6.6.108-rc1 review

This is the start of the stable review cycle for the 6.6.108 release. There are 70 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 24 Sep 2025 19:23:52 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.108-rc1.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.108-rc1

Eric Hagberg <[email protected]>
Revert "loop: Avoid updating block size under exclusive owner"

Linus Torvalds <[email protected]>
minmax: add a few more MIN_T/MAX_T users

Linus Torvalds <[email protected]>
minmax: simplify and clarify min_t()/max_t() implementation

Linus Torvalds <[email protected]>
minmax: avoid overly complicated constant expressions in VM code

Matthieu Baerts (NGI0) <[email protected]>
mptcp: propagate shutdown to subflows when possible

Bruno Thomsen <[email protected]>
rtc: pcf2127: fix SPI command byte for PCF2131 backport

Vasant Hegde <[email protected]>
iommu/amd/pgtbl: Fix possible race while increase page table level

Mathias Nyman <[email protected]>
xhci: dbc: Fix full DbC transfer ring after several reconnects

Mathias Nyman <[email protected]>
xhci: dbc: decouple endpoint allocation from initialization

Johan Hovold <[email protected]>
phy: ti: omap-usb2: fix device leak at unbind

Rob Herring <[email protected]>
phy: Use device_get_match_data()

Matthieu Baerts (NGI0) <[email protected]>
selftests: mptcp: userspace pm: validate deny-join-id0 flag

Matthieu Baerts (NGI0) <[email protected]>
mptcp: pm: nl: announce deny-join-id0 flag

Sankararaman Jayaraman <[email protected]>
vmxnet3: unregister xdp rxq info in the reset path

Stefan Metzmacher <[email protected]>
smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path

Herbert Xu <[email protected]>
crypto: af_alg - Set merge to zero early in af_alg_sendmsg

Qi Xi <[email protected]>
drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path

Loic Poulain <[email protected]>
drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ

Colin Ian King <[email protected]>
ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message

Charles Keepax <[email protected]>
ASoC: wm8974: Correct PLL rate rounding

Charles Keepax <[email protected]>
ASoC: wm8940: Correct typo in control name

Charles Keepax <[email protected]>
ASoC: wm8940: Correct PLL rate rounding

Jens Axboe <[email protected]>
io_uring: include dying ring in task_work "should cancel" state

Jens Axboe <[email protected]>
io_uring: backport io_should_terminate_tw()

Praful Adiga <[email protected]>
ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx

Matthieu Baerts (NGI0) <[email protected]>
selftests: mptcp: avoid spurious errors on TCP disconnect

Matthieu Baerts (NGI0) <[email protected]>
selftests: mptcp: connect: catch IO errors on listen side

Håkon Bugge <[email protected]>
rds: ib: Increment i_fastreg_wrs before bailing out

Hans de Goede <[email protected]>
net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer

Maciej S. Szmigiero <[email protected]>
KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active

Thomas Fourier <[email protected]>
mmc: mvsdio: Fix dma_unmap_sg() nents value

Mohammad Rafi Shaik <[email protected]>
ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S

Krzysztof Kozlowski <[email protected]>
ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed

Mohammad Rafi Shaik <[email protected]>
ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface

Qu Wenruo <[email protected]>
btrfs: tree-checker: fix the incorrect inode ref size check

Eugene Koira <[email protected]>
iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()

Tao Cui <[email protected]>
LoongArch: Check the return value when creating kobj

Huacai Chen <[email protected]>
LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled

Tiezhu Yang <[email protected]>
LoongArch: Update help info of ARCH_STRICT_ALIGN

H. Nikolaus Schaller <[email protected]>
power: supply: bq27xxx: restrict no-battery detection to bq27000

H. Nikolaus Schaller <[email protected]>
power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery

Herbert Xu <[email protected]>
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg

Nathan Chancellor <[email protected]>
nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*

Stefan Metzmacher <[email protected]>
ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size

Namjae Jeon <[email protected]>
ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer

Duoming Zhou <[email protected]>
octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()

Duoming Zhou <[email protected]>
cnic: Fix use-after-free bugs in cnic_delete_task

Alexey Nepomnyashih <[email protected]>
net: liquidio: fix overflow in octeon_init_instr_queue()

Tariq Toukan <[email protected]>
Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"

Jakub Kicinski <[email protected]>
tls: make sure to abort the stream if headers are bogus

Kuniyuki Iwashima <[email protected]>

    tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().

Hangbin Liu <[email protected]>
bonding: don't set oif to bond dev when getting NS target destination

Jianbo Liu <[email protected]>
net/mlx5e: Harden uplink netdev access against device unbind

Jianbo Liu <[email protected]>
net/mlx5e: Consider aggregated port speed during rate configuration

Maciej Fijalkowski <[email protected]>
i40e: remove redundant memory barrier when cleaning Tx descs

Yeounsu Moon <[email protected]>
net: natsemi: fix rx_dropped double accounting on netif_rx() failure

Geliang Tang <[email protected]>
selftests: mptcp: sockopt: fix error messages

Matthieu Baerts (NGI0) <[email protected]>
mptcp: tfo: record 'deny join id0' info

Matthieu Baerts (NGI0) <[email protected]>
mptcp: set remote_deny_join_id0 on SYN recv

Hangbin Liu <[email protected]>
bonding: set random address only when slaves already exist

Jamie Bainbridge <[email protected]>
qed: Don't collect too many protection override GRC elements

Ioana Ciornei <[email protected]>
dpaa2-switch: fix buffer pool seeding for control traffic

Miaoqian Lin <[email protected]>
um: virtio_uml: Fix use-after-free after put_device in probe

Filipe Manana <[email protected]>
btrfs: fix invalid extref key setup when replaying dentry

Chen Ridong <[email protected]>
cgroup: split cgroup_destroy_wq into 3 workqueues

Geert Uytterhoeven <[email protected]>
pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch

Liao Yuanhong <[email protected]>
wifi: mac80211: fix incorrect type for ret

Lachlan Hodges <[email protected]>
wifi: mac80211: increase scan_ies_len for S1G

Takashi Sakamoto <[email protected]>
ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported

[email protected] <[email protected]>
wifi: wilc1000: avoid buffer overflow in WID string configuration

-------------

Diffstat:

 Makefile                                           |  4 +-
 arch/loongarch/Kconfig                             |  8 +-
 arch/loongarch/include/asm/acenv.h                 |  7 +-
 arch/loongarch/kernel/env.c                        |  2 +
 arch/um/drivers/virtio_uml.c                       |  6 +-
 arch/x86/kvm/svm/svm.c                             |  3 +-
 arch/x86/mm/pgtable.c                              |  2 +-
 crypto/af_alg.c                                    | 10 ++-
 drivers/block/loop.c                               | 38 ++-------
 drivers/edac/sb_edac.c                             |  4 +-
 drivers/gpu/drm/bridge/analogix/anx7625.c          |  6 +-
 .../gpu/drm/bridge/cadence/cdns-mhdp8546-core.c    |  6 +-
 drivers/gpu/drm/drm_color_mgmt.c                   |  2 +-
 drivers/iommu/amd/amd_iommu_types.h                |  1 +
 drivers/iommu/amd/io_pgtable.c                     | 26 +++++-
 drivers/iommu/intel/iommu.c                        |  7 +-
 drivers/md/dm-integrity.c                          |  6 +-
 drivers/mmc/host/mvsdio.c                          |  2 +-
 drivers/net/bonding/bond_main.c                    |  2 +-
 drivers/net/ethernet/broadcom/cnic.c               |  3 +-
 .../net/ethernet/cavium/liquidio/request_manager.c |  2 +-
 .../net/ethernet/freescale/dpaa2/dpaa2-switch.c    |  2 +-
 drivers/net/ethernet/intel/i40e/i40e_txrx.c        |  3 -
 .../net/ethernet/marvell/octeontx2/nic/otx2_ptp.c  |  2 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |  2 -
 drivers/net/ethernet/mellanox/mlx5/core/en_rep.c   | 27 +++++--
 drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c  | 85 ++++++++++++++++---
 drivers/net/ethernet/mellanox/mlx5/core/lib/mlx5.h | 15 +++-
 drivers/net/ethernet/natsemi/ns83820.c             | 13 ++-
 drivers/net/ethernet/qlogic/qed/qed_debug.c        |  7 +-
 drivers/net/ethernet/stmicro/stmmac/stmmac_main.c  |  2 +-
 drivers/net/vmxnet3/vmxnet3_drv.c                  | 10 +--
 drivers/net/wireless/microchip/wilc1000/wlan_cfg.c | 39 ++++++---
 drivers/net/wireless/microchip/wilc1000/wlan_cfg.h |  5 +-
 drivers/pcmcia/omap_cf.c                           |  8 +-
 drivers/phy/broadcom/phy-bcm-ns-usb3.c             |  9 +--
 drivers/phy/marvell/phy-berlin-usb.c               |  7 +-
 drivers/phy/ralink/phy-ralink-usb.c                | 10 +--
 drivers/phy/rockchip/phy-rockchip-pcie.c           | 11 +--
 drivers/phy/rockchip/phy-rockchip-usb.c            | 10 +--
 drivers/phy/ti/phy-omap-control.c                  |  9 +--
 drivers/phy/ti/phy-omap-usb2.c                     | 24 ++++--
 drivers/phy/ti/phy-ti-pipe3.c                      | 14 +---
 drivers/power/supply/bq27xxx_battery.c             |  4 +-
 drivers/rtc/rtc-pcf2127.c                          | 10 +--
 drivers/usb/host/xhci-dbgcap.c                     | 94 +++++++++++++++-------
 fs/btrfs/tree-checker.c                            |  4 +-
 fs/btrfs/tree-log.c                                |  2 +-
 fs/nilfs2/sysfs.c                                  |  4 +-
 fs/nilfs2/sysfs.h                                  |  8 +-
 fs/smb/client/smbdirect.c                          |  4 +-
 fs/smb/server/transport_rdma.c                     | 26 ++++--
 include/crypto/if_alg.h                            | 10 ++-
 include/linux/minmax.h                             | 26 ++++--
 include/linux/mlx5/driver.h                        |  1 +
 include/linux/pageblock-flags.h                    |  2 +-
 include/uapi/linux/mptcp.h                         |  6 +-
 io_uring/io_uring.c                                |  7 +-
 io_uring/io_uring.h                                | 13 +++
 io_uring/poll.c                                    |  3 +-
 io_uring/timeout.c                                 |  2 +-
 kernel/cgroup/cgroup.c                             | 43 ++++++++--
 net/ipv4/proc.c                                    |  2 +-
 net/ipv4/tcp.c                                     |  5 ++
 net/ipv6/proc.c                                    |  2 +-
 net/mac80211/driver-ops.h                          |  2 +-
 net/mac80211/main.c                                |  7 +-
 net/mptcp/options.c                                |  6 +-
 net/mptcp/pm_netlink.c                             |  7 ++
 net/mptcp/protocol.c                               | 16 ++++
 net/mptcp/subflow.c                                |  4 +
 net/rds/ib_frmr.c                                  | 20 +++--
 net/rfkill/rfkill-gpio.c                           |  4 +-
 net/tls/tls.h                                      |  1 +
 net/tls/tls_strp.c                                 | 14 ++--
 net/tls/tls_sw.c                                   |  3 +-
 sound/firewire/motu/motu-hwdep.c                   |  2 +-
 sound/pci/hda/patch_realtek.c                      |  1 +
 sound/soc/codecs/wm8940.c                          |  9 ++-
 sound/soc/codecs/wm8974.c                          |  8 +-
 sound/soc/qcom/qdsp6/audioreach.c                  |  1 +
 sound/soc/qcom/qdsp6/q6apm-lpass-dais.c            |  7 +-
 sound/soc/sof/intel/hda-stream.c                   |  2 +-
 tools/testing/selftests/net/mptcp/mptcp_connect.c  | 11 +--
 tools/testing/selftests/net/mptcp/mptcp_sockopt.c  | 16 ++--
 tools/testing/selftests/net/mptcp/pm_nl_ctl.c      |  7 ++
 tools/testing/selftests/net/mptcp/userspace_pm.sh  | 14 +++-
 87 files changed, 601 insertions(+), 300 deletions(-)