This is the start of the stable review cycle for the 6.1.85 release. There are 138 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 11 Apr 2024 17:35:00 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.85-rc3.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.1.85-rc3 Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> x86: set SPECTRE_BHI_ON as default Daniel Sneddon <daniel.sneddon@xxxxxxxxxxxxxxx> KVM: x86: Add BHI_NO Pawan Gupta <pawan.kumar.gupta@xxxxxxxxxxxxxxx> x86/bhi: Mitigate KVM by default Pawan Gupta <pawan.kumar.gupta@xxxxxxxxxxxxxxx> x86/bhi: Add BHI mitigation knob Pawan Gupta <pawan.kumar.gupta@xxxxxxxxxxxxxxx> x86/bhi: Enumerate Branch History Injection (BHI) bug Daniel Sneddon <daniel.sneddon@xxxxxxxxxxxxxxx> x86/bhi: Define SPEC_CTRL_BHI_DIS_S Pawan Gupta <pawan.kumar.gupta@xxxxxxxxxxxxxxx> x86/bhi: Add support for clearing branch history at syscall entry Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> x86/syscall: Don't force use of indirect calls for system calls Josh Poimboeuf <jpoimboe@xxxxxxxxxx> x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file min15.li <min15.li@xxxxxxxxxxx> nvme: fix miss command type check David Hildenbrand <david@xxxxxxxxxx> mm/secretmem: fix GUP-fast succeeding on secretmem folios Geliang Tang <geliang.tang@xxxxxxxx> selftests: mptcp: display simult in extra_msg Davide Caratti <dcaratti@xxxxxxxxxx> mptcp: don't account accept() of non-MPC client as fallback to TCP Geliang Tang <tanggeliang@xxxxxxxxxx> selftests: mptcp: join: fix dev in check_endpoint Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect() Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix potential UAF in smb2_is_network_name_deleted() Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix potential UAF in is_valid_oplock_break() Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix potential UAF in smb2_is_valid_lease_break() Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix potential UAF in smb2_is_valid_oplock_break() Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix potential UAF in cifs_stats_proc_show() Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix potential UAF in cifs_stats_proc_write() Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix potential UAF in cifs_debug_files_proc_show() Ritvik Budhiraja <rbudhiraja@xxxxxxxxxxxxx> smb3: retrying on failed server close Stefan O'Rear <sorear@xxxxxxxxxxxx> riscv: process: Fix kernel gp leakage Samuel Holland <samuel.holland@xxxxxxxxxx> riscv: Fix spurious errors from __get/put_kernel_nofault Sumanth Korikkar <sumanthk@xxxxxxxxxxxxx> s390/entry: align system call table on 8 bytes Jason A. Donenfeld <Jason@xxxxxxxxx> x86/coco: Require seeding RNG with RDRAND on CoCo systems Borislav Petkov (AMD) <bp@xxxxxxxxx> x86/mce: Make sure to grab mce_sysfs_mutex in set_bank() David Hildenbrand <david@xxxxxxxxxx> x86/mm/pat: fix VM_PAT handling in COW mappings Herve Codina <herve.codina@xxxxxxxxxxx> of: dynamic: Synchronize of_changeset_destroy() with the devlink removals Herve Codina <herve.codina@xxxxxxxxxxx> driver core: Introduce device_link_wait_removal() I Gede Agastya Darma Laksana <gedeagas22@xxxxxxxxx> ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone Christoffer Sandberg <cs@xxxxxxxxx> ALSA: hda/realtek - Fix inactive headset mic jack Namjae Jeon <linkinjeon@xxxxxxxxxx> ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1 Namjae Jeon <linkinjeon@xxxxxxxxxx> ksmbd: validate payload size in ipc response Namjae Jeon <linkinjeon@xxxxxxxxxx> ksmbd: don't send oplock break if rename fails Borislav Petkov (AMD) <bp@xxxxxxxxx> x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk Jeff Layton <jlayton@xxxxxxxxxx> nfsd: hold a lighter-weight client reference over CB_RECALL_ANY Arnd Bergmann <arnd@xxxxxxxx> ata: sata_mv: Fix PCI device ID table declaration compilation warning David Howells <dhowells@xxxxxxxxxx> cifs: Fix caching to try to do open O_WRONLY as rdwr on server Li Nan <linan122@xxxxxxxxxx> scsi: sd: Unregister device if device_add_disk() failed in sd_probe() Arnd Bergmann <arnd@xxxxxxxx> scsi: mylex: Fix sysfs buffer lengths Arnd Bergmann <arnd@xxxxxxxx> ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit Stephen Lee <slee08177@xxxxxxxxx> ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw Pierre-Louis Bossart <pierre-louis.bossart@xxxxxxxxxxxxxxx> ASoC: rt711-sdw: fix locking sequence Pierre-Louis Bossart <pierre-louis.bossart@xxxxxxxxxxxxxxx> ASoC: rt711-sdca: fix locking sequence Pierre-Louis Bossart <pierre-louis.bossart@xxxxxxxxxxxxxxx> ASoC: rt5682-sdw: fix locking sequence Christian Hewitt <christianshewitt@xxxxxxxxx> drm/panfrost: fix power transition timeout warnings Pu Lehui <pulehui@xxxxxxxxxx> drivers/perf: riscv: Disable PERF_SAMPLE_BRANCH_* while not supported Dominique Martinet <asmadeus@xxxxxxxxxxxxx> 9p: Fix read/write debug statements to report server reply Jann Horn <jannh@xxxxxxxxxx> fs/pipe: Fix lockdep false-positive in watchqueue pipe_write() Ashish Kalra <ashish.kalra@xxxxxxx> KVM: SVM: Add support for allowing zero SEV ASIDs Sean Christopherson <seanjc@xxxxxxxxxx> KVM: SVM: Use unsigned integers when dealing with ASIDs Sean Christopherson <seanjc@xxxxxxxxxx> KVM: SVM: WARN, but continue, if misc_cg_set_capacity() fails Alexander Mikhalitsyn <aleksandr.mikhalitsyn@xxxxxxxxxxxxx> KVM: SVM: enhance info printk's in SEV init Paul Barker <paul.barker.ct@xxxxxxxxxxxxxx> net: ravb: Always update error counters Paul Barker <paul.barker.ct@xxxxxxxxxxxxxx> net: ravb: Always process TX descriptor ring Claudiu Beznea <claudiu.beznea.uj@xxxxxxxxxxxxxx> net: ravb: Let IP-specific receive function to interrogate descriptors Wei Fang <wei.fang@xxxxxxx> net: fec: Set mac_managed_pm during probe Denis Kirjanov <dkirjanov@xxxxxxx> drivers: net: convert to boolean for the mac_managed_pm flag Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> tcp: Fix bind() regression for v6-only wildcard and v4(-mapped-v6) non-wildcard addresses. Heiner Kallweit <hkallweit1@xxxxxxxxx> r8169: prepare rtl_hw_aspm_clkreq_enable for usage in atomic context Heiner Kallweit <hkallweit1@xxxxxxxxx> r8169: use spinlock to protect access to registers Config2 and Config5 Heiner Kallweit <hkallweit1@xxxxxxxxx> r8169: use spinlock to protect mac ocp register access Ivan Vecera <ivecera@xxxxxxxxxx> i40e: Enforce software interrupt during busy-poll exit Ivan Vecera <ivecera@xxxxxxxxxx> i40e: Remove _t suffix from enum type names Joe Damato <jdamato@xxxxxxxxxx> i40e: Store the irq number in i40e_q_vector Mario Limonciello <mario.limonciello@xxxxxxx> drm/amd: Flush GFXOFF requests in prepare stage Mario Limonciello <mario.limonciello@xxxxxxx> drm/amd: Add concept of running prepare_suspend() sequence for IP blocks Mario Limonciello <mario.limonciello@xxxxxxx> drm/amd: Evict resources during PM ops prepare() callback Aleksandr Loktionov <aleksandr.loktionov@xxxxxxxxx> i40e: fix vf may be used uninitialized in this function warning Aleksandr Loktionov <aleksandr.loktionov@xxxxxxxxx> i40e: fix i40e_count_filters() to count only active/new filters Aleksandr Mishin <amishin@xxxxxxxxxx> octeontx2-af: Add array index check Su Hui <suhui@xxxxxxxxxxxx> octeontx2-pf: check negative error code in otx2_open() Hariprasad Kelam <hkelam@xxxxxxxxxxx> octeontx2-af: Fix issue with loading coalesced KPU profiles Antoine Tenart <atenart@xxxxxxxxxx> udp: prevent local UDP tunnel packets from being GROed Antoine Tenart <atenart@xxxxxxxxxx> udp: do not transition UDP GRO fraglist partial checksums to unnecessary Antoine Tenart <atenart@xxxxxxxxxx> udp: do not accept non-tunnel GSO skbs landing in a tunnel Atlas Yu <atlas.yu@xxxxxxxxxxxxx> r8169: skip DASH fw status checks when DASH is disabled David Thompson <davthompson@xxxxxxxxxx> mlxbf_gige: stop interface during shutdown Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> ipv6: Fix infinite recursion in fib6_dump_done(). Jakub Kicinski <kuba@xxxxxxxxxx> selftests: reuseaddr_conflict: add missing new line at the end of the output Eric Dumazet <edumazet@xxxxxxxxxx> erspan: make sure erspan_base_hdr is present in skb->head Ivan Vecera <ivecera@xxxxxxxxxx> i40e: Fix VF MAC filter removal Borislav Petkov (AMD) <bp@xxxxxxxxx> x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO Borislav Petkov (AMD) <bp@xxxxxxxxx> x86/bugs: Fix the SRSO mitigation on Zen3/4 Antoine Tenart <atenart@xxxxxxxxxx> gro: fix ownership transfer Antoine Tenart <atenart@xxxxxxxxxx> selftests: net: gro fwd: update vxlan GRO test expectations Aleksandr Mishin <amishin@xxxxxxxxxx> net: phy: micrel: Fix potential null pointer dereference Horatiu Vultur <horatiu.vultur@xxxxxxxxxxxxx> net: phy: micrel: lan8814: Fix when enabling/disabling 1-step timestamping Piotr Wejman <piotrwejman90@xxxxxxxxx> net: stmmac: fix rx queue priority assignment Eric Dumazet <edumazet@xxxxxxxxxx> net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() Eric Dumazet <edumazet@xxxxxxxxxx> net/sched: act_skbmod: prevent kernel-infoleak Jakub Sitnicki <jakub@xxxxxxxxxxxxxx> bpf, sockmap: Prevent lock inversion deadlock in map delete elem Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> vboxsf: Avoid an spurious warning if load_nls_xxx() fails Eric Dumazet <edumazet@xxxxxxxxxx> netfilter: validate user input for expected length Ziyang Xuan <william.xuanziyang@xxxxxxxxxx> netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: flush pending destroy work before exit_net release Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: reject new basechain after table flag update Ingo Molnar <mingo@xxxxxxxxxx> Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped." Marco Pinna <marco.pinn95@xxxxxxxxx> vsock/virtio: fix packet delivery to tap device Jose Ignacio Tornos Martinez <jtornosm@xxxxxxxxxx> net: usb: ax88179_178a: avoid the interface always configured as random address Mahmoud Adam <mngyadam@xxxxxxxxxx> net/rds: fix possible cp null dereference Jesper Dangaard Brouer <hawk@xxxxxxxxxx> xen-netfront: Add missing skb_mark_for_recycle Bastien Nocera <hadess@xxxxxxxxxx> Bluetooth: Fix TOCTOU in HCI debugfs implementation Hui Wang <hui.wang@xxxxxxxxxxxxx> Bluetooth: hci_event: set the conn encrypted before conn establishes Johan Hovold <johan+linaro@xxxxxxxxxx> Bluetooth: add quirk for broken address properties Johan Hovold <johan+linaro@xxxxxxxxxx> Bluetooth: qca: fix device-address endianness Johan Hovold <johan+linaro@xxxxxxxxxx> arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken Johan Hovold <johan+linaro@xxxxxxxxxx> Revert "Bluetooth: hci_qca: Set BDA quirk bit if fwnode exists in DT" Sean Christopherson <seanjc@xxxxxxxxxx> x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word Heiner Kallweit <hkallweit1@xxxxxxxxx> r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d Oliver Upton <oliver.upton@xxxxxxxxx> KVM: arm64: Fix host-programmed guest events in nVHE Sandipan Das <sandipan.das@xxxxxxx> perf/x86/amd/lbr: Use freeze based on availability Sandipan Das <sandipan.das@xxxxxxx> x86/cpufeatures: Add new word for scattered features Arnd Bergmann <arnd@xxxxxxxx> dm integrity: fix out-of-range warning Florian Westphal <fw@xxxxxxxxx> inet: inet_defrag: prevent sk release while still in use Hariprasad Kelam <hkelam@xxxxxxxxxxx> Octeontx2-af: fix pause frame configuration in GMP mode Raju Lakkaraju <Raju.Lakkaraju@xxxxxxxxxxxxx> net: lan743x: Add set RFE read fifo threshold for PCI1x1x chips David Howells <dhowells@xxxxxxxxxx> cifs: Fix duplicate fscache cookie warnings Andrei Matei <andreimatei1@xxxxxxxxx> bpf: Protect against int overflow for stack access size David Thompson <davthompson@xxxxxxxxxx> mlxbf_gige: call request_irq() after NAPI initialized Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> tls: get psock ref after taking rxlock to avoid leak Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> tls: adjust recv return with async crypto and failed copy to userspace Sabrina Dubroca <sd@xxxxxxxxxxxxxxx> tls: recv: process_rx_list shouldn't use an offset with kvec Jian Shen <shenjian15@xxxxxxxxxx> net: hns3: mark unexcuted loopback test result as UNEXECUTED Yonglong Liu <liuyonglong@xxxxxxxxxx> net: hns3: fix kernel crash when devlink reload during pf initialization Jie Wang <wangjie125@xxxxxxxxxx> net: hns3: fix index limit to support all queue stats Nikita Kiryushin <kiryushin@xxxxxxxx> ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields() Bjørn Mork <bjorn@xxxxxxx> net: wwan: t7xx: Split 64bit accesses to fix alignment issues Eric Dumazet <edumazet@xxxxxxxxxx> tcp: properly terminate timers for kernel sockets Alexandra Winter <wintera@xxxxxxxxxxxxx> s390/qeth: handle deferred cc1 Przemek Kitszel <przemyslaw.kitszel@xxxxxxxxx> ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa() Johannes Berg <johannes.berg@xxxxxxxxx> wifi: iwlwifi: mvm: rfi: fix potential response leaks David Thompson <davthompson@xxxxxxxxxx> mlxbf_gige: stop PHY during open() error paths Ryosuke Yasuoka <ryasuoka@xxxxxxxxxx> nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet Pavel Sakharov <p.sakharov@xxxxxxxxx> dma-buf: Fix NULL pointer dereference in sanitycheck() Hangbin Liu <liuhangbin@xxxxxxxxx> scripts/bpf_doc: Use silent mode when exec make cmd ------------- Diffstat: Documentation/admin-guide/hw-vuln/spectre.rst | 48 +++++++- Documentation/admin-guide/kernel-parameters.txt | 12 ++ Makefile | 4 +- arch/arm64/boot/dts/qcom/sc7180-trogdor.dtsi | 2 + arch/riscv/include/asm/uaccess.h | 4 +- arch/riscv/kernel/process.c | 3 - arch/s390/kernel/entry.S | 1 + arch/x86/Kconfig | 25 ++++ arch/x86/coco/core.c | 41 +++++++ arch/x86/entry/common.c | 10 +- arch/x86/entry/entry_64.S | 61 ++++++++++ arch/x86/entry/entry_64_compat.S | 16 +++ arch/x86/entry/syscall_32.c | 21 +++- arch/x86/entry/syscall_64.c | 19 ++- arch/x86/entry/syscall_x32.c | 10 +- arch/x86/events/amd/core.c | 4 +- arch/x86/events/amd/lbr.c | 16 ++- arch/x86/include/asm/asm-prototypes.h | 1 + arch/x86/include/asm/coco.h | 2 + arch/x86/include/asm/cpufeature.h | 8 +- arch/x86/include/asm/cpufeatures.h | 15 ++- arch/x86/include/asm/disabled-features.h | 3 +- arch/x86/include/asm/msr-index.h | 9 +- arch/x86/include/asm/nospec-branch.h | 37 +++++- arch/x86/include/asm/required-features.h | 3 +- arch/x86/include/asm/syscall.h | 11 +- arch/x86/kernel/cpu/bugs.c | 121 +++++++++++++++++-- arch/x86/kernel/cpu/common.c | 24 ++-- arch/x86/kernel/cpu/mce/core.c | 4 +- arch/x86/kernel/cpu/scattered.c | 2 + arch/x86/kernel/setup.c | 2 + arch/x86/kvm/reverse_cpuid.h | 5 +- arch/x86/kvm/svm/sev.c | 60 ++++++---- arch/x86/kvm/trace.h | 10 +- arch/x86/kvm/vmx/vmenter.S | 2 + arch/x86/kvm/x86.c | 2 +- arch/x86/lib/retpoline.S | 6 +- arch/x86/mm/ident_map.c | 23 +--- arch/x86/mm/pat/memtype.c | 49 +++++--- drivers/acpi/acpica/dbnames.c | 8 +- drivers/ata/sata_mv.c | 63 +++++----- drivers/ata/sata_sx4.c | 6 +- drivers/base/core.c | 26 +++- drivers/bluetooth/btqca.c | 8 +- drivers/bluetooth/hci_qca.c | 19 ++- drivers/dma-buf/st-dma-fence-chain.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 38 ++++++ drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 10 +- drivers/gpu/drm/amd/include/amd_shared.h | 1 + drivers/gpu/drm/panfrost/panfrost_gpu.c | 6 +- drivers/md/dm-integrity.c | 2 +- drivers/net/ethernet/freescale/fec_main.c | 11 +- .../hns3/hns3_common/hclge_comm_tqp_stats.c | 2 +- drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.c | 19 ++- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 4 + drivers/net/ethernet/intel/i40e/i40e.h | 6 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 14 ++- drivers/net/ethernet/intel/i40e/i40e_ptp.c | 6 +- drivers/net/ethernet/intel/i40e/i40e_register.h | 3 + drivers/net/ethernet/intel/i40e/i40e_txrx.c | 82 +++++++++---- drivers/net/ethernet/intel/i40e/i40e_txrx.h | 5 +- drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 45 ++++--- drivers/net/ethernet/intel/ixgbe/ixgbe_ipsec.c | 16 +-- drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 5 + .../net/ethernet/marvell/octeontx2/af/rvu_cgx.c | 2 + .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 2 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 2 +- .../ethernet/mellanox/mlxbf_gige/mlxbf_gige_main.c | 31 +++-- drivers/net/ethernet/microchip/lan743x_main.c | 18 +++ drivers/net/ethernet/microchip/lan743x_main.h | 4 + drivers/net/ethernet/realtek/r8169_main.c | 131 +++++++++++++++++---- drivers/net/ethernet/renesas/ravb_main.c | 33 +++--- drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c | 40 +++++-- .../net/ethernet/stmicro/stmmac/dwxgmac2_core.c | 38 ++++-- drivers/net/phy/micrel.c | 31 +++-- drivers/net/usb/asix_devices.c | 4 +- drivers/net/usb/ax88179_178a.c | 2 + drivers/net/wireless/intel/iwlwifi/mvm/rfi.c | 8 +- drivers/net/wwan/t7xx/t7xx_cldma.c | 4 +- drivers/net/wwan/t7xx/t7xx_hif_cldma.c | 9 +- drivers/net/wwan/t7xx/t7xx_pcie_mac.c | 8 +- drivers/net/xen-netfront.c | 1 + drivers/nvme/host/core.c | 4 +- drivers/nvme/host/ioctl.c | 3 +- drivers/nvme/host/nvme.h | 2 +- drivers/nvme/target/passthru.c | 3 +- drivers/of/dynamic.c | 12 ++ drivers/perf/riscv_pmu.c | 4 + drivers/s390/net/qeth_core_main.c | 38 +++++- drivers/scsi/myrb.c | 20 ++-- drivers/scsi/myrs.c | 24 ++-- drivers/scsi/sd.c | 2 +- fs/nfsd/nfs4state.c | 7 +- fs/pipe.c | 17 ++- fs/smb/client/cached_dir.c | 6 +- fs/smb/client/cifs_debug.c | 6 + fs/smb/client/cifsfs.c | 11 ++ fs/smb/client/cifsglob.h | 17 ++- fs/smb/client/connect.c | 2 + fs/smb/client/dir.c | 15 +++ fs/smb/client/file.c | 111 ++++++++++++++--- fs/smb/client/fscache.c | 16 ++- fs/smb/client/fscache.h | 6 + fs/smb/client/inode.c | 2 + fs/smb/client/misc.c | 2 + fs/smb/client/smb1ops.c | 4 +- fs/smb/client/smb2misc.c | 4 + fs/smb/client/smb2ops.c | 11 +- fs/smb/client/smb2pdu.c | 2 +- fs/smb/server/ksmbd_netlink.h | 3 +- fs/smb/server/mgmt/share_config.c | 7 +- fs/smb/server/smb2ops.c | 10 +- fs/smb/server/smb2pdu.c | 3 +- fs/smb/server/transport_ipc.c | 37 ++++++ fs/vboxsf/super.c | 3 +- include/kvm/arm_pmu.h | 2 +- include/linux/device.h | 1 + include/linux/secretmem.h | 4 +- include/linux/skbuff.h | 7 +- include/linux/udp.h | 28 +++++ include/net/bluetooth/hci.h | 9 ++ include/net/inet_connection_sock.h | 1 + include/net/sock.h | 7 ++ kernel/bpf/verifier.c | 5 + mm/memory.c | 4 + net/9p/client.c | 10 +- net/bluetooth/hci_debugfs.c | 64 ++++++---- net/bluetooth/hci_event.c | 25 ++++ net/bluetooth/hci_sync.c | 5 +- net/bridge/netfilter/ebtables.c | 6 + net/core/gro.c | 3 +- net/core/sock_map.c | 6 + net/ipv4/inet_connection_sock.c | 33 ++++-- net/ipv4/inet_fragment.c | 70 +++++++++-- net/ipv4/ip_fragment.c | 2 +- net/ipv4/ip_gre.c | 5 + net/ipv4/netfilter/arp_tables.c | 4 + net/ipv4/netfilter/ip_tables.c | 4 + net/ipv4/tcp.c | 2 + net/ipv4/udp.c | 7 ++ net/ipv4/udp_offload.c | 23 ++-- net/ipv6/ip6_fib.c | 14 +-- net/ipv6/ip6_gre.c | 3 + net/ipv6/netfilter/ip6_tables.c | 4 + net/ipv6/netfilter/nf_conntrack_reasm.c | 2 +- net/ipv6/udp.c | 2 +- net/ipv6/udp_offload.c | 8 +- net/mptcp/protocol.c | 3 - net/mptcp/subflow.c | 2 + net/netfilter/nf_tables_api.c | 13 +- net/nfc/nci/core.c | 5 + net/rds/rdma.c | 2 +- net/sched/act_skbmod.c | 10 +- net/sched/sch_api.c | 2 +- net/tls/tls_sw.c | 7 +- net/vmw_vsock/virtio_transport.c | 3 +- scripts/bpf_doc.py | 4 +- sound/pci/hda/patch_realtek.c | 3 +- sound/soc/codecs/rt5682-sdw.c | 4 +- sound/soc/codecs/rt711-sdca-sdw.c | 4 +- sound/soc/codecs/rt711-sdw.c | 4 +- sound/soc/soc-ops.c | 2 +- tools/testing/selftests/net/mptcp/mptcp_connect.sh | 7 ++ tools/testing/selftests/net/mptcp/mptcp_join.sh | 7 +- tools/testing/selftests/net/reuseaddr_conflict.c | 2 +- tools/testing/selftests/net/udpgro_fwd.sh | 10 +- 167 files changed, 1799 insertions(+), 555 deletions(-)
