[PATCH 6.6 00/72] 6.6.74-rc1 review

From: Greg Kroah-Hartman
Date: Tue Jan 21 2025 - 12:54:41 EST


This is the start of the stable review cycle for the 6.6.74 release.
There are 72 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 23 Jan 2025 17:45:02 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.74-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.6.74-rc1

Wang Liang <wangliang74@xxxxxxxxxx>
net: fix data-races around sk->sk_forward_alloc

Juergen Gross <jgross@xxxxxxxx>
x86/xen: fix SLS mitigation in xen_hypercall_iret()

Youzhong Yang <youzhong@xxxxxxxxx>
nfsd: add list_head nf_gc to struct nfsd_file

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Revert "drm/amdgpu: rework resume handling for display (v2)"

Amir Goldstein <amir73il@xxxxxxxxx>
fs: relax assertions on failure to encode file handles

Amir Goldstein <amir73il@xxxxxxxxx>
ovl: support encoding fid from inode with no alias

Amir Goldstein <amir73il@xxxxxxxxx>
ovl: pass realinode to ovl_encode_real_fh() instead of realdentry

Mohammed Anees <pvmohammedanees2003@xxxxxxxxx>
ocfs2: fix deadlock in ocfs2_get_system_file_inode

Yu Kuai <yukuai3@xxxxxxxxxx>
block: fix uaf for flush rq while iterating tags

Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx>
drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'

Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@xxxxxxx>
iio: imu: inv_icm42600: fix spi burst write not supported

Terry Tritton <terry.tritton@xxxxxxxxxx>
Revert "PCI: Use preserve_config in place of pci_flags"

Christian König <christian.koenig@xxxxxxx>
drm/amdgpu: always sync the GFX pipe on ctx switch

Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx>
drm/i915/fb: Relax clear color alignment to 64 bytes

Koichiro Den <koichiro.den@xxxxxxxxxxxxx>
hrtimers: Handle CPU state correctly on hotplug

Tomas Krcka <krckatom@xxxxxxxxx>
irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()

Yogesh Lal <quic_ylal@xxxxxxxxxxx>
irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly

Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx>
irqchip: Plug a OF node reference leak in platform_irqchip_probe()

Xiaolei Wang <xiaolei.wang@xxxxxxxxxxxxx>
pmdomain: imx8mp-blk-ctrl: add missing loop break condition

Sean Anderson <sean.anderson@xxxxxxxxx>
gpio: xilinx: Convert gpio_lock to raw spinlock

Rik van Riel <riel@xxxxxxxxxxx>
fs/proc: fix softlockup in __read_vmcore (part 2)

Marco Nelissen <marco.nelissen@xxxxxxxxx>
filemap: avoid truncating 64-bit offset to 32 bits

Dave Airlie <airlied@xxxxxxxxxx>
nouveau/fence: handle cross device fences properly

Stefano Garzarella <sgarzare@xxxxxxxxxx>
vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]

Stefano Garzarella <sgarzare@xxxxxxxxxx>
vsock: reset socket state when de-assigning the transport

Stefano Garzarella <sgarzare@xxxxxxxxxx>
vsock/virtio: cancel close work in the destructor

Stefano Garzarella <sgarzare@xxxxxxxxxx>
vsock/virtio: discard packets if the transport changes

Stefano Garzarella <sgarzare@xxxxxxxxxx>
vsock/bpf: return early if transport is not assigned

Heiner Kallweit <hkallweit1@xxxxxxxxx>
net: ethernet: xgbe: re-add aneg to supported features in PHY quirks

Paolo Abeni <pabeni@xxxxxxxxxx>
selftests: mptcp: avoid spurious errors on disconnect

Paolo Abeni <pabeni@xxxxxxxxxx>
mptcp: fix spurious wake-up on under memory pressure

Paolo Abeni <pabeni@xxxxxxxxxx>
mptcp: be sure to send ack when mptcp-level window re-opens

Tomi Valkeinen <tomi.valkeinen+renesas@xxxxxxxxxxxxxxxx>
i2c: atr: Fix client detach

Kairui Song <kasong@xxxxxxxxxxx>
zram: fix potential UAF of zram table

Stefan Binding <sbinding@xxxxxxxxxxxxxxxxxxxxx>
ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA

Juergen Gross <jgross@xxxxxxxx>
x86/asm: Make serialize() always_inline

Luis Chamberlain <mcgrof@xxxxxxxxxx>
nvmet: propagate npwg topology

Hongguang Gao <hongguang.gao@xxxxxxxxxxxx>
RDMA/bnxt_re: Fix to export port num to ib_query_qp

Oleg Nesterov <oleg@xxxxxxxxxx>
poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll()

Marco Nelissen <marco.nelissen@xxxxxxxxx>
iomap: avoid avoid truncating 64-bit offset to 32 bits

Hans de Goede <hdegoede@xxxxxxxxxx>
ACPI: resource: acpi_dev_irq_override(): Check DMI match last

Jakub Kicinski <kuba@xxxxxxxxxx>
selftests: tc-testing: reduce rshift value

Manivannan Sadhasivam <mani@xxxxxxxxxx>
scsi: ufs: core: Honor runtime/system PM levels if set by host controller drivers

Max Kellermann <max.kellermann@xxxxxxxxx>
cachefiles: Parse the "secctx" immediately

David Howells <dhowells@xxxxxxxxxx>
kheaders: Ignore silly-rename files

Zhang Kunbo <zhangkunbo@xxxxxxxxxx>
fs: fix missing declaration of init_files

Leo Stone <leocstone@xxxxxxxxx>
hfs: Sanity check the root record

Lizhi Xu <lizhi.xu@xxxxxxxxxxxxx>
mac802154: check local interfaces before deleting sdata list

Paulo Alcantara <pc@xxxxxxxxxxxxx>
smb: client: fix double free of TCP_Server_Info::hostname

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: rcar: fix NACK handling when being a target

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
i2c: mux: demux-pinctrl: check initial mux selection, too

Pratyush Yadav <pratyush@xxxxxxxxxx>
Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"

David Lechner <dlechner@xxxxxxxxxxxx>
hwmon: (tmp513) Fix division of negative numbers

MD Danish Anwar <danishanwar@xxxxxx>
soc: ti: pruss: Fix pruss APIs

Maíra Canal <mcanal@xxxxxxxxxx>
drm/v3d: Ensure job pointer is set to NULL after job completion

Ian Forbes <ian.forbes@xxxxxxxxxxxx>
drm/vmwgfx: Add new keep_resv BO param

Leon Romanovsky <leon@xxxxxxxxxx>
net/mlx5e: Always start IPsec sequence number from 1

Leon Romanovsky <leon@xxxxxxxxxx>
net/mlx5e: Rely on reqid in IPsec tunnel mode

Leon Romanovsky <leon@xxxxxxxxxx>
net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel

Mark Zhang <markzhang@xxxxxxxxxx>
net/mlx5: Clear port select structure when fail to create

Patrisious Haddad <phaddad@xxxxxxxxxx>
net/mlx5: Fix RDMA TX steering prio

Kevin Groeneveld <kgroeneveld@xxxxxxxxxxxx>
net: fec: handle page_pool_dev_alloc_pages error

Sean Anderson <sean.anderson@xxxxxxxxx>
net: xilinx: axienet: Fix IRQ coalescing packet count overflow

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
nfp: bpf: prevent integer overflow in nfp_bpf_event_output()

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
gtp: Destroy device along with udp socket's netns dismantle.

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().

Eric Dumazet <edumazet@xxxxxxxxxx>
gtp: use exit_batch_rtnl() method

Eric Dumazet <edumazet@xxxxxxxxxx>
net: add exit_batch_rtnl() method

Artem Chernyshev <artem.chernyshev@xxxxxxxxxxx>
pktgen: Avoid out-of-bounds access in get_imix_entries

Ilya Maximets <i.maximets@xxxxxxx>
openvswitch: fix lockup on tx to unregistering netdev with carrier

Michal Luczaj <mhal@xxxxxxx>
bpf: Fix bpf_sk_select_reuseport() memory leak

Sudheer Kumar Doredla <s-doredla@xxxxxx>
net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()


-------------

Diffstat:

Makefile | 4 +-
arch/x86/include/asm/special_insns.h | 2 +-
arch/x86/xen/xen-asm.S | 2 +-
block/blk-sysfs.c | 6 +--
block/genhd.c | 9 ++--
drivers/acpi/resource.c | 6 +--
drivers/block/zram/zram_drv.c | 1 +
drivers/gpio/gpio-xilinx.c | 32 +++++++-------
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 45 +-------------------
drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c | 4 +-
.../gpu/drm/amd/display/dc/dcn21/dcn21_resource.c | 2 +-
drivers/gpu/drm/i915/display/intel_fb.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_fence.c | 6 ++-
drivers/gpu/drm/v3d/v3d_irq.c | 4 ++
drivers/gpu/drm/vmwgfx/vmwgfx_bo.c | 3 +-
drivers/gpu/drm/vmwgfx/vmwgfx_bo.h | 3 +-
drivers/gpu/drm/vmwgfx/vmwgfx_drv.c | 7 +---
drivers/gpu/drm/vmwgfx/vmwgfx_gem.c | 1 +
drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 7 +---
drivers/gpu/drm/vmwgfx/vmwgfx_ttm_buffer.c | 5 +--
drivers/hwmon/tmp513.c | 7 ++--
drivers/i2c/busses/i2c-rcar.c | 20 ++++++---
drivers/i2c/i2c-atr.c | 2 +-
drivers/i2c/muxes/i2c-demux-pinctrl.c | 4 +-
drivers/iio/imu/inv_icm42600/inv_icm42600.h | 1 +
drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 11 +++++
drivers/iio/imu/inv_icm42600/inv_icm42600_spi.c | 3 +-
drivers/infiniband/hw/bnxt_re/ib_verbs.c | 1 +
drivers/infiniband/hw/bnxt_re/ib_verbs.h | 4 ++
drivers/infiniband/hw/bnxt_re/qplib_fp.c | 1 +
drivers/infiniband/hw/bnxt_re/qplib_fp.h | 1 +
drivers/irqchip/irq-gic-v3-its.c | 2 +-
drivers/irqchip/irq-gic-v3.c | 2 +-
drivers/irqchip/irqchip.c | 4 +-
drivers/mtd/spi-nor/core.c | 2 +-
drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 19 +--------
drivers/net/ethernet/freescale/fec_main.c | 19 ++++++---
.../ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 22 +++++-----
.../mellanox/mlx5/core/en_accel/ipsec_fs.c | 12 +++---
.../mellanox/mlx5/core/en_accel/ipsec_offload.c | 11 +++--
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 1 +
.../net/ethernet/mellanox/mlx5/core/lag/port_sel.c | 4 +-
drivers/net/ethernet/netronome/nfp/bpf/offload.c | 3 +-
drivers/net/ethernet/ti/cpsw_ale.c | 14 +++----
drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 6 +++
drivers/net/gtp.c | 42 +++++++++++--------
drivers/nvme/target/io-cmd-bdev.c | 2 +-
drivers/pci/controller/pci-host-common.c | 4 ++
drivers/pci/probe.c | 20 +++++----
drivers/pmdomain/imx/imx8mp-blk-ctrl.c | 2 +-
drivers/ufs/core/ufshcd.c | 9 ++--
fs/cachefiles/daemon.c | 14 +++----
fs/cachefiles/internal.h | 3 +-
fs/cachefiles/security.c | 6 +--
fs/file.c | 1 +
fs/hfs/super.c | 4 +-
fs/iomap/buffered-io.c | 2 +-
fs/nfsd/filecache.c | 18 ++++----
fs/nfsd/filecache.h | 1 +
fs/notify/fdinfo.c | 4 +-
fs/ocfs2/extent_map.c | 8 +++-
fs/overlayfs/copy_up.c | 16 +++----
fs/overlayfs/export.c | 49 ++++++++++++----------
fs/overlayfs/namei.c | 4 +-
fs/overlayfs/overlayfs.h | 2 +-
fs/proc/vmcore.c | 2 +
fs/smb/client/connect.c | 3 +-
include/linux/hrtimer.h | 1 +
include/linux/poll.h | 10 ++++-
include/linux/pruss_driver.h | 12 +++---
include/net/net_namespace.h | 3 ++
kernel/cpu.c | 2 +-
kernel/gen_kheaders.sh | 1 +
kernel/time/hrtimer.c | 11 ++++-
mm/filemap.c | 2 +-
net/core/filter.c | 30 +++++++------
net/core/net_namespace.c | 31 +++++++++++++-
net/core/pktgen.c | 6 +--
net/dccp/ipv6.c | 2 +-
net/ipv6/tcp_ipv6.c | 4 +-
net/mac802154/iface.c | 4 ++
net/mptcp/options.c | 6 ++-
net/mptcp/protocol.h | 9 +++-
net/openvswitch/actions.c | 4 +-
net/vmw_vsock/af_vsock.c | 18 ++++++++
net/vmw_vsock/virtio_transport_common.c | 38 ++++++++++++-----
net/vmw_vsock/vsock_bpf.c | 9 ++++
sound/pci/hda/patch_realtek.c | 1 +
tools/testing/selftests/net/mptcp/mptcp_connect.c | 43 ++++++++++++++-----
.../tc-testing/tc-tests/filters/flow.json | 4 +-
90 files changed, 479 insertions(+), 315 deletions(-)