[PATCH 6.1 00/64] 6.1.164-rc1 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 6.1.164 release.
There are 64 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Thu, 19 Feb 2026 19:59:50 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.164-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 6.1.164-rc1

Menglong Dong <menglong8.dong@xxxxxxxxx>
    net: tunnel: make skb_vlan_inet_prepare() return drop reasons

Fabio Porcedda <fabio.porcedda@xxxxxxxxx>
    USB: serial: option: add Telit FN920C04 RNDIS compositions

Yongpeng Yang <yangyongpeng@xxxxxxxxxx>
    f2fs: fix out-of-bounds access in sysfs attribute read/write

Chao Yu <chao@xxxxxxxxxx>
    f2fs: fix to avoid UAF in f2fs_write_end_io()

Yongpeng Yang <yangyongpeng@xxxxxxxxxx>
    f2fs: fix IS_CHECKPOINTED flag inconsistency issue caused by concurrent atomic commit and checkpoint writes

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    fbdev: smscufx: properly copy ioctl memory to kernelspace

Guangshuo Li <lgs201920130244@xxxxxxxxx>
    fbdev: rivafb: fix divide error in nv3_arb()

Chen Ridong <chenridong@xxxxxxxxxx>
    cpuset: Fix missing adaptation for cpuset_is_populated

Alexander Wetzel <Alexander@xxxxxxxxxxxxxx>
    wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()

Eric Dumazet <edumazet@xxxxxxxxxx>
    mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()

Vladimir Oltean <vladimir.oltean@xxxxxxx>
    net: dsa: free routing table on probe failure

Qingfang Deng <dqfext@xxxxxxxxx>
    net: stmmac: Fix accessing freed irq affinity_hint

Shuai Xue <xueshuai@xxxxxxxxxxxxxxxxx>
    ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered

Namjae Jeon <linkinjeon@xxxxxxxxxx>
    ksmbd: set ATTR_CTIME flags when setting mtime

Jeff Layton <jlayton@xxxxxxxxxx>
    nfsd: don't ignore the return code of svc_proc_register()

Bosi Zhang <u201911157@xxxxxxxxxxx>
    clk: mediatek: fix of_iomap memory leak

Shay Drory <shayd@xxxxxxxxxx>
    devlink: rate: Unset parent pointer in devl_rate_nodes_destroy

e.kubanski <e.kubanski@xxxxxxxxxxxxxxxxxxx>
    xsk: Fix race condition in AF_XDP generic RX path

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
    selftests: mptcp: join: fix local endp not being tracked

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
    selftests: mptcp: check subflow errors in close events

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
    selftests: mptcp: check no dup close events after error

Paolo Abeni <pabeni@xxxxxxxxxx>
    mptcp: ensure context reset on disconnect()

Paolo Abeni <pabeni@xxxxxxxxxx>
    mptcp: schedule rtx timer only after pushing data

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
    selftests: mptcp: pm: ensure unknown flags are ignored

Daniel Borkmann <daniel@xxxxxxxxxxxxx>
    Revert "wireguard: device: enable threaded NAPI"

Alban Bedel <alban.bedel@xxxxxxxxxx>
    gpiolib: acpi: Fix gpio count with string references

Ziyi Guo <n7l8m4@xxxxxxxxxxxxxxxxxx>
    ASoC: fsl_xcvr: fix missing lock in fsl_xcvr_mode_put()

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
    platform/x86: panasonic-laptop: Fix sysfs group leak in error path

Tagir Garaev <tgaraev653@xxxxxxxxx>
    ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9

Rafael J. Wysocki <rafael.j.wysocki@xxxxxxxxx>
    platform/x86: classmate-laptop: Add missing NULL pointer checks

Brahmajit Das <listout@xxxxxxxxxxx>
    drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used

Deepanshu Kartikey <kartikey406@xxxxxxxxx>
    romfs: check sb_set_blocksize() return value

Ricardo Rivera-Matos <rriveram@xxxxxxxxxxxxxxxxxxxxx>
    ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel

Zhang Heng <zhangheng@xxxxxxxxxx>
    ALSA: hda/realtek: Add quirk for Inspur S14-G1

Xuewen Yan <xuewen.yan@xxxxxxxxxx>
    gpio: sprd: Change sprd_gpio lock to raw_spin_lock

Anatolii Shirykalov <pipocavsobake@xxxxxxxxx>
    ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list

Tim Guttzeit <t.guttzeit@xxxxxxxxxxxxxxxxxxx>
    ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU

Pierre Gondois <pierre.gondois@xxxxxxx>
    cacheinfo: Remove of_node_put() for fw_token

Pierre Gondois <pierre.gondois@xxxxxxx>
    cacheinfo: Decrement refcount in cache_setup_of_node()

Anil Gurumurthy <agurumurthy@xxxxxxxxxxx>
    scsi: qla2xxx: Free sp in error path to fix system crash

Quinn Tran <qutran@xxxxxxxxxxx>
    scsi: qla2xxx: Reduce fabric scan duplicate code

Quinn Tran <qutran@xxxxxxxxxxx>
    scsi: qla2xxx: Remove dead code (GNN ID)

Gui-Dong Han <hanguidong02@xxxxxxxxx>
    bus: fsl-mc: fix use-after-free in driver_override_show()

Chelsy Ratnawat <chelsyratnawat2001@xxxxxxxxx>
    bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions

Liu Song <liu.song13@xxxxxxxxxx>
    PCI: endpoint: Avoid creating sub-groups asynchronously

Christophe JAILLET <christophe.jaillet@xxxxxxxxxx>
    PCI: endpoint: Remove unused field in struct pci_epf_group

Damien Le Moal <dlemoal@xxxxxxxxxx>
    PCI: endpoint: Automatically create a function specific attributes group

Anil Gurumurthy <agurumurthy@xxxxxxxxxxx>
    scsi: qla2xxx: Fix bsg_done() causing double free

Paulo Alcantara <pc@xxxxxxxxxxxxx>
    smb: client: set correct id, uid and cruid for multiuser automounts

Marek Behún <kabel@xxxxxxxxxx>
    net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module

Boris Burkov <boris@xxxxxx>
    btrfs: fix racy bitfield write in btrfs_clear_space_info_full()

Danilo Krummrich <dakr@xxxxxxxxxx>
    gpio: omap: do not register driver in probe()

Anil Gurumurthy <agurumurthy@xxxxxxxxxxx>
    scsi: qla2xxx: Query FW again before proceeding with login

Anil Gurumurthy <agurumurthy@xxxxxxxxxxx>
    scsi: qla2xxx: Delay module unload while fabric scan in progress

Shreyas Deodhar <sdeodhar@xxxxxxxxxxx>
    scsi: qla2xxx: Allow recovery for tape devices

Anil Gurumurthy <agurumurthy@xxxxxxxxxxx>
    scsi: qla2xxx: Validate sp before freeing associated memory

Edward Adam Davis <eadavis@xxxxxx>
    nilfs2: Fix potential block overflow that cause system hang

Bibo Mao <maobibo@xxxxxxxxxxx>
    crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req

Bibo Mao <maobibo@xxxxxxxxxxx>
    crypto: virtio - Add spinlock protection with virtqueue notification

Kees Cook <kees@xxxxxxxxxx>
    crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly

Thorsten Blum <thorsten.blum@xxxxxxxxx>
    crypto: octeontx - Fix length check to avoid truncation in ucode_load_store

Henrique Carvalho <henrique.carvalho@xxxxxxxx>
    smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()

Namjae Jeon <linkinjeon@xxxxxxxxxx>
    ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths

Henrique Carvalho <henrique.carvalho@xxxxxxxx>
    smb: client: split cached_fid bitfields to avoid shared-byte RMW races


-------------

Diffstat:

 Documentation/PCI/endpoint/pci-ntb-howto.rst       |  11 +-
 Documentation/PCI/endpoint/pci-vntb-howto.rst      |  13 +-
 Makefile                                           |   4 +-
 drivers/acpi/apei/ghes.c                           |  10 +
 drivers/base/cacheinfo.c                           |  19 +-
 drivers/bus/fsl-mc/fsl-mc-bus.c                    |  10 +-
 drivers/clk/mediatek/clk-mtk.c                     |   7 +-
 drivers/crypto/marvell/octeontx/otx_cptpf_ucode.c  |   2 +-
 drivers/crypto/omap-crypto.c                       |   2 +-
 drivers/crypto/virtio/virtio_crypto_core.c         |   5 +
 .../crypto/virtio/virtio_crypto_skcipher_algs.c    |   2 -
 drivers/gpio/gpio-omap.c                           |  22 +-
 drivers/gpio/gpio-sprd.c                           |   8 +-
 drivers/gpio/gpiolib-acpi.c                        |   1 +
 drivers/gpu/drm/tegra/hdmi.c                       |   4 +-
 drivers/gpu/drm/tegra/sor.c                        |   4 +-
 drivers/net/bareudp.c                              |   4 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  11 +-
 drivers/net/geneve.c                               |   4 +-
 drivers/net/phy/sfp.c                              |   2 +
 drivers/net/wireguard/device.c                     |   1 -
 drivers/pci/endpoint/pci-ep-cfs.c                  |  54 +-
 drivers/platform/x86/classmate-laptop.c            |  32 ++
 drivers/platform/x86/panasonic-laptop.c            |   4 +-
 drivers/scsi/qla2xxx/qla_bsg.c                     |  28 +-
 drivers/scsi/qla2xxx/qla_def.h                     |  17 +-
 drivers/scsi/qla2xxx/qla_gbl.h                     |   9 +-
 drivers/scsi/qla2xxx/qla_gs.c                      | 589 +++++++--------------
 drivers/scsi/qla2xxx/qla_init.c                    |  40 +-
 drivers/scsi/qla2xxx/qla_isr.c                     |  19 +-
 drivers/scsi/qla2xxx/qla_os.c                      |  18 +-
 drivers/usb/serial/option.c                        |   6 +
 drivers/video/fbdev/riva/riva_hw.c                 |   3 +
 drivers/video/fbdev/smscufx.c                      |   8 +-
 fs/btrfs/block-group.c                             |   6 +-
 fs/btrfs/space-info.c                              |  22 +-
 fs/btrfs/space-info.h                              |   6 +-
 fs/f2fs/data.c                                     |  12 +-
 fs/f2fs/node.c                                     |  14 +-
 fs/f2fs/sysfs.c                                    |  61 ++-
 fs/nfsd/nfsctl.c                                   |   9 +-
 fs/nfsd/stats.c                                    |   4 +-
 fs/nfsd/stats.h                                    |   2 +-
 fs/nilfs2/sufile.c                                 |   4 +
 fs/romfs/super.c                                   |   5 +-
 fs/smb/client/cached_dir.h                         |   8 +-
 fs/smb/client/cifs_dfs_ref.c                       |  16 +
 fs/smb/server/server.c                             |   6 +-
 fs/smb/server/smb2pdu.c                            |  10 +-
 fs/smb/server/transport_tcp.c                      |   3 +-
 include/net/ip_tunnels.h                           |  13 +-
 include/net/xdp_sock.h                             |   2 -
 include/net/xsk_buff_pool.h                        |   2 +
 kernel/cgroup/cpuset.c                             |   2 +-
 net/devlink/leftover.c                             |   4 +-
 net/dsa/dsa2.c                                     |  21 +-
 net/mptcp/pm_netlink.c                             |  16 +-
 net/mptcp/protocol.c                               |  24 +-
 net/mptcp/protocol.h                               |   3 +-
 net/wireless/reg.c                                 |   5 +
 net/xdp/xsk.c                                      |   6 +-
 net/xdp/xsk_buff_pool.c                            |   1 +
 sound/pci/hda/patch_realtek.c                      |   5 +
 sound/soc/amd/yc/acp6x-mach.c                      |   7 +
 sound/soc/codecs/cs35l45.c                         |   2 +-
 sound/soc/fsl/fsl_xcvr.c                           |   3 +
 sound/soc/intel/boards/sof_es8336.c                |   9 +
 tools/testing/selftests/net/mptcp/mptcp_join.sh    | 111 +++-
 tools/testing/selftests/net/mptcp/pm_netlink.sh    |   4 +
 tools/testing/selftests/net/mptcp/pm_nl_ctl.c      |  11 +
 70 files changed, 785 insertions(+), 627 deletions(-)