This is the start of the stable review cycle for the 6.1.70 release. There are 112 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Mon, 01 Jan 2024 11:57:43 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.70-rc1.... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 6.1.70-rc1

Léo Lam leo@leolam.fr wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x)

Johannes Berg johannes.berg@intel.com wifi: cfg80211: fix CQM for non-range use

Krister Johansen kjlx@templeofstupid.com fuse: share lookup state between submount and its parent

SeongJae Park sj@kernel.org mm/damon/core: make damon_start() waits until kdamond_fn() starts

Thomas Gleixner tglx@linutronix.de x86/alternatives: Sync core before enabling interrupts

Marc Zyngier maz@kernel.org KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy

Marc Zyngier maz@kernel.org KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy()

Marc Zyngier maz@kernel.org KVM: arm64: vgic: Simplify kvm_vgic_destroy()

Yaxiong Tian tianyaxiong@kylinos.cn thunderbolt: Fix memory leak in margining_port_remove()

Herve Codina herve.codina@bootlin.com lib/vsprintf: Fix %pfwf when current node refcount == 0

xiongxin xiongxin@kylinos.cn gpio: dwapb: mask/unmask IRQ when disable/enale it

Tony Lindgren tony@atomide.com bus: ti-sysc: Flush posted write only after srst_udelay

Nam Cao namcao@linutronix.de pinctrl: starfive: jh7100: ignore disabled device tree nodes

Mikulas Patocka mpatocka@redhat.com dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata()

Steven Rostedt (Google) rostedt@goodmis.org tracing / synthetic: Disable events after testing in synth_event_gen_test_init()

Alexander Atanasov alexander.atanasov@virtuozzo.com scsi: core: Always send batch on reset or error handling command

Martin K. Petersen martin.petersen@oracle.com Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity"

Geliang Tang geliang.tang@linux.dev selftests: mptcp: join: fix subflow_send_ack lookup

Ming Lei ming.lei@redhat.com ublk: move ublk_cancel_dev() out of ub->mutex

Konstantin Meskhidze konstantin.meskhidze@huawei.com ubifs: fix possible dereference after free

Naohiro Aota naohiro.aota@wdc.com btrfs: zoned: no longer count fresh BG region as zone unusable

Aric Cyr aric.cyr@amd.com Revert "drm/amd/display: Do not set DRR on pipe commit"

Li Lingfeng lilingfeng3@huawei.com dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client

Mauricio Faria de Oliveira mfo@canonical.com loop: do not enforce max_loop hard limit by (new) default

Heiko Stuebner heiko.stuebner@vrull.eu RISC-V: Fix do_notify_resume / do_work_pending prototype

JP Kobryn inwardvessel@gmail.com 9p: prevent read overrun in protocol dump tracepoint

Ville Syrjälä ville.syrjala@linux.intel.com drm/i915: Reject async flips with bigjoiner

Paulo Alcantara pc@manguebit.com smb: client: fix OOB in smbCalcSize()

Paulo Alcantara pc@manguebit.com smb: client: fix OOB in SMB2_query_info_init()

Paulo Alcantara pc@manguebit.com smb: client: fix potential OOB in cifs_dump_detail()

Paulo Alcantara pc@manguebit.com smb: client: fix OOB in cifsd when receiving compounded resps

Fabio Estevam festevam@denx.de dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp

Ronald Wahl ronald.wahl@raritan.com net: ks8851: Fix TX stall caused by TX buffer overrun

Rouven Czerwinski r.czerwinski@pengutronix.de net: rfkill: gpio: set GPIO direction

Fedor Pchelkin pchelkin@ispras.ru net: 9p: avoid freeing uninit memory in p9pdu_vreadf

Christoffer Sandberg cs@tuxedo.de Input: soc_button_array - add mapping for airplane mode button

Jose Ignacio Tornos Martinez jtornosm@redhat.com net: usb: ax88179_178a: avoid failed operations when device is disconnected

Alex Lu alex_lu@realsil.com.cn Bluetooth: Add more enc key size check

Xiao Yao xiaoyao@rock-chips.com Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE

Frédéric Danis frederic.danis@collabora.com Bluetooth: L2CAP: Send reject on command corrupted request

Hyunwoo Kim v4bel@theori.io Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg

Luiz Augusto von Dentz luiz.von.dentz@intel.com Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent

Clément Villeret clement.villeret@gmail.com ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA

Reinhard Speyerer rspmn@arcor.de USB: serial: option: add Quectel RM500Q R13 firmware support

Slark Xiao slark_xiao@163.com USB: serial: option: add Foxconn T99W265 with new baseline

Alper Ak alperyasinak1@gmail.com USB: serial: option: add Quectel EG912Y module support

Mark Glover mark.glover@actisense.com USB: serial: ftdi_sio: update Actisense PIDs constant names

Johannes Berg johannes.berg@intel.com wifi: cfg80211: fix certs build to not depend on file order

Chen-Yu Tsai wens@kernel.org wifi: cfg80211: Add my certificate

Tasos Sahanidis tasos@tasossah.com usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3

Jeremie Knuesel knuesel@gmail.com ALSA: usb-audio: Increase delay in MOTU M quirk

David Lechner dlechner@baylibre.com iio: triggered-buffer: prevent possible freeing of wrong buffer

Wadim Egorov w.egorov@phytec.de iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma()

Javier Carrasco javier.carrasco.cruz@gmail.com iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table

Wei Yongjun weiyongjun1@huawei.com scsi: bnx2fc: Fix skb double free in bnx2fc_rcv()

Haoran Liu liuhaoran14@163.com Input: ipaq-micro-keys - add error handling for devm_kmemdup

Konrad Dybcio konrad.dybcio@linaro.org interconnect: qcom: sm8250: Enable sync_state

Su Hui suhui@nfschina.com iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw

Mike Tipton quic_mdtipton@quicinc.com interconnect: Treat xlate() returning NULL node as an error

Ville Syrjälä ville.syrjala@linux.intel.com drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original

Clint Taylor clinton.a.taylor@intel.com drm/i915/mtl: Add MTL for remapping CCS FBs

Ville Syrjälä ville.syrjala@linux.intel.com drm/i915/dpt: Only do the POT stride remap when using DPT

Ville Syrjälä ville.syrjala@linux.intel.com drm/i915: Fix intel_atomic_setup_scalers() plane_state handling

Ville Syrjälä ville.syrjala@linux.intel.com drm/i915: Relocate intel_atomic_setup_scalers()

Luca Coelho luciano.coelho@intel.com drm/i915/mtl: limit second scaler vertical scaling in ver >= 14

Maurizio Lombardi mlombard@redhat.com nvme-pci: fix sleeping function called from interrupt context

Kent Gibson warthog618@gmail.com gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl()

Alexis Lothoré alexis.lothore@bootlin.com pinctrl: at91-pio4: use dedicated lock class for IRQ

Arnd Bergmann arnd@arndb.de x86/xen: add CPU dependencies for 32-bit build

Quan Nguyen quan@os.amperecomputing.com i2c: aspeed: Handle the coalesced stop conditions with the start conditions.

Shengjiu Wang shengjiu.wang@nxp.com ASoC: fsl_sai: Fix channel swap issue on i.MX8MP

Jerome Brunet jbrunet@baylibre.com ASoC: hdmi-codec: fix missing report for jack initial status

David Howells dhowells@redhat.com afs: Fix use-after-free due to get/remove race in volume tree

David Howells dhowells@redhat.com afs: Fix overwriting of result of DNS query

David Howells dhowells@redhat.com keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry

Eric Dumazet edumazet@google.com net: check dev->gso_max_size in gso_features_check()

David Howells dhowells@redhat.com afs: Fix dynamic root lookup DNS check

David Howells dhowells@redhat.com afs: Fix the dynamic root's d_delete to always delete unused dentries

Liu Jian liujian56@huawei.com net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev()

Yury Norov yury.norov@gmail.com net: mana: select PAGE_POOL

Arnd Bergmann arnd@arndb.de Bluetooth: hci_event: shut up a false-positive warning

Ying Hsu yinghsu@chromium.org Bluetooth: Fix deadlock in vhci_send_frame

Eric Dumazet edumazet@google.com net/rose: fix races in rose_kill_by_device()

Zhipeng Lu alexious@zju.edu.cn ethernet: atheros: fix a memleak in atl1e_setup_ring_resources

Eric Dumazet edumazet@google.com net: sched: ife: fix potential use-after-free

Shigeru Yoshida syoshida@redhat.com net: Return error from sk_stream_wait_connect() if sk_wait_event() fails

Suman Ghosh sumang@marvell.com octeontx2-pf: Fix graceful exit during PFC configuration failure

Vladimir Oltean vladimir.oltean@nxp.com net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above

Rahul Rameshbabu rrameshbabu@nvidia.com net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors

Rahul Rameshbabu rrameshbabu@nvidia.com net/mlx5e: Correct snprintf truncation handling for fw_version buffer

Moshe Shemesh moshe@nvidia.com net/mlx5: Fix fw tracer first block check

Dinghao Liu dinghao.liu@zju.edu.cn net/mlx5e: fix a potential double-free in fs_udp_create_groups

Shifeng Li lishifeng@sangfor.com.cn net/mlx5e: Fix a race in command alloc flow

Shay Drory shayd@nvidia.com net/mlx5: Re-organize mlx5_cmd struct

Tariq Toukan tariqt@nvidia.com net/mlx5: Prevent high-rate FW commands from populating all slots

Tariq Toukan tariqt@nvidia.com net/mlx5: Introduce and use opcode getter in command interface

Shifeng Li lishifeng@sangfor.com.cn net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list()

Vlad Buslov vladbu@nvidia.com Revert "net/mlx5e: fix double free of encap_header"

Vlad Buslov vladbu@nvidia.com Revert "net/mlx5e: fix double free of encap_header in update funcs"

Johannes Berg johannes.berg@intel.com wifi: mac80211: mesh_plink: fix matches_local logic

Johannes Berg johannes.berg@intel.com wifi: mac80211: mesh: check element parsing succeeded

Edward Adam Davis eadavis@qq.com wifi: mac80211: check if the existing link config remains unchanged

Johannes Berg johannes.berg@intel.com wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock

Heiko Carstens hca@linux.ibm.com s390/vx: fix save/restore of fpu kernel context

Geert Uytterhoeven geert+renesas@glider.be reset: Fix crash when freeing non-existent optional resets

Kunwu Chan chentao@kylinos.cn ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init

Andrew Davis afd@ti.com ARM: dts: dra7: Fix DRA7 L3 NoC node register size

Hamza Mahfooz hamza.mahfooz@amd.com drm/amd/display: fix hw rotated modes when PSR-SU is enabled

Mario Limonciello mario.limonciello@amd.com HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[]

Andy Shevchenko andriy.shevchenko@linux.intel.com HID: i2c-hid: acpi: Unify ACPI ID tables format

Jiri Olsa jolsa@kernel.org bpf: Fix prog_array_map_poke_run map poke update

Arnd Bergmann arnd@arndb.de kasan: disable kasan_non_canonical_hook() for HW tags

-------------

Diffstat:

.../devicetree/bindings/nvmem/mxs-ocotp.yaml | 10 +- Makefile | 4 +- arch/arm/boot/dts/dra7.dtsi | 2 +- arch/arm/mach-omap2/id.c | 5 + arch/arm64/kvm/arm.c | 2 +- arch/arm64/kvm/vgic/vgic-init.c | 47 ++-- arch/arm64/kvm/vgic/vgic-mmio-v3.c | 2 +- arch/arm64/kvm/vgic/vgic.h | 1 + arch/riscv/include/asm/signal.h | 2 +- arch/s390/include/asm/fpu/api.h | 2 +- arch/x86/kernel/alternative.c | 2 +- arch/x86/net/bpf_jit_comp.c | 46 ++++ arch/x86/xen/Kconfig | 1 + drivers/block/loop.c | 36 ++- drivers/block/ublk_drv.c | 40 ++-- drivers/bluetooth/hci_vhci.c | 10 +- drivers/bus/ti-sysc.c | 18 +- drivers/gpio/gpio-dwapb.c | 12 +- drivers/gpio/gpiolib-cdev.c | 16 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 3 + drivers/gpu/drm/amd/display/dc/dc_hw_types.h | 1 + .../drm/amd/display/dc/dcn10/dcn10_hw_sequencer.c | 3 +- drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hubp.c | 12 +- drivers/gpu/drm/amd/display/dc/dcn30/dcn30_hwseq.c | 3 + drivers/gpu/drm/i915/display/intel_atomic.c | 193 +--------------- drivers/gpu/drm/i915/display/intel_atomic.h | 4 - drivers/gpu/drm/i915/display/intel_display.c | 11 + drivers/gpu/drm/i915/display/intel_fb.c | 10 +- drivers/gpu/drm/i915/display/skl_scaler.c | 257 +++++++++++++++++++++ drivers/gpu/drm/i915/display/skl_scaler.h | 10 +- drivers/hid/i2c-hid/i2c-hid-acpi.c | 15 +- drivers/i2c/busses/i2c-aspeed.c | 48 ++-- drivers/iio/adc/ti_am335x_adc.c | 4 +- drivers/iio/buffer/industrialio-triggered-buffer.c | 10 + drivers/iio/common/ms_sensors/ms_sensors_i2c.c | 4 +- drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 4 +- drivers/input/keyboard/ipaq-micro-keys.c | 3 + drivers/input/misc/soc_button_array.c | 5 + drivers/interconnect/core.c | 3 + drivers/interconnect/qcom/sm8250.c | 1 + drivers/md/dm-bufio.c | 7 + drivers/md/dm-integrity.c | 11 +- drivers/md/dm-thin-metadata.c | 58 ++--- drivers/md/persistent-data/dm-block-manager.c | 6 + drivers/md/persistent-data/dm-block-manager.h | 1 + drivers/md/persistent-data/dm-space-map.h | 3 +- .../md/persistent-data/dm-transaction-manager.c | 3 + drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 5 +- .../ethernet/marvell/octeontx2/nic/otx2_dcbnl.c | 17 +- drivers/net/ethernet/mellanox/mlx5/core/cmd.c | 216 +++++++++-------- drivers/net/ethernet/mellanox/mlx5/core/debugfs.c | 4 +- .../ethernet/mellanox/mlx5/core/diag/fw_tracer.c | 2 +- .../mellanox/mlx5/core/en/fs_tt_redirect.c | 1 + .../net/ethernet/mellanox/mlx5/core/en/tc_tun.c | 30 +-- .../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/vport.c | 2 +- drivers/net/ethernet/micrel/ks8851.h | 3 + drivers/net/ethernet/micrel/ks8851_common.c | 20 +- drivers/net/ethernet/micrel/ks8851_spi.c | 42 ++-- drivers/net/ethernet/microsoft/Kconfig | 1 + drivers/net/ethernet/mscc/ocelot_stats.c | 8 +- drivers/net/usb/ax88179_178a.c | 23 +- drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 4 +- drivers/nvme/host/core.c | 3 +- drivers/pinctrl/pinctrl-at91-pio4.c | 8 + drivers/pinctrl/starfive/pinctrl-starfive-jh7100.c | 4 +- drivers/reset/core.c | 8 +- drivers/scsi/aacraid/aacraid.h | 1 - drivers/scsi/aacraid/commsup.c | 6 +- drivers/scsi/aacraid/linit.c | 14 -- drivers/scsi/aacraid/src.c | 25 +- drivers/scsi/bnx2fc/bnx2fc_fcoe.c | 9 +- drivers/scsi/scsi_error.c | 2 + drivers/thunderbolt/debugfs.c | 2 +- drivers/usb/serial/ftdi_sio.c | 6 +- drivers/usb/serial/ftdi_sio_ids.h | 6 +- drivers/usb/serial/option.c | 5 + drivers/usb/storage/unusual_devs.h | 11 + fs/afs/cell.c | 6 +- fs/afs/dynroot.c | 31 +-- fs/afs/internal.h | 2 + fs/afs/volume.c | 26 ++- fs/btrfs/free-space-cache.c | 8 +- fs/btrfs/zoned.c | 26 +-- fs/fuse/fuse_i.h | 15 ++ fs/fuse/inode.c | 75 +++++- fs/smb/client/cifs_debug.c | 12 +- fs/smb/client/cifsglob.h | 3 +- fs/smb/client/connect.c | 7 +- fs/smb/client/misc.c | 4 + fs/smb/client/smb2ops.c | 19 +- fs/smb/client/smb2pdu.c | 29 ++- fs/ubifs/tnc.c | 1 + include/linux/bpf.h | 3 + include/linux/damon.h | 3 + include/linux/dm-bufio.h | 2 + include/linux/kasan.h | 6 +- include/linux/key-type.h | 1 + include/linux/mlx5/driver.h | 20 +- include/net/bluetooth/hci_core.h | 5 + include/trace/events/9p.h | 11 +- kernel/bpf/arraymap.c | 58 +---- kernel/trace/synth_event_gen_test.c | 11 + lib/vsprintf.c | 11 +- mm/damon/core.c | 7 + mm/kasan/report.c | 4 +- net/8021q/vlan_core.c | 9 +- net/9p/protocol.c | 17 +- net/bluetooth/af_bluetooth.c | 7 +- net/bluetooth/hci_event.c | 22 +- net/bluetooth/l2cap_core.c | 21 +- net/bluetooth/mgmt.c | 25 +- net/bluetooth/smp.c | 7 + net/core/dev.c | 3 + net/core/stream.c | 2 +- net/dns_resolver/dns_key.c | 10 +- net/ife/ife.c | 1 + net/mac80211/cfg.c | 4 +- net/mac80211/mesh_plink.c | 16 +- net/rfkill/rfkill-gpio.c | 8 + net/rose/af_rose.c | 39 +++- net/wireless/certs/wens.hex | 87 +++++++ net/wireless/core.h | 1 + net/wireless/nl80211.c | 56 +++-- security/keys/gc.c | 31 ++- security/keys/internal.h | 11 +- security/keys/key.c | 15 +- security/keys/proc.c | 2 +- sound/pci/hda/patch_realtek.c | 1 + sound/soc/codecs/hdmi-codec.c | 12 +- sound/soc/fsl/fsl_sai.c | 3 + sound/usb/quirks.c | 4 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 8 +- 134 files changed, 1494 insertions(+), 777 deletions(-)