This is the start of the stable review cycle for the 6.1.121 release. There are 76 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 19 Dec 2024 17:05:03 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.121-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.1.121-rc1 Dan Carpenter <dan.carpenter@xxxxxxxxxx> ALSA: usb-audio: Fix a DMA to stack memory bug Juergen Gross <jgross@xxxxxxxx> x86/xen: remove hypercall page Juergen Gross <jgross@xxxxxxxx> x86/xen: use new hypercall functions instead of hypercall page Juergen Gross <jgross@xxxxxxxx> x86/xen: add central hypercall functions Juergen Gross <jgross@xxxxxxxx> x86/xen: don't do PV iret hypercall through hypercall page Juergen Gross <jgross@xxxxxxxx> x86/static-call: provide a way to do very early static-call updates Juergen Gross <jgross@xxxxxxxx> objtool/x86: allow syscall instruction Juergen Gross <jgross@xxxxxxxx> x86: make get_cpu_vendor() accessible from Xen code Juergen Gross <jgross@xxxxxxxx> xen/netfront: fix crash when removing device Nikolay Kuratov <kniv@xxxxxxxxxxxxxx> tracing/kprobes: Skip symbol counting logic for module symbols in create_local_trace_kprobe() Eduard Zingerman <eddyz87@xxxxxxxxx> bpf: sync_linked_regs() must preserve subreg_def Nathan Chancellor <nathan@xxxxxxxxxx> blk-iocost: Avoid using clamp() on inuse in __propagate_weights() Frédéric Danis <frederic.danis@xxxxxxxxxxxxx> Bluetooth: SCO: Add support for 16 bits transparent voice setting Iulia Tanasescu <iulia.tanasescu@xxxxxxx> Bluetooth: iso: Fix recursive locking warning Daniil Tatianin <d-tatianin@xxxxxxxxxxxxxx> ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired Daniel Borkmann <daniel@xxxxxxxxxxxxx> team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL Daniel Borkmann <daniel@xxxxxxxxxxxxx> bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL Martin Ottens <martin.ottens@xxxxxx> net/sched: netem: account for backlog updates from child qdisc Vladimir Oltean <vladimir.oltean@xxxxxxx> net: dsa: felix: fix stuck CPU-injected packets with short taprio windows Paul Barker <paul.barker.ct@xxxxxxxxxxxxxx> Documentation: PM: Clarify pm_runtime_resume_and_get() return value Venkata Prasad Potturu <venkataprasad.potturu@xxxxxxx> ASoC: amd: yc: Fix the wrong return value Stefan Wahren <wahrenst@xxxxxxx> qca_spi: Make driver probing reliable Stefan Wahren <wahrenst@xxxxxxx> qca_spi: Fix clock speed for multiple QCA7000 Anumula Murali Mohan Reddy <anumula@xxxxxxxxxxx> cxgb4: use port number to set mac addr Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx> ACPI: resource: Fix memory resource type union access Daniel Machon <daniel.machon@xxxxxxxxxxxxx> net: sparx5: fix the maximum frame length register Daniel Machon <daniel.machon@xxxxxxxxxxxxx> net: sparx5: fix FDMA performance issue Christophe JAILLET <christophe.jaillet@xxxxxxxxxx> spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user() Vladimir Oltean <vladimir.oltean@xxxxxxx> net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set() Vladimir Oltean <vladimir.oltean@xxxxxxx> net: mscc: ocelot: be resilient to loss of PTP packets during transmission Vladimir Oltean <vladimir.oltean@xxxxxxx> net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-safe Vladimir Oltean <vladimir.oltean@xxxxxxx> net: mscc: ocelot: improve handling of TX timestamp for unknown skb Vladimir Oltean <vladimir.oltean@xxxxxxx> net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb() Eric Dumazet <edumazet@xxxxxxxxxx> net: defer final 'struct net' free in netns dismantle Eric Dumazet <edumazet@xxxxxxxxxx> net: lapb: increase LAPB_HEADER_LEN Thomas Weißschuh <linux@xxxxxxxxxxxxxx> ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init() Jeremi Piotrowski <jpiotrowski@xxxxxxxxxxxxxxxxxxx> ptp: kvm: Use decrypted memory in confidential guest on x86 Danielle Ratson <danieller@xxxxxxxxxx> selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted Danielle Ratson <danieller@xxxxxxxxxx> selftests: mlxsw: sharedbuffer: Remove duplicate test cases Danielle Ratson <danieller@xxxxxxxxxx> selftests: mlxsw: sharedbuffer: Remove h1 ingress test case Dan Carpenter <dan.carpenter@xxxxxxxxxx> net/mlx5: DR, prevent potential error pointer dereference Eric Dumazet <edumazet@xxxxxxxxxx> tipc: fix NULL deref in cleanup_bearer() Remi Pommarel <repk@xxxxxxxxxxxx> batman-adv: Do not let TT changes list grows indefinitely Remi Pommarel <repk@xxxxxxxxxxxx> batman-adv: Remove uninitialized data in full table TT response Remi Pommarel <repk@xxxxxxxxxxxx> batman-adv: Do not send uninitialized TT changes David (Ming Qiang) Wu <David.Wu3@xxxxxxx> amdgpu/uvd: get ring reference from rq scheduler Suraj Sonawane <surajsonawane0215@xxxxxxxxx> acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl Benjamin Lin <benjamin-jw.lin@xxxxxxxxxxxx> wifi: mac80211: fix station NSS capability initialization order Johannes Berg <johannes.berg@xxxxxxxxx> wifi: mac80211: clean up 'ret' in sta_link_apply_parameters() Lin Ma <linma@xxxxxxxxxx> wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one Sungjong Seo <sj1557.seo@xxxxxxxxxxx> exfat: fix potential deadlock on __exfat_get_dentry_set Yuezhang Mo <Yuezhang.Mo@xxxxxxxx> exfat: support dynamic allocate bh for exfat_entry_set_cache Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix UAF in smb2_reconnect_server() Michal Luczaj <mhal@xxxxxxx> bpf, sockmap: Fix update element with same Jiri Olsa <jolsa@xxxxxxxxxx> bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog Darrick J. Wong <djwong@xxxxxxxxxx> xfs: only run precommits once per transaction object Darrick J. Wong <djwong@xxxxxxxxxx> xfs: fix scrub tracepoints when inode-rooted btrees are involved Darrick J. Wong <djwong@xxxxxxxxxx> xfs: return from xfs_symlink_verify early on V4 filesystems Darrick J. Wong <djwong@xxxxxxxxxx> xfs: don't drop errno values when we fail to ficlone the entire range Darrick J. Wong <djwong@xxxxxxxxxx> xfs: update btree keys correctly when _insrec splits an inode root block Jiasheng Jiang <jiashengjiangcool@xxxxxxxxxxx> drm/i915: Fix memory leak by correcting cache object name in error handler Neal Frager <neal.frager@xxxxxxx> usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode Lianqin Hu <hulianqin@xxxxxxxx> usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx> usb: typec: anx7411: fix OF node reference leaks in anx7411_typec_switch_probe() Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx> usb: typec: anx7411: fix fwnode_handle reference leak Vitalii Mordan <mordan@xxxxxxxxx> usb: ehci-hcd: fix call balance of clocks handling routines Stefan Wahren <wahrenst@xxxxxxx> usb: dwc2: Fix HCD port connection race Stefan Wahren <wahrenst@xxxxxxx> usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature Stefan Wahren <wahrenst@xxxxxxx> usb: dwc2: Fix HCD resume Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx> ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys() Mark Tomlinson <mark.tomlinson@xxxxxxxxxxxxxxxxxxx> usb: host: max3421-hcd: Correctly abort a USB request. Jaakko Salo <jaakkos@xxxxxxxxx> ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5 Tejun Heo <tj@xxxxxxxxxx> blk-cgroup: Fix UAF in blkcg_unpin_online() MoYuanhao <moyuanhao3676@xxxxxxx> tcp: check space before adding MPTCP SYN options Namjae Jeon <linkinjeon@xxxxxxxxxx> ksmbd: fix racy issue from session lookup and expire Jann Horn <jannh@xxxxxxxxxx> bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors ------------- Diffstat: Documentation/power/runtime_pm.rst | 4 +- Makefile | 4 +- arch/x86/include/asm/processor.h | 2 + arch/x86/include/asm/static_call.h | 15 ++ arch/x86/include/asm/sync_core.h | 6 +- arch/x86/include/asm/xen/hypercall.h | 36 ++-- arch/x86/kernel/cpu/common.c | 38 ++-- arch/x86/kernel/static_call.c | 9 + arch/x86/xen/enlighten.c | 65 ++++++- arch/x86/xen/enlighten_hvm.c | 13 +- arch/x86/xen/enlighten_pv.c | 4 +- arch/x86/xen/enlighten_pvh.c | 7 - arch/x86/xen/xen-asm.S | 50 ++++- arch/x86/xen/xen-head.S | 106 ++++++++--- arch/x86/xen/xen-ops.h | 9 + block/blk-cgroup.c | 6 +- block/blk-iocost.c | 9 +- drivers/acpi/acpica/evxfregn.c | 2 - drivers/acpi/nfit/core.c | 7 +- drivers/acpi/resource.c | 6 +- drivers/ata/sata_highbank.c | 1 + drivers/gpu/drm/amd/amdgpu/uvd_v7_0.c | 2 +- drivers/gpu/drm/i915/i915_scheduler.c | 2 +- drivers/net/bonding/bond_main.c | 1 + drivers/net/dsa/ocelot/felix_vsc9959.c | 17 +- drivers/net/ethernet/chelsio/cxgb4/cxgb4.h | 2 +- drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 2 +- drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 5 +- .../mellanox/mlx5/core/steering/dr_domain.c | 4 +- .../net/ethernet/microchip/sparx5/sparx5_main.c | 11 +- .../net/ethernet/microchip/sparx5/sparx5_port.c | 2 +- drivers/net/ethernet/mscc/ocelot_ptp.c | 207 +++++++++++++-------- drivers/net/ethernet/qualcomm/qca_spi.c | 26 ++- drivers/net/ethernet/qualcomm/qca_spi.h | 1 - drivers/net/team/team.c | 3 +- drivers/net/xen-netfront.c | 5 +- drivers/ptp/ptp_kvm_arm.c | 4 + drivers/ptp/ptp_kvm_common.c | 1 + drivers/ptp/ptp_kvm_x86.c | 61 ++++-- drivers/spi/spi-aspeed-smc.c | 10 +- drivers/usb/dwc2/hcd.c | 19 +- drivers/usb/dwc3/dwc3-xilinx.c | 5 +- drivers/usb/gadget/function/u_serial.c | 9 +- drivers/usb/host/ehci-sh.c | 9 +- drivers/usb/host/max3421-hcd.c | 16 +- drivers/usb/typec/anx7411.c | 66 ++++--- fs/exfat/dir.c | 15 ++ fs/exfat/exfat_fs.h | 5 +- fs/smb/client/connect.c | 78 ++++---- fs/smb/server/auth.c | 2 + fs/smb/server/mgmt/user_session.c | 6 +- fs/smb/server/server.c | 4 +- fs/smb/server/smb2pdu.c | 27 +-- fs/xfs/libxfs/xfs_btree.c | 29 ++- fs/xfs/libxfs/xfs_symlink_remote.c | 4 +- fs/xfs/scrub/trace.h | 2 +- fs/xfs/xfs_file.c | 8 + fs/xfs/xfs_trans.c | 16 +- include/linux/compiler.h | 39 ++-- include/linux/dsa/ocelot.h | 1 + include/linux/ptp_kvm.h | 1 + include/linux/static_call.h | 1 + include/net/bluetooth/bluetooth.h | 1 + include/net/lapb.h | 2 +- include/net/net_namespace.h | 1 + include/soc/mscc/ocelot.h | 2 - kernel/bpf/verifier.c | 5 +- kernel/static_call_inline.c | 2 +- kernel/trace/bpf_trace.c | 11 ++ kernel/trace/trace_kprobe.c | 2 +- net/batman-adv/translation-table.c | 58 ++++-- net/bluetooth/iso.c | 8 +- net/bluetooth/sco.c | 29 +-- net/core/net_namespace.c | 21 ++- net/core/sock_map.c | 1 + net/ipv4/tcp_output.c | 6 +- net/mac80211/cfg.c | 9 +- net/sched/sch_netem.c | 22 ++- net/tipc/udp_media.c | 7 +- net/wireless/nl80211.c | 2 +- sound/soc/amd/yc/acp6x-mach.c | 13 +- sound/usb/quirks.c | 44 +++-- tools/objtool/check.c | 11 +- .../selftests/drivers/net/mlxsw/sharedbuffer.sh | 55 ++++-- 84 files changed, 980 insertions(+), 459 deletions(-)
