[PATCH 6.6 000/122] 6.6.41-rc2 review

From: Greg Kroah-Hartman
Date: Wed Jul 17 2024 - 02:40:28 EST

This is the start of the stable review cycle for the 6.6.41 release.
There are 122 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri, 19 Jul 2024 06:37:32 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.41-rc2.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.6.41-rc2

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
i2c: rcar: fix error code in probe()

Nathan Chancellor <nathan@xxxxxxxxxx>
kbuild: Make ld-version.sh more robust against version string changes

Alexandre Chartre <alexandre.chartre@xxxxxxxxxx>
x86/bhi: Avoid warning in #DB handler due to BHI mitigation

Brian Gerst <brgerst@xxxxxxxxx>
x86/entry/64: Remove obsolete comment on tracing vs. SYSRET

Nikolay Borisov <nik.borisov@xxxxxxxx>
x86/entry: Rename ignore_sysret()

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: rcar: clear NO_RXDMA flag after resetting

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: testunit: avoid re-issued work after read message

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: rcar: ensure Gen3+ reset does not disturb local targets

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: rcar: introduce Gen4 devices

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: rcar: reset controller is mandatory for Gen3+

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: mark HostNotify target address as used

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: rcar: bring hardware to known state when probing

Qu Wenruo <wqu@xxxxxxxx>
btrfs: tree-checker: add type and sequence check for inline backrefs

John Stultz <jstultz@xxxxxxxxxx>
sched: Move psi_account_irqtime() out of update_rq_clock_task() hotpath

Baokun Li <libaokun1@xxxxxxxxxx>
ext4: avoid ptr null pointer dereference

Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx>
nilfs2: fix kernel bug on rename operation of broken directory

John Hubbard <jhubbard@xxxxxxxxxx>
selftests/net: fix gro.c compilation failure due to non-existent opt_ipproto_off

SeongJae Park <sj@xxxxxxxxxx>
mm/damon/core: merge regions aggressively when max_nr_regions is unmet

Gavin Shan <gshan@xxxxxxxxxx>
mm/shmem: disable PMD-sized page cache if needed

Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx>
misc: fastrpc: Restrict untrusted app to attach to privileged PD

Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx>
misc: fastrpc: Fix ownership reassignment of remote heap

Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx>
misc: fastrpc: Fix memory leak in audio daemon attach operation

Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx>
misc: fastrpc: Copy the complete capability structure to user

Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx>
misc: fastrpc: Avoid updating PD type for capability request

Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx>
misc: fastrpc: Fix DSP capabilities request

Jason A. Donenfeld <Jason@xxxxxxxxx>
wireguard: send: annotate intentional data race in checking empty queue

Jason A. Donenfeld <Jason@xxxxxxxxx>
wireguard: queueing: annotate intentional data race in cpu round robin

Helge Deller <deller@xxxxxxxxxx>
wireguard: allowedips: avoid unaligned 64-bit memory accesses

Jason A. Donenfeld <Jason@xxxxxxxxx>
wireguard: selftests: use acpi=off instead of -no-acpi for recent QEMU

Mario Limonciello <mario.limonciello@xxxxxxx>
cpufreq: Allow drivers to advertise boost enabled

Mario Limonciello <mario.limonciello@xxxxxxx>
cpufreq: ACPI: Mark boost policy as enabled when setting boost

Kuan-Wei Chiu <visitorckw@xxxxxxxxx>
ACPI: processor_idle: Fix invalid comparison with insertion sort for latency

Ilya Dryomov <idryomov@xxxxxxxxx>
libceph: fix race between delayed_work() and ceph_monc_stop()

Taniya Das <quic_tdas@xxxxxxxxxxx>
pmdomain: qcom: rpmhpd: Skip retention level for Power Domains

Audra Mitchell <audra@xxxxxxxxxx>
Fix userfaultfd_api to return EINVAL as expected

Edson Juliano Drosdeck <edson.drosdeck@xxxxxxxxx>
ALSA: hda/realtek: Limit mic boost on VAIO PRO PX

Nazar Bilinskyi <nbilinskyi@xxxxxxxxx>
ALSA: hda/realtek: Enable Mute LED on HP 250 G7

Michał Kopeć <michal.kopec@xxxxxxxxx>
ALSA: hda/realtek: add quirk for Clevo V5[46]0TU

Jacky Huang <ychuang3@xxxxxxxxxxx>
tty: serial: ma35d1: Add a NULL check for of_node

Armin Wolf <W_Armin@xxxxxx>
platform/x86: toshiba_acpi: Fix array out-of-bounds access

Thomas Weißschuh <linux@xxxxxxxxxxxxxx>
nvmem: core: only change name to fram for current attribute

Joy Chakraborty <joychakr@xxxxxxxxxx>
nvmem: meson-efuse: Fix return value of nvmem callbacks

Joy Chakraborty <joychakr@xxxxxxxxxx>
nvmem: rmem: Fix return value of rmem_read()

Johan Hovold <johan+linaro@xxxxxxxxxx>
arm64: dts: qcom: sc8280xp-x13s: fix touchscreen power on

Cong Zhang <quic_congzhan@xxxxxxxxxxx>
arm64: dts: qcom: sa8775p: Correct IRQ number of EL2 non-secure physical timer

João Paulo Gonçalves <joao.goncalves@xxxxxxxxxxx>
iio: trigger: Fix condition for own trigger

Hobin Woo <hobin.woo@xxxxxxxxxxx>
ksmbd: discard write access to the directory open

Gavin Shan <gshan@xxxxxxxxxx>
mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

Gavin Shan <gshan@xxxxxxxxxx>
mm/filemap: skip to create PMD-sized page cache if needed

Uladzislau Rezki (Sony) <urezki@xxxxxxxxx>
mm: vmalloc: check if a hash-index is in cpu_possible_mask

Heiko Carstens <hca@xxxxxxxxxxxxx>
s390/mm: Add NULL pointer check to crst_table_free() base_crst_free()

Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx>
xhci: always resume roothubs if xHC was reset during resume

He Zhe <zhe.he@xxxxxxxxxxxxx>
hpet: Support 32-bit userspace

Joy Chakraborty <joychakr@xxxxxxxxxx>
misc: microchip: pci1xxxx: Fix return value of nvmem callbacks

Alan Stern <stern@xxxxxxxxxxxxxxxxxxx>
USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor

Lee Jones <lee@xxxxxxxxxx>
usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()

Heikki Krogerus <heikki.krogerus@xxxxxxxxxxxxxxx>
usb: dwc3: pci: add support for the Intel Panther Lake

WangYuli <wangyuli@xxxxxxxxxxxxx>
USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k

Dmitry Smirnov <d.smirnov@xxxxxxxx>
USB: serial: mos7840: fix crash on resume

Vanillan Wang <vanillanwang@xxxxxxx>
USB: serial: option: add Rolling RW350-GL variants

Mank Wang <mank.wang@xxxxxxxxxxxx>
USB: serial: option: add Netprisma LCUK54 series modules

Slark Xiao <slark_xiao@xxxxxxx>
USB: serial: option: add support for Foxconn T99W651

Bjørn Mork <bjorn@xxxxxxx>
USB: serial: option: add Fibocom FM350-GL

Daniele Palmas <dnlplm@xxxxxxxxx>
USB: serial: option: add Telit FN912 rmnet compositions

Daniele Palmas <dnlplm@xxxxxxxxx>
USB: serial: option: add Telit generic core-dump composition

Ronald Wahl <ronald.wahl@xxxxxxxxxxx>
net: ks8851: Fix potential TX stall after interface reopen

Ronald Wahl <ronald.wahl@xxxxxxxxxxx>
net: ks8851: Fix deadlock with the SPI chip variant

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: avoid too many retransmit packets

Eric Dumazet <edumazet@xxxxxxxxxx>
tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()

Josh Don <joshdon@xxxxxxxxxx>
Revert "sched/fair: Make sure to try to detach at least one movable task"

Steve French <stfrench@xxxxxxxxxxxxx>
cifs: fix setting SecurityFlags to true

Satheesh Paul <psatheesh@xxxxxxxxxxx>
octeontx2-af: fix issue with IPv4 match for RSS

Kiran Kumar K <kirankumark@xxxxxxxxxxx>
octeontx2-af: fix issue with IPv6 ext match for RSS

Michal Mazur <mmazur2@xxxxxxxxxxx>
octeontx2-af: fix detection of IP layer

Srujana Challa <schalla@xxxxxxxxxxx>
octeontx2-af: fix a issue with cpt_lf_alloc mailbox

Nithin Dabilpuram <ndabilpuram@xxxxxxxxxxx>
octeontx2-af: replace cpt slot with lf id on reg write

Aleksandr Loktionov <aleksandr.loktionov@xxxxxxxxx>
i40e: fix: remove needless retries of NVM update

Chen Ni <nichen@xxxxxxxxxxx>
ARM: davinci: Convert comma to semicolon

Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files

Kai Vehmanen <kai.vehmanen@xxxxxxxxxxxxxxx>
ASoC: SOF: Intel: hda: fix null deref on system suspend entry

Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers

Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
firmware: cs_dsp: Validate payload length before processing block

Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
firmware: cs_dsp: Return error if block header overflows file

Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx>
firmware: cs_dsp: Fix overflow checking of wmfw header

Bjorn Andersson <quic_bjorande@xxxxxxxxxxx>
arm64: dts: qcom: sc8180x: Fix LLCC reg property again

Sven Schnelle <svens@xxxxxxxxxxxxx>
s390: Mark psw in __load_psw_mask() as __unitialized

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket

Chengen Du <chengen.du@xxxxxxxxxxxxx>
net/sched: Fix UAF when resolving a clash

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().

Oleksij Rempel <o.rempel@xxxxxxxxxxxxxx>
ethtool: netlink: do not return SQI value if link is down

Dmitry Antipov <dmantipov@xxxxxxxxx>
ppp: reject claimed-as-LCP but actually malformed packets

Jian Hui Lee <jianhui.lee@xxxxxxxxxxxxx>
net: ethernet: mtk-star-emac: set mac_managed_pm when probing

Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx>
bpf: Fail bpf_timer_cancel when callback is being cancelled

Benjamin Tissoires <bentiss@xxxxxxxxxx>
bpf: replace bpf_timer_init with a generic helper

Benjamin Tissoires <bentiss@xxxxxxxxxx>
bpf: make timer data struct more generic

Mohammad Shehar Yaar Tausif <sheharyaar48@xxxxxxxxx>
bpf: fix order of args in call to bpf_map_kvcalloc

Aleksander Jan Bajkowski <olek2@xxxxx>
net: ethernet: lantiq_etop: fix double free in detach

Michal Kubiak <michal.kubiak@xxxxxxxxx>
i40e: Fix XDP program unloading while removing the driver

Hugh Dickins <hughd@xxxxxxxxxx>
net: fix rc7's __skb_datagram_iter()

Aleksandr Mishin <amishin@xxxxxxxxxx>
octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability()

Geliang Tang <tanggeliang@xxxxxxxxxx>
skmsg: Skip zero length skb in sk_msg_recvmsg

Oleksij Rempel <o.rempel@xxxxxxxxxxxxxx>
net: phy: microchip: lan87xx: reinit PHY after cable test

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
bpf: Fix too early release of tcx_entry

Neal Cardwell <ncardwell@xxxxxxxxxx>
tcp: fix incorrect undo caused by DSACK of TLP retransmit

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
net: bcmasp: Fix error code in probe()

Brian Foster <bfoster@xxxxxxxxxx>
vfs: don't mod negative dentry count when on shrinker list

linke li <lilinke99@xxxxxx>
fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading

Jeff Layton <jlayton@xxxxxxxxxx>
filelock: fix potential use-after-free in posix_lock_inode

Christian Eggers <ceggers@xxxxxxx>
dsa: lan9303: Fix mapping between DSA port number and PHY address

Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx>
net: dsa: introduce dsa_phylink_to_port()

Jingbo Xu <jefflexu@xxxxxxxxxxxxxxxxx>
cachefiles: add missing lock protection when polling

Baokun Li <libaokun1@xxxxxxxxxx>
cachefiles: cyclic allocation of msg_id to avoid reuse

Hou Tao <houtao1@xxxxxxxxxx>
cachefiles: wait for ondemand_object_worker to finish when dropping object

Baokun Li <libaokun1@xxxxxxxxxx>
cachefiles: cancel all requests for the object that is being dropped

Baokun Li <libaokun1@xxxxxxxxxx>
cachefiles: stop sending new request when dropping object

Jia Zhu <zhujia.zj@xxxxxxxxxxxxx>
cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode

Baokun Li <libaokun1@xxxxxxxxxx>
cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop

Yi Liu <yi.l.liu@xxxxxxxxx>
vfio/pci: Init the count variable in collecting hot-reset devices

Peter Wang <peter.wang@xxxxxxxxxxxx>
scsi: ufs: core: Fix ufshcd_abort_one racing issue

Peter Wang <peter.wang@xxxxxxxxxxxx>
scsi: ufs: core: Fix ufshcd_clear_cmd racing issue

Waiman Long <longman@xxxxxxxxxx>
mm: prevent derefencing NULL ptr in pfn_section_valid()

Heiko Carstens <hca@xxxxxxxxxxxxx>
Compiler Attributes: Add __uninitialized macro


-------------

Diffstat:

Documentation/admin-guide/cifs/usage.rst | 34 +--
Makefile | 4 +-
arch/arm/mach-davinci/pm.c | 2 +-
arch/arm64/boot/dts/qcom/sa8775p.dtsi | 2 +-
arch/arm64/boot/dts/qcom/sc8180x.dtsi | 11 +-
.../dts/qcom/sc8280xp-lenovo-thinkpad-x13s.dts | 15 +-
arch/s390/include/asm/processor.h | 2 +-
arch/s390/mm/pgalloc.c | 4 +
arch/x86/entry/entry_64.S | 23 +-
arch/x86/entry/entry_64_compat.S | 14 +-
arch/x86/include/asm/processor.h | 2 +-
arch/x86/kernel/cpu/common.c | 2 +-
drivers/acpi/processor_idle.c | 37 ++--
drivers/char/hpet.c | 34 ++-
drivers/cpufreq/acpi-cpufreq.c | 4 +-
drivers/cpufreq/cpufreq.c | 3 +-
drivers/firmware/cirrus/cs_dsp.c | 231 +++++++++++++++------
drivers/i2c/busses/i2c-rcar.c | 67 +++---
drivers/i2c/i2c-core-base.c | 1 +
drivers/i2c/i2c-slave-testunit.c | 7 +
drivers/iio/industrialio-trigger.c | 2 +-
drivers/misc/fastrpc.c | 41 +++-
drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_otpe2p.c | 4 -
drivers/net/dsa/lan9303-core.c | 23 +-
drivers/net/ethernet/broadcom/asp2/bcmasp.c | 1 +
drivers/net/ethernet/intel/i40e/i40e_adminq.h | 4 -
drivers/net/ethernet/intel/i40e/i40e_main.c | 9 +-
drivers/net/ethernet/lantiq_etop.c | 4 +-
drivers/net/ethernet/marvell/octeontx2/af/mbox.h | 2 +-
drivers/net/ethernet/marvell/octeontx2/af/npc.h | 8 +-
drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 2 +-
.../net/ethernet/marvell/octeontx2/af/rvu_cpt.c | 23 +-
.../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 12 +-
drivers/net/ethernet/mediatek/mtk_star_emac.c | 7 +
drivers/net/ethernet/micrel/ks8851_common.c | 10 +-
drivers/net/ethernet/micrel/ks8851_spi.c | 4 +-
drivers/net/phy/microchip_t1.c | 2 +-
drivers/net/ppp/ppp_generic.c | 15 ++
drivers/net/wireguard/allowedips.c | 4 +-
drivers/net/wireguard/queueing.h | 4 +-
drivers/net/wireguard/send.c | 2 +-
drivers/nvmem/core.c | 5 +-
drivers/nvmem/meson-efuse.c | 14 +-
drivers/nvmem/rmem.c | 5 +-
drivers/platform/x86/toshiba_acpi.c | 1 +
drivers/pmdomain/qcom/rpmhpd.c | 7 +
drivers/tty/serial/ma35d1_serial.c | 13 +-
drivers/ufs/core/ufs-mcq.c | 11 +-
drivers/ufs/core/ufshcd.c | 2 +
drivers/usb/core/config.c | 18 +-
drivers/usb/core/quirks.c | 3 +
drivers/usb/dwc3/dwc3-pci.c | 8 +
drivers/usb/gadget/configfs.c | 3 +
drivers/usb/host/xhci.c | 16 +-
drivers/usb/serial/mos7840.c | 45 ++++
drivers/usb/serial/option.c | 38 ++++
drivers/vfio/pci/vfio_pci_core.c | 2 +-
fs/btrfs/tree-checker.c | 39 ++++
fs/cachefiles/daemon.c | 14 +-
fs/cachefiles/internal.h | 15 ++
fs/cachefiles/ondemand.c | 52 ++++-
fs/cachefiles/xattr.c | 5 +-
fs/dcache.c | 12 +-
fs/ext4/sysfs.c | 2 +
fs/locks.c | 2 +-
fs/nilfs2/dir.c | 32 ++-
fs/smb/client/cifsglob.h | 4 +-
fs/smb/server/smb2pdu.c | 13 +-
fs/userfaultfd.c | 7 +-
include/linux/compiler_attributes.h | 12 ++
include/linux/mmzone.h | 3 +-
include/linux/pagemap.h | 11 +-
include/net/dsa.h | 6 +
include/net/tcx.h | 13 +-
include/uapi/misc/fastrpc.h | 3 +
kernel/bpf/bpf_local_storage.c | 4 +-
kernel/bpf/helpers.c | 186 ++++++++++++-----
kernel/sched/core.c | 7 +-
kernel/sched/fair.c | 12 +-
kernel/sched/psi.c | 21 +-
kernel/sched/sched.h | 1 +
kernel/sched/stats.h | 11 +-
mm/damon/core.c | 21 +-
mm/filemap.c | 2 +-
mm/shmem.c | 15 +-
mm/vmalloc.c | 10 +-
net/ceph/mon_client.c | 14 +-
net/core/datagram.c | 3 +-
net/core/skmsg.c | 3 +-
net/dsa/port.c | 12 +-
net/ethtool/linkstate.c | 41 ++--
net/ipv4/tcp_input.c | 11 +-
net/ipv4/tcp_timer.c | 31 ++-
net/ipv4/udp.c | 4 +-
net/sched/act_ct.c | 8 +
net/sched/sch_ingress.c | 12 +-
net/sunrpc/xprtsock.c | 7 +
scripts/ld-version.sh | 8 +-
sound/pci/hda/patch_realtek.c | 4 +
sound/soc/sof/intel/hda-dai.c | 12 +-
tools/testing/selftests/net/gro.c | 3 -
tools/testing/selftests/wireguard/qemu/Makefile | 8 +-
102 files changed, 1147 insertions(+), 442 deletions(-)