[PATCH 6.6 00/72] 6.6.123-rc1 review

[Greg Kroah-Hartman]

This is the start of the stable review cycle for the 6.6.123 release.
There are 72 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Fri, 06 Feb 2026 14:38:23 +0000.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.123-rc1.gz
or in the git tree and branch at:
	git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Linux 6.6.123-rc1

Alexis Lothoré (eBPF Foundation) <alexis.lothore@xxxxxxxxxxx>
    bpf/selftests: test_select_reuseport_kern: Remove unused header

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Revert "net: Remove conditional threaded-NAPI wakeup based on task state."

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
    Revert "net: Allow to use SMP threads for backlog NAPI."

Alex Deucher <alexander.deucher@xxxxxxx>
    drm/amd/display: use udelay rather than fsleep

Eric Dumazet <edumazet@xxxxxxxxxx>
    ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()

Marios Makassikis <mmakassikis@xxxxxxxxxx>
    ksmbd: fix recursive locking in RPC handle list access

e.kubanski <e.kubanski@xxxxxxxxxxxxxxxxxxx>
    xsk: Fix race condition in AF_XDP generic RX path

Jon Doron <jond@xxxxxx>
    drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove

Philip Yang <Philip.Yang@xxxxxxx>
    drm/amdkfd: Don't use sw fault filter if retry cam enabled

Krzysztof Kozlowski <krzysztof.kozlowski@xxxxxxxxxxxxxxxx>
    pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
    mptcp: avoid dup SUB_CLOSED events after disconnect

Laveesh Bansal <laveeshb@xxxxxxxxxxxxxxxxx>
    writeback: fix 100% CPU usage when dirtytime_expire_interval is 0

Steven Rostedt <rostedt@xxxxxxxxxxx>
    perf: sched: Fix perf crash with new is_user_task() helper

Johan Hovold <johan@xxxxxxxxxx>
    drm/msm/a6xx: fix bogus hwcg register updates

Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
    pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver

Takashi Iwai <tiwai@xxxxxxx>
    ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check

Chen Ni <nichen@xxxxxxxxxxx>
    net/sched: act_ife: convert comma to semicolon

JP Kobryn <inwardvessel@xxxxxxxxx>
    btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate()

Robert McClinton <rbmccav@xxxxxxxxx>
    drm/radeon: delete radeon_fence_process in is_signaled, no deadlock

Nikola Z. Ivanov <zlatistiv@xxxxxxxxx>
    team: Move team device type change at the end of team_port_add

Kang Yang <quic_kangyang@xxxxxxxxxxx>
    wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode

Johannes Berg <johannes.berg@xxxxxxxxx>
    wifi: mac80211: move TDLS work to wiphy work

Yunseong Kim <ysk@xxxxxxxxxxx>
    ksmbd: Fix race condition in RPC handle list access

Srinivasan Shanmugam <srinivasan.shanmugam@xxxxxxx>
    drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV

Thomas Fourier <fourier.thomas@xxxxxxxxx>
    ksmbd: smbd: fix dma_unmap_sg() nents

Alexander Usyskin <alexander.usyskin@xxxxxxxxx>
    mei: trace: treat reg parameter as string

Mark Rutland <mark.rutland@xxxxxxx>
    arm64/fpsimd: signal: Fix restoration of SVE context

Mark Rutland <mark.rutland@xxxxxxx>
    arm64/fpsimd: signal: Consistently read FPSIMD context

Mark Rutland <mark.rutland@xxxxxxx>
    arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state

Pimyn Girgis <pimyn@xxxxxxxxxx>
    mm/kfence: randomize the freelist on initialization

Robin Murphy <robin.murphy@xxxxxxx>
    gpio: rockchip: Stop calling pinctrl for set_direction

Alex Deucher <alexander.deucher@xxxxxxx>
    drm/amdgpu/gfx11: fix wptr reset in KGQ init

Alex Deucher <alexander.deucher@xxxxxxx>
    drm/amdgpu/gfx10: fix wptr reset in KGQ init

Alex Deucher <alexander.deucher@xxxxxxx>
    drm/amdgpu/soc21: fix xclk for APUs

Johan Hovold <johan@xxxxxxxxxx>
    drm/imx/tve: fix probe device leak

Tamir Duberstein <tamird@xxxxxxxxxx>
    scripts: generate_rust_analyzer: Add compiler_builtins -> core dep

Jan Kara <jack@xxxxxxx>
    flex_proportions: make fprop_new_period() hardirq safe

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
    selftests: mptcp: join: fix local endp not being tracked

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
    selftests: mptcp: check subflow errors in close events

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
    selftests: mptcp: check no dup close events after error

Matthieu Baerts (NGI0) <matttbe@xxxxxxxxxx>
    mptcp: only reset subflow errors when propagated

Kohei Enju <kohei@xxxxxxxx>
    efivarfs: fix error propagation in efivar_entry_get()

Thomas Fourier <fourier.thomas@xxxxxxxxx>
    scsi: qla2xxx: edif: Fix dma_free_coherent() size

Martin Larsson <martin.larsson@xxxxxxxx>
    gpio: pca953x: mask interrupts in irq shutdown

Zhang Heng <zhangheng@xxxxxxxxxx>
    ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO

Haoxiang Li <lihaoxiang@xxxxxxxxxxxxxxxx>
    scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()

Fabio Estevam <festevam@xxxxxxxxx>
    ASoC: fsl: imx-card: Do not force slot width to sample width

Miguel Ojeda <ojeda@xxxxxxxxxx>
    rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target

Han Gao <gaohan@xxxxxxxxxxx>
    riscv: compat: fix COMPAT_UTS_MACHINE definition

Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxxxxxxxx>
    pinctrl: meson: mark the GPIO controller as sleeping

Sai Sree Kartheek Adivi <s-adivi@xxxxxx>
    dma/pool: distinguish between missing and exhausted atomic pools

Denis Sergeev <denserg.edu@xxxxxxxxx>
    gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler

Tagir Garaev <tgaraev653@xxxxxxxxx>
    ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion

Kery Qi <qikeyu2017@xxxxxxxxx>
    scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()

Jianbo Liu <jianbol@xxxxxxxxxx>
    net/mlx5e: Skip ESN replay window setup for IPsec crypto offload

Martin Kaiser <martin@xxxxxxxxx>
    net: bridge: fix static key check

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    nfc: nci: Fix race between rfkill and nci_unregister_device().

Gal Pressman <gal@xxxxxxxxxx>
    net/mlx5e: Account for netdev stats in ndo_get_stats64

Yafang Shao <laoar.shao@xxxxxxxxx>
    net/mlx5e: Report rx_discards_phy via rx_dropped

Mark Bloch <mbloch@xxxxxxxxxx>
    net/mlx5e: TC, delete flows only for existing peers

Jesse Brandeburg <jbrandeburg@xxxxxxxxxxxxxx>
    ice: stop counting UDP csum mismatch as rx_errors

Kuniyuki Iwashima <kuniyu@xxxxxxxxxx>
    nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().

Kery Qi <qikeyu2017@xxxxxxxxx>
    rocker: fix memory leak in rocker_world_port_post_fini()

Kery Qi <qikeyu2017@xxxxxxxxx>
    net: wwan: t7xx: fix potential skb->frags overflow in RX path

Fernando Fernandez Mancera <fmancera@xxxxxxx>
    ipv6: use the right ifindex when replying to icmpv6 from localhost

Zilin Guan <zilin@xxxxxxxxxx>
    net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()

Eric Dumazet <edumazet@xxxxxxxxxx>
    bonding: annotate data-races around slave->last_rx

Zilin Guan <zilin@xxxxxxxxxx>
    octeon_ep: Fix memory leak in octep_device_setup()

Justin Chen <justin.chen@xxxxxxxxxxxx>
    net: bcmasp: fix early exit leak with fixed phy

Marc Kleine-Budde <mkl@xxxxxxxxxxxxxx>
    can: gs_usb: gs_usb_receive_bulk_callback(): fix error message

Zilin Guan <zilin@xxxxxxxxxx>
    net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()

Jia-Hong Su <s11242586@xxxxxxxxx>
    Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work


-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm64/kernel/signal.c                         |  92 ++++++-----
 arch/riscv/include/asm/compat.h                    |   2 +-
 drivers/bluetooth/hci_ldisc.c                      |   4 +-
 drivers/gpio/gpio-pca953x.c                        |   2 +
 drivers/gpio/gpio-rockchip.c                       |   8 -
 drivers/gpio/gpiolib-acpi.c                        |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c         |   2 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c            |  10 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_virt.c           |   5 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_virt.h           |   3 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c             |   2 +-
 drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c             |   2 +-
 drivers/gpu/drm/amd/amdgpu/soc21.c                 |   8 +-
 drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c |   2 +-
 drivers/gpu/drm/imx/ipuv3/imx-tve.c                |  13 ++
 drivers/gpu/drm/msm/adreno/a6xx_gpu.c              |   2 -
 drivers/gpu/drm/radeon/radeon_fence.c              |   8 -
 drivers/misc/mei/mei-trace.h                       |  18 +--
 drivers/net/bonding/bond_main.c                    |  18 ++-
 drivers/net/bonding/bond_options.c                 |   8 +-
 drivers/net/can/usb/gs_usb.c                       |   4 +-
 drivers/net/ethernet/broadcom/asp2/bcmasp_intf.c   |   5 +-
 drivers/net/ethernet/intel/ice/ice_main.c          |   1 -
 drivers/net/ethernet/marvell/mvpp2/mvpp2_cls.c     |   2 +-
 .../net/ethernet/marvell/octeon_ep/octep_main.c    |   2 +-
 .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c   |   3 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |  19 ++-
 drivers/net/ethernet/mellanox/mlx5/core/en_tc.c    |  19 ++-
 .../mellanox/mlx5/core/esw/acl/ingress_lgcy.c      |   2 +-
 drivers/net/ethernet/rocker/rocker_main.c          |   5 +-
 drivers/net/tap.c                                  |   6 +-
 drivers/net/team/team.c                            |  23 ++-
 drivers/net/tun.c                                  |   6 +-
 drivers/net/wireless/ath/ath11k/dp_rx.c            |  10 +-
 drivers/net/wwan/t7xx/t7xx_hif_dpmaif_rx.c         |   9 +-
 drivers/pinctrl/meson/pinctrl-meson.c              |   2 +-
 drivers/pinctrl/pinctrl-rockchip.c                 |   9 +-
 drivers/pinctrl/qcom/Kconfig                       |  15 +-
 drivers/pinctrl/qcom/Makefile                      |   1 -
 drivers/pinctrl/qcom/pinctrl-lpass-lpi.c           |  17 ++
 drivers/pinctrl/qcom/pinctrl-sc7280-lpass-lpi.c    |   3 +
 drivers/pinctrl/qcom/pinctrl-sm8350-lpass-lpi.c    | 167 --------------------
 drivers/scsi/be2iscsi/be_mgmt.c                    |   1 +
 drivers/scsi/qla2xxx/qla_os.c                      |   2 +-
 drivers/target/sbp/sbp_target.c                    |   4 +-
 fs/btrfs/relocation.c                              |  13 ++
 fs/efivarfs/vars.c                                 |   2 +-
 fs/fs-writeback.c                                  |  14 +-
 fs/smb/server/mgmt/user_session.c                  |  21 ++-
 fs/smb/server/smb2pdu.c                            |   9 +-
 fs/smb/server/transport_ipc.c                      |  12 ++
 fs/smb/server/transport_rdma.c                     |  15 +-
 include/linux/ptr_ring.h                           |  17 +-
 include/linux/sched.h                              |   5 +
 include/linux/skb_array.h                          |  14 +-
 include/net/bonding.h                              |  13 +-
 include/net/nfc/nfc.h                              |   2 +
 include/net/xdp_sock.h                             |   3 -
 include/net/xsk_buff_pool.h                        |   2 +
 kernel/dma/pool.c                                  |   7 +-
 kernel/events/callchain.c                          |   2 +-
 kernel/events/core.c                               |   6 +-
 lib/flex_proportions.c                             |   5 +-
 mm/kfence/core.c                                   |  23 ++-
 net/bridge/br_input.c                              |   2 +-
 net/core/dev.c                                     | 172 +++++++--------------
 net/ipv6/icmp.c                                    |   4 +-
 net/mac80211/ieee80211_i.h                         |   4 +-
 net/mac80211/mlme.c                                |   7 +-
 net/mac80211/tdls.c                                |  11 +-
 net/mptcp/protocol.c                               |  13 +-
 net/nfc/core.c                                     |  27 +++-
 net/nfc/llcp_commands.c                            |  17 +-
 net/nfc/llcp_core.c                                |   4 +-
 net/nfc/nci/core.c                                 |   4 +-
 net/sched/act_ife.c                                |   6 +-
 net/sched/sch_generic.c                            |   4 +-
 net/xdp/xsk.c                                      |   6 +-
 net/xdp/xsk_buff_pool.c                            |   1 +
 scripts/Makefile.build                             |   2 +-
 scripts/generate_rust_analyzer.py                  |   2 +-
 sound/soc/amd/yc/acp6x-mach.c                      |   8 +
 sound/soc/fsl/imx-card.c                           |   1 -
 sound/soc/intel/boards/sof_es8336.c                |   2 +-
 sound/usb/endpoint.c                               |   3 +-
 .../bpf/progs/test_select_reuseport_kern.c         |   1 -
 tools/testing/selftests/net/mptcp/mptcp_join.sh    |  81 +++++++++-
 88 files changed, 576 insertions(+), 543 deletions(-)