Skip to content

6.6.99-rc1 review

Greg Kroah-Hartman dri-devel linux-cifs linux-media linux-patches linux-usb lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest109 patches 2 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/109eventpoll: dont decrement ep refcount while still holding the ep mutexfs/eventpoll.c+5 -70 replies
2/109drm/exynos: exynos7_drm_decon: add vblank check in IRQ handlingdrivers/gpu/drm/exynos/exynos7_drm_decon.c+4 -00 replies
3/109ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio modesound/soc/fsl/fsl_asrc.c+2 -10 replies
4/109perf/core: Fix the WARN_ON_ONCE is out of lock protected regionkernel/events/core.c+2 -20 replies
5/109perf: Revert to requiring CAP_SYS_ADMIN for uprobeskernel/events/core.c+1 -10 replies
6/109ASoC: cs35l56: probe() should fail if the device ID is not recognizedsound/soc/codecs/cs35l56-shared.c+1 -10 replies
7/109Bluetooth: hci_sync: Fix not disabling advertising instancenet/bluetooth/hci_sync.c+1 -10 replies
8/109Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connectednet/bluetooth/hci_event.c+3 -00 replies
9/109pinctrl: amd: Clear GPIO debounce for suspenddrivers/pinctrl/pinctrl-amd.c+11 -00 replies
10/109fix proc_sys_compare() handling of in-lookup dentriesfs/proc/inode.c fs/proc/proc_sysctl.c+12 -80 replies
11/109netlink: Fix wraparounds of sk->sk_rmem_alloc.net/netlink/af_netlink.c+49 -320 replies
12/109vsock: fix `vsock_proto` declarationinclude/net/af_vsock.h+1 -10 replies
13/109tipc: Fix use-after-free in tipc_conn_close().net/tipc/topsrv.c+2 -00 replies
14/109tcp: Correct signedness in skb remaining space calculationnet/ipv4/tcp.c+1 -10 replies
15/109vsock: Fix transport_{g2h,h2g} TOCTOUnet/vmw_vsock/af_vsock.c+21 -60 replies
16/109vsock: Fix transport_* TOCTOUnet/vmw_vsock/af_vsock.c+23 -50 replies
17/109vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`net/vmw_vsock/af_vsock.c+2 -00 replies
18/109net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c+11 -130 replies
19/109net: phy: smsc: Fix Auto-MDIX configuration when disabled by strapdrivers/net/phy/smsc.c+2 -10 replies
20/109net: phy: smsc: Force predictable MDI-X state on LAN87xxdrivers/net/phy/smsc.c+28 -10 replies
21/109net: phy: smsc: Fix link failure in forced mode with Auto-MDIXdrivers/net/phy/smsc.c+22 -30 replies
22/109atm: clip: Fix potential null-ptr-deref in to_atmarpd().net/atm/clip.c+29 -150 replies
23/109atm: clip: Fix memory leak of struct clip_vcc.net/atm/clip.c+8 -00 replies
24/109atm: clip: Fix infinite recursive call of clip_push().net/atm/clip.c+2 -00 replies
25/109atm: clip: Fix NULL pointer dereference in vcc_sendmsg()net/atm/clip.c+9 -10 replies
26/109net/sched: Abort __tc_modify_qdisc if parent class does not existnet/sched/sch_api.c+16 -70 replies
27/109rxrpc: Fix bug due to prealloc collisionnet/rxrpc/call_accept.c+1 -00 replies
28/109maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()lib/maple_tree.c+8 -50 replies
29/109perf: build: Setup PKG_CONFIG_LIBDIR for cross compilationtools/build/feature/Makefile tools/perf/Makefile.perf+50 -20 replies
30/109Bluetooth: HCI: Set extended advertising data synchronouslynet/bluetooth/hci_event.c net/bluetooth/hci_sync.c+133 -1160 replies
31/109rxrpc: Fix oops due to non-existence of prealloc backlog structnet/rxrpc/call_accept.c+3 -00 replies
32/109ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()drivers/char/ipmi/ipmi_msghandler.c+2 -10 replies
33/109x86/mce/amd: Add default names for MCA banks and blocksarch/x86/kernel/cpu/mce/amd.c+10 -30 replies
34/109x86/mce/amd: Fix threshold limit resetarch/x86/kernel/cpu/mce/amd.c+7 -80 replies
35/109x86/mce: Dont remove sysfs if thresholding sysfs init failsarch/x86/kernel/cpu/mce/core.c+1 -70 replies
36/109x86/mce: Make sure CMCI banks are cleared during shutdown on Intelarch/x86/kernel/cpu/mce/intel.c+1 -00 replies
37/109KVM: x86/xen: Allow out of range event channel ports in IRQ routing table.arch/x86/kvm/xen.c+13 -20 replies
38/109KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flightarch/x86/kvm/svm/sev.c+4 -00 replies
39/109gre: Fix IPv6 multicast route creation.net/ipv6/addrconf.c+2 -70 replies
40/109md/md-bitmap: fix GPF in bitmap_get_stats()drivers/md/md-bitmap.c+1 -20 replies
41/109pinctrl: qcom: msm: mark certain pins as invalid for interruptsdrivers/pinctrl/qcom/pinctrl-msm.c+20 -00 replies
42/109wifi: prevent A-MSDU attacks in mesh networksnet/wireless/util.c+50 -20 replies
43/109drm/gem: Acquire references on GEM handles for framebuffersdrivers/gpu/drm/drm_gem.c drivers/gpu/drm/drm_gem_framebuffer_helper.c drivers/gpu/drm/drm_internal.h+51 -110 replies
44/109drm/sched: Increment job count before swapping tail spsc queueinclude/drm/spsc_queue.h+3 -10 replies
45/109drm/ttm: fix error handling in ttm_buffer_object_transferdrivers/gpu/drm/ttm/ttm_bo_util.c+7 -60 replies
46/109drm/gem: Fix race in drm_gem_handle_create_tail()drivers/gpu/drm/drm_gem.c include/drm/drm_file.h+12 -10 replies
47/109usb: gadget: u_serial: Fix race condition in TTY wakeupdrivers/usb/gadget/function/u_serial.c+3 -30 replies
48/109Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"drivers/usb/gadget/function/u_serial.c+1 -50 replies
49/109drm/framebuffer: Acquire internal references on GEM handlesdrivers/gpu/drm/drm_framebuffer.c drivers/gpu/drm/drm_gem.c drivers/gpu/drm/drm_gem_framebuffer_helper.c +2 more+68 -260 replies
50/109Revert "ACPI: battery: negate current when discharging"drivers/acpi/battery.c+3 -160 replies
51/109kallsyms: fix build without execinfotools/include/linux/kallsyms.h+4 -00 replies
52/109maple_tree: fix mt_destroy_walk() on root leaf nodelib/maple_tree.c+1 -00 replies
53/109mm: fix the inaccurate memory statistics issue for usersfs/proc/task_mmu.c include/linux/mm.h+12 -70 replies
54/109scripts/gdb: fix interrupts display after MCP on x86scripts/gdb/linux/interrupts.py+1 -10 replies
55/109scripts/gdb: de-reference per-CPU MCE interruptsscripts/gdb/linux/interrupts.py+1 -10 replies
56/109scripts/gdb: fix interrupts.py after maple tree conversionscripts/gdb/linux/constants.py.in scripts/gdb/linux/interrupts.py scripts/gdb/linux/mapletree.py +1 more+293 -60 replies
57/109mm/vmalloc: leave lazy MMU mode on PTE mapping errormm/vmalloc.c+15 -70 replies
58/109pwm: mediatek: Ensure to disable clocks in error pathdrivers/pwm/pwm-mediatek.c+8 -50 replies
59/109x86/rdrand: Disable RDSEED on AMD Cyan Skillfisharch/x86/include/asm/msr-index.h arch/x86/kernel/cpu/amd.c tools/arch/x86/include/asm/msr-index.h+9 -00 replies
60/109x86/mm: Disable hugetlb page table sharing on 32-bitarch/x86/Kconfig+1 -10 replies
61/109smb: server: make use of rdma_destroy_qp()fs/smb/server/transport_rdma.c+3 -20 replies
62/109ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()fs/smb/server/vfs.c+1 -00 replies
63/109erofs: fix to add missing tracepoint in erofs_read_folio()fs/erofs/data.c+2 -00 replies
64/109netlink: Fix rmem check in netlink_broadcast_deliver().net/netlink/af_netlink.c+1 -10 replies
65/109netlink: make sure we allow at least one dump skbnet/netlink/af_netlink.c+3 -20 replies
66/109btrfs: remove noinline from btrfs_update_inode()fs/btrfs/inode.c+3 -30 replies
67/109btrfs: remove redundant root argument from btrfs_update_inode_fallback()fs/btrfs/btrfs_inode.h fs/btrfs/inode.c fs/btrfs/transaction.c+8 -80 replies
68/109btrfs: remove redundant root argument from fixup_inode_link_count()fs/btrfs/tree-log.c+9 -110 replies
69/109btrfs: return a btrfs_inode from btrfs_iget_logging()fs/btrfs/tree-log.c+45 -490 replies
70/109btrfs: fix inode lookup error handling during log replayfs/btrfs/tree-log.c+146 -770 replies
71/109usb:cdnsp: remove TRB_FLUSH_ENDPOINT commanddrivers/usb/cdns3/cdnsp-debug.h drivers/usb/cdns3/cdnsp-gadget.c drivers/usb/cdns3/cdnsp-gadget.h +1 more+1 -370 replies
72/109usb: cdnsp: Replace snprintf() with the safer scnprintf() variantdrivers/usb/cdns3/cdnsp-debug.h+177 -1770 replies
73/109usb: cdnsp: Fix issue with CV Bad Descriptor testdrivers/usb/cdns3/cdnsp-debug.h drivers/usb/cdns3/cdnsp-ep0.c drivers/usb/cdns3/cdnsp-gadget.h +1 more+26 -60 replies
74/109usb: dwc3: Abort suspend on soft disconnect failuredrivers/usb/dwc3/core.c drivers/usb/dwc3/gadget.c+16 -150 replies
75/109smb: client: avoid unnecessary reconnects when refreshing referralsfs/smb/client/dfs_cache.c+117 -700 replies
76/109smb: client: fix DFS interlink failoverfs/smb/client/cifsglob.h fs/smb/client/cifsproto.h fs/smb/client/connect.c +6 more+94 -860 replies
77/109cifs: all initializations for tcon should happen in tcon_info_allocfs/smb/client/cifsproto.h fs/smb/client/connect.c fs/smb/client/misc.c+8 -70 replies
78/109wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()drivers/net/wireless/zydas/zd1211rw/zd_mac.c+5 -10 replies
79/109drm/tegra: nvdec: Fix dma_alloc_coherent error checkdrivers/gpu/drm/tegra/nvdec.c+2 -40 replies
80/109md/raid1: Fix stack memory use after return in raid1_reshapedrivers/md/raid1.c+1 -00 replies
81/109raid10: cleanup memleak at raid10_make_requestdrivers/md/raid10.c+8 -20 replies
82/109nbd: fix uaf in nbd_genl_connect() error pathdrivers/block/nbd.c+3 -30 replies
83/109netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()include/net/netfilter/nf_flow_table.h+1 -10 replies
84/109net: appletalk: Fix device refcount leak in atrtr_create()net/appletalk/ddp.c+1 -00 replies
85/109ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeofdrivers/net/ethernet/ibm/ibmvnic.h+6 -20 replies
86/109net: phy: microchip: limit 100M workaround to link-down events on LAN88xxdrivers/net/phy/microchip.c+1 -10 replies
87/109can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug leveldrivers/net/can/m_can/m_can.c+1 -10 replies
88/109net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()drivers/net/ethernet/xilinx/ll_temac_main.c+1 -10 replies
89/109bnxt_en: Fix DCB ETS validationdrivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c+2 -00 replies
90/109bnxt_en: Set DMA unmap len correctly for XDP_REDIRECTdrivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c+1 -10 replies
91/109ublk: sanity check add_dev input for underflowdrivers/block/ublk_drv.c+2 -10 replies
92/109atm: idt77252: Add missing `dma_map_error()`drivers/atm/idt77252.c+5 -00 replies
93/109um: vector: Reduce stack usage in vector_eth_configure()arch/um/drivers/vector_kern.c+13 -290 replies
94/109io_uring: make fallocate be hashed workio_uring/opdef.c+1 -00 replies
95/109ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal micsound/soc/amd/yc/acp6x-mach.c+7 -00 replies
96/109ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100sound/pci/hda/patch_realtek.c+1 -00 replies
97/109net: usb: qmi_wwan: add SIMCom 8230C compositiondrivers/net/usb/qmi_wwan.c+1 -00 replies
98/109HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2drivers/hid/hid-ids.h drivers/hid/hid-lenovo.c drivers/hid/hid-multitouch.c+16 -10 replies
99/109net: mana: Record doorbell physical address in PF modedrivers/net/ethernet/microsoft/mana/gdma_main.c+3 -00 replies
100/109btrfs: fix assertion when building free space treefs/btrfs/free-space-tree.c+12 -40 replies
101/109vt: add missing notification when switching back to text modedrivers/tty/vt/vt.c+1 -00 replies
102/109bpf: Adjust free target to avoid global starvation of LRU mapDocumentation/bpf/map_hash.rst Documentation/bpf/map_lru_hash_update.dot kernel/bpf/bpf_lru_list.c +2 more+52 -440 replies
103/109HID: Add IGNORE quirk for SMARTLINKTECHNOLOGYdrivers/hid/hid-ids.h drivers/hid/hid-quirks.c+4 -00 replies
104/109HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Camerasdrivers/hid/hid-ids.h drivers/hid/hid-quirks.c+4 -00 replies
105/109Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETIDdrivers/input/keyboard/atkbd.c+2 -10 replies
106/109selftests/bpf: adapt one more case in test_lru_map to the new target_freetools/testing/selftests/bpf/test_lru_map.c+18 -150 replies
107/109smb: client: fix potential race in cifs_put_tcon()fs/smb/client/connect.c+1 -30 replies
108/109kasan: remove kasan_find_vm_area() to prevent possible deadlockmm/kasan/report.c+2 -110 replies
109/109ksmbd: fix potential use-after-free in oplock/lease break ackfs/smb/server/smb2pdu.c+9 -200 replies

Reviews trailers per patch

62 of 109 patches have a Reviewed-by or Acked-by.

PatchDaniel BalutaEric DumazetDavid HowellsStefano GarzarellaEricChanSimon HormanMaxime ChevallierAndrew LunnKuniyuki IwashimaJamal Hadi SalimCong WangIan RogersQiuxu ZhuoTony LuckHans de GoedeChristian BraunerNeilBrownMichael S. TsirkinTung NguyenAlexander PotapenkoLiam MerwickJames HoughtonPrashanth KBert KarwatzkiMario LimoncielloBorislav Petkov (AMD)Christian KönigDev JainAboorva DevarajanShakeel ButtSeongJae ParkMichal HockoVlastimil BabkaGary GuoIdo SchimmelRyan RobertsOscar SalvadorDavid HildenbrandVitaly ChikunovTom TalpeyNamjae JeonGao XiangMarek SzyprowskiQu WenruoDavid SterbaJohannes ThumshirnBjorn AnderssonJonathan CavittMatthew BrostJacek LawrynowiczThomas ZimmermannPaul DurrantYu KuaiPablo Neira AyusoDave MarquardtHaren MyneniVincent MailholSreekanth ReddyPeter ChenMing LeiBjørn MorkThinh NguyenAnton ProtopopovStanislav FomichevPaulo Alcantara (Red Hat)Andrey RyabininPaul MenzelMiguel OjedaShuah Khan
SeriesT-b T-b
1/109
2/109
3/109R-b
4/109
5/109
6/109
7/109
8/109
9/109R-b
10/109R-b R-b
11/109
12/109A-b
13/109R-b
14/109R-b R-b
15/109R-b
16/109R-b
17/109R-b
18/109T-b R-b
19/109R-b
20/109R-b
21/109R-b
22/109R-b
23/109R-b
24/109R-b
25/109R-b
26/109A-b R-b
27/109
28/109
29/109T-b
30/109
31/109
32/109
33/109
34/109
35/109R-b R-b T-b
36/109R-b R-b
37/109R-b
38/109T-b R-b T-b R-b
39/109R-b T-b R-b
40/109
41/109R-b
42/109
43/109R-b
44/109R-b
45/109R-b
46/109T-b R-b
47/109R-b
48/109R-b
49/109T-b T-b T-b R-b
50/109
51/109
52/109R-b
53/109R-b T-b A-b A-b A-b R-b
54/109
55/109
56/109
57/109R-b
58/109
59/109
60/109A-b A-b T-b
61/109R-b A-b
62/109A-b
63/109R-b
64/109
65/109R-b T-b
66/109R-b R-b
67/109R-b R-b
68/109R-b R-b
69/109R-b
70/109R-b R-b
71/109A-b
72/109
73/109A-b
74/109A-b
75/109
76/109
77/109R-b
78/109
79/109
80/109R-b
81/109
82/109R-b
83/109R-b
84/109
85/109R-b R-b R-b
86/109R-b
87/109R-b
88/109
89/109R-b
90/109
91/109R-b
92/109R-b
93/109
94/109
95/109
96/109
97/109A-b
98/109
99/109R-b
100/109R-b R-b
101/109
102/109T-b A-b
103/109
104/109
105/109T-b
106/109
107/109
108/109R-b
109/109

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 69 reviewers.

Read the v1 thread

Cover letter [PATCH 6.6 000/109] 6.6.99-rc1 review

This is the start of the stable review cycle for the 6.6.99 release. There are 109 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 17 Jul 2025 13:07:32 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.99-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.99-rc1

Namjae Jeon <[email protected]>
ksmbd: fix potential use-after-free in oplock/lease break ack

Yeoreum Yun <[email protected]>
kasan: remove kasan_find_vm_area() to prevent possible deadlock

Paulo Alcantara <[email protected]>
smb: client: fix potential race in cifs_put_tcon()

Willem de Bruijn <[email protected]>
selftests/bpf: adapt one more case in test_lru_map to the new target_free

Hans de Goede <[email protected]>
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID

Chia-Lin Kao (AceLan) <[email protected]>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

Zhang Heng <[email protected]>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY

Willem de Bruijn <[email protected]>
bpf: Adjust free target to avoid global starvation of LRU map

Nicolas Pitre <[email protected]>
vt: add missing notification when switching back to text mode

Filipe Manana <[email protected]>
btrfs: fix assertion when building free space tree

Long Li <[email protected]>
net: mana: Record doorbell physical address in PF mode

Akira Inoue <[email protected]>
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2

Xiaowei Li <[email protected]>
net: usb: qmi_wwan: add SIMCom 8230C composition

Yasmin Fitzgerald <[email protected]>
ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100

Yuzuru10 <[email protected]>
ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic

Fengnan Chang <[email protected]>
io_uring: make fallocate be hashed work

Tiwei Bie <[email protected]>
um: vector: Reduce stack usage in vector_eth_configure()

Thomas Fourier <[email protected]>

    atm: idt77252: Add missing `dma_map_error()`

Ronnie Sahlberg <[email protected]>
ublk: sanity check add_dev input for underflow

Somnath Kotur <[email protected]>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT

Shravya KN <[email protected]>
bnxt_en: Fix DCB ETS validation

Alok Tiwari <[email protected]>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()

Sean Nyekjaer <[email protected]>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level

Oleksij Rempel <[email protected]>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx

Mingming Cao <[email protected]>
ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof

Kito Xu <[email protected]>
net: appletalk: Fix device refcount leak in atrtr_create()

Eric Dumazet <[email protected]>
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()

Zheng Qixing <[email protected]>
nbd: fix uaf in nbd_genl_connect() error path

Nigel Croxon <[email protected]>
raid10: cleanup memleak at raid10_make_request

Wang Jinchao <[email protected]>
md/raid1: Fix stack memory use after return in raid1_reshape

Mikko Perttunen <[email protected]>
drm/tegra: nvdec: Fix dma_alloc_coherent error check

Daniil Dulov <[email protected]>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()

Shyam Prasad N <[email protected]>
cifs: all initializations for tcon should happen in tcon_info_alloc

Paulo Alcantara <[email protected]>
smb: client: fix DFS interlink failover

Paulo Alcantara <[email protected]>
smb: client: avoid unnecessary reconnects when refreshing referrals

Kuen-Han Tsai <[email protected]>
usb: dwc3: Abort suspend on soft disconnect failure

Pawel Laszczak <[email protected]>
usb: cdnsp: Fix issue with CV Bad Descriptor test

Lee Jones <[email protected]>
usb: cdnsp: Replace snprintf() with the safer scnprintf() variant

Pawel Laszczak <[email protected]>
usb:cdnsp: remove TRB_FLUSH_ENDPOINT command

Filipe Manana <[email protected]>
btrfs: fix inode lookup error handling during log replay

Filipe Manana <[email protected]>
btrfs: return a btrfs_inode from btrfs_iget_logging()

Filipe Manana <[email protected]>
btrfs: remove redundant root argument from fixup_inode_link_count()

Filipe Manana <[email protected]>
btrfs: remove redundant root argument from btrfs_update_inode_fallback()

Filipe Manana <[email protected]>
btrfs: remove noinline from btrfs_update_inode()

Jakub Kicinski <[email protected]>
netlink: make sure we allow at least one dump skb

Kuniyuki Iwashima <[email protected]>
netlink: Fix rmem check in netlink_broadcast_deliver().

Chao Yu <[email protected]>
erofs: fix to add missing tracepoint in erofs_read_folio()

Al Viro <[email protected]>
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()

Stefan Metzmacher <[email protected]>
smb: server: make use of rdma_destroy_qp()

Jann Horn <[email protected]>
x86/mm: Disable hugetlb page table sharing on 32-bit

Mikhail Paulyshka <[email protected]>
x86/rdrand: Disable RDSEED on AMD Cyan Skillfish

Uwe Kleine-König <[email protected]>
pwm: mediatek: Ensure to disable clocks in error path

Alexander Gordeev <[email protected]>
mm/vmalloc: leave lazy MMU mode on PTE mapping error

Florian Fainelli <[email protected]>
scripts/gdb: fix interrupts.py after maple tree conversion

Florian Fainelli <[email protected]>
scripts/gdb: de-reference per-CPU MCE interrupts

Florian Fainelli <[email protected]>
scripts/gdb: fix interrupts display after MCP on x86

Baolin Wang <[email protected]>
mm: fix the inaccurate memory statistics issue for users

Wei Yang <[email protected]>
maple_tree: fix mt_destroy_walk() on root leaf node

Achill Gilgenast <[email protected]>
kallsyms: fix build without execinfo

Rafael J. Wysocki <[email protected]>
Revert "ACPI: battery: negate current when discharging"

Thomas Zimmermann <[email protected]>
drm/framebuffer: Acquire internal references on GEM handles

Kuen-Han Tsai <[email protected]>
Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"

Kuen-Han Tsai <[email protected]>
usb: gadget: u_serial: Fix race condition in TTY wakeup

Simona Vetter <[email protected]>
drm/gem: Fix race in drm_gem_handle_create_tail()

Christian König <[email protected]>
drm/ttm: fix error handling in ttm_buffer_object_transfer

Matthew Brost <[email protected]>
drm/sched: Increment job count before swapping tail spsc queue

Thomas Zimmermann <[email protected]>
drm/gem: Acquire references on GEM handles for framebuffers

Mathy Vanhoef <[email protected]>
wifi: prevent A-MSDU attacks in mesh networks

Bartosz Golaszewski <[email protected]>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts

Håkon Bugge <[email protected]>
md/md-bitmap: fix GPF in bitmap_get_stats()

Guillaume Nault <[email protected]>
gre: Fix IPv6 multicast route creation.

Sean Christopherson <[email protected]>
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight

David Woodhouse <[email protected]>
KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.

JP Kobryn <[email protected]>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel

Yazen Ghannam <[email protected]>
x86/mce: Don't remove sysfs if thresholding sysfs init fails

Yazen Ghannam <[email protected]>
x86/mce/amd: Fix threshold limit reset

Yazen Ghannam <[email protected]>
x86/mce/amd: Add default names for MCA banks and blocks

Dan Carpenter <[email protected]>
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()

David Howells <[email protected]>
rxrpc: Fix oops due to non-existence of prealloc backlog struct

Christian Eggers <[email protected]>
Bluetooth: HCI: Set extended advertising data synchronously

Leo Yan <[email protected]>
perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation

Liam R. Howlett <[email protected]>
maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()

David Howells <[email protected]>
rxrpc: Fix bug due to prealloc collision

Victor Nogueira <[email protected]>
net/sched: Abort __tc_modify_qdisc if parent class does not exist

Yue Haibing <[email protected]>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()

Kuniyuki Iwashima <[email protected]>
atm: clip: Fix infinite recursive call of clip_push().

Kuniyuki Iwashima <[email protected]>
atm: clip: Fix memory leak of struct clip_vcc.

Kuniyuki Iwashima <[email protected]>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().

Oleksij Rempel <[email protected]>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX

Oleksij Rempel <[email protected]>
net: phy: smsc: Force predictable MDI-X state on LAN87xx

Oleksij Rempel <[email protected]>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap

EricChan <[email protected]>
net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2

Michal Luczaj <[email protected]>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also transport_local

Michal Luczaj <[email protected]>
vsock: Fix transport_* TOCTOU

Michal Luczaj <[email protected]>
vsock: Fix transport_{g2h,h2g} TOCTOU

Jiayuan Chen <[email protected]>
tcp: Correct signedness in skb remaining space calculation

Kuniyuki Iwashima <[email protected]>
tipc: Fix use-after-free in tipc_conn_close().

Stefano Garzarella <[email protected]>
vsock: fix vsock_proto declaration

Kuniyuki Iwashima <[email protected]>

    netlink: Fix wraparounds of sk->sk_rmem_alloc.

Al Viro <[email protected]>
fix proc_sys_compare() handling of in-lookup dentries

Mario Limonciello <[email protected]>
pinctrl: amd: Clear GPIO debounce for suspend

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Fix not disabling advertising instance

Richard Fitzgerald <[email protected]>
ASoC: cs35l56: probe() should fail if the device ID is not recognized

Peter Zijlstra <[email protected]>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes

Luo Gengkun <[email protected]>
perf/core: Fix the WARN_ON_ONCE is out of lock protected region

Shengjiu Wang <[email protected]>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode

Kaustabh Chakraborty <[email protected]>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling

Linus Torvalds <[email protected]>
eventpoll: don't decrement ep refcount while still holding the ep mutex

-------------

Diffstat:

 Documentation/bpf/map_hash.rst                     |   8 +-
 Documentation/bpf/map_lru_hash_update.dot          |   6 +-
 Makefile                                           |   4 +-
 arch/um/drivers/vector_kern.c                      |  42 +--
 arch/x86/Kconfig                                   |   2 +-
 arch/x86/include/asm/msr-index.h                   |   1 +
 arch/x86/kernel/cpu/amd.c                          |   7 +
 arch/x86/kernel/cpu/mce/amd.c                      |  28 +-
 arch/x86/kernel/cpu/mce/core.c                     |   8 +-
 arch/x86/kernel/cpu/mce/intel.c                    |   1 +
 arch/x86/kvm/svm/sev.c                             |   4 +
 arch/x86/kvm/xen.c                                 |  15 +-
 drivers/acpi/battery.c                             |  19 +-
 drivers/atm/idt77252.c                             |   5 +
 drivers/block/nbd.c                                |   6 +-
 drivers/block/ublk_drv.c                           |   3 +-
 drivers/char/ipmi/ipmi_msghandler.c                |   3 +-
 drivers/gpu/drm/drm_framebuffer.c                  |  31 +-
 drivers/gpu/drm/drm_gem.c                          |  74 ++++-
 drivers/gpu/drm/drm_internal.h                     |   2 +
 drivers/gpu/drm/exynos/exynos7_drm_decon.c         |   4 +
 drivers/gpu/drm/tegra/nvdec.c                      |   6 +-
 drivers/gpu/drm/ttm/ttm_bo_util.c                  |  13 +-
 drivers/hid/hid-ids.h                              |   6 +
 drivers/hid/hid-lenovo.c                           |   8 +
 drivers/hid/hid-multitouch.c                       |   8 +-
 drivers/hid/hid-quirks.c                           |   3 +
 drivers/input/keyboard/atkbd.c                     |   3 +-
 drivers/md/md-bitmap.c                             |   3 +-
 drivers/md/raid1.c                                 |   1 +
 drivers/md/raid10.c                                |  10 +-
 drivers/net/can/m_can/m_can.c                      |   2 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c      |   2 +
 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c      |   2 +-
 drivers/net/ethernet/ibm/ibmvnic.h                 |   8 +-
 drivers/net/ethernet/microsoft/mana/gdma_main.c    |   3 +
 drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c |  24 +-
 drivers/net/ethernet/xilinx/ll_temac_main.c        |   2 +-
 drivers/net/phy/microchip.c                        |   2 +-
 drivers/net/phy/smsc.c                             |  57 +++-
 drivers/net/usb/qmi_wwan.c                         |   1 +
 drivers/net/wireless/zydas/zd1211rw/zd_mac.c       |   6 +-
 drivers/pinctrl/pinctrl-amd.c                      |  11 +
 drivers/pinctrl/qcom/pinctrl-msm.c                 |  20 ++
 drivers/pwm/pwm-mediatek.c                         |  13 +-
 drivers/tty/vt/vt.c                                |   1 +
 drivers/usb/cdns3/cdnsp-debug.h                    | 358 ++++++++++-----------
 drivers/usb/cdns3/cdnsp-ep0.c                      |  18 +-
 drivers/usb/cdns3/cdnsp-gadget.c                   |   6 +-
 drivers/usb/cdns3/cdnsp-gadget.h                   |  11 +-
 drivers/usb/cdns3/cdnsp-ring.c                     |  27 +-
 drivers/usb/dwc3/core.c                            |   9 +-
 drivers/usb/dwc3/gadget.c                          |  22 +-
 drivers/usb/gadget/function/u_serial.c             |  12 +-
 fs/btrfs/btrfs_inode.h                             |   2 +-
 fs/btrfs/free-space-tree.c                         |  16 +-
 fs/btrfs/inode.c                                   |  18 +-
 fs/btrfs/transaction.c                             |   2 +-
 fs/btrfs/tree-log.c                                | 331 +++++++++++--------
 fs/erofs/data.c                                    |   2 +
 fs/eventpoll.c                                     |  12 +-
 fs/proc/inode.c                                    |   2 +-
 fs/proc/proc_sysctl.c                              |  18 +-
 fs/proc/task_mmu.c                                 |  14 +-
 fs/smb/client/cifsglob.h                           |   3 +
 fs/smb/client/cifsproto.h                          |  13 +-
 fs/smb/client/connect.c                            |  47 ++-
 fs/smb/client/dfs.c                                |  73 ++---
 fs/smb/client/dfs.h                                |  42 ++-
 fs/smb/client/dfs_cache.c                          | 198 +++++++-----
 fs/smb/client/fs_context.h                         |   1 +
 fs/smb/client/misc.c                               |   9 +
 fs/smb/client/namespace.c                          |   2 +-
 fs/smb/server/smb2pdu.c                            |  29 +-
 fs/smb/server/transport_rdma.c                     |   5 +-
 fs/smb/server/vfs.c                                |   1 +
 include/drm/drm_file.h                             |   3 +
 include/drm/drm_framebuffer.h                      |   7 +
 include/drm/spsc_queue.h                           |   4 +-
 include/linux/mm.h                                 |   5 +
 include/net/af_vsock.h                             |   2 +-
 include/net/netfilter/nf_flow_table.h              |   2 +-
 io_uring/opdef.c                                   |   1 +
 kernel/bpf/bpf_lru_list.c                          |   9 +-
 kernel/bpf/bpf_lru_list.h                          |   1 +
 kernel/events/core.c                               |   6 +-
 lib/maple_tree.c                                   |  14 +-
 mm/kasan/report.c                                  |  13 +-
 mm/vmalloc.c                                       |  22 +-
 net/appletalk/ddp.c                                |   1 +
 net/atm/clip.c                                     |  64 +++-
 net/bluetooth/hci_event.c                          |  39 +--
 net/bluetooth/hci_sync.c                           | 215 ++++++++-----
 net/ipv4/tcp.c                                     |   2 +-
 net/ipv6/addrconf.c                                |   9 +-
 net/netlink/af_netlink.c                           |  90 +++---
 net/rxrpc/call_accept.c                            |   4 +
 net/sched/sch_api.c                                |  23 +-
 net/tipc/topsrv.c                                  |   2 +
 net/vmw_vsock/af_vsock.c                           |  57 +++-
 net/wireless/util.c                                |  52 ++-
 scripts/gdb/linux/constants.py.in                  |   7 +
 scripts/gdb/linux/interrupts.py                    |  16 +-
 scripts/gdb/linux/mapletree.py                     | 252 +++++++++++++++
 scripts/gdb/linux/xarray.py                        |  28 ++
 sound/pci/hda/patch_realtek.c                      |   1 +
 sound/soc/amd/yc/acp6x-mach.c                      |   7 +
 sound/soc/codecs/cs35l56-shared.c                  |   2 +-
 sound/soc/fsl/fsl_asrc.c                           |   3 +-
 tools/arch/x86/include/asm/msr-index.h             |   1 +
 tools/build/feature/Makefile                       |  25 +-
 tools/include/linux/kallsyms.h                     |   4 +
 tools/perf/Makefile.perf                           |  27 +-
 tools/testing/selftests/bpf/test_lru_map.c         | 105 +++---
 114 files changed, 1887 insertions(+), 1029 deletions(-)