Skip to content

5.10.266-rc1 review

Greg Kroah-Hartman dri-devel linux-patches linux-tegra lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest235 patches 7 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/235media: mtk-vcodec: potential null pointer deference in SCPdrivers/media/platform/mtk-vcodec/mtk_vcodec_fw_scp.c+2 -00 replies
2/235media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initializationdrivers/media/platform/mtk-vcodec/mtk_vcodec_fw_scp.c+4 -10 replies
3/235ipvs: separate destination availability stateinclude/net/ip_vs.h include/uapi/linux/ip_vs.h net/netfilter/ipvs/ip_vs_conn.c +5 more+21 -200 replies
4/235selinux: require every boolean value to be definedsecurity/selinux/ss/policydb.c+19 -00 replies
5/235selinux: reject a class permission count below its inherited commonsecurity/selinux/ss/policydb.c+12 -00 replies
6/235selinux: do not cancel a policy conversion that never startedsecurity/selinux/ss/services.c+3 -10 replies
7/235mptcp: options: reset DSS fields in case of unexpected sizenet/mptcp/options.c+7 -10 replies
8/235s390/qeth: validate user buffer length in SNMP and ARP query ioctlsdrivers/s390/net/qeth_core_main.c drivers/s390/net/qeth_l3_main.c+8 -00 replies
9/235ASoC: cs4265: sort the register default tablesound/soc/codecs/cs4265.c+2 -20 replies
10/235powerpc/pseries: pci - logic bugarch/powerpc/platforms/pseries/pci.c+1 -10 replies
11/235Input: synaptics-rmi4 - fix F55 transmitter electrode count typodrivers/input/rmi4/rmi_f55.c+2 -20 replies
12/235Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packetdrivers/input/mouse/focaltech.c+1 -10 replies
13/235Input: psxpad-spi - set driver data before usedrivers/input/joystick/psxpad-spi.c+1 -00 replies
14/235Input: atkbd - skip deactivate for Xiaomi Book Pro 14s internal keyboarddrivers/input/keyboard/atkbd.c+8 -00 replies
15/235Input: iforce - validate input packet lengthsdrivers/input/joystick/iforce/iforce-packets.c drivers/input/joystick/iforce/iforce-usb.c+13 -10 replies
16/235powerpc/pseries: lparcfg - fix kbuf[] underflowarch/powerpc/platforms/pseries/lparcfg.c+1 -10 replies
17/235Input: synaptics-rmi4 - zero report size on F54 work errordrivers/input/rmi4/rmi_f54.c+8 -80 replies
18/235Input: synaptics-rmi4 - bound the F54 report size to the allocated bufferdrivers/input/rmi4/rmi_f54.c+10 -20 replies
19/235Input: synaptics-rmi4 - block s_input when F54 queue is busydrivers/input/rmi4/rmi_f54.c+6 -10 replies
20/235Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queuedrivers/input/rmi4/rmi_f54.c+8 -00 replies
21/235crypto: qce - fix error path in devm_qce_register_algsdrivers/crypto/qce/core.c+1 -10 replies
22/235libceph: fix multiple unsafe decodes in decode_locker()net/ceph/cls_lock_client.c+9 -40 replies
23/235ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()kernel/trace/ftrace.c+5 -10 replies
24/235openrisc: signal: do not restore privileged SR bits on sigreturnarch/openrisc/include/asm/processor.h arch/openrisc/kernel/signal.c+5 -20 replies
25/235Input: sur40 - fix input device registration orderingdrivers/input/touchscreen/sur40.c+11 -100 replies
26/235Input: sur40 - fix V4L error path cleanupdrivers/input/touchscreen/sur40.c+3 -10 replies
27/235libceph: Avoid using invalid osd indices from primary_tempnet/ceph/osdmap.c+3 -20 replies
28/235ceph: fix MDS random selection readiness predicatefs/ceph/mdsmap.c+1 -10 replies
29/235mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bitdrivers/mmc/host/omap_hsmmc.c+1 -10 replies
30/235mmc: sdhci: unmap the bounce buffer before device releasedrivers/mmc/host/sdhci.c+16 -00 replies
31/235mmc: sdhci: make tuning_err a signed intdrivers/mmc/host/sdhci.h+1 -10 replies
32/235mmc: atmel-mci: Fix use-after-free in atmci_remove due to race conditiondrivers/mmc/host/atmel-mci.c+2 -00 replies
33/235drm/radeon: fix autosuspend cleanup during teardowndrivers/gpu/drm/radeon/radeon_kms.c+1 -00 replies
34/235s390/vfio_ccw: Fix out of bounds check on CCW arraydrivers/s390/cio/vfio_ccw_cp.c+5 -120 replies
35/235drm/amdgpu: Reject UVD message with invalid number of h265 refsdrivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c+3 -00 replies
36/235drm/amdgpu: validate GEM_CREATE domain combinationsdrivers/gpu/drm/amd/amdgpu/amdgpu_gem.c+21 -00 replies
37/235drm/amdgpu: Reject UVD message with dimensions above 4096drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c+2 -20 replies
38/235drm/amdgpu: Implement insert_end for VCE 3drivers/gpu/drm/amd/amdgpu/vce_v3_0.c+22 -40 replies
39/235drm/amdgpu: Fix UVD decode image min size calculationdrivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c+2 -20 replies
40/235xfs: check v5 superblock features earlyfs/xfs/libxfs/xfs_sb.c+2 -20 replies
41/235net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slotnet/smc/af_smc.c+2 -10 replies
42/235f2fs: fix UAF issue in f2fs_merge_page_bio()fs/f2fs/data.c+1 -10 replies
43/235bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitializedinclude/linux/bpf_lsm.h kernel/bpf/bpf_inode_storage.c security/bpf/hooks.c+17 -00 replies
44/235udmabuf: Do not create malformed scatterlistsdrivers/dma-buf/udmabuf.c+5 -30 replies
45/235dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warningdrivers/dma-buf/udmabuf.c+2 -20 replies
46/235fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()drivers/fpga/dfl-afu-main.c+3 -00 replies
47/235i2c: davinci: Unregister cpufreq notifier on probe failuredrivers/i2c/busses/i2c-davinci.c+3 -10 replies
48/235device property: Add fwnode_irq_get_bynamedrivers/base/property.c include/linux/property.h+30 -00 replies
49/235i2c: smbus: Use device_*() functions instead of of_*()drivers/i2c/i2c-core-base.c drivers/i2c/i2c-core-smbus.c drivers/i2c/i2c-smbus.c +1 more+13 -110 replies
50/235RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sgdrivers/infiniband/ulp/rtrs/rtrs-srv.c+3 -20 replies
51/235Input: mms114 - reject an oversized device packet sizedrivers/input/touchscreen/mms114.c+6 -00 replies
52/235VFS/audit: introduce kern_path_parent() for auditfs/namei.c include/linux/namei.h kernel/audit.h +2 more+55 -120 replies
53/235audit: widen ino fields to u64include/linux/audit.h kernel/audit.h kernel/audit_fsnotify.c +2 more+13 -140 replies
54/235audit: use unsigned int instead of unsignedinclude/linux/audit.h kernel/audit.c kernel/audit.h +4 more+22 -220 replies
55/235audit: fix recursive locking deadlock in audit_dupe_exe()kernel/audit.h kernel/audit_fsnotify.c kernel/audit_watch.c +1 more+57 -260 replies
56/235ALSA: hda: Fix cached processing coefficient verbssound/hda/hdac_regmap.c+2 -20 replies
57/235serial: max310x: replace bare use of unsigned with unsigned int (checkpatch)drivers/tty/serial/max310x.c+4 -40 replies
58/235serial: max310x: implement gpio_chip::get_direction()drivers/tty/serial/max310x.c+12 -00 replies
59/235rxrpc: serialize kernel accept preallocation with socket teardownnet/rxrpc/call_accept.c+20 -70 replies
60/235tipc: restrict socket queue dumps in enqueue tracepointsnet/tipc/socket.c+3 -30 replies
61/235rxrpc: Fix recv-recv race of completed callinclude/trace/events/rxrpc.h net/rxrpc/call_accept.c net/rxrpc/recvmsg.c+20 -20 replies
62/235rxrpc: Fix notification vs call-release vs recvmsgnet/rxrpc/call_object.c net/rxrpc/recvmsg.c+15 -160 replies
63/235rxrpc: Fix socket notification racenet/rxrpc/recvmsg.c+0 -20 replies
64/235mlxsw: spectrum: Apply RIF configuration when joining a LAGdrivers/net/ethernet/mellanox/mlxsw/spectrum.c drivers/net/ethernet/mellanox/mlxsw/spectrum.h drivers/net/ethernet/mellanox/mlxsw/spectrum_router.c+45 -70 replies
65/235mlxsw: spectrum: On port enslavement to a LAG, join uppers bridgesdrivers/net/ethernet/mellanox/mlxsw/spectrum.c+90 -00 replies
66/235mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()drivers/net/ethernet/mellanox/mlxsw/spectrum.c+1 -10 replies
67/235octeontx2: Annotate mmio regions as __iomemdrivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c+1 -10 replies
68/235octeontx2-pf: clear stale mailbox IRQ state before request_irq()drivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c+4 -40 replies
69/235ASoC: mediatek: mt8183: Check runtime resume during probesound/soc/mediatek/mt8183/mt8183-afe-pcm.c+8 -40 replies
70/235octeontx2-vf: clear stale mailbox IRQ state before request_irq()drivers/net/ethernet/marvell/octeontx2/nic/otx2_vf.c+4 -40 replies
71/235netfilter: nf_conntrack_sip: remove net variable shadowingnet/netfilter/nf_conntrack_sip.c+1 -20 replies
72/235netfilter: nf_conntrack_sip: validate skb_dst() before accessing itnet/netfilter/nf_conntrack_sip.c+5 -20 replies
73/235jbd2: add a helper to find out number of fast commit blocksfs/jbd2/journal.c include/linux/jbd2.h+10 -70 replies
74/235jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()fs/jbd2/journal.c+2 -00 replies
75/235netfilter: nft_set_pipapo: use GFP_KERNEL for insertionsnet/netfilter/nft_set_pipapo.c+10 -70 replies
76/235netfilter: nft_set_pipapo: make pipapo_clone helper return NULLnet/netfilter/nft_set_pipapo.c+7 -70 replies
77/235netfilter: nft_set_pipapo: prepare walk function for on-demand clonenet/netfilter/nft_set_pipapo.c+41 -230 replies
78/235netfilter: nft_set_pipapo: merge deactivate helper into callernet/netfilter/nft_set_pipapo.c+9 -300 replies
79/235netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clonenet/netfilter/nft_set_pipapo.c+15 -90 replies
80/235netfilter: nft_set_pipapo: move cloning of match info to insert/removal pathnet/netfilter/nft_set_pipapo.c+61 -210 replies
81/235netfilter: nft_set_pipapo: dont leak bad clone into future transactionnet/netfilter/nft_set_pipapo.c net/netfilter/nft_set_pipapo.h+37 -50 replies
82/235lsm: use default hook return value in call_int_hook()security/security.c+262 -1990 replies
83/235lsm: infrastructure management of the sock securityinclude/linux/lsm_hooks.h security/apparmor/include/net.h security/apparmor/lsm.c +7 more+152 -1190 replies
84/235selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()security/selinux/hooks.c+10 -90 replies
85/235net/9p: fix infinite loop in p9_client_rpc on fatal signalnet/9p/client.c+2 -00 replies
86/2359p: skip nlink update in cacheless mode to fix WARN_ONfs/9p/vfs_inode.c+9 -00 replies
87/235mtd: maps: vmu-flash: fix fault in unaligned fixupdrivers/mtd/maps/vmu-flash.c+3 -50 replies
88/235net: thunderbolt: Fix frags[] overflow by bounding frame_countdrivers/net/thunderbolt.c+6 -20 replies
89/235taskstats: fill_stats_for_tgid: use for_each_thread()kernel/taskstats.c+2 -30 replies
90/235taskstats: retain dead thread stats in TGID querieskernel/taskstats.c+33 -290 replies
91/235mtd: spi-nor: sst: remove global protection flagdrivers/mtd/spi-nor/sst.c+12 -180 replies
92/235mtd: spi-nor: intel: remove global protection flagdrivers/mtd/spi-nor/intel.c+3 -130 replies
93/235mtd: spi-nor: Move Software Write Protection logic out of the coredrivers/mtd/spi-nor/Makefile drivers/mtd/spi-nor/core.c drivers/mtd/spi-nor/core.h +1 more+431 -4030 replies
94/235mtd: spi-nor: Fix spi_nor_try_unlock_all()drivers/mtd/spi-nor/swp.c+6 -80 replies
95/235mtd: spi-nor: swp: Improve locking user experiencedrivers/mtd/spi-nor/swp.c+9 -20 replies
96/235smb: client: use kvzalloc() for megabyte buffer in simple fallocatefs/cifs/smb2ops.c+2 -20 replies
97/235tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()drivers/char/tpm/tpm_tis_core.c+24 -140 replies
98/235PCI: Add pci_find_vsec_capability() to find a specific VSECdrivers/pci/pci.c include/linux/pci.h+31 -00 replies
99/235dmaengine: dw-edma: Improve the linked list and data blocks definitiondrivers/dma/dw-edma/dw-edma-core.c drivers/dma/dw-edma/dw-edma-core.h drivers/dma/dw-edma/dw-edma-pcie.c +1 more+217 -1290 replies
100/235dmaengine: dw-edma: Remove unused irq field in struct dw_edma_chipdrivers/dma/dw-edma/dw-edma-pcie.c include/linux/dma/edma.h+0 -30 replies
101/235dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASKdrivers/dma/dw-edma/dw-edma-core.h drivers/dma/dw-edma/dw-edma-v0-core.c+7 -10 replies
102/235i2c: imx: separate atomic, dma and non-dma use casedrivers/i2c/busses/i2c-imx.c+70 -370 replies
103/235i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)drivers/i2c/busses/i2c-imx.c+16 -30 replies
104/235thunderbolt: Keep XDomain reference during the lifetime of a servicedrivers/thunderbolt/xdomain.c+2 -10 replies
105/235thunderbolt: Remove XDomain from the bus without holding tb->lockdrivers/thunderbolt/domain.c drivers/thunderbolt/icm.c drivers/thunderbolt/switch.c +3 more+111 -460 replies
106/235thunderbolt: Prevent XDomain delayed work use-after-free on disconnectdrivers/thunderbolt/xdomain.c include/linux/thunderbolt.h+19 -40 replies
107/235scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()drivers/scsi/lpfc/lpfc_init.c+1 -20 replies
108/235ovl: use linked upper dentry in copy-up tmpfilefs/overlayfs/copy_up.c+10 -40 replies
109/235scsi: target: core: pr: Initialize arrays at declaration timedrivers/target/target_core_pr.c+13 -230 replies
110/235scsi: target: core: Generate correct identifiers for PR OUT transport IDsdrivers/target/target_core_fabric_lib.c drivers/target/target_core_internal.h drivers/target/target_core_pr.c+60 -250 replies
111/235scsi: target: Bound PR-OUT TransportID parsing to the received bufferdrivers/target/target_core_fabric_lib.c drivers/target/target_core_internal.h drivers/target/target_core_pr.c+73 -230 replies
112/235dm-integrity: dont increment hash_offset twicedrivers/md/dm-integrity.c+0 -40 replies
113/235dm-verity: make error counter atomicdrivers/md/dm-verity-target.c drivers/md/dm-verity.h+8 -60 replies
114/235Input: ims-pcu - fix race condition in reset_device sysfs callbackdrivers/input/misc/ims-pcu.c+2 -00 replies
115/235wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()drivers/net/wireless/marvell/libertas_tf/main.c+1 -10 replies
116/235mmc: vub300: fix use-after-free on disconnectdrivers/mmc/host/vub300.c+6 -60 replies
117/235mmc: vub300: rename probe error labelsdrivers/mmc/host/vub300.c+11 -90 replies
118/235mmc: vub300: fix use-after-free on probe failuredrivers/mmc/host/vub300.c+7 -30 replies
119/235firmware_loader: introduce __free() cleanup hanlerinclude/linux/firmware.h+3 -00 replies
120/235Input: ims-pcu - fix firmware leak in async updatedrivers/input/misc/ims-pcu.c+2 -30 replies
121/235net: Add helper function to parse netlink msg of ip_tunnel_encapinclude/net/ip_tunnels.h net/ipv4/ip_tunnel_core.c net/ipv4/ipip.c +2 more+44 -1070 replies
122/235net: ipip: require CAP_NET_ADMIN in the device netns for changelinknet/ipv4/ipip.c+3 -00 replies
123/235net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelinknet/ipv6/ip6_tunnel.c+3 -00 replies
124/235net/sched: taprio: avoid calling child->ops->dequeue(child) twicenet/sched/sch_taprio.c+3 -70 replies
125/235net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peekednet/sched/sch_taprio.c+1 -10 replies
126/235gpio: tegra: do not call pinctrl for GPIO directiondrivers/gpio/gpio-tegra.c+2 -160 replies
127/235bootconfig: do not put quotes on cmdline items unless necessaryinit/main.c+9 -30 replies
128/235bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.cinclude/linux/bootconfig.h init/main.c lib/bootconfig.c+59 -450 replies
129/235bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()lib/bootconfig.c+16 -70 replies
130/235espintcp: use sk_msg_free_partial to fix partial sendnet/xfrm/espintcp.c+6 -260 replies
131/235net: ipa: fix SMEM state handle leaks in SMP2P initdrivers/net/ipa/ipa_smp2p.c+22 -80 replies
132/235octeontx2-pf: fix SQB pointer leak on init failuredrivers/net/ethernet/marvell/octeontx2/nic/otx2_pf.c+1 -20 replies
133/235fs/resctrl: Fix double-add of pseudo-locked regions RMID to free listarch/x86/kernel/cpu/resctrl/rdtgroup.c+7 -50 replies
134/235usb: gadget: bdc: fix checkpatch.pl spacing errordrivers/usb/gadget/udc/bdc/bdc_udc.c+1 -10 replies
135/235usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardowndrivers/usb/gadget/udc/bdc/bdc_core.c drivers/usb/gadget/udc/bdc/bdc_udc.c+24 -30 replies
136/235USB: serial: keyspan_pda: refactor write-room handlingdrivers/usb/serial/keyspan_pda.c+50 -630 replies
137/235USB: serial: keyspan_pda: fix write implementationdrivers/usb/serial/keyspan_pda.c+52 -590 replies
138/235USB: serial: keyspan_pda: add write-fifo supportdrivers/usb/serial/keyspan_pda.c+65 -690 replies
139/235USB: serial: keyspan_pda: clean up comments and whitespacedrivers/usb/serial/keyspan_pda.c+47 -500 replies
140/235USB: serial: keyspan_pda: fix data loss on receive throttlingdrivers/usb/serial/keyspan_pda.c+35 -90 replies
141/235KVM: x86: Drop @vcpu parameter from kvm_x86_ops.hwapic_isr_update()arch/x86/include/asm/kvm_host.h arch/x86/kvm/lapic.c arch/x86/kvm/svm/avic.c +2 more+8 -100 replies
142/235KVM: x86: Check for in-kernel xAPIC when querying APICv for directed yieldarch/x86/kvm/x86.c+2 -10 replies
143/235KVM: x86: Move "apicv_active" into "struct kvm_lapic"arch/x86/include/asm/kvm_host.h arch/x86/kvm/lapic.c arch/x86/kvm/lapic.h +3 more+23 -330 replies
144/235KVM: Introduce vcpu->wants_to_runarch/arm64/kvm/arm.c arch/mips/kvm/mips.c arch/powerpc/kvm/powerpc.c +4 more+10 -60 replies
145/235KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUNarch/x86/kvm/lapic.c+1 -10 replies
146/235drm/dp/mst: fix buffer overflows in sideband chunk accumulationdrivers/gpu/drm/drm_dp_mst_topology.c+9 -00 replies
147/235usb: gadget: f_tcm: synchronize delayed set_alt with teardowndrivers/usb/gadget/function/f_tcm.c drivers/usb/gadget/function/tcm.h+177 -280 replies
148/235drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsersdrivers/gpu/drm/drm_dp_mst_topology.c+4 -130 replies
149/235drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsersdrivers/gpu/drm/drm_dp_mst_topology.c+4 -20 replies
150/235dma-buf/drivers: make reserving a shared slot mandatory v4drivers/dma-buf/dma-resv.c drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c +12 more+21 -210 replies
151/235drm/virtio: use uninterruptible resv lock for plane updatesdrivers/gpu/drm/virtio/virtgpu_drv.h drivers/gpu/drm/virtio/virtgpu_gem.c drivers/gpu/drm/virtio/virtgpu_plane.c+22 -10 replies
152/235drm/displayid: fix Tiled Display Topology ID sizedrivers/gpu/drm/drm_connector.c include/drm/drm_connector.h include/drm/drm_displayid.h+10 -100 replies
153/235drm/tegra: fbdev: Remove offset into framebuffer memorydrivers/gpu/drm/tegra/fb.c+2 -60 replies
154/235drm/virtio: Return proper error codes instead of -1drivers/gpu/drm/virtio/virtgpu_vq.c+3 -30 replies
155/235drm/virtio: bound EDID block reads to the response bufferdrivers/gpu/drm/virtio/virtgpu_vq.c+2 -10 replies
156/235media: aspeed: fix missing of_reserved_mem_device_release() on probe failuredrivers/media/platform/aspeed-video.c+1 -00 replies
157/235drm/i915/hdcp: require monotonically increasing seq_num_vdrivers/gpu/drm/i915/display/intel_hdcp.c+4 -30 replies
158/235media: marvell-cam: fix missing pci_disable_device() on removedrivers/media/platform/marvell-ccic/cafe-driver.c+1 -00 replies
159/235media: i2c: imx219: Drop IMX219_VTS_* macrosdrivers/media/i2c/imx219.c+7 -170 replies
160/235media: i2c: imx219: Correct the minimum vblanking valuedrivers/media/i2c/imx219.c+1 -10 replies
161/235media: i2c: imx219: Rename VTS to FRM_LENGTHdrivers/media/i2c/imx219.c+16 -170 replies
162/235media: imx219: Fix maximum frame length in linesdrivers/media/i2c/imx219.c+1 -10 replies
163/235wifi: ath6kl: fix use-after-free in aggr_reset_state()drivers/net/wireless/ath/ath6kl/txrx.c+1 -10 replies
164/235media: v4l: async: Set owner for async sub-devicesdrivers/media/v4l2-core/v4l2-async.c include/media/v4l2-async.h+9 -30 replies
165/235media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()drivers/media/v4l2-core/v4l2-fwnode.c include/media/v4l2-async.h+8 -40 replies
166/235wifi: brcmfmac: drain bus_reset work on device removaldrivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c drivers/net/wireless/broadcom/brcm80211/brcmfmac/bus.h drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c +4 more+77 -30 replies
167/235ALSA: seq: close a re-opened queue timer in the destructorsound/core/seq/seq_timer.c+12 -10 replies
168/235serial: 8250_mid: Remove unneeded test for ->setup() presencedrivers/tty/serial/8250/8250_mid.c+3 -50 replies
169/235serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platformsdrivers/tty/serial/8250/8250_mid.c+9 -50 replies
170/235mptcp: only set DATA_FIN when a mapping is presentnet/mptcp/options.c+7 -60 replies
171/235sc16is7xx: Properly resume TX after stopdrivers/tty/serial/sc16is7xx.c+41 -60 replies
172/235serial: sc16is7xx: Fill in rs485_supporteddrivers/tty/serial/sc16is7xx.c+7 -00 replies
173/235serial: sc16is7xx: remove obsolete out_thread labeldrivers/tty/serial/sc16is7xx.c+1 -30 replies
174/235serial: sc16is7xx: fix regression with GPIO configurationdrivers/tty/serial/sc16is7xx.c+105 -190 replies
175/235serial: sc16is7xx: implement gpio get_direction() callbackdrivers/tty/serial/sc16is7xx.c+12 -00 replies
176/235mptcp: fix subflow accounting on closenet/mptcp/protocol.h net/mptcp/subflow.c+23 -30 replies
177/235mptcp: decrement subflows counter on failed passive joinnet/mptcp/protocol.c+3 -10 replies
178/235sctp: avoid auth_enable sysctl UAF during netns teardownnet/sctp/protocol.c net/sctp/sysctl.c+19 -100 replies
179/235ceph: avoid fs reclaim while using current->journal_infofs/ceph/mds_client.c+11 -00 replies
180/235libceph: Amend checking to fix `make W=1` build breakagenet/ceph/osdmap.c+2 -20 replies
181/235libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZEnet/ceph/osdmap.c+2 -20 replies
182/235libceph: fix two unsafe bare decodes in decode_lockers()net/ceph/cls_lock_client.c+6 -20 replies
183/235libceph: add doutc and *_client debug macros supportinclude/linux/ceph/ceph_debug.h+38 -00 replies
184/235ceph: rename _to_client() to _to_fs_client()fs/ceph/addr.c fs/ceph/cache.c fs/ceph/caps.c +8 more+91 -910 replies
185/235ceph: fix hanging __ceph_get_caps() with stale mds_wantedfs/ceph/caps.c fs/ceph/file.c fs/ceph/mds_client.h+22 -60 replies
186/235net/sched: serialize qdisc_rtab_list against concurrent get/putnet/sched/sch_api.c+19 -50 replies
187/235net: gro: fix double aggregation of flush-marked skbsnet/core/skbuff.c+3 -10 replies
188/235super: fix emergency thaw deadlock on frozen block devicesfs/super.c+15 -40 replies
189/235ftrace: Add global mutex to serialize trace_parser accesskernel/trace/ftrace.c+15 -00 replies
190/235skbuff: introduce skb_pull_datainclude/linux/skbuff.h net/core/skbuff.c+26 -00 replies
191/235Bluetooth: HIDP: reject frames without a transaction headernet/bluetooth/hidp/core.c+15 -100 replies
192/235mm/vmstat: fold stranded per-cpu node stats when a node comes onlinemm/memory_hotplug.c+11 -40 replies
193/235net: pktgen: fix code style (WARNING: Block comments)net/core/pktgen.c+23 -160 replies
194/235net: pktgen: fix proc entry use-after-freenet/core/pktgen.c+1 -30 replies
195/235scsi: sd: sd_zbc: Improve source code documentationdrivers/scsi/sd.h drivers/scsi/sd_zbc.c+54 -60 replies
196/235scsi: sd: sd_zbc: Use logical blocks as unit when querying zonesdrivers/scsi/sd_zbc.c+5 -60 replies
197/235scsi: sd: sd_zbc: Return early in sd_zbc_check_zoned_characteristics()drivers/scsi/sd_zbc.c+7 -60 replies
198/235scsi: scsi_debug: Rename zone type constantsdrivers/scsi/scsi_debug.c+9 -90 replies
199/235scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB writedrivers/scsi/scsi_debug.c+6 -30 replies
200/235ice: fix VF interrupts cleanupdrivers/net/ethernet/intel/ice/ice_virtchnl_pf.c+48 -00 replies
201/235ice: fix memory leak in ice_lbtest_prepare_rings()drivers/net/ethernet/intel/ice/ice_ethtool.c+5 -50 replies
202/235i2c: bcm-iproc: remove printout on handled timeoutsdrivers/i2c/busses/i2c-bcm-iproc.c+0 -20 replies
203/235i2c: iproc: reset bus after timeout if START_BUSY is stuckdrivers/i2c/busses/i2c-bcm-iproc.c+11 -00 replies
204/235fsnotify: opt-in for permission events at file open timeinclude/linux/fs.h+6 -00 replies
205/235fs: dont block write during exec on pre-content watched filesfs/binfmt_elf.c fs/binfmt_elf_fdpic.c fs/exec.c +1 more+29 -70 replies
206/235binfmt_misc: restore write access when removing an entryfs/binfmt_misc.c+3 -10 replies
207/235can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failuredrivers/net/can/usb/gs_usb.c+1 -10 replies
208/235hwmon: (npcm750-pwm-fan): stop fan timer on device detachdrivers/hwmon/npcm750-pwm-fan.c+11 -00 replies
209/235drm/amd/pm: fix torn gpu metrics readsdrivers/gpu/drm/amd/pm/amdgpu_pm.c+6 -80 replies
210/235ALSA: usx2y: Fix potential leaks of uninitialized memorysound/usb/usx2y/usX2Yhwdep.c sound/usb/usx2y/usbus428ctldefs.h sound/usb/usx2y/usbusx2y.c +1 more+15 -100 replies
211/235ALSA: usx2y: bound the hwdep mmap fault offsetsound/usb/usx2y/usX2Yhwdep.c sound/usb/usx2y/usx2yhwdeppcm.c+4 -00 replies
212/235sched/psi: Shut down rtpoll_timer in psi_cgroup_free()kernel/sched/psi.c+6 -00 replies
213/235net/sched: act_gact, act_police: range check the fallback control actioninclude/net/act_api.h net/sched/act_gact.c net/sched/act_police.c+31 -00 replies
214/235mm/ptdump: always stabilise against page table freeing using init_mmmm/pagewalk.c mm/ptdump.c+15 -00 replies
215/235net: atlantic: free stranded TX buffers on ring deinitdrivers/net/ethernet/aquantia/atlantic/aq_ring.c drivers/net/ethernet/aquantia/atlantic/aq_ring.h drivers/net/ethernet/aquantia/atlantic/aq_vec.c+27 -10 replies
216/235arm64: tegra: Add EL2 virtual timer interrupt for Tegra194arch/arm64/boot/dts/nvidia/tegra194.dtsi+2 -00 replies
217/235crypto: ccm - Set rfc4309 maxauthsize from childcrypto/ccm.c+1 -10 replies
218/235netfilter: ipset: fix refcount race between list:set GC and swapnet/netfilter/ipset/ip_set_core.c+13 -60 replies
219/235netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort pathnet/netfilter/nf_tables_offload.c+1 -10 replies
220/235netfilter: flowtable: publish GC-visible tuple lastnet/netfilter/nf_flow_table_core.c+4 -30 replies
221/235netfilter: ipset: fix list type element drift bugnet/netfilter/ipset/ip_set_list_set.c+5 -20 replies
222/235net: packet: fix wrong transport_header when sending VLAN-tagged framenet/packet/af_packet.c+2 -20 replies
223/235ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlerssound/soc/xilinx/xlnx_formatter_pcm.c+4 -60 replies
224/235af_packet: Dont send zero-byte data in tpacket_snd().net/packet/af_packet.c+3 -00 replies
225/235net: ethernet: ti: am65-cpsw: move ale selection in pdatadrivers/net/ethernet/ti/am65-cpsw-nuss.c drivers/net/ethernet/ti/am65-cpsw-nuss.h+4 -10 replies
226/235net: ethernet: ti: am65-cpsw: move free desc queue mode selection in pdatadrivers/net/ethernet/ti/am65-cpsw-nuss.c drivers/net/ethernet/ti/am65-cpsw-nuss.h+5 -10 replies
227/235net: ethernet: ti: am65-cpsw: add multi port support in mac-only modedrivers/net/ethernet/ti/am65-cpsw-nuss.c drivers/net/ethernet/ti/am65-cpsw-nuss.h+82 -480 replies
228/235net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAGdrivers/net/ethernet/ti/am65-cpsw-nuss.c+2 -00 replies
229/235net/smc: rdma write inline if qp has sufficient inline spacenet/smc/smc_tx.c+12 -50 replies
230/235net: smc: fix splice entry lifetime imbalance in smc_rx_splicenet/smc/smc_rx.c+8 -40 replies
231/235binfmt_misc: use exe_file_deny_write_access() for the interpreter clonefs/binfmt_misc.c+8 -20 replies
232/235udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()drivers/dma-buf/udmabuf.c+5 -40 replies
233/235i2c: smbus: Check for parent device before dereferencedrivers/i2c/i2c-core-smbus.c+6 -20 replies
234/235net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe()drivers/net/ethernet/ti/am65-cpsw-nuss.c+1 -10 replies
235/235USB: serial: keyspan_pda: fix information leakdrivers/usb/serial/keyspan_pda.c+1 -10 replies

Reviews trailers per patch

144 of 235 patches have a Reviewed-by or Acked-by.

PatchJulian AnastasovStephen SmalleyAlexandra WinterJoe DamatoCharles KeepaxRichard FitzgeraldBartosz GolaszewskiIlya DryomovMasami Hiramatsu (Google)Viacheslav DubeykoLinus WalleijFrank LiMatthew RosatoLeo LiuChristian KönigRuijing DongAlex DeucherDarrick J. WongEmil TsalapatisAmery HungVivek KasireddyXu YilunAndy ShevchenkoRafael J. WysockiAndrew ZhouMd Haris IqbalNayna JainR Nageswara SastryHans VerkuilJiri PirkoDanielle RatsonIdo SchimmelSimon HormanRatheesh KannothWaiman LongRichard Guy BriggsBaokun LiZhang YiJan KaraStefano BrivioSeeseeCasey SchauflerPaul MooreKees CookJohn JohansenMika WesterbergBalbir SinghTudor AmbarusMichael WallePratyush YadavHugo VilleneuveTung NguyenJeffrey AltmanJustin TeeAmir GoldsteinMiklos SzerediMike ChristieJohannes ThumshirnDmitry BogdanovJohn GarryDavid DisseldorpFredric CoverJohan HovoldLuis ChamberalinKuniyuki IwashimaStefan WahrenKurt KanzenbachVictor NogueiraJamal Hadi SalimLarysa ZarembaAlex ElderBjorn HelgaasFlorian FainelliFelipe BalbiSerge SeminManivannan SadhasivamVinod KoulOleksij RempelCarlos SongStefan EichenbergerJean-Marc RangerSebastian Andrzej SiewiorGreg Kroah-HartmanLyude PaulDaniel VetterDave AirlieSuraj KandpalDave StevensonJacopo MondiLaurent PinchartVasanthakumar ThiagarajanArend van SprielMatthieu Baerts (NGI0)Lech PerczakRob HerringDavid MatlackSean ChristophersonJim MattsonJames HoughtonChao GaoXiubo LiJakub KicinskiToke Høiland-JørgensenDamien Le MoalHimanshu MadhaniDouglas GilbertBart Van AsscheAleksandr LoktionovPatryk HoldaJacob KellerRinitha SRay JuiChristian BraunerAlex MarkuzeKenneth FengJohannes WeinerMatt FlemingSuren BaghdasaryanMike Rapoport (Microsoft)David Hildenbrand (Arm)Kiryl ShutsemauSukhdeep SinghMina AlmasryJozsef KadlecsikPatrick DonnellyMilind ChangireEric DumazetWillem de BruijnXin LongTony Lukernel test robotKarsten GraulDust LiSidraya JayagondMikhail GavrilovMaciej FijalkowskiMichal SimekJiayuan ChenJesse BrandeburgChintan VankarBrett A C SheffieldDominique MartinetBarry K. NathanMark Brown
SeriesT-b T-b T-b T-b T-b
1/235
2/235
3/235A-b
4/235A-b
5/235A-b
6/235A-b
7/235
8/235R-b R-b
9/235R-b R-b
10/235A-b T-b
11/235
12/235
13/235
14/235R-b
15/235
16/235A-b T-b
17/235
18/235
19/235R-b
20/235
21/235R-b
22/235R-b
23/235A-b
24/235
25/235
26/235
27/235R-b
28/235R-b
29/235
30/235R-b
31/235R-b
32/235
33/235
34/235R-b
35/235R-b
36/235R-b
37/235A-b R-b
38/235A-b
39/235A-b R-b
40/235R-b
41/235
42/235
43/235R-b R-b
44/235R-b
45/235A-b
46/235R-b
47/235R-b
48/235R-b A-b
49/235R-b
50/235R-b
51/235
52/235
53/235A-b
54/235
55/235A-b A-b
56/235
57/235R-b
58/235R-b R-b R-b
59/235
60/235R-b
61/235R-b
62/235R-b
63/235
64/235R-b
65/235R-b
66/235R-b
67/235
68/235R-b R-b
69/235
70/235R-b R-b
71/235
72/235
73/235
74/235R-b R-b R-b
75/235
76/235R-b
77/235R-b
78/235R-b
79/235R-b
80/235R-b
81/235R-b Reported-and-tested-by
82/235R-b
83/235A-b A-b R-b R-b
84/235R-b T-b
85/235
86/235
87/235
88/235A-b
89/235
90/235A-b
91/235R-b
92/235R-b
93/235R-b A-b
94/235R-b T-b
95/235R-b
96/235T-b
97/235R-b T-b
98/235A-b
99/235
100/235T-b R-b T-b R-b A-b
101/235
102/235R-b A-b
103/235A-b A-b R-b
104/235
105/235
106/235
107/235R-b
108/235R-b R-b
109/235R-b R-b
110/235R-b
111/235R-b R-b
112/235
113/235
114/235
115/235
116/235
117/235
118/235R-b
119/235A-b
120/235
121/235
122/235R-b
123/235R-b
124/235R-b
125/235R-b A-b
126/235
127/235
128/235
129/235
130/235
131/235R-b R-b
132/235R-b
133/235
134/235A-b A-b
135/235
136/235A-b R-b
137/235A-b R-b
138/235A-b R-b
139/235A-b R-b
140/235
141/235
142/235
143/235
144/235
145/235Debugged-by Debugged-by Debugged-by Debugged-by R-b R-b
146/235R-b
147/235
148/235R-b
149/235R-b
150/235R-b
151/235
152/235R-b
153/235
154/235
155/235
156/235
157/235R-b
158/235
159/235R-b R-b
160/235R-b R-b
161/235R-b
162/235R-b R-b
163/235R-b
164/235
165/235R-b R-b
166/235A-b
167/235
168/235
169/235R-b
170/235R-b
171/235
172/235
173/235R-b R-b T-b
174/235R-b R-b T-b A-b
175/235A-b
176/235
177/235R-b
178/235A-b
179/235R-b R-b
180/235R-b
181/235R-b
182/235R-b
183/235R-b R-b
184/235R-b R-b
185/235R-b
186/235A-b R-b
187/235R-b
188/235
189/235
190/235A-b
191/235
192/235
193/235R-b
194/235R-b
195/235R-b R-b A-b
196/235R-b A-b
197/235R-b A-b
198/235A-b
199/235R-b R-b
200/235R-b R-b T-b
201/235R-b T-b
202/235
203/235A-b
204/235
205/235A-b
206/235
207/235
208/235
209/235R-b
210/235
211/235
212/235A-b T-b A-b
213/235T-b A-b
214/235R-b A-b R-b
215/235R-b A-b
216/235
217/235
218/235A-b
219/235
220/235
221/235A-b
222/235R-b
223/235R-b
224/235R-b R-b
225/235R-b
226/235R-b
227/235R-b
228/235R-b R-b
229/235R-b T-b A-b
230/235R-b R-b
231/235
232/235R-b
233/235
234/235R-b
235/235

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 144 reviewers.

Read the v1 thread

Cover letter [PATCH 5.10 000/235] 5.10.266-rc1 review

This is the start of the stable review cycle for the 5.10.266 release. There are 235 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 22 Aug 2026 14:51:11 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.266-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 5.10.266-rc1

Johan Hovold <[email protected]>
USB: serial: keyspan_pda: fix information leak

Zhang Changzhong <[email protected]>
net: ethernet: ti: am65-cpsw: fix error handling in am65_cpsw_nuss_probe()

Andy Shevchenko <[email protected]>
i2c: smbus: Check for parent device before dereference

Robert Mader <[email protected]>
udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf()

Christian Brauner <[email protected]>
binfmt_misc: use exe_file_deny_write_access() for the interpreter clone

Daming Li <[email protected]>
net: smc: fix splice entry lifetime imbalance in smc_rx_splice

Guangguan Wang <[email protected]>
net/smc: rdma write inline if qp has sufficient inline space

Siddharth Vadapalli <[email protected]>
net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

Grygorii Strashko <[email protected]>
net: ethernet: ti: am65-cpsw: add multi port support in mac-only mode

Grygorii Strashko <[email protected]>
net: ethernet: ti: am65-cpsw: move free desc queue mode selection in pdata

Grygorii Strashko <[email protected]>
net: ethernet: ti: am65-cpsw: move ale selection in pdata

Eric Dumazet <[email protected]>
af_packet: Don't send zero-byte data in tpacket_snd().

Rosen Penev <[email protected]>
ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers

Wei Fang <[email protected]>
net: packet: fix wrong transport_header when sending VLAN-tagged frame

Florian Westphal <[email protected]>
netfilter: ipset: fix list type element drift bug

Jérémy Jean <[email protected]>
netfilter: flowtable: publish GC-visible tuple last

Alexey Velichayshiy <[email protected]>
netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path

Xiang Mei (Microsoft) <[email protected]>
netfilter: ipset: fix refcount race between list:set GC and swap

Herbert Xu <[email protected]>
crypto: ccm - Set rfc4309 maxauthsize from child

Jon Hunter <[email protected]>
arm64: tegra: Add EL2 virtual timer interrupt for Tegra194

Yangyu Chen <[email protected]>
net: atlantic: free stranded TX buffers on ring deinit

Lorenzo Stoakes (ARM) <[email protected]>
mm/ptdump: always stabilise against page table freeing using init_mm

Hyunjung Ko <[email protected]>
net/sched: act_gact, act_police: range check the fallback control action

Tejun Heo <[email protected]>
sched/psi: Shut down rtpoll_timer in psi_cgroup_free()

Baul Lee <[email protected]>
ALSA: usx2y: bound the hwdep mmap fault offset

Takashi Iwai <[email protected]>
ALSA: usx2y: Fix potential leaks of uninitialized memory

Yang Wang <[email protected]>
drm/amd/pm: fix torn gpu metrics reads

Hongyan Xu <[email protected]>
hwmon: (npcm750-pwm-fan): stop fan timer on device detach

Marc Kleine-Budde <[email protected]>
can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure

Christian Brauner <[email protected]>
binfmt_misc: restore write access when removing an entry

Amir Goldstein <[email protected]>
fs: don't block write during exec on pre-content watched files

Amir Goldstein <[email protected]>
fsnotify: opt-in for permission events at file open time

Jonas Gorski <[email protected]>
i2c: iproc: reset bus after timeout if START_BUSY is stuck

Wolfram Sang <[email protected]>
i2c: bcm-iproc: remove printout on handled timeouts

Dawei Feng <[email protected]>
ice: fix memory leak in ice_lbtest_prepare_rings()

Dawid Osuchowski <[email protected]>
ice: fix VF interrupts cleanup

Ibrahim Hashimov <[email protected]>
scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write

Damien Le Moal <[email protected]>
scsi: scsi_debug: Rename zone type constants

Damien Le Moal <[email protected]>
scsi: sd: sd_zbc: Return early in sd_zbc_check_zoned_characteristics()

Damien Le Moal <[email protected]>
scsi: sd: sd_zbc: Use logical blocks as unit when querying zones

Bart Van Assche <[email protected]>
scsi: sd: sd_zbc: Improve source code documentation

Chengfeng Ye <[email protected]>
net: pktgen: fix proc entry use-after-free

Peter Seiderer <[email protected]>
net: pktgen: fix code style (WARNING: Block comments)

Gregory Price <[email protected]>
mm/vmstat: fold stranded per-cpu node stats when a node comes online

Sangho Lee <[email protected]>
Bluetooth: HIDP: reject frames without a transaction header

Luiz Augusto von Dentz <[email protected]>
skbuff: introduce skb_pull_data

Tengda Wu <[email protected]>
ftrace: Add global mutex to serialize trace_parser access

Christian Brauner <[email protected]>
super: fix emergency thaw deadlock on frozen block devices

Shiming Cheng <[email protected]>
net: gro: fix double aggregation of flush-marked skbs

Aldo Ariel Panzardo <[email protected]>
net/sched: serialize qdisc_rtab_list against concurrent get/put

Max Kellermann <[email protected]>
ceph: fix hanging __ceph_get_caps() with stale mds_wanted

Xiubo Li <[email protected]>
ceph: rename _to_client() to _to_fs_client()

Xiubo Li <[email protected]>
libceph: add doutc and *_client debug macros support

Pavitra Jha <[email protected]>
libceph: fix two unsafe bare decodes in decode_lockers()

Xiang Mei <[email protected]>
libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE

Andy Shevchenko <[email protected]>
libceph: Amend checking to fix make W=1 build breakage

Max Kellermann <[email protected]>

    ceph: avoid fs reclaim while using current->journal_info

Zhiling Zou <[email protected]>
sctp: avoid auth_enable sysctl UAF during netns teardown

Chenguang Zhao <[email protected]>
mptcp: decrement subflows counter on failed passive join

Paolo Abeni <[email protected]>
mptcp: fix subflow accounting on close

Hugo Villeneuve <[email protected]>
serial: sc16is7xx: implement gpio get_direction() callback

Hugo Villeneuve <[email protected]>
serial: sc16is7xx: fix regression with GPIO configuration

Hugo Villeneuve <[email protected]>
serial: sc16is7xx: remove obsolete out_thread label

Ilpo Järvinen <[email protected]>
serial: sc16is7xx: Fill in rs485_supported

Tomasz Moń <[email protected]>
sc16is7xx: Properly resume TX after stop

Michael Bommarito <[email protected]>
mptcp: only set DATA_FIN when a mapping is present

Jiangshan Yi <[email protected]>
serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms

Andy Shevchenko <[email protected]>

    serial: 8250_mid: Remove unneeded test for ->setup() presence

Norbert Szetei <[email protected]>
ALSA: seq: close a re-opened queue timer in the destructor

Fan Wu <[email protected]>
wifi: brcmfmac: drain bus_reset work on device removal

Mirela Rabulea <[email protected]>
media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor()

Sakari Ailus <[email protected]>
media: v4l: async: Set owner for async sub-devices

Daniel Hodges <[email protected]>
wifi: ath6kl: fix use-after-free in aggr_reset_state()

Sakari Ailus <[email protected]>
media: imx219: Fix maximum frame length in lines

Jai Luthra <[email protected]>
media: i2c: imx219: Rename VTS to FRM_LENGTH

David Plowman <[email protected]>
media: i2c: imx219: Correct the minimum vblanking value

Laurent Pinchart <[email protected]>

    media: i2c: imx219: Drop IMX219_VTS_* macros

Guangshuo Li <[email protected]>
media: marvell-cam: fix missing pci_disable_device() on remove

Jani Nikula <[email protected]>
drm/i915/hdcp: require monotonically increasing seq_num_v

David Carlier <[email protected]>
media: aspeed: fix missing of_reserved_mem_device_release() on probe failure

Bryam Vargas <[email protected]>
drm/virtio: bound EDID block reads to the response buffer

Dmitry Osipenko <[email protected]>
drm/virtio: Return proper error codes instead of -1

Thomas Zimmermann <[email protected]>
drm/tegra: fbdev: Remove offset into framebuffer memory

Jani Nikula <[email protected]>
drm/displayid: fix Tiled Display Topology ID size

Deepanshu Kartikey <[email protected]>
drm/virtio: use uninterruptible resv lock for plane updates

Christian König <[email protected]>
dma-buf/drivers: make reserving a shared slot mandatory v4

Ashutosh Desai <[email protected]>
drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers

Ashutosh Desai <[email protected]>
drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers

Cen Zhang <[email protected]>
usb: gadget: f_tcm: synchronize delayed set_alt with teardown

Ashutosh Desai <[email protected]>
drm/dp/mst: fix buffer overflows in sideband chunk accumulation

Venkatesh Srinivas <[email protected]>
KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN

David Matlack <[email protected]>

    KVM: Introduce vcpu->wants_to_run

Sean Christopherson <[email protected]>
KVM: x86: Move "apicv_active" into "struct kvm_lapic"

Sean Christopherson <[email protected]>
KVM: x86: Check for in-kernel xAPIC when querying APICv for directed yield

Sean Christopherson <[email protected]>
KVM: x86: Drop @vcpu parameter from kvm_x86_ops.hwapic_isr_update()

Johan Hovold <[email protected]>
USB: serial: keyspan_pda: fix data loss on receive throttling

Johan Hovold <[email protected]>
USB: serial: keyspan_pda: clean up comments and whitespace

Johan Hovold <[email protected]>
USB: serial: keyspan_pda: add write-fifo support

Johan Hovold <[email protected]>
USB: serial: keyspan_pda: fix write implementation

Johan Hovold <[email protected]>
USB: serial: keyspan_pda: refactor write-room handling

Fan Wu <[email protected]>
usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown

Chunfeng Yun <[email protected]>
usb: gadget: bdc: fix checkpatch.pl spacing error

Reinette Chatre <[email protected]>
fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list

Dawei Feng <[email protected]>
octeontx2-pf: fix SQB pointer leak on init failure

Haoxiang Li <[email protected]>
net: ipa: fix SMEM state handle leaks in SMP2P init

Sabrina Dubroca <[email protected]>
espintcp: use sk_msg_free_partial to fix partial send

Breno Leitao <[email protected]>
bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline()

Breno Leitao <[email protected]>
bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c

Rasmus Villemoes <[email protected]>
bootconfig: do not put quotes on cmdline items unless necessary

Runyu Xiao <[email protected]>
gpio: tegra: do not call pinctrl for GPIO direction

Bryam Vargas <[email protected]>
net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked

Vladimir Oltean <[email protected]>

    net/sched: taprio: avoid calling child->ops->dequeue(child) twice

Maoyi Xie <[email protected]>
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink

Maoyi Xie <[email protected]>
net: ipip: require CAP_NET_ADMIN in the device netns for changelink

Liu Jian <[email protected]>
net: Add helper function to parse netlink msg of ip_tunnel_encap

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix firmware leak in async update

Dmitry Torokhov <[email protected]>
firmware_loader: introduce __free() cleanup hanler

Guangshuo Li <[email protected]>
mmc: vub300: fix use-after-free on probe failure

Johan Hovold <[email protected]>
mmc: vub300: rename probe error labels

Johan Hovold <[email protected]>
mmc: vub300: fix use-after-free on disconnect

Maoyi Xie <[email protected]>
wifi: libertas_tf: fix use-after-free in lbtf_free_adapter()

Dmitry Torokhov <[email protected]>
Input: ims-pcu - fix race condition in reset_device sysfs callback

Mikulas Patocka <[email protected]>
dm-verity: make error counter atomic

Mikulas Patocka <[email protected]>
dm-integrity: don't increment hash_offset twice

Bryam Vargas <[email protected]>
scsi: target: Bound PR-OUT TransportID parsing to the received buffer

Maurizio Lombardi <[email protected]>
scsi: target: core: Generate correct identifiers for PR OUT transport IDs

Chaitanya Kulkarni <[email protected]>
scsi: target: core: pr: Initialize arrays at declaration time

Souvik Banerjee <[email protected]>
ovl: use linked upper dentry in copy-up tmpfile

Abdun Nihaal <[email protected]>
scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup()

Michael Bommarito <[email protected]>
thunderbolt: Prevent XDomain delayed work use-after-free on disconnect

Mika Westerberg <[email protected]>

    thunderbolt: Remove XDomain from the bus without holding tb->lock

Mika Westerberg <[email protected]>
thunderbolt: Keep XDomain reference during the lifetime of a service

Vincent Jardin <[email protected]>
i2c: imx: fix locked bus on SMBus block-read of 0 (atomic)

Stefan Eichenberger <[email protected]>
i2c: imx: separate atomic, dma and non-dma use case

Frank Li <[email protected]>
dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK

Frank Li <[email protected]>
dmaengine: dw-edma: Remove unused irq field in struct dw_edma_chip

Gustavo Pimentel <[email protected]>
dmaengine: dw-edma: Improve the linked list and data blocks definition

Gustavo Pimentel <[email protected]>
PCI: Add pci_find_vsec_capability() to find a specific VSEC

Jarkko Sakkinen <[email protected]>
tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat()

Fredric Cover <[email protected]>
smb: client: use kvzalloc() for megabyte buffer in simple fallocate

Miquel Raynal <[email protected]>
mtd: spi-nor: swp: Improve locking user experience

Michael Walle <[email protected]>
mtd: spi-nor: Fix spi_nor_try_unlock_all()

Tudor Ambarus <[email protected]>
mtd: spi-nor: Move Software Write Protection logic out of the core

Michael Walle <[email protected]>
mtd: spi-nor: intel: remove global protection flag

Michael Walle <[email protected]>
mtd: spi-nor: sst: remove global protection flag

Yiyang Chen <[email protected]>
taskstats: retain dead thread stats in TGID queries

Oleg Nesterov <[email protected]>
taskstats: fill_stats_for_tgid: use for_each_thread()

Maoyi Xie <[email protected]>

    net: thunderbolt: Fix frags[] overflow by bounding frame_count

Florian Fuchs <[email protected]>
mtd: maps: vmu-flash: fix fault in unaligned fixup

Breno Leitao <[email protected]>
9p: skip nlink update in cacheless mode to fix WARN_ON

Vasiliy Kovalev <[email protected]>
net/9p: fix infinite loop in p9_client_rpc on fatal signal

Tristan Madani <[email protected]>
selinux: avoid sk_socket dereference in selinux_sctp_bind_connect()

Casey Schaufler <[email protected]>
lsm: infrastructure management of the sock security

Ondrej Mosnacek <[email protected]>
lsm: use default hook return value in call_int_hook()

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: don't leak bad clone into future transaction

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: move cloning of match info to insert/removal path

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: merge deactivate helper into caller

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: prepare walk function for on-demand clone

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: make pipapo_clone helper return NULL

Florian Westphal <[email protected]>
netfilter: nft_set_pipapo: use GFP_KERNEL for insertions

Junrui Luo <[email protected]>
jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()

Harshad Shirwadkar <[email protected]>
jbd2: add a helper to find out number of fast commit blocks

Pablo Neira Ayuso <[email protected]>
netfilter: nf_conntrack_sip: validate skb_dst() before accessing it

Florian Westphal <[email protected]>
netfilter: nf_conntrack_sip: remove net variable shadowing

Runyu Xiao <[email protected]>
octeontx2-vf: clear stale mailbox IRQ state before request_irq()

Cássio Gabriel <[email protected]>
ASoC: mediatek: mt8183: Check runtime resume during probe

Runyu Xiao <[email protected]>
octeontx2-pf: clear stale mailbox IRQ state before request_irq()

Subbaraya Sundeep <[email protected]>
octeontx2: Annotate mmio regions as __iomem

Wentao Liang <[email protected]>
mlxsw: fix refcount leak in mlxsw_sp_port_lag_join()

Petr Machata <[email protected]>
mlxsw: spectrum: On port enslavement to a LAG, join upper's bridges

Ido Schimmel <[email protected]>
mlxsw: spectrum: Apply RIF configuration when joining a LAG

David Howells <[email protected]>
rxrpc: Fix socket notification race

David Howells <[email protected]>
rxrpc: Fix notification vs call-release vs recvmsg

David Howells <[email protected]>
rxrpc: Fix recv-recv race of completed call

Li Xiasong <[email protected]>
tipc: restrict socket queue dumps in enqueue tracepoints

Li Daming <[email protected]>
rxrpc: serialize kernel accept preallocation with socket teardown

Tapio Reijonen <[email protected]>

    serial: max310x: implement gpio_chip::get_direction()

Hugo Villeneuve <[email protected]>

    serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch)

Xu Rao <[email protected]>
ALSA: hda: Fix cached processing coefficient verbs

Ricardo Robaina <[email protected]>
audit: fix recursive locking deadlock in audit_dupe_exe()

Ricardo Robaina <[email protected]>
audit: use 'unsigned int' instead of 'unsigned'

Jeff Layton <[email protected]>
audit: widen ino fields to u64

NeilBrown <[email protected]>
VFS/audit: introduce kern_path_parent() for audit

Bryam Vargas <[email protected]>
Input: mms114 - reject an oversized device packet size

Zhenhao Wan <[email protected]>
RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg

Akhil R <[email protected]>
i2c: smbus: Use device_*() functions instead of of_*()

Akhil R <[email protected]>
device property: Add fwnode_irq_get_byname

Haoxiang Li <[email protected]>
i2c: davinci: Unregister cpufreq notifier on probe failure

Sebastian Alba Vives <[email protected]>
fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()

Mikhail Gavrilov <[email protected]>
dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning

Jason Gunthorpe <[email protected]>
udmabuf: Do not create malformed scatterlists

Matt Bobrowski <[email protected]>
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized

Chao Yu <[email protected]>
f2fs: fix UAF issue in f2fs_merge_page_bio()

Xiang Mei <[email protected]>
net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot

Christoph Hellwig <[email protected]>
xfs: check v5 superblock features early

David Rosca <[email protected]>
drm/amdgpu: Fix UVD decode image min size calculation

David Rosca <[email protected]>
drm/amdgpu: Implement insert_end for VCE 3

David Rosca <[email protected]>
drm/amdgpu: Reject UVD message with dimensions above 4096

Candice Li <[email protected]>
drm/amdgpu: validate GEM_CREATE domain combinations

David Rosca <[email protected]>
drm/amdgpu: Reject UVD message with invalid number of h265 refs

Eric Farman <[email protected]>
s390/vfio_ccw: Fix out of bounds check on CCW array

Guangshuo Li <[email protected]>
drm/radeon: fix autosuspend cleanup during teardown

Pei Xiao <[email protected]>
mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition

Haibo Chen <[email protected]>
mmc: sdhci: make tuning_err a signed int

Myeonghun Pak <[email protected]>
mmc: sdhci: unmap the bounce buffer before device release

Zhan Xusheng <[email protected]>
mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit

Yiming Zhu <[email protected]>
ceph: fix MDS random selection readiness predicate

Raphael Zimmer <[email protected]>
libceph: Avoid using invalid osd indices from primary_temp

Dmitry Torokhov <[email protected]>
Input: sur40 - fix V4L error path cleanup

Dmitry Torokhov <[email protected]>
Input: sur40 - fix input device registration ordering

Ali Ahmet Memis <[email protected]>
openrisc: signal: do not restore privileged SR bits on sigreturn

Josh Poimboeuf <[email protected]>
ftrace: Fix off-by-one fentry site disable in ftrace_free_mem()

Pavitra Jha <[email protected]>
libceph: fix multiple unsafe decodes in decode_locker()

Thorsten Blum <[email protected]>
crypto: qce - fix error path in devm_qce_register_algs

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - block s_input when F54 queue is busy

Bryam Vargas <[email protected]>
Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - zero report size on F54 work error

George Wilson <[email protected]>

    powerpc/pseries: lparcfg - fix kbuf[] underflow

Pengpeng Hou <[email protected]>
Input: iforce - validate input packet lengths

Zhefu Zhang <[email protected]>
Input: atkbd - skip deactivate for Xiaomi Book Pro 14's internal keyboard

Linmao Li <[email protected]>
Input: psxpad-spi - set driver data before use

Richard Davies <[email protected]>
Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet

Dmitry Torokhov <[email protected]>
Input: synaptics-rmi4 - fix F55 transmitter electrode count typo

George Wilson <[email protected]>
powerpc/pseries: pci - logic bug

Peter Ujfalusi <[email protected]>
ASoC: cs4265: sort the register default table

Hidayath Khan <[email protected]>
s390/qeth: validate user buffer length in SNMP and ARP query ioctls

Matthieu Baerts (NGI0) <[email protected]>
mptcp: options: reset DSS fields in case of unexpected size

Bryam Vargas <[email protected]>
selinux: do not cancel a policy conversion that never started

Bryam Vargas <[email protected]>
selinux: reject a class permission count below its inherited common

Bryam Vargas <[email protected]>
selinux: require every boolean value to be defined

Yizhou Zhao <[email protected]>
ipvs: separate destination availability state

Jiasheng Jiang <[email protected]>
media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization

Fullway Wang <[email protected]>
media: mtk-vcodec: potential null pointer deference in SCP

-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm64/boot/dts/nvidia/tegra194.dtsi           |   2 +
 arch/arm64/kvm/arm.c                               |   2 +-
 arch/mips/kvm/mips.c                               |   2 +-
 arch/openrisc/include/asm/processor.h              |   2 +
 arch/openrisc/kernel/signal.c                      |   5 +-
 arch/powerpc/kvm/powerpc.c                         |   2 +-
 arch/powerpc/platforms/pseries/lparcfg.c           |   2 +-
 arch/powerpc/platforms/pseries/pci.c               |   2 +-
 arch/s390/kvm/kvm-s390.c                           |   2 +-
 arch/x86/include/asm/kvm_host.h                    |   3 +-
 arch/x86/kernel/cpu/resctrl/rdtgroup.c             |  12 +-
 arch/x86/kvm/lapic.c                               |  41 +-
 arch/x86/kvm/lapic.h                               |   3 +-
 arch/x86/kvm/svm/avic.c                            |   4 +-
 arch/x86/kvm/svm/svm.h                             |   2 +-
 arch/x86/kvm/vmx/vmx.c                             |   9 +-
 arch/x86/kvm/x86.c                                 |  19 +-
 crypto/ccm.c                                       |   2 +-
 drivers/base/property.c                            |  29 ++
 drivers/char/tpm/tpm_tis_core.c                    |  38 +-
 drivers/crypto/qce/core.c                          |   2 +-
 drivers/dma-buf/dma-resv.c                         |   8 +-
 drivers/dma-buf/udmabuf.c                          |  21 +-
 drivers/dma/dw-edma/dw-edma-core.c                 |  77 ++--
 drivers/dma/dw-edma/dw-edma-core.h                 |  20 +-
 drivers/dma/dw-edma/dw-edma-pcie.c                 | 180 ++++++--
 drivers/dma/dw-edma/dw-edma-v0-core.c              |  76 ++--
 drivers/fpga/dfl-afu-main.c                        |   3 +
 drivers/gpio/gpio-tegra.c                          |  18 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c   |   4 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c            |  21 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c            |  11 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c             |   2 +-
 drivers/gpu/drm/amd/amdgpu/vce_v3_0.c              |  26 +-
 drivers/gpu/drm/amd/pm/amdgpu_pm.c                 |  14 +-
 drivers/gpu/drm/drm_connector.c                    |  12 +-
 drivers/gpu/drm/drm_dp_mst_topology.c              |  32 +-
 drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c       |   2 +-
 drivers/gpu/drm/i915/display/intel_hdcp.c          |   7 +-
 drivers/gpu/drm/i915/i915_vma.c                    |   2 +-
 drivers/gpu/drm/lima/lima_gem.c                    |   2 +-
 drivers/gpu/drm/msm/msm_gem_submit.c               |   2 +-
 drivers/gpu/drm/nouveau/nouveau_fence.c            |   2 +-
 drivers/gpu/drm/qxl/qxl_release.c                  |   2 +-
 drivers/gpu/drm/radeon/radeon_kms.c                |   1 +
 drivers/gpu/drm/radeon/radeon_vm.c                 |   2 +-
 drivers/gpu/drm/tegra/fb.c                         |   8 +-
 drivers/gpu/drm/ttm/ttm_bo.c                       |   4 +-
 drivers/gpu/drm/ttm/ttm_execbuf_util.c             |   4 +-
 drivers/gpu/drm/vc4/vc4_gem.c                      |   2 +-
 drivers/gpu/drm/vgem/vgem_fence.c                  |   2 +-
 drivers/gpu/drm/virtio/virtgpu_drv.h               |   1 +
 drivers/gpu/drm/virtio/virtgpu_gem.c               |  17 +
 drivers/gpu/drm/virtio/virtgpu_plane.c             |   5 +-
 drivers/gpu/drm/virtio/virtgpu_vq.c                |   9 +-
 drivers/hwmon/npcm750-pwm-fan.c                    |  11 +
 drivers/i2c/busses/i2c-bcm-iproc.c                 |  11 +-
 drivers/i2c/busses/i2c-davinci.c                   |   4 +-
 drivers/i2c/busses/i2c-imx.c                       | 126 +++--
 drivers/i2c/i2c-core-base.c                        |   2 +-
 drivers/i2c/i2c-core-smbus.c                       |  15 +-
 drivers/i2c/i2c-smbus.c                            |   5 +-
 drivers/infiniband/ulp/rtrs/rtrs-srv.c             |   5 +-
 drivers/input/joystick/iforce/iforce-packets.c     |  11 +-
 drivers/input/joystick/iforce/iforce-usb.c         |   3 +
 drivers/input/joystick/psxpad-spi.c                |   1 +
 drivers/input/keyboard/atkbd.c                     |   8 +
 drivers/input/misc/ims-pcu.c                       |   7 +-
 drivers/input/mouse/focaltech.c                    |   2 +-
 drivers/input/rmi4/rmi_f54.c                       |  43 +-
 drivers/input/rmi4/rmi_f55.c                       |   4 +-
 drivers/input/touchscreen/mms114.c                 |   6 +
 drivers/input/touchscreen/sur40.c                  |  23 +-
 drivers/md/dm-integrity.c                          |   4 -
 drivers/md/dm-verity-target.c                      |  12 +-
 drivers/md/dm-verity.h                             |   2 +-
 drivers/media/i2c/imx219.c                         |  47 +-
 drivers/media/platform/aspeed-video.c              |   1 +
 drivers/media/platform/marvell-ccic/cafe-driver.c  |   1 +
 .../media/platform/mtk-vcodec/mtk_vcodec_fw_scp.c  |   5 +
 drivers/media/v4l2-core/v4l2-async.c               |   8 +-
 drivers/media/v4l2-core/v4l2-fwnode.c              |   7 +-
 drivers/mmc/host/atmel-mci.c                       |   2 +
 drivers/mmc/host/omap_hsmmc.c                      |   2 +-
 drivers/mmc/host/sdhci.c                           |  16 +
 drivers/mmc/host/sdhci.h                           |   2 +-
 drivers/mmc/host/vub300.c                          |  36 +-
 drivers/mtd/maps/vmu-flash.c                       |   8 +-
 drivers/mtd/spi-nor/Makefile                       |   2 +-
 drivers/mtd/spi-nor/core.c                         | 406 +----------------
 drivers/mtd/spi-nor/core.h                         |   5 +
 drivers/mtd/spi-nor/intel.c                        |  16 +-
 drivers/mtd/spi-nor/sst.c                          |  30 +-
 drivers/mtd/spi-nor/swp.c                          | 426 +++++++++++++++++
 drivers/net/can/usb/gs_usb.c                       |   2 +-
 drivers/net/ethernet/aquantia/atlantic/aq_ring.c   |  25 +
 drivers/net/ethernet/aquantia/atlantic/aq_ring.h   |   1 +
 drivers/net/ethernet/aquantia/atlantic/aq_vec.c    |   2 +-
 drivers/net/ethernet/intel/ice/ice_ethtool.c       |  10 +-
 drivers/net/ethernet/intel/ice/ice_virtchnl_pf.c   |  48 ++
 .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c   |  13 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c   |   8 +-
 drivers/net/ethernet/mellanox/mlxsw/spectrum.c     | 109 ++++-
 drivers/net/ethernet/mellanox/mlxsw/spectrum.h     |   4 +
 .../net/ethernet/mellanox/mlxsw/spectrum_router.c  |  31 +-
 drivers/net/ethernet/ti/am65-cpsw-nuss.c           | 139 ++++--
 drivers/net/ethernet/ti/am65-cpsw-nuss.h           |   4 +
 drivers/net/ipa/ipa_smp2p.c                        |  30 +-
 drivers/net/thunderbolt.c                          |   8 +-
 drivers/net/wireless/ath/ath6kl/txrx.c             |   2 +-
 .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c  |  13 +
 .../net/wireless/broadcom/brcm80211/brcmfmac/bus.h |   6 +
 .../wireless/broadcom/brcm80211/brcmfmac/core.c    |  45 +-
 .../wireless/broadcom/brcm80211/brcmfmac/pcie.c    |   6 +
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.c    |   6 +
 .../wireless/broadcom/brcm80211/brcmfmac/sdio.h    |   1 +
 .../net/wireless/broadcom/brcm80211/brcmfmac/usb.c |   3 +
 drivers/net/wireless/marvell/libertas_tf/main.c    |   2 +-
 drivers/pci/pci.c                                  |  30 ++
 drivers/s390/cio/vfio_ccw_cp.c                     |  17 +-
 drivers/s390/net/qeth_core_main.c                  |   3 +
 drivers/s390/net/qeth_l3_main.c                    |   5 +
 drivers/scsi/lpfc/lpfc_init.c                      |   3 +-
 drivers/scsi/scsi_debug.c                          |  27 +-
 drivers/scsi/sd.h                                  |   5 +-
 drivers/scsi/sd_zbc.c                              |  79 +++-
 drivers/target/target_core_fabric_lib.c            | 146 ++++--
 drivers/target/target_core_internal.h              |   5 +-
 drivers/target/target_core_pr.c                    |  54 +--
 drivers/thunderbolt/domain.c                       |  30 ++
 drivers/thunderbolt/icm.c                          |   5 +
 drivers/thunderbolt/switch.c                       |  14 +
 drivers/thunderbolt/tb.c                           |  58 +--
 drivers/thunderbolt/tb.h                           |   2 +
 drivers/thunderbolt/xdomain.c                      |  71 ++-
 drivers/tty/serial/8250/8250_mid.c                 |   6 +-
 drivers/tty/serial/max310x.c                       |  20 +-
 drivers/tty/serial/sc16is7xx.c                     | 192 ++++++--
 drivers/usb/gadget/function/f_tcm.c                | 192 ++++++--
 drivers/usb/gadget/function/tcm.h                  |  13 +
 drivers/usb/gadget/udc/bdc/bdc_core.c              |  20 +
 drivers/usb/gadget/udc/bdc/bdc_udc.c               |   7 +-
 drivers/usb/serial/keyspan_pda.c                   | 471 ++++++++++---------
 fs/9p/vfs_inode.c                                  |   9 +
 fs/binfmt_elf.c                                    |   4 +-
 fs/binfmt_elf_fdpic.c                              |   4 +-
 fs/binfmt_misc.c                                   |  14 +-
 fs/ceph/addr.c                                     |  24 +-
 fs/ceph/cache.c                                    |   2 +-
 fs/ceph/caps.c                                     |  53 ++-
 fs/ceph/dir.c                                      |  20 +-
 fs/ceph/export.c                                   |  10 +-
 fs/ceph/file.c                                     |  33 +-
 fs/ceph/inode.c                                    |  20 +-
 fs/ceph/ioctl.c                                    |   8 +-
 fs/ceph/mds_client.c                               |  11 +
 fs/ceph/mds_client.h                               |   2 +
 fs/ceph/mdsmap.c                                   |   2 +-
 fs/ceph/super.c                                    |  22 +-
 fs/ceph/super.h                                    |   8 +-
 fs/ceph/xattr.c                                    |   8 +-
 fs/cifs/smb2ops.c                                  |   4 +-
 fs/exec.c                                          |   6 +-
 fs/f2fs/data.c                                     |   2 +-
 fs/jbd2/journal.c                                  |  10 +-
 fs/namei.c                                         |  42 ++
 fs/overlayfs/copy_up.c                             |  14 +-
 fs/super.c                                         |  19 +-
 fs/xfs/libxfs/xfs_sb.c                             |   4 +-
 include/drm/drm_connector.h                        |   6 +-
 include/drm/drm_displayid.h                        |   2 +-
 include/linux/audit.h                              |  18 +-
 include/linux/bootconfig.h                         |   3 +
 include/linux/bpf_lsm.h                            |   4 +
 include/linux/ceph/ceph_debug.h                    |  38 ++
 include/linux/dma-resv.h                           |   2 +-
 include/linux/dma/edma.h                           |   2 -
 include/linux/firmware.h                           |   3 +
 include/linux/fs.h                                 |  28 ++
 include/linux/i2c-smbus.h                          |   6 +-
 include/linux/jbd2.h                               |   9 +-
 include/linux/kvm_host.h                           |   1 +
 include/linux/lsm_hooks.h                          |   1 +
 include/linux/namei.h                              |   1 +
 include/linux/pci.h                                |   1 +
 include/linux/property.h                           |   1 +
 include/linux/skbuff.h                             |   2 +
 include/linux/thunderbolt.h                        |   3 +
 include/media/v4l2-async.h                         |   9 +-
 include/net/act_api.h                              |  20 +
 include/net/ip_tunnels.h                           |   3 +
 include/net/ip_vs.h                                |   7 +
 include/trace/events/rxrpc.h                       |   2 +
 include/uapi/linux/ip_vs.h                         |   6 -
 init/main.c                                        |  39 --
 kernel/audit.c                                     |   2 +-
 kernel/audit.h                                     |  32 +-
 kernel/audit_fsnotify.c                            |  39 +-
 kernel/audit_tree.c                                |   2 +-
 kernel/audit_watch.c                               |  42 +-
 kernel/auditfilter.c                               |  17 +-
 kernel/auditsc.c                                   |   6 +-
 kernel/bpf/bpf_inode_storage.c                     |  10 +
 kernel/sched/psi.c                                 |   6 +
 kernel/taskstats.c                                 |  67 +--
 kernel/trace/ftrace.c                              |  21 +-
 lib/bootconfig.c                                   |  65 +++
 lib/compat_audit.c                                 |  12 +-
 mm/memory_hotplug.c                                |  15 +-
 mm/pagewalk.c                                      |   8 +
 mm/ptdump.c                                        |   7 +
 net/9p/client.c                                    |   2 +
 net/bluetooth/hidp/core.c                          |  25 +-
 net/ceph/cls_lock_client.c                         |  21 +-
 net/ceph/osdmap.c                                  |   9 +-
 net/core/pktgen.c                                  |  43 +-
 net/core/skbuff.c                                  |  28 +-
 net/ipv4/ip_tunnel_core.c                          |  35 ++
 net/ipv4/ipip.c                                    |  41 +-
 net/ipv6/ip6_tunnel.c                              |  40 +-
 net/ipv6/sit.c                                     |  38 +-
 net/mptcp/options.c                                |  21 +-
 net/mptcp/protocol.c                               |   4 +-
 net/mptcp/protocol.h                               |  14 +
 net/mptcp/subflow.c                                |  12 +-
 net/netfilter/ipset/ip_set_core.c                  |  19 +-
 net/netfilter/ipset/ip_set_list_set.c              |   7 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |   4 +-
 net/netfilter/ipvs/ip_vs_core.c                    |   6 +-
 net/netfilter/ipvs/ip_vs_ctl.c                     |   4 +-
 net/netfilter/ipvs/ip_vs_dh.c                      |   4 +-
 net/netfilter/ipvs/ip_vs_lblc.c                    |   2 +-
 net/netfilter/ipvs/ip_vs_lblcr.c                   |   8 +-
 net/netfilter/nf_conntrack_sip.c                   |  10 +-
 net/netfilter/nf_flow_table_core.c                 |   7 +-
 net/netfilter/nf_tables_offload.c                  |   2 +-
 net/netfilter/nft_set_pipapo.c                     | 252 ++++++----
 net/netfilter/nft_set_pipapo.h                     |   8 +
 net/packet/af_packet.c                             |   7 +-
 net/rxrpc/call_accept.c                            |  28 +-
 net/rxrpc/call_object.c                            |  27 +-
 net/rxrpc/recvmsg.c                                |  23 +-
 net/sched/act_gact.c                               |   5 +
 net/sched/act_police.c                             |   6 +
 net/sched/sch_api.c                                |  24 +-
 net/sched/sch_taprio.c                             |  12 +-
 net/sctp/protocol.c                                |  20 +-
 net/sctp/sysctl.c                                  |   9 +-
 net/smc/af_smc.c                                   |   3 +-
 net/smc/smc_rx.c                                   |  12 +-
 net/smc/smc_tx.c                                   |  17 +-
 net/tipc/socket.c                                  |   6 +-
 net/xfrm/espintcp.c                                |  32 +-
 security/apparmor/include/net.h                    |   6 +-
 security/apparmor/lsm.c                            |  38 +-
 security/bpf/hooks.c                               |   3 +
 security/security.c                                | 506 +++++++++++++--------
 security/selinux/hooks.c                           |  91 ++--
 security/selinux/include/objsec.h                  |   5 +
 security/selinux/netlabel.c                        |  23 +-
 security/selinux/ss/policydb.c                     |  31 ++
 security/selinux/ss/services.c                     |   4 +-
 security/smack/smack.h                             |   5 +
 security/smack/smack_lsm.c                         |  66 ++-
 security/smack/smack_netfilter.c                   |   8 +-
 sound/core/seq/seq_timer.c                         |  13 +-
 sound/hda/hdac_regmap.c                            |   4 +-
 sound/soc/codecs/cs4265.c                          |   4 +-
 sound/soc/mediatek/mt8183/mt8183-afe-pcm.c         |  12 +-
 sound/soc/xilinx/xlnx_formatter_pcm.c              |  10 +-
 sound/usb/usx2y/usX2Yhwdep.c                       |  10 +-
 sound/usb/usx2y/usbus428ctldefs.h                  |   2 +
 sound/usb/usx2y/usbusx2y.c                         |   2 +-
 sound/usb/usx2y/usx2yhwdeppcm.c                    |  15 +-
 virt/kvm/kvm_main.c                                |   3 +
 276 files changed, 4340 insertions(+), 2447 deletions(-)