Skip to content

6.6.134-rc1 review

Greg Kroah-Hartman dri-devel linux-patches linux-tegra lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest160 patches 13 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/160arm64/scs: Fix handling of advance_loc4arch/arm64/kernel/patch-scs.c+8 -00 replies
2/160HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irqdrivers/hid/wacom_wac.c+10 -00 replies
3/160atm: lec: fix use-after-free in sock_def_readable()net/atm/lec.c net/atm/lec.h+48 -260 replies
4/160btrfs: dont take device_list_mutex when querying zone infofs/btrfs/zoned.c+4 -20 replies
5/160tg3: replace placeholder MAC address with device propertydrivers/net/ethernet/broadcom/tg3.c+11 -00 replies
6/160objtool: Fix Clang jump table detectiontools/objtool/check.c+2 -30 replies
7/160HID: multitouch: Check to ensure report responses match the requestdrivers/hid/hid-multitouch.c+7 -00 replies
8/160i2c: tegra: Dont mark devices with pins as IRQ safedrivers/i2c/busses/Kconfig drivers/i2c/busses/i2c-tegra.c+6 -10 replies
9/160btrfs: reject root items with drop_progress and zero drop_levelfs/btrfs/tree-checker.c+17 -00 replies
10/160spi: geni-qcom: Check DMA interrupts early in ISRdrivers/spi/spi-geni-qcom.c+5 -40 replies
11/160dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warningDocumentation/devicetree/bindings/auxdisplay/holtek,ht16k33.yaml+1 -10 replies
12/160wifi: ath11k: skip status ring entry processingdrivers/net/wireless/ath/ath11k/dp_rx.c drivers/net/wireless/ath/ath11k/hal.c drivers/net/wireless/ath/ath11k/hal.h+90 -100 replies
13/160wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocationdrivers/net/wireless/ath/ath11k/dp.h drivers/net/wireless/ath/ath11k/dp_rx.c+58 -650 replies
14/160wifi: ath11k: Pass the correct value of each TID during a stop AMPDU sessiondrivers/net/wireless/ath/ath11k/dp_rx.c+7 -80 replies
15/160crypto: caam - fix DMA corruption on long hmac keysdrivers/crypto/caam/caamhash.c+2 -10 replies
16/160crypto: caam - fix overflow on long hmac keysdrivers/crypto/caam/caamalg_qi2.c+2 -10 replies
17/160crypto: af-alg - fix NULL pointer dereference in scatterwalkcrypto/af_alg.c+3 -10 replies
18/160net: fec: fix the PTP periodic output sysfs interfacedrivers/net/ethernet/freescale/fec_ptp.c+0 -30 replies
19/160net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leaknet/qrtr/af_qrtr.c+13 -180 replies
20/160net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leaknet/ipv6/ndisc.c+3 -00 replies
21/160net/ipv6: ioam6: prevent schema length wraparound in trace fillnet/ipv6/ioam6.c+2 -20 replies
22/160tg3: Fix race for querying speed/duplexdrivers/net/ethernet/broadcom/tg3.c+1 -10 replies
23/160ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()net/ipv6/icmp.c+3 -00 replies
24/160ip6_tunnel: clear skb2->cb[] in ip4ip6_err()net/ipv6/ip6_tunnel.c+5 -00 replies
25/160bridge: br_nd_send: linearize skb before parsing ND optionsnet/bridge/br_arp_nd_proxy.c+7 -50 replies
26/160net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()net/sched/sch_hfsc.c+2 -20 replies
27/160ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failuresound/soc/cirrus/ep93xx-i2s.c+24 -100 replies
28/160ipv6: prevent possible UaF in addrconf_permanent_addr()net/ipv6/addrconf.c+3 -30 replies
29/160net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leaknet/sched/cls_api.c+1 -00 replies
30/160NFC: pn533: bound the UART receive bufferdrivers/nfc/pn533/uart.c+3 -00 replies
31/160net: xilinx: axienet: Correct BD length masks to match AXIDMA IP specdrivers/net/ethernet/xilinx/xilinx_axienet.h+2 -20 replies
32/160bpf: Fix regsafe() for pointers to packetkernel/bpf/verifier.c+6 -10 replies
33/160net: ipv6: flowlabel: defer exclusive option free until RCU teardownnet/ipv6/ip6_flowlabel.c+0 -50 replies
34/160netfilter: flowtable: strictly check for maximum number of actionsnet/netfilter/nf_flow_table_offload.c+130 -660 replies
35/160netfilter: nfnetlink_log: account for netlink header sizenet/netfilter/nfnetlink_log.c+1 -10 replies
36/160netfilter: x_tables: ensure names are nul-terminatednet/netfilter/xt_cgroup.c net/netfilter/xt_rateest.c+11 -00 replies
37/160netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attrinclude/linux/netfilter/ipset/ip_set.h net/netfilter/ipset/ip_set_core.c net/netfilter/ipset/ip_set_list_set.c+5 -50 replies
38/160netfilter: nf_conntrack_helper: pass helper to expect cleanupnet/netfilter/nf_conntrack_helper.c+1 -10 replies
39/160netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absentnet/netfilter/nf_conntrack_netlink.c+6 -00 replies
40/160netfilter: nf_conntrack_expect: honor expectation helper fieldinclude/net/netfilter/nf_conntrack_expect.h net/netfilter/nf_conntrack_broadcast.c net/netfilter/nf_conntrack_expect.c +4 more+29 -120 replies
41/160netfilter: nf_conntrack_expect: use expect->helpernet/netfilter/nf_conntrack_expect.c net/netfilter/nf_conntrack_helper.c net/netfilter/nf_conntrack_netlink.c +1 more+13 -210 replies
42/160netfilter: nf_conntrack_expect: store netns and zone in expectationinclude/net/netfilter/nf_conntrack_expect.h net/netfilter/nf_conntrack_broadcast.c net/netfilter/nf_conntrack_expect.c +1 more+34 -40 replies
43/160netfilter: ctnetlink: ignore explicit helper on new expectationsnet/netfilter/nf_conntrack_netlink.c+9 -450 replies
44/160netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARPnet/netfilter/x_tables.c+23 -00 replies
45/160netfilter: nf_tables: reject immediate NF_QUEUE verdictnet/netfilter/nf_tables_api.c+5 -20 replies
46/160Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediatenet/bluetooth/hci_sync.c+9 -20 replies
47/160Bluetooth: SCO: fix race conditions in sco_sock_connect()net/bluetooth/sco.c+21 -50 replies
48/160Bluetooth: MGMT: validate LTK enc_size on loadnet/bluetooth/mgmt.c+3 -00 replies
49/160Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evtnet/bluetooth/hci_event.c+20 -130 replies
50/160Bluetooth: MGMT: validate mesh send advertising payload lengthnet/bluetooth/mgmt.c+11 -30 replies
51/160rds: ib: reject FRMR registration before IB connection is establishednet/rds/ib_rdma.c+6 -10 replies
52/160bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().net/core/skmsg.c+8 -50 replies
53/160net/sched: sch_netem: fix out-of-bounds access in packet corruptionnet/sched/sch_netem.c+3 -20 replies
54/160net: macb: fix clk handling on PCI glue driver removaldrivers/net/ethernet/cadence/macb_pci.c+4 -20 replies
55/160net: macb: properly unregister fixed rate clocksdrivers/net/ethernet/cadence/macb_pci.c+4 -40 replies
56/160net/mlx5: lag: Check for LAG device before creating debugfsdrivers/net/ethernet/mellanox/mlx5/core/lag/debugfs.c+3 -00 replies
57/160net/mlx5: Avoid "No data available" when FW version queries faildrivers/net/ethernet/mellanox/mlx5/core/devlink.c drivers/net/ethernet/mellanox/mlx5/core/fw.c drivers/net/ethernet/mellanox/mlx5/core/mlx5_core.h+37 -240 replies
58/160net/x25: Fix potential double free of skbnet/x25/x25_in.c+2 -30 replies
59/160net/x25: Fix overflow when accumulating packetsnet/x25/x25_in.c net/x25/x25_subr.c+5 -00 replies
60/160net/sched: cls_fw: fix NULL pointer dereference on shared blocksnet/sched/cls_fw.c+12 -20 replies
61/160net/sched: cls_flow: fix NULL pointer dereference on shared blocksnet/sched/cls_flow.c+9 -10 replies
62/160net: hsr: fix VLAN add unwind on slave errorsnet/hsr/hsr_device.c+17 -150 replies
63/160ipv6: avoid overflows in ip6_datagram_send_ctl()net/ipv6/datagram.c+10 -00 replies
64/160bpf: reject direct access to nullable PTR_TO_BUF pointerskernel/bpf/verifier.c+2 -10 replies
65/160iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by onedrivers/iio/imu/bno055/bno055.c+1 -10 replies
66/160accel/qaic: Handle DBC deactivation if the owner went awaydrivers/accel/qaic/qaic_control.c+45 -20 replies
67/160hwmon: (pxe1610) Check return value of page-select write in probedrivers/hwmon/pmbus/pxe1610.c+4 -10 replies
68/160dt-bindings: gpio: fix microchip #interrupt-cellsDocumentation/devicetree/bindings/gpio/microchip,mpfs-gpio.yaml+2 -20 replies
69/160hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()drivers/hwmon/pmbus/tps53679.c+2 -20 replies
70/160hwmon: (occ) Fix missing newline in occ_show_extended()drivers/hwmon/occ/common.c+1 -10 replies
71/160mips: ralink: update CPU clock indexarch/mips/ralink/clk.c+4 -40 replies
72/160riscv: kgdb: fix several debug register assignment bugsarch/riscv/kernel/kgdb.c+4 -30 replies
73/160drm/ioc32: stop speculation on the drm_compat_ioctl pathdrivers/gpu/drm/drm_ioc32.c+2 -00 replies
74/160wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculationdrivers/net/wireless/microchip/wilc1000/hif.c+1 -10 replies
75/160wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()drivers/net/wireless/intel/iwlwifi/mvm/d3.c+1 -10 replies
76/160USB: serial: option: add MeiG Smart SRM825WNdrivers/usb/serial/option.c+3 -00 replies
77/160ALSA: caiaq: fix stack out-of-bounds read in init_cardsound/usb/caiaq/device.c+1 -10 replies
78/160ALSA: ctxfi: Fix missing SPDIFI1 index handlingsound/pci/ctxfi/ctdaio.c+1 -00 replies
79/160Bluetooth: SMP: derive legacy responder STK authentication from MITM statenet/bluetooth/smp.c+1 -40 replies
80/160Bluetooth: SMP: force responder MITM requirements before building the pairing responsenet/bluetooth/smp.c+5 -10 replies
81/160MIPS: Fix the GCC version check for `__multi3 workaroundarch/mips/lib/multi3.c+3 -30 replies
82/160hwmon: (occ) Fix division by zero in occ_show_power_1()drivers/hwmon/occ/common.c+8 -90 replies
83/160mips: mm: Allocate tlb_vpn array atomicallyarch/mips/mm/tlb-r4k.c+1 -10 replies
84/160iio: adc: ti-adc161s626: fix buffer read on big-endiandrivers/iio/adc/ti-adc161s626.c+12 -90 replies
85/160drm/ast: dp501: Fix initialization of SCU2Cdrivers/gpu/drm/ast/ast_dp501.c+1 -10 replies
86/160drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDPdrivers/gpu/drm/i915/display/g4x_dp.c+1 -10 replies
87/160USB: serial: io_edgeport: add support for Blackbox IC135Adrivers/usb/serial/io_edgeport.c drivers/usb/serial/io_usbvend.h+4 -00 replies
88/160USB: serial: option: add support for Rolling Wireless RW135R-GLdrivers/usb/serial/option.c+1 -00 replies
89/160USB: core: add NO_LPM quirk for Razer Kiyo Pro webcamdrivers/usb/core/quirks.c+2 -00 replies
90/160iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()drivers/iio/adc/ti-adc161s626.c+8 -120 replies
91/160Input: synaptics-rmi4 - fix a locking bug in an error pathdrivers/input/rmi4/rmi_f54.c+2 -20 replies
92/160Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk tabledrivers/input/serio/i8042-acpipnpio.h+7 -00 replies
93/160Input: xpad - add support for BETOP BTP-KP50B/C controllers wireless modedrivers/input/joystick/xpad.c+3 -00 replies
94/160Input: xpad - add support for Razer Wolverine V3 Prodrivers/input/joystick/xpad.c+2 -00 replies
95/160iio: accel: fix ADXL355 temperature signature valuedrivers/iio/accel/adxl355_core.c+1 -10 replies
96/160iio: dac: ad5770r: fix error return in ad5770r_read_raw()drivers/iio/dac/ad5770r.c+1 -10 replies
97/160iio: light: vcnl4035: fix scan buffer on big-endiandrivers/iio/light/vcnl4035.c+12 -60 replies
98/160iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()drivers/iio/imu/bmi160/bmi160_core.c+5 -100 replies
99/160iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope onlydrivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c+4 -00 replies
100/160iio: gyro: mpu3050: Fix incorrect free_irq() variabledrivers/iio/gyro/mpu3050-core.c+1 -10 replies
101/160iio: gyro: mpu3050: Fix irq resource leakdrivers/iio/gyro/mpu3050-core.c+6 -10 replies
102/160iio: gyro: mpu3050: Move iio_device_register() to correct locationdrivers/iio/gyro/mpu3050-core.c+13 -80 replies
103/160iio: gyro: mpu3050: Fix out-of-sequence free_irq()drivers/iio/gyro/mpu3050-core.c+1 -10 replies
104/160usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drivedrivers/usb/core/quirks.c+1 -00 replies
105/160usb: ulpi: fix double free in ulpi_register_interface() error pathdrivers/usb/common/ulpi.c+2 -30 replies
106/160usb: usbtmc: Flush anchored URBs in usbtmc_releasedrivers/usb/class/usbtmc.c+3 -00 replies
107/160usb: ehci-brcm: fix sleep during atomicdrivers/usb/host/ehci-brcm.c+2 -20 replies
108/160usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()drivers/usb/dwc2/gadget.c+2 -00 replies
109/160usb: cdns3: gadget: fix NULL pointer dereference in ep_queuedrivers/usb/cdns3/cdns3-gadget.c+3 -00 replies
110/160usb: cdns3: gadget: fix state inconsistency on gadget init failuredrivers/usb/cdns3/cdns3-gadget.c+1 -00 replies
111/160vfio: Create vfio_fs_type with inode per devicedrivers/vfio/device_cdev.c drivers/vfio/group.c drivers/vfio/vfio_main.c +1 more+59 -03 replies
112/160vfio/pci: Use unmap_mapping_range()drivers/vfio/pci/vfio_pci_core.c include/linux/vfio_pci_core.h+55 -2110 replies
113/160vfio/pci: Insert full vma on mmapd MMIO faultdrivers/vfio/pci/vfio_pci_core.c+17 -20 replies
114/160fork: defer linking file vma until vma is fully initializedkernel/fork.c+15 -140 replies
115/160bridge: br_nd_send: validate ND option lengthsnet/bridge/br_arp_nd_proxy.c+4 -20 replies
116/160cdc-acm: new quirk for EPSON HMDdrivers/usb/class/cdc-acm.c drivers/usb/class/cdc-acm.h+10 -00 replies
117/160comedi: dt2815: add hardware detection to prevent crashdrivers/comedi/drivers/dt2815.c+12 -00 replies
118/160comedi: Reinit dev->spinlock between attachments to low-level driversdrivers/comedi/drivers.c+8 -00 replies
119/160comedi: ni_atmio16d: Fix invalid clean-up after failed attachdrivers/comedi/drivers/ni_atmio16d.c+2 -10 replies
120/160comedi: me_daq: Fix potential overrun of firmware bufferdrivers/comedi/drivers/me_daq.c+19 -160 replies
121/160comedi: me4000: Fix potential overrun of firmware bufferdrivers/comedi/drivers/me4000.c+12 -40 replies
122/160dt-bindings: connector: add pd-disable dependencyDocumentation/devicetree/bindings/connector/usb-connector.yaml+1 -00 replies
123/160nvmem: imx: assign nvmem_cell_info::raw_lendrivers/nvmem/imx-ocotp-ele.c drivers/nvmem/imx-ocotp.c+2 -00 replies
124/160netfilter: ipset: drop logically empty buckets in mtype_delnet/netfilter/ipset/ip_set_hash_gen.h+1 -10 replies
125/160counter: rz-mtu3-cnt: prevent counter from being toggled multiple timesdrivers/counter/rz-mtu3-cnt.c+8 -40 replies
126/160counter: rz-mtu3-cnt: do not use struct rz_mtu3_channels dev memberdrivers/counter/rz-mtu3-cnt.c+27 -280 replies
127/160vxlan: validate ND option lengths in vxlan_na_createdrivers/net/vxlan/vxlan_core.c+4 -20 replies
128/160net: ftgmac100: fix ring allocation unwind on open failuredrivers/net/ethernet/faraday/ftgmac100.c+24 -40 replies
129/160cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error pathdrivers/cpufreq/cpufreq_governor.c+3 -30 replies
130/160gpio: mxc: map Both Edge pad wakeup to Rising Edgedrivers/gpio/gpio-mxc.c+9 -10 replies
131/160thermal: core: Fix thermal zone device registration error pathdrivers/thermal/thermal_core.c+1 -00 replies
132/160misc: fastrpc: possible double-free of cctx->remote_heapdrivers/misc/fastrpc.c+1 -00 replies
133/160thunderbolt: Fix property read in nhi_wake_supported()drivers/thunderbolt/nhi.c+1 -10 replies
134/160USB: dummy-hcd: Fix locking/synchronization errordrivers/usb/gadget/udc/dummy_hcd.c+6 -10 replies
135/160USB: dummy-hcd: Fix interrupt synchronization errordrivers/usb/gadget/udc/dummy_hcd.c+14 -150 replies
136/160usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transferdrivers/usb/gadget/udc/dummy_hcd.c+6 -00 replies
137/160btrfs: fix the qgroup data free range for inline data extentsfs/btrfs/inode.c+1 -10 replies
138/160btrfs: do not free data reservation in fallback from inline due to -ENOSPCfs/btrfs/inode.c+5 -10 replies
139/160gfs2: Improve gfs2_consist_inode() usagefs/gfs2/dir.c fs/gfs2/glops.c fs/gfs2/xattr.c+53 -400 replies
140/160gfs2: Validate i_depth for exhash directoriesfs/gfs2/dir.c fs/gfs2/glops.c+8 -40 replies
141/160LoongArch: vDSO: Emit GNU_EH_FRAME correctlyarch/loongarch/include/asm/linkage.h arch/loongarch/include/asm/sigframe.h arch/loongarch/kernel/asm-offsets.c +3 more+53 -100 replies
142/160usb: gadget: u_ether: Fix race between gether_disconnect and eth_stopdrivers/usb/gadget/function/u_ether.c+5 -50 replies
143/160usb: gadget: uvc: fix NULL pointer dereference during unbind racedrivers/usb/gadget/function/f_uvc.c drivers/usb/gadget/function/uvc.h drivers/usb/gadget/function/uvc_v4l2.c+43 -40 replies
144/160usb: gadget: f_subset: Fix unbalanced refcnt in geth_freedrivers/usb/gadget/function/f_subset.c+6 -00 replies
145/160usb: gadget: f_rndis: Protect RNDIS options with mutexdrivers/usb/gadget/function/f_rndis.c+6 -30 replies
146/160usb: gadget: f_uac1_legacy: validate control request sizedrivers/usb/gadget/function/f_uac1_legacy.c+37 -100 replies
147/160wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-freedrivers/net/wireless/virtual/virt_wifi.c+0 -10 replies
148/160iio: imu: inv_icm42600: fix odr switch when turning buffer offdrivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c+3 -00 replies
149/160net: macb: Move devm_{free,request}_irq() out of spin lock areadrivers/net/ethernet/cadence/macb_main.c+8 -50 replies
150/160net: correctly handle tunneled traffic on IPV6_CSUM GSO fallbacknet/core/dev.c+17 -50 replies
151/160net: mana: fix use-after-free in add_adev() error pathdrivers/net/ethernet/microsoft/mana/mana_en.c+4 -20 replies
152/160scsi: target: tcm_loop: Drain commands in target_reset handlerdrivers/target/loopback/tcm_loop.c+46 -60 replies
153/160mm/huge_memory: fix folio isnt locked in softleaf_to_folio()include/linux/swapops.h+15 -50 replies
154/160x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling()arch/x86/kernel/cpu/common.c+12 -60 replies
155/160dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate()drivers/dma/fsl-edma-main.c+1 -40 replies
156/160dmaengine: fsl-edma: fix channel parameter config for fixed channel requestsdrivers/dma/fsl-edma-main.c+11 -150 replies
157/160ext4: publish jinode after initializationfs/ext4/fast_commit.c fs/ext4/inode.c+13 -60 replies
158/160ext4: handle wraparound when searching for blocks for indirect mapped blocksfs/ext4/mballoc.c+2 -00 replies
159/160MPTCP: fix lock class name family in pm_nl_create_listen_socketnet/mptcp/pm_netlink.c+1 -10 replies
160/160net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvnetadrivers/net/phy/sfp.c+6 -10 replies

Reviews trailers per patch

72 of 160 patches have a Reviewed-by or Acked-by.

PatchKonrad DybcioRob Herring (Arm)Tim HarveyBaochen QiangVasanthakumar ThiagarajanSimon HormanJason GereckeJustin IurmanPavan ChebbiIdo SchimmelAo ZhouNikolay AleksandrovEric DumazetDamien Le MoalDavid SterbaRishon Jonathan RMichael ChanQu WenruoPhil SutterAllison HendersonJiayuan ChenStephen HemmingerJamal Hadi SalimMark BlochMoshe ShemeshSean AndersonDaniel BorkmannAmery HungEduard ZingermanRen WeiSergio ParacuellosThomas ZimmermannMaxime RipardSimona VetterKarsten HohmeierDavid LaightJocelyn FalempeMichał GrzelakAndy ShevchenkoKumar Kartikeya DwivediLizhi HouJeff HugoNuno SáFlorian FainelliPeter ChenJason GunthorpeKevin TianPavel Machek (CIP)Ron EconomosJustin M. ForbesMark BrownConor DooleyJon HunterShuah KhanPeter SchneiderAlex WilliamsonYan ZhaoJane Chu[email protected]Ian AbbottLinus WalleijZhongqiu HanViresh KumarPeng FanLukasz LubaHeikki KrogerusGreg Kroah-HartmanBreno LeitaoThéo LebrunLong Li[email protected]David Hildenbrand (Arm)Lorenzo Stoakes (Oracle)Sohil MehtaFrank LiJan KaraBaokun LiMatthieu Baerts (NGI0)Russell King (Oracle)Alan SternFilipe MananaHardik GargBrett A C SheffieldMarkus ReicheltRonald WarsowTakeshi OgasawaraDmitry BaryshkovShung-Hsi YuFrancesco DolciniMiguel OjedaBarry K. Nathan
SeriesT-b T-b T-b T-b T-b T-b T-b T-b T-b T-b
1/160
2/160R-b
3/160R-b
4/160R-b R-b
5/160T-b R-b
6/160
7/160
8/160
9/160R-b
10/160R-b
11/160A-b
12/160
13/160T-b
14/160R-b R-b
15/160
16/160
17/160
18/160
19/160R-b
20/160R-b
21/160R-b
22/160R-b
23/160R-b
24/160R-b
25/160R-b T-b A-b
26/160A-b
27/160
28/160
29/160A-b
30/160
31/160R-b
32/160R-b R-b A-b
33/160R-b T-b
34/160
35/160
36/160
37/160
38/160R-b
39/160
40/160
41/160
42/160
43/160
44/160
45/160
46/160
47/160
48/160
49/160
50/160
51/160R-b
52/160R-b
53/160R-b
54/160
55/160
56/160R-b
57/160R-b
58/160
59/160
60/160A-b
61/160A-b
62/160
63/160
64/160A-b
65/160
66/160R-b R-b
67/160
68/160
69/160
70/160
71/160R-b
72/160
73/160A-b A-b R-b
74/160
75/160
76/160
77/160
78/160Reported-and-tested-by
79/160
80/160
81/160R-b
82/160
83/160
84/160
85/160R-b
86/160R-b
87/160
88/160
89/160
90/160R-b
91/160
92/160
93/160
94/160
95/160
96/160
97/160
98/160R-b R-b
99/160
100/160R-b R-b
101/160R-b R-b
102/160R-b R-b
103/160R-b R-b
104/160
105/160R-b
106/160
107/160R-b
108/160
109/160A-b
110/160A-b
111/160T-b R-b R-b T-b T-b T-b T-b T-b T-b T-b T-b R-b A-b
112/160R-b R-b A-b
113/160T-b T-b T-b T-b T-b T-b T-b T-b T-b R-b A-b R-b
114/160A-b R-b
115/160R-b T-b A-b
116/160
117/160T-b R-b
118/160
119/160
120/160
121/160
122/160A-b
123/160
124/160R-b
125/160
126/160
127/160R-b T-b A-b
128/160
129/160R-b A-b
130/160R-b
131/160R-b T-b
132/160R-b
133/160
134/160T-b
135/160
136/160R-b
137/160R-b R-b
138/160R-b R-b
139/160
140/160T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b T-b
141/160
142/160
143/160
144/160
145/160
146/160
147/160A-b R-b
148/160
149/160R-b
150/160
151/160R-b
152/160
153/160A-b R-b
154/160R-b
155/160R-b
156/160R-b
157/160R-b
158/160R-b R-b
159/160R-b
160/160R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 91 reviewers.

Read the v1 thread

Cover letter [PATCH 6.6 000/160] 6.6.134-rc1 review

This is the start of the stable review cycle for the 6.6.134 release. There are 160 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 10 Apr 2026 17:58:42 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.134-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.134-rc1

Marek Behún <[email protected]>
net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta

Li Xiasong <[email protected]>
MPTCP: fix lock class name family in pm_nl_create_listen_socket

Theodore Ts'o <[email protected]>
ext4: handle wraparound when searching for blocks for indirect mapped blocks

Li Chen <[email protected]>
ext4: publish jinode after initialization

Joy Zou <[email protected]>
dmaengine: fsl-edma: fix channel parameter config for fixed channel requests

Joy Zou <[email protected]>
dmaengine: fsl-edma: change to guard(mutex) within fsl_edma3_xlate()

Nikunj A Dadhania <[email protected]>
x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling()

Jinjiang Tu <[email protected]>
mm/huge_memory: fix folio isn't locked in softleaf_to_folio()

Josef Bacik <[email protected]>
scsi: target: tcm_loop: Drain commands in target_reset handler

Guangshuo Li <[email protected]>
net: mana: fix use-after-free in add_adev() error path

Willem de Bruijn <[email protected]>
net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback

Kevin Hao <[email protected]>
net: macb: Move devm_{free,request}_irq() out of spin lock area

Jean-Baptiste Maneyrol <[email protected]>
iio: imu: inv_icm42600: fix odr switch when turning buffer off

Alexander Popov <[email protected]>
wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free

Taegu Ha <[email protected]>
usb: gadget: f_uac1_legacy: validate control request size

Kuen-Han Tsai <[email protected]>
usb: gadget: f_rndis: Protect RNDIS options with mutex

Kuen-Han Tsai <[email protected]>
usb: gadget: f_subset: Fix unbalanced refcnt in geth_free

Jimmy Hu <[email protected]>
usb: gadget: uvc: fix NULL pointer dereference during unbind race

Kuen-Han Tsai <[email protected]>
usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop

Xi Ruoyao <[email protected]>
LoongArch: vDSO: Emit GNU_EH_FRAME correctly

Andrew Price <[email protected]>
gfs2: Validate i_depth for exhash directories

Andrew Price <[email protected]>
gfs2: Improve gfs2_consist_inode() usage

Filipe Manana <[email protected]>
btrfs: do not free data reservation in fallback from inline due to -ENOSPC

Qu Wenruo <[email protected]>
btrfs: fix the qgroup data free range for inline data extents

Sebastian Urban <[email protected]>
usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer

Alan Stern <[email protected]>
USB: dummy-hcd: Fix interrupt synchronization error

Alan Stern <[email protected]>
USB: dummy-hcd: Fix locking/synchronization error

Konrad Dybcio <[email protected]>
thunderbolt: Fix property read in nhi_wake_supported()

Xingjing Deng <[email protected]>

    misc: fastrpc: possible double-free of cctx->remote_heap

Rafael J. Wysocki <[email protected]>
thermal: core: Fix thermal zone device registration error path

Shenwei Wang <[email protected]>
gpio: mxc: map Both Edge pad wakeup to Rising Edge

Guangshuo Li <[email protected]>
cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path

Yufan Chen <[email protected]>
net: ftgmac100: fix ring allocation unwind on open failure

Yang Yang <[email protected]>
vxlan: validate ND option lengths in vxlan_na_create

Cosmin Tanislav <[email protected]>
counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member

Cosmin Tanislav <[email protected]>
counter: rz-mtu3-cnt: prevent counter from being toggled multiple times

Yifan Wu <[email protected]>
netfilter: ipset: drop logically empty buckets in mtype_del

Christian Eggers <[email protected]>
nvmem: imx: assign nvmem_cell_info::raw_len

Xu Yang <[email protected]>
dt-bindings: connector: add pd-disable dependency

Ian Abbott <[email protected]>
comedi: me4000: Fix potential overrun of firmware buffer

Ian Abbott <[email protected]>
comedi: me_daq: Fix potential overrun of firmware buffer

Ian Abbott <[email protected]>
comedi: ni_atmio16d: Fix invalid clean-up after failed attach

Ian Abbott <[email protected]>

    comedi: Reinit dev->spinlock between attachments to low-level drivers

Deepanshu Kartikey <[email protected]>
comedi: dt2815: add hardware detection to prevent crash

Oliver Neukum <[email protected]>
cdc-acm: new quirk for EPSON HMD

Yang Yang <[email protected]>
bridge: br_nd_send: validate ND option lengths

Miaohe Lin <[email protected]>
fork: defer linking file vma until vma is fully initialized

Alex Williamson <[email protected]>
vfio/pci: Insert full vma on mmap'd MMIO fault

Alex Williamson <[email protected]>
vfio/pci: Use unmap_mapping_range()

Alex Williamson <[email protected]>
vfio: Create vfio_fs_type with inode per device

Yongchao Wu <[email protected]>
usb: cdns3: gadget: fix state inconsistency on gadget init failure

Yongchao Wu <[email protected]>
usb: cdns3: gadget: fix NULL pointer dereference in ep_queue

Juno Choi <[email protected]>
usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop()

Justin Chen <[email protected]>
usb: ehci-brcm: fix sleep during atomic

Heitor Alves de Siqueira <[email protected]>
usb: usbtmc: Flush anchored URBs in usbtmc_release

Guangshuo Li <[email protected]>
usb: ulpi: fix double free in ulpi_register_interface() error path

Miao Li <[email protected]>
usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive

Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Fix out-of-sequence free_irq()

Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Move iio_device_register() to correct location

Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Fix irq resource leak

Ethan Tidmore <[email protected]>
iio: gyro: mpu3050: Fix incorrect free_irq() variable

Francesco Lavra <[email protected]>
iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only

Josh Poimboeuf <[email protected]>
iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin()

David Lechner <[email protected]>
iio: light: vcnl4035: fix scan buffer on big-endian

Antoniu Miclaus <[email protected]>

    iio: dac: ad5770r: fix error return in ad5770r_read_raw()

Valek Andrej <[email protected]>
iio: accel: fix ADXL355 temperature signature value

Zoltan Illes <[email protected]>
Input: xpad - add support for Razer Wolverine V3 Pro

Shengyu Qu <[email protected]>
Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode

Christoffer Sandberg <[email protected]>
Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table

Bart Van Assche <[email protected]>
Input: synaptics-rmi4 - fix a locking bug in an error path

David Lechner <[email protected]>
iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()

JP Hein <[email protected]>
USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam

Wanquan Zhong <[email protected]>
USB: serial: option: add support for Rolling Wireless RW135R-GL

Frej Drejhammar <[email protected]>
USB: serial: io_edgeport: add support for Blackbox IC135A

Ville Syrjälä <[email protected]>

    drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP

Thomas Zimmermann <[email protected]>
drm/ast: dp501: Fix initialization of SCU2C

David Lechner <[email protected]>
iio: adc: ti-adc161s626: fix buffer read on big-endian

Stefan Wiehler <[email protected]>
mips: mm: Allocate tlb_vpn array atomically

Sanman Pradhan <[email protected]>
hwmon: (occ) Fix division by zero in occ_show_power_1()

Maciej W. Rozycki <[email protected]>
MIPS: Fix the GCC version check for `__multi3' workaround

Oleh Konko <[email protected]>
Bluetooth: SMP: force responder MITM requirements before building the pairing response

Oleh Konko <[email protected]>
Bluetooth: SMP: derive legacy responder STK authentication from MITM state

Takashi Iwai <[email protected]>
ALSA: ctxfi: Fix missing SPDIFI1 index handling

Berk Cem Goksel <[email protected]>
ALSA: caiaq: fix stack out-of-bounds read in init_card

Ernestas Kulik <[email protected]>
USB: serial: option: add MeiG Smart SRM825WN

Alexey Velichayshiy <[email protected]>
wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler()

Yasuaki Torimaru <[email protected]>
wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation

Greg Kroah-Hartman <[email protected]>
drm/ioc32: stop speculation on the drm_compat_ioctl path

Paul Walmsley <[email protected]>
riscv: kgdb: fix several debug register assignment bugs

Shiji Yang <[email protected]>
mips: ralink: update CPU clock index

Sanman Pradhan <[email protected]>
hwmon: (occ) Fix missing newline in occ_show_extended()

Sanman Pradhan <[email protected]>
hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify()

Jamie Gibbons <[email protected]>
dt-bindings: gpio: fix microchip #interrupt-cells

Sanman Pradhan <[email protected]>
hwmon: (pxe1610) Check return value of page-select write in probe

Youssef Samir <[email protected]>
accel/qaic: Handle DBC deactivation if the owner went away

David Lechner <[email protected]>
iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one

Qi Tang <[email protected]>
bpf: reject direct access to nullable PTR_TO_BUF pointers

Eric Dumazet <[email protected]>
ipv6: avoid overflows in ip6_datagram_send_ctl()

Luka Gejak <[email protected]>
net: hsr: fix VLAN add unwind on slave errors

Xiang Mei <[email protected]>
net/sched: cls_flow: fix NULL pointer dereference on shared blocks

Xiang Mei <[email protected]>
net/sched: cls_fw: fix NULL pointer dereference on shared blocks

Martin Schiller <[email protected]>
net/x25: Fix overflow when accumulating packets

Martin Schiller <[email protected]>
net/x25: Fix potential double free of skb

Saeed Mahameed <[email protected]>
net/mlx5: Avoid "No data available" when FW version queries fail

Shay Drory <[email protected]>
net/mlx5: lag: Check for LAG device before creating debugfs

Fedor Pchelkin <[email protected]>
net: macb: properly unregister fixed rate clocks

Fedor Pchelkin <[email protected]>
net: macb: fix clk handling on PCI glue driver removal

Yucheng Lu <[email protected]>
net/sched: sch_netem: fix out-of-bounds access in packet corruption

Kuniyuki Iwashima <[email protected]>

    bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready().

Weiming Shi <[email protected]>
rds: ib: reject FRMR registration before IB connection is established

Keenan Dong <[email protected]>
Bluetooth: MGMT: validate mesh send advertising payload length

Pauli Virtanen <[email protected]>
Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt

Keenan Dong <[email protected]>
Bluetooth: MGMT: validate LTK enc_size on load

Cen Zhang <[email protected]>
Bluetooth: SCO: fix race conditions in sco_sock_connect()

Pauli Virtanen <[email protected]>
Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate

Pablo Neira Ayuso <[email protected]>
netfilter: nf_tables: reject immediate NF_QUEUE verdict

Pablo Neira Ayuso <[email protected]>
netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP

Pablo Neira Ayuso <[email protected]>
netfilter: ctnetlink: ignore explicit helper on new expectations

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: store netns and zone in expectation

Pablo Neira Ayuso <[email protected]>

    netfilter: nf_conntrack_expect: use expect->helper

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_expect: honor expectation helper field

Qi Tang <[email protected]>
netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent

Qi Tang <[email protected]>
netfilter: nf_conntrack_helper: pass helper to expect cleanup

Florian Westphal <[email protected]>
netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr

Florian Westphal <[email protected]>
netfilter: x_tables: ensure names are nul-terminated

Florian Westphal <[email protected]>
netfilter: nfnetlink_log: account for netlink header size

Pablo Neira Ayuso <[email protected]>
netfilter: flowtable: strictly check for maximum number of actions

Zhengchuan Liang <[email protected]>
net: ipv6: flowlabel: defer exclusive option free until RCU teardown

Alexei Starovoitov <[email protected]>
bpf: Fix regsafe() for pointers to packet

Suraj Gupta <[email protected]>
net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec

Pengpeng Hou <[email protected]>
NFC: pn533: bound the UART receive buffer

Yochai Eisenrich <[email protected]>
net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak

Paolo Abeni <[email protected]>
ipv6: prevent possible UaF in addrconf_permanent_addr()

Jihed Chaibi <[email protected]>
ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure

Xiang Mei <[email protected]>
net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()

Yang Yang <[email protected]>
bridge: br_nd_send: linearize skb before parsing ND options

Eric Dumazet <[email protected]>

    ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

Eric Dumazet <[email protected]>

    ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

Thomas Bogendoerfer <[email protected]>
tg3: Fix race for querying speed/duplex

Pengpeng Hou <[email protected]>
net/ipv6: ioam6: prevent schema length wraparound in trace fill

Yochai Eisenrich <[email protected]>
net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak

Jiayuan Chen <[email protected]>
net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak

Buday Csaba <[email protected]>
net: fec: fix the PTP periodic output sysfs interface

Norbert Szetei <[email protected]>
crypto: af-alg - fix NULL pointer dereference in scatterwalk

Horia Geantă <[email protected]>
crypto: caam - fix overflow on long hmac keys

Horia Geantă <[email protected]>
crypto: caam - fix DMA corruption on long hmac keys

Reshma Immaculate Rajkumar <[email protected]>
wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session

P Praneesh <[email protected]>
wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation

Venkateswara Naralasetty <[email protected]>
wifi: ath11k: skip status ring entry processing

Frank Li <[email protected]>
dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning

Praveen Talari <[email protected]>
spi: geni-qcom: Check DMA interrupts early in ISR

ZhengYuan Huang <[email protected]>
btrfs: reject root items with drop_progress and zero drop_level

Mikko Perttunen <[email protected]>
i2c: tegra: Don't mark devices with pins as IRQ safe

Lee Jones <[email protected]>
HID: multitouch: Check to ensure report responses match the request

Josh Poimboeuf <[email protected]>
objtool: Fix Clang jump table detection

Paul SAGE <[email protected]>
tg3: replace placeholder MAC address with device property

Johannes Thumshirn <[email protected]>
btrfs: don't take device_list_mutex when querying zone info

Deepanshu Kartikey <[email protected]>
atm: lec: fix use-after-free in sock_def_readable()

Benoît Sevens <[email protected]>
HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq

Pepper Gray <[email protected]>
arm64/scs: Fix handling of advance_loc4

-------------

Diffstat:

 .../bindings/auxdisplay/holtek,ht16k33.yaml        |   2 +-
 .../bindings/connector/usb-connector.yaml          |   1 +
 .../bindings/gpio/microchip,mpfs-gpio.yaml         |   4 +-
 Makefile                                           |   4 +-
 arch/arm64/kernel/patch-scs.c                      |   8 +
 arch/loongarch/include/asm/linkage.h               |  36 +++
 arch/loongarch/include/asm/sigframe.h              |   9 +
 arch/loongarch/kernel/asm-offsets.c                |   2 +
 arch/loongarch/kernel/signal.c                     |   6 +-
 arch/loongarch/vdso/Makefile                       |   4 +-
 arch/loongarch/vdso/sigreturn.S                    |   6 +-
 arch/mips/lib/multi3.c                             |   6 +-
 arch/mips/mm/tlb-r4k.c                             |   2 +-
 arch/mips/ralink/clk.c                             |   8 +-
 arch/riscv/kernel/kgdb.c                           |   7 +-
 arch/x86/kernel/cpu/common.c                       |  18 +-
 crypto/af_alg.c                                    |   4 +-
 drivers/accel/qaic/qaic_control.c                  |  47 +++-
 drivers/comedi/drivers.c                           |   8 +
 drivers/comedi/drivers/dt2815.c                    |  12 +
 drivers/comedi/drivers/me4000.c                    |  16 +-
 drivers/comedi/drivers/me_daq.c                    |  35 +--
 drivers/comedi/drivers/ni_atmio16d.c               |   3 +-
 drivers/counter/rz-mtu3-cnt.c                      |  67 ++---
 drivers/cpufreq/cpufreq_governor.c                 |   6 +-
 drivers/crypto/caam/caamalg_qi2.c                  |   3 +-
 drivers/crypto/caam/caamhash.c                     |   3 +-
 drivers/dma/fsl-edma-main.c                        |  31 +--
 drivers/gpio/gpio-mxc.c                            |  10 +-
 drivers/gpu/drm/ast/ast_dp501.c                    |   2 +-
 drivers/gpu/drm/drm_ioc32.c                        |   2 +
 drivers/gpu/drm/i915/display/g4x_dp.c              |   2 +-
 drivers/hid/hid-multitouch.c                       |   7 +
 drivers/hid/wacom_wac.c                            |  10 +
 drivers/hwmon/occ/common.c                         |  19 +-
 drivers/hwmon/pmbus/pxe1610.c                      |   5 +-
 drivers/hwmon/pmbus/tps53679.c                     |   4 +-
 drivers/i2c/busses/Kconfig                         |   2 +
 drivers/i2c/busses/i2c-tegra.c                     |   5 +-
 drivers/iio/accel/adxl355_core.c                   |   2 +-
 drivers/iio/adc/ti-adc161s626.c                    |  41 ++-
 drivers/iio/dac/ad5770r.c                          |   2 +-
 drivers/iio/gyro/mpu3050-core.c                    |  32 ++-
 drivers/iio/imu/bmi160/bmi160_core.c               |  15 +-
 drivers/iio/imu/bno055/bno055.c                    |   2 +-
 drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c |   3 +
 drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_buffer.c     |   4 +
 drivers/iio/light/vcnl4035.c                       |  18 +-
 drivers/input/joystick/xpad.c                      |   5 +
 drivers/input/rmi4/rmi_f54.c                       |   4 +-
 drivers/input/serio/i8042-acpipnpio.h              |   7 +
 drivers/misc/fastrpc.c                             |   1 +
 drivers/net/ethernet/broadcom/tg3.c                |  13 +-
 drivers/net/ethernet/cadence/macb_main.c           |  13 +-
 drivers/net/ethernet/cadence/macb_pci.c            |  10 +-
 drivers/net/ethernet/faraday/ftgmac100.c           |  28 ++-
 drivers/net/ethernet/freescale/fec_ptp.c           |   3 -
 drivers/net/ethernet/mellanox/mlx5/core/devlink.c  |   4 +-
 drivers/net/ethernet/mellanox/mlx5/core/fw.c       |  49 ++--
 .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c  |   3 +
 .../net/ethernet/mellanox/mlx5/core/mlx5_core.h    |   4 +-
 drivers/net/ethernet/microsoft/mana/mana_en.c      |   6 +-
 drivers/net/ethernet/xilinx/xilinx_axienet.h       |   4 +-
 drivers/net/phy/sfp.c                              |   7 +-
 drivers/net/vxlan/vxlan_core.c                     |   6 +-
 drivers/net/wireless/ath/ath11k/dp.h               |   6 +-
 drivers/net/wireless/ath/ath11k/dp_rx.c            | 210 ++++++++++------
 drivers/net/wireless/ath/ath11k/hal.c              |  16 +-
 drivers/net/wireless/ath/ath11k/hal.h              |   2 +
 drivers/net/wireless/intel/iwlwifi/mvm/d3.c        |   2 +-
 drivers/net/wireless/microchip/wilc1000/hif.c      |   2 +-
 drivers/net/wireless/virtual/virt_wifi.c           |   1 -
 drivers/nfc/pn533/uart.c                           |   3 +
 drivers/nvmem/imx-ocotp-ele.c                      |   1 +
 drivers/nvmem/imx-ocotp.c                          |   1 +
 drivers/spi/spi-geni-qcom.c                        |   9 +-
 drivers/target/loopback/tcm_loop.c                 |  52 +++-
 drivers/thermal/thermal_core.c                     |   1 +
 drivers/thunderbolt/nhi.c                          |   2 +-
 drivers/usb/cdns3/cdns3-gadget.c                   |   4 +
 drivers/usb/class/cdc-acm.c                        |   9 +
 drivers/usb/class/cdc-acm.h                        |   1 +
 drivers/usb/class/usbtmc.c                         |   3 +
 drivers/usb/common/ulpi.c                          |   5 +-
 drivers/usb/core/quirks.c                          |   3 +
 drivers/usb/dwc2/gadget.c                          |   2 +
 drivers/usb/gadget/function/f_rndis.c              |   9 +-
 drivers/usb/gadget/function/f_subset.c             |   6 +
 drivers/usb/gadget/function/f_uac1_legacy.c        |  47 +++-
 drivers/usb/gadget/function/f_uvc.c                |  39 ++-
 drivers/usb/gadget/function/u_ether.c              |  10 +-
 drivers/usb/gadget/function/uvc.h                  |   3 +
 drivers/usb/gadget/function/uvc_v4l2.c             |   5 +-
 drivers/usb/gadget/udc/dummy_hcd.c                 |  42 ++--
 drivers/usb/host/ehci-brcm.c                       |   4 +-
 drivers/usb/serial/io_edgeport.c                   |   3 +
 drivers/usb/serial/io_usbvend.h                    |   1 +
 drivers/usb/serial/option.c                        |   4 +
 drivers/vfio/device_cdev.c                         |   7 +
 drivers/vfio/group.c                               |   7 +
 drivers/vfio/pci/vfio_pci_core.c                   | 277 +++++----------------
 drivers/vfio/vfio_main.c                           |  44 ++++
 fs/btrfs/inode.c                                   |   6 +-
 fs/btrfs/tree-checker.c                            |  17 ++
 fs/btrfs/zoned.c                                   |   6 +-
 fs/ext4/fast_commit.c                              |   4 +-
 fs/ext4/inode.c                                    |  15 +-
 fs/ext4/mballoc.c                                  |   2 +
 fs/gfs2/dir.c                                      |  37 +--
 fs/gfs2/glops.c                                    |  40 +--
 fs/gfs2/xattr.c                                    |  28 ++-
 include/linux/netfilter/ipset/ip_set.h             |   2 +-
 include/linux/swapops.h                            |  20 +-
 include/linux/vfio.h                               |   1 +
 include/linux/vfio_pci_core.h                      |   2 -
 include/net/netfilter/nf_conntrack_expect.h        |  20 +-
 kernel/bpf/verifier.c                              |  10 +-
 kernel/fork.c                                      |  29 +--
 net/atm/lec.c                                      |  72 ++++--
 net/atm/lec.h                                      |   2 +-
 net/bluetooth/hci_event.c                          |  33 ++-
 net/bluetooth/hci_sync.c                           |  11 +-
 net/bluetooth/mgmt.c                               |  17 +-
 net/bluetooth/sco.c                                |  30 ++-
 net/bluetooth/smp.c                                |  11 +-
 net/bridge/br_arp_nd_proxy.c                       |  18 +-
 net/core/dev.c                                     |  22 +-
 net/core/skmsg.c                                   |  13 +-
 net/hsr/hsr_device.c                               |  32 +--
 net/ipv6/addrconf.c                                |   6 +-
 net/ipv6/datagram.c                                |  10 +
 net/ipv6/icmp.c                                    |   3 +
 net/ipv6/ioam6.c                                   |   4 +-
 net/ipv6/ip6_flowlabel.c                           |   5 -
 net/ipv6/ip6_tunnel.c                              |   5 +
 net/ipv6/ndisc.c                                   |   3 +
 net/mptcp/pm_netlink.c                             |   2 +-
 net/netfilter/ipset/ip_set_core.c                  |   4 +-
 net/netfilter/ipset/ip_set_hash_gen.h              |   2 +-
 net/netfilter/ipset/ip_set_list_set.c              |   4 +-
 net/netfilter/nf_conntrack_broadcast.c             |   8 +-
 net/netfilter/nf_conntrack_expect.c                |  25 +-
 net/netfilter/nf_conntrack_h323_main.c             |  12 +-
 net/netfilter/nf_conntrack_helper.c                |  13 +-
 net/netfilter/nf_conntrack_netlink.c               |  87 +++----
 net/netfilter/nf_conntrack_sip.c                   |   4 +-
 net/netfilter/nf_flow_table_offload.c              | 196 ++++++++++-----
 net/netfilter/nf_tables_api.c                      |   7 +-
 net/netfilter/nfnetlink_log.c                      |   2 +-
 net/netfilter/x_tables.c                           |  23 ++
 net/netfilter/xt_cgroup.c                          |   6 +
 net/netfilter/xt_rateest.c                         |   5 +
 net/qrtr/af_qrtr.c                                 |  31 +--
 net/rds/ib_rdma.c                                  |   7 +-
 net/sched/cls_api.c                                |   1 +
 net/sched/cls_flow.c                               |  10 +-
 net/sched/cls_fw.c                                 |  14 +-
 net/sched/sch_hfsc.c                               |   4 +-
 net/sched/sch_netem.c                              |   5 +-
 net/x25/x25_in.c                                   |   9 +-
 net/x25/x25_subr.c                                 |   1 +
 sound/pci/ctxfi/ctdaio.c                           |   1 +
 sound/soc/cirrus/ep93xx-i2s.c                      |  34 ++-
 sound/usb/caiaq/device.c                           |   2 +-
 tools/objtool/check.c                              |   5 +-
 165 files changed, 1668 insertions(+), 947 deletions(-)