This is the start of the stable review cycle for the 6.1.77 release. There are 221 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon, 05 Feb 2024 17:47:20 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.77-rc2.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.1.77-rc2 Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx> drm/amdgpu: Fix missing error code in 'gmc_v6/7/8/9_0_hw_init()' Johan Hovold <johan+linaro@xxxxxxxxxx> ASoC: codecs: wsa883x: fix PA volume control Johan Hovold <johan+linaro@xxxxxxxxxx> ASoC: codecs: lpass-wsa-macro: fix compander volume hack Zhengchao Shao <shaozhengchao@xxxxxxxxxx> bonding: remove print in bond_verify_device_path Praveen Kaligineedi <pkaligineedi@xxxxxxxxxx> gve: Fix use-after-free vulnerability Huacai Chen <chenhuacai@xxxxxxxxxx> LoongArch/smp: Call rcutree_report_cpu_starting() at tlb_init() Konrad Dybcio <konrad.dybcio@xxxxxxxxxx> drm/msm/dsi: Enable runtime PM Jonathan Gray <jsg@xxxxxxxxx> Revert "drm/amd/display: Disable PSR-SU on Parade 0803 TCON again" Marco Elver <elver@xxxxxxxxxx> mm, kmsan: fix infinite recursion due to RCU critical section Huang Shijie <shijie@xxxxxxxxxxxxxxxxxxxxxx> arm64: irq: set the correct node for shadow call stack Benjamin Poirier <bpoirier@xxxxxxxxxx> selftests: bonding: Check initial state Benjamin Poirier <bpoirier@xxxxxxxxxx> selftests: team: Add missing config options Breno Leitao <leitao@xxxxxxxxxx> net: sysfs: Fix /sys/class/net/<iface> path Paolo Abeni <pabeni@xxxxxxxxxx> selftests: net: fix available tunnels detection Eric Dumazet <edumazet@xxxxxxxxxx> af_unix: fix lockdep positive in sk_diag_dump_icons() Zhipeng Lu <alexious@xxxxxxxxxx> net: ipv4: fix a memleak in ip_setup_cork Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nft_ct: sanitize layer 3 and 4 protocol number in custom expectations Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_log: replace BUG_ON by WARN_ON_ONCE when putting logger Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV Ryan Schaefer <ryanschf@xxxxxxxxxx> netfilter: conntrack: correct window scaling with retransmitted SYN Matthias May <Matthias.May@xxxxxxxxxxxx> selftests: net: add missing config for GENEVE Linus Lüssing <linus.luessing@xxxxxxxxx> bridge: mcast: fix disabled snooping after long uptime Eric Dumazet <edumazet@xxxxxxxxxx> llc: call sock_orphan() at release time Helge Deller <deller@xxxxxxxxxx> ipv6: Ensure natural alignment of const ipv6 loopback and router addresses Michal Vokáč <michal.vokac@xxxxxxxxx> net: dsa: qca8k: fix illegal usage of GPIO Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> ixgbe: Fix an error handling path in ixgbe_read_iosf_sb_reg_x550() Jedrzej Jagielski <jedrzej.jagielski@xxxxxxxxx> ixgbe: Refactor overtemp event handling Jedrzej Jagielski <jedrzej.jagielski@xxxxxxxxx> ixgbe: Refactor returning internal error codes Eric Dumazet <edumazet@xxxxxxxxxx> tcp: add sanity checks to rx zerocopy Horatiu Vultur <horatiu.vultur@xxxxxxxxxxxxx> net: lan966x: Fix port configuration when using SGMII interface Nicolas Dichtel <nicolas.dichtel@xxxxxxxxx> ipmr: fix kernel panic when forwarding mcast packets Eric Dumazet <edumazet@xxxxxxxxxx> ipv4: raw: add drop reasons Eric Dumazet <edumazet@xxxxxxxxxx> ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() Paolo Abeni <pabeni@xxxxxxxxxx> selftests: net: give more time for GRO aggregation Su Hui <suhui@xxxxxxxxxxxx> HID: hidraw: fix a problem of memory leak in hidraw_release() Ming Lei <ming.lei@xxxxxxxxxx> scsi: core: Move scsi_host_busy() out of host lock for waking up EH handler Romain Naour <romain.naour@xxxxxxx> regulator: ti-abb: don't use devm_platform_ioremap_resource_byname for shared interrupt register Su Hui <suhui@xxxxxxxxxxxx> scsi: isci: Fix an error code problem in isci_io_request_build() Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx> drm: using mul_u32_u32() requires linux/math64.h Edward Adam Davis <eadavis@xxxxxx> wifi: cfg80211: fix RCU dereference in __cfg80211_bss_update Peter Zijlstra <peterz@xxxxxxxxxxxxx> perf: Fix the nr_addr_filters fix Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx> drm/amdkfd: Fix 'node' NULL check in 'svm_range_get_range_boundaries()' Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx> drm/amdgpu: Release 'adev->pm.fw' before return in 'amdgpu_device_need_post()' Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx> drm/amdgpu: Fix with right return code '-EIO' in 'amdgpu_gmc_vram_checking()' Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx> drm/amd/powerplay: Fix kzalloc parameter 'ATOM_Tonga_PPM_Table' in 'get_platform_power_management_table()' Wenchao Hao <haowenchao2@xxxxxxxxxx> ceph: fix invalid pointer access if get_quota_realm return ERR_PTR Xiubo Li <xiubli@xxxxxxxxxx> ceph: fix deadlock or deadcode of misusing dget() Venky Shankar <vshankar@xxxxxxxxxx> ceph: reinitialize mds feature bit even when session in open Ming Lei <ming.lei@xxxxxxxxxx> blk-mq: fix IO hang from sbitmap wakeup race Zhu Yanjun <yanjun.zhu@xxxxxxxxx> virtio_net: Fix "‘%d’ directive writing between 1 and 11 bytes into a region of size 10" warnings Philip Yang <Philip.Yang@xxxxxxx> drm/amdkfd: Fix lock dependency warning with srcu Felix Kuehling <felix.kuehling@xxxxxxx> drm/amdkfd: Fix lock dependency warning Ian Rogers <irogers@xxxxxxxxxx> libsubcmd: Fix memory leak in uniq() Hans de Goede <hdegoede@xxxxxxxxxx> misc: lis3lv02d_i2c: Add missing setting of the reg_ctrl callback David Howells <dhowells@xxxxxxxxxx> 9p: Fix initialisation of netfs_inode for 9p Bjorn Helgaas <bhelgaas@xxxxxxxxxx> PCI/AER: Decode Requester ID when no error info found Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx> PCI: Fix 64GT/s effective data rate calculation Yu-Che Cheng <giver@xxxxxxxxxxxx> spmi: mediatek: Fix UAF on device remove Max Kellermann <max.kellermann@xxxxxxxxx> fs/kernfs/dir: obey S_ISGID Adrian Reber <areber@xxxxxxxxxx> tty: allow TIOCSLCKTRMIOS with CAP_CHECKPOINT_RESTORE Jo Van Bulck <jo.vanbulck@xxxxxxxxxxxxxx> selftests/sgx: Fix linker script asserts Hardik Gajjar <hgajjar@xxxxxxxxxxxxxx> usb: hub: Add quirk to decrease IN-ep poll interval for Microchip USB491x hub Hardik Gajjar <hgajjar@xxxxxxxxxxxxxx> usb: hub: Replace hardcoded quirk value with BIT() macro James Clark <james.clark@xxxxxxx> perf cs-etm: Bump minimum OpenCSD version to ensure a bugfix is present Daniel Stodden <dns@xxxxxxxxxx> PCI: switchtec: Fix stdev_release() crash after surprise hot remove Guilherme G. Piccoli <gpiccoli@xxxxxxxxxx> PCI: Only override AMD USB controller if required Xiaowu.ding <xiaowu.ding@xxxxxxxxxxxxxxx> mailbox: arm_mhuv2: Fix a bug for mhuv2_sender_interrupt Peter Robinson <pbrobinson@xxxxxxxxx> mfd: ti_am335x_tscadc: Fix TI SoC dependencies Oleksandr Tyshchenko <oleksandr_tyshchenko@xxxxxxxx> xen/gntdev: Fix the abuse of underlying struct page in DMA-buf import Harshit Shah <harshitshah.opendev@xxxxxxxxx> i3c: master: cdns: Update maximum prescaler value for i2c clock Johannes Berg <johannes.berg@xxxxxxxxx> um: time-travel: fix time corruption Nathan Chancellor <nathan@xxxxxxxxxx> um: net: Fix return type of uml_net_start_xmit() Benjamin Berg <benjamin@xxxxxxxxxxxxxxxx> um: Don't use vfprintf() for os_info() Anton Ivanov <anton.ivanov@xxxxxxxxxxxxxxxxxx> um: Fix naming clash between UML and scheduler Heiner Kallweit <hkallweit1@xxxxxxxxx> leds: trigger: panic: Don't register panic notifier if creating the trigger failed bo liu <bo.liu@xxxxxxxxxxxxxx> ALSA: hda/conexant: Fix headset auto detect fail in cx8070 and SN6140 Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx> drm/amdkfd: Fix iterator used outside loop in 'kfd_add_peer_prop()' Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx> drm/amdgpu: Drop 'fence' check in 'to_amdgpu_amdkfd_fence()' Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx> drm/amdgpu: Fix '*fw' from request_firmware() not released in 'amdgpu_ucode_request()' Felix Kuehling <Felix.Kuehling@xxxxxxx> drm/amdgpu: Let KFD sync with VM fences Stanley.Yang <Stanley.Yang@xxxxxxx> drm/amdgpu: Fix ecc irq enable/disable unpaired Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> clk: imx: clk-imx8qxp: fix LVDS bypass, pixel and phy clocks Josip Pavic <josip.pavic@xxxxxxx> drm/amd/display: make flip_timestamp_in_us a 64-bit variable Werner Fischer <devlists@xxxxxxxx> watchdog: it87_wdt: Keep WDTCTRL bit 3 unmodified for IT8784/IT8786 Kuan-Wei Chiu <visitorckw@xxxxxxxxx> clk: mmp: pxa168: Fix memory leak in pxa168_clk_init() Kuan-Wei Chiu <visitorckw@xxxxxxxxx> clk: hi3620: Fix memory leak in hi3620_mmc_clk_init() Wang, Beyond <Wang.Beyond@xxxxxxx> drm/amdgpu: fix ftrace event amdgpu_bo_move always move on same heap Abhinav Kumar <quic_abhinavk@xxxxxxxxxxx> drm/msm/dpu: fix writeback programming for YUV cases Rob Clark <robdclark@xxxxxxxxxxxx> drm/msm/dpu: Ratelimit framedone timeout msgs Alvin Lee <alvin.lee2@xxxxxxx> drm/amd/display: For prefetch mode > 0, extend prefetch if possible Kieran Bingham <kieran.bingham@xxxxxxxxxxxxxxxx> media: i2c: imx335: Fix hblank min/max values Su Hui <suhui@xxxxxxxxxxxx> media: ddbridge: fix an error code problem in ddb_probe Ming Qian <ming.qian@xxxxxxx> media: amphion: remove mutext lock in condition of wait_event Daniel Vacek <neelx@xxxxxxxxxx> IB/ipoib: Fix mcast list locking Douglas Anderson <dianders@xxxxxxxxxxxx> drm/exynos: Call drm_atomic_helper_shutdown() at shutdown/unbind time Chao Yu <chao@xxxxxxxxxx> f2fs: fix to tag gcing flag on page during block migration Xing Tong Wu <xingtong.wu@xxxxxxxxxxx> hwmon: (nct6775) Fix fan speed set failure in automatic mode Tomi Valkeinen <tomi.valkeinen@xxxxxxxxxxxxxxxx> media: rkisp1: Fix IRQ disable race issue Tomi Valkeinen <tomi.valkeinen@xxxxxxxxxxxxxxxx> media: rkisp1: Store IRQ lines Tomi Valkeinen <tomi.valkeinen@xxxxxxxxxxxxxxxx> media: rkisp1: Fix IRQ handler return values Tomi Valkeinen <tomi.valkeinen@xxxxxxxxxxxxxxxx> media: rkisp1: Drop IRQF_SHARED Pierre-Louis Bossart <pierre-louis.bossart@xxxxxxxxxxxxxxx> ALSA: hda: Intel: add HDA_ARL PCI ID support Pierre-Louis Bossart <pierre-louis.bossart@xxxxxxxxxxxxxxx> PCI: add INTEL_HDA_ARL to pci_ids.h Michael Tretter <m.tretter@xxxxxxxxxxxxxx> media: rockchip: rga: fix swizzling for RGB formats Ghanshyam Agrawal <ghanshyam1898@xxxxxxxxx> media: stk1160: Fixed high volume of stk1160_dbg messages Tomi Valkeinen <tomi.valkeinen@xxxxxxxxxxxxxxxx> drm/mipi-dsi: Fix detach call without attach Tomi Valkeinen <tomi.valkeinen@xxxxxxxxxxxxxxxx> drm/framebuffer: Fix use of uninitialized variable Tomi Valkeinen <tomi.valkeinen@xxxxxxxxxxxxxxxx> drm/drm_file: fix use of uninitialized variable Venkata Prasad Potturu <venkataprasad.potturu@xxxxxxx> ASoC: amd: Add new dmi entries for acp5x platform Jaegeuk Kim <jaegeuk@xxxxxxxxxx> f2fs: fix write pointers on zoned device after roll forward Meenakshikumar Somasundaram <meenakshikumar.somasundaram@xxxxxxx> drm/amd/display: Fix tiled display misalignment Xin Ji <xji@xxxxxxxxxxxxxxxx> drm/bridge: anx7625: Fix Set HPD irq detect window to 2ms Hsin-Yi Wang <hsinyi@xxxxxxxxxxxx> drm/panel-edp: Add override_edid_mode quirk for generic edp Jack Wang <jinpu.wang@xxxxxxxxx> RDMA/IPoIB: Fix error code return in ipoib_mcast_join Al Viro <viro@xxxxxxxxxxxxxxxxxx> fast_dput(): handle underflows gracefully Cristian Ciocaltea <cristian.ciocaltea@xxxxxxxxxxxxx> ASoC: doc: Fix undefined SND_SOC_DAPM_NOPM argument Takashi Iwai <tiwai@xxxxxxx> ALSA: hda: Refer to correct stream index at loops Chao Yu <chao@xxxxxxxxxx> f2fs: fix to check return value of f2fs_reserve_new_block() Vladimir Oltean <vladimir.oltean@xxxxxxx> net: dsa: qca8k: put MDIO bus OF node on qca8k_mdio_register() failure Suman Ghosh <sumang@xxxxxxxxxxx> octeontx2-af: Fix max NPC MCAM entry check while validating ref_entry Andrii Staikov <andrii.staikov@xxxxxxxxx> i40e: Fix VF disable behavior to block all traffic Lin Ma <linma@xxxxxxxxxx> bridge: cfm: fix enum typo in br_cc_ccm_tx_parse Wen Gu <guwen@xxxxxxxxxxxxxxxxx> net/smc: disable SEID on non-s390 archs where virtual ISM may be used Frédéric Danis <frederic.danis@xxxxxxxxxxxxx> Bluetooth: L2CAP: Fix possible multiple reject send clancy shang <clancy.shang@xxxxxxxxxxx> Bluetooth: hci_sync: fix BR/EDR wakeup bug Zijun Hu <quic_zijuhu@xxxxxxxxxxx> Bluetooth: qca: Set both WIDEBAND_SPEECH and LE_STATES quirks for QCA2066 Benjamin Berg <benjamin.berg@xxxxxxxxx> wifi: cfg80211: free beacon_ies when overridden from hidden BSS Su Hui <suhui@xxxxxxxxxxxx> wifi: rtlwifi: rtl8723{be,ae}: using calculate_bit_shift() Mingyi Zhang <zhangmingyi5@xxxxxxxxxx> libbpf: Fix NULL pointer dereference in bpf_object__collect_prog_relos Zenm Chen <zenmchen@xxxxxxxxx> wifi: rtl8xxxu: Add additional USB IDs for RTL8192EU devices Xianwei Zhao <xianwei.zhao@xxxxxxxxxxx> arm64: dts: amlogic: fix format for s4 uart node Jesse Brandeburg <jesse.brandeburg@xxxxxxxxx> ice: fix pre-shifted bit usage Mao Jinlong <quic_jinlmao@xxxxxxxxxxx> arm64: dts: qcom: msm8998: Fix 'out-ports' is a required property Mao Jinlong <quic_jinlmao@xxxxxxxxxxx> arm64: dts: qcom: msm8996: Fix 'in-ports' is a required property Alex Lyakas <alex.lyakas@xxxxxxxxxx> md: Whenassemble the array, consult the superblock of the freshest device Christoph Hellwig <hch@xxxxxx> block: prevent an integer overflow in bvec_try_merge_hw_page Tobias Waldekranz <tobias@xxxxxxxxxxxxxx> net: dsa: mv88e6xxx: Fix mv88e6352_serdes_get_stats error path Igor Russkikh <irusskikh@xxxxxxxxxxx> net: atlantic: eliminate double free in error handling logic Ahmed Zaki <ahmed.zaki@xxxxxxxxx> ice: fix ICE_AQ_VSI_Q_OPT_RSS_* register values Yihang Li <liyihang9@xxxxxxxxxx> scsi: hisi_sas: Set .phy_attached before notifing phyup event HISI_PHYE_PHY_UP_PM Fabio Estevam <festevam@xxxxxxx> ARM: dts: imx23/28: Fix the DMA controller node name Fabio Estevam <festevam@xxxxxxx> ARM: dts: imx23-sansa: Use preferred i2c-gpios properties Fabio Estevam <festevam@xxxxxxx> ARM: dts: imx27-apf27dev: Fix LED name Fabio Estevam <festevam@xxxxxxx> ARM: dts: imx25/27: Pass timing0 Fabio Estevam <festevam@xxxxxxx> ARM: dts: imx25: Fix the iim compatible string Kees Cook <keescook@xxxxxxxxxxxx> block/rnbd-srv: Check for unlikely string overflow Shannon Nelson <shannon.nelson@xxxxxxx> ionic: bypass firmware cmds when stuck in reset Shannon Nelson <shannon.nelson@xxxxxxx> ionic: pass opcode to devcmd_wait Christian Marangi <ansuelsmth@xxxxxxxxx> net: phy: at803x: fix passing the wrong reference for config_intr Fabio Estevam <festevam@xxxxxxx> ARM: dts: imx1: Fix sram node Fabio Estevam <festevam@xxxxxxx> ARM: dts: imx27: Fix sram node Fabio Estevam <festevam@xxxxxxx> ARM: dts: imx: Use flash@0,0 pattern Fabio Estevam <festevam@xxxxxxx> ARM: dts: imx25/27-eukrea: Fix RTC node name Johan Jonker <jbx6244@xxxxxxxxx> ARM: dts: rockchip: fix rk3036 hdmi ports node Dmitry Antipov <dmantipov@xxxxxxxxx> wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() Hou Tao <houtao1@xxxxxxxxxx> bpf: Set uattr->batch.count as zero before batched update or deletion Hannes Reinecke <hare@xxxxxxx> scsi: libfc: Fix up timeout error in fc_fcp_rec_error() Hannes Reinecke <hare@xxxxxxx> scsi: libfc: Don't schedule abort twice Hou Tao <houtao1@xxxxxxxxxx> bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers Baochen Qiang <quic_bqiang@xxxxxxxxxxx> wifi: ath11k: fix race due to setting ATH11K_FLAG_EXT_IRQ_ENABLED too early Minsuk Kang <linuxlovemin@xxxxxxxxxxxx> wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> ARM: dts: imx7s: Fix nand-controller #size-cells Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> ARM: dts: imx7s: Fix lcdif compatible Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> ARM: dts: imx7d: Fix coresight funnel ports ching Huang <ching2048@xxxxxxxxxxxx> scsi: arcmsr: Support new PCI device IDs 1883 and 1886 Sumit Saxena <sumit.saxena@xxxxxxxxxxxx> scsi: mpi3mr: Add PCI checks where SAS5116 diverges from SAS4116 Jose Ignacio Tornos Martinez <jtornosm@xxxxxxxxxx> net: usb: ax88179_178a: avoid two consecutive device resets Zhengchao Shao <shaozhengchao@xxxxxxxxxx> bonding: return -ENOMEM instead of BUG in alb_upper_dev_walk Ido Schimmel <idosch@xxxxxxxxxx> PCI: Add no PM reset quirk for NVIDIA Spectrum devices Justin Tee <justin.tee@xxxxxxxxxxxx> scsi: lpfc: Fix possible file string name overflow when updating firmware Tanmay Shah <tanmay.shah@xxxxxxxxxx> soc: xilinx: fix unhandled SGI warning message HariBabu Gattem <haribabu.gattem@xxxxxxxxxx> soc: xilinx: Fix for call trace due to the usage of smp_processor_id() Yafang Shao <laoar.shao@xxxxxxxxx> selftests/bpf: Fix issues in setup_classid_environment() Shiji Yang <yangshiji66@xxxxxxxxxxx> wifi: rt2x00: correct wrong BBP register in RxDCOC calibration Yonghong Song <yonghong.song@xxxxxxxxx> selftests/bpf: Fix pyperf180 compilation failure with clang18 Andrii Nakryiko <andrii@xxxxxxxxxx> selftests/bpf: satisfy compiler by having explicit return in btf test Shiji Yang <yangshiji66@xxxxxxxxxxx> wifi: rt2x00: restart beacon queue when hardware reset Baokun Li <libaokun1@xxxxxxxxxx> ext4: avoid online resizing failures due to oversized flex bg Baokun Li <libaokun1@xxxxxxxxxx> ext4: remove unnecessary check from alloc_flex_gd() Baokun Li <libaokun1@xxxxxxxxxx> ext4: unify the type of flexbg_size to unsigned int Ye Bin <yebin10@xxxxxxxxxx> ext4: fix inconsistent between segment fstrim and full fstrim Gabriel Krisman Bertazi <krisman@xxxxxxx> ecryptfs: Reject casefold directory inodes Anna Schumaker <Anna.Schumaker@xxxxxxxxxx> SUNRPC: Fix a suspicious RCU usage warning Heiko Carstens <hca@xxxxxxxxxxxxx> KVM: s390: fix setting of fpc register Heiko Carstens <hca@xxxxxxxxxxxxx> s390/ptrace: handle setting of fpc register correctly Tony Krowiak <akrowiak@xxxxxxxxxxxxx> s390/vfio-ap: fix sysfs status attribute for AP queue devices Arnd Bergmann <arnd@xxxxxxxx> arch: consolidate arch_irq_work_raise prototypes Edward Adam Davis <eadavis@xxxxxx> jfs: fix array-index-out-of-bounds in diNewExt Oleg Nesterov <oleg@xxxxxxxxxx> rxrpc_find_service_conn_rcu: fix the usage of read_seqbegin_or_lock() Oleg Nesterov <oleg@xxxxxxxxxx> afs: fix the usage of read_seqbegin_or_lock() in afs_find_server*() Oleg Nesterov <oleg@xxxxxxxxxx> afs: fix the usage of read_seqbegin_or_lock() in afs_lookup_volume_rcu() Thomas Bourgoin <thomas.bourgoin@xxxxxxxxxxx> crypto: stm32/crc32 - fix parsing list of devices Gao Xiang <xiang@xxxxxxxxxx> erofs: fix ztailpacking for subpage compressed blocks Bharat Bhushan <bbhushan2@xxxxxxxxxxx> crypto: octeontx2 - Fix cptvf driver cleanup Weichen Chen <weichen.chen@xxxxxxxxxxxx> pstore/ram: Fix crash when setting number of cpus to an odd number Edward Adam Davis <eadavis@xxxxxx> jfs: fix uaf in jfs_evict_inode Manas Ghandat <ghandatmanas@xxxxxxxxx> jfs: fix array-index-out-of-bounds in dbAdjTree Manas Ghandat <ghandatmanas@xxxxxxxxx> jfs: fix slab-out-of-bounds Read in dtSearch Osama Muhammad <osmtendev@xxxxxxxxx> UBSAN: array-index-out-of-bounds in dtSplitRoot Osama Muhammad <osmtendev@xxxxxxxxx> FS:JFS:UBSAN:array-index-out-of-bounds in dbAdjTree Shuai Xue <xueshuai@xxxxxxxxxxxxxxxxx> ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events Mukesh Ojha <quic_mojha@xxxxxxxxxxx> PM / devfreq: Synchronize devfreq_monitor_[start/stop] Yuntao Wang <ytcoode@xxxxxxxxx> ACPI: NUMA: Fix the logic of getting the fake_pxm value Prarit Bhargava <prarit@xxxxxxxxxx> ACPI: extlog: fix NULL pointer dereference check Dmitry Antipov <dmantipov@xxxxxxxxx> PNP: ACPI: fix fortify warning Yuluo Qiu <qyl27@xxxxxxxxxxx> ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop Chris Riches <chris.riches@xxxxxxxxxxx> audit: Send netlink ACK before setting connection in auditd_set Rui Zhang <zr.zhang@xxxxxxxx> regulator: core: Only increment use_count when enable_count changes Andrzej Hajda <andrzej.hajda@xxxxxxxxx> debugobjects: Stop accessing objects after releasing hash bucket lock Greg KH <gregkh@xxxxxxxxxxxxxxxxxxx> perf/core: Fix narrow startup race when creating the perf nr_addr_filters sysfs file Zhiquan Li <zhiquan1.li@xxxxxxxxx> x86/mce: Mark fatal MCE's page as poison to avoid panic in the kdump kernel Naveen N Rao <naveen@xxxxxxxxxx> powerpc/lib: Validate size for vector operations Stephen Rothwell <sfr@xxxxxxxxxxxxxxxx> powerpc: pmd_move_must_withdraw() is only needed for CONFIG_TRANSPARENT_HUGEPAGE Jun'ichi Nomura <junichi.nomura@xxxxxxx> x86/boot: Ignore NMIs during very early boot Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/64s: Fix CONFIG_NUMA=n build due to create_section_mapping() Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc/mm: Fix build failures due to arch_reserved_kernel_pages() Michael Ellerman <mpe@xxxxxxxxxxxxxx> powerpc: Fix build error due to is_valid_bugaddr() Mark Rutland <mark.rutland@xxxxxxx> drivers/perf: pmuv3: don't expose SW_INCR event in sysfs Huang Shijie <shijie@xxxxxxxxxxxxxxxxxxxxxx> arm64: irq: set the correct node for VMAP stack Kunwu Chan <chentao@xxxxxxxxxx> powerpc/mm: Fix null-pointer dereference in pgtable_cache_add Dmitry Torokhov <dmitry.torokhov@xxxxxxxxx> asm-generic: make sparse happy with odd-sized put_unaligned_*() ------------- Diffstat: Documentation/ABI/testing/sysfs-class-net-queues | 22 +-- Documentation/sound/soc/dapm.rst | 2 +- Makefile | 4 +- arch/arm/boot/dts/imx1-ads.dts | 2 +- arch/arm/boot/dts/imx1-apf9328.dts | 2 +- arch/arm/boot/dts/imx1.dtsi | 5 +- arch/arm/boot/dts/imx23-sansa.dts | 12 +- arch/arm/boot/dts/imx23.dtsi | 2 +- arch/arm/boot/dts/imx25-eukrea-cpuimx25.dtsi | 2 +- .../imx25-eukrea-mbimxsd25-baseboard-cmo-qvga.dts | 2 +- .../imx25-eukrea-mbimxsd25-baseboard-dvi-svga.dts | 2 +- .../imx25-eukrea-mbimxsd25-baseboard-dvi-vga.dts | 2 +- arch/arm/boot/dts/imx25-pdk.dts | 2 +- arch/arm/boot/dts/imx25.dtsi | 2 +- arch/arm/boot/dts/imx27-apf27dev.dts | 4 +- arch/arm/boot/dts/imx27-eukrea-cpuimx27.dtsi | 4 +- .../boot/dts/imx27-eukrea-mbimxsd27-baseboard.dts | 2 +- arch/arm/boot/dts/imx27-phytec-phycard-s-rdk.dts | 2 +- arch/arm/boot/dts/imx27-phytec-phycore-rdk.dts | 2 +- arch/arm/boot/dts/imx27-phytec-phycore-som.dtsi | 2 +- arch/arm/boot/dts/imx27.dtsi | 3 + arch/arm/boot/dts/imx28.dtsi | 2 +- arch/arm/boot/dts/imx7d.dtsi | 3 - arch/arm/boot/dts/imx7s.dtsi | 10 +- arch/arm/boot/dts/rk3036.dtsi | 14 +- arch/arm/include/asm/irq_work.h | 2 - .../boot/dts/amlogic/meson-s4-s805x2-aq222.dts | 4 +- arch/arm64/boot/dts/amlogic/meson-s4.dtsi | 4 +- arch/arm64/boot/dts/qcom/msm8996.dtsi | 21 +++ arch/arm64/boot/dts/qcom/msm8998.dtsi | 32 ++-- arch/arm64/include/asm/irq_work.h | 2 - arch/arm64/kernel/irq.c | 7 +- arch/arm64/kernel/perf_event.c | 6 +- arch/csky/include/asm/irq_work.h | 2 +- arch/loongarch/kernel/smp.c | 1 - arch/loongarch/mm/tlb.c | 16 +- arch/powerpc/include/asm/irq_work.h | 1 - arch/powerpc/include/asm/mmu.h | 4 + arch/powerpc/include/asm/mmzone.h | 8 - arch/powerpc/kernel/traps.c | 2 + arch/powerpc/lib/sstep.c | 10 ++ arch/powerpc/mm/book3s64/pgtable.c | 2 + arch/powerpc/mm/init-common.c | 5 +- arch/powerpc/mm/mmu_decl.h | 5 + arch/riscv/include/asm/irq_work.h | 2 +- arch/s390/include/asm/irq_work.h | 2 - arch/s390/kernel/ptrace.c | 6 +- arch/s390/kvm/kvm-s390.c | 5 - arch/um/drivers/net_kern.c | 2 +- arch/um/include/shared/kern_util.h | 2 +- arch/um/kernel/process.c | 2 +- arch/um/kernel/time.c | 32 +++- arch/um/os-Linux/helper.c | 6 +- arch/um/os-Linux/util.c | 19 +- arch/x86/boot/compressed/ident_map_64.c | 5 + arch/x86/boot/compressed/idt_64.c | 1 + arch/x86/boot/compressed/idt_handlers_64.S | 1 + arch/x86/boot/compressed/misc.h | 1 + arch/x86/include/asm/irq_work.h | 1 - arch/x86/include/asm/kmsan.h | 17 +- arch/x86/kernel/cpu/mce/core.c | 16 ++ block/bio.c | 2 +- block/blk-mq.c | 16 ++ drivers/acpi/acpi_extlog.c | 5 +- drivers/acpi/acpi_video.c | 9 + drivers/acpi/apei/ghes.c | 29 ++- drivers/acpi/numa/srat.c | 4 +- drivers/base/arch_numa.c | 2 +- drivers/block/rnbd/rnbd-srv.c | 19 +- drivers/bluetooth/hci_qca.c | 1 + drivers/clk/hisilicon/clk-hi3620.c | 4 +- drivers/clk/imx/clk-imx8qxp.c | 24 ++- drivers/clk/mmp/clk-of-pxa168.c | 3 + drivers/crypto/marvell/octeontx2/otx2_cptlf.c | 6 +- drivers/crypto/marvell/octeontx2/otx2_cptvf_main.c | 3 + drivers/crypto/stm32/stm32-crc32.c | 2 +- drivers/devfreq/devfreq.c | 24 ++- drivers/gpu/drm/amd/amdgpu/aldebaran.c | 26 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_fence.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 21 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_object.h | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_sync.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ucode.c | 6 +- drivers/gpu/drm/amd/amdgpu/gmc_v10_0.c | 4 + drivers/gpu/drm/amd/amdgpu/gmc_v11_0.c | 5 + drivers/gpu/drm/amd/amdgpu/gmc_v6_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/gmc_v7_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/gmc_v8_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 8 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 42 ++--- drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 24 +-- drivers/gpu/drm/amd/display/dc/core/dc.c | 4 + drivers/gpu/drm/amd/display/dc/dc_hw_types.h | 2 +- .../amd/display/dc/dml/dcn32/display_mode_vba_32.c | 3 + .../dc/dml/dcn32/display_mode_vba_util_32.c | 33 +++- .../dc/dml/dcn32/display_mode_vba_util_32.h | 1 + .../drm/amd/display/modules/power/power_helpers.c | 2 - .../amd/pm/powerplay/hwmgr/process_pptables_v1_0.c | 2 +- drivers/gpu/drm/bridge/analogix/anx7625.c | 51 ++++-- drivers/gpu/drm/bridge/analogix/anx7625.h | 4 + drivers/gpu/drm/drm_file.c | 2 +- drivers/gpu/drm/drm_framebuffer.c | 2 +- drivers/gpu/drm/drm_mipi_dsi.c | 17 +- drivers/gpu/drm/exynos/exynos_drm_drv.c | 11 ++ drivers/gpu/drm/msm/disp/dpu1/dpu_encoder.c | 5 +- drivers/gpu/drm/msm/disp/dpu1/dpu_hw_wb.c | 3 + drivers/gpu/drm/msm/disp/dpu1/dpu_kms.h | 1 + drivers/gpu/drm/msm/dsi/phy/dsi_phy.c | 4 + drivers/gpu/drm/panel/panel-edp.c | 48 ++++- drivers/hid/hidraw.c | 7 +- drivers/hwmon/nct6775-core.c | 7 + drivers/i3c/master/i3c-master-cdns.c | 7 +- drivers/infiniband/ulp/ipoib/ipoib_multicast.c | 7 +- drivers/leds/trigger/ledtrig-panic.c | 5 +- drivers/mailbox/arm_mhuv2.c | 3 +- drivers/md/md.c | 54 ++++-- drivers/media/i2c/imx335.c | 4 +- drivers/media/pci/ddbridge/ddbridge-main.c | 2 +- drivers/media/platform/amphion/vpu.h | 3 +- drivers/media/platform/amphion/vpu_cmds.c | 28 +-- drivers/media/platform/amphion/vpu_v4l2.c | 1 + drivers/media/platform/rockchip/rga/rga.c | 15 +- .../media/platform/rockchip/rkisp1/rkisp1-common.h | 11 +- .../media/platform/rockchip/rkisp1/rkisp1-csi.c | 14 +- .../media/platform/rockchip/rkisp1/rkisp1-dev.c | 35 +++- .../media/platform/rockchip/rkisp1/rkisp1-isp.c | 20 ++- drivers/media/usb/stk1160/stk1160-video.c | 5 +- drivers/mfd/Kconfig | 1 + drivers/misc/lis3lv02d/lis3lv02d_i2c.c | 1 + drivers/net/bonding/bond_alb.c | 3 +- drivers/net/dsa/mv88e6xxx/chip.h | 4 +- drivers/net/dsa/mv88e6xxx/serdes.c | 10 +- drivers/net/dsa/mv88e6xxx/serdes.h | 8 +- drivers/net/dsa/qca/qca8k-8xxx.c | 24 ++- drivers/net/ethernet/aquantia/atlantic/aq_ptp.c | 28 ++- drivers/net/ethernet/aquantia/atlantic/aq_ring.c | 61 ++----- drivers/net/ethernet/aquantia/atlantic/aq_ring.h | 22 +-- drivers/net/ethernet/aquantia/atlantic/aq_vec.c | 23 ++- drivers/net/ethernet/google/gve/gve_tx_dqo.c | 5 +- drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 32 ++++ drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h | 1 + drivers/net/ethernet/intel/ice/ice_adminq_cmd.h | 18 +- drivers/net/ethernet/intel/ice/ice_lib.c | 7 +- drivers/net/ethernet/intel/ice/ice_virtchnl.c | 12 +- drivers/net/ethernet/intel/ice/ice_vsi_vlan_lib.c | 16 +- drivers/net/ethernet/intel/ixgbe/ixgbe_82598.c | 36 ++-- drivers/net/ethernet/intel/ixgbe/ixgbe_82599.c | 61 ++++--- drivers/net/ethernet/intel/ixgbe/ixgbe_common.c | 145 +++++++-------- drivers/net/ethernet/intel/ixgbe/ixgbe_ethtool.c | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 42 ++--- drivers/net/ethernet/intel/ixgbe/ixgbe_mbx.c | 34 ++-- drivers/net/ethernet/intel/ixgbe/ixgbe_mbx.h | 1 - drivers/net/ethernet/intel/ixgbe/ixgbe_phy.c | 105 +++++------ drivers/net/ethernet/intel/ixgbe/ixgbe_phy.h | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_sriov.c | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_type.h | 43 +---- drivers/net/ethernet/intel/ixgbe/ixgbe_x540.c | 44 ++--- drivers/net/ethernet/intel/ixgbe/ixgbe_x550.c | 149 +++++++-------- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 13 +- .../net/ethernet/microchip/lan966x/lan966x_port.c | 5 +- .../net/ethernet/pensando/ionic/ionic_bus_pci.c | 4 + drivers/net/ethernet/pensando/ionic/ionic_dev.c | 1 + drivers/net/ethernet/pensando/ionic/ionic_dev.h | 1 + drivers/net/ethernet/pensando/ionic/ionic_lif.c | 3 + drivers/net/ethernet/pensando/ionic/ionic_main.c | 22 ++- drivers/net/phy/at803x.c | 6 +- drivers/net/usb/ax88179_178a.c | 2 - drivers/net/virtio_net.c | 9 +- drivers/net/wireless/ath/ath11k/pcic.c | 4 +- drivers/net/wireless/ath/ath9k/htc_drv_txrx.c | 5 +- drivers/net/wireless/ralink/rt2x00/rt2800lib.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 3 + drivers/net/wireless/ralink/rt2x00/rt2x00mac.c | 11 ++ .../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 12 ++ .../net/wireless/realtek/rtlwifi/rtl8723ae/phy.c | 6 +- .../net/wireless/realtek/rtlwifi/rtl8723be/phy.c | 4 +- drivers/net/wireless/silabs/wfx/sta.c | 42 +++-- drivers/pci/pci.h | 2 +- drivers/pci/pcie/aer.c | 9 +- drivers/pci/quirks.c | 24 ++- drivers/pci/switch/switchtec.c | 25 ++- drivers/pnp/pnpacpi/rsparser.c | 12 +- drivers/regulator/core.c | 56 +++--- drivers/regulator/ti-abb-regulator.c | 22 ++- drivers/s390/crypto/vfio_ap_ops.c | 16 +- drivers/scsi/arcmsr/arcmsr.h | 4 + drivers/scsi/arcmsr/arcmsr_hba.c | 6 + drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 10 +- drivers/scsi/isci/request.c | 2 +- drivers/scsi/libfc/fc_fcp.c | 18 +- drivers/scsi/lpfc/lpfc.h | 1 + drivers/scsi/lpfc/lpfc_init.c | 4 +- drivers/scsi/mpi3mr/mpi3mr_fw.c | 3 +- drivers/scsi/mpi3mr/mpi3mr_os.c | 5 +- drivers/scsi/scsi_error.c | 8 +- drivers/scsi/scsi_lib.c | 2 +- drivers/scsi/scsi_priv.h | 2 +- drivers/soc/xilinx/xlnx_event_manager.c | 7 +- drivers/spmi/spmi-mtk-pmif.c | 7 +- drivers/tty/tty_ioctl.c | 4 +- drivers/usb/core/hub.c | 33 +++- drivers/watchdog/it87_wdt.c | 14 +- drivers/xen/gntdev-dmabuf.c | 50 +++--- fs/9p/v9fs_vfs.h | 1 + fs/9p/vfs_inode.c | 6 +- fs/9p/vfs_inode_dotl.c | 1 + fs/afs/callback.c | 3 +- fs/afs/server.c | 7 +- fs/ceph/caps.c | 9 +- fs/ceph/mds_client.c | 2 +- fs/ceph/quota.c | 39 ++-- fs/dcache.c | 7 +- fs/ecryptfs/inode.c | 8 + fs/erofs/zdata.c | 2 +- fs/ext4/mballoc.c | 11 +- fs/ext4/resize.c | 37 ++-- fs/f2fs/compress.c | 4 +- fs/f2fs/file.c | 2 + fs/f2fs/recovery.c | 25 ++- fs/jfs/jfs_dmap.c | 57 +++--- fs/jfs/jfs_dtree.c | 7 +- fs/jfs/jfs_imap.c | 3 + fs/jfs/jfs_mount.c | 6 +- fs/kernfs/dir.c | 12 ++ fs/pstore/ram.c | 1 + include/asm-generic/numa.h | 2 + include/asm-generic/unaligned.h | 24 +-- include/drm/drm_color_mgmt.h | 1 + include/drm/drm_mipi_dsi.h | 2 + include/linux/irq_work.h | 3 + include/linux/mmzone.h | 6 +- include/linux/pci_ids.h | 1 + include/net/af_unix.h | 20 ++- include/net/ip.h | 2 +- include/net/netfilter/nf_tables.h | 2 + kernel/audit.c | 31 +++- kernel/bpf/helpers.c | 13 +- kernel/bpf/syscall.c | 6 + kernel/events/core.c | 38 ++-- lib/debugobjects.c | 200 ++++++++------------- net/bluetooth/hci_sync.c | 10 +- net/bluetooth/l2cap_core.c | 3 +- net/bridge/br_cfm_netlink.c | 2 +- net/bridge/br_multicast.c | 20 ++- net/bridge/br_private.h | 4 +- net/ipv4/ip_output.c | 12 +- net/ipv4/ip_sockglue.c | 6 +- net/ipv4/ipmr.c | 2 +- net/ipv4/raw.c | 10 +- net/ipv4/tcp.c | 12 +- net/ipv4/udp.c | 2 +- net/ipv6/addrconf_core.c | 21 ++- net/ipv6/ip6_tunnel.c | 21 ++- net/llc/af_llc.c | 2 + net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_log.c | 7 +- net/netfilter/nf_tables_api.c | 14 +- net/netfilter/nft_ct.c | 24 +++ net/netfilter/nft_tunnel.c | 1 + net/rxrpc/conn_service.c | 3 +- net/smc/smc_clc.c | 14 ++ net/sunrpc/xprtmultipath.c | 17 +- net/unix/af_unix.c | 14 +- net/unix/diag.c | 2 +- net/wireless/scan.c | 4 + sound/hda/hdac_stream.c | 9 +- sound/pci/hda/hda_intel.c | 2 + sound/pci/hda/patch_conexant.c | 115 +++++++++++- sound/soc/amd/acp-config.c | 15 +- sound/soc/codecs/lpass-wsa-macro.c | 7 - sound/soc/codecs/wsa883x.c | 6 +- tools/build/feature/test-libopencsd.c | 4 +- tools/lib/bpf/libbpf.c | 2 + tools/lib/subcmd/help.c | 18 +- tools/testing/selftests/bpf/cgroup_helpers.c | 18 +- tools/testing/selftests/bpf/prog_tests/btf.c | 1 + tools/testing/selftests/bpf/progs/pyperf180.c | 22 +++ .../selftests/drivers/net/bonding/lag_lib.sh | 11 ++ tools/testing/selftests/drivers/net/team/config | 4 +- tools/testing/selftests/net/config | 1 + tools/testing/selftests/net/pmtu.sh | 16 +- tools/testing/selftests/net/setup_veth.sh | 2 +- tools/testing/selftests/sgx/test_encl.lds | 6 +- 286 files changed, 2319 insertions(+), 1338 deletions(-)