From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 80D2739478D; Wed, 25 Mar 2026 10:16:08 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1774433768; cv=none; b=PLyZ6JVVZ/0z9APztSZCLZ/6rRMhYSiM3IUwfXq3Lphq0GFoFGFOFET8EAo21LVDnA3sWvXIhw106fcrFgzvS4pbgyYfGh24WGR8Cy48KdJCCkFcDuELVuqpZfKKZlYjwYklSVz+TAr5YVfRey6qzRbFoEuWH1UPBkJ19vq1LsE= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1774433768; c=relaxed/simple; bh=fjUblSXBP/xuThX829rh/nmGwvxCh7jmIYwbYWX0ru0=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type; b=Sk42AL48j+PPuKqs88VEfTP/0DlrlKqIlgFnKb4pWf8ywpZLKBGx/U3K7IvDwUY63MMNH4NK/K4gTAZCh85iHYs4IFvq5GFXto+L2cXiIu7/wzueDbuce9B+PIqBCLfG8xqbAWxROO0dNtdajSa5ZMWNBFwbl7CmraV5VQBfgvs= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=s1PLCjP5; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="s1PLCjP5" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 45A46C4CEF7; Wed, 25 Mar 2026 10:16:07 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1774433768; bh=fjUblSXBP/xuThX829rh/nmGwvxCh7jmIYwbYWX0ru0=; h=From:To:Cc:Subject:Date:From; b=s1PLCjP56+qUjc1nJTwBlSOJsyc1CTZhLDWu+t/4z2Ioya5LXP6EbO6GgKK9SfHk+ SEG+DyQ93hhJ6ItGsN1ydeythLrHJcN89bw880ljvM11K64zm6rOgxSjg+jG+wD762 wZ8Wg0+V7kOdKUw2EYPmNVD7N2/HBXNXgoRkbQHc= From: Greg Kroah-Hartman To: linux-kernel@vger.kernel.org, akpm@linux-foundation.org, torvalds@linux-foundation.org, stable@vger.kernel.org Cc: lwn@lwn.net, jslaby@suse.cz, Greg Kroah-Hartman Subject: Linux 6.1.167 Date: Wed, 25 Mar 2026 11:15:42 +0100 Message-ID: <2026032543-swinger-subtotal-7029@gregkh> X-Mailer: git-send-email 2.53.0 Precedence: bulk X-Mailing-List: stable@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit I'm announcing the release of the 6.1.167 kernel. All users of the 6.1 kernel series must upgrade. The updated 6.1.y git tree can be found at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-6.1.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git;a=summary thanks, greg k-h ------------ .clang-format | 1 Documentation/networking/device_drivers/ethernet/freescale/dpaa2/mac-phy-support.rst | 9 Makefile | 2 arch/alpha/kernel/pci.c | 5 arch/arm/include/asm/string.h | 14 arch/arm/kernel/bios32.c | 16 arch/arm/mach-dove/pcie.c | 10 arch/arm/mach-mv78xx0/pcie.c | 10 arch/arm/mach-orion5x/pci.c | 10 arch/arm64/boot/dts/qcom/sdm845-oneplus-common.dtsi | 1 arch/arm64/boot/dts/rockchip/rk3568.dtsi | 4 arch/arm64/boot/dts/rockchip/rk356x.dtsi | 2 arch/arm64/include/asm/pgtable-prot.h | 72 - arch/loongarch/include/asm/uaccess.h | 14 arch/mips/pci/ops-bcm63xx.c | 8 arch/mips/pci/pci-legacy.c | 3 arch/parisc/include/asm/pgtable.h | 2 arch/parisc/kernel/head.S | 7 arch/parisc/kernel/setup.c | 20 arch/powerpc/include/asm/uaccess.h | 2 arch/powerpc/kernel/pci-common.c | 21 arch/powerpc/platforms/4xx/pci.c | 8 arch/powerpc/platforms/52xx/mpc52xx_pci.c | 5 arch/powerpc/platforms/83xx/km83xx.c | 4 arch/powerpc/platforms/pseries/pci.c | 16 arch/riscv/kernel/stacktrace.c | 21 arch/s390/lib/xor.c | 4 arch/sh/drivers/pci/pcie-sh7786.c | 10 arch/sparc/kernel/leon_pci.c | 5 arch/sparc/kernel/pci.c | 10 arch/sparc/kernel/pcic.c | 5 arch/x86/boot/compressed/sev.c | 1 arch/x86/include/asm/efi.h | 2 arch/x86/include/asm/msr-index.h | 5 arch/x86/kernel/apic/apic.c | 6 arch/x86/kernel/uprobes.c | 24 arch/x86/kvm/svm/avic.c | 8 arch/x86/kvm/svm/svm.c | 11 arch/x86/kvm/vmx/vmx.c | 2 arch/x86/kvm/x86.c | 120 +- arch/x86/kvm/x86.h | 15 arch/x86/platform/efi/efi.c | 2 arch/x86/platform/efi/quirks.c | 55 + drivers/acpi/acpi_processor.c | 15 drivers/acpi/osi.c | 13 drivers/acpi/osl.c | 2 drivers/acpi/sleep.c | 8 drivers/base/power/runtime.c | 1 drivers/base/property.c | 27 drivers/block/drbd/drbd_actlog.c | 53 - drivers/block/drbd/drbd_interval.h | 5 drivers/bluetooth/btqca.c | 2 drivers/bus/omap-ocp2scp.c | 19 drivers/clk/tegra/clk-tegra124-emc.c | 2 drivers/cpuidle/cpuidle.c | 10 drivers/crypto/atmel-sha204a.c | 5 drivers/dma/mmp_pdma.c | 6 drivers/firmware/arm_scpi.c | 5 drivers/firmware/efi/mokvar-table.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6 drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 13 drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 38 drivers/gpu/drm/amd/amdgpu/amdgpu_csa.h | 3 drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 36 drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 4 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 14 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 12 drivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c | 9 drivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c | 3 drivers/gpu/drm/amd/amdgpu/mmhub_v3_0.c | 3 drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 3 drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_2.c | 3 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_pp_smu.c | 1 drivers/gpu/drm/amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 2 drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2 drivers/gpu/drm/amd/display/dc/dm_services_types.h | 2 drivers/gpu/drm/amd/include/dm_pp_interface.h | 1 drivers/gpu/drm/amd/pm/amdgpu_dpm_internal.c | 67 + drivers/gpu/drm/amd/pm/inc/amdgpu_dpm_internal.h | 2 drivers/gpu/drm/amd/pm/legacy-dpm/kv_dpm.c | 4 drivers/gpu/drm/amd/pm/legacy-dpm/legacy_dpm.c | 6 drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 69 - drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 13 drivers/gpu/drm/bridge/ti-sn65dsi83.c | 13 drivers/gpu/drm/bridge/ti-sn65dsi86.c | 118 ++ drivers/gpu/drm/drm_file.c | 5 drivers/gpu/drm/drm_mode_config.c | 9 drivers/gpu/drm/exynos/exynos_drm_drv.h | 1 drivers/gpu/drm/exynos/exynos_drm_vidi.c | 72 + drivers/gpu/drm/i915/gt/intel_engine_cs.c | 3 drivers/gpu/drm/logicvc/logicvc_drm.c | 4 drivers/gpu/drm/msm/msm_gpummu.c | 2 drivers/gpu/drm/nouveau/nouveau_connector.c | 3 drivers/gpu/drm/radeon/si_dpm.c | 4 drivers/gpu/drm/tegra/dsi.c | 6 drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 4 drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 9 drivers/hid/hid-cmedia.c | 2 drivers/hid/hid-creative-sb0540.c | 2 drivers/hid/hid-zydacron.c | 2 drivers/hwmon/max16065.c | 26 drivers/hwmon/pmbus/isl68137.c | 7 drivers/hwmon/pmbus/q54sj108a2.c | 19 drivers/i2c/busses/i2c-cp2615.c | 5 drivers/i2c/busses/i2c-fsi.c | 1 drivers/i3c/master/mipi-i3c-hci/cmd.h | 1 drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 2 drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 2 drivers/i3c/master/mipi-i3c-hci/core.c | 6 drivers/i3c/master/mipi-i3c-hci/dma.c | 4 drivers/iio/chemical/bme680_core.c | 2 drivers/iio/chemical/sps30_i2c.c | 2 drivers/iio/chemical/sps30_serial.c | 2 drivers/iio/dac/ds4424.c | 2 drivers/iio/gyro/mpu3050-core.c | 18 drivers/iio/gyro/mpu3050-i2c.c | 3 drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 2 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 3 drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 2 drivers/iio/industrialio-buffer.c | 102 +- drivers/iio/light/bh1780.c | 4 drivers/iio/potentiometer/mcp4131.c | 2 drivers/infiniband/hw/irdma/verbs.c | 2 drivers/infiniband/hw/mthca/mthca_provider.c | 5 drivers/iommu/intel/dmar.c | 3 drivers/irqchip/irq-gic-v3-its.c | 4 drivers/irqchip/irq-sifive-plic.c | 7 drivers/mailbox/mailbox.c | 6 drivers/md/dm-verity-fec.c | 4 drivers/md/dm-verity-fec.h | 3 drivers/media/dvb-core/dmxdev.c | 4 drivers/media/dvb-core/dvb_net.c | 3 drivers/media/platform/qcom/camss/camss-vfe-480.c | 59 - drivers/memory/mtk-smi.c | 13 drivers/mfd/omap-usb-host.c | 11 drivers/mfd/qcom-pm8xxx.c | 14 drivers/mmc/host/mmci_qcom_dml.c | 1 drivers/mmc/host/sdhci-pci-gli.c | 9 drivers/mmc/host/sdhci.c | 9 drivers/mtd/nand/raw/brcmnand/brcmnand.c | 6 drivers/mtd/nand/raw/cadence-nand-controller.c | 2 drivers/mtd/nand/raw/nand_base.c | 14 drivers/mtd/nand/raw/pl35x-nand-controller.c | 3 drivers/mtd/nand/spi/macronix.c | 3 drivers/mtd/parsers/redboot.c | 6 drivers/net/arcnet/com20020-pci.c | 16 drivers/net/bonding/bond_debugfs.c | 16 drivers/net/bonding/bond_main.c | 10 drivers/net/caif/caif_serial.c | 3 drivers/net/can/spi/hi311x.c | 5 drivers/net/can/spi/mcp251x.c | 15 drivers/net/can/usb/ems_usb.c | 7 drivers/net/can/usb/etas_es58x/es58x_core.c | 8 drivers/net/can/usb/gs_usb.c | 22 drivers/net/can/usb/ucan.c | 2 drivers/net/dsa/bcm_sf2.c | 8 drivers/net/dsa/realtek/rtl8365mb.c | 5 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 10 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 1 drivers/net/ethernet/amd/xgbe/xgbe.h | 3 drivers/net/ethernet/arc/emac_main.c | 11 drivers/net/ethernet/broadcom/bnxt/bnxt.c | 25 drivers/net/ethernet/broadcom/bnxt/bnxt.h | 2 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 7 drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2 drivers/net/ethernet/cadence/macb.h | 7 drivers/net/ethernet/cadence/macb_main.c | 184 +++ drivers/net/ethernet/cadence/macb_ptp.c | 4 drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.h | 7 drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.h | 10 drivers/net/ethernet/freescale/dpaa2/dpaa2-switch-ethtool.c | 34 drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c | 57 - drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.h | 9 drivers/net/ethernet/freescale/enetc/enetc_pf.c | 121 +- drivers/net/ethernet/freescale/fec_main.c | 19 drivers/net/ethernet/google/gve/gve.h | 1 drivers/net/ethernet/google/gve/gve_main.c | 5 drivers/net/ethernet/intel/e1000/e1000_main.c | 2 drivers/net/ethernet/intel/e1000e/netdev.c | 2 drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 14 drivers/net/ethernet/intel/iavf/iavf_main.c | 9 drivers/net/ethernet/intel/ice/ice_common.c | 8 drivers/net/ethernet/intel/ice/ice_ethtool.c | 35 drivers/net/ethernet/intel/igc/igc_main.c | 7 drivers/net/ethernet/intel/ixgbevf/vf.c | 3 drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 4 drivers/net/ethernet/marvell/octeon_ep/octep_main.c | 40 drivers/net/ethernet/marvell/octeon_ep/octep_rx.c | 27 drivers/net/ethernet/marvell/octeontx2/af/rvu_devlink.c | 468 ++-------- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 15 drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 30 drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 3 drivers/net/ethernet/mellanox/mlx5/core/eswitch_offloads.c | 18 drivers/net/ethernet/microsoft/mana/hw_channel.c | 6 drivers/net/ethernet/microsoft/mana/mana_en.c | 23 drivers/net/ethernet/stmicro/stmmac/common.h | 1 drivers/net/ethernet/stmicro/stmmac/dwmac-intel.c | 4 drivers/net/ethernet/stmicro/stmmac/dwmac-loongson.c | 9 drivers/net/ethernet/stmicro/stmmac/stmmac.h | 2 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 61 - drivers/net/ethernet/stmicro/stmmac/stmmac_platform.c | 8 drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 drivers/net/ethernet/ti/cpsw_ale.c | 9 drivers/net/mctp/mctp-i2c.c | 1 drivers/net/phy/phy_device.c | 13 drivers/net/usb/aqc111.c | 12 drivers/net/usb/kalmia.c | 7 drivers/net/usb/kaweth.c | 13 drivers/net/usb/lan78xx.c | 10 drivers/net/usb/lan78xx.h | 3 drivers/net/usb/pegasus.c | 13 drivers/net/vxlan/vxlan_core.c | 5 drivers/net/wireless/broadcom/brcm80211/brcmfmac/btcoex.c | 6 drivers/net/wireless/marvell/libertas/main.c | 4 drivers/net/wireless/mediatek/mt76/mt76_connac_mac.c | 1 drivers/net/wireless/st/cw1200/pm.c | 2 drivers/net/wireless/ti/wlcore/main.c | 4 drivers/net/wireless/ti/wlcore/tx.c | 2 drivers/nfc/nxp-nci/i2c.c | 4 drivers/nfc/pn533/usb.c | 1 drivers/nvdimm/bus.c | 5 drivers/nvme/host/core.c | 2 drivers/nvme/host/fc.c | 2 drivers/nvme/host/pci.c | 8 drivers/pci/iov.c | 7 drivers/pci/pci-acpi.c | 59 - drivers/pci/pci.c | 85 + drivers/pci/pci.h | 5 drivers/pci/pcie/aer.c | 3 drivers/pci/probe.c | 32 drivers/pci/quirks.c | 15 drivers/pci/remove.c | 5 drivers/pci/setup-bus.c | 57 - drivers/pci/setup-res.c | 74 - drivers/pci/vgaarb.c | 17 drivers/pci/xen-pcifront.c | 4 drivers/platform/x86/dell/dell-wmi-base.c | 6 drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c | 1 drivers/platform/x86/thinkpad_acpi.c | 6 drivers/pnp/quirks.c | 29 drivers/regulator/pca9450-regulator.c | 41 drivers/remoteproc/mtk_scp.c | 39 drivers/remoteproc/qcom_sysmon.c | 2 drivers/s390/block/dasd_eckd.c | 16 drivers/s390/crypto/zcrypt_ccamisc.c | 12 drivers/s390/crypto/zcrypt_cex4.c | 3 drivers/scsi/lpfc/lpfc_init.c | 2 drivers/scsi/lpfc/lpfc_sli.c | 36 drivers/scsi/lpfc/lpfc_sli4.h | 3 drivers/scsi/mpi3mr/mpi3mr_fw.c | 34 drivers/scsi/pm8001/pm8001_sas.c | 5 drivers/scsi/scsi_scan.c | 7 drivers/scsi/ses.c | 5 drivers/scsi/storvsc_drv.c | 5 drivers/soc/bcm/bcm2835-power.c | 18 drivers/soc/fsl/qbman/qman.c | 24 drivers/spi/spi-cadence-quadspi.c | 34 drivers/spi/spi.c | 25 drivers/staging/media/tegra-video/vi.c | 27 drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 15 drivers/staging/rtl8723bs/core/rtw_mlme.c | 5 drivers/target/target_core_configfs.c | 15 drivers/tty/serial/8250/8250_dma.c | 15 drivers/tty/serial/8250/8250_pci.c | 17 drivers/tty/serial/8250/8250_port.c | 6 drivers/tty/serial/uartlite.c | 1 drivers/ufs/core/ufshcd.c | 35 drivers/usb/cdns3/core.c | 11 drivers/usb/class/cdc-acm.c | 5 drivers/usb/class/cdc-acm.h | 1 drivers/usb/class/cdc-wdm.c | 4 drivers/usb/class/usbtmc.c | 6 drivers/usb/core/message.c | 100 +- drivers/usb/core/phy.c | 8 drivers/usb/core/quirks.c | 16 drivers/usb/gadget/function/f_mass_storage.c | 12 drivers/usb/gadget/function/f_tcm.c | 14 drivers/usb/host/xhci.c | 4 drivers/usb/image/mdc800.c | 6 drivers/usb/misc/uss720.c | 2 drivers/usb/misc/yurex.c | 2 drivers/usb/renesas_usbhs/common.c | 9 drivers/usb/roles/class.c | 7 drivers/usb/serial/f81232.c | 77 + drivers/xen/privcmd.c | 73 + drivers/xen/xen-acpi-processor.c | 7 fs/binfmt_misc.c | 4 fs/btrfs/ctree.h | 7 fs/btrfs/disk-io.c | 28 fs/btrfs/extent_io.c | 3 fs/btrfs/extent_io.h | 3 fs/btrfs/free-space-cache.c | 5 fs/btrfs/inode.c | 19 fs/btrfs/ioctl.c | 24 fs/btrfs/send.c | 4 fs/btrfs/transaction.c | 16 fs/btrfs/tree-checker.c | 4 fs/btrfs/uuid-tree.c | 46 fs/ceph/dir.c | 15 fs/dlm/lock.c | 10 fs/eventpoll.c | 5 fs/ext4/ext4.h | 9 fs/ext4/extents.c | 312 +++--- fs/ext4/extents_status.c | 12 fs/ext4/extents_status.h | 4 fs/ext4/fast_commit.c | 8 fs/ext4/inline.c | 12 fs/ext4/inode.c | 8 fs/ext4/mballoc.c | 41 fs/ext4/migrate.c | 5 fs/ext4/move_extent.c | 7 fs/f2fs/data.c | 5 fs/gfs2/util.c | 31 fs/iomap/buffered-io.c | 7 fs/nfsd/nfs4xdr.c | 9 fs/nfsd/nfsctl.c | 31 fs/nfsd/state.h | 17 fs/ntfs3/super.c | 5 fs/smb/client/cifsencrypt.c | 3 fs/smb/client/cifsfs.c | 9 fs/smb/client/cifsglob.h | 11 fs/smb/client/cifsproto.h | 1 fs/smb/client/connect.c | 5 fs/smb/client/dir.c | 1 fs/smb/client/file.c | 29 fs/smb/client/misc.c | 41 fs/smb/client/smb2ops.c | 14 fs/smb/client/smb2pdu.c | 22 fs/smb/client/smb2transport.c | 4 fs/smb/server/auth.c | 26 fs/smb/server/smb2pdu.c | 17 fs/squashfs/cache.c | 3 fs/xfs/xfs_bmap_item.c | 3 fs/xfs/xfs_dquot.c | 8 fs/xfs/xfs_log.c | 2 include/asm-generic/tlb.h | 77 + include/linux/bpf.h | 6 include/linux/hugetlb.h | 17 include/linux/indirect_call_wrapper.h | 18 include/linux/ioport.h | 32 include/linux/irqchip/arm-gic-v3.h | 1 include/linux/mlx5/mlx5_ifc.h | 4 include/linux/mm_types.h | 1 include/linux/mmc/host.h | 9 include/linux/pci.h | 14 include/linux/security.h | 1 include/linux/skbuff.h | 12 include/linux/stmmac.h | 1 include/linux/uprobes.h | 1 include/linux/usb.h | 8 include/net/act_api.h | 1 include/net/bluetooth/hci_core.h | 3 include/net/netfilter/nf_tables.h | 7 include/net/sch_generic.h | 38 include/net/tc_act/tc_gate.h | 33 include/net/tc_act/tc_ife.h | 4 include/net/udp_tunnel.h | 2 include/sound/soc.h | 2 include/trace/events/kmem.h | 8 io_uring/io-wq.c | 2 io_uring/kbuf.c | 8 kernel/bpf/devmap.c | 22 kernel/bpf/syscall.c | 3 kernel/bpf/trampoline.c | 4 kernel/bpf/verifier.c | 4 kernel/cgroup/cgroup.c | 1 kernel/events/core.c | 42 kernel/events/uprobes.c | 10 kernel/fork.c | 2 kernel/kprobes.c | 47 - kernel/rcu/tree_nocb.h | 5 kernel/sched/fair.c | 6 kernel/sched/idle.c | 45 kernel/time/time.c | 171 +++ kernel/trace/trace.c | 6 kernel/trace/trace_events.c | 51 - kernel/trace/trace_events_trigger.c | 3 lib/bootconfig.c | 9 mm/hugetlb.c | 143 +-- mm/kfence/core.c | 22 mm/mmu_gather.c | 33 mm/rmap.c | 25 net/atm/lec.c | 26 net/batman-adv/bat_iv_ogm.c | 3 net/batman-adv/bat_v_elp.c | 10 net/batman-adv/hard-interface.c | 8 net/batman-adv/hard-interface.h | 1 net/bluetooth/hci_core.c | 34 net/bluetooth/hci_sync.c | 2 net/bluetooth/hidp/core.c | 16 net/bluetooth/l2cap_core.c | 31 net/bluetooth/smp.c | 2 net/bridge/br_device.c | 2 net/bridge/br_input.c | 2 net/can/bcm.c | 1 net/ceph/auth.c | 6 net/ceph/messenger_v2.c | 31 net/ceph/mon_client.c | 6 net/core/dev.c | 2 net/core/filter.c | 23 net/dsa/dsa2.c | 7 net/ipv4/icmp.c | 4 net/ipv4/tcp.c | 3 net/ipv4/tcp_input.c | 18 net/ipv4/tcp_ipv4.c | 3 net/ipv4/tcp_offload.c | 74 + net/ipv4/udp_offload.c | 3 net/ipv6/ip6_output.c | 35 net/ipv6/route.c | 11 net/ipv6/tcp_ipv6.c | 3 net/ipv6/tcpv6_offload.c | 65 + net/l2tp/l2tp_ppp.c | 25 net/mac80211/debugfs.c | 14 net/mac80211/link.c | 2 net/mac80211/mesh.c | 6 net/mctp/route.c | 11 net/mptcp/pm.c | 2 net/mptcp/pm_netlink.c | 72 + net/mptcp/protocol.h | 2 net/ncsi/ncsi-aen.c | 3 net/ncsi/ncsi-rsp.c | 16 net/netfilter/nf_conntrack_h323_asn1.c | 4 net/netfilter/nf_conntrack_netlink.c | 67 - net/netfilter/nf_conntrack_sip.c | 6 net/netfilter/nf_tables_api.c | 8 net/netfilter/nfnetlink_cthelper.c | 8 net/netfilter/nfnetlink_osf.c | 13 net/netfilter/nfnetlink_queue.c | 4 net/netfilter/nft_compat.c | 6 net/netfilter/nft_ct.c | 9 net/netfilter/nft_log.c | 2 net/netfilter/nft_meta.c | 2 net/netfilter/nft_numgen.c | 2 net/netfilter/nft_set_pipapo.c | 123 ++ net/netfilter/nft_set_pipapo.h | 2 net/netfilter/nft_tunnel.c | 5 net/netfilter/xt_CT.c | 4 net/netfilter/xt_IDLETIMER.c | 6 net/netfilter/xt_dccp.c | 4 net/netfilter/xt_tcpudp.c | 6 net/netfilter/xt_time.c | 4 net/nfc/nci/core.c | 21 net/nfc/nci/data.c | 12 net/nfc/rawsock.c | 11 net/rose/af_rose.c | 5 net/sched/act_ct.c | 6 net/sched/act_gate.c | 262 +++-- net/sched/act_ife.c | 93 - net/sched/cls_api.c | 7 net/sched/cls_u32.c | 13 net/sched/sch_ets.c | 12 net/sched/sch_generic.c | 27 net/sched/sch_teql.c | 8 net/smc/af_smc.c | 23 net/smc/smc.h | 5 net/smc/smc_close.c | 2 net/sunrpc/cache.c | 26 net/sunrpc/xprtrdma/verbs.c | 7 net/tipc/socket.c | 2 net/wireless/core.c | 4 net/wireless/core.h | 4 net/wireless/pmsr.c | 1 net/wireless/radiotap.c | 4 net/wireless/scan.c | 14 security/security.c | 1 sound/core/pcm_lib.c | 11 sound/core/pcm_native.c | 25 sound/pci/hda/patch_conexant.c | 11 sound/soc/amd/acp3x-rt5682-max9836.c | 9 sound/soc/amd/yc/acp6x-mach.c | 14 sound/soc/qcom/qdsp6/q6apm-dai.c | 1 sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 1 sound/soc/qcom/qdsp6/q6apm.c | 1 sound/soc/soc-core.c | 35 sound/usb/endpoint.c | 10 sound/usb/midi.c | 3 sound/usb/mixer_scarlett2.c | 2 sound/usb/quirks.c | 4 sound/usb/validate.c | 2 tools/bootconfig/main.c | 7 tools/testing/kunit/kunit.py | 281 +++--- tools/testing/kunit/kunit_config.py | 4 tools/testing/kunit/kunit_kernel.py | 42 tools/testing/kunit/kunit_parser.py | 171 ++- tools/testing/kunit/kunit_tool_test.py | 120 ++ tools/testing/kunit/run_checks.py | 4 tools/testing/kunit/test_data/test_parse_ktap_output.log | 8 tools/testing/kunit/test_data/test_parse_subtest_header.log | 7 tools/testing/selftests/net/amt.sh | 7 tools/testing/selftests/net/mptcp/mptcp_join.sh | 36 tools/testing/selftests/net/mptcp/simult_flows.sh | 11 497 files changed, 5764 insertions(+), 2901 deletions(-) A1RM4X (1): USB: add QUIRK_NO_BOS for video capture several devices Adrian Hunter (3): i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor Al Viro (1): unshare: fix unshare_fs() handling Alan Stern (3): USB: usbcore: Introduce usb_bulk_msg_killable() USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts USB: core: Limit the length of unkillable synchronous timeouts Alban Bedel (1): can: mcp251x: fix deadlock in error path of mcp251x_open Alex Deucher (10): drm/amdgpu: keep vga memory on MacBooks with switchable graphics drm/amdgpu/mmhub2.0: add bounds checking for cid drm/amdgpu/mmhub2.3: add bounds checking for cid drm/amdgpu/mmhub3.0.1: add bounds checking for cid drm/amdgpu/mmhub3.0.2: add bounds checking for cid drm/amdgpu/mmhub3.0: add bounds checking for cid drm/radeon: apply state adjust rules to some additional HAINAN vairants drm/amdgpu: apply state adjust rules to some additional HAINAN vairants drm/amdgpu: use proper DC check in amdgpu_display_supported_domains() drm/amdgpu: clarify DC checks Alexander Aring (1): dlm: fix possible lkb_resource null dereference Alexander Pantyukhin (1): kunit: kunit.py extract handlers Alexander Potapenko (2): mm/kfence: fix KASAN hardware tag faults during late enablement mm/kfence: disable KFENCE upon KASAN HW tags enablement Alok Tiwari (3): i40e: fix src IP mask checks and memcpy argument names in cloud filter octeontx2-af: devlink: fix NIX RAS reporter recovery condition octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status Alper Ak (1): media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() Alysa Liu (1): drm/amdgpu: Fix use-after-free race in VM acquire Amadeusz Sławiński (1): ASoC: core: Do not call link_exit() on uninitialized rtd objects Anas Iqbal (1): net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths Andreas Gruenbacher (1): gfs2: No more self recovery Andrew Lunn (1): net: phy: register phy led_triggers during probe to avoid AB-BA deadlock Andrii Melnychenko (1): netfilter: nft_ct: add seqadj extension for natted connections Andy Shevchenko (1): device property: Allow secondary lookup in fwnode_get_next_child_node() Ankit Garg (1): gve: defer interrupt enabling until NAPI registration Antoniu Miclaus (5): iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() iio: gyro: mpu3050-core: fix pm_runtime error handling iio: gyro: mpu3050-i2c: fix pm_runtime error handling iio: light: bh1780: fix PM runtime leak on error path Ariel Silver (1): media: dvb-net: fix OOB access in ULE extension header tables Azamat Almazbek uulu (1): ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table Baokun Li (5): ext4: make ext4_es_remove_extent() return void ext4: get rid of ppath in ext4_find_extent() ext4: get rid of ppath in ext4_ext_create_new_leaf() ext4: get rid of ppath in ext4_ext_insert_extent() ext4: get rid of ppath in ext4_split_extent_at() Bart Van Assche (5): scsi: ufs: core: Always initialize the UIC done completion wifi: cw1200: Fix locking in error paths wifi: wlcore: Fix a locking bug scsi: ufs: core: Fix handling of lrbp->cmd PM: runtime: Fix a race condition related to device removal Ben Dooks (1): ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() Bjorn Andersson (1): remoteproc: sysmon: Correct subsys_name_len type in QMI request Bjorn Helgaas (1): PCI: Fix printk field formatting Brad Spengler (1): drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release Brian Foster (1): ext4: fix dirtyclusters double decrement on fs shutdown Calvin Owens (1): tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G Casey Connolly (1): ASoC: detect empty DMI strings Catalin Marinas (1): arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation Cezary Rojewski (1): ASoC: core: Exit all links before removing their components Chao Yu (1): f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode Chen Ni (2): ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() Chengfeng Ye (1): mctp: route: hold key->lock in mctp_flow_prepare_output() Chintan Vankar (1): net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table Chris Spencer (1): iio: chemical: bme680: Fix measurement wait duration calculation Christian Eggers (3): Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Christoffer Sandberg (1): usb/core/quirks: Add Huawei ME906S-device to wakeup quirk Christophe JAILLET (1): i2c: fsi: Fix a potential leak in fsi_i2c_probe() Christophe Leroy (CS GROUP) (1): powerpc/uaccess: Fix inline assembly for clang build on PPC32 Chuck Lever (1): NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd Chunyan Zhang (1): riscv: stacktrace: Disable KASAN checks for non-current tasks Cosmin Ratiu (1): net/mlx5: Fix deadlock between devlink lock and esw->wq Daniel Golle (1): mtd: spinand: macronix: use scratch buffer for DMA operation Daniel Hodges (1): wifi: libertas: fix use-after-free in lbs_free_adapter() Daniel Jurgens (2): net/mlx5: IFC updates for disabled host PF net/mlx5: Query to see if host PF is disabled Daniel Latypov (6): kunit: tool: print summary of failed tests if a few failed out of a lot kunit: tool: make --json do nothing if --raw_ouput is set kunit: tool: don't include KTAP headers and the like in the test log kunit: tool: make parser preserve whitespace when printing test log kunit: tool: remove unused imports and variables kunit: tool: fix pre-existing `mypy --strict` errors and update run_checks.py Daniil Dulov (1): wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() Darrick J. Wong (2): xfs: fix undersized l_iclog_roundoff values iomap: reject delalloc mappings during writeback Dave Airlie (1): nouveau/dpcd: return EBUSY for aux xfer if the device is asleep David Dull (1): netfilter: x_tables: guard option walkers against 1-byte tail reads David Hildenbrand (Red Hat) (3): mm/hugetlb: fix hugetlb_pmd_shared() mm/hugetlb: fix two comments related to huge_pmd_unshare() mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather David Thomson (1): xen/acpi-processor: fix _CST detection using undersized evaluation buffer Davide Caratti (1): net/sched: ets: fix divide by zero in the offload path Dipayaan Roy (1): net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown Dmitry Baryshkov (1): Bluetooth: qca: fix ROM version reading on WCN3998 chips Duoming Zhou (1): wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work Eric Badger (1): xprtrdma: Decrement re_receiving on the early exit paths Eric Biggers (3): smb: client: Compare MACs in constant time ksmbd: Compare MACs in constant time net/tcp-md5: Fix MAC comparison to be constant-time Eric Dumazet (5): indirect_call_wrapper: do not reevaluate function pointer ipv6: use RCU in ip6_xmit() l2tp: do not use sock_hold() in pppol2tp_session_get_sock() net: add skb_header_pointer_careful() helper net/sched: cls_u32: use skb_header_pointer_careful() Ethan Nelson-Moore (1): net: arcnet: com20020-pci: fix support for 2.5Mbit cards Fan Wu (2): usb: renesas_usbhs: fix use-after-free in ISR during device removal net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Fedor Pchelkin (3): net: macb: fix use-after-free access to PTP clock ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths net: macb: fix uninitialized rx_fs_lock Felix Fietkau (2): net: add support for segmenting TCP fraglist GSO packets net: gso: fix tcp fraglist segmentation after pull from frag_list Felix Gu (3): drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() firmware: arm_scpi: Fix device_node reference leak in probe path Fernando Fernandez Mancera (2): net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled Filipe Manana (4): btrfs: fix transaction abort on file creation due to name hash collision btrfs: abort transaction on failure to update root in the received subvol ioctl btrfs: fix transaction abort when snapshotting received subvolumes btrfs: fix transaction abort on set received ioctl due to item overflow Finn Thain (1): mtd: Avoid boot crash in RedBoot partition table parser Florian Westphal (3): netfilter: ctnetlink: remove refcounting in expectation dumpers netfilter: nf_tables: de-constify set commit ops function argument netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Franz Schnyder (1): drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used Frederic Weisbecker (1): net: Handle napi_schedule() calls from non-interrupt Frieder Schrempf (1): regulator: pca9450: Make IRQ optional Gabor Juhos (1): usb: core: don't power off roothub PHYs if phy_set_mode() fails Gal Pressman (1): net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery Geoffrey D. Bennett (1): ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices Greg Kroah-Hartman (11): nfc: pn533: properly drop the usb interface reference on disconnect net: usb: kaweth: validate USB endpoints net: usb: kalmia: validate USB endpoints net: usb: pegasus: validate USB endpoints can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message can: ucan: Fix infinite loop from zero-length messages can: usb: etas_es58x: correctly anchor the urb in the read bulk callback HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them usb: misc: uss720: properly clean up reference in uss720_probe() staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Linux 6.1.167 Guanghui Feng (1): iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry Guchun Chen (1): drm/amdgpu: drop redundant sched job cleanup when cs is aborted Guenter Roeck (3): dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler tracing: Add NULL pointer check to trigger_data_free() wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Gui-Dong Han (1): hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race Guodong Xu (1): dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Haiyue Wang (1): mctp: i2c: fix skb memory leak in receive path Hangbin Liu (1): bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states Harald Freudenberger (1): s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute Heiko Carstens (1): s390/xor: Fix xor_xc_2() inline assembly constraints Helge Deller (3): parisc: Increase initial mapping to 64 MB with KALLSYMS parisc: Fix initial page table creation for boot parisc: Check kernel mapping earlier at bootup Henrique Carvalho (1): smb: client: fix iface port assignment in parse_server_interfaces Hongyu Xie (1): usb: cdns3: remove redundant if branch Huacai Chen (1): net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz Huiwen He (1): tracing: Fix syscall events activation by ensuring refcount hits zero Hyunwoo Kim (4): netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() ksmbd: fix use-after-free of share_conf in compound request Håkon Bugge (1): PCI/ACPI: Restrict program_hpx_type2() to AER bits Ian Forbes (1): drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Ian Ray (2): net: nfc: nci: Fix zero-length proprietary notifications NFC: nxp-nci: allow GPIOs to sleep Ilpo Järvinen (3): resource: Add resource set range and size helpers PCI: Use resource_set_range() that correctly sets ->end serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Ilya Dryomov (3): libceph: reject preamble if control segment is empty libceph: prevent potential out-of-bounds reads in process_message_header() libceph: admit message frames only in CEPH_CON_S_OPEN state Ioana Ciornei (1): dpaa2-switch: do not clear any interrupts automatically Ira Weiny (1): nvdimm/bus: Fix potential use after free in asynchronous initialization J. Neuschäfer (1): powerpc: 83xx: km83xx: Fix keymile vendor prefix Jakub Kicinski (6): ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() nfc: nci: free skb on nci_transceive early error paths nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback nfc: rawsock: cancel tx_work before socket teardown eth: bnxt: always recalculate features after XDP clearing, fix null-deref net: clear the dst when changing skb protocol Jakub Staniszewski (2): ice: fix retry for AQ command 0x06EE ice: reintroduce retry mechanism for indirect AQ Jamal Hadi Salim (2): net/sched: act_ife: Fix metalist update behavior net/sched: teql: Fix double-free in teql_master_xmit Jan Kara (1): ext4: always allocate blocks only from groups inode can use Jan Kiszka (1): scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT Jane Chu (1): mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count Jann Horn (1): eventpoll: Fix integer overflow in ep_loop_check_proc() Jaskaran Singh (2): Revert "nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()" nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() Jason Gunthorpe (2): IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() Jean-Baptiste Maneyrol (2): iio: imu: inv_icm42600: fix odr switch to the same value iio: imu: inv_icm42600: fix odr switch when turning buffer off Jedrzej Jagielski (1): ixgbevf: fix link setup issue Jeff Layton (2): sunrpc: fix cache_request leak in cache_release nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Jenny Guanni Qu (4): netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case netfilter: xt_time: use unsigned int for monthday bit shift netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Jens Axboe (3): media: dvb-core: fix wrong reinitialization of ringbuffer on reopen io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop io_uring/kbuf: check if target buffer list is still legacy on recycle Jeongjun Park (3): drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() drm/exynos: vidi: fix to avoid directly dereferencing user pointer drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free Ji-Ze Hong (Peter Hong) (1): USB: serial: f81232: fix incomplete serial port generation Jian Zhang (1): net: ncsi: fix skb leak in error paths Jiasheng Jiang (1): usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling Jiayuan Chen (4): atm: lec: fix null-ptr-deref in lec_arp_clear_vccs net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Jibin Zhang (1): net: fix segmentation of forwarding fraglist GRO Joey Gouly (1): arm64: reorganise PAGE_/PROT_ macros Johan Hovold (10): memory: mtk-smi: fix device leaks on common probe memory: mtk-smi: fix device leak on larb probe drm/tegra: dsi: fix device leak on probe bus: omap-ocp2scp: fix OF populate on driver rebind mfd: qcom-pm8xxx: Fix OF populate on driver rebind mfd: omap-usb-host: Fix OF populate on driver rebind clk: tegra: tegra124-emc: fix device leak on set_rate() spi: fix use-after-free on controller registration failure spi: fix statistics allocation i2c: cp2615: fix serial string NULL-deref at probe Johannes Berg (2): wifi: radiotap: reject radiotap with unknown bits wifi: cfg80211: move scan done work to wiphy work John Ripple (1): drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD Jonathan Teh (1): platform/x86: thinkpad_acpi: Fix errors reading battery thresholds Joonwon Kang (1): mailbox: Prevent out-of-bounds access in of_mbox_index_xlate() Josef Bacik (1): btrfs: move btrfs_crc32c_final into free-space-cache.c Josh Law (5): lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() lib/bootconfig: check bounds before writing in __xbc_open_brace() lib/bootconfig: check xbc_init_node() return in override path tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure Juergen Gross (2): xen/privcmd: restrict usage in unprivileged domU xen/privcmd: add boot control for restricted usage in domU Jun Seo (1): ALSA: usb-audio: Use correct version for UAC3 header validation Junxiao Bi (2): scsi: core: Fix refcount leak for tagset_refcnt scsi: core: Fix error handling for scsi_alloc_sdev() Justin Chen (1): net: bcmgenet: increase WoL poll timeout Justin Stitt (1): i2c: cp2615: replace deprecated strncpy with strscpy Kalesh Singh (1): mm/tracing: rss_stat: ensure curr is false from kthread context Kamal Dasu (2): mtd: rawnand: serialize lock/unlock against other NAND operations mtd: rawnand: brcmnand: skip DMA during panic write Keith Busch (1): nvme: fix admin request_queue lifetime Kevin Groeneveld (1): net: fec: handle page_pool_dev_alloc_pages error Kevin Hao (3): net: macb: Shuffle the tx ring before enabling tx net: macb: Introduce gem_init_rx_ring() net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume Khairul Anuar Romli (1): spi: cadence-quadspi: Implement refcount to handle unbind during busy Kim Phillips (1): x86/sev: Allow IBPB-on-Entry feature for SNP guests Kohei Enju (2): bpf: Fix stack-out-of-bounds write in devmap igc: fix missing update of skb->tail in igc_xmit_frame() Koichiro Den (1): net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Kui-Feng Lee (1): bpf: export bpf_link_inc_not_zero. Kuniyuki Iwashima (2): wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. Bluetooth: hci_core: Fix use-after-free in vhci_flush() Kurt Borja (1): platform/x86: dell-wmi: Add audio/mic mute key codes Lang Xu (1): bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim Lang Yu (1): drm/amdgpu: unmap and remove csa_va properly Lars Ellenberg (1): drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Larysa Zaremba (2): xdp: use modulo operation to calculate XDP frag tailroom xdp: produce a warning when calculated tailroom is negative Laurent Pinchart (1): media: tegra-video: Use accessors for pad config 'try_*' fields Long Li (3): net: mana: Ring doorbell at 4 CQ wraparounds xfs: fix integer overflow in bmap intent sort comparator xfs: ensure dquot item is deleted from AIL only after log shutdown Lorenzo Bianconi (2): wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() Luca Ceresoli (2): drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output Luiz Augusto von Dentz (2): Bluetooth: HIDP: Fix possible UAF Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Luka Gejak (1): staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie Lukas Johannes Möller (3): Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() Lukas Schmid (1): iio: potentiometer: mcp4131: fix double application of wiper shift Luke Wang (1): mmc: sdhci: fix timing selection for 1-bit bus width Maarten Lankhorst (1): drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug Maciej Andrzejewski ICEYE (1): serial: uartlite: fix PM runtime usage count underflow on probe Marc Kleine-Budde (1): can: gs_usb: gs_can_open(): always configure bitrates before starting device Marc Zyngier (2): usb: cdc-acm: Restore CAP_BRK functionnality to CH343 irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports Mario Limonciello (2): drm/amd: Drop special case for yellow carp without discovery drm/amd: Set num IP blocks to 0 if discovery fails Marios Makassikis (1): smb: server: fix use-after-free in smb2_open() Mark Harmstone (2): btrfs: fix incorrect key offset in error message in check_dev_extent_item() btrfs: fix compat mask in error messages in btrfs_check_features() Martin Roukala (né Peres) (1): serial: 8250_pci: add support for the AX99100 Masami Hiramatsu (Google) (2): kprobes: Remove unneeded goto kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() Mathias Krause (2): scsi: lpfc: Properly set WC for DPP mapping KVM: x86: Fix KVM_GET_MSRS stack info leak Matt Vollrath (1): e1000/e1000e: Fix leak in DMA error cleanup Matthew Schwartz (1): mmc: sdhci-pci-gli: fix GL9750 DMA write corruption Matthieu Baerts (NGI0) (4): mptcp: pm: avoid sending RM_ADDR over same subflow mptcp: pm: in-kernel: always mark signal+subflow endp as used selftests: mptcp: join: check RM_ADDR not sent over same subflow mptcp: pm: in-kernel: always set ID as avail when rm endp Max Kellermann (1): ceph: fix i_nlink underrun during async unlink Maíra Canal (2): pmdomain: bcm: bcm2835-power: Fix broken reset status read pmdomain: bcm: bcm2835-power: Increase ASB control timeout Mehul Rao (2): tipc: fix divide-by-zero in tipc_sk_filter_connect() ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() Menglong Dong (1): net: tcp: accept old ack during closing Michael Grzeschik (1): Bluetooth: hci_sync: Fix hci_le_create_conn_sync Michal Schmidt (2): ice: remove unused buffer copy code in ice_sq_send_cmd_retry() ice: sleep, don't busy-wait, in the SQ send retry loop Mieczyslaw Nalewaj (2): net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets Mika Westerberg (1): PCI: Introduce pci_dev_for_each_resource() Mike Rapoport (Microsoft) (1): x86/efi: defer freeing of boot services memory Mikulas Patocka (1): dm-verity: disable recursive forward error correction Milen Mitkov (1): media: camss: vfe-480: Multiple outputs support for SM8250 Muhammad Hammad Ijaz (1): net: mvpp2: guard flow control update with global_tx_fc in buffer switching Nam Cao (1): irqchip/sifive-plic: Fix frozen interrupt due to affinity setting Namjae Jeon (1): ksmbd: unset conn->binding on failed binding request Natalie Vock (1): drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink Nathan Gao (1): Revert "selftests: net: amt: wait longer for connection before sending packets" Nikola Z. Ivanov (1): net: usb: aqc111: Do not perform PM inside suspend callback Nuno Sá (2): iio: buffer: fix coding style warnings iio: buffer: Fix wait_queue not being removed Oleg Nesterov (1): x86/uprobes: Fix XOL allocation failure for 32-bit tasks Oleksij Rempel (4): net: usb: lan78xx: fix silent drop of packets with checksum errors net: usb: lan78xx: fix TX byte statistics for small packets net: usb: lan78xx: skip LTM configuration for LAN7850 iio: dac: ds4424: reject -128 RAW value Oliver Hartkopp (1): can: bcm: fix locking for bcm_op runtime updates Oliver Neukum (3): usb: yurex: fix race in probe usb: class: cdc-wdm: fix reordering issue in read code path usb: mdc800: handle signal and read racing Olivier Sobrie (1): mtd: rawnand: pl353: make sure optimal timings are applied Oswald Buddenhagen (1): ALSA: pcm: fix wait_time calculations Ovidiu Panait (1): net: stmmac: Fix error handling in VLAN add and delete paths Pablo Neira Ayuso (5): netfilter: nft_ct: drop pending enqueued packets on removal netfilter: xt_CT: drop pending enqueued packets on template removal netfilter: nf_tables: release flowtable after rcu grace period on error netfilter: nf_tables: missing objects with no memcg accounting netfilter: nft_set_pipapo: prevent overflow in lookup table allocation Paolo Abeni (1): selftests: mptcp: more stable simult_flows tests Paul Chaignon (1): bpf: Forget ranges when refining tnum after JSET Paul Moses (1): net/sched: act_gate: snapshot parameters with RCU on replace Paulo Alcantara (3): smb: client: fix broken multichannel with krb5+signing smb: client: fix atomic open with O_DIRECT & O_SYNC smb: client: fix krb5 mount with username option Peddolla Harshavardhan Reddy (1): wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down Pedro Demarchi Gomes (1): ntfs: set dummy blocksize to read boot_block when mounting Peng Fan (1): regulator: pca9450: Correct interrupt type Penghe Geng (1): mmc: core: Avoid bitfield RMW for claim/retune flags Peter Wang (1): scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume Peter Zijlstra (1): perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Petr Oros (1): iavf: fix VLAN filter lost on add/delete race Phillip Lougher (1): Squashfs: check metadata block offset is within range Piotr Mazek (1): ACPI: PM: Save NVS memory on Lenovo G70-35 Prithvi Tambewagh (1): scsi: target: Fix recursive locking in __configfs_open_file() Przemek Kitszel (1): octeontx2-af: devlink health: use retained error fmsg API Puranjay Mohan (2): PCI: Update BAR # and window messages PCI: Use resource names in PCI log messages Qingye Zhao (1): cgroup: fix race between task migration and iteration Qu Wenruo (2): btrfs: send: check for inline extents in range_is_hole_in_parent() btrfs: do not strictly require dirty metadata threshold for metadata writepages Rae Moar (2): kunit: tool: parse KTAP compliant test output kunit: tool: Add command line interface to filter and report attributes Rafael J. Wysocki (3): sched: idle: Make skipping governor callbacks more consistent sched: idle: Consolidate the handling of two special cases ACPI: processor: Fix previous acpi_processor_errata_piix4() fix Rahul Bukte (1): drm/i915/gt: Check set_default_submission() before deferencing Raju Rangoju (1): amd-xgbe: fix sleep while atomic on suspend/resume Ramanathan Choodamani (1): wifi: mac80211: set default WMM parameters on all links Randy Dunlap (1): time: add kernel-doc in time.c Ranjan Kumar (1): scsi: mpi3mr: Add NULL checks when resetting request and reply queues Raphael Zimmer (2): libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() libceph: Use u32 for non-negative values in ceph_monmap_decode() Raul E Rangel (1): serial: 8250: Fix TX deadlock when using DMA Ravi Hothi (1): ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start Ricardo B. Marlière (1): net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled Richard Genoud (1): soc: fsl: qbman: fix race condition in qman_destroy_fq Russell King (Oracle) (2): net: stmmac: remove support for lpi_intr_o net: stmmac: fix TSO DMA API usage causing oops Salomon Dushimirimana (1): scsi: pm8001: Fix use-after-free in pm8001_queue_command() Sanman Pradhan (2): hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() Sasha Levin (1): Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" Sean Christopherson (7): KVM: x86/pmu: Provide "error" semantics for unsupported-but-known PMU MSRs KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated Seungjin Bae (1): usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() Shashank Balaji (1): x86/apic: Disable x2apic on resume if the kernel expects so Shawn Lin (1): arm64: dts: rockchip: Fix rk356x PCIe range mappings Shuangpeng Bai (1): serial: caif: hold tty->link reference in ldisc_open and ser_release Shuvam Pandey (1): kunit: tool: copy caller args in run_kernel to prevent mutation Shyam Prasad N (1): cifs: open files should not hold ref on superblock Sofia Schneider (1): ACPI: OSI: Add DMI quirk for Acer Aspire One D255 Stefan Haberland (2): s390/dasd: Move quiesce state with pprc swap s390/dasd: Copy detected format information to secondary device Steven Rostedt (1): time/jiffies: Mark jiffies_64_to_clock_t() notrace Sungwoo Kim (2): nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set nvme-pci: Fix race bug in nvme_poll_irqdisable() Sven Eckelmann (1): batman-adv: Avoid double-rtnl_lock ELP metric worker Takashi Iwai (8): ALSA: usb-audio: Cap the packet size pre-calculations ALSA: usb-audio: Use inclusive terms ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 ALSA: usb-audio: Check max frame size for implicit feedback mode, too ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces ALSA: usb-audio: Kill timer properly at removal Thomas Fourier (1): drm/msm: Fix dma_free_attrs() buffer size Thomas Richard (TI) (1): usb: cdns3: fix role switching during resume Thomas Weißschuh (1): ARM: clean up the memset64() C wrapper Thorsten Blum (4): platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data smb: client: Don't log plaintext credentials in cifs_set_cifscreds ksmbd: Don't log keys in SMB3 signing and encryption key generation crypto: atmel-sha204a - Fix OOM ->tfm_count leak Théo Lebrun (1): usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() Tiezhu Yang (1): LoongArch: Give more information if kmem access failed Timur Kristóf (2): drm/amd/display: Add pixel_clock to amd_pp_display_configuration drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) Tom Rix (1): nfsd: define exports_proc_ops with CONFIG_PROC_FS Tomas Henzl (1): scsi: ses: Fix devices attaching to different hosts Tzung-Bi Shih (1): remoteproc: mediatek: Unprepare SCP clock during system suspend Uwe Kleine-König (4): memory: mtk-smi: Convert to platform remove callback returning void bus: omap-ocp2scp: Convert to platform remove callback returning void mfd: qcom-pm8xxx: Convert to platform remove callback returning void mfd: omap-usb-host: Convert to platform remove callback returning void Vahagn Vardanian (1): wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() Victor Nogueira (1): net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks Vimlesh Kumar (2): octeon_ep: Relocate counter updates before NAPI octeon_ep: avoid compiler and IQ/OQ reordering Vincent Guittot (1): sched/fair: Fix pelt clock sync when entering idle Vineeth Karumanchi (1): net: macb: queue tie-off or disable during WOL suspend Vladimir Oltean (6): net: dpaa2: replace dpaa2_mac_is_type_fixed() with dpaa2_mac_is_type_phy() net: dpaa2-switch: assign port_priv->mac after dpaa2_mac_connect() call net: dpaa2-switch replace direct MAC access with dpaa2_switch_port_has_mac() net: dpaa2-switch: serialize changes to priv->mac with a mutex net: dsa: improve shutdown sequence net: enetc: reimplement RFS/RSS memory clearing as PCI quirk Vyacheslav Vahnenko (1): USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed Wei Fang (1): net: enetc: allocate vf_state during PF probes Weiming Shi (3): net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit nfnetlink_osf: validate individual option lengths in fingerprints icmp: fix NULL pointer dereference in icmp_tag_validation() Wenyuan Li (1): can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value Xiang Mei (3): wifi: mac80211: fix NULL deref in mesh_matches_local() udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n net: bonding: fix NULL deref in bond_debug_rlb_hash_show Xu Yang (1): usb: roles: get usb role switch from parent only for usb-b-connector Yang Yang (1): batman-adv: avoid OGM aggregation when skb tailroom is insufficient Yuan Tan (1): netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Zhang Heng (1): ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA Zhang Yi (4): ext4: subdivide EXT4_EXT_DATA_VALID1 ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 ext4: drop extent cache after doing PARTIAL_VALID1 zeroout ext4: drop extent cache when splitting extent fails ZhengYuan Huang (1): btrfs: tree-checker: fix misleading root drop_level error message Zilin Guan (3): media: tegra-video: Fix memory leak in __tegra_channel_try_format() usb: xhci: Fix memory leak in xhci_disable_slot() binfmt_misc: restore write access before closing files opened by open_exec() Ziyi Guo (1): usb: image: mdc800: kill download URB on timeout Zqiang (1): rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access matteo.cotifava (2): ASoC: soc-core: drop delayed_work_pending() check before flush ASoC: soc-core: flush delayed work before removing DAIs and widgets