6.6.105-rc2 review

This is the start of the stable review cycle for the 6.6.105 release. There are 118 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Wed, 10 Sep 2025 15:18:22 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.105-rc2.gz

or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 6.6.105-rc2

Kevin Hao <[email protected]>
spi: fsl-qspi: Fix double cleanup in probe error path

Qiu-ji Chen <[email protected]>
dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()

Rafael J. Wysocki <[email protected]>
cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo()

Rafael J. Wysocki <[email protected]>
cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE()

Rafael J. Wysocki <[email protected]>
cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo()

Radim Krčmář <[email protected]>
riscv: use lw when reading int cpu in asm_per_cpu

yangshiguang <[email protected]>
mm: slub: avoid wake up kswapd in set_track_prepare

Chengming Zhou <[email protected]>
slub: Reflow ___slab_alloc()

zhang jiao <[email protected]>
tools: gpio: remove the include directory on make clean

zhangjiao <[email protected]>
tools: gpio: rm .*.cmd on make clean

Colin Ian King <[email protected]>
drm/amd/amdgpu: Fix missing error return on kzalloc failure

Hawking Zhang <[email protected]>
drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c

Ian Rogers <[email protected]>
perf bpf-event: Fix use-after-free in synthesis

Michael Walle <[email protected]>
drm/bridge: ti-sn65dsi86: fix REFCLK setting

Larisa Grigore <[email protected]>
spi: spi-fsl-lpspi: Clear status register after disabling the module

Larisa Grigore <[email protected]>
spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort

Larisa Grigore <[email protected]>
spi: spi-fsl-lpspi: Set correct chip-select polarity bit

Larisa Grigore <[email protected]>
spi: spi-fsl-lpspi: Fix transmissions when using CONT

Vadim Pasternak <[email protected]>
hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM

Wentao Liang <[email protected]>
pcmcia: Add error handling for add_interval() in do_validate_mem()

Chen Ni <[email protected]>
pcmcia: omap: Add missing check for platform_get_resource

Alex Deucher <[email protected]>
Revert "drm/amdgpu: Avoid extra evict-restore process."

Aaron Erhardt <[email protected]>
ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY

Takashi Iwai <[email protected]>
ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model

Ma Ke <[email protected]>
drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv

Jason-JH.Lin <[email protected]>
drm/mediatek: Fix using wrong drm private data to bind mediatek-drm

Jason-JH.Lin <[email protected]>
drm/mediatek: Add crtc path enum for all_drm_priv array

Ronak Doshi <[email protected]>
vmxnet3: update MTU after device quiesce

Jakob Unterwurzacher <[email protected]>
net: dsa: microchip: linearize skb for tail-tagging switches

Pieter Van Trappen <[email protected]>
net: dsa: microchip: update tag_ksz masks for KSZ9477 family

Qiu-ji Chen <[email protected]>
dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()

Chris Chiu <[email protected]>
ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup

Stefan Binding <[email protected]>
ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA

David Lechner <[email protected]>
iio: pressure: mprls0025pa: use aligned_s64 for timestamp

Luca Ceresoli <[email protected]>
iio: light: opt3001: fix deadlock due to concurrent flag access

David Lechner <[email protected]>
iio: chemical: pms7003: use aligned_s64 for timestamp

David Lechner <[email protected]>
iio: imu: inv_mpu6050: align buffer for timestamp

Josef Bacik <[email protected]>
btrfs: adjust subpage bit start based on sectorsize

Jonathan Currier <[email protected]>
PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads

Nícolas F. R. A. Prado <[email protected]>
thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold

Han Xu <[email protected]>
spi: fsl-qspi: use devm function instead of driver remove

Li Qiong <[email protected]>
mm/slub: avoid accessing metadata when pointer is invalid in object_err()

Dave Airlie <[email protected]>
nouveau: fix disabling the nonstall irq due to storm code

Srinivas Pandruvada <[email protected]>
cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode

Rafael J. Wysocki <[email protected]>
cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization

Rafael J. Wysocki <[email protected]>
cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller

Srinivas Pandruvada <[email protected]>
cpufreq: intel_pstate: Revise global turbo disable check

Jinfeng Wang <[email protected]>
Revert "spi: spi-cadence-quadspi: Fix pm runtime unbalance"

Jinfeng Wang <[email protected]>
Revert "spi: cadence-quadspi: fix cleanup of rx_chan on failure paths"

Lad Prabhakar <[email protected]>
net: pcs: rzn1-miic: Correct MODCTRL register offset

Vitaly Lifshits <[email protected]>
e1000e: fix heap overflow in e1000_set_eeprom

Makar Semyonov <[email protected]>
cifs: prevent NULL pointer dereference in UTF16 conversion

Stanislav Fort <[email protected]>
batman-adv: fix OOB read/write in network-coding decode

John Evans <[email protected]>
scsi: lpfc: Fix buffer free/clear order in deferred receive path

Christoffer Sandberg <[email protected]>
platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list

Alex Deucher <[email protected]>
drm/amdgpu: drop hw access in non-DC audio fini

Nathan Chancellor <[email protected]>
wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data()

Qianfeng Rong <[email protected]>
wifi: mwifiex: Initialize the chan_stats array to zero

Bjorn Andersson <[email protected]>
soc: qcom: mdt_loader: Deal with zero e_shentsize

wangzijie <[email protected]>
proc: fix missing pde_set_flags() for net proc files

Edward Adam Davis <[email protected]>
ocfs2: prevent release journal inode after journal shutdown

Christian Loehle <[email protected]>
sched: Fix sched_numa_find_nth_cpu() if mask offline

Harry Yoo <[email protected]>
mm: move page table sync declarations to linux/pgtable.h

Harry Yoo <[email protected]>
x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()

Ma Ke <[email protected]>
pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()

panfan <[email protected]>
arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE

Miaoqian Lin <[email protected]>
ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()

Cryolitia PukNgae <[email protected]>
ALSA: usb-audio: Add mute TLV for playback volumes on some devices

Horatiu Vultur <[email protected]>
phy: mscc: Stop taking ts_lock for tx_queue and use its own lock

Kuniyuki Iwashima <[email protected]>
selftest: net: Fix weird setsockopt() in bind_bhash.c.

Qingfang Deng <[email protected]>
ppp: fix memory leak in pad_compress_skb

Wang Liang <[email protected]>
net: atm: fix memory leak in atm_register_sysfs when device_register fail

Eric Dumazet <[email protected]>
ax25: properly unshare skbs in ax25_kiss_rcv()

Alok Tiwari <[email protected]>
mctp: return -ENOPROTOOPT for unknown getsockopt options

Mahanta Jambigi <[email protected]>
net/smc: Remove validation of reserved bits in CLC Decline message

Dan Carpenter <[email protected]>
ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()

Rosen Penev <[email protected]>
net: thunder_bgx: decrement cleanup index before use

Rosen Penev <[email protected]>
net: thunder_bgx: add a missing of_node_put

Dan Carpenter <[email protected]>

    wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()

Dan Carpenter <[email protected]>
wifi: libertas: cap SSID len in lbs_associate()

Dan Carpenter <[email protected]>

    wifi: cw1200: cap SSID length in cw1200_do_join()

Felix Fietkau <[email protected]>
net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets

Rameshkumar Sundaram <[email protected]>
wifi: ath11k: fix group data packet drops during rekey

Baochen Qiang <[email protected]>
wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay()

Baochen Qiang <[email protected]>
wifi: ath11k: rename ath11k_start_vdev_delay()

Jeff Johnson <[email protected]>
wifi: ath11k: Introduce and use ath11k_sta_to_arsta()

Zhen Ni <[email protected]>
i40e: Fix potential invalid access when MAC list is empty

Liu Jian <[email protected]>
net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()

Sabrina Dubroca <[email protected]>
macsec: read MACSEC_SA_ATTR_PN with nla_get_uint

Jakub Kicinski <[email protected]>
netlink: add variable-length / auto integers

Sean Anderson <[email protected]>
net: macb: Fix tx_ptr_lock locking

Fabian Bläse <[email protected]>
icmp: fix icmp_ndo_send address translation for reply direction

Miaoqian Lin <[email protected]>
mISDN: Fix memory leak in dsp_hwec_enable()

Alok Tiwari <[email protected]>
xirc2ps_cs: fix register access when enabling FullDuplex

Kuniyuki Iwashima <[email protected]>
Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()

Ivan Pravdin <[email protected]>
Bluetooth: vhci: Prevent use-after-free by removing debugfs files early

Phil Sutter <[email protected]>
netfilter: conntrack: helper: Replace -EEXIST by -EBUSY

Wang Liang <[email protected]>
netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm

Duoming Zhou <[email protected]>
wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work

Dmitry Antipov <[email protected]>

    wifi: cfg80211: fix use-after-free in cmp_bss()

Marek Vasut <[email protected]>
arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC

Marek Vasut <[email protected]>
arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM

Sungbae Yoo <[email protected]>
tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"

Peter Robinson <[email protected]>
arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro

Pei Xiao <[email protected]>
tee: fix NULL pointer dereference in tee_shm_put

Jiufei Xue <[email protected]>
fs: writeback: fix use-after-free in __mark_inode_dirty()

Yang Li <[email protected]>
Bluetooth: hci_sync: Avoid adding default advertising on startup

Shinji Nomoto <[email protected]>
cpupower: Fix a bug where the -t option of the set subcommand was not working.

Timur Kristóf <[email protected]>
drm/amd/display: Don't warn when missing DCE encoder caps

Lubomir Rintel <[email protected]>
cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN

Huacai Chen <[email protected]>
LoongArch: Save LBT before FPU in setup_sigcontext()

Filipe Manana <[email protected]>
btrfs: avoid load/store tearing races when checking if an inode was logged

Filipe Manana <[email protected]>
btrfs: fix race between setting last_dir_index_offset and inode logging

Filipe Manana <[email protected]>
btrfs: fix race between logging inode and checking if it was logged before

Daniel Borkmann <[email protected]>
bpf: Fix oob access in cgroup local storage

Daniel Borkmann <[email protected]>
bpf: Move bpf map owner out of common struct

Daniel Borkmann <[email protected]>
bpf: Move cgroup iterator helpers to bpf.h

Daniel Borkmann <[email protected]>
bpf: Add cookie object to bpf maps

-------------

Diffstat:

 Documentation/userspace-api/netlink/specs.rst      |  18 +-
 Makefile                                           |   4 +-
 .../dts/freescale/imx8mp-data-modul-edm-sbc.dts    |   1 +
 .../arm64/boot/dts/freescale/imx8mp-dhcom-som.dtsi |   1 +
 .../boot/dts/rockchip/rk3399-pinebook-pro.dts      |   1 +
 arch/arm64/include/asm/module.h                    |   1 +
 arch/arm64/include/asm/module.lds.h                |   1 +
 arch/arm64/kernel/ftrace.c                         |  13 +-
 arch/arm64/kernel/module-plts.c                    |  12 +-
 arch/arm64/kernel/module.c                         |  11 +
 arch/loongarch/kernel/signal.c                     |  10 +-
 arch/riscv/include/asm/asm.h                       |   2 +-
 arch/x86/include/asm/pgtable_64_types.h            |   3 +
 arch/x86/mm/init_64.c                              |  18 +
 drivers/acpi/arm64/iort.c                          |   4 +-
 drivers/bluetooth/hci_vhci.c                       |  57 +-
 drivers/cpufreq/intel_pstate.c                     | 126 ++---
 drivers/dma/mediatek/mtk-cqdma.c                   |  10 +-
 drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c            | 146 ++---
 drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c             |   6 +-
 drivers/gpu/drm/amd/amdgpu/dce_v10_0.c             |   5 -
 drivers/gpu/drm/amd/amdgpu/dce_v11_0.c             |   5 -
 drivers/gpu/drm/amd/amdgpu/dce_v6_0.c              |   5 -
 drivers/gpu/drm/amd/amdgpu/dce_v8_0.c              |   5 -
 .../gpu/drm/amd/display/dc/dce/dce_link_encoder.c  |   8 +-
 drivers/gpu/drm/bridge/ti-sn65dsi86.c              |  11 +
 drivers/gpu/drm/mediatek/mtk_drm_drv.c             |  42 +-
 drivers/gpu/drm/mediatek/mtk_drm_drv.h             |   8 +-
 drivers/gpu/drm/nouveau/nvkm/engine/fifo/base.c    |   2 +
 drivers/gpu/drm/nouveau/nvkm/engine/fifo/ga100.c   |  23 +-
 drivers/gpu/drm/nouveau/nvkm/engine/fifo/ga102.c   |   1 +
 drivers/gpu/drm/nouveau/nvkm/engine/fifo/priv.h    |   2 +
 drivers/hwmon/mlxreg-fan.c                         |   5 +-
 drivers/iio/chemical/pms7003.c                     |   5 +-
 drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c         |   2 +-
 drivers/iio/light/opt3001.c                        |   5 +-
 drivers/iio/pressure/mprls0025pa.c                 |  10 +-
 drivers/isdn/mISDN/dsp_hwec.c                      |   6 +-
 drivers/net/ethernet/cadence/macb_main.c           |  28 +-
 drivers/net/ethernet/cavium/thunder/thunder_bgx.c  |  20 +-
 drivers/net/ethernet/intel/e1000e/ethtool.c        |  10 +-
 drivers/net/ethernet/intel/i40e/i40e_client.c      |   4 +-
 drivers/net/ethernet/mediatek/mtk_eth_soc.c        |  10 +-
 drivers/net/ethernet/xircom/xirc2ps_cs.c           |   2 +-
 drivers/net/macsec.c                               |   8 +-
 drivers/net/pcs/pcs-rzn1-miic.c                    |   2 +-
 drivers/net/phy/mscc/mscc_ptp.c                    |  18 +-
 drivers/net/ppp/ppp_generic.c                      |   6 +-
 drivers/net/usb/cdc_ncm.c                          |   7 +
 drivers/net/vmxnet3/vmxnet3_drv.c                  |   5 +-
 drivers/net/wireless/ath/ath11k/core.h             |   7 +
 drivers/net/wireless/ath/ath11k/debugfs.c          |   4 +-
 drivers/net/wireless/ath/ath11k/debugfs_sta.c      |  30 +-
 drivers/net/wireless/ath/ath11k/dp_rx.c            |   8 +-
 drivers/net/wireless/ath/ath11k/dp_tx.c            |   4 +-
 drivers/net/wireless/ath/ath11k/mac.c              | 588 ++++++++++++---------
 drivers/net/wireless/ath/ath11k/peer.c             |   2 +-
 drivers/net/wireless/ath/ath11k/wmi.c              |   6 +-
 .../wireless/broadcom/brcm80211/brcmfmac/btcoex.c  |   6 +-
 drivers/net/wireless/marvell/libertas/cfg.c        |   9 +-
 drivers/net/wireless/marvell/mwifiex/cfg80211.c    |   5 +-
 drivers/net/wireless/marvell/mwifiex/main.c        |   4 +-
 drivers/net/wireless/mediatek/mt76/mt7996/mcu.c    |   4 +-
 drivers/net/wireless/st/cw1200/sta.c               |   2 +-
 drivers/pci/msi/msi.c                              |   3 +
 drivers/pcmcia/omap_cf.c                           |   2 +
 drivers/pcmcia/rsrc_iodyn.c                        |   3 +
 drivers/pcmcia/rsrc_nonstatic.c                    |   4 +-
 drivers/platform/x86/amd/pmc/pmc-quirks.c          |  14 +
 drivers/scsi/lpfc/lpfc_nvmet.c                     |  10 +-
 drivers/soc/qcom/mdt_loader.c                      |  12 +-
 drivers/spi/spi-cadence-quadspi.c                  |   6 +-
 drivers/spi/spi-fsl-lpspi.c                        |  24 +-
 drivers/spi/spi-fsl-qspi.c                         |  36 +-
 drivers/tee/optee/ffa_abi.c                        |   4 +-
 drivers/tee/tee_shm.c                              |   6 +-
 drivers/thermal/mediatek/lvts_thermal.c            |  50 +-
 fs/btrfs/btrfs_inode.h                             |   2 +-
 fs/btrfs/extent_io.c                               |   2 +-
 fs/btrfs/inode.c                                   |   1 +
 fs/btrfs/tree-log.c                                |  78 ++-
 fs/fs-writeback.c                                  |   9 +-
 fs/ocfs2/inode.c                                   |   3 +
 fs/proc/generic.c                                  |  38 +-
 fs/smb/client/cifs_unicode.c                       |   3 +
 include/linux/bpf-cgroup.h                         |   5 -
 include/linux/bpf.h                                |  60 ++-
 include/linux/pci.h                                |   2 +
 include/linux/pgtable.h                            |  16 +
 include/linux/vmalloc.h                            |  16 -
 include/net/netlink.h                              |  69 ++-
 include/uapi/linux/netlink.h                       |   5 +
 kernel/bpf/core.c                                  |  50 +-
 kernel/bpf/syscall.c                               |  20 +-
 kernel/sched/topology.c                            |   2 +
 lib/nlattr.c                                       |  22 +
 mm/slub.c                                          |  66 ++-
 net/atm/resources.c                                |   6 +-
 net/ax25/ax25_in.c                                 |   4 +
 net/batman-adv/network-coding.c                    |   7 +-
 net/bluetooth/hci_sync.c                           |   2 +-
 net/bluetooth/l2cap_sock.c                         |   3 +
 net/bridge/br_netfilter_hooks.c                    |   3 -
 net/dsa/tag_ksz.c                                  |  22 +-
 net/ipv4/devinet.c                                 |   7 +-
 net/ipv4/icmp.c                                    |   6 +-
 net/ipv6/ip6_icmp.c                                |   6 +-
 net/mctp/af_mctp.c                                 |   2 +-
 net/netfilter/nf_conntrack_helper.c                |   4 +-
 net/netlink/policy.c                               |  14 +-
 net/smc/smc_clc.c                                  |   2 -
 net/smc/smc_ib.c                                   |   3 +
 net/wireless/scan.c                                |   3 +-
 net/wireless/sme.c                                 |   5 +-
 sound/pci/hda/patch_hdmi.c                         |   1 +
 sound/pci/hda/patch_realtek.c                      |   5 +
 sound/usb/mixer_quirks.c                           |   2 +
 tools/gpio/Makefile                                |   4 +-
 tools/perf/util/bpf-event.c                        |  39 +-
 tools/power/cpupower/utils/cpupower-set.c          |   4 +-
 tools/testing/selftests/net/bind_bhash.c           |   4 +-
 121 files changed, 1357 insertions(+), 838 deletions(-)

On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels, build tested on BMIPS_GENERIC:

Florian

# Librecast Test Results

010/010 [ OK ] libmld
120/120 [ OK ] liblibrecast

CPU/kernel: Linux auntie 6.6.105-rc2-ga13907443c81 #78 SMP PREEMPT_DYNAMIC Mon Sep 8 18:11:34 -00 2025 x86_64 AMD Ryzen 9 9950X 16-Core Processor AuthenticAMD GNU/Linux

Built and booted successfully on RISC-V RV64 (HiFive Unmatched).

All tests passing for Tegra ...

Test results for stable-v6.6:

    10 builds:	10 pass, 0 fail
    28 boots:	28 pass, 0 fail
    120 tests:	120 pass, 0 fail

Linux version: 6.6.105-rc2-ga13907443c81
Boards tested: tegra124-jetson-tk1, tegra186-p2771-0000,

                tegra186-p3509-0000+p3636-0001, tegra194-p2972-0000,
                tegra194-p3509-0000+p3668-0000, tegra20-ventana,
                tegra210-p2371-2180, tegra210-p3450-0000,
                tegra30-cardhu-a04

Jon

While running LTP controllers cgroup_fj_stress.sh testing on Juno-r2 running the Linux stable-rc 6.6.105-rc2 found these kernel warnings followed by kernel panic.

Regression Analysis:
- Reproducibility? Not sure

Test regression: stable-rc 6.6.105-rc2 juno-r2 __percpu_counter_sum (lib/percpu_counter.c:147) kernel panic

## Test log cgroup_fj_stress_net_prio_1_200_each: start (command:
cgroup_fj_stress.sh net_prio 1 200 each)

[  896.950701] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  896.956815] rcu: t3-...0: (6 GPs behind)
idle=0a4c/1/0x4000000000000000 softirq=118175/118181 fqs=2624
[  896.966146] rcu: t4-...0: (73 GPs behind)
idle=1c44/1/0x4000000000000000 softirq=135797/135789 fqs=2624
[  896.975562] rcu: t(detected by 2, t=5252 jiffies, g=292241, q=10 ncpus=6)
[  896.982362] Task dump for CPU 3:
[  896.985591] task:swapper/3       state:R  running task     stack:0
   pid:0     ppid:1      flags:0x0000000a
[  896.995532] Call trace:
[  896.997978] __switch_to (arch/arm64/kernel/process.c:559)
[  897.001478] __schedule (kernel/sched/core.c:5383 kernel/sched/core.c:6699)
[  897.004971] schedule_idle
(include/asm-generic/bitops/generic-non-atomic.h:128
include/linux/thread_info.h:192 include/linux/sched.h:2260
kernel/sched/core.c:6802)
[  897.008551] __cpu_online_mask+0x0/0x20
[  897.012398] Task dump for CPU 4:
[  897.015626] task:swapper/4       state:R  running task     stack:0
   pid:0     ppid:1      flags:0x0000000a
[  897.025564] Call trace:
[  897.028009] __switch_to (arch/arm64/kernel/process.c:559)
[  897.031502]  0xffff000800b70080
[  902.513737] Unable to handle kernel paging request at virtual
address ffff8008fc7c9000
[  902.521671] Mem abort info:
[  902.524464]   ESR = 0x0000000096000005
[  902.528215]   EC = 0x25: DABT (current EL), IL = 32 bits
[  902.533534]   SET = 0, FnV = 0
[  902.536588]   EA = 0, S1PTW = 0
[  902.539729]   FSC = 0x05: level 1 translation fault
[  902.544612] Data abort info:
[  902.547490]   ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
[  902.552982]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[  902.558038]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[  902.563356] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000000824a9000
[  902.570067] [ffff8008fc7c9000] pgd=10000009fffff003,
p4d=10000009fffff003, pud=0000000000000000
[  902.578792] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP
[  902.585070] Modules linked in: tda998x onboard_usb_hub cec
crct10dif_ce hdlcd drm_dma_helper drm_kms_helper fuse drm backlight
ip_tables x_tables
[  902.598177] CPU: 2 PID: 276 Comm: cron Not tainted 6.6.105-rc2 #1
[  902.604282] Hardware name: ARM Juno development board (r2) (DT)
[  902.610208] pstate: 200000c5 (nzCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  902.617182] pc : __percpu_counter_sum (lib/percpu_counter.c:147)
[  902.621729] lr : __percpu_counter_sum (lib/percpu_counter.c:145
(discriminator 3))
[  902.626267] sp : ffff800083723b40
[  902.629583] x29: ffff800083723b40 x28: ffff0008268b3180 x27: ffff0008268b3828
[  902.636739] x26: 0000000000000000 x25: 0000000000000000 x24: ffff8000826434a8
[  902.643893] x23: ffff80008263eac0 x22: ffff80008263ea80 x21: ffff80008263ed00
[  902.651048] x20: ffff0008268a5368 x19: 0000000000000000 x18: ffff8000881c3be8
[  902.658202] x17: 000000040044ffff x16: 00500074b5503510 x15: 0000000000000000
[  902.665356] x14: ffff00080037e300 x13: ffff8008fc807000 x12: 0000000034d4d91d
[  902.672510] x11: 00000000000000c0 x10: 0000000000000c20 x9 : ffff8000815ab818
[  902.679664] x8 : ffff8000837239f8 x7 : 0000000000000000 x6 : 0000000000000000
[  902.686818] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000001
[  902.693972] x2 : 0000000000000006 x1 : ffff80008263eac0 x0 : ffff8008fc7c9000
[  902.701126] Call trace:
[  902.703570] __percpu_counter_sum (lib/percpu_counter.c:147)
[  902.707762] __mmdrop (kernel/fork.c:833 (discriminator 1)
kernel/fork.c:928 (discriminator 1))
[  902.710996] finish_task_switch.isra.0 (include/linux/sched/mm.h:54
include/linux/sched/mm.h:82 include/linux/sched/mm.h:109
kernel/sched/core.c:5279)
[  902.715798] __schedule (kernel/sched/core.c:6705)
[  902.719291] schedule (kernel/sched/core.c:6774)
[  902.722522] do_nanosleep (kernel/time/hrtimer.c:1386
kernel/time/hrtimer.c:1513 kernel/time/hrtimer.c:2116)
[  902.726104] hrtimer_nanosleep (kernel/time/hrtimer.c:2163)
[  902.730121] common_nsleep (kernel/time/posix-timers.c:1354)
[  902.733701] __arm64_sys_clock_nanosleep
(kernel/time/posix-timers.c:1397 (discriminator 1)
kernel/time/posix-timers.c:1374 (discriminator 1)
kernel/time/posix-timers.c:1374 (discriminator 1))
[  902.738587] invoke_syscall (arch/arm64/include/asm/current.h:19
arch/arm64/kernel/syscall.c:56)
[  902.742344] el0_svc_common.constprop.0
(include/linux/thread_info.h:127 (discriminator 2)
arch/arm64/kernel/syscall.c:142 (discriminator 2))
[  902.747058] do_el0_svc (arch/arm64/kernel/syscall.c:154)
[  902.750378] el0_svc (arch/arm64/include/asm/daifflags.h:28
arch/arm64/kernel/entry-common.c:133
arch/arm64/kernel/entry-common.c:144
arch/arm64/kernel/entry-common.c:702)
[  902.753525] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:721)
[  902.757890] el0t_64_sync (arch/arm64/kernel/entry.S:599)
[ 902.761559] Code: 52800003 14000005 f860db00 f9401284 (b8a46800)

All code
========
0: 52800003 mov w3, #0x0 // #0
4: 14000005 b 0x18
8: f860db00 ldr x0, [x24, w0, sxtw #3]
c: f9401284 ldr x4, [x20, #32]
10:* b8a46800 ldrsw x0, [x0, x4] <-- trapping instruction

Code starting with the faulting instruction
===========================================
0: b8a46800 ldrsw x0, [x0, x4]

[  902.767660] ---[ end trace 0000000000000000 ]---
[  902.772281] note: cron[276] exited with irqs disabled
[  902.777363] note: cron[276] exited with preempt_count 2
[  902.786025] ------------[ cut here ]------------
[  902.790650] WARNING: CPU: 1 PID: 1 at kernel/sched/fair.c:5259
place_entity (kernel/sched/fair.c:5259 (discriminator 1))
[  902.798681] Modules linked in: tda998x onboard_usb_hub cec
crct10dif_ce hdlcd drm_dma_helper drm_kms_helper fuse drm backlight
ip_tables x_tables
[  902.811785] CPU: 1 PID: 1 Comm: systemd Tainted: G      D
 6.6.105-rc2 #1
[  902.819456] Hardware name: ARM Juno development board (r2) (DT)
[  902.825383] pstate: 200000c5 (nzCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  902.832357] pc : place_entity (kernel/sched/fair.c:5259 (discriminator 1))
[  902.836375] lr : place_entity (kernel/sched/fair.c:5185)
[  902.840304] sp : ffff800082cfbb80
[  902.843619] x29: ffff800082cfbb80 x28: ffff0008002a0000 x27: 0000000000000000
[  902.850775] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000001
[  902.857930] x23: 0000000000000400 x22: 0000000000000001 x21: ffff00097edb3780
[  902.865084] x20: 0000003bc78205b3 x19: ffff0008216bf000 x18: ffff800082cfbb08
[  902.872239] x17: ffff000832834408 x16: ffff800081b8d668 x15: 00000000000000dc
[  902.879393] x14: 0000000000000411 x13: 0000000000000000 x12: 0000ffffb41bdbb8
[  902.886547] x11: 0000000000000040 x10: ffff000800883628 x9 : ffff8000800fcb60
[  902.893701] x8 : ffff0008216bf400 x7 : ffff00097edb4170 x6 : 0000000000000400
[  902.900854] x5 : 0000000000000400 x4 : 0000000000000400 x3 : 0000000000000400
[  902.908008] x2 : 0000000000000000 x1 : 0000000000200b20 x0 : 0000000000000000
[  902.915162] Call trace:
[  902.917607] place_entity (kernel/sched/fair.c:5259 (discriminator 1))
[  902.921277] enqueue_entity (kernel/sched/fair.c:188
kernel/sched/fair.c:3644 kernel/sched/fair.c:5324)
[  902.925033] enqueue_task_fair (kernel/sched/fair.c:6768 (discriminator 1))
[  902.929050] activate_task (kernel/sched/core.c:2133)
[  902.932717] wake_up_new_task
(arch/arm64/include/asm/jump_label.h:22 include/linux/jump_label.h:207
include/trace/events/sched.h:185 kernel/sched/core.c:4873)
[  902.936732] kernel_clone (kernel/fork.c:2948 (discriminator 1))
[  902.940401] __do_sys_clone (kernel/fork.c:3058)
[  902.944069] __arm64_sys_clone (kernel/fork.c:3025)
[  902.947998] invoke_syscall (arch/arm64/include/asm/current.h:19
arch/arm64/kernel/syscall.c:56)
[  902.951754] el0_svc_common.constprop.0
(include/linux/thread_info.h:127 (discriminator 2)
arch/arm64/kernel/syscall.c:142 (discriminator 2))
[  902.956468] do_el0_svc (arch/arm64/kernel/syscall.c:154)
[  902.959789] el0_svc (arch/arm64/include/asm/daifflags.h:28
arch/arm64/kernel/entry-common.c:133
arch/arm64/kernel/entry-common.c:144
arch/arm64/kernel/entry-common.c:702)
[  902.962936] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:721)
[  902.967301] el0t_64_sync (arch/arm64/kernel/entry.S:599)
[  902.970967] ---[ end trace 0000000000000000 ]---
[  902.976118] Unable to handle kernel NULL pointer dereference at
virtual address 0000000000000009
[  902.984965] Mem abort info:
[  902.987773]   ESR = 0x0000000096000044
[  902.991538]   EC = 0x25: DABT (current EL), IL = 32 bits
[  902.996869]   SET = 0, FnV = 0
[  902.999936]   EA = 0, S1PTW = 0
[  903.003090]   FSC = 0x04: level 0 translation fault
[  903.007985] Data abort info:
[  903.010876]   ISV = 0, ISS = 0x00000044, ISS2 = 0x00000000
[  903.016380]   CM = 0, WnR = 1, TnD = 0, TagAccess = 0
[  903.021449]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[  903.026779] user pgtable: 4k pages, 48-bit VAs, pgdp=00000008a1c7f000
[  903.033242] [0000000000000009] pgd=0000000000000000, p4d=0000000000000000
[  903.040064] Internal error: Oops: 0000000096000044 [#2] PREEMPT SMP
[  903.046341] Modules linked in: tda998x onboard_usb_hub cec
crct10dif_ce hdlcd drm_dma_helper drm_kms_helper fuse drm backlight
ip_tables x_tables
[  903.059444] CPU: 1 PID: 1 Comm: systemd Tainted: G      D W
 6.6.105-rc2 #1
[  903.067114] Hardware name: ARM Juno development board (r2) (DT)
[  903.073040] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  903.080013] pc : xprt_alloc_slot (include/linux/list.h:195
include/linux/list.h:218 include/linux/list.h:229
net/sunrpc/xprt.c:1727)
[  903.084212] lr : xprt_alloc_slot (include/linux/list.h:373
(discriminator 2) net/sunrpc/xprt.c:1725 (discriminator 2))
[  903.088403] sp : ffff800082cfb700
[  903.091718] x29: ffff800082cfb700 x28: ffff000821bd0c00 x27: 0000000000000001
[  903.098873] x26: 0000000000440100 x25: 0000000000000000 x24: ffff800081508198
[  903.106028] x23: ffff80008253b008 x22: ffff000824e99200 x21: ffff000800b644c4
[  903.113182] x20: ffff000832834700 x19: ffff000800b64000 x18: 0000000000000000
[  903.120336] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
[  903.127490] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000
[  903.134644] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff8000815ab504
[  903.141797] x8 : ffff800082cfb5e8 x7 : 0000000000000000 x6 : 0000000000000001
[  903.148951] x5 : ffff80008263f000 x4 : dead000000000122 x3 : 0000000000000001
[  903.156105] x2 : 0000000000000000 x1 : ffff000824e992c8 x0 : dead000000000100
[  903.163259] Call trace:
[  903.165703] xprt_alloc_slot (include/linux/list.h:195
include/linux/list.h:218 include/linux/list.h:229
net/sunrpc/xprt.c:1727)
[  903.169546] xprt_reserve (net/sunrpc/xprt.c:1898 net/sunrpc/xprt.c:1920)
[  903.173038] call_reserve (net/sunrpc/clnt.c:1755)
[  903.176531] __rpc_execute
(include/asm-generic/bitops/generic-non-atomic.h:128
net/sunrpc/sched.c:954)
[  903.180200] rpc_execute (include/linux/sched/mm.h:368
(discriminator 1) net/sunrpc/sched.c:1026 (discriminator 1))
[  903.183780] rpc_run_task (net/sunrpc/clnt.c:1234)
[  903.187448] rpc_call_sync (net/sunrpc/clnt.c:1262 (discriminator 1))
[  903.191029] nfs3_rpc_wrapper (fs/nfs/nfs3proc.c:37)
[  903.194873] nfs3_proc_getattr (fs/nfs/nfs3proc.c:123)
[  903.198803] __nfs_revalidate_inode (fs/nfs/inode.c:1231 (discriminator 2))
[  903.203254] nfs_access_get_cached (fs/nfs/dir.c:3033 (discriminator
1) fs/nfs/dir.c:3093 (discriminator 1))
[  903.207707] nfs_do_access (fs/nfs/dir.c:3221)
[  903.211376] nfs_permission (fs/nfs/dir.c:3335)
[  903.215132] inode_permission (fs/namei.c:530 fs/namei.c:504)
[  903.219061] link_path_walk.part.0.constprop.0 (fs/namei.c:1724
fs/namei.c:2271)
[  903.224557] path_openat (fs/namei.c:2254 (discriminator 1)
fs/namei.c:3785 (discriminator 1))
[  903.228050] do_filp_open (fs/namei.c:3816)
[  903.231630] do_sys_openat2 (fs/open.c:1419)
[  903.235383] __arm64_sys_openat (fs/open.c:1445)
[  903.239397] invoke_syscall (arch/arm64/include/asm/current.h:19
arch/arm64/kernel/syscall.c:56)
[  903.243153] el0_svc_common.constprop.0
(include/linux/thread_info.h:127 (discriminator 2)
arch/arm64/kernel/syscall.c:142 (discriminator 2))
[  903.247866] do_el0_svc (arch/arm64/kernel/syscall.c:154)
[  903.251187] el0_svc (arch/arm64/include/asm/daifflags.h:28
arch/arm64/kernel/entry-common.c:133
arch/arm64/kernel/entry-common.c:144
arch/arm64/kernel/entry-common.c:702)
[  903.254333] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:721)
[  903.258699] el0t_64_sync (arch/arm64/kernel/entry.S:599)
[ 903.262367] Code: f2fbd5a0 91008804 d1032036 a9400823 (f9000462)

All code
========
0: f2fbd5a0 movk x0, #0xdead, lsl #48
4: 91008804 add x4, x0, #0x22
8: d1032036 sub x22, x1, #0xc8
c: a9400823 ldp x3, x2, [x1]
10:* f9000462 str x2, [x3, #8] <-- trapping instruction

Code starting with the faulting instruction
===========================================
0: f9000462 str x2, [x3, #8]

[  903.268468] ---[ end trace 0000000000000000 ]---
[  903.273113] note: systemd[1] exited with preempt_count 1
[  903.278453] Kernel panic - not syncing: Attempted to kill init!
exitcode=0x0000000b
[  903.286120] SMP: stopping secondary CPUs
[  904.397045] SMP: failed to stop secondary CPUs 0-1,3-5
[  904.402191] Kernel Offset: disabled
[  904.405679] CPU features: 0x0,8000020c,3c020000,0000421b
[  904.410998] Memory Limit: none
[  904.414054] ---[ end Kernel panic - not syncing: Attempted to kill

init! exitcode=0x0000000b ]---

- https://qa-reports.linaro.org/api/testruns/29825073/log_file/
- https://lkft.validation.linaro.org/scheduler/job/8440380#L2148
- https://storage.tuxsuite.com/public/linaro/lkft/builds/32QPM3xxbSmOi7BTNwtgC47Erjg/config
- https://storage.tuxsuite.com/public/linaro/lkft/builds/32QPM3xxbSmOi7BTNwtgC47Erjg/
- https://regressions.linaro.org/lkft/linux-stable-rc-linux-6.6.y/v6.6.103-195-ga13907443c81/log-parser-test/panic-multiline-kernel-panic-not-syncing-attempted-to-kill-init-exitcode/

## Build
* kernel: 6.6.105-rc2
* git: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
* git commit: a13907443c81b8a2c0032ca5303ab97ba8e99753
* git describe: v6.6.103-195-ga13907443c81
* test details:
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.6.y/build/v6.6.103-195-ga13907443c81

## Test Regressions (compared to v6.6.103-76-g12cf6be144d1)

## Metric Regressions (compared to v6.6.103-76-g12cf6be144d1)

## Test Fixes (compared to v6.6.103-76-g12cf6be144d1)

## Metric Fixes (compared to v6.6.103-76-g12cf6be144d1)

## Test result summary
total: 288386, pass: 268054, fail: 6579, skip: 13280, xfail: 473

## Build Summary
* arc: 5 total, 5 passed, 0 failed
* arm: 129 total, 129 passed, 0 failed
* arm64: 44 total, 44 passed, 0 failed
* i386: 23 total, 23 passed, 0 failed
* mips: 26 total, 25 passed, 1 failed
* parisc: 4 total, 4 passed, 0 failed
* powerpc: 32 total, 31 passed, 1 failed
* riscv: 15 total, 15 passed, 0 failed
* s390: 14 total, 13 passed, 1 failed
* sh: 10 total, 10 passed, 0 failed
* sparc: 7 total, 7 passed, 0 failed
* x86_64: 37 total, 36 passed, 1 failed

## Test suites summary
* boot
* commands
* kselftest-arm64
* kselftest-breakpoints
* kselftest-capabilities
* kselftest-cgroup
* kselftest-clone3
* kselftest-core
* kselftest-cpu-hotplug
* kselftest-cpufreq
* kselftest-efivarfs
* kselftest-exec
* kselftest-fpu
* kselftest-ftrace
* kselftest-futex
* kselftest-gpio
* kselftest-intel_pstate
* kselftest-ipc
* kselftest-kcmp
* kselftest-kvm
* kselftest-livepatch
* kselftest-membarrier
* kselftest-memfd
* kselftest-mincore
* kselftest-mm
* kselftest-mqueue
* kselftest-net
* kselftest-net-mptcp
* kselftest-openat2
* kselftest-ptrace
* kselftest-rseq
* kselftest-rtc
* kselftest-seccomp
* kselftest-sigaltstack
* kselftest-size
* kselftest-tc-testing
* kselftest-timers
* kselftest-tmpfs
* kselftest-tpm2
* kselftest-user_events
* kselftest-vDSO
* kselftest-x86
* kunit
* kvm-unit-tests
* lava
* libgpiod
* libhugetlbfs
* log-parser-boot
* log-parser-build-clang
* log-parser-build-gcc
* log-parser-test
* ltp-capability
* ltp-commands
* ltp-containers
* ltp-controllers
* ltp-cpuhotplug
* ltp-crypto
* ltp-cve
* ltp-dio
* ltp-fcntl-locktests
* ltp-fs
* ltp-fs_bind
* ltp-fs_perms_simple
* ltp-hugetlb
* ltp-math
* ltp-mm
* ltp-nptl
* ltp-pty
* ltp-sched
* ltp-smoke
* ltp-syscalls
* ltp-tracing
* modules
* perf
* rcutorture

--
Linaro LKFT
https://lkft.linaro.org

Am 08.09.2025 um 18:05 schrieb Greg Kroah-Hartman:

Just like rc1, rc2 builds, boots and works fine on my 2-socket Ivy Bridge Xeon E5-2697 v2 server. No dmesg oddities or regressions found.

Beste Grüße,
Peter Schneider

Climb the mountain not to plant your flag, but to embrace the challenge,
enjoy the air and behold the view. Climb it so you can see the world,
not so the world can see you.                    -- David McCullough Jr.

OpenPGP:  0xA3828BD796CCE11A8CADE8866E3A92C92C3FF244
Download: https://www.peters-netzplatz.de/download/pschneider1968_pub.asc
https://keys.mailvelope.com/pks/lookup?op=get&[email protected]
https://keys.mailvelope.com/pks/lookup?op=get&[email protected]

The kernel, bpf tool, perf tool, and kselftest builds fine for v6.6.105-rc2 on x86 and arm64 Azure VM.

Thanks,
Hardik