[PATCH 6.1 000/194] 6.1.47-rc1 review

From: Greg Kroah-Hartman
Date: Mon Aug 21 2023 - 15:51:54 EST

This is the start of the stable review cycle for the 6.1.47 release.
There are 194 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed, 23 Aug 2023 19:40:45 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.47-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 6.1.47-rc1

Yangtao Li <frank.li@xxxxxxxx>
mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove

Jason Xing <kernelxing@xxxxxxxxxxx>
net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled

Karol Herbst <kherbst@xxxxxxxxxx>
drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
af_unix: Fix null-ptr-deref in unix_stream_sendpage().

Guchun Chen <guchun.chen@xxxxxxx>
drm/amdgpu: keep irq count in amdgpu_irq_disable_all

Tim Huang <Tim.Huang@xxxxxxx>
drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11

Mark Brown <broonie@xxxxxxxxxx>
arm64/ptrace: Ensure that SME is set up for target when writing SSVE state

Borislav Petkov (AMD) <bp@xxxxxxxxx>
x86/srso: Correct the mitigation status when SMT is disabled

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
objtool/x86: Fixup frame-pointer vs rethunk

Petr Pavlu <petr.pavlu@xxxxxxxx>
x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG

Borislav Petkov (AMD) <bp@xxxxxxxxx>
x86/srso: Disable the mitigation on unaffected configurations

Borislav Petkov (AMD) <bp@xxxxxxxxx>
x86/CPU/AMD: Fix the DIV(0) initial fix attempt

Sean Christopherson <seanjc@xxxxxxxxxx>
x86/retpoline: Don't clobber RFLAGS during srso_safe_ret()

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/static_call: Fix __static_call_fixup()

Borislav Petkov (AMD) <bp@xxxxxxxxx>
x86/srso: Explain the untraining sequences a bit more

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/cpu: Cleanup the untrain mess

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/cpu: Rename srso_(.*)_alias to srso_alias_\1

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/cpu: Rename original retbleed methods

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/cpu: Clean up SRSO return thunk mess

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/alternative: Make custom return thunk unconditional

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk()

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
x86/cpu: Fix __x86_return_thunk symbol type

Xin Long <lucien.xin@xxxxxxxxx>
netfilter: set default timeout to 3 secs for sctp shutdown send and recv state

Mike Kravetz <mike.kravetz@xxxxxxxxxx>
hugetlb: do not clear hugetlb dtor until allocating vmemmap

Saaem Rizvi <SyedSaaem.Rizvi@xxxxxxx>
drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register

Vincent Guittot <vincent.guittot@xxxxxxxxxx>
sched/fair: Remove capacity inversion detection

Vincent Guittot <vincent.guittot@xxxxxxxxxx>
sched/fair: unlink misfit task from cpu overutilized

Sergey Senozhatsky <senozhatsky@xxxxxxxxxxxx>
zsmalloc: allow only one active pool compaction context

Daniel Miess <daniel.miess@xxxxxxx>
drm/amd/display: disable RCO for DCN314

Arnd Bergmann <arnd@xxxxxxxx>
ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG

Umio Yasuno <coelacanth_dream@xxxxxxxxxxxxxx>
drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7

Tim Huang <Tim.Huang@xxxxxxx>
drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix

Mario Limonciello <mario.limonciello@xxxxxxx>
drm/amd: flush any delayed gfxoff on suspend entry

Jani Nikula <jani.nikula@xxxxxxxxx>
drm/i915/sdvo: fix panel_type initialization

Wander Lairson Costa <wander@xxxxxxxxxx>
drm/qxl: fix UAF on handle creation

Yibin Ding <yibin.ding@xxxxxxxxxx>
mmc: block: Fix in_flight[issue_type] value error

Yang Yingliang <yangyingliang@xxxxxxxxxx>
mmc: wbsd: fix double mmc_free_host() in wbsd_init()

Sweet Tea Dorminy <sweettea-kernel@xxxxxxxxxx>
blk-crypto: dynamically allocate fallback profile

Yogesh Hegde <yogi.kernel@xxxxxxxxx>
arm64: dts: rockchip: Fix Wifi/Bluetooth on ROCK Pi 4 boards

Hawkins Jiawei <yin31149@xxxxxxxxx>
virtio-net: Zero max_tx_vq field for VIRTIO_NET_CTRL_MQ_HASH_CONFIG case

Mingzheng Xing <xingmingzheng@xxxxxxxxxxx>
riscv: Handle zicsr/zifencei issue between gcc and binutils

Russell Harmon via samba-technical <samba-technical@xxxxxxxxxxxxxxx>
cifs: Release folio lock on fscache read hit.

dengxiang <dengxiang@xxxxxxxxxxxx>
ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces.

Tony Lindgren <tony@xxxxxxxxxxx>
serial: 8250: Fix oops for port->pm on uart_change_pm()

Alexandre Ghiti <alexghiti@xxxxxxxxxxxx>
riscv: uaccess: Return the number of bytes effectively not copied

Kailang Yang <kailang@xxxxxxxxxxx>
ALSA: hda/realtek - Remodified 3k pull low procedure

Jiasheng Jiang <jiasheng@xxxxxxxxxxx>
soc: aspeed: socinfo: Add kfree for kstrdup

Zev Weiss <zev@xxxxxxxxxxxxxxxxx>
soc: aspeed: uart-routing: Use __sysfs_match_string

Stefan Binding <sbinding@xxxxxxxxxxxxxxxxxxxxx>
ALSA: hda/realtek: Add quirks for HP G11 Laptops

Jerome Brunet <jbrunet@xxxxxxxxxxxx>
ASoC: meson: axg-tdm-formatter: fix channel slot allocation

Zhang Shurong <zhang_shurong@xxxxxxxxxxx>
ASoC: rt5665: add missed regulator_bulk_disable

Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx>
arm64: dts: imx93: Fix anatop node size

Xiaolei Wang <xiaolei.wang@xxxxxxxxxxxxx>
ARM: dts: imx: Set default tuning step for imx6sx usdhc

Fabio Estevam <festevam@xxxxxxx>
arm64: dts: imx8mm: Drop CSI1 PHY reference clock configuration

Andrej Picej <andrej.picej@xxxxxxxxx>
ARM: dts: imx6: phytec: fix RTC interrupt level

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxx>
ARM: dts: imx: align LED node names with dtschema

Christopher Obbard <chris.obbard@xxxxxxxxxxxxx>
arm64: dts: rockchip: Disable HS400 for eMMC on ROCK 4C+

Christopher Obbard <chris.obbard@xxxxxxxxxxxxx>
arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4

Dmitry Baryshkov <dmitry.baryshkov@xxxxxxxxxx>
arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict

Tony Lindgren <tony@xxxxxxxxxxx>
bus: ti-sysc: Flush posted write on enable before reset

Marcin Szycik <marcin.szycik@xxxxxxxxxxxxxxx>
ice: Block switchdev mode when ADQ is active and vice versa

Manish Chopra <manishc@xxxxxxxxxxx>
qede: fix firmware halt over suspend and resume

Eric Dumazet <edumazet@xxxxxxxxxx>
net: do not allow gso_size to be set to GSO_BY_FRAGS

Abel Wu <wuyun.abel@xxxxxxxxxxxxx>
sock: Fix misuse of sk_under_memory_pressure()

Edward Cree <ecree.xilinx@xxxxxxxxx>
sfc: don't unregister flow_indr if it was never registered

Alfred Lee <l00g33k@xxxxxxxxx>
net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset

Andrii Staikov <andrii.staikov@xxxxxxxxx>
i40e: fix misleading debug logs

Piotr Gardocki <piotrx.gardocki@xxxxxxxxx>
iavf: fix FDIR rule fields masks validation

Jakub Kicinski <kuba@xxxxxxxxxx>
net: openvswitch: reject negative ifindex

Ziyang Xuan <william.xuanziyang@xxxxxxxxxx>
team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves

Justin Chen <justin.chen@xxxxxxxxxxxx>
net: phy: broadcom: stub c45 read/write for 54810

Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
netfilter: nft_dynset: disallow object maps

Sishuai Gong <sishuai.system@xxxxxxxxx>
ipvs: fix racy memcpy in proc_do_sync_threshold

Florian Westphal <fw@xxxxxxxxx>
netfilter: nf_tables: deactivate catchall elements in next generation

Florian Westphal <fw@xxxxxxxxx>
netfilter: nf_tables: fix false-positive lockdep splat

Michal Schmidt <mschmidt@xxxxxxxxxx>
octeon_ep: cancel tx_timeout_task later in remove sequence

Radhey Shyam Pandey <radhey.shyam.pandey@xxxxxxx>
net: macb: In ZynqMP resume always configure PS GTR for non-wakeup source

Luca Ceresoli <luca.ceresoli@xxxxxxxxxxx>
drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs

Petr Machata <petrm@xxxxxxxxxx>
selftests: mirror_gre_changes: Tighten up the TTL test match

Russell King (Oracle) <rmk+kernel@xxxxxxxxxxxxxxx>
net: phy: fix IRQ-based wake-on-lan over hibernate / power off

Xiang Yang <xiangyang3@xxxxxxxxxx>
net: pcs: Add missing put_device call in miic_create

Jason Wang <jasowang@xxxxxxxxxx>
virtio-net: set queues after driver_ok

Laurent Vivier <lvivier@xxxxxxxxxx>
virtio_net: notify MAC address change on device initialization

Lin Ma <linma@xxxxxxxxxx>
xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH

Lin Ma <linma@xxxxxxxxxx>
xfrm: add NULL check in xfrm_update_ae_params

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
ip_vti: fix potential slab-use-after-free in decode_session6

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
ip6_vti: fix slab-use-after-free in decode_session6

Zhengchao Shao <shaozhengchao@xxxxxxxxxx>
xfrm: fix slab-use-after-free in decode_session6

Lin Ma <linma@xxxxxxxxxx>
net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure

Lin Ma <linma@xxxxxxxxxx>
net: af_key: fix sadb_x_filter validation

Lin Ma <linma@xxxxxxxxxx>
net: xfrm: Fix xfrm_address_filter OOB read

Tam Nguyen <tamnguyenchi@xxxxxxxxxxxxxxxxxxxxxx>
i2c: designware: Handle invalid SMBus block data response length value

Quan Nguyen <quan@xxxxxxxxxxxxxxxxxxxxxx>
i2c: designware: Correct length byte validation logic

xiaoshoukui <xiaoshoukui@xxxxxxxxx>
btrfs: fix BUG_ON condition in btrfs_cancel_balance

Josef Bacik <josef@xxxxxxxxxxxxxx>
btrfs: fix incorrect splitting in btrfs_drop_extent_map_range

Sherry Sun <sherry.sun@xxxxxxx>
tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms

Yi Yang <yiyang13@xxxxxxxxxx>
tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux

Dragos Tatulea <dtatulea@xxxxxxxxxx>
vdpa: Enable strict validation for netlinks ops

Lin Ma <linma@xxxxxxxxxx>
vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check

Lin Ma <linma@xxxxxxxxxx>
vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check

Lin Ma <linma@xxxxxxxxxx>
vdpa: Add features attr to vdpa_nl_policy for nlattr length check

Nathan Lynch <nathanl@xxxxxxxxxxxxx>
powerpc/rtas_flash: allow user copy to flash block cache objects

Yuanjun Gong <ruc_gongyuanjun@xxxxxxx>
fbdev: mmp: fix value check in mmphw_probe()

Parker Newman <pnewman@xxxxxxxxxxxxxxx>
i2c: tegra: Fix i2c-tegra DMA config option processing

Yicong Yang <yangyicong@xxxxxxxxxxxxx>
i2c: hisi: Only handle the interrupt of the driver's transfer

Chengfeng Ye <dg573847474@xxxxxxxxx>
i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue

Steve French <stfrench@xxxxxxxxxxxxx>
cifs: fix potential oops in cifs_oplock_break

Eugenio Pérez <eperezma@xxxxxxxxxx>
vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary

Dragos Tatulea <dtatulea@xxxxxxxxxx>
vdpa/mlx5: Fix mr->initialized semantics

Maxime Coquelin <maxime.coquelin@xxxxxxxxxx>
vduse: Use proper spinlock for IRQ injection

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
virtio-mmio: don't break lifecycle of vm_dev

Filipe Manana <fdmanana@xxxxxxxx>
btrfs: fix use-after-free of new block group that became unused

David Sterba <dsterba@xxxxxxxx>
btrfs: convert btrfs_block_group::seq_zone to runtime flag

David Sterba <dsterba@xxxxxxxx>
btrfs: convert btrfs_block_group::needs_free_space to runtime flag

Naohiro Aota <naota@xxxxxxxxx>
btrfs: move out now unused BG from the reclaim list

Daniel Vetter <daniel.vetter@xxxxxxxx>
video/aperture: Only remove sysfb on the default vga pci device

Thomas Zimmermann <tzimmermann@xxxxxxx>
fbdev/hyperv-fb: Do not set struct fb_info.apertures

Xu Yang <xu.yang_2@xxxxxxx>
ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node

Marc Zyngier <maz@xxxxxxxxxx>
KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption

Hersen Wu <hersenxs.wu@xxxxxxx>
drm/amd/display: fix access hdcp_workqueue assert

hersen wu <hersenxs.wu@xxxxxxx>
drm/amd/display: phase3 mst hdcp for multiple displays

hersen wu <hersenxs.wu@xxxxxxx>
drm/amd/display: save restore hdcp state when display is unplugged from mst hub

Song Yoong Siang <yoong.siang.song@xxxxxxxxx>
igc: read before write to SRRCTL register

Chen Lin <chen.lin5@xxxxxxxxxx>
ring-buffer: Do not swap cpu_buffer during resize process

Andy Shevchenko <andriy.shevchenko@xxxxxxxxxxxxxxx>
Bluetooth: MGMT: Use correct address for memcpy()

Benjamin Gray <bgray@xxxxxxxxxxxxx>
powerpc/kasan: Disable KCOV in KASAN code

Luke D. Jones <luke@xxxxxxxxxx>
ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V

Luke D. Jones <luke@xxxxxxxxxx>
ALSA: hda/realtek: Add quirk for ASUS ROG GA402X

Luke D. Jones <luke@xxxxxxxxxx>
ALSA: hda/realtek: Add quirk for ASUS ROG GX650P

Tuo Li <islituo@xxxxxxxxx>
ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync()

dengxiang <dengxiang@xxxxxxxxxxxx>
ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760

Konstantin Komarov <almaz.alexandrovich@xxxxxxxxxxxxxxxxxxxx>
fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted

Jia-Ju Bai <baijiaju@xxxxxxxxxxx>
fs: ntfs3: Fix possible null-pointer dereferences in mi_read()

Edward Lo <loyuantsung@xxxxxxxxx>
fs/ntfs3: Enhance sanity check while generating attr_list

shanzhulig <shanzhulig@xxxxxxxxx>
drm/amdgpu: Fix potential fence use-after-free v2

Xiubo Li <xiubli@xxxxxxxxxx>
ceph: try to dump the msgs when decoding fails

Matthew Anderson <ruinairas1992@xxxxxxxxx>
Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally

Zhengping Jiang <jiangzp@xxxxxxxxxx>
Bluetooth: L2CAP: Fix use-after-free

Yuechao Zhao <yuechao.zhao@xxxxxxxxxxxxxxxx>
watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub)

Zhang Shurong <zhang_shurong@xxxxxxxxxxx>
firewire: net: fix use after free in fwnet_finish_incoming_packet()

Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
thunderbolt: Limit Intel Barlow Ridge USB3 bandwidth

Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
thunderbolt: Add Intel Barlow Ridge PCI ID

Armin Wolf <W_Armin@xxxxxx>
pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db()

Tuo Li <islituo@xxxxxxxxx>
gfs2: Fix possible data races in gfs2_show_options()

Xu Yang <xu.yang_2@xxxxxxx>
usb: chipidea: imx: add missing USB PHY DPDM wakeup setting

Xu Yang <xu.yang_2@xxxxxxx>
usb: chipidea: imx: don't request QoS for imx8ulp

Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx>
thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx()

Hans Verkuil <hverkuil-cisco@xxxxxxxxx>
media: platform: mediatek: vpu: fix NULL ptr dereference

Avichal Rakesh <arakesh@xxxxxxxxxx>
usb: gadget: uvc: queue empty isoc requests if no video buffer is available

Prashanth K <quic_prashk@xxxxxxxxxxx>
usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push

Andrey Konovalov <andrey.konovalov@xxxxxxxxxx>
media: camss: set VFE bpl_alignment to 16 for sdm845 and sm8250

Yunfei Dong <yunfei.dong@xxxxxxxxxxxx>
media: v4l2-mem2mem: add lock to protect parameter num_rdy

Lu Hongfei <luhongfei@xxxxxxxx>
led: qcom-lpg: Fix resource leaks in for_each_available_child_of_node() loops

Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxxxx>
serial: stm32: Ignore return value of uart_remove_one_port() in .remove()

Winston Wen <wentao@xxxxxxxxxxxxx>
cifs: fix session state check in reconnect to avoid use-after-free issue

Paulo Alcantara <pc@xxxxxxxxxxxxx>
smb: client: fix warning in cifs_smb3_do_mount()

Matthew Anderson <ruinairas1992@xxxxxxxxx>
ALSA: hda/realtek: Add quirks for ROG ALLY CS35l41 audio

Even Xu <even.xu@xxxxxxxxx>
HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID

Peter Ujfalusi <peter.ujfalusi@xxxxxxxxxxxxxxx>
ASoC: SOF: core: Free the firmware trace before calling snd_sof_shutdown()

Daniel Miess <daniel.miess@xxxxxxx>
drm/amd/display: Enable dcn314 DPP RCO

Nicholas Kazlauskas <nicholas.kazlauskas@xxxxxxx>
drm/amd/display: Skip DPP DTO update if root clock is gated

Patrisious Haddad <phaddad@xxxxxxxxxx>
RDMA/mlx5: Return the firmware result upon destroying QP/RQ

Alvin Lee <alvin.lee2@xxxxxxx>
drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz

Lang Yu <Lang.Yu@xxxxxxx>
drm/amdgpu: install stub fence into potential unused fence pointers

Suravee Suthikulpanit <suravee.suthikulpanit@xxxxxxx>
iommu/amd: Introduce Disable IRTE Caching Support

stuarthayhurst <stuart.a.hayhurst@xxxxxxxxx>
HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard

Ofir Bitton <obitton@xxxxxxxxx>
accel/habanalabs: add pci health check during heartbeat

gaoxu <gaoxu2@xxxxxxxxxxx>
dma-remap: use kvmalloc_array/kvfree for larger dma memory remap

Pierre-Louis Bossart <pierre-louis.bossart@xxxxxxxxxxxxxxx>
ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion

Geert Uytterhoeven <geert+renesas@xxxxxxxxx>
iopoll: Call cpu_relax() in busy loops

Uday M Bhat <uday.m.bhat@xxxxxxxxx>
ASoC: Intel: sof_sdw: Add support for Rex soundwire

Bard Liao <yung-chuan.liao@xxxxxxxxxxxxxxx>
ASoC: Intel: sof_sdw_rt_sdca_jack_common: test SOF_JACK_JDSRC in _exit

Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings

Venkata Prasad Potturu <venkataprasad.potturu@xxxxxxx>
ASoC: amd: vangogh: Add check for acp config flags in vangogh platform

Wolfram Sang <wsa+renesas@xxxxxxxxxxxxxxxxxxxx>
drm: rcar-du: remove R-Car H3 ES1.* workarounds

Raphael Gallais-Pou <raphael.gallais-pou@xxxxxxxxxxx>
drm/stm: ltdc: fix late dereference check

Venkata Prasad Potturu <venkataprasad.potturu@xxxxxxx>
ASoC: SOF: amd: Add pci revision id check

Sumit Gupta <sumitg@xxxxxxxxxx>
PCI: tegra194: Fix possible array out of bounds access

Peter Ujfalusi <peter.ujfalusi@xxxxxxxxxxxxxxx>
ASoC: Intel: sof_sdw: add quirk for LNL RVP

Bard Liao <yung-chuan.liao@xxxxxxxxxxxxxxx>
ASoC: Intel: sof_sdw: add quirk for MTL RVP

Jack Xiao <Jack.Xiao@xxxxxxx>
drm/amdgpu: fix memory leak in mes self test

hackyzh002 <hackyzh002@xxxxxxxxx>
drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1

Longlong Yao <Longlong.Yao@xxxxxxx>
drm/amdgpu: fix calltrace warning in amddrm_buddy_fini

Li Yang <leoyang.li@xxxxxxx>
net: phy: at803x: fix the wol setting functions

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
net: phy: at803x: Use devm_regulator_get_enable_optional()

Gerd Bayer <gbayer@xxxxxxxxxxxxx>
net/smc: Fix setsockopt and sysctl to specify same buffer size again

D. Wythe <alibuda@xxxxxxxxxxxxxxxxx>
net/smc: replace mutex rmbs_lock and sndbufs_lock with rw_semaphore

Ido Schimmel <idosch@xxxxxxxxxx>
selftests: forwarding: tc_actions: Use ncat instead of nc

Davide Caratti <dcaratti@xxxxxxxxxx>
selftests: forwarding: tc_actions: cleanup temporary files when test is aborted

Andrew Yang <andrew.yang@xxxxxxxxxxxx>
zsmalloc: fix races between modifications of fullness and isolated

Nhat Pham <nphamcs@xxxxxxxxx>
zsmalloc: consolidate zs_pool's migrate_lock and size_class's locks

Maulik Shah <quic_mkshah@xxxxxxxxxxx>
cpuidle: psci: Move enabling OSI mode after power domains creation

Ulf Hansson <ulf.hansson@xxxxxxxxxx>
cpuidle: psci: Extend information in log about OSI/PC mode

Kunihiko Hayashi <hayashi.kunihiko@xxxxxxxxxxxxx>
mmc: sdhci-f-sdh30: Replace with sdhci_pltfm


-------------

Diffstat:

Documentation/admin-guide/hw-vuln/srso.rst | 4 +-
Documentation/admin-guide/kernel-parameters.txt | 1 +
Makefile | 4 +-
arch/arm/boot/dts/imx50-kobo-aura.dts | 2 +-
arch/arm/boot/dts/imx53-cx9020.dts | 10 +-
arch/arm/boot/dts/imx53-m53evk.dts | 4 +-
arch/arm/boot/dts/imx53-m53menlo.dts | 6 +-
arch/arm/boot/dts/imx53-tx53.dtsi | 2 +-
arch/arm/boot/dts/imx53-usbarmory.dts | 2 +-
arch/arm/boot/dts/imx6dl-b1x5pv2.dtsi | 6 +-
arch/arm/boot/dts/imx6dl-prtrvt.dts | 4 +
arch/arm/boot/dts/imx6dl-riotboard.dts | 4 +-
arch/arm/boot/dts/imx6dl-yapp4-common.dtsi | 6 +-
arch/arm/boot/dts/imx6q-gw5400-a.dts | 6 +-
arch/arm/boot/dts/imx6q-h100.dts | 6 +-
arch/arm/boot/dts/imx6q-kp.dtsi | 4 +-
arch/arm/boot/dts/imx6q-marsboard.dts | 4 +-
arch/arm/boot/dts/imx6q-tbs2910.dts | 2 +-
arch/arm/boot/dts/imx6qdl-emcon.dtsi | 4 +-
arch/arm/boot/dts/imx6qdl-gw51xx.dtsi | 4 +-
arch/arm/boot/dts/imx6qdl-gw52xx.dtsi | 6 +-
arch/arm/boot/dts/imx6qdl-gw53xx.dtsi | 6 +-
arch/arm/boot/dts/imx6qdl-gw54xx.dtsi | 6 +-
arch/arm/boot/dts/imx6qdl-gw551x.dtsi | 2 +-
arch/arm/boot/dts/imx6qdl-gw552x.dtsi | 6 +-
arch/arm/boot/dts/imx6qdl-gw553x.dtsi | 4 +-
arch/arm/boot/dts/imx6qdl-gw560x.dtsi | 6 +-
arch/arm/boot/dts/imx6qdl-gw5903.dtsi | 2 +-
arch/arm/boot/dts/imx6qdl-gw5904.dtsi | 6 +-
arch/arm/boot/dts/imx6qdl-gw5907.dtsi | 4 +-
arch/arm/boot/dts/imx6qdl-gw5910.dtsi | 6 +-
arch/arm/boot/dts/imx6qdl-gw5912.dtsi | 6 +-
arch/arm/boot/dts/imx6qdl-gw5913.dtsi | 4 +-
arch/arm/boot/dts/imx6qdl-nit6xlite.dtsi | 10 +-
arch/arm/boot/dts/imx6qdl-nitrogen6_max.dtsi | 4 +-
arch/arm/boot/dts/imx6qdl-phytec-mira.dtsi | 8 +-
arch/arm/boot/dts/imx6qdl-phytec-pfla02.dtsi | 4 +-
arch/arm/boot/dts/imx6qdl-prti6q.dtsi | 11 +-
arch/arm/boot/dts/imx6qdl-rex.dtsi | 2 +-
arch/arm/boot/dts/imx6qdl-sabreauto.dtsi | 2 +-
arch/arm/boot/dts/imx6qdl-sabresd.dtsi | 2 +-
arch/arm/boot/dts/imx6qdl-ts7970.dtsi | 4 +-
arch/arm/boot/dts/imx6qdl-tx6.dtsi | 2 +-
arch/arm/boot/dts/imx6sl-evk.dts | 2 +-
arch/arm/boot/dts/imx6sll-evk.dts | 2 +-
arch/arm/boot/dts/imx6sll.dtsi | 2 +-
arch/arm/boot/dts/imx6sx-sabreauto.dts | 2 +-
arch/arm/boot/dts/imx6sx-udoo-neo.dtsi | 4 +-
arch/arm/boot/dts/imx6sx.dtsi | 6 +
arch/arm/boot/dts/imx6ul-phytec-phycore-som.dtsi | 2 +-
arch/arm/boot/dts/imx6ul-tx6ul.dtsi | 2 +-
arch/arm64/boot/dts/freescale/imx8mm.dtsi | 7 +-
arch/arm64/boot/dts/freescale/imx93.dtsi | 2 +-
arch/arm64/boot/dts/qcom/qrb5165-rb5.dts | 2 +-
.../boot/dts/rockchip/rk3399-rock-4c-plus.dts | 3 +-
arch/arm64/boot/dts/rockchip/rk3399-rock-pi-4.dtsi | 6 +-
arch/arm64/include/asm/fpsimd.h | 4 +-
arch/arm64/include/asm/kvm_host.h | 2 +
arch/arm64/kernel/fpsimd.c | 6 +-
arch/arm64/kernel/ptrace.c | 9 +-
arch/arm64/kernel/signal.c | 2 +-
arch/arm64/kvm/arm.c | 6 +-
arch/arm64/kvm/vgic/vgic-v3.c | 2 +-
arch/arm64/kvm/vgic/vgic-v4.c | 7 +-
arch/powerpc/kernel/rtas_flash.c | 6 +-
arch/powerpc/mm/kasan/Makefile | 1 +
arch/riscv/Kconfig | 28 +--
arch/riscv/kernel/compat_vdso/Makefile | 8 +-
arch/riscv/lib/uaccess.S | 11 +-
arch/x86/include/asm/entry-common.h | 1 +
arch/x86/include/asm/nospec-branch.h | 28 +--
arch/x86/kernel/cpu/amd.c | 1 +
arch/x86/kernel/cpu/bugs.c | 28 ++-
arch/x86/kernel/static_call.c | 13 ++
arch/x86/kernel/traps.c | 2 -
arch/x86/kernel/vmlinux.lds.S | 20 +-
arch/x86/kvm/svm/svm.c | 2 +
arch/x86/lib/retpoline.S | 141 +++++++++-----
block/blk-crypto-fallback.c | 36 ++--
drivers/bluetooth/btusb.c | 3 +
drivers/bus/ti-sysc.c | 2 +
drivers/cpuidle/cpuidle-psci-domain.c | 42 ++--
drivers/firewire/net.c | 6 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 8 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 1 +
drivers/gpu/drm/amd/amdgpu/amdgpu_fence.c | 41 +++-
drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 9 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 1 -
drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 4 +-
drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 2 +
drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +-
drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 211 +++++++++++++++++----
.../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.h | 14 ++
.../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 30 +++
drivers/gpu/drm/amd/display/dc/dcn20/dcn20_dccg.h | 3 +-
drivers/gpu/drm/amd/display/dc/dcn31/dcn31_dccg.c | 8 +
.../gpu/drm/amd/display/dc/dcn314/dcn314_dccg.c | 5 +
.../drm/amd/display/dc/dcn314/dcn314_resource.c | 20 ++
drivers/gpu/drm/amd/display/dc/dcn32/dcn32_dccg.c | 22 +++
drivers/gpu/drm/amd/display/dc/dcn32/dcn32_dccg.h | 3 +-
drivers/gpu/drm/amd/display/dc/dcn32/dcn32_hwseq.c | 2 +-
.../gpu/drm/amd/display/dc/dcn32/dcn32_resource.h | 3 +-
.../amd/display/dc/dml/dcn32/display_mode_vba_32.c | 4 +-
.../amd/display/dc/dml/dcn32/display_mode_vba_32.h | 2 +-
drivers/gpu/drm/amd/display/dc/inc/hw/dccg.h | 1 +
drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 4 +-
.../drm/amd/pm/swsmu/smu11/sienna_cichlid_ppt.c | 14 +-
drivers/gpu/drm/i915/display/intel_sdvo.c | 2 +-
drivers/gpu/drm/nouveau/nouveau_connector.c | 8 +-
drivers/gpu/drm/panel/panel-simple.c | 24 +--
drivers/gpu/drm/qxl/qxl_drv.h | 2 +-
drivers/gpu/drm/qxl/qxl_dumb.c | 5 +-
drivers/gpu/drm/qxl/qxl_gem.c | 25 ++-
drivers/gpu/drm/qxl/qxl_ioctl.c | 6 +-
drivers/gpu/drm/rcar-du/rcar_du_crtc.c | 37 +---
drivers/gpu/drm/rcar-du/rcar_du_drv.c | 48 -----
drivers/gpu/drm/rcar-du/rcar_du_drv.h | 2 -
drivers/gpu/drm/rcar-du/rcar_du_regs.h | 3 +-
drivers/gpu/drm/stm/ltdc.c | 4 +-
drivers/hid/hid-logitech-hidpp.c | 4 +
drivers/hid/intel-ish-hid/ipc/hw-ish.h | 1 +
drivers/hid/intel-ish-hid/ipc/pci-ish.c | 1 +
drivers/i2c/busses/i2c-bcm-iproc.c | 11 +-
drivers/i2c/busses/i2c-designware-master.c | 16 +-
drivers/i2c/busses/i2c-hisi.c | 8 +
drivers/i2c/busses/i2c-tegra.c | 2 +-
drivers/infiniband/hw/mlx5/qpc.c | 10 +-
drivers/iommu/amd/amd_iommu_types.h | 4 +
drivers/iommu/amd/init.c | 36 ++++
drivers/leds/rgb/leds-qcom-lpg.c | 8 +-
drivers/media/platform/mediatek/vpu/mtk_vpu.c | 6 +-
drivers/media/platform/qcom/camss/camss-vfe.c | 6 +-
drivers/misc/habanalabs/common/device.c | 15 +-
drivers/misc/habanalabs/common/habanalabs.h | 2 +
drivers/misc/habanalabs/common/habanalabs_drv.c | 2 -
drivers/mmc/core/block.c | 7 +-
drivers/mmc/host/sdhci_f_sdh30.c | 66 +++----
drivers/mmc/host/wbsd.c | 2 -
drivers/net/dsa/mv88e6xxx/chip.c | 8 +
drivers/net/ethernet/cadence/macb_main.c | 9 +-
drivers/net/ethernet/intel/i40e/i40e_nvm.c | 16 +-
drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 10 +
drivers/net/ethernet/intel/iavf/iavf_fdir.c | 77 +++++++-
drivers/net/ethernet/intel/iavf/iavf_fdir.h | 2 +
drivers/net/ethernet/intel/ice/ice_eswitch.c | 6 +
drivers/net/ethernet/intel/ice/ice_main.c | 5 +
drivers/net/ethernet/intel/igc/igc_base.h | 11 +-
drivers/net/ethernet/intel/igc/igc_main.c | 7 +-
.../net/ethernet/marvell/octeon_ep/octep_main.c | 2 +-
drivers/net/ethernet/qlogic/qede/qede_main.c | 10 +
drivers/net/ethernet/sfc/tc.c | 2 +-
drivers/net/pcs/pcs-rzn1-miic.c | 10 +-
drivers/net/phy/at803x.c | 89 ++++-----
drivers/net/phy/broadcom.c | 13 ++
drivers/net/phy/phy_device.c | 13 +-
drivers/net/team/team.c | 4 +-
drivers/net/virtio_net.c | 26 ++-
drivers/pci/controller/dwc/pcie-tegra194.c | 13 +-
drivers/pcmcia/rsrc_nonstatic.c | 2 +
drivers/soc/aspeed/aspeed-socinfo.c | 1 +
drivers/soc/aspeed/aspeed-uart-routing.c | 2 +-
drivers/thunderbolt/nhi.c | 2 +
drivers/thunderbolt/nhi.h | 4 +
drivers/thunderbolt/quirks.c | 8 +
drivers/thunderbolt/retimer.c | 29 ++-
drivers/tty/n_gsm.c | 3 +-
drivers/tty/serial/8250/8250_port.c | 1 +
drivers/tty/serial/fsl_lpuart.c | 4 +-
drivers/tty/serial/stm32-usart.c | 5 +-
drivers/usb/chipidea/ci_hdrc_imx.c | 5 +
drivers/usb/chipidea/usbmisc_imx.c | 2 +-
drivers/usb/gadget/function/u_serial.c | 3 +
drivers/usb/gadget/function/uvc_video.c | 32 +++-
drivers/vdpa/mlx5/core/mlx5_vdpa.h | 2 +
drivers/vdpa/mlx5/core/mr.c | 105 +++++++---
drivers/vdpa/mlx5/net/mlx5_vnet.c | 4 +-
drivers/vdpa/vdpa.c | 9 +-
drivers/vdpa/vdpa_user/vduse_dev.c | 8 +-
drivers/video/aperture.c | 7 +-
drivers/video/fbdev/hyperv_fb.c | 17 +-
drivers/video/fbdev/mmp/hw/mmp_ctrl.c | 4 +-
drivers/virtio/virtio_mmio.c | 5 +-
drivers/watchdog/sp5100_tco.c | 4 +-
fs/btrfs/block-group.c | 14 +-
fs/btrfs/block-group.h | 18 +-
fs/btrfs/extent_map.c | 6 +-
fs/btrfs/free-space-tree.c | 10 +-
fs/btrfs/tests/free-space-tree-tests.c | 2 +-
fs/btrfs/volumes.c | 3 +-
fs/btrfs/zoned.c | 7 +-
fs/ceph/mds_client.c | 4 +
fs/gfs2/super.c | 26 +--
fs/ntfs3/frecord.c | 16 +-
fs/ntfs3/fsntfs.c | 2 +-
fs/ntfs3/index.c | 6 +
fs/ntfs3/ntfs_fs.h | 2 +
fs/ntfs3/record.c | 10 +-
fs/smb/client/cifsfs.c | 28 +--
fs/smb/client/file.c | 25 ++-
fs/smb/client/smb2pdu.c | 6 +
include/kvm/arm_vgic.h | 2 +-
include/linux/iopoll.h | 2 +
include/linux/virtio_net.h | 4 +
include/media/v4l2-mem2mem.h | 18 +-
include/net/sock.h | 6 +
kernel/dma/remap.c | 4 +-
kernel/sched/fair.c | 193 +++++++++----------
kernel/sched/sched.h | 19 --
kernel/trace/ring_buffer.c | 14 +-
kernel/trace/trace.c | 3 +-
mm/hugetlb.c | 75 +++++---
mm/zsmalloc.c | 113 +++++------
net/bluetooth/l2cap_core.c | 5 +
net/bluetooth/mgmt.c | 2 +-
net/core/sock.c | 2 +-
net/ipv4/ip_vti.c | 4 +-
net/ipv4/tcp_timer.c | 4 +-
net/ipv6/ip6_vti.c | 4 +-
net/key/af_key.c | 4 +-
net/netfilter/ipvs/ip_vs_ctl.c | 4 +
net/netfilter/nf_conntrack_proto_sctp.c | 6 +-
net/netfilter/nf_tables_api.c | 1 +
net/netfilter/nft_dynset.c | 3 +
net/netfilter/nft_set_pipapo.c | 13 +-
net/openvswitch/datapath.c | 8 +-
net/smc/af_smc.c | 4 +-
net/smc/smc.h | 2 +-
net/smc/smc_clc.c | 4 +-
net/smc/smc_core.c | 80 ++++----
net/smc/smc_core.h | 4 +-
net/smc/smc_llc.c | 16 +-
net/smc/smc_sysctl.c | 10 +-
net/unix/af_unix.c | 9 +-
net/xfrm/xfrm_compat.c | 2 +-
net/xfrm/xfrm_interface_core.c | 4 +-
net/xfrm/xfrm_user.c | 14 +-
sound/hda/hdac_regmap.c | 7 +-
sound/pci/hda/patch_realtek.c | 91 ++++++++-
sound/soc/amd/Kconfig | 1 +
sound/soc/amd/vangogh/acp5x.h | 2 +
sound/soc/amd/vangogh/pci-acp5x.c | 7 +-
sound/soc/codecs/rt5665.c | 2 +
sound/soc/intel/boards/sof_sdw.c | 25 +++
sound/soc/intel/boards/sof_sdw_rt711_sdca.c | 3 +
sound/soc/meson/axg-tdm-formatter.c | 42 ++--
sound/soc/sof/amd/acp.h | 3 +
sound/soc/sof/amd/pci-rmb.c | 3 +
sound/soc/sof/amd/pci-rn.c | 3 +
sound/soc/sof/core.c | 4 +-
sound/soc/sof/intel/hda.c | 12 +-
sound/usb/quirks-table.h | 29 +++
tools/objtool/arch/x86/decode.c | 2 +-
tools/objtool/check.c | 21 +-
.../selftests/net/forwarding/mirror_gre_changes.sh | 3 +-
.../testing/selftests/net/forwarding/tc_actions.sh | 18 +-
255 files changed, 2074 insertions(+), 1100 deletions(-)