6.12.113-rc2 review

This is the start of the stable review cycle for the 6.12.113 release. There are 505 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 16 Oct 2026 12:37:19 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.113-rc2.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.12.113-rc2

Vicki Pfau <[email protected]>
HID: steam: Clean up locking

Vicki Pfau <[email protected]>
HID: steam: Refactor registration

Vicki Pfau <[email protected]>
HID: steam: Rearrange teardown sequence

Vicki Pfau <[email protected]>
HID: steam: Fully unregister controller when hidraw is opened

Kuba Piecuch <[email protected]>
sched_ext: Generate qseq from a per-task counter

Adrian Betschart <[email protected]>
drm/amd/display: Don't replace a sink mode that shares the native totals

Oliver Hartkopp <[email protected]>
can: fix unique skb identifier regression under RPS

Cristian Papa <[email protected]>
wifi: mt76: mt7603: initialize global station WCID

Adrian Bente <[email protected]>
netfilter: flowtable: fix offloaded ct timeout never being extended

Florian Westphal <[email protected]>
netfilter: conntrack: fix erronous removal of offload bit

Jens Axboe <[email protected]>

    io_uring/waitid: fix KCSAN warning on io_waitid->head

Jens Axboe <[email protected]>
io_uring/waitid: use io_waitid_remove_wq() consistently

Osama Abdelkader <[email protected]>
drm/panthor: validate userspace queue count against initialized firmware slot count

Maíra Canal <[email protected]>
drm/vc4: Fix binner slot allocation failing on an idle GPU

Maxime Ripard <[email protected]>
drm/vc4: Make v3d paths unavailable on any generation newer than vc4

Ilia Gavrilov <[email protected]>
vsock: Fix memory leak in vmci_transport_recv_dgram_cb()

Fernando Fernandez Mancera <[email protected]>
net: openvswitch: validate transport header presence in set_ipv6_addr

Vadim Fedorenko <[email protected]>
ptp: ocp: fix PCIe delay estimation calculation

Willem de Bruijn <[email protected]>
net/packet: call packet_parse_headers after virtio_net_hdr_to_skb

Petr Machata <[email protected]>
mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()

Li RongQing <[email protected]>
net/mlx5e: Order ICOSQ cc update after CQ doorbell

Tianyi Gao <[email protected]>
veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down

Gyeyoung Baek <[email protected]>
drm/imagination: Fix reference and vm_bo handling in remap()

Eric Dumazet <[email protected]>
flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()

Michael Chan <[email protected]>
bnxt_en: Fix driver init in kdump kernel

Michael Chan <[email protected]>
bnxt_en: Add bnxt_clear_bars() helper

Haishuang Yan <[email protected]>
pfcp: make sure the SEID is linear before reading it

Victor Nogueira <[email protected]>
net/sched: cls_route: reject change with no routing attribute

Haishuang Yan <[email protected]>
devlink: fix devlink_rel reference leak when notify work is pending

Eric Dumazet <[email protected]>

    flow_dissector: avoid u16 truncation of skb->len when computing thoff

Waiman Long <[email protected]>
cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in cpuset_handle_hotplug()

Chen Ridong <[email protected]>
cpuset: separate tmpmasks and cpuset allocation logic

Marek Szyprowski <[email protected]>
ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM

Alvin Šipraga <[email protected]>
ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes

Alvin Šipraga <[email protected]>
ASoC: adau1372: allow sleepy powerdown GPIOs

Devin Wittmayer <[email protected]>
wifi: mt76: mt792x: pick the SAR table layout from the table itself

Junjie Cao <[email protected]>

    wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit

Devin Wittmayer <[email protected]>
wifi: mt76: mt7925: don't put the band auto marker in TGID

Nicolas Cavallari <[email protected]>
wifi: mt76: mt7915: disable rx napi when removing device

Tao Gong <[email protected]>

    wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout

Aaron Ma <[email protected]>
wifi: mt76: mt7925: restore the legacy BSS after MLO teardown

Filipe Manana <[email protected]>
btrfs: fix lost error return value in btrfs_listxattr()

Filipe Manana <[email protected]>
btrfs: fix xattr replace when multiple xattrs are packed in the same item

Fuad Tabba <[email protected]>
arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3

Sang-Hoon Choi <[email protected]>
nvmet: use the local P2P device on metadata allocation failure

Mahantesh Salimath <[email protected]>
tee: optee: ffa: support shared memory offsets on large-page kernels

Rodrigo Zaiden <[email protected]>
tee: optee: fix kernel-doc warnings

Jens Wiklander <[email protected]>
optee: sync secure world ABI headers

Sang-Hoon Choi <[email protected]>
cxgb4/ch_ktls: disable softirqs around tid_list erases

Omar Ramadan <[email protected]>
amt: send the relay's General Query directly from the receive path

Jamal Hadi Salim <[email protected]>
net/sched: em_text: reject unterminated algo before autoload

Maíra Canal <[email protected]>
drm/vc4: Free the BO cache size list on teardown

Myeonghun Pak <[email protected]>
drm/aspeed: Balance the display clock enable on teardown

Sang-Hoon Choi <[email protected]>
gpio: exar: initialize the ID before registering its cleanup

Oleg Keri <[email protected]>
drm/dp: don't mark the AUX backlight enabled when enabling failed

Sai Teja Aluvala <[email protected]>
Bluetooth: btintel_pcie: Add shared HW reset for clean start

Kiran K <[email protected]>
Bluetooth: btintel_pcie: Add recovery mechanism

Ravindra <[email protected]>
Bluetooth: btintel_pcie: fix TX descriptor bounds check

Vincent Jardin <[email protected]>
arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value

Vincent Jardin <[email protected]>
arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single

Vincent Jardin <[email protected]>
arm64: dts: lx2160a: fix incorrect pinmux

Christian Brauner <[email protected]>
namespace: refuse an automount below a mount that is in no namespace

Christian Brauner <[email protected]>
namei: don't reveal overmounted entries in refwalk

Christian Brauner <[email protected]>
namespace: don't let a pseudo dentry become the root of a mount

Christian Brauner <[email protected]>
dcache: don't put a mountpoint on a dentry that's being removed

Christian Brauner <[email protected]>
namespace: check a submount for references right before unmounting it

Christian Brauner <[email protected]>
fs: refuse fspick() on internal superblocks

Christian Brauner <[email protected]>
namespace: don't copy an unmounted mount tree

Leo Li <[email protected]>
drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs

Mikhail Gavrilov <[email protected]>
drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks

Alex Deucher <[email protected]>
drm/amdgpu: make Mac FB workaround generic

Vitaly Prosyak <[email protected]>
drm/amdgpu: serialize vblank counter reads against GPU reset

Haojie Li <[email protected]>
drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info

Saleel Kudchadker <[email protected]>
drm/amdkfd: align SDMA doorbell base for shader doorbell writes

Fan Wu <[email protected]>
drm/vc4: drain the hangcheck timer and works on V3D unbind

Gyeyoung Baek <[email protected]>
drm/imagination: Size page table preallocation by device address

Krzysztof Karas <[email protected]>
drm/i915/gt: Unmask interrupts only when ACTIVE is true

Krzysztof Karas <[email protected]>
drm/i915/gem: Prevent overstepping exec array boundary

Sajal Gupta <[email protected]>
drm/gud: don't keep a connector without a CRTC as connector_state

Nguyen Ngoc Thang <[email protected]>
drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN

Palla Raghunath <[email protected]>
Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown

Maxim Skokov <[email protected]>
Bluetooth: RFCOMM: free the skb when the DLC has no owner

Iaroslav Voitovych <[email protected]>
Bluetooth: MGMT: Fix status of pending commands flushed on power off

Chengfeng Ye <[email protected]>
Bluetooth: ISO: Serialize concurrent connect calls

Chengfeng Ye <[email protected]>
Bluetooth: ISO: Reject concurrent BIS listener setup

Chengfeng Ye <[email protected]>
Bluetooth: hci_sock: Serialize dead-device detachment

Runyu Xiao <[email protected]>
Bluetooth: btintel_pcie: use managed IRQ teardown

Karl Mehltretter <[email protected]>
riscv: fix load_unaligned_zeropad() fixup for RV32

Ziyi Guo <[email protected]>
riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp

Runyu Xiao <[email protected]>
scsi: qedi: Initialize callback state before registration

Shawn Lin <[email protected]>
pmdomain: rockchip: propagate subdomain add errors

Shawn Lin <[email protected]>
pmdomain: rockchip: fix clock leak on domain probe failure

Shawn Lin <[email protected]>
pmdomain: rockchip: don't ignore clock lookup errors on attach

Ming Qian <[email protected]>
pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains

Ridham Khurana <[email protected]>
regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4

Abhishek Ojha <[email protected]>
regulator: ltc3676: don't read the write-only HRST and CLIRQ registers

Shao-Fu Chen <[email protected]>
optee: register TEE devices only once fully initialized

Denis V. Lunev <[email protected]>
openvswitch: fix soft lockup in the netlink flow dump

Karl Bonde Torp <[email protected]>
nvme: fix swapped ZRASF zone state values for full and read only

Weiming Shi <[email protected]>
net: team: free skb when broadcast has no txable port

Fredrik Nyberg <[email protected]>
net: usb: ax88179_178a: fix rx frame length for non-last packets

Daniel Machon <[email protected]>
net: sparx5: free the matchall entry on destroy

Josef Bacik <[email protected]>
net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()

Sebastien Royen <[email protected]>
net: dsa: microchip: fix KSZ8765 fiber detection

Zixuan Chai <[email protected]>
net: bridge: avoid recursive multicast port cleanup

Chengfeng Ye <[email protected]>
net/smc: protect clcsock lifetime in smc_getname

Quchaosheng <[email protected]>
net/packet: guard the ll header push in packet_rcv_spkt()

Guangshuo Li <[email protected]>
mmc: sdhci-sprd: disable runtime PM on remove

Yibo Tan <[email protected]>
mmc: mtk-sd: Cancel request timeout work on remove

Guangshuo Li <[email protected]>
mmc: cavium-thunderx: destroy slot platform devices on remove

Guangshuo Li <[email protected]>
mmc: cavium-octeon: destroy slot platform devices on remove

Mikulas Patocka <[email protected]>
dm: fix reading free memory in do_resume

Ma Xinmeng <[email protected]>
dm-snap: reject the transient exception store for snapshot-merge

Ben Cressey <[email protected]>
dm-crypt: reject the lmk IV mode with AEAD ciphers

Nguyen Ngoc Thang <[email protected]>
memstick: rtsx_usb_ms: complete requests after eject instead of dropping them

Raj Ojha <[email protected]>
memstick: core: wait for request completion before freeing card

성병찬 <[email protected]>
KEYS: Fix add_key() race with keyring restriction

Karl Mehltretter <[email protected]>
keys: finalize persistent keyring timeout after link attempt

Tristan Madani <[email protected]>
ice: fix metadata_dst refcount handling on representor teardown

Mingming Cao <[email protected]>
ibmveth: fix TX LTB and filter unwind on open-fail

Mingming Cao <[email protected]>
ibmveth: h_free logical LAN on open-fail after register

Ridham Khurana <[email protected]>
gpio: xilinx: fix runtime PM leak on request error path

Vishal Badole <[email protected]>
EDAC/amd64: Mask UMC chip select to the four implemented selects

Hui Peng <[email protected]>
sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute

Stephen Smalley <[email protected]>
selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts

Christian Göttsche <[email protected]>
selinux: fix data race on AVC latest_notif

Johannes Berg <[email protected]>
Revert "wifi: libertas: reject short monitor TX frames"

Chengfeng Ye <[email protected]>
tipc: hold a reference to nodes found by link name

Yuqi Xu <[email protected]>
tipc: destroy topsrv workqueues before closing connections

Daehyeon Ko <[email protected]>
tcp: reject net_iov in zerocopy receive mapping hints

Marek Szyprowski <[email protected]>
swiotlb: fix default_swiotlb_limit() for non-growable default pool

Sabrina Dubroca <[email protected]>
strparser: make sure __strp_recv isn't running before tearing down the parser

Georgiy Osokin <[email protected]>
tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()

Josef Bacik <[email protected]>
xen/netfront: don't leak the skb when xennet_fill_frags() fails

Pavankumar Kondeti <[email protected]>
workqueue: Fix NULL current_pwq deref in chained work check

Jason A. Donenfeld <[email protected]>
wireguard: noise: reject response consumption after intermediate initiation

Ramses de Norre <[email protected]>
wireguard: queueing: preserve tstamp_type when encapsulating packet

Michele Dionisio <[email protected]>
wifi: brcmfmac: fix P2P device removal race in brcmf_detach()

Daehyeon Ko <[email protected]>
vsock/virtio: account only unread bytes in read_skb()

Ji-Ze Hong (Peter Hong) <[email protected]>

    usb: f81604: fix struct f81604_int_data size mismatch

Palla Raghunath <[email protected]>
dm ioctl: don't let data_start run past the buffer

Daehyeon Ko <[email protected]>
cipso: adjust cached option offsets when removing CIPSO

Wentao Liang <[email protected]>
btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()

Michael Garland <[email protected]>
ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P)

Karl Mehltretter <[email protected]>
arm64: irq: exclude the softirq stack switch from KCOV

Krzysztof Furman <[email protected]>
Input: xpad - add support for Corsair Novablade Pro

Haotian Zhang <[email protected]>
Input: ati_remote2 - fix type confusion in device attribute handlers

Daehyeon Ko <[email protected]>
ipv6: do not warn on route notification size race

Daehyeon Ko <[email protected]>
ipv4: do not warn on route notification size race

Daehyeon Ko <[email protected]>
ipv4: stop route notification sizing when nexthop group shrinks

Daehyeon Ko <[email protected]>
ipv4: stop exception dump when nexthop group shrinks

Daehyeon Ko <[email protected]>
ipv4: stop PMTU walk when nexthop group shrinks

Michael S. Tsirkin <[email protected]>
ipv4: validate checksum_start before completing checksum

Eric Biggers <[email protected]>
crypto: drbg - Fix ineffective sanity check

Baochen Qiang <[email protected]>
wifi: ath12k: fix reusing m3 memory

Jiajia Liu <[email protected]>
Bluetooth: hci_event: fix simultaneous discovery stuck in FINDING

Liew Rui Yan <[email protected]>
mm/damon/core: fix unconditionally skip last region

SeongJae Park <[email protected]>
mm/damon/core: do non-safe region walk on kdamond_apply_schemes()

Chao Yu <[email protected]>
f2fs: fix to reset all pinned status during fggc

Chao Yu <[email protected]>
f2fs: fix to shrink gc_lock coverage in f2fs_gc_range()

Chao Yu <[email protected]>
f2fs: fix to reclaim space in f2fs_allocate_pinning_section()

Remy D. Farley <[email protected]>
doc/netlink: netlink-raw: Add max check

Jakub Kicinski <[email protected]>
tools: ynl: add scope qualifier for definitions

Jakub Kicinski <[email protected]>
tools: ynl-gen: support limits using definitions

Jakub Kicinski <[email protected]>
tools: ynl-gen: use names of constants in generated limits

Matti Vaittinen <[email protected]>
iio: light: rohm-bu27034: Fix error return

Matti Vaittinen <[email protected]>
iio: light: rohm-bu27034: Fix infinite delay on error

Matti Vaittinen <[email protected]>
iio: bu27034: simplify using guard(mutex)

Pengpeng Hou <[email protected]>
iio: cdc: ad7150: fix OF matching and publish module aliases

Michael Hennerich <[email protected]>
iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs

Paulo Alcantara <[email protected]>
smb: client: only require read lease for size-extending preallocate

Fabrice Gasnier <[email protected]>
iio: adc: stm32-adc: fix possible division by zero in processed channel

Vladyslav Ivashchenko <[email protected]>
iio: adc: axp288: Add TS bias override for Haier HV103H

Cong Nguyen <[email protected]>
iio: adc: max1363: sign-extend bipolar differential channel reads

Pengpeng Hou <[email protected]>
iio: adc: aspeed: propagate reset deassert errors

Krzysztof Kozlowski <[email protected]>
iio: adc: aspeed: Simplify with dev_err_probe

Fan Wu <[email protected]>
iio: adc: ad_sigma_delta: fix use-after-free on unbind

Matti Vaittinen <[email protected]>
iio: accel: kionix-kx022a: Prevent memory leak and fix state

Matti Vaittinen <[email protected]>
iio: accel: kx022a: Use cleanup.h helpers

Felix Fietkau <[email protected]>

    wifi: mac80211: set info->band for 802.3 encap offload frames

Tamizh Chelvam Raja <[email protected]>

    wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit()

Sean Christopherson <[email protected]>
KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted

Dipayaan Roy <[email protected]>
net: mana: remove double CQ cleanup in mana_create_rxq error path

Dipayaan Roy <[email protected]>
net: mana: Skip WQ object destruction for uninitialized RXQ

Dipayaan Roy <[email protected]>
net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq()

Jerome Tollet <[email protected]>
net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry

Jerome Tollet <[email protected]>
net/mlx5e: Prevent stale XSK buffer release on refill retry

Matthew Wilcox (Oracle) <[email protected]>
fs: Free any excess xarray nodes in clear_inode()

Zhiling Zou <[email protected]>
wifi: mac80211: count only matching reservations in reserved switch

Johan Hovold <[email protected]>
tty: port: fix tty_port_tty_vhangup() race

Eric Dumazet <[email protected]>
bnxt_en: fix DMA mapping length for padded small packets

Eric Dumazet <[email protected]>
ipv4: free inet_opt and ireq_opt after an RCU grace period

Fuad Tabba <[email protected]>
KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT

Guixin Liu <[email protected]>
nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known

Han Xu <[email protected]>
mtd: spinand: Enable QE on all dies

Zhao Li <[email protected]>
wifi: mac80211: shut down RX BA session timer on teardown

Nuno Sá <[email protected]>
mtd: spinand: fix NULL pointer dereference with no ECC engine

Timur Kristóf <[email protected]>
drm/amd/display: Mark DCE 6.4 as not APU

Abdurrahman Hussain <[email protected]>
i2c: xiic: preserve PEC byte length in SMBus block read setup

Manikanta Guntupalli <[email protected]>
i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode

Aaron Kling <[email protected]>
ALSA: hda/tegra: Re-enable SDO workaround for Tegra194

Ian Rogers <[email protected]>
perf: Replace perf_event_header__init_id with full header init

Daniel Starke <[email protected]>
tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2

Johan Hovold <[email protected]>
tty: tty_port: restore TTY_IO_ERROR on activation failure

Jiri Slaby (SUSE) <[email protected]>
tty: tty_port: use guard()s

Jiri Slaby (SUSE) <[email protected]>
tty: introduce tty_port_tty guard()

Pannarat Wiriyaarritham <[email protected]>
usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41

Arthur Heymans <[email protected]>
drm/amd/display: Preserve eDP mode on initial ASSR failure

Runyu Xiao <[email protected]>
USB: dwc2: shut down wakeup timer before freeing HCD state

Myeonghun Pak <[email protected]>
usb: ohci-spear: disable controller wakeup on removal

Chen Ni <[email protected]>
usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare()

Francisco Beltrán Millalén <[email protected]>
drm/amdgpu: reset VI ASIC on MacBookPro14,3

Andre Eikmeyer <[email protected]>
drm/amdgpu: reset VI ASIC on MacBookPro15,1

Eric Biggers <[email protected]>
fsverity: add dependency on 64K or smaller pages

Mostafa Saleh <[email protected]>
KVM: arm64: Use stage-1 leaf size for VM_PFNMAP

Beata Michalska <[email protected]>

    arm64: errata: Add Cortex-A725 erratum 3821522 workaround

Beata Michalska <[email protected]>
arm64: errata: Factor out broken AMU const counter cap

Chengfeng Ye <[email protected]>
Bluetooth: Serialize SMP remote OOB data access

Chengfeng Ye <[email protected]>
Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown

Mark Rutland <[email protected]>
arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems

Mark Rutland <[email protected]>
arm64/fpsimd: signal: Consistently read FPSIMD context

Mark Rutland <[email protected]>
arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state

Mark Rutland <[email protected]>
arm64/fpsimd: signal: Clear PSTATE.SM when restoring FPSIMD frame only

Zhengchuan Liang <[email protected]>
perf: Require kernel access for text poke events

Dapeng Mi <[email protected]>
perf/core: Check kernel access when kernel callchains are requested

Luo Gengkun <[email protected]>
perf: Remove unnecessary parameter of security check

Johan Hovold <[email protected]>
tty: fix saved termios reset race

Jiazi Liu <[email protected]>
usb: dwc3: gadget: fix IRQ storm on invalid event buffer count

Timur Kristóf <[email protected]>
drm/amd/display: Fix fast updates on DCE 8.1

Andrey Albershteyn <[email protected]>
fs,fsverity: remove check for fsverity being enabled in setattr_prepare()

Christoph Hellwig <[email protected]>
fs,fsverity: reject size changes on fsverity files in setattr_prepare

Josef Bacik <[email protected]>
xen/netfront: drop RX packets with a short Ethernet header

Gilberto Conde <[email protected]>
net: usb: qmi_wwan: add Quectel EG120K-EA

David Howells <[email protected]>
cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1

Marc Zyngier <[email protected]>
KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor

Baolin Wang <[email protected]>
mm: shmem: ignore sysfs configs for shmem forced collapse

Baolin Wang <[email protected]>
mm: shmem: change shmem_huge_global_enabled() to return huge order bitmap

Baolin Wang <[email protected]>
mm: factor out the order calculation into a new helper

Kefeng Wang <[email protected]>
mm: shmem: remove __shmem_huge_global_enabled()

Paulo Alcantara <[email protected]>
netfs: clear post-EOF pagecache when extending a file via write

Xuanqiang Luo <[email protected]>
pfcp: fix socket lifetime on netdevice registration failure

Bartosz Golaszewski <[email protected]>
net: phy: aquantia: fix system interface type not updated in forced mode

Paolo Abeni <[email protected]>
mptcp: prevent race between disconnect() and rtx

Mehmet Fide <[email protected]>
mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages

Yi Yang <[email protected]>
vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF

Jiri Slaby (SUSE) <[email protected]>
tty/vt: use guard()s

Jiri Slaby (SUSE) <[email protected]>
console: introduce console_lock guard()s

Asad Kamal <[email protected]>
drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read

Chuck Lever <[email protected]>
svcrdma: Use svc_xprt_put to free listener on create failure

Fuad Tabba <[email protected]>
KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save

Aditya Dutt <[email protected]>
jfs: fix array-index-out-of-bounds read in add_missing_indices

Eric Dumazet <[email protected]>
ipv6: use RCU in ip6_output()

Fan Wu <[email protected]>
iio: trigger: cancel reenable_work before freeing trigger

Salah Triki <[email protected]>
iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler

Zhang Jie <[email protected]>
iio: proximity: sx9324: Correct proximity channel resolution

Cong Nguyen <[email protected]>
iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure

Salah Triki <[email protected]>
iio: proximity: isl29501: Fix return type of isl29501_register_write

Laxman Acharya Padhya <[email protected]>
iio: proximity: aw96103: validate firmware data length

Hui Su <[email protected]>
iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup

Fan Wu <[email protected]>
iio: light: gp2ap020a00f: drain irq_work after free_irq

Arka Mondal <[email protected]>
iio: imu: adis16480: fix unprotected debugfs reads

Arka Mondal <[email protected]>
iio: imu: adis16400: fix unprotected debugfs reads

Marco Chen <[email protected]>
iio: health: max30102: fix NULL dereference in interrupt handler

Arka Mondal <[email protected]>
iio: gyro: adis16136: fix unprotected debugfs reads

Salah Triki <[email protected]>
iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw()

Jonathan Cameron <[email protected]>
iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.

Jinseob Kim <[email protected]>
iio: buffer: serialize buffer teardown with mode claims

Runyu Xiao <[email protected]>
iio: admv1013: initialize callback mutex before registering notifier

Fan Wu <[email protected]>
iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind

Felix Gu <[email protected]>
iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls

Felix Gu <[email protected]>
iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure

Fabrice Gasnier <[email protected]>
iio: adc: stm32-adc: fix check on internal channel availability

Slavin Liu <[email protected]>
iio: adc: pac1934: check ACPI label duplication

Salah Triki <[email protected]>
iio: accel: sca3000: fix frequency divider condition check

Jiale Yao <[email protected]>
iio: accel: kxcjk-1013: reject duplicate event disable

Frank Sorenson <[email protected]>
smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races

Paulo Alcantara <[email protected]>
smb: client: discard post-EOF pagecache when extending a file via copy range

Paulo Alcantara <[email protected]>
smb: client: discard post-EOF pagecache when extending a file via zero range

Daehyeon Ko <[email protected]>
thunderbolt: Reject oversized XDomain properties responses

Kurt Lieber <[email protected]>
thunderbolt: Disable CL states for the Anker Prime TB5 dock

Mika Westerberg <[email protected]>
thunderbolt: Fix KASAN reported use-after-free when request is canceled

Ian Lin <[email protected]>
USB: serial: option: add Compal EXC-T1 support

Sebastian Sjoholm <[email protected]>
USB: serial: option: add Quectel RG660QB

Ian Lin <[email protected]>
USB: serial: option: add Compal EXM-G1x support

Carlo Szelinsky <[email protected]>
USB: serial: option: add Quectel EG060W

Zhao Dongdong <[email protected]>
USB: serial: option: add support for SIMCom SIM8260C

Johan Hovold <[email protected]>
USB: serial: fix ioctl hangup race

Johan Hovold <[email protected]>
USB: serial: fix driver deregistration order

Johan Hovold <[email protected]>
USB: serial: fix dynamic id driver deregistration race

Johan Hovold <[email protected]>
USB: serial: ssu100: fix baud rate overflow

Johan Hovold <[email protected]>
USB: serial: quatech2: fix baud rate overflow

Jérémy Carrat <[email protected]>

    USB: serial: cp210x: add Corsair AX1500i Power Supply

Yuqi Xu <[email protected]>
wifi: mac80211: handle empty FILS association request payload

Zihan Xi <[email protected]>
wifi: mac80211: fix mesh fast xmit path deletion UAF

Zhao Li <[email protected]>
wifi: mac80211: release mesh path quota on failed additions

Ruide Cao <[email protected]>
wifi: mac80211: reject invalid 320 MHz CSA bandwidth

Yuqi Xu <[email protected]>
wifi: mac80211: minstrel_ht: validate fixed rate index

Zhao Li <[email protected]>
wifi: mac80211: keep fallback association elements alive

Zhao Li <[email protected]>
wifi: mac80211: account proxy paths against the mesh path limit

Zhao Li <[email protected]>
wifi: mac80211: drain PS delivery work during station teardown

Zhiling Zou <[email protected]>
wifi: mac80211: keep paired old chanctx alive

Guangshuo Li <[email protected]>
wifi: iwlegacy: 3945: free EEPROM data on remove

Tianchu Chen <[email protected]>
wifi: cw1200: fix TX padding OOB read leaking heap data to device

Sean Christopherson <[email protected]>
KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy

Sean Christopherson <[email protected]>
KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified

Nuno Sá <[email protected]>
mtd: spinand: fix zero oobavail when no ECC engine is used

Mehmet Fide <[email protected]>
mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB

Runyu Xiao <[email protected]>
mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ

Pei Xiao <[email protected]>
mtd: block2mtd: Fix divide error when erase_size is zero

Weiming Shi <[email protected]>
nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()

Bean Huo <[email protected]>
nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT

Daehyeon Ko <[email protected]>
nvme-multipath: fix underflow in ANA log bounds checks

Jiangshan Yi <[email protected]>
tpm: fix off-by-four bounds check in tpm2_get_random()

Willem de Bruijn <[email protected]>
net: extend IPv6 exthdr detection of tunneled packets

Aldo Ariel Panzardo <[email protected]>
HID: multitouch: stop the release timer from being rearmed on remove

Zhiling Zou <[email protected]>
ipvs: bound LBLCR and LBLC cache growth

Jens Axboe <[email protected]>
io_uring: fix task_work add use-after-free with SQPOLL

Chandrashekar Devegowda <[email protected]>
Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()

Chandrashekar Devegowda <[email protected]>
Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()

Chandrashekar Devegowda <[email protected]>
Bluetooth: btintel: fix buffer over-read in btintel_hw_error()

Chengfeng Ye <[email protected]>
Bluetooth: hci_core: Serialize fragmented ISO packet queueing

Chengfeng Ye <[email protected]>
Bluetooth: hci_core: Serialize ACL scheduling with channel deletion

Linmao Li <[email protected]>
Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems

Chengfeng Ye <[email protected]>
Bluetooth: hci_conn: Lock parent access during enhanced SCO setup

Chengfeng Ye <[email protected]>
Bluetooth: hci_sync: Fix inquiry cache use-after-free

Chengfeng Ye <[email protected]>
Bluetooth: RFCOMM: Fix initial port reference race

Abdurrahman Hussain <[email protected]>

    i2c: xiic: don't clobber msg->len to signal block-read completion

Dinh Nguyen <[email protected]>
EDAC/altera: Fix memory leak on dci allocation failure

Xiang Mei <[email protected]>
ALSA: ua101: reject mismatched capture/playback packet sizes

Kyle Zeng <[email protected]>
ALSA: seq: Serialize compat port-info ioctls

Zimeng Li <[email protected]>
ASoC: qcom: lpass-cpu: use DAI table index for playback constraints

Jiangshan Yi <[email protected]>

    ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type

Jiangshan Yi <[email protected]>

    ASoC: codecs: max98363: fix uninitialized stream_config->type

Paul Mbewe <[email protected]>
serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL

Paul Mbewe <[email protected]>
serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around

Wentao Liang <[email protected]>
serial: vt8500: Fix clock reference leak in vt8500_serial_probe()

Simon Gassner <[email protected]>
serial: tegra: don't clear the Tx FIFO on an Rx-only reset

Wentao Liang <[email protected]>
serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()

Johan Hovold <[email protected]>
serial: fix TIOCMIWAIT race

Fan Wu <[email protected]>

    serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()

Fan Wu <[email protected]>
tty: serial: max3100: shut down timer before freeing port

Johan Hovold <[email protected]>
tty: abort break signalling on hangup

Viken Dadhaniya <[email protected]>
tty: serial: qcom_geni_serial: Keep console RX functional after deep idle

Joshua Rogers <[email protected]>
tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup

Joshua Rogers <[email protected]>
tty: vcc: zero-initialize control packet in vcc_send_ctl()

Johan Hovold <[email protected]>
tty: amiserial: fix broken TIOCMIWAIT

Mingyu Wang <[email protected]>
tty: vt: fix memory leak in vc_allocate()

Jie Deng <[email protected]>
usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe

Fan Wu <[email protected]>
usb: cdns3: fix use-after-free in cdns3_gadget_exit()

Jameson Thies <[email protected]>
usb: typec: ucsi: displayport: Current CAM OOB index fixup

Prashanth K <[email protected]>
usb: typec: ucsi: Get the connector fwnode based on reg value

Fan Wu <[email protected]>
usb: typec: ucsi: glink: fix use-after-free of ucsi on remove

Radhey Shyam Pandey <[email protected]>
usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()

Marian Rotariu <[email protected]>
usb: typec: tipd: don't send GAID when probe fails in APP mode

Amit Sunil Dhamne <[email protected]>
usb: typec: tcpm: recover after failure to start the frs ams

Hui Peng <[email protected]>
usb: core: clear both ep_in and ep_out for non-ep0 control endpoints

Myeonghun Pak <[email protected]>
usb: chipidea: tegra: disable runtime PM on resume failure

Yuchao Zhang <[email protected]>
usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC

Alan Stern <[email protected]>
USB: gadget: dummy-hcd: Fix wait for outstanding request completions

Fan Wu <[email protected]>
usb: gadget: aspeed-vhub: cancel wake work on device removal

Radhey Shyam Pandey <[email protected]>
usb: dwc3: am62: Fix runtime PM usage count leak on probe error path

Linkai Gong <[email protected]>
usb: typec: anx7411 - stop the IRQ before destroying the workqueue

Liu Chao <[email protected]>
usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd

Takashi Iwai <[email protected]>
usb: gadget: midi2: Fix the jack descriptor array sizes

Myeonghun Pak <[email protected]>
usb: ohci-st: disable controller wakeup on removal

Myeonghun Pak <[email protected]>
usb: ohci-s3c2410: disable controller wakeup on removal

Myeonghun Pak <[email protected]>
usb: ohci-da8xx: disable controller wakeup on cleanup

Orgad Shaneh <[email protected]>
usb: octeon-hcd: fix the FIFO-flush timeout computation

Lovekesh Solanki <[email protected]>
usb: hub: use shorter 120ms post resume hold for SS root hubs

Syed Labeeq Sajid Bukhari <[email protected]>
usb: storage: sierra_ms: reject short SWoC info transfers

Johan Hovold <[email protected]>
USB: serial: fix port tear down use-after-free

Yuchao Zhang <[email protected]>
USB: cdc-acm: skip URB restart in port_shutdown if disconnected

Johan Hovold <[email protected]>
USB: cdc-acm: fix racy TIOCMIWAIT implementation

Viken Dadhaniya <[email protected]>
soc: qcom: geni-se: Correct QUP Core ICC vote constants

Yuxiao Wang <[email protected]>
nitro_enclaves: fix use-after-free on SLOT_ALLOC failure

Raphaël Larocque <[email protected]>
Input: synaptics - limit T440p InterTouch quirk to LEN0036

Lovekesh Solanki <[email protected]>
Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490

David Heidelberg <[email protected]>
Input: s6sy761 - fix resume ordering and restore sensing

Lovekesh Solanki <[email protected]>
Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410

Martino Papero <[email protected]>
Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11

Wentao Liang <[email protected]>
kgdboc: Fix tty driver reference leak in configure_kgdboc()

Tomer Pomeranc <[email protected]>
binder: fix leaked fd fixups on TF_UPDATE_TXN supersede

Tomer Pomeranc <[email protected]>
binder: fix is_failure flag for superseded transaction cleanup

Guangshuo Li <[email protected]>
drm/amdgpu: fix ACP MFD device leak on init failure

Guangshuo Li <[email protected]>
drm/amdgpu: fix IP instance memory leak on kobject add failure

Wentao Liang <[email protected]>
drm/mediatek: Fix pdev reference leak in mtk_drm_bind()

Guangshuo Li <[email protected]>
drm/mediatek: Fix ovl adaptor platform device leak

Haojie Li <[email protected]>
drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device

Imre Kaloz <[email protected]>
drm/radeon: Read the VRAM VBIOS signature with readb()

Willian Oliveira <[email protected]>
drm/amdgpu/gfx6: fix firmware leak on teardown

Timur Kristóf <[email protected]>
drm/amd/pm/si: Fix updating clock limits on AC/DC

Timur Kristóf <[email protected]>
drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC

Jiangshan Yi <[email protected]>
drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend

Nikola Prica <[email protected]>
PCI: Accept AtomicOps already enabled by the hypervisor

Takashi Iwai <[email protected]>
ALSA: ice1712: Fix the error handling via auto-cleanup at probe

Takashi Iwai <[email protected]>
ALSA: core: Define auto-cleanup for snd_card_free()

Luo Gengkun <[email protected]>
perf: Fix race between perf_event_exit_task() and perf_pending_task()

Hongjian Dai <[email protected]>
i2c: at91: release DMA channels when probe defers

Lorenzo Bianconi <[email protected]>
net: mvneta: clear XDP pfmemalloc flag between frames

Alexander Lobakin <[email protected]>
xdp, xsk: constify read-only arguments of some static inline helpers

Eric Dumazet <[email protected]>
ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()

Prathamesh Deshpande <[email protected]>
net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference

Quentin Freimanis <[email protected]>
net: sparx5: make ports inherit the switch base mac address type

Harshit Mogalapalli <[email protected]>
net: microchip: vcap: stop scanning after deleting key field

Pablo Neira Ayuso <[email protected]>
netfilter: flowtable: generalize pending status bit

Florian Westphal <[email protected]>
netfilter: conntrack: rework offload nf_conn timeout extension logic

Florian Westphal <[email protected]>
netfilter: conntrack: remove skb argument from nf_ct_refresh

Fernando Fernandez Mancera <[email protected]>
netfilter: bpf: reject invalid NAT manipulation types

Julian Anastasov <[email protected]>
ipvs: filter some flags received in the backup server

Julian Anastasov <[email protected]>
ipvs: do not create invisible templates

Julian Anastasov <[email protected]>
ipvs: fix missing counter decrement in lblc

Jeff Jo <[email protected]>
tcp: refresh TS.Recent for accepted old ACKs

Sandeep Haemoon <[email protected]>
net: ethernet: mtk_eth_soc: allocate dummy netdev sooner

Jamal Hadi Salim <[email protected]>

    net: cap skb->queue_mapping when the tx queue is picked

Nicolai Buchwitz <[email protected]>
net: bcmgenet: fix NULL dereference in set_coalesce before first open

Niklas Cassel <[email protected]>
virtio_blk: set the zone write granularity

Jamal Hadi Salim <[email protected]>
net/sched: sch_codel: match the no-drop threshold to the packet size

Jamal Hadi Salim <[email protected]>
net/sched: fq_codel: match the no-drop threshold to the packet size

Eric Dumazet <[email protected]>
net: restrict SO_RESERVE_MEM to TCP sockets and cap max value

Kuniyuki Iwashima <[email protected]>
net-memcg: Introduce mem_cgroup_sk_enabled().

Kuniyuki Iwashima <[email protected]>
net-memcg: Introduce mem_cgroup_from_sk().

Kuniyuki Iwashima <[email protected]>
net: Clean up __sk_mem_raise_allocated().

Kuniyuki Iwashima <[email protected]>
mptcp: Fix up subflow's memcg when CONFIG_SOCK_CGROUP_DATA=n.

Kuniyuki Iwashima <[email protected]>

    memcg: convert memcg->socket_pressure to u64

Jérémy Jean <[email protected]>
tipc: prevent GCM nonce reuse on peer key changes

Baha Mesleh <[email protected]>
octeontx2-af: mcs: Fix SC resource cleanup loop

Anirudh Virdi <[email protected]>
net/mlx5: Fix slab-out-of-bounds when handling team device events

Rongwei Liu <[email protected]>
net/mlx5: LAG, Refactor lag logic

Florian Fainelli <[email protected]>
net: systemport: Fix RUNT MIB counter register offset calculation

Florian Fainelli <[email protected]>
net: systemport: Fix buffer overflow in bcm_sysport_get_stats()

Nguyen Ngoc Thang <[email protected]>
Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister

Florian Westphal <[email protected]>
netfilter: ipset: do not update comments from kernel-side adds

Qishuai Liu <[email protected]>
ipv6: fix prefix route expiry in modify_prefix_route()

Jamal Hadi Salim <[email protected]>
net/sched: cls_api: reclaim an empty proto on the error path

Binbin Deng <[email protected]>
net/mctp: publish the mctp_dev only after it is initialised

Sai Teja Aluvala <[email protected]>
Bluetooth: btintel: validate DDC record lengths

Sang-Hoon Choi <[email protected]>
Bluetooth: hci_core: free the HCI ID if naming fails

Cezary Rojewski <[email protected]>
ASoC: codecs: rt274: Fix format setting for 44100 rate

Cezary Rojewski <[email protected]>
ASoC: codecs: rt286: Revert delay value for jack setup

Felix Fietkau <[email protected]>
wifi: mac80211: prevent AP VLAN tx from other interfaces

Tamizh Chelvam Raja <[email protected]>
wifi: mac80211: Add 802.3 multicast encapsulation offload support

Tamizh Chelvam Raja <[email protected]>
wifi: mac80211: Add multicast to unicast support for 802.3 path

Zhao Li <[email protected]>
wifi: cfg80211: preserve hidden-group beacon IE ownership

Manush Prajwal <[email protected]>
rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()

Aamir Ahmed <[email protected]>
rtc: ac100: Fix clock provider use-after-free on probe failure

Uwe Kleine-König <[email protected]>
rtc: Switch back to struct platform_driver::remove()

Liu Dalin <[email protected]>
rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak

Georgios Karantzas <[email protected]>
wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE

Pengpeng Hou <[email protected]>
wifi: ath9k: reject short WMI command responses

Nicolas Escande <[email protected]>

    wifi: ath11k: reset ar->num_stations on hardware start

Sheetal <[email protected]>
ASoC: tegra: Fix ASRC Stream6 input threshold control

Aamir Ahmed <[email protected]>
wifi: wfx: validate MIB read length before copying to caller

HyeongJun An <[email protected]>
ASoC: wm8903: Move the DRC QR threshold to the register that holds it

Abdurrahman Hussain <[email protected]>
of/overlay: don't create "//" paths for fragments targeting the root

Abdurrahman Hussain <[email protected]>
of/overlay: don't leak fragment references when changeset init fails

Karl Mehltretter <[email protected]>
random: fix vgetrandom_opaque_params kernel-doc

Julian Sun <[email protected]>
nvmet: preserve device path on allocation failure

Karl Mehltretter <[email protected]>
mtd: core: call _get_device() with the master MTD

Matti Vaittinen <[email protected]>
iio: accel: kionix-kx022a: Fix array boundary check

SJ Park <[email protected]>
mm/damon/core: don't skip damos_adjust_quota() while esz is not zero

Nathan Chancellor <[email protected]>
random: vDSO: avoid call to memset() when zeroing reserved parameter

Tetsuo Handa <[email protected]>
perf/core: Fix WARN in perf_sigtrap()

Lorenzo Stoakes (ARM) <[email protected]>
mm/secretmem: properly account locked pages

Xiang Mei <[email protected]>
ALSA: line6: reject oversized playback packets

Nguyen Ngoc Thang <[email protected]>
ALSA: caiaq: unregister the input device when probe fails

Wentao Liang <[email protected]>
wifi: wlcore: Fix runtime PM leak in wlcore_remove()

Zizhi Wo <[email protected]>
vt: skip screen update for DEC alignment test on backgroup consoles

Maoyi Xie <[email protected]>
rds_tcp: close NULL deref window in rds_tcp_set_callbacks

Jiangshan Yi <[email protected]>
smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions

Zhichen Wang <[email protected]>
virt: vmgenid: set driver_data before registering notification handlers

Surendran Kanagaraj <[email protected]>
tpm: Disable TPM on null key name mismatch

Jun Yang <[email protected]>
sctp: check RCV_SHUTDOWN after the sendmsg connect wait

Runyu Xiao <[email protected]>
rtc: spear: initialize IRQ state before requesting alarm IRQ

Aamir Ahmed <[email protected]>
rtc: ac100: Assign .num before accessing .hws

Ilkka Lappeteläinen <[email protected]>
net/packet: prevent TX_RING byte count overflow

Aohan Mei <[email protected]>
netfilter: nft_flow_offload: drop flowtable reference on init error path

Alireza Asgari <[email protected]>
net: fix checksum offsets in skb_splice_from_iter()

Abdurrahman Hussain <[email protected]>
of/overlay: only treat a positive changeset id as registered

Abdurrahman Hussain <[email protected]>
of/overlay: put property on deadprops only after changeset add succeeds

Wentao Liang <[email protected]>
of/irq: Fix remaining refcount leaks in of_irq_init()

Leon Hwang <[email protected]>
kprobes: Skip disarmed probes when checking optkprobe overlap

Benjamin Tissoires <[email protected]>
HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request

Jérémy Jean <[email protected]>
audit: fix exe mark UAF in kill_rules()

Takashi Iwai <[email protected]>
ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices

Kuniyuki Iwashima <[email protected]>
neighbour: Skip default parms when resumed in neightbl_dump_info().

Darrick J. Wong <[email protected]>
xfs: fix cursor and pointer handling when recovering iunlink buckets

Zihan Xi <[email protected]>
smb: client: close completed creates on compound wait errors

Aldo Ariel Panzardo <[email protected]>
Bluetooth: ISO: release unused CIS holds after channel attach

SeungJu Cheon <[email protected]>
Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths

Zihan Xi <[email protected]>
smb: client: close handle after create-context parsing failure

ChenXiaoSong <[email protected]>
smb/client: pass cifs_open_info_data to SMB2_open()

ChenXiaoSong <[email protected]>
smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink()

Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality

Peter Ujfalusi <[email protected]>
ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data

Tibor Harcsa <[email protected]>
Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table

Richard Fitzgerald <[email protected]>
ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture

Jiayuan Chen <[email protected]>
bpf, xdp: move offload check into dev_xdp_install()

Jiakai Xu <[email protected]>
RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_has_attr()

Darrick J. Wong <[email protected]>
xfs: don't let memory failures leak blocks and kill repairs

Namjae Jeon <[email protected]>
smb: client: use finish_no_open() for non-regular inodes

Mike Rapoport (Microsoft) <[email protected]>
selftests/mm: hugetlb-mremap: add setup of HugeTLB pages

Marc Zyngier <[email protected]>
KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction

Marc Zyngier <[email protected]>
KVM: arm64: nv: Fix life cycle of the nested_mmus array

Fan Wu <[email protected]>
smb: client: fix cifsFileInfo reference leak in deferred close

Frank Sorenson <[email protected]>
smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()

-------------

Diffstat:

 Documentation/arch/arm64/silicon-errata.rst        |   2 +
 Documentation/filesystems/netfs_library.rst        |  26 ++
 Documentation/netlink/genetlink-c.yaml             |  14 +-
 Documentation/netlink/genetlink-legacy.yaml        |  14 +-
 Documentation/netlink/genetlink.yaml               |  14 +-
 Documentation/netlink/netlink-raw.yaml             |  20 +-
 Documentation/networking/strparser.rst             |   2 +-
 Makefile                                           |   4 +-
 arch/arm64/Kconfig                                 |  30 ++
 arch/arm64/boot/dts/freescale/fsl-lx2160a.dtsi     |  19 +-
 arch/arm64/include/asm/el2_setup.h                 |   5 +-
 arch/arm64/include/asm/kvm_host.h                  |   2 +-
 arch/arm64/include/asm/kvm_nested.h                |   3 +-
 arch/arm64/kernel/Makefile                         |   3 +
 arch/arm64/kernel/cpu_errata.c                     |  24 +-
 arch/arm64/kernel/cpufeature.c                     |   2 +-
 arch/arm64/kernel/signal.c                         |  85 +++---
 arch/arm64/kernel/topology.c                       |  11 +-
 arch/arm64/kernel/vdso/Makefile                    |   2 +-
 arch/arm64/kvm/arm.c                               |  10 +-
 arch/arm64/kvm/emulate-nested.c                    |   4 -
 arch/arm64/kvm/mmu.c                               |  46 +--
 arch/arm64/kvm/nested.c                            |  95 +++---
 arch/arm64/kvm/vgic/vgic-its.c                     |  22 +-
 arch/arm64/tools/cpucaps                           |   2 +-
 arch/loongarch/vdso/Makefile                       |   1 +
 arch/powerpc/kernel/vdso/Makefile                  |   1 +
 arch/powerpc/perf/imc-pmu.c                        |  23 +-
 arch/riscv/include/asm/scs.h                       |  17 +-
 arch/riscv/kernel/entry.S                          |   2 +-
 arch/riscv/kvm/aia_imsic.c                         |   5 +-
 arch/riscv/mm/extable.c                            |   4 +-
 arch/s390/kernel/vdso64/Makefile                   |   1 +
 arch/x86/entry/vdso/Makefile                       |   1 +
 arch/x86/events/intel/bts.c                        |   2 +-
 arch/x86/events/intel/core.c                       |   2 +-
 arch/x86/events/intel/p4.c                         |   2 +-
 arch/x86/kvm/mmu/mmu.c                             |   6 +
 arch/x86/kvm/svm/svm.c                             |  12 +-
 arch/x86/kvm/vmx/nested.c                          |   6 +
 crypto/drbg.c                                      |  11 +-
 drivers/android/binder.c                           |   3 +-
 drivers/block/virtio_blk.c                         |   1 +
 drivers/bluetooth/btintel.c                        |  29 +-
 drivers/bluetooth/btintel_pcie.c                   | 138 ++++++---
 drivers/bluetooth/btintel_pcie.h                   |   2 +
 drivers/bluetooth/btusb.c                          |   2 +
 drivers/char/tpm/tpm2-cmd.c                        |   2 +-
 drivers/char/tpm/tpm2-sessions.c                   |   1 +
 drivers/edac/altera_edac.c                         |   4 +-
 drivers/edac/amd64_edac.c                          |   4 +-
 drivers/gpio/gpio-exar.c                           |   2 +-
 drivers/gpio/gpio-xilinx.c                         |   9 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c            |  13 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c         |   8 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c        |  77 +++--
 drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c      |   2 +
 drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c            |  17 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c            |   5 +
 drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c              |   9 +
 drivers/gpu/drm/amd/amdgpu/vi.c                    |  21 ++
 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c  |  32 ++-
 drivers/gpu/drm/amd/amdkfd/kfd_priv.h              |   7 +
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |  16 +-
 .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c    |  20 +-
 drivers/gpu/drm/amd/display/dc/dc.h                |   1 +
 .../gpu/drm/amd/display/dc/dce60/dce60_resource.c  |   1 -
 .../dc/link/protocols/link_edp_panel_control.c     |   4 +-
 .../amd/display/dc/resource/dce80/dce80_resource.c |   1 +
 drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c         |  39 +--
 .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c    |  10 +-
 .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomfwctrl.c  |  11 +-
 drivers/gpu/drm/aspeed/aspeed_gfx_drv.c            |   5 +-
 drivers/gpu/drm/display/drm_dp_helper.c            |   4 +-
 drivers/gpu/drm/drm_fb_helper.c                    |   6 +-
 drivers/gpu/drm/gud/gud_pipe.c                     |   1 +
 drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c     |   2 +-
 drivers/gpu/drm/i915/gt/intel_rps.c                |   3 +-
 drivers/gpu/drm/imagination/pvr_mmu.c              |  25 +-
 drivers/gpu/drm/imagination/pvr_vm.c               |   8 +-
 drivers/gpu/drm/mediatek/mtk_drm_drv.c             |  17 +-
 drivers/gpu/drm/panthor/panthor_sched.c            |   3 +
 drivers/gpu/drm/radeon/radeon_bios.c               |   6 +-
 drivers/gpu/drm/vc4/vc4_bo.c                       |  29 +-
 drivers/gpu/drm/vc4/vc4_crtc.c                     |   4 +-
 drivers/gpu/drm/vc4/vc4_drv.c                      |   8 +-
 drivers/gpu/drm/vc4/vc4_drv.h                      |   2 +-
 drivers/gpu/drm/vc4/vc4_gem.c                      |  32 ++-
 drivers/gpu/drm/vc4/vc4_irq.c                      |  16 +-
 drivers/gpu/drm/vc4/vc4_kms.c                      |   2 +-
 drivers/gpu/drm/vc4/vc4_perfmon.c                  |  20 +-
 drivers/gpu/drm/vc4/vc4_render_cl.c                |   2 +-
 drivers/gpu/drm/vc4/vc4_v3d.c                      |  60 ++--
 drivers/gpu/drm/vc4/vc4_validate.c                 |  10 +-
 drivers/gpu/drm/vc4/vc4_validate_shaders.c         |   2 +-
 drivers/hid/bpf/hid_bpf_dispatch.c                 |   2 +-
 drivers/hid/hid-multitouch.c                       |   2 +-
 drivers/hid/hid-steam.c                            | 230 +++++++--------
 drivers/i2c/busses/i2c-at91-master.c               |   8 +-
 drivers/i2c/busses/i2c-xiic.c                      |  98 ++++---
 drivers/iio/accel/kionix-kx022a.c                  |  77 ++---
 drivers/iio/accel/kxcjk-1013.c                     |   2 +-
 drivers/iio/accel/sca3000.c                        |   2 +-
 drivers/iio/adc/ad_sigma_delta.c                   |  27 +-
 drivers/iio/adc/aspeed_adc.c                       |  13 +-
 drivers/iio/adc/axp288_adc.c                       |   8 +
 drivers/iio/adc/max1363.c                          |   8 +
 drivers/iio/adc/pac1934.c                          |   4 +
 drivers/iio/adc/stm32-adc.c                        |  47 +--
 drivers/iio/adc/sun4i-gpadc-iio.c                  |  10 +-
 drivers/iio/adc/xilinx-xadc-core.c                 |   9 +-
 drivers/iio/buffer/industrialio-buffer-dmaengine.c |  16 +-
 drivers/iio/cdc/ad7150.c                           |   8 +-
 drivers/iio/frequency/admv1013.c                   |   9 +-
 drivers/iio/gyro/adis16136.c                       |   2 +-
 drivers/iio/health/max30102.c                      |  12 +-
 drivers/iio/imu/adis16400.c                        |   2 +-
 drivers/iio/imu/adis16480.c                        |   4 +-
 drivers/iio/industrialio-buffer.c                  |   7 +-
 drivers/iio/industrialio-trigger.c                 |   2 +
 drivers/iio/light/gp2ap020a00f.c                   |   2 +
 drivers/iio/light/rohm-bu27034.c                   | 133 ++++-----
 drivers/iio/pressure/bmp280-core.c                 |   2 +-
 drivers/iio/proximity/aw96103.c                    |  30 +-
 drivers/iio/proximity/isl29501.c                   |   2 +-
 drivers/iio/proximity/pulsedlight-lidar-lite-v2.c  |   4 +-
 drivers/iio/proximity/sx9324.c                     |   2 +-
 drivers/iio/proximity/vcnl3020.c                   |  24 +-
 drivers/input/joystick/xpad.c                      |   3 +
 drivers/input/keyboard/atkbd.c                     |   8 +
 drivers/input/misc/ati_remote2.c                   |  12 +-
 drivers/input/mouse/synaptics.c                    |   7 +-
 drivers/input/serio/i8042-acpipnpio.h              |   9 +
 drivers/input/touchscreen/s6sy761.c                |  14 +-
 drivers/md/dm-crypt.c                              |   7 +-
 drivers/md/dm-ioctl.c                              |  14 +-
 drivers/md/dm-snap.c                               |  14 +
 drivers/memstick/core/memstick.c                   |   8 +-
 drivers/memstick/host/rtsx_usb_ms.c                |  31 +-
 drivers/mmc/host/cavium-octeon.c                   |   5 +-
 drivers/mmc/host/cavium-thunderx.c                 |   5 +-
 drivers/mmc/host/mtk-sd.c                          |   1 +
 drivers/mmc/host/sdhci-sprd.c                      |   4 +
 drivers/mtd/devices/block2mtd.c                    |   2 +-
 drivers/mtd/mtdcore.c                              |   2 +-
 drivers/mtd/nand/raw/cadence-nand-controller.c     |   6 +-
 drivers/mtd/nand/raw/vf610_nfc.c                   |  85 +++++-
 drivers/mtd/nand/spi/core.c                        |  37 ++-
 drivers/net/amt.c                                  |  48 +---
 drivers/net/can/dev/skb.c                          |   2 +
 drivers/net/can/usb/f81604.c                       |   2 +-
 drivers/net/dsa/microchip/ksz_common.h             |   2 +-
 drivers/net/ethernet/broadcom/bcmsysport.c         |   8 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |  84 ++++--
 drivers/net/ethernet/broadcom/genet/bcmgenet.c     |   5 +-
 .../chelsio/inline_crypto/ch_ktls/chcr_ktls.c      |   4 +-
 drivers/net/ethernet/ibm/ibmveth.c                 |  22 +-
 drivers/net/ethernet/intel/ice/ice_eswitch.c       |   2 +-
 drivers/net/ethernet/marvell/mvneta.c              |   2 +-
 drivers/net/ethernet/marvell/octeontx2/af/mcs.c    |   4 +-
 drivers/net/ethernet/mediatek/mtk_eth_soc.c        |  38 ++-
 drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c   |   3 +
 .../net/ethernet/mellanox/mlx5/core/en/xsk/rx.c    |   2 +
 drivers/net/ethernet/mellanox/mlx5/core/en_rx.c    |  13 +-
 .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c  |  13 +-
 drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c  | 191 +++++++------
 drivers/net/ethernet/mellanox/mlx5/core/lag/lag.h  |  14 +-
 drivers/net/ethernet/mellanox/mlx5/core/lag/mp.c   |  24 +-
 .../net/ethernet/mellanox/mlx5/core/lag/mpesw.c    |  10 +-
 .../net/ethernet/mellanox/mlx5/core/lag/port_sel.c |  16 +-
 drivers/net/ethernet/mellanox/mlxsw/spectrum.h     |   2 +
 drivers/net/ethernet/mellanox/mlxsw/spectrum_acl.c |  10 +-
 .../net/ethernet/mellanox/mlxsw/spectrum_flower.c  |   9 +-
 .../net/ethernet/microchip/sparx5/sparx5_main.c    |   1 +
 .../net/ethernet/microchip/sparx5/sparx5_main.h    |   1 +
 .../net/ethernet/microchip/sparx5/sparx5_netdev.c  |   1 +
 .../ethernet/microchip/sparx5/sparx5_tc_matchall.c |   1 +
 drivers/net/ethernet/microchip/vcap/vcap_api.c     |   2 +-
 drivers/net/ethernet/microsoft/mana/mana_en.c      |  10 +-
 drivers/net/pfcp.c                                 |  10 +
 drivers/net/phy/aquantia/aquantia_main.c           |   5 +-
 drivers/net/team/team_mode_broadcast.c             |   2 +
 drivers/net/usb/ax88179_178a.c                     |   6 +-
 drivers/net/usb/qmi_wwan.c                         |   1 +
 drivers/net/veth.c                                 |   1 +
 drivers/net/wireguard/noise.c                      |   7 +-
 drivers/net/wireguard/queueing.h                   |   2 +
 drivers/net/wireless/ath/ath11k/mac.c              |   1 +
 drivers/net/wireless/ath/ath12k/qmi.c              |   9 +-
 drivers/net/wireless/ath/ath12k/qmi.h              |   3 +
 drivers/net/wireless/ath/ath9k/hif_usb.c           |  21 +-
 drivers/net/wireless/ath/ath9k/wmi.c               |  16 +-
 drivers/net/wireless/ath/ath9k/wmi.h               |   1 +
 .../wireless/broadcom/brcm80211/brcmfmac/core.c    |  27 +-
 drivers/net/wireless/intel/iwlegacy/3945-mac.c     |   1 +
 drivers/net/wireless/marvell/libertas/tx.c         |   7 -
 drivers/net/wireless/mediatek/mt76/mt7603/init.c   |   1 +
 drivers/net/wireless/mediatek/mt76/mt7915/init.c   |   6 +
 drivers/net/wireless/mediatek/mt76/mt7925/mac.c    |   3 +-
 drivers/net/wireless/mediatek/mt76/mt7925/main.c   |  12 +
 .../net/wireless/mediatek/mt76/mt792x_acpi_sar.c   | 134 ++++++---
 .../net/wireless/mediatek/mt76/mt792x_acpi_sar.h   |   2 +
 drivers/net/wireless/mediatek/mt76/mt7996/mcu.h    |   3 +
 drivers/net/wireless/silabs/wfx/hif_tx.c           |   4 +-
 drivers/net/wireless/st/cw1200/bh.c                |   8 +-
 drivers/net/wireless/st/cw1200/txrx.c              |  14 +
 drivers/net/wireless/ti/wlcore/main.c              |   4 +-
 drivers/net/xen-netfront.c                         |  16 +-
 drivers/nvme/host/multipath.c                      |  10 +-
 drivers/nvme/host/pci.c                            |   2 +
 drivers/nvme/target/configfs.c                     |   9 +-
 drivers/nvme/target/core.c                         |   2 +-
 drivers/nvme/target/fabrics-cmd-auth.c             |   2 +-
 drivers/of/irq.c                                   |   2 +
 drivers/of/overlay.c                               |  17 +-
 drivers/pci/pci.c                                  |  15 +-
 drivers/perf/arm_spe_pmu.c                         |   4 +-
 drivers/pmdomain/imx/imx8m-blk-ctrl.c              |  15 +
 drivers/pmdomain/rockchip/pm-domains.c             |  20 +-
 drivers/ptp/ptp_ocp.c                              |   2 +-
 drivers/regulator/ltc3676.c                        |  15 +-
 drivers/regulator/tps6594-regulator.c              |   6 +-
 drivers/rtc/dev.c                                  |   2 +-
 drivers/rtc/rtc-88pm80x.c                          |   2 +-
 drivers/rtc/rtc-88pm860x.c                         |   2 +-
 drivers/rtc/rtc-ab8500.c                           |   2 +-
 drivers/rtc/rtc-ac100.c                            |  39 +--
 drivers/rtc/rtc-asm9260.c                          |   2 +-
 drivers/rtc/rtc-at91rm9200.c                       |   2 +-
 drivers/rtc/rtc-at91sam9.c                         |   2 +-
 drivers/rtc/rtc-brcmstb-waketimer.c                |   2 +-
 drivers/rtc/rtc-cadence.c                          |   2 +-
 drivers/rtc/rtc-cmos.c                             |   2 +-
 drivers/rtc/rtc-cros-ec.c                          |   2 +-
 drivers/rtc/rtc-ds1685.c                           |   2 +-
 drivers/rtc/rtc-ftrtc010.c                         |   2 +-
 drivers/rtc/rtc-hid-sensor-time.c                  |   2 +-
 drivers/rtc/rtc-imxdi.c                            |   2 +-
 drivers/rtc/rtc-loongson.c                         |   2 +-
 drivers/rtc/rtc-lpc24xx.c                          |   2 +-
 drivers/rtc/rtc-max77686.c                         |   2 +-
 drivers/rtc/rtc-mc13xxx.c                          |   2 +-
 drivers/rtc/rtc-mpc5121.c                          |   2 +-
 drivers/rtc/rtc-mpfs.c                             |   8 +-
 drivers/rtc/rtc-mt7622.c                           |   2 +-
 drivers/rtc/rtc-mv.c                               |   2 +-
 drivers/rtc/rtc-mxc_v2.c                           |   2 +-
 drivers/rtc/rtc-omap.c                             |   2 +-
 drivers/rtc/rtc-palmas.c                           |   2 +-
 drivers/rtc/rtc-pcf50633.c                         |   2 +-
 drivers/rtc/rtc-pic32.c                            |   2 +-
 drivers/rtc/rtc-pm8xxx.c                           |   2 +-
 drivers/rtc/rtc-pxa.c                              |   2 +-
 drivers/rtc/rtc-rc5t583.c                          |   2 +-
 drivers/rtc/rtc-rtd119x.c                          |   2 +-
 drivers/rtc/rtc-rzn1.c                             |   2 +-
 drivers/rtc/rtc-s3c.c                              |   2 +-
 drivers/rtc/rtc-sa1100.c                           |   2 +-
 drivers/rtc/rtc-sh.c                               |   2 +-
 drivers/rtc/rtc-spear.c                            |  13 +-
 drivers/rtc/rtc-stm32.c                            |   2 +-
 drivers/rtc/rtc-stmp3xxx.c                         |   2 +-
 drivers/rtc/rtc-sunplus.c                          |   2 +-
 drivers/rtc/rtc-tegra.c                            |   2 +-
 drivers/rtc/rtc-tps6586x.c                         |   2 +-
 drivers/rtc/rtc-twl.c                              |   2 +-
 drivers/rtc/rtc-vt8500.c                           |   2 +-
 drivers/rtc/rtc-wm8350.c                           |   2 +-
 drivers/rtc/rtc-xgene.c                            |   2 +-
 drivers/rtc/rtc-zynqmp.c                           |   2 +-
 drivers/scsi/qedi/qedi_main.c                      |   3 +-
 drivers/staging/greybus/uart.c                     |   3 +-
 drivers/tee/optee/ffa_abi.c                        |  38 ++-
 drivers/tee/optee/optee_ffa.h                      |  29 +-
 drivers/tee/optee/optee_msg.h                      | 132 ++++++---
 drivers/tee/optee/optee_private.h                  | 120 ++++----
 drivers/tee/optee/optee_smc.h                      |  37 ++-
 drivers/tee/optee/smc_abi.c                        |  17 +-
 drivers/tee/tee_shm.c                              |   4 +
 drivers/thunderbolt/ctl.c                          |  63 ++--
 drivers/thunderbolt/quirks.c                       |   3 +
 drivers/thunderbolt/xdomain.c                      |   4 +
 drivers/tty/amiserial.c                            |   9 +-
 drivers/tty/n_gsm.c                                |  47 +--
 drivers/tty/serial/8250/8250_bcm7271.c             |   2 +-
 drivers/tty/serial/kgdboc.c                        |   9 +
 drivers/tty/serial/ma35d1_serial.c                 |   6 +-
 drivers/tty/serial/max3100.c                       |  13 +-
 drivers/tty/serial/qcom_geni_serial.c              |   5 +-
 drivers/tty/serial/sc16is7xx.c                     |  53 +++-
 drivers/tty/serial/serial-tegra.c                  |  18 +-
 drivers/tty/serial/serial_core.c                   |   4 +-
 drivers/tty/serial/vt8500_serial.c                 |   1 +
 drivers/tty/tty_io.c                               |  54 ++--
 drivers/tty/tty_port.c                             | 205 ++++++-------
 drivers/tty/vcc.c                                  |   5 +-
 drivers/tty/vt/vc_screen.c                         |  50 ++--
 drivers/tty/vt/vt.c                                |   5 +-
 drivers/usb/cdns3/cdns3-gadget.c                   |   4 +
 drivers/usb/cdns3/cdns3-pci-wrap.c                 |   5 +
 drivers/usb/chipidea/ci_hdrc_tegra.c               |   4 +-
 drivers/usb/class/cdc-acm.c                        |  41 +--
 drivers/usb/class/cdc-acm.h                        |   1 -
 drivers/usb/core/hub.c                             |   7 +-
 drivers/usb/core/message.c                         |   8 +-
 drivers/usb/dwc2/hcd.c                             |   3 +-
 drivers/usb/dwc3/core.h                            |  19 ++
 drivers/usb/dwc3/dwc3-am62.c                       |   1 +
 drivers/usb/dwc3/ep0.c                             |   9 +
 drivers/usb/dwc3/gadget.c                          | 108 ++++++-
 drivers/usb/gadget/function/f_fs.c                 |  15 +-
 drivers/usb/gadget/function/f_midi2.c              |   4 +-
 drivers/usb/gadget/function/f_uac1_legacy.c        |   6 +
 drivers/usb/gadget/udc/aspeed-vhub/core.c          |   4 +
 drivers/usb/gadget/udc/aspeed-vhub/dev.c           |   2 +-
 drivers/usb/gadget/udc/aspeed-vhub/hub.c           |   5 +-
 drivers/usb/gadget/udc/aspeed-vhub/vhub.h          |   1 +
 drivers/usb/gadget/udc/dummy_hcd.c                 |   4 +
 drivers/usb/host/octeon-hcd.c                      |   2 +-
 drivers/usb/host/ohci-da8xx.c                      |   2 +
 drivers/usb/host/ohci-s3c2410.c                    |   1 +
 drivers/usb/host/ohci-spear.c                      |   4 +-
 drivers/usb/host/ohci-st.c                         |   1 +
 drivers/usb/serial/bus.c                           |   6 +-
 drivers/usb/serial/cp210x.c                        |   1 +
 drivers/usb/serial/generic.c                       |  10 +-
 drivers/usb/serial/option.c                        |  14 +
 drivers/usb/serial/quatech2.c                      |  19 +-
 drivers/usb/serial/ssu100.c                        |  18 +-
 drivers/usb/serial/usb-serial.c                    | 127 ++++++--
 drivers/usb/serial/xr_serial.c                     |  10 +-
 drivers/usb/storage/sierra_ms.c                    |   7 +
 drivers/usb/typec/anx7411.c                        |   5 +-
 drivers/usb/typec/tcpm/tcpm.c                      |   2 +-
 drivers/usb/typec/tipd/core.c                      |   8 +-
 drivers/usb/typec/ucsi/displayport.c               |   9 +-
 drivers/usb/typec/ucsi/ucsi.c                      |  17 +-
 drivers/usb/typec/ucsi/ucsi_acpi.c                 |  33 +++
 drivers/usb/typec/ucsi/ucsi_glink.c                |  15 +-
 drivers/virt/nitro_enclaves/ne_misc_dev.c          |   1 +
 drivers/virt/vmgenid.c                             |   6 +-
 fs/attr.c                                          |  12 +-
 fs/btrfs/scrub.c                                   |   4 +-
 fs/btrfs/xattr.c                                   |  15 +-
 fs/dcache.c                                        |   4 +-
 fs/ext4/inode.c                                    |   4 -
 fs/f2fs/f2fs.h                                     |   2 +-
 fs/f2fs/file.c                                     |   4 -
 fs/f2fs/gc.c                                       |  36 ++-
 fs/f2fs/segment.c                                  |  13 +-
 fs/fsopen.c                                        |   3 +
 fs/inode.c                                         |  23 +-
 fs/jfs/jfs_dtree.c                                 |  18 +-
 fs/namei.c                                         |  29 ++
 fs/namespace.c                                     |  87 ++++--
 fs/netfs/buffered_write.c                          |   9 +
 fs/netfs/direct_write.c                            |   9 +
 fs/netfs/internal.h                                |   2 +
 fs/netfs/misc.c                                    |  99 +++++++
 fs/smb/client/cifsfs.c                             |   7 +-
 fs/smb/client/cifsglob.h                           |  10 +-
 fs/smb/client/cifssmb.c                            |   2 +-
 fs/smb/client/dir.c                                |  39 ++-
 fs/smb/client/file.c                               |  17 +-
 fs/smb/client/inode.c                              |  30 +-
 fs/smb/client/link.c                               |  15 +-
 fs/smb/client/smb1ops.c                            |  21 +-
 fs/smb/client/smb2file.c                           |  19 +-
 fs/smb/client/smb2misc.c                           |   9 +-
 fs/smb/client/smb2ops.c                            |  38 ++-
 fs/smb/client/smb2pdu.c                            |  38 +--
 fs/smb/client/smb2proto.h                          |   2 +-
 fs/smb/client/trace.h                              |  16 +-
 fs/smb/client/transport.c                          |  69 +++--
 fs/verity/Kconfig                                  |   3 +
 fs/verity/open.c                                   |   8 -
 fs/xfs/scrub/newbt.c                               |   8 +-
 fs/xfs/xfs_log_recover.c                           |  13 +-
 include/linux/can/skb.h                            |   2 +
 include/linux/console.h                            |   2 +
 include/linux/fsverity.h                           |  25 --
 include/linux/lsm_hook_defs.h                      |   2 +-
 include/linux/memcontrol.h                         |  50 +++-
 include/linux/netfilter_netdev.h                   |   2 +-
 include/linux/netfs.h                              |   2 +
 include/linux/nvme.h                               |   4 +-
 include/linux/pagemap.h                            |  16 +-
 include/linux/perf_event.h                         |  17 +-
 include/linux/rtnetlink.h                          |   7 +-
 include/linux/sched/ext.h                          |   1 +
 include/linux/sched/user.h                         |   3 +-
 include/linux/security.h                           |   5 +-
 include/linux/skbuff.h                             |   2 +-
 include/linux/soc/qcom/geni-se.h                   |  15 +-
 include/linux/tty.h                                |   1 +
 include/linux/tty_driver.h                         |   6 +
 include/linux/tty_port.h                           |  30 +-
 include/linux/usb/serial.h                         |   1 +
 include/net/amt.h                                  |   4 -
 include/net/bluetooth/hci_core.h                   |   5 +-
 include/net/ip.h                                   |   7 +
 include/net/mac80211.h                             |   4 +
 include/net/netfilter/nf_conntrack.h               |  18 +-
 include/net/netfilter/nf_flow_table.h              |   2 +-
 include/net/proto_memory.h                         |   2 +-
 include/net/sch_generic.h                          |   9 +
 include/net/sock.h                                 |  22 ++
 include/net/strparser.h                            |  10 +-
 include/net/tcp.h                                  |   2 +-
 include/net/xdp.h                                  |  34 ++-
 include/net/xdp_sock_drv.h                         |  11 +-
 include/net/xsk_buff_pool.h                        |   2 +-
 include/sound/core.h                               |   9 +
 include/sound/sof/ipc4/header.h                    |   2 +
 include/uapi/linux/random.h                        |   2 +-
 init/Kconfig                                       |   5 +
 io_uring/io_uring.c                                |   7 +-
 io_uring/waitid.c                                  |  19 +-
 kernel/audit_tree.c                                |  36 ++-
 kernel/cgroup/cpuset.c                             | 134 +++++----
 kernel/dma/swiotlb.c                               |   6 +-
 kernel/events/core.c                               | 318 +++++++++------------
 kernel/events/ring_buffer.c                        |   7 +-
 kernel/kprobes.c                                   |   8 +-
 kernel/sched/ext.c                                 |  20 +-
 kernel/sched/sched.h                               |   1 -
 kernel/trace/trace_event_perf.c                    |   4 +-
 kernel/workqueue.c                                 |   2 +-
 mm/damon/core.c                                    |  48 ++--
 mm/memcontrol.c                                    |  27 +-
 mm/secretmem.c                                     | 117 +++++++-
 mm/shmem.c                                         |  70 ++---
 mm/vmpressure.c                                    |   2 +-
 net/bluetooth/hci_conn.c                           |  18 +-
 net/bluetooth/hci_core.c                           |  55 +++-
 net/bluetooth/hci_debugfs.c                        |   2 +-
 net/bluetooth/hci_event.c                          |   7 +
 net/bluetooth/hci_sock.c                           |   2 +
 net/bluetooth/hci_sync.c                           |  19 +-
 net/bluetooth/iso.c                                | 153 +++++++---
 net/bluetooth/mgmt.c                               |   2 +-
 net/bluetooth/rfcomm/sock.c                        |   5 +-
 net/bluetooth/rfcomm/tty.c                         |   9 +-
 net/bluetooth/smp.c                                |   2 +
 net/bridge/br_multicast.c                          |  23 +-
 net/bridge/netfilter/nf_conntrack_bridge.c         |  10 +-
 net/can/af_can.c                                   |   6 +-
 net/can/bcm.c                                      |   2 +
 net/can/isotp.c                                    |  11 +-
 net/can/j1939/socket.c                             |   1 +
 net/can/j1939/transport.c                          |   2 +
 net/can/raw.c                                      |   7 +-
 net/core/dev.c                                     | 137 +++++----
 net/core/flow_dissector.c                          |  11 +-
 net/core/neighbour.c                               |  12 +-
 net/core/netdev-genl-gen.c                         |   4 +-
 net/core/skbuff.c                                  |  14 +-
 net/core/sock.c                                    |  15 +-
 net/devlink/core.c                                 |  10 +-
 net/ipv4/af_inet.c                                 |   2 +-
 net/ipv4/cipso_ipv4.c                              |   8 +
 net/ipv4/fib_semantics.c                           |   3 +
 net/ipv4/fib_trie.c                                |   2 -
 net/ipv4/inet_connection_sock.c                    |   2 +-
 net/ipv4/ip_output.c                               |  10 +-
 net/ipv4/route.c                                   |   5 +
 net/ipv4/tcp.c                                     |   2 +
 net/ipv4/tcp_input.c                               |   6 +
 net/ipv4/tcp_ipv4.c                                |   2 +-
 net/ipv4/tcp_output.c                              |   2 +-
 net/ipv6/addrconf.c                                |   2 +-
 net/ipv6/ip6_output.c                              |  29 +-
 net/ipv6/route.c                                   |   2 -
 net/ipv6/seg6_iptunnel.c                           |   2 +-
 net/mac80211/agg-rx.c                              |   2 +-
 net/mac80211/chan.c                                |  45 ++-
 net/mac80211/fils_aead.c                           |   8 +
 net/mac80211/ieee80211_i.h                         |   2 +-
 net/mac80211/mesh_pathtbl.c                        |  30 +-
 net/mac80211/mlme.c                                |   4 +-
 net/mac80211/rc80211_minstrel_ht.c                 |  30 +-
 net/mac80211/spectmgmt.c                           |   4 +-
 net/mac80211/sta_info.c                            |   6 +-
 net/mac80211/tx.c                                  | 128 +++++++--
 net/mctp/device.c                                  |   6 +-
 net/mptcp/protocol.c                               |  10 +-
 net/mptcp/subflow.c                                |  11 +-
 net/netfilter/ipset/ip_set_bitmap_gen.h            |   2 +-
 net/netfilter/ipvs/ip_vs_conn.c                    |   3 +
 net/netfilter/ipvs/ip_vs_lblc.c                    |   4 +
 net/netfilter/ipvs/ip_vs_lblcr.c                   |   3 +
 net/netfilter/ipvs/ip_vs_sync.c                    |  33 ++-
 net/netfilter/nf_conntrack_amanda.c                |   2 +-
 net/netfilter/nf_conntrack_broadcast.c             |   2 +-
 net/netfilter/nf_conntrack_core.c                  |  13 +-
 net/netfilter/nf_conntrack_h323_main.c             |   4 +-
 net/netfilter/nf_conntrack_sip.c                   |   4 +-
 net/netfilter/nf_flow_table_core.c                 | 123 +++++++-
 net/netfilter/nf_flow_table_offload.c              |  14 +-
 net/netfilter/nf_nat_bpf.c                         |   3 +
 net/netfilter/nf_nat_core.c                        |   5 +-
 net/netfilter/nfnetlink_queue.c                    |   7 +
 net/netfilter/nft_ct.c                             |   2 +-
 net/netfilter/nft_flow_offload.c                   |   7 +-
 net/netfilter/xt_CHECKSUM.c                        |   6 +-
 net/openvswitch/actions.c                          |   7 +-
 net/openvswitch/datapath.c                         |   8 +
 net/packet/af_packet.c                             |  31 +-
 net/rds/tcp.c                                      |   9 +-
 net/sched/act_ct.c                                 |   2 +-
 net/sched/act_skbedit.c                            |   5 +-
 net/sched/cls_api.c                                |  15 +-
 net/sched/cls_route.c                              |   6 +
 net/sched/em_text.c                                |   3 +
 net/sched/sch_codel.c                              |   2 +-
 net/sched/sch_fq_codel.c                           |   4 +-
 net/sctp/socket.c                                  |   8 +-
 net/smc/af_smc.c                                   |   7 +-
 net/strparser/strparser.c                          |   6 +-
 net/sunrpc/xprtrdma/svc_rdma_transport.c           |   8 +-
 net/tipc/crypto.c                                  |  20 +-
 net/tipc/node.c                                    |  10 +-
 net/tipc/topsrv.c                                  |  80 +++++-
 net/vmw_vsock/af_vsock.c                           |   2 +
 net/vmw_vsock/virtio_transport_common.c            |   4 +-
 net/wireless/scan.c                                |  22 +-
 net/xfrm/xfrm_output.c                             |  16 +-
 security/keys/key.c                                |   6 +-
 security/keys/persistent.c                         |  55 ++--
 security/security.c                                |   5 +-
 security/selinux/avc.c                             |   5 +-
 security/selinux/hooks.c                           |  11 +-
 sound/core/seq/seq_compat.c                        |   4 +-
 sound/pci/hda/hda_tegra.c                          |   3 +-
 sound/pci/ice1712/ice1712.c                        |   2 +-
 sound/soc/amd/yc/acp6x-mach.c                      |   7 +
 sound/soc/codecs/adau1372.c                        |  18 +-
 sound/soc/codecs/max98363.c                        |   2 +-
 sound/soc/codecs/rt1017-sdca-sdw.c                 |  27 +-
 sound/soc/codecs/rt274.c                           |   4 +-
 sound/soc/codecs/rt286.c                           |   2 +-
 sound/soc/codecs/wm8903.c                          |   2 +-
 sound/soc/qcom/lpass-cpu.c                         |   4 +-
 sound/soc/samsung/i2s.c                            |   8 +
 sound/soc/sdw_utils/soc_sdw_utils.c                |  20 +-
 sound/soc/sof/intel/hda-loader.c                   |   7 +-
 sound/soc/sof/ipc4-loader.c                        |   6 +
 sound/soc/sof/ipc4-priv.h                          |   3 +
 sound/soc/sof/ipc4.c                               |  14 +-
 sound/soc/tegra/tegra186_asrc.c                    |   2 +-
 sound/usb/caiaq/device.c                           |   3 +
 sound/usb/line6/playback.c                         |   7 +
 sound/usb/misc/ua101.c                             |   9 +
 sound/usb/quirks.c                                 |   4 +-
 tools/net/ynl/ynl-gen-c.py                         |  70 ++++-
 tools/testing/selftests/mm/hugepage-mremap.c       |   5 +
 tools/testing/selftests/mm/memfd_secret.c          |  30 +-
 557 files changed, 5782 insertions(+), 2934 deletions(-)

# Librecast Test Results

044/044 [ OK ] liblcrq
010/010 [ OK ] libmld
120/120 [ OK ] liblibrecast

CPU/kernel: Linux auntie 6.12.113-rc2-g4a8beb0f1e36 #1 SMP PREEMPT_DYNAMIC Wed Oct 14 13:11:01 -00 2026 x86_64 AMD Ryzen 9 9950X 16-Core Processor AuthenticAMD GNU/Linux

Am 14.10.2026 um 14:50 schrieb Greg Kroah-Hartman:

Builds, boots and works on my 2-socket Ivy Bridge Xeon E5-2697v2 server. No dmesg oddities or regressions found.

Beste Grüße,
Peter Schneider

Climb the mountain not to plant your flag, but to embrace the challenge,
enjoy the air and behold the view. Climb it so you can see the world,
not so the world can see you.                    -- David McCullough Jr.

OpenPGP:  0xA3828BD796CCE11A8CADE8866E3A92C92C3FF244
Download: https://www.peters-netzplatz.de/download/pschneider1968_pub.asc
https://keys.mailvelope.com/pks/lookup?op=get&[email protected]
https://keys.mailvelope.com/pks/lookup?op=get&[email protected]

On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels, build tested on BMIPS_GENERIC:

Florian

Hi!

CIP testing did not find any problems here:

https://gitlab.com/cip-project/cip-testing/linux-stable-rc-ci/-/tree/linux-6.12.y

Best regards,
Pavel

This rc kernel passes DAMON functionality test [1] on my test machine.

[1] https://github.com/damonitor/damon-tests/tree/next/corr

Thanks,
SJ

[...]

Built and booted successfully on RISC-V RV64 (HiFive Unmatched).

Boot-tested under QEMU for Rust x86_64, arm64 and riscv64; built-tested for loongarch64:

Thanks!

Cheers,
Miguel

Greg Kroah-Hartman wrote on Wed, Oct 14, 2026 at 02:50:30PM +0200:

Tested 4a8beb0f1e36 ("Linux 6.12.113-rc2") on:
- arm i.MX6ULL (Armadillo 640)
- arm64 i.MX8MP (Armadillo G4)
- arm64 i.MX8ULP (Armadillo IoT A9E)

No obvious regression in dmesg or basic tests:

Dominique Martinet