This is the start of the stable review cycle for the 6.1.109 release. There are 101 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 07 Sep 2024 09:36:50 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.109-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.1.109-rc1 Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx> i2c: Use IS_REACHABLE() for substituting empty ACPI functions Jan Kara <jack@xxxxxxx> ext4: handle redirtying in ext4_bio_write_page() Eric Biggers <ebiggers@xxxxxxxxxx> ext4: reject casefold inode flag without casefold feature Jan Kara <jack@xxxxxxx> udf: Limit file size to 4TB zhanchengbin <zhanchengbin1@xxxxxxxxxx> ext4: fix inode tree inconsistency caused by ENOMEM Pauli Virtanen <pav@xxxxxx> Bluetooth: SCO: fix sco_conn related locking and validity issues Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: SCO: Fix possible circular locking dependency on sco_connect_cfm Breno Leitao <leitao@xxxxxxxxxx> virtio_net: Fix napi_skb_cache_put warning Ricardo Ribalda <ribalda@xxxxxxxxxxxx> media: uvcvideo: Enforce alignment of frame and interval Alex Hung <alex.hung@xxxxxxx> drm/amd/display: Skip wbscl_set_scaler_filter if filter is null Wayne Lin <wayne.lin@xxxxxxx> drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX winstang <winstang@xxxxxxx> drm/amd/display: added NULL check at start of dc_validate_stream Christoph Hellwig <hch@xxxxxx> block: remove the blk_flush_integrity call in blk_integrity_unregister Julien Stephan <jstephan@xxxxxxxxxxxx> driver: iio: add missing checks on iio_info's callback access Johannes Berg <johannes.berg@xxxxxxxxx> wifi: cfg80211: make hash table duplicates more survivable Yazen Ghannam <yazen.ghannam@xxxxxxx> hwmon: (k10temp) Check return value of amd_smn_read() Olivier Dautricourt <olivierdautricourt@xxxxxxxxx> dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor Olivier Dautricourt <olivierdautricourt@xxxxxxxxx> dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks Marek Vasut <marex@xxxxxxx> drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ Haoran Liu <liuhaoran14@xxxxxxx> drm/meson: plane: Add error handling Dragos Tatulea <dtatulea@xxxxxxxxxx> net/mlx5e: SHAMPO, Fix incorrect page release Casey Schaufler <casey@xxxxxxxxxxxxxxxx> smack: tcp: ipv4, fix incorrect labeling Andy Shevchenko <andy.shevchenko@xxxxxxxxx> regmap: spi: Fix potential off-by-one when calculating reserved size Amir Goldstein <amir73il@xxxxxxxxx> fsnotify: clear PARENT_WATCHED flags lazily Abhishek Pandit-Subedi <abhishekpandit@xxxxxxxxxxxx> usb: typec: ucsi: Fix null pointer dereference in trace Simon Holesch <simon@xxxxxxxxxx> usbip: Don't submit special requests twice Frederic Weisbecker <frederic@xxxxxxxxxx> rcu/nocb: Remove buggy bypass lock contention mitigation Ken Sloat <ksloat@xxxxxxxxxxxxxxxx> pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode. Shannon Nelson <shannon.nelson@xxxxxxx> ionic: fix potential irq name truncation Michael Margolin <mrgolin@xxxxxxxxxx> RDMA/efa: Properly handle unexpected AQ completions Richard Maina <quic_rmaina@xxxxxxxxxxx> hwspinlock: Introduce hwspin_lock_bust() Aleksandr Mishin <amishin@xxxxxxxxxx> PCI: al: Check IORESOURCE_BUS existence during probe Jagadeesh Kona <quic_jkona@xxxxxxxxxxx> cpufreq: scmi: Avoid overflow of target_freq in fast switch Shahar S Matityahu <shahar.s.matityahu@xxxxxxxxx> wifi: iwlwifi: remove fw_running op Tao Zhou <tao.zhou1@xxxxxxx> drm/amdgpu: update type of buf size to u32 for eeprom functions Zong-Zhe Yang <kevin_yang@xxxxxxxxxxx> wifi: rtw89: ser: avoid multiple deinit on same CAM Jesse Zhang <jesse.zhang@xxxxxxx> drm/amd/pm: check negtive return for table entries Jesse Zhang <jesse.zhang@xxxxxxx> drm/amdgpu: the warning dereferencing obj for nbio_v7_4 Jesse Zhang <jesse.zhang@xxxxxxx> drm/amd/pm: check specific index for aldebaran Jesse Zhang <jesse.zhang@xxxxxxx> drm/amdgpu: fix the waring dereferencing hive Jesse Zhang <jesse.zhang@xxxxxxx> drm/amdgpu: fix dereference after null check Ma Jun <Jun.Ma2@xxxxxxx> drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs Jeff Johnson <quic_jjohnson@xxxxxxxxxxx> wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem() Leesoo Ahn <lsahn@xxxxxxxxxx> apparmor: fix possible NULL pointer dereference Michael Chen <michael.chen@xxxxxxx> drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device Tim Huang <Tim.Huang@xxxxxxx> drm/amdgpu: fix mc_data out-of-bounds read warning Tim Huang <Tim.Huang@xxxxxxx> drm/amdgpu: fix ucode out-of-bounds read warning Ma Jun <Jun.Ma2@xxxxxxx> drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number Ma Jun <Jun.Ma2@xxxxxxx> drm/amdgpu: Fix out-of-bounds write warning Ma Jun <Jun.Ma2@xxxxxxx> drm/amdgpu/pm: Fix uninitialized variable agc_btc_response Ma Jun <Jun.Ma2@xxxxxxx> drm/amdgpu/pm: Fix uninitialized variable warning for smu10 Tim Huang <Tim.Huang@xxxxxxx> drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt Asad Kamal <asad.kamal@xxxxxxx> drm/amd/amdgpu: Check tbo resource pointer Hersen Wu <hersenxs.wu@xxxxxxx> drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration Alex Hung <alex.hung@xxxxxxx> drm/amd/display: Ensure index calculation will not overflow Alex Hung <alex.hung@xxxxxxx> drm/amd/display: Spinlock before reading event Hersen Wu <hersenxs.wu@xxxxxxx> drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create Alex Hung <alex.hung@xxxxxxx> drm/amd/display: Check msg_id before processing transcation Alex Hung <alex.hung@xxxxxxx> drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] Hersen Wu <hersenxs.wu@xxxxxxx> drm/amd/display: Add array index check for hdcp ddc access Hersen Wu <hersenxs.wu@xxxxxxx> drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 Alex Hung <alex.hung@xxxxxxx> drm/amd/display: Check gpio_id before used as array index Zhigang Luo <Zhigang.Luo@xxxxxxx> drm/amdgpu: avoid reading vf2pf info size from FB Tim Huang <Tim.Huang@xxxxxxx> drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr Jesse Zhang <jesse.zhang@xxxxxxx> drm/amd/pm: fix the Out-of-bounds read warning Jesse Zhang <jesse.zhang@xxxxxxx> drm/amd/pm: Fix negative array index read Jesse Zhang <jesse.zhang@xxxxxxx> drm/amd/pm: fix warning using uninitialized value of max_vid_step Tim Huang <Tim.Huang@xxxxxxx> drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr Jesse Zhang <jesse.zhang@xxxxxxx> drm/amd/pm: fix uninitialized variable warning Ma Jun <Jun.Ma2@xxxxxxx> drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc Tim Huang <Tim.Huang@xxxxxxx> drm/amdgpu: fix overflowed array index read warning Alvin Lee <alvin.lee2@xxxxxxx> drm/amd/display: Assign linear_pitch_alignment even for VM Ma Jun <Jun.Ma2@xxxxxxx> drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> selftests: mptcp: join: cannot rm sf if closed Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> selftests: mptcp: join: check re-re-adding ID 0 endp Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> selftests: mptcp: join: no extra msg if no counter Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> selftests: mptcp: join: check removing ID 0 endpoint Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> mptcp: avoid duplicated SUB_CLOSED events Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> mptcp: pr_debug: add missing \n at the end Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> selftests: mptcp: join: check re-adding init endp with != id Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> selftests: mptcp: join: check re-using ID of unused ADD_ADDR Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> selftests: mptcp: join: test for flush/re-add endpoints Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> selftests: mptcp: add explicit test case for remove/readd Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> selftests: mptcp: join: check re-using ID of closed subflow Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> selftests: mptcp: join: validate fullmesh endp on 1st sf Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> mptcp: pm: fix ID 0 endp usage after multiple re-creations Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> mptcp: pm: reuse ID 0 after delete and re-add Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> mptcp: pm: avoid possible UaF when selecting endp Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> mptcp: pm: fullmesh: select the right ID later Chao Yu <chao@xxxxxxxxxx> f2fs: fix to truncate preallocated blocks in f2fs_file_open() Mostafa Saleh <smostafa@xxxxxxxxxx> PCI/MSI: Fix UAF in msi_capability_init Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> mptcp: pm: fix RM_ADDR ID for the initial subflow Geliang Tang <tanggeliang@xxxxxxxxxx> mptcp: make pm_remove_addrs_and_subflows static Krzysztof Stępniak <kfs.szk@xxxxxxxxx> ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 ZHANG Yuntian <yt@xxxxxxxxx> net: usb: qmi_wwan: add MeiG Smart SRM825L Rik van Riel <riel@xxxxxxxxxxx> dma-debug: avoid deadlock between dma debug vs printk and netconsole Richard Fitzgerald <rf@xxxxxxxxxxxxxxxxxxxxx> i2c: Fix conditional for substituting empty ACPI functions Takashi Iwai <tiwai@xxxxxxx> ALSA: hda/conexant: Mute speakers at suspend / shutdown Takashi Iwai <tiwai@xxxxxxx> ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown Peter Wang <peter.wang@xxxxxxxxxxxx> scsi: ufs: core: Bypass quick recovery if force reset is needed Philip Mueller <philm@xxxxxxxxxxx> drm: panel-orientation-quirks: Add quirk for OrangePi Neo ------------- Diffstat: Documentation/locking/hwspinlock.rst | 11 ++ Makefile | 4 +- block/blk-integrity.c | 2 - drivers/base/regmap/regmap-spi.c | 3 +- drivers/cpufreq/scmi-cpufreq.c | 4 +- drivers/dma/altera-msgdma.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_afmt.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_atombios.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_eeprom.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_eeprom.h | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c | 2 +- drivers/gpu/drm/amd/amdgpu/df_v1_7.c | 2 + drivers/gpu/drm/amd/amdgpu/nbio_v7_4.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_crat.h | 2 - drivers/gpu/drm/amd/amdkfd/kfd_topology.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_topology.h | 5 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 19 +-- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 2 +- .../drm/amd/display/dc/clk_mgr/dcn21/rn_clk_mgr.c | 3 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 1 + drivers/gpu/drm/amd/display/dc/core/dc_resource.c | 3 + .../gpu/drm/amd/display/dc/dcn20/dcn20_dwb_scl.c | 3 + .../gpu/drm/amd/display/dc/dml/calcs/dcn_calcs.c | 7 +- .../gpu/drm/amd/display/dc/dml/display_mode_vba.c | 7 +- drivers/gpu/drm/amd/display/dc/gpio/gpio_service.c | 17 ++- drivers/gpu/drm/amd/display/dc/hdcp/hdcp_msg.c | 17 ++- .../gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c | 28 +++- drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 2 +- drivers/gpu/drm/amd/pm/powerplay/hwmgr/pp_psm.c | 13 +- .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c | 5 +- .../gpu/drm/amd/pm/powerplay/hwmgr/smu10_hwmgr.c | 29 +++- .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 2 +- .../gpu/drm/amd/pm/powerplay/hwmgr/smu8_hwmgr.c | 15 +- .../gpu/drm/amd/pm/powerplay/hwmgr/vega10_hwmgr.c | 60 ++++++-- .../gpu/drm/amd/pm/powerplay/hwmgr/vega12_hwmgr.c | 20 ++- .../gpu/drm/amd/pm/powerplay/hwmgr/vega20_hwmgr.c | 31 +++-- .../drm/amd/pm/powerplay/smumgr/vega10_smumgr.c | 6 +- drivers/gpu/drm/amd/pm/swsmu/smu11/navi10_ppt.c | 27 +++- drivers/gpu/drm/amd/pm/swsmu/smu11/vangogh_ppt.c | 14 ++ drivers/gpu/drm/amd/pm/swsmu/smu13/aldebaran_ppt.c | 3 +- drivers/gpu/drm/bridge/tc358767.c | 2 +- drivers/gpu/drm/drm_panel_orientation_quirks.c | 6 + drivers/gpu/drm/meson/meson_plane.c | 17 ++- drivers/hwmon/k10temp.c | 36 +++-- drivers/hwspinlock/hwspinlock_core.c | 28 ++++ drivers/hwspinlock/hwspinlock_internal.h | 3 + drivers/iio/industrialio-core.c | 7 +- drivers/iio/industrialio-event.c | 9 ++ drivers/iio/inkern.c | 32 +++-- drivers/infiniband/hw/efa/efa_com.c | 30 ++-- drivers/media/usb/uvc/uvc_driver.c | 18 ++- drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 3 +- drivers/net/ethernet/pensando/ionic/ionic_lif.c | 2 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/virtio_net.c | 8 +- drivers/net/wireless/ath/ath11k/qmi.c | 2 +- drivers/net/wireless/intel/iwlwifi/fw/debugfs.c | 3 +- drivers/net/wireless/intel/iwlwifi/fw/runtime.h | 1 - drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 6 - drivers/net/wireless/realtek/rtw89/ser.c | 8 +- drivers/pci/controller/dwc/pcie-al.c | 16 ++- drivers/pci/msi/msi.c | 10 +- drivers/ufs/core/ufshcd.c | 3 +- drivers/usb/typec/ucsi/ucsi.h | 2 +- drivers/usb/usbip/stub_rx.c | 77 +++++++---- fs/ext4/extents.c | 2 +- fs/ext4/inode.c | 5 +- fs/ext4/page-io.c | 14 +- fs/f2fs/f2fs.h | 1 + fs/f2fs/file.c | 42 +++++- fs/f2fs/inode.c | 8 -- fs/notify/fsnotify.c | 31 +++-- fs/notify/fsnotify.h | 2 +- fs/notify/mark.c | 32 ++++- fs/udf/super.c | 9 +- include/clocksource/timer-xilinx.h | 2 +- include/linux/fsnotify_backend.h | 8 +- include/linux/hwspinlock.h | 6 + include/linux/i2c.h | 2 +- kernel/dma/debug.c | 5 +- kernel/rcu/tree.h | 1 - kernel/rcu/tree_nocb.h | 32 +---- net/bluetooth/sco.c | 76 ++++++----- net/mptcp/options.c | 50 +++---- net/mptcp/pm.c | 28 ++-- net/mptcp/pm_netlink.c | 151 +++++++++++++-------- net/mptcp/protocol.c | 58 ++++---- net/mptcp/protocol.h | 10 +- net/mptcp/sockopt.c | 4 +- net/mptcp/subflow.c | 50 +++---- net/wireless/scan.c | 46 +++++-- security/apparmor/apparmorfs.c | 4 + security/smack/smack_lsm.c | 2 +- sound/pci/hda/hda_generic.c | 63 +++++++++ sound/pci/hda/hda_generic.h | 1 + sound/pci/hda/patch_conexant.c | 2 + sound/soc/amd/yc/acp6x-mach.c | 7 + tools/testing/selftests/net/mptcp/mptcp_join.sh | 136 ++++++++++++++++--- 102 files changed, 1142 insertions(+), 490 deletions(-)
