From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id A15AA30DED4; Mon, 8 Sep 2025 16:05:57 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1757347557; cv=none; b=AG9g3ePgrjGKeozvZRDNyiXsrZ4JeLptbfxn58juObr3a7xWxdjzzHlIY6hiFMs/ThTnCt3uBEgD2Y55M8d2CR/jCYidlE1msLAM6LbR//Q0A5QoE+r5neIHWNADW0v2+1E+FMto/aqEVXszmVqv9n5yTb0OTF/p6WpKs/gIRTE= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1757347557; c=relaxed/simple; bh=6UCIdIDhmDU5BH/PrMq3CKkzuoPNH+25dzdeihdwhV0=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version:Content-Type; b=WinlPIQZB2mDR4mRzb4IxDxU/RQqRLIH3Dm7E2o7iIW2vN781wMLPUVIMwDdRhuQn+wC3NVS4qVulhWulc6RFEYWbEoqdcro4BTO1DJAvw8rShgysIH6RCIz14oG2FLDlQy96qdEC8ZdqgT2/bPUccIEXgblzdx66oDK4M4z3LM= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=kCfiaECo; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="kCfiaECo" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 9D58FC4CEF1; Mon, 8 Sep 2025 16:05:56 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1757347557; bh=6UCIdIDhmDU5BH/PrMq3CKkzuoPNH+25dzdeihdwhV0=; h=From:To:Cc:Subject:Date:From; b=kCfiaECo6ltdWlGLvPsmQTKTo0c3PoFU+0qYo7u/MTuIfxyV1TASFP7vcf7BBGqr9 gmUXfBxiyUGlvOr+Ci3t/1ZNBo+M4rStjMHiiiTj/hcjFVGd3miCmu7JzCPYgq94I6 TDuSUCA8ee/YaOcDCqW7XkK01pCRo7IyyJ1Ln244= From: Greg Kroah-Hartman To: stable@vger.kernel.org Cc: Greg Kroah-Hartman , patches@lists.linux.dev, linux-kernel@vger.kernel.org, torvalds@linux-foundation.org, akpm@linux-foundation.org, linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org, lkft-triage@lists.linaro.org, pavel@denx.de, jonathanh@nvidia.com, f.fainelli@gmail.com, sudipm.mukherjee@gmail.com, srw@sladewatkins.net, rwarsow@gmx.de, conor@kernel.org, hargar@microsoft.com, broonie@kernel.org, achill@achill.org Subject: [PATCH 6.6 000/118] 6.6.105-rc2 review Date: Mon, 8 Sep 2025 18:05:07 +0200 Message-ID: <20250908151836.822240062@linuxfoundation.org> X-Mailer: git-send-email 2.51.0 Precedence: bulk X-Mailing-List: patches@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 User-Agent: quilt/0.68 X-stable: review X-Patchwork-Hint: ignore X-KernelTest-Patch: http://kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.105-rc2.gz X-KernelTest-Tree: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git X-KernelTest-Branch: linux-6.6.y X-KernelTest-Patches: git://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git X-KernelTest-Version: 6.6.105-rc2 X-KernelTest-Deadline: 2025-09-10T15:18+00:00 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This is the start of the stable review cycle for the 6.6.105 release. There are 118 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 10 Sep 2025 15:18:22 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.105-rc2.gz or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman Linux 6.6.105-rc2 Kevin Hao spi: fsl-qspi: Fix double cleanup in probe error path Qiu-ji Chen dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status() Rafael J. Wysocki cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() Rafael J. Wysocki cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE() Rafael J. Wysocki cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo() Radim Krčmář riscv: use lw when reading int cpu in asm_per_cpu yangshiguang mm: slub: avoid wake up kswapd in set_track_prepare Chengming Zhou slub: Reflow ___slab_alloc() zhang jiao tools: gpio: remove the include directory on make clean zhangjiao tools: gpio: rm .*.cmd on make clean Colin Ian King drm/amd/amdgpu: Fix missing error return on kzalloc failure Hawking Zhang drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c Ian Rogers perf bpf-event: Fix use-after-free in synthesis Michael Walle drm/bridge: ti-sn65dsi86: fix REFCLK setting Larisa Grigore spi: spi-fsl-lpspi: Clear status register after disabling the module Larisa Grigore spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort Larisa Grigore spi: spi-fsl-lpspi: Set correct chip-select polarity bit Larisa Grigore spi: spi-fsl-lpspi: Fix transmissions when using CONT Vadim Pasternak hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM Wentao Liang pcmcia: Add error handling for add_interval() in do_validate_mem() Chen Ni pcmcia: omap: Add missing check for platform_get_resource Alex Deucher Revert "drm/amdgpu: Avoid extra evict-restore process." Aaron Erhardt ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY Takashi Iwai ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model Ma Ke drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv Jason-JH.Lin drm/mediatek: Fix using wrong drm private data to bind mediatek-drm Jason-JH.Lin drm/mediatek: Add crtc path enum for all_drm_priv array Ronak Doshi vmxnet3: update MTU after device quiesce Jakob Unterwurzacher net: dsa: microchip: linearize skb for tail-tagging switches Pieter Van Trappen net: dsa: microchip: update tag_ksz masks for KSZ9477 family Qiu-ji Chen dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status() Chris Chiu ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup Stefan Binding ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA David Lechner iio: pressure: mprls0025pa: use aligned_s64 for timestamp Luca Ceresoli iio: light: opt3001: fix deadlock due to concurrent flag access David Lechner iio: chemical: pms7003: use aligned_s64 for timestamp David Lechner iio: imu: inv_mpu6050: align buffer for timestamp Josef Bacik btrfs: adjust subpage bit start based on sectorsize Jonathan Currier PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads Nícolas F. R. A. Prado thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold Han Xu spi: fsl-qspi: use devm function instead of driver remove Li Qiong mm/slub: avoid accessing metadata when pointer is invalid in object_err() Dave Airlie nouveau: fix disabling the nonstall irq due to storm code Srinivas Pandruvada cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode Rafael J. Wysocki cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization Rafael J. Wysocki cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller Srinivas Pandruvada cpufreq: intel_pstate: Revise global turbo disable check Jinfeng Wang Revert "spi: spi-cadence-quadspi: Fix pm runtime unbalance" Jinfeng Wang Revert "spi: cadence-quadspi: fix cleanup of rx_chan on failure paths" Lad Prabhakar net: pcs: rzn1-miic: Correct MODCTRL register offset Vitaly Lifshits e1000e: fix heap overflow in e1000_set_eeprom Makar Semyonov cifs: prevent NULL pointer dereference in UTF16 conversion Stanislav Fort batman-adv: fix OOB read/write in network-coding decode John Evans scsi: lpfc: Fix buffer free/clear order in deferred receive path Christoffer Sandberg platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list Alex Deucher drm/amdgpu: drop hw access in non-DC audio fini Nathan Chancellor wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data() Qianfeng Rong wifi: mwifiex: Initialize the chan_stats array to zero Bjorn Andersson soc: qcom: mdt_loader: Deal with zero e_shentsize wangzijie proc: fix missing pde_set_flags() for net proc files Edward Adam Davis ocfs2: prevent release journal inode after journal shutdown Christian Loehle sched: Fix sched_numa_find_nth_cpu() if mask offline Harry Yoo mm: move page table sync declarations to linux/pgtable.h Harry Yoo x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() Ma Ke pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() panfan arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE Miaoqian Lin ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids() Cryolitia PukNgae ALSA: usb-audio: Add mute TLV for playback volumes on some devices Horatiu Vultur phy: mscc: Stop taking ts_lock for tx_queue and use its own lock Kuniyuki Iwashima selftest: net: Fix weird setsockopt() in bind_bhash.c. Qingfang Deng ppp: fix memory leak in pad_compress_skb Wang Liang net: atm: fix memory leak in atm_register_sysfs when device_register fail Eric Dumazet ax25: properly unshare skbs in ax25_kiss_rcv() Alok Tiwari mctp: return -ENOPROTOOPT for unknown getsockopt options Mahanta Jambigi net/smc: Remove validation of reserved bits in CLC Decline message Dan Carpenter ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() Rosen Penev net: thunder_bgx: decrement cleanup index before use Rosen Penev net: thunder_bgx: add a missing of_node_put Dan Carpenter wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() Dan Carpenter wifi: libertas: cap SSID len in lbs_associate() Dan Carpenter wifi: cw1200: cap SSID length in cw1200_do_join() Felix Fietkau net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets Rameshkumar Sundaram wifi: ath11k: fix group data packet drops during rekey Baochen Qiang wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay() Baochen Qiang wifi: ath11k: rename ath11k_start_vdev_delay() Jeff Johnson wifi: ath11k: Introduce and use ath11k_sta_to_arsta() Zhen Ni i40e: Fix potential invalid access when MAC list is empty Liu Jian net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() Sabrina Dubroca macsec: read MACSEC_SA_ATTR_PN with nla_get_uint Jakub Kicinski netlink: add variable-length / auto integers Sean Anderson net: macb: Fix tx_ptr_lock locking Fabian Bläse icmp: fix icmp_ndo_send address translation for reply direction Miaoqian Lin mISDN: Fix memory leak in dsp_hwec_enable() Alok Tiwari xirc2ps_cs: fix register access when enabling FullDuplex Kuniyuki Iwashima Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() Ivan Pravdin Bluetooth: vhci: Prevent use-after-free by removing debugfs files early Phil Sutter netfilter: conntrack: helper: Replace -EEXIST by -EBUSY Wang Liang netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm Duoming Zhou wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work Dmitry Antipov wifi: cfg80211: fix use-after-free in cmp_bss() Marek Vasut arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC Marek Vasut arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM Sungbae Yoo tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible" Peter Robinson arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro Pei Xiao tee: fix NULL pointer dereference in tee_shm_put Jiufei Xue fs: writeback: fix use-after-free in __mark_inode_dirty() Yang Li Bluetooth: hci_sync: Avoid adding default advertising on startup Shinji Nomoto cpupower: Fix a bug where the -t option of the set subcommand was not working. Timur Kristóf drm/amd/display: Don't warn when missing DCE encoder caps Lubomir Rintel cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN Huacai Chen LoongArch: Save LBT before FPU in setup_sigcontext() Filipe Manana btrfs: avoid load/store tearing races when checking if an inode was logged Filipe Manana btrfs: fix race between setting last_dir_index_offset and inode logging Filipe Manana btrfs: fix race between logging inode and checking if it was logged before Daniel Borkmann bpf: Fix oob access in cgroup local storage Daniel Borkmann bpf: Move bpf map owner out of common struct Daniel Borkmann bpf: Move cgroup iterator helpers to bpf.h Daniel Borkmann bpf: Add cookie object to bpf maps ------------- Diffstat: Documentation/userspace-api/netlink/specs.rst | 18 +- Makefile | 4 +- .../dts/freescale/imx8mp-data-modul-edm-sbc.dts | 1 + .../arm64/boot/dts/freescale/imx8mp-dhcom-som.dtsi | 1 + .../boot/dts/rockchip/rk3399-pinebook-pro.dts | 1 + arch/arm64/include/asm/module.h | 1 + arch/arm64/include/asm/module.lds.h | 1 + arch/arm64/kernel/ftrace.c | 13 +- arch/arm64/kernel/module-plts.c | 12 +- arch/arm64/kernel/module.c | 11 + arch/loongarch/kernel/signal.c | 10 +- arch/riscv/include/asm/asm.h | 2 +- arch/x86/include/asm/pgtable_64_types.h | 3 + arch/x86/mm/init_64.c | 18 + drivers/acpi/arm64/iort.c | 4 +- drivers/bluetooth/hci_vhci.c | 57 +- drivers/cpufreq/intel_pstate.c | 126 ++--- drivers/dma/mediatek/mtk-cqdma.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 146 ++--- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +- drivers/gpu/drm/amd/amdgpu/dce_v10_0.c | 5 - drivers/gpu/drm/amd/amdgpu/dce_v11_0.c | 5 - drivers/gpu/drm/amd/amdgpu/dce_v6_0.c | 5 - drivers/gpu/drm/amd/amdgpu/dce_v8_0.c | 5 - .../gpu/drm/amd/display/dc/dce/dce_link_encoder.c | 8 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 11 + drivers/gpu/drm/mediatek/mtk_drm_drv.c | 42 +- drivers/gpu/drm/mediatek/mtk_drm_drv.h | 8 +- drivers/gpu/drm/nouveau/nvkm/engine/fifo/base.c | 2 + drivers/gpu/drm/nouveau/nvkm/engine/fifo/ga100.c | 23 +- drivers/gpu/drm/nouveau/nvkm/engine/fifo/ga102.c | 1 + drivers/gpu/drm/nouveau/nvkm/engine/fifo/priv.h | 2 + drivers/hwmon/mlxreg-fan.c | 5 +- drivers/iio/chemical/pms7003.c | 5 +- drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c | 2 +- drivers/iio/light/opt3001.c | 5 +- drivers/iio/pressure/mprls0025pa.c | 10 +- drivers/isdn/mISDN/dsp_hwec.c | 6 +- drivers/net/ethernet/cadence/macb_main.c | 28 +- drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 20 +- drivers/net/ethernet/intel/e1000e/ethtool.c | 10 +- drivers/net/ethernet/intel/i40e/i40e_client.c | 4 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 10 +- drivers/net/ethernet/xircom/xirc2ps_cs.c | 2 +- drivers/net/macsec.c | 8 +- drivers/net/pcs/pcs-rzn1-miic.c | 2 +- drivers/net/phy/mscc/mscc_ptp.c | 18 +- drivers/net/ppp/ppp_generic.c | 6 +- drivers/net/usb/cdc_ncm.c | 7 + drivers/net/vmxnet3/vmxnet3_drv.c | 5 +- drivers/net/wireless/ath/ath11k/core.h | 7 + drivers/net/wireless/ath/ath11k/debugfs.c | 4 +- drivers/net/wireless/ath/ath11k/debugfs_sta.c | 30 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 8 +- drivers/net/wireless/ath/ath11k/dp_tx.c | 4 +- drivers/net/wireless/ath/ath11k/mac.c | 588 ++++++++++++--------- drivers/net/wireless/ath/ath11k/peer.c | 2 +- drivers/net/wireless/ath/ath11k/wmi.c | 6 +- .../wireless/broadcom/brcm80211/brcmfmac/btcoex.c | 6 +- drivers/net/wireless/marvell/libertas/cfg.c | 9 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 5 +- drivers/net/wireless/marvell/mwifiex/main.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 4 +- drivers/net/wireless/st/cw1200/sta.c | 2 +- drivers/pci/msi/msi.c | 3 + drivers/pcmcia/omap_cf.c | 2 + drivers/pcmcia/rsrc_iodyn.c | 3 + drivers/pcmcia/rsrc_nonstatic.c | 4 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 14 + drivers/scsi/lpfc/lpfc_nvmet.c | 10 +- drivers/soc/qcom/mdt_loader.c | 12 +- drivers/spi/spi-cadence-quadspi.c | 6 +- drivers/spi/spi-fsl-lpspi.c | 24 +- drivers/spi/spi-fsl-qspi.c | 36 +- drivers/tee/optee/ffa_abi.c | 4 +- drivers/tee/tee_shm.c | 6 +- drivers/thermal/mediatek/lvts_thermal.c | 50 +- fs/btrfs/btrfs_inode.h | 2 +- fs/btrfs/extent_io.c | 2 +- fs/btrfs/inode.c | 1 + fs/btrfs/tree-log.c | 78 ++- fs/fs-writeback.c | 9 +- fs/ocfs2/inode.c | 3 + fs/proc/generic.c | 38 +- fs/smb/client/cifs_unicode.c | 3 + include/linux/bpf-cgroup.h | 5 - include/linux/bpf.h | 60 ++- include/linux/pci.h | 2 + include/linux/pgtable.h | 16 + include/linux/vmalloc.h | 16 - include/net/netlink.h | 69 ++- include/uapi/linux/netlink.h | 5 + kernel/bpf/core.c | 50 +- kernel/bpf/syscall.c | 20 +- kernel/sched/topology.c | 2 + lib/nlattr.c | 22 + mm/slub.c | 66 ++- net/atm/resources.c | 6 +- net/ax25/ax25_in.c | 4 + net/batman-adv/network-coding.c | 7 +- net/bluetooth/hci_sync.c | 2 +- net/bluetooth/l2cap_sock.c | 3 + net/bridge/br_netfilter_hooks.c | 3 - net/dsa/tag_ksz.c | 22 +- net/ipv4/devinet.c | 7 +- net/ipv4/icmp.c | 6 +- net/ipv6/ip6_icmp.c | 6 +- net/mctp/af_mctp.c | 2 +- net/netfilter/nf_conntrack_helper.c | 4 +- net/netlink/policy.c | 14 +- net/smc/smc_clc.c | 2 - net/smc/smc_ib.c | 3 + net/wireless/scan.c | 3 +- net/wireless/sme.c | 5 +- sound/pci/hda/patch_hdmi.c | 1 + sound/pci/hda/patch_realtek.c | 5 + sound/usb/mixer_quirks.c | 2 + tools/gpio/Makefile | 4 +- tools/perf/util/bpf-event.c | 39 +- tools/power/cpupower/utils/cpupower-set.c | 4 +- tools/testing/selftests/net/bind_bhash.c | 4 +- 121 files changed, 1357 insertions(+), 838 deletions(-)