This is the start of the stable review cycle for the 6.6.74 release. There are 72 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 23 Jan 2025 17:45:02 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.74-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.6.74-rc1 Wang Liang <wangliang74@xxxxxxxxxx> net: fix data-races around sk->sk_forward_alloc Juergen Gross <jgross@xxxxxxxx> x86/xen: fix SLS mitigation in xen_hypercall_iret() Youzhong Yang <youzhong@xxxxxxxxx> nfsd: add list_head nf_gc to struct nfsd_file Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "drm/amdgpu: rework resume handling for display (v2)" Amir Goldstein <amir73il@xxxxxxxxx> fs: relax assertions on failure to encode file handles Amir Goldstein <amir73il@xxxxxxxxx> ovl: support encoding fid from inode with no alias Amir Goldstein <amir73il@xxxxxxxxx> ovl: pass realinode to ovl_encode_real_fh() instead of realdentry Mohammed Anees <pvmohammedanees2003@xxxxxxxxx> ocfs2: fix deadlock in ocfs2_get_system_file_inode Yu Kuai <yukuai3@xxxxxxxxxx> block: fix uaf for flush rq while iterating tags Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx> drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' Jean-Baptiste Maneyrol <jean-baptiste.maneyrol@xxxxxxx> iio: imu: inv_icm42600: fix spi burst write not supported Terry Tritton <terry.tritton@xxxxxxxxxx> Revert "PCI: Use preserve_config in place of pci_flags" Christian König <christian.koenig@xxxxxxx> drm/amdgpu: always sync the GFX pipe on ctx switch Ville Syrjälä <ville.syrjala@xxxxxxxxxxxxxxx> drm/i915/fb: Relax clear color alignment to 64 bytes Koichiro Den <koichiro.den@xxxxxxxxxxxxx> hrtimers: Handle CPU state correctly on hotplug Tomas Krcka <krckatom@xxxxxxxxx> irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity() Yogesh Lal <quic_ylal@xxxxxxxxxxx> irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly Joe Hattori <joe@xxxxxxxxxxxxxxxxxxxxx> irqchip: Plug a OF node reference leak in platform_irqchip_probe() Xiaolei Wang <xiaolei.wang@xxxxxxxxxxxxx> pmdomain: imx8mp-blk-ctrl: add missing loop break condition Sean Anderson <sean.anderson@xxxxxxxxx> gpio: xilinx: Convert gpio_lock to raw spinlock Rik van Riel <riel@xxxxxxxxxxx> fs/proc: fix softlockup in __read_vmcore (part 2) Marco Nelissen <marco.nelissen@xxxxxxxxx> filemap: avoid truncating 64-bit offset to 32 bits Dave Airlie <airlied@xxxxxxxxxx> nouveau/fence: handle cross device fences properly Stefano Garzarella <sgarzare@xxxxxxxxxx> vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] Stefano Garzarella <sgarzare@xxxxxxxxxx> vsock: reset socket state when de-assigning the transport Stefano Garzarella <sgarzare@xxxxxxxxxx> vsock/virtio: cancel close work in the destructor Stefano Garzarella <sgarzare@xxxxxxxxxx> vsock/virtio: discard packets if the transport changes Stefano Garzarella <sgarzare@xxxxxxxxxx> vsock/bpf: return early if transport is not assigned Heiner Kallweit <hkallweit1@xxxxxxxxx> net: ethernet: xgbe: re-add aneg to supported features in PHY quirks Paolo Abeni <pabeni@xxxxxxxxxx> selftests: mptcp: avoid spurious errors on disconnect Paolo Abeni <pabeni@xxxxxxxxxx> mptcp: fix spurious wake-up on under memory pressure Paolo Abeni <pabeni@xxxxxxxxxx> mptcp: be sure to send ack when mptcp-level window re-opens Tomi Valkeinen <tomi.valkeinen+renesas@xxxxxxxxxxxxxxxx> i2c: atr: Fix client detach Kairui Song <kasong@xxxxxxxxxxx> zram: fix potential UAF of zram table Stefan Binding <sbinding@xxxxxxxxxxxxxxxxxxxxx> ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA Juergen Gross <jgross@xxxxxxxx> x86/asm: Make serialize() always_inline Luis Chamberlain <mcgrof@xxxxxxxxxx> nvmet: propagate npwg topology Hongguang Gao <hongguang.gao@xxxxxxxxxxxx> RDMA/bnxt_re: Fix to export port num to ib_query_qp Oleg Nesterov <oleg@xxxxxxxxxx> poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() Marco Nelissen <marco.nelissen@xxxxxxxxx> iomap: avoid avoid truncating 64-bit offset to 32 bits Hans de Goede <hdegoede@xxxxxxxxxx> ACPI: resource: acpi_dev_irq_override(): Check DMI match last Jakub Kicinski <kuba@xxxxxxxxxx> selftests: tc-testing: reduce rshift value Manivannan Sadhasivam <mani@xxxxxxxxxx> scsi: ufs: core: Honor runtime/system PM levels if set by host controller drivers Max Kellermann <max.kellermann@xxxxxxxxx> cachefiles: Parse the "secctx" immediately David Howells <dhowells@xxxxxxxxxx> kheaders: Ignore silly-rename files Zhang Kunbo <zhangkunbo@xxxxxxxxxx> fs: fix missing declaration of init_files Leo Stone <leocstone@xxxxxxxxx> hfs: Sanity check the root record Lizhi Xu <lizhi.xu@xxxxxxxxxxxxx> mac802154: check local interfaces before deleting sdata list Paulo Alcantara <pc@xxxxxxxxxxxxx> smb: client: fix double free of TCP_Server_Info::hostname Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: rcar: fix NACK handling when being a target Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx> i2c: mux: demux-pinctrl: check initial mux selection, too Pratyush Yadav <pratyush@xxxxxxxxxx> Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data" David Lechner <dlechner@xxxxxxxxxxxx> hwmon: (tmp513) Fix division of negative numbers MD Danish Anwar <danishanwar@xxxxxx> soc: ti: pruss: Fix pruss APIs Maíra Canal <mcanal@xxxxxxxxxx> drm/v3d: Ensure job pointer is set to NULL after job completion Ian Forbes <ian.forbes@xxxxxxxxxxxx> drm/vmwgfx: Add new keep_resv BO param Leon Romanovsky <leon@xxxxxxxxxx> net/mlx5e: Always start IPsec sequence number from 1 Leon Romanovsky <leon@xxxxxxxxxx> net/mlx5e: Rely on reqid in IPsec tunnel mode Leon Romanovsky <leon@xxxxxxxxxx> net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel Mark Zhang <markzhang@xxxxxxxxxx> net/mlx5: Clear port select structure when fail to create Patrisious Haddad <phaddad@xxxxxxxxxx> net/mlx5: Fix RDMA TX steering prio Kevin Groeneveld <kgroeneveld@xxxxxxxxxxxx> net: fec: handle page_pool_dev_alloc_pages error Sean Anderson <sean.anderson@xxxxxxxxx> net: xilinx: axienet: Fix IRQ coalescing packet count overflow Dan Carpenter <dan.carpenter@xxxxxxxxxx> nfp: bpf: prevent integer overflow in nfp_bpf_event_output() Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> gtp: Destroy device along with udp socket's netns dismantle. Kuniyuki Iwashima <kuniyu@xxxxxxxxxx> gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp(). Eric Dumazet <edumazet@xxxxxxxxxx> gtp: use exit_batch_rtnl() method Eric Dumazet <edumazet@xxxxxxxxxx> net: add exit_batch_rtnl() method Artem Chernyshev <artem.chernyshev@xxxxxxxxxxx> pktgen: Avoid out-of-bounds access in get_imix_entries Ilya Maximets <i.maximets@xxxxxxx> openvswitch: fix lockup on tx to unregistering netdev with carrier Michal Luczaj <mhal@xxxxxxx> bpf: Fix bpf_sk_select_reuseport() memory leak Sudheer Kumar Doredla <s-doredla@xxxxxx> net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() ------------- Diffstat: Makefile | 4 +- arch/x86/include/asm/special_insns.h | 2 +- arch/x86/xen/xen-asm.S | 2 +- block/blk-sysfs.c | 6 +-- block/genhd.c | 9 ++-- drivers/acpi/resource.c | 6 +-- drivers/block/zram/zram_drv.c | 1 + drivers/gpio/gpio-xilinx.c | 32 +++++++------- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 45 +------------------- drivers/gpu/drm/amd/amdgpu/amdgpu_ib.c | 4 +- .../gpu/drm/amd/display/dc/dcn21/dcn21_resource.c | 2 +- drivers/gpu/drm/i915/display/intel_fb.c | 2 +- drivers/gpu/drm/nouveau/nouveau_fence.c | 6 ++- drivers/gpu/drm/v3d/v3d_irq.c | 4 ++ drivers/gpu/drm/vmwgfx/vmwgfx_bo.c | 3 +- drivers/gpu/drm/vmwgfx/vmwgfx_bo.h | 3 +- drivers/gpu/drm/vmwgfx/vmwgfx_drv.c | 7 +--- drivers/gpu/drm/vmwgfx/vmwgfx_gem.c | 1 + drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 7 +--- drivers/gpu/drm/vmwgfx/vmwgfx_ttm_buffer.c | 5 +-- drivers/hwmon/tmp513.c | 7 ++-- drivers/i2c/busses/i2c-rcar.c | 20 ++++++--- drivers/i2c/i2c-atr.c | 2 +- drivers/i2c/muxes/i2c-demux-pinctrl.c | 4 +- drivers/iio/imu/inv_icm42600/inv_icm42600.h | 1 + drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 11 +++++ drivers/iio/imu/inv_icm42600/inv_icm42600_spi.c | 3 +- drivers/infiniband/hw/bnxt_re/ib_verbs.c | 1 + drivers/infiniband/hw/bnxt_re/ib_verbs.h | 4 ++ drivers/infiniband/hw/bnxt_re/qplib_fp.c | 1 + drivers/infiniband/hw/bnxt_re/qplib_fp.h | 1 + drivers/irqchip/irq-gic-v3-its.c | 2 +- drivers/irqchip/irq-gic-v3.c | 2 +- drivers/irqchip/irqchip.c | 4 +- drivers/mtd/spi-nor/core.c | 2 +- drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 19 +-------- drivers/net/ethernet/freescale/fec_main.c | 19 ++++++--- .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 22 +++++----- .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 12 +++--- .../mellanox/mlx5/core/en_accel/ipsec_offload.c | 11 +++-- drivers/net/ethernet/mellanox/mlx5/core/fs_core.c | 1 + .../net/ethernet/mellanox/mlx5/core/lag/port_sel.c | 4 +- drivers/net/ethernet/netronome/nfp/bpf/offload.c | 3 +- drivers/net/ethernet/ti/cpsw_ale.c | 14 +++---- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 6 +++ drivers/net/gtp.c | 42 +++++++++++-------- drivers/nvme/target/io-cmd-bdev.c | 2 +- drivers/pci/controller/pci-host-common.c | 4 ++ drivers/pci/probe.c | 20 +++++---- drivers/pmdomain/imx/imx8mp-blk-ctrl.c | 2 +- drivers/ufs/core/ufshcd.c | 9 ++-- fs/cachefiles/daemon.c | 14 +++---- fs/cachefiles/internal.h | 3 +- fs/cachefiles/security.c | 6 +-- fs/file.c | 1 + fs/hfs/super.c | 4 +- fs/iomap/buffered-io.c | 2 +- fs/nfsd/filecache.c | 18 ++++---- fs/nfsd/filecache.h | 1 + fs/notify/fdinfo.c | 4 +- fs/ocfs2/extent_map.c | 8 +++- fs/overlayfs/copy_up.c | 16 +++---- fs/overlayfs/export.c | 49 ++++++++++++---------- fs/overlayfs/namei.c | 4 +- fs/overlayfs/overlayfs.h | 2 +- fs/proc/vmcore.c | 2 + fs/smb/client/connect.c | 3 +- include/linux/hrtimer.h | 1 + include/linux/poll.h | 10 ++++- include/linux/pruss_driver.h | 12 +++--- include/net/net_namespace.h | 3 ++ kernel/cpu.c | 2 +- kernel/gen_kheaders.sh | 1 + kernel/time/hrtimer.c | 11 ++++- mm/filemap.c | 2 +- net/core/filter.c | 30 +++++++------ net/core/net_namespace.c | 31 +++++++++++++- net/core/pktgen.c | 6 +-- net/dccp/ipv6.c | 2 +- net/ipv6/tcp_ipv6.c | 4 +- net/mac802154/iface.c | 4 ++ net/mptcp/options.c | 6 ++- net/mptcp/protocol.h | 9 +++- net/openvswitch/actions.c | 4 +- net/vmw_vsock/af_vsock.c | 18 ++++++++ net/vmw_vsock/virtio_transport_common.c | 38 ++++++++++++----- net/vmw_vsock/vsock_bpf.c | 9 ++++ sound/pci/hda/patch_realtek.c | 1 + tools/testing/selftests/net/mptcp/mptcp_connect.c | 43 ++++++++++++++----- .../tc-testing/tc-tests/filters/flow.json | 4 +- 90 files changed, 479 insertions(+), 315 deletions(-)