaSKhvq2UMwth5S1aB4ZBtOY7kJYA7X4umyzusgdTUouOeMVQT+PhtRk3UX0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=JJvSEflX; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="JJvSEflX" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 22A8B1F000E9; Thu, 20 Aug 2026 17:36:54 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=korg; t=1787247415; bh=CundxDr70piyoaeC0Nc1gzO0bUGtEdy7iGlTCFHoeaY=; h=From:To:Cc:Subject:Date; b=JJvSEflXQgmUkNabtikqmww3xb5g8Gwdvmi7RKAcCWdrBZPrAuPbPiO4BBoQdWLXu aQ6NAnK2YLV+NfH68H+7KVmEvj5KillqxtNmr3V92KTBYPGgecgYh0iIKtuq3/I2lf uPDZPxQr0WU3+PH0qkugWuD+rq+1PbVRbyrQKzeI= From: Greg Kroah-Hartman To: stable@vger.kernel.org Cc: Greg Kroah-Hartman , patches@lists.linux.dev, linux-kernel@vger.kernel.org, torvalds@linux-foundation.org, akpm@linux-foundation.org, linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org, lkft-triage@lists.linaro.org, pavel@nabladev.com, jonathanh@nvidia.com, f.fainelli@gmail.com, sudipm.mukherjee@gmail.com, rwarsow@gmx.de, conor@kernel.org, hargar@microsoft.com, broonie@kernel.org, achill@achill.org, sr@sladewatkins.com Subject: [PATCH 6.6 000/166] 6.6.153-rc1 review Date: Thu, 20 Aug 2026 16:54:19 +0200 Message-ID: <20260820145211.194104353@linuxfoundation.org> X-Mailer: git-send-email 2.55.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: quilt/0.69 X-stable: review X-Patchwork-Hint: ignore X-KernelTest-Patch: http://kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.153-rc1.gz X-KernelTest-Tree: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git X-KernelTest-Branch: linux-6.6.y X-KernelTest-Patches: git://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git X-KernelTest-Version: 6.6.153-rc1 X-KernelTest-Deadline: 2026-08-22T14:52+00:00 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is the start of the stable review cycle for the 6.6.153 release. There are 166 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 22 Aug 2026 14:51:11 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.153-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman Linux 6.6.153-rc1 Paolo Abeni net: harmonize tstats and dstats Christian Brauner binfmt_misc: use exe_file_deny_write_access() for the interpreter clone Baul Lee net/x25: fix use-after-free of the socket by its timers Gao Xiang erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms Jamal Hadi Salim net/sched: cls_bpf: reject dev-bound programs bound to a different device Siddharth Vadapalli net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG Uwe Kleine-König m68k: Define NR_CPUS to 1 Christoph Hellwig m68k: use the coherent DMA code for coldfire without data cache Christoph Hellwig dma-direct: add a CONFIG_ARCH_HAS_DMA_ALLOC symbol Zhang Changzhong net/sched: cls_u32: skip hash tables in u32_bind_class() Jamal Hadi Salim net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain Victor Nogueira net: sched: Add initial TC error skb drop reasons Victor Nogueira net: sched: Move drop_reason to struct tc_skb_cb Yan Zhai packet: add a generic drop reason for receive Jamal Hadi Salim net, sched: Fix SKB_NOT_DROPPED_YET splat under debug config Daniel Borkmann net, sched: Add tcf_set_drop_reason for {__,}tcf_classify Daniel Borkmann net, sched: Make tc-related drop reason more flexible Eric Dumazet af_packet: Don't send zero-byte data in tpacket_snd(). Rosen Penev ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers Chuck Lever net/tls: Fail tls_sw_splice_read() after a failed async decrypt Wei Fang net: packet: fix wrong transport_header when sending VLAN-tagged frame Eric Dumazet macvlan: inherit needed_headroom and needed_tailroom from lowerdev Eric Dumazet ipvlan: inherit needed_headroom and needed_tailroom from phy_dev Florian Westphal netfilter: ipset: let destroy callbacks adjust ext mem size Florian Westphal netfilter: ipset: fix list type element drift bug Jérémy Jean netfilter: flowtable: publish GC-visible tuple last Alexey Velichayshiy netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path Xiang Mei (Microsoft) netfilter: ipset: fix refcount race between list:set GC and swap Herbert Xu crypto: ccm - Set rfc4309 maxauthsize from child Jon Hunter arm64: tegra: Add EL2 virtual timer interrupt for Tegra194 Lorenzo Stoakes (ARM) mm/huge_memory: fix huge_zero_pfn race Jérémy Jean tls: rx: restore msg_iter before TLS 1.3 optimistic retry Sabrina Dubroca selftests: tls: add rekey tests Paolo Bonzini KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Lorenzo Stoakes (ARM) mm/ptdump: always stabilise against page table freeing using init_mm Lorenzo Stoakes (ARM) mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF Lorenzo Stoakes mm/pagewalk: split walk_page_range_novma() into kernel/user parts Pierre-Eric Pelloux-Prayer drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini Yang Wang drm/amd/pm: fix pptable use-after-free Yang Wang drm/amd/pm: fix torn gpu metrics reads Tu Nguyen can: rcar_canfd: change the initializing flow for clocks and resets Jonas Gorski i2c: iproc: reset bus after timeout if START_BUSY is stuck Wolfram Sang i2c: bcm-iproc: remove printout on handled timeouts Eric Dumazet vxlan: use pskb_network_may_pull() for transmit path header pulls Guillaume Nault vxlan: Handle stats using NETDEV_PCPU_STAT_DSTATS. Guillaume Nault vrf: Make pcpu_dstats update functions available to other modules. Jeremy Kerr net: core,vrf: Change pcpu_dstat fields to u64_stats_t Breno Leitao vxlan: Do not alloc tstats manually Dawid Osuchowski ice: fix VF interrupts cleanup Christian Brauner binfmt_misc: restore write access when removing an entry Amir Goldstein fs: don't block write during exec on pre-content watched files Matt Fleming veth: convert frag_list skbs before running XDP Chengfeng Ye net: pktgen: fix proc entry use-after-free Peter Seiderer net: pktgen: fix code style (WARNING: Block comments) Namjae Jeon ksmbd: reject repeated SMB2 NEGOTIATE requests Namjae Jeon ksmbd: conn lock to serialize smb2 negotiate David Carlier igc: remove napi_synchronize() in igc_down() Mark Brown ASoC: tas2562: Validate values for volume writes Chengfeng Ye Bluetooth: hci_sync: Fix advertising data UAFs Luiz Augusto von Dentz Bluetooth: eir: Fix possible crashes on eir_create_adv_data Luiz Augusto von Dentz Bluetooth: hci_core: Fix not handling hdev->le_num_of_adv_sets=1 Gustavo A. R. Silva Bluetooth: hci_conn, hci_sync: Use __counted_by() to avoid -Wfamnae warnings Kees Cook overflow: Change DEFINE_FLEX to take __counted_by member Maciej Fijalkowski ice: make ice_vsi_cfg_rxq() static Przemek Kitszel ice: make use of DEFINE_FLEX() in ice_switch.c Kefeng Wang mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE Guanghui Yang <3497809730@qq.com> btrfs: zoned: fix missing chunk metadata reservation Filipe Manana btrfs: remove fs_info argument from btrfs_zoned_activate_one_bg() Naohiro Aota btrfs: add space_info argument to btrfs_chunk_alloc() David Sterba btrfs: add debug build only WARN Yuxiang Yang tcp: challenge ACK for non-exact RST in SYN-RECEIVED Ilpo Järvinen tcp: fast path functions later Ilpo Järvinen tcp: Pass flags to __tcp_send_ack Namjae Jeon ksmbd: validate minimum PDU size for transform requests ChenXiaoSong smb/server: fix minimum SMB2 PDU size ChenXiaoSong smb/server: fix minimum SMB1 PDU size Namjae Jeon ksmbd: rename smb2_get_msg to smb_get_msg ChenXiaoSong smb/server: rename include guard in smb_common.h ZhangGuoDong smb: move get_rfc1002_len() to common/smbglob.h ZhangGuoDong smb: move smb_version_values to common/smbglob.h Christian Brauner super: fix emergency thaw deadlock on frozen block devices Aldo Ariel Panzardo net/sched: serialize qdisc_rtab_list against concurrent get/put Shiming Cheng net: gro: fix double aggregation of flush-marked skbs Felix Fietkau net: move skb_gro_receive_list from udp to core Pavitra Jha libceph: fix two unsafe bare decodes in decode_lockers() Mike Rapoport (Microsoft) userfaultfd: prevent registration of special VMAs Mike Rapoport (Microsoft) userfaultfd: move vma_can_userfault out of line Chunyan Zhang mm: userfaultfd: add pgtable_supports_uffd_wp() Zhang Yi iomap: fix out-of-bounds bitmap_set() with zero-length range Matthew Wilcox (Oracle) iomap: hold state_lock over call to ifs_set_range_uptodate() Chancel Liu ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP Xiang Mei libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE Andy Shevchenko libceph: Amend checking to fix `make W=1` build breakage Matthew Wilcox (Oracle) ceph: Use a folio in ceph_page_mkwrite() Max Kellermann ceph: fix hanging __ceph_get_caps() with stale mds_wanted Matthew Wilcox (Oracle) ceph: Remove ceph_writepage() Max Kellermann ceph: avoid fs reclaim while using current->journal_info Sabrina Dubroca selftests: tls: add test with a partially invalid iov Palmer Dabbelt RISC-V: Provide pgtable_l5_enabled on rv32 Christoph Hellwig xfs: check v5 superblock features early Long Li xfs: don't swallow dquot recovery verification errors Long Li xfs: fix ilock leak on error in xfs_dq_get_next_id Darrick J. Wong xfs: only check mergeability of bnobt records Junrui Luo drm/amdgpu: disallow multiple FENCE chunks in one submit David Rosca drm/amdgpu: Fix UVD decode image min size calculation David Rosca drm/amdgpu: Fix UVD dpb min size calculation for H264 David Rosca drm/amdgpu: Fix UVD min buffer sizes David Rosca drm/amdgpu: Implement insert_end for VCE 3 David Rosca drm/amdgpu: Reject UVD message with dimensions above 4096 Candice Li drm/amdgpu: validate GEM_CREATE domain combinations David Rosca drm/amdgpu: Reject UVD message with invalid number of h265 refs Eric Farman s390/vfio_ccw: Selectively expand io_mutex Eric Farman s390/vfio_ccw: Move cp cleanup out of not operational Eric Farman s390/vfio_ccw: Fix out of bounds check on CCW array Eric Farman s390/vfio_ccw: Ensure index for read/write regions are within range Eric Farman s390/vfio_ccw: Cancel existing workqueues Eric Farman s390/vfio_ccw: Limit the number of channel program segments Eric Farman s390/vfio_ccw: Free all memory if cp_init() fails Guangshuo Li drm/radeon: fix autosuspend cleanup during teardown Pei Xiao mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition Haibo Chen mmc: sdhci: make tuning_err a signed int Myeonghun Pak mmc: sdhci: unmap the bounce buffer before device release Zhan Xusheng mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit Kefu Chai libceph: tolerate addrvecs with multiple entries of the same type Yiming Zhu ceph: fix MDS random selection readiness predicate Raphael Zimmer libceph: Avoid using invalid osd indices from primary_temp Dmitry Torokhov Input: sur40 - fix V4L error path cleanup Dmitry Torokhov Input: sur40 - fix input device registration ordering Ali Ahmet Memis openrisc: signal: do not restore privileged SR bits on sigreturn Josh Poimboeuf ftrace: Fix off-by-one fentry site disable in ftrace_free_mem() Leon Hwang ftrace: Protect direct_functions in ftrace_find_rec_direct Pavitra Jha libceph: fix multiple unsafe decodes in decode_locker() Thorsten Blum crypto: qce - fix error path in devm_qce_register_algs Jianing Li Input: hynitron_cstxxx - validate touch count and finger IDs Dmitry Torokhov Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue Dmitry Torokhov Input: synaptics-rmi4 - block s_input when F54 queue is busy Bryam Vargas Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer Dmitry Torokhov Input: synaptics-rmi4 - zero report size on F54 work error George Wilson powerpc/pseries: lparcfg - fix kbuf[] underflow Pengpeng Hou Input: iforce - validate input packet lengths Zhefu Zhang Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard Linmao Li Input: psxpad-spi - set driver data before use Richard Davies Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet Dmitry Torokhov Input: synaptics-rmi4 - fix F55 transmitter electrode count typo George Wilson powerpc/pseries: pci - logic bug Kyohei Kadota Input: xpad - add support for ZENAIM LEVERLESS Asad Kamal drm/amdgpu: fix aperture iounmap skipped on device removal Mingyu Wang <25181214217@stu.xidian.edu.cn> fbdev: core: Fix pointer desynchronization in fb_io_read() Dawid Wróbel ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses Peter Ujfalusi ASoC: cs35l41: sort the register default table Peter Ujfalusi ASoC: cs35l45: sort the register default table Peter Ujfalusi ASoC: cs4265: sort the register default table Peter Ujfalusi ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked() Hidayath Khan s390/qeth: validate user buffer length in SNMP and ARP query ioctls Wyatt Feng mptcp: fastopen: only mark MPTFO subflows with SYN data Matthieu Baerts (NGI0) mptcp: options: reset DSS fields in case of unexpected size Matthieu Baerts (NGI0) mptcp: avoid combining some incoming suboptions Gang Yan selftests: mptcp: join: mark tests with data corruption as failed Bryam Vargas selinux: reject an unclaimed class value in security_get_classes() Bryam Vargas selinux: do not cancel a policy conversion that never started Bryam Vargas selinux: reject a class permission count below its inherited common Bryam Vargas selinux: require every boolean value to be defined Erni Sri Satya Vennela net: mana: Fix EQ leak in mana_remove on NULL port Yizhou Zhao ipvs: separate destination availability state Chao Yu f2fs: fix UAF issue in f2fs_merge_page_bio() Chao Shi block: stop the timeout timer when releasing a never added disk ------------- Diffstat: Makefile | 4 +- arch/arm/Kconfig | 1 + arch/arm64/boot/dts/nvidia/tegra194.dtsi | 2 + arch/m68k/Kconfig | 7 +- arch/m68k/Kconfig.cpu | 16 + arch/m68k/kernel/Makefile | 2 +- arch/m68k/kernel/dma.c | 2 +- arch/openrisc/include/asm/processor.h | 2 + arch/openrisc/kernel/dma.c | 4 +- arch/openrisc/kernel/signal.c | 5 +- arch/parisc/Kconfig | 1 + arch/powerpc/platforms/pseries/lparcfg.c | 2 +- arch/powerpc/platforms/pseries/pci.c | 2 +- arch/riscv/include/asm/pgtable-32.h | 3 + arch/riscv/include/asm/pgtable.h | 1 - arch/riscv/mm/init.c | 2 + arch/riscv/mm/pageattr.c | 8 +- arch/x86/kvm/svm/sev.c | 34 +- arch/x86/kvm/svm/svm.h | 1 + block/genhd.c | 12 +- crypto/ccm.c | 2 +- drivers/crypto/qce/core.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 34 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 21 + drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 85 +--- drivers/gpu/drm/amd/amdgpu/vce_v3_0.c | 26 +- drivers/gpu/drm/amd/pm/amdgpu_dpm.c | 27 +- drivers/gpu/drm/amd/pm/amdgpu_pm.c | 16 +- drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h | 6 +- drivers/gpu/drm/radeon/radeon_kms.c | 1 + drivers/i2c/busses/i2c-bcm-iproc.c | 11 +- drivers/input/joystick/iforce/iforce-packets.c | 11 +- drivers/input/joystick/iforce/iforce-usb.c | 3 + drivers/input/joystick/psxpad-spi.c | 1 + drivers/input/joystick/xpad.c | 2 + drivers/input/keyboard/atkbd.c | 8 + drivers/input/mouse/focaltech.c | 2 +- drivers/input/rmi4/rmi_f54.c | 43 +- drivers/input/rmi4/rmi_f55.c | 4 +- drivers/input/touchscreen/hynitron_cstxxx.c | 13 +- drivers/input/touchscreen/sur40.c | 23 +- drivers/mmc/host/atmel-mci.c | 2 + drivers/mmc/host/omap_hsmmc.c | 2 +- drivers/mmc/host/sdhci.c | 16 + drivers/mmc/host/sdhci.h | 2 +- drivers/net/can/rcar/rcar_canfd.c | 28 +- drivers/net/ethernet/intel/ice/ice_base.c | 58 ++- drivers/net/ethernet/intel/ice/ice_base.h | 3 +- drivers/net/ethernet/intel/ice/ice_lib.c | 56 --- drivers/net/ethernet/intel/ice/ice_lib.h | 4 - drivers/net/ethernet/intel/ice/ice_switch.c | 63 +-- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 27 + .../net/ethernet/intel/ice/ice_vf_lib_private.h | 1 + drivers/net/ethernet/intel/ice/ice_virtchnl.c | 21 + drivers/net/ethernet/intel/ice/ice_xsk.c | 2 +- drivers/net/ethernet/intel/igc/igc_main.c | 1 - drivers/net/ethernet/microsoft/mana/mana_en.c | 4 +- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 + drivers/net/ipvlan/ipvlan_main.c | 4 + drivers/net/macvlan.c | 4 + drivers/net/veth.c | 4 +- drivers/net/vrf.c | 49 +- drivers/net/vxlan/vxlan_core.c | 45 +- drivers/net/vxlan/vxlan_mdb.c | 4 +- drivers/s390/cio/vfio_ccw_async.c | 16 + drivers/s390/cio/vfio_ccw_chp.c | 17 +- drivers/s390/cio/vfio_ccw_cp.c | 53 +- drivers/s390/cio/vfio_ccw_cp.h | 8 + drivers/s390/cio/vfio_ccw_drv.c | 15 +- drivers/s390/cio/vfio_ccw_fsm.c | 8 +- drivers/s390/cio/vfio_ccw_ops.c | 35 +- drivers/s390/cio/vfio_ccw_private.h | 6 +- drivers/s390/net/qeth_core_main.c | 3 + drivers/s390/net/qeth_l3_main.c | 5 + drivers/video/fbdev/core/fb_io_fops.c | 8 + fs/binfmt_elf.c | 4 +- fs/binfmt_elf_fdpic.c | 4 +- fs/binfmt_misc.c | 14 +- fs/btrfs/block-group.c | 61 ++- fs/btrfs/block-group.h | 3 +- fs/btrfs/extent-tree.c | 6 +- fs/btrfs/messages.h | 7 + fs/btrfs/space-info.c | 2 +- fs/btrfs/transaction.c | 5 +- fs/btrfs/zoned.c | 5 +- fs/btrfs/zoned.h | 6 +- fs/ceph/addr.c | 54 +- fs/ceph/caps.c | 17 +- fs/ceph/file.c | 9 +- fs/ceph/mds_client.c | 11 + fs/ceph/mds_client.h | 2 + fs/ceph/mdsmap.c | 2 +- fs/erofs/Kconfig | 3 +- fs/exec.c | 6 +- fs/f2fs/data.c | 2 +- fs/iomap/buffered-io.c | 42 +- fs/smb/client/cifsglob.h | 27 - fs/smb/client/cifssmb.c | 6 +- fs/smb/client/connect.c | 2 +- fs/smb/client/transport.c | 8 +- fs/smb/common/cifsglob.h | 36 ++ fs/smb/server/auth.c | 4 +- fs/smb/server/connection.c | 23 +- fs/smb/server/connection.h | 5 + fs/smb/server/oplock.c | 8 +- fs/smb/server/smb2misc.c | 2 +- fs/smb/server/smb2ops.c | 32 +- fs/smb/server/smb2pdu.c | 88 ++-- fs/smb/server/smb2pdu.h | 9 - fs/smb/server/smb_common.c | 43 +- fs/smb/server/smb_common.h | 43 +- fs/super.c | 22 +- fs/userfaultfd.c | 20 +- fs/xfs/libxfs/xfs_sb.c | 4 +- fs/xfs/scrub/alloc.c | 5 +- fs/xfs/xfs_dquot.c | 3 +- fs/xfs/xfs_dquot_item_recover.c | 2 +- include/asm-generic/pgtable_uffd.h | 17 + include/linux/fs.h | 12 + include/linux/mm_inline.h | 7 +- include/linux/mmap_lock.h | 4 + include/linux/netdevice.h | 52 +- include/linux/overflow.h | 52 ++ include/linux/pagewalk.h | 7 +- include/linux/userfaultfd_k.h | 19 +- include/net/bluetooth/hci.h | 8 +- include/net/bluetooth/hci_core.h | 1 + include/net/dropreason-core.h | 21 + include/net/gro.h | 1 + include/net/ip_vs.h | 7 + include/net/pkt_cls.h | 16 + include/net/pkt_sched.h | 3 +- include/net/sch_generic.h | 2 - include/net/tcp.h | 58 +-- include/uapi/linux/ip_vs.h | 6 - kernel/dma/Kconfig | 9 + kernel/dma/direct.c | 12 +- kernel/fork.c | 12 +- kernel/trace/ftrace.c | 9 +- lib/overflow_kunit.c | 19 + mm/huge_memory.c | 49 +- mm/internal.h | 7 + mm/migrate_device.c | 5 +- mm/pagewalk.c | 82 ++- mm/ptdump.c | 10 +- mm/userfaultfd.c | 26 + mm/vmalloc.c | 49 +- net/bluetooth/eir.c | 7 +- net/bluetooth/eir.h | 2 +- net/bluetooth/hci_core.c | 9 + net/bluetooth/hci_event.c | 3 +- net/bluetooth/hci_sync.c | 237 +++++---- net/ceph/cls_lock_client.c | 21 +- net/ceph/decode.c | 18 +- net/ceph/osdmap.c | 9 +- net/core/dev.c | 29 +- net/core/gro.c | 31 ++ net/core/pktgen.c | 43 +- net/ipv4/bpf_tcp_ca.c | 2 +- net/ipv4/tcp_dctcp.h | 2 +- net/ipv4/tcp_input.c | 56 ++- net/ipv4/tcp_minisocks.c | 12 +- net/ipv4/tcp_output.c | 6 +- net/ipv4/udp_offload.c | 29 -- net/mptcp/fastopen.c | 7 +- net/mptcp/options.c | 67 ++- net/mptcp/protocol.h | 1 + net/netfilter/ipset/ip_set_bitmap_gen.h | 2 +- net/netfilter/ipset/ip_set_core.c | 19 +- net/netfilter/ipset/ip_set_list_set.c | 10 +- net/netfilter/ipvs/ip_vs_conn.c | 4 +- net/netfilter/ipvs/ip_vs_core.c | 6 +- net/netfilter/ipvs/ip_vs_ctl.c | 4 +- net/netfilter/ipvs/ip_vs_dh.c | 4 +- net/netfilter/ipvs/ip_vs_lblc.c | 2 +- net/netfilter/ipvs/ip_vs_lblcr.c | 8 +- net/netfilter/nf_flow_table_core.c | 7 +- net/netfilter/nf_tables_offload.c | 2 +- net/packet/af_packet.c | 27 +- net/sched/act_api.c | 13 +- net/sched/cls_api.c | 32 +- net/sched/cls_bpf.c | 18 +- net/sched/cls_u32.c | 3 + net/sched/sch_api.c | 24 +- net/tls/tls_sw.c | 7 + net/x25/af_x25.c | 4 +- net/x25/x25_timer.c | 25 +- security/selinux/ss/policydb.c | 31 ++ security/selinux/ss/services.c | 28 +- sound/soc/codecs/cs35l41-lib.c | 2 +- sound/soc/codecs/cs35l45-tables.c | 32 +- sound/soc/codecs/cs4265.c | 4 +- sound/soc/codecs/lpass-wsa-macro.c | 8 +- sound/soc/codecs/tas2562.c | 9 +- sound/soc/fsl/fsl_sai.c | 29 +- sound/soc/sof/sof-audio.c | 9 +- sound/soc/xilinx/xlnx_formatter_pcm.c | 10 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 4 +- tools/testing/selftests/net/tls.c | 549 +++++++++++++++++++++ 200 files changed, 2659 insertions(+), 1145 deletions(-)