This is the start of the stable review cycle for the 6.1.116 release. There are 126 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 08 Nov 2024 12:02:47 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.116-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.1.116-rc1 Huang Ying <ying.huang@xxxxxxxxx> migrate_pages_batch: fix statistics for longterm pin retry Linus Torvalds <torvalds@xxxxxxxxxxxxxxxxxxxx> mm: avoid gcc complaint about pointer casting Jeongjun Park <aha310510@xxxxxxxxx> vt: prevent kernel-infoleak in con_font_get() Alex Hung <alex.hung@xxxxxxx> drm/amd/display: Skip on writeback when it's not applicable Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx> drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing Michael Walle <mwalle@xxxxxxxxxx> mtd: spi-nor: winbond: fix w25q128 regression Huacai Chen <chenhuacai@xxxxxxxxxx> LoongArch: Fix build errors due to backported TIMENS Jeongjun Park <aha310510@xxxxxxxxx> mm: shmem: fix data-race in shmem_getattr() Johannes Berg <johannes.berg@xxxxxxxxx> wifi: iwlwifi: mvm: fix 6 GHz scan construction Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix kernel bug due to missing clearing of checked flag Zong-Zhe Yang <kevin_yang@xxxxxxxxxxx> wifi: mac80211: fix NULL dereference at band check in starting tx ba session Pawan Gupta <pawan.kumar.gupta@xxxxxxxxxxxxxxx> x86/bugs: Use code segment selector for VERW operand Pavel Begunkov <asml.silence@xxxxxxxxx> io_uring: always lock __io_cqring_overflow_flush Gregory Price <gourry@xxxxxxxxxx> vmscan,migrate: fix page count imbalance on node stats when demoting pages Huang Ying <ying.huang@xxxxxxxxx> migrate_pages: split unmap_and_move() to _unmap() and _move() Huang Ying <ying.huang@xxxxxxxxx> migrate_pages: restrict number of pages to migrate in batch Huang Ying <ying.huang@xxxxxxxxx> migrate_pages: separate hugetlb folios migration Huang Ying <ying.huang@xxxxxxxxx> migrate_pages: organize stats with struct migrate_pages_stats Yang Li <yang.lee@xxxxxxxxxxxxxxxxx> mm/migrate.c: stop using 0 as NULL pointer Huang Ying <ying.huang@xxxxxxxxx> migrate: convert migrate_pages() to use folios Huang Ying <ying.huang@xxxxxxxxx> migrate: convert unmap_and_move() to use folios Baolin Wang <baolin.wang@xxxxxxxxxxxxxxxxx> mm: migrate: try again if THP split is failed due to page refcnt Jens Axboe <axboe@xxxxxxxxx> io_uring/rw: fix missing NOWAIT check for O_DIRECT start write Amir Goldstein <amir73il@xxxxxxxxx> io_uring: use kiocb_{start,end}_write() helpers Amir Goldstein <amir73il@xxxxxxxxx> fs: create kiocb_{start,end}_write() helpers Amir Goldstein <amir73il@xxxxxxxxx> io_uring: rename kiocb_end_write() local helper Andrey Konovalov <andreyknvl@xxxxxxxxx> kasan: remove vmalloc_percpu test Vitaliy Shevtsov <v.shevtsov@xxxxxxxxx> nvmet-auth: assign dh_key to NULL after kfree_sensitive Christoffer Sandberg <cs@xxxxxxxxx> ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 Matt Johnston <matt@xxxxxxxxxxxxxxxxxxxx> mctp i2c: handle NULL header address Edward Adam Davis <eadavis@xxxxxx> ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow Matt Fleming <mfleming@xxxxxxxxxxxxxx> mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> mm/page_alloc: explicitly define how __GFP_HIGH non-blocking allocations accesses reserves Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> mm/page_alloc: explicitly define what alloc flags deplete min reserves Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> mm/page_alloc: explicitly record high-order atomic allocations in alloc_flags Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> mm/page_alloc: treat RT tasks similar to __GFP_HIGH Mel Gorman <mgorman@xxxxxxxxxxxxxxxxxxx> mm/page_alloc: rename ALLOC_HIGH to ALLOC_MIN_RESERVE Dan Williams <dan.j.williams@xxxxxxxxx> cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices() Dan Williams <dan.j.williams@xxxxxxxxx> cxl/acpi: Move rescan to the workqueue Chunyan Zhang <zhangchunyan@xxxxxxxxxxx> riscv: Remove duplicated GET_RM Chunyan Zhang <zhangchunyan@xxxxxxxxxxx> riscv: Remove unused GENERATING_ASM_OFFSETS WangYuli <wangyuli@xxxxxxxxxxxxx> riscv: Use '%u' to format the output of 'cpu' Heinrich Schuchardt <heinrich.schuchardt@xxxxxxxxxxxxx> riscv: efi: Set NX compat flag in PE/COFF header Kailang Yang <kailang@xxxxxxxxxxx> ALSA: hda/realtek: Limit internal Mic boost on Dell platform Alexandre Ghiti <alexghiti@xxxxxxxxxxxx> riscv: vdso: Prevent the compiler from inserting calls to memset() Chen Ridong <chenridong@xxxxxxxxxx> cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction Xinyu Zhang <xizhang@xxxxxxxxxxxxxxx> block: fix sanity checks in blk_rq_map_user_bvec Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix potential deadlock with newly created symlinks Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> iio: light: veml6030: fix microlux value calculation Zicheng Qu <quzicheng@xxxxxxxxxx> iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr() Zicheng Qu <quzicheng@xxxxxxxxxx> staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg() Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> wifi: iwlegacy: Clear stale interrupts before resuming device Johannes Berg <johannes.berg@xxxxxxxxx> wifi: cfg80211: clear wdev->cqm_config pointer on free Manikanta Pubbisetty <quic_mpubbise@xxxxxxxxxxx> wifi: ath10k: Fix memory leak in management tx Felix Fietkau <nbd@xxxxxxxx> wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "driver core: Fix uevent_show() vs driver detach race" Basavaraj Natikar <Basavaraj.Natikar@xxxxxxx> xhci: Use pm_runtime_get to prevent RPM on unsupported systems Faisal Hassan <quic_faisalh@xxxxxxxxxxx> xhci: Fix Link TRB DMA in command ring stopped completion event Javier Carrasco <javier.carrasco.cruz@xxxxxxxxx> usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes() Zijun Hu <quic_zijuhu@xxxxxxxxxxx> usb: phy: Fix API devm_usb_put_phy() can not release the phy Zongmin Zhou <zhouzongmin@xxxxxxxxxx> usbip: tools: Fix detach_port() invalid port error path Jan Schär <jan@xxxxxxxxxx> ALSA: usb-audio: Add quirks for Dell WD19 dock Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> USB: gadget: dummy-hcd: Fix "task hung" problem Andrey Konovalov <andreyknvl@xxxxxxxxx> usb: gadget: dummy_hcd: execute hrtimer callback in softirq context Marcello Sylvester Bauer <sylv@xxxxxxx> usb: gadget: dummy_hcd: Set transfer interval to 1 microframe Marcello Sylvester Bauer <sylv@xxxxxxx> usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler Dimitri Sivanich <sivanich@xxxxxxx> misc: sgi-gru: Don't disable preemption in GRU driver Dai Ngo <dai.ngo@xxxxxxxxxx> NFS: remove revoked delegation from server's delegation list Daniel Palmer <daniel@xxxxxxxx> net: amd: mvme147: Fix probe banner message Benjamin Marzinski <bmarzins@xxxxxxxxxx> scsi: scsi_transport_fc: Allow setting rport state to current state Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Additional check in ni_clear() Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Fix possible deadlock in mi_read Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Stale inode instead of bad Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx> fs/ntfs3: Fix warning possible deadlock in ntfs_set_state Andrew Ballance <andrewjballance@xxxxxxxxx> fs/ntfs3: Check if more than chunk-size bytes are written Pierre Gondois <pierre.gondois@xxxxxxx> ACPI: CPPC: Make rmw_lock a raw_spin_lock David Howells <dhowells@xxxxxxxxxx> afs: Fix missing subdir edit when renamed between parent dirs David Howells <dhowells@xxxxxxxxxx> afs: Automatically generate trace tag enums Xiongfeng Wang <wangxiongfeng2@xxxxxxxxxx> firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state() Marco Elver <elver@xxxxxxxxxx> kasan: Fix Software Tag-Based KASAN with GCC Miguel Ojeda <ojeda@xxxxxxxxxx> compiler-gcc: remove attribute support check for `__no_sanitize_address__` Miguel Ojeda <ojeda@xxxxxxxxxx> compiler-gcc: be consistent with underscores use for `no_sanitize` Christoph Hellwig <hch@xxxxxx> iomap: turn iomap_want_unshare_iter into an inline function Darrick J. Wong <djwong@xxxxxxxxxx> fsdax: dax_unshare_iter needs to copy entire blocks Darrick J. Wong <djwong@xxxxxxxxxx> fsdax: remove zeroing code from dax_unshare_iter Darrick J. Wong <djwong@xxxxxxxxxx> iomap: share iomap_unshare_iter predicate code with fsdax Darrick J. Wong <djwong@xxxxxxxxxx> iomap: don't bother unsharing delalloc extents Christoph Hellwig <hch@xxxxxx> iomap: improve shared block detection in iomap_unshare_iter Darrick J. Wong <djwong@xxxxxxxxxx> iomap: convert iomap_unshare_iter to use large folios Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nft_payload: sanitize offset and length before calling skb_checksum() Ido Schimmel <idosch@xxxxxxxxxx> mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address Ido Schimmel <idosch@xxxxxxxxxx> mlxsw: spectrum_ipip: Rename Spectrum-2 ip6gre operations Ido Schimmel <idosch@xxxxxxxxxx> mlxsw: spectrum_router: Add support for double entry RIFs Amit Cohen <amcohen@xxxxxxxxxx> mlxsw: spectrum_ptp: Add missing verification before pushing Tx header Benoît Monin <benoit.monin@xxxxxx> net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension Sungwoo Kim <iam@xxxxxxxxxxxx> Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs Eric Dumazet <edumazet@xxxxxxxxxx> netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() Dong Chenchen <dongchenchen2@xxxxxxxxxx> netfilter: Fix use-after-free in get_info() Byeonguk Jeong <jungbu2855@xxxxxxxxx> bpf: Fix out-of-bounds write in trie_get_next_key() Zichen Xie <zichenxie0106@xxxxxxxxx> netdevsim: Add trailing zero to terminate the string in nsim_nexthop_bucket_activity_write() Pedro Tammela <pctammela@xxxxxxxxxxxx> net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> gtp: allow -1 to be specified as file description from userspace Ido Schimmel <idosch@xxxxxxxxxx> ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() Wander Lairson Costa <wander@xxxxxxxxxx> igb: Disable threaded IRQ for igb_msix_other Furong Xu <0x1207@xxxxxxxxx> net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data Jianbo Liu <jianbol@xxxxxxxxxx> macsec: Fix use-after-free while sending the offloading packet Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() Daniel Gabay <daniel.gabay@xxxxxxxxx> wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd() Emmanuel Grumbach <emmanuel.grumbach@xxxxxxxxx> wifi: iwlwifi: mvm: disconnect station vifs if recovery failed Selvin Xavier <selvin.xavier@xxxxxxxxxxxx> RDMA/bnxt_re: synchronize the qp-handle table array Patrisious Haddad <phaddad@xxxxxxxxxx> RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down Leon Romanovsky <leon@xxxxxxxxxx> RDMA/cxgb4: Dump vendor specific QP details Geert Uytterhoeven <geert@xxxxxxxxxxxxxx> wifi: brcm80211: BRCM_TRACING should depend on TRACING Remi Pommarel <repk@xxxxxxxxxxxx> wifi: ath11k: Fix invalid ring usage in full monitor mode Felix Fietkau <nbd@xxxxxxxx> wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys Geert Uytterhoeven <geert@xxxxxxxxxxxxxx> mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING Ben Hutchings <ben@xxxxxxxxxxxxxxx> wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd() Xiu Jianfeng <xiujianfeng@xxxxxxxxxx> cgroup: Fix potential overflow issue when checking max_depth Alexander Gordeev <agordeev@xxxxxxxxxxxxx> fs/proc/kcore.c: allow translation of physical memory addresses Lorenzo Stoakes <lstoakes@xxxxxxxxx> fs/proc/kcore: reinstate bounce buffer for KCORE_TEXT regions Lorenzo Stoakes <lstoakes@xxxxxxxxx> fs/proc/kcore: convert read_kcore() to read_kcore_iter() Lorenzo Stoakes <lstoakes@xxxxxxxxx> fs/proc/kcore: avoid bounce buffer for ktext data Kefeng Wang <wangkefeng.wang@xxxxxxxxxx> mm: remove kern_addr_valid() completely Donet Tom <donettom@xxxxxxxxxxxxx> selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test Miquel Sabaté Solà <mikisabate@xxxxxxxxx> cpufreq: Avoid a bad reference count on CPU node Hector Martin <marcan@xxxxxxxxx> cpufreq: Generalize of_perf_domain_get_sharing_cpumask phandle format ------------- Diffstat: Makefile | 4 +- arch/alpha/include/asm/pgtable.h | 2 - arch/arc/include/asm/pgtable-bits-arcv2.h | 2 - arch/arm/include/asm/pgtable-nommu.h | 2 - arch/arm/include/asm/pgtable.h | 4 - arch/arm64/include/asm/pgtable.h | 2 - arch/arm64/mm/mmu.c | 47 -- arch/arm64/mm/pageattr.c | 3 +- arch/csky/include/asm/pgtable.h | 3 - arch/hexagon/include/asm/page.h | 7 - arch/ia64/include/asm/pgtable.h | 16 - arch/loongarch/include/asm/pgtable.h | 2 - arch/loongarch/kernel/vdso.c | 28 +- arch/m68k/include/asm/pgtable_mm.h | 2 - arch/m68k/include/asm/pgtable_no.h | 1 - arch/microblaze/include/asm/pgtable.h | 3 - arch/mips/include/asm/pgtable.h | 2 - arch/nios2/include/asm/pgtable.h | 2 - arch/openrisc/include/asm/pgtable.h | 2 - arch/parisc/include/asm/pgtable.h | 15 - arch/powerpc/include/asm/pgtable.h | 7 - arch/riscv/include/asm/pgtable.h | 2 - arch/riscv/kernel/asm-offsets.c | 2 - arch/riscv/kernel/cpu-hotplug.c | 2 +- arch/riscv/kernel/efi-header.S | 2 +- arch/riscv/kernel/traps_misaligned.c | 2 - arch/riscv/kernel/vdso/Makefile | 1 + arch/s390/include/asm/io.h | 2 + arch/s390/include/asm/pgtable.h | 2 - arch/sh/include/asm/pgtable.h | 2 - arch/sparc/include/asm/pgtable_32.h | 6 - arch/sparc/mm/init_32.c | 3 +- arch/sparc/mm/init_64.c | 1 - arch/um/include/asm/pgtable.h | 2 - arch/x86/include/asm/nospec-branch.h | 11 +- arch/x86/include/asm/pgtable_32.h | 9 - arch/x86/include/asm/pgtable_64.h | 1 - arch/x86/mm/init_64.c | 41 -- arch/xtensa/include/asm/pgtable.h | 2 - block/blk-map.c | 4 +- drivers/acpi/cppc_acpi.c | 9 +- drivers/base/core.c | 13 +- drivers/base/module.c | 4 - drivers/cpufreq/mediatek-cpufreq-hw.c | 14 +- drivers/cxl/acpi.c | 17 +- drivers/cxl/core/port.c | 26 +- drivers/cxl/cxl.h | 3 +- drivers/firmware/arm_sdei.c | 2 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 10 + drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3 + drivers/iio/adc/ad7124.c | 2 +- drivers/iio/light/veml6030.c | 2 +- drivers/infiniband/hw/bnxt_re/qplib_fp.c | 4 + drivers/infiniband/hw/bnxt_re/qplib_rcfw.c | 13 +- drivers/infiniband/hw/bnxt_re/qplib_rcfw.h | 2 + drivers/infiniband/hw/cxgb4/provider.c | 1 + drivers/infiniband/hw/mlx5/qp.c | 4 +- drivers/misc/sgi-gru/grukservices.c | 2 - drivers/misc/sgi-gru/grumain.c | 4 - drivers/misc/sgi-gru/grutlbpurge.c | 2 - drivers/mtd/spi-nor/winbond.c | 7 +- drivers/net/ethernet/amd/mvme147.c | 7 +- drivers/net/ethernet/intel/igb/igb_main.c | 2 +- .../net/ethernet/mellanox/mlxsw/spectrum_ipip.c | 119 ++-- .../net/ethernet/mellanox/mlxsw/spectrum_ipip.h | 1 + drivers/net/ethernet/mellanox/mlxsw/spectrum_ptp.c | 7 + .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 2 + drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 22 +- drivers/net/gtp.c | 22 +- drivers/net/macsec.c | 3 +- drivers/net/mctp/mctp-i2c.c | 3 + drivers/net/netdevsim/fib.c | 4 +- drivers/net/wireless/ath/ath10k/wmi-tlv.c | 7 +- drivers/net/wireless/ath/ath10k/wmi.c | 2 + drivers/net/wireless/ath/ath11k/dp_rx.c | 7 +- drivers/net/wireless/broadcom/brcm80211/Kconfig | 1 + drivers/net/wireless/intel/iwlegacy/common.c | 15 +- drivers/net/wireless/intel/iwlegacy/common.h | 12 + drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 22 +- drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 3 +- drivers/nvme/target/auth.c | 1 + drivers/scsi/scsi_transport_fc.c | 4 +- drivers/staging/iio/frequency/ad9832.c | 7 +- drivers/tty/vt/vt.c | 2 +- drivers/usb/gadget/udc/dummy_hcd.c | 57 +- drivers/usb/host/xhci-pci.c | 6 +- drivers/usb/host/xhci-ring.c | 16 +- drivers/usb/phy/phy.c | 2 +- drivers/usb/typec/class.c | 1 + fs/afs/dir.c | 25 + fs/afs/dir_edit.c | 91 ++- fs/afs/internal.h | 2 + fs/dax.c | 49 +- fs/iomap/buffered-io.c | 31 +- fs/nfs/delegation.c | 5 + fs/nilfs2/namei.c | 3 + fs/nilfs2/page.c | 1 + fs/ntfs3/frecord.c | 4 +- fs/ntfs3/inode.c | 10 +- fs/ntfs3/lznt.c | 3 + fs/ntfs3/namei.c | 2 +- fs/ntfs3/ntfs_fs.h | 2 +- fs/ocfs2/file.c | 8 + fs/proc/kcore.c | 94 ++- include/acpi/cppc_acpi.h | 2 +- include/linux/compiler-gcc.h | 12 +- include/linux/cpufreq.h | 34 +- include/linux/fs.h | 36 ++ include/linux/iomap.h | 19 + include/linux/migrate.h | 1 + include/net/ip_tunnels.h | 2 +- include/trace/events/afs.h | 240 +------ io_uring/io_uring.c | 11 +- io_uring/rw.c | 52 +- kernel/bpf/cgroup.c | 19 +- kernel/bpf/lpm_trie.c | 2 +- kernel/cgroup/cgroup.c | 4 +- mm/huge_memory.c | 4 +- mm/internal.h | 13 +- mm/kasan/kasan_test.c | 27 - mm/migrate.c | 690 ++++++++++++++------- mm/page_alloc.c | 95 ++- mm/shmem.c | 2 + net/bluetooth/hci_sync.c | 18 +- net/core/dev.c | 4 + net/ipv6/netfilter/nf_reject_ipv6.c | 15 +- net/mac80211/Kconfig | 2 +- net/mac80211/agg-tx.c | 4 +- net/mac80211/cfg.c | 3 +- net/mac80211/key.c | 42 +- net/netfilter/nft_payload.c | 3 + net/netfilter/x_tables.c | 2 +- net/sched/sch_api.c | 2 +- net/wireless/core.c | 1 + sound/pci/hda/patch_realtek.c | 22 +- sound/soc/codecs/cs42l51.c | 7 +- sound/usb/mixer_quirks.c | 3 + tools/testing/selftests/vm/hmm-tests.c | 2 +- tools/usb/usbip/src/usbip_detach.c | 1 + 139 files changed, 1453 insertions(+), 1027 deletions(-)