Linux Kernel 6.6.153

The 117 most recent commits in this release — the full changelog is longer:

• Linux 6.6.153
• ring-buffer: Use current_context for safe per-CPU buffer swap
• ring-buffer: Remove jump to out label in ring_buffer_swap_cpu()
• net: harmonize tstats and dstats
• binfmt_misc: use exe_file_deny_write_access() for the interpreter clone
• net/x25: fix use-after-free of the socket by its timers
• erofs: fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS on some UP platforms
• net/sched: cls_bpf: reject dev-bound programs bound to a different device
• net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
• m68k: Define NR_CPUS to 1
• m68k: use the coherent DMA code for coldfire without data cache
• dma-direct: add a CONFIG_ARCH_HAS_DMA_ALLOC symbol
• net/sched: cls_u32: skip hash tables in u32_bind_class()
• net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
• net: sched: Add initial TC error skb drop reasons
• net: sched: Move drop_reason to struct tc_skb_cb
• packet: add a generic drop reason for receive
• net, sched: Fix SKB_NOT_DROPPED_YET splat under debug config
• net, sched: Add tcf_set_drop_reason for {__,}tcf_classify
• net, sched: Make tc-related drop reason more flexible
• af_packet: Don't send zero-byte data in tpacket_snd().
• ASoC: xilinx: formatter_pcm: pass aud_drv_data to irq handlers
• net/tls: Fail tls_sw_splice_read() after a failed async decrypt
• net: packet: fix wrong transport_header when sending VLAN-tagged frame
• macvlan: inherit needed_headroom and needed_tailroom from lowerdev
• ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
• netfilter: ipset: let destroy callbacks adjust ext mem size
• netfilter: ipset: fix list type element drift bug
• netfilter: flowtable: publish GC-visible tuple last
• netfilter: nf_tables_offload: suppress WARN_ON_ONCE for ENOMEM in abort path
• netfilter: ipset: fix refcount race between list:set GC and swap
• crypto: ccm - Set rfc4309 maxauthsize from child
• arm64: tegra: Add EL2 virtual timer interrupt for Tegra194
• mm/huge_memory: fix huge_zero_pfn race
• KVM: SVM: Serialize accesses to the owner and mirror list with separate lock
• mm/ptdump: always stabilise against page table freeing using init_mm
• mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF
• mm/pagewalk: split walk_page_range_novma() into kernel/user parts
• drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini
• drm/amd/pm: fix pptable use-after-free
• drm/amd/pm: fix torn gpu metrics reads
• can: rcar_canfd: change the initializing flow for clocks and resets
• i2c: iproc: reset bus after timeout if START_BUSY is stuck
• i2c: bcm-iproc: remove printout on handled timeouts
• vxlan: use pskb_network_may_pull() for transmit path header pulls
• vxlan: Handle stats using NETDEV_PCPU_STAT_DSTATS.
• vrf: Make pcpu_dstats update functions available to other modules.
• net: core,vrf: Change pcpu_dstat fields to u64_stats_t
• vxlan: Do not alloc tstats manually
• ice: fix VF interrupts cleanup
• binfmt_misc: restore write access when removing an entry
• fs: don't block write during exec on pre-content watched files
• veth: convert frag_list skbs before running XDP
• net: pktgen: fix proc entry use-after-free
• net: pktgen: fix code style (WARNING: Block comments)
• ksmbd: reject repeated SMB2 NEGOTIATE requests
• ksmbd: conn lock to serialize smb2 negotiate
• igc: remove napi_synchronize() in igc_down()
• ASoC: tas2562: Validate values for volume writes
• mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE
• btrfs: zoned: fix missing chunk metadata reservation
• btrfs: remove fs_info argument from btrfs_zoned_activate_one_bg()
• btrfs: add space_info argument to btrfs_chunk_alloc()
• btrfs: add debug build only WARN
• tcp: challenge ACK for non-exact RST in SYN-RECEIVED
• tcp: fast path functions later
• tcp: Pass flags to __tcp_send_ack
• ksmbd: validate minimum PDU size for transform requests
• smb/server: fix minimum SMB2 PDU size
• smb/server: fix minimum SMB1 PDU size
• ksmbd: rename smb2_get_msg to smb_get_msg
• smb/server: rename include guard in smb_common.h
• smb: move get_rfc1002_len() to common/smbglob.h
• smb: move smb_version_values to common/smbglob.h
• super: fix emergency thaw deadlock on frozen block devices
• net/sched: serialize qdisc_rtab_list against concurrent get/put
• net: gro: fix double aggregation of flush-marked skbs
• net: move skb_gro_receive_list from udp to core
• libceph: fix two unsafe bare decodes in decode_lockers()
• userfaultfd: prevent registration of special VMAs
• userfaultfd: move vma_can_userfault out of line
• mm: userfaultfd: add pgtable_supports_uffd_wp()
• iomap: fix out-of-bounds bitmap_set() with zero-length range
• iomap: hold state_lock over call to ifs_set_range_uptodate()
• ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP
• libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE
• libceph: Amend checking to fix make W=1 build breakage
• ceph: Use a folio in ceph_page_mkwrite()
• ceph: fix hanging __ceph_get_caps() with stale mds_wanted
• ceph: Remove ceph_writepage()
• ceph: avoid fs reclaim while using current->journal_info
• RISC-V: Provide pgtable_l5_enabled on rv32
• xfs: check v5 superblock features early
• xfs: don't swallow dquot recovery verification errors
• xfs: fix ilock leak on error in xfs_dq_get_next_id
• xfs: only check mergeability of bnobt records
• drm/amdgpu: disallow multiple FENCE chunks in one submit
• drm/amdgpu: Fix UVD decode image min size calculation
• drm/amdgpu: Fix UVD dpb min size calculation for H264
• drm/amdgpu: Fix UVD min buffer sizes
• drm/amdgpu: Implement insert_end for VCE 3
• drm/amdgpu: Reject UVD message with dimensions above 4096
• drm/amdgpu: validate GEM_CREATE domain combinations
• drm/amdgpu: Reject UVD message with invalid number of h265 refs
• s390/vfio_ccw: Selectively expand io_mutex
• s390/vfio_ccw: Move cp cleanup out of not operational
• s390/vfio_ccw: Fix out of bounds check on CCW array
• s390/vfio_ccw: Ensure index for read/write regions are within range
• s390/vfio_ccw: Cancel existing workqueues
• s390/vfio_ccw: Limit the number of channel program segments
• drm/radeon: fix autosuspend cleanup during teardown
• mmc: sdhci: make tuning_err a signed int
• mmc: sdhci: unmap the bounce buffer before device release
• mmc: omap_hsmmc: fix busy_timeout overflow in ns conversion on 32-bit
• libceph: tolerate addrvecs with multiple entries of the same type
• ceph: fix MDS random selection readiness predicate
• libceph: Avoid using i