6.6.85-rc2 review

This is the start of the stable review cycle for the 6.6.85 release. There are 76 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 28 Mar 2025 15:43:33 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.85-rc2.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.85-rc2

Sebastian Andrzej Siewior <[email protected]>
netfilter: nft_counter: Use u64_stats_t for statistic.

Benjamin Berg <[email protected]>
wifi: iwlwifi: mvm: ensure offloading TID queue exists

Miri Korenblit <[email protected]>
wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8

Shravya KN <[email protected]>
bnxt_en: Fix receive ring space parameters when XDP is active

Josef Bacik <[email protected]>
btrfs: make sure that WRITTEN is set on all metadata blocks

Dietmar Eggemann <[email protected]>
Revert "sched/core: Reduce cost of sched_move_task when config autogroup"

Justin Klaassen <[email protected]>
arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S

Mark Rutland <[email protected]>

    KVM: arm64: Eagerly switch ZCR_EL{1,2}

Mark Rutland <[email protected]>
KVM: arm64: Mark some header functions as inline

Mark Rutland <[email protected]>
KVM: arm64: Refactor exit handlers

Mark Rutland <[email protected]>
KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN

Mark Rutland <[email protected]>
KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN

Mark Rutland <[email protected]>
KVM: arm64: Remove host FPSIMD saving for non-protected KVM

Mark Rutland <[email protected]>
KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state

Fuad Tabba <[email protected]>
KVM: arm64: Calculate cptr_el2 traps on activating traps

Arthur Mongodin <[email protected]>
mptcp: Fix data stream corruption in the address announcement

Namjae Jeon <[email protected]>
ksmbd: fix incorrect validation for num_aces field of smb_acl

Mario Limonciello <[email protected]>
drm/amd/display: Use HW lock mgr for PSR1 when only one eDP

Martin Tsai <[email protected]>
drm/amd/display: should support dmub hw lock on Replay

David Rosca <[email protected]>
drm/amdgpu: Fix JPEG video caps max size for navi1x and raven

David Rosca <[email protected]>
drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size

qianyi liu <[email protected]>
drm/sched: Fix fence reference count leak

Nikita Zhandarovich <[email protected]>
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()

Saranya R <[email protected]>
soc: qcom: pdr: Fix the potential deadlock

Sven Eckelmann <[email protected]>
batman-adv: Ignore own maximum aggregation size during RX

Gavrilov Ilia <[email protected]>
xsk: fix an integer overflow in xp_create_and_assign_umem()

Ard Biesheuvel <[email protected]>

    efi/libstub: Avoid physical address 0x0 when doing random allocation

Geert Uytterhoeven <[email protected]>
ARM: shmobile: smp: Enforce shmobile_smp_* alignment

Stefan Eichenberger <[email protected]>
ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6

Shakeel Butt <[email protected]>
memcg: drain obj stock on cpu hotplug teardown

Ye Bin <[email protected]>
proc: fix UAF in proc_get_inode()

Zi Yan <[email protected]>
mm/migrate: fix shmem xarray update during migration

Raphael S. Carvalho <[email protected]>
mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT

Gu Bowen <[email protected]>
mmc: atmel-mci: Add missing clk_disable_unprepare()

Kamal Dasu <[email protected]>
mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops

Quentin Schulz <[email protected]>
arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou

Stefan Eichenberger <[email protected]>
arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card

Stefan Eichenberger <[email protected]>
arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card

Dan Carpenter <[email protected]>
accel/qaic: Fix integer overflow in qaic_validate_req()

Christian Eggers <[email protected]>
regulator: check that dummy regulator has been probed before using it

Christian Eggers <[email protected]>
regulator: dummy: force synchronous probing

E Shattow <[email protected]>
riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions

Maíra Canal <[email protected]>
drm/v3d: Don't run jobs that have errors flagged in its fence

Haibo Chen <[email protected]>
can: flexcan: disable transceiver during system PM

Haibo Chen <[email protected]>
can: flexcan: only change CAN state when link up in system PM

Vincent Mailhol <[email protected]>
can: ucan: fix out of bound read in strscpy() source

Biju Das <[email protected]>
can: rcar_canfd: Fix page entries in the AFL list

Andreas Kemnade <[email protected]>
i2c: omap: fix IRQ storms

Guillaume Nault <[email protected]>
Revert "gre: Fix IPv6 link-local address generation."

Lin Ma <[email protected]>
net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES

Justin Iurman <[email protected]>
net: lwtunnel: fix recursion loops

Dan Carpenter <[email protected]>
net: atm: fix use after free in lec_send()

Kuniyuki Iwashima <[email protected]>
ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().

Kuniyuki Iwashima <[email protected]>
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().

David Lechner <[email protected]>
ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX

Jeffrey Hugo <[email protected]>
accel/qaic: Fix possible data corruption in BOs > 2G

Arkadiusz Bokowy <[email protected]>
Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters

Dan Carpenter <[email protected]>
Bluetooth: Fix error code in chan_alloc_skb_cb()

Junxian Huang <[email protected]>
RDMA/hns: Fix wrong value of max_sge_rd

Junxian Huang <[email protected]>
RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()

Junxian Huang <[email protected]>
RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()

Junxian Huang <[email protected]>
RDMA/hns: Fix soft lockup during bt pages loop

Saravanan Vajravel <[email protected]>
RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path

Phil Elwell <[email protected]>
ARM: dts: bcm2711: Don't mark timer regs unconfigured

Arnd Bergmann <[email protected]>
ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP

Qasim Ijaz <[email protected]>
RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()

Kashyap Desai <[email protected]>
RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx

Yao Zi <[email protected]>
arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1

Phil Elwell <[email protected]>
ARM: dts: bcm2711: PL011 UARTs are actually r1p5

Peng Fan <[email protected]>
soc: imx8m: Unregister cpufreq and soc dev in cleanup path

Marek Vasut <[email protected]>
soc: imx8m: Use devm_* to simplify probe failure handling

Marek Vasut <[email protected]>
soc: imx8m: Remove global soc_uid

Cosmin Ratiu <[email protected]>
xfrm_output: Force software GSO only in tunnel mode

Alexandre Cassen <[email protected]>
xfrm: fix tunnel mode TX datapath in packet offload mode

Alexander Stein <[email protected]>
arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply

Joe Hattori <[email protected]>
firmware: imx-scu: fix OF node leak in .probe()

-------------

Diffstat:

 Makefile                                           |   4 +-
 arch/arm/boot/dts/broadcom/bcm2711.dtsi            |  11 +-
 arch/arm/boot/dts/nxp/imx/imx6qdl-apalis.dtsi      |  10 +-
 arch/arm/mach-davinci/Kconfig                      |   1 +
 arch/arm/mach-omap1/Kconfig                        |   1 +
 arch/arm/mach-shmobile/headsmp.S                   |   1 +
 .../boot/dts/freescale/imx8mm-verdin-dahlia.dtsi   |   6 +-
 .../arm64/boot/dts/freescale/imx8mp-tqma8mpql.dtsi |  16 +--
 .../boot/dts/freescale/imx8mp-verdin-dahlia.dtsi   |   6 +-
 .../boot/dts/rockchip/px30-ringneck-haikou.dts     |   2 +
 arch/arm64/boot/dts/rockchip/rk3399-nanopi-r4s.dts |   2 +-
 arch/arm64/boot/dts/rockchip/rk3566-lubancat-1.dts |   1 -
 arch/arm64/include/asm/kvm_host.h                  |   7 +-
 arch/arm64/include/asm/kvm_hyp.h                   |   1 +
 arch/arm64/kernel/fpsimd.c                         |  25 ----
 arch/arm64/kvm/arm.c                               |   1 -
 arch/arm64/kvm/fpsimd.c                            |  89 +++---------
 arch/arm64/kvm/hyp/entry.S                         |   5 +
 arch/arm64/kvm/hyp/include/hyp/switch.h            | 106 ++++++++++-----
 arch/arm64/kvm/hyp/nvhe/hyp-main.c                 |  15 +-
 arch/arm64/kvm/hyp/nvhe/pkvm.c                     |  29 +---
 arch/arm64/kvm/hyp/nvhe/switch.c                   | 112 ++++++++++-----
 arch/arm64/kvm/hyp/vhe/switch.c                    |  13 +-
 arch/arm64/kvm/reset.c                             |   3 +
 arch/riscv/boot/dts/starfive/jh7110-pinfunc.h      |   2 +-
 drivers/accel/qaic/qaic_data.c                     |   9 +-
 drivers/firmware/efi/libstub/randomalloc.c         |   4 +
 drivers/firmware/imx/imx-scu.c                     |   1 +
 drivers/gpu/drm/amd/amdgpu/nv.c                    |  20 +--
 drivers/gpu/drm/amd/amdgpu/soc15.c                 |  20 +--
 drivers/gpu/drm/amd/amdgpu/vi.c                    |  36 ++---
 .../gpu/drm/amd/display/dc/dce/dmub_hw_lock_mgr.c  |  15 ++
 drivers/gpu/drm/radeon/radeon_vce.c                |   2 +-
 drivers/gpu/drm/scheduler/sched_entity.c           |  11 +-
 drivers/gpu/drm/v3d/v3d_sched.c                    |   9 +-
 drivers/i2c/busses/i2c-omap.c                      |  26 +---
 drivers/infiniband/hw/bnxt_re/qplib_fp.c           |   2 -
 drivers/infiniband/hw/bnxt_re/qplib_rcfw.h         |   3 +-
 drivers/infiniband/hw/hns/hns_roce_hem.c           |  16 ++-
 drivers/infiniband/hw/hns/hns_roce_main.c          |   2 +-
 drivers/infiniband/hw/hns/hns_roce_qp.c            |  10 +-
 drivers/infiniband/hw/mlx5/ah.c                    |  14 +-
 drivers/mmc/host/atmel-mci.c                       |   4 +-
 drivers/mmc/host/sdhci-brcmstb.c                   |  10 ++
 drivers/net/can/flexcan/flexcan-core.c             |  18 ++-
 drivers/net/can/rcar/rcar_canfd.c                  |  28 ++--
 drivers/net/can/usb/ucan.c                         |  43 +++---
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |  10 +-
 drivers/net/wireless/intel/iwlwifi/fw/file.h       |   4 +-
 drivers/net/wireless/intel/iwlwifi/mvm/d3.c        |   9 +-
 drivers/net/wireless/intel/iwlwifi/mvm/fw.c        |  37 ++++-
 drivers/net/wireless/intel/iwlwifi/mvm/sta.c       |  28 ++++
 drivers/net/wireless/intel/iwlwifi/mvm/sta.h       |   3 +-
 drivers/regulator/core.c                           |  12 +-
 drivers/regulator/dummy.c                          |   2 +-
 drivers/soc/imx/soc-imx8m.c                        | 151 ++++++++++-----------
 drivers/soc/qcom/pdr_interface.c                   |   8 +-
 fs/btrfs/tree-checker.c                            |  30 ++--
 fs/btrfs/tree-checker.h                            |   1 +
 fs/proc/generic.c                                  |  10 +-
 fs/proc/inode.c                                    |   6 +-
 fs/proc/internal.h                                 |  14 ++
 fs/smb/server/smbacl.c                             |   5 +-
 include/linux/proc_fs.h                            |   7 +-
 include/net/bluetooth/hci.h                        |   2 +-
 kernel/sched/core.c                                |  22 +--
 mm/filemap.c                                       |  13 +-
 mm/memcontrol.c                                    |   9 ++
 mm/migrate.c                                       |  10 +-
 net/atm/lec.c                                      |   3 +-
 net/batman-adv/bat_iv_ogm.c                        |   3 +-
 net/batman-adv/bat_v_ogm.c                         |   3 +-
 net/bluetooth/6lowpan.c                            |   7 +-
 net/core/lwtunnel.c                                |  65 +++++++--
 net/core/neighbour.c                               |   1 +
 net/ipv6/addrconf.c                                |  15 +-
 net/ipv6/route.c                                   |   5 +-
 net/mptcp/options.c                                |   6 +-
 net/netfilter/nft_counter.c                        |  90 ++++++------
 net/xdp/xsk_buff_pool.c                            |   2 +-
 net/xfrm/xfrm_output.c                             |  43 +++++-
 81 files changed, 808 insertions(+), 600 deletions(-)