6.1.146-rc2 review

This is the start of the stable review cycle for the 6.1.146 release. There are 89 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 17 Jul 2025 16:35:20 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.146-rc2.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.1.146-rc2

Michael Jeanson <[email protected]>
rseq: Fix segfault on registration when rseq_cs is non-zero

Namjae Jeon <[email protected]>
ksmbd: fix potential use-after-free in oplock/lease break ack

Yeoreum Yun <[email protected]>
kasan: remove kasan_find_vm_area() to prevent possible deadlock

Jack Wang <[email protected]>
x86: Fix X86_FEATURE_VERW_CLEAR definition

Jann Horn <[email protected]>
x86/mm: Disable hugetlb page table sharing on 32-bit

Dongli Zhang <[email protected]>

    vhost-scsi: protect vq->log_used with vq->mutex

Hans de Goede <[email protected]>
Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID

Chia-Lin Kao (AceLan) <[email protected]>
HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras

Zhang Heng <[email protected]>
HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY

Nicolas Pitre <[email protected]>
vt: add missing notification when switching back to text mode

Filipe Manana <[email protected]>
btrfs: fix assertion when building free space tree

Akira Inoue <[email protected]>
HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2

Xiaowei Li <[email protected]>
net: usb: qmi_wwan: add SIMCom 8230C composition

Yasmin Fitzgerald <[email protected]>
ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100

Yuzuru10 <[email protected]>
ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic

Tiwei Bie <[email protected]>
um: vector: Reduce stack usage in vector_eth_configure()

Thomas Fourier <[email protected]>

    atm: idt77252: Add missing `dma_map_error()`

Somnath Kotur <[email protected]>
bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT

Shravya KN <[email protected]>
bnxt_en: Fix DCB ETS validation

Alok Tiwari <[email protected]>
net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()

Sean Nyekjaer <[email protected]>
can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level

Oleksij Rempel <[email protected]>
net: phy: microchip: limit 100M workaround to link-down events on LAN88xx

Mingming Cao <[email protected]>
ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof

Kito Xu <[email protected]>
net: appletalk: Fix device refcount leak in atrtr_create()

Eric Dumazet <[email protected]>
netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()

Chao Yu <[email protected]>
erofs: fix to add missing tracepoint in erofs_read_folio()

Gao Xiang <[email protected]>
erofs: adapt folios for z_erofs_read_folio()

Gao Xiang <[email protected]>
erofs: avoid on-stack pagepool directly passed by arguments

Gao Xiang <[email protected]>
erofs: allocate extra bvec pages directly instead of retrying

Yue Hu <[email protected]>
erofs: clean up z_erofs_pcluster_readmore()

Yue Hu <[email protected]>
erofs: remove the member readahead from struct z_erofs_decompress_frontend

Zheng Qixing <[email protected]>
nbd: fix uaf in nbd_genl_connect() error path

Nigel Croxon <[email protected]>
raid10: cleanup memleak at raid10_make_request

Wang Jinchao <[email protected]>
md/raid1: Fix stack memory use after return in raid1_reshape

Mikko Perttunen <[email protected]>
drm/tegra: nvdec: Fix dma_alloc_coherent error check

Daniil Dulov <[email protected]>
wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()

Zhang Rui <[email protected]>
platform/x86: think-lmi: Fix sysfs group cleanup

Kuen-Han Tsai <[email protected]>
usb: dwc3: Abort suspend on soft disconnect failure

Pawel Laszczak <[email protected]>
usb: cdnsp: Fix issue with CV Bad Descriptor test

Lee Jones <[email protected]>
usb: cdnsp: Replace snprintf() with the safer scnprintf() variant

Pawel Laszczak <[email protected]>
usb:cdnsp: remove TRB_FLUSH_ENDPOINT command

Nilton Perim Neto <[email protected]>
Input: xpad - support Acer NGR 200 Controller

Raju Rangoju <[email protected]>
usb: xhci: quirk for data loss in ISOC transfers

Basavaraj Natikar <[email protected]>
xhci: Allow RPM on the USB controller (1022:43f7) by default

Filipe Manana <[email protected]>
btrfs: propagate last_unlink_trans earlier when doing a rmdir

Shivank Garg <[email protected]>
fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass

Jakub Kicinski <[email protected]>
netlink: make sure we allow at least one dump skb

Kuniyuki Iwashima <[email protected]>
netlink: Fix rmem check in netlink_broadcast_deliver().

Al Viro <[email protected]>
ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()

Stefan Metzmacher <[email protected]>
smb: server: make use of rdma_destroy_qp()

Uwe Kleine-König <[email protected]>
pwm: mediatek: Ensure to disable clocks in error path

Wei Yang <[email protected]>
maple_tree: fix mt_destroy_walk() on root leaf node

Achill Gilgenast <[email protected]>
kallsyms: fix build without execinfo

Rafael J. Wysocki <[email protected]>
Revert "ACPI: battery: negate current when discharging"

Kuen-Han Tsai <[email protected]>
usb: gadget: u_serial: Fix race condition in TTY wakeup

Simona Vetter <[email protected]>
drm/gem: Fix race in drm_gem_handle_create_tail()

Christian König <[email protected]>
drm/ttm: fix error handling in ttm_buffer_object_transfer

Matthew Brost <[email protected]>
drm/sched: Increment job count before swapping tail spsc queue

Mathy Vanhoef <[email protected]>
wifi: prevent A-MSDU attacks in mesh networks

Bartosz Golaszewski <[email protected]>
pinctrl: qcom: msm: mark certain pins as invalid for interrupts

Håkon Bugge <[email protected]>
md/md-bitmap: fix GPF in bitmap_get_stats()

Guillaume Nault <[email protected]>
gre: Fix IPv6 multicast route creation.

Sean Christopherson <[email protected]>
KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight

David Woodhouse <[email protected]>
KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.

JP Kobryn <[email protected]>
x86/mce: Make sure CMCI banks are cleared during shutdown on Intel

Yazen Ghannam <[email protected]>
x86/mce: Don't remove sysfs if thresholding sysfs init fails

Yazen Ghannam <[email protected]>
x86/mce/amd: Fix threshold limit reset

Dan Carpenter <[email protected]>
ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()

Alexey Dobriyan <[email protected]>
x86/boot: Compile boot code with -std=gnu11 too

David Howells <[email protected]>
rxrpc: Fix oops due to non-existence of prealloc backlog struct

Liam R. Howlett <[email protected]>
maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()

Victor Nogueira <[email protected]>
net/sched: Abort __tc_modify_qdisc if parent class does not exist

Yue Haibing <[email protected]>
atm: clip: Fix NULL pointer dereference in vcc_sendmsg()

Kuniyuki Iwashima <[email protected]>
atm: clip: Fix infinite recursive call of clip_push().

Kuniyuki Iwashima <[email protected]>
atm: clip: Fix memory leak of struct clip_vcc.

Kuniyuki Iwashima <[email protected]>
atm: clip: Fix potential null-ptr-deref in to_atmarpd().

Oleksij Rempel <[email protected]>
net: phy: smsc: Fix link failure in forced mode with Auto-MDIX

Oleksij Rempel <[email protected]>
net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap

Michal Luczaj <[email protected]>
vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also transport_local

Michal Luczaj <[email protected]>
vsock: Fix transport_* TOCTOU

Michal Luczaj <[email protected]>
vsock: Fix transport_{g2h,h2g} TOCTOU

Kuniyuki Iwashima <[email protected]>
tipc: Fix use-after-free in tipc_conn_close().

Kuniyuki Iwashima <[email protected]>

    netlink: Fix wraparounds of sk->sk_rmem_alloc.

Al Viro <[email protected]>
fix proc_sys_compare() handling of in-lookup dentries

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Fix not disabling advertising instance

Peter Zijlstra <[email protected]>
perf: Revert to requiring CAP_SYS_ADMIN for uprobes

Shengjiu Wang <[email protected]>
ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode

Rong Zhang <[email protected]>
platform/x86: ideapad-laptop: use usleep_range() for EC polling

Kaustabh Chakraborty <[email protected]>
drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling

-------------

Diffstat:

 Makefile                                      |   4 +-
 arch/um/drivers/vector_kern.c                 |  42 +--
 arch/x86/Kconfig                              |   2 +-
 arch/x86/Makefile                             |   2 +-
 arch/x86/include/asm/cpufeatures.h            |   2 +-
 arch/x86/kernel/cpu/mce/amd.c                 |  15 +-
 arch/x86/kernel/cpu/mce/core.c                |   8 +-
 arch/x86/kernel/cpu/mce/intel.c               |   1 +
 arch/x86/kvm/svm/sev.c                        |   4 +
 arch/x86/kvm/xen.c                            |  15 +-
 drivers/acpi/battery.c                        |  19 +-
 drivers/atm/idt77252.c                        |   5 +
 drivers/block/nbd.c                           |   6 +-
 drivers/char/ipmi/ipmi_msghandler.c           |   3 +-
 drivers/gpu/drm/drm_gem.c                     |  10 +-
 drivers/gpu/drm/exynos/exynos7_drm_decon.c    |   4 +
 drivers/gpu/drm/tegra/nvdec.c                 |   6 +-
 drivers/gpu/drm/ttm/ttm_bo_util.c             |  13 +-
 drivers/hid/hid-ids.h                         |   6 +
 drivers/hid/hid-lenovo.c                      |   8 +
 drivers/hid/hid-multitouch.c                  |   8 +-
 drivers/hid/hid-quirks.c                      |   3 +
 drivers/input/joystick/xpad.c                 |   2 +
 drivers/input/keyboard/atkbd.c                |   3 +-
 drivers/md/md-bitmap.c                        |   3 +-
 drivers/md/raid1.c                            |   1 +
 drivers/md/raid10.c                           |  10 +-
 drivers/net/can/m_can/m_can.c                 |   2 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c |   2 +
 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c |   2 +-
 drivers/net/ethernet/ibm/ibmvnic.h            |   8 +-
 drivers/net/ethernet/xilinx/ll_temac_main.c   |   2 +-
 drivers/net/phy/microchip.c                   |   2 +-
 drivers/net/phy/smsc.c                        |  28 +-
 drivers/net/usb/qmi_wwan.c                    |   1 +
 drivers/net/wireless/zydas/zd1211rw/zd_mac.c  |   6 +-
 drivers/pinctrl/qcom/pinctrl-msm.c            |  20 ++
 drivers/platform/x86/ideapad-laptop.c         |  19 +-
 drivers/powercap/intel_rapl_common.c          |  22 +-
 drivers/pwm/pwm-mediatek.c                    |  13 +-
 drivers/tty/vt/vt.c                           |   1 +
 drivers/usb/cdns3/cdnsp-debug.h               | 358 +++++++++++++-------------
 drivers/usb/cdns3/cdnsp-ep0.c                 |  18 +-
 drivers/usb/cdns3/cdnsp-gadget.c              |   6 +-
 drivers/usb/cdns3/cdnsp-gadget.h              |  11 +-
 drivers/usb/cdns3/cdnsp-ring.c                |  27 +-
 drivers/usb/dwc3/core.c                       |   9 +-
 drivers/usb/dwc3/gadget.c                     |  22 +-
 drivers/usb/gadget/function/u_serial.c        |   6 +-
 drivers/usb/host/xhci-mem.c                   |   4 +
 drivers/usb/host/xhci-pci.c                   |  30 ++-
 drivers/usb/host/xhci.h                       |   1 +
 drivers/vhost/scsi.c                          |   7 +-
 fs/anon_inodes.c                              |  23 +-
 fs/btrfs/free-space-tree.c                    |  16 +-
 fs/btrfs/inode.c                              |  28 +-
 fs/erofs/data.c                               |   2 +
 fs/erofs/zdata.c                              | 124 ++++-----
 fs/proc/inode.c                               |   2 +-
 fs/proc/proc_sysctl.c                         |  18 +-
 fs/smb/server/smb2pdu.c                       |  29 +--
 fs/smb/server/transport_rdma.c                |   5 +-
 fs/smb/server/vfs.c                           |   1 +
 include/drm/drm_file.h                        |   3 +
 include/drm/spsc_queue.h                      |   4 +-
 include/linux/fs.h                            |   2 +
 include/net/netfilter/nf_flow_table.h         |   2 +-
 include/trace/events/erofs.h                  |  16 +-
 kernel/events/core.c                          |   2 +-
 kernel/rseq.c                                 |  60 ++++-
 lib/maple_tree.c                              |   7 +-
 mm/kasan/report.c                             |  13 +-
 mm/secretmem.c                                |  11 +-
 net/appletalk/ddp.c                           |   1 +
 net/atm/clip.c                                |  64 +++--
 net/bluetooth/hci_sync.c                      |   2 +-
 net/ipv6/addrconf.c                           |   9 +-
 net/netlink/af_netlink.c                      |  90 ++++---
 net/rxrpc/call_accept.c                       |   3 +
 net/sched/sch_api.c                           |  23 +-
 net/tipc/topsrv.c                             |   2 +
 net/vmw_vsock/af_vsock.c                      |  57 +++-
 net/wireless/util.c                           |  52 +++-
 sound/pci/hda/patch_realtek.c                 |   1 +
 sound/soc/amd/yc/acp6x-mach.c                 |   7 +
 sound/soc/fsl/fsl_asrc.c                      |   3 +-
 tools/include/linux/kallsyms.h                |   4 +
 87 files changed, 924 insertions(+), 594 deletions(-)

Boot-tested under QEMU for Rust x86_64:

Thanks!

Cheers,
Miguel

All tests passing for Tegra ...

Test results for stable-v6.1:

    10 builds:	10 pass, 0 fail
    28 boots:	28 pass, 0 fail
    119 tests:	119 pass, 0 fail

Linux version: 6.1.146-rc2-g33f8361400e7
Boards tested: tegra124-jetson-tk1, tegra186-p2771-0000,

                tegra186-p3509-0000+p3636-0001, tegra194-p2972-0000,
                tegra194-p3509-0000+p3668-0000, tegra20-ventana,
                tegra210-p2371-2180, tegra210-p3450-0000,
                tegra30-cardhu-a04

Jon

Built and booted successfully on RISC-V RV64 (HiFive Unmatched).

Hi!

CIP testing did not find any problems here:

https://gitlab.com/cip-project/cip-testing/linux-stable-rc-ci/-/tree/linux-6.1.y

Best regards,
Pavel

In cooperation with DENX Software Engineering GmbH, HRB 165235 Munich,
Office: Kirchenstr.5, D-82194 Groebenzell, Germany

Am 15.07.2025 um 18:37 schrieb Greg Kroah-Hartman:

Builds, boots and works on my 2-socket Ivy Bridge Xeon E5-2697 v2 server. No dmesg oddities or regressions found.

Beste Grüße,
Peter Schneider

Climb the mountain not to plant your flag, but to embrace the challenge,
enjoy the air and behold the view. Climb it so you can see the world,
not so the world can see you.                    -- David McCullough Jr.

OpenPGP:  0xA3828BD796CCE11A8CADE8866E3A92C92C3FF244
Download: https://www.peters-netzplatz.de/download/pschneider1968_pub.asc
https://keys.mailvelope.com/pks/lookup?op=get&[email protected]
https://keys.mailvelope.com/pks/lookup?op=get&[email protected]

Results from Linaro’s test farm.
No regressions on arm64, arm, x86_64, and i386.

## Build
* kernel: 6.1.146-rc2
* git: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
* git commit: 33f8361400e7e0f415ad8f93fabab430397bc2ba
* git describe: v6.1.144-92-g33f8361400e7
* test details:
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.1.y/build/v6.1.144-92-g33f8361400e7

## Test Regressions (compared to v6.1.143-82-g10392f5749b3)

## Metric Regressions (compared to v6.1.143-82-g10392f5749b3)

## Test Fixes (compared to v6.1.143-82-g10392f5749b3)

## Metric Fixes (compared to v6.1.143-82-g10392f5749b3)

## Test result summary
total: 222917, pass: 202922, fail: 4848, skip: 14938, xfail: 209

## Build Summary
* arc: 5 total, 5 passed, 0 failed
* arm: 133 total, 132 passed, 0 failed, 1 skipped
* arm64: 41 total, 41 passed, 0 failed
* i386: 21 total, 21 passed, 0 failed
* mips: 26 total, 25 passed, 1 failed
* parisc: 4 total, 4 passed, 0 failed
* powerpc: 32 total, 31 passed, 1 failed
* riscv: 11 total, 11 passed, 0 failed
* s390: 14 total, 14 passed, 0 failed
* sh: 10 total, 10 passed, 0 failed
* sparc: 7 total, 7 passed, 0 failed
* x86_64: 33 total, 33 passed, 0 failed

## Test suites summary
* boot
* commands
* kselftest-arm64
* kselftest-breakpoints
* kselftest-capabilities
* kselftest-clone3
* kselftest-core
* kselftest-cpu-hotplug
* kselftest-exec
* kselftest-fpu
* kselftest-futex
* kselftest-intel_pstate
* kselftest-kcmp
* kselftest-kvm
* kselftest-livepatch
* kselftest-membarrier
* kselftest-mincore
* kselftest-mqueue
* kselftest-openat2
* kselftest-ptrace
* kselftest-rseq
* kselftest-rtc
* kselftest-sigaltstack
* kselftest-size
* kselftest-timers
* kselftest-tmpfs
* kselftest-tpm2
* kselftest-user_events
* kselftest-vDSO
* kselftest-x86
* kunit
* kvm-unit-tests
* lava
* libgpiod
* libhugetlbfs
* log-parser-boot
* log-parser-build-clang
* log-parser-build-gcc
* log-parser-test
* ltp-capability
* ltp-commands
* ltp-containers
* ltp-controllers
* ltp-cpuhotplug
* ltp-crypto
* ltp-cve
* ltp-dio
* ltp-fcntl-locktests
* ltp-fs
* ltp-fs_bind
* ltp-fs_perms_simple
* ltp-hugetlb
* ltp-math
* ltp-mm
* ltp-nptl
* ltp-pty
* ltp-sched
* ltp-smoke
* ltp-syscalls
* ltp-tracing
* modules
* perf
* rcutorture

--
Linaro LKFT
https://lkft.linaro.org

On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels, build tested on BMIPS_GENERIC:

Florian

# Librecast Test Results

010/010 [ OK ] libmld
120/120 [ OK ] liblibrecast

CPU/kernel: Linux auntie 6.1.146-rc2-00092-g33f8361400e7 #18 SMP PREEMPT_DYNAMIC Thu Jul 17 09:07:25 -00 2025 x86_64 AMD Ryzen 9 9950X 16-Core Processor AuthenticAMD GNU/Linux