[PATCH 6.6 000/175] 6.6.144-rc1 review

[PATCH 6.6 000/175] 6.6.144-rc1 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 6.6.144 release.
There are 175 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat, 04 Jul 2026 15:50:58 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.144-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@linuxfoundation.org>
    Linux 6.6.144-rc1

Giovanni Cabiddu <giovanni.cabiddu@intel.com>
    crypto: qat - remove unused character device and IOCTLs

Herbert Xu <herbert@gondor.apana.org.au>
    crypto: qat - Return pointer directly in adf_ctl_alloc_resources

Thorsten Blum <thorsten.blum@linux.dev>
    crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user()

Bagas Sanjaya <bagasdotme@gmail.com>
    Documentation: ioctl-number: Extend "Include File" column width

Georgi Djakov <georgi.djakov@oss.qualcomm.com>
    drivers/base/memory: set mem->altmap after successful device registration

Stepan Ionichev <sozdayvek@gmail.com>
    serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails

Viken Dadhaniya <viken.dadhaniya@oss.qualcomm.com>
    serial: qcom_geni: Fix RX DMA stall when SE_DMA_RX_LEN_IN is zero

Hem Parekh <hemparekh1596@gmail.com>
    ksmbd: fix out-of-bounds read in smb_check_perm_dacl()

Markus Elfring <elfring@users.sourceforge.net>
    NFS: Prevent resource leak in nfs_alloc_server()

Michael Bommarito <michael.bommarito@gmail.com>
    NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr

Dominik Woźniak <stalion@gmail.com>
    nfsd: check get_user() return when reading princhashlen

Jeff Layton <jlayton@kernel.org>
    nfsd: fix posix_acl leak on SETACL decode failure

Guannan Wang <wgnbuaa@gmail.com>
    NFSD: Fix SECINFO_NO_NAME decode error cleanup

Steffen Persvold <spersvold@gmail.com>
    fbdev: modedb: Fix misaligned fields in the 1920x1080-60 mode

Tuo Li <islituo@gmail.com>
    fbdev: modedb: fix a possible UAF in fb_find_mode()

Ian Bridges <icb@fastmail.org>
    fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var

Wentao Liang <vulab@iscas.ac.cn>
    power: reset: linkstation-poweroff: fix use-after-free in the linkstation_poweroff_init()

Ashutosh Desai <ashutoshdesai993@gmail.com>
    KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path

Hyunwoo Kim <imv4bel@gmail.com>
    KVM: x86: hyper-v: Bound the bank index when querying sparse banks

Jonas Jelonek <jelonek.jonas@gmail.com>
    MIPS: smp: report dying CPU to RCU in stop_this_cpu()

Yizhou Zhao <zhaoyz24@mails.tsinghua.edu.cn>
    9p: avoid putting oldfid in p9_client_walk() error path

Zhang Cen <rollkingzzc@gmail.com>
    ocfs2: reject oversized group bitmap descriptors

Yuho Choi <dbgh9129@gmail.com>
    rpmsg: char: Fix use-after-free on probe error path

Wentao Liang <vulab@iscas.ac.cn>
    fpga: region: fix use-after-free in child_regions_with_firmware()

Qingshuang Fu <fuqingshuang@kylinos.cn>
    irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove

Wentao Liang <vulab@iscas.ac.cn>
    pNFS: Fix use-after-free in pnfs_update_layout()

Huacai Chen <chenhuacai@kernel.org>
    LoongArch: Report dying CPU to RCU in stop_this_cpu()

Doruk Tan Ozturk <doruk@0sec.ai>
    tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done

Michal Koutný <mkoutny@suse.com>
    blk-cgroup: fix UAF in __blkcg_rstat_flush()

Fan Wu <fanwu01@zju.edu.cn>
    hdlc_ppp: sync per-proto timers before freeing hdlc state

Tristan Madani <tristan@talencesecurity.com>
    gfs2: fix use-after-free in gfs2_qd_dealloc

Michael Bommarito <michael.bommarito@gmail.com>
    exfat: fix potential use-after-free in exfat_find_dir_entry()

Maciej W. Rozycki <macro@orcam.me.uk>
    MIPS: DEC: Prevent initial console buffer from landing in XKPHYS

Dawei Feng <dawei.feng@seu.edu.cn>
    bpf: use kvfree() for replaced sysctl write buffer

Wenjie Qi <qwjhust@gmail.com>
    f2fs: keep atomic write retry from zeroing original data

Yongpeng Yang <yangyongpeng@xiaomi.com>
    f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node()

Zhang Cen <rollkingzzc@gmail.com>
    f2fs: validate ACL entry sizes in f2fs_acl_from_disk()

Sunmin Jeong <s_min.jeong@samsung.com>
    f2fs: fix to round down start offset of fallocate for pin file

Wenjie Qi <qwjhust@gmail.com>
    f2fs: validate compress cache inode only when enabled

Junjie Cao <junjie.cao@intel.com>
    wifi: iwlwifi: mvm: fix race condition in PTP removal

Luka Gejak <luka.gejak@linux.dev>
    wifi: rtw88: usb: fix memory leaks on USB write failures

Luka Gejak <luka.gejak@linux.dev>
    wifi: rtw88: increase TX report timeout to fix race condition

Bitterblue Smith <rtl8821cerfe2@gmail.com>
    wifi: rtlwifi: rtl8821ae: Fix C2H bit location in RX descriptor

Jose Ignacio Tornos Martinez <jtornosm@redhat.com>
    wifi: ath11k: fix warning when unbinding

Zenm Chen <zenmchen@gmail.com>
    wifi: mt76: mt76x2u: Add support for ELECOM WDC-867SU3S

Shaomin Chen <eeesssooo020@gmail.com>
    keys: Pin request_key_auth payload in instantiate paths

Jarkko Sakkinen <jarkko@kernel.org>
    KEYS: fix overflow in keyctl_pkey_params_get_2()

Arnd Bergmann <arnd@arndb.de>
    err.h: use __always_inline on all error pointer helpers

Ian Bridges <icb@fastmail.org>
    fbdev: fix use-after-free in store_modes()

Koichiro Den <den@valinux.co.jp>
    NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR

Ruslan Valiyev <linuxoid@gmail.com>
    apparmor: fix use-after-free in rawdata dedup loop

Bryam Vargas <hexlabsecurity@proton.me>
    apparmor: mediate the implicit connect of TCP fast open sendmsg

Yiming Qian <yimingqian591@gmail.com>
    net: skmsg: preserve sg.copy across SG transforms

Doruk Tan Ozturk <doruk@0sec.ai>
    mac802154: llsec: add skb_cow_data() before in-place crypto

Kuniyuki Iwashima <kuniyu@google.com>
    af_unix: Set gc_in_progress to true in unix_gc().

Chaitanya Kulkarni <kch@nvidia.com>
    nvmet-tcp: fix race between ICReq handling and queue teardown

Konstantin Komarov <almaz.alexandrovich@paragon-software.com>
    ntfs3: reject direct userspace writes to reserved $LX* xattrs

Wongi Lee <qw3rtyp0@gmail.com>
    ipv4: account for fraggap on the paged allocation path

Eric Dumazet <edumazet@google.com>
    inet: add indirect call wrapper for getfrag() calls

Wongi Lee <qw3rtyp0@gmail.com>
    ipv6: account for fraggap on the paged allocation path

Sven Eckelmann <sven@narfation.org>
    batman-adv: tvlv: avoid race of cifsnotfound handler state

Sven Eckelmann <sven@narfation.org>
    batman-adv: tvlv: enforce 2-byte alignment

Sven Eckelmann <sven@narfation.org>
    batman-adv: dat: prevent false sharing between VLANs

Sven Eckelmann <sven@narfation.org>
    batman-adv: tt: track roam count per VID

Sven Eckelmann <sven@narfation.org>
    batman-adv: tt: don't merge change entries with different VIDs

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: handle overlapping packets

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: prevent parallel modifications of last_recv

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: annotate last_recv_time access with READ/WRITE_ONCE

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: restrict number of unacked list entries

Sven Eckelmann <sven@narfation.org>
    batman-adv: v: prevent OGM aggregation on disabled hardif

Sven Eckelmann <sven@narfation.org>
    batman-adv: frag: avoid underflow of TTL

Sven Eckelmann <sven@narfation.org>
    batman-adv: frag: ensure fragment is writable before modifying TTL

Sven Eckelmann <sven@narfation.org>
    batman-adv: fix (m|b)cast csum after decrementing TTL

Sven Eckelmann <sven@narfation.org>
    batman-adv: ensure bcast is writable before modifying TTL

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: initialize last_recv_time during init

Sven Eckelmann <sven@narfation.org>
    batman-adv: prevent ELP transmission interval underflow

Sven Eckelmann <sven@narfation.org>
    batman-adv: bla: annotate lasttime access with READ/WRITE_ONCE

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: add only finished tp_vars to lists

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: handle seqno wrap-around for fast recovery detection

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: fix fast recovery precondition

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: avoid window underflow

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: initialize dec_cwnd explicitly

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: initialize dup_acks explicitly

Sven Eckelmann <sven@narfation.org>
    batman-adv: tp_meter: keep unacked list in ascending ordered

Paul Moore <paul@paul-moore.com>
    selinux: fix overlayfs mmap() and mprotect() access checks

Paul Moore <paul@paul-moore.com>
    lsm: add backing_file LSM hooks

Amir Goldstein <amir73il@gmail.com>
    fs: prepare for adding LSM blob to backing_file

Pauli Virtanen <pav@iki.fi>
    Bluetooth: btmtk: accept too short WMT FUNC_CTRL events

Tristan Madani <tristan@talencesecurity.com>
    Bluetooth: btmtk: validate WMT event SKB length before struct access

Petr Machata <petrm@nvidia.com>
    Revert "ptp: add testptp mask test"

Sean Christopherson <seanjc@google.com>
    KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level

Paolo Bonzini <pbonzini@redhat.com>
    KVM: x86: Fix shadow paging use-after-free due to unexpected role

Christian Brauner <brauner@kernel.org>
    eventpoll: fix ep_remove struct eventpoll / struct file UAF

Christian Brauner <brauner@kernel.org>
    eventpoll: move epi_fget() up

Christian Brauner <brauner@kernel.org>
    eventpoll: rename ep_remove_safe() back to ep_remove()

Christian Brauner <brauner@kernel.org>
    eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}()

Christian Brauner <brauner@kernel.org>
    eventpoll: kill __ep_remove()

Christian Brauner <brauner@kernel.org>
    eventpoll: split __ep_remove()

Christian Brauner <brauner@kernel.org>
    eventpoll: use hlist_is_singular_node() in __ep_remove()

Christian Brauner <brauner@kernel.org>
    file: add fput() cleanup helper

Miklos Szeredi <mszeredi@redhat.com>
    virtiofs: fix UAF on submount umount

Ruslan Valiyev <linuxoid@gmail.com>
    media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si

Gil Portnoy <dddhkts1@gmail.com>
    ksmbd: reject non-VALID session in compound request branch

Yi Yang <yiyang13@huawei.com>
    vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write

Vasily Gorbik <gor@linux.ibm.com>
    scripts/sorttable: Fix endianness handling in build-time mcount sort

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Allow matches to functions before function entry

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Use normal sort if theres no relocs in the mcount section

Steven Rostedt <rostedt@goodmis.org>
    ftrace: Check against is_kernel_text() instead of kaslr_offset()

Steven Rostedt <rostedt@goodmis.org>
    ftrace: Test mcount_loc addr before calling ftrace_call_addr()

Guenter Roeck <linux@roeck-us.net>
    ftrace: Do not over-allocate ftrace memory

Steven Rostedt <rostedt@goodmis.org>
    ftrace: Have ftrace pages output reflect freed pages

Steven Rostedt <rostedt@goodmis.org>
    ftrace: Update the mcount_loc check of skipped entries

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Zero out weak functions in mcount_loc table

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Always use an array for the mcount_loc sorting

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Have mcount rela sort use direct values

Steven Rostedt <rostedt@goodmis.org>
    arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Use a structure of function pointers for elf helpers

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Get start/stop_mcount_loc from ELF file directly

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Move code from sorttable.h into sorttable.c

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Use uint64_t for mcount sorting

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Add helper functions for Elf_Sym

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Add helper functions for Elf_Shdr

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Add helper functions for Elf_Ehdr

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Convert Elf_Sym MACRO over to a union

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Replace Elf_Shdr Macro with a union

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Convert Elf_Ehdr to union

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Make compare_extable() into two functions

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Have the ORC code use the _r() functions to read

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Remove unneeded Elf_Rel

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Remove unused write functions

Steven Rostedt <rostedt@goodmis.org>
    scripts/sorttable: Remove unused macro defines

Joanne Koong <joannelkoong@gmail.com>
    fuse: re-lock request before replacing page cache folio

Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
    slimbus: qcom-ngd-ctrl: Balance pm_runtime enablement for NGD

Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
    slimbus: qcom-ngd-ctrl: Fix up platform_driver registration

David Howells <dhowells@redhat.com>
    rxrpc: Fix the ACK parser to extract the SACK table for parsing

Santosh Kalluri <santosh.kalluri129@gmail.com>
    net: phonet: free phonet_device after RCU grace period

Kuniyuki Iwashima <kuniyu@amazon.com>
    phonet: Pass net and ifindex to phonet_address_notify().

Kuniyuki Iwashima <kuniyu@amazon.com>
    phonet: Pass ifindex to fill_addr().

Davidlohr Bueso <dave@stgolabs.net>
    locking/rtmutex: Skip remove_waiter() when waiter is not enqueued

Dexuan Cui <decui@microsoft.com>
    Drivers: hv: vmbus: Improve the logic of reserving fb_mmio on Gen2 VMs

Ji'an Zhou <eilaimemedsnaimel@gmail.com>
    futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock

Thorsten Blum <thorsten.blum@linux.dev>
    hv: utils: handle and propagate errors in kvp_register

Tao Cui <cuitao@kylinos.cn>
    mptcp: pm: fix extra_subflows underflow on userspace PM subflow creation

Florian Westphal <fw@strlen.de>
    netfilter: nf_tables: always walk all pending catchall elements

Thadeu Lima de Souza Cascardo <cascardo@igalia.com>
    dlm: prevent NPD when writing a positive value to event_done

André Draszik <andre.draszik@linaro.org>
    regulator: core: fix locking in regulator_resolve_supply() error path

Bjoern Doebel <doebel@amazon.de>
    ring-buffer: Remove ring_buffer_read_prepare_sync()

Eduard Zingerman <eddyz87@gmail.com>
    selftests/bpf: Update comments find_equal_scalars->sync_linked_regs

Eduard Zingerman <eddyz87@gmail.com>
    selftests/bpf: Tests for per-insn sync_linked_regs() precision tracking

Eduard Zingerman <eddyz87@gmail.com>
    bpf: Remove mark_precise_scalar_ids()

Eduard Zingerman <eddyz87@gmail.com>
    bpf: Track equal scalars history on per-instruction level

Jiexun Wang <wangjiexun2025@gmail.com>
    af_unix: Reject SIOCATMARK on non-stream sockets

Varun R Mallya <varunrmallya@gmail.com>
    selftests/bpf: Add test to ensure kprobe_multi is not sleepable

Varun R Mallya <varunrmallya@gmail.com>
    bpf: Reject sleepable kprobe_multi programs at attach time

Mingyu Wang <25181214217@stu.xidian.edu.cn>
    agp/amd64: Fix broken error propagation in agp_amd64_probe()

Weiming Shi <bestswngs@gmail.com>
    net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()

Weiming Shi <bestswngs@gmail.com>
    i2c: stub: Reject I2C block transfers with invalid length

Lord Ulf Henrik Holmberg <henrik.holmberg@defensify.se>
    RDMA/bnxt_re: zero shared page before exposing to userspace

Dongli Zhang <dongli.zhang@oracle.com>
    KVM: VMX: Update SVI during runtime APICv activation

Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
    ARM: fix branch predictor hardening

Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
    ARM: fix hash_name() fault

Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
    ARM: allow __do_kernel_fault() to report execution of memory faults

Russell King (Oracle) <rmk+kernel@armlinux.org.uk>
    ARM: group is_permission_fault() with is_translation_fault()

Waiman Long <longman@redhat.com>
    debugobjects: Dont call fill_pool() in early boot hardirq context

Helen Koike <koike@igalia.com>
    debugobjects: Do not fill_pool() if pi_blocked_on

Sebastian Andrzej Siewior <bigeasy@linutronix.de>
    debugobjects: Use LD_WAIT_CONFIG instead of LD_WAIT_SLEEP

Sebastian Andrzej Siewior <bigeasy@linutronix.de>
    debugobjects: Allow to refill the pool before SYSTEM_SCHEDULING

Sven Eckelmann <sven@narfation.org>
    batman-adv: tt: prevent TVLV entry number overflow

Maíra Canal <mcanal@igalia.com>
    drm/v3d: Skip CSD when it has zeroed workgroups

Maíra Canal <mcanal@igalia.com>
    drm/v3d: Store the active job inside the queue's state

Eric Dumazet <edumazet@google.com>
    ip6_vti: set netns_immutable on the fallback device.

Harry Wentland <harry.wentland@amd.com>
    drm/amd/display: Bound VBIOS record-chain walk loops

Rajat Gupta <rajat.gupta@oss.qualcomm.com>
    net/sched: fix pedit partial COW leading to page cache corruption

Jann Horn <jannh@google.com>
    fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios


-------------

Diffstat:

 Documentation/userspace-api/ioctl/ioctl-number.rst |  463 ++++----
 Makefile                                           |    4 +-
 arch/arm/mm/alignment.c                            |    4 +
 arch/arm/mm/fault.c                                |   94 +-
 arch/arm64/Kconfig                                 |    1 +
 arch/loongarch/kernel/smp.c                        |    1 +
 arch/mips/dec/prom/console.c                       |    7 +-
 arch/mips/kernel/smp.c                             |    2 +
 arch/x86/kvm/hyperv.c                              |    5 +
 arch/x86/kvm/mmu/mmu.c                             |   28 +-
 arch/x86/kvm/svm/sev.c                             |    1 +
 arch/x86/kvm/vmx/vmx.c                             |    4 -
 arch/x86/kvm/x86.c                                 |    7 +
 block/blk-cgroup.c                                 |   21 +-
 drivers/base/memory.c                              |    3 +-
 drivers/bluetooth/btmtk.c                          |   15 +-
 drivers/char/agp/amd64-agp.c                       |    2 +-
 .../crypto/intel/qat/qat_common/adf_cfg_common.h   |   32 -
 drivers/crypto/intel/qat/qat_common/adf_cfg_user.h |   38 -
 .../crypto/intel/qat/qat_common/adf_common_drv.h   |    3 -
 drivers/crypto/intel/qat/qat_common/adf_ctl_drv.c  |  413 +-------
 drivers/crypto/intel/qat/qat_common/adf_dev_mgr.c  |   70 --
 drivers/fpga/of-fpga-region.c                      |    3 +-
 drivers/gpu/drm/amd/display/dc/bios/bios_parser.c  |   15 +-
 drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c |   27 +-
 .../drm/amd/display/dc/bios/bios_parser_helper.h   |    5 +
 drivers/gpu/drm/v3d/v3d_drv.h                      |    8 +-
 drivers/gpu/drm/v3d/v3d_gem.c                      |    5 +-
 drivers/gpu/drm/v3d/v3d_irq.c                      |   24 +-
 drivers/gpu/drm/v3d/v3d_sched.c                    |   36 +-
 drivers/hv/hv_kvp.c                                |   25 +-
 drivers/hv/vmbus_drv.c                             |   29 +-
 drivers/i2c/i2c-stub.c                             |    5 +
 drivers/infiniband/hw/bnxt_re/ib_verbs.c           |    2 +-
 drivers/irqchip/irq-imgpdc.c                       |    6 +
 drivers/media/test-drivers/vidtv/vidtv_mux.c       |    8 +-
 drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c |    8 +-
 drivers/net/ethernet/qualcomm/rmnet/rmnet_config.h |    1 +
 drivers/net/wan/hdlc_ppp.c                         |   15 +-
 drivers/net/wireless/ath/ath11k/dp.c               |    1 +
 drivers/net/wireless/intel/iwlwifi/mvm/ptp.c       |    2 +-
 drivers/net/wireless/mediatek/mt76/mt76x2/usb.c    |    1 +
 .../net/wireless/realtek/rtlwifi/rtl8821ae/trx.h   |    2 +-
 drivers/net/wireless/realtek/rtw88/tx.c            |    7 +-
 drivers/net/wireless/realtek/rtw88/usb.c           |   13 +-
 drivers/ntb/hw/epf/ntb_hw_epf.c                    |    3 +-
 drivers/nvme/target/tcp.c                          |   29 +-
 drivers/power/reset/linkstation-poweroff.c         |    2 +-
 drivers/regulator/core.c                           |   10 +-
 drivers/rpmsg/rpmsg_char.c                         |   15 +-
 drivers/slimbus/qcom-ngd-ctrl.c                    |   39 +-
 drivers/tty/serial/8250/8250_dw.c                  |    4 +-
 drivers/tty/serial/qcom_geni_serial.c              |    9 +-
 drivers/tty/vt/vc_screen.c                         |    2 +-
 drivers/video/fbdev/core/fbmem.c                   |   12 +
 drivers/video/fbdev/core/fbsysfs.c                 |   10 +-
 drivers/video/fbdev/core/modedb.c                  |    5 +-
 fs/dlm/lockspace.c                                 |    2 +-
 fs/eventpoll.c                                     |  142 +--
 fs/exfat/dir.c                                     |    4 +-
 fs/f2fs/acl.c                                      |   18 +-
 fs/f2fs/data.c                                     |   16 +-
 fs/f2fs/extent_cache.c                             |   19 +-
 fs/f2fs/file.c                                     |    9 +-
 fs/f2fs/inode.c                                    |    9 +-
 fs/file_table.c                                    |   46 +-
 fs/fuse/dev.c                                      |   23 +-
 fs/fuse/file.c                                     |    8 +-
 fs/gfs2/super.c                                    |    1 +
 fs/internal.h                                      |    3 +-
 fs/nfs/client.c                                    |    1 +
 fs/nfs/pnfs.c                                      |    2 +-
 fs/nfs/pnfs_nfs.c                                  |    4 +-
 fs/nfsd/nfs2acl.c                                  |   17 +-
 fs/nfsd/nfs3acl.c                                  |   17 +-
 fs/nfsd/nfs4recover.c                              |    3 +-
 fs/nfsd/nfs4xdr.c                                  |    3 +-
 fs/ntfs3/xattr.c                                   |   12 +
 fs/ocfs2/suballoc.c                                |   22 +
 fs/open.c                                          |    7 +-
 fs/overlayfs/file.c                                |    8 +-
 fs/smb/server/smb2pdu.c                            |    5 +
 fs/smb/server/smbacl.c                             |    4 +-
 include/keys/request_key_auth-type.h               |    2 +
 include/linux/bpf_verifier.h                       |    4 +
 include/linux/err.h                                |   12 +-
 include/linux/file.h                               |    2 +
 include/linux/fs.h                                 |   15 +-
 include/linux/kvm_host.h                           |    7 +-
 include/linux/lsm_audit.h                          |    2 +-
 include/linux/lsm_hook_defs.h                      |    5 +
 include/linux/lsm_hooks.h                          |    1 +
 include/linux/ring_buffer.h                        |    4 +-
 include/linux/security.h                           |   22 +
 include/linux/skmsg.h                              |   15 +-
 include/net/phonet/pn_dev.h                        |    2 +-
 include/net/tc_act/tc_pedit.h                      |    1 -
 kernel/bpf/cgroup.c                                |    2 +-
 kernel/bpf/verifier.c                              |  366 ++++---
 kernel/futex/requeue.c                             |    6 +
 kernel/locking/rtmutex.c                           |    3 +
 kernel/locking/rtmutex_api.c                       |    2 +-
 kernel/trace/bpf_trace.c                           |    4 +
 kernel/trace/ftrace.c                              |   68 +-
 kernel/trace/ring_buffer.c                         |   67 +-
 kernel/trace/trace.c                               |   14 +-
 kernel/trace/trace_kdb.c                           |    8 +-
 lib/debugobjects.c                                 |   56 +-
 net/9p/client.c                                    |    3 +-
 net/batman-adv/bat_iv_ogm.c                        |   11 +-
 net/batman-adv/bat_v.c                             |    1 +
 net/batman-adv/bat_v_ogm.c                         |   23 +-
 net/batman-adv/bridge_loop_avoidance.c             |   28 +-
 net/batman-adv/distributed-arp-table.c             |   12 +-
 net/batman-adv/fragmentation.c                     |   22 +-
 net/batman-adv/fragmentation.h                     |    3 +-
 net/batman-adv/netlink.c                           |   10 +-
 net/batman-adv/routing.c                           |   64 +-
 net/batman-adv/tp_meter.c                          |  115 +-
 net/batman-adv/translation-table.c                 |   32 +-
 net/batman-adv/tvlv.c                              |   69 +-
 net/batman-adv/types.h                             |   21 +-
 net/core/filter.c                                  |   27 +
 net/core/skmsg.c                                   |    2 +
 net/ipv4/ip_output.c                               |   20 +-
 net/ipv6/ip6_output.c                              |   22 +-
 net/ipv6/ip6_vti.c                                 |    1 +
 net/mac802154/llsec.c                              |   14 +
 net/mptcp/pm_userspace.c                           |   13 +-
 net/netfilter/nf_tables_api.c                      |    2 -
 net/phonet/pn_dev.c                                |   12 +-
 net/phonet/pn_netlink.c                            |   23 +-
 net/rxrpc/input.c                                  |   13 +-
 net/sched/act_pedit.c                              |   77 +-
 net/tipc/crypto.c                                  |    9 +
 net/tls/tls_sw.c                                   |    4 +
 net/unix/af_unix.c                                 |    3 +
 net/unix/garbage.c                                 |    2 +
 scripts/link-vmlinux.sh                            |    4 +-
 scripts/sorttable.c                                | 1119 +++++++++++++++++++-
 scripts/sorttable.h                                |  500 ---------
 security/apparmor/include/policy_unpack.h          |   19 +
 security/apparmor/lsm.c                            |   16 +-
 security/apparmor/policy.c                         |    8 +-
 security/keys/internal.h                           |    2 +
 security/keys/keyctl.c                             |   24 +-
 security/keys/keyctl_pkey.c                        |    9 +-
 security/keys/request_key_auth.c                   |   33 +-
 security/security.c                                |  110 ++
 security/selinux/hooks.c                           |  256 +++--
 security/selinux/include/objsec.h                  |   11 +
 .../selftests/bpf/prog_tests/kprobe_multi_test.c   |   34 +
 .../selftests/bpf/progs/kprobe_multi_sleepable.c   |   25 +
 .../selftests/bpf/progs/verifier_scalar_ids.c      |  333 ++++--
 .../selftests/bpf/progs/verifier_spill_fill.c      |    4 +-
 .../bpf/progs/verifier_subprog_precision.c         |    2 +-
 tools/testing/selftests/bpf/verifier/precise.c     |    4 +-
 tools/testing/selftests/ptp/testptp.c              |   19 +-
 158 files changed, 3649 insertions(+), 2242 deletions(-)

Re: [PATCH 6.6 000/175] 6.6.144-rc1 review

[Brett A C Sheffield]

# Librecast Test Results

020/020 [ OK ] liblcrq
010/010 [ OK ] libmld
120/120 [ OK ] liblibrecast

CPU/kernel: Linux auntie 6.6.144-rc1-g383d9611bec7 #1 SMP PREEMPT_DYNAMIC Thu Jul  2 19:35:43 -00 2026 x86_64 AMD Ryzen 9 9950X 16-Core Processor AuthenticAMD GNU/Linux

Tested-by: Brett A C Sheffield <bacs@librecast.net>

Re: [PATCH 6.6 000/175] 6.6.144-rc1 review

[Peter Schneider]

Am 02.07.2026 um 18:18 schrieb Greg Kroah-Hartman:
> This is the start of the stable review cycle for the 6.6.144 release.
> There are 175 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.

Builds, boots and works on my 2-socket Ivy Bridge Xeon E5-2697 v2 server. No dmesg oddities or regressions found.

Tested-by: Peter Schneider <pschneider1968@googlemail.com>


Beste Grüße,
Peter Schneider

-- 
Climb the mountain not to plant your flag, but to embrace the challenge,
enjoy the air and behold the view. Climb it so you can see the world,
not so the world can see you.                    -- David McCullough Jr.

OpenPGP:  0xA3828BD796CCE11A8CADE8866E3A92C92C3FF244
Download: https://www.peters-netzplatz.de/download/pschneider1968_pub.asc
https://keys.mailvelope.com/pks/lookup?op=get&search=pschneider1968@googlemail.com
https://keys.mailvelope.com/pks/lookup?op=get&search=pschneider1968@gmail.com

Re: [PATCH 6.6 000/175] 6.6.144-rc1 review

[Miguel Ojeda]

On Thu, 02 Jul 2026 18:18:21 +0200 Greg Kroah-Hartman <gregkh@linuxfoundation.org> wrote:
>
> This is the start of the stable review cycle for the 6.6.144 release.
> There are 175 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Sat, 04 Jul 2026 15:50:58 +0000.
> Anything received after that time might be too late.

Boot-tested under QEMU for Rust x86_64:

Tested-by: Miguel Ojeda <ojeda@kernel.org>

Thanks!

Cheers,
Miguel

Re: [PATCH 6.6 000/175] 6.6.144-rc1 review

[Ron Economos]

On 7/2/26 09:18, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.6.144 release.
> There are 175 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Sat, 04 Jul 2026 15:50:58 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> 	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.144-rc1.gz
> or in the git tree and branch at:
> 	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h

Built and booted successfully on RISC-V RV64 (HiFive Unmatched).

Tested-by: Ron Economos <re@w6rz.net>

Re: [PATCH 6.6 000/175] 6.6.144-rc1 review

[Shung-Hsi Yu]

On Thu, Jul 02, 2026 at 06:18:21PM +0200, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.6.144 release.
> There are 175 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Sat, 04 Jul 2026 15:50:58 +0000.
> Anything received after that time might be too late.

test_progs, test_progs-no_alu32, test_progs-cpuv4, test_maps, test_verifier
in BPF selftests all passes[1] on both x86_64 and aarch64.

Tested-by: Shung-Hsi Yu <shung-hsi.yu@suse.com>

1: https://github.com/kernel-patches/linux-stable/actions/runs/28642644980 

[...]

Re: [PATCH 6.6 000/175] 6.6.144-rc1 review

[Francesco Dolcini]

On Thu, Jul 02, 2026 at 06:18:21PM +0200, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.6.144 release.
> There are 175 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.

Tested-by: Francesco Dolcini <francesco.dolcini@toradex.com>

Re: [PATCH 6.6 000/175] 6.6.144-rc1 review

[Wentao Guan]

Hi,

Build failed in loongarch arch, which resolve in link:
https://lore.kernel.org/stable/20260703032401.857553-1-chenhuacai@loongson.cn/
https://lore.kernel.org/stable/2026070318-monotone-mug-74d6@gregkh/

arch/loongarch/kernel/smp.c: In function ‘stop_this_cpu’:
arch/loongarch/kernel/smp.c:616:9: error: implicit declaration of function ‘rcutree_report_cpu_dead’; did you mean ‘rcutree_prepare_cpu’? [-Werror=implicit-function-declaration]
  616 |         rcutree_report_cpu_dead();
      |         ^~~~~~~~~~~~~~~~~~~~~~~
      |         rcutree_prepare_cpu

Build tested in our x86,arm64,riscv config successfully without error.

Tested-by: Wentao Guan <guanwentao@uniontech.com>

BRs
Wentao Guan

Log:
Linux version 6.6.144-rc1-arm64-desktop-hwe-g383d9611bec7 (guanwentao@uos-PC) (aarch64-linux-gnu-gcc-12 (Deepin 12.3.0-17deepin8) 12.3.0, GNU ld (GNU Binutils for Deepin) 2.41) # SMP PREEMPT
Linux version 6.6.144-rc1-arm64-desktop-hwe-g383d9611bec7 (guanwentao@uos-PC) (aarch64-linux-gnu-gcc-12 (Deepin 12.3.0-17deepin8) 12.3.0, GNU ld (GNU Binutils for Deepin) 2.41) #2 SMP PREEMPT Fri Jul  3 12:05:13 CST 2026
Linux version 6.6.144-rc1-riscv64-desktop-hwe+ (guanwentao@uos-PC) (riscv64-linux-gnu-gcc-12 (Deepin 12.3.0-17deepin8) 12.3.0, GNU ld (GNU Binutils for Deepin) 2.41) # SMP
Linux version 6.6.144-rc1-riscv64-desktop-hwe+ (guanwentao@uos-PC) (riscv64-linux-gnu-gcc-12 (Deepin 12.3.0-17deepin8) 12.3.0, GNU ld (GNU Binutils for Deepin) 2.41) #4 SMP Fri Jul  3 15:53:55 CST 2026
Linux version 6.6.144-rc1-amd64-desktop-hwe-g383d9611bec7 (guanwentao@uos-PC) (gcc (Deepin 12.3.0-17deepin15) 12.3.0, GNU ld (GNU Binutils for Deepin) 2.41) # SMP PREEMPT_DYNAMIC
Linux version 6.6.144-rc1-amd64-desktop-hwe-g383d9611bec7 (guanwentao@uos-PC) (gcc (Deepin 12.3.0-17deepin15) 12.3.0, GNU ld (GNU Binutils for Deepin) 2.41) #1 SMP PREEMPT_DYNAMIC Fri Jul  3 11:47:09 CST 2026

Re: [PATCH 6.6 000/175] 6.6.144-rc1 review

[Greg KH]

On Fri, Jul 03, 2026 at 04:01:27PM +0800, Wentao Guan wrote:
> Hi,
> 
> Build failed in loongarch arch, which resolve in link:
> https://lore.kernel.org/stable/20260703032401.857553-1-chenhuacai@loongson.cn/
> https://lore.kernel.org/stable/2026070318-monotone-mug-74d6@gregkh/
> 
> arch/loongarch/kernel/smp.c: In function ‘stop_this_cpu’:
> arch/loongarch/kernel/smp.c:616:9: error: implicit declaration of function ‘rcutree_report_cpu_dead’; did you mean ‘rcutree_prepare_cpu’? [-Werror=implicit-function-declaration]
>   616 |         rcutree_report_cpu_dead();
>       |         ^~~~~~~~~~~~~~~~~~~~~~~
>       |         rcutree_prepare_cpu
> 
> Build tested in our x86,arm64,riscv config successfully without error.

Offending commit already dropped.

thans,

greg k-h

Re: [PATCH 6.6 000/175] 6.6.144-rc1 review

[Pavel Machek]

[-- Attachment #1: Type: text/plain, Size: 458 bytes --]

Hi!

> This is the start of the stable review cycle for the 6.6.144 release.
> There are 175 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.

https://gitlab.com/cip-project/cip-testing/linux-stable-rc-ci/-/tree/linux-6.6.y

Tested-by: Pavel Machek (CIP) <pavel@nabladev.com>

Best regards,
                                                                Pavel

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 195 bytes --]

Re: [PATCH 6.6 000/175] 6.6.144-rc1 review

[Mark Brown]

[-- Attachment #1: Type: text/plain, Size: 346 bytes --]

On Thu, Jul 02, 2026 at 06:18:21PM +0200, Greg Kroah-Hartman wrote:
> This is the start of the stable review cycle for the 6.6.144 release.
> There are 175 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.

Tested-by: Mark Brown <broonie@kernel.org>

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 488 bytes --]