6.1.132-rc2 review

This is the start of the stable review cycle for the 6.1.132 release. There are 197 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 28 Mar 2025 15:43:27 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.132-rc2.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.1.132-rc2

Acs, Jakub <[email protected]>
block, bfq: fix re-introduced UAF in bic_set_bfqq()

Zi Yan <[email protected]>
mm/migrate: fix shmem xarray update during migration

Benjamin Berg <[email protected]>
wifi: iwlwifi: mvm: ensure offloading TID queue exists

Konstantin Komarov <[email protected]>
fs/ntfs3: Change new sparse cluster processing

Vitaly Prosyak <[email protected]>
drm/amdgpu: fix use-after-free bug

Justin Klaassen <[email protected]>
arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S

Yunfei Dong <[email protected]>
media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning

Jason-JH.Lin <[email protected]>
drm/mediatek: Fix coverity issue with unintentional integer overflow

Sebastian Andrzej Siewior <[email protected]>
netfilter: nft_counter: Use u64_stats_t for statistic.

Arthur Mongodin <[email protected]>
mptcp: Fix data stream corruption in the address announcement

Mario Limonciello <[email protected]>
drm/amd/display: Use HW lock mgr for PSR1 when only one eDP

Namjae Jeon <[email protected]>
ksmbd: fix incorrect validation for num_aces field of smb_acl

David Rosca <[email protected]>
drm/amdgpu: Fix JPEG video caps max size for navi1x and raven

Nikita Zhandarovich <[email protected]>
drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()

Saranya R <[email protected]>
soc: qcom: pdr: Fix the potential deadlock

Sven Eckelmann <[email protected]>
batman-adv: Ignore own maximum aggregation size during RX

Gavrilov Ilia <[email protected]>
xsk: fix an integer overflow in xp_create_and_assign_umem()

Ard Biesheuvel <[email protected]>

    efi/libstub: Avoid physical address 0x0 when doing random allocation

Geert Uytterhoeven <[email protected]>
ARM: shmobile: smp: Enforce shmobile_smp_* alignment

Shakeel Butt <[email protected]>
memcg: drain obj stock on cpu hotplug teardown

Ye Bin <[email protected]>
proc: fix UAF in proc_get_inode()

Gu Bowen <[email protected]>
mmc: atmel-mci: Add missing clk_disable_unprepare()

Kamal Dasu <[email protected]>
mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops

Stefan Eichenberger <[email protected]>
arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card

Christian Eggers <[email protected]>
regulator: check that dummy regulator has been probed before using it

Maíra Canal <[email protected]>
drm/v3d: Don't run jobs that have errors flagged in its fence

Haibo Chen <[email protected]>
can: flexcan: disable transceiver during system PM

Haibo Chen <[email protected]>
can: flexcan: only change CAN state when link up in system PM

Biju Das <[email protected]>
can: rcar_canfd: Fix page entries in the AFL list

Andreas Kemnade <[email protected]>
i2c: omap: fix IRQ storms

Guillaume Nault <[email protected]>
Revert "gre: Fix IPv6 link-local address generation."

Lin Ma <[email protected]>
net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES

Justin Iurman <[email protected]>
net: lwtunnel: fix recursion loops

Dan Carpenter <[email protected]>
net: atm: fix use after free in lec_send()

Kuniyuki Iwashima <[email protected]>
ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().

Kuniyuki Iwashima <[email protected]>
ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().

Dan Carpenter <[email protected]>
Bluetooth: Fix error code in chan_alloc_skb_cb()

Junxian Huang <[email protected]>
RDMA/hns: Fix wrong value of max_sge_rd

Junxian Huang <[email protected]>
RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()

Junxian Huang <[email protected]>
RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()

Junxian Huang <[email protected]>
RDMA/hns: Fix soft lockup during bt pages loop

Saravanan Vajravel <[email protected]>
RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path

Phil Elwell <[email protected]>
ARM: dts: bcm2711: Don't mark timer regs unconfigured

Arnd Bergmann <[email protected]>
ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP

Kashyap Desai <[email protected]>
RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx

Phil Elwell <[email protected]>
ARM: dts: bcm2711: PL011 UARTs are actually r1p5

Peng Fan <[email protected]>
soc: imx8m: Unregister cpufreq and soc dev in cleanup path

Marek Vasut <[email protected]>
soc: imx8m: Use devm_* to simplify probe failure handling

Marek Vasut <[email protected]>
soc: imx8m: Remove global soc_uid

Cosmin Ratiu <[email protected]>
xfrm_output: Force software GSO only in tunnel mode

Alexander Stein <[email protected]>
arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply

Joe Hattori <[email protected]>
firmware: imx-scu: fix OF node leak in .probe()

Paulo Alcantara <[email protected]>
smb: client: fix potential UAF in cifs_dump_full_key()

Maurizio Lombardi <[email protected]>
nvme-tcp: Fix a C2HTermReq error message

Alex Henrie <[email protected]>
HID: apple: disable Fn key handling on the Omoton KB066

Henrique Carvalho <[email protected]>
smb: client: Fix match_session bug preventing session reuse

Steve French <[email protected]>
smb3: add support for IAKerb

Zhenhua Huang <[email protected]>
arm64: mm: Populate vmemmap at the page level if not section aligned

Christophe JAILLET <[email protected]>
i2c: sis630: Fix an error handling path in sis630_probe()

Christophe JAILLET <[email protected]>
i2c: ali15x3: Fix an error handling path in ali15x3_probe()

Christophe JAILLET <[email protected]>
i2c: ali1535: Fix an error handling path in ali1535_probe()

Murad Masimov <[email protected]>
cifs: Fix integer overflow while processing closetimeo mount option

Murad Masimov <[email protected]>
cifs: Fix integer overflow while processing actimeo mount option

Murad Masimov <[email protected]>
cifs: Fix integer overflow while processing acdirmax mount option

Murad Masimov <[email protected]>
cifs: Fix integer overflow while processing acregmax mount option

Tamir Duberstein <[email protected]>
scripts: generate_rust_analyzer: add missing macros deps

Martin Rodriguez Reboredo <[email protected]>
scripts: generate_rust_analyzer: provide cfgs for core and alloc

Vinay Varma <[email protected]>
scripts: make rust-analyzer for out-of-tree modules

Asahi Lina <[email protected]>
scripts: generate_rust_analyzer: Handle sub-modules with no Makefile

Christophe JAILLET <[email protected]>
ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()

Ivan Abramov <[email protected]>
drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()

Charles Keepax <[email protected]>
ASoC: ops: Consistently treat platform_max as control value

George Stark <[email protected]>
leds: mlxreg: Use devm_mutex_init() for mutex initialization

Xueming Feng <[email protected]>
tcp: fix forever orphan socket caused by tcp_abort

Eric Dumazet <[email protected]>
tcp: fix races in tcp_abort()

Andrii Nakryiko <[email protected]>
lib/buildid: Handle memfd_secret() files in build_id_parse()

Matthew Maurer <[email protected]>
rust: Disallow BTF generation with Rust + LTO

Haoxiang Li <[email protected]>
qlcnic: fix memory leak issues in qlcnic_sriov_common.c

Thomas Mizrahi <[email protected]>
ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model

Varada Pavani <[email protected]>
clk: samsung: update PLL locktime for PLL142XX used on FSD platform

Mario Limonciello <[email protected]>
drm/amd/display: Fix slab-use-after-free on hdcp_work

Alex Hung <[email protected]>
drm/amd/display: Assign normalized_pix_clk when color depth = 14

Mario Limonciello <[email protected]>
drm/amd/display: Restore correct backlight brightness after a GPU reset

Imre Deak <[email protected]>
drm/dp_mst: Fix locking when skipping CSN before topology probing

Ville Syrjälä <[email protected]>
drm/atomic: Filter out redundant DPMS calls

Florent Revest <[email protected]>
x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes

Johan Hovold <[email protected]>
USB: serial: option: match on interface class for Telit FN990B

Fabio Porcedda <[email protected]>
USB: serial: option: fix Telit Cinterion FE990A name

Fabio Porcedda <[email protected]>
USB: serial: option: add Telit Cinterion FE990B compositions

Boon Khai Ng <[email protected]>
USB: serial: ftdi_sio: add support for Altera USB Blaster 3

Werner Sembach <[email protected]>
Input: i8042 - swap old quirk combination with new quirk for more devices

Werner Sembach <[email protected]>
Input: i8042 - swap old quirk combination with new quirk for several devices

Werner Sembach <[email protected]>
Input: i8042 - add required quirks for missing old boardnames

Werner Sembach <[email protected]>
Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ

Darrick J. Wong <[email protected]>
xfs: remove conditional building of rt geometry validator functions

Andrey Albershteyn <[email protected]>
xfs: reset XFS_ATTR_INCOMPLETE filter on node removal

Zhang Tianci <[email protected]>
xfs: update dir3 leaf block metadata after swap

Jiachen Zhang <[email protected]>
xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real

Long Li <[email protected]>
xfs: fix perag leak when growfs fails

Long Li <[email protected]>
xfs: add lock protection when remove perag from radix tree

Dave Chinner <[email protected]>
xfs: initialise di_crc in xfs_log_dinode

Darrick J. Wong <[email protected]>
xfs: force all buffers to be written during btree bulk load

Darrick J. Wong <[email protected]>
xfs: recompute growfsrtfree transaction reservation while growing rt volume

Darrick J. Wong <[email protected]>
xfs: remove unused fields from struct xbtree_ifakeroot

Darrick J. Wong <[email protected]>
xfs: don't allow overly small or large realtime volumes

Darrick J. Wong <[email protected]>
xfs: fix 32-bit truncation in xfs_compute_rextslog

Darrick J. Wong <[email protected]>
xfs: make rextslog computation consistent with mkfs

Darrick J. Wong <[email protected]>
xfs: don't leak recovered attri intent items

Christoph Hellwig <[email protected]>
xfs: consider minlen sized extents in xfs_rtallocate_extent_block

Darrick J. Wong <[email protected]>
xfs: convert rt bitmap extent lengths to xfs_rtbxlen_t

Darrick J. Wong <[email protected]>
xfs: move the xfs_rtbitmap.c declarations to xfs_rtbitmap.h

Darrick J. Wong <[email protected]>
xfs: reserve less log space when recovering log intent items

Dave Chinner <[email protected]>
xfs: use deferred frees for btree block freeing

Dave Chinner <[email protected]>
xfs: fix bounds check in xfs_defer_agfl_block()

Dave Chinner <[email protected]>
xfs: validate block number being freed before adding to xefi

Darrick J. Wong <[email protected]>
xfs: pass per-ag references to xfs_free_extent

Darrick J. Wong <[email protected]>
xfs: pass the xfs_bmbt_irec directly through the log intent code

Darrick J. Wong <[email protected]>
xfs: fix confusing xfs_extent_item variable names

Darrick J. Wong <[email protected]>
xfs: pass xfs_extent_free_item directly through the log intent code

Darrick J. Wong <[email protected]>
xfs: pass refcount intent directly through the log intent code

Pavel Begunkov <[email protected]>
io_uring: fix corner case forgetting to vunmap

Jens Axboe <[email protected]>
io_uring: don't attempt to mmap larger than what the user asks for

Jens Axboe <[email protected]>
io_uring: get rid of remap_pfn_range() for mapping rings/sqes

Jens Axboe <[email protected]>
mm: add nommu variant of vm_insert_pages()

Jens Axboe <[email protected]>
io_uring: add ring freeing helper

Jens Axboe <[email protected]>
io_uring: return error pointer from io_mem_alloc()

Ming Lei <[email protected]>
block: fix 'kmem_cache of name 'bio-108' already exists'

Thomas Zimmermann <[email protected]>
drm/nouveau: Do not override forced connector status

Matthieu Baerts (NGI0) <[email protected]>
mptcp: safety check before fallback

Arnd Bergmann <[email protected]>
x86/irq: Define trace events conditionally

Kan Liang <[email protected]>
perf/x86/intel: Use better start period for frequency mode

Miklos Szeredi <[email protected]>
fuse: don't truncate cached, mutated symlink

Hector Martin <[email protected]>
ASoC: tas2764: Set the SDOUT polarity correctly

Hector Martin <[email protected]>
ASoC: tas2764: Fix power control mask

Hector Martin <[email protected]>
ASoC: tas2770: Fix volume scale

Daniel Wagner <[email protected]>
nvme: only allow entering LIVE from CONNECTING state

Yu-Chun Lin <[email protected]>
sctp: Fix undefined behavior in left shift operation

Ruozhu Li <[email protected]>
nvmet-rdma: recheck queue state is LIVE in state lock in recv done

Maurizio Lombardi <[email protected]>
nvme-tcp: add basic support for the C2HTermReq PDU

Christopher Lentocha <[email protected]>
nvme-pci: quirk Acer FA100 for non-uniqueue identifiers

Stephan Gerhold <[email protected]>
net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors

Terry Cheong <[email protected]>
ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module

Vitaly Rodionov <[email protected]>
ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.

Kuninori Morimoto <[email protected]>
ASoC: rsnd: adjust convert rate limitation

Kuninori Morimoto <[email protected]>
ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()

Edson Juliano Drosdeck <[email protected]>
ALSA: hda/realtek: Limit mic boost on Positivo ARN50

Jan Beulich <[email protected]>
Xen/swiotlb: mark xen_swiotlb_fixup() __init

Daniel Lezcano <[email protected]>
thermal/cpufreq_cooling: Remove structure member documentation

Peter Oberparleiter <[email protected]>
s390/cio: Fix CHPID "configure" attribute caching

Mark Pearson <[email protected]>
platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles

Sybil Isabel Dorsett <[email protected]>
platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e

Jann Horn <[email protected]>

    sched: Clarify wake_up_q()'s write to task->wake_q.next

Alex Henrie <[email protected]>
HID: apple: fix up the F6 key on the Omoton KB066 keyboard

Ievgen Vovk <[email protected]>
HID: hid-apple: Apple Magic Keyboard a3203 USB-C support

Chia-Lin Kao (AceLan) <[email protected]>
HID: ignore non-functional sensor in HP 5MP Camera

Zhang Lixu <[email protected]>
HID: intel-ish-hid: Send clock sync message immediately after reset

Zhang Lixu <[email protected]>
HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell

Brahmajit Das <[email protected]>
vboxsf: fix building with GCC 15

Eric W. Biederman <[email protected]>
alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support

Paulo Alcantara <[email protected]>
smb: client: fix noisy when tree connecting to DFS interlink targets

Gannon Kolding <[email protected]>
ACPI: resource: IRQ override for Eluktronics MECH-17

Magnus Lindholm <[email protected]>
scsi: qla1280: Fix kernel oops when debug level > 2

Rik van Riel <[email protected]>
scsi: core: Use GFP_NOIO to avoid circular locking dependency

Chengen Du <[email protected]>
iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()

Joe Hattori <[email protected]>
powercap: call put_device() on an error path in powercap_register_control_type()

Andy Shevchenko <[email protected]>
hrtimers: Mark is_migration_base() with __always_inline

Daniel Wagner <[email protected]>
nvme-fc: go straight to connecting state when initializing

Carolina Jubran <[email protected]>
net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices

Jianbo Liu <[email protected]>
net/mlx5: Bridge, fix the crash caused by LAG state check

Ilya Maximets <[email protected]>
net: openvswitch: remove misbehaving actions length check

Guillaume Nault <[email protected]>
gre: Fix IPv6 link-local address generation.

Alexey Kashavkin <[email protected]>
netfilter: nft_exthdr: fix offset with ipv4_find_option()

Cong Wang <[email protected]>
net_sched: Prevent creation of classes with TC_H_ROOT

Dan Carpenter <[email protected]>
ipvs: prevent integer overflow in do_ip_vs_get_ctl()

Kohei Enju <[email protected]>
netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()

Hangbin Liu <[email protected]>
bonding: fix incorrect MAC address setting to receive NS messages

Amit Cohen <[email protected]>
net: switchdev: Convert blocking notification chain to a raw one

Taehee Yoo <[email protected]>
eth: bnxt: do not update checksum in bnxt_xdp_build_skb()

Wentao Liang <[email protected]>
net/mlx5: handle errors in mlx5_chains_create_table()

Michael Kelley <[email protected]>
Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()

Michael Kelley <[email protected]>
drm/hyperv: Fix address space leak when Hyper-V DRM device is removed

Breno Leitao <[email protected]>
netpoll: hold rcu read lock in __netpoll_send_skb()

Matt Johnston <[email protected]>
net: mctp i2c: Copy headers if cloned

Joseph Huang <[email protected]>
net: dsa: mv88e6xxx: Verify after ATU Load ops

Luiz Augusto von Dentz <[email protected]>
Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"

Luiz Augusto von Dentz <[email protected]>
Bluetooth: hci_event: Fix enabling passive scanning

Miri Korenblit <[email protected]>
wifi: cfg80211: cancel wiphy_work before freeing wiphy

Jun Yang <[email protected]>
sched: address a potential NULL pointer dereference in the GRED scheduler.

Nicklas Bo Jensen <[email protected]>
netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around

Grzegorz Nitka <[email protected]>
ice: fix memory leak in aRFS after reset

Sebastian Andrzej Siewior <[email protected]>
netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.

Artur Weber <[email protected]>
pinctrl: bcm281xx: Fix incorrect regmap max_registers value

Michael Kelley <[email protected]>
fbdev: hyperv_fb: iounmap() the correct memory when removing a device

Konstantin Komarov <[email protected]>
fs/ntfs3: Fix shift-out-of-bounds in ntfs_fill_super

Felix Moessbauer <[email protected]>
hrtimer: Use and report correct timerslack values for realtime tasks

Oleg Nesterov <[email protected]>
sched/isolation: Prevent boot crash when the boot CPU is nohz_full

David Woodhouse <[email protected]>
clockevents/drivers/i8253: Fix stop sequence for timer 0

-------------

Diffstat:

 Documentation/timers/no_hz.rst                     |   7 +-
 Makefile                                           |  15 +-
 arch/alpha/include/asm/elf.h                       |   6 +-
 arch/alpha/include/asm/pgtable.h                   |   2 +-
 arch/alpha/include/asm/processor.h                 |   8 +-
 arch/alpha/kernel/osf_sys.c                        |  11 +-
 arch/arm/boot/dts/bcm2711.dtsi                     |  11 +-
 arch/arm/mach-omap1/Kconfig                        |   1 +
 arch/arm/mach-shmobile/headsmp.S                   |   1 +
 .../boot/dts/freescale/imx8mm-verdin-dahlia.dtsi   |   6 +-
 .../arm64/boot/dts/freescale/imx8mp-tqma8mpql.dtsi |  16 +-
 arch/arm64/boot/dts/rockchip/rk3399-nanopi-r4s.dts |   2 +-
 arch/arm64/mm/mmu.c                                |   5 +-
 arch/x86/events/intel/core.c                       |  85 ++++++++++
 arch/x86/kernel/cpu/microcode/amd.c                |   2 +-
 arch/x86/kernel/cpu/mshyperv.c                     |  11 --
 arch/x86/kernel/irq.c                              |   2 +
 block/bfq-cgroup.c                                 |   2 +-
 block/bio.c                                        |   2 +-
 drivers/acpi/resource.c                            |   6 +
 drivers/clk/samsung/clk-pll.c                      |   7 +-
 drivers/clocksource/i8253.c                        |  36 +++--
 drivers/firmware/efi/libstub/randomalloc.c         |   4 +
 drivers/firmware/imx/imx-scu.c                     |   1 +
 drivers/firmware/iscsi_ibft.c                      |   5 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_mn.c             |  20 ++-
 drivers/gpu/drm/amd/amdgpu/nv.c                    |   2 +-
 drivers/gpu/drm/amd/amdgpu/soc15.c                 |   2 +-
 drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c  |  10 ++
 .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c |   1 +
 drivers/gpu/drm/amd/display/dc/core/dc_resource.c  |   7 +-
 .../gpu/drm/amd/display/dc/dce/dmub_hw_lock_mgr.c  |  12 ++
 drivers/gpu/drm/display/drm_dp_mst_topology.c      |  40 +++--
 drivers/gpu/drm/drm_atomic_uapi.c                  |   4 +
 drivers/gpu/drm/drm_connector.c                    |   4 +
 drivers/gpu/drm/gma500/mid_bios.c                  |   5 +
 drivers/gpu/drm/hyperv/hyperv_drm_drv.c            |   2 +
 drivers/gpu/drm/mediatek/mtk_drm_gem.c             |   9 +-
 drivers/gpu/drm/mediatek/mtk_drm_plane.c           |  13 +-
 drivers/gpu/drm/nouveau/nouveau_connector.c        |   1 -
 drivers/gpu/drm/radeon/radeon_vce.c                |   2 +-
 drivers/gpu/drm/v3d/v3d_sched.c                    |   9 +-
 drivers/hid/hid-apple.c                            |  13 +-
 drivers/hid/hid-ids.h                              |   2 +
 drivers/hid/hid-quirks.c                           |   1 +
 drivers/hid/intel-ish-hid/ipc/ipc.c                |  15 +-
 drivers/hid/intel-ish-hid/ishtp/ishtp-dev.h        |   2 +
 drivers/hv/vmbus_drv.c                             |  13 ++
 drivers/i2c/busses/i2c-ali1535.c                   |  12 +-
 drivers/i2c/busses/i2c-ali15x3.c                   |  12 +-
 drivers/i2c/busses/i2c-omap.c                      |  26 +--
 drivers/i2c/busses/i2c-sis630.c                    |  12 +-
 drivers/infiniband/hw/bnxt_re/qplib_fp.c           |   2 -
 drivers/infiniband/hw/bnxt_re/qplib_rcfw.h         |   3 +-
 drivers/infiniband/hw/hns/hns_roce_hem.c           |  16 +-
 drivers/infiniband/hw/hns/hns_roce_main.c          |   2 +-
 drivers/infiniband/hw/hns/hns_roce_qp.c            |  10 +-
 drivers/input/serio/i8042-acpipnpio.h              | 111 +++++++------
 drivers/leds/leds-mlxreg.c                         |  16 +-
 .../mediatek/vcodec/vdec/vdec_vp8_req_if.c         |  10 +-
 drivers/mmc/host/atmel-mci.c                       |   4 +-
 drivers/mmc/host/sdhci-brcmstb.c                   |  10 ++
 drivers/net/bonding/bond_options.c                 |  55 ++++++-
 drivers/net/can/flexcan/flexcan-core.c             |  18 ++-
 drivers/net/can/rcar/rcar_canfd.c                  |  28 ++--
 drivers/net/dsa/mv88e6xxx/chip.c                   |  59 +++++--
 drivers/net/ethernet/broadcom/bnxt/bnxt.c          |   3 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c      |  11 +-
 drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.h      |   3 +-
 drivers/net/ethernet/intel/ice/ice_arfs.c          |   2 +-
 .../ethernet/mellanox/mlx5/core/en/rep/bridge.c    |  12 +-
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |   6 +-
 .../ethernet/mellanox/mlx5/core/lib/fs_chains.c    |   5 +
 .../ethernet/qlogic/qlcnic/qlcnic_sriov_common.c   |   8 +-
 drivers/net/mctp/mctp-i2c.c                        |   5 +
 drivers/net/wireless/intel/iwlwifi/mvm/d3.c        |   9 +-
 drivers/net/wireless/intel/iwlwifi/mvm/sta.c       |  28 ++++
 drivers/net/wireless/intel/iwlwifi/mvm/sta.h       |   3 +-
 drivers/net/wwan/mhi_wwan_mbim.c                   |   2 +-
 drivers/nvme/host/core.c                           |   2 -
 drivers/nvme/host/fc.c                             |   3 +-
 drivers/nvme/host/pci.c                            |   2 +
 drivers/nvme/host/tcp.c                            |  43 +++++
 drivers/nvme/target/rdma.c                         |  33 ++--
 drivers/pinctrl/bcm/pinctrl-bcm281xx.c             |   2 +-
 drivers/platform/x86/thinkpad_acpi.c               |  50 ++++--
 drivers/powercap/powercap_sys.c                    |   3 +-
 drivers/regulator/core.c                           |  12 +-
 drivers/s390/cio/chp.c                             |   3 +-
 drivers/scsi/qla1280.c                             |   2 +-
 drivers/scsi/scsi_scan.c                           |   2 +-
 drivers/soc/imx/soc-imx8m.c                        | 151 ++++++++----------
 drivers/soc/qcom/pdr_interface.c                   |   8 +-
 drivers/thermal/cpufreq_cooling.c                  |   2 -
 drivers/usb/serial/ftdi_sio.c                      |  14 ++
 drivers/usb/serial/ftdi_sio_ids.h                  |  13 ++
 drivers/usb/serial/option.c                        |  48 ++++--
 drivers/video/fbdev/hyperv_fb.c                    |   2 +-
 drivers/xen/swiotlb-xen.c                          |   2 +-
 fs/fuse/dir.c                                      |   2 +-
 fs/namei.c                                         |  24 ++-
 fs/ntfs3/attrib.c                                  | 176 ++++++++++++++-------
 fs/ntfs3/file.c                                    | 151 ++++--------------
 fs/ntfs3/frecord.c                                 |   2 +-
 fs/ntfs3/index.c                                   |   4 +-
 fs/ntfs3/inode.c                                   |  12 +-
 fs/ntfs3/ntfs_fs.h                                 |   9 +-
 fs/ntfs3/super.c                                   |  68 +++++---
 fs/proc/base.c                                     |   9 +-
 fs/proc/generic.c                                  |  10 +-
 fs/proc/inode.c                                    |   6 +-
 fs/proc/internal.h                                 |  14 ++
 fs/select.c                                        |  11 +-
 fs/smb/client/asn1.c                               |   2 +
 fs/smb/client/cifs_spnego.c                        |   4 +-
 fs/smb/client/cifsglob.h                           |   4 +
 fs/smb/client/connect.c                            |  16 +-
 fs/smb/client/fs_context.c                         |  14 +-
 fs/smb/client/ioctl.c                              |   6 +-
 fs/smb/client/sess.c                               |   3 +-
 fs/smb/client/smb2pdu.c                            |   4 +-
 fs/smb/server/smbacl.c                             |   5 +-
 fs/vboxsf/super.c                                  |   3 +-
 fs/xfs/libxfs/xfs_ag.c                             |  45 ++++--
 fs/xfs/libxfs/xfs_ag.h                             |   3 +
 fs/xfs/libxfs/xfs_alloc.c                          |  70 ++++----
 fs/xfs/libxfs/xfs_alloc.h                          |  20 ++-
 fs/xfs/libxfs/xfs_attr.c                           |   6 +-
 fs/xfs/libxfs/xfs_bmap.c                           | 121 +++++++-------
 fs/xfs/libxfs/xfs_bmap.h                           |   5 +-
 fs/xfs/libxfs/xfs_bmap_btree.c                     |   8 +-
 fs/xfs/libxfs/xfs_btree_staging.c                  |   4 +-
 fs/xfs/libxfs/xfs_btree_staging.h                  |   6 -
 fs/xfs/libxfs/xfs_da_btree.c                       |   7 +
 fs/xfs/libxfs/xfs_format.h                         |   2 +-
 fs/xfs/libxfs/xfs_ialloc.c                         |  24 ++-
 fs/xfs/libxfs/xfs_ialloc_btree.c                   |   6 +-
 fs/xfs/libxfs/xfs_log_recover.h                    |  22 +++
 fs/xfs/libxfs/xfs_refcount.c                       | 116 +++++++-------
 fs/xfs/libxfs/xfs_refcount.h                       |   4 +-
 fs/xfs/libxfs/xfs_refcount_btree.c                 |   9 +-
 fs/xfs/libxfs/xfs_rtbitmap.c                       |   2 +
 fs/xfs/libxfs/xfs_rtbitmap.h                       |  83 ++++++++++
 fs/xfs/libxfs/xfs_sb.c                             |  20 ++-
 fs/xfs/libxfs/xfs_sb.h                             |   2 +
 fs/xfs/libxfs/xfs_types.h                          |  13 ++
 fs/xfs/scrub/repair.c                              |   3 +-
 fs/xfs/scrub/rtbitmap.c                            |   3 +-
 fs/xfs/xfs_attr_item.c                             |  16 +-
 fs/xfs/xfs_bmap_item.c                             |  85 ++++------
 fs/xfs/xfs_buf.c                                   |  44 +++++-
 fs/xfs/xfs_buf.h                                   |   1 +
 fs/xfs/xfs_extfree_item.c                          | 108 +++++++------
 fs/xfs/xfs_fsmap.c                                 |   2 +-
 fs/xfs/xfs_fsops.c                                 |   5 +-
 fs/xfs/xfs_inode_item.c                            |   3 +
 fs/xfs/xfs_refcount_item.c                         |  68 ++++----
 fs/xfs/xfs_reflink.c                               |   7 +-
 fs/xfs/xfs_rmap_item.c                             |   6 +-
 fs/xfs/xfs_rtalloc.c                               |  14 +-
 fs/xfs/xfs_rtalloc.h                               |  73 ---------
 fs/xfs/xfs_trace.h                                 |  15 +-
 include/linux/fs.h                                 |   2 +
 include/linux/i8253.h                              |   1 -
 include/linux/io_uring_types.h                     |   5 +
 include/linux/nvme-tcp.h                           |   2 +
 include/linux/proc_fs.h                            |   7 +-
 include/net/bluetooth/hci_core.h                   | 108 +++++--------
 include/sound/soc.h                                |   5 +-
 include/uapi/linux/io_uring.h                      |   1 +
 init/Kconfig                                       |   2 +-
 io_uring/io_uring.c                                | 163 ++++++++++++++++---
 io_uring/io_uring.h                                |   2 +
 kernel/sched/core.c                                |  13 +-
 kernel/sys.c                                       |   2 +
 kernel/time/hrtimer.c                              |  40 ++---
 lib/buildid.c                                      |   5 +
 mm/memcontrol.c                                    |   9 ++
 mm/migrate.c                                       |  16 +-
 mm/nommu.c                                         |   7 +
 net/atm/lec.c                                      |   3 +-
 net/batman-adv/bat_iv_ogm.c                        |   3 +-
 net/batman-adv/bat_v_ogm.c                         |   3 +-
 net/bluetooth/6lowpan.c                            |   7 +-
 net/bluetooth/hci_core.c                           |  10 +-
 net/bluetooth/hci_event.c                          |  37 +++--
 net/bluetooth/iso.c                                |   6 -
 net/bluetooth/l2cap_core.c                         |  12 +-
 net/bluetooth/rfcomm/core.c                        |   6 -
 net/bluetooth/sco.c                                |  12 +-
 net/core/lwtunnel.c                                |  65 ++++++--
 net/core/neighbour.c                               |   1 +
 net/core/netpoll.c                                 |   9 +-
 net/ipv4/tcp.c                                     |  19 ++-
 net/ipv6/route.c                                   |   5 +-
 net/mptcp/options.c                                |   6 +-
 net/mptcp/protocol.h                               |   2 +
 net/netfilter/ipvs/ip_vs_ctl.c                     |   8 +-
 net/netfilter/nf_conncount.c                       |   6 +-
 net/netfilter/nft_counter.c                        |  90 +++++------
 net/netfilter/nft_ct.c                             |   6 +-
 net/netfilter/nft_exthdr.c                         |  10 +-
 net/openvswitch/flow_netlink.c                     |  15 +-
 net/sched/sch_api.c                                |   6 +
 net/sched/sch_gred.c                               |   3 +-
 net/sctp/stream.c                                  |   2 +-
 net/switchdev/switchdev.c                          |  25 ++-
 net/wireless/core.c                                |   7 +
 net/xdp/xsk_buff_pool.c                            |   2 +-
 net/xfrm/xfrm_output.c                             |   2 +-
 rust/Makefile                                      |   7 +-
 scripts/generate_rust_analyzer.py                  |  64 ++++++--
 sound/pci/hda/patch_realtek.c                      |   1 +
 sound/soc/amd/yc/acp6x-mach.c                      |   7 +
 sound/soc/codecs/arizona.c                         |  14 +-
 sound/soc/codecs/madera.c                          |  10 +-
 sound/soc/codecs/tas2764.c                         |  10 +-
 sound/soc/codecs/tas2764.h                         |   8 +-
 sound/soc/codecs/tas2770.c                         |   2 +-
 sound/soc/codecs/wm0010.c                          |  13 +-
 sound/soc/codecs/wm5110.c                          |   8 +-
 sound/soc/sh/rcar/core.c                           |  14 --
 sound/soc/sh/rcar/rsnd.h                           |   1 -
 sound/soc/sh/rcar/src.c                            | 116 +++++++++++---
 sound/soc/soc-ops.c                                |  15 +-
 sound/soc/sof/intel/hda-codec.c                    |   1 +
 226 files changed, 2511 insertions(+), 1511 deletions(-)

On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels, build tested on BMIPS_GENERIC:

Florian

Am 26.03.2025 um 16:44 schrieb Greg Kroah-Hartman:

Trying to build on my 2-socket Ivy Bridge Xeon E5-2697 v2 server (X86_64), I get a build error:

CALL scripts/checksyscalls.sh
DESCEND objtool
DESCEND bpf/resolve_btfids
INSTALL libsubcmd_headers
CC [M] fs/xfs/libxfs/xfs_alloc.o
In file included from ./include/linux/string.h:5,

                 from ./include/linux/uuid.h:12,
                 from ./fs/xfs/xfs_linux.h:10,
                 from ./fs/xfs/xfs.h:22,
                 from fs/xfs/libxfs/xfs_alloc.c:6:

fs/xfs/libxfs/xfs_alloc.c: In function '__xfs_free_extent_later':
fs/xfs/libxfs/xfs_alloc.c:2551:51: error: 'mp' undeclared (first use in this function); did you mean 'tp'?
2551 | if (XFS_IS_CORRUPT(mp, !xfs_verify_fsbext(mp, bno, len)))
| ^~
./include/linux/compiler.h:78:45: note: in definition of macro 'unlikely'
78 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
fs/xfs/libxfs/xfs_alloc.c:2551:13: note: in expansion of macro 'XFS_IS_CORRUPT'
2551 | if (XFS_IS_CORRUPT(mp, !xfs_verify_fsbext(mp, bno, len)))

      |             ^~~~~~~~~~~~~~

fs/xfs/libxfs/xfs_alloc.c:2551:51: note: each undeclared identifier is reported only once for each function it appears in
2551 | if (XFS_IS_CORRUPT(mp, !xfs_verify_fsbext(mp, bno, len)))
| ^~
./include/linux/compiler.h:78:45: note: in definition of macro 'unlikely'
78 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
fs/xfs/libxfs/xfs_alloc.c:2551:13: note: in expansion of macro 'XFS_IS_CORRUPT'
2551 | if (XFS_IS_CORRUPT(mp, !xfs_verify_fsbext(mp, bno, len)))

      |             ^~~~~~~~~~~~~~

./fs/xfs/xfs_linux.h:225:63: error: left-hand operand of comma expression has no effect [-Werror=unused-value]
225 | __this_address), \
| ^
fs/xfs/libxfs/xfs_alloc.c:2551:13: note: in expansion of macro 'XFS_IS_CORRUPT'
2551 | if (XFS_IS_CORRUPT(mp, !xfs_verify_fsbext(mp, bno, len)))

      |             ^~~~~~~~~~~~~~

cc1: all warnings being treated as errors
make[3]: *** [scripts/Makefile.build:250: fs/xfs/libxfs/xfs_alloc.o] Error 1 make[2]: *** [scripts/Makefile.build:503: fs/xfs] Error 2 make[1]: *** [scripts/Makefile.build:503: fs] Error 2
make: *** [Makefile:2010: .] Error 2 root@linus:/usr/src/linux-stable-rc#

I have attached my .config file for review.

Beste Grüße,
Peter Schneider

Climb the mountain not to plant your flag, but to embrace the challenge,
enjoy the air and behold the view. Climb it so you can see the world,
not so the world can see you.                    -- David McCullough Jr.

OpenPGP:  0xA3828BD796CCE11A8CADE8866E3A92C92C3FF244
Download: https://www.peters-netzplatz.de/download/pschneider1968_pub.asc
https://keys.mailvelope.com/pks/lookup?op=get&[email protected]
https://keys.mailvelope.com/pks/lookup?op=get&[email protected]

Seeing this on RISC-V also.

Regressions on arm, arm64, mips, powerpc builds failed with gcc-13 and clang the stable-rc 6.1.132-rc1 and 6.1.132-rc2.

First seen on the 6.1.132-rc1
Good: v6.1.131
Bad: Linux 6.1.132-rc1 and Linux 6.1.132-rc2

* arm, build
- clang-20-davinci_all_defconfig
- clang-nightly-davinci_all_defconfig
- gcc-13-davinci_all_defconfig
- gcc-8-davinci_all_defconfig

* arm64, build
- gcc-12-lkftconfig-graviton4
- gcc-12-lkftconfig-graviton4-kselftest-frag
- gcc-12-lkftconfig-graviton4-no-kselftest-frag

* mips, build
- gcc-12-malta_defconfig
- gcc-8-malta_defconfig

* powerpc, build
- clang-20-defconfig
- clang-20-ppc64e_defconfig
- clang-nightly-defconfig
- clang-nightly-ppc64e_defconfig
- gcc-13-defconfig
- gcc-13-ppc64e_defconfig
- gcc-13-ppc6xx_defconfig
- gcc-8-defconfig
- gcc-8-ppc64e_defconfig
- gcc-8-ppc6xx_defconfig

Regression Analysis:
- New regression? yes
- Reproducibility? Yes

Build regression: arm arm64 mips powerpc xfs_alloc.c 'mp' undeclared

## Build log
fs/xfs/libxfs/xfs_alloc.c: In function '__xfs_free_extent_later':
fs/xfs/libxfs/xfs_alloc.c:2551:51: error: 'mp' undeclared (first use in this function); did you mean 'tp'?
2551 | if (XFS_IS_CORRUPT(mp, !xfs_verify_fsbext(mp, bno, len)))
| ^~

## Source
* Kernel version: 6.1.132-rc2
* Git tree: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
* Git sha: f5ad54ef021f6fb63ac97b3dec5efa9cc1a2eb51
* Git describe: v6.1.131-198-gf5ad54ef021f
* Project details:
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.1.y/build/v6.1.131-198-gf5ad54ef021f/

## Build
* Build log: https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.1.y/build/v6.1.131-198-gf5ad54ef021f/testrun/27785617/suite/build/test/gcc-12-lkftconfig-graviton4-kselftest-frag/log
* Build history:
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.1.y/build/v6.1.131-198-gf5ad54ef021f/testrun/27785617/suite/build/test/gcc-12-lkftconfig-graviton4-kselftest-frag/history/
* Build details:
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.1.y/build/v6.1.131-198-gf5ad54ef021f/testrun/27785617/suite/build/test/gcc-12-lkftconfig-graviton4-kselftest-frag/
* Build link: https://storage.tuxsuite.com/public/linaro/lkft/builds/2urSwNctsyhQzf1j7dvt6nHemP5/
* Kernel config:
https://storage.tuxsuite.com/public/linaro/lkft/builds/2urSwNctsyhQzf1j7dvt6nHemP5/config

## Steps to reproduce
- tuxmake --runtime podman --target-arch arm64 --toolchain gcc-12 \
--kconfig https://storage.tuxsuite.com/public/linaro/lkft/builds/2urSwNctsyhQzf1j7dvt6nHemP5/config
debugkernel dtbs dtbs-legacy headers kernel kselftest modules
- tuxmake --runtime podman --target-arch arm --toolchain clang-20
--kconfig davinci_all_defconfig LLVM=1 LLVM_IAS=1

--
Linaro LKFT
https://lkft.linaro.org

This is fixed by

https://lore.kernel.org/all/[email protected]/T/

but I'm waiting on an ACK. Let me do some nagging :)

- leah

sent to stable:
https://lore.kernel.org/stable/[email protected]/

Now queued up, thanks.

greg k-h

Failures detected for Tegra ...

Test results for stable-v6.1:

    10 builds:	10 pass, 0 fail
    28 boots:	28 pass, 0 fail
    115 tests:	109 pass, 6 fail

Linux version: 6.1.132-rc2-gf5ad54ef021f
Boards tested: tegra124-jetson-tk1, tegra186-p2771-0000,

                tegra186-p3509-0000+p3636-0001, tegra194-p2972-0000,
                tegra194-p3509-0000+p3668-0000, tegra20-ventana,
                tegra210-p2371-2180, tegra210-p3450-0000,
                tegra30-cardhu-a04

Test failures: tegra186-p2771-0000: cpu-hotplug

                tegra194-p2972-0000: pm-system-suspend.sh
                tegra210-p2371-2180: cpu-hotplug
                tegra210-p3450-0000: cpu-hotplug

Jon

Hi Greg,

I am seeing the following crash ...

[  195.052638] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000
[  195.061551] Mem abort info:
[  195.064467]   ESR = 0x0000000096000004
[  195.068244]   EC = 0x25: DABT (current EL), IL = 32 bits
[  195.073551]   SET = 0, FnV = 0
[  195.076604]   EA = 0, S1PTW = 0
[  195.079741]   FSC = 0x04: level 0 translation fault
[  195.084614] Data abort info:
[  195.087493]   ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000
[  195.092971]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[  195.098040]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[  195.103347] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001063b9000
[  195.109801] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000
[  195.116605] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP
[  195.122859] Modules linked in: panel_simple snd_soc_tegra210_mixer snd_soc_tegra210_mvc snd_soc_tegra210_ope snd_soc_tegra210_dmic snd_soc_tegra210_amx snd_soc_tegra210_adx snd_soc_tegra210_sfc snd_soc_tegra210_i2s snd_soc_tegra210_admaif tegra_video(C) snd_soc_tegra_pcm tegra_drm v4l2_dv_timings v4l2_fwnode drm_dp_aux_bus v4l2_async cec videobuf2_dma_contig videobuf2_memops drm_display_helper videobuf2_v4l2 videodev drm_kms_helper snd_soc_tegra210_ahub drm tegra210_adma videobuf2_common mc snd_soc_tegra_audio_graph_card crct10dif_ce snd_soc_audio_graph_card snd_soc_simple_card_utils snd_hda_codec_hdmi snd_hda_tegra tegra_aconnect tegra_soctherm tegra_xudc snd_hda_codec lp855x_bl snd_hda_core backlight at24 host1x pwm_tegra ip_tables x_tables ipv6
[  195.189033] CPU: 0 PID: 87 Comm: kworker/0:5 Tainted: G         C         6.6.85-rc2-g0bf29b955eac #1
[  195.198237] Hardware name: NVIDIA Jetson TX1 Developer Kit (DT)
[  195.204144] Workqueue: events work_for_cpu_fn
[  195.208499] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  195.215448] pc : percpu_ref_put_many.constprop.0+0x18/0xd8
[  195.220924] lr : percpu_ref_put_many.constprop.0+0x18/0xd8
[  195.226398] sp : ffff800082e73bf0
[  195.229704] x29: ffff800082e73bf0 x28: 00000000000000ed x27: 0000000000000028
[  195.236829] x26: 0000000000000000 x25: ffff8000824aa720 x24: 0000000000000000
[  195.243955] x23: 0000000000000000 x22: 0000000000000001 x21: 0000000000000000
[  195.251080] x20: 0000000000000000 x19: 0000000000000000 x18: ffffffffffffffff
[  195.258205] x17: 9397548220450a08 x16: 010100001748ae3c x15: 0000000000000000
[  195.265330] x14: 00000000fffffffc x13: dead000000000100 x12: dead000000000122
[  195.272454] x11: 0000000000000001 x10: 00000000f0000080 x9 : 0000000000000000
[  195.279578] x8 : ffff800082e73c18 x7 : 00000000ffffffff x6 : ffff8000824aa720
[  195.286703] x5 : ffff0000fe924a20 x4 : 0000000000000000 x3 : 0000000000000000
[  195.293827] x2 : ffff80008249d8b8 x1 : ffff000081eb1e00 x0 : 0000000000000001
[  195.300953] Call trace:
[  195.303391]  percpu_ref_put_many.constprop.0+0x18/0xd8
[  195.308518]  memcg_hotplug_cpu_dead+0x54/0x6c
[  195.312868]  cpuhp_invoke_callback+0x118/0x224
[  195.317304]  __cpuhp_invoke_callback_range+0x94/0x120
[  195.322345]  _cpu_down+0x150/0x328
[  195.325742]  __cpu_down_maps_locked+0x18/0x28
[  195.330091]  work_for_cpu_fn+0x1c/0x30
[  195.333831]  process_one_work+0x148/0x288
[  195.337834]  worker_thread+0x32c/0x438
[  195.341576]  kthread+0x118/0x11c
[  195.344798]  ret_from_fork+0x10/0x20
[  195.348369] Code: 910003fd f9000bf3 aa0003f3 97f98ae2 (f9400260)
[  195.354451] ---[ end trace 0000000000000000 ]---

Bisect is pointing to the following commit ...

# first bad commit: [e56ff82e1e164ccf815554694d97bcd3dec9e89a] memcg: drain obj stock on cpu hotplug teardown

Cheers
Jon

nvpublic

Thanks for the bisect, I'll go drop that one now and push out a new -rc

greg k-h

In Addition to previous build regressions,

Regressions on arm and arm64 devices cpu hotplug tests failed and kernel oops triggered
with gcc-13 and clang-20 the stable-rc 6.1.132-rc2.

First seen on the 6.1.132-rc1
Good: v6.1.131
Bad: Linux 6.1.132-rc1 and Linux 6.1.132-rc2

* Juno-r2, rockpi-4, dragonboard 845c, e850-96,
- selftests: cpu-hotplug: cpu-on-off-test.sh
- ltp-controllers: cpuset_hotplug_test.sh
- selftests: rseq: basic_percpu_ops_test

Regression Analysis:
- New regression? yes
- Reproducibility? Yes

Test regression: arm64 arm cpuhotplug kernel NULL pointer dereference

## Test log
command: cpuset_hotplug_test.sh

[ 1912.782804] /usr/local/bin/kirk[465]: starting test cpuset_hotplug
(cpuset_hotplug_test.sh)
cpuset_hotplug 1 TINFO: CPUs are numbered continuously starting at 0 (0-5)
cpuset_hotplug 1 TINFO: Nodes are numbered continuously starting at 0 (0)
[ 1917.567011] psci: CPU1 killed (polled 0 ms)
cpuset_hotplug 1 TPASS: Cpuset vs CPU hotplug test succeeded.
[ 1918.804896] Detected VIPT I-cache on CPU1
[ 1918.805388] cacheinfo: Unable to detect cache hierarchy for CPU 1
[ 1918.805957] GICv3: CPU1: found redistributor 1 region 0:0x00000000fef20000
[ 1918.806683] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[ 1919.086059] psci: CPU1 killed (polled 0 ms)
[ 1919.120969] Unable to handle kernel NULL pointer dereference at
virtual address 0000000000000000
[ 1919.121807] Mem abort info:
[ 1919.122086]   ESR = 0x0000000096000004
[ 1919.122451]   EC = 0x25: DABT (current EL), IL = 32 bits
[ 1919.122956]   SET = 0, FnV = 0
[ 1919.123262]   EA = 0, S1PTW = 0
[ 1919.123574]   FSC = 0x04: level 0 translation fault
[ 1919.124038] Data abort info:
[ 1919.124380]   ISV = 0, ISS = 0x00000004
[ 1919.124754]   CM = 0, WnR = 0
[ 1919.125051] user pgtable: 4k pages, 48-bit VAs, pgdp=000000000a2b8000
[ 1919.125655] [0000000000000000] pgd=0000000000000000, p4d=0000000000000000
[ 1919.126341] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP
[ 1919.126912] Modules linked in: snd_soc_hdmi_codec dw_hdmi_cec

dw_hdmi_i2s_audio brcmfmac rockchipdrm hantro_vpu hci_uart brcmutil dw_mipi_dsi analogix_dp btqca v4l2_h264 btbcm v4l2_vp9 dw_hdmi panfrost v4l2_mem2mem cfg80211 cec bluetooth snd_soc_audio_graph_card videobuf2_v4l2 drm_display_helper gpu_sched snd_soc_simple_card videobuf2_dma_contig crct10dif_ce snd_soc_spdif_tx snd_soc_rockchip_i2s snd_soc_simple_card_utils videobuf2_memops phy_rockchip_pcie rockchip_saradc rtc_rk808 drm_shmem_helper drm_dma_helper videobuf2_common rfkill industrialio_triggered_buffer drm_kms_helper pcie_rockchip_host rockchip_thermal coresight_cpu_debug kfifo_buf fuse drm ip_tables x_tables

[ 1919.132505] CPU: 0 PID: 67249 Comm: kworker/0:0 Not tainted 6.1.132-rc2 #1
[ 1919.133132] Hardware name: Radxa ROCK Pi 4B (DT)
[ 1919.133555] Workqueue: events work_for_cpu_fn
[ 1919.133983] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 1919.134617] pc : memcg_hotplug_cpu_dead

(include/linux/percpu-refcount.h:174 include/linux/percpu-refcount.h:332 include/linux/percpu-refcount.h:351 include/linux/memcontrol.h:795 mm/memcontrol.c:2382)

[ 1919.135076] lr : memcg_hotplug_cpu_dead

(include/linux/percpu-refcount.h:174 include/linux/percpu-refcount.h:332 include/linux/percpu-refcount.h:351 include/linux/memcontrol.h:795 mm/memcontrol.c:2382)

[ 1919.135528] sp : ffff80000e78bc60
[ 1919.135835] x29: ffff80000e78bc60 x28: 0000000000000000 x27: ffff80000a1c81f8
[ 1919.136501] x26: 0000000000000028 x25: ffff0000f7534778 x24: ffff80000a1aeb08
[ 1919.137166] x23: 0000000000000000 x22: ffff80000a16e240 x21: 0000000000000000
[ 1919.137830] x20: ffff8000ed3d5000 x19: 0000000000000000 x18: 00000000a2704302
[ 1919.138495] x17: 0000000000000000 x16: 0000000000000312 x15: 0000040000000000
[ 1919.139159] x14: 0000000000000000 x13: ffff80000e788000 x12: ffff80000e78c000
[ 1919.139823] x11: 0bb2d4910b917800 x10: 0000000000000000 x9 : 0000000000000001
[ 1919.140487] x8 : ffff000013406300 x7 : 00000072b5503510 x6 : 0000000000300000
[ 1919.141151] x5 : 00000000801c0011 x4 : 0000000000000000 x3 : ffff80000e78bca0
[ 1919.141815] x2 : ffff80000e78bbf8 x1 : ffff8000080a11e4 x0 : ffff0000f7543240
[ 1919.142480] Call trace:
[ 1919.142709] memcg_hotplug_cpu_dead

(include/linux/percpu-refcount.h:174 include/linux/percpu-refcount.h:332 include/linux/percpu-refcount.h:351 include/linux/memcontrol.h:795 mm/memcontrol.c:2382)

[ 1919.143133] cpuhp_invoke_callback (kernel/cpu.c:193)
[ 1919.143554] _cpu_down (kernel/cpu.c:0 kernel/cpu.c:724
kernel/cpu.c:1157 kernel/cpu.c:1218)
[ 1919.143882] __cpu_down_maps_locked (kernel/cpu.c:1249)
[ 1919.144291] work_for_cpu_fn (kernel/workqueue.c:5184)
[ 1919.144647] process_one_work (kernel/workqueue.c:2297)
[ 1919.145028] worker_thread (include/linux/list.h:292
kernel/workqueue.c:2352 kernel/workqueue.c:2444)
[ 1919.145386] kthread (kernel/kthread.c:378)
[ 1919.145687] ret_from_fork (arch/arm64/kernel/entry.S:865)
[ 1919.146041] Code: d51b4235 8b160280 97ffec72 97f73691 (f9400269)

All code
========

Code starting with the faulting instruction
===========================================

[ 1919.146592] ---[ end trace 0000000000000000 ]---

## Test log 2
kselftest: Running tests in rseq
TAP version 13
1..9
timeout set to 0
selftests: rseq: basic_test
testing current cpu
basic_test: basic_test.c:30: void test_cpu_pointer(void): Assertion `sched_getcpu() == i' failed.
Aborted
not ok 1 selftests: rseq: basic_test # exit=134
timeout set to 0
selftests: rseq: basic_percpu_ops_test
Segmentation fault
not ok 2 selftests: rseq: basic_percpu_ops_test # exit=139

The bisection pointing to,
memcg: drain obj stock on cpu hotplug teardown
upsteam commit 9f01b4954490d4ccdbcc2b9be34a9921ceee9cbb upstream.

## Source
* Kernel version: 6.1.132-rc2
* Git tree: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
* Git sha: f5ad54ef021f6fb63ac97b3dec5efa9cc1a2eb51
* Git describe: v6.1.131-198-gf5ad54ef021f
* Project details:
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.1.y/Test/v6.1.131-198-gf5ad54ef021f/

## Test
* Test log: https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.1.y/build/v6.1.131-198-gf5ad54ef021f/testrun/27793089/suite/log-parser-test/test/internal-error-oops-oops-preempt-smp/log
* Test history:
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.1.y/build/v6.1.131-198-gf5ad54ef021f/testrun/27793089/suite/log-parser-test/test/internal-error-oops-oops-preempt-smp-01e5a0f146f52056a08c01ad73b44c893f7748e5cd1533e30c989289a90e821b/history/
* Test details:
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.1.y/build/v6.1.131-198-gf5ad54ef021f/testrun/27793089/suite/log-parser-test/test/internal-error-oops-oops-preempt-smp/
* Test link: https://storage.tuxsuite.com/public/linaro/lkft/builds/2urSwSZQOGBhePbuN1hwUGDHIT8/
* Kernel config:
https://storage.tuxsuite.com/public/linaro/lkft/builds/2urSwSZQOGBhePbuN1hwUGDHIT8/config

--
Linaro LKFT
https://lkft.linaro.org