This is the start of the stable review cycle for the 6.1.94 release. There are 85 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 15 Jun 2024 11:31:50 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.94-rc1.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> Linux 6.1.94-rc1 Enzo Matsumiya <ematsumiya@xxxxxxx> smb: client: fix deadlock in smb2_find_smb_tcon() Puranjay Mohan <puranjay@xxxxxxxxxx> powerpc/bpf: enforce full ordering for ATOMIC operations with BPF_FETCH Omar Sandoval <osandov@xxxxxx> btrfs: fix crash on racing fsync and size-extending write into prealloc Anna Schumaker <Anna.Schumaker@xxxxxxxxxx> NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS Sergey Shtylyov <s.shtylyov@xxxxxx> nfs: fix undefined behavior in nfs_block_bits() Ilpo Järvinen <ilpo.jarvinen@xxxxxxxxxxxxxxx> EDAC/igen6: Convert PCIBIOS_* return codes to errnos Frank Li <Frank.Li@xxxxxxx> i3c: master: svc: fix invalidate IBI type and miss call client IBI handler Harald Freudenberger <freude@xxxxxxxxxxxxx> s390/cpacf: Make use of invalid opcode produce a link error Harald Freudenberger <freude@xxxxxxxxxxxxx> s390/cpacf: Split and rework cpacf query functions Harald Freudenberger <freude@xxxxxxxxxxxxx> s390/ap: Fix crash in AP internal function modify_bitmap() Helge Deller <deller@xxxxxxxxxx> parisc: Define sigset_t in parisc uapi header Helge Deller <deller@xxxxxx> parisc: Define HAVE_ARCH_HUGETLB_UNMAPPED_AREA Baokun Li <libaokun1@xxxxxxxxxx> ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() Baokun Li <libaokun1@xxxxxxxxxx> ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow Mike Gilbert <floppym@xxxxxxxxxx> sparc: move struct termio to asm/termios.h Eric Dumazet <edumazet@xxxxxxxxxx> net: fix __dst_negative_advice() race Daniel Thompson <daniel.thompson@xxxxxxxxxx> kdb: Use format-specifiers rather than memset() for padding in kdb_read() Daniel Thompson <daniel.thompson@xxxxxxxxxx> kdb: Merge identical case statements in kdb_read() Daniel Thompson <daniel.thompson@xxxxxxxxxx> kdb: Fix console handling when editing and tab-completing commands Daniel Thompson <daniel.thompson@xxxxxxxxxx> kdb: Use format-strings rather than '\0' injection in kdb_read() Daniel Thompson <daniel.thompson@xxxxxxxxxx> kdb: Fix buffer overflow during tab-complete Judith Mendez <jm@xxxxxx> watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin Frank van der Linden <fvdl@xxxxxxxxxx> mm/hugetlb: pass correct order_per_bit to cma_declare_contiguous_nid Frank van der Linden <fvdl@xxxxxxxxxx> mm/cma: drop incorrect alignment check in cma_init_reserved_mem Sam Ravnborg <sam@xxxxxxxxxxxx> sparc64: Fix number of online CPUs Alexander Shishkin <alexander.shishkin@xxxxxxxxxxxxxxx> intel_th: pci: Add Meteor Lake-S CPU support Dhananjay Ugwekar <Dhananjay.Ugwekar@xxxxxxx> cpufreq: amd-pstate: Fix the inconsistency in max frequency units Alexander Potapenko <glider@xxxxxxxxxx> kmsan: do not wipe out origin when doing partial unpoisoning Nikita Zhandarovich <n.zhandarovich@xxxxxxxxxx> net/9p: fix uninit-value in p9_client_rpc() xu xin <xu.xin16@xxxxxxxxxx> net/ipv6: Fix route deleting failure when metric equals 0 Martin K. Petersen <martin.petersen@xxxxxxxxxx> scsi: core: Handle devices which return an unusually large VPD page count Ryan Roberts <ryan.roberts@xxxxxxx> mm: fix race between __split_huge_pmd_locked() and GUP-fast Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Vitaly Chikunov <vt@xxxxxxxxxxxx> crypto: ecrdsa - Fix module auto-load on add_key Stefan Berger <stefanb@xxxxxxxxxxxxx> crypto: ecdsa - Fix module auto-load on add-key Marc Zyngier <maz@xxxxxxxxxx> KVM: arm64: AArch32: Fix spurious trapping of conditional instructions Marc Zyngier <maz@xxxxxxxxxx> KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode Marc Zyngier <maz@xxxxxxxxxx> KVM: arm64: Fix AArch32 register narrowing on userspace write Mario Limonciello <mario.limonciello@xxxxxxx> drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms Dominique Martinet <asmadeus@xxxxxxxxxxxxx> 9p: add missing locking around taking dentry fid list Li Ma <li.ma@xxxxxxx> drm/amdgpu/atomfirmware: add intergrated info v2.3 table Cai Xinchen <caixinchen1@xxxxxxxxxx> fbdev: savage: Handle err return when savagefb_check_var failed Hans de Goede <hdegoede@xxxxxxxxxx> mmc: sdhci-acpi: Add quirk to enable pull-up on the card-detect GPIO on Asus T100TA Hans de Goede <hdegoede@xxxxxxxxxx> mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A Hans de Goede <hdegoede@xxxxxxxxxx> mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working Hans de Goede <hdegoede@xxxxxxxxxx> mmc: sdhci-acpi: Sort DMI quirks alphabetically Adrian Hunter <adrian.hunter@xxxxxxxxx> mmc: sdhci: Add support for "Tuning Error" interrupts Hans de Goede <hdegoede@xxxxxxxxxx> mmc: core: Add mmc_gpiod_set_cd_config() function Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: v4l2-core: hold videodev_lock until dev reg, finishes Nathan Chancellor <nathan@xxxxxxxxxx> media: mxl5xx: Move xpt structures off stack Hans Verkuil <hverkuil-cisco@xxxxxxxxx> media: mc: mark the media devnode as registered from the, start Tomi Valkeinen <tomi.valkeinen@xxxxxxxxxxxxxxxx> media: mc: Fix graph walk in media_pipeline_start Yang Xiwen <forbidden405@xxxxxxxxxxx> arm64: dts: hi3798cv200: fix the size of GICR Bitterblue Smith <rtl8821cerfe2@xxxxxxxxx> wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path Bitterblue Smith <rtl8821cerfe2@xxxxxxxxx> wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE Bitterblue Smith <rtl8821cerfe2@xxxxxxxxx> wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power Bitterblue Smith <rtl8821cerfe2@xxxxxxxxx> wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU Ping-Ke Shih <pkshih@xxxxxxxxxxx> wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of firmware command Yu Kuai <yukuai3@xxxxxxxxxx> md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING Johan Hovold <johan+linaro@xxxxxxxxxx> arm64: dts: qcom: qcs404: fix bluetooth device address Krzysztof Kozlowski <krzk@xxxxxxxxxx> arm64: tegra: Correct Tegra132 I2C alias Christoffer Sandberg <cs@xxxxxxxxx> ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx Maulik Shah <quic_mkshah@xxxxxxxxxxx> soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request Konrad Dybcio <konrad.dybcio@xxxxxxxxxx> thermal/drivers/qcom/lmh: Check for SCM availability at probe Sergey Shtylyov <s.shtylyov@xxxxxx> ata: pata_legacy: make legacy_exit() work again Ping-Ke Shih <pkshih@xxxxxxxxxxx> wifi: rtw89: correct aSIFSTime for 6GHz band Matthew Mirvish <matthew@xxxxxxxx> bcache: fix variable length array abuse in btree_iter Bob Zhou <bob.zhou@xxxxxxx> drm/amdgpu: add error handle to avoid out-of-bounds Zheyu Ma <zheyuma97@xxxxxxxxx> media: lgdt3306a: Add a check against null-pointer-def Chao Yu <chao@xxxxxxxxxx> f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode() Florian Fainelli <florian.fainelli@xxxxxxxxxxxx> scripts/gdb: fix SB_* constants parsing Daniel Borkmann <daniel@xxxxxxxxxxxxx> vxlan: Fix regression when dropping packets due to invalid src addresses Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx> mptcp: fix full TCP keep-alive support Paolo Abeni <pabeni@xxxxxxxxxx> mptcp: cleanup SOL_TCP handling Paolo Abeni <pabeni@xxxxxxxxxx> mptcp: avoid some duplicate code in socket option handling Chaitanya Kumar Borah <chaitanya.kumar.borah@xxxxxxxxx> drm/i915/audio: Fix audio time stamp programming for DP Ryusuke Konishi <konishi.ryusuke@xxxxxxxxx> nilfs2: fix use-after-free of timer for log writer thread Haorong Lu <ancientmodern4@xxxxxxxxx> riscv: signal: handle syscall restart before get_signal Marc Dionne <marc.dionne@xxxxxxxxxxxx> afs: Don't cross .backup mountpoint from backup volume Jorge Ramirez-Ortiz <jorge@xxxxxxxxxxxx> mmc: core: Do not force a retune before RPMB switch Liam R. Howlett <Liam.Howlett@xxxxxxxxxx> maple_tree: fix mas_empty_area_rev() null pointer dereference Peng Zhang <zhangpeng.00@xxxxxxxxxxxxx> maple_tree: fix allocation in mas_sparse_area() Dan Gora <dan.gora@xxxxxxxxx> Bluetooth: btrtl: Add missing MODULE_FIRMWARE declarations Shradha Gupta <shradhagupta@xxxxxxxxxxxxxxxxxxx> drm: Check polling initialized before enabling in drm_helper_probe_single_connector_modes Shradha Gupta <shradhagupta@xxxxxxxxxxxxxxxxxxx> drm: Check output polling initialized before disabling ------------- Diffstat: Documentation/mm/arch_pgtable_helpers.rst | 6 +- Makefile | 4 +- arch/arm64/boot/dts/hisilicon/hi3798cv200.dtsi | 2 +- arch/arm64/boot/dts/nvidia/tegra132-norrin.dts | 4 +- arch/arm64/boot/dts/nvidia/tegra132.dtsi | 2 +- arch/arm64/boot/dts/qcom/qcs404-evb.dtsi | 2 +- arch/arm64/kvm/guest.c | 3 +- arch/arm64/kvm/hyp/aarch32.c | 18 ++- arch/parisc/include/asm/page.h | 1 + arch/parisc/include/asm/signal.h | 12 -- arch/parisc/include/uapi/asm/signal.h | 10 ++ arch/powerpc/mm/book3s64/pgtable.c | 1 + arch/powerpc/net/bpf_jit_comp32.c | 12 ++ arch/powerpc/net/bpf_jit_comp64.c | 12 ++ arch/riscv/kernel/signal.c | 95 +++++++------- arch/s390/include/asm/cpacf.h | 109 +++++++++++++--- arch/s390/include/asm/pgtable.h | 4 +- arch/sparc/include/asm/smp_64.h | 2 - arch/sparc/include/uapi/asm/termbits.h | 10 -- arch/sparc/include/uapi/asm/termios.h | 9 ++ arch/sparc/kernel/prom_64.c | 4 +- arch/sparc/kernel/setup_64.c | 1 - arch/sparc/kernel/smp_64.c | 14 -- arch/sparc/mm/tlb.c | 1 + arch/x86/mm/pgtable.c | 2 + crypto/ecdsa.c | 3 + crypto/ecrdsa.c | 1 + drivers/acpi/resource.c | 12 ++ drivers/ata/pata_legacy.c | 8 +- drivers/bluetooth/btrtl.c | 18 ++- drivers/cpufreq/amd-pstate.c | 2 +- drivers/crypto/qat/qat_common/adf_aer.c | 19 +-- drivers/edac/igen6_edac.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_atomfirmware.c | 15 +++ drivers/gpu/drm/amd/amdgpu/sdma_v4_0.c | 3 + drivers/gpu/drm/amd/include/atomfirmware.h | 43 ++++++ .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_4_ppt.c | 20 +-- drivers/gpu/drm/drm_modeset_helper.c | 19 ++- drivers/gpu/drm/drm_probe_helper.c | 15 ++- drivers/gpu/drm/i915/display/intel_audio.c | 116 ++--------------- drivers/hwtracing/intel_th/pci.c | 5 + drivers/i3c/master/svc-i3c-master.c | 16 ++- drivers/md/bcache/bset.c | 44 +++---- drivers/md/bcache/bset.h | 28 ++-- drivers/md/bcache/btree.c | 40 +++--- drivers/md/bcache/super.c | 5 +- drivers/md/bcache/sysfs.c | 2 +- drivers/md/bcache/writeback.c | 10 +- drivers/md/raid5.c | 15 +-- drivers/media/dvb-frontends/lgdt3306a.c | 5 + drivers/media/dvb-frontends/mxl5xx.c | 22 ++-- drivers/media/mc/mc-devnode.c | 5 +- drivers/media/mc/mc-entity.c | 6 + drivers/media/v4l2-core/v4l2-dev.c | 3 + drivers/mmc/core/host.c | 3 +- drivers/mmc/core/slot-gpio.c | 20 +++ drivers/mmc/host/sdhci-acpi.c | 61 ++++++++- drivers/mmc/host/sdhci.c | 10 +- drivers/mmc/host/sdhci.h | 3 +- drivers/net/vxlan/vxlan_core.c | 4 - .../net/wireless/realtek/rtl8xxxu/rtl8xxxu_core.c | 25 ++-- .../net/wireless/realtek/rtlwifi/rtl8192de/phy.c | 4 +- .../net/wireless/realtek/rtlwifi/rtl8192de/trx.c | 21 ++- .../net/wireless/realtek/rtlwifi/rtl8192de/trx.h | 79 +++-------- drivers/net/wireless/realtek/rtw89/mac80211.c | 2 +- drivers/net/wireless/realtek/rtw89/pci.c | 3 +- drivers/s390/crypto/ap_bus.c | 2 +- drivers/scsi/scsi.c | 7 + drivers/soc/qcom/cmd-db.c | 32 ++++- drivers/soc/qcom/rpmh-rsc.c | 3 +- drivers/thermal/qcom/lmh.c | 3 + drivers/video/fbdev/savage/savagefb_driver.c | 5 +- drivers/watchdog/rti_wdt.c | 34 +++-- fs/9p/vfs_dentry.c | 9 +- fs/afs/mntpt.c | 5 + fs/btrfs/tree-log.c | 17 ++- fs/ext4/mballoc.h | 2 +- fs/ext4/xattr.c | 4 +- fs/f2fs/inode.c | 6 + fs/nfs/internal.h | 4 +- fs/nfs/nfs4proc.c | 2 +- fs/nilfs2/segment.c | 25 +++- fs/smb/client/smb2transport.c | 2 +- include/linux/mmc/slot-gpio.h | 1 + include/net/dst_ops.h | 2 +- include/net/sock.h | 13 +- include/soc/qcom/cmd-db.h | 10 +- kernel/debug/kdb/kdb_io.c | 99 ++++++++------ lib/maple_tree.c | 55 ++++---- mm/cma.c | 4 - mm/huge_memory.c | 49 +++---- mm/hugetlb.c | 6 +- mm/kmsan/core.c | 15 ++- mm/pgtable-generic.c | 2 + net/9p/client.c | 2 + net/ipv4/route.c | 22 ++-- net/ipv6/route.c | 34 ++--- net/mptcp/protocol.h | 3 + net/mptcp/sockopt.c | 144 +++++++++++++++------ net/xfrm/xfrm_policy.c | 11 +- scripts/gdb/linux/constants.py.in | 12 +- 101 files changed, 1030 insertions(+), 695 deletions(-)