This is the start of the stable review cycle for the 6.1.147 release.
There are 79 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Thu, 24 Jul 2025 13:43:10 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.147-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.1.147-rc1
Michael C. Pratt <mcpratt(a)pm.me>
nvmem: layouts: u-boot-env: remove crc32 endianness conversion
Alexander Gordeev <agordeev(a)linux.ibm.com>
mm/vmalloc: leave lazy MMU mode on PTE mapping error
Christian Eggers <ceggers(a)arri.de>
Bluetooth: HCI: Set extended advertising data synchronously
Arun Raghavan <arun(a)asymptotic.io>
ASoC: fsl_sai: Force a software reset when starting in consumer mode
Krishna Kurapati <krishna.kurapati(a)oss.qualcomm.com>
usb: dwc3: qcom: Don't leave BCR asserted
Drew Hamilton <drew.hamilton(a)zetier.com>
usb: musb: fix gadget state on disconnect
Paul Cercueil <paul(a)crapouillou.net>
usb: musb: Add and use inline functions musb_{get,set}_state
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Don't try to recover devices lost during warm reset.
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Fix flushing of delayed work used for post resume purposes
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
Mathias Nyman <mathias.nyman(a)linux.intel.com>
usb: hub: fix detection of high tier USB3 devices behind suspended hubs
Al Viro <viro(a)zeniv.linux.org.uk>
clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
Hamish Martin <hamish.martin(a)alliedtelesis.co.nz>
HID: mcp2221: Set driver data before I2C adapter add
Aruna Ramakrishna <aruna.ramakrishna(a)oracle.com>
sched: Change nr_uninterruptible type to unsigned long
Chen Ridong <chenridong(a)huawei.com>
Revert "cgroup_freezer: cgroup_freezing: Check if not frozen"
William Liu <will(a)willsroot.io>
net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
Joseph Huang <Joseph.Huang(a)garmin.com>
net: bridge: Do not offload IGMP/MLD messages
Dong Chenchen <dongchenchen2(a)huawei.com>
net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
Jakub Kicinski <kuba(a)kernel.org>
tls: always refresh the queue when reading sock
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
Florian Westphal <fw(a)strlen.de>
netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
Yue Haibing <yuehaibing(a)huawei.com>
ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
Christoph Paasch <cpaasch(a)openai.com>
net/mlx5: Correctly set gso_size when LRO is used
Zijun Hu <zijun.hu(a)oss.qualcomm.com>
Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com>
Bluetooth: SMP: If an unallowed command is received consider it a failure
Alessandro Gasbarroni <alex.gasbarroni(a)gmail.com>
Bluetooth: hci_sync: fix connectable extended advertising when using static random address
Kuniyuki Iwashima <kuniyu(a)google.com>
Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
Oliver Neukum <oneukum(a)suse.com>
usb: net: sierra: check for no status endpoint
Marius Zachmann <mail(a)mariuszachmann.de>
hwmon: (corsair-cpro) Validate the size of the received input buffer
Paolo Abeni <pabeni(a)redhat.com>
selftests: net: increase inter-packet timeout in udpgro.sh
Yu Kuai <yukuai3(a)huawei.com>
nvme: fix misaccounting of nvme-mpath inflight I/O
Wang Zhaolong <wangzhaolong(a)huaweicloud.com>
smb: client: fix use-after-free in cifs_oplock_break
Kuniyuki Iwashima <kuniyu(a)google.com>
rpl: Fix use-after-free in rpl_do_srh_inline().
Xiang Mei <xmei5(a)asu.edu>
net/sched: sch_qfq: Fix race condition on qfq_aggregate
Alok Tiwari <alok.a.tiwari(a)oracle.com>
net: emaclite: Fix missing pointer increment in aligned_read()
Zizhi Wo <wozizhi(a)huawei.com>
cachefiles: Fix the incorrect return value in __cachefiles_write()
Paul Chaignon <paul.chaignon(a)gmail.com>
bpf: Reject %p% format string in bprintf-like helpers
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix initialization of data for instructions that write to subdevice
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fix some signed shift left operations
Ian Abbott <abbotti(a)mev.co.uk>
comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
Ian Abbott <abbotti(a)mev.co.uk>
comedi: das6402: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: das16m1: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: aio_iiro_16: Fix bit shift out of bounds
Ian Abbott <abbotti(a)mev.co.uk>
comedi: pcl812: Fix bit shift out of bounds
Chen Ni <nichen(a)iscas.ac.cn>
iio: adc: stm32-adc: Fix race in installing chained IRQ handler
Fabio Estevam <festevam(a)denx.de>
iio: adc: max1363: Reorder mode_list[] entries
Fabio Estevam <festevam(a)denx.de>
iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
Sean Nyekjaer <sean(a)geanix.com>
iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
Andrew Jeffery <andrew(a)codeconstruct.com.au>
soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
Andrew Jeffery <andrew(a)codeconstruct.com.au>
soc: aspeed: lpc-snoop: Cleanup resources in stack-order
Wang Zhaolong <wangzhaolong(a)huaweicloud.com>
smb: client: fix use-after-free in crypt_message when using async crypto
Maulik Shah <maulik.shah(a)oss.qualcomm.com>
pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
Judith Mendez <jm(a)ti.com>
mmc: sdhci_am654: Workaround for Errata i2312
Edson Juliano Drosdeck <edson.drosdeck(a)gmail.com>
mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
Thomas Fourier <fourier.thomas(a)gmail.com>
mmc: bcm2835: Fix dma_unmap_sg() nents value
Nathan Chancellor <nathan(a)kernel.org>
memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
Jan Kara <jack(a)suse.cz>
isofs: Verify inode mode when loading from disk
Dan Carpenter <dan.carpenter(a)linaro.org>
dmaengine: nbpfaxi: Fix memory corruption in probe()
Yun Lu <luyun(a)kylinos.cn>
af_packet: fix soft lockup issue caused by tpacket_snd()
Yun Lu <luyun(a)kylinos.cn>
af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
Francesco Dolcini <francesco.dolcini(a)toradex.com>
arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on
Maor Gottlieb <maorg(a)nvidia.com>
net/mlx5: Update the list of the PCI supported devices
Nathan Chancellor <nathan(a)kernel.org>
phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
Pavel Begunkov <asml.silence(a)gmail.com>
io_uring/poll: fix POLLERR handling
Steven Rostedt <rostedt(a)goodmis.org>
tracing: Add down_write(trace_event_sem) when adding trace event
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: do not bypass hid_hw_raw_request
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: ensure __hid_request reserves the report ID as the first byte
Benjamin Tissoires <bentiss(a)kernel.org>
HID: core: ensure the allocated report buffer can contain the reserved report ID
Thomas Fourier <fourier.thomas(a)gmail.com>
pch_uart: Fix dma_sync_sg_for_device() nents value
Nilton Perim Neto <niltonperimneto(a)gmail.com>
Input: xpad - set correct controller type for Acer NGR200
Alok Tiwari <alok.a.tiwari(a)oracle.com>
thunderbolt: Fix bit masking in tb_dp_port_set_hops()
Clément Le Goffic <clement.legoffic(a)foss.st.com>
i2c: stm32: fix the device used for the DMA map
Xinyu Liu <1171169449(a)qq.com>
usb: gadget: configfs: Fix OOB read on empty string write
Ryan Mann (NDI) <rmann(a)ndigital.com>
USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
Slark Xiao <slark_xiao(a)163.com>
USB: serial: option: add Foxconn T99W640
Fabio Porcedda <fabio.porcedda(a)gmail.com>
USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
Wayne Chang <waynec(a)nvidia.com>
phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
-------------
Diffstat:
Makefile | 4 +-
arch/arm64/boot/dts/freescale/imx8mm-verdin.dtsi | 1 +
drivers/base/power/domain_governor.c | 18 +-
drivers/bluetooth/btusb.c | 78 ++++----
drivers/comedi/comedi_fops.c | 30 +++-
drivers/comedi/drivers.c | 17 +-
drivers/comedi/drivers/aio_iiro_16.c | 3 +-
drivers/comedi/drivers/das16m1.c | 3 +-
drivers/comedi/drivers/das6402.c | 3 +-
drivers/comedi/drivers/pcl812.c | 3 +-
drivers/dma/nbpfaxi.c | 11 +-
drivers/hid/hid-core.c | 21 ++-
drivers/hid/hid-mcp2221.c | 2 +-
drivers/hwmon/corsair-cpro.c | 5 +
drivers/i2c/busses/i2c-stm32.c | 8 +-
drivers/i2c/busses/i2c-stm32f7.c | 4 +-
drivers/iio/accel/fxls8962af-core.c | 2 +
drivers/iio/adc/max1363.c | 43 +++--
drivers/iio/adc/stm32-adc-core.c | 7 +-
drivers/input/joystick/xpad.c | 2 +-
drivers/memstick/core/memstick.c | 2 +-
drivers/mmc/host/bcm2835.c | 3 +-
drivers/mmc/host/sdhci-pci-core.c | 3 +-
drivers/mmc/host/sdhci_am654.c | 9 +-
drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 12 +-
drivers/net/ethernet/mellanox/mlx5/core/main.c | 1 +
drivers/net/ethernet/xilinx/xilinx_emaclite.c | 2 +-
drivers/net/usb/sierra_net.c | 4 +
drivers/nvme/host/core.c | 4 +
drivers/nvmem/u-boot-env.c | 2 +-
drivers/phy/tegra/xusb-tegra186.c | 61 ++++---
drivers/soc/aspeed/aspeed-lpc-snoop.c | 13 +-
drivers/thunderbolt/switch.c | 2 +-
drivers/tty/serial/pch_uart.c | 2 +-
drivers/usb/core/hub.c | 36 +++-
drivers/usb/core/hub.h | 1 +
drivers/usb/dwc3/dwc3-qcom.c | 7 +-
drivers/usb/gadget/configfs.c | 2 +
drivers/usb/musb/musb_core.c | 62 +++----
drivers/usb/musb/musb_core.h | 11 ++
drivers/usb/musb/musb_debugfs.c | 6 +-
drivers/usb/musb/musb_gadget.c | 30 ++--
drivers/usb/musb/musb_host.c | 6 +-
drivers/usb/musb/musb_virthub.c | 18 +-
drivers/usb/serial/ftdi_sio.c | 2 +
drivers/usb/serial/ftdi_sio_ids.h | 3 +
drivers/usb/serial/option.c | 5 +
fs/cachefiles/io.c | 2 -
fs/cachefiles/ondemand.c | 4 +-
fs/isofs/inode.c | 9 +-
fs/namespace.c | 5 +
fs/smb/client/file.c | 10 +-
fs/smb/client/smb2ops.c | 7 +-
include/net/netfilter/nf_conntrack.h | 15 +-
io_uring/net.c | 12 +-
io_uring/poll.c | 2 -
kernel/bpf/helpers.c | 11 +-
kernel/cgroup/legacy_freezer.c | 8 +-
kernel/sched/loadavg.c | 2 +-
kernel/sched/sched.h | 2 +-
kernel/trace/trace_events.c | 5 +
mm/vmalloc.c | 22 ++-
net/8021q/vlan.c | 42 ++++-
net/8021q/vlan.h | 1 +
net/bluetooth/hci_event.c | 36 ----
net/bluetooth/hci_sync.c | 217 ++++++++++++++---------
net/bluetooth/l2cap_core.c | 26 ++-
net/bluetooth/l2cap_sock.c | 3 +
net/bluetooth/smp.c | 21 ++-
net/bluetooth/smp.h | 1 +
net/bridge/br_switchdev.c | 3 +
net/ipv6/mcast.c | 2 +-
net/ipv6/rpl_iptunnel.c | 8 +-
net/netfilter/nf_conntrack_core.c | 26 ++-
net/packet/af_packet.c | 27 ++-
net/phonet/pep.c | 2 +-
net/sched/sch_htb.c | 4 +-
net/sched/sch_qfq.c | 30 +++-
net/tls/tls_strp.c | 3 +-
sound/soc/fsl/fsl_sai.c | 14 +-
tools/testing/selftests/net/udpgro.sh | 8 +-
81 files changed, 744 insertions(+), 420 deletions(-)
Total jobs: 232
Total errors: 102 (43.97%)
LAVA errors: 0 (0.00%)
Test errors: 93 (40.09%)
Job errors: 6 (2.59%)
Infra errors: 3 (1.29%)
Canceled jobs: 0 (0.00%)
Device type: qrb5165-rb5
Total jobs: 69
Total errors: 37 (53.62%)
Error type: Infrastructure
Error count: 1 (1.45%)
Error: Connection closed
Count: 1 (1.45%)
IDs:
rb5-01:
8370082
Error type: Test
Error count: 36 (52.17%)
Error: Device NOT found!
Count: 13 (18.84%)
IDs:
rb5-01:
8369655
rb5-03:
8369091 8369101 8369445 8369446 8369451
8369490 8369585 8370068
rb5-07:
8369488 8369518 8369546 8369550
Error: No match for error type 'Test', message 'tradefed - adb device lost[74d67c95]'
Count: 3 (4.35%)
IDs:
rb5-03:
8369102 8370002 8370052
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 597 seconds'
Count: 3 (4.35%)
IDs:
rb5-03:
8370018 8370047
rb5-07:
8369455
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 598 seconds'
Count: 14 (20.29%)
IDs:
rb5-01:
8369444 8369491 8369547
rb5-03:
8369513 8369519 8369596 8369597 8369629
8370038
rb5-06:
8369441
rb5-07:
8369453 8369586 8370007 8370015
Error: No match for error type 'Test', message 'tradefed - adb device lost[d8a1879f]'
Count: 2 (2.90%)
IDs:
rb5-07:
8369103 8369804
Error: No match for error type 'Test', message 'tradefed - adb device lost[4fc7b22]'
Count: 1 (1.45%)
IDs:
rb5-06:
8369599
Device type: hi6220-hikey-r2
Total jobs: 17
Total errors: 15 (88.24%)
Error type: Test
Error count: 9 (52.94%)
Error: No match for error type 'Test', message 'tradefed - adb device lost[235D989C003B0752]'
Count: 1 (5.88%)
IDs:
hikey-6220-r2-03:
8370061
Error: No match for error type 'Test', message 'The network seems not available, as the ping command failed'
Count: 5 (29.41%)
IDs:
hikey-6220-r2-01:
8369122
hikey-6220-r2-05:
8369408 8369815 8370048
hikey-6220-r2-06:
8369410
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 598 seconds'
Count: 2 (11.76%)
IDs:
hikey-6220-r2-04:
8369508
hikey-6220-r2-05:
8370028
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 588 seconds'
Count: 1 (5.88%)
IDs:
hikey-6220-r2-05:
8369962
Error type: Job
Error count: 6 (35.29%)
Error: No match for error type 'Job', message 'login-action timed out after 880 seconds'
Count: 3 (17.65%)
IDs:
hikey-6220-r2-01:
8369509
hikey-6220-r2-03:
8369119 8370034
Error: No match for error type 'Job', message 'login-action timed out after 683 seconds'
Count: 1 (5.88%)
IDs:
hikey-6220-r2-02:
8369814
Error: No match for error type 'Job', message 'login-action timed out after 879 seconds'
Count: 1 (5.88%)
IDs:
hikey-6220-r2-04:
8369059
Error: No match for error type 'Job', message 'login-action timed out after 878 seconds'
Count: 1 (5.88%)
IDs:
hikey-6220-r2-05:
8369058
Device type: hi960-hikey
Total jobs: 29
Total errors: 15 (51.72%)
Error type: Test
Error count: 14 (48.28%)
Error: No match for error type 'Test', message 'tradefed - adb device lost[57DD383701799F9A]'
Count: 2 (6.90%)
IDs:
hi960-hikey-05:
8369075 8370029
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 587 seconds'
Count: 1 (3.45%)
IDs:
hi960-hikey-05:
8369628
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 598 seconds'
Count: 6 (20.69%)
IDs:
hi960-hikey-01:
8369549 8369558
hi960-hikey-05:
8369065 8369067 8369072 8369517
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 597 seconds'
Count: 1 (3.45%)
IDs:
hi960-hikey-05:
8369557
Error: Device NOT found!
Count: 2 (6.90%)
IDs:
hi960-hikey-02:
8369079
hi960-hikey-05:
8369074
Error: No match for error type 'Test', message 'tradefed - adb device lost[47D27933024424E6]'
Count: 1 (3.45%)
IDs:
hi960-hikey-04:
8369070
Error: No match for error type 'Test', message 'tradefed - adb device lost[6A522E130177F475]'
Count: 1 (3.45%)
IDs:
hi960-hikey-01:
8369061
Error type: Infrastructure
Error count: 1 (3.45%)
Error: Connection closed
Count: 1 (3.45%)
IDs:
hi960-hikey-05:
8369071
Device type: dragonboard-845c
Total jobs: 104
Total errors: 32 (30.77%)
Error type: Test
Error count: 31 (29.81%)
Error: Device NOT found!
Count: 6 (5.77%)
IDs:
db845c-03:
8369523 8369984
db845c-04:
8369572
db845c-06:
8369099 8369423
db845c-09:
8369986
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 598 seconds'
Count: 13 (12.50%)
IDs:
db845c-02:
8369483 8369573
db845c-04:
8369020 8369040 8369424 8369459
db845c-05:
8369439
db845c-06:
8369076 8369427 8369480 8369973
db845c-09:
8369042
db845c-10:
8369617
Error: No match for error type 'Test', message 'The network seems not available, as the ping command failed'
Count: 4 (3.85%)
IDs:
db845c-06:
8369034
db845c-08:
8369031 8369571
db845c-09:
8369032
Error: No match for error type 'Test', message 'tradefed - adb device lost[d9b7d9b]'
Count: 2 (1.92%)
IDs:
db845c-05:
8368568 8369481
Error: No match for error type 'Test', message 'tradefed - adb device lost[476f370a]'
Count: 1 (0.96%)
IDs:
db845c-10:
8369461
Error: No match for error type 'Test', message 'tradefed - adb device lost[a6622a22]'
Count: 2 (1.92%)
IDs:
db845c-09:
8364552 8369437
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 588 seconds'
Count: 1 (0.96%)
IDs:
db845c-04:
8369098
Error: No match for error type 'Test', message 'tradefed - adb device lost[f3a58ae3]'
Count: 1 (0.96%)
IDs:
db845c-04:
8368997
Error: No match for error type 'Test', message 'tradefed - adb device lost[dd3b965f]'
Count: 1 (0.96%)
IDs:
db845c-02:
8368990
Error type: Infrastructure
Error count: 1 (0.96%)
Error: Connection closed
Count: 1 (0.96%)
IDs:
db845c-02:
8369975
Device type: sm8550-hdk
Total jobs: 12
Total errors: 2 (16.67%)
Error type: Test
Error count: 2 (16.67%)
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 597 seconds'
Count: 1 (8.33%)
IDs:
sm8550-hdk-01:
8369520
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 598 seconds'
Count: 1 (8.33%)
IDs:
sm8550-hdk-01:
8369109
Device type: x15
Total jobs: 1
Total errors: 1 (100.00%)
Error type: Test
Error count: 1 (100.00%)
Error: No match for error type 'Test', message 'mkfs.ext4 /dev/disk/by-id/ata-SanDisk_SSD_PLUS_120GB_190702A00D84 failed; job exit'
Count: 1 (100.00%)
IDs:
x15-11:
8369378