This is the start of the stable review cycle for the 6.1.86 release. There are 83 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 13 Apr 2024 09:53:55 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.86-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.1.86-rc1 Ma Jun <Jun.Ma2@xxxxxxx> Revert "drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()" Vasiliy Kovalev <kovalev@xxxxxxxxxxxx> VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() Florian Westphal <fw@xxxxxxxxx> net: mpls: error out if inner headers are not set Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Bluetooth: btintel: Fixe build regression Gwendal Grignou <gwendal@xxxxxxxxxxxx> platform/x86: intel-vbtn: Update tablet mode switch at end of probe Kees Cook <keescook@xxxxxxxxxxxx> randomize_kstack: Improve entropy diffusion David Hildenbrand <david@xxxxxxxxxx> virtio: reenable config if freezing device failed Martin K. Petersen <martin.petersen@xxxxxxxxxx> scsi: sd: usb_storage: uas: Access media prior to querying device properties Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "scsi: core: Add struct for args to execution functions" Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Revert "scsi: sd: usb_storage: uas: Access media prior to querying device properties" Ard Biesheuvel <ardb@xxxxxxxxxx> gcc-plugins/stackleak: Avoid .head.text section Thadeu Lima de Souza Cascardo <cascardo@xxxxxxxxxxxxx> tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: discard table flag update with pending basechain deletion Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> netfilter: nf_tables: release batch on table validation from abort path Roman Smirnov <r.smirnov@xxxxxx> fbmon: prevent division by zero in fb_videomode_from_videomode() Jiawei Fu (iBug) <i@xxxxxxxxxxx> drivers/nvme: Add quirks for device 126f:2262 Jens Axboe <axboe@xxxxxxxxx> io_uring: clear opcode specific data for an early failure Aleksandr Burakov <a.burakov@xxxxxxxxxxxx> fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2 Chancel Liu <chancel.liu@xxxxxxx> ASoC: soc-core.c: Skip dummy codec when adding platforms Konrad Dybcio <konrad.dybcio@xxxxxxxxxx> thermal/of: Assume polling-delay(-passive) 0 when absent Colin Ian King <colin.i.king@xxxxxxxxx> usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined Marco Felsch <m.felsch@xxxxxxxxxxxxxx> usb: typec: tcpci: add generic tcpci fallback compatible Mika Westerberg <mika.westerberg@xxxxxxxxxxxxxxx> thunderbolt: Keep the domain powered when USB4 port is in redrive mode Michael Grzeschik <m.grzeschik@xxxxxxxxxxxxxx> usb: gadget: uvc: mark incomplete frames with UVC_STREAM_ERR Jeffrey Hugo <quic_jhugo@xxxxxxxxxxx> bus: mhi: host: Add MHI_PM_SYS_ERR_FAIL state Petre Rodan <petre.rodan@xxxxxxxxxxxxxxx> tools: iio: replace seekdir() in iio_generic_buffer linke li <lilinke99@xxxxxx> ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment Ricardo B. Marliere <ricardo@xxxxxxxxxxxx> ktest: force $buildonly = 1 for 'make_warnings_file' test type Sandipan Das <sandipan.das@xxxxxxx> perf/x86/amd/lbr: Discard erroneous branch entries Alban Boyé <alban.boye@xxxxxxxxxxxxxx> platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet Gergo Koteles <soyer@xxxxxx> Input: allocate keycode for Display refresh rate toggle Duje Mihanović <duje.mihanovic@xxxxxxxx> Input: imagis - use FIELD_GET where applicable Manjunath Patil <manjunath.b.patil@xxxxxxxxxx> RDMA/cm: add timeout to cm_destroy_id wait Roman Smirnov <r.smirnov@xxxxxx> block: prevent division by zero in blk_rq_stat_sum() Markuss Broks <markuss.broks@xxxxxxxxx> input/touchscreen: imagis: Correct the maximum touch area value Ian Rogers <irogers@xxxxxxxxxx> libperf evlist: Avoid out-of-bounds access Daniel Drake <drake@xxxxxxxxxxxxx> Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default" Dai Ngo <dai.ngo@xxxxxxxxxx> SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx> drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init() Aric Cyr <aric.cyr@xxxxxxx> drm/amd/display: Fix nanosec stat overflow Ye Bin <yebin10@xxxxxxxxxx> ext4: forbid commit inconsistent quota data when errors=remount-ro Zhang Yi <yi.zhang@xxxxxxxxxx> ext4: add a hint for block bitmap corrupt state in mb_groups Takashi Sakamoto <o-takashi@xxxxxxxxxxxxx> ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block counter Arnd Bergmann <arnd@xxxxxxxx> media: sta2x11: fix irq handler cast Mike Marshall <hubcap@xxxxxxxxxxxx> Julia Lawall reported this null pointer dereference, this should fix it. Paul E. McKenney <paulmck@xxxxxxxxxx> rcu-tasks: Repair RCU Tasks Trace quiescence check mosomate <mosomate@xxxxxxxxx> ASoC: Intel: common: DMI remap for rebranded Intel NUC M15 (LAPRC710) laptops Alex Henrie <alexhenrie24@xxxxxxxxx> isofs: handle CDs with bad root inode but good Joliet root directory Justin Tee <justin.tee@xxxxxxxxxxxx> scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc() Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx> sysv: don't call sb_bread() with pointers_lock held Geert Uytterhoeven <geert+renesas@xxxxxxxxx> pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs Samuel Dionne-Riel <samuel@xxxxxxxxxxxxxxx> drm: panel-orientation-quirks: Add quirk for GPD Win Mini Kunwu Chan <chentao@xxxxxxxxxx> Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails Maíra Canal <mcanal@xxxxxxxxxx> drm/vc4: don't check if plane->state->fb == state->fb Takashi Iwai <tiwai@xxxxxxx> Bluetooth: btmtk: Add MODULE_FIRMWARE() for MT7922 Edward Adam Davis <eadavis@xxxxxx> Bluetooth: btintel: Fix null ptr deref in btintel_read_version Eric Dumazet <edumazet@xxxxxxxxxx> net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() Jacob Keller <jacob.e.keller@xxxxxxxxx> ice: use relative VSI index for VFs instead of PF VSI number David Sterba <dsterba@xxxxxxxx> btrfs: send: handle path ref underflow in header iterate_inode_ref() David Sterba <dsterba@xxxxxxxx> btrfs: export: handle invalid inode or root reference in btrfs_get_parent() David Sterba <dsterba@xxxxxxxx> btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks() Viresh Kumar <viresh.kumar@xxxxxxxxxx> cpufreq: Don't unregister cpufreq cooling on CPU hotplug Baochen Qiang <quic_bqiang@xxxxxxxxxxx> wifi: ath11k: decrease MHI channel buffer length to 8KB Rick Edgecombe <rick.p.edgecombe@xxxxxxxxx> dma-direct: Leak pages on dma_set_decrypted() failure Serge Semin <fancer.lancer@xxxxxxxxx> net: pcs: xpcs: Return EINVAL in the internal methods Samasth Norway Ananda <samasth.norway.ananda@xxxxxxxxxx> tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num() Kunwu Chan <chentao@xxxxxxxxxx> pstore/zone: Add a null pointer check to the psz_kmsg_read Hans de Goede <hdegoede@xxxxxxxxxx> wifi: brcmfmac: Add DMI nvram filename quirk for ACEPC W5 Pro Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx> firmware: tegra: bpmp: Return directly after a failed kzalloc() in get_filename() Florian Westphal <fw@xxxxxxxxx> net: skbuff: add overflow debug check to pull/push helpers Shannon Nelson <shannon.nelson@xxxxxxx> ionic: set adminq irq affinity Johan Jonker <jbx6244@xxxxxxxxx> arm64: dts: rockchip: fix rk3399 hdmi ports node Johan Jonker <jbx6244@xxxxxxxxx> arm64: dts: rockchip: fix rk3328 hdmi ports node C Cheng <C.Cheng@xxxxxxxxxxxx> cpuidle: Avoid potential overflow in integer multiplication John Ogness <john.ogness@xxxxxxxxxxxxx> panic: Flush kernel log buffer at the end Mukesh Sisodiya <mukesh.sisodiya@xxxxxxxxx> wifi: iwlwifi: pcie: Add the PCI device id for new hardware Harshit Mogalapalli <harshit.m.mogalapalli@xxxxxxxxxx> VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() Ping-Ke Shih <pkshih@xxxxxxxxxxx> wifi: rtw89: pci: enlarge RX DMA buffer to consider size of RX descriptor Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx> batman-adv: Improve exception handling in batadv_throw_uevent() Markus Elfring <elfring@xxxxxxxxxxxxxxxxxxxxx> batman-adv: Return directly after a failed batadv_dat_select_candidates() in batadv_dat_forward_data() Kees Cook <keescook@xxxxxxxxxxxx> bnx2x: Fix firmware version string character counts Dmitry Antipov <dmantipov@xxxxxxxxx> wifi: ath9k: fix LNA selection in ath_ant_try_scan() ------------- Diffstat: Makefile | 4 +- arch/arm64/boot/dts/rockchip/rk3328.dtsi | 11 ++++- arch/arm64/boot/dts/rockchip/rk3399.dtsi | 12 ++++- arch/x86/events/amd/lbr.c | 6 ++- block/blk-stat.c | 2 +- drivers/acpi/sleep.c | 12 ----- drivers/bluetooth/btintel.c | 2 +- drivers/bluetooth/btmtk.c | 1 + drivers/bluetooth/btmtk.h | 1 + drivers/bus/mhi/host/init.c | 1 + drivers/bus/mhi/host/internal.h | 9 ++-- drivers/bus/mhi/host/pm.c | 20 +++++++-- drivers/cpufreq/cpufreq.c | 17 ++++--- drivers/cpuidle/driver.c | 3 +- drivers/firmware/tegra/bpmp-debugfs.c | 2 +- .../gpu/drm/amd/display/modules/inc/mod_stats.h | 4 +- drivers/gpu/drm/drm_panel_orientation_quirks.c | 12 +++++ drivers/gpu/drm/vc4/vc4_plane.c | 5 +-- drivers/infiniband/core/cm.c | 20 ++++++++- drivers/input/rmi4/rmi_driver.c | 6 ++- drivers/input/touchscreen/imagis.c | 20 ++++----- drivers/media/pci/sta2x11/sta2x11_vip.c | 9 ++-- drivers/misc/vmw_vmci/vmci_datagram.c | 6 ++- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 9 ++-- .../net/ethernet/broadcom/bnx2x/bnx2x_ethtool.c | 2 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.c | 14 +++--- drivers/net/ethernet/intel/ice/ice_virtchnl.c | 9 +--- drivers/net/ethernet/intel/ice/ice_virtchnl.h | 9 ++++ drivers/net/ethernet/pensando/ionic/ionic_lif.c | 5 ++- drivers/net/pcs/pcs-xpcs.c | 4 +- drivers/net/wireless/ath/ath11k/mhi.c | 2 +- drivers/net/wireless/ath/ath9k/antenna.c | 2 +- .../net/wireless/broadcom/brcm80211/brcmfmac/dmi.c | 9 ++++ drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 1 + drivers/net/wireless/realtek/rtw89/pci.h | 2 +- drivers/nvme/host/pci.c | 3 ++ drivers/pinctrl/renesas/core.c | 4 +- drivers/platform/x86/intel/vbtn.c | 5 ++- drivers/platform/x86/touchscreen_dmi.c | 9 ++++ drivers/scsi/lpfc/lpfc_nportdisc.c | 6 ++- drivers/scsi/scsi_lib.c | 52 +++++++++++----------- drivers/scsi/sd.c | 4 +- drivers/soundwire/dmi-quirks.c | 8 ++++ drivers/thermal/thermal_of.c | 12 +++-- drivers/thunderbolt/quirks.c | 14 ++++++ drivers/thunderbolt/tb.c | 49 +++++++++++++++++++- drivers/thunderbolt/tb.h | 4 ++ drivers/tty/n_gsm.c | 3 ++ drivers/usb/gadget/function/uvc_video.c | 3 ++ drivers/usb/host/sl811-hcd.c | 2 + drivers/usb/typec/tcpm/tcpci.c | 1 + drivers/video/fbdev/core/fbmon.c | 7 +-- drivers/video/fbdev/via/accel.c | 4 +- drivers/virtio/virtio.c | 10 ++++- fs/btrfs/export.c | 9 +++- fs/btrfs/send.c | 10 ++++- fs/btrfs/volumes.c | 12 ++++- fs/ext4/mballoc.c | 5 ++- fs/ext4/super.c | 12 +++++ fs/isofs/inode.c | 18 +++++++- fs/orangefs/super.c | 2 +- fs/pstore/zone.c | 2 + fs/sysv/itree.c | 10 ++--- include/linux/randomize_kstack.h | 2 +- include/linux/rcupdate.h | 4 +- include/linux/skbuff.h | 11 +++++ include/linux/sunrpc/sched.h | 2 +- include/scsi/scsi_device.h | 51 ++++++--------------- include/uapi/linux/input-event-codes.h | 1 + io_uring/io_uring.c | 25 +++++++---- kernel/dma/direct.c | 9 ++-- kernel/panic.c | 8 ++++ kernel/trace/ring_buffer.c | 2 +- net/batman-adv/distributed-arp-table.c | 3 +- net/batman-adv/main.c | 14 +++--- net/mpls/mpls_gso.c | 3 ++ net/netfilter/nf_tables_api.c | 47 ++++++++++++++----- net/smc/smc_pnet.c | 10 +++++ scripts/gcc-plugins/stackleak_plugin.c | 2 + sound/firewire/amdtp-stream.c | 12 +++-- sound/firewire/amdtp-stream.h | 4 ++ sound/soc/intel/boards/sof_sdw.c | 11 +++++ sound/soc/soc-core.c | 3 ++ tools/iio/iio_utils.c | 2 +- tools/lib/perf/evlist.c | 18 +++++--- tools/lib/perf/include/internal/evlist.h | 4 +- .../x86_energy_perf_policy.c | 1 + tools/testing/ktest/ktest.pl | 1 + 88 files changed, 552 insertions(+), 231 deletions(-)