This is the start of the stable review cycle for the 6.6.47 release. There are 67 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat, 17 Aug 2024 13:18:17 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.47-rc1.... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 6.6.47-rc1

Will Deacon will@kernel.org KVM: arm64: Don't pass a TLBI level hint when zapping table entries

Will Deacon will@kernel.org KVM: arm64: Don't defer TLB invalidation when zapping table entries

Waiman Long longman@redhat.com cgroup: Move rcu_head up near the top of cgroup_root

Peter Xu peterx@redhat.com mm/debug_vm_pgtable: drop RANDOM_ORVALUE trick

Javier Carrasco javier.carrasco.cruz@gmail.com Revert "Input: bcm5974 - check endpoint type before starting traffic"

Dave Kleikamp dave.kleikamp@oracle.com Revert "jfs: fix shift-out-of-bounds in dbJoin"

Kees Cook kees@kernel.org binfmt_flat: Fix corruption when not offsetting data start

Takashi Iwai tiwai@suse.de ALSA: usb: Fix UBSAN warning in parse_audio_unit()

Konstantin Komarov almaz.alexandrovich@paragon-software.com fs/ntfs3: Do copy_to_user out of run_lock

Pei Li peili.dev@gmail.com jfs: Fix shift-out-of-bounds in dbDiscardAG

Edward Adam Davis eadavis@qq.com jfs: fix null ptr deref in dtInsertEntry

Willem de Bruijn willemb@google.com fou: remove warn in gue_gro_receive on unsupported protocol

Chao Yu chao@kernel.org f2fs: fix to cover read extent cache access with lock

Chao Yu chao@kernel.org f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC

yunshui jiangyunshui@kylinos.cn bpf, net: Use DEV_STAT_INC()

Wojciech Gładysz wojciech.gladysz@infogain.com ext4: sanity check for NULL pointer after ext4_force_shutdown

Matthew Wilcox (Oracle) willy@infradead.org ext4: convert ext4_da_do_write_end() to take a folio

Eric Dumazet edumazet@google.com wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values

Peter Xu peterx@redhat.com mm/page_table_check: support userfault wr-protect entries

Jan Kara jack@suse.cz ext4: do not create EA inode under buffer lock

Jan Kara jack@suse.cz ext4: fold quota accounting into ext4_xattr_inode_lookup_create()

Luiz Augusto von Dentz luiz.von.dentz@intel.com Bluetooth: RFCOMM: Fix not validating setsockopt user input

Eric Dumazet edumazet@google.com nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies

Eric Dumazet edumazet@google.com net: add copy_safe_from_sockptr() helper

Eric Dumazet edumazet@google.com mISDN: fix MISDN_TIME_STAMP handling

Gustavo A. R. Silva gustavoars@kernel.org fs: Annotate struct file_handle with __counted_by() and use struct_size()

Alexei Starovoitov ast@kernel.org bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie.

Kees Cook keescook@chromium.org bpf: Replace bpf_lpm_trie_key 0-length array with flexible array

Gavrilov Ilia Ilia.Gavrilov@infotecs.ru pppoe: Fix memory leak in pppoe_sendmsg()

Dmitry Antipov dmantipov@yandex.ru net: sctp: fix skb leak in sctp_inq_free()

Allison Henderson allison.henderson@oracle.com net:rds: Fix possible deadlock in rds_message_put

Jan Kara jack@suse.cz quota: Detect loops in quota tree

Javier Carrasco javier.carrasco.cruz@gmail.com Input: bcm5974 - check endpoint type before starting traffic

John Fastabend john.fastabend@gmail.com net: tls, add test to capture error on large splice

Gao Xiang xiang@kernel.org erofs: avoid debugging output for (de)compressed data

Edward Adam Davis eadavis@qq.com reiserfs: fix uninit-value in comp_keys

Phillip Lougher phillip@squashfs.org.uk Squashfs: fix variable overflow triggered by sysbot

Lizhi Xu lizhi.xu@windriver.com squashfs: squashfs_read_data need to check if the length is 0

Manas Ghandat ghandatmanas@gmail.com jfs: fix shift-out-of-bounds in dbJoin

Jakub Kicinski kuba@kernel.org net: don't dump stack on queue timeout

Lizhi Xu lizhi.xu@windriver.com jfs: fix log->bdev_handle null ptr deref in lbmStartIO

Jan Kara jack@suse.cz jfs: Convert to bdev_open_by_dev()

Jan Kara jack@suse.cz fs: Convert to bdev_open_by_dev()

Johannes Berg johannes.berg@intel.com wifi: mac80211: fix change_address deadlock during unregister

Johannes Berg johannes.berg@intel.com wifi: mac80211: take wiphy lock for MAC addr change

Eric Dumazet edumazet@google.com tcp_metrics: optimize tcp_metrics_flush_all()

Yafang Shao laoar.shao@gmail.com cgroup: Make operations on the cgroup root_list RCU safe

Dongli Zhang dongli.zhang@oracle.com genirq/cpuhotplug: Retry with cpu_online_mask when migration fails

David Stevens stevensd@chromium.org genirq/cpuhotplug: Skip suspended interrupts when restoring affinity

WangYuli wangyuli@uniontech.com nvme/pci: Add APST quirk for Lenovo N60z laptop

Yang Shi yang@os.amperecomputing.com mm: gup: stop abusing try_grab_folio

Josef Bacik josef@toxicpanda.com nfsd: make svc_stat per-network namespace instead of global

Josef Bacik josef@toxicpanda.com nfsd: remove nfsd_stats, make th_cnt a global counter

Josef Bacik josef@toxicpanda.com nfsd: make all of the nfsd stats per-network namespace

Josef Bacik josef@toxicpanda.com nfsd: expose /proc/net/sunrpc/nfsd in net namespaces

Josef Bacik josef@toxicpanda.com nfsd: rename NFSD_NET_* to NFSD_STATS_*

Josef Bacik josef@toxicpanda.com sunrpc: use the struct net as the svc proc private

Josef Bacik josef@toxicpanda.com sunrpc: remove ->pg_stats from svc_program

Josef Bacik josef@toxicpanda.com sunrpc: pass in the sv_stats struct through svc_create_pooled

Josef Bacik josef@toxicpanda.com nfsd: stop setting ->pg_stats for unused stats

Josef Bacik josef@toxicpanda.com sunrpc: don't change ->sv_stats if it doesn't exist

Chuck Lever chuck.lever@oracle.com NFSD: Fix frame size warning in svc_export_parse()

Chuck Lever chuck.lever@oracle.com NFSD: Rewrite synopsis of nfsd_percpu_counters_init()

Huacai Chen chenhuacai@kernel.org LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h

Amadeusz Sławiński amadeuszx.slawinski@linux.intel.com ASoC: topology: Fix route memory corruption

Amadeusz Sławiński amadeuszx.slawinski@linux.intel.com ASoC: topology: Clean up route loading

Kees Cook kees@kernel.org exec: Fix ToCToU between perm check and set-uid/gid usage

-------------

Diffstat:

Documentation/bpf/map_lpm_trie.rst | 2 +- Documentation/mm/page_table_check.rst | 9 +- Makefile | 4 +- arch/arm64/kvm/hyp/pgtable.c | 12 +- arch/loongarch/include/uapi/asm/unistd.h | 1 + arch/x86/include/asm/pgtable.h | 18 +- drivers/isdn/mISDN/socket.c | 10 +- drivers/net/ppp/pppoe.c | 23 +-- drivers/nvme/host/pci.c | 7 + fs/binfmt_flat.c | 4 +- fs/buffer.c | 2 + fs/cramfs/inode.c | 2 +- fs/erofs/decompressor.c | 8 +- fs/exec.c | 8 +- fs/ext4/inode.c | 24 ++- fs/ext4/xattr.c | 155 +++++++------- fs/f2fs/extent_cache.c | 50 ++--- fs/f2fs/f2fs.h | 2 +- fs/f2fs/gc.c | 10 + fs/f2fs/inode.c | 10 +- fs/fhandle.c | 6 +- fs/jfs/jfs_dmap.c | 2 + fs/jfs/jfs_dtree.c | 2 + fs/jfs/jfs_logmgr.c | 33 +-- fs/jfs/jfs_logmgr.h | 2 +- fs/jfs/jfs_mount.c | 3 +- fs/lockd/svc.c | 3 - fs/nfs/callback.c | 3 - fs/nfsd/cache.h | 2 - fs/nfsd/export.c | 32 ++- fs/nfsd/export.h | 4 +- fs/nfsd/netns.h | 25 ++- fs/nfsd/nfs4proc.c | 6 +- fs/nfsd/nfs4state.c | 3 +- fs/nfsd/nfscache.c | 40 +--- fs/nfsd/nfsctl.c | 16 +- fs/nfsd/nfsd.h | 1 + fs/nfsd/nfsfh.c | 3 +- fs/nfsd/nfssvc.c | 14 +- fs/nfsd/stats.c | 54 ++--- fs/nfsd/stats.h | 88 +++----- fs/nfsd/vfs.c | 6 +- fs/ntfs3/frecord.c | 75 ++++++- fs/quota/quota_tree.c | 128 +++++++++--- fs/quota/quota_v2.c | 15 +- fs/reiserfs/stree.c | 2 +- fs/romfs/super.c | 2 +- fs/squashfs/block.c | 2 +- fs/squashfs/file.c | 3 +- fs/squashfs/file_direct.c | 6 +- fs/super.c | 15 +- include/linux/cgroup-defs.h | 7 +- include/linux/fs.h | 3 +- include/linux/sockptr.h | 25 +++ include/linux/sunrpc/svc.h | 5 +- include/uapi/linux/bpf.h | 19 +- kernel/bpf/lpm_trie.c | 33 +-- kernel/cgroup/cgroup-internal.h | 3 +- kernel/cgroup/cgroup.c | 23 ++- kernel/irq/cpuhotplug.c | 27 ++- kernel/irq/manage.c | 12 +- mm/debug_vm_pgtable.c | 31 +-- mm/gup.c | 251 ++++++++++++----------- mm/huge_memory.c | 6 +- mm/hugetlb.c | 2 +- mm/internal.h | 4 +- mm/page_table_check.c | 30 +++ net/bluetooth/rfcomm/sock.c | 14 +- net/core/filter.c | 8 +- net/ipv4/fou_core.c | 2 +- net/ipv4/tcp_metrics.c | 7 +- net/mac80211/iface.c | 27 ++- net/nfc/llcp_sock.c | 12 +- net/rds/recv.c | 13 +- net/sched/sch_generic.c | 5 +- net/sctp/inqueue.c | 14 +- net/sunrpc/stats.c | 2 +- net/sunrpc/svc.c | 39 ++-- net/wireless/nl80211.c | 6 +- samples/bpf/map_perf_test_user.c | 2 +- samples/bpf/xdp_router_ipv4_user.c | 2 +- sound/soc/soc-topology.c | 32 +-- sound/usb/mixer.c | 7 + tools/include/uapi/linux/bpf.h | 19 +- tools/testing/selftests/bpf/progs/map_ptr_kern.c | 2 +- tools/testing/selftests/bpf/test_lpm_map.c | 18 +- tools/testing/selftests/net/tls.c | 14 ++ 87 files changed, 987 insertions(+), 696 deletions(-)