6.1.155-rc1 review

This is the start of the stable review cycle for the 6.1.155 release. There are 73 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 02 Oct 2025 14:37:59 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.155-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.1.155-rc1

Linus Torvalds <[email protected]>
minmax: simplify and clarify min_t()/max_t() implementation

Linus Torvalds <[email protected]>
minmax: add a few more MIN_T/MAX_T users

Linus Torvalds <[email protected]>
minmax: make generic MIN() and MAX() macros available everywhere

Eric Biggers <[email protected]>
kmsan: fix out-of-bounds access to shadow memory

Lukasz Czapnik <[email protected]>
i40e: add validation for ring_len param

Justin Bronder <[email protected]>
i40e: increase max descriptors for XL710

Lukasz Czapnik <[email protected]>
i40e: fix idx validation in config queues msg

Lukasz Czapnik <[email protected]>
i40e: fix validation of VF state in get resources

Nirmoy Das <[email protected]>
drm/ast: Use msleep instead of mdelay for edid read

Linus Torvalds <[email protected]>
minmax: avoid overly complicated constant expressions in VM code

David Laight <[email protected]>
minmax: fix indentation of __cmp_once() and __clamp_once()

Andy Shevchenko <[email protected]>
minmax: deduplicate __unconst_integer_typeof()

Herve Codina <[email protected]>
minmax: Introduce {min,max}_array()

Matthew Wilcox (Oracle) <[email protected]>
minmax: add in_range() macro

David Hildenbrand <[email protected]>
mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()

Kefeng Wang <[email protected]>
mm: migrate_device: use more folio in migrate_device_finalize()

Nathan Chancellor <[email protected]>
s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b

Thomas Zimmermann <[email protected]>
fbcon: Fix OOB access in font allocation

Samasth Norway Ananda <[email protected]>
fbcon: fix integer overflow in fbcon_do_set_font

Jinjiang Tu <[email protected]>
mm/hugetlb: fix folio is still mapped when deleted

Zhen Ni <[email protected]>
afs: Fix potential null pointer dereference in afs_put_server

Masami Hiramatsu (Google) <[email protected]>
tracing: dynevent: Add a missing lockdown check on dynevent

Eric Biggers <[email protected]>
crypto: af_alg - Fix incorrect boolean values in af_alg_ctx

Lukasz Czapnik <[email protected]>
i40e: improve VF MAC filters accounting

Lukasz Czapnik <[email protected]>
i40e: add mask to apply valid bits for itr_idx

Lukasz Czapnik <[email protected]>
i40e: add max boundary check for VF filters

Lukasz Czapnik <[email protected]>
i40e: fix input validation logic for action_meta

Lukasz Czapnik <[email protected]>
i40e: fix idx validation in i40e_validate_queue_map

Sebastian Andrzej Siewior <[email protected]>
futex: Prevent use-after-free during requeue-PI

Zabelin Nikita <[email protected]>
drm/gma500: Fix null dereference in hdmi teardown

Dan Carpenter <[email protected]>
octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()

Vladimir Oltean <[email protected]>
net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port

Vladimir Oltean <[email protected]>
net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup()

Martin Schiller <[email protected]>
net: dsa: lantiq_gswip: do also enable or disable cpu port

Ido Schimmel <[email protected]>
selftests: fib_nexthops: Fix creation of non-FDB nexthops

Ido Schimmel <[email protected]>
nexthop: Forbid FDB status change while nexthop is in a group

Alok Tiwari <[email protected]>
bnxt_en: correct offset handling for IPv6 destination address

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_sync: Fix hci_resume_advertising_sync

Petr Malat <[email protected]>
ethernet: rvu-af: Remove slash from the driver name

Stéphane Grosjean <[email protected]>
can: peak_usb: fix shift-out-of-bounds issue

Vincent Mailhol <[email protected]>
can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow

Vincent Mailhol <[email protected]>
can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow

Vincent Mailhol <[email protected]>
can: hi311x: populate ndo_change_mtu() to prevent buffer overflow

Vincent Mailhol <[email protected]>
can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow

Vincent Mailhol <[email protected]>
can: etas_es58x: sort the includes by alphabetic order

Leon Hwang <[email protected]>
bpf: Reject bpf_timer for PREEMPT_RT

Geert Uytterhoeven <[email protected]>
can: rcar_can: rcar_can_resume(): fix s2ram with PSCI

Stefan Metzmacher <[email protected]>
smb: server: don't use delayed_work for post_recv_credits_work

Christian Loehle <[email protected]>
cpufreq: Initialize cpufreq-based invariance before subsys

Peng Fan <[email protected]>
arm64: dts: imx8mp: Correct thermal sensor index

Hugh Dickins <[email protected]>
mm: folio_may_be_lru_cached() unless folio_test_large()

Hugh Dickins <[email protected]>
mm/gup: local lru_add_drain() to avoid lru_add_drain_all()

Hugh Dickins <[email protected]>
mm/gup: check ref_count instead of lru before migration

Shivank Garg <[email protected]>
mm: add folio_expected_ref_count() for reference count calculation

David Hildenbrand <[email protected]>
mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked"

Or Har-Toov <[email protected]>
IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions

qaqland <[email protected]>
ALSA: usb-audio: Add mute TLV for playback volumes on more devices

Cryolitia PukNgae <[email protected]>
ALSA: usb-audio: move mixer_quirks' min_mute into common quirk

noble.yang <[email protected]>
ALSA: usb-audio: Add DSD support for Comtrue USB Audio device

Jiayi Li <[email protected]>

    usb: core: Add 0x prefix to quirks debug output

Takashi Iwai <[email protected]>
ALSA: usb-audio: Fix build with CONFIG_INPUT=n

Chen Ni <[email protected]>
ALSA: usb-audio: Convert comma to semicolon

Kerem Karabay <[email protected]>
HID: multitouch: specify that Apple Touch Bar is direct

Kerem Karabay <[email protected]>

    HID: multitouch: take cls->maxcontacts into account for Apple Touch Bar even without a HID_DG_CONTACTMAX field

Kerem Karabay <[email protected]>
HID: multitouch: support getting the tip state from HID_DG_TOUCH fields in Apple Touch Bar

Kerem Karabay <[email protected]>
HID: multitouch: Get the contact ID from HID_DG_TRANSDUCER_INDEX fields in case of Apple Touch Bar

Cristian Ciocaltea <[email protected]>
ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5

Cristian Ciocaltea <[email protected]>
ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks

Cristian Ciocaltea <[email protected]>
ALSA: usb-audio: Simplify NULL comparison in mixer_quirks

Cristian Ciocaltea <[email protected]>
ALSA: usb-audio: Avoid multiple assignments in mixer_quirks

Cristian Ciocaltea <[email protected]>
ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks

Cristian Ciocaltea <[email protected]>
ALSA: usb-audio: Fix block comments in mixer_quirks

-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm/mm/pageattr.c                             |   6 +-
 arch/arm64/boot/dts/freescale/imx8mp.dtsi          |   4 +-
 arch/s390/kernel/perf_cpum_cf.c                    |   4 +-
 arch/um/drivers/mconsole_user.c                    |   2 +
 arch/x86/mm/pgtable.c                              |   2 +-
 drivers/cpufreq/cpufreq.c                          |  20 +-
 drivers/edac/sb_edac.c                             |   4 +-
 drivers/edac/skx_common.h                          |   1 -
 drivers/gpu/drm/amd/amdgpu/amdgpu.h                |   2 +
 .../gpu/drm/amd/display/modules/hdcp/hdcp_ddc.c    |   2 +
 drivers/gpu/drm/amd/pm/powerplay/hwmgr/ppevvmath.h |  14 +-
 .../drm/amd/pm/swsmu/smu11/sienna_cichlid_ppt.c    |   2 +
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c   |   3 +
 .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c   |   3 +
 drivers/gpu/drm/arm/display/include/malidp_utils.h |   2 +-
 .../drm/arm/display/komeda/komeda_pipeline_state.c |  24 +-
 drivers/gpu/drm/ast/ast_dp.c                       |   2 +-
 drivers/gpu/drm/drm_color_mgmt.c                   |   2 +-
 drivers/gpu/drm/gma500/oaktrail_hdmi.c             |   2 +-
 drivers/gpu/drm/msm/adreno/a6xx_gmu.c              |   6 -
 drivers/gpu/drm/radeon/evergreen_cs.c              |   2 +
 drivers/hid/hid-multitouch.c                       |  45 +++-
 drivers/hwmon/adt7475.c                            |  24 +-
 drivers/infiniband/hw/mlx5/devx.c                  |   1 +
 drivers/md/dm-integrity.c                          |   2 +-
 drivers/media/dvb-frontends/stv0367_priv.h         |   3 +
 drivers/net/can/rcar/rcar_can.c                    |   8 +-
 drivers/net/can/spi/hi311x.c                       |   1 +
 drivers/net/can/sun4i_can.c                        |   1 +
 drivers/net/can/usb/etas_es58x/es581_4.c           |   4 +-
 drivers/net/can/usb/etas_es58x/es58x_core.c        |   7 +-
 drivers/net/can/usb/etas_es58x/es58x_core.h        |   8 +-
 drivers/net/can/usb/etas_es58x/es58x_fd.c          |   4 +-
 drivers/net/can/usb/mcba_usb.c                     |   1 +
 drivers/net/can/usb/peak_usb/pcan_usb_core.c       |   2 +-
 drivers/net/dsa/lantiq_gswip.c                     |  41 +--
 drivers/net/ethernet/broadcom/bnxt/bnxt_tc.c       |   2 +-
 drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c    |  18 +-
 drivers/net/ethernet/intel/i40e/i40e.h             |   4 +-
 drivers/net/ethernet/intel/i40e/i40e_ethtool.c     |  25 +-
 drivers/net/ethernet/intel/i40e/i40e_main.c        |  26 +-
 drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 110 ++++----
 drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.h |   3 +-
 drivers/net/ethernet/marvell/octeontx2/af/cgx.c    |   3 +-
 .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c   |   2 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |   2 +-
 drivers/net/fjes/fjes_main.c                       |   4 +-
 drivers/nfc/pn544/i2c.c                            |   2 -
 drivers/platform/x86/sony-laptop.c                 |   1 -
 drivers/scsi/isci/init.c                           |   6 +-
 .../pci/hive_isp_css_include/math_support.h        |   5 -
 drivers/usb/core/quirks.c                          |   2 +-
 drivers/video/fbdev/core/fbcon.c                   |  13 +-
 drivers/virt/acrn/ioreq.c                          |   4 +-
 fs/afs/server.c                                    |   3 +-
 fs/btrfs/misc.h                                    |   2 -
 fs/ext2/balloc.c                                   |   2 -
 fs/ext4/ext4.h                                     |   2 -
 fs/hugetlbfs/inode.c                               |  10 +-
 fs/smb/server/transport_rdma.c                     |  18 +-
 fs/ufs/util.h                                      |   6 -
 include/crypto/if_alg.h                            |   2 +-
 include/linux/minmax.h                             | 122 +++++++--
 include/linux/mm.h                                 |  54 ++++
 include/linux/pageblock-flags.h                    |   2 +-
 include/linux/swap.h                               |  10 +
 include/net/bluetooth/hci_core.h                   |  21 ++
 kernel/bpf/verifier.c                              |   4 +
 kernel/futex/requeue.c                             |   6 +-
 kernel/trace/preemptirq_delay_test.c               |   2 -
 kernel/trace/trace_dynevent.c                      |   4 +
 lib/btree.c                                        |   1 -
 lib/decompress_unlzma.c                            |   2 +
 lib/logic_pio.c                                    |   3 -
 mm/gup.c                                           |  28 +-
 mm/kmsan/core.c                                    |  10 +-
 mm/kmsan/kmsan_test.c                              |  16 ++
 mm/migrate_device.c                                |  42 ++-
 mm/mlock.c                                         |   2 +-
 mm/swap.c                                          |   4 +-
 mm/zsmalloc.c                                      |   1 -
 net/bluetooth/hci_event.c                          |  26 +-
 net/bluetooth/hci_sync.c                           |   7 +
 net/ipv4/nexthop.c                                 |   7 +
 net/ipv4/proc.c                                    |   2 +-
 net/ipv6/proc.c                                    |   2 +-
 net/netfilter/nf_nat_core.c                        |   6 +-
 net/tipc/core.h                                    |   2 +-
 net/tipc/link.c                                    |  10 +-
 sound/usb/mixer_quirks.c                           | 295 +++++++++++++++++++--
 sound/usb/quirks.c                                 |  24 +-
 sound/usb/usbaudio.h                               |   4 +
 .../selftests/bpf/progs/get_branch_snapshot.c      |   4 +-
 tools/testing/selftests/net/fib_nexthops.sh        |  12 +-
 tools/testing/selftests/seccomp/seccomp_bpf.c      |   2 +
 tools/testing/selftests/vm/mremap_test.c           |   2 +
 97 files changed, 950 insertions(+), 331 deletions(-)