6.1.144-rc2 review

This is the start of the stable review cycle for the 6.1.144 release. There are 81 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 10 Jul 2025 18:08:50 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.144-rc2.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.1.144-rc2

Borislav Petkov (AMD) <[email protected]>
x86/process: Move the buffer clearing before MONITOR

Borislav Petkov (AMD) <[email protected]>
KVM: SVM: Advertise TSA CPUID bits to guests

Borislav Petkov (AMD) <[email protected]>
x86/bugs: Add a Transient Scheduler Attacks mitigation

Borislav Petkov (AMD) <[email protected]>
x86/bugs: Rename MDS machinery to something more generic

Andrei Kuchynski <[email protected]>
usb: typec: displayport: Fix potential deadlock

Kurt Borja <[email protected]>
platform/x86: think-lmi: Fix kobject cleanup

Kurt Borja <[email protected]>
platform/x86: think-lmi: Create ksets consecutively

Oliver Neukum <[email protected]>
Logitech C-270 even more broken

Michael J. Ruhl <[email protected]>
i2c/designware: Fix an initialization issue

Christian König <[email protected]>
dma-buf: fix timeout handling in dma_resv_wait_timeout v2

Peter Chen <[email protected]>
usb: cdnsp: do not disable slot for disabled slot

Hongyu Xie <[email protected]>
xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS

Mathias Nyman <[email protected]>
xhci: dbc: Flush queued requests before stopping dbc

Łukasz Bartosik <[email protected]>
xhci: dbctty: disable ECHO flag by default

Oleksij Rempel <[email protected]>
net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect

Kurt Borja <[email protected]>
platform/x86: dell-wmi-sysman: Fix class device unregistration

Kurt Borja <[email protected]>
platform/x86: think-lmi: Fix class device unregistration

Fushuai Wang <[email protected]>
dpaa2-eth: fix xdp_rxq_info leak

Filipe Manana <[email protected]>
btrfs: use btrfs_record_snapshot_destroy() during rmdir

Trond Myklebust <[email protected]>
NFSv4/flexfiles: Fix handling of NFS level errors in I/O

Maíra Canal <[email protected]>
drm/v3d: Disable interrupts before resetting the GPU

Niklas Schnelle <[email protected]>
s390/pci: Fix stale function handles in error handling

Bui Quang Minh <[email protected]>
virtio-net: ensure the received length does not exceed allocated size

Uladzislau Rezki (Sony) <[email protected]>
rcu: Return early if callback is not specified

Pablo Martin-Gomez <[email protected]>
mtd: spinand: fix memory leak of ECC engine conf

Rafael J. Wysocki <[email protected]>
ACPICA: Refuse to evaluate a method if arguments are missing

Johannes Berg <[email protected]>
wifi: ath6kl: remove WARN on bad firmware input

Johannes Berg <[email protected]>
wifi: mac80211: drop invalid source address OCB frames

Justin Sanders <[email protected]>
aoe: defer rexmit timer downdev work to workqueue

Maurizio Lombardi <[email protected]>
scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()

Raven Black <[email protected]>
ASoC: amd: yc: update quirk data for HP Victus

Madhavan Srinivasan <[email protected]>
powerpc: Fix struct termio related ioctl macros

Johannes Berg <[email protected]>
ata: pata_cs5536: fix build on 32-bit UML

Tasos Sahanidis <[email protected]>
ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled

Takashi Iwai <[email protected]>
ALSA: sb: Force to disable DMAs once when DMA mode is changed

Takashi Iwai <[email protected]>
ALSA: sb: Don't allow changing the DMA mode during operations

Rob Clark <[email protected]>
drm/msm: Fix another leak in the submit error path

Rob Clark <[email protected]>
drm/msm: Fix a fence leak in submit error path

Wang Zhaolong <[email protected]>
smb: client: fix race condition in negotiate timeout by using more precise timing

Lion Ackermann <[email protected]>
net/sched: Always pass notifications when child class becomes empty

Thomas Fourier <[email protected]>
nui: Fix dma_mapping_error() check

Kohei Enju <[email protected]>
rose: fix dangling neighbour pointers in rose_rt_device_down()

Alok Tiwari <[email protected]>
enic: fix incorrect MTU comparison in enic_change_mtu()

Raju Rangoju <[email protected]>
amd-xgbe: align CL37 AN sequence as per databook

Dan Carpenter <[email protected]>
lib: test_objagg: Set error message in check_expect_hints_stats()

Vitaly Lifshits <[email protected]>
igc: disable L1.2 PCI-E link substate to avoid performance issue

Junxiao Chang <[email protected]>
drm/i915/gsc: mei interrupt top half should be in irq disabled context

Janusz Krzysztofik <[email protected]>
drm/i915/gt: Fix timeline left held on VMA alloc error

Alok Tiwari <[email protected]>
platform/mellanox: mlxreg-lc: Fix logic error in power state check

Kurt Borja <[email protected]>
platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks

Dan Carpenter <[email protected]>
drm/i915/selftests: Change mock_request() to return error pointers

James Clark <[email protected]>
spi: spi-fsl-dspi: Clear completion counter before initiating transfer

Marek Szyprowski <[email protected]>
drm/exynos: fimd: Guard display clock control with runtime PM calls

Thomas Fourier <[email protected]>
ethernet: atl1: Add missing DMA mapping error checks and count errors

Filipe Manana <[email protected]>
btrfs: fix iteration of extrefs during log replay

Filipe Manana <[email protected]>
btrfs: fix missing error handling when searching for inode refs during log replay

Yang Li <[email protected]>
Bluetooth: Prevent unintended pause by checking if advertising is active

Alok Tiwari <[email protected]>
platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message

Patrisious Haddad <[email protected]>
RDMA/mlx5: Fix CC counters query for MPV

Bart Van Assche <[email protected]>
scsi: ufs: core: Fix spelling of a sysfs attribute name

Thomas Fourier <[email protected]>
scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()

Thomas Fourier <[email protected]>
scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()

Benjamin Coddington <[email protected]>
NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN

Kuniyuki Iwashima <[email protected]>
nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.

Mark Zhang <[email protected]>

    RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert

David Thompson <[email protected]>
platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment

Janne Grunau <[email protected]>

    arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename

Sergey Senozhatsky <[email protected]>

    mtk-sd: reset host->mrq on prepare_data() error

Masami Hiramatsu (Google) <[email protected]>
mtk-sd: Prevent memory corruption from DMA map failure

Masami Hiramatsu (Google) <[email protected]>
mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data

RD Babiera <[email protected]>
usb: typec: altmodes/displayport: do not index invalid pin_assignments

Manivannan Sadhasivam <[email protected]>
regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods

Christian Eggers <[email protected]>
Bluetooth: MGMT: mesh_send: check instances prior disabling advertising

Christian Eggers <[email protected]>
Bluetooth: MGMT: set_mesh: update LE scan interval and window

Christian Eggers <[email protected]>
Bluetooth: hci_sync: revert some mesh modifications

Avri Altman <[email protected]>
mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier

Ulf Hansson <[email protected]>
Revert "mmc: sdhci: Disable SD card clock before changing parameters"

Victor Shih <[email protected]>
mmc: sdhci: Add a helper function for dump register in dynamic debug mode

HarshaVardhana S A <[email protected]>
vsock/vmci: Clear the vmci transport packet properly when initializing it

Niklas Schnelle <[email protected]>
s390/pci: Do not try re-enabling load/store if device is disabled

Mateusz Jończyk <[email protected]>
rtc: cmos: use spin_lock_irqsave in cmos_interrupt

-------------

Diffstat:

 Documentation/ABI/testing/sysfs-devices-system-cpu |   1 +
 Documentation/ABI/testing/sysfs-driver-ufs         |   2 +-
 .../hw-vuln/processor_mmio_stale_data.rst          |   4 +-
 Documentation/admin-guide/kernel-parameters.txt    |  13 ++
 Makefile                                           |   4 +-
 arch/arm64/boot/dts/apple/t8103-jxxx.dtsi          |   2 +-
 arch/powerpc/include/uapi/asm/ioctls.h             |   8 +-
 arch/s390/pci/pci_event.c                          |  20 ++++
 arch/x86/Kconfig                                   |   9 ++
 arch/x86/entry/entry.S                             |   8 +-
 arch/x86/include/asm/cpu.h                         |  12 ++
 arch/x86/include/asm/cpufeatures.h                 |   6 +
 arch/x86/include/asm/irqflags.h                    |   4 +-
 arch/x86/include/asm/mwait.h                       |  19 ++-
 arch/x86/include/asm/nospec-branch.h               |  39 +++---
 arch/x86/kernel/cpu/amd.c                          |  58 +++++++++
 arch/x86/kernel/cpu/bugs.c                         | 133 ++++++++++++++++++++-
 arch/x86/kernel/cpu/common.c                       |  14 ++-
 arch/x86/kernel/cpu/scattered.c                    |   2 +
 arch/x86/kernel/process.c                          |  15 ++-
 arch/x86/kvm/cpuid.c                               |   9 +-
 arch/x86/kvm/reverse_cpuid.h                       |   8 ++
 arch/x86/kvm/svm/vmenter.S                         |   6 +
 arch/x86/kvm/vmx/vmx.c                             |   2 +-
 drivers/acpi/acpica/dsmethod.c                     |   7 ++
 drivers/ata/libata-acpi.c                          |  24 ++--
 drivers/ata/pata_cs5536.c                          |   2 +-
 drivers/ata/pata_via.c                             |   6 +-
 drivers/base/cpu.c                                 |   7 ++
 drivers/block/aoe/aoe.h                            |   1 +
 drivers/block/aoe/aoecmd.c                         |   8 +-
 drivers/block/aoe/aoedev.c                         |   5 +-
 drivers/dma-buf/dma-resv.c                         |  12 +-
 drivers/gpu/drm/exynos/exynos_drm_fimd.c           |  12 ++
 drivers/gpu/drm/i915/gt/intel_gsc.c                |   2 +-
 drivers/gpu/drm/i915/gt/intel_ring_submission.c    |   3 +-
 drivers/gpu/drm/i915/selftests/i915_request.c      |  20 ++--
 drivers/gpu/drm/i915/selftests/mock_request.c      |   2 +-
 drivers/gpu/drm/msm/msm_gem_submit.c               |  17 ++-
 drivers/gpu/drm/v3d/v3d_drv.h                      |   8 ++
 drivers/gpu/drm/v3d/v3d_gem.c                      |   2 +
 drivers/gpu/drm/v3d/v3d_irq.c                      |  37 ++++--
 drivers/i2c/busses/i2c-designware-master.c         |   1 +
 drivers/infiniband/hw/mlx5/counters.c              |   2 +-
 drivers/infiniband/hw/mlx5/devx.c                  |   2 +-
 drivers/mmc/core/quirks.h                          |  12 +-
 drivers/mmc/host/mtk-sd.c                          |  21 +++-
 drivers/mmc/host/sdhci.c                           |   9 +-
 drivers/mmc/host/sdhci.h                           |  16 +++
 drivers/mtd/nand/spi/core.c                        |   1 +
 drivers/net/ethernet/amd/xgbe/xgbe-common.h        |   2 +
 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c          |   9 ++
 drivers/net/ethernet/amd/xgbe/xgbe.h               |   4 +-
 drivers/net/ethernet/atheros/atlx/atl1.c           |  79 ++++++++----
 drivers/net/ethernet/cisco/enic/enic_main.c        |   4 +-
 drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c   |  26 +++-
 drivers/net/ethernet/intel/igc/igc_main.c          |  10 ++
 drivers/net/ethernet/sun/niu.c                     |  31 ++++-
 drivers/net/ethernet/sun/niu.h                     |   4 +
 drivers/net/usb/lan78xx.c                          |   2 -
 drivers/net/virtio_net.c                           |  38 +++++-
 drivers/net/wireless/ath/ath6kl/bmi.c              |   4 +-
 drivers/platform/mellanox/mlxbf-tmfifo.c           |   3 +-
 drivers/platform/mellanox/mlxreg-lc.c              |   2 +-
 drivers/platform/mellanox/nvsw-sn2201.c            |   2 +-
 .../x86/dell/dell-wmi-sysman/dell-wmi-sysman.h     |   5 +
 .../x86/dell/dell-wmi-sysman/enum-attributes.c     |   5 +-
 .../x86/dell/dell-wmi-sysman/int-attributes.c      |   5 +-
 .../x86/dell/dell-wmi-sysman/passobj-attributes.c  |   5 +-
 .../x86/dell/dell-wmi-sysman/string-attributes.c   |   5 +-
 drivers/platform/x86/dell/dell-wmi-sysman/sysman.c |  12 +-
 drivers/platform/x86/think-lmi.c                   |  53 ++++----
 drivers/regulator/gpio-regulator.c                 |   8 +-
 drivers/rtc/rtc-cmos.c                             |  10 +-
 drivers/scsi/qla2xxx/qla_mbx.c                     |   2 +-
 drivers/scsi/qla4xxx/ql4_os.c                      |   2 +
 drivers/spi/spi-fsl-dspi.c                         |  11 +-
 drivers/target/target_core_pr.c                    |   4 +-
 drivers/ufs/core/ufs-sysfs.c                       |   4 +-
 drivers/usb/cdns3/cdnsp-ring.c                     |   4 +-
 drivers/usb/core/quirks.c                          |   3 +-
 drivers/usb/host/xhci-dbgcap.c                     |   4 +
 drivers/usb/host/xhci-dbgtty.c                     |   1 +
 drivers/usb/host/xhci-plat.c                       |   3 +-
 drivers/usb/typec/altmodes/displayport.c           |   5 +-
 fs/btrfs/inode.c                                   |   7 +-
 fs/btrfs/tree-log.c                                |   8 +-
 fs/nfs/flexfilelayout/flexfilelayout.c             | 121 +++++++++++++------
 fs/nfs/inode.c                                     |  17 ++-
 fs/nfs/pnfs.c                                      |   4 +-
 fs/smb/client/cifsglob.h                           |   1 +
 fs/smb/client/connect.c                            |   7 +-
 include/linux/cpu.h                                |   1 +
 include/linux/libata.h                             |   7 +-
 include/linux/usb/typec_dp.h                       |   1 +
 kernel/rcu/tree.c                                  |   4 +
 lib/test_objagg.c                                  |   4 +-
 net/bluetooth/hci_sync.c                           |  20 ++--
 net/bluetooth/mgmt.c                               |  25 +++-
 net/mac80211/rx.c                                  |   4 +
 net/rose/rose_route.c                              |  15 +--
 net/sched/sch_api.c                                |  19 +--
 net/vmw_vsock/vmci_transport.c                     |   4 +-
 sound/isa/sb/sb16_main.c                           |   7 ++
 sound/soc/amd/yc/acp6x-mach.c                      |   7 ++
 105 files changed, 987 insertions(+), 304 deletions(-)

On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels, build tested on BMIPS_GENERIC:

Florian

Hi!

CIP testing did not find any problems here:

https://gitlab.com/cip-project/cip-testing/linux-stable-rc-ci/-/tree/linux-6.1.y

Best regards,
Pavel

In cooperation with DENX Software Engineering GmbH, HRB 165235 Munich,
Office: Kirchenstr.5, D-82194 Groebenzell, Germany

Built and booted successfully on RISC-V RV64 (HiFive Unmatched).

All tests passing for Tegra ...

Test results for stable-v6.1:

    10 builds:	10 pass, 0 fail
    28 boots:	28 pass, 0 fail
    119 tests:	119 pass, 0 fail

Linux version: 6.1.144-rc2-g10392f5749b3
Boards tested: tegra124-jetson-tk1, tegra186-p2771-0000,

                tegra186-p3509-0000+p3636-0001, tegra194-p2972-0000,
                tegra194-p3509-0000+p3668-0000, tegra20-ventana,
                tegra210-p2371-2180, tegra210-p3450-0000,
                tegra30-cardhu-a04

Jon

Boot-tested under QEMU for Rust x86_64:

Thanks!

Cheers,
Miguel

Regression on the stable-rc 6.1.144-rc2 s390 builds failed with clang-20 and gcc-13 toolchains with following build warnings / errors.

* s390, build
- clang-20-allmodconfig
- clang-20-defconfig
- clang-nightly-defconfig
- gcc-13-allmodconfig
- gcc-13-defconfig
- gcc-8-defconfig-fe40093d

Regression Analysis:
- New regression? Yes
- Reproducibility? Yes

Build regression: stable-rc 6.1.144-rc2 s390 pci_event.c:269:21:
error: no member named 'state_lock' in 'struct zpci_dev'

## Build log

arch/s390/pci/pci_event.c:269:21: error: no member named 'state_lock' in 'struct zpci_dev'
269 | mutex_lock(&zdev->state_lock);
| ~~~~ ^
arch/s390/pci/pci_event.c:272:24: error: no member named 'state_lock' in 'struct zpci_dev'
272 | mutex_unlock(&zdev->state_lock);
| ~~~~ ^
arch/s390/pci/pci_event.c:279:24: error: no member named 'state_lock' in 'struct zpci_dev'
279 | mutex_unlock(&zdev->state_lock);
| ~~~~ ^
arch/s390/pci/pci_event.c:285:23: error: no member named 'state_lock' in 'struct zpci_dev'
285 | mutex_unlock(&zdev->state_lock);
| ~~~~ ^
4 errors generated.

## Source
* Kernel version: 6.1.144-rc2
* Git tree: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
* Git sha: 10392f5749b37d327ec5529958e9d5d27cf07b6e
* Git describe: v6.1.143-82-g10392f5749b3
* Project: https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.1.y/build/v6.1.143-82-g10392f5749b3
* Architectures: s390
* Toolchains: gcc-13, clang-20
* Kconfigs: defconfig

## Build
* Build log: https://regressions.linaro.org/lkft/linux-stable-rc-linux-6.1.y/v6.1.143-82-g10392f5749b3/testruns/1565938/
* Build plan: https://tuxapi.tuxsuite.com/v1/groups/linaro/projects/lkft/builds/2zbVlOqL24w4NUJUSg3nXcHGVZ2
* Build link: https://storage.tuxsuite.com/public/linaro/lkft/builds/2zbVlOqL24w4NUJUSg3nXcHGVZ2/
* Kernel config:
https://storage.tuxsuite.com/public/linaro/lkft/builds/2zbVlOqL24w4NUJUSg3nXcHGVZ2/config

## Steps to reproduce
* tuxmake --runtime podman --target-arch s390 --toolchain gcc-13 --kconfig defconfig

--
Linaro LKFT
https://lkft.linaro.org

--- snip ---

Hi Naresh, Hi Greg,

Thanks for the report!

Looks like the backport of 45537926dd2a ("s390/pci: Fix stale function handles in error handling") is broken. In the original commit there is a context line mutex_lock(&zdev->state_lock) from commit bcb5d6c76903 ("s390/pci: introduce lock to synchronize state of zpci_dev's") that ended up in the stable tree without also pulling in the rest of that commit. I found that backport in my mail and not only is the context turned into added lines but it also adds the matching unlock in the wrong place. Will comment on that mail too.

Thanks,
Niklas