This is the start of the stable review cycle for the 6.6.114 release. There are 105 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Thu, 23 Oct 2025 19:49:51 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.114-rc1... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 6.6.114-rc1

Niklas Cassel cassel@kernel.org PCI: tegra194: Reset BARs when running in PCIe endpoint mode

Siddharth Vadapalli s-vadapalli@ti.com PCI: j721e: Fix programming sequence of "strap" settings

Siddharth Vadapalli s-vadapalli@ti.com PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists

Jakub Acs acsjakub@amazon.de mm/ksm: fix flag-dropping behavior in ksm_madvise

Namjae Jeon linkinjeon@kernel.org ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL

Brian Norris briannorris@google.com PCI/sysfs: Ensure devices are powered for config reads (part 2)

Scott Mayhew smayhew@redhat.com nfsd: decouple the xprtsec policy check from check_nfsd_access()

Jedrzej Jagielski jedrzej.jagielski@intel.com ixgbevf: fix mailbox API compatibility by negotiating supported features

Jedrzej Jagielski jedrzej.jagielski@intel.com ixgbevf: fix getting link speed data for E610 devices

Piotr Kwapulinski piotr.kwapulinski@intel.com ixgbevf: Add support for Intel(R) E610 device

Piotr Kwapulinski piotr.kwapulinski@intel.com PCI: Add PCI_VDEVICE_SUB helper macro

Devarsh Thakkar devarsht@ti.com phy: cadence: cdns-dphy: Update calibration wait time for startup state machine

Theodore Ts'o tytso@mit.edu ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()

Jan Kara jack@suse.cz vfs: Don't leak disconnected dentries on umount

Chuck Lever chuck.lever@oracle.com NFSD: Define a proc_layoutcommit for the FlexFiles layout type

Shashank A P shashank.ap@samsung.com fs: quota: create dedicated workqueue for quota_release_work

Kemeng Shi shikemeng@huaweicloud.com quota: remove unneeded return value of register_quota_format

Xiao Liang shaw.leon@gmail.com padata: Reset next CPU when reorder sequence wraps around

Darrick J. Wong djwong@kernel.org xfs: use deferred intent items for reaping crosslinked blocks

Sean Nyekjaer sean@geanix.com iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended

Jean-Baptiste Maneyrol jean-baptiste.maneyrol@tdk.com iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure

Devarsh Thakkar devarsht@ti.com phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling

Tomi Valkeinen tomi.valkeinen@ideasonboard.com phy: cdns-dphy: Store hs_clk_rate and return it

Sean Nyekjaer sean@geanix.com iio: imu: inv_icm42600: Simplify pm_runtime setup

Bence Csókás csokas.bence@prolan.hu PM: runtime: Add new devm functions

Christoph Hellwig hch@lst.de xfs: fix log CRC mismatches between i386 and other architectures

Christoph Hellwig hch@lst.de xfs: rename the old_crc variable in xlog_recover_process

Sergey Bashirov sergeybashirov@gmail.com NFSD: Fix last write offset handling in layoutcommit

Sergey Bashirov sergeybashirov@gmail.com NFSD: Minor cleanup in layoutcommit processing

Sergey Bashirov sergeybashirov@gmail.com NFSD: Rework encoding and decoding of nfsd4_deviceid

Ryusuke Konishi konishi.ryusuke@gmail.com nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()

Darrick J. Wong djwong@kernel.org block: fix race between set_blocksize and read paths

Mark Rutland mark.rutland@arm.com arm64: errata: Apply workarounds for Neoverse-V3AE

Mark Rutland mark.rutland@arm.com arm64: cputype: Add Neoverse-V3AE definitions

Viacheslav Dubeyko slava@dubeyko.com hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()

Xing Guo higuoxing@gmail.com selftests: arg_parsing: Ensure data is flushed to disk before reading.

Thadeu Lima de Souza Cascardo cascardo@igalia.com HID: multitouch: fix name of Stylus input devices

Dmitry Torokhov dmitry.torokhov@gmail.com HID: hid-input: only ignore 0 battery events for digitizers

Jiaming Zhang r772577952@gmail.com ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card

Andrii Nakryiko andrii@kernel.org selftests/bpf: make arg_parsing.c more robust to crashes

Youssef Samir quic_yabdulra@quicinc.com accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()

Randy Dunlap rdunlap@infradead.org ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings

Vincent Guittot vincent.guittot@linaro.org sched/fair: Fix pelt lost idle time detection

Ingo Molnar mingo@kernel.org sched/balancing: Rename newidle_balance() => sched_balance_newidle()

Alok Tiwari alok.a.tiwari@oracle.com drm/rockchip: vop2: use correct destination rectangle height check

Timur Kristóf timur.kristof@gmail.com drm/amd/powerplay: Fix CIK shutdown temperature

Zhanjun Dong zhanjun.dong@intel.com drm/i915/guc: Skip communication warning on reset in progress

Cristian Ciocaltea cristian.ciocaltea@collabora.com ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit

Cristian Ciocaltea cristian.ciocaltea@collabora.com ASoC: nau8821: Generalize helper to clear IRQ status

Cristian Ciocaltea cristian.ciocaltea@collabora.com ASoC: nau8821: Cancel jdet_work before handling jack ejection

Christophe Leroy christophe.leroy@csgroup.eu ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec

Marek Vasut marek.vasut@mailbox.org drm/bridge: lt9211: Drop check for last nibble of version register

Fabian Vogt fvogt@suse.de riscv: kprobes: Fix probe address validation

Amit Chaudhary achaudhary@purestorage.com nvme-multipath: Skip nr_active increments in RETRY disposition

I Viswanath viswanathiyyappan@gmail.com net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset

Oleksij Rempel o.rempel@pengutronix.de net: usb: lan78xx: Add error handling to lan78xx_init_mac_address

Sabrina Dubroca sd@queasysnail.net tls: don't rely on tx_work during send()

Sabrina Dubroca sd@queasysnail.net tls: wait for pending async decryptions if tls_strp_msg_hold fails

Sabrina Dubroca sd@queasysnail.net tls: always set record_type in tls_process_cmsg

Sabrina Dubroca sd@queasysnail.net tls: wait for async encrypt in case of error during latter iterations of sendmsg

Sascha Hauer s.hauer@pengutronix.de net: tls: wait for async completion on last message

Sabrina Dubroca sd@queasysnail.net tls: trim encrypted message to match the plaintext on short splice

Alexey Simakov bigalex934@gmail.com tg3: prevent use of uninitialized remote_adv and local_adv variables

Eric Dumazet edumazet@google.com tcp: fix tcp_tso_should_defer() vs large RTT

Raju Rangoju Raju.Rangoju@amd.com amd-xgbe: Avoid spurious link down messages during interface toggle

Dmitry Safonov 0x7f454c46@gmail.com net/ip6_tunnel: Prevent perpetual tunnel growth

Linmao Li lilinmao@kylinos.cn r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H

Nicolas Dichtel nicolas.dichtel@6wind.com doc: fix seg6_flowlabel path

Yeounsu Moon yyyynoom@gmail.com net: dlink: handle dma_map_single() failure properly

Marc Kleine-Budde mkl@pengutronix.de can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()

Yuezhang Mo Yuezhang.Mo@sony.com dax: skip read lock assertion for read-only filesystems

Benjamin Tissoires bentiss@kernel.org HID: multitouch: fix sticky fingers

Kuen-Han Tsai khtsai@google.com usb: gadget: f_rndis: Refactor bind path to use __free()

Kuen-Han Tsai khtsai@google.com usb: gadget: f_ncm: Refactor bind path to use __free()

Kuen-Han Tsai khtsai@google.com usb: gadget: f_acm: Refactor bind path to use __free()

Kuen-Han Tsai khtsai@google.com usb: gadget: f_ecm: Refactor bind path to use __free()

Kuen-Han Tsai khtsai@google.com usb: gadget: Introduce free_usb_request helper

Kuen-Han Tsai khtsai@google.com usb: gadget: Store endpoint pointer in usb_request

Guoniu Zhou guoniu.zhou@nxp.com media: nxp: imx8-isi: m2m: Fix streaming cleanup on release

Laurent Pinchart laurent.pinchart@ideasonboard.com media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()

Kaustabh Chakraborty kauschluss@disroot.org drm/exynos: exynos7_drm_decon: remove ctx->suspended

Kaustabh Chakraborty kauschluss@disroot.org drm/exynos: exynos7_drm_decon: properly clear channels during bind

Kaustabh Chakraborty kauschluss@disroot.org drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions

Akhil P Oommen akhilpo@oss.qualcomm.com drm/msm/a6xx: Fix PDC sleep sequence

Konrad Dybcio konrad.dybcio@linaro.org drm/msm/adreno: De-spaghettify the use of memory barriers

Nam Cao namcao@linutronix.de eventpoll: Replace rwlock with spinlock

Huang Xiaojia huangxiaojia2@huawei.com epoll: Remove ep_scan_ready_list() in comments

Zenm Chen zenmchen@gmail.com Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1

Rafael J. Wysocki rafael.j.wysocki@intel.com cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay

Mario Limonciello mario.limonciello@amd.com drm/amd: Check whether secure display TA loaded successfully

Gui-Dong Han hanguidong02@gmail.com drm/amdgpu: use atomic functions with memory barriers for vm fault info

Tvrtko Ursulin tvrtko.ursulin@igalia.com drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies

Eugene Korenevsky ekorenevsky@aliyun.com cifs: parse_dfs_referrals: prevent oob on malformed input

Celeste Liu uwu@coelacanthus.name can: gs_usb: increase max interface to U8_MAX

Celeste Liu uwu@coelacanthus.name can: gs_usb: gs_make_candev(): populate net_device->dev_port

Filipe Manana fdmanana@suse.com btrfs: do not assert we found block group item when creating free space tree

Boris Burkov boris@bur.io btrfs: fix incorrect readahead expansion length

Filipe Manana fdmanana@suse.com btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running

Deepanshu Kartikey kartikey406@gmail.com ext4: detect invalid INLINE_DATA + EXTENTS flag combination

Zhang Yi yi.zhang@huawei.com ext4: wait for ongoing I/O to complete before freeing blocks

Zhang Yi yi.zhang@huawei.com jbd2: ensure that all ongoing I/O complete before freeing blocks

Jaegeuk Kim jaegeuk@kernel.org f2fs: fix wrong block mapping for multi-devices

Oliver Upton oliver.upton@linux.dev KVM: arm64: Prevent access to vCPU events before init

Yi Cong yicong@kylinos.cn r8152: add error handling in rtl8152_driver_init

Shuhao Fu sfual@cse.ust.hk smb: client: Fix refcount leak for cifs_sb_tlink

-------------

Diffstat:

Documentation/arch/arm64/silicon-errata.rst | 2 + Documentation/networking/seg6-sysctl.rst | 3 + Makefile | 4 +- arch/arm64/Kconfig | 1 + arch/arm64/include/asm/cputype.h | 2 + arch/arm64/kernel/cpu_errata.c | 1 + arch/arm64/kvm/arm.c | 6 + arch/riscv/kernel/probes/kprobes.c | 13 +- block/bdev.c | 17 ++ block/blk-zoned.c | 5 +- block/fops.c | 16 ++ block/ioctl.c | 6 + drivers/accel/qaic/qaic_control.c | 2 +- drivers/base/power/runtime.c | 44 ++++ drivers/bluetooth/btusb.c | 2 + drivers/cpufreq/cppc_cpufreq.c | 14 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 2 +- drivers/gpu/drm/amd/amdgpu/gmc_v7_0.c | 7 +- drivers/gpu/drm/amd/amdgpu/gmc_v8_0.c | 7 +- .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 3 +- drivers/gpu/drm/bridge/lontium-lt9211.c | 3 +- drivers/gpu/drm/exynos/exynos7_drm_decon.c | 98 ++++----- drivers/gpu/drm/i915/gt/uc/intel_guc_ct.c | 9 +- drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 38 ++-- drivers/gpu/drm/msm/adreno/a6xx_gmu.h | 6 + drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 10 +- drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 2 +- drivers/gpu/drm/scheduler/sched_main.c | 13 +- drivers/hid/hid-input.c | 5 +- drivers/hid/hid-multitouch.c | 28 +-- drivers/iio/imu/inv_icm42600/inv_icm42600.h | 8 +- drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 35 ++-- .../media/platform/nxp/imx8-isi/imx8-isi-core.h | 2 +- drivers/media/platform/nxp/imx8-isi/imx8-isi-hw.c | 2 +- drivers/media/platform/nxp/imx8-isi/imx8-isi-m2m.c | 225 +++++++++------------ .../media/platform/nxp/imx8-isi/imx8-isi-pipe.c | 2 +- drivers/net/can/m_can/m_can_platform.c | 2 +- drivers/net/can/usb/gs_usb.c | 23 +-- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 1 - drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 1 + drivers/net/ethernet/broadcom/tg3.c | 5 +- drivers/net/ethernet/dlink/dl2k.c | 23 ++- drivers/net/ethernet/intel/ixgbevf/defines.h | 6 +- drivers/net/ethernet/intel/ixgbevf/ipsec.c | 10 + drivers/net/ethernet/intel/ixgbevf/ixgbevf.h | 13 +- drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 46 ++++- drivers/net/ethernet/intel/ixgbevf/mbx.h | 8 + drivers/net/ethernet/intel/ixgbevf/vf.c | 194 +++++++++++++++--- drivers/net/ethernet/intel/ixgbevf/vf.h | 5 +- drivers/net/ethernet/realtek/r8169_main.c | 5 +- drivers/net/usb/lan78xx.c | 38 +++- drivers/net/usb/r8152.c | 7 +- drivers/nvme/host/multipath.c | 6 +- drivers/pci/controller/cadence/pci-j721e.c | 64 +++++- drivers/pci/controller/dwc/pcie-tegra194.c | 10 + drivers/pci/pci-sysfs.c | 10 +- drivers/phy/cadence/cdns-dphy.c | 133 +++++++++--- drivers/usb/gadget/function/f_acm.c | 42 ++-- drivers/usb/gadget/function/f_ecm.c | 48 ++--- drivers/usb/gadget/function/f_ncm.c | 78 +++---- drivers/usb/gadget/function/f_rndis.c | 85 ++++---- drivers/usb/gadget/udc/core.c | 3 + fs/btrfs/extent_io.c | 2 +- fs/btrfs/free-space-tree.c | 15 +- fs/btrfs/relocation.c | 13 +- fs/dax.c | 2 +- fs/dcache.c | 2 + fs/eventpoll.c | 145 +++---------- fs/ext4/ext4_jbd2.c | 11 +- fs/ext4/inode.c | 8 + fs/ext4/super.c | 17 +- fs/f2fs/data.c | 2 +- fs/hfsplus/unicode.c | 24 +++ fs/jbd2/transaction.c | 13 +- fs/nfsd/blocklayout.c | 5 +- fs/nfsd/blocklayoutxdr.c | 7 +- fs/nfsd/export.c | 60 +++++- fs/nfsd/export.h | 2 + fs/nfsd/flexfilelayout.c | 8 + fs/nfsd/flexfilelayoutxdr.c | 3 +- fs/nfsd/nfs4layouts.c | 1 - fs/nfsd/nfs4proc.c | 34 ++-- fs/nfsd/nfs4xdr.c | 14 +- fs/nfsd/nfsfh.c | 12 +- fs/nfsd/xdr4.h | 36 +++- fs/nilfs2/the_nilfs.c | 3 - fs/ocfs2/super.c | 6 +- fs/quota/dquot.c | 13 +- fs/quota/quota_v1.c | 3 +- fs/quota/quota_v2.c | 9 +- fs/smb/client/inode.c | 6 +- fs/smb/client/misc.c | 17 ++ fs/smb/client/smb2ops.c | 8 +- fs/smb/server/ksmbd_netlink.h | 3 +- fs/smb/server/server.h | 1 + fs/smb/server/smb2pdu.c | 4 + fs/smb/server/transport_ipc.c | 1 + fs/smb/server/transport_tcp.c | 67 +++--- fs/smb/server/transport_tcp.h | 1 + fs/xfs/libxfs/xfs_log_format.h | 30 ++- fs/xfs/scrub/reap.c | 19 +- fs/xfs/xfs_log.c | 8 +- fs/xfs/xfs_log_priv.h | 4 +- fs/xfs/xfs_log_recover.c | 34 +++- fs/xfs/xfs_ondisk.h | 2 + include/linux/cpufreq.h | 3 + include/linux/mm.h | 2 +- include/linux/pci.h | 14 ++ include/linux/pm_runtime.h | 4 + include/linux/quota.h | 2 +- include/linux/usb/gadget.h | 25 +++ include/net/ip_tunnels.h | 15 ++ kernel/padata.c | 6 +- kernel/sched/fair.c | 38 ++-- mm/shmem.c | 7 +- net/ipv4/ip_tunnel.c | 14 -- net/ipv4/tcp_output.c | 19 +- net/ipv6/ip6_tunnel.c | 3 +- net/tls/tls_main.c | 7 +- net/tls/tls_sw.c | 33 ++- rust/bindings/bindings_helper.h | 2 + rust/bindings/lib.rs | 1 + sound/firewire/amdtp-stream.h | 2 +- sound/soc/codecs/idt821034.c | 12 +- sound/soc/codecs/nau8821.c | 53 +++-- sound/usb/card.c | 10 +- .../testing/selftests/bpf/prog_tests/arg_parsing.c | 12 +- 128 files changed, 1549 insertions(+), 924 deletions(-)