This is the start of the stable review cycle for the 6.1.70 release. There are 112 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon, 01 Jan 2024 11:57:43 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.70-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.1.70-rc1 Léo Lam <leo@xxxxxxxxx> wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x) Johannes Berg <johannes.berg@xxxxxxxxx> wifi: cfg80211: fix CQM for non-range use Krister Johansen <kjlx@xxxxxxxxxxxxxxxxxx> fuse: share lookup state between submount and its parent SeongJae Park <sj@xxxxxxxxxx> mm/damon/core: make damon_start() waits until kdamond_fn() starts Thomas Gleixner <tglx@xxxxxxxxxxxxx> x86/alternatives: Sync core before enabling interrupts Marc Zyngier <maz@xxxxxxxxxx> KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy Marc Zyngier <maz@xxxxxxxxxx> KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy() Marc Zyngier <maz@xxxxxxxxxx> KVM: arm64: vgic: Simplify kvm_vgic_destroy() Yaxiong Tian <tianyaxiong@xxxxxxxxxx> thunderbolt: Fix memory leak in margining_port_remove() Herve Codina <herve.codina@xxxxxxxxxxx> lib/vsprintf: Fix %pfwf when current node refcount == 0 xiongxin <xiongxin@xxxxxxxxxx> gpio: dwapb: mask/unmask IRQ when disable/enale it Tony Lindgren <tony@xxxxxxxxxxx> bus: ti-sysc: Flush posted write only after srst_udelay Nam Cao <namcao@xxxxxxxxxxxxx> pinctrl: starfive: jh7100: ignore disabled device tree nodes Mikulas Patocka <mpatocka@xxxxxxxxxx> dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() Steven Rostedt (Google) <rostedt@xxxxxxxxxxx> tracing / synthetic: Disable events after testing in synth_event_gen_test_init() Alexander Atanasov <alexander.atanasov@xxxxxxxxxxxxx> scsi: core: Always send batch on reset or error handling command Martin K. Petersen <martin.petersen@xxxxxxxxxx> Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" Geliang Tang <geliang.tang@xxxxxxxxx> selftests: mptcp: join: fix subflow_send_ack lookup Ming Lei <ming.lei@xxxxxxxxxx> ublk: move ublk_cancel_dev() out of ub->mutex Konstantin Meskhidze <konstantin.meskhidze@xxxxxxxxxx> ubifs: fix possible dereference after free Naohiro Aota <naohiro.aota@xxxxxxx> btrfs: zoned: no longer count fresh BG region as zone unusable Aric Cyr <aric.cyr@xxxxxxx> Revert "drm/amd/display: Do not set DRR on pipe commit" Li Lingfeng <lilingfeng3@xxxxxxxxxx> dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client Mauricio Faria de Oliveira <mfo@xxxxxxxxxxxxx> loop: do not enforce max_loop hard limit by (new) default Heiko Stuebner <heiko.stuebner@xxxxxxxx> RISC-V: Fix do_notify_resume / do_work_pending prototype JP Kobryn <inwardvessel@xxxxxxxxx> 9p: prevent read overrun in protocol dump tracepoint Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/i915: Reject async flips with bigjoiner Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix OOB in smbCalcSize() Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix OOB in SMB2_query_info_init() Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix potential OOB in cifs_dump_detail() Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix OOB in cifsd when receiving compounded resps Fabio Estevam <festevam@xxxxxxx> dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp Ronald Wahl <ronald.wahl@xxxxxxxxxxx> net: ks8851: Fix TX stall caused by TX buffer overrun Rouven Czerwinski <r.czerwinski@xxxxxxxxxxxxxx> net: rfkill: gpio: set GPIO direction Fedor Pchelkin <pchelkin@xxxxxxxxx> net: 9p: avoid freeing uninit memory in p9pdu_vreadf Christoffer Sandberg <cs@xxxxxxxxx> Input: soc_button_array - add mapping for airplane mode button Jose Ignacio Tornos Martinez <jtornosm@xxxxxxxxxx> net: usb: ax88179_178a: avoid failed operations when device is disconnected Alex Lu <alex_lu@xxxxxxxxxxxxxx> Bluetooth: Add more enc key size check Xiao Yao <xiaoyao@xxxxxxxxxxxxxx> Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE Frédéric Danis <frederic.danis@xxxxxxxxxxxxx> Bluetooth: L2CAP: Send reject on command corrupted request Hyunwoo Kim <v4bel@xxxxxxxxx> Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent Clément Villeret <clement.villeret@xxxxxxxxx> ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA Reinhard Speyerer <rspmn@xxxxxxxx> USB: serial: option: add Quectel RM500Q R13 firmware support Slark Xiao <slark_xiao@xxxxxxx> USB: serial: option: add Foxconn T99W265 with new baseline Alper Ak <alperyasinak1@xxxxxxxxx> USB: serial: option: add Quectel EG912Y module support Mark Glover <mark.glover@xxxxxxxxxxxxx> USB: serial: ftdi_sio: update Actisense PIDs constant names Johannes Berg <johannes.berg@xxxxxxxxx> wifi: cfg80211: fix certs build to not depend on file order Chen-Yu Tsai <wens@xxxxxxxxxx> wifi: cfg80211: Add my certificate Tasos Sahanidis <tasos@xxxxxxxxxxxx> usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 Jeremie Knuesel <knuesel@xxxxxxxxx> ALSA: usb-audio: Increase delay in MOTU M quirk David Lechner <dlechner@xxxxxxxxxxxx> iio: triggered-buffer: prevent possible freeing of wrong buffer Wadim Egorov <w.egorov@xxxxxxxxx> iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table Wei Yongjun <weiyongjun1@xxxxxxxxxx> scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() Haoran Liu <liuhaoran14@xxxxxxx> Input: ipaq-micro-keys - add error handling for devm_kmemdup Konrad Dybcio <konrad.dybcio@xxxxxxxxxx> interconnect: qcom: sm8250: Enable sync_state Su Hui <suhui@xxxxxxxxxxxx> iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw Mike Tipton <quic_mdtipton@xxxxxxxxxxx> interconnect: Treat xlate() returning NULL node as an error Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original Clint Taylor <clinton.a.taylor@xxxxxxxxx> drm/i915/mtl: Add MTL for remapping CCS FBs Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/i915/dpt: Only do the POT stride remap when using DPT Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/i915: Fix intel_atomic_setup_scalers() plane_state handling Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/i915: Relocate intel_atomic_setup_scalers() Luca Coelho <luciano.coelho@xxxxxxxxx> drm/i915/mtl: limit second scaler vertical scaling in ver >= 14 Maurizio Lombardi <mlombard@xxxxxxxxxx> nvme-pci: fix sleeping function called from interrupt context Kent Gibson <warthog618@xxxxxxxxx> gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl() Alexis Lothoré <alexis.lothore@xxxxxxxxxxx> pinctrl: at91-pio4: use dedicated lock class for IRQ Arnd Bergmann <arnd@xxxxxxxx> x86/xen: add CPU dependencies for 32-bit build Quan Nguyen <quan@xxxxxxxxxxxxxxxxxxxxxx> i2c: aspeed: Handle the coalesced stop conditions with the start conditions. Shengjiu Wang <shengjiu.wang@xxxxxxx> ASoC: fsl_sai: Fix channel swap issue on i.MX8MP Jerome Brunet <jbrunet@xxxxxxxxxxxx> ASoC: hdmi-codec: fix missing report for jack initial status David Howells <dhowells@xxxxxxxxxx> afs: Fix use-after-free due to get/remove race in volume tree David Howells <dhowells@xxxxxxxxxx> afs: Fix overwriting of result of DNS query David Howells <dhowells@xxxxxxxxxx> keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry Eric Dumazet <edumazet@xxxxxxxxxx> net: check dev->gso_max_size in gso_features_check() David Howells <dhowells@xxxxxxxxxx> afs: Fix dynamic root lookup DNS check David Howells <dhowells@xxxxxxxxxx> afs: Fix the dynamic root's d_delete to always delete unused dentries Liu Jian <liujian56@xxxxxxxxxx> net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() Yury Norov <yury.norov@xxxxxxxxx> net: mana: select PAGE_POOL Arnd Bergmann <arnd@xxxxxxxx> Bluetooth: hci_event: shut up a false-positive warning Ying Hsu <yinghsu@xxxxxxxxxxxx> Bluetooth: Fix deadlock in vhci_send_frame Eric Dumazet <edumazet@xxxxxxxxxx> net/rose: fix races in rose_kill_by_device() Zhipeng Lu <alexious@xxxxxxxxxx> ethernet: atheros: fix a memleak in atl1e_setup_ring_resources Eric Dumazet <edumazet@xxxxxxxxxx> net: sched: ife: fix potential use-after-free Shigeru Yoshida <syoshida@xxxxxxxxxx> net: Return error from sk_stream_wait_connect() if sk_wait_event() fails Suman Ghosh <sumang@xxxxxxxxxxx> octeontx2-pf: Fix graceful exit during PFC configuration failure Vladimir Oltean <vladimir.oltean@xxxxxxx> net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above Rahul Rameshbabu <rrameshbabu@xxxxxxxxxx> net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors Rahul Rameshbabu <rrameshbabu@xxxxxxxxxx> net/mlx5e: Correct snprintf truncation handling for fw_version buffer Moshe Shemesh <moshe@xxxxxxxxxx> net/mlx5: Fix fw tracer first block check Dinghao Liu <dinghao.liu@xxxxxxxxxx> net/mlx5e: fix a potential double-free in fs_udp_create_groups Shifeng Li <lishifeng@xxxxxxxxxxxxxx> net/mlx5e: Fix a race in command alloc flow Shay Drory <shayd@xxxxxxxxxx> net/mlx5: Re-organize mlx5_cmd struct Tariq Toukan <tariqt@xxxxxxxxxx> net/mlx5: Prevent high-rate FW commands from populating all slots Tariq Toukan <tariqt@xxxxxxxxxx> net/mlx5: Introduce and use opcode getter in command interface Shifeng Li <lishifeng@xxxxxxxxxxxxxx> net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() Vlad Buslov <vladbu@xxxxxxxxxx> Revert "net/mlx5e: fix double free of encap_header" Vlad Buslov <vladbu@xxxxxxxxxx> Revert "net/mlx5e: fix double free of encap_header in update funcs" Johannes Berg <johannes.berg@xxxxxxxxx> wifi: mac80211: mesh_plink: fix matches_local logic Johannes Berg <johannes.berg@xxxxxxxxx> wifi: mac80211: mesh: check element parsing succeeded Edward Adam Davis <eadavis@xxxxxx> wifi: mac80211: check if the existing link config remains unchanged Johannes Berg <johannes.berg@xxxxxxxxx> wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock Heiko Carstens <hca@xxxxxxxxxxxxx> s390/vx: fix save/restore of fpu kernel context Geert Uytterhoeven <geert+renesas@xxxxxxxxx> reset: Fix crash when freeing non-existent optional resets Kunwu Chan <chentao@xxxxxxxxxx> ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init Andrew Davis <afd@xxxxxx> ARM: dts: dra7: Fix DRA7 L3 NoC node register size Hamza Mahfooz <hamza.mahfooz@xxxxxxx> drm/amd/display: fix hw rotated modes when PSR-SU is enabled Mario Limonciello <mario.limonciello@xxxxxxx> HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[] Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx> HID: i2c-hid: acpi: Unify ACPI ID tables format Jiri Olsa <jolsa@xxxxxxxxxx> bpf: Fix prog_array_map_poke_run map poke update Arnd Bergmann <arnd@xxxxxxxx> kasan: disable kasan_non_canonical_hook() for HW tags ------------- Diffstat: .../devicetree/bindings/nvmem/mxs-ocotp.yaml | 10 +- Makefile | 4 +- arch/arm/boot/dts/dra7.dtsi | 2 +- arch/arm/mach-omap2/id.c | 5 + arch/arm64/kvm/arm.c | 2 +- arch/arm64/kvm/vgic/vgic-init.c | 47 ++-- arch/arm64/kvm/vgic/vgic-mmio-v3.c | 2 +- arch/arm64/kvm/vgic/vgic.h | 1 + arch/riscv/include/asm/signal.h | 2 +- arch/s390/include/asm/fpu/api.h | 2 +- arch/x86/kernel/alternative.c | 2 +- arch/x86/net/bpf_jit_comp.c | 46 ++++ arch/x86/xen/Kconfig | 1 + drivers/block/loop.c | 36 ++- drivers/block/ublk_drv.c | 40 ++-- drivers/bluetooth/hci_vhci.c | 10 +- drivers/bus/ti-sysc.c | 18 +- drivers/gpio/gpio-dwapb.c | 12 +- drivers/gpio/gpiolib-cdev.c | 16 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 + drivers/gpu/drm/amd/display/dc/dc_hw_types.h | 1 + .../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 3 +- drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hubp.c | 12 +- drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3 + drivers/gpu/drm/i915/display/intel_atomic.c | 193 +--------------- drivers/gpu/drm/i915/display/intel_atomic.h | 4 - drivers/gpu/drm/i915/display/intel_display.c | 11 + drivers/gpu/drm/i915/display/intel_fb.c | 10 +- drivers/gpu/drm/i915/display/skl_scaler.c | 257 +++++++++++++++++++++ drivers/gpu/drm/i915/display/skl_scaler.h | 10 +- drivers/hid/i2c-hid/i2c-hid-acpi.c | 15 +- drivers/i2c/busses/i2c-aspeed.c | 48 ++-- drivers/iio/adc/ti_am335x_adc.c | 4 +- drivers/iio/buffer/industrialio-triggered-buffer.c | 10 + drivers/iio/common/ms_sensors/ms_sensors_i2c.c | 4 +- drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 4 +- drivers/input/keyboard/ipaq-micro-keys.c | 3 + drivers/input/misc/soc_button_array.c | 5 + drivers/interconnect/core.c | 3 + drivers/interconnect/qcom/sm8250.c | 1 + drivers/md/dm-bufio.c | 7 + drivers/md/dm-integrity.c | 11 +- drivers/md/dm-thin-metadata.c | 58 ++--- drivers/md/persistent-data/dm-block-manager.c | 6 + drivers/md/persistent-data/dm-block-manager.h | 1 + drivers/md/persistent-data/dm-space-map.h | 3 +- .../md/persistent-data/dm-transaction-manager.c | 3 + drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 5 +- .../ethernet/marvell/octeontx2/nic/otx2_dcbnl.c | 17 +- drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 216 +++++++++-------- drivers/net/ethernet/mellanox/mlx5/core/debugfs.c | 4 +- .../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 2 +- .../mellanox/mlx5/core/en/fs_tt_redirect.c | 1 + .../net/ethernet/mellanox/mlx5/core/en/tc_tun.c | 30 +-- .../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/vport.c | 2 +- drivers/net/ethernet/micrel/ks8851.h | 3 + drivers/net/ethernet/micrel/ks8851_common.c | 20 +- drivers/net/ethernet/micrel/ks8851_spi.c | 42 ++-- drivers/net/ethernet/microsoft/Kconfig | 1 + drivers/net/ethernet/mscc/ocelot_stats.c | 8 +- drivers/net/usb/ax88179_178a.c | 23 +- drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 4 +- drivers/nvme/host/core.c | 3 +- drivers/pinctrl/pinctrl-at91-pio4.c | 8 + drivers/pinctrl/starfive/pinctrl-starfive-jh7100.c | 4 +- drivers/reset/core.c | 8 +- drivers/scsi/aacraid/aacraid.h | 1 - drivers/scsi/aacraid/commsup.c | 6 +- drivers/scsi/aacraid/linit.c | 14 -- drivers/scsi/aacraid/src.c | 25 +- drivers/scsi/bnx2fc/bnx2fc_fcoe.c | 9 +- drivers/scsi/scsi_error.c | 2 + drivers/thunderbolt/debugfs.c | 2 +- drivers/usb/serial/ftdi_sio.c | 6 +- drivers/usb/serial/ftdi_sio_ids.h | 6 +- drivers/usb/serial/option.c | 5 + drivers/usb/storage/unusual_devs.h | 11 + fs/afs/cell.c | 6 +- fs/afs/dynroot.c | 31 +-- fs/afs/internal.h | 2 + fs/afs/volume.c | 26 ++- fs/btrfs/free-space-cache.c | 8 +- fs/btrfs/zoned.c | 26 +-- fs/fuse/fuse_i.h | 15 ++ fs/fuse/inode.c | 75 +++++- fs/smb/client/cifs_debug.c | 12 +- fs/smb/client/cifsglob.h | 3 +- fs/smb/client/connect.c | 7 +- fs/smb/client/misc.c | 4 + fs/smb/client/smb2ops.c | 19 +- fs/smb/client/smb2pdu.c | 29 ++- fs/ubifs/tnc.c | 1 + include/linux/bpf.h | 3 + include/linux/damon.h | 3 + include/linux/dm-bufio.h | 2 + include/linux/kasan.h | 6 +- include/linux/key-type.h | 1 + include/linux/mlx5/driver.h | 20 +- include/net/bluetooth/hci_core.h | 5 + include/trace/events/9p.h | 11 +- kernel/bpf/arraymap.c | 58 +---- kernel/trace/synth_event_gen_test.c | 11 + lib/vsprintf.c | 11 +- mm/damon/core.c | 7 + mm/kasan/report.c | 4 +- net/8021q/vlan_core.c | 9 +- net/9p/protocol.c | 17 +- net/bluetooth/af_bluetooth.c | 7 +- net/bluetooth/hci_event.c | 22 +- net/bluetooth/l2cap_core.c | 21 +- net/bluetooth/mgmt.c | 25 +- net/bluetooth/smp.c | 7 + net/core/dev.c | 3 + net/core/stream.c | 2 +- net/dns_resolver/dns_key.c | 10 +- net/ife/ife.c | 1 + net/mac80211/cfg.c | 4 +- net/mac80211/mesh_plink.c | 16 +- net/rfkill/rfkill-gpio.c | 8 + net/rose/af_rose.c | 39 +++- net/wireless/certs/wens.hex | 87 +++++++ net/wireless/core.h | 1 + net/wireless/nl80211.c | 56 +++-- security/keys/gc.c | 31 ++- security/keys/internal.h | 11 +- security/keys/key.c | 15 +- security/keys/proc.c | 2 +- sound/pci/hda/patch_realtek.c | 1 + sound/soc/codecs/hdmi-codec.c | 12 +- sound/soc/fsl/fsl_sai.c | 3 + sound/usb/quirks.c | 4 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 8 +- 134 files changed, 1494 insertions(+), 777 deletions(-)
