Skip to content

6.6.156-rc1 review

Greg Kroah-Hartman linux-patches lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest91 patches 9 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/91RDMA/rxe: Fix OOB in free_rd_atomic_resources()drivers/infiniband/sw/rxe/rxe_qp.c+1 -20 replies
2/91KVM: x86/mmu: Check write tracking in all address spacesarch/x86/kvm/mmu/page_track.c+26 -60 replies
3/91ext4: dont enable DAX on new encrypted filesfs/ext4/crypto.c fs/ext4/ialloc.c+24 -200 replies
4/91io_uring/io-wq: fix worker accounting when canceling creation callbacksio_uring/io-wq.c+6 -30 replies
5/91Revert "usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal"drivers/usb/phy/phy-fsl-usb.c+0 -10 replies
6/91bpf: Ensure reg is PTR_TO_STACK in process_iter_argkernel/bpf/verifier.c+5 -00 replies
7/91perf: Reject exited events as group leaderskernel/events/core.c+10 -00 replies
8/91bpf: Remove tst_run from lwt_seg6local_prog_ops.net/core/filter.c+0 -10 replies
9/91jfs: add check read-only before truncation in jfs_truncate_nolock()fs/jfs/inode.c+1 -10 replies
10/91jfs: add check read-only before txBeginAnon() callfs/jfs/jfs_extent.c+10 -00 replies
11/91ibmvnic: Use kernel helpers for hex dumpsdrivers/net/ethernet/ibm/ibmvnic.c+18 -120 replies
12/91jfs: Fix null-ptr-deref in jfs_ioc_trimfs/jfs/jfs_discard.c+2 -10 replies
13/91exfat: fix double free in delayed_freefs/exfat/nls.c+1 -00 replies
14/91media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()drivers/media/platform/samsung/exynos4-is/fimc-is-regs.c+1 -00 replies
15/91mISDN: hfcpci: Fix warning when deleting uninitialized timerdrivers/isdn/hardware/mISDN/hfcpci.c+5 -70 replies
16/91can: j1939: implement NETDEV_UNREGISTER notification handlernet/can/j1939/j1939-priv.h net/can/j1939/main.c net/can/j1939/socket.c+53 -00 replies
17/91can: j1939: add missing calls in NETDEV_UNREGISTER notification handlernet/can/j1939/main.c+2 -00 replies
18/91can: j1939: make j1939_sk_bind() fail if device is no longer registerednet/can/j1939/socket.c+6 -00 replies
19/91smc: Fix use-after-free in __pnet_find_base_ndev().net/smc/smc_pnet.c+22 -210 replies
20/91KVM: arm64: Prevent access to vCPU events before initarch/arm64/kvm/arm.c+6 -00 replies
21/91smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().net/smc/smc_clc.c+22 -190 replies
22/91smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().net/smc/smc_clc.c+13 -130 replies
23/91ASoC: nau8821: Cancel delayed work on component removesound/soc/codecs/nau8821.c+9 -00 replies
24/91bpf: Fix use-after-free in offloaded map/prog info fillkernel/bpf/offload.c+4 -60 replies
25/91riscv: Fix register corruption from uninitialized cregs on errorarch/riscv/kernel/compat_signal.c arch/riscv/kernel/ptrace.c+4 -20 replies
26/91Revert "PM: sleep: Use complete() in device_pm_sleep_init()"drivers/base/power/main.c+1 -50 replies
27/91ASoC: nau8821: Cancel pending work before suspendsound/soc/codecs/nau8821.c+4 -00 replies
28/91smc: Use __sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk().net/smc/smc_core.c+12 -150 replies
29/91selinux: switch two allocations to use kzalloc_objs()security/selinux/ss/conditional.c+6 -60 replies
30/91net/sched: Fix mirred deadlock on device recursioninclude/net/sch_generic.h net/core/dev.c net/sched/sch_generic.c+8 -00 replies
31/91net/sched: initialize noop_qdisc ownernet/sched/sch_generic.c+1 -00 replies
32/91powerpc/hv-gpci: fix preempt count leak in sysfs show pathsarch/powerpc/perf/hv-gpci.c+16 -80 replies
33/91crypto: starfive - Do not free stack bufferdrivers/crypto/starfive/jh7110-rsa.c+0 -10 replies
34/91ksmbd: harden file lifetime during session teardownfs/smb/server/smb2pdu.c fs/smb/server/vfs_cache.c fs/smb/server/vfs_cache.h+164 -250 replies
35/91ext4: make state in ext4_mb_mark_bb to be boolfs/ext4/ext4.h fs/ext4/extents.c fs/ext4/fast_commit.c +1 more+9 -90 replies
36/91ext4: make some fast commit functions reuse extents pathfs/ext4/extents.c fs/ext4/fast_commit.c+29 -330 replies
37/91ext4: propagate errors from fast commit range replayfs/ext4/fast_commit.c+12 -40 replies
38/91nilfs2: correct return value kernel-doc descriptions for ioctl functionsfs/nilfs2/ioctl.c+95 -1360 replies
39/91nilfs2: reject invalid block index in GC ioctlfs/nilfs2/ioctl.c+18 -20 replies
40/91nfc: nci: add data_len bound checks to activation parameter extractorsnet/nfc/nci/ntf.c+22 -40 replies
41/91HID: magicmouse: re-enable multitouch after reset-resumedrivers/hid/hid-magicmouse.c+19 -00 replies
42/91HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()drivers/hid/hid-magicmouse.c+20 -50 replies
43/91nvme: rename nvme_sc_to_pr_err to nvme_status_to_pr_errdrivers/nvme/host/pr.c+5 -50 replies
44/91nvme: fix status magic numbersdrivers/nvme/host/constants.c drivers/nvme/host/core.c drivers/nvme/host/multipath.c +3 more+24 -140 replies
45/91nvme: rename CDR/MORE/DNR to NVME_STATUS_*drivers/nvme/host/core.c drivers/nvme/host/fabrics.c drivers/nvme/host/fault_inject.c +12 more+122 -1220 replies
46/91nvmet-tcp: bound SGL data length before allocating command buffersdrivers/nvme/target/tcp.c+13 -00 replies
47/91HID: nintendo: stop device IO before hid_hw_stop on probe failuredrivers/hid/hid-nintendo.c+7 -60 replies
48/91HID: ft260: validate i2c input report lengthdrivers/hid/hid-ft260.c+14 -20 replies
49/91HID: ft260: fix stack-use-after-return write in I2C read racedrivers/hid/hid-ft260.c+24 -10 replies
50/91HID: uclogic: fix use-after-free of inrange_timer on removedrivers/hid/hid-uclogic-core.c+11 -10 replies
51/91HID: pidff: Support device error response from PID_BLOCK_LOADdrivers/hid/usbhid/hid-pidff.c+7 -10 replies
52/91HID: pidff: clang-format passdrivers/hid/usbhid/hid-pidff.c+2 -20 replies
53/91HID: pidff: fix OOB write when hid->inputs is emptydrivers/hid/usbhid/hid-pidff.c+10 -30 replies
54/91Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync()net/bluetooth/hci_sync.c+1 -10 replies
55/91Bluetooth: hci_sync: Fix accept list UAF during suspendnet/bluetooth/hci_sync.c+39 -110 replies
56/91xfs: remove file_path tracepoint datafs/xfs/scrub/trace.h+2 -100 replies
57/91fpga: dfl: fme: add error handlingdrivers/fpga/dfl-fme-perf.c+2 -00 replies
58/91accessibility: speakup: unregister tty ldisc on later init failuresdrivers/accessibility/speakup/main.c+1 -00 replies
59/91usb: xhci: Handle USB3 port events when there is one roothubdrivers/usb/host/xhci-ring.c+1 -10 replies
60/91xhci: dbgtty: Fix unregister on tty_register_driver() failuredrivers/usb/host/xhci-dbgtty.c+1 -00 replies
61/91xhci: dbgtty: Fix unregister on tty_alloc_driver() failuredrivers/usb/host/xhci-dbgtty.c+11 -50 replies
62/91fuse: fix invalidate lock leak on setattr writeback failurefs/fuse/dir.c+4 -50 replies
63/91fuse: fix invalidate lock leak on open O_TRUNC DAX failurefs/fuse/file.c+2 -20 replies
64/91usb: usbtest: disable dynamic ID supportdrivers/usb/misc/usbtest.c+1 -00 replies
65/91usb: gadget: f_tcm: keep port count until LUN teardown completesdrivers/target/target_core_fabric_configfs.c drivers/usb/gadget/function/f_tcm.c include/target/target_core_fabric.h+11 -10 replies
66/91tls: device: fix out-of-bounds write in tls_append_frag()net/tls/tls_device.c+2 -10 replies
67/91x86/CPU/AMD: Add X86_FEATURE_ZEN5arch/x86/include/asm/cpufeatures.h arch/x86/kernel/cpu/amd.c+22 -70 replies
68/91x86/CPU/AMD: Add more models to X86_FEATURE_ZEN5arch/x86/kernel/cpu/amd.c+3 -00 replies
69/91x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 rangearch/x86/kernel/cpu/amd.c+1 -20 replies
70/91x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 rangearch/x86/kernel/cpu/amd.c+1 -10 replies
71/91x86/CPU/AMD: Carve out a Zen5 models rangearch/x86/kernel/cpu/amd.c+1 -00 replies
72/91xfrm: espintcp: fix UAF during closenet/xfrm/espintcp.c+2 -10 replies
73/91xfrm: drop ESP-in-TCP packets with no ingress devicenet/xfrm/espintcp.c+6 -00 replies
74/91xfrm: ah6: validate routing header segments_leftnet/ipv6/ah6.c+18 -110 replies
75/91xfrm: fix xfrm_state_construct() auth-trunc leaknet/xfrm/xfrm_user.c+1 -10 replies
76/91net: bridge: mcast: fix use-after-free of a master VLANs multicast contextnet/bridge/br_multicast.c+2 -20 replies
77/91ipv6: seg6: clear IPv4 control block on IPIP decapsulationnet/ipv6/seg6_local.c+7 -00 replies
78/91mm/swap: reject swapon() on filesystem-level encrypted filesDocumentation/filesystems/fscrypt.rst mm/swapfile.c+11 -00 replies
79/91crypto: atmel-tdes - use scatterlist length before DMA mappingdrivers/crypto/atmel-tdes.c+2 -30 replies
80/91crypto: qce - fix CCM AAD buffer underallocationdrivers/crypto/qce/aead.c+1 -10 replies
81/91crypto: mxs-dcp - fix source scatterlist length accessdrivers/crypto/mxs-dcp.c+1 -10 replies
82/91crypto: qce - Remove unsafe/deprecated algorithmsdrivers/crypto/qce/aead.c drivers/crypto/qce/common.c drivers/crypto/qce/common.h +4 more+20 -2390 replies
83/91KVM: s390: vsie: zero stale crypto bitsarch/s390/kvm/vsie.c+1 -00 replies
84/91usb: core: Add lock to usb_wakeup_notification()drivers/usb/core/hub.c+3 -00 replies
85/91usb: core: Strengthen error handling in hub_hub_status()drivers/usb/core/hub.c+3 -10 replies
86/91ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()sound/usb/midi.c+2 -00 replies
87/91ALSA: usb-audio: Complete cleanup after system-resume errorssound/usb/card.c+10 -40 replies
88/91USB: serial: option: fix slab OOB read in interrupt URB callbackdrivers/usb/serial/option.c+17 -30 replies
89/91USB: serial: spcp8x5: drop broken carrier detect supportdrivers/usb/serial/spcp8x5.c+0 -130 replies
90/91USB: c67x00: fix use-after-free in c67x00_add_iso_urb()drivers/usb/c67x00/c67x00-sched.c+2 -20 replies
91/91usb: usbfs: fix use-after-free of usb_device in usbdev_release()drivers/usb/core/devio.c+1 -10 replies

Reviews trailers per patch

38 of 91 patches have a Reviewed-by or Acked-by.

PatchZhu YanjunDave MarquardtSimon HormanDylan J. WolffJiacheng XusyzbotOleksij RempelEric DumazetDisha GoelOjaswin MujooJan KaraGabriel Krisman BertaziDaniel BorkmannNamjae JeonRitesh Harjani (IBM)Alec HallSagi GrimbergChaitanya KulkarniChristoph HellwigMichael ZaidmanCarlos MaiolinoXu YilunVictor NogueiraPedro TammelaJamal Hadi SalimDongliang MuNikolay AleksandrovAndrea MayerBaoquan HeMuhammad Usama AnjumDarrick J. WongBartosz GolaszewskiFrank LiEric BiggersKuldeep SinghClaudio ImbrendaAlan SternBreno LeitaoRen Wei[email protected]Francesco DolciniFlorian FainelliWentao GuanBrett A C SheffieldPeter SchneiderPavel Machek (CIP)Shuah KhanRon EconomosBarry K. Nathan
SeriesT-b T-b T-b T-b T-b T-b T-b T-b T-b
1/91R-b
2/91
3/91T-b R-b R-b
4/91R-b
5/91
6/91
7/91
8/91A-b
9/91
10/91
11/91R-b R-b
12/91Reported-and-tested-by Reported-and-tested-by
13/91
14/91
15/91
16/91T-b T-b A-b
17/91T-b A-b
18/91A-b
19/91R-b
20/91
21/91R-b
22/91R-b
23/91
24/91A-b R-b
25/91
26/91
27/91
28/91R-b
29/91
30/91R-b R-b T-b A-b
31/91R-b
32/91R-b
33/91
34/91A-b
35/91R-b
36/91R-b T-b R-b
37/91R-b
38/91
39/91
40/91
41/91
42/91R-b T-b
43/91R-b R-b R-b
44/91R-b R-b R-b
45/91R-b R-b R-b
46/91R-b
47/91
48/91
49/91R-b
50/91
51/91
52/91
53/91
54/91
55/91
56/91R-b R-b
57/91R-b
58/91
59/91
60/91
61/91
62/91
63/91
64/91T-b
65/91
66/91
67/91
68/91
69/91
70/91
71/91
72/91R-b
73/91R-b
74/91
75/91
76/91A-b
77/91R-b
78/91R-b R-b R-b
79/91
80/91R-b
81/91R-b
82/91A-b T-b
83/91R-b
84/91
85/91
86/91
87/91
88/91
89/91
90/91
91/91R-b

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 49 reviewers.

Read the v1 thread

Cover letter [PATCH 6.6 00/91] 6.6.156-rc1 review

This is the start of the stable review cycle for the 6.6.156 release. There are 91 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 02 Sep 2026 13:32:19 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.156-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.156-rc1

Miguel Peñaranda <[email protected]>
usb: usbfs: fix use-after-free of usb_device in usbdev_release()

Shuangpeng Bai <[email protected]>

    USB: c67x00: fix use-after-free in c67x00_add_iso_urb()

Johan Hovold <[email protected]>
USB: serial: spcp8x5: drop broken carrier detect support

Jiale Yao <[email protected]>
USB: serial: option: fix slab OOB read in interrupt URB callback

Will Porter <[email protected]>
ALSA: usb-audio: Complete cleanup after system-resume errors

Marouane El Moufid <[email protected]>
ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output()

Griffin Kroah-Hartman <[email protected]>
usb: core: Strengthen error handling in hub_hub_status()

Griffin Kroah-Hartman <[email protected]>
usb: core: Add lock to usb_wakeup_notification()

Christian Borntraeger <[email protected]>
KVM: s390: vsie: zero stale crypto bits

Bartosz Golaszewski <[email protected]>
crypto: qce - Remove unsafe/deprecated algorithms

Thorsten Blum <[email protected]>
crypto: mxs-dcp - fix source scatterlist length access

Md Sadre Alam <[email protected]>
crypto: qce - fix CCM AAD buffer underallocation

Thorsten Blum <[email protected]>
crypto: atmel-tdes - use scatterlist length before DMA mapping

Eric Biggers <[email protected]>
mm/swap: reject swapon() on filesystem-level encrypted files

Kyle Zeng <[email protected]>
ipv6: seg6: clear IPv4 control block on IPIP decapsulation

Norbert Szetei <[email protected]>
net: bridge: mcast: fix use-after-free of a master VLAN's multicast context

Zihan Xi <[email protected]>
xfrm: fix xfrm_state_construct() auth-trunc leak

Asim Viladi Oglu Manizada <[email protected]>
xfrm: ah6: validate routing header segments_left

Zhiling Zou <[email protected]>
xfrm: drop ESP-in-TCP packets with no ingress device

Sabrina Dubroca <[email protected]>
xfrm: espintcp: fix UAF during close

Pratik Vishwakarma <[email protected]>
x86/CPU/AMD: Carve out a Zen5 models range

Perry Yuan <[email protected]>

    x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range

Wenkuan Wang <[email protected]>

    x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range

Mario Limonciello <[email protected]>
x86/CPU/AMD: Add more models to X86_FEATURE_ZEN5

Borislav Petkov (AMD) <[email protected]>

    x86/CPU/AMD: Add X86_FEATURE_ZEN5

Jiayuan Chen <[email protected]>
tls: device: fix out-of-bounds write in tls_append_frag()

Shuangpeng Bai <[email protected]>
usb: gadget: f_tcm: keep port count until LUN teardown completes

Aleksandr Nogikh <[email protected]>
usb: usbtest: disable dynamic ID support

Baokun Li <[email protected]>
fuse: fix invalidate lock leak on open O_TRUNC DAX failure

Baokun Li <[email protected]>
fuse: fix invalidate lock leak on setattr writeback failure

Lucas De Marchi <[email protected]>
xhci: dbgtty: Fix unregister on tty_alloc_driver() failure

Lucas De Marchi <[email protected]>
xhci: dbgtty: Fix unregister on tty_register_driver() failure

Semih Baskan <[email protected]>
usb: xhci: Handle USB3 port events when there is one roothub

Haoxiang Li <[email protected]>
accessibility: speakup: unregister tty ldisc on later init failures

Griffin Kroah-Hartman <[email protected]>
fpga: dfl: fme: add error handling

Darrick J. Wong <[email protected]>
xfs: remove file_path tracepoint data

Chengfeng Ye <[email protected]>
Bluetooth: hci_sync: Fix accept list UAF during suspend

Zijun Hu <[email protected]>
Bluetooth: hci_sync: Use bt_dev_err() to log error message in hci_update_event_filter_sync()

Baul Lee <[email protected]>

    HID: pidff: fix OOB write when hid->inputs is empty

Tomasz Pakuła <[email protected]>
HID: pidff: clang-format pass

Tomasz Pakuła <[email protected]>
HID: pidff: Support device error response from PID_BLOCK_LOAD

Ibrahim Hashimov <[email protected]>
HID: uclogic: fix use-after-free of inrange_timer on remove

Raman Varabets <[email protected]>
HID: ft260: fix stack-use-after-return write in I2C read race

Michael Zaidman <[email protected]>
HID: ft260: validate i2c input report length

Jiangshan Yi <[email protected]>
HID: nintendo: stop device IO before hid_hw_stop on probe failure

Ibrahim Hashimov <[email protected]>
nvmet-tcp: bound SGL data length before allocating command buffers

Weiwen Hu <[email protected]>
nvme: rename CDR/MORE/DNR to NVME_STATUS_*

Weiwen Hu <[email protected]>
nvme: fix status magic numbers

Weiwen Hu <[email protected]>
nvme: rename nvme_sc_to_pr_err to nvme_status_to_pr_err

Jose Villaseñor Montfort <[email protected]>
HID: magicmouse: prevent unbounded recursion in magicmouse_raw_event()

Christopher Kodama <[email protected]>
HID: magicmouse: re-enable multitouch after reset-resume

Bryam Vargas <[email protected]>
nfc: nci: add data_len bound checks to activation parameter extractors

Ryusuke Konishi <[email protected]>
nilfs2: reject invalid block index in GC ioctl

Ryusuke Konishi <[email protected]>
nilfs2: correct return value kernel-doc descriptions for ioctl functions

Guanghui Yang <[email protected]>
ext4: propagate errors from fast commit range replay

Baokun Li <[email protected]>
ext4: make some fast commit functions reuse extents path

Kemeng Shi <[email protected]>
ext4: make state in ext4_mb_mark_bb to be bool

DaeMyung Kang <[email protected]>
ksmbd: harden file lifetime during session teardown

Jia Jie Ho <[email protected]>
crypto: starfive - Do not free stack buffer

Aboorva Devarajan <[email protected]>
powerpc/hv-gpci: fix preempt count leak in sysfs show paths

Johannes Berg <[email protected]>
net/sched: initialize noop_qdisc owner

Eric Dumazet <[email protected]>
net/sched: Fix mirred deadlock on device recursion

Stephen Smalley <[email protected]>
selinux: switch two allocations to use kzalloc_objs()

Kuniyuki Iwashima <[email protected]>

    smc: Use __sk_dst_get() and dst_dev_rcu() in smc_vlan_by_tcpsk().

Cristian Ciocaltea <[email protected]>
ASoC: nau8821: Cancel pending work before suspend

Sasha Levin <[email protected]>
Revert "PM: sleep: Use complete() in device_pm_sleep_init()"

Michael Neuling <[email protected]>
riscv: Fix register corruption from uninitialized cregs on error

Jiayuan Chen <[email protected]>
bpf: Fix use-after-free in offloaded map/prog info fill

Cristian Ciocaltea <[email protected]>
ASoC: nau8821: Cancel delayed work on component remove

Kuniyuki Iwashima <[email protected]>

    smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match().

Kuniyuki Iwashima <[email protected]>

    smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().

Oliver Upton <[email protected]>
KVM: arm64: Prevent access to vCPU events before init

Kuniyuki Iwashima <[email protected]>
smc: Fix use-after-free in __pnet_find_base_ndev().

Tetsuo Handa <[email protected]>
can: j1939: make j1939_sk_bind() fail if device is no longer registered

Tetsuo Handa <[email protected]>
can: j1939: add missing calls in NETDEV_UNREGISTER notification handler

Tetsuo Handa <[email protected]>
can: j1939: implement NETDEV_UNREGISTER notification handler

Vladimir Riabchun <[email protected]>
mISDN: hfcpci: Fix warning when deleting uninitialized timer

Wentao Liang <[email protected]>
media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode()

Namjae Jeon <[email protected]>
exfat: fix double free in delayed_free

Dylan Wolff <[email protected]>
jfs: Fix null-ptr-deref in jfs_ioc_trim

Nick Child <[email protected]>
ibmvnic: Use kernel helpers for hex dumps

Vasiliy Kovalev <[email protected]>
jfs: add check read-only before txBeginAnon() call

Vasiliy Kovalev <[email protected]>
jfs: add check read-only before truncation in jfs_truncate_nolock()

Sebastian Andrzej Siewior <[email protected]>
bpf: Remove tst_run from lwt_seg6local_prog_ops.

Kyle Zeng <[email protected]>
perf: Reject exited events as group leaders

Tao Lyu <[email protected]>
bpf: Ensure reg is PTR_TO_STACK in process_iter_arg

Ralf Lici <[email protected]>
Revert "usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal"

Vishnu Razdan <[email protected]>
io_uring/io-wq: fix worker accounting when canceling creation callbacks

Eric Biggers <[email protected]>
ext4: don't enable DAX on new encrypted files

Jinu Kim <[email protected]>
KVM: x86/mmu: Check write tracking in all address spaces

Peiyang He <[email protected]>
RDMA/rxe: Fix OOB in free_rd_atomic_resources()

-------------

Diffstat:

 Documentation/filesystems/fscrypt.rst              |   4 +
 Makefile                                           |   4 +-
 arch/arm64/kvm/arm.c                               |   6 +
 arch/powerpc/perf/hv-gpci.c                        |  24 +-
 arch/riscv/kernel/compat_signal.c                  |   2 +
 arch/riscv/kernel/ptrace.c                         |   4 +-
 arch/s390/kvm/vsie.c                               |   1 +
 arch/x86/include/asm/cpufeatures.h                 |   4 +-
 arch/x86/kernel/cpu/amd.c                          |  28 ++-
 arch/x86/kvm/mmu/page_track.c                      |  32 ++-
 drivers/accessibility/speakup/main.c               |   1 +
 drivers/base/power/main.c                          |   6 +-
 drivers/crypto/atmel-tdes.c                        |   5 +-
 drivers/crypto/mxs-dcp.c                           |   2 +-
 drivers/crypto/qce/aead.c                          |  58 +----
 drivers/crypto/qce/common.c                        |  55 +----
 drivers/crypto/qce/common.h                        |  16 +-
 drivers/crypto/qce/regs-v5.h                       |   4 -
 drivers/crypto/qce/sha.c                           |  30 +--
 drivers/crypto/qce/sha.h                           |   1 -
 drivers/crypto/qce/skcipher.c                      |  97 +-------
 drivers/crypto/starfive/jh7110-rsa.c               |   1 -
 drivers/fpga/dfl-fme-perf.c                        |   2 +
 drivers/hid/hid-ft260.c                            |  41 +++-
 drivers/hid/hid-magicmouse.c                       |  44 +++-
 drivers/hid/hid-nintendo.c                         |  13 +-
 drivers/hid/hid-uclogic-core.c                     |  12 +-
 drivers/hid/usbhid/hid-pidff.c                     |  21 +-
 drivers/infiniband/sw/rxe/rxe_qp.c                 |   3 +-
 drivers/isdn/hardware/mISDN/hfcpci.c               |  12 +-
 .../platform/samsung/exynos4-is/fimc-is-regs.c     |   1 +
 drivers/net/ethernet/ibm/ibmvnic.c                 |  30 ++-
 drivers/nvme/host/constants.c                      |   2 +-
 drivers/nvme/host/core.c                           |  32 +--
 drivers/nvme/host/fabrics.c                        |   8 +-
 drivers/nvme/host/fault_inject.c                   |   2 +-
 drivers/nvme/host/fc.c                             |   8 +-
 drivers/nvme/host/multipath.c                      |   2 +-
 drivers/nvme/host/nvme.h                           |   4 +-
 drivers/nvme/host/pr.c                             |  10 +-
 drivers/nvme/target/admin-cmd.c                    |  24 +-
 drivers/nvme/target/core.c                         |  46 ++--
 drivers/nvme/target/discovery.c                    |  14 +-
 drivers/nvme/target/fabrics-cmd-auth.c             |  16 +-
 drivers/nvme/target/fabrics-cmd.c                  |  36 +--
 drivers/nvme/target/io-cmd-bdev.c                  |  12 +-
 drivers/nvme/target/passthru.c                     |  10 +-
 drivers/nvme/target/rdma.c                         |  10 +-
 drivers/nvme/target/tcp.c                          |  17 +-
 drivers/nvme/target/zns.c                          |  30 +--
 drivers/target/target_core_fabric_configfs.c       |   8 +
 drivers/usb/c67x00/c67x00-sched.c                  |   4 +-
 drivers/usb/core/devio.c                           |   2 +-
 drivers/usb/core/hub.c                             |   7 +-
 drivers/usb/gadget/function/f_tcm.c                |   2 +-
 drivers/usb/host/xhci-dbgtty.c                     |  15 +-
 drivers/usb/host/xhci-ring.c                       |   2 +-
 drivers/usb/misc/usbtest.c                         |   1 +
 drivers/usb/phy/phy-fsl-usb.c                      |   1 -
 drivers/usb/serial/option.c                        |  20 +-
 drivers/usb/serial/spcp8x5.c                       |  13 --
 fs/exfat/nls.c                                     |   1 +
 fs/ext4/crypto.c                                   |  40 ++--
 fs/ext4/ext4.h                                     |   2 +-
 fs/ext4/extents.c                                  |  55 ++---
 fs/ext4/fast_commit.c                              |  35 ++-
 fs/ext4/ialloc.c                                   |   4 +
 fs/ext4/mballoc.c                                  |   4 +-
 fs/fuse/dir.c                                      |   9 +-
 fs/fuse/file.c                                     |   4 +-
 fs/jfs/inode.c                                     |   2 +-
 fs/jfs/jfs_discard.c                               |   3 +-
 fs/jfs/jfs_extent.c                                |  10 +
 fs/nilfs2/ioctl.c                                  | 251 ++++++++++-----------
 fs/smb/server/smb2pdu.c                            |   6 +-
 fs/smb/server/vfs_cache.c                          | 179 +++++++++++++--
 fs/smb/server/vfs_cache.h                          |   4 +-
 fs/xfs/scrub/trace.h                               |  12 +-
 include/linux/nvme.h                               |  16 +-
 include/net/sch_generic.h                          |   1 +
 include/target/target_core_fabric.h                |   2 +
 io_uring/io-wq.c                                   |   9 +-
 kernel/bpf/offload.c                               |  10 +-
 kernel/bpf/verifier.c                              |   5 +
 kernel/events/core.c                               |  10 +
 mm/swapfile.c                                      |   7 +
 net/bluetooth/hci_sync.c                           |  48 +++-
 net/bridge/br_multicast.c                          |   4 +-
 net/can/j1939/j1939-priv.h                         |   1 +
 net/can/j1939/main.c                               |   5 +
 net/can/j1939/socket.c                             |  55 +++++
 net/core/dev.c                                     |   6 +
 net/core/filter.c                                  |   1 -
 net/ipv6/ah6.c                                     |  29 ++-
 net/ipv6/seg6_local.c                              |   7 +
 net/nfc/nci/ntf.c                                  |  26 ++-
 net/sched/sch_generic.c                            |   2 +
 net/smc/smc_clc.c                                  |  67 +++---
 net/smc/smc_core.c                                 |  27 +--
 net/smc/smc_pnet.c                                 |  43 ++--
 net/tls/tls_device.c                               |   3 +-
 net/xfrm/espintcp.c                                |   9 +-
 net/xfrm/xfrm_user.c                               |   2 +-
 security/selinux/ss/conditional.c                  |  12 +-
 sound/soc/codecs/nau8821.c                         |  13 ++
 sound/usb/card.c                                   |  14 +-
 sound/usb/midi.c                                   |   2 +
 107 files changed, 1133 insertions(+), 846 deletions(-)