This is the start of the stable review cycle for the 6.1.117 release. There are 98 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 14 Nov 2024 10:18:19 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.117-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.1.117-rc1 Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> media: amphion: Fix VPU core alias name Hyunwoo Kim <v4bel@xxxxxxxxx> vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans Hyunwoo Kim <v4bel@xxxxxxxxx> hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer Dmitry Antipov <dmantipov@xxxxxxxxx> net: sched: use RCU read-side critical section in taprio_dump() Mingcong Bai <jeffbai@xxxxxxx> ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 Andrei Vagin <avagin@xxxxxxxxxx> ucounts: fix counter leak in inc_rlimit_get_ucounts() Andrew Kanner <andrew.kanner@xxxxxxxxx> ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() Marc Zyngier <maz@xxxxxxxxxx> irqchip/gic-v3: Force propagation of the active state with a read-back Benoît Monin <benoit.monin@xxxxxx> USB: serial: option: add Quectel RG650V Reinhard Speyerer <rspmn@xxxxxxxx> USB: serial: option: add Fibocom FG132 0x0112 composition Jack Wu <wojackbb@xxxxxxxxx> USB: serial: qcserial: add support for Sierra Wireless EM86xx Dan Carpenter <dan.carpenter@xxxxxxxxxx> USB: serial: io_edgeport: fix use after free in debug printk Dan Carpenter <dan.carpenter@xxxxxxxxxx> usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd() Roger Quadros <rogerq@xxxxxxxxxx> usb: dwc3: fix fault at system suspend if device was already runtime suspended Zijun Hu <quic_zijuhu@xxxxxxxxxxx> usb: musb: sunxi: Fix accessing an released usb phy Roman Gushchin <roman.gushchin@xxxxxxxxx> signal: restore the override_rlimit logic Qi Xi <xiqi2@xxxxxxxxxx> fs/proc: fix compile warning about variable 'vmcore_mmap_ops' Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx> filemap: Fix bounds checking in filemap_read() Benoit Sevens <bsevens@xxxxxxxxxx> media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format Mark Brown <broonie@xxxxxxxxxx> kselftest/arm64: Initialise current at build time in signal tests Eric Dumazet <edumazet@xxxxxxxxxx> net: do not delay dst_entries_add() in dst_release() Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "wifi: mac80211: fix RCU list iterations" Michal Schmidt <mschmidt@xxxxxxxxxx> bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq Daniel Maslowski <cyrevolt@xxxxxxxxxxxxxx> riscv/purgatory: align riscv_kernel_entry Filipe Manana <fdmanana@xxxxxxxx> btrfs: reinitialize delayed ref list after deleting it from the list Mark Rutland <mark.rutland@xxxxxxx> arm64: Kconfig: Make SME depend on BROKEN for now Geliang Tang <tanggeliang@xxxxxxxxxx> mptcp: use sock_kfree_s instead of kfree Stefan Wahren <wahrenst@xxxxxxx> net: vertexcom: mse102x: Fix possible double free of TX skb Jinjie Ruan <ruanjinjie@xxxxxxxxxx> net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc() Roberto Sassu <roberto.sassu@xxxxxxxxxx> nfs: Fix KMSAN warning in decode_getfattr_attrs() Benjamin Segall <bsegall@xxxxxxxxxx> posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone Christoffer Sandberg <cs@xxxxxxxxx> ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 Takashi Iwai <tiwai@xxxxxxx> ALSA: usb-audio: Add quirk for HP 320 FHD Webcam Zichen Xie <zichenxie0106@xxxxxxxxx> dm-unstriped: cast an operand to sector_t to prevent potential uint32_t overflow Ming-Hung Tsai <mtsai@xxxxxxxxxx> dm cache: fix potential out-of-bounds access on the first resume Ming-Hung Tsai <mtsai@xxxxxxxxxx> dm cache: optimize dirty bit checking with find_next_bit when resizing Ming-Hung Tsai <mtsai@xxxxxxxxxx> dm cache: fix out-of-bounds access to the dirty bitset when resizing Ming-Hung Tsai <mtsai@xxxxxxxxxx> dm cache: fix flushing uninitialized delayed_work on cache_ctr error Ming-Hung Tsai <mtsai@xxxxxxxxxx> dm cache: correct the number of origin blocks to match the target length Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxx> thermal/drivers/qcom/lmh: Remove false lockdep backtrace Antonio Quartulli <antonio@xxxxxxxxxxxxx> drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read() Alex Deucher <alexander.deucher@xxxxxxx> drm/amdgpu: Adjust debugfs eviction and IB access permissions Erik Schumacher <erik.schumacher@xxxxxxxxxxxxxxxx> pwm: imx-tpm: Use correct MODULO value for EPWM mode Namjae Jeon <linkinjeon@xxxxxxxxxx> ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp Jinjie Ruan <ruanjinjie@xxxxxxxxxx> ksmbd: Fix the missing xa_store error check Namjae Jeon <linkinjeon@xxxxxxxxxx> ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when switching CAN modes Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx> can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx> media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl() Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx> media: v4l2-tpg: prevent the risk of a division by zero Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx> media: pulse8-cec: fix data timestamp at pulse8_setup() Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx> media: cx24116: prevent overflows on SNR calculus Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx> media: s5p-jpeg: prevent buffer overflows Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx> media: ar0521: don't overflow when checking PLL values Amelie Delaunay <amelie.delaunay@xxxxxxxxxxx> ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove Icenowy Zheng <uwu@xxxxxxxxxx> thermal/of: support thermal zones w/o trips subnode Emil Dahl Juhl <emdj@xxxxxxxxxxxxxxx> tools/lib/thermal: Fix sampling handler context ptr Murad Masimov <m.masimov@xxxxxxxxx> ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init() Johannes Thumshirn <johannes.thumshirn@xxxxxxx> scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx> media: adv7604: prevent underflow condition when reporting colorspace Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx> media: dvb_frontend: don't play tricks with underflow values Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx> media: dvbdev: prevent the risk of out of memory access Mauro Carvalho Chehab <mchehab+huawei@xxxxxxxxxx> media: stb0899_algo: initialize cfr before using it Jarosław Janik <jaroslaw.janik@xxxxxxxxx> Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown" Johan Jonker <jbx6244@xxxxxxxxx> net: arc: rockchip: fix emac mdio node support Johan Jonker <jbx6244@xxxxxxxxx> net: arc: fix the device for dma_map_single/dma_unmap_single Philo Lu <lulie@xxxxxxxxxxxxxxxxx> virtio_net: Add hash_key_length check Nícolas F. R. A. Prado <nfraprado@xxxxxxxxxxxxx> net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case Diogo Silva <diogompaissilva@xxxxxxxxx> net: phy: ti: add PHY_RST_AFTER_CLK_EN flag Peiyang Wang <wangpeiyang1@xxxxxxxxxx> net: hns3: fix kernel crash when uninstalling driver Aleksandr Loktionov <aleksandr.loktionov@xxxxxxxxx> i40e: fix race condition by adding filter's intermediate sync state Mateusz Polchlopek <mateusz.polchlopek@xxxxxxxxx> ice: change q_index variable type to s16 to store -1 value Dario Binacchi <dario.binacchi@xxxxxxxxxxxxxxxxxxxx> can: c_can: fix {rx,tx}_errors statistics Xin Long <lucien.xin@xxxxxxxxx> sctp: properly validate chunk size in sctp_sf_ootb() Wei Fang <wei.fang@xxxxxxx> net: enetc: set MAC address to the VF net_device Chen Ridong <chenridong@xxxxxxxxxx> security/keys: fix slab-out-of-bounds in key_task_permission Mike Snitzer <snitzer@xxxxxxxxxx> nfs: avoid i_lock contention in nfs_clear_invalid_mapping NeilBrown <neilb@xxxxxxx> NFSv3: handle out-of-order write replies. NeilBrown <neilb@xxxxxxx> NFSv3: only use NFS timeout for MOUNT when protocols are compatible NeilBrown <neilb@xxxxxxx> sunrpc: handle -ENOTCONN in xs_tcp_setup_socket() Corey Hickey <bugfood-c@xxxxxxxxxx> platform/x86/amd/pmc: Detect when STB is not available Jiri Kosina <jkosina@xxxxxxxx> HID: core: zero-initialize the report buffer Heiko Stuebner <heiko@xxxxxxxxx> ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin Heiko Stuebner <heiko@xxxxxxxxx> ARM: dts: rockchip: Fix the spi controller on rk3036 Heiko Stuebner <heiko@xxxxxxxxx> ARM: dts: rockchip: drop grf reference from rk3036 hdmi Heiko Stuebner <heiko@xxxxxxxxx> ARM: dts: rockchip: fix rk3036 acodec node Peng Fan <peng.fan@xxxxxxx> arm64: dts: imx8mp: correct sdhc ipg clk Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> arm64: dts: imx8qxp: Add VPU subsystem file Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx> arm64: dts: imx8qm: Fix VPU core alias name Heiko Stuebner <heiko@xxxxxxxxx> arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc Heiko Stuebner <heiko@xxxxxxxxx> arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion Heiko Stuebner <heiko@xxxxxxxxx> arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards Diederik de Haas <didi.debian@xxxxxxxxx> arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node Diederik de Haas <didi.debian@xxxxxxxxx> arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328 Geert Uytterhoeven <geert+renesas@xxxxxxxxx> arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-excavator Geert Uytterhoeven <geert+renesas@xxxxxxxxx> arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610 ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/rk3036-kylin.dts | 4 +- arch/arm/boot/dts/rk3036.dtsi | 14 +-- arch/arm64/Kconfig | 1 + arch/arm64/boot/dts/freescale/imx8-ss-vpu.dtsi | 4 +- arch/arm64/boot/dts/freescale/imx8mp.dtsi | 6 +- arch/arm64/boot/dts/freescale/imx8qxp-ss-vpu.dtsi | 25 +++++ arch/arm64/boot/dts/freescale/imx8qxp.dtsi | 6 +- arch/arm64/boot/dts/rockchip/rk3308-roc-cc.dts | 4 +- arch/arm64/boot/dts/rockchip/rk3328.dtsi | 3 +- arch/arm64/boot/dts/rockchip/rk3368-lion.dtsi | 1 - arch/arm64/boot/dts/rockchip/rk3399-eaidk-610.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3399-rock960.dtsi | 2 +- .../dts/rockchip/rk3399-sapphire-excavator.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3566-pinenote.dtsi | 4 +- arch/riscv/purgatory/entry.S | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 8 +- drivers/hid/hid-core.c | 2 +- drivers/infiniband/hw/bnxt_re/qplib_fp.c | 3 +- drivers/irqchip/irq-gic-v3.c | 7 ++ drivers/md/dm-cache-target.c | 59 +++++----- drivers/md/dm-unstripe.c | 4 +- drivers/media/cec/usb/pulse8/pulse8-cec.c | 2 +- drivers/media/common/v4l2-tpg/v4l2-tpg-core.c | 3 + drivers/media/dvb-core/dvb_frontend.c | 4 +- drivers/media/dvb-core/dvbdev.c | 17 ++- drivers/media/dvb-frontends/cx24116.c | 7 +- drivers/media/dvb-frontends/stb0899_algo.c | 2 +- drivers/media/i2c/adv7604.c | 26 +++-- drivers/media/i2c/ar0521.c | 4 +- drivers/media/platform/amphion/vpu_core.c | 2 +- .../media/platform/samsung/s5p-jpeg/jpeg-core.c | 17 ++- drivers/media/usb/uvc/uvc_driver.c | 2 +- drivers/media/v4l2-core/v4l2-ctrls-api.c | 17 ++- drivers/net/can/c_can/c_can_main.c | 7 +- drivers/net/can/spi/mcp251xfd/mcp251xfd-ring.c | 8 +- drivers/net/can/spi/mcp251xfd/mcp251xfd-tef.c | 10 +- drivers/net/ethernet/arc/emac_main.c | 27 +++-- drivers/net/ethernet/arc/emac_mdio.c | 9 +- drivers/net/ethernet/freescale/enetc/enetc_vf.c | 9 +- drivers/net/ethernet/hisilicon/hns3/hnae3.c | 5 +- drivers/net/ethernet/intel/i40e/i40e.h | 1 + drivers/net/ethernet/intel/i40e/i40e_debugfs.c | 1 + drivers/net/ethernet/intel/i40e/i40e_main.c | 12 +- drivers/net/ethernet/intel/ice/ice_ethtool_fdir.c | 3 +- drivers/net/ethernet/intel/ice/ice_fdir.h | 4 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 1 + drivers/net/ethernet/vertexcom/mse102x.c | 5 +- drivers/net/phy/dp83848.c | 2 + drivers/net/virtio_net.c | 6 + drivers/net/wwan/t7xx/t7xx_hif_dpmaif_rx.c | 2 +- drivers/platform/x86/amd/pmc.c | 5 + drivers/pwm/pwm-imx-tpm.c | 4 +- drivers/scsi/sd_zbc.c | 3 +- drivers/thermal/qcom/lmh.c | 7 ++ drivers/thermal/thermal_of.c | 21 ++-- drivers/usb/dwc3/core.c | 25 ++--- drivers/usb/musb/sunxi.c | 2 - drivers/usb/serial/io_edgeport.c | 8 +- drivers/usb/serial/option.c | 6 + drivers/usb/serial/qcserial.c | 2 + drivers/usb/typec/ucsi/ucsi_ccg.c | 2 + fs/btrfs/delayed-ref.c | 2 +- fs/nfs/inode.c | 125 ++++++++++++++++++--- fs/nfs/super.c | 10 +- fs/ocfs2/xattr.c | 3 +- fs/proc/vmcore.c | 9 +- fs/smb/server/mgmt/user_session.c | 15 ++- fs/smb/server/server.c | 4 +- include/linux/nfs_fs.h | 47 ++++++++ include/linux/tick.h | 8 ++ include/linux/user_namespace.h | 3 +- kernel/fork.c | 2 + kernel/signal.c | 3 +- kernel/ucount.c | 9 +- mm/filemap.c | 2 +- net/core/dst.c | 17 ++- net/mac80211/chan.c | 4 +- net/mac80211/mlme.c | 2 +- net/mac80211/scan.c | 2 +- net/mac80211/util.c | 4 +- net/mptcp/pm_userspace.c | 3 +- net/sched/sch_taprio.c | 18 ++- net/sctp/sm_statefuns.c | 2 +- net/sunrpc/xprtsock.c | 1 + net/vmw_vsock/hyperv_transport.c | 1 + net/vmw_vsock/virtio_transport_common.c | 1 + security/keys/keyring.c | 7 +- sound/firewire/tascam/amdtp-tascam.c | 2 +- sound/pci/hda/patch_conexant.c | 2 - sound/pci/hda/patch_realtek.c | 1 + sound/soc/amd/yc/acp6x-mach.c | 7 ++ sound/soc/stm/stm32_spdifrx.c | 2 +- sound/usb/mixer.c | 1 + sound/usb/quirks.c | 2 + tools/lib/thermal/sampling.c | 2 + .../testing/selftests/arm64/signal/test_signals.c | 4 +- 98 files changed, 570 insertions(+), 229 deletions(-)
