Skip to content

6.6.118-rc1 review

Greg Kroah-Hartman linux-patches linux-tegra lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest86 patches 8 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/86timers: Fix NULL function pointer race in timer_shutdown_sync()kernel/time/timer.c+4 -30 replies
2/86HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155drivers/hid/hid-ids.h drivers/hid/hid-quirks.c+14 -30 replies
3/86mtd: rawnand: cadence: fix DMA device NULL pointer dereferencedrivers/mtd/nand/raw/cadence-nand-controller.c+2 -10 replies
4/86mtdchar: fix integer overflow in read/write ioctlsdrivers/mtd/mtdchar.c+4 -20 replies
5/86shmem: fix tmpfs reconfiguration (remount) when noswap is setmm/shmem.c+7 -80 replies
6/86exfat: check return value of sb_min_blocksize in exfat_read_boot_sectorfs/exfat/super.c+4 -10 replies
7/86mptcp: Disallow MPTCP subflows from sockmapnet/mptcp/subflow.c+8 -00 replies
8/86mptcp: Fix proto fallback detection with BPFnet/mptcp/protocol.c+4 -20 replies
9/86ata: libata-scsi: Fix system suspend for a security locked drivedrivers/ata/libata-scsi.c include/linux/ata.h+8 -00 replies
10/86MIPS: mm: Prevent a TLB shutdown on initial uniquificationarch/mips/mm/tlb-r4k.c+64 -381 reply
11/86smb: client: introduce close_cached_dir_locked()fs/smb/client/cached_dir.c+38 -30 replies
12/86ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()drivers/ata/libata-scsi.c+3 -10 replies
13/86be2net: pass wrb_params in case of OS2BMCdrivers/net/ethernet/emulex/benet/be_main.c+4 -30 replies
14/86net: dsa: microchip: lan937x: Fix RGMII delay tuningdrivers/net/dsa/microchip/lan937x_main.c+1 -00 replies
15/86Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"drivers/gpu/drm/tegra/dsi.c+0 -90 replies
16/86Input: cros_ec_keyb - fix an invalid memory accessdrivers/input/keyboard/cros_ec_keyb.c+6 -00 replies
17/86Input: goodix - add support for ACPI ID GDIX1003drivers/input/touchscreen/goodix.c+1 -00 replies
18/86Input: imx_sc_key - fix memory corruption on unloaddrivers/input/keyboard/imx_sc_key.c+1 -10 replies
19/86Input: pegasus-notetaker - fix potential out-of-bounds accessdrivers/input/tablet/pegasus_notetaker.c+9 -00 replies
20/86nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::bootdrivers/gpu/drm/nouveau/nvkm/falcon/fw.c+2 -00 replies
21/86nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()drivers/nvme/host/fc.c+7 -60 replies
22/86nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()drivers/nvme/host/fc.c+1 -10 replies
23/86scsi: sg: Do not sleep in atomic contextdrivers/scsi/sg.c+9 -10 replies
24/86scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()drivers/target/loopback/tcm_loop.c+3 -00 replies
25/86MIPS: Malta: Fix !EVA SOC-it PCI MMIOarch/mips/mti-malta/malta-init.c+13 -70 replies
26/86dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groupsDocumentation/devicetree/bindings/pinctrl/toshiba,visconti-pinctrl.yaml+14 -120 replies
27/86LoongArch: Dont panic if no valid cache info for PCIarch/loongarch/pci/pci.c+4 -40 replies
28/86mptcp: fix race condition in mptcp_schedule_work()net/mptcp/protocol.c+12 -70 replies
29/86mptcp: fix ack generation for fallback msknet/mptcp/options.c+22 -10 replies
30/86mptcp: fix premature close in case of fallbacknet/mptcp/protocol.c+2 -10 replies
31/86mptcp: avoid unneeded subflow-level dropsnet/mptcp/options.c net/mptcp/protocol.h+32 -00 replies
32/86mptcp: decouple mptcp fastclose from tcp closenet/mptcp/protocol.c net/mptcp/protocol.h+10 -50 replies
33/86mptcp: do not fallback when OoO is presentnet/mptcp/protocol.c+7 -00 replies
34/86drm/tegra: dc: Fix reference leak in tegra_dc_couple()drivers/gpu/drm/tegra/dc.c+1 -00 replies
35/86drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enableddrivers/gpu/drm/amd/amdgpu/gfx_v11_0.c+2 -20 replies
36/86drm/amd/display: Increase DPCD read retriesdrivers/gpu/drm/amd/display/dc/link/protocols/link_dp_capability.c+1 -10 replies
37/86drm/amd/display: Move sleep into each retry for retrieve_link_cap()drivers/gpu/drm/amd/display/dc/link/protocols/link_dp_capability.c+5 -40 replies
38/86xfrm: Determine inner GSO type from packet inner protocolinclude/net/xfrm.h net/ipv4/esp4_offload.c net/ipv6/esp6_offload.c+10 -50 replies
39/86xfrm: Prevent locally generated packets from direct output in tunnel modenet/xfrm/xfrm_output.c+5 -10 replies
40/86pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()drivers/pinctrl/cirrus/pinctrl-cs42l43.c+19 -40 replies
41/86mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()drivers/net/ethernet/mellanox/mlxsw/spectrum_flower.c+4 -20 replies
42/86drm/tegra: Add call to put_pid()drivers/gpu/drm/tegra/uapi.c+5 -20 replies
43/86net: dsa: hellcreek: fix missing error handling in LED registrationdrivers/net/dsa/hirschmann/hellcreek_ptp.c+12 -20 replies
44/86net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get()drivers/net/ethernet/mellanox/mlxsw/core_linecards.c+2 -00 replies
45/86net: openvswitch: remove never-working support for setting nsh fieldsnet/openvswitch/actions.c net/openvswitch/flow_netlink.c net/openvswitch/flow_netlink.h+9 -1250 replies
46/86nvme-multipath: fix lockdep WARN due to partition scan workdrivers/nvme/host/multipath.c+1 -10 replies
47/86s390/ctcm: Fix double-kfreedrivers/s390/net/ctcm_mpc.c+0 -10 replies
48/86platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnosdrivers/platform/x86/intel/speed_select_if/isst_if_mmio.c+2 -20 replies
49/86kernel.h: Move ARRAY_SIZE() to a separate headerinclude/linux/array_size.h include/linux/kernel.h include/linux/string.h+15 -60 replies
50/86net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()drivers/net/ethernet/qlogic/qede/qede_fp.c+3 -20 replies
51/86pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_descdrivers/pinctrl/nxp/pinctrl-s32cc.c+1 -10 replies
52/86pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()drivers/pinctrl/nxp/pinctrl-s32cc.c+1 -00 replies
53/86devlink: rate: Unset parent pointer in devl_rate_nodes_destroynet/devlink/rate.c+3 -10 replies
54/86net/mlx5: Clean up only new IRQ glue on request_irq() failuredrivers/net/ethernet/mellanox/mlx5/core/pci_irq.c+2 -40 replies
55/86LoongArch: Use UAPI types in ptrace UAPI headerarch/loongarch/include/uapi/asm/ptrace.h+18 -220 replies
56/86cifs: fix memory leak in smb3_fs_context_parse_param error pathfs/smb/client/fs_context.c+4 -00 replies
57/86vsock: Ignore signal/timeout on connect() if already establishednet/vmw_vsock/af_vsock.c+31 -90 replies
58/86bcma: dont register devices disabled in OFdrivers/bcma/main.c+6 -00 replies
59/86cifs: fix typo in enable_gcm_256 module parameterfs/smb/client/cifsfs.c+1 -10 replies
60/86scsi: core: Fix a regression triggered by scsi_host_busy()drivers/scsi/hosts.c+3 -20 replies
61/86x86/microcode/AMD: Limit Entrysign signature checking to known generationsarch/x86/kernel/cpu/microcode/amd.c+19 -10 replies
62/86selftests: net: use BASH for bareudp testingtools/testing/selftests/net/bareudp.sh+1 -10 replies
63/86net: tls: Cancel RX async resync request on rcd_delta overflowinclude/net/tls.h net/tls/tls_device.c+9 -10 replies
64/86kconfig/mconf: Initialize the default locale at startupscripts/kconfig/mconf.c+3 -00 replies
65/86kconfig/nconf: Initialize the default locale at startupscripts/kconfig/nconf.c+3 -00 replies
66/86f2fs: compress: change the first parameter of page_array_{alloc,free} to sbifs/f2fs/compress.c+20 -200 replies
67/86s390/mm: Fix __ptep_rdp() inline assemblyarch/s390/include/asm/pgtable.h arch/s390/mm/pgtable.c+7 -90 replies
68/86f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dicfs/f2fs/compress.c fs/f2fs/f2fs.h+21 -190 replies
69/86ALSA: usb-audio: fix uac2 clock source at terminal parsersound/usb/mixer.c+1 -10 replies
70/86net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on errordrivers/net/ethernet/ti/netcp_core.c drivers/soc/ti/knav_dma.c+12 -120 replies
71/86tracing/tools: Fix incorrcet short option in usage text for --threadstools/tracing/latency/latency-collector.c+1 -10 replies
72/86smb: client: fix incomplete backport in cfids_invalidation_worker()fs/smb/client/cached_dir.c+1 -10 replies
73/86KVM: arm64: Check the untrusted offset in FF-A memory sharearch/arm64/kvm/hyp/nvhe/ffa.c+7 -20 replies
74/86uio_hv_generic: Set event for all channels on the devicedrivers/uio/uio_hv_generic.c+17 -40 replies
75/86maple_tree: fix tracepoint string pointerslib/maple_tree.c+17 -150 replies
76/86wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()net/wireless/reg.c+5 -00 replies
77/86crash: fix crashkernel resource shrinkkernel/kexec_core.c+1 -10 replies
78/86ftrace: Fix BPF fexit with livepatchkernel/bpf/trampoline.c kernel/trace/ftrace.c+14 -100 replies
79/86pmdomain: arm: scmi: Fix genpd leak on provider registration failuredrivers/firmware/arm_scmi/scmi_pm_domain.c+11 -20 replies
80/86pmdomain: imx-gpc: Convert to platform remove callback returning voiddrivers/pmdomain/imx/gpc.c+13 -90 replies
81/86pmdomain: imx: Fix reference count leak in imx_gpc_removedrivers/pmdomain/imx/gpc.c+2 -00 replies
82/86selftests: mptcp: join: endpoints: longer transfertools/testing/selftests/net/mptcp/mptcp_join.sh+4 -40 replies
83/86HID: amd_sfh: Stop sensor before startingdrivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_init.c+2 -00 replies
84/86mm/mempool: replace kmap_atomic() with kmap_local_page()mm/mempool.c+4 -40 replies
85/86mm/mempool: fix poisoning order>0 pages with HIGHMEMmm/mempool.c+26 -60 replies
86/86mptcp: fix a race in mptcp_pm_del_add_timer()net/mptcp/pm_netlink.c+13 -70 replies

Reviews trailers per patch

55 of 86 patches have a Reviewed-by or Acked-by.

PatchJiaxun YangDavid HowellsDamien Le MoalWeikang GuoPeng FanFrank Li[email protected]Terry JungeLyude PaulChristoph HellwigMatthieu Baerts (NGI0)Jakub SitnickiHannes ReineckeMartin K. PetersenMarco PatalanoJustin TeeGeliang TangMikko PerttunenAlex DeucherAlex HungDan WheelerCosmin RatiuSabrina DubrocaLeon RomanovskyIdo SchimmelAndrew LunnKurt KanzenbachEelco ChaudronAaron ConoleAswin KaruvallySimon HormanSrinivas PandruvadaIlpo JärvinenGiovanni CabidduAndy ShevchenkoChaitanya KulkarniAllen PaisJan Petrous (OSS)Carolina JubranMohith Kumar ThummaluruMoshe ShemeshShay DroriJacob KellerConor DooleyFlorian FainelliGerald SchaeferChao YuWill DeaconMichael KelleySaurabh SengarLiam R. HowlettBaoquan HeAndrey GrodzovskyJiri OlsaSteven Rostedt (Google)Titaskernel test robotMing LeiSebastian ReichelPrzemek KitszelStefano GarzarellaPeter SchneiderBrett A C SheffieldRon EconomosLinux Kernel Functional TestingMark BrownJon Hunter
SeriesT-b T-b T-b T-b T-b T-b T-b
1/86
2/86T-b R-b
3/86
4/86
5/86
6/86R-b
7/86R-b
8/86R-b R-b
9/86R-b R-b R-b
10/86R-b T-b
11/86R-b
12/86R-b
13/86
14/86
15/86
16/86
17/86T-b
18/86R-b R-b
19/86
20/86R-b
21/86T-b R-b
22/86T-b R-b
23/86
24/86R-b R-b
25/86
26/86A-b
27/86
28/86R-b
29/86R-b R-b
30/86R-b
31/86R-b
32/86R-b R-b
33/86R-b
34/86A-b
35/86A-b
36/86R-b T-b
37/86R-b T-b
38/86R-b R-b
39/86R-b
40/86
41/86R-b
42/86
43/86R-b A-b
44/86R-b
45/86A-b R-b
46/86R-b R-b
47/86R-b R-b
48/86A-b R-b
49/86R-b R-b
50/86
51/86T-b
52/86
53/86R-b
54/86T-b R-b R-b R-b
55/86
56/86R-b
57/86R-b
58/86R-b
59/86
60/86R-b T-b
61/86
62/86R-b
63/86R-b
64/86
65/86
66/86R-b
67/86R-b
68/86R-b
69/86
70/86R-b
71/86
72/86
73/86A-b
74/86R-b R-b
75/86A-b
76/86
77/86A-b
78/86Acked-and-tested-by R-b A-b
79/86R-b
80/86
81/86
82/86R-b
83/86T-b
84/86
85/86Analyzed-by R-b T-b
86/86R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 67 reviewers.

Read the v1 thread

Cover letter [PATCH 6.6 00/86] 6.6.118-rc1 review

This is the start of the stable review cycle for the 6.6.118 release. There are 86 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 29 Nov 2025 14:40:08 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.118-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.118-rc1

Eric Dumazet <[email protected]>
mptcp: fix a race in mptcp_pm_del_add_timer()

Vlastimil Babka <[email protected]>
mm/mempool: fix poisoning order>0 pages with HIGHMEM

Fabio M. De Francesco <[email protected]>
mm/mempool: replace kmap_atomic() with kmap_local_page()

Mario Limonciello (AMD) <[email protected]>
HID: amd_sfh: Stop sensor before starting

Matthieu Baerts (NGI0) <[email protected]>
selftests: mptcp: join: endpoints: longer transfer

Miaoqian Lin <[email protected]>
pmdomain: imx: Fix reference count leak in imx_gpc_remove

Uwe Kleine-König <[email protected]>
pmdomain: imx-gpc: Convert to platform remove callback returning void

Sudeep Holla <[email protected]>
pmdomain: arm: scmi: Fix genpd leak on provider registration failure

Song Liu <[email protected]>
ftrace: Fix BPF fexit with livepatch

Sourabh Jain <[email protected]>
crash: fix crashkernel resource shrink

Alexander Wetzel <[email protected]>

    wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()

Martin Kaiser <[email protected]>
maple_tree: fix tracepoint string pointers

Long Li <[email protected]>
uio_hv_generic: Set event for all channels on the device

Sebastian Ene <[email protected]>
KVM: arm64: Check the untrusted offset in FF-A memory share

Henrique Carvalho <[email protected]>
smb: client: fix incomplete backport in cfids_invalidation_worker()

Zhang Chujun <[email protected]>
tracing/tools: Fix incorrcet short option in usage text for --threads

Nishanth Menon <[email protected]>
net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error

René Rebe <[email protected]>
ALSA: usb-audio: fix uac2 clock source at terminal parser

Zhiguo Niu <[email protected]>
f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic

Heiko Carstens <[email protected]>
s390/mm: Fix __ptep_rdp() inline assembly

Zhiguo Niu <[email protected]>
f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi

Jakub Horký <[email protected]>
kconfig/nconf: Initialize the default locale at startup

Jakub Horký <[email protected]>
kconfig/mconf: Initialize the default locale at startup

Shahar Shitrit <[email protected]>
net: tls: Cancel RX async resync request on rcd_delta overflow

Po-Hsu Lin <[email protected]>
selftests: net: use BASH for bareudp testing

Borislav Petkov (AMD) <[email protected]>
x86/microcode/AMD: Limit Entrysign signature checking to known generations

Bart Van Assche <[email protected]>
scsi: core: Fix a regression triggered by scsi_host_busy()

Steve French <[email protected]>
cifs: fix typo in enable_gcm_256 module parameter

Rafał Miłecki <[email protected]>
bcma: don't register devices disabled in OF

Michal Luczaj <[email protected]>
vsock: Ignore signal/timeout on connect() if already established

Shaurya Rane <[email protected]>
cifs: fix memory leak in smb3_fs_context_parse_param error path

Thomas Weißschuh <[email protected]>
LoongArch: Use UAPI types in ptrace UAPI header

Pradyumn Rahar <[email protected]>
net/mlx5: Clean up only new IRQ glue on request_irq() failure

Shay Drory <[email protected]>
devlink: rate: Unset parent pointer in devl_rate_nodes_destroy

Jared Kangas <[email protected]>
pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()

Jared Kangas <[email protected]>
pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc

Pavel Zhigulin <[email protected]>
net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end()

Alejandro Colomar <[email protected]>
kernel.h: Move ARRAY_SIZE() to a separate header

Haotian Zhang <[email protected]>
platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos

Aleksei Nikiforov <[email protected]>
s390/ctcm: Fix double-kfree

Shin'ichiro Kawasaki <[email protected]>
nvme-multipath: fix lockdep WARN due to partition scan work

Ilya Maximets <[email protected]>
net: openvswitch: remove never-working support for setting nsh fields

Pavel Zhigulin <[email protected]>
net: mlxsw: linecards: fix missing error check in mlxsw_linecard_devlink_info_get()

Pavel Zhigulin <[email protected]>
net: dsa: hellcreek: fix missing error handling in LED registration

Prateek Agarwal <[email protected]>
drm/tegra: Add call to put_pid()

Zilin Guan <[email protected]>
mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()

Haotian Zhang <[email protected]>
pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()

Jianbo Liu <[email protected]>
xfrm: Prevent locally generated packets from direct output in tunnel mode

Jianbo Liu <[email protected]>
xfrm: Determine inner GSO type from packet inner protocol

Mario Limonciello (AMD) <[email protected]>
drm/amd/display: Move sleep into each retry for retrieve_link_cap()

Mario Limonciello (AMD) <[email protected]>
drm/amd/display: Increase DPCD read retries

Yifan Zha <[email protected]>
drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled

Ma Ke <[email protected]>
drm/tegra: dc: Fix reference leak in tegra_dc_couple()

Paolo Abeni <[email protected]>
mptcp: do not fallback when OoO is present

Paolo Abeni <[email protected]>
mptcp: decouple mptcp fastclose from tcp close

Paolo Abeni <[email protected]>
mptcp: avoid unneeded subflow-level drops

Paolo Abeni <[email protected]>
mptcp: fix premature close in case of fallback

Paolo Abeni <[email protected]>
mptcp: fix ack generation for fallback msk

Eric Dumazet <[email protected]>
mptcp: fix race condition in mptcp_schedule_work()

Huacai Chen <[email protected]>
LoongArch: Don't panic if no valid cache info for PCI

Krzysztof Kozlowski <[email protected]>
dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups

Maciej W. Rozycki <[email protected]>
MIPS: Malta: Fix !EVA SOC-it PCI MMIO

Hamza Mahfooz <[email protected]>
scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()

Bart Van Assche <[email protected]>
scsi: sg: Do not sleep in atomic context

Ewan D. Milne <[email protected]>

    nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()

Ewan D. Milne <[email protected]>
nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()

Nam Cao <[email protected]>
nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot

Seungjin Bae <[email protected]>
Input: pegasus-notetaker - fix potential out-of-bounds access

Dan Carpenter <[email protected]>
Input: imx_sc_key - fix memory corruption on unload

Hans de Goede <[email protected]>
Input: goodix - add support for ACPI ID GDIX1003

Tzung-Bi Shih <[email protected]>
Input: cros_ec_keyb - fix an invalid memory access

Diogo Ivo <[email protected]>
Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"

Oleksij Rempel <[email protected]>
net: dsa: microchip: lan937x: Fix RGMII delay tuning

Andrey Vatoropin <[email protected]>
be2net: pass wrb_params in case of OS2BMC

Yihang Li <[email protected]>
ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()

Henrique Carvalho <[email protected]>
smb: client: introduce close_cached_dir_locked()

Maciej W. Rozycki <[email protected]>
MIPS: mm: Prevent a TLB shutdown on initial uniquification

Niklas Cassel <[email protected]>
ata: libata-scsi: Fix system suspend for a security locked drive

Jiayuan Chen <[email protected]>
mptcp: Fix proto fallback detection with BPF

Jiayuan Chen <[email protected]>
mptcp: Disallow MPTCP subflows from sockmap

Yongpeng Yang <[email protected]>
exfat: check return value of sb_min_blocksize in exfat_read_boot_sector

Mike Yuan <[email protected]>
shmem: fix tmpfs reconfiguration (remount) when noswap is set

Dan Carpenter <[email protected]>
mtdchar: fix integer overflow in read/write ioctls

Niravkumar L Rabara <[email protected]>
mtd: rawnand: cadence: fix DMA device NULL pointer dereference

Zhang Heng <[email protected]>

    HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155

Yipeng Zou <[email protected]>
timers: Fix NULL function pointer race in timer_shutdown_sync()

-------------

Diffstat:

 .../bindings/pinctrl/toshiba,visconti-pinctrl.yaml |  26 +++---
 Makefile                                           |   4 +-
 arch/arm64/kvm/hyp/nvhe/ffa.c                      |   9 +-
 arch/loongarch/include/uapi/asm/ptrace.h           |  40 ++++----
 arch/loongarch/pci/pci.c                           |   8 +-
 arch/mips/mm/tlb-r4k.c                             | 102 +++++++++++++--------
 arch/mips/mti-malta/malta-init.c                   |  20 ++--
 arch/s390/include/asm/pgtable.h                    |  12 +--
 arch/s390/mm/pgtable.c                             |   4 +-
 arch/x86/kernel/cpu/microcode/amd.c                |  20 +++-
 drivers/ata/libata-scsi.c                          |  11 ++-
 drivers/bcma/main.c                                |   6 ++
 drivers/firmware/arm_scmi/scmi_pm_domain.c         |  13 ++-
 drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c             |   4 +-
 .../display/dc/link/protocols/link_dp_capability.c |  11 ++-
 drivers/gpu/drm/nouveau/nvkm/falcon/fw.c           |   2 +
 drivers/gpu/drm/tegra/dc.c                         |   1 +
 drivers/gpu/drm/tegra/dsi.c                        |   9 --
 drivers/gpu/drm/tegra/uapi.c                       |   7 +-
 drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_init.c      |   2 +
 drivers/hid/hid-ids.h                              |   4 +-
 drivers/hid/hid-quirks.c                           |  13 ++-
 drivers/input/keyboard/cros_ec_keyb.c              |   6 ++
 drivers/input/keyboard/imx_sc_key.c                |   2 +-
 drivers/input/tablet/pegasus_notetaker.c           |   9 ++
 drivers/input/touchscreen/goodix.c                 |   1 +
 drivers/mtd/mtdchar.c                              |   6 +-
 drivers/mtd/nand/raw/cadence-nand-controller.c     |   3 +-
 drivers/net/dsa/hirschmann/hellcreek_ptp.c         |  14 ++-
 drivers/net/dsa/microchip/lan937x_main.c           |   1 +
 drivers/net/ethernet/emulex/benet/be_main.c        |   7 +-
 drivers/net/ethernet/mellanox/mlx5/core/pci_irq.c  |   6 +-
 .../net/ethernet/mellanox/mlxsw/core_linecards.c   |   2 +
 .../net/ethernet/mellanox/mlxsw/spectrum_flower.c  |   6 +-
 drivers/net/ethernet/qlogic/qede/qede_fp.c         |   5 +-
 drivers/net/ethernet/ti/netcp_core.c               |  10 +-
 drivers/nvme/host/fc.c                             |  15 +--
 drivers/nvme/host/multipath.c                      |   2 +-
 drivers/pinctrl/cirrus/pinctrl-cs42l43.c           |  21 ++++-
 drivers/pinctrl/nxp/pinctrl-s32cc.c                |   3 +-
 .../x86/intel/speed_select_if/isst_if_mmio.c       |   4 +-
 drivers/pmdomain/imx/gpc.c                         |  22 +++--
 drivers/s390/net/ctcm_mpc.c                        |   1 -
 drivers/scsi/hosts.c                               |   5 +-
 drivers/scsi/sg.c                                  |  10 +-
 drivers/soc/ti/knav_dma.c                          |  14 +--
 drivers/target/loopback/tcm_loop.c                 |   3 +
 drivers/uio/uio_hv_generic.c                       |  21 ++++-
 fs/exfat/super.c                                   |   5 +-
 fs/f2fs/compress.c                                 |  74 +++++++--------
 fs/f2fs/f2fs.h                                     |   2 +
 fs/smb/client/cached_dir.c                         |  43 ++++++++-
 fs/smb/client/cifsfs.c                             |   2 +-
 fs/smb/client/fs_context.c                         |   4 +
 include/linux/array_size.h                         |  13 +++
 include/linux/ata.h                                |   1 +
 include/linux/kernel.h                             |   7 +-
 include/linux/string.h                             |   1 +
 include/net/tls.h                                  |   6 ++
 include/net/xfrm.h                                 |   3 +-
 kernel/bpf/trampoline.c                            |   4 -
 kernel/kexec_core.c                                |   2 +-
 kernel/time/timer.c                                |   7 +-
 kernel/trace/ftrace.c                              |  20 ++--
 lib/maple_tree.c                                   |  32 ++++---
 mm/mempool.c                                       |  32 +++++--
 mm/shmem.c                                         |  15 ++-
 net/devlink/rate.c                                 |   4 +-
 net/ipv4/esp4_offload.c                            |   6 +-
 net/ipv6/esp6_offload.c                            |   6 +-
 net/mptcp/options.c                                |  54 ++++++++++-
 net/mptcp/pm_netlink.c                             |  20 ++--
 net/mptcp/protocol.c                               |  48 +++++++---
 net/mptcp/protocol.h                               |   3 +-
 net/mptcp/subflow.c                                |   8 ++
 net/openvswitch/actions.c                          |  68 +-------------
 net/openvswitch/flow_netlink.c                     |  64 ++-----------
 net/openvswitch/flow_netlink.h                     |   2 -
 net/tls/tls_device.c                               |   4 +-
 net/vmw_vsock/af_vsock.c                           |  40 ++++++--
 net/wireless/reg.c                                 |   5 +
 net/xfrm/xfrm_output.c                             |   6 +-
 scripts/kconfig/mconf.c                            |   3 +
 scripts/kconfig/nconf.c                            |   3 +
 sound/usb/mixer.c                                  |   2 +-
 tools/testing/selftests/net/bareudp.sh             |   2 +-
 tools/testing/selftests/net/mptcp/mptcp_join.sh    |   8 +-
 tools/tracing/latency/latency-collector.c          |   2 +-
 88 files changed, 714 insertions(+), 444 deletions(-)