This is the start of the stable review cycle for the 6.6.35 release. There are 267 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 21 Jun 2024 12:55:11 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.35-rc1.... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 6.6.35-rc1

Oleg Nesterov oleg@redhat.com zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING

Jean Delvare jdelvare@suse.de i2c: designware: Fix the functionality flags of the slave-only interface

Jean Delvare jdelvare@suse.de i2c: at91: Fix the functionality flags of the slave-only interface

Yongzhi Liu hyperlyzcs@gmail.com misc: microchip: pci1xxxx: Fix a memory leak in the error handling of gp_aux_bus_probe()

Shichao Lai shichaorai@gmail.com usb-storage: alauda: Check whether the media is initialized

Andy Shevchenko andriy.shevchenko@linux.intel.com serial: 8250_dw: Don't use struct dw8250_data outside of 8250_dw

Andy Shevchenko andriy.shevchenko@linux.intel.com serial: 8250_dw: Replace ACPI device check by a quirk

Andy Shevchenko andriy.shevchenko@linux.intel.com serial: 8250_dw: Switch to use uart_read_port_properties()

Andy Shevchenko andriy.shevchenko@linux.intel.com serial: port: Introduce a common helper to read properties

Andy Shevchenko andriy.shevchenko@linux.intel.com serial: core: Add UPIO_UNKNOWN constant for unknown port type

Andy Shevchenko andriy.shevchenko@linux.intel.com device property: Implement device_is_big_endian()

Stefan Berger stefanb@linux.ibm.com ima: Fix use-after-free on a dentry's dname.name

Sicong Huang congei42@163.com greybus: Fix use-after-free bug in gb_interface_release due to race condition.

Matthieu Baerts (NGI0) matttbe@kernel.org selftests: net: lib: avoid error removing empty netns name

Matthieu Baerts (NGI0) matttbe@kernel.org selftests: net: lib: support errexit with busywait

Hangbin Liu liuhangbin@gmail.com selftests/net/lib: no need to record ns name if it already exist

Hangbin Liu liuhangbin@gmail.com selftests/net/lib: update busywait timeout value

David Howells dhowells@redhat.com cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode

Beleswar Padhi b-padhi@ti.com remoteproc: k3-r5: Jump to error handling labels in start/stop errors

Benjamin Poirier bpoirier@nvidia.com selftests: forwarding: Avoid failures to source net/lib.sh

Hangbin Liu liuhangbin@gmail.com selftests/net: add variable NS_LIST for lib.sh

Hangbin Liu liuhangbin@gmail.com selftests/net: add lib.sh

Sam James sam@gentoo.org Revert "fork: defer linking file vma until vma is fully initialized"

Doug Brown doug@schmorgal.com serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level

Miaohe Lin linmiaohe@huawei.com mm/huge_memory: don't unpoison huge_zero_folio

Oleg Nesterov oleg@redhat.com tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device()

Ryusuke Konishi konishi.ryusuke@gmail.com nilfs2: fix potential kernel bug due to lack of writeback flag waiting

Petr Tesarik petr.tesarik1@huawei-partners.com swiotlb: extend buffer pre-padding to alloc_align_mask if necessary

Will Deacon will@kernel.org swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE

Will Deacon will@kernel.org swiotlb: Enforce page alignment in swiotlb_alloc()

Andrey Albershteyn aalbersh@redhat.com xfs: allow cross-linking special files without project quota

Dave Chinner dchinner@redhat.com xfs: don't use current->journal_info

Dave Chinner dchinner@redhat.com xfs: allow sunit mount option to repair bad primary sb stripe values

Long Li leo.lilong@huawei.com xfs: ensure submit buffers on LSN boundaries in error handlers

Dave Chinner dchinner@redhat.com xfs: shrink failure needs to hold AGI buffer

Dave Chinner dchinner@redhat.com xfs: fix SEEK_HOLE/DATA for regions with active COW extents

Darrick J. Wong djwong@kernel.org xfs: fix scrub stats file permissions

Darrick J. Wong djwong@kernel.org xfs: fix imprecise logic in xchk_btree_check_block_owner

Filipe Manana fdmanana@suse.com btrfs: zoned: fix use-after-free due to race with dev replace

Christoph Hellwig hch@lst.de btrfs: zoned: factor out DUP bg handling from btrfs_load_block_group_zone_info

Christoph Hellwig hch@lst.de btrfs: zoned: factor out single bg handling from btrfs_load_block_group_zone_info

Christoph Hellwig hch@lst.de btrfs: zoned: factor out per-zone logic from btrfs_load_block_group_zone_info

Christoph Hellwig hch@lst.de btrfs: zoned: introduce a zone_info struct in btrfs_load_block_group_zone_info

Tomi Valkeinen tomi.valkeinen@ideasonboard.com pmdomain: ti-sci: Fix duplicate PD referrals

Alexander Shishkin alexander.shishkin@linux.intel.com intel_th: pci: Add Lunar Lake support

Alexander Shishkin alexander.shishkin@linux.intel.com intel_th: pci: Add Meteor Lake-S support

Alexander Shishkin alexander.shishkin@linux.intel.com intel_th: pci: Add Sapphire Rapids SOC support

Alexander Shishkin alexander.shishkin@linux.intel.com intel_th: pci: Add Granite Rapids SOC support

Alexander Shishkin alexander.shishkin@linux.intel.com intel_th: pci: Add Granite Rapids support

Imre Deak imre.deak@intel.com drm/i915: Fix audio component initialization

Vidya Srinivas vidya.srinivas@intel.com drm/i915/dpt: Make DPT object unshrinkable

Wachowski, Karol karol.wachowski@intel.com drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)

Chris Wilson chris@chris-wilson.co.uk drm/i915/gt: Disarm breadcrumbs if engines are already idle

Daniel Bristot de Oliveira bristot@kernel.org rtla/auto-analysis: Replace \t with spaces

Daniel Bristot de Oliveira bristot@kernel.org rtla/timerlat: Simplify "no value" printing on top

Nam Cao namcao@linutronix.de riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context

Jean-Baptiste Maneyrol jean-baptiste.maneyrol@tdk.com iio: invensense: fix interrupt timestamp alignment

Nuno Sa nuno.sa@analog.com iio: adc: axi-adc: make sure AXI clock is enabled

Beleswar Padhi b-padhi@ti.com remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs

Apurva Nandan a-nandan@ti.com remoteproc: k3-r5: Wait for core0 power-up before powering up core1

Nuno Sa nuno.sa@analog.com dmaengine: axi-dmac: fix possible race in remove()

Rick Wertenbroek rick.wertenbroek@gmail.com PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id

Su Yue glass.su@suse.com ocfs2: fix races between hole punching and AIO+DIO

Su Yue glass.su@suse.com ocfs2: use coarse time for new created files

Rik van Riel riel@surriel.com fs/proc: fix softlockup in __read_vmcore

Trond Myklebust trond.myklebust@hammerspace.com knfsd: LOOKUP can return an illegal error value

Vamshi Gajjela vamshigajjela@google.com spmi: hisi-spmi-controller: Do not override device identifier

Hagar Gamal Halim Hemdan hagarhem@amazon.com vmci: prevent speculation leaks by sanitizing event in event_deliver()

Fedor Pchelkin pchelkin@ispras.ru dma-buf: handle testing kthreads creation failure

Thadeu Lima de Souza Cascardo cascardo@igalia.com sock_map: avoid race between sock_map_close and sk_psock_put

Damien Le Moal dlemoal@kernel.org null_blk: Print correct max open zones limit in null_init_zoned_dev()

Matthias Maennich maennich@google.com kheaders: explicitly define file modes for archived headers

Steven Rostedt (Google) rostedt@goodmis.org tracing/selftests: Fix kprobe event name test for .isra. functions

Nam Cao namcao@linutronix.de riscv: fix overlap of allocated page and PTR_ERR

Adrian Hunter adrian.hunter@intel.com perf auxtrace: Fix multiple use of --itrace option

Haifeng Xu haifeng.xu@shopee.com perf/core: Fix missing wakeup when waiting for context reference

Yazen Ghannam yazen.ghannam@amd.com x86/amd_nb: Check for invalid SMN reads

David Kaplan david.kaplan@amd.com x86/kexec: Fix bug with call depth tracking

Hagar Hemdan hagarhem@amazon.com irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update()

Michael J. Ruhl michael.j.ruhl@intel.com clkdev: Update clkdev id usage to allow for longer names

YonglongLi liyonglong@chinatelecom.cn mptcp: pm: update add_addr counters after connect

YonglongLi liyonglong@chinatelecom.cn mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID

Paolo Abeni pabeni@redhat.com mptcp: ensure snd_una is properly initialized on connect

Marek Szyprowski m.szyprowski@samsung.com drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found

Jani Nikula jani.nikula@intel.com drm/exynos/vidi: fix memory leak in .get_modes()

Mario Limonciello mario.limonciello@amd.com ACPI: x86: Force StorageD3Enable on more products

John David Anglin dave@parisc-linux.org parisc: Try to fix random segmentation faults in package builds

Dirk Behme dirk.behme@de.bosch.com drivers: core: synchronize really_probe() and dev_uevent()

Jean-Baptiste Maneyrol jean-baptiste.maneyrol@tdk.com iio: imu: inv_icm42600: delete unneeded update watermark call

Jean-Baptiste Maneyrol jean-baptiste.maneyrol@tdk.com iio: invensense: fix odr switching to same value

Marc Ferland marc.ferland@sonatest.com iio: dac: ad5592r: fix temperature channel scaling value

David Lechner dlechner@baylibre.com iio: adc: ad9467: fix scan type sign

Benjamin Segall bsegall@google.com x86/boot: Don't add the EFI stub to targets, again

Namjae Jeon linkinjeon@kernel.org ksmbd: fix missing use of get_write in in smb2_set_ea()

Namjae Jeon linkinjeon@kernel.org ksmbd: move leading slash check to smb2_get_name()

Yongzhi Liu hyperlyzcs@gmail.com misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()

Aleksandr Mishin amishin@t-argos.ru bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()

Rao Shoaib Rao.Shoaib@oracle.com af_unix: Read with MSG_PEEK loops if the first unread byte is OOB

Taehee Yoo ap420073@gmail.com ionic: fix use after netif_napi_del()

Nikolay Aleksandrov razor@blackwall.org net: bridge: mst: fix suspicious rcu usage in br_mst_set_state

Nikolay Aleksandrov razor@blackwall.org net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state

Petr Pavlu petr.pavlu@suse.com net/ipv6: Fix the RT cache flush via sysctl using a previous delay

Daniel Wagner dwagner@suse.de nvmet-passthru: propagate status from id override functions

Chengming Zhou chengming.zhou@linux.dev block: fix request.queuelist usage in flush

Su Hui suhui@nfschina.com block: sed-opal: avoid possible wrong address reference in read_sed_opal_key()

Xiaolei Wang xiaolei.wang@windriver.com net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters

Joshua Washington joshwash@google.com gve: ignore nonrelevant GSO type bits when processing TSO headers

Kory Maincent kory.maincent@bootlin.com net: pse-pd: Use EOPNOTSUPP error code instead of ENOTSUPP

Ziqi Chen quic_ziqichen@quicinc.com scsi: ufs: core: Quiesce request queues before checking pending cmds

Kees Cook kees@kernel.org x86/uaccess: Fix missed zeroing of ia32 u64 get_user() range checking

Uros Bizjak ubizjak@gmail.com x86/asm: Use %c/%n instead of %P operand modifier in asm templates

Jozsef Kadlecsik kadlec@netfilter.org netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type

Davide Ornaghi d.ornaghi97@gmail.com netfilter: nft_inner: validate mandatory meta and payload

Pauli Virtanen pav@iki.fi Bluetooth: fix connection setup in l2cap_connect

Luiz Augusto von Dentz luiz.von.dentz@intel.com Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ

Gal Pressman gal@nvidia.com net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets

Gal Pressman gal@nvidia.com geneve: Fix incorrect inner network header offset when innerprotoinherit is set

Andy Shevchenko andriy.shevchenko@linux.intel.com net dsa: qca8k: fix usages of device_get_named_child_node()

Eric Dumazet edumazet@google.com tcp: fix race in tcp_v6_syn_recv_sock()

Adam Miotk adam.miotk@arm.com drm/bridge/panel: Fix runtime warning on panel bridge release

Amjad Ouled-Ameur amjad.ouled-ameur@arm.com drm/komeda: check for error-valued pointer

Sagar Cheluvegowda quic_scheluve@quicinc.com net: stmmac: dwmac-qcom-ethqos: Configure host DMA width

Aleksandr Mishin amishin@t-argos.ru liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet

Jie Wang wangjie125@huawei.com net: hns3: add cond_resched() to hns3 ring buffer init process

Yonglong Liu liuyonglong@huawei.com net: hns3: fix kernel crash problem in concurrent scenario

Csókás, Bence csokas.bence@prolan.hu net: sfp: Always call `sfp_sm_mod_remove()` on remove

Masahiro Yamada masahiroy@kernel.org modpost: do not warn about missing MODULE_DESCRIPTION() for vmlinux.o

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Annotate data-race of sk->sk_state in unix_accept().

Ian Forbes ian.forbes@broadcom.com drm/vmwgfx: Don't memcmp equivalent pointers

Ian Forbes ian.forbes@broadcom.com drm/vmwgfx: Remove STDU logic from generic mode_valid function

Ian Forbes ian.forbes@broadcom.com drm/vmwgfx: 3D disabled should not effect STDU memory limits

Ian Forbes ian.forbes@broadcom.com drm/vmwgfx: Filter modes which exceed graphics memory

Martin Krastev martin.krastev@broadcom.com drm/vmwgfx: Refactor drm connector probing for display modes

José Expósito jose.exposito89@gmail.com HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()

Su Hui suhui@nfschina.com io_uring/io-wq: avoid garbage value of 'match' in io_wq_enqueue()

Breno Leitao leitao@debian.org io_uring/io-wq: Use set_bit() and test_bit() at worker->flags

Lu Baolu baolu.lu@linux.intel.com iommu: Return right value in iommu_sva_bind_device()

Kun(llfl) llfl@linux.alibaba.com iommu/amd: Fix sysfs leak in iommu init

Nikita Zhandarovich n.zhandarovich@fintech.ru HID: core: remove unnecessary WARN_ON() in implement()

Matthias Schiffer matthias.schiffer@ew.tq-group.com gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type

Matthias Schiffer matthias.schiffer@ew.tq-group.com gpio: tqmx86: store IRQ trigger type and unmask status separately

Matthias Schiffer matthias.schiffer@ew.tq-group.com gpio: tqmx86: introduce shadow register for GPIO output value

Gregor Herburger gregor.herburger@tq-group.com gpio: tqmx86: fix typo in Kconfig label

Armin Wolf W_Armin@gmx.de platform/x86: dell-smbios: Fix wrong token data in sysfs

Chen Ni nichen@iscas.ac.cn drm/panel: sitronix-st7789v: Add check for of_drm_get_panel_orientation

Weiwen Hu huweiwen@linux.alibaba.com nvme: fix nvme_pr_* status code parsing

Masami Hiramatsu (Google) mhiramat@kernel.org selftests/tracing: Fix event filter test to retry up to 10 times

NeilBrown neilb@suse.de NFS: add barriers when testing for NFS_FSDATA_BLOCKED

Chen Hanxiao chenhx.fnst@fujitsu.com SUNRPC: return proper error from gss_wrap_req_priv

Olga Kornievskaia kolga@netapp.com NFSv4.1 enforce rootpath check in fs_location query

Samuel Holland samuel.holland@sifive.com clk: sifive: Do not register clkdevs for PRCI clocks

Masami Hiramatsu (Google) mhiramat@kernel.org selftests/ftrace: Fix to check required event file

Baokun Li libaokun1@huawei.com cachefiles: flush all requests after setting CACHEFILES_DEAD

Baokun Li libaokun1@huawei.com cachefiles: defer exposing anon_fd until after copy_to_user() succeeds

Baokun Li libaokun1@huawei.com cachefiles: never get a new anonymous fd if ondemand_id is valid

Baokun Li libaokun1@huawei.com cachefiles: remove err_put_fd label in cachefiles_ondemand_daemon_read()

Baokun Li libaokun1@huawei.com cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()

Baokun Li libaokun1@huawei.com cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()

Jia Zhu zhujia.zj@bytedance.com cachefiles: add restore command to recover inflight ondemand read requests

Baokun Li libaokun1@huawei.com cachefiles: add spin_lock for cachefiles_ondemand_info

Jia Zhu zhujia.zj@bytedance.com cachefiles: resend an open request if the read request's object is closed

Jia Zhu zhujia.zj@bytedance.com cachefiles: extract ondemand info field from cachefiles_object

Jia Zhu zhujia.zj@bytedance.com cachefiles: introduce object ondemand state

Baokun Li libaokun1@huawei.com cachefiles: remove requests from xarray during flushing requests

Baokun Li libaokun1@huawei.com cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd

Li Zhijian lizhijian@fujitsu.com cxl/region: Fix memregion leaks in devm_cxl_add_region()

Dave Jiang dave.jiang@intel.com cxl/test: Add missing vmalloc.h for tools/testing/cxl/test/mem.c

Chen Ni nichen@iscas.ac.cn HID: nvidia-shield: Add missing check for input_ff_create_memless

Michael Ellerman mpe@ellerman.id.au powerpc/uaccess: Fix build errors seen with GCC 13/14

Ziwei Xiao ziweixiao@google.com gve: Clear napi->skb before dev_kfree_skb_any()

Martin K. Petersen martin.petersen@oracle.com scsi: sd: Use READ(16) when reading block zero on large capacity disks

Breno Leitao leitao@debian.org scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory

Damien Le Moal dlemoal@kernel.org scsi: mpi3mr: Fix ATA NCQ priority support

Damien Le Moal dlemoal@kernel.org scsi: core: Disable CDL by default

Aapo Vienamo aapo.vienamo@linux.intel.com thunderbolt: debugfs: Fix margin debugfs node creation condition

Kuangyi Chiang ki.chiang65@gmail.com xhci: Apply broken streams quirk to Etron EJ188 xHCI host

Hector Martin marcan@marcan.st xhci: Handle TD clearing for multiple streams case

Kuangyi Chiang ki.chiang65@gmail.com xhci: Apply reset resume quirk to Etron EJ188 xHCI host

Mathias Nyman mathias.nyman@linux.intel.com xhci: Set correct transferred length for cancelled bulk transfers

Greg Kroah-Hartman gregkh@linuxfoundation.org jfs: xattr: fix buffer overflow for invalid xattr

Mickaël Salaün mic@digikod.net landlock: Fix d_parent walk

Douglas Anderson dianders@chromium.org serial: port: Don't block system suspend even if bytes are left to xmit

Ilpo Järvinen ilpo.jarvinen@linux.intel.com tty: n_tty: Fix buffer offsets when lookahead is used

Tomas Winkler tomas.winkler@intel.com mei: me: release irq in mei_me_pci_resume error path

Kyle Tso kyletso@google.com usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state

Amit Sunil Dhamne amitsd@google.com usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps

John Ernberg john.ernberg@actia.se USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected

Alan Stern stern@rowland.harvard.edu USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages

Jens Axboe axboe@kernel.dk io_uring: check for non-NULL file pointer in io_file_can_poll()

Pavel Begunkov asml.silence@gmail.com io_uring/rsrc: don't lock while !TASK_RUNNING

Ryusuke Konishi konishi.ryusuke@gmail.com nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors

Matthew Wilcox (Oracle) willy@infradead.org nilfs2: return the mapped address from nilfs_get_page()

Andrii Nakryiko andrii@kernel.org bpf: fix multi-uprobe PID filtering logic

Steven Rostedt (Google) rostedt@goodmis.org eventfs: Update all the eventfs_inodes from the events descriptor

Sunil V L sunilvl@ventanamicro.com irqchip/riscv-intc: Prevent memory leak when riscv_intc_init_common() fails

Yu Chien Peter Lin peterlin@andestech.com irqchip/riscv-intc: Introduce Andes hart-level interrupt controller

Yu Chien Peter Lin peterlin@andestech.com irqchip/riscv-intc: Allow large non-standard interrupt number

Dev Jain dev.jain@arm.com selftests/mm: compaction_test: fix bogus test success on Aarch64

Mark Brown broonie@kernel.org selftests/mm: log a consistent test name for check_compaction

Muhammad Usama Anjum usama.anjum@collabora.com selftests/mm: conform test to TAP format output

Miaohe Lin linmiaohe@huawei.com mm/memory-failure: fix handling of dissolved but not taken off from buddy pages

Matthew Wilcox (Oracle) willy@infradead.org memory-failure: use a folio in me_huge_page()

Gabor Juhos j4g8y7@gmail.com firmware: qcom_scm: disable clocks if qcom_scm_bw_enable() fails

Namjae Jeon linkinjeon@kernel.org ksmbd: use rwsem instead of rwlock for lease break

Su Hui suhui@nfschina.com net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()

Eric Dumazet edumazet@google.com ipv6: fix possible race in __fib6_drop_pcpu_from()

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Use skb_queue_empty_lockless() in unix_release_sock().

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen.

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Annotate data-races around sk->sk_sndbuf.

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG.

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Annotate data-race of sk->sk_state in unix_stream_read_skb().

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg().

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Annotate data-race of sk->sk_state in unix_stream_connect().

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll().

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Annotate data-race of sk->sk_state in unix_inq_len().

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Annodate data-races around sk->sk_state for writers.

Kuniyuki Iwashima kuniyu@amazon.com af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer.

Aleksandr Mishin amishin@t-argos.ru net: wwan: iosm: Fix tainted pointer delete is case of region creation fail

Larysa Zaremba larysa.zaremba@intel.com ice: add flag to distinguish reset from .ndo_bpf in XDP rings config

Larysa Zaremba larysa.zaremba@intel.com ice: remove af_xdp_zc_qps bitmap

Jacob Keller jacob.e.keller@intel.com ice: fix iteration of TLVs in Preserved Fields Area

Karol Kolacinski karol.kolacinski@intel.com ptp: Fix error message on failed pin verification

Eric Dumazet edumazet@google.com net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP

Aleksandr Mishin amishin@t-argos.ru net/mlx5: Fix tainted pointer delete is case of flow rules creation fail

Shay Drory shayd@nvidia.com net/mlx5: Always stop health timer during driver removal

Moshe Shemesh moshe@nvidia.com net/mlx5: Stop waiting for PCI if pci channel is offline

Jason Xing kernelxing@tencent.com mptcp: count CLOSE-WAIT sockets for MPTCP_MIB_CURRESTAB

Jason Xing kernelxing@tencent.com tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB

Daniel Borkmann daniel@iogearbox.net vxlan: Fix regression when dropping packets due to invalid src addresses

Hangyu Hua hbh25y@gmail.com net: sched: sch_multiq: fix possible OOB write in multiq_tune()

Tristram Ha tristram.ha@microchip.com net: phy: Micrel KSZ8061: fix errata solution not taking effect problem

Wen Gu guwen@linux.alibaba.com net/smc: avoid overwriting when adjusting sock bufsizes

Subbaraya Sundeep sbhatta@marvell.com octeontx2-af: Always allocate PF entries from low prioriy zone

Jiri Olsa jolsa@kernel.org bpf: Set run context for rawtp test_run callback

Jakub Kicinski kuba@kernel.org net: tls: fix marking packets as decrypted

Eric Dumazet edumazet@google.com ipv6: sr: block BH in seg6_output_core() and seg6_input_core()

Eric Dumazet edumazet@google.com ipv6: ioam: block BH from ioam6_output()

Matthias Stocker mstocker@barracuda.com vmxnet3: disable rx data ring on dma allocation failure

Ravi Bangoria ravi.bangoria@amd.com KVM: SEV-ES: Delegate LBR virtualization to the processor

Michael Roth michael.roth@amd.com KVM: SEV: Do not intercept accesses to MSR_IA32_XSS for SEV-ES guests

Ravi Bangoria ravi.bangoria@amd.com KVM: SEV-ES: Disallow SEV-ES guests when X86_FEATURE_LBRV is absent

Cong Wang cong.wang@bytedance.com bpf: Fix a potential use-after-free in bpf_link_free()

Hou Tao houtao1@huawei.com bpf: Optimize the free of inner map

Jiri Olsa jolsa@kernel.org bpf: Store ref_ctr_offsets values in bpf_uprobe array

Tristram Ha tristram.ha@microchip.com net: phy: micrel: fix KSZ9477 PHY issues after suspend/resume

DelphineCCChiu delphine_cc_chiu@wiwynn.com net/ncsi: Fix the multi thread manner of NCSI driver

Peter Delevoryas peter@pjd.dev net/ncsi: Simplify Kconfig/dts control flow

Duoming Zhou duoming@zju.edu.cn ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()

Lars Kellogg-Stedman lars@oddbit.com ax25: Fix refcount imbalance on inbound connections

Quan Zhou zhouquan@iscas.ac.cn RISC-V: KVM: Fix incorrect reg_subtype labels in kvm_riscv_vcpu_set_reg_isa_ext function

Yong-Xuan Wang yongxuan.wang@sifive.com RISC-V: KVM: No need to use mask when hart-index-bit is 0

Chanwoo Lee cw9316.lee@samsung.com scsi: ufs: mcq: Fix error output and clean up ufshcd_mcq_abort()

Lingbo Kong quic_lingbok@quicinc.com wifi: mac80211: correctly parse Spatial Reuse Parameter Set element

Emmanuel Grumbach emmanuel.grumbach@intel.com wifi: iwlwifi: mvm: don't read past the mfuart notifcation

Miri Korenblit miriam.rachel.korenblit@intel.com wifi: iwlwifi: mvm: check n_ssids before accessing the ssids

Shahar S Matityahu shahar.s.matityahu@intel.com wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef

Mordechay Goodstein mordechay.goodstein@intel.com wifi: iwlwifi: mvm: set properly mac header

Johannes Berg johannes.berg@intel.com wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64

Miri Korenblit miriam.rachel.korenblit@intel.com wifi: iwlwifi: mvm: don't initialize csa_work twice

Lin Ma linma@zju.edu.cn wifi: cfg80211: pmsr: use correct nla_get_uX functions

Remi Pommarel repk@triplefau.lt wifi: cfg80211: Lock wiphy in cfg80211_get_station

Johannes Berg johannes.berg@intel.com wifi: cfg80211: fully move wiphy work to unbound workqueue

Remi Pommarel repk@triplefau.lt wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()

Nicolas Escande nico.escande@gmail.com wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects

-------------

Diffstat:

Makefile | 4 +- arch/parisc/include/asm/cacheflush.h | 15 +- arch/parisc/include/asm/pgtable.h | 27 +- arch/parisc/kernel/cache.c | 421 +++++++++++++-------- arch/powerpc/include/asm/uaccess.h | 16 + arch/riscv/kvm/aia_device.c | 7 +- arch/riscv/kvm/vcpu_onereg.c | 4 +- arch/riscv/mm/init.c | 21 +- arch/riscv/mm/pageattr.c | 28 +- arch/x86/boot/compressed/Makefile | 4 +- arch/x86/boot/main.c | 4 +- arch/x86/include/asm/alternative.h | 22 +- arch/x86/include/asm/atomic64_32.h | 2 +- arch/x86/include/asm/cpufeature.h | 2 +- arch/x86/include/asm/irq_stack.h | 2 +- arch/x86/include/asm/uaccess.h | 6 +- arch/x86/kernel/amd_nb.c | 9 +- arch/x86/kernel/machine_kexec_64.c | 11 +- arch/x86/kvm/svm/sev.c | 38 +- arch/x86/kvm/svm/svm.c | 25 +- arch/x86/kvm/svm/svm.h | 4 +- arch/x86/lib/getuser.S | 6 +- block/blk-flush.c | 3 +- block/sed-opal.c | 2 +- drivers/acpi/x86/utils.c | 24 +- drivers/base/core.c | 3 + drivers/block/null_blk/zoned.c | 2 +- drivers/clk/clkdev.c | 2 +- drivers/clk/sifive/sifive-prci.c | 8 - drivers/cxl/core/region.c | 18 +- drivers/dma-buf/st-dma-fence.c | 6 + drivers/dma/dma-axi-dmac.c | 2 +- drivers/firmware/qcom_scm.c | 18 +- drivers/gpio/Kconfig | 2 +- drivers/gpio/gpio-tqmx86.c | 110 ++++-- .../drm/arm/display/komeda/komeda_pipeline_state.c | 2 +- drivers/gpu/drm/bridge/panel.c | 7 +- drivers/gpu/drm/drm_gem_shmem_helper.c | 3 + drivers/gpu/drm/exynos/exynos_drm_vidi.c | 7 +- drivers/gpu/drm/exynos/exynos_hdmi.c | 7 +- drivers/gpu/drm/i915/display/intel_audio.c | 32 +- drivers/gpu/drm/i915/display/intel_audio.h | 1 + .../gpu/drm/i915/display/intel_display_driver.c | 2 + drivers/gpu/drm/i915/gem/i915_gem_object.h | 4 +- drivers/gpu/drm/i915/gt/intel_breadcrumbs.c | 15 +- drivers/gpu/drm/panel/panel-sitronix-st7789v.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_drv.c | 7 - drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 3 - drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 276 +++++--------- drivers/gpu/drm/vmwgfx/vmwgfx_kms.h | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_ldu.c | 5 +- drivers/gpu/drm/vmwgfx/vmwgfx_scrn.c | 5 +- drivers/gpu/drm/vmwgfx/vmwgfx_stdu.c | 47 ++- drivers/greybus/interface.c | 1 + drivers/hid/hid-core.c | 1 - drivers/hid/hid-logitech-dj.c | 4 +- drivers/hid/hid-nvidia-shield.c | 4 +- drivers/hwtracing/intel_th/pci.c | 25 ++ drivers/i2c/busses/i2c-at91-slave.c | 3 +- drivers/i2c/busses/i2c-designware-slave.c | 2 +- drivers/iio/adc/ad9467.c | 4 +- drivers/iio/adc/adi-axi-adc.c | 5 + .../iio/common/inv_sensors/inv_sensors_timestamp.c | 15 +- drivers/iio/dac/ad5592r-base.c | 2 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 4 - drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 4 - drivers/iommu/amd/init.c | 9 + drivers/irqchip/irq-gic-v3-its.c | 44 +-- drivers/irqchip/irq-riscv-intc.c | 89 ++++- drivers/misc/mchp_pci1xxxx/mchp_pci1xxxx_gp.c | 9 +- drivers/misc/mei/pci-me.c | 4 +- drivers/misc/vmw_vmci/vmci_event.c | 6 +- drivers/net/dsa/qca/qca8k-leds.c | 12 +- drivers/net/ethernet/broadcom/bnxt/bnxt_hwrm.c | 2 +- drivers/net/ethernet/cavium/liquidio/lio_vf_rep.c | 11 +- drivers/net/ethernet/google/gve/gve_rx_dqo.c | 8 +- drivers/net/ethernet/google/gve/gve_tx_dqo.c | 20 +- drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 4 + drivers/net/ethernet/hisilicon/hns3/hns3_enet.h | 2 + .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 21 +- drivers/net/ethernet/intel/ice/ice.h | 43 ++- drivers/net/ethernet/intel/ice/ice_lib.c | 13 +- drivers/net/ethernet/intel/ice/ice_main.c | 22 +- drivers/net/ethernet/intel/ice/ice_nvm.c | 28 +- drivers/net/ethernet/intel/ice/ice_xsk.c | 13 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 33 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/fw.c | 4 + drivers/net/ethernet/mellanox/mlx5/core/health.c | 8 + .../net/ethernet/mellanox/mlx5/core/lag/port_sel.c | 8 +- .../net/ethernet/mellanox/mlx5/core/lib/pci_vsc.c | 4 + drivers/net/ethernet/mellanox/mlx5/core/main.c | 3 + drivers/net/ethernet/pensando/ionic/ionic_lif.c | 4 +- .../ethernet/stmicro/stmmac/dwmac-qcom-ethqos.c | 4 + drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 25 +- drivers/net/geneve.c | 10 +- drivers/net/phy/micrel.c | 104 ++++- drivers/net/phy/sfp.c | 3 +- drivers/net/vmxnet3/vmxnet3_drv.c | 2 +- drivers/net/vxlan/vxlan_core.c | 4 + drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 10 - .../net/wireless/intel/iwlwifi/mvm/mld-mac80211.c | 2 - drivers/net/wireless/intel/iwlwifi/mvm/rs.h | 9 +- drivers/net/wireless/intel/iwlwifi/mvm/rxmq.c | 5 +- drivers/net/wireless/intel/iwlwifi/mvm/scan.c | 4 +- drivers/net/wwan/iosm/iosm_ipc_devlink.c | 2 +- drivers/nvme/host/pr.c | 2 +- drivers/nvme/target/passthru.c | 6 +- drivers/pci/controller/pcie-rockchip-ep.c | 6 +- drivers/platform/x86/dell/dell-smbios-base.c | 92 ++--- drivers/pmdomain/ti/ti_sci_pm_domains.c | 20 +- drivers/ptp/ptp_chardev.c | 3 +- drivers/remoteproc/ti_k3_r5_remoteproc.c | 58 ++- drivers/scsi/mpi3mr/mpi3mr_app.c | 62 +++ drivers/scsi/mpt3sas/mpt3sas_base.c | 19 + drivers/scsi/mpt3sas/mpt3sas_base.h | 3 - drivers/scsi/mpt3sas/mpt3sas_ctl.c | 4 +- drivers/scsi/mpt3sas/mpt3sas_scsih.c | 23 -- drivers/scsi/scsi.c | 7 + drivers/scsi/scsi_transport_sas.c | 23 ++ drivers/scsi/sd.c | 17 +- drivers/spmi/hisi-spmi-controller.c | 1 - drivers/thunderbolt/debugfs.c | 5 +- drivers/tty/n_tty.c | 22 +- drivers/tty/serial/8250/8250_dw.c | 125 +++--- drivers/tty/serial/8250/8250_dwlib.c | 3 +- drivers/tty/serial/8250/8250_dwlib.h | 3 +- drivers/tty/serial/8250/8250_pxa.c | 1 + drivers/tty/serial/serial_port.c | 152 ++++++++ drivers/ufs/core/ufs-mcq.c | 17 +- drivers/ufs/core/ufshcd.c | 6 +- drivers/usb/Makefile | 1 + drivers/usb/class/cdc-wdm.c | 4 +- drivers/usb/host/xhci-pci.c | 7 + drivers/usb/host/xhci-ring.c | 59 ++- drivers/usb/host/xhci.h | 1 + drivers/usb/storage/alauda.c | 9 +- drivers/usb/typec/tcpm/tcpm.c | 5 +- fs/btrfs/zoned.c | 330 ++++++++-------- fs/cachefiles/daemon.c | 4 +- fs/cachefiles/interface.c | 7 +- fs/cachefiles/internal.h | 52 ++- fs/cachefiles/ondemand.c | 324 ++++++++++++---- fs/jfs/xattr.c | 4 +- fs/nfs/dir.c | 47 ++- fs/nfs/nfs4proc.c | 23 +- fs/nfsd/nfsfh.c | 4 +- fs/nilfs2/dir.c | 59 ++- fs/nilfs2/segment.c | 3 + fs/ocfs2/file.c | 2 + fs/ocfs2/namei.c | 2 +- fs/proc/vmcore.c | 2 + fs/smb/server/oplock.c | 30 +- fs/smb/server/smb2pdu.c | 26 +- fs/smb/server/smb_common.c | 4 +- fs/smb/server/vfs.c | 17 +- fs/smb/server/vfs.h | 3 +- fs/smb/server/vfs_cache.c | 31 +- fs/smb/server/vfs_cache.h | 2 +- fs/tracefs/event_inode.c | 59 ++- fs/xfs/libxfs/xfs_ag.c | 11 +- fs/xfs/libxfs/xfs_sb.c | 40 +- fs/xfs/libxfs/xfs_sb.h | 5 +- fs/xfs/scrub/btree.c | 7 +- fs/xfs/scrub/common.c | 4 +- fs/xfs/scrub/stats.c | 4 +- fs/xfs/xfs_aops.c | 7 - fs/xfs/xfs_icache.c | 8 +- fs/xfs/xfs_inode.c | 15 +- fs/xfs/xfs_iomap.c | 4 +- fs/xfs/xfs_log_recover.c | 23 +- fs/xfs/xfs_trans.h | 9 +- include/linux/bpf.h | 2 + include/linux/iommu.h | 2 +- include/linux/property.h | 26 ++ include/linux/pse-pd/pse.h | 4 +- include/linux/serial_core.h | 3 + include/linux/soc/andes/irq.h | 18 + include/net/bluetooth/hci_core.h | 36 +- include/net/ip_tunnels.h | 5 +- include/scsi/scsi_transport_sas.h | 2 + include/trace/events/cachefiles.h | 8 +- io_uring/io-wq.c | 57 +-- io_uring/kbuf.c | 3 +- io_uring/rsrc.c | 1 + kernel/bpf/core.c | 4 + kernel/bpf/map_in_map.c | 14 +- kernel/bpf/syscall.c | 19 +- kernel/bpf/verifier.c | 4 +- kernel/dma/swiotlb.c | 83 +++- kernel/events/core.c | 13 + kernel/fork.c | 18 +- kernel/gen_kheaders.sh | 2 +- kernel/pid_namespace.c | 1 + kernel/time/tick-common.c | 42 +- kernel/trace/bpf_trace.c | 22 +- mm/memory-failure.c | 23 +- net/ax25/af_ax25.c | 6 + net/ax25/ax25_dev.c | 2 +- net/bluetooth/l2cap_core.c | 12 +- net/bpf/test_run.c | 6 + net/bridge/br_mst.c | 13 +- net/core/sock_map.c | 16 +- net/ethtool/ioctl.c | 2 +- net/ipv4/tcp.c | 9 +- net/ipv6/ioam6_iptunnel.c | 8 +- net/ipv6/ip6_fib.c | 6 +- net/ipv6/route.c | 5 +- net/ipv6/seg6_iptunnel.c | 14 +- net/ipv6/tcp_ipv6.c | 3 +- net/mac80211/he.c | 10 +- net/mac80211/mesh_pathtbl.c | 13 + net/mac80211/sta_info.c | 4 +- net/mptcp/pm_netlink.c | 21 +- net/mptcp/protocol.c | 10 +- net/ncsi/internal.h | 2 + net/ncsi/ncsi-manage.c | 95 ++--- net/ncsi/ncsi-rsp.c | 4 +- net/netfilter/ipset/ip_set_core.c | 93 +++-- net/netfilter/ipset/ip_set_list_set.c | 30 +- net/netfilter/nft_meta.c | 3 + net/netfilter/nft_payload.c | 4 + net/sched/sch_multiq.c | 2 +- net/sched/sch_taprio.c | 15 +- net/smc/af_smc.c | 22 +- net/sunrpc/auth_gss/auth_gss.c | 4 +- net/unix/af_unix.c | 108 +++--- net/unix/diag.c | 12 +- net/wireless/core.c | 2 +- net/wireless/pmsr.c | 8 +- net/wireless/sysfs.c | 4 +- net/wireless/util.c | 7 +- scripts/mod/modpost.c | 5 +- security/integrity/ima/ima_api.c | 16 +- security/integrity/ima/ima_template_lib.c | 17 +- security/landlock/fs.c | 13 +- tools/perf/util/auxtrace.c | 4 +- tools/testing/cxl/test/mem.c | 1 + .../ftrace/test.d/dynevent/test_duplicates.tc | 2 +- .../ftrace/test.d/filter/event-filter-function.tc | 20 +- .../ftrace/test.d/kprobe/kprobe_eventname.tc | 3 +- tools/testing/selftests/mm/compaction_test.c | 106 +++--- tools/testing/selftests/net/Makefile | 2 +- tools/testing/selftests/net/forwarding/lib.sh | 52 +-- tools/testing/selftests/net/lib.sh | 97 +++++ tools/testing/selftests/net/mptcp/mptcp_join.sh | 5 +- tools/tracing/rtla/src/timerlat_aa.c | 109 +++--- tools/tracing/rtla/src/timerlat_top.c | 17 +- 249 files changed, 3442 insertions(+), 1950 deletions(-)