This is the start of the stable review cycle for the 6.6.105 release. There are 118 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Wed, 10 Sep 2025 15:18:22 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.105-rc2... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below.
thanks,
greg k-h
------------- Pseudo-Shortlog of commits:
Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 6.6.105-rc2
Kevin Hao haokexin@gmail.com spi: fsl-qspi: Fix double cleanup in probe error path
Qiu-ji Chen chenqiuji666@gmail.com dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
Rafael J. Wysocki rafael.j.wysocki@intel.com cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo()
Rafael J. Wysocki rafael.j.wysocki@intel.com cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE()
Rafael J. Wysocki rafael.j.wysocki@intel.com cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo()
Radim Krčmář rkrcmar@ventanamicro.com riscv: use lw when reading int cpu in asm_per_cpu
yangshiguang yangshiguang@xiaomi.com mm: slub: avoid wake up kswapd in set_track_prepare
Chengming Zhou zhouchengming@bytedance.com slub: Reflow ___slab_alloc()
zhang jiao zhangjiao2@cmss.chinamobile.com tools: gpio: remove the include directory on make clean
zhangjiao zhangjiao2@cmss.chinamobile.com tools: gpio: rm .*.cmd on make clean
Colin Ian King colin.i.king@gmail.com drm/amd/amdgpu: Fix missing error return on kzalloc failure
Hawking Zhang Hawking.Zhang@amd.com drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c
Ian Rogers irogers@google.com perf bpf-event: Fix use-after-free in synthesis
Michael Walle mwalle@kernel.org drm/bridge: ti-sn65dsi86: fix REFCLK setting
Larisa Grigore larisa.grigore@nxp.com spi: spi-fsl-lpspi: Clear status register after disabling the module
Larisa Grigore larisa.grigore@nxp.com spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
Larisa Grigore larisa.grigore@nxp.com spi: spi-fsl-lpspi: Set correct chip-select polarity bit
Larisa Grigore larisa.grigore@nxp.com spi: spi-fsl-lpspi: Fix transmissions when using CONT
Vadim Pasternak vadimp@nvidia.com hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM
Wentao Liang vulab@iscas.ac.cn pcmcia: Add error handling for add_interval() in do_validate_mem()
Chen Ni nichen@iscas.ac.cn pcmcia: omap: Add missing check for platform_get_resource
Alex Deucher alexander.deucher@amd.com Revert "drm/amdgpu: Avoid extra evict-restore process."
Aaron Erhardt aer@tuxedocomputers.com ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY
Takashi Iwai tiwai@suse.de ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
Ma Ke make24@iscas.ac.cn drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv
Jason-JH.Lin jason-jh.lin@mediatek.com drm/mediatek: Fix using wrong drm private data to bind mediatek-drm
Jason-JH.Lin jason-jh.lin@mediatek.com drm/mediatek: Add crtc path enum for all_drm_priv array
Ronak Doshi ronak.doshi@broadcom.com vmxnet3: update MTU after device quiesce
Jakob Unterwurzacher jakobunt@gmail.com net: dsa: microchip: linearize skb for tail-tagging switches
Pieter Van Trappen pieter.van.trappen@cern.ch net: dsa: microchip: update tag_ksz masks for KSZ9477 family
Qiu-ji Chen chenqiuji666@gmail.com dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
Chris Chiu chris.chiu@canonical.com ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
Stefan Binding sbinding@opensource.cirrus.com ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
David Lechner dlechner@baylibre.com iio: pressure: mprls0025pa: use aligned_s64 for timestamp
Luca Ceresoli luca.ceresoli@bootlin.com iio: light: opt3001: fix deadlock due to concurrent flag access
David Lechner dlechner@baylibre.com iio: chemical: pms7003: use aligned_s64 for timestamp
David Lechner dlechner@baylibre.com iio: imu: inv_mpu6050: align buffer for timestamp
Josef Bacik josef@toxicpanda.com btrfs: adjust subpage bit start based on sectorsize
Jonathan Currier dullfire@yahoo.com PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
Nícolas F. R. A. Prado nfraprado@collabora.com thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold
Han Xu han.xu@nxp.com spi: fsl-qspi: use devm function instead of driver remove
Li Qiong liqiong@nfschina.com mm/slub: avoid accessing metadata when pointer is invalid in object_err()
Dave Airlie airlied@redhat.com nouveau: fix disabling the nonstall irq due to storm code
Srinivas Pandruvada srinivas.pandruvada@linux.intel.com cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
Rafael J. Wysocki rafael.j.wysocki@intel.com cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization
Rafael J. Wysocki rafael.j.wysocki@intel.com cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller
Srinivas Pandruvada srinivas.pandruvada@linux.intel.com cpufreq: intel_pstate: Revise global turbo disable check
Jinfeng Wang jinfeng.wang.cn@windriver.com Revert "spi: spi-cadence-quadspi: Fix pm runtime unbalance"
Jinfeng Wang jinfeng.wang.cn@windriver.com Revert "spi: cadence-quadspi: fix cleanup of rx_chan on failure paths"
Lad Prabhakar prabhakar.mahadev-lad.rj@bp.renesas.com net: pcs: rzn1-miic: Correct MODCTRL register offset
Vitaly Lifshits vitaly.lifshits@intel.com e1000e: fix heap overflow in e1000_set_eeprom
Makar Semyonov m.semenov@tssltd.ru cifs: prevent NULL pointer dereference in UTF16 conversion
Stanislav Fort stanislav.fort@aisle.com batman-adv: fix OOB read/write in network-coding decode
John Evans evans1210144@gmail.com scsi: lpfc: Fix buffer free/clear order in deferred receive path
Christoffer Sandberg cs@tuxedo.de platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list
Alex Deucher alexander.deucher@amd.com drm/amdgpu: drop hw access in non-DC audio fini
Nathan Chancellor nathan@kernel.org wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data()
Qianfeng Rong rongqianfeng@vivo.com wifi: mwifiex: Initialize the chan_stats array to zero
Bjorn Andersson bjorn.andersson@oss.qualcomm.com soc: qcom: mdt_loader: Deal with zero e_shentsize
wangzijie wangzijie1@honor.com proc: fix missing pde_set_flags() for net proc files
Edward Adam Davis eadavis@qq.com ocfs2: prevent release journal inode after journal shutdown
Christian Loehle christian.loehle@arm.com sched: Fix sched_numa_find_nth_cpu() if mask offline
Harry Yoo harry.yoo@oracle.com mm: move page table sync declarations to linux/pgtable.h
Harry Yoo harry.yoo@oracle.com x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
Ma Ke make24@iscas.ac.cn pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
panfan panfan@qti.qualcomm.com arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE
Miaoqian Lin linmq006@gmail.com ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
Cryolitia PukNgae cryolitia@uniontech.com ALSA: usb-audio: Add mute TLV for playback volumes on some devices
Horatiu Vultur horatiu.vultur@microchip.com phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
Kuniyuki Iwashima kuniyu@google.com selftest: net: Fix weird setsockopt() in bind_bhash.c.
Qingfang Deng dqfext@gmail.com ppp: fix memory leak in pad_compress_skb
Wang Liang wangliang74@huawei.com net: atm: fix memory leak in atm_register_sysfs when device_register fail
Eric Dumazet edumazet@google.com ax25: properly unshare skbs in ax25_kiss_rcv()
Alok Tiwari alok.a.tiwari@oracle.com mctp: return -ENOPROTOOPT for unknown getsockopt options
Mahanta Jambigi mjambigi@linux.ibm.com net/smc: Remove validation of reserved bits in CLC Decline message
Dan Carpenter dan.carpenter@linaro.org ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
Rosen Penev rosenp@gmail.com net: thunder_bgx: decrement cleanup index before use
Rosen Penev rosenp@gmail.com net: thunder_bgx: add a missing of_node_put
Dan Carpenter dan.carpenter@linaro.org wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
Dan Carpenter dan.carpenter@linaro.org wifi: libertas: cap SSID len in lbs_associate()
Dan Carpenter dan.carpenter@linaro.org wifi: cw1200: cap SSID length in cw1200_do_join()
Felix Fietkau nbd@nbd.name net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
Rameshkumar Sundaram rameshkumar.sundaram@oss.qualcomm.com wifi: ath11k: fix group data packet drops during rekey
Baochen Qiang quic_bqiang@quicinc.com wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay()
Baochen Qiang quic_bqiang@quicinc.com wifi: ath11k: rename ath11k_start_vdev_delay()
Jeff Johnson quic_jjohnson@quicinc.com wifi: ath11k: Introduce and use ath11k_sta_to_arsta()
Zhen Ni zhen.ni@easystack.cn i40e: Fix potential invalid access when MAC list is empty
Liu Jian liujian56@huawei.com net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
Sabrina Dubroca sd@queasysnail.net macsec: read MACSEC_SA_ATTR_PN with nla_get_uint
Jakub Kicinski kuba@kernel.org netlink: add variable-length / auto integers
Sean Anderson sean.anderson@linux.dev net: macb: Fix tx_ptr_lock locking
Fabian Bläse fabian@blaese.de icmp: fix icmp_ndo_send address translation for reply direction
Miaoqian Lin linmq006@gmail.com mISDN: Fix memory leak in dsp_hwec_enable()
Alok Tiwari alok.a.tiwari@oracle.com xirc2ps_cs: fix register access when enabling FullDuplex
Kuniyuki Iwashima kuniyu@google.com Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
Ivan Pravdin ipravdin.official@gmail.com Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
Phil Sutter phil@nwl.cc netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
Wang Liang wangliang74@huawei.com netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
Duoming Zhou duoming@zju.edu.cn wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
Dmitry Antipov dmantipov@yandex.ru wifi: cfg80211: fix use-after-free in cmp_bss()
Marek Vasut marek.vasut@mailbox.org arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC
Marek Vasut marek.vasut@mailbox.org arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM
Sungbae Yoo sungbaey@nvidia.com tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"
Peter Robinson pbrobinson@gmail.com arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
Pei Xiao xiaopei01@kylinos.cn tee: fix NULL pointer dereference in tee_shm_put
Jiufei Xue jiufei.xue@samsung.com fs: writeback: fix use-after-free in __mark_inode_dirty()
Yang Li yang.li@amlogic.com Bluetooth: hci_sync: Avoid adding default advertising on startup
Shinji Nomoto fj5851bi@fujitsu.com cpupower: Fix a bug where the -t option of the set subcommand was not working.
Timur Kristóf timur.kristof@gmail.com drm/amd/display: Don't warn when missing DCE encoder caps
Lubomir Rintel lkundrak@v3.sk cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN
Huacai Chen chenhuacai@kernel.org LoongArch: Save LBT before FPU in setup_sigcontext()
Filipe Manana fdmanana@suse.com btrfs: avoid load/store tearing races when checking if an inode was logged
Filipe Manana fdmanana@suse.com btrfs: fix race between setting last_dir_index_offset and inode logging
Filipe Manana fdmanana@suse.com btrfs: fix race between logging inode and checking if it was logged before
Daniel Borkmann daniel@iogearbox.net bpf: Fix oob access in cgroup local storage
Daniel Borkmann daniel@iogearbox.net bpf: Move bpf map owner out of common struct
Daniel Borkmann daniel@iogearbox.net bpf: Move cgroup iterator helpers to bpf.h
Daniel Borkmann daniel@iogearbox.net bpf: Add cookie object to bpf maps
-------------
Diffstat:
Documentation/userspace-api/netlink/specs.rst | 18 +- Makefile | 4 +- .../dts/freescale/imx8mp-data-modul-edm-sbc.dts | 1 + .../arm64/boot/dts/freescale/imx8mp-dhcom-som.dtsi | 1 + .../boot/dts/rockchip/rk3399-pinebook-pro.dts | 1 + arch/arm64/include/asm/module.h | 1 + arch/arm64/include/asm/module.lds.h | 1 + arch/arm64/kernel/ftrace.c | 13 +- arch/arm64/kernel/module-plts.c | 12 +- arch/arm64/kernel/module.c | 11 + arch/loongarch/kernel/signal.c | 10 +- arch/riscv/include/asm/asm.h | 2 +- arch/x86/include/asm/pgtable_64_types.h | 3 + arch/x86/mm/init_64.c | 18 + drivers/acpi/arm64/iort.c | 4 +- drivers/bluetooth/hci_vhci.c | 57 +- drivers/cpufreq/intel_pstate.c | 126 ++--- drivers/dma/mediatek/mtk-cqdma.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp.c | 146 ++--- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +- drivers/gpu/drm/amd/amdgpu/dce_v10_0.c | 5 - drivers/gpu/drm/amd/amdgpu/dce_v11_0.c | 5 - drivers/gpu/drm/amd/amdgpu/dce_v6_0.c | 5 - drivers/gpu/drm/amd/amdgpu/dce_v8_0.c | 5 - .../gpu/drm/amd/display/dc/dce/dce_link_encoder.c | 8 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 11 + drivers/gpu/drm/mediatek/mtk_drm_drv.c | 42 +- drivers/gpu/drm/mediatek/mtk_drm_drv.h | 8 +- drivers/gpu/drm/nouveau/nvkm/engine/fifo/base.c | 2 + drivers/gpu/drm/nouveau/nvkm/engine/fifo/ga100.c | 23 +- drivers/gpu/drm/nouveau/nvkm/engine/fifo/ga102.c | 1 + drivers/gpu/drm/nouveau/nvkm/engine/fifo/priv.h | 2 + drivers/hwmon/mlxreg-fan.c | 5 +- drivers/iio/chemical/pms7003.c | 5 +- drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c | 2 +- drivers/iio/light/opt3001.c | 5 +- drivers/iio/pressure/mprls0025pa.c | 10 +- drivers/isdn/mISDN/dsp_hwec.c | 6 +- drivers/net/ethernet/cadence/macb_main.c | 28 +- drivers/net/ethernet/cavium/thunder/thunder_bgx.c | 20 +- drivers/net/ethernet/intel/e1000e/ethtool.c | 10 +- drivers/net/ethernet/intel/i40e/i40e_client.c | 4 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 10 +- drivers/net/ethernet/xircom/xirc2ps_cs.c | 2 +- drivers/net/macsec.c | 8 +- drivers/net/pcs/pcs-rzn1-miic.c | 2 +- drivers/net/phy/mscc/mscc_ptp.c | 18 +- drivers/net/ppp/ppp_generic.c | 6 +- drivers/net/usb/cdc_ncm.c | 7 + drivers/net/vmxnet3/vmxnet3_drv.c | 5 +- drivers/net/wireless/ath/ath11k/core.h | 7 + drivers/net/wireless/ath/ath11k/debugfs.c | 4 +- drivers/net/wireless/ath/ath11k/debugfs_sta.c | 30 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 8 +- drivers/net/wireless/ath/ath11k/dp_tx.c | 4 +- drivers/net/wireless/ath/ath11k/mac.c | 588 ++++++++++++--------- drivers/net/wireless/ath/ath11k/peer.c | 2 +- drivers/net/wireless/ath/ath11k/wmi.c | 6 +- .../wireless/broadcom/brcm80211/brcmfmac/btcoex.c | 6 +- drivers/net/wireless/marvell/libertas/cfg.c | 9 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 5 +- drivers/net/wireless/marvell/mwifiex/main.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 4 +- drivers/net/wireless/st/cw1200/sta.c | 2 +- drivers/pci/msi/msi.c | 3 + drivers/pcmcia/omap_cf.c | 2 + drivers/pcmcia/rsrc_iodyn.c | 3 + drivers/pcmcia/rsrc_nonstatic.c | 4 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 14 + drivers/scsi/lpfc/lpfc_nvmet.c | 10 +- drivers/soc/qcom/mdt_loader.c | 12 +- drivers/spi/spi-cadence-quadspi.c | 6 +- drivers/spi/spi-fsl-lpspi.c | 24 +- drivers/spi/spi-fsl-qspi.c | 36 +- drivers/tee/optee/ffa_abi.c | 4 +- drivers/tee/tee_shm.c | 6 +- drivers/thermal/mediatek/lvts_thermal.c | 50 +- fs/btrfs/btrfs_inode.h | 2 +- fs/btrfs/extent_io.c | 2 +- fs/btrfs/inode.c | 1 + fs/btrfs/tree-log.c | 78 ++- fs/fs-writeback.c | 9 +- fs/ocfs2/inode.c | 3 + fs/proc/generic.c | 38 +- fs/smb/client/cifs_unicode.c | 3 + include/linux/bpf-cgroup.h | 5 - include/linux/bpf.h | 60 ++- include/linux/pci.h | 2 + include/linux/pgtable.h | 16 + include/linux/vmalloc.h | 16 - include/net/netlink.h | 69 ++- include/uapi/linux/netlink.h | 5 + kernel/bpf/core.c | 50 +- kernel/bpf/syscall.c | 20 +- kernel/sched/topology.c | 2 + lib/nlattr.c | 22 + mm/slub.c | 66 ++- net/atm/resources.c | 6 +- net/ax25/ax25_in.c | 4 + net/batman-adv/network-coding.c | 7 +- net/bluetooth/hci_sync.c | 2 +- net/bluetooth/l2cap_sock.c | 3 + net/bridge/br_netfilter_hooks.c | 3 - net/dsa/tag_ksz.c | 22 +- net/ipv4/devinet.c | 7 +- net/ipv4/icmp.c | 6 +- net/ipv6/ip6_icmp.c | 6 +- net/mctp/af_mctp.c | 2 +- net/netfilter/nf_conntrack_helper.c | 4 +- net/netlink/policy.c | 14 +- net/smc/smc_clc.c | 2 - net/smc/smc_ib.c | 3 + net/wireless/scan.c | 3 +- net/wireless/sme.c | 5 +- sound/pci/hda/patch_hdmi.c | 1 + sound/pci/hda/patch_realtek.c | 5 + sound/usb/mixer_quirks.c | 2 + tools/gpio/Makefile | 4 +- tools/perf/util/bpf-event.c | 39 +- tools/power/cpupower/utils/cpupower-set.c | 4 +- tools/testing/selftests/net/bind_bhash.c | 4 +- 121 files changed, 1357 insertions(+), 838 deletions(-)
On 9/8/25 09:05, Greg Kroah-Hartman wrote:
This is the start of the stable review cycle for the 6.6.105 release. There are 118 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Wed, 10 Sep 2025 15:18:22 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.105-rc2... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below.
thanks,
greg k-h
On ARCH_BRCMSTB using 32-bit and 64-bit ARM kernels, build tested on BMIPS_GENERIC:
Tested-by: Florian Fainelli florian.fainelli@broadcom.com
# Librecast Test Results
010/010 [ OK ] libmld 120/120 [ OK ] liblibrecast
CPU/kernel: Linux auntie 6.6.105-rc2-ga13907443c81 #78 SMP PREEMPT_DYNAMIC Mon Sep 8 18:11:34 -00 2025 x86_64 AMD Ryzen 9 9950X 16-Core Processor AuthenticAMD GNU/Linux
Tested-by: Brett A C Sheffield bacs@librecast.net
On 9/8/25 09:05, Greg Kroah-Hartman wrote:
This is the start of the stable review cycle for the 6.6.105 release. There are 118 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Wed, 10 Sep 2025 15:18:22 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.105-rc2... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below.
thanks,
greg k-h
Built and booted successfully on RISC-V RV64 (HiFive Unmatched).
Tested-by: Ron Economos re@w6rz.net
On Mon, 08 Sep 2025 18:05:07 +0200, Greg Kroah-Hartman wrote:
This is the start of the stable review cycle for the 6.6.105 release. There are 118 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Wed, 10 Sep 2025 15:18:22 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.105-rc2... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below.
thanks,
greg k-h
All tests passing for Tegra ...
Test results for stable-v6.6: 10 builds: 10 pass, 0 fail 28 boots: 28 pass, 0 fail 120 tests: 120 pass, 0 fail
Linux version: 6.6.105-rc2-ga13907443c81 Boards tested: tegra124-jetson-tk1, tegra186-p2771-0000, tegra186-p3509-0000+p3636-0001, tegra194-p2972-0000, tegra194-p3509-0000+p3668-0000, tegra20-ventana, tegra210-p2371-2180, tegra210-p3450-0000, tegra30-cardhu-a04
Tested-by: Jon Hunter jonathanh@nvidia.com
Jon
On Mon, 8 Sept 2025 at 21:36, Greg Kroah-Hartman gregkh@linuxfoundation.org wrote:
This is the start of the stable review cycle for the 6.6.105 release. There are 118 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Wed, 10 Sep 2025 15:18:22 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.105-rc2... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below.
thanks,
greg k-h
While running LTP controllers cgroup_fj_stress.sh testing on Juno-r2 running the Linux stable-rc 6.6.105-rc2 found these kernel warnings followed by kernel panic.
Regression Analysis: - Reproducibility? Not sure
Test regression: stable-rc 6.6.105-rc2 juno-r2 __percpu_counter_sum (lib/percpu_counter.c:147) kernel panic
Reported-by: Linux Kernel Functional Testing lkft@linaro.org
## Test log cgroup_fj_stress_net_prio_1_200_each: start (command: cgroup_fj_stress.sh net_prio 1 200 each) [ 896.950701] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 896.956815] rcu: t3-...0: (6 GPs behind) idle=0a4c/1/0x4000000000000000 softirq=118175/118181 fqs=2624 [ 896.966146] rcu: t4-...0: (73 GPs behind) idle=1c44/1/0x4000000000000000 softirq=135797/135789 fqs=2624 [ 896.975562] rcu: t(detected by 2, t=5252 jiffies, g=292241, q=10 ncpus=6) [ 896.982362] Task dump for CPU 3: [ 896.985591] task:swapper/3 state:R running task stack:0 pid:0 ppid:1 flags:0x0000000a [ 896.995532] Call trace: [ 896.997978] __switch_to (arch/arm64/kernel/process.c:559) [ 897.001478] __schedule (kernel/sched/core.c:5383 kernel/sched/core.c:6699) [ 897.004971] schedule_idle (include/asm-generic/bitops/generic-non-atomic.h:128 include/linux/thread_info.h:192 include/linux/sched.h:2260 kernel/sched/core.c:6802) [ 897.008551] __cpu_online_mask+0x0/0x20 [ 897.012398] Task dump for CPU 4: [ 897.015626] task:swapper/4 state:R running task stack:0 pid:0 ppid:1 flags:0x0000000a [ 897.025564] Call trace: [ 897.028009] __switch_to (arch/arm64/kernel/process.c:559) [ 897.031502] 0xffff000800b70080 [ 902.513737] Unable to handle kernel paging request at virtual address ffff8008fc7c9000 [ 902.521671] Mem abort info: [ 902.524464] ESR = 0x0000000096000005 [ 902.528215] EC = 0x25: DABT (current EL), IL = 32 bits [ 902.533534] SET = 0, FnV = 0 [ 902.536588] EA = 0, S1PTW = 0 [ 902.539729] FSC = 0x05: level 1 translation fault [ 902.544612] Data abort info: [ 902.547490] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 902.552982] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 902.558038] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 902.563356] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000000824a9000 [ 902.570067] [ffff8008fc7c9000] pgd=10000009fffff003, p4d=10000009fffff003, pud=0000000000000000 [ 902.578792] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 902.585070] Modules linked in: tda998x onboard_usb_hub cec crct10dif_ce hdlcd drm_dma_helper drm_kms_helper fuse drm backlight ip_tables x_tables [ 902.598177] CPU: 2 PID: 276 Comm: cron Not tainted 6.6.105-rc2 #1 [ 902.604282] Hardware name: ARM Juno development board (r2) (DT) [ 902.610208] pstate: 200000c5 (nzCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 902.617182] pc : __percpu_counter_sum (lib/percpu_counter.c:147) [ 902.621729] lr : __percpu_counter_sum (lib/percpu_counter.c:145 (discriminator 3)) [ 902.626267] sp : ffff800083723b40 [ 902.629583] x29: ffff800083723b40 x28: ffff0008268b3180 x27: ffff0008268b3828 [ 902.636739] x26: 0000000000000000 x25: 0000000000000000 x24: ffff8000826434a8 [ 902.643893] x23: ffff80008263eac0 x22: ffff80008263ea80 x21: ffff80008263ed00 [ 902.651048] x20: ffff0008268a5368 x19: 0000000000000000 x18: ffff8000881c3be8 [ 902.658202] x17: 000000040044ffff x16: 00500074b5503510 x15: 0000000000000000 [ 902.665356] x14: ffff00080037e300 x13: ffff8008fc807000 x12: 0000000034d4d91d [ 902.672510] x11: 00000000000000c0 x10: 0000000000000c20 x9 : ffff8000815ab818 [ 902.679664] x8 : ffff8000837239f8 x7 : 0000000000000000 x6 : 0000000000000000 [ 902.686818] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000001 [ 902.693972] x2 : 0000000000000006 x1 : ffff80008263eac0 x0 : ffff8008fc7c9000 [ 902.701126] Call trace: [ 902.703570] __percpu_counter_sum (lib/percpu_counter.c:147) [ 902.707762] __mmdrop (kernel/fork.c:833 (discriminator 1) kernel/fork.c:928 (discriminator 1)) [ 902.710996] finish_task_switch.isra.0 (include/linux/sched/mm.h:54 include/linux/sched/mm.h:82 include/linux/sched/mm.h:109 kernel/sched/core.c:5279) [ 902.715798] __schedule (kernel/sched/core.c:6705) [ 902.719291] schedule (kernel/sched/core.c:6774) [ 902.722522] do_nanosleep (kernel/time/hrtimer.c:1386 kernel/time/hrtimer.c:1513 kernel/time/hrtimer.c:2116) [ 902.726104] hrtimer_nanosleep (kernel/time/hrtimer.c:2163) [ 902.730121] common_nsleep (kernel/time/posix-timers.c:1354) [ 902.733701] __arm64_sys_clock_nanosleep (kernel/time/posix-timers.c:1397 (discriminator 1) kernel/time/posix-timers.c:1374 (discriminator 1) kernel/time/posix-timers.c:1374 (discriminator 1)) [ 902.738587] invoke_syscall (arch/arm64/include/asm/current.h:19 arch/arm64/kernel/syscall.c:56) [ 902.742344] el0_svc_common.constprop.0 (include/linux/thread_info.h:127 (discriminator 2) arch/arm64/kernel/syscall.c:142 (discriminator 2)) [ 902.747058] do_el0_svc (arch/arm64/kernel/syscall.c:154) [ 902.750378] el0_svc (arch/arm64/include/asm/daifflags.h:28 arch/arm64/kernel/entry-common.c:133 arch/arm64/kernel/entry-common.c:144 arch/arm64/kernel/entry-common.c:702) [ 902.753525] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:721) [ 902.757890] el0t_64_sync (arch/arm64/kernel/entry.S:599) [ 902.761559] Code: 52800003 14000005 f860db00 f9401284 (b8a46800) All code ======== 0: 52800003 mov w3, #0x0 // #0 4: 14000005 b 0x18 8: f860db00 ldr x0, [x24, w0, sxtw #3] c: f9401284 ldr x4, [x20, #32] 10:* b8a46800 ldrsw x0, [x0, x4] <-- trapping instruction
Code starting with the faulting instruction =========================================== 0: b8a46800 ldrsw x0, [x0, x4] [ 902.767660] ---[ end trace 0000000000000000 ]--- [ 902.772281] note: cron[276] exited with irqs disabled [ 902.777363] note: cron[276] exited with preempt_count 2 [ 902.786025] ------------[ cut here ]------------ [ 902.790650] WARNING: CPU: 1 PID: 1 at kernel/sched/fair.c:5259 place_entity (kernel/sched/fair.c:5259 (discriminator 1)) [ 902.798681] Modules linked in: tda998x onboard_usb_hub cec crct10dif_ce hdlcd drm_dma_helper drm_kms_helper fuse drm backlight ip_tables x_tables [ 902.811785] CPU: 1 PID: 1 Comm: systemd Tainted: G D 6.6.105-rc2 #1 [ 902.819456] Hardware name: ARM Juno development board (r2) (DT) [ 902.825383] pstate: 200000c5 (nzCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 902.832357] pc : place_entity (kernel/sched/fair.c:5259 (discriminator 1)) [ 902.836375] lr : place_entity (kernel/sched/fair.c:5185) [ 902.840304] sp : ffff800082cfbb80 [ 902.843619] x29: ffff800082cfbb80 x28: ffff0008002a0000 x27: 0000000000000000 [ 902.850775] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000001 [ 902.857930] x23: 0000000000000400 x22: 0000000000000001 x21: ffff00097edb3780 [ 902.865084] x20: 0000003bc78205b3 x19: ffff0008216bf000 x18: ffff800082cfbb08 [ 902.872239] x17: ffff000832834408 x16: ffff800081b8d668 x15: 00000000000000dc [ 902.879393] x14: 0000000000000411 x13: 0000000000000000 x12: 0000ffffb41bdbb8 [ 902.886547] x11: 0000000000000040 x10: ffff000800883628 x9 : ffff8000800fcb60 [ 902.893701] x8 : ffff0008216bf400 x7 : ffff00097edb4170 x6 : 0000000000000400 [ 902.900854] x5 : 0000000000000400 x4 : 0000000000000400 x3 : 0000000000000400 [ 902.908008] x2 : 0000000000000000 x1 : 0000000000200b20 x0 : 0000000000000000 [ 902.915162] Call trace: [ 902.917607] place_entity (kernel/sched/fair.c:5259 (discriminator 1)) [ 902.921277] enqueue_entity (kernel/sched/fair.c:188 kernel/sched/fair.c:3644 kernel/sched/fair.c:5324) [ 902.925033] enqueue_task_fair (kernel/sched/fair.c:6768 (discriminator 1)) [ 902.929050] activate_task (kernel/sched/core.c:2133) [ 902.932717] wake_up_new_task (arch/arm64/include/asm/jump_label.h:22 include/linux/jump_label.h:207 include/trace/events/sched.h:185 kernel/sched/core.c:4873) [ 902.936732] kernel_clone (kernel/fork.c:2948 (discriminator 1)) [ 902.940401] __do_sys_clone (kernel/fork.c:3058) [ 902.944069] __arm64_sys_clone (kernel/fork.c:3025) [ 902.947998] invoke_syscall (arch/arm64/include/asm/current.h:19 arch/arm64/kernel/syscall.c:56) [ 902.951754] el0_svc_common.constprop.0 (include/linux/thread_info.h:127 (discriminator 2) arch/arm64/kernel/syscall.c:142 (discriminator 2)) [ 902.956468] do_el0_svc (arch/arm64/kernel/syscall.c:154) [ 902.959789] el0_svc (arch/arm64/include/asm/daifflags.h:28 arch/arm64/kernel/entry-common.c:133 arch/arm64/kernel/entry-common.c:144 arch/arm64/kernel/entry-common.c:702) [ 902.962936] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:721) [ 902.967301] el0t_64_sync (arch/arm64/kernel/entry.S:599) [ 902.970967] ---[ end trace 0000000000000000 ]--- [ 902.976118] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000009 [ 902.984965] Mem abort info: [ 902.987773] ESR = 0x0000000096000044 [ 902.991538] EC = 0x25: DABT (current EL), IL = 32 bits [ 902.996869] SET = 0, FnV = 0 [ 902.999936] EA = 0, S1PTW = 0 [ 903.003090] FSC = 0x04: level 0 translation fault [ 903.007985] Data abort info: [ 903.010876] ISV = 0, ISS = 0x00000044, ISS2 = 0x00000000 [ 903.016380] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 903.021449] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 903.026779] user pgtable: 4k pages, 48-bit VAs, pgdp=00000008a1c7f000 [ 903.033242] [0000000000000009] pgd=0000000000000000, p4d=0000000000000000 [ 903.040064] Internal error: Oops: 0000000096000044 [#2] PREEMPT SMP [ 903.046341] Modules linked in: tda998x onboard_usb_hub cec crct10dif_ce hdlcd drm_dma_helper drm_kms_helper fuse drm backlight ip_tables x_tables [ 903.059444] CPU: 1 PID: 1 Comm: systemd Tainted: G D W 6.6.105-rc2 #1 [ 903.067114] Hardware name: ARM Juno development board (r2) (DT) [ 903.073040] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 903.080013] pc : xprt_alloc_slot (include/linux/list.h:195 include/linux/list.h:218 include/linux/list.h:229 net/sunrpc/xprt.c:1727) [ 903.084212] lr : xprt_alloc_slot (include/linux/list.h:373 (discriminator 2) net/sunrpc/xprt.c:1725 (discriminator 2)) [ 903.088403] sp : ffff800082cfb700 [ 903.091718] x29: ffff800082cfb700 x28: ffff000821bd0c00 x27: 0000000000000001 [ 903.098873] x26: 0000000000440100 x25: 0000000000000000 x24: ffff800081508198 [ 903.106028] x23: ffff80008253b008 x22: ffff000824e99200 x21: ffff000800b644c4 [ 903.113182] x20: ffff000832834700 x19: ffff000800b64000 x18: 0000000000000000 [ 903.120336] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 [ 903.127490] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [ 903.134644] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff8000815ab504 [ 903.141797] x8 : ffff800082cfb5e8 x7 : 0000000000000000 x6 : 0000000000000001 [ 903.148951] x5 : ffff80008263f000 x4 : dead000000000122 x3 : 0000000000000001 [ 903.156105] x2 : 0000000000000000 x1 : ffff000824e992c8 x0 : dead000000000100 [ 903.163259] Call trace: [ 903.165703] xprt_alloc_slot (include/linux/list.h:195 include/linux/list.h:218 include/linux/list.h:229 net/sunrpc/xprt.c:1727) [ 903.169546] xprt_reserve (net/sunrpc/xprt.c:1898 net/sunrpc/xprt.c:1920) [ 903.173038] call_reserve (net/sunrpc/clnt.c:1755) [ 903.176531] __rpc_execute (include/asm-generic/bitops/generic-non-atomic.h:128 net/sunrpc/sched.c:954) [ 903.180200] rpc_execute (include/linux/sched/mm.h:368 (discriminator 1) net/sunrpc/sched.c:1026 (discriminator 1)) [ 903.183780] rpc_run_task (net/sunrpc/clnt.c:1234) [ 903.187448] rpc_call_sync (net/sunrpc/clnt.c:1262 (discriminator 1)) [ 903.191029] nfs3_rpc_wrapper (fs/nfs/nfs3proc.c:37) [ 903.194873] nfs3_proc_getattr (fs/nfs/nfs3proc.c:123) [ 903.198803] __nfs_revalidate_inode (fs/nfs/inode.c:1231 (discriminator 2)) [ 903.203254] nfs_access_get_cached (fs/nfs/dir.c:3033 (discriminator 1) fs/nfs/dir.c:3093 (discriminator 1)) [ 903.207707] nfs_do_access (fs/nfs/dir.c:3221) [ 903.211376] nfs_permission (fs/nfs/dir.c:3335) [ 903.215132] inode_permission (fs/namei.c:530 fs/namei.c:504) [ 903.219061] link_path_walk.part.0.constprop.0 (fs/namei.c:1724 fs/namei.c:2271) [ 903.224557] path_openat (fs/namei.c:2254 (discriminator 1) fs/namei.c:3785 (discriminator 1)) [ 903.228050] do_filp_open (fs/namei.c:3816) [ 903.231630] do_sys_openat2 (fs/open.c:1419) [ 903.235383] __arm64_sys_openat (fs/open.c:1445) [ 903.239397] invoke_syscall (arch/arm64/include/asm/current.h:19 arch/arm64/kernel/syscall.c:56) [ 903.243153] el0_svc_common.constprop.0 (include/linux/thread_info.h:127 (discriminator 2) arch/arm64/kernel/syscall.c:142 (discriminator 2)) [ 903.247866] do_el0_svc (arch/arm64/kernel/syscall.c:154) [ 903.251187] el0_svc (arch/arm64/include/asm/daifflags.h:28 arch/arm64/kernel/entry-common.c:133 arch/arm64/kernel/entry-common.c:144 arch/arm64/kernel/entry-common.c:702) [ 903.254333] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:721) [ 903.258699] el0t_64_sync (arch/arm64/kernel/entry.S:599) [ 903.262367] Code: f2fbd5a0 91008804 d1032036 a9400823 (f9000462) All code ======== 0: f2fbd5a0 movk x0, #0xdead, lsl #48 4: 91008804 add x4, x0, #0x22 8: d1032036 sub x22, x1, #0xc8 c: a9400823 ldp x3, x2, [x1] 10:* f9000462 str x2, [x3, #8] <-- trapping instruction
Code starting with the faulting instruction =========================================== 0: f9000462 str x2, [x3, #8] [ 903.268468] ---[ end trace 0000000000000000 ]--- [ 903.273113] note: systemd[1] exited with preempt_count 1 [ 903.278453] Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b [ 903.286120] SMP: stopping secondary CPUs [ 904.397045] SMP: failed to stop secondary CPUs 0-1,3-5 [ 904.402191] Kernel Offset: disabled [ 904.405679] CPU features: 0x0,8000020c,3c020000,0000421b [ 904.410998] Memory Limit: none [ 904.414054] ---[ end Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b ]---
- https://qa-reports.linaro.org/api/testruns/29825073/log_file/ - https://lkft.validation.linaro.org/scheduler/job/8440380#L2148 - https://storage.tuxsuite.com/public/linaro/lkft/builds/32QPM3xxbSmOi7BTNwtgC... - https://storage.tuxsuite.com/public/linaro/lkft/builds/32QPM3xxbSmOi7BTNwtgC... - https://regressions.linaro.org/lkft/linux-stable-rc-linux-6.6.y/v6.6.103-195...
## Build * kernel: 6.6.105-rc2 * git: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git * git commit: a13907443c81b8a2c0032ca5303ab97ba8e99753 * git describe: v6.6.103-195-ga13907443c81 * test details: https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.6.y/build/v6.6.10...
## Test Regressions (compared to v6.6.103-76-g12cf6be144d1)
## Metric Regressions (compared to v6.6.103-76-g12cf6be144d1)
## Test Fixes (compared to v6.6.103-76-g12cf6be144d1)
## Metric Fixes (compared to v6.6.103-76-g12cf6be144d1)
## Test result summary total: 288386, pass: 268054, fail: 6579, skip: 13280, xfail: 473
## Build Summary * arc: 5 total, 5 passed, 0 failed * arm: 129 total, 129 passed, 0 failed * arm64: 44 total, 44 passed, 0 failed * i386: 23 total, 23 passed, 0 failed * mips: 26 total, 25 passed, 1 failed * parisc: 4 total, 4 passed, 0 failed * powerpc: 32 total, 31 passed, 1 failed * riscv: 15 total, 15 passed, 0 failed * s390: 14 total, 13 passed, 1 failed * sh: 10 total, 10 passed, 0 failed * sparc: 7 total, 7 passed, 0 failed * x86_64: 37 total, 36 passed, 1 failed
## Test suites summary * boot * commands * kselftest-arm64 * kselftest-breakpoints * kselftest-capabilities * kselftest-cgroup * kselftest-clone3 * kselftest-core * kselftest-cpu-hotplug * kselftest-cpufreq * kselftest-efivarfs * kselftest-exec * kselftest-fpu * kselftest-ftrace * kselftest-futex * kselftest-gpio * kselftest-intel_pstate * kselftest-ipc * kselftest-kcmp * kselftest-kvm * kselftest-livepatch * kselftest-membarrier * kselftest-memfd * kselftest-mincore * kselftest-mm * kselftest-mqueue * kselftest-net * kselftest-net-mptcp * kselftest-openat2 * kselftest-ptrace * kselftest-rseq * kselftest-rtc * kselftest-seccomp * kselftest-sigaltstack * kselftest-size * kselftest-tc-testing * kselftest-timers * kselftest-tmpfs * kselftest-tpm2 * kselftest-user_events * kselftest-vDSO * kselftest-x86 * kunit * kvm-unit-tests * lava * libgpiod * libhugetlbfs * log-parser-boot * log-parser-build-clang * log-parser-build-gcc * log-parser-test * ltp-capability * ltp-commands * ltp-containers * ltp-controllers * ltp-cpuhotplug * ltp-crypto * ltp-cve * ltp-dio * ltp-fcntl-locktests * ltp-fs * ltp-fs_bind * ltp-fs_perms_simple * ltp-hugetlb * ltp-math * ltp-mm * ltp-nptl * ltp-pty * ltp-sched * ltp-smoke * ltp-syscalls * ltp-tracing * modules * perf * rcutorture
-- Linaro LKFT https://lkft.linaro.org
Am 08.09.2025 um 18:05 schrieb Greg Kroah-Hartman:
This is the start of the stable review cycle for the 6.6.105 release. There are 118 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Just like rc1, rc2 builds, boots and works fine on my 2-socket Ivy Bridge Xeon E5-2697 v2 server. No dmesg oddities or regressions found.
Tested-by: Peter Schneider pschneider1968@googlemail.com
Beste Grüße, Peter Schneider
The kernel, bpf tool, perf tool, and kselftest builds fine for v6.6.105-rc2 on x86 and arm64 Azure VM.
Tested-by: Hardik Garg hargar@linux.microsoft.com
Thanks, Hardik
linux-stable-mirror@lists.linaro.org