Skip to content

7.1.13-rc1 review

Greg Kroah-Hartman linux-patches lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest76 patches 9 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/76bpf: reject overlarge global subprog argument sizeskernel/bpf/verifier.c tools/testing/selftests/bpf/progs/verifier_global_subprogs.c+23 -00 replies
2/76RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qpdrivers/infiniband/sw/rxe/rxe_qp.c+14 -10 replies
3/76RDMA/rxe: Fix OOB in free_rd_atomic_resources()drivers/infiniband/sw/rxe/rxe_qp.c+1 -20 replies
4/76KVM: x86/mmu: Check write tracking in all address spacesarch/x86/kvm/mmu/page_track.c+26 -60 replies
5/76nvme-tcp: fix usage of page_frag_cachedrivers/nvme/host/tcp.c+8 -00 replies
6/76Revert "selinux: reject a permission value exceeding the class permission count"security/selinux/ss/policydb.c+0 -30 replies
7/76selinux: use u16 for security classessecurity/selinux/ss/policydb.c security/selinux/ss/policydb.h security/selinux/ss/services.c+9 -80 replies
8/76selinux: more strict policy parsingsecurity/selinux/include/security.h security/selinux/ss/avtab.c security/selinux/ss/avtab.h +5 more+233 -600 replies
9/76selinux: reject a permission value exceeding the class permission countsecurity/selinux/ss/policydb.c+3 -00 replies
10/76selinux: require a classs permission values to cover its permission countsecurity/selinux/ss/policydb.c+46 -50 replies
11/76selinux: switch two allocations to use kzalloc_objs()security/selinux/ss/conditional.c+2 -20 replies
12/76ext4: export converted block count from ext4_convert_unwritten_extents()fs/ext4/ext4.h fs/ext4/extents.c fs/ext4/file.c+38 -210 replies
13/76ext4: protect WRITE_ZEROES written extents with orphan listfs/ext4/extents.c+69 -70 replies
14/76ext4: move partial block zeroing earlier in ext4_zero_range()fs/ext4/extents.c+7 -50 replies
15/76ext4: write back partial-zeroed edges in WRITE_ZEROESfs/ext4/extents.c+9 -10 replies
16/76ext4: track partial-zero outcome per edge in ext4_zero_partial_blocks()fs/ext4/ext4.h fs/ext4/extents.c fs/ext4/inode.c+35 -80 replies
17/76ext4: zero out whole block for clean edges in WRITE_ZEROESfs/ext4/extents.c+15 -00 replies
18/76fpga: dfl: fme: add error handlingdrivers/fpga/dfl-fme-perf.c+2 -00 replies
19/76accessibility: speakup: unregister tty ldisc on later init failuresdrivers/accessibility/speakup/main.c+1 -00 replies
20/76usb: xhci: Handle bogus TRB pointers in Missed Service Error eventsdrivers/usb/host/xhci-ring.c+16 -20 replies
21/76usb: xhci: Handle USB3 port events when there is one roothubdrivers/usb/host/xhci-ring.c+1 -10 replies
22/76usb: xhci: bail out of setup if the controller is inaccessibledrivers/usb/host/xhci.c+8 -30 replies
23/76xhci: dbgtty: Fix unregister on tty_register_driver() failuredrivers/usb/host/xhci-dbgtty.c+1 -00 replies
24/76xhci: dbgtty: Fix unregister on tty_alloc_driver() failuredrivers/usb/host/xhci-dbgtty.c+11 -50 replies
25/76fuse: fix invalidate lock leak on setattr writeback failurefs/fuse/dir.c+4 -50 replies
26/76fuse: fix invalidate lock leak on open O_TRUNC DAX failurefs/fuse/file.c+2 -20 replies
27/76usb: usbtest: disable dynamic ID supportdrivers/usb/misc/usbtest.c+1 -00 replies
28/76usb: gadget: f_tcm: keep port count until LUN teardown completesdrivers/target/target_core_fabric_configfs.c drivers/usb/gadget/function/f_tcm.c include/target/target_core_fabric.h+11 -10 replies
29/76KVM: SEV: Drop FOLL_WRITE for encrypted region registrationarch/x86/kvm/svm/sev.c+5 -10 replies
30/76KVM: SEV: Track the GPA of the guest-controlled VMSA used for SNP guestsarch/x86/kvm/svm/sev.c arch/x86/kvm/svm/svm.h+11 -60 replies
31/76KVM: SEV: Extract loading of guest-provided VMSA to a separate helperarch/x86/kvm/svm/sev.c+31 -210 replies
32/76KVM: SEV: Mark vCPU RUNNABLE after AP_CREATE, even if VMSA is unusablearch/x86/kvm/svm/sev.c+9 -30 replies
33/76KVM: SEV: Wire up kvm_x86_ops.gmem_xxx() if and only if CONFIG_KVM_AMD_SEV=yarch/x86/kvm/svm/svm.c arch/x86/kvm/svm/svm.h+4 -140 replies
34/76tls: device: fix out-of-bounds write in tls_append_frag()net/tls/tls_device.c+2 -10 replies
35/76gtp: serialize PDP context updatesdrivers/net/gtp.c+17 -40 replies
36/76net/tcp: fix TCP-AO key deletion in VRFsnet/ipv4/tcp_ao.c+3 -00 replies
37/76tcp: fix AO info use-after-free in tcp_ao_connect_init()net/ipv4/tcp_ao.c+1 -60 replies
38/76net/tcp-ao: fix use-after-free of current_key on reconnect to another peernet/ipv4/tcp_ao.c+9 -00 replies
39/76net: advertise TCP MSS from the configured MTU, not the learned PMTUinclude/net/ip.h include/net/ip6_route.h net/ipv4/route.c +1 more+65 -30 replies
40/76xfrm: espintcp: fix UAF during closenet/xfrm/espintcp.c+2 -10 replies
41/76tcp: clamp route advmss to TCP_MIN_MSSinclude/net/tcp.h net/ipv4/tcp_ipv4.c net/ipv4/tcp_minisocks.c +2 more+11 -60 replies
42/76xfrm: drop ESP-in-TCP packets with no ingress devicenet/xfrm/espintcp.c+6 -00 replies
43/76xfrm: avoid lock inversion in nat keepalive worknet/xfrm/xfrm_nat_keepalive.c+48 -90 replies
44/76xfrm: ah6: validate routing header segments_leftnet/ipv6/ah6.c+18 -110 replies
45/76xfrm: fix xfrm_state_construct() auth-trunc leaknet/xfrm/xfrm_user.c+1 -10 replies
46/76xfrm: bound nat keepalive state collectionnet/xfrm/xfrm_nat_keepalive.c+21 -250 replies
47/76net: bridge: mcast: fix use-after-free of a master VLANs multicast contextnet/bridge/br_multicast.c+2 -20 replies
48/76net/packet: defer vmalloc TX_RING free until skbs finishnet/packet/af_packet.c+87 -90 replies
49/76ipv6: seg6: clear IPv4 control block on IPIP decapsulationnet/ipv6/seg6_local.c+7 -00 replies
50/76batman-adv: reject unrepresentable multicast TVLV offsetsinclude/linux/skbuff.h net/batman-adv/tvlv.c+28 -10 replies
51/76vxlan: keep the last remote linked during FDB flushdrivers/net/vxlan/vxlan_core.c+5 -40 replies
52/76netfilter: nft_set_pipapo_avx2: add missing vzerouppernet/netfilter/nft_set_pipapo_avx2.c+8 -90 replies
53/76netfilter: nf_tables: dont queue packet path object notificationsnet/netfilter/nf_tables_api.c+23 -130 replies
54/76mm/swap: reject swapon() on filesystem-level encrypted filesDocumentation/filesystems/fscrypt.rst mm/swapfile.c+11 -00 replies
55/76kunit: irq: Continue increasing hrtimer interval for longerinclude/kunit/run-in-irq-context.h+6 -40 replies
56/76crypto: virtio - bound the akcipher result lengthdrivers/crypto/virtio/virtio_crypto_akcipher_algs.c+2 -10 replies
57/76crypto: qcom-rng - Enable clock in hwrng casedrivers/crypto/qcom-rng.c+16 -00 replies
58/76crypto: qcom-rng - Remove crypto_rng interfacedrivers/crypto/Kconfig drivers/crypto/qcom-rng.c+19 -1400 replies
59/76crypto: qcom-rng - Allow zero as a random numberdrivers/crypto/qcom-rng.c+0 -20 replies
60/76crypto: atmel-tdes - use scatterlist length before DMA mappingdrivers/crypto/atmel-tdes.c+2 -30 replies
61/76crypto: krb5 - use kfree_sensitive() for derived key bufferscrypto/krb5/krb5_api.c+4 -40 replies
62/76crypto: qce - fix CCM AAD buffer underallocationdrivers/crypto/qce/aead.c+1 -10 replies
63/76crypto: iaa - fall back to software for multi-entry scatterlistsdrivers/crypto/intel/iaa/iaa_crypto_main.c drivers/crypto/intel/iaa/iaa_crypto_stats.c drivers/crypto/intel/iaa/iaa_crypto_stats.h+71 -510 replies
64/76crypto: mxs-dcp - fix source scatterlist length accessdrivers/crypto/mxs-dcp.c+1 -10 replies
65/76crypto: qce - Remove unsafe/deprecated algorithmsdrivers/crypto/qce/aead.c drivers/crypto/qce/common.c drivers/crypto/qce/common.h +4 more+20 -2390 replies
66/76KVM: s390: vsie: zero stale crypto bitsarch/s390/kvm/vsie.c+1 -00 replies
67/76usb: core: Add lock to usb_wakeup_notification()drivers/usb/core/hub.c+3 -00 replies
68/76usb: core: Strengthen error handling in hub_hub_status()drivers/usb/core/hub.c+3 -10 replies
69/76ALSA: usb-audio: Fix sample rates for PreSonus AudioBox USBsound/usb/quirks-table.h+10 -00 replies
70/76ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()sound/usb/midi.c+2 -00 replies
71/76ALSA: usb-audio: Complete cleanup after system-resume errorssound/usb/card.c+10 -40 replies
72/76USB: serial: option: fix slab OOB read in interrupt URB callbackdrivers/usb/serial/option.c+17 -30 replies
73/76USB: serial: spcp8x5: drop broken carrier detect supportdrivers/usb/serial/spcp8x5.c+0 -130 replies
74/76USB: c67x00: fix use-after-free in c67x00_add_iso_urb()drivers/usb/c67x00/c67x00-sched.c+2 -20 replies
75/76wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skbdrivers/net/wireless/mediatek/mt76/mt7925/mac.c+4 -00 replies
76/76usb: usbfs: fix use-after-free of usb_device in usbdev_release()drivers/usb/core/devio.c+1 -10 replies

Reviews trailers per patch

41 of 76 patches have a Reviewed-by or Acked-by.

PatchYonghong SongStephen SmalleyJan KaraXu YilunZhu YanjunDavid Hildenbrand (Arm)Lorenzo Stoakes (ARM)Michael RothAckerley TngDavid AhernDmitry SafonovEric DumazetSimon HormanPaolo AbeniBreno LeitaoRen WeiNikolay AleksandrovWillem de BruijnAndrea MayerSven EckelmannIdo SchimmelStefano BrivioBaoquan HeMuhammad Usama AnjumDarrick J. WongDavid GowArd BiesheuvelDmitry BaryshkovKonrad DybcioBartosz GolaszewskiFrank LiEric BiggersKuldeep SinghClaudio Imbrenda[email protected]Alan SternBrett A C SheffieldFlorian FainelliBarry K. NathanPavel Machek (CIP)Peter SchneiderShuah KhanMiguel OjedaRon EconomosJustin M. Forbes
SeriesT-b T-b T-b T-b T-b T-b T-b T-b T-b
1/76A-b
2/76R-b
3/76R-b
4/76
5/76
6/76
7/76A-b
8/76A-b
9/76A-b
10/76A-b
11/76
12/76R-b
13/76R-b
14/76R-b
15/76R-b
16/76R-b
17/76R-b
18/76R-b
19/76
20/76
21/76
22/76
23/76
24/76
25/76
26/76
27/76T-b
28/76
29/76A-b A-b
30/76R-b
31/76R-b
32/76R-b
33/76R-b
34/76
35/76
36/76R-b A-b
37/76R-b
38/76R-b A-b
39/76R-b
40/76R-b
41/76
42/76R-b
43/76
44/76
45/76
46/76
47/76A-b
48/76R-b
49/76R-b
50/76A-b
51/76R-b
52/76R-b
53/76
54/76R-b R-b R-b
55/76R-b A-b
56/76
57/76R-b R-b
58/76R-b
59/76R-b R-b
60/76
61/76
62/76R-b
63/76
64/76R-b
65/76A-b T-b
66/76R-b
67/76
68/76
69/76
70/76
71/76
72/76
73/76
74/76
75/76
76/76R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 45 reviewers.

Read the v1 thread

Cover letter [PATCH 7.1 00/76] 7.1.13-rc1 review

This is the start of the stable review cycle for the 7.1.13 release. There are 76 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 02 Sep 2026 13:32:19 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.13-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 7.1.13-rc1

Miguel Peñaranda <[email protected]>
usb: usbfs: fix use-after-free of usb_device in usbdev_release()

Devin Wittmayer <[email protected]>
wifi: mt76: mt7925: ensure tx headroom in usb_sdio_tx_prepare_skb

Shuangpeng Bai <[email protected]>

    USB: c67x00: fix use-after-free in c67x00_add_iso_urb()

Johan Hovold <[email protected]>
USB: serial: spcp8x5: drop broken carrier detect support

Jiale Yao <[email protected]>
USB: serial: option: fix slab OOB read in interrupt URB callback

Will Porter <[email protected]>
ALSA: usb-audio: Complete cleanup after system-resume errors

Marouane El Moufid <[email protected]>
ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()

Trevor Vorhees <[email protected]>
ALSA: usb-audio: Fix sample rates for PreSonus AudioBox USB

Griffin Kroah-Hartman <[email protected]>
usb: core: Strengthen error handling in hub_hub_status()

Griffin Kroah-Hartman <[email protected]>
usb: core: Add lock to usb_wakeup_notification()

Christian Borntraeger <[email protected]>
KVM: s390: vsie: zero stale crypto bits

Bartosz Golaszewski <[email protected]>
crypto: qce - Remove unsafe/deprecated algorithms

Thorsten Blum <[email protected]>
crypto: mxs-dcp - fix source scatterlist length access

Giovanni Cabiddu <[email protected]>
crypto: iaa - fall back to software for multi-entry scatterlists

Md Sadre Alam <[email protected]>
crypto: qce - fix CCM AAD buffer underallocation

Jan Sebastian Götte <[email protected]>
crypto: krb5 - use kfree_sensitive() for derived key buffers

Thorsten Blum <[email protected]>
crypto: atmel-tdes - use scatterlist length before DMA mapping

Eric Biggers <[email protected]>
crypto: qcom-rng - Allow zero as a random number

Eric Biggers <[email protected]>
crypto: qcom-rng - Remove crypto_rng interface

Eric Biggers <[email protected]>
crypto: qcom-rng - Enable clock in hwrng case

Bryam Vargas <[email protected]>
crypto: virtio - bound the akcipher result length

Eric Biggers <[email protected]>
kunit: irq: Continue increasing hrtimer interval for longer

Eric Biggers <[email protected]>
mm/swap: reject swapon() on filesystem-level encrypted files

Fourie Zhang <[email protected]>
netfilter: nf_tables: don't queue packet path object notifications

Eric Biggers <[email protected]>
netfilter: nft_set_pipapo_avx2: add missing vzeroupper

Kyle Zeng <[email protected]>
vxlan: keep the last remote linked during FDB flush

Kyle Zeng <[email protected]>
batman-adv: reject unrepresentable multicast TVLV offsets

Kyle Zeng <[email protected]>
ipv6: seg6: clear IPv4 control block on IPIP decapsulation

Kyle Zeng <[email protected]>
net/packet: defer vmalloc TX_RING free until skbs finish

Norbert Szetei <[email protected]>
net: bridge: mcast: fix use-after-free of a master VLAN's multicast context

Zihan Xi <[email protected]>
xfrm: bound nat keepalive state collection

Zihan Xi <[email protected]>
xfrm: fix xfrm_state_construct() auth-trunc leak

Asim Viladi Oglu Manizada <[email protected]>
xfrm: ah6: validate routing header segments_left

Zihan Xi <[email protected]>
xfrm: avoid lock inversion in nat keepalive work

Zhiling Zou <[email protected]>
xfrm: drop ESP-in-TCP packets with no ingress device

Yong Wang <[email protected]>
tcp: clamp route advmss to TCP_MIN_MSS

Sabrina Dubroca <[email protected]>
xfrm: espintcp: fix UAF during close

Jiayuan Chen <[email protected]>
net: advertise TCP MSS from the configured MTU, not the learned PMTU

Hyunwoo Kim <[email protected]>
net/tcp-ao: fix use-after-free of current_key on reconnect to another peer

Qing Ming <[email protected]>
tcp: fix AO info use-after-free in tcp_ao_connect_init()

Rastislav Szabo <[email protected]>
net/tcp: fix TCP-AO key deletion in VRFs

Qing Ming <[email protected]>
gtp: serialize PDP context updates

Jiayuan Chen <[email protected]>
tls: device: fix out-of-bounds write in tls_append_frag()

Sean Christopherson <[email protected]>
KVM: SEV: Wire up kvm_x86_ops.gmem_xxx() if and only if CONFIG_KVM_AMD_SEV=y

Sean Christopherson <[email protected]>
KVM: SEV: Mark vCPU RUNNABLE after AP_CREATE, even if VMSA is unusable

Sean Christopherson <[email protected]>
KVM: SEV: Extract loading of guest-provided VMSA to a separate helper

Sean Christopherson <[email protected]>
KVM: SEV: Track the GPA of the guest-controlled VMSA used for SNP guests

Pankaj Gupta <[email protected]>
KVM: SEV: Drop FOLL_WRITE for encrypted region registration

Shuangpeng Bai <[email protected]>
usb: gadget: f_tcm: keep port count until LUN teardown completes

Aleksandr Nogikh <[email protected]>
usb: usbtest: disable dynamic ID support

Baokun Li <[email protected]>
fuse: fix invalidate lock leak on open O_TRUNC DAX failure

Baokun Li <[email protected]>
fuse: fix invalidate lock leak on setattr writeback failure

Lucas De Marchi <[email protected]>
xhci: dbgtty: Fix unregister on tty_alloc_driver() failure

Lucas De Marchi <[email protected]>
xhci: dbgtty: Fix unregister on tty_register_driver() failure

Breno Leitao <[email protected]>
usb: xhci: bail out of setup if the controller is inaccessible

Semih Baskan <[email protected]>
usb: xhci: Handle USB3 port events when there is one roothub

Michal Pecio <[email protected]>
usb: xhci: Handle bogus TRB pointers in Missed Service Error events

Haoxiang Li <[email protected]>
accessibility: speakup: unregister tty ldisc on later init failures

Griffin Kroah-Hartman <[email protected]>
fpga: dfl: fme: add error handling

Zhang Yi <[email protected]>
ext4: zero out whole block for clean edges in WRITE_ZEROES

Zhang Yi <[email protected]>
ext4: track partial-zero outcome per edge in ext4_zero_partial_blocks()

Zhang Yi <[email protected]>
ext4: write back partial-zeroed edges in WRITE_ZEROES

Zhang Yi <[email protected]>
ext4: move partial block zeroing earlier in ext4_zero_range()

Zhang Yi <[email protected]>
ext4: protect WRITE_ZEROES written extents with orphan list

Zhang Yi <[email protected]>
ext4: export converted block count from ext4_convert_unwritten_extents()

Stephen Smalley <[email protected]>
selinux: switch two allocations to use kzalloc_objs()

Bryam Vargas <[email protected]>
selinux: require a class's permission values to cover its permission count

Bryam Vargas <[email protected]>
selinux: reject a permission value exceeding the class permission count

Christian Göttsche <[email protected]>
selinux: more strict policy parsing

Christian Göttsche <[email protected]>
selinux: use u16 for security classes

Wentao Guan <[email protected]>
Revert "selinux: reject a permission value exceeding the class permission count"

Dmitry Bogdanov <[email protected]>
nvme-tcp: fix usage of page_frag_cache

Jinu Kim <[email protected]>
KVM: x86/mmu: Check write tracking in all address spaces

Peiyang He <[email protected]>
RDMA/rxe: Fix OOB in free_rd_atomic_resources()

Ibrahim Hashimov <[email protected]>
RDMA/rxe: Fix responder UAF on IB_QP_MAX_DEST_RD_ATOMIC modify_qp

Taegu Ha <[email protected]>
bpf: reject overlarge global subprog argument sizes

-------------

Diffstat:

 Documentation/filesystems/fscrypt.rst              |   4 +
 Makefile                                           |   4 +-
 arch/s390/kvm/vsie.c                               |   1 +
 arch/x86/kvm/mmu/page_track.c                      |  32 ++-
 arch/x86/kvm/svm/sev.c                             |  76 +++---
 arch/x86/kvm/svm/svm.c                             |   8 +-
 arch/x86/kvm/svm/svm.h                             |  13 +-
 crypto/krb5/krb5_api.c                             |   8 +-
 drivers/accessibility/speakup/main.c               |   1 +
 drivers/crypto/Kconfig                             |   1 -
 drivers/crypto/atmel-tdes.c                        |   5 +-
 drivers/crypto/intel/iaa/iaa_crypto_main.c         | 111 ++++-----
 drivers/crypto/intel/iaa/iaa_crypto_stats.c        |   9 +
 drivers/crypto/intel/iaa/iaa_crypto_stats.h        |   2 +
 drivers/crypto/mxs-dcp.c                           |   2 +-
 drivers/crypto/qce/aead.c                          |  58 +----
 drivers/crypto/qce/common.c                        |  55 +----
 drivers/crypto/qce/common.h                        |  16 +-
 drivers/crypto/qce/regs-v5.h                       |   4 -
 drivers/crypto/qce/sha.c                           |  30 +--
 drivers/crypto/qce/sha.h                           |   1 -
 drivers/crypto/qce/skcipher.c                      |  97 +-------
 drivers/crypto/qcom-rng.c                          | 156 ++-----------
 .../crypto/virtio/virtio_crypto_akcipher_algs.c    |   3 +-
 drivers/fpga/dfl-fme-perf.c                        |   2 +
 drivers/infiniband/sw/rxe/rxe_qp.c                 |  18 +-
 drivers/net/gtp.c                                  |  21 +-
 drivers/net/vxlan/vxlan_core.c                     |  11 +-
 drivers/net/wireless/mediatek/mt76/mt7925/mac.c    |   4 +
 drivers/nvme/host/tcp.c                            |   8 +
 drivers/target/target_core_fabric_configfs.c       |   8 +
 drivers/usb/c67x00/c67x00-sched.c                  |   4 +-
 drivers/usb/core/devio.c                           |   2 +-
 drivers/usb/core/hub.c                             |   7 +-
 drivers/usb/gadget/function/f_tcm.c                |   2 +-
 drivers/usb/host/xhci-dbgtty.c                     |  15 +-
 drivers/usb/host/xhci-ring.c                       |  20 +-
 drivers/usb/host/xhci.c                            |  11 +-
 drivers/usb/misc/usbtest.c                         |   1 +
 drivers/usb/serial/option.c                        |  20 +-
 drivers/usb/serial/spcp8x5.c                       |  13 --
 fs/ext4/ext4.h                                     |   8 +-
 fs/ext4/extents.c                                  | 168 +++++++++++---
 fs/ext4/file.c                                     |   3 +-
 fs/ext4/inode.c                                    |  36 ++-
 fs/fuse/dir.c                                      |   9 +-
 fs/fuse/file.c                                     |   4 +-
 include/kunit/run-in-irq-context.h                 |  10 +-
 include/linux/skbuff.h                             |  24 ++
 include/net/ip.h                                   |  25 ++
 include/net/ip6_route.h                            |  37 +++
 include/net/tcp.h                                  |   5 +
 include/target/target_core_fabric.h                |   2 +
 kernel/bpf/verifier.c                              |   6 +
 mm/swapfile.c                                      |   7 +
 net/batman-adv/tvlv.c                              |   5 +-
 net/bridge/br_multicast.c                          |   4 +-
 net/ipv4/route.c                                   |   4 +-
 net/ipv4/tcp_ao.c                                  |  19 +-
 net/ipv4/tcp_ipv4.c                                |   2 +-
 net/ipv4/tcp_minisocks.c                           |   2 +-
 net/ipv4/tcp_output.c                              |   6 +-
 net/ipv6/ah6.c                                     |  29 ++-
 net/ipv6/route.c                                   |   2 +-
 net/ipv6/seg6_local.c                              |   7 +
 net/ipv6/tcp_ipv6.c                                |   2 +-
 net/netfilter/nf_tables_api.c                      |  36 +--
 net/netfilter/nft_set_pipapo_avx2.c                |  17 +-
 net/packet/af_packet.c                             |  96 +++++++-
 net/tls/tls_device.c                               |   3 +-
 net/xfrm/espintcp.c                                |   9 +-
 net/xfrm/xfrm_nat_keepalive.c                      |  53 ++++-
 net/xfrm/xfrm_user.c                               |   2 +-
 security/selinux/include/security.h                |   1 +
 security/selinux/ss/avtab.c                        |  35 ++-
 security/selinux/ss/avtab.h                        |  13 ++
 security/selinux/ss/conditional.c                  |  22 +-
 security/selinux/ss/constraint.h                   |   1 +
 security/selinux/ss/policydb.c                     | 254 +++++++++++++++++----
 security/selinux/ss/policydb.h                     |  31 ++-
 security/selinux/ss/services.c                     |   8 +-
 sound/usb/card.c                                   |  14 +-
 sound/usb/midi.c                                   |   2 +
 sound/usb/quirks-table.h                           |  10 +
 .../selftests/bpf/progs/verifier_global_subprogs.c |  17 ++
 85 files changed, 1186 insertions(+), 728 deletions(-)