On Mon, 8 Sept 2025 at 21:36, Greg Kroah-Hartman
<gregkh@linuxfoundation.org> wrote:
>
> This is the start of the stable review cycle for the 6.6.105 release.
> There are 118 patches in this series, all will be posted as a response
> to this one. If anyone has any issues with these being applied, please
> let me know.
>
> Responses should be made by Wed, 10 Sep 2025 15:18:22 +0000.
> Anything received after that time might be too late.
>
> The whole patch series can be found in one patch at:
> https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.105-rc2.gz
> or in the git tree and branch at:
> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y
> and the diffstat can be found below.
>
> thanks,
>
> greg k-h
While running LTP controllers cgroup_fj_stress.sh testing on Juno-r2 running the
Linux stable-rc 6.6.105-rc2 found these kernel warnings followed by
kernel panic.
Regression Analysis:
- Reproducibility? Not sure
Test regression: stable-rc 6.6.105-rc2 juno-r2 __percpu_counter_sum
(lib/percpu_counter.c:147) kernel panic
Reported-by: Linux Kernel Functional Testing <lkft@linaro.org>
## Test log
cgroup_fj_stress_net_prio_1_200_each: start (command:
cgroup_fj_stress.sh net_prio 1 200 each)
[ 896.950701] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 896.956815] rcu: t3-...0: (6 GPs behind)
idle=0a4c/1/0x4000000000000000 softirq=118175/118181 fqs=2624
[ 896.966146] rcu: t4-...0: (73 GPs behind)
idle=1c44/1/0x4000000000000000 softirq=135797/135789 fqs=2624
[ 896.975562] rcu: t(detected by 2, t=5252 jiffies, g=292241, q=10 ncpus=6)
[ 896.982362] Task dump for CPU 3:
[ 896.985591] task:swapper/3 state:R running task stack:0
pid:0 ppid:1 flags:0x0000000a
[ 896.995532] Call trace:
[ 896.997978] __switch_to (arch/arm64/kernel/process.c:559)
[ 897.001478] __schedule (kernel/sched/core.c:5383 kernel/sched/core.c:6699)
[ 897.004971] schedule_idle
(include/asm-generic/bitops/generic-non-atomic.h:128
include/linux/thread_info.h:192 include/linux/sched.h:2260
kernel/sched/core.c:6802)
[ 897.008551] __cpu_online_mask+0x0/0x20
[ 897.012398] Task dump for CPU 4:
[ 897.015626] task:swapper/4 state:R running task stack:0
pid:0 ppid:1 flags:0x0000000a
[ 897.025564] Call trace:
[ 897.028009] __switch_to (arch/arm64/kernel/process.c:559)
[ 897.031502] 0xffff000800b70080
[ 902.513737] Unable to handle kernel paging request at virtual
address ffff8008fc7c9000
[ 902.521671] Mem abort info:
[ 902.524464] ESR = 0x0000000096000005
[ 902.528215] EC = 0x25: DABT (current EL), IL = 32 bits
[ 902.533534] SET = 0, FnV = 0
[ 902.536588] EA = 0, S1PTW = 0
[ 902.539729] FSC = 0x05: level 1 translation fault
[ 902.544612] Data abort info:
[ 902.547490] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
[ 902.552982] CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[ 902.558038] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[ 902.563356] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000000824a9000
[ 902.570067] [ffff8008fc7c9000] pgd=10000009fffff003,
p4d=10000009fffff003, pud=0000000000000000
[ 902.578792] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP
[ 902.585070] Modules linked in: tda998x onboard_usb_hub cec
crct10dif_ce hdlcd drm_dma_helper drm_kms_helper fuse drm backlight
ip_tables x_tables
[ 902.598177] CPU: 2 PID: 276 Comm: cron Not tainted 6.6.105-rc2 #1
[ 902.604282] Hardware name: ARM Juno development board (r2) (DT)
[ 902.610208] pstate: 200000c5 (nzCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 902.617182] pc : __percpu_counter_sum (lib/percpu_counter.c:147)
[ 902.621729] lr : __percpu_counter_sum (lib/percpu_counter.c:145
(discriminator 3))
[ 902.626267] sp : ffff800083723b40
[ 902.629583] x29: ffff800083723b40 x28: ffff0008268b3180 x27: ffff0008268b3828
[ 902.636739] x26: 0000000000000000 x25: 0000000000000000 x24: ffff8000826434a8
[ 902.643893] x23: ffff80008263eac0 x22: ffff80008263ea80 x21: ffff80008263ed00
[ 902.651048] x20: ffff0008268a5368 x19: 0000000000000000 x18: ffff8000881c3be8
[ 902.658202] x17: 000000040044ffff x16: 00500074b5503510 x15: 0000000000000000
[ 902.665356] x14: ffff00080037e300 x13: ffff8008fc807000 x12: 0000000034d4d91d
[ 902.672510] x11: 00000000000000c0 x10: 0000000000000c20 x9 : ffff8000815ab818
[ 902.679664] x8 : ffff8000837239f8 x7 : 0000000000000000 x6 : 0000000000000000
[ 902.686818] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000001
[ 902.693972] x2 : 0000000000000006 x1 : ffff80008263eac0 x0 : ffff8008fc7c9000
[ 902.701126] Call trace:
[ 902.703570] __percpu_counter_sum (lib/percpu_counter.c:147)
[ 902.707762] __mmdrop (kernel/fork.c:833 (discriminator 1)
kernel/fork.c:928 (discriminator 1))
[ 902.710996] finish_task_switch.isra.0 (include/linux/sched/mm.h:54
include/linux/sched/mm.h:82 include/linux/sched/mm.h:109
kernel/sched/core.c:5279)
[ 902.715798] __schedule (kernel/sched/core.c:6705)
[ 902.719291] schedule (kernel/sched/core.c:6774)
[ 902.722522] do_nanosleep (kernel/time/hrtimer.c:1386
kernel/time/hrtimer.c:1513 kernel/time/hrtimer.c:2116)
[ 902.726104] hrtimer_nanosleep (kernel/time/hrtimer.c:2163)
[ 902.730121] common_nsleep (kernel/time/posix-timers.c:1354)
[ 902.733701] __arm64_sys_clock_nanosleep
(kernel/time/posix-timers.c:1397 (discriminator 1)
kernel/time/posix-timers.c:1374 (discriminator 1)
kernel/time/posix-timers.c:1374 (discriminator 1))
[ 902.738587] invoke_syscall (arch/arm64/include/asm/current.h:19
arch/arm64/kernel/syscall.c:56)
[ 902.742344] el0_svc_common.constprop.0
(include/linux/thread_info.h:127 (discriminator 2)
arch/arm64/kernel/syscall.c:142 (discriminator 2))
[ 902.747058] do_el0_svc (arch/arm64/kernel/syscall.c:154)
[ 902.750378] el0_svc (arch/arm64/include/asm/daifflags.h:28
arch/arm64/kernel/entry-common.c:133
arch/arm64/kernel/entry-common.c:144
arch/arm64/kernel/entry-common.c:702)
[ 902.753525] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:721)
[ 902.757890] el0t_64_sync (arch/arm64/kernel/entry.S:599)
[ 902.761559] Code: 52800003 14000005 f860db00 f9401284 (b8a46800)
All code
========
0: 52800003 mov w3, #0x0 // #0
4: 14000005 b 0x18
8: f860db00 ldr x0, [x24, w0, sxtw #3]
c: f9401284 ldr x4, [x20, #32]
10:* b8a46800 ldrsw x0, [x0, x4] <-- trapping instruction
Code starting with the faulting instruction
===========================================
0: b8a46800 ldrsw x0, [x0, x4]
[ 902.767660] ---[ end trace 0000000000000000 ]---
[ 902.772281] note: cron[276] exited with irqs disabled
[ 902.777363] note: cron[276] exited with preempt_count 2
[ 902.786025] ------------[ cut here ]------------
[ 902.790650] WARNING: CPU: 1 PID: 1 at kernel/sched/fair.c:5259
place_entity (kernel/sched/fair.c:5259 (discriminator 1))
[ 902.798681] Modules linked in: tda998x onboard_usb_hub cec
crct10dif_ce hdlcd drm_dma_helper drm_kms_helper fuse drm backlight
ip_tables x_tables
[ 902.811785] CPU: 1 PID: 1 Comm: systemd Tainted: G D
6.6.105-rc2 #1
[ 902.819456] Hardware name: ARM Juno development board (r2) (DT)
[ 902.825383] pstate: 200000c5 (nzCv daIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 902.832357] pc : place_entity (kernel/sched/fair.c:5259 (discriminator 1))
[ 902.836375] lr : place_entity (kernel/sched/fair.c:5185)
[ 902.840304] sp : ffff800082cfbb80
[ 902.843619] x29: ffff800082cfbb80 x28: ffff0008002a0000 x27: 0000000000000000
[ 902.850775] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000001
[ 902.857930] x23: 0000000000000400 x22: 0000000000000001 x21: ffff00097edb3780
[ 902.865084] x20: 0000003bc78205b3 x19: ffff0008216bf000 x18: ffff800082cfbb08
[ 902.872239] x17: ffff000832834408 x16: ffff800081b8d668 x15: 00000000000000dc
[ 902.879393] x14: 0000000000000411 x13: 0000000000000000 x12: 0000ffffb41bdbb8
[ 902.886547] x11: 0000000000000040 x10: ffff000800883628 x9 : ffff8000800fcb60
[ 902.893701] x8 : ffff0008216bf400 x7 : ffff00097edb4170 x6 : 0000000000000400
[ 902.900854] x5 : 0000000000000400 x4 : 0000000000000400 x3 : 0000000000000400
[ 902.908008] x2 : 0000000000000000 x1 : 0000000000200b20 x0 : 0000000000000000
[ 902.915162] Call trace:
[ 902.917607] place_entity (kernel/sched/fair.c:5259 (discriminator 1))
[ 902.921277] enqueue_entity (kernel/sched/fair.c:188
kernel/sched/fair.c:3644 kernel/sched/fair.c:5324)
[ 902.925033] enqueue_task_fair (kernel/sched/fair.c:6768 (discriminator 1))
[ 902.929050] activate_task (kernel/sched/core.c:2133)
[ 902.932717] wake_up_new_task
(arch/arm64/include/asm/jump_label.h:22 include/linux/jump_label.h:207
include/trace/events/sched.h:185 kernel/sched/core.c:4873)
[ 902.936732] kernel_clone (kernel/fork.c:2948 (discriminator 1))
[ 902.940401] __do_sys_clone (kernel/fork.c:3058)
[ 902.944069] __arm64_sys_clone (kernel/fork.c:3025)
[ 902.947998] invoke_syscall (arch/arm64/include/asm/current.h:19
arch/arm64/kernel/syscall.c:56)
[ 902.951754] el0_svc_common.constprop.0
(include/linux/thread_info.h:127 (discriminator 2)
arch/arm64/kernel/syscall.c:142 (discriminator 2))
[ 902.956468] do_el0_svc (arch/arm64/kernel/syscall.c:154)
[ 902.959789] el0_svc (arch/arm64/include/asm/daifflags.h:28
arch/arm64/kernel/entry-common.c:133
arch/arm64/kernel/entry-common.c:144
arch/arm64/kernel/entry-common.c:702)
[ 902.962936] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:721)
[ 902.967301] el0t_64_sync (arch/arm64/kernel/entry.S:599)
[ 902.970967] ---[ end trace 0000000000000000 ]---
[ 902.976118] Unable to handle kernel NULL pointer dereference at
virtual address 0000000000000009
[ 902.984965] Mem abort info:
[ 902.987773] ESR = 0x0000000096000044
[ 902.991538] EC = 0x25: DABT (current EL), IL = 32 bits
[ 902.996869] SET = 0, FnV = 0
[ 902.999936] EA = 0, S1PTW = 0
[ 903.003090] FSC = 0x04: level 0 translation fault
[ 903.007985] Data abort info:
[ 903.010876] ISV = 0, ISS = 0x00000044, ISS2 = 0x00000000
[ 903.016380] CM = 0, WnR = 1, TnD = 0, TagAccess = 0
[ 903.021449] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[ 903.026779] user pgtable: 4k pages, 48-bit VAs, pgdp=00000008a1c7f000
[ 903.033242] [0000000000000009] pgd=0000000000000000, p4d=0000000000000000
[ 903.040064] Internal error: Oops: 0000000096000044 [#2] PREEMPT SMP
[ 903.046341] Modules linked in: tda998x onboard_usb_hub cec
crct10dif_ce hdlcd drm_dma_helper drm_kms_helper fuse drm backlight
ip_tables x_tables
[ 903.059444] CPU: 1 PID: 1 Comm: systemd Tainted: G D W
6.6.105-rc2 #1
[ 903.067114] Hardware name: ARM Juno development board (r2) (DT)
[ 903.073040] pstate: 20000005 (nzCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[ 903.080013] pc : xprt_alloc_slot (include/linux/list.h:195
include/linux/list.h:218 include/linux/list.h:229
net/sunrpc/xprt.c:1727)
[ 903.084212] lr : xprt_alloc_slot (include/linux/list.h:373
(discriminator 2) net/sunrpc/xprt.c:1725 (discriminator 2))
[ 903.088403] sp : ffff800082cfb700
[ 903.091718] x29: ffff800082cfb700 x28: ffff000821bd0c00 x27: 0000000000000001
[ 903.098873] x26: 0000000000440100 x25: 0000000000000000 x24: ffff800081508198
[ 903.106028] x23: ffff80008253b008 x22: ffff000824e99200 x21: ffff000800b644c4
[ 903.113182] x20: ffff000832834700 x19: ffff000800b64000 x18: 0000000000000000
[ 903.120336] x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000
[ 903.127490] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000
[ 903.134644] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff8000815ab504
[ 903.141797] x8 : ffff800082cfb5e8 x7 : 0000000000000000 x6 : 0000000000000001
[ 903.148951] x5 : ffff80008263f000 x4 : dead000000000122 x3 : 0000000000000001
[ 903.156105] x2 : 0000000000000000 x1 : ffff000824e992c8 x0 : dead000000000100
[ 903.163259] Call trace:
[ 903.165703] xprt_alloc_slot (include/linux/list.h:195
include/linux/list.h:218 include/linux/list.h:229
net/sunrpc/xprt.c:1727)
[ 903.169546] xprt_reserve (net/sunrpc/xprt.c:1898 net/sunrpc/xprt.c:1920)
[ 903.173038] call_reserve (net/sunrpc/clnt.c:1755)
[ 903.176531] __rpc_execute
(include/asm-generic/bitops/generic-non-atomic.h:128
net/sunrpc/sched.c:954)
[ 903.180200] rpc_execute (include/linux/sched/mm.h:368
(discriminator 1) net/sunrpc/sched.c:1026 (discriminator 1))
[ 903.183780] rpc_run_task (net/sunrpc/clnt.c:1234)
[ 903.187448] rpc_call_sync (net/sunrpc/clnt.c:1262 (discriminator 1))
[ 903.191029] nfs3_rpc_wrapper (fs/nfs/nfs3proc.c:37)
[ 903.194873] nfs3_proc_getattr (fs/nfs/nfs3proc.c:123)
[ 903.198803] __nfs_revalidate_inode (fs/nfs/inode.c:1231 (discriminator 2))
[ 903.203254] nfs_access_get_cached (fs/nfs/dir.c:3033 (discriminator
1) fs/nfs/dir.c:3093 (discriminator 1))
[ 903.207707] nfs_do_access (fs/nfs/dir.c:3221)
[ 903.211376] nfs_permission (fs/nfs/dir.c:3335)
[ 903.215132] inode_permission (fs/namei.c:530 fs/namei.c:504)
[ 903.219061] link_path_walk.part.0.constprop.0 (fs/namei.c:1724
fs/namei.c:2271)
[ 903.224557] path_openat (fs/namei.c:2254 (discriminator 1)
fs/namei.c:3785 (discriminator 1))
[ 903.228050] do_filp_open (fs/namei.c:3816)
[ 903.231630] do_sys_openat2 (fs/open.c:1419)
[ 903.235383] __arm64_sys_openat (fs/open.c:1445)
[ 903.239397] invoke_syscall (arch/arm64/include/asm/current.h:19
arch/arm64/kernel/syscall.c:56)
[ 903.243153] el0_svc_common.constprop.0
(include/linux/thread_info.h:127 (discriminator 2)
arch/arm64/kernel/syscall.c:142 (discriminator 2))
[ 903.247866] do_el0_svc (arch/arm64/kernel/syscall.c:154)
[ 903.251187] el0_svc (arch/arm64/include/asm/daifflags.h:28
arch/arm64/kernel/entry-common.c:133
arch/arm64/kernel/entry-common.c:144
arch/arm64/kernel/entry-common.c:702)
[ 903.254333] el0t_64_sync_handler (arch/arm64/kernel/entry-common.c:721)
[ 903.258699] el0t_64_sync (arch/arm64/kernel/entry.S:599)
[ 903.262367] Code: f2fbd5a0 91008804 d1032036 a9400823 (f9000462)
All code
========
0: f2fbd5a0 movk x0, #0xdead, lsl #48
4: 91008804 add x4, x0, #0x22
8: d1032036 sub x22, x1, #0xc8
c: a9400823 ldp x3, x2, [x1]
10:* f9000462 str x2, [x3, #8] <-- trapping instruction
Code starting with the faulting instruction
===========================================
0: f9000462 str x2, [x3, #8]
[ 903.268468] ---[ end trace 0000000000000000 ]---
[ 903.273113] note: systemd[1] exited with preempt_count 1
[ 903.278453] Kernel panic - not syncing: Attempted to kill init!
exitcode=0x0000000b
[ 903.286120] SMP: stopping secondary CPUs
[ 904.397045] SMP: failed to stop secondary CPUs 0-1,3-5
[ 904.402191] Kernel Offset: disabled
[ 904.405679] CPU features: 0x0,8000020c,3c020000,0000421b
[ 904.410998] Memory Limit: none
[ 904.414054] ---[ end Kernel panic - not syncing: Attempted to kill
init! exitcode=0x0000000b ]---
- https://qa-reports.linaro.org/api/testruns/29825073/log_file/
- https://lkft.validation.linaro.org/scheduler/job/8440380#L2148
- https://storage.tuxsuite.com/public/linaro/lkft/builds/32QPM3xxbSmOi7BTNwtgC47Erjg/config
- https://storage.tuxsuite.com/public/linaro/lkft/builds/32QPM3xxbSmOi7BTNwtgC47Erjg/
- https://regressions.linaro.org/lkft/linux-stable-rc-linux-6.6.y/v6.6.103-195-ga13907443c81/log-parser-test/panic-multiline-kernel-panic-not-syncing-attempted-to-kill-init-exitcode/
## Build
* kernel: 6.6.105-rc2
* git: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git
* git commit: a13907443c81b8a2c0032ca5303ab97ba8e99753
* git describe: v6.6.103-195-ga13907443c81
* test details:
https://qa-reports.linaro.org/lkft/linux-stable-rc-linux-6.6.y/build/v6.6.103-195-ga13907443c81
## Test Regressions (compared to v6.6.103-76-g12cf6be144d1)
## Metric Regressions (compared to v6.6.103-76-g12cf6be144d1)
## Test Fixes (compared to v6.6.103-76-g12cf6be144d1)
## Metric Fixes (compared to v6.6.103-76-g12cf6be144d1)
## Test result summary
total: 288386, pass: 268054, fail: 6579, skip: 13280, xfail: 473
## Build Summary
* arc: 5 total, 5 passed, 0 failed
* arm: 129 total, 129 passed, 0 failed
* arm64: 44 total, 44 passed, 0 failed
* i386: 23 total, 23 passed, 0 failed
* mips: 26 total, 25 passed, 1 failed
* parisc: 4 total, 4 passed, 0 failed
* powerpc: 32 total, 31 passed, 1 failed
* riscv: 15 total, 15 passed, 0 failed
* s390: 14 total, 13 passed, 1 failed
* sh: 10 total, 10 passed, 0 failed
* sparc: 7 total, 7 passed, 0 failed
* x86_64: 37 total, 36 passed, 1 failed
## Test suites summary
* boot
* commands
* kselftest-arm64
* kselftest-breakpoints
* kselftest-capabilities
* kselftest-cgroup
* kselftest-clone3
* kselftest-core
* kselftest-cpu-hotplug
* kselftest-cpufreq
* kselftest-efivarfs
* kselftest-exec
* kselftest-fpu
* kselftest-ftrace
* kselftest-futex
* kselftest-gpio
* kselftest-intel_pstate
* kselftest-ipc
* kselftest-kcmp
* kselftest-kvm
* kselftest-livepatch
* kselftest-membarrier
* kselftest-memfd
* kselftest-mincore
* kselftest-mm
* kselftest-mqueue
* kselftest-net
* kselftest-net-mptcp
* kselftest-openat2
* kselftest-ptrace
* kselftest-rseq
* kselftest-rtc
* kselftest-seccomp
* kselftest-sigaltstack
* kselftest-size
* kselftest-tc-testing
* kselftest-timers
* kselftest-tmpfs
* kselftest-tpm2
* kselftest-user_events
* kselftest-vDSO
* kselftest-x86
* kunit
* kvm-unit-tests
* lava
* libgpiod
* libhugetlbfs
* log-parser-boot
* log-parser-build-clang
* log-parser-build-gcc
* log-parser-test
* ltp-capability
* ltp-commands
* ltp-containers
* ltp-controllers
* ltp-cpuhotplug
* ltp-crypto
* ltp-cve
* ltp-dio
* ltp-fcntl-locktests
* ltp-fs
* ltp-fs_bind
* ltp-fs_perms_simple
* ltp-hugetlb
* ltp-math
* ltp-mm
* ltp-nptl
* ltp-pty
* ltp-sched
* ltp-smoke
* ltp-syscalls
* ltp-tracing
* modules
* perf
* rcutorture
--
Linaro LKFT
https://lkft.linaro.org