This is the start of the stable review cycle for the 6.1.154 release.
There are 61 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.
Responses should be made by Wed, 24 Sep 2025 19:23:52 +0000.
Anything received after that time might be too late.
The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.154-rc…
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.
thanks,
greg k-h
-------------
Pseudo-Shortlog of commits:
Greg Kroah-Hartman <gregkh(a)linuxfoundation.org>
Linux 6.1.154-rc1
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
David Howells <dhowells(a)redhat.com>
crypto: af_alg: Convert af_alg_sendpage() to use MSG_SPLICE_PAGES
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org>
ASoC: q6apm-lpass-dai: close graph on prepare errors
Srinivas Kandagatla <srinivas.kandagatla(a)linaro.org>
ASoC: qcom: q6apm-lpass-dai: close graphs before opening a new one
Hans de Goede <hansg(a)kernel.org>
net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
Philipp Zabel <p.zabel(a)pengutronix.de>
net: rfkill: gpio: add DT support
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: connect: catch IO errors on listen side
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
mptcp: propagate shutdown to subflows when possible
Mathias Nyman <mathias.nyman(a)linux.intel.com>
xhci: dbc: Fix full DbC transfer ring after several reconnects
Mathias Nyman <mathias.nyman(a)linux.intel.com>
xhci: dbc: decouple endpoint allocation from initialization
Johan Hovold <johan(a)kernel.org>
phy: ti: omap-usb2: fix device leak at unbind
Rob Herring <robh(a)kernel.org>
phy: Use device_get_match_data()
Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org>
phy: broadcom: ns-usb3: fix Wvoid-pointer-to-enum-cast warning
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: userspace pm: validate deny-join-id0 flag
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
mptcp: pm: nl: announce deny-join-id0 flag
Stefan Metzmacher <metze(a)samba.org>
smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
Herbert Xu <herbert(a)gondor.apana.org.au>
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
David Howells <dhowells(a)redhat.com>
crypto: af_alg: Indent the loop in af_alg_sendmsg()
Qi Xi <xiqi2(a)huawei.com>
drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
Loic Poulain <loic.poulain(a)oss.qualcomm.com>
drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
Colin Ian King <colin.i.king(a)gmail.com>
ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
Charles Keepax <ckeepax(a)opensource.cirrus.com>
ASoC: wm8974: Correct PLL rate rounding
Charles Keepax <ckeepax(a)opensource.cirrus.com>
ASoC: wm8940: Correct typo in control name
Jens Axboe <axboe(a)kernel.dk>
io_uring: include dying ring in task_work "should cancel" state
Jens Axboe <axboe(a)kernel.dk>
io_uring: backport io_should_terminate_tw()
Praful Adiga <praful.adiga(a)gmail.com>
ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
selftests: mptcp: avoid spurious errors on TCP disconnect
Håkon Bugge <haakon.bugge(a)oracle.com>
rds: ib: Increment i_fastreg_wrs before bailing out
Maciej S. Szmigiero <maciej.szmigiero(a)oracle.com>
KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
Thomas Fourier <fourier.thomas(a)gmail.com>
mmc: mvsdio: Fix dma_unmap_sg() nents value
Mohammad Rafi Shaik <mohammad.rafi.shaik(a)oss.qualcomm.com>
ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
Mohammad Rafi Shaik <mohammad.rafi.shaik(a)oss.qualcomm.com>
ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
Qu Wenruo <wqu(a)suse.com>
btrfs: tree-checker: fix the incorrect inode ref size check
Eugene Koira <eugkoira(a)amazon.com>
iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
Tao Cui <cuitao(a)kylinos.cn>
LoongArch: Check the return value when creating kobj
Huacai Chen <chenhuacai(a)kernel.org>
LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
H. Nikolaus Schaller <hns(a)goldelico.com>
power: supply: bq27xxx: restrict no-battery detection to bq27000
H. Nikolaus Schaller <hns(a)goldelico.com>
power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
Nathan Chancellor <nathan(a)kernel.org>
nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
Stefan Metzmacher <metze(a)samba.org>
ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
Namjae Jeon <linkinjeon(a)kernel.org>
ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
Duoming Zhou <duoming(a)zju.edu.cn>
octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
Duoming Zhou <duoming(a)zju.edu.cn>
cnic: Fix use-after-free bugs in cnic_delete_task
Alexey Nepomnyashih <sdl(a)nppct.ru>
net: liquidio: fix overflow in octeon_init_instr_queue()
Tariq Toukan <tariqt(a)nvidia.com>
Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
Jakub Kicinski <kuba(a)kernel.org>
tls: make sure to abort the stream if headers are bogus
Kuniyuki Iwashima <kuniyu(a)google.com>
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
Hangbin Liu <liuhangbin(a)gmail.com>
bonding: don't set oif to bond dev when getting NS target destination
Maciej Fijalkowski <maciej.fijalkowski(a)intel.com>
i40e: remove redundant memory barrier when cleaning Tx descs
Yeounsu Moon <yyyynoom(a)gmail.com>
net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
Matthieu Baerts (NGI0) <matttbe(a)kernel.org>
mptcp: set remote_deny_join_id0 on SYN recv
Jamie Bainbridge <jamie.bainbridge(a)gmail.com>
qed: Don't collect too many protection override GRC elements
Ioana Ciornei <ioana.ciornei(a)nxp.com>
dpaa2-switch: fix buffer pool seeding for control traffic
Miaoqian Lin <linmq006(a)gmail.com>
um: virtio_uml: Fix use-after-free after put_device in probe
Filipe Manana <fdmanana(a)suse.com>
btrfs: fix invalid extref key setup when replaying dentry
Chen Ridong <chenridong(a)huawei.com>
cgroup: split cgroup_destroy_wq into 3 workqueues
Geert Uytterhoeven <geert+renesas(a)glider.be>
pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
Liao Yuanhong <liaoyuanhong(a)vivo.com>
wifi: mac80211: fix incorrect type for ret
Lachlan Hodges <lachlan.hodges(a)morsemicro.com>
wifi: mac80211: increase scan_ies_len for S1G
Takashi Sakamoto <o-takashi(a)sakamocchi.jp>
ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
-------------
Diffstat:
Makefile | 4 +-
arch/loongarch/include/asm/acenv.h | 7 +-
arch/loongarch/kernel/env.c | 2 +
arch/um/drivers/virtio_uml.c | 6 +-
arch/x86/kvm/svm/svm.c | 3 +-
crypto/af_alg.c | 112 ++++++++-------------
drivers/gpu/drm/bridge/analogix/anx7625.c | 6 +-
.../gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 6 +-
drivers/iommu/intel/iommu.c | 7 +-
drivers/mmc/host/mvsdio.c | 2 +-
drivers/net/bonding/bond_main.c | 1 -
drivers/net/ethernet/broadcom/cnic.c | 3 +-
.../net/ethernet/cavium/liquidio/request_manager.c | 2 +-
.../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +-
drivers/net/ethernet/intel/i40e/i40e_txrx.c | 3 -
.../net/ethernet/marvell/octeontx2/nic/otx2_ptp.c | 2 +-
drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 2 -
drivers/net/ethernet/natsemi/ns83820.c | 13 ++-
drivers/net/ethernet/qlogic/qed/qed_debug.c | 7 +-
drivers/pcmcia/omap_cf.c | 8 +-
drivers/phy/broadcom/phy-bcm-ns-usb3.c | 9 +-
drivers/phy/marvell/phy-berlin-usb.c | 7 +-
drivers/phy/ralink/phy-ralink-usb.c | 10 +-
drivers/phy/rockchip/phy-rockchip-pcie.c | 11 +-
drivers/phy/rockchip/phy-rockchip-usb.c | 10 +-
drivers/phy/ti/phy-omap-control.c | 9 +-
drivers/phy/ti/phy-omap-usb2.c | 24 +++--
drivers/phy/ti/phy-ti-pipe3.c | 14 +--
drivers/power/supply/bq27xxx_battery.c | 4 +-
drivers/usb/host/xhci-dbgcap.c | 94 ++++++++++++-----
fs/btrfs/tree-checker.c | 4 +-
fs/btrfs/tree-log.c | 2 +-
fs/nilfs2/sysfs.c | 4 +-
fs/nilfs2/sysfs.h | 8 +-
fs/smb/client/smbdirect.c | 4 +-
fs/smb/server/transport_rdma.c | 26 +++--
include/crypto/if_alg.h | 10 +-
include/uapi/linux/mptcp.h | 6 +-
io_uring/io_uring.c | 13 ++-
io_uring/io_uring.h | 13 +++
io_uring/poll.c | 3 +-
io_uring/timeout.c | 2 +-
kernel/cgroup/cgroup.c | 43 ++++++--
net/ipv4/tcp.c | 5 +
net/mac80211/driver-ops.h | 2 +-
net/mac80211/main.c | 7 +-
net/mptcp/pm_netlink.c | 7 ++
net/mptcp/protocol.c | 15 +++
net/mptcp/subflow.c | 4 +
net/rds/ib_frmr.c | 20 ++--
net/rfkill/rfkill-gpio.c | 22 +++-
net/tls/tls.h | 1 +
net/tls/tls_strp.c | 14 ++-
net/tls/tls_sw.c | 3 +-
sound/firewire/motu/motu-hwdep.c | 2 +-
sound/pci/hda/patch_realtek.c | 1 +
sound/soc/codecs/wm8940.c | 2 +-
sound/soc/codecs/wm8974.c | 8 +-
sound/soc/qcom/qdsp6/audioreach.c | 1 +
sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 36 +++++--
sound/soc/sof/intel/hda-stream.c | 2 +-
tools/testing/selftests/net/mptcp/mptcp_connect.c | 11 +-
tools/testing/selftests/net/mptcp/pm_nl_ctl.c | 7 ++
tools/testing/selftests/net/mptcp/userspace_pm.sh | 14 ++-
64 files changed, 440 insertions(+), 272 deletions(-)
Total jobs: 111
Total errors: 107 (96.40%)
LAVA errors: 0 (0.00%)
Test errors: 0 (0.00%)
Job errors: 107 (96.40%)
Infra errors: 0 (0.00%)
Canceled jobs: 0 (0.00%)
Device type: dragonboard-845c
Total jobs: 85
Total errors: 83 (97.65%)
Error type: Job
Error count: 83 (97.65%)
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4487 seconds'
Count: 29 (34.12%)
IDs:
db845c-03:
8456520 8456540 8456568 8456666 8456788
8457096
db845c-04:
8456527 8456539 8456567 8456604 8456645
8456787 8456820
db845c-05:
8456522 8456717 8456730 8456814
db845c-06:
8456516
db845c-08:
8456535 8456566
db845c-09:
8456503 8456529 8456541 8456667 8456716
8456733 8456789
db845c-10:
8456533 8456670
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4485 seconds'
Count: 16 (18.82%)
IDs:
db845c-02:
8456608
db845c-03:
8456528 8456560 8456816
db845c-05:
8456530 8456562 8456570 8456659 8456818
db845c-06:
8456556 8456618
db845c-09:
8456521 8456606 8456729 8456780
db845c-10:
8456661
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4484 seconds'
Count: 3 (3.53%)
IDs:
db845c-02:
8456660
db845c-04:
8456559
db845c-09:
8456817
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4486 seconds'
Count: 30 (35.29%)
IDs:
db845c-02:
8456523 8456641 8456671
db845c-03:
8456613 8456621 8456637 8456646 8456719
db845c-04:
8456519 8456612 8456620 8456634 8456714
8456731 8456815
db845c-05:
8456607 8456623 8456786
db845c-06:
8456524 8456662 8456672
db845c-08:
8456603 8456611 8456663
db845c-09:
8456561 8456569
db845c-10:
8456525 8456601 8456617 8456642
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4482 seconds'
Count: 2 (2.35%)
IDs:
db845c-02:
8456624
db845c-03:
8456759
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4460 seconds'
Count: 1 (1.18%)
IDs:
db845c-03:
8456732
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4465 seconds'
Count: 1 (1.18%)
IDs:
db845c-03:
8456715
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4488 seconds'
Count: 1 (1.18%)
IDs:
db845c-09:
8456638
Device type: dragonboard-410c
Total jobs: 1
Total errors: 0 (0.00%)
Device type: rk3399-rock-pi-4b
Total jobs: 1
Total errors: 0 (0.00%)
Device type: qrb5165-rb5
Total jobs: 20
Total errors: 20 (100.00%)
Error type: Job
Error count: 20 (100.00%)
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4487 seconds'
Count: 7 (35.00%)
IDs:
rb5-01:
8458953 8459014
rb5-05:
8458096 8458103
rb5-06:
8458098 8458952 8458957
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4483 seconds'
Count: 3 (15.00%)
IDs:
rb5-03:
8458960
rb5-06:
8458051
rb5-07:
8458997
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4486 seconds'
Count: 4 (20.00%)
IDs:
rb5-01:
8458109
rb5-03:
8458110 8458954
rb5-05:
8458996
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4485 seconds'
Count: 3 (15.00%)
IDs:
rb5-01:
8458959
rb5-03:
8458995
rb5-05:
8458961
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4484 seconds'
Count: 1 (5.00%)
IDs:
rb5-06:
8458963
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4482 seconds'
Count: 1 (5.00%)
IDs:
rb5-07:
8458962
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4489 seconds'
Count: 1 (5.00%)
IDs:
rb5-07:
8458956
Device type: sm8550-hdk
Total jobs: 4
Total errors: 4 (100.00%)
Error type: Job
Error count: 4 (100.00%)
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4485 seconds'
Count: 1 (25.00%)
IDs:
sm8550-hdk-01:
8458972
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4486 seconds'
Count: 3 (75.00%)
IDs:
sm8550-hdk-01:
8458967 8458968 8458970
Total jobs: 225
Total errors: 91 (40.44%)
LAVA errors: 0 (0.00%)
Test errors: 50 (22.22%)
Job errors: 27 (12.00%)
Infra errors: 14 (6.22%)
Canceled jobs: 0 (0.00%)
Device type: qrb5165-rb5
Total jobs: 98
Total errors: 39 (39.80%)
Error type: Job
Error count: 10 (10.20%)
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4487 seconds'
Count: 1 (1.02%)
IDs:
rb5-01:
8458984
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4483 seconds'
Count: 1 (1.02%)
IDs:
rb5-07:
8458982
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4486 seconds'
Count: 3 (3.06%)
IDs:
rb5-03:
8458034 8458980
rb5-06:
8458032
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4485 seconds'
Count: 3 (3.06%)
IDs:
rb5-01:
8458979
rb5-03:
8458024
rb5-06:
8458978
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4488 seconds'
Count: 1 (1.02%)
IDs:
rb5-07:
8458050
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4460 seconds'
Count: 1 (1.02%)
IDs:
rb5-07:
8458031
Error type: Test
Error count: 18 (18.37%)
Error: No match for error type 'Test', message 'tradefed - adb device lost[74d67c95]'
Count: 1 (1.02%)
IDs:
rb5-03:
8457986
Error: No match for error type 'Test', message 'Device NOT found after DUT booted up! adb wait-for-device timed out after 300s'
Count: 9 (9.18%)
IDs:
rb5-01:
8456737 8457983 8457984
rb5-05:
8457236 8457952
rb5-06:
8457106
rb5-07:
8456804 8457159 8457643
Error: Device NOT found!
Count: 2 (2.04%)
IDs:
rb5-01:
8457218 8457232
Error: No match for error type 'Test', message 'tradefed - adb device lost[f11b68eb]'
Count: 3 (3.06%)
IDs:
rb5-05:
8456770 8457154 8457229
Error: No match for error type 'Test', message 'tradefed - adb device lost[4fc7b22]'
Count: 1 (1.02%)
IDs:
rb5-06:
8457227
Error: No match for error type 'Test', message 'tradefed - adb device lost[93dcfd96]'
Count: 1 (1.02%)
IDs:
rb5-01:
8457100
Error: No match for error type 'Test', message 'lava-test-interactive timed out after 600 seconds'
Count: 1 (1.02%)
IDs:
rb5-01:
8456795
Error type: Infrastructure
Error count: 11 (11.22%)
Error: Connection closed
Count: 10 (10.20%)
IDs:
rb5-01:
8456769 8456805 8457123 8457125 8457156
8457166 8457349 8457631 8457661 8457985
Error: fastboot-flash-action timed out
Count: 1 (1.02%)
IDs:
rb5-05:
8457215
Device type: dragonboard-845c
Total jobs: 126
Total errors: 51 (40.48%)
Error type: Job
Error count: 16 (12.70%)
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4487 seconds'
Count: 7 (5.56%)
IDs:
db845c-03:
8458975
db845c-04:
8456501
db845c-05:
8458977
db845c-06:
8456481 8456494
db845c-08:
8456466
db845c-09:
8458976
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4486 seconds'
Count: 6 (4.76%)
IDs:
db845c-03:
8456468 8456490 8456502
db845c-04:
8458974
db845c-05:
8456479
db845c-10:
8456495
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4485 seconds'
Count: 2 (1.59%)
IDs:
db845c-02:
8456464 8456493
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4483 seconds'
Count: 1 (0.79%)
IDs:
db845c-10:
8456482
Error type: Test
Error count: 32 (25.40%)
Error: No match for error type 'Test', message 'lava-test-interactive timed out after 600 seconds'
Count: 8 (6.35%)
IDs:
db845c-03:
8456123
db845c-04:
8458969
db845c-05:
8455278 8455319
db845c-06:
8456103 8456105
db845c-08:
8456084 8456104
Error: Device NOT found!
Count: 2 (1.59%)
IDs:
db845c-06:
8456455
db845c-10:
8455295
Error: No match for error type 'Test', message 'Device NOT found after DUT booted up! adb wait-for-device timed out after 300s'
Count: 9 (7.14%)
IDs:
db845c-04:
8455276 8455692 8456172
db845c-05:
8455211 8455288 8456183
db845c-06:
8455283 8455691 8455729
Error: No match for error type 'Test', message 'tradefed - adb device lost[a6622a22]'
Count: 3 (2.38%)
IDs:
db845c-09:
8455292 8455355 8456180
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 584 seconds'
Count: 1 (0.79%)
IDs:
db845c-10:
8456145
Error: No match for error type 'Test', message 'tradefed - adb device lost[dd3b965f]'
Count: 2 (1.59%)
IDs:
db845c-02:
8455174 8456097
Error: No match for error type 'Test', message 'tradefed - adb device lost[d966d3f5]'
Count: 1 (0.79%)
IDs:
db845c-03:
8455689
Error: No match for error type 'Test', message 'tradefed - adb device lost[f3a58ae3]'
Count: 1 (0.79%)
IDs:
db845c-04:
8455682
Error: No match for error type 'Test', message 'tradefed - adb device lost[30e1e2ee]'
Count: 1 (0.79%)
IDs:
db845c-08:
8455356
Error: No match for error type 'Test', message 'lava-docker-test-shell timed out after 581 seconds'
Count: 1 (0.79%)
IDs:
db845c-10:
8455297
Error: No match for error type 'Test', message 'The network seems not available, as the ping command failed'
Count: 2 (1.59%)
IDs:
db845c-04:
8455280
db845c-05:
8455282
Error: Invalid TESTCASE signal
Count: 1 (0.79%)
IDs:
laa-00115-dragonboard-845c:
8454810
Error type: Infrastructure
Error count: 3 (2.38%)
Error: Connection closed
Count: 3 (2.38%)
IDs:
db845c-04:
8455721
db845c-05:
8455271 8455647
Device type: sm8550-hdk
Total jobs: 1
Total errors: 1 (100.00%)
Error type: Job
Error count: 1 (100.00%)
Error: No match for error type 'Job', message 'download-postprocess-docker timed out after 4485 seconds'
Count: 1 (100.00%)
IDs:
sm8550-hdk-01:
8458966