[PATCH 6.1 00/88] 6.1.146-rc1 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 6.1.146 release.
There are 88 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 17 Jul 2025 13:07:32 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.146-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 6.1.146-rc1

Namjae Jeon <linkinjeon@xxxxxxxxxx>
    ksmbd: fix potential use-after-free in oplock/lease break ack

Yeoreum Yun <yeoreum.yun@xxxxxxx>
    kasan: remove kasan_find_vm_area() to prevent possible deadlock

Jack Wang <jinpu.wang@xxxxxxxxx>
    x86: Fix X86_FEATURE_VERW_CLEAR definition

Jann Horn <jannh@xxxxxxxxxx>
    x86/mm: Disable hugetlb page table sharing on 32-bit

Dongli Zhang <dongli.zhang@xxxxxxxxxx>
    vhost-scsi: protect vq->log_used with vq->mutex

Hans de Goede <hdegoede@xxxxxxxxxx>
    Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID

Chia-Lin Kao (AceLan) <acelan.kao@xxxxxxxxxxxxx>
    HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

Zhang Heng <zhangheng@xxxxxxxxxx>
    HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY

Nicolas Pitre <npitre@xxxxxxxxxxxx>
    vt: add missing notification when switching back to text mode

Filipe Manana <fdmanana@xxxxxxxx>
    btrfs: fix assertion when building free space tree

Akira Inoue <niyarium@xxxxxxxxx>
    HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2

Xiaowei Li <xiaowei.li@xxxxxxxxxx>
    net: usb: qmi_wwan: add SIMCom 8230C composition

Yasmin Fitzgerald <sunoflife1.git@xxxxxxxxx>
    ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100

Yuzuru10 <yuzuru_10@xxxxxxxxx>
    ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic

Tiwei Bie <tiwei.btw@xxxxxxxxxxxx>
    um: vector: Reduce stack usage in vector_eth_configure()

Thomas Fourier <fourier.thomas@xxxxxxxxx>
    atm: idt77252: Add missing `dma_map_error()`

Somnath Kotur <somnath.kotur@xxxxxxxxxxxx>
    bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT

Shravya KN <shravya.k-n@xxxxxxxxxxxx>
    bnxt_en: Fix DCB ETS validation

Alok Tiwari <alok.a.tiwari@xxxxxxxxxx>
    net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()

Sean Nyekjaer <sean@xxxxxxxxxx>
    can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level

Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
    net: phy: microchip: limit 100M workaround to link-down events on LAN88xx

Mingming Cao <mmc@xxxxxxxxxxxxx>
    ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof

Kito Xu <veritas501@xxxxxxxxxxx>
    net: appletalk: Fix device refcount leak in atrtr_create()

Eric Dumazet <edumazet@xxxxxxxxxx>
    netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()

Chao Yu <chao@xxxxxxxxxx>
    erofs: fix to add missing tracepoint in erofs_read_folio()

Gao Xiang <xiang@xxxxxxxxxx>
    erofs: adapt folios for z_erofs_read_folio()

Gao Xiang <xiang@xxxxxxxxxx>
    erofs: avoid on-stack pagepool directly passed by arguments

Gao Xiang <xiang@xxxxxxxxxx>
    erofs: allocate extra bvec pages directly instead of retrying

Yue Hu <huyue2@xxxxxxxxxxx>
    erofs: clean up z_erofs_pcluster_readmore()

Yue Hu <huyue2@xxxxxxxxxxx>
    erofs: remove the member readahead from struct z_erofs_decompress_frontend

Zheng Qixing <zhengqixing@xxxxxxxxxx>
    nbd: fix uaf in nbd_genl_connect() error path

Nigel Croxon <ncroxon@xxxxxxxxxx>
    raid10: cleanup memleak at raid10_make_request

Wang Jinchao <wangjinchao600@xxxxxxxxx>
    md/raid1: Fix stack memory use after return in raid1_reshape

Mikko Perttunen <mperttunen@xxxxxxxxxx>
    drm/tegra: nvdec: Fix dma_alloc_coherent error check

Daniil Dulov <d.dulov@xxxxxxxxxx>
    wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()

Zhang Rui <rui.zhang@xxxxxxxxx>
    platform/x86: think-lmi: Fix sysfs group cleanup

Kuen-Han Tsai <khtsai@xxxxxxxxxx>
    usb: dwc3: Abort suspend on soft disconnect failure

Pawel Laszczak <pawell@xxxxxxxxxxx>
    usb: cdnsp: Fix issue with CV Bad Descriptor test

Lee Jones <lee@xxxxxxxxxx>
    usb: cdnsp: Replace snprintf() with the safer scnprintf() variant

Pawel Laszczak <pawell@xxxxxxxxxxx>
    usb:cdnsp: remove TRB_FLUSH_ENDPOINT command

Nilton Perim Neto <niltonperimneto@xxxxxxxxx>
    Input: xpad - support Acer NGR 200 Controller

Raju Rangoju <Raju.Rangoju@xxxxxxx>
    usb: xhci: quirk for data loss in ISOC transfers

Basavaraj Natikar <Basavaraj.Natikar@xxxxxxx>
    xhci: Allow RPM on the USB controller (1022:43f7) by default

Filipe Manana <fdmanana@xxxxxxxx>
    btrfs: propagate last_unlink_trans earlier when doing a rmdir

Shivank Garg <shivankg@xxxxxxx>
    fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass

Jakub Kicinski <kuba@xxxxxxxxxx>
    netlink: make sure we allow at least one dump skb

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    netlink: Fix rmem check in netlink_broadcast_deliver().

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
    ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()

Stefan Metzmacher <metze@xxxxxxxxx>
    smb: server: make use of rdma_destroy_qp()

Uwe Kleine-König <u.kleine-koenig@xxxxxxxxxxxx>
    pwm: mediatek: Ensure to disable clocks in error path

Wei Yang <richard.weiyang@xxxxxxxxx>
    maple_tree: fix mt_destroy_walk() on root leaf node

Achill Gilgenast <fossdd@xxxxxxxxxx>
    kallsyms: fix build without execinfo

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
    Revert "ACPI: battery: negate current when discharging"

Kuen-Han Tsai <khtsai@xxxxxxxxxx>
    usb: gadget: u_serial: Fix race condition in TTY wakeup

Simona Vetter <simona.vetter@xxxxxxxx>
    drm/gem: Fix race in drm_gem_handle_create_tail()

Christian König <christian.koenig@xxxxxxx>
    drm/ttm: fix error handling in ttm_buffer_object_transfer

Matthew Brost <matthew.brost@xxxxxxxxx>
    drm/sched: Increment job count before swapping tail spsc queue

Mathy Vanhoef <Mathy.Vanhoef@xxxxxxxxxxx>
    wifi: prevent A-MSDU attacks in mesh networks

Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxx>
    pinctrl: qcom: msm: mark certain pins as invalid for interrupts

Håkon Bugge <haakon.bugge@xxxxxxxxxx>
    md/md-bitmap: fix GPF in bitmap_get_stats()

Guillaume Nault <gnault@xxxxxxxxxx>
    gre: Fix IPv6 multicast route creation.

Sean Christopherson <seanjc@xxxxxxxxxx>
    KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight

David Woodhouse <dwmw@xxxxxxxxxxxx>
    KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.

JP Kobryn <inwardvessel@xxxxxxxxx>
    x86/mce: Make sure CMCI banks are cleared during shutdown on Intel

Yazen Ghannam <yazen.ghannam@xxxxxxx>
    x86/mce: Don't remove sysfs if thresholding sysfs init fails

Yazen Ghannam <yazen.ghannam@xxxxxxx>
    x86/mce/amd: Fix threshold limit reset

Dan Carpenter <dan.carpenter@xxxxxxxxxx>
    ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()

Alexey Dobriyan <adobriyan@xxxxxxxxx>
    x86/boot: Compile boot code with -std=gnu11 too

David Howells <dhowells@xxxxxxxxxx>
    rxrpc: Fix oops due to non-existence of prealloc backlog struct

Liam R. Howlett <Liam.Howlett@xxxxxxxxxx>
    maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()

Victor Nogueira <victor@xxxxxxxxxxxx>
    net/sched: Abort __tc_modify_qdisc if parent class does not exist

Yue Haibing <yuehaibing@xxxxxxxxxx>
    atm: clip: Fix NULL pointer dereference in vcc_sendmsg()

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    atm: clip: Fix infinite recursive call of clip_push().

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    atm: clip: Fix memory leak of struct clip_vcc.

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    atm: clip: Fix potential null-ptr-deref in to_atmarpd().

Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
    net: phy: smsc: Fix link failure in forced mode with Auto-MDIX

Oleksij Rempel <linux@xxxxxxxxxxxxxxxx>
    net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap

Michal Luczaj <mhal@xxxxxxx>
    vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`

Michal Luczaj <mhal@xxxxxxx>
    vsock: Fix transport_* TOCTOU

Michal Luczaj <mhal@xxxxxxx>
    vsock: Fix transport_{g2h,h2g} TOCTOU

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    tipc: Fix use-after-free in tipc_conn_close().

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    netlink: Fix wraparounds of sk->sk_rmem_alloc.

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
    fix proc_sys_compare() handling of in-lookup dentries

Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>
    Bluetooth: hci_sync: Fix not disabling advertising instance

Peter Zijlstra <peterz@xxxxxxxxxxxxx>
    perf: Revert to requiring CAP_SYS_ADMIN for uprobes

Shengjiu Wang <shengjiu.wang@xxxxxxx>
    ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode

Rong Zhang <i@xxxxxxxx>
    platform/x86: ideapad-laptop: use usleep_range() for EC polling

Kaustabh Chakraborty <kauschluss@xxxxxxxxxxx>
    drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling


-------------

Diffstat:

 Makefile                                      |   4 +-
 arch/um/drivers/vector_kern.c                 |  42 +--
 arch/x86/Kconfig                              |   2 +-
 arch/x86/Makefile                             |   2 +-
 arch/x86/include/asm/cpufeatures.h            |   2 +-
 arch/x86/kernel/cpu/mce/amd.c                 |  15 +-
 arch/x86/kernel/cpu/mce/core.c                |   8 +-
 arch/x86/kernel/cpu/mce/intel.c               |   1 +
 arch/x86/kvm/svm/sev.c                        |   4 +
 arch/x86/kvm/xen.c                            |  15 +-
 drivers/acpi/battery.c                        |  19 +-
 drivers/atm/idt77252.c                        |   5 +
 drivers/block/nbd.c                           |   6 +-
 drivers/char/ipmi/ipmi_msghandler.c           |   3 +-
 drivers/gpu/drm/drm_gem.c                     |  10 +-
 drivers/gpu/drm/exynos/exynos7_drm_decon.c    |   4 +
 drivers/gpu/drm/tegra/nvdec.c                 |   6 +-
 drivers/gpu/drm/ttm/ttm_bo_util.c             |  13 +-
 drivers/hid/hid-ids.h                         |   6 +
 drivers/hid/hid-lenovo.c                      |   8 +
 drivers/hid/hid-multitouch.c                  |   8 +-
 drivers/hid/hid-quirks.c                      |   3 +
 drivers/input/joystick/xpad.c                 |   2 +
 drivers/input/keyboard/atkbd.c                |   3 +-
 drivers/md/md-bitmap.c                        |   3 +-
 drivers/md/raid1.c                            |   1 +
 drivers/md/raid10.c                           |  10 +-
 drivers/net/can/m_can/m_can.c                 |   2 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c |   2 +
 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c |   2 +-
 drivers/net/ethernet/ibm/ibmvnic.h            |   8 +-
 drivers/net/ethernet/xilinx/ll_temac_main.c   |   2 +-
 drivers/net/phy/microchip.c                   |   2 +-
 drivers/net/phy/smsc.c                        |  28 +-
 drivers/net/usb/qmi_wwan.c                    |   1 +
 drivers/net/wireless/zydas/zd1211rw/zd_mac.c  |   6 +-
 drivers/pinctrl/qcom/pinctrl-msm.c            |  20 ++
 drivers/platform/x86/ideapad-laptop.c         |  19 +-
 drivers/powercap/intel_rapl_common.c          |  22 +-
 drivers/pwm/pwm-mediatek.c                    |  13 +-
 drivers/tty/vt/vt.c                           |   1 +
 drivers/usb/cdns3/cdnsp-debug.h               | 358 +++++++++++++-------------
 drivers/usb/cdns3/cdnsp-ep0.c                 |  18 +-
 drivers/usb/cdns3/cdnsp-gadget.c              |   6 +-
 drivers/usb/cdns3/cdnsp-gadget.h              |  11 +-
 drivers/usb/cdns3/cdnsp-ring.c                |  27 +-
 drivers/usb/dwc3/core.c                       |   9 +-
 drivers/usb/dwc3/gadget.c                     |  22 +-
 drivers/usb/gadget/function/u_serial.c        |   6 +-
 drivers/usb/host/xhci-mem.c                   |   4 +
 drivers/usb/host/xhci-pci.c                   |  30 ++-
 drivers/usb/host/xhci.h                       |   1 +
 drivers/vhost/scsi.c                          |   7 +-
 fs/anon_inodes.c                              |  23 +-
 fs/btrfs/free-space-tree.c                    |  16 +-
 fs/btrfs/inode.c                              |  28 +-
 fs/erofs/data.c                               |   2 +
 fs/erofs/zdata.c                              | 124 ++++-----
 fs/proc/inode.c                               |   2 +-
 fs/proc/proc_sysctl.c                         |  18 +-
 fs/smb/server/smb2pdu.c                       |  29 +--
 fs/smb/server/transport_rdma.c                |   5 +-
 fs/smb/server/vfs.c                           |   1 +
 include/drm/drm_file.h                        |   3 +
 include/drm/spsc_queue.h                      |   4 +-
 include/linux/fs.h                            |   2 +
 include/net/netfilter/nf_flow_table.h         |   2 +-
 include/trace/events/erofs.h                  |  16 +-
 kernel/events/core.c                          |   2 +-
 lib/maple_tree.c                              |   7 +-
 mm/kasan/report.c                             |  13 +-
 mm/secretmem.c                                |  11 +-
 net/appletalk/ddp.c                           |   1 +
 net/atm/clip.c                                |  64 +++--
 net/bluetooth/hci_sync.c                      |   2 +-
 net/ipv6/addrconf.c                           |   9 +-
 net/netlink/af_netlink.c                      |  90 ++++---
 net/rxrpc/call_accept.c                       |   3 +
 net/sched/sch_api.c                           |  23 +-
 net/tipc/topsrv.c                             |   2 +
 net/vmw_vsock/af_vsock.c                      |  57 +++-
 net/wireless/util.c                           |  52 +++-
 sound/pci/hda/patch_realtek.c                 |   1 +
 sound/soc/amd/yc/acp6x-mach.c                 |   7 +
 sound/soc/fsl/fsl_asrc.c                      |   3 +-
 tools/include/linux/kallsyms.h                |   4 +
 86 files changed, 876 insertions(+), 582 deletions(-)