This is the start of the stable review cycle for the 6.6.41 release. There are 121 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 18 Jul 2024 15:27:21 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.41-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.6.41-rc1 Dan Carpenter <dan.carpenter@xxxxxxxxxx> i2c: rcar: fix error code in probe() Nathan Chancellor <nathan@xxxxxxxxxx> kbuild: Make ld-version.sh more robust against version string changes Alexandre Chartre <alexandre.chartre@xxxxxxxxxx> x86/bhi: Avoid warning in #DB handler due to BHI mitigation Brian Gerst <brgerst@xxxxxxxxx> x86/entry/64: Remove obsolete comment on tracing vs. SYSRET Nikolay Borisov <nik.borisov@xxxxxxxx> x86/entry: Rename ignore_sysret() Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: rcar: clear NO_RXDMA flag after resetting Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: testunit: avoid re-issued work after read message Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: rcar: ensure Gen3+ reset does not disturb local targets Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: rcar: introduce Gen4 devices Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: rcar: reset controller is mandatory for Gen3+ Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: mark HostNotify target address as used Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: rcar: bring hardware to known state when probing Qu Wenruo <wqu@xxxxxxxx> btrfs: tree-checker: add type and sequence check for inline backrefs John Stultz <jstultz@xxxxxxxxxx> sched: Move psi_account_irqtime() out of update_rq_clock_task() hotpath Baokun Li <libaokun1@xxxxxxxxxx> ext4: avoid ptr null pointer dereference Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix kernel bug on rename operation of broken directory John Hubbard <jhubbard@xxxxxxxxxx> selftests/net: fix gro.c compilation failure due to non-existent opt_ipproto_off SeongJae Park <sj@xxxxxxxxxx> mm/damon/core: merge regions aggressively when max_nr_regions is unmet Gavin Shan <gshan@xxxxxxxxxx> mm/shmem: disable PMD-sized page cache if needed Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx> misc: fastrpc: Restrict untrusted app to attach to privileged PD Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx> misc: fastrpc: Fix ownership reassignment of remote heap Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx> misc: fastrpc: Fix memory leak in audio daemon attach operation Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx> misc: fastrpc: Copy the complete capability structure to user Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx> misc: fastrpc: Avoid updating PD type for capability request Ekansh Gupta <quic_ekangupt@xxxxxxxxxxx> misc: fastrpc: Fix DSP capabilities request Jason A. Donenfeld <Jason@xxxxxxxxx> wireguard: send: annotate intentional data race in checking empty queue Jason A. Donenfeld <Jason@xxxxxxxxx> wireguard: queueing: annotate intentional data race in cpu round robin Helge Deller <deller@xxxxxxxxxx> wireguard: allowedips: avoid unaligned 64-bit memory accesses Jason A. Donenfeld <Jason@xxxxxxxxx> wireguard: selftests: use acpi=off instead of -no-acpi for recent QEMU Mario Limonciello <mario.limonciello@xxxxxxx> cpufreq: Allow drivers to advertise boost enabled Mario Limonciello <mario.limonciello@xxxxxxx> cpufreq: ACPI: Mark boost policy as enabled when setting boost Kuan-Wei Chiu <visitorckw@xxxxxxxxx> ACPI: processor_idle: Fix invalid comparison with insertion sort for latency Ilya Dryomov <idryomov@xxxxxxxxx> libceph: fix race between delayed_work() and ceph_monc_stop() Taniya Das <quic_tdas@xxxxxxxxxxx> pmdomain: qcom: rpmhpd: Skip retention level for Power Domains Audra Mitchell <audra@xxxxxxxxxx> Fix userfaultfd_api to return EINVAL as expected Edson Juliano Drosdeck <edson.drosdeck@xxxxxxxxx> ALSA: hda/realtek: Limit mic boost on VAIO PRO PX Nazar Bilinskyi <nbilinskyi@xxxxxxxxx> ALSA: hda/realtek: Enable Mute LED on HP 250 G7 Michał Kopeć <michal.kopec@xxxxxxxxx> ALSA: hda/realtek: add quirk for Clevo V5[46]0TU Jacky Huang <ychuang3@xxxxxxxxxxx> tty: serial: ma35d1: Add a NULL check for of_node Armin Wolf <W_Armin@xxxxxx> platform/x86: toshiba_acpi: Fix array out-of-bounds access Thomas Weißschuh <linux@xxxxxxxxxxxxxx> nvmem: core: only change name to fram for current attribute Joy Chakraborty <joychakr@xxxxxxxxxx> nvmem: meson-efuse: Fix return value of nvmem callbacks Joy Chakraborty <joychakr@xxxxxxxxxx> nvmem: rmem: Fix return value of rmem_read() Johan Hovold <johan+linaro@xxxxxxxxxx> arm64: dts: qcom: sc8280xp-x13s: fix touchscreen power on Cong Zhang <quic_congzhan@xxxxxxxxxxx> arm64: dts: qcom: sa8775p: Correct IRQ number of EL2 non-secure physical timer João Paulo Gonçalves <joao.goncalves@xxxxxxxxxxx> iio: trigger: Fix condition for own trigger Hobin Woo <hobin.woo@xxxxxxxxxxx> ksmbd: discard write access to the directory open Gavin Shan <gshan@xxxxxxxxxx> mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray Gavin Shan <gshan@xxxxxxxxxx> mm/filemap: skip to create PMD-sized page cache if needed Uladzislau Rezki (Sony) <urezki@xxxxxxxxx> mm: vmalloc: check if a hash-index is in cpu_possible_mask Heiko Carstens <hca@xxxxxxxxxxxxx> s390/mm: Add NULL pointer check to crst_table_free() base_crst_free() Mathias Nyman <mathias.nyman@xxxxxxxxxxxxxxx> xhci: always resume roothubs if xHC was reset during resume He Zhe <zhe.he@xxxxxxxxxxxxx> hpet: Support 32-bit userspace Joy Chakraborty <joychakr@xxxxxxxxxx> misc: microchip: pci1xxxx: Fix return value of nvmem callbacks Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor Lee Jones <lee@xxxxxxxxxx> usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() Heikki Krogerus <heikki.krogerus@xxxxxxxxxxxxxxx> usb: dwc3: pci: add support for the Intel Panther Lake WangYuli <wangyuli@xxxxxxxxxxxxx> USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k Dmitry Smirnov <d.smirnov@xxxxxxxx> USB: serial: mos7840: fix crash on resume Vanillan Wang <vanillanwang@xxxxxxx> USB: serial: option: add Rolling RW350-GL variants Mank Wang <mank.wang@xxxxxxxxxxxx> USB: serial: option: add Netprisma LCUK54 series modules Slark Xiao <slark_xiao@xxxxxxx> USB: serial: option: add support for Foxconn T99W651 Bjørn Mork <bjorn@xxxxxxx> USB: serial: option: add Fibocom FM350-GL Daniele Palmas <dnlplm@xxxxxxxxx> USB: serial: option: add Telit FN912 rmnet compositions Daniele Palmas <dnlplm@xxxxxxxxx> USB: serial: option: add Telit generic core-dump composition Ronald Wahl <ronald.wahl@xxxxxxxxxxx> net: ks8851: Fix potential TX stall after interface reopen Ronald Wahl <ronald.wahl@xxxxxxxxxxx> net: ks8851: Fix deadlock with the SPI chip variant Eric Dumazet <edumazet@xxxxxxxxxx> tcp: avoid too many retransmit packets Eric Dumazet <edumazet@xxxxxxxxxx> tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() Josh Don <joshdon@xxxxxxxxxx> Revert "sched/fair: Make sure to try to detach at least one movable task" Steve French <stfrench@xxxxxxxxxxxxx> cifs: fix setting SecurityFlags to true Satheesh Paul <psatheesh@xxxxxxxxxxx> octeontx2-af: fix issue with IPv4 match for RSS Kiran Kumar K <kirankumark@xxxxxxxxxxx> octeontx2-af: fix issue with IPv6 ext match for RSS Michal Mazur <mmazur2@xxxxxxxxxxx> octeontx2-af: fix detection of IP layer Srujana Challa <schalla@xxxxxxxxxxx> octeontx2-af: fix a issue with cpt_lf_alloc mailbox Nithin Dabilpuram <ndabilpuram@xxxxxxxxxxx> octeontx2-af: replace cpt slot with lf id on reg write Aleksandr Loktionov <aleksandr.loktionov@xxxxxxxxx> i40e: fix: remove needless retries of NVM update Chen Ni <nichen@xxxxxxxxxxx> ARM: davinci: Convert comma to semicolon Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx> firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files Kai Vehmanen <kai.vehmanen@xxxxxxxxxxxxxxx> ASoC: SOF: Intel: hda: fix null deref on system suspend entry Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx> firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx> firmware: cs_dsp: Validate payload length before processing block Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx> firmware: cs_dsp: Return error if block header overflows file Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx> firmware: cs_dsp: Fix overflow checking of wmfw header Bjorn Andersson <quic_bjorande@xxxxxxxxxxx> arm64: dts: qcom: sc8180x: Fix LLCC reg property again Sven Schnelle <svens@xxxxxxxxxxxxx> s390: Mark psw in __load_psw_mask() as __unitialized Daniel Borkmann <daniel@xxxxxxxxxxxxx> net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket Chengen Du <chengen.du@xxxxxxxxxxxxx> net/sched: Fix UAF when resolving a clash Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). Oleksij Rempel <o.rempel@xxxxxxxxxxxxxx> ethtool: netlink: do not return SQI value if link is down Dmitry Antipov <dmantipov@xxxxxxxxx> ppp: reject claimed-as-LCP but actually malformed packets Jian Hui Lee <jianhui.lee@xxxxxxxxxxxxx> net: ethernet: mtk-star-emac: set mac_managed_pm when probing Kumar Kartikeya Dwivedi <memxor@xxxxxxxxx> bpf: Fail bpf_timer_cancel when callback is being cancelled Benjamin Tissoires <bentiss@xxxxxxxxxx> bpf: replace bpf_timer_init with a generic helper Benjamin Tissoires <bentiss@xxxxxxxxxx> bpf: make timer data struct more generic Mohammad Shehar Yaar Tausif <sheharyaar48@xxxxxxxxx> bpf: fix order of args in call to bpf_map_kvcalloc Aleksander Jan Bajkowski <olek2@xxxxx> net: ethernet: lantiq_etop: fix double free in detach Michal Kubiak <michal.kubiak@xxxxxxxxx> i40e: Fix XDP program unloading while removing the driver Hugh Dickins <hughd@xxxxxxxxxx> net: fix rc7's __skb_datagram_iter() Aleksandr Mishin <amishin@xxxxxxxxxx> octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability() Geliang Tang <tanggeliang@xxxxxxxxxx> skmsg: Skip zero length skb in sk_msg_recvmsg Oleksij Rempel <o.rempel@xxxxxxxxxxxxxx> net: phy: microchip: lan87xx: reinit PHY after cable test Daniel Borkmann <daniel@xxxxxxxxxxxxx> bpf: Fix too early release of tcx_entry Neal Cardwell <ncardwell@xxxxxxxxxx> tcp: fix incorrect undo caused by DSACK of TLP retransmit Dan Carpenter <dan.carpenter@xxxxxxxxxx> net: bcmasp: Fix error code in probe() Brian Foster <bfoster@xxxxxxxxxx> vfs: don't mod negative dentry count when on shrinker list linke li <lilinke99@xxxxxx> fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading Jeff Layton <jlayton@xxxxxxxxxx> filelock: fix potential use-after-free in posix_lock_inode Christian Eggers <ceggers@xxxxxxx> dsa: lan9303: Fix mapping between DSA port number and PHY address Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx> net: dsa: introduce dsa_phylink_to_port() Jingbo Xu <jefflexu@xxxxxxxxxxxxxxxxx> cachefiles: add missing lock protection when polling Baokun Li <libaokun1@xxxxxxxxxx> cachefiles: cyclic allocation of msg_id to avoid reuse Hou Tao <houtao1@xxxxxxxxxx> cachefiles: wait for ondemand_object_worker to finish when dropping object Baokun Li <libaokun1@xxxxxxxxxx> cachefiles: cancel all requests for the object that is being dropped Baokun Li <libaokun1@xxxxxxxxxx> cachefiles: stop sending new request when dropping object Jia Zhu <zhujia.zj@xxxxxxxxxxxxx> cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode Baokun Li <libaokun1@xxxxxxxxxx> cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop Yi Liu <yi.l.liu@xxxxxxxxx> vfio/pci: Init the count variable in collecting hot-reset devices Peter Wang <peter.wang@xxxxxxxxxxxx> scsi: ufs: core: Fix ufshcd_abort_one racing issue Peter Wang <peter.wang@xxxxxxxxxxxx> scsi: ufs: core: Fix ufshcd_clear_cmd racing issue Waiman Long <longman@xxxxxxxxxx> mm: prevent derefencing NULL ptr in pfn_section_valid() ------------- Diffstat: Documentation/admin-guide/cifs/usage.rst | 34 +-- Makefile | 4 +- arch/arm/mach-davinci/pm.c | 2 +- arch/arm64/boot/dts/qcom/sa8775p.dtsi | 2 +- arch/arm64/boot/dts/qcom/sc8180x.dtsi | 11 +- .../dts/qcom/sc8280xp-lenovo-thinkpad-x13s.dts | 15 +- arch/s390/include/asm/processor.h | 2 +- arch/s390/mm/pgalloc.c | 4 + arch/x86/entry/entry_64.S | 23 +- arch/x86/entry/entry_64_compat.S | 14 +- arch/x86/include/asm/processor.h | 2 +- arch/x86/kernel/cpu/common.c | 2 +- drivers/acpi/processor_idle.c | 37 ++-- drivers/char/hpet.c | 34 ++- drivers/cpufreq/acpi-cpufreq.c | 4 +- drivers/cpufreq/cpufreq.c | 3 +- drivers/firmware/cirrus/cs_dsp.c | 231 +++++++++++++++------ drivers/i2c/busses/i2c-rcar.c | 67 +++--- drivers/i2c/i2c-core-base.c | 1 + drivers/i2c/i2c-slave-testunit.c | 7 + drivers/iio/industrialio-trigger.c | 2 +- drivers/misc/fastrpc.c | 41 +++- drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_otpe2p.c | 4 - drivers/net/dsa/lan9303-core.c | 23 +- drivers/net/ethernet/broadcom/asp2/bcmasp.c | 1 + drivers/net/ethernet/intel/i40e/i40e_adminq.h | 4 - drivers/net/ethernet/intel/i40e/i40e_main.c | 9 +- drivers/net/ethernet/lantiq_etop.c | 4 +- drivers/net/ethernet/marvell/octeontx2/af/mbox.h | 2 +- drivers/net/ethernet/marvell/octeontx2/af/npc.h | 8 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 2 +- .../net/ethernet/marvell/octeontx2/af/rvu_cpt.c | 23 +- .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 12 +- drivers/net/ethernet/mediatek/mtk_star_emac.c | 7 + drivers/net/ethernet/micrel/ks8851_common.c | 10 +- drivers/net/ethernet/micrel/ks8851_spi.c | 4 +- drivers/net/phy/microchip_t1.c | 2 +- drivers/net/ppp/ppp_generic.c | 15 ++ drivers/net/wireguard/allowedips.c | 4 +- drivers/net/wireguard/queueing.h | 4 +- drivers/net/wireguard/send.c | 2 +- drivers/nvmem/core.c | 5 +- drivers/nvmem/meson-efuse.c | 14 +- drivers/nvmem/rmem.c | 5 +- drivers/platform/x86/toshiba_acpi.c | 1 + drivers/pmdomain/qcom/rpmhpd.c | 7 + drivers/tty/serial/ma35d1_serial.c | 13 +- drivers/ufs/core/ufs-mcq.c | 11 +- drivers/ufs/core/ufshcd.c | 2 + drivers/usb/core/config.c | 18 +- drivers/usb/core/quirks.c | 3 + drivers/usb/dwc3/dwc3-pci.c | 8 + drivers/usb/gadget/configfs.c | 3 + drivers/usb/host/xhci.c | 16 +- drivers/usb/serial/mos7840.c | 45 ++++ drivers/usb/serial/option.c | 38 ++++ drivers/vfio/pci/vfio_pci_core.c | 2 +- fs/btrfs/tree-checker.c | 39 ++++ fs/cachefiles/daemon.c | 14 +- fs/cachefiles/internal.h | 15 ++ fs/cachefiles/ondemand.c | 52 ++++- fs/cachefiles/xattr.c | 5 +- fs/dcache.c | 12 +- fs/ext4/sysfs.c | 2 + fs/locks.c | 2 +- fs/nilfs2/dir.c | 32 ++- fs/smb/client/cifsglob.h | 4 +- fs/smb/server/smb2pdu.c | 13 +- fs/userfaultfd.c | 7 +- include/linux/mmzone.h | 3 +- include/linux/pagemap.h | 11 +- include/net/dsa.h | 6 + include/net/tcx.h | 13 +- include/uapi/misc/fastrpc.h | 3 + kernel/bpf/bpf_local_storage.c | 4 +- kernel/bpf/helpers.c | 186 ++++++++++++----- kernel/sched/core.c | 7 +- kernel/sched/fair.c | 12 +- kernel/sched/psi.c | 21 +- kernel/sched/sched.h | 1 + kernel/sched/stats.h | 11 +- mm/damon/core.c | 21 +- mm/filemap.c | 2 +- mm/shmem.c | 15 +- mm/vmalloc.c | 10 +- net/ceph/mon_client.c | 14 +- net/core/datagram.c | 3 +- net/core/skmsg.c | 3 +- net/dsa/port.c | 12 +- net/ethtool/linkstate.c | 41 ++-- net/ipv4/tcp_input.c | 11 +- net/ipv4/tcp_timer.c | 31 ++- net/ipv4/udp.c | 4 +- net/sched/act_ct.c | 8 + net/sched/sch_ingress.c | 12 +- net/sunrpc/xprtsock.c | 7 + scripts/ld-version.sh | 8 +- sound/pci/hda/patch_realtek.c | 4 + sound/soc/sof/intel/hda-dai.c | 12 +- tools/testing/selftests/net/gro.c | 3 - tools/testing/selftests/wireguard/qemu/Makefile | 8 +- 101 files changed, 1135 insertions(+), 442 deletions(-)