[PATCH 6.1 00/72] 6.1.161-rc1 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 6.1.161 release.
There are 72 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat, 17 Jan 2026 16:41:26 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.161-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 6.1.161-rc1

Shardul Bankar <shardulsb08@xxxxxxxxx>
    bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path

Michal Rábek <mrabek@xxxxxxxxxx>
    scsi: sg: Fix occasional bogus elapsed time that exceeds timeout

Alexander Stein <alexander.stein@xxxxxxxxxxxxxxx>
    ASoC: fsl_sai: Add missing registers to cache default

Andrew Elantsev <elantsew.andrew@xxxxxxxxx>
    ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
    can: j1939: make j1939_session_activate() fail if device is no longer registered

Sumeet Pawnikar <sumeet4linux@xxxxxxxxx>
    powercap: fix sscanf() error return value handling

Sumeet Pawnikar <sumeet4linux@xxxxxxxxx>
    powercap: fix race condition in register_control_type()

Tetsuo Handa <penguin-kernel@xxxxxxxxxxxxxxxxxxx>
    bpf: Fix reference count leak in bpf_prog_test_run_xdp()

Toke Høiland-Jørgensen <toke@xxxxxxxxxx>
    bpf, test_run: Subtract size of xdp_frame from allowed metadata size

Amery Hung <ameryhung@xxxxxxxxx>
    bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN

Amery Hung <ameryhung@xxxxxxxxx>
    bpf: Make variables in bpf_prog_test_run_xdp less confusing

Yonghong Song <yonghong.song@xxxxxxxxx>
    bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K

Chuck Lever <chuck.lever@xxxxxxxxxx>
    NFSD: Remove NFSERR_EAGAIN

Mike Snitzer <snitzer@xxxxxxxxxx>
    nfs_common: factor out nfs_errtbl and nfs_stat_to_errno

Chen Hanxiao <chenhx.fnst@xxxxxxxxxxx>
    NFS: trace: show TIMEDOUT instead of 0x6e

NeilBrown <neil@xxxxxxxxxx>
    nfsd: provide locking for v4_end_grace

Haoxiang Li <lihaoxiang@xxxxxxxxxxxxxxxx>
    ALSA: ac97: fix a double free in snd_ac97_controller_register()

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: ac97bus: Use guard() for mutex locks

Pedro Demarchi Gomes <pedrodemargomes@xxxxxxxxx>
    ksm: use range-walk function to jump over holes in scan_get_next_rmap_item

David Hildenbrand <david@xxxxxxxxxx>
    mm/pagewalk: add walk_page_range_vma()

Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxx>
    pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping

Eric Dumazet <edumazet@xxxxxxxxxx>
    arp: do not assume dev_hard_header() does not change skb->head

Wei Fang <wei.fang@xxxxxxx>
    net: enetc: fix build warning when PAGE_SIZE is greater than 128K

Petko Manolov <petkan@xxxxxxxxxxxxx>
    net: usb: pegasus: fix memory leak in update_eth_regs_async()

Xiang Mei <xmei5@xxxxxxx>
    net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset

René Rebe <rene@xxxxxxxxxx>
    HID: quirks: work around VID/PID conflict for appledisplay

Mohammad Heib <mheib@xxxxxxxxxx>
    net: fix memory leak in skb_segment_list for GRO packets

Srijit Bose <srijit.bose@xxxxxxxxxxxx>
    bnxt_en: Fix potential data corruption with HW GRO/LRO

Jakub Kicinski <kuba@xxxxxxxxxx>
    eth: bnxt: move and rename reset helpers

Zilin Guan <zilin@xxxxxxxxxx>
    net: wwan: iosm: Fix memory leak in ipc_mux_deinit()

Gal Pressman <gal@xxxxxxxxxx>
    net/mlx5e: Don't print error message due to invalid module

Di Zhu <zhud@xxxxxxxx>
    netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates

Weiming Shi <bestswngs@xxxxxxxxx>
    net: sock: fix hardened usercopy panic in sock_recv_errqueue

yuan.gao <yuan.gao@xxxxxxxxx>
    inet: ping: Fix icmp out counting

Jerry Wu <w.7erry@xxxxxxxxxxx>
    net: mscc: ocelot: Fix crash when adding interface under a lag

Alexandre Knecht <knecht.alexandre@xxxxxxxxx>
    bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress

Alok Tiwari <alok.a.tiwari@xxxxxxxxxx>
    net: marvell: prestera: fix NULL dereference on devlink_alloc() failure

Fernando Fernandez Mancera <fmancera@xxxxxxx>
    netfilter: nf_conncount: update last_gc only when GC has been performed

Zilin Guan <zilin@xxxxxxxxxx>
    netfilter: nf_tables: fix memory leak in nf_tables_newrule()

Fernando Fernandez Mancera <fmancera@xxxxxxx>
    netfilter: nft_synproxy: avoid possible data-race on update operation

Marek Vasut <marek.vasut@xxxxxxxxxxx>
    arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM

Ian Ray <ian.ray@xxxxxxxxxxxxxxxx>
    ARM: dts: imx6q-ba16: fix RTC interrupt level

Haibo Chen <haibo.chen@xxxxxxx>
    arm64: dts: add off-on-delay-us for usdhc2 regulator

Xingui Yang <yangxingui@xxxxxxxxxx>
    scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed"

Brian Kao <powenkao@xxxxxxxxxx>
    scsi: ufs: core: Fix EH failure after W-LUN resume error

Wen Xiong <wenxiong@xxxxxxxxxxxxx>
    scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset

ChenXiaoSong <chenxiaosong@xxxxxxxxxx>
    smb/client: fix NT_STATUS_NO_DATA_DETECTED value

ChenXiaoSong <chenxiaosong@xxxxxxxxxx>
    smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value

ChenXiaoSong <chenxiaosong@xxxxxxxxxx>
    smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
    NFS: Fix up the automount fs_context to use the correct cred

Scott Mayhew <smayhew@xxxxxxxxxx>
    NFSv4: ensure the open stateid seqid doesn't go backwards

Sam James <sam@xxxxxxxxxx>
    alpha: don't reference obsolete termio struct for TC* constants

Sebastian Andrzej Siewior <bigeasy@xxxxxxxxxxxxx>
    ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels

Yang Li <yang.li85200@xxxxxxxxx>
    csky: fix csky_cmpxchg_fixup not working

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().

Sharath Chandra Vurukala <quic_sharathv@xxxxxxxxxxx>
    net: Add locking to protect skb->dev access in ip_output

Ye Bin <yebin10@xxxxxxxxxx>
    ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()

Ye Bin <yebin10@xxxxxxxxxx>
    ext4: introduce ITAIL helper

Ilya Dryomov <idryomov@xxxxxxxxx>
    libceph: make calc_target() set t->paused, not just clear it

Ilya Dryomov <idryomov@xxxxxxxxx>
    libceph: return the handler error from mon_handle_auth_done()

Tuo Li <islituo@xxxxxxxxx>
    libceph: make free_choose_arg_map() resilient to partial allocation

Ilya Dryomov <idryomov@xxxxxxxxx>
    libceph: replace overzealous BUG_ON in osdmap_apply_incremental()

ziming zhang <ezrakiez@xxxxxxxxx>
    libceph: prevent potential out-of-bounds reads in handle_auth_done()

Eric Dumazet <edumazet@xxxxxxxxxx>
    wifi: avoid kernel-infoleak from struct iw_point

Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
    gpio: rockchip: mark the GPIO controller as sleeping

Miaoqian Lin <linmq006@xxxxxxxxx>
    drm/pl111: Fix error handling in pl111_amba_probe

Alexander Sverdlin <alexander.sverdlin@xxxxxxxxxxx>
    counter: interrupt-cnt: Drop IRQF_NO_THREAD flag

Eric Biggers <ebiggers@xxxxxxxxxx>
    lib/crypto: aes: Fix missing MMU protection for AES S-box

Alexander Usyskin <alexander.usyskin@xxxxxxxxx>
    mei: me: add nova lake point S DID

Filipe Manana <fdmanana@xxxxxxxx>
    btrfs: always detect conflicting inodes when logging inode refs

Thomas Fourier <fourier.thomas@xxxxxxxxx>
    net: 3com: 3c59x: fix possible null dereference in vortex_probe1()

Thomas Fourier <fourier.thomas@xxxxxxxxx>
    atm: Fix dma_free_coherent() size


-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/alpha/include/uapi/asm/ioctls.h               |   8 +-
 arch/arm/Kconfig                                   |   2 +-
 arch/arm/boot/dts/imx6q-ba16.dtsi                  |   2 +-
 .../arm64/boot/dts/freescale/imx8mp-dhcom-som.dtsi |   1 +
 arch/arm64/boot/dts/freescale/imx8qm-mek.dts       |   1 +
 arch/csky/mm/fault.c                               |   4 +-
 drivers/atm/he.c                                   |   3 +-
 drivers/counter/interrupt-cnt.c                    |   3 +-
 drivers/gpio/gpio-rockchip.c                       |   1 +
 drivers/gpu/drm/pl111/pl111_drv.c                  |   2 +-
 drivers/hid/hid-quirks.c                           |   9 ++
 drivers/misc/mei/hw-me-regs.h                      |   2 +
 drivers/misc/mei/pci-me.c                          |   2 +
 drivers/net/ethernet/3com/3c59x.c                  |   2 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |  87 +++++++-------
 drivers/net/ethernet/broadcom/bnxt/bnxt.h          |   4 +-
 drivers/net/ethernet/freescale/enetc/enetc.h       |   4 +-
 .../ethernet/marvell/prestera/prestera_devlink.c   |   2 +
 drivers/net/ethernet/mellanox/mlx5/core/port.c     |   3 +-
 drivers/net/ethernet/mscc/ocelot.c                 |   6 +-
 drivers/net/usb/pegasus.c                          |   2 +
 drivers/net/wwan/iosm/iosm_ipc_mux.c               |   6 +
 drivers/pinctrl/qcom/pinctrl-lpass-lpi.c           |   2 +-
 drivers/powercap/powercap_sys.c                    |  22 ++--
 drivers/scsi/ipr.c                                 |  28 ++++-
 drivers/scsi/libsas/sas_internal.h                 |  14 ---
 drivers/scsi/sg.c                                  |  20 ++--
 drivers/ufs/core/ufshcd.c                          |  40 +++++--
 fs/btrfs/tree-log.c                                |   6 +-
 fs/ext4/inode.c                                    |   5 +
 fs/ext4/xattr.c                                    |  32 +-----
 fs/ext4/xattr.h                                    |  10 ++
 fs/nfs/Kconfig                                     |   1 +
 fs/nfs/namespace.c                                 |   5 +
 fs/nfs/nfs2xdr.c                                   |  70 +-----------
 fs/nfs/nfs3xdr.c                                   | 108 ++++--------------
 fs/nfs/nfs4proc.c                                  |  13 ++-
 fs/nfs/nfs4trace.h                                 |   1 +
 fs/nfs/nfs4xdr.c                                   |   4 +-
 fs/nfs_common/Makefile                             |   2 +
 fs/nfs_common/common.c                             |  66 +++++++++++
 fs/nfsd/Kconfig                                    |   1 +
 fs/nfsd/netns.h                                    |   2 +
 fs/nfsd/nfs4proc.c                                 |   2 +-
 fs/nfsd/nfs4state.c                                |  42 ++++++-
 fs/nfsd/nfsctl.c                                   |   3 +-
 fs/nfsd/nfsd.h                                     |   1 -
 fs/nfsd/state.h                                    |   2 +-
 fs/smb/client/nterr.h                              |   6 +-
 include/linux/netdevice.h                          |   3 +-
 include/linux/nfs_common.h                         |  16 +++
 include/linux/pagewalk.h                           |   3 +
 include/net/dst.h                                  |  12 ++
 include/trace/misc/nfs.h                           |   3 +-
 include/uapi/linux/nfs.h                           |   1 -
 lib/crypto/aes.c                                   |   4 +-
 mm/ksm.c                                           | 126 ++++++++++++++++++---
 mm/pagewalk.c                                      |  20 ++++
 net/bpf/test_run.c                                 |  60 ++++++----
 net/bridge/br_vlan_tunnel.c                        |  11 +-
 net/can/j1939/transport.c                          |   2 +
 net/ceph/messenger_v2.c                            |   2 +
 net/ceph/mon_client.c                              |   2 +-
 net/ceph/osd_client.c                              |  11 +-
 net/ceph/osdmap.c                                  |  24 ++--
 net/core/skbuff.c                                  |   8 +-
 net/core/sock.c                                    |   7 +-
 net/ipv4/arp.c                                     |   7 +-
 net/ipv4/ip_output.c                               |  16 ++-
 net/ipv4/ping.c                                    |   4 +-
 net/netfilter/nf_conncount.c                       |   2 +-
 net/netfilter/nf_tables_api.c                      |   3 +-
 net/netfilter/nft_synproxy.c                       |   6 +-
 net/sched/sch_qfq.c                                |   2 +-
 net/tls/tls_device.c                               |  18 +--
 net/wireless/wext-core.c                           |   4 +
 net/wireless/wext-priv.c                           |   4 +
 sound/ac97/bus.c                                   |  32 +++---
 sound/soc/amd/yc/acp6x-mach.c                      |   7 ++
 sound/soc/fsl/fsl_sai.c                            |   3 +
 .../selftests/bpf/prog_tests/xdp_adjust_tail.c     |  96 ++++++++++++++--
 .../bpf/prog_tests/xdp_context_test_run.c          |   4 +-
 .../bpf/progs/test_xdp_adjust_tail_grow.c          |   8 +-
 84 files changed, 776 insertions(+), 423 deletions(-)