July 2025 - Kernel - mailweb.openeuler.org

[openeuler:openEuler-1.0-LTS 1605/1605] fs/btrfs/super.c:1643:10: warning: variable 'mode' set but not used
by kernel test robot 02 Jul '25

02 Jul '25

tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 890108d01fde2c3b6dde4d169b695ce64362f135 commit: 93b9bcdf9fbcb683d4e8c44ee8cec0989053d4de [1605/1605] btrfs: remove unused parameter from btrfs_parse_subvol_options config: x86_64-buildonly-randconfig-2001-20250501 (https://download.01.org/0day-ci/archive/20250701/202507011948.EYIcVkOC-lkp@…) compiler: clang version 20.1.2 (https://github.com/llvm/llvm-project 58df0ef89dd64126512e4ee27b4ac3fd8ddf6247) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250701/202507011948.EYIcVkOC-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507011948.EYIcVkOC-lkp@intel.com/ All warnings (new ones prefixed by >>): >> fs/btrfs/super.c:1643:10: warning: variable 'mode' set but not used [-Wunused-but-set-variable] 1643 | fmode_t mode = FMODE_READ; | ^ 1 warning generated. vim +/mode +1643 fs/btrfs/super.c 312c89fbca06896 Misono, Tomohiro 2017-12-14 1615 edf24abe51493cc Christoph Hellwig 2008-06-10 1616 /* 312c89fbca06896 Misono, Tomohiro 2017-12-14 1617 * Mount function which is called by VFS layer. edf24abe51493cc Christoph Hellwig 2008-06-10 1618 * 312c89fbca06896 Misono, Tomohiro 2017-12-14 1619 * In order to allow mounting a subvolume directly, btrfs uses mount_subtree() 312c89fbca06896 Misono, Tomohiro 2017-12-14 1620 * which needs vfsmount* of device's root (/). This means device's root has to 312c89fbca06896 Misono, Tomohiro 2017-12-14 1621 * be mounted internally in any case. 312c89fbca06896 Misono, Tomohiro 2017-12-14 1622 * 312c89fbca06896 Misono, Tomohiro 2017-12-14 1623 * Operation flow: 312c89fbca06896 Misono, Tomohiro 2017-12-14 1624 * 1. Parse subvol id related options for later use in mount_subvol(). 312c89fbca06896 Misono, Tomohiro 2017-12-14 1625 * 312c89fbca06896 Misono, Tomohiro 2017-12-14 1626 * 2. Mount device's root (/) by calling vfs_kern_mount(). 312c89fbca06896 Misono, Tomohiro 2017-12-14 1627 * 312c89fbca06896 Misono, Tomohiro 2017-12-14 1628 * NOTE: vfs_kern_mount() is used by VFS to call btrfs_mount() in the 312c89fbca06896 Misono, Tomohiro 2017-12-14 1629 * first place. In order to avoid calling btrfs_mount() again, we use 312c89fbca06896 Misono, Tomohiro 2017-12-14 1630 * different file_system_type which is not registered to VFS by 312c89fbca06896 Misono, Tomohiro 2017-12-14 1631 * register_filesystem() (btrfs_root_fs_type). As a result, 312c89fbca06896 Misono, Tomohiro 2017-12-14 1632 * btrfs_mount_root() is called. The return value will be used by 312c89fbca06896 Misono, Tomohiro 2017-12-14 1633 * mount_subtree() in mount_subvol(). 312c89fbca06896 Misono, Tomohiro 2017-12-14 1634 * 312c89fbca06896 Misono, Tomohiro 2017-12-14 1635 * 3. Call mount_subvol() to get the dentry of subvolume. Since there is 312c89fbca06896 Misono, Tomohiro 2017-12-14 1636 * "btrfs subvolume set-default", mount_subvol() is called always. edf24abe51493cc Christoph Hellwig 2008-06-10 1637 */ 061dbc6b9010bc1 Al Viro 2010-07-26 1638 static struct dentry *btrfs_mount(struct file_system_type *fs_type, int flags, 306e16ce13c0f3d David Sterba 2011-04-19 1639 const char *device_name, void *data) 4b82d6e4a592016 Yan 2007-08-29 1640 { 312c89fbca06896 Misono, Tomohiro 2017-12-14 1641 struct vfsmount *mnt_root; 312c89fbca06896 Misono, Tomohiro 2017-12-14 1642 struct dentry *root; 97288f2c71e4696 Christoph Hellwig 2008-12-02 @1643 fmode_t mode = FMODE_READ; 73f73415caddbc0 Josef Bacik 2009-12-04 1644 char *subvol_name = NULL; 73f73415caddbc0 Josef Bacik 2009-12-04 1645 u64 subvol_objectid = 0; 4b82d6e4a592016 Yan 2007-08-29 1646 int error = 0; 4b82d6e4a592016 Yan 2007-08-29 1647 1751e8a6cb935e5 Linus Torvalds 2017-11-27 1648 if (!(flags & SB_RDONLY)) 97288f2c71e4696 Christoph Hellwig 2008-12-02 1649 mode |= FMODE_WRITE; 97288f2c71e4696 Christoph Hellwig 2008-12-02 1650 93b9bcdf9fbcb68 Gu Jinxiang 2018-07-09 1651 error = btrfs_parse_subvol_options(data, &subvol_name, 93b9bcdf9fbcb68 Gu Jinxiang 2018-07-09 1652 &subvol_objectid); f23c8af8ca2789e Ilya Dryomov 2011-11-08 1653 if (error) { f23c8af8ca2789e Ilya Dryomov 2011-11-08 1654 kfree(subvol_name); 061dbc6b9010bc1 Al Viro 2010-07-26 1655 return ERR_PTR(error); f23c8af8ca2789e Ilya Dryomov 2011-11-08 1656 } edf24abe51493cc Christoph Hellwig 2008-06-10 1657 312c89fbca06896 Misono, Tomohiro 2017-12-14 1658 /* mount device's root (/) */ 312c89fbca06896 Misono, Tomohiro 2017-12-14 1659 mnt_root = vfs_kern_mount(&btrfs_root_fs_type, flags, device_name, data); 312c89fbca06896 Misono, Tomohiro 2017-12-14 1660 if (PTR_ERR_OR_ZERO(mnt_root) == -EBUSY) { 312c89fbca06896 Misono, Tomohiro 2017-12-14 1661 if (flags & SB_RDONLY) { 312c89fbca06896 Misono, Tomohiro 2017-12-14 1662 mnt_root = vfs_kern_mount(&btrfs_root_fs_type, 312c89fbca06896 Misono, Tomohiro 2017-12-14 1663 flags & ~SB_RDONLY, device_name, data); 312c89fbca06896 Misono, Tomohiro 2017-12-14 1664 } else { 312c89fbca06896 Misono, Tomohiro 2017-12-14 1665 mnt_root = vfs_kern_mount(&btrfs_root_fs_type, 312c89fbca06896 Misono, Tomohiro 2017-12-14 1666 flags | SB_RDONLY, device_name, data); 312c89fbca06896 Misono, Tomohiro 2017-12-14 1667 if (IS_ERR(mnt_root)) { 312c89fbca06896 Misono, Tomohiro 2017-12-14 1668 root = ERR_CAST(mnt_root); 312c89fbca06896 Misono, Tomohiro 2017-12-14 1669 goto out; f667aef6af626d0 Qu Wenruo 2014-09-23 1670 } 04d21a244fdf79d Ilya Dryomov 2011-11-09 1671 312c89fbca06896 Misono, Tomohiro 2017-12-14 1672 down_write(&mnt_root->mnt_sb->s_umount); 312c89fbca06896 Misono, Tomohiro 2017-12-14 1673 error = btrfs_remount(mnt_root->mnt_sb, &flags, NULL); 312c89fbca06896 Misono, Tomohiro 2017-12-14 1674 up_write(&mnt_root->mnt_sb->s_umount); 312c89fbca06896 Misono, Tomohiro 2017-12-14 1675 if (error < 0) { 312c89fbca06896 Misono, Tomohiro 2017-12-14 1676 root = ERR_PTR(error); 312c89fbca06896 Misono, Tomohiro 2017-12-14 1677 mntput(mnt_root); 312c89fbca06896 Misono, Tomohiro 2017-12-14 1678 goto out; 04d21a244fdf79d Ilya Dryomov 2011-11-09 1679 } 6c41761fc6efe15 David Sterba 2011-04-13 1680 } 830c4adbd04a79f Josef Bacik 2011-07-25 1681 } 312c89fbca06896 Misono, Tomohiro 2017-12-14 1682 if (IS_ERR(mnt_root)) { 312c89fbca06896 Misono, Tomohiro 2017-12-14 1683 root = ERR_CAST(mnt_root); 312c89fbca06896 Misono, Tomohiro 2017-12-14 1684 goto out; f667aef6af626d0 Qu Wenruo 2014-09-23 1685 } 4b82d6e4a592016 Yan 2007-08-29 1686 312c89fbca06896 Misono, Tomohiro 2017-12-14 1687 /* mount_subvol() will free subvol_name and mnt_root */ 5bedc48a8f9e1d6 David Sterba 2018-01-02 1688 root = mount_subvol(subvol_name, subvol_objectid, device_name, mnt_root); 4b82d6e4a592016 Yan 2007-08-29 1689 312c89fbca06896 Misono, Tomohiro 2017-12-14 1690 out: 312c89fbca06896 Misono, Tomohiro 2017-12-14 1691 return root; 4b82d6e4a592016 Yan 2007-08-29 1692 } 2e635a278354a1a Chris Mason 2007-03-21 1693 :::::: The code at line 1643 was first introduced by commit :::::: 97288f2c71e46965a2010baea10548fcb5f3af73 Btrfs: corret fmode_t annotations :::::: TO: Christoph Hellwig <hch(a)lst.de> :::::: CC: Chris Mason <chris.mason(a)oracle.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS] BUILD REGRESSION 890108d01fde2c3b6dde4d169b695ce64362f135
by kernel test robot 01 Jul '25

01 Jul '25

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: 890108d01fde2c3b6dde4d169b695ce64362f135 !16854 ftrace: Fix UAF when lookup kallsym after ftrace disabled Error/Warning (recently discovered and may have been fixed): https://lore.kernel.org/oe-kbuild-all/202506061449.nBm6oAvj-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202506061633.Zsp5yfyi-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202506061637.CVNqsEqf-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202506061755.yar1Fr9d-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202506071856.LxaA5NHF-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202506182031.ldH7VynO-lkp@intel.com /kbuild/src/headers/Makefile:626: include/config/auto.conf.cmd: No such file or directory kernel/sched/core.c:5989:29: error: 'root_task_group' undeclared (first use in this function); did you mean 'task_group'? mm/memcontrol.c:5000:6: warning: no previous prototype for function 'dhugetlb_pool_is_free' [-Wmissing-prototypes] mm/memory.c:4803:3: warning: cast from 'int (*)(unsigned long, unsigned long, struct cgp_args *)' to 'ktask_thread_func' (aka 'int (*)(void *, void *, void *)') converts to incompatible function type [-Wcast-function-type-mismatch] mm/memory_hotplug.c:970:13: warning: 'rollback_node_hotadd' defined but not used [-Wunused-function] mm/page_alloc.c:3123: warning: Function parameter or member 'mt' not described in '__putback_isolated_page' mm/vmalloc.c:231:16: warning: variable 'start' set but not used [-Wunused-but-set-variable] mm/vmalloc.c:231:23: warning: variable 'start' set but not used [-Wunused-but-set-variable] Unverified Error/Warning (likely false positive, kindly check if interested): mm/shmem.c: linux/share_pool.h is included more than once. mm/swap.c: linux/memremap.h is included more than once. Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | |-- include-asm-generic-bitops-non-atomic.h:error:array-subscript-long-unsigned-int-is-partly-outside-array-bounds-of-u32-aka-unsigned-int | |-- include-uapi-linux-sctp.h:error:alignment-of-struct-sctp_paddr_change-is-less-than | |-- include-uapi-linux-sctp.h:error:alignment-of-struct-sctp_paddrinfo-is-less-than | |-- include-uapi-linux-sctp.h:error:alignment-of-struct-sctp_paddrparams-is-less-than | |-- include-uapi-linux-sctp.h:error:alignment-of-struct-sctp_prim-is-less-than | |-- include-uapi-linux-sctp.h:error:alignment-of-struct-sctp_setpeerprim-is-less-than | |-- include-uapi-linux-sctp.h:error:spinfo_address-offset-in-struct-sctp_paddrinfo-isn-t-aligned-to | |-- include-uapi-linux-sctp.h:error:spp_address-offset-in-struct-sctp_paddrparams-isn-t-aligned-to | |-- include-uapi-linux-sctp.h:error:ssp_addr-offset-in-struct-sctp_prim-isn-t-aligned-to | |-- include-uapi-linux-sctp.h:error:sspp_addr-offset-in-struct-sctp_setpeerprim-isn-t-aligned-to | |-- mm-memory_hotplug.c:warning:rollback_node_hotadd-defined-but-not-used | |-- mm-memory_hotplug.c:warning:unused-variable-start_pfn | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- arm64-allnoconfig | |-- kernel-sched-core.c:error:root_task_group-undeclared-(first-use-in-this-function) | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- arm64-defconfig | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- arm64-randconfig-001-20250701 | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- arm64-randconfig-002-20250701 | |-- mm-memory_hotplug.c:warning:rollback_node_hotadd-defined-but-not-used | |-- mm-memory_hotplug.c:warning:unused-variable-start_pfn | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- arm64-randconfig-003-20250701 | |-- mm-memory_hotplug.c:warning:rollback_node_hotadd-defined-but-not-used | |-- mm-memory_hotplug.c:warning:unused-variable-start_pfn | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- x86_64-allnoconfig | |-- Makefile:include-config-auto.conf.cmd:No-such-file-or-directory | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | |-- mm-shmem.c:linux-share_pool.h-is-included-more-than-once. | |-- mm-swap.c:linux-memremap.h-is-included-more-than-once. | |-- mm-vmalloc.c:warning:variable-start-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-allyesconfig | |-- mm-memory.c:warning:cast-from-int-(-)(unsigned-long-unsigned-long-struct-cgp_args-)-to-ktask_thread_func-(aka-int-(-)(void-void-void-)-)-converts-to-incompatible-function-type | |-- mm-memory_hotplug.c:warning:unused-variable-start_pfn | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- x86_64-buildonly-randconfig-005-20250701 | |-- kernel-hung_task.c:error:use-of-undeclared-identifier-sysctl_hung_task_all_cpu_backtrace | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | |-- mm-memory.c:warning:cast-from-int-(-)(unsigned-long-unsigned-long-struct-cgp_args-)-to-ktask_thread_func-(aka-int-(-)(void-void-void-)-)-converts-to-incompatible-function-type | |-- mm-memory_hotplug.c:warning:unused-variable-start_pfn | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- x86_64-buildonly-randconfig-006-20250701 | |-- mm-memory_hotplug.c:warning:unused-variable-start_pfn | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- x86_64-defconfig | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- x86_64-randconfig-161-20250701 | |-- kernel-hung_task.c:error:use-of-undeclared-identifier-sysctl_hung_task_all_cpu_backtrace | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | |-- mm-memcontrol.c:warning:no-previous-prototype-for-function-dhugetlb_pool_is_free | |-- mm-memory.c:warning:cast-from-int-(-)(unsigned-long-unsigned-long-struct-cgp_args-)-to-ktask_thread_func-(aka-int-(-)(void-void-void-)-)-converts-to-incompatible-function-type | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | |-- mm-vmalloc.c:warning:variable-start-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration `-- x86_64-rhel-9.4-rust |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool |-- mm-memcontrol.c:warning:no-previous-prototype-for-function-dhugetlb_pool_is_free |-- mm-memory_hotplug.c:warning:unused-variable-start_pfn |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page `-- mm-vmalloc.c:warning:variable-start-set-but-not-used elapsed time: 737m configs tested: 17 configs skipped: 129 tested configs: arm64 allmodconfig gcc-15.1.0 arm64 allnoconfig gcc-15.1.0 arm64 defconfig gcc-15.1.0 arm64 randconfig-001-20250701 gcc-15.1.0 arm64 randconfig-002-20250701 gcc-15.1.0 arm64 randconfig-003-20250701 gcc-12.3.0 arm64 randconfig-004-20250701 gcc-5.5.0 x86_64 allnoconfig clang-20 x86_64 allyesconfig clang-20 x86_64 buildonly-randconfig-001-20250701 gcc-12 x86_64 buildonly-randconfig-002-20250701 gcc-12 x86_64 buildonly-randconfig-003-20250701 gcc-12 x86_64 buildonly-randconfig-004-20250701 gcc-12 x86_64 buildonly-randconfig-005-20250701 clang-20 x86_64 buildonly-randconfig-006-20250701 clang-20 x86_64 defconfig gcc-11 x86_64 rhel-9.4-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10 2882/2882] kernel/crash_core.c:380:13: warning: no previous prototype for function 'reserve_crashkernel_high'
by kernel test robot 01 Jul '25

01 Jul '25

tree: https://gitee.com/openeuler/kernel.git OLK-5.10 head: c90dc8f5217147c6c3cfb99d952cfdcaf7e194e1 commit: baac34dd89ca15da7d7f0736fd0e69e13f315ae9 [2882/2882] arm64: kdump: Use page-level mapping for the high memory of crashkernel config: x86_64-randconfig-2002-20250501 (https://download.01.org/0day-ci/archive/20250701/202507011754.bARO1PJL-lkp@…) compiler: clang version 20.1.2 (https://github.com/llvm/llvm-project 58df0ef89dd64126512e4ee27b4ac3fd8ddf6247) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250701/202507011754.bARO1PJL-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507011754.bARO1PJL-lkp@intel.com/ All warnings (new ones prefixed by >>): >> kernel/crash_core.c:380:13: warning: no previous prototype for function 'reserve_crashkernel_high' [-Wmissing-prototypes] 380 | void __init reserve_crashkernel_high(void) | ^ kernel/crash_core.c:380:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 380 | void __init reserve_crashkernel_high(void) | ^ | static 1 warning generated. vim +/reserve_crashkernel_high +380 kernel/crash_core.c 379 > 380 void __init reserve_crashkernel_high(void) 381 { 382 unsigned long long crash_base, crash_size; 383 char *cmdline = boot_command_line; 384 int ret; 385 386 if (!IS_ENABLED(CONFIG_KEXEC_CORE)) 387 return; 388 389 /* crashkernel=X[@offset] */ 390 ret = parse_crashkernel(cmdline, memblock_phys_mem_size(), 391 &crash_size, &crash_base); 392 if (ret || !crash_size) { 393 ret = parse_crashkernel_high(cmdline, 0, &crash_size, &crash_base); 394 if (ret || !crash_size) 395 return; 396 } 397 398 crash_size = PAGE_ALIGN(crash_size); 399 400 /* 401 * For the case crashkernel=X, may fall back to reserve memory above 402 * 4G, make reservations here in advance. It will be released later if 403 * the region is successfully reserved under 4G. 404 */ 405 if (!crash_base) { 406 crash_base = memblock_phys_alloc_range(crash_size, CRASH_ALIGN, 407 crash_base, CRASH_ADDR_HIGH_MAX); 408 if (!crash_base) 409 return; 410 411 crash_high_mem_reserved = true; 412 } 413 414 /* Mark the memory range that requires page-level mappings */ 415 crashk_res.start = crash_base; 416 crashk_res.end = crash_base + crash_size - 1; 417 } 418 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-5.10] bpf: fix potential 32-bit overflow when accessing ARRAY map element
by Pu Lehui 01 Jul '25

01 Jul '25

From: Andrii Nakryiko <andrii(a)kernel.org> mainline inclusion from mainline-v6.0-rc1 commit 87ac0d600943994444e24382a87aa19acc4cd3d4 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICGA1J CVE: CVE-2022-50167 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- If BPF array map is bigger than 4GB, element pointer calculation can overflow because both index and elem_size are u32. Fix this everywhere by forcing 64-bit multiplication. Extract this formula into separate small helper and use it consistently in various places. Speculative-preventing formula utilizing index_mask trick is left as is, but explicit u64 casts are added in both places. Fixes: c85d69135a91 ("bpf: move memory size checks to bpf_map_charge_init()") Signed-off-by: Andrii Nakryiko <andrii(a)kernel.org> Link: https://lore.kernel.org/r/20220715053146.1291891-2-andrii@kernel.org Signed-off-by: Alexei Starovoitov <ast(a)kernel.org> Conflicts: kernel/bpf/arraymap.c [The conflicts were due to not merge bpf timer and bpf_for_each_map_elem features] Signed-off-by: Pu Lehui <pulehui(a)huawei.com> --- kernel/bpf/arraymap.c | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/kernel/bpf/arraymap.c b/kernel/bpf/arraymap.c index dfabf842f830..779297cad45b 100644 --- a/kernel/bpf/arraymap.c +++ b/kernel/bpf/arraymap.c @@ -171,6 +171,11 @@ static struct bpf_map *array_map_alloc(union bpf_attr *attr) return &array->map; } +static void *array_map_elem_ptr(struct bpf_array *array, u32 index) +{ + return array->value + (u64)array->elem_size * index; +} + /* Called from syscall or from eBPF program */ static void *array_map_lookup_elem(struct bpf_map *map, void *key) { @@ -180,7 +185,7 @@ static void *array_map_lookup_elem(struct bpf_map *map, void *key) if (unlikely(index >= array->map.max_entries)) return NULL; - return array->value + array->elem_size * (index & array->index_mask); + return array->value + (u64)array->elem_size * (index & array->index_mask); } static int array_map_direct_value_addr(const struct bpf_map *map, u64 *imm, @@ -332,7 +337,7 @@ static int array_map_update_elem(struct bpf_map *map, void *key, void *value, value, map->value_size); } else { val = array->value + - array->elem_size * (index & array->index_mask); + (u64)array->elem_size * (index & array->index_mask); if (map_flags & BPF_F_LOCK) copy_map_value_locked(map, val, value, false); else @@ -527,7 +532,7 @@ static void *bpf_array_map_seq_start(struct seq_file *seq, loff_t *pos) index = info->index & array->index_mask; if (info->percpu_value_buf) return array->pptrs[index]; - return array->value + array->elem_size * index; + return array_map_elem_ptr(array, index); } static void *bpf_array_map_seq_next(struct seq_file *seq, void *v, loff_t *pos) @@ -546,7 +551,7 @@ static void *bpf_array_map_seq_next(struct seq_file *seq, void *v, loff_t *pos) index = info->index & array->index_mask; if (info->percpu_value_buf) return array->pptrs[index]; - return array->value + array->elem_size * index; + return array_map_elem_ptr(array, index); } static int __bpf_array_map_seq_show(struct seq_file *seq, void *v) -- 2.34.1

2 1

[PATCH OLK-5.10 v4 00/13] HiSock Redirect Framework
by Pu Lehui 01 Jul '25

01 Jul '25

HiSock Redirect Framework, which bypasses net filter rules for specific connections selected by bpf prog on both TX and RX directions. Julien Thierry (1): arm64: insn: Add some opcodes to instruction decoder Pu Lehui (11): bpf: Add CONFIG_HISOCK bpf: Add XDP_HISOCK_REDIRECT action bpf: Add BPF_PROG_TYPE_HISOCK prog type bpf: Add HISOCK_EGRESS hook on network egress path bpf: Add bpf_get_ingress_dst helper bpf: Add hisock_xdp_buff wrapper for xdp_buff bpf: Add bpf_set_ingress_dst helper bpf: Add bpf_change_skb_dev helper bpf: Add bpf_ext_memcpy helper openeuler_defconfig: Enable CONFIG_HISOCK samples/bpf: Add HiSock Redirect Framework sample Xu Kuohai (1): bpf, arm64: Fixup bpf_ext_memcpy extension helper arch/arm64/configs/openeuler_defconfig | 1 + arch/arm64/include/asm/insn.h | 13 + arch/arm64/kernel/insn.c | 8 + arch/arm64/net/bpf_jit.h | 15 + arch/arm64/net/bpf_jit_comp.c | 266 ++++++++++++++++ arch/x86/configs/openeuler_defconfig | 1 + include/linux/bpf-cgroup.h | 35 +++ include/linux/bpf_types.h | 4 + include/linux/filter.h | 3 + include/net/xdp.h | 5 + include/uapi/linux/bpf.h | 45 +++ kernel/bpf/cgroup.c | 43 +++ kernel/bpf/core.c | 7 + kernel/bpf/helpers.c | 27 ++ kernel/bpf/syscall.c | 19 ++ kernel/bpf/verifier.c | 28 ++ net/Kconfig | 10 + net/core/dev.c | 77 ++++- net/core/filter.c | 184 +++++++++++ net/ipv4/ip_output.c | 66 ++++ samples/bpf/.gitignore | 1 + samples/bpf/Makefile | 3 + samples/bpf/hisock/bpf.c | 246 +++++++++++++++ samples/bpf/hisock/hisock_cmd.c | 405 +++++++++++++++++++++++++ tools/bpf/bpftool/common.c | 1 + tools/bpf/bpftool/prog.c | 1 + tools/include/uapi/linux/bpf.h | 45 +++ tools/lib/bpf/libbpf.c | 2 + 28 files changed, 1558 insertions(+), 3 deletions(-) create mode 100644 samples/bpf/hisock/bpf.c create mode 100644 samples/bpf/hisock/hisock_cmd.c -- 2.34.1

2 14

[PATCH OLK-5.10 0/2] fs: Backport two namespace fix patches
by Wang Zhaolong 01 Jul '25

01 Jul '25

Al Viro (2): do_change_type(): refuse to operate on unmounted/not ours mounts clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns fs/namespace.c | 9 +++++++++ 1 file changed, 9 insertions(+) -- 2.34.3

2 3

[PATCH OLK-6.6 0/4] fs: Backport four namespace fix patches
by Wang Zhaolong 01 Jul '25

01 Jul '25

Al Viro (4): path_overmount(): avoid false negatives fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2) do_change_type(): refuse to operate on unmounted/not ours mounts clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns fs/namespace.c | 30 +++++++++++++++++++++++------- 1 file changed, 23 insertions(+), 7 deletions(-) -- 2.34.3

2 5

[openeuler:openEuler-1.0-LTS 1605/1605] fs/btrfs/inode.c:6717:6: warning: variable 'drop_on_err' set but not used
by kernel test robot 01 Jul '25

01 Jul '25

tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 890108d01fde2c3b6dde4d169b695ce64362f135 commit: 32955c5422a8a5460bbefe2a6fc51eadcafff4c9 [1605/1605] btrfs: switch to discard_new_inode() config: x86_64-buildonly-randconfig-2001-20250501 (https://download.01.org/0day-ci/archive/20250701/202507011545.DJDFFl5d-lkp@…) compiler: clang version 20.1.2 (https://github.com/llvm/llvm-project 58df0ef89dd64126512e4ee27b4ac3fd8ddf6247) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250701/202507011545.DJDFFl5d-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507011545.DJDFFl5d-lkp@intel.com/ All warnings (new ones prefixed by >>): fs/btrfs/inode.c:2776:16: warning: variable 'inode' set but not used [-Wunused-but-set-variable] 2776 | struct inode *inode; | ^ fs/btrfs/inode.c:6474:7: warning: variable 'err' set but not used [-Wunused-but-set-variable] 6474 | int err; | ^ fs/btrfs/inode.c:6481:7: warning: variable 'err' set but not used [-Wunused-but-set-variable] 6481 | int err; | ^ >> fs/btrfs/inode.c:6717:6: warning: variable 'drop_on_err' set but not used [-Wunused-but-set-variable] 6717 | int drop_on_err = 0; | ^ 4 warnings generated. vim +/drop_on_err +6717 fs/btrfs/inode.c 39279cc3d2704c Chris Mason 2007-06-12 6709 18bb1db3e7607e Al Viro 2011-07-26 6710 static int btrfs_mkdir(struct inode *dir, struct dentry *dentry, umode_t mode) 39279cc3d2704c Chris Mason 2007-06-12 6711 { 2ff7e61e0d30ff Jeff Mahoney 2016-06-22 6712 struct btrfs_fs_info *fs_info = btrfs_sb(dir->i_sb); b9d86667c94e5f Chris Mason 2008-05-02 6713 struct inode *inode = NULL; 39279cc3d2704c Chris Mason 2007-06-12 6714 struct btrfs_trans_handle *trans; 39279cc3d2704c Chris Mason 2007-06-12 6715 struct btrfs_root *root = BTRFS_I(dir)->root; 39279cc3d2704c Chris Mason 2007-06-12 6716 int err = 0; 39279cc3d2704c Chris Mason 2007-06-12 @6717 int drop_on_err = 0; b9d86667c94e5f Chris Mason 2008-05-02 6718 u64 objectid = 0; 00e4e6b33a0f78 Chris Mason 2008-08-05 6719 u64 index = 0; 39279cc3d2704c Chris Mason 2007-06-12 6720 9ed74f2dba6ebf Josef Bacik 2009-09-11 6721 /* 9ed74f2dba6ebf Josef Bacik 2009-09-11 6722 * 2 items for inode and ref 9ed74f2dba6ebf Josef Bacik 2009-09-11 6723 * 2 items for dir items 9ed74f2dba6ebf Josef Bacik 2009-09-11 6724 * 1 for xattr if selinux is on 9ed74f2dba6ebf Josef Bacik 2009-09-11 6725 */ a22285a6a32390 Yan, Zheng 2010-05-16 6726 trans = btrfs_start_transaction(root, 5); a22285a6a32390 Yan, Zheng 2010-05-16 6727 if (IS_ERR(trans)) a22285a6a32390 Yan, Zheng 2010-05-16 6728 return PTR_ERR(trans); 39279cc3d2704c Chris Mason 2007-06-12 6729 581bb050941b4f Li Zefan 2011-04-20 6730 err = btrfs_find_free_ino(root, &objectid); 581bb050941b4f Li Zefan 2011-04-20 6731 if (err) 581bb050941b4f Li Zefan 2011-04-20 6732 goto out_fail; 581bb050941b4f Li Zefan 2011-04-20 6733 aec7477b3b0e8e Josef Bacik 2008-07-24 6734 inode = btrfs_new_inode(trans, root, dir, dentry->d_name.name, 4a0cc7ca6c40b6 Nikolay Borisov 2017-01-10 6735 dentry->d_name.len, btrfs_ino(BTRFS_I(dir)), objectid, d82a6f1d7e8b61 Josef Bacik 2011-05-11 6736 S_IFDIR | mode, &index); 39279cc3d2704c Chris Mason 2007-06-12 6737 if (IS_ERR(inode)) { 39279cc3d2704c Chris Mason 2007-06-12 6738 err = PTR_ERR(inode); 32955c5422a8a5 Al Viro 2018-05-16 6739 inode = NULL; 39279cc3d2704c Chris Mason 2007-06-12 6740 goto out_fail; 39279cc3d2704c Chris Mason 2007-06-12 6741 } 5f39d397dfbe14 Chris Mason 2007-10-15 6742 39279cc3d2704c Chris Mason 2007-06-12 6743 drop_on_err = 1; b0d5d10f41a0f1 Chris Mason 2014-09-08 6744 /* these must be set before we unlock the inode */ b0d5d10f41a0f1 Chris Mason 2014-09-08 6745 inode->i_op = &btrfs_dir_inode_operations; b0d5d10f41a0f1 Chris Mason 2014-09-08 6746 inode->i_fop = &btrfs_dir_file_operations; 33268eaf0b3db5 Josef Bacik 2008-07-24 6747 2a7dba391e5628 Eric Paris 2011-02-01 6748 err = btrfs_init_inode_security(trans, inode, dir, &dentry->d_name); 33268eaf0b3db5 Josef Bacik 2008-07-24 6749 if (err) 32955c5422a8a5 Al Viro 2018-05-16 6750 goto out_fail; 39279cc3d2704c Chris Mason 2007-06-12 6751 6ef06d27903d9c Nikolay Borisov 2017-02-20 6752 btrfs_i_size_write(BTRFS_I(inode), 0); 39279cc3d2704c Chris Mason 2007-06-12 6753 err = btrfs_update_inode(trans, root, inode); 39279cc3d2704c Chris Mason 2007-06-12 6754 if (err) 32955c5422a8a5 Al Viro 2018-05-16 6755 goto out_fail; 5f39d397dfbe14 Chris Mason 2007-10-15 6756 db0a669fb00241 Nikolay Borisov 2017-02-20 6757 err = btrfs_add_link(trans, BTRFS_I(dir), BTRFS_I(inode), db0a669fb00241 Nikolay Borisov 2017-02-20 6758 dentry->d_name.name, e02119d5a7b439 Chris Mason 2008-09-05 6759 dentry->d_name.len, 0, index); 39279cc3d2704c Chris Mason 2007-06-12 6760 if (err) 32955c5422a8a5 Al Viro 2018-05-16 6761 goto out_fail; 5f39d397dfbe14 Chris Mason 2007-10-15 6762 1e2e547a93a00e Al Viro 2018-05-04 6763 d_instantiate_new(dentry, inode); 39279cc3d2704c Chris Mason 2007-06-12 6764 drop_on_err = 0; 39279cc3d2704c Chris Mason 2007-06-12 6765 39279cc3d2704c Chris Mason 2007-06-12 6766 out_fail: 3a45bb207ee2c5 Jeff Mahoney 2016-09-09 6767 btrfs_end_transaction(trans); 32955c5422a8a5 Al Viro 2018-05-16 6768 if (err && inode) { c7cfb8a5405a34 Wang Shilong 2014-12-24 6769 inode_dec_link_count(inode); 32955c5422a8a5 Al Viro 2018-05-16 6770 discard_new_inode(inode); c7cfb8a5405a34 Wang Shilong 2014-12-24 6771 } 2ff7e61e0d30ff Jeff Mahoney 2016-06-22 6772 btrfs_btree_balance_dirty(fs_info); 39279cc3d2704c Chris Mason 2007-06-12 6773 return err; 39279cc3d2704c Chris Mason 2007-06-12 6774 } 39279cc3d2704c Chris Mason 2007-06-12 6775 :::::: The code at line 6717 was first introduced by commit :::::: 39279cc3d2704cfbf9c35dcb5bdd392159ae4625 Btrfs: split up super.c :::::: TO: Chris Mason <chris.mason(a)oracle.com> :::::: CC: David Woodhouse <dwmw2(a)hera.kernel.org> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-25.03 00/18] XSCHED FOR XPU
by Liu Kai 01 Jul '25

01 Jul '25

XSCHD FOR XPU Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Dmitriy Alekseev (2): xsched/core: Add xcu_wait() implementation xsched/core: refactor xcu->xrq.nr_running Konstantin Meskhidze (14): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Add debug prints in XSched mechanism xsched: Add XCU initialization support xsched: Add vstream_alloc() implementation xsched: Add vstream_free() implementation xsched: Add vstream_kick() implementation xsched: Add xsched_ctx_init_xse() implementation xsched: Add XCU xsched_schedule() implementation xsched: Add xsched RT class xsched: Add RT class callbacks implementation and support xsched: Add xsched_submit() implementation xsched: Add xsched CFS class basic framework xsched: Add cfs class callbacks implementation arch/x86/entry/syscalls/syscall_64.tbl | 2 +- drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 284 ++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 3 + include/linux/vstream.h | 81 +++ include/linux/xcu_group.h | 123 ++++ include/linux/xsched.h | 650 ++++++++++++++++++ include/uapi/asm-generic/unistd.h | 4 +- include/uapi/linux/xcu_vstream.h | 57 ++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 62 ++ kernel/xsched/Makefile | 4 + kernel/xsched/cfs.c | 236 +++++++ kernel/xsched/cfs_quota.c | 96 +++ kernel/xsched/cgroup.c | 654 ++++++++++++++++++ kernel/xsched/core.c | 880 +++++++++++++++++++++++++ kernel/xsched/rt.c | 242 +++++++ kernel/xsched/vstream.c | 570 ++++++++++++++++ 22 files changed, 3955 insertions(+), 4 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 19

[openeuler:OLK-5.10 2882/2882] arch/x86/lib/copy_highpages.c:20:5: warning: no previous prototype for function 'sysctl_hugepage_nocache_copy'
by kernel test robot 01 Jul '25

01 Jul '25

tree: https://gitee.com/openeuler/kernel.git OLK-5.10 head: c90dc8f5217147c6c3cfb99d952cfdcaf7e194e1 commit: 50d5bf1b6da9f74bf93f9dec601c09d45d6d8406 [2882/2882] x86: hugepage: use nt copy hugepage to AEP in x86 config: x86_64-randconfig-2002-20250501 (https://download.01.org/0day-ci/archive/20250701/202507011441.j7rBaRlC-lkp@…) compiler: clang version 20.1.2 (https://github.com/llvm/llvm-project 58df0ef89dd64126512e4ee27b4ac3fd8ddf6247) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250701/202507011441.j7rBaRlC-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507011441.j7rBaRlC-lkp@intel.com/ All warnings (new ones prefixed by >>): >> arch/x86/lib/copy_highpages.c:20:5: warning: no previous prototype for function 'sysctl_hugepage_nocache_copy' [-Wmissing-prototypes] 20 | int sysctl_hugepage_nocache_copy(struct ctl_table *table, int write, | ^ arch/x86/lib/copy_highpages.c:20:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 20 | int sysctl_hugepage_nocache_copy(struct ctl_table *table, int write, | ^ | static 1 warning generated. vim +/sysctl_hugepage_nocache_copy +20 arch/x86/lib/copy_highpages.c 19 > 20 int sysctl_hugepage_nocache_copy(struct ctl_table *table, int write, 21 void __user *buffer, size_t *lenp, loff_t *ppos) 22 { 23 struct ctl_table t; 24 int err; 25 int state; 26 27 if (write && !capable(CAP_SYS_ADMIN)) 28 return -EPERM; 29 30 state = static_branch_unlikely(&hugepage_nocache_copy); 31 t = *table; 32 t.data = &state; 33 err = proc_dointvec_minmax(&t, write, buffer, lenp, ppos); 34 if (err < 0) 35 return err; 36 if (write) 37 set_hugepage_nocache_copy(state); 38 return err; 39 } 40 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 0/6] OLK-6.6 Bperf
by Xiaomeng Zhang 01 Jul '25

01 Jul '25

Ian Rogers (1): perf test bpf-counters: Add test for BPF event modifier Tengda Wu (2): perf stat: Support inherit events during fork() for bperf perf test: Use sqrtloop workload to test bperf event Veronika Molnarova (1): perf test stat_bpf_counter.sh: Stabilize the test results Xiaomeng Zhang (2): perf stat: Increase perf_attr_map entries perf stat: Fix incorrect display of bperf when event count is 0 tools/lib/perf/include/perf/bpf_perf.h | 1 + tools/perf/builtin-stat.c | 1 + tools/perf/tests/shell/stat_bpf_counters.sh | 79 ++++++++++----- tools/perf/util/bpf_counter.c | 61 +++++++++--- tools/perf/util/bpf_skel/bperf_follower.bpf.c | 98 +++++++++++++++++-- tools/perf/util/bpf_skel/bperf_u.h | 5 + tools/perf/util/target.h | 1 + 7 files changed, 198 insertions(+), 48 deletions(-) -- 2.34.1

2 7

[openeuler:OLK-5.10 2989/2989] kernel/futex/core.o: warning: objtool: handle_futex_death()+0x16c: unreachable instruction
by kernel test robot 01 Jul '25

01 Jul '25

Hi Peter, First bad commit (maybe != root cause): tree: https://gitee.com/openeuler/kernel.git OLK-5.10 head: 0655af1b703c5ae3de3a1ba80e5e31690ccfae93 commit: f552f518f86f4489577e296625e624271e2f76b2 [2989/2989] futex: Move to kernel/futex/ config: x86_64-buildonly-randconfig-002-20250628 (https://download.01.org/0day-ci/archive/20250701/202507011830.hdTLU1NP-lkp@…) compiler: clang version 20.1.7 (https://github.com/llvm/llvm-project 6146a88f60492b520a36f8f8f3231e15f3cc6082) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250701/202507011830.hdTLU1NP-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507011830.hdTLU1NP-lkp@intel.com/ All warnings (new ones prefixed by >>): >> kernel/futex/core.o: warning: objtool: handle_futex_death()+0x16c: unreachable instruction -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS 1605/1605] net/core/sock_reuseport.c:150: warning: Function parameter or member 'bind_inany' not described in 'reuseport_add_sock'
by kernel test robot 01 Jul '25

01 Jul '25

Hi Martin, First bad commit (maybe != root cause): tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 890108d01fde2c3b6dde4d169b695ce64362f135 commit: 2dbb9b9e6df67d444fbe425c7f6014858d337adf [1605/1605] bpf: Introduce BPF_PROG_TYPE_SK_REUSEPORT config: x86_64-buildonly-randconfig-2002-20250501 (https://download.01.org/0day-ci/archive/20250701/202507011220.5MWbk5GX-lkp@…) compiler: clang version 20.1.2 (https://github.com/llvm/llvm-project 58df0ef89dd64126512e4ee27b4ac3fd8ddf6247) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250701/202507011220.5MWbk5GX-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507011220.5MWbk5GX-lkp@intel.com/ All warnings (new ones prefixed by >>): >> net/core/sock_reuseport.c:150: warning: Function parameter or member 'bind_inany' not described in 'reuseport_add_sock' vim +150 net/core/sock_reuseport.c 4db428a7c9ab07 Eric Dumazet 2018-02-02 142 ef456144da8ef5 Craig Gallek 2016-01-04 143 /** ef456144da8ef5 Craig Gallek 2016-01-04 144 * reuseport_add_sock - Add a socket to the reuseport group of another. ef456144da8ef5 Craig Gallek 2016-01-04 145 * @sk: New socket to add to the group. ef456144da8ef5 Craig Gallek 2016-01-04 146 * @sk2: Socket belonging to the existing reuseport group. ef456144da8ef5 Craig Gallek 2016-01-04 147 * May return ENOMEM and not add socket to group under memory pressure. ef456144da8ef5 Craig Gallek 2016-01-04 148 */ 2dbb9b9e6df67d Martin KaFai Lau 2018-08-08 149 int reuseport_add_sock(struct sock *sk, struct sock *sk2, bool bind_inany) ef456144da8ef5 Craig Gallek 2016-01-04 @150 { 4db428a7c9ab07 Eric Dumazet 2018-02-02 151 struct sock_reuseport *old_reuse, *reuse; ef456144da8ef5 Craig Gallek 2016-01-04 152 b4ace4f1ae0769 Craig Gallek 2016-01-19 153 if (!rcu_access_pointer(sk2->sk_reuseport_cb)) { 2dbb9b9e6df67d Martin KaFai Lau 2018-08-08 154 int err = reuseport_alloc(sk2, bind_inany); b4ace4f1ae0769 Craig Gallek 2016-01-19 155 b4ace4f1ae0769 Craig Gallek 2016-01-19 156 if (err) b4ace4f1ae0769 Craig Gallek 2016-01-19 157 return err; b4ace4f1ae0769 Craig Gallek 2016-01-19 158 } b4ace4f1ae0769 Craig Gallek 2016-01-19 159 ef456144da8ef5 Craig Gallek 2016-01-04 160 spin_lock_bh(&reuseport_lock); ef456144da8ef5 Craig Gallek 2016-01-04 161 reuse = rcu_dereference_protected(sk2->sk_reuseport_cb, 4db428a7c9ab07 Eric Dumazet 2018-02-02 162 lockdep_is_held(&reuseport_lock)); 4db428a7c9ab07 Eric Dumazet 2018-02-02 163 old_reuse = rcu_dereference_protected(sk->sk_reuseport_cb, 4db428a7c9ab07 Eric Dumazet 2018-02-02 164 lockdep_is_held(&reuseport_lock)); 4db428a7c9ab07 Eric Dumazet 2018-02-02 165 if (old_reuse && old_reuse->num_socks != 1) { 4db428a7c9ab07 Eric Dumazet 2018-02-02 166 spin_unlock_bh(&reuseport_lock); 4db428a7c9ab07 Eric Dumazet 2018-02-02 167 return -EBUSY; 4db428a7c9ab07 Eric Dumazet 2018-02-02 168 } ef456144da8ef5 Craig Gallek 2016-01-04 169 ef456144da8ef5 Craig Gallek 2016-01-04 170 if (reuse->num_socks == reuse->max_socks) { ef456144da8ef5 Craig Gallek 2016-01-04 171 reuse = reuseport_grow(reuse); ef456144da8ef5 Craig Gallek 2016-01-04 172 if (!reuse) { ef456144da8ef5 Craig Gallek 2016-01-04 173 spin_unlock_bh(&reuseport_lock); ef456144da8ef5 Craig Gallek 2016-01-04 174 return -ENOMEM; ef456144da8ef5 Craig Gallek 2016-01-04 175 } ef456144da8ef5 Craig Gallek 2016-01-04 176 } ef456144da8ef5 Craig Gallek 2016-01-04 177 ef456144da8ef5 Craig Gallek 2016-01-04 178 reuse->socks[reuse->num_socks] = sk; ef456144da8ef5 Craig Gallek 2016-01-04 179 /* paired with smp_rmb() in reuseport_select_sock() */ ef456144da8ef5 Craig Gallek 2016-01-04 180 smp_wmb(); ef456144da8ef5 Craig Gallek 2016-01-04 181 reuse->num_socks++; ef456144da8ef5 Craig Gallek 2016-01-04 182 rcu_assign_pointer(sk->sk_reuseport_cb, reuse); ef456144da8ef5 Craig Gallek 2016-01-04 183 ef456144da8ef5 Craig Gallek 2016-01-04 184 spin_unlock_bh(&reuseport_lock); ef456144da8ef5 Craig Gallek 2016-01-04 185 4db428a7c9ab07 Eric Dumazet 2018-02-02 186 if (old_reuse) 4db428a7c9ab07 Eric Dumazet 2018-02-02 187 call_rcu(&old_reuse->rcu, reuseport_free_rcu); ef456144da8ef5 Craig Gallek 2016-01-04 188 return 0; ef456144da8ef5 Craig Gallek 2016-01-04 189 } ef456144da8ef5 Craig Gallek 2016-01-04 190 :::::: The code at line 150 was first introduced by commit :::::: ef456144da8ef507c8cf504284b6042e9201a05c soreuseport: define reuseport groups :::::: TO: Craig Gallek <kraig(a)google.com> :::::: CC: David S. Miller <davem(a)davemloft.net> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-5.10 v3 00/13] HiSock Redirect Framework
by Pu Lehui 01 Jul '25

01 Jul '25

HiSock Redirect Framework, which bypasses net filter rules for specific connections selected by bpf prog on both TX and RX directions. Julien Thierry (1): arm64: insn: Add some opcodes to instruction decoder Pu Lehui (11): bpf: Add CONFIG_HISOCK bpf: Add XDP_HISOCK_REDIRECT action bpf: Add BPF_PROG_TYPE_HISOCK prog type bpf: Add HISOCK_EGRESS hook on network egress path bpf: Add bpf_get_ingress_dst helper bpf: Add hisock_xdp_buff wrapper for xdp_buff bpf: Add bpf_set_ingress_dst helper bpf: Add bpf_change_skb_dev helper bpf: Add bpf_ext_memcpy helper openeuler_defconfig: Enable CONFIG_HISOCK samples/bpf: Add HiSock Redirect Framework sample Xu Kuohai (1): bpf, arm64: Fixup bpf_ext_memcpy extension helper arch/arm64/configs/openeuler_defconfig | 1 + arch/arm64/include/asm/insn.h | 13 + arch/arm64/kernel/insn.c | 8 + arch/arm64/net/bpf_jit.h | 15 + arch/arm64/net/bpf_jit_comp.c | 266 ++++++++++++++++ arch/x86/configs/openeuler_defconfig | 1 + include/linux/bpf-cgroup.h | 35 +++ include/linux/bpf_types.h | 4 + include/linux/filter.h | 3 + include/net/xdp.h | 5 + include/uapi/linux/bpf.h | 45 +++ kernel/bpf/cgroup.c | 43 +++ kernel/bpf/core.c | 7 + kernel/bpf/helpers.c | 27 ++ kernel/bpf/syscall.c | 19 ++ kernel/bpf/verifier.c | 28 ++ net/Kconfig | 10 + net/core/dev.c | 74 ++++- net/core/filter.c | 184 +++++++++++ net/ipv4/ip_output.c | 66 ++++ samples/bpf/.gitignore | 1 + samples/bpf/Makefile | 3 + samples/bpf/hisock/bpf.c | 241 +++++++++++++++ samples/bpf/hisock/hisock_cmd.c | 405 +++++++++++++++++++++++++ tools/bpf/bpftool/common.c | 1 + tools/bpf/bpftool/prog.c | 1 + tools/include/uapi/linux/bpf.h | 45 +++ tools/lib/bpf/libbpf.c | 2 + 28 files changed, 1550 insertions(+), 3 deletions(-) create mode 100644 samples/bpf/hisock/bpf.c create mode 100644 samples/bpf/hisock/hisock_cmd.c -- 2.34.1

2 14

[PATCH OLK-5.10 v2 00/13] HiSock Redirect Framework
by Pu Lehui 01 Jul '25

01 Jul '25

HiSock Redirect Framework, which bypasses net filter rules for specific connections selected by bpf prog on both TX and RX directions. Julien Thierry (1): arm64: insn: Add some opcodes to instruction decoder Pu Lehui (11): bpf: Add CONFIG_HISOCK bpf: Add XDP_HISOCK_REDIRECT action bpf: Add BPF_PROG_TYPE_HISOCK prog type bpf: Add HISOCK_EGRESS hook on network egress path bpf: Add bpf_get_ingress_dst helper bpf: Add hisock_xdp_buff wrapper for xdp_buff bpf: Add bpf_set_ingress_dst helper bpf: Add bpf_change_skb_dev helper bpf: Add bpf_ext_memcpy helper openeuler_defconfig: Enable CONFIG_HISOCK samples/bpf: Add HiSock Redirect Framework sample Xu Kuohai (1): bpf, arm64: Fixup bpf_ext_memcpy extension helper arch/arm64/configs/openeuler_defconfig | 1 + arch/arm64/include/asm/insn.h | 13 + arch/arm64/kernel/insn.c | 8 + arch/arm64/net/bpf_jit.h | 15 + arch/arm64/net/bpf_jit_comp.c | 266 ++++++++++++++++ arch/x86/configs/openeuler_defconfig | 1 + include/linux/bpf-cgroup.h | 35 +++ include/linux/bpf_types.h | 4 + include/linux/filter.h | 3 + include/net/xdp.h | 5 + include/uapi/linux/bpf.h | 45 +++ kernel/bpf/cgroup.c | 43 +++ kernel/bpf/core.c | 7 + kernel/bpf/helpers.c | 27 ++ kernel/bpf/syscall.c | 19 ++ kernel/bpf/verifier.c | 28 ++ net/Kconfig | 10 + net/core/dev.c | 74 ++++- net/core/filter.c | 184 +++++++++++ net/ipv4/ip_output.c | 66 ++++ samples/bpf/.gitignore | 1 + samples/bpf/Makefile | 3 + samples/bpf/hisock/bpf.c | 241 +++++++++++++++ samples/bpf/hisock/hisock_cmd.c | 405 +++++++++++++++++++++++++ tools/include/uapi/linux/bpf.h | 45 +++ tools/lib/bpf/libbpf.c | 2 + 26 files changed, 1548 insertions(+), 3 deletions(-) create mode 100644 samples/bpf/hisock/bpf.c create mode 100644 samples/bpf/hisock/hisock_cmd.c -- 2.34.1

2 14

[openeuler:openEuler-1.0-LTS 1605/1605] arch/x86/mm/pageattr.c:1787:5: warning: no previous prototype for function 'set_memory_global'
by kernel test robot 01 Jul '25

01 Jul '25

tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 890108d01fde2c3b6dde4d169b695ce64362f135 commit: eac7073aa69aa1cac819aa712146284f53f642b1 [1605/1605] x86/mm/pti: Clear Global bit more aggressively config: x86_64-buildonly-randconfig-2001-20250501 (https://download.01.org/0day-ci/archive/20250701/202507011110.QFxtjmpf-lkp@…) compiler: clang version 20.1.2 (https://github.com/llvm/llvm-project 58df0ef89dd64126512e4ee27b4ac3fd8ddf6247) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250701/202507011110.QFxtjmpf-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507011110.QFxtjmpf-lkp@intel.com/ All warnings (new ones prefixed by >>): arch/x86/mm/pageattr.c:170:6: warning: no previous prototype for function 'arch_invalidate_pmem' [-Wmissing-prototypes] 170 | void arch_invalidate_pmem(void *addr, size_t size) | ^ arch/x86/mm/pageattr.c:170:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 170 | void arch_invalidate_pmem(void *addr, size_t size) | ^ | static arch/x86/mm/pageattr.c:556:17: warning: variable 'old_pte' set but not used [-Wunused-but-set-variable] 556 | pte_t new_pte, old_pte, *tmp; | ^ arch/x86/mm/pageattr.c:1781:5: warning: no previous prototype for function 'set_memory_nonglobal' [-Wmissing-prototypes] 1781 | int set_memory_nonglobal(unsigned long addr, int numpages) | ^ arch/x86/mm/pageattr.c:1781:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 1781 | int set_memory_nonglobal(unsigned long addr, int numpages) | ^ | static >> arch/x86/mm/pageattr.c:1787:5: warning: no previous prototype for function 'set_memory_global' [-Wmissing-prototypes] 1787 | int set_memory_global(unsigned long addr, int numpages) | ^ arch/x86/mm/pageattr.c:1787:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 1787 | int set_memory_global(unsigned long addr, int numpages) | ^ | static 4 warnings generated. vim +/set_memory_global +1787 arch/x86/mm/pageattr.c 1786 > 1787 int set_memory_global(unsigned long addr, int numpages) 1788 { 1789 return change_page_attr_set(&addr, numpages, 1790 __pgprot(_PAGE_GLOBAL), 0); 1791 } 1792 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH openEuler-1.0-LTS] wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected
by Wang Liang 01 Jul '25

01 Jul '25

From: Siddh Raman Pant <code(a)siddh.me> stable inclusion from stable-v4.19.258 commit d9eb37db6a28b59a95a3461450ee209654c5f95b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICG9HM CVE: CVE-2022-49942 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 15bc8966b6d3a5b9bfe4c9facfa02f2b69b1e5f0 upstream. When we are not connected to a channel, sending channel "switch" announcement doesn't make any sense. The BSS list is empty in that case. This causes the for loop in cfg80211_get_bss() to be bypassed, so the function returns NULL (check line 1424 of net/wireless/scan.c), causing the WARN_ON() in ieee80211_ibss_csa_beacon() to get triggered (check line 500 of net/mac80211/ibss.c), which was consequently reported on the syzkaller dashboard. Thus, check if we have an existing connection before generating the CSA beacon in ieee80211_ibss_finish_csa(). Cc: stable(a)vger.kernel.org Fixes: cd7760e62c2a ("mac80211: add support for CSA in IBSS mode") Link: https://syzkaller.appspot.com/bug?id=05603ef4ae8926761b678d2939a3b2ad28ab9c… Reported-by: syzbot+b6c9fe29aefe68e4ad34(a)syzkaller.appspotmail.com Signed-off-by: Siddh Raman Pant <code(a)siddh.me> Tested-by: syzbot+b6c9fe29aefe68e4ad34(a)syzkaller.appspotmail.com Link: https://lore.kernel.org/r/20220814151512.9985-1-code@siddh.me Signed-off-by: Johannes Berg <johannes.berg(a)intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Wang Liang <wangliang74(a)huawei.com> --- net/mac80211/ibss.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/net/mac80211/ibss.c b/net/mac80211/ibss.c index f0f5fedb8caa..480902335b44 100644 --- a/net/mac80211/ibss.c +++ b/net/mac80211/ibss.c @@ -544,6 +544,10 @@ int ieee80211_ibss_finish_csa(struct ieee80211_sub_if_data *sdata) sdata_assert_lock(sdata); + /* When not connected/joined, sending CSA doesn't make sense. */ + if (ifibss->state != IEEE80211_IBSS_MLME_JOINED) + return -ENOLINK; + /* update cfg80211 bss information with the new channel */ if (!is_zero_ether_addr(ifibss->bssid)) { cbss = cfg80211_get_bss(sdata->local->hw.wiphy, -- 2.34.1

2 1

[PATCH OLK-5.10 00/13] HiSock Redirect Framework
by Pu Lehui 01 Jul '25

01 Jul '25

Julien Thierry (1): arm64: insn: Add some opcodes to instruction decoder Pu Lehui (11): bpf: Add CONFIG_HISOCK bpf: Add XDP_HISOCK_REDIRECT action bpf: Add BPF_PROG_TYPE_HISOCK prog type bpf: Add HISOCK_EGRESS hook on network egress path bpf: Add bpf_get_ingress_dst helper bpf: Add hisock_xdp_buff wrapper for xdp_buff bpf: Add bpf_set_ingress_dst helper bpf: Add bpf_change_skb_dev helper bpf: Add bpf_ext_memcpy helper openeuler_defconfig: Enable CONFIG_HISOCK samples/bpf: Add HiSock Redirect Framework sample Xu Kuohai (1): bpf, arm64: Fixup bpf_ext_memcpy extension helper arch/arm64/configs/openeuler_defconfig | 1 + arch/arm64/include/asm/insn.h | 13 + arch/arm64/kernel/insn.c | 8 + arch/arm64/net/bpf_jit.h | 15 + arch/arm64/net/bpf_jit_comp.c | 266 ++++++++++++++++ arch/x86/configs/openeuler_defconfig | 1 + include/linux/bpf-cgroup.h | 35 +++ include/linux/bpf_types.h | 4 + include/linux/filter.h | 3 + include/net/xdp.h | 5 + include/uapi/linux/bpf.h | 45 +++ kernel/bpf/cgroup.c | 43 +++ kernel/bpf/core.c | 7 + kernel/bpf/helpers.c | 27 ++ kernel/bpf/syscall.c | 19 ++ kernel/bpf/verifier.c | 28 ++ net/Kconfig | 10 + net/core/dev.c | 74 ++++- net/core/filter.c | 184 +++++++++++ net/ipv4/ip_output.c | 66 ++++ samples/bpf/.gitignore | 1 + samples/bpf/Makefile | 5 +- samples/bpf/hisock/bpf.c | 241 +++++++++++++++ samples/bpf/hisock/hisock_cmd.c | 405 +++++++++++++++++++++++++ tools/include/uapi/linux/bpf.h | 45 +++ tools/lib/bpf/libbpf.c | 2 + 26 files changed, 1549 insertions(+), 4 deletions(-) create mode 100644 samples/bpf/hisock/bpf.c create mode 100644 samples/bpf/hisock/hisock_cmd.c -- 2.34.1

2 14

[PATCH openEuler-1.0-LTS V1 0/2] hulk-4.19-fix-CVE-2022-49989
by Cheng Yu 01 Jul '25

01 Jul '25

hulk-4.19-fix-CVE-2022-49989 Juergen Gross (1): xen/privcmd: fix error exit of privcmd_ioctl_dm_op() Souptick Joarder (1): xen/privcmd: Corrected error handling path drivers/xen/privcmd.c | 42 +++++++++++++++++++++--------------------- 1 file changed, 21 insertions(+), 21 deletions(-) -- 2.25.1

2 3

[PATCH OLK-5.10 v3 0/7] backport udp-4tuple-hash
by Liu Jian 01 Jul '25

01 Jul '25

backport udp-4tuple-hash Paolo Abeni (1): udp: fix l4 hash after reconnect Philo Lu (5): net/udp: Add a new struct for hash2 slot net/udp: Add 4-tuple hash list basis ipv4/udp: Add 4-tuple hash for connected socket ipv6/udp: Add 4-tuple hash for connected socket udp: Make rehash4 independent in udp_lib_rehash() Yue Haibing (1): inet6: Remove unused function declaration udpv6_connect() include/linux/udp.h | 12 ++ include/net/transp_v6.h | 2 - include/net/udp.h | 139 ++++++++++++++++++++++- net/ipv4/datagram.c | 8 +- net/ipv4/udp.c | 240 ++++++++++++++++++++++++++++++++++++---- net/ipv6/udp.c | 115 +++++++++++++++++-- 6 files changed, 475 insertions(+), 41 deletions(-) -- 2.34.1

2 8

[PATCH openEuler-1.0-LTS v3 0/7] backport udp-4tuple-hash
by Liu Jian 01 Jul '25

01 Jul '25

backport udp-4tuple-hash Paolo Abeni (1): udp: fix l4 hash after reconnect Philo Lu (5): net/udp: Add a new struct for hash2 slot net/udp: Add 4-tuple hash list basis ipv4/udp: Add 4-tuple hash for connected socket ipv6/udp: Add 4-tuple hash for connected socket udp: Make rehash4 independent in udp_lib_rehash() Yue Haibing (1): inet6: Remove unused function declaration udpv6_connect() include/linux/udp.h | 12 ++ include/net/transp_v6.h | 2 - include/net/udp.h | 139 +++++++++++++++++++++- net/ipv4/datagram.c | 8 +- net/ipv4/udp.c | 251 ++++++++++++++++++++++++++++++++++++---- net/ipv6/udp.c | 121 ++++++++++++++++--- 6 files changed, 484 insertions(+), 49 deletions(-) -- 2.34.1

2 8

[PATCH openEuler-1.0-LTS] mtd: maps: Fix refcount leak in ap_flash_init
by Yi Yang 01 Jul '25

01 Jul '25

From: Miaoqian Lin <linmq006(a)gmail.com> stable inclusion from stable-v4.19.256 commit d10855876a6f47add6ff621cef25cc0171dac162 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICGA0V CVE: CVE-2022-50160 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 77087a04c8fd554134bddcb8a9ff87b21f357926 ] of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. Fixes: b0afd44bc192 ("mtd: physmap_of: add a hook for Versatile write protection") Signed-off-by: Miaoqian Lin <linmq006(a)gmail.com> Reviewed-by: Linus Walleij <linus.walleij(a)linaro.org> Signed-off-by: Miquel Raynal <miquel.raynal(a)bootlin.com> Link: https://lore.kernel.org/linux-mtd/20220523143255.4376-1-linmq006@gmail.com Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/mtd/maps/physmap_of_versatile.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/mtd/maps/physmap_of_versatile.c b/drivers/mtd/maps/physmap_of_versatile.c index 03f2b6e7bc7e..93cfe4071ea4 100644 --- a/drivers/mtd/maps/physmap_of_versatile.c +++ b/drivers/mtd/maps/physmap_of_versatile.c @@ -107,6 +107,7 @@ static int ap_flash_init(struct platform_device *pdev) return -ENODEV; } ebi_base = of_iomap(ebi, 0); + of_node_put(ebi); if (!ebi_base) return -ENODEV; -- 2.25.1

2 1

[PATCH OLK-5.10] nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
by Yi Yang 01 Jul '25

01 Jul '25

From: Maurizio Lombardi <mlombard(a)redhat.com> mainline inclusion from mainline-v6.14 commit ad95bab0cd28ed77c2c0d0b6e76e03e031391064 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IBY43W CVE: CVE-2025-21927 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- nvme_tcp_recv_pdu() doesn't check the validity of the header length. When header digests are enabled, a target might send a packet with an invalid header length (e.g. 255), causing nvme_tcp_verify_hdgst() to access memory outside the allocated area and cause memory corruptions by overwriting it with the calculated digest. Fix this by rejecting packets with an unexpected header length. Fixes: 3f2304f8c6d6 ("nvme-tcp: add NVMe over TCP host driver") Signed-off-by: Maurizio Lombardi <mlombard(a)redhat.com> Reviewed-by: Sagi Grimberg <sagi(a)grimberg.me> Signed-off-by: Keith Busch <kbusch(a)kernel.org> Conflicts: drivers/nvme/host/tcp.c [Confilcts dues to no backport of 363895767fbf("nvme-tcp: sanitize TLS key handling") and 84e009042d0f("nvme-tcp: add basic support for the C2HTermReq PDU")] Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/nvme/host/tcp.c | 32 +++++++++++++++++++++++++++++--- 1 file changed, 29 insertions(+), 3 deletions(-) diff --git a/drivers/nvme/host/tcp.c b/drivers/nvme/host/tcp.c index 7be1da41081d..2ffb4df56d11 100644 --- a/drivers/nvme/host/tcp.c +++ b/drivers/nvme/host/tcp.c @@ -185,6 +185,19 @@ static inline int nvme_tcp_queue_id(struct nvme_tcp_queue *queue) return queue - queue->ctrl->queues; } +static inline bool nvme_tcp_recv_pdu_supported(enum nvme_tcp_pdu_type type) +{ + switch (type) { + case nvme_tcp_c2h_term: + case nvme_tcp_c2h_data: + case nvme_tcp_r2t: + case nvme_tcp_rsp: + return true; + default: + return false; + } +} + static inline struct blk_mq_tags *nvme_tcp_tagset(struct nvme_tcp_queue *queue) { u32 queue_idx = nvme_tcp_queue_id(queue); @@ -700,6 +713,16 @@ static int nvme_tcp_recv_pdu(struct nvme_tcp_queue *queue, struct sk_buff *skb, return 0; hdr = queue->pdu; + if (unlikely(hdr->hlen != sizeof(struct nvme_tcp_rsp_pdu))) { + if (!nvme_tcp_recv_pdu_supported(hdr->type)) + goto unsupported_pdu; + + dev_err(queue->ctrl->ctrl.device, + "pdu type %d has unexpected header length (%d)\n", + hdr->type, hdr->hlen); + return -EPROTO; + } + if (queue->hdr_digest) { ret = nvme_tcp_verify_hdgst(queue, queue->pdu, hdr->hlen); if (unlikely(ret)) @@ -723,10 +746,13 @@ static int nvme_tcp_recv_pdu(struct nvme_tcp_queue *queue, struct sk_buff *skb, nvme_tcp_init_recv_ctx(queue); return nvme_tcp_handle_r2t(queue, (void *)queue->pdu); default: - dev_err(queue->ctrl->ctrl.device, - "unsupported pdu type (%d)\n", hdr->type); - return -EINVAL; + goto unsupported_pdu; } + +unsupported_pdu: + dev_err(queue->ctrl->ctrl.device, + "unsupported pdu type (%d)\n", hdr->type); + return -EINVAL; } static inline void nvme_tcp_end_request(struct request *rq, u16 status) -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS V1] ALSA: bcd2000: Fix a UAF bug on the error path of probing
by Wang Tao 01 Jul '25

01 Jul '25

From: Zheyu Ma <zheyuma97(a)gmail.com> stable inclusion from stable-v4.19.256 commit 5e7338f4dd92b2f8915a82abfa1dd3ad3464bea0 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICG792 CVE: CVE-2022-50229 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit ffb2759df7efbc00187bfd9d1072434a13a54139 upstream. When the driver fails in snd_card_register() at probe time, it will free the 'bcd2k->midi_out_urb' before killing it, which may cause a UAF bug. The following log can reveal it: [ 50.727020] BUG: KASAN: use-after-free in bcd2000_input_complete+0x1f1/0x2e0 [snd_bcd2000] [ 50.727623] Read of size 8 at addr ffff88810fab0e88 by task swapper/4/0 [ 50.729530] Call Trace: [ 50.732899] bcd2000_input_complete+0x1f1/0x2e0 [snd_bcd2000] Fix this by adding usb_kill_urb() before usb_free_urb(). Fixes: b47a22290d58 ("ALSA: MIDI driver for Behringer BCD2000 USB device") Signed-off-by: Zheyu Ma <zheyuma97(a)gmail.com> Cc: <stable(a)vger.kernel.org> Link: https://lore.kernel.org/r/20220715010515.2087925-1-zheyuma97@gmail.com Signed-off-by: Takashi Iwai <tiwai(a)suse.de> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Wang Tao <wangtao554(a)huawei.com> --- sound/usb/bcd2000/bcd2000.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/sound/usb/bcd2000/bcd2000.c b/sound/usb/bcd2000/bcd2000.c index d6c8b29fe430..bdab5426aa17 100644 --- a/sound/usb/bcd2000/bcd2000.c +++ b/sound/usb/bcd2000/bcd2000.c @@ -357,7 +357,8 @@ static int bcd2000_init_midi(struct bcd2000 *bcd2k) static void bcd2000_free_usb_related_resources(struct bcd2000 *bcd2k, struct usb_interface *interface) { - /* usb_kill_urb not necessary, urb is aborted automatically */ + usb_kill_urb(bcd2k->midi_out_urb); + usb_kill_urb(bcd2k->midi_in_urb); usb_free_urb(bcd2k->midi_out_urb); usb_free_urb(bcd2k->midi_in_urb); -- 2.34.1

2 1

[PATCH OLK-6.6] config: Enable CONFIG_VIRT_DRIVERS
by Cai Xinchen 01 Jul '25

01 Jul '25

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/I8JVN0 -------------------------------- To use tsm report for arm cca guest, enable CONFIG_VIRT_DRIVERS in openeuler_defconfig by default. ARM_CCA_GUEST and TSM_REPORTS will open as module by default. CONFIG_VMGENID will enable by default. It is Compared with linux mainline that only two feature patches not backport: the commit e07606713a908 ("virt: vmgenid: change implementation to use a platform driver") and the commit 7b1bcd6b50a6 ("virt: vmgenid: add support for devicetree bindings"). Signed-off-by: Cai Xinchen <caixinchen1(a)huawei.com> --- arch/arm64/configs/openeuler_defconfig | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/arch/arm64/configs/openeuler_defconfig b/arch/arm64/configs/openeuler_defconfig index f048a1b098d1..40d22677320c 100644 --- a/arch/arm64/configs/openeuler_defconfig +++ b/arch/arm64/configs/openeuler_defconfig @@ -6491,7 +6491,7 @@ CONFIG_VFIO_PLATFORM=m # end of VFIO platform reset drivers # end of VFIO support for platform devices -# CONFIG_VIRT_DRIVERS is not set +CONFIG_VIRT_DRIVERS=y CONFIG_VIRTIO_ANCHOR=y CONFIG_VIRTIO=m CONFIG_VIRTIO_PCI_LIB=m -- 2.18.0.huawei.25

2 1

[PATCH openEuler-1.0-LTS] vt: Clear selection before changing the font
by Yi Yang 01 Jul '25

01 Jul '25

From: Helge Deller <deller(a)gmx.de> stable inclusion from stable-v4.19.258 commit f74b4a41c5d7c9522469917e3072e55d435efd9e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICG8T5 CVE: CVE-2022-49948 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 566f9c9f89337792070b5a6062dff448b3e7977f upstream. When changing the console font with ioctl(KDFONTOP) the new font size can be bigger than the previous font. A previous selection may thus now be outside of the new screen size and thus trigger out-of-bounds accesses to graphics memory if the selection is removed in vc_do_resize(). Prevent such out-of-memory accesses by dropping the selection before the various con_font_set() console handlers are called. Reported-by: syzbot+14b0e8f3fd1612e35350(a)syzkaller.appspotmail.com Cc: stable <stable(a)kernel.org> Tested-by: Khalid Masum <khalid.masum.92(a)gmail.com> Signed-off-by: Helge Deller <deller(a)gmx.de> Link: https://lore.kernel.org/r/YuV9apZGNmGfjcor@p100 Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/tty/vt/vt.c | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/drivers/tty/vt/vt.c b/drivers/tty/vt/vt.c index e547669c1471..abcacd377e09 100644 --- a/drivers/tty/vt/vt.c +++ b/drivers/tty/vt/vt.c @@ -4518,9 +4518,11 @@ static int con_font_set(struct vc_data *vc, struct console_font_op *op) console_lock(); if (vc->vc_mode != KD_TEXT) rc = -EINVAL; - else if (vc->vc_sw->con_font_set) + else if (vc->vc_sw->con_font_set) { + if (vc_is_sel(vc)) + clear_selection(); rc = vc->vc_sw->con_font_set(vc, &font, op->flags); - else + } else rc = -ENOSYS; console_unlock(); kfree(font.data); @@ -4547,9 +4549,11 @@ static int con_font_default(struct vc_data *vc, struct console_font_op *op) console_unlock(); return -EINVAL; } - if (vc->vc_sw->con_font_default) + if (vc->vc_sw->con_font_default) { + if (vc_is_sel(vc)) + clear_selection(); rc = vc->vc_sw->con_font_default(vc, &font, s); - else + } else rc = -ENOSYS; console_unlock(); if (!rc) { -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS] vt: Clear selection before changing the font
by Yi Yang 01 Jul '25

01 Jul '25

From: Helge Deller <deller(a)gmx.de> stable inclusion from stable-v4.19.258 commit f74b4a41c5d7c9522469917e3072e55d435efd9e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICG8T5 CVE: CVE-2022-49948 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 566f9c9f89337792070b5a6062dff448b3e7977f upstream. When changing the console font with ioctl(KDFONTOP) the new font size can be bigger than the previous font. A previous selection may thus now be outside of the new screen size and thus trigger out-of-bounds accesses to graphics memory if the selection is removed in vc_do_resize(). Prevent such out-of-memory accesses by dropping the selection before the various con_font_set() console handlers are called. Reported-by: syzbot+14b0e8f3fd1612e35350(a)syzkaller.appspotmail.com Cc: stable <stable(a)kernel.org> Tested-by: Khalid Masum <khalid.masum.92(a)gmail.com> Signed-off-by: Helge Deller <deller(a)gmx.de> Link: https://lore.kernel.org/r/YuV9apZGNmGfjcor@p100 Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/tty/vt/vt.c | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/drivers/tty/vt/vt.c b/drivers/tty/vt/vt.c index e547669c1471..abcacd377e09 100644 --- a/drivers/tty/vt/vt.c +++ b/drivers/tty/vt/vt.c @@ -4518,9 +4518,11 @@ static int con_font_set(struct vc_data *vc, struct console_font_op *op) console_lock(); if (vc->vc_mode != KD_TEXT) rc = -EINVAL; - else if (vc->vc_sw->con_font_set) + else if (vc->vc_sw->con_font_set) { + if (vc_is_sel(vc)) + clear_selection(); rc = vc->vc_sw->con_font_set(vc, &font, op->flags); - else + } else rc = -ENOSYS; console_unlock(); kfree(font.data); @@ -4547,9 +4549,11 @@ static int con_font_default(struct vc_data *vc, struct console_font_op *op) console_unlock(); return -EINVAL; } - if (vc->vc_sw->con_font_default) + if (vc->vc_sw->con_font_default) { + if (vc_is_sel(vc)) + clear_selection(); rc = vc->vc_sw->con_font_default(vc, &font, s); - else + } else rc = -ENOSYS; console_unlock(); if (!rc) { -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS] drivers:md:fix a potential use-after-free bug
by Gu Bowen 01 Jul '25

01 Jul '25

From: Wentao_Liang <Wentao_Liang_g(a)163.com> stable inclusion from stable-v4.19.256 commit e5b3dd2d92c4511e81f6e4ec9c5bb7ad25e03d13 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICG8TZ CVE: CVE-2022-50022 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 104212471b1c1817b311771d817fb692af983173 ] In line 2884, "raid5_release_stripe(sh);" drops the reference to sh and may cause sh to be released. However, sh is subsequently used in lines 2886 "if (sh->batch_head && sh != sh->batch_head)". This may result in an use-after-free bug. It can be fixed by moving "raid5_release_stripe(sh);" to the bottom of the function. Signed-off-by: Wentao_Liang <Wentao_Liang_g(a)163.com> Signed-off-by: Song Liu <song(a)kernel.org> Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Gu Bowen <gubowen5(a)huawei.com> --- drivers/md/raid5.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/md/raid5.c b/drivers/md/raid5.c index b2b35cdabac5..0ccc733436fa 100644 --- a/drivers/md/raid5.c +++ b/drivers/md/raid5.c @@ -2670,10 +2670,10 @@ static void raid5_end_write_request(struct bio *bi) if (!test_and_clear_bit(R5_DOUBLE_LOCKED, &sh->dev[i].flags)) clear_bit(R5_LOCKED, &sh->dev[i].flags); set_bit(STRIPE_HANDLE, &sh->state); - raid5_release_stripe(sh); if (sh->batch_head && sh != sh->batch_head) raid5_release_stripe(sh->batch_head); + raid5_release_stripe(sh); } static void raid5_error(struct mddev *mddev, struct md_rdev *rdev) -- 2.25.1

2 1

[PATCH openEuler-1.0-LTS,V2] vt: Clear selection before changing the font
by Yi Yang 01 Jul '25

01 Jul '25

From: Helge Deller <deller(a)gmx.de> stable inclusion from stable-v4.19.258 commit f74b4a41c5d7c9522469917e3072e55d435efd9e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICG8T5 CVE: CVE-2022-49948 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 566f9c9f89337792070b5a6062dff448b3e7977f upstream. When changing the console font with ioctl(KDFONTOP) the new font size can be bigger than the previous font. A previous selection may thus now be outside of the new screen size and thus trigger out-of-bounds accesses to graphics memory if the selection is removed in vc_do_resize(). Prevent such out-of-memory accesses by dropping the selection before the various con_font_set() console handlers are called. Reported-by: syzbot+14b0e8f3fd1612e35350(a)syzkaller.appspotmail.com Cc: stable <stable(a)kernel.org> Tested-by: Khalid Masum <khalid.masum.92(a)gmail.com> Signed-off-by: Helge Deller <deller(a)gmx.de> Link: https://lore.kernel.org/r/YuV9apZGNmGfjcor@p100 Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/tty/vt/vt.c | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/drivers/tty/vt/vt.c b/drivers/tty/vt/vt.c index e547669c1471..abcacd377e09 100644 --- a/drivers/tty/vt/vt.c +++ b/drivers/tty/vt/vt.c @@ -4518,9 +4518,11 @@ static int con_font_set(struct vc_data *vc, struct console_font_op *op) console_lock(); if (vc->vc_mode != KD_TEXT) rc = -EINVAL; - else if (vc->vc_sw->con_font_set) + else if (vc->vc_sw->con_font_set) { + if (vc_is_sel(vc)) + clear_selection(); rc = vc->vc_sw->con_font_set(vc, &font, op->flags); - else + } else rc = -ENOSYS; console_unlock(); kfree(font.data); @@ -4547,9 +4549,11 @@ static int con_font_default(struct vc_data *vc, struct console_font_op *op) console_unlock(); return -EINVAL; } - if (vc->vc_sw->con_font_default) + if (vc->vc_sw->con_font_default) { + if (vc_is_sel(vc)) + clear_selection(); rc = vc->vc_sw->con_font_default(vc, &font, s); - else + } else rc = -ENOSYS; console_unlock(); if (!rc) { -- 2.25.1

1 0

[PATCH OLK-6.6 v2] mempolicy: optimize queue_folios_pte_range by PTE batching
by Tong Tiangen 01 Jul '25

01 Jul '25

From: Dev Jain <dev.jain(a)arm.com> mainline inclusion from mainline-v6.16-rc1 commit 4a34c584d8cd13d2b721d21cf629f77c60bfb4a4 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ICF4UI CVE: NA Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ------------------------------------------- After the check for queue_folio_required(), the code only cares about the folio in the for loop, i.e the PTEs are redundant. Therefore, optimize this loop by skipping over a PTE batch mapping the same folio. With a test program migrating pages of the calling process, which includes a mapped VMA of size 4GB with pte-mapped large folios of order-9, and migrating once back and forth node-0 and node-1, the average execution time reduces from 7.5 to 4 seconds, giving an approx 47% speedup. Link: https://lkml.kernel.org/r/20250416053048.96479-1-dev.jain@arm.com Signed-off-by: Dev Jain <dev.jain(a)arm.com> Acked-by: David Hildenbrand <david(a)redhat.com> Cc: Baolin Wang <baolin.wang(a)linux.alibaba.com> Cc: Hugh Dickins <hughd(a)google.com> Cc: Matthew Wilcox (Oracle) <willy(a)infradead.org> Cc: Ryan Roberts <ryan.roberts(a)arm.com> Cc: Vishal Moola (Oracle) <vishal.moola(a)gmail.com> Cc: Yang Shi <yang(a)os.amperecomputing.com> Cc: Zi Yan <ziy(a)nvidia.com> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Conflicts: mm/mempolicy.c [qp->nr_failed is introduced in 1cb5d11a370f, which is not merged.] Signed-off-by: Tong Tiangen <tongtiangen(a)huawei.com> --- v2: fix commit message checkformat warning. mm/mempolicy.c | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/mm/mempolicy.c b/mm/mempolicy.c index 88f0bb008efd..1587efaf777e 100644 --- a/mm/mempolicy.c +++ b/mm/mempolicy.c @@ -508,6 +508,7 @@ static int queue_folios_pmd(pmd_t *pmd, spinlock_t *ptl, unsigned long addr, static int queue_folios_pte_range(pmd_t *pmd, unsigned long addr, unsigned long end, struct mm_walk *walk) { + const fpb_t fpb_flags = FPB_IGNORE_DIRTY | FPB_IGNORE_SOFT_DIRTY; struct vm_area_struct *vma = walk->vma; struct folio *folio; struct queue_pages *qp = walk->private; @@ -515,6 +516,7 @@ static int queue_folios_pte_range(pmd_t *pmd, unsigned long addr, pte_t *pte, *mapped_pte; pte_t ptent; spinlock_t *ptl; + int max_nr, nr; ptl = pmd_trans_huge_lock(pmd, vma); if (ptl) @@ -525,13 +527,19 @@ static int queue_folios_pte_range(pmd_t *pmd, unsigned long addr, walk->action = ACTION_AGAIN; return 0; } - for (; addr != end; pte++, addr += PAGE_SIZE) { + for (; addr != end; pte += nr, addr += nr * PAGE_SIZE) { + max_nr = (end - addr) >> PAGE_SHIFT; + nr = 1; ptent = ptep_get(pte); if (!pte_present(ptent)) continue; folio = vm_normal_folio(vma, addr, ptent); if (!folio || folio_is_zone_device(folio)) continue; + if (folio_test_large(folio) && max_nr != 1) + nr = folio_pte_batch(folio, addr, pte, ptent, + max_nr, fpb_flags, + NULL, NULL, NULL); /* * vm_normal_folio() filters out zero pages, but there might * still be reserved folios to skip, perhaps in a VDSO. -- 2.25.1

2 1

[PATCH OLK-5.10,V2] nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
by Yi Yang 01 Jul '25

01 Jul '25

From: Maurizio Lombardi <mlombard(a)redhat.com> mainline inclusion from mainline-v6.14 commit ad95bab0cd28ed77c2c0d0b6e76e03e031391064 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IBY43W CVE: CVE-2025-21927 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- nvme_tcp_recv_pdu() doesn't check the validity of the header length. When header digests are enabled, a target might send a packet with an invalid header length (e.g. 255), causing nvme_tcp_verify_hdgst() to access memory outside the allocated area and cause memory corruptions by overwriting it with the calculated digest. Fix this by rejecting packets with an unexpected header length. Fixes: 3f2304f8c6d6 ("nvme-tcp: add NVMe over TCP host driver") Signed-off-by: Maurizio Lombardi <mlombard(a)redhat.com> Reviewed-by: Sagi Grimberg <sagi(a)grimberg.me> Signed-off-by: Keith Busch <kbusch(a)kernel.org> Conflicts: drivers/nvme/host/tcp.c [Confilcts dues to no backport of 363895767fbf("nvme-tcp: sanitize TLS key handling") and 84e009042d0f("nvme-tcp: add basic support for the C2HTermReq PDU")] Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/nvme/host/tcp.c | 32 +++++++++++++++++++++++++++++--- 1 file changed, 29 insertions(+), 3 deletions(-) diff --git a/drivers/nvme/host/tcp.c b/drivers/nvme/host/tcp.c index 7be1da41081d..2ffb4df56d11 100644 --- a/drivers/nvme/host/tcp.c +++ b/drivers/nvme/host/tcp.c @@ -185,6 +185,19 @@ static inline int nvme_tcp_queue_id(struct nvme_tcp_queue *queue) return queue - queue->ctrl->queues; } +static inline bool nvme_tcp_recv_pdu_supported(enum nvme_tcp_pdu_type type) +{ + switch (type) { + case nvme_tcp_c2h_term: + case nvme_tcp_c2h_data: + case nvme_tcp_r2t: + case nvme_tcp_rsp: + return true; + default: + return false; + } +} + static inline struct blk_mq_tags *nvme_tcp_tagset(struct nvme_tcp_queue *queue) { u32 queue_idx = nvme_tcp_queue_id(queue); @@ -700,6 +713,16 @@ static int nvme_tcp_recv_pdu(struct nvme_tcp_queue *queue, struct sk_buff *skb, return 0; hdr = queue->pdu; + if (unlikely(hdr->hlen != sizeof(struct nvme_tcp_rsp_pdu))) { + if (!nvme_tcp_recv_pdu_supported(hdr->type)) + goto unsupported_pdu; + + dev_err(queue->ctrl->ctrl.device, + "pdu type %d has unexpected header length (%d)\n", + hdr->type, hdr->hlen); + return -EPROTO; + } + if (queue->hdr_digest) { ret = nvme_tcp_verify_hdgst(queue, queue->pdu, hdr->hlen); if (unlikely(ret)) @@ -723,10 +746,13 @@ static int nvme_tcp_recv_pdu(struct nvme_tcp_queue *queue, struct sk_buff *skb, nvme_tcp_init_recv_ctx(queue); return nvme_tcp_handle_r2t(queue, (void *)queue->pdu); default: - dev_err(queue->ctrl->ctrl.device, - "unsupported pdu type (%d)\n", hdr->type); - return -EINVAL; + goto unsupported_pdu; } + +unsupported_pdu: + dev_err(queue->ctrl->ctrl.device, + "unsupported pdu type (%d)\n", hdr->type); + return -EINVAL; } static inline void nvme_tcp_end_request(struct request *rq, u16 status) -- 2.25.1

1 0

[openeuler:OLK-5.10 2989/2989] arch/x86/lib/copy_highpages.o: warning: objtool: sysctl_hugepage_nocache_copy()+0x130: unreachable instruction
by kernel test robot 01 Jul '25

01 Jul '25

Hi Kemeng, First bad commit (maybe != root cause): tree: https://gitee.com/openeuler/kernel.git OLK-5.10 head: 0655af1b703c5ae3de3a1ba80e5e31690ccfae93 commit: 50d5bf1b6da9f74bf93f9dec601c09d45d6d8406 [2989/2989] x86: hugepage: use nt copy hugepage to AEP in x86 config: x86_64-buildonly-randconfig-002-20250628 (https://download.01.org/0day-ci/archive/20250701/202507011409.e2CKDnmq-lkp@…) compiler: clang version 20.1.7 (https://github.com/llvm/llvm-project 6146a88f60492b520a36f8f8f3231e15f3cc6082) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250701/202507011409.e2CKDnmq-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507011409.e2CKDnmq-lkp@intel.com/ All warnings (new ones prefixed by >>): >> arch/x86/lib/copy_highpages.o: warning: objtool: sysctl_hugepage_nocache_copy()+0x130: unreachable instruction -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 2412/2412] mm/memory.c:5277:24: warning: variable 'nr_pages' set but not used
by kernel test robot 01 Jul '25

01 Jul '25

Hi Zi, FYI, the error/warning still remains. tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: e96d124d2a240f32fce75ac0f187b6be1d53e7f1 commit: 3bfa35ccde9e52ca74fed047eb4d89be32dd9e5e [2412/2412] mm/numa: no task_numa_fault() call if PTE is changed config: loongarch-randconfig-001-20250701 (https://download.01.org/0day-ci/archive/20250701/202507011307.oRLSFbBZ-lkp@…) compiler: loongarch64-linux-gcc (GCC) 13.3.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250701/202507011307.oRLSFbBZ-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507011307.oRLSFbBZ-lkp@intel.com/ All warnings (new ones prefixed by >>): mm/memory.c: In function 'do_numa_page': >> mm/memory.c:5277:24: warning: variable 'nr_pages' set but not used [-Wunused-but-set-variable] 5277 | int flags = 0, nr_pages; | ^~~~~~~~ vim +/nr_pages +5277 mm/memory.c f569661eacc258 Baolin Wang 2024-05-11 5266 2b7403035459c7 Souptick Joarder 2018-08-23 5267 static vm_fault_t do_numa_page(struct vm_fault *vmf) d10e63f29488b0 Mel Gorman 2012-10-25 5268 { 82b0f8c39a3869 Jan Kara 2016-12-14 5269 struct vm_area_struct *vma = vmf->vma; d5e6c8d5790088 Kefeng Wang 2023-11-27 5270 struct folio *folio = NULL; d5e6c8d5790088 Kefeng Wang 2023-11-27 5271 int nid = NUMA_NO_NODE; 2cb37064a2b82c Baolin Wang 2024-06-22 5272 bool writable = false, ignore_writable = false; 2cb37064a2b82c Baolin Wang 2024-06-22 5273 bool pte_write_upgrade = vma_wants_manual_pte_write_upgrade(vma); 90572890d20252 Peter Zijlstra 2013-10-07 5274 int last_cpupid; cbee9f88ec1b8d Peter Zijlstra 2012-10-25 5275 int target_nid; 04a8645304500b Aneesh Kumar K.V 2019-03-05 5276 pte_t pte, old_pte; 2cb37064a2b82c Baolin Wang 2024-06-22 @5277 int flags = 0, nr_pages; d10e63f29488b0 Mel Gorman 2012-10-25 5278 d10e63f29488b0 Mel Gorman 2012-10-25 5279 /* e2491c31fb10ae John Hubbard 2024-05-25 5280 * The pte cannot be used safely until we verify, while holding the page e2491c31fb10ae John Hubbard 2024-05-25 5281 * table lock, that its contents have not changed during fault handling. d10e63f29488b0 Mel Gorman 2012-10-25 5282 */ 82b0f8c39a3869 Jan Kara 2016-12-14 5283 spin_lock(vmf->ptl); e2491c31fb10ae John Hubbard 2024-05-25 5284 /* Read the live PTE from the page tables: */ e2491c31fb10ae John Hubbard 2024-05-25 5285 old_pte = ptep_get(vmf->pte); e2491c31fb10ae John Hubbard 2024-05-25 5286 e2491c31fb10ae John Hubbard 2024-05-25 5287 if (unlikely(!pte_same(old_pte, vmf->orig_pte))) { 82b0f8c39a3869 Jan Kara 2016-12-14 5288 pte_unmap_unlock(vmf->pte, vmf->ptl); 3bfa35ccde9e52 Zi Yan 2024-08-09 5289 return 0; 4daae3b4b9e49b Mel Gorman 2012-11-02 5290 } 4daae3b4b9e49b Mel Gorman 2012-11-02 5291 04a8645304500b Aneesh Kumar K.V 2019-03-05 5292 pte = pte_modify(old_pte, vma->vm_page_prot); d10e63f29488b0 Mel Gorman 2012-10-25 5293 6a56ccbcf6c695 David Hildenbrand 2022-11-08 5294 /* 6a56ccbcf6c695 David Hildenbrand 2022-11-08 5295 * Detect now whether the PTE could be writable; this information 6a56ccbcf6c695 David Hildenbrand 2022-11-08 5296 * is only valid while holding the PT lock. 6a56ccbcf6c695 David Hildenbrand 2022-11-08 5297 */ 6a56ccbcf6c695 David Hildenbrand 2022-11-08 5298 writable = pte_write(pte); 2cb37064a2b82c Baolin Wang 2024-06-22 5299 if (!writable && pte_write_upgrade && 6a56ccbcf6c695 David Hildenbrand 2022-11-08 5300 can_change_pte_writable(vma, vmf->address, pte)) 6a56ccbcf6c695 David Hildenbrand 2022-11-08 5301 writable = true; 6a56ccbcf6c695 David Hildenbrand 2022-11-08 5302 d5e6c8d5790088 Kefeng Wang 2023-11-27 5303 folio = vm_normal_folio(vma, vmf->address, pte); d5e6c8d5790088 Kefeng Wang 2023-11-27 5304 if (!folio || folio_is_zone_device(folio)) b99a342d4f11a5 Huang Ying 2021-04-29 5305 goto out_map; d10e63f29488b0 Mel Gorman 2012-10-25 5306 6688cc05473b36 Peter Zijlstra 2013-10-07 5307 /* bea66fbd11af1c Mel Gorman 2015-03-25 5308 * Avoid grouping on RO pages in general. RO pages shouldn't hurt as bea66fbd11af1c Mel Gorman 2015-03-25 5309 * much anyway since they can be in shared cache state. This misses bea66fbd11af1c Mel Gorman 2015-03-25 5310 * the case where a mapping is writable but the process never writes bea66fbd11af1c Mel Gorman 2015-03-25 5311 * to it but pte_write gets cleared during protection updates and bea66fbd11af1c Mel Gorman 2015-03-25 5312 * pte_dirty has unpredictable behaviour between PTE scan updates, bea66fbd11af1c Mel Gorman 2015-03-25 5313 * background writeback, dirty balancing and application behaviour. bea66fbd11af1c Mel Gorman 2015-03-25 5314 */ 6a56ccbcf6c695 David Hildenbrand 2022-11-08 5315 if (!writable) 6688cc05473b36 Peter Zijlstra 2013-10-07 5316 flags |= TNF_NO_GROUP; 6688cc05473b36 Peter Zijlstra 2013-10-07 5317 dabe1d992414a6 Rik van Riel 2013-10-07 5318 /* d5e6c8d5790088 Kefeng Wang 2023-11-27 5319 * Flag if the folio is shared between multiple address spaces. This dabe1d992414a6 Rik van Riel 2013-10-07 5320 * is later used when determining whether to group tasks together dabe1d992414a6 Rik van Riel 2013-10-07 5321 */ b8eba2d7e4a309 David Hildenbrand 2024-05-11 5322 if (folio_likely_mapped_shared(folio) && (vma->vm_flags & VM_SHARED)) dabe1d992414a6 Rik van Riel 2013-10-07 5323 flags |= TNF_SHARED; dabe1d992414a6 Rik van Riel 2013-10-07 5324 d5e6c8d5790088 Kefeng Wang 2023-11-27 5325 nid = folio_nid(folio); 2cb37064a2b82c Baolin Wang 2024-06-22 5326 nr_pages = folio_nr_pages(folio); 33024536bafd91 Huang Ying 2022-07-13 5327 /* 33024536bafd91 Huang Ying 2022-07-13 5328 * For memory tiering mode, cpupid of slow memory page is used 33024536bafd91 Huang Ying 2022-07-13 5329 * to record page access time. So use default value. 33024536bafd91 Huang Ying 2022-07-13 5330 */ 33024536bafd91 Huang Ying 2022-07-13 5331 if ((sysctl_numa_balancing_mode & NUMA_BALANCING_MEMORY_TIERING) && d5e6c8d5790088 Kefeng Wang 2023-11-27 5332 !node_is_toptier(nid)) 33024536bafd91 Huang Ying 2022-07-13 5333 last_cpupid = (-1 & LAST_CPUPID_MASK); 33024536bafd91 Huang Ying 2022-07-13 5334 else 28e1ec746768bb Kefeng Wang 2023-11-27 5335 last_cpupid = folio_last_cpupid(folio); bf7c2ab764599b Kefeng Wang 2023-11-27 5336 target_nid = numa_migrate_prep(folio, vma, vmf->address, nid, &flags); 98fa15f34cb379 Anshuman Khandual 2019-03-05 5337 if (target_nid == NUMA_NO_NODE) { d5e6c8d5790088 Kefeng Wang 2023-11-27 5338 folio_put(folio); b99a342d4f11a5 Huang Ying 2021-04-29 5339 goto out_map; 4daae3b4b9e49b Mel Gorman 2012-11-02 5340 } b99a342d4f11a5 Huang Ying 2021-04-29 5341 pte_unmap_unlock(vmf->pte, vmf->ptl); 6a56ccbcf6c695 David Hildenbrand 2022-11-08 5342 writable = false; 2cb37064a2b82c Baolin Wang 2024-06-22 5343 ignore_writable = true; 4daae3b4b9e49b Mel Gorman 2012-11-02 5344 4daae3b4b9e49b Mel Gorman 2012-11-02 5345 /* Migrate to the requested node */ d5e6c8d5790088 Kefeng Wang 2023-11-27 5346 if (migrate_misplaced_folio(folio, vma, target_nid)) { d5e6c8d5790088 Kefeng Wang 2023-11-27 5347 nid = target_nid; 6688cc05473b36 Peter Zijlstra 2013-10-07 5348 flags |= TNF_MIGRATED; 3bfa35ccde9e52 Zi Yan 2024-08-09 5349 task_numa_fault(last_cpupid, nid, 1, flags); 3bfa35ccde9e52 Zi Yan 2024-08-09 5350 return 0; 3bfa35ccde9e52 Zi Yan 2024-08-09 5351 } 3bfa35ccde9e52 Zi Yan 2024-08-09 5352 074c238177a75f Mel Gorman 2015-03-25 5353 flags |= TNF_MIGRATE_FAIL; c7ad08804fae5b Hugh Dickins 2023-06-08 5354 vmf->pte = pte_offset_map_lock(vma->vm_mm, vmf->pmd, c7ad08804fae5b Hugh Dickins 2023-06-08 5355 vmf->address, &vmf->ptl); c7ad08804fae5b Hugh Dickins 2023-06-08 5356 if (unlikely(!vmf->pte)) 3bfa35ccde9e52 Zi Yan 2024-08-09 5357 return 0; c33c794828f212 Ryan Roberts 2023-06-12 5358 if (unlikely(!pte_same(ptep_get(vmf->pte), vmf->orig_pte))) { b99a342d4f11a5 Huang Ying 2021-04-29 5359 pte_unmap_unlock(vmf->pte, vmf->ptl); d10e63f29488b0 Mel Gorman 2012-10-25 5360 return 0; 3bfa35ccde9e52 Zi Yan 2024-08-09 5361 } b99a342d4f11a5 Huang Ying 2021-04-29 5362 out_map: b99a342d4f11a5 Huang Ying 2021-04-29 5363 /* b99a342d4f11a5 Huang Ying 2021-04-29 5364 * Make it present again, depending on how arch implements b99a342d4f11a5 Huang Ying 2021-04-29 5365 * non-accessible ptes, some can allow access by kernel mode. b99a342d4f11a5 Huang Ying 2021-04-29 5366 */ 2cb37064a2b82c Baolin Wang 2024-06-22 5367 if (folio && folio_test_large(folio)) 2cb37064a2b82c Baolin Wang 2024-06-22 5368 numa_rebuild_large_mapping(vmf, vma, folio, pte, ignore_writable, 2cb37064a2b82c Baolin Wang 2024-06-22 5369 pte_write_upgrade); 2cb37064a2b82c Baolin Wang 2024-06-22 5370 else 2cb37064a2b82c Baolin Wang 2024-06-22 5371 numa_rebuild_single_mapping(vmf, vma, vmf->address, vmf->pte, 2cb37064a2b82c Baolin Wang 2024-06-22 5372 writable); b99a342d4f11a5 Huang Ying 2021-04-29 5373 pte_unmap_unlock(vmf->pte, vmf->ptl); 3bfa35ccde9e52 Zi Yan 2024-08-09 5374 3bfa35ccde9e52 Zi Yan 2024-08-09 5375 if (nid != NUMA_NO_NODE) 3bfa35ccde9e52 Zi Yan 2024-08-09 5376 task_numa_fault(last_cpupid, nid, 1, flags); 3bfa35ccde9e52 Zi Yan 2024-08-09 5377 return 0; d10e63f29488b0 Mel Gorman 2012-10-25 5378 } d10e63f29488b0 Mel Gorman 2012-10-25 5379 :::::: The code at line 5277 was first introduced by commit :::::: 2cb37064a2b82cd8ebeeaaed21259b5912dff51d mm: support multi-size THP numa balancing :::::: TO: Baolin Wang <baolin.wang(a)linux.alibaba.com> :::::: CC: Liu Shixin <liushixin2(a)huawei.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10 2882/2882] mm/vmalloc.c:3632: warning: Function parameter or member 'pgoff' not described in 'remap_vmalloc_hugepage_range_partial'
by kernel test robot 01 Jul '25

01 Jul '25

tree: https://gitee.com/openeuler/kernel.git OLK-5.10 head: 0655af1b703c5ae3de3a1ba80e5e31690ccfae93 commit: a3425d4173784e41644abc3cc70d41aa2aef16fd [2882/2882] vmalloc: Extend for hugepages mapping config: x86_64-randconfig-2002-20250501 (https://download.01.org/0day-ci/archive/20250701/202507010521.S5M6UUnr-lkp@…) compiler: clang version 20.1.2 (https://github.com/llvm/llvm-project 58df0ef89dd64126512e4ee27b4ac3fd8ddf6247) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250701/202507010521.S5M6UUnr-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507010521.S5M6UUnr-lkp@intel.com/ All warnings (new ones prefixed by >>): >> mm/vmalloc.c:3632: warning: Function parameter or member 'pgoff' not described in 'remap_vmalloc_hugepage_range_partial' mm/vmalloc.c:3760: warning: Function parameter or member 'align' not described in 'pvm_determine_end_from_reverse' vim +3632 mm/vmalloc.c 3612 3613 /** 3614 * remap_vmalloc_hugepage_range_partial - map vmalloc hugepages 3615 * to userspace 3616 * @vma: vma to cover 3617 * @uaddr: target user address to start at 3618 * @kaddr: virtual address of vmalloc hugepage kernel memory 3619 * @size: size of map area 3620 * 3621 * Returns: 0 for success, -Exxx on failure 3622 * 3623 * This function checks that @kaddr is a valid vmalloc'ed area, 3624 * and that it is big enough to cover the range starting at 3625 * @uaddr in @vma. Will return failure if that criteria isn't 3626 * met. 3627 * 3628 * Similar to remap_pfn_range() (see mm/memory.c) 3629 */ 3630 int remap_vmalloc_hugepage_range_partial(struct vm_area_struct *vma, unsigned long uaddr, 3631 void *kaddr, unsigned long pgoff, unsigned long size) > 3632 { 3633 struct vm_struct *area; 3634 unsigned long off; 3635 unsigned long end_index; 3636 3637 if (check_shl_overflow(pgoff, PMD_SHIFT, &off)) 3638 return -EINVAL; 3639 3640 size = PMD_ALIGN(size); 3641 3642 if (!PMD_ALIGNED(uaddr) || !PMD_ALIGNED(kaddr)) 3643 return -EINVAL; 3644 3645 area = find_vm_area(kaddr); 3646 if (!area) 3647 return -EINVAL; 3648 3649 if (!(area->flags & VM_USERMAP)) 3650 return -EINVAL; 3651 3652 if (check_add_overflow(size, off, &end_index) || 3653 end_index > get_vm_area_size(area)) 3654 return -EINVAL; 3655 kaddr += off; 3656 3657 do { 3658 struct page *page = vmalloc_to_page(kaddr); 3659 int ret; 3660 3661 ret = hugetlb_insert_hugepage_pte_by_pa(vma->vm_mm, uaddr, 3662 vma->vm_page_prot, page_to_phys(page)); 3663 if (ret) 3664 return ret; 3665 3666 uaddr += PMD_SIZE; 3667 kaddr += PMD_SIZE; 3668 size -= PMD_SIZE; 3669 } while (size > 0); 3670 3671 vma->vm_flags |= VM_DONTEXPAND | VM_DONTDUMP; 3672 3673 return 0; 3674 } 3675 EXPORT_SYMBOL(remap_vmalloc_hugepage_range_partial); 3676 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] pci:vga fix race condition in vga_arb_write
by Yuntao Liu 01 Jul '25

01 Jul '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ICCYVI CVE: NA -------------------------------- The following code has a race condition under concurrency. if (io_state & VGA_RSRC_LEGACY_IO) uc->io_cnt--; in race condition: pre: uc->io_cnt = 1 post: uc->io_cnt = 4294967295 move vga_put code below changing uc->io_cnt code. Fixes: deb2d2ecd43d ("PCI/GPU: implement VGA arbitration on Linux") Signed-off-by: Yuntao Liu <liuyuntao12(a)huawei.com> --- drivers/pci/vgaarb.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/drivers/pci/vgaarb.c b/drivers/pci/vgaarb.c index 5e6b1eb54c64..ed37fd3dcdef 100644 --- a/drivers/pci/vgaarb.c +++ b/drivers/pci/vgaarb.c @@ -1261,13 +1261,13 @@ static ssize_t vga_arb_write(struct file *file, const char __user *buf, goto done; } - vga_put(pdev, io_state); - if (io_state & VGA_RSRC_LEGACY_IO) uc->io_cnt--; if (io_state & VGA_RSRC_LEGACY_MEM) uc->mem_cnt--; + vga_put(pdev, io_state); + ret_val = count; goto done; } else if (strncmp(curr_pos, "trylock ", 8) == 0) { -- 2.34.1

2 1

[PATCH OLK-6.6] sched/fair: Avoid offline tasks starve to death for priority load balance
by Lu Jialin 01 Jul '25

01 Jul '25

From: Song Zhang <zhangsong34(a)huawei.com> euleros inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ICIG0E CVE: NA -------------------- When priority load balance enabled for online/offline tasks co-location, offline tasks maybe starve to death by load balance detach_tasks() if env->loop exceed env->loop_max and can not be migrate to idle cpus. So we should set env->loop to 0 and detach offline tasks again. Signed-off-by: Song Zhang <zhangsong34(a)huawei.com> Confict: kernel/sched/fair.c Patch adaptation due to context changes Signed-off-by: yangjiaqi <yangjiaqi16(a)huawei.com> --- kernel/sched/fair.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/kernel/sched/fair.c b/kernel/sched/fair.c index c4c3afa6e7b4..ea3be1ff723e 100644 --- a/kernel/sched/fair.c +++ b/kernel/sched/fair.c @@ -11024,6 +11024,13 @@ static int detach_tasks(struct lb_env *env) #ifdef CONFIG_QOS_SCHED_PRIO_LB if (sysctl_sched_prio_load_balance_enabled && env->imbalance > 0) { + /* + * Avoid offline tasks starve to death if env->loop exceed + * env->loop_max, so we should set env->loop to 0 and detach + * offline tasks again. + */ + if (env->loop > env->loop_max) + env->loop = 0; loop++; if (loop == 1) { tasks = &env->src_rq->cfs_offline_tasks; -- 2.33.0

2 1

[PATCH OLK-6.6 0/2] add perpcu stock for kmem
by Chen Ridong 01 Jul '25

01 Jul '25

add perpcu stock for kmem Chen Ridong (2): memcg: add CONFIG_MEMCG_KMEM_STOCK memcg: add stock for kmem [un]charging arch/arm64/configs/openeuler_defconfig | 1 + arch/x86/configs/openeuler_defconfig | 1 + init/Kconfig | 14 +++ mm/memcontrol.c | 122 ++++++++++++++++++++++++- 4 files changed, 137 insertions(+), 1 deletion(-) -- 2.34.1

2 3

[PATCH OLK-6.6] arm64: kaslr: fix nokaslr cmdline parsing
by Chen Ridong 01 Jul '25

01 Jul '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ICBCH8 ---------------------------------------------------------------------- Currently, when the command line contains "nokaslrxxx", it was incorrectly treated as a request to disable KASLR. This fixes the parsing logic for the 'nokaslr' command line argument. Only the exact strings 'nokaslr' will disable KASLR. Other inputs such as 'xxnokaslr', 'xxnokaslrxx', or 'xxnokaslr=xx' will not disable KASLR. Fixes: aacd149b6238 ("arm64: head: avoid relocating the kernel twice for KASLR") Signed-off-by: Chen Ridong <chenridong(a)huawei.com> --- arch/arm64/kernel/pi/kaslr_early.c | 25 ++++++++++++++++++++++++- 1 file changed, 24 insertions(+), 1 deletion(-) diff --git a/arch/arm64/kernel/pi/kaslr_early.c b/arch/arm64/kernel/pi/kaslr_early.c index 17bff6e399e46..e30f2887ac659 100644 --- a/arch/arm64/kernel/pi/kaslr_early.c +++ b/arch/arm64/kernel/pi/kaslr_early.c @@ -32,12 +32,35 @@ static char *__strstr(const char *s1, const char *s2) } return NULL; } + +/* + * nokaslr is valid start? + * Only the first cmd or characters before nokaslr is ' ' are valid. + */ +static bool nokaslr_valid_starts(const char *str, const char *cmdline) +{ + return str == cmdline || (str > cmdline && *(str - 1) == ' '); +} + +/* nokaslr is valid end? */ +static bool nokaslr_valid_ends(const char *str) +{ + size_t len = strlen("nokaslr"); + const char *after = str + len; + + /* End with ' ', '\0' */ + if (*after == ' ' || *after == '\0') + return true; + + return false; +} + static bool cmdline_contains_nokaslr(const u8 *cmdline) { const u8 *str; str = __strstr(cmdline, "nokaslr"); - return str == cmdline || (str > cmdline && *(str - 1) == ' '); + return nokaslr_valid_starts(str, cmdline) && nokaslr_valid_ends(str); } static bool is_kaslr_disabled_cmdline(void *fdt) -- 2.34.1

2 1

[PATCH OLK-5.10] arm64: kaslr: fix nokaslr cmdline parsing
by Chen Ridong 01 Jul '25

01 Jul '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ICBCH8 ---------------------------------------------------------------------- Currently, when the command line contains "nokaslrxxx", it was incorrectly treated as a request to disable KASLR. This fixes the parsing logic for the 'nokaslr' command line argument. Only the exact strings 'nokaslr' will disable KASLR. Other inputs such as 'xxnokaslr', 'xxnokaslrxx', or 'xxnokaslr=xx' will not disable KASLR. Fixes: f80fb3a3d508 ("arm64: add support for kernel ASLR") Signed-off-by: Chen Ridong <chenridong(a)huawei.com> --- arch/arm64/kernel/kaslr.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/arch/arm64/kernel/kaslr.c b/arch/arm64/kernel/kaslr.c index d612ac8ae855..513743d81f60 100644 --- a/arch/arm64/kernel/kaslr.c +++ b/arch/arm64/kernel/kaslr.c @@ -84,8 +84,9 @@ u64 __init kaslr_early_init(void) { void *fdt; u64 seed, offset, mask, module_range; - const u8 *cmdline, *str; + const u8 *cmdline, *str, *after; unsigned long raw; + int len; /* * Set a reasonable default for module_alloc_base in case @@ -116,7 +117,10 @@ u64 __init kaslr_early_init(void) */ cmdline = kaslr_get_cmdline(fdt); str = strstr(cmdline, "nokaslr"); - if (str == cmdline || (str > cmdline && *(str - 1) == ' ')) { + len = strlen("nokaslr"); + after = str + len; + if ((str == cmdline || (str > cmdline && *(str - 1) == ' ')) && + (*after == ' ' || *after == '\0')) { kaslr_status = KASLR_DISABLED_CMDLINE; return 0; } -- 2.34.1

2 1

[openeuler:openEuler-1.0-LTS] BUILD REGRESSION 5b1d85bac66b315e311b6d616683809b998a8645
by kernel test robot 01 Jul '25

01 Jul '25

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: 5b1d85bac66b315e311b6d616683809b998a8645 !16856 ipvs: fix WARNING in ip_vs_app_net_cleanup() Error/Warning (recently discovered and may have been fixed): https://lore.kernel.org/oe-kbuild-all/202506061449.nBm6oAvj-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202506061633.Zsp5yfyi-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202506061637.CVNqsEqf-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202506061755.yar1Fr9d-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202506071856.LxaA5NHF-lkp@intel.com https://lore.kernel.org/oe-kbuild-all/202506182031.ldH7VynO-lkp@intel.com /kbuild/src/headers/Makefile:626: include/config/auto.conf.cmd: No such file or directory include/linux/list.h:63:20: warning: storing the address of local variable 'ticket' in '((struct list_head *)((char *)space_info + 8))[10].prev' [-Wdangling-pointer=] kernel/sched/core.c:5989:22: error: 'root_task_group' undeclared (first use in this function); did you mean 'task_group'? kernel/sched/core.c:5989:29: error: 'root_task_group' undeclared (first use in this function); did you mean 'task_group'? mm/memcontrol.c:5000:6: warning: no previous prototype for function 'dhugetlb_pool_is_free' [-Wmissing-prototypes] mm/memory.c:4803:3: warning: cast from 'int (*)(unsigned long, unsigned long, struct cgp_args *)' to 'ktask_thread_func' (aka 'int (*)(void *, void *, void *)') converts to incompatible function type [-Wcast-function-type-mismatch] mm/memory_hotplug.c:970:13: warning: 'rollback_node_hotadd' defined but not used [-Wunused-function] mm/page_alloc.c:3123: warning: Function parameter or member 'mt' not described in '__putback_isolated_page' mm/vmalloc.c:231:16: warning: variable 'start' set but not used [-Wunused-but-set-variable] mm/vmalloc.c:231:23: warning: variable 'start' set but not used [-Wunused-but-set-variable] Unverified Error/Warning (likely false positive, kindly check if interested): mm/.tmp_vmacache.o: warning: objtool: missing symbol for section .text mm/shmem.c: linux/share_pool.h is included more than once. mm/swap.c: linux/memremap.h is included more than once. Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allmodconfig | |-- include-asm-generic-bitops-non-atomic.h:error:array-subscript-long-unsigned-int-is-partly-outside-array-bounds-of-u32-aka-unsigned-int | |-- include-uapi-linux-sctp.h:error:alignment-of-struct-sctp_paddr_change-is-less-than | |-- include-uapi-linux-sctp.h:error:alignment-of-struct-sctp_paddrinfo-is-less-than | |-- include-uapi-linux-sctp.h:error:alignment-of-struct-sctp_paddrparams-is-less-than | |-- include-uapi-linux-sctp.h:error:alignment-of-struct-sctp_prim-is-less-than | |-- include-uapi-linux-sctp.h:error:alignment-of-struct-sctp_setpeerprim-is-less-than | |-- include-uapi-linux-sctp.h:error:spinfo_address-offset-in-struct-sctp_paddrinfo-isn-t-aligned-to | |-- include-uapi-linux-sctp.h:error:spp_address-offset-in-struct-sctp_paddrparams-isn-t-aligned-to | |-- include-uapi-linux-sctp.h:error:ssp_addr-offset-in-struct-sctp_prim-isn-t-aligned-to | |-- include-uapi-linux-sctp.h:error:sspp_addr-offset-in-struct-sctp_setpeerprim-isn-t-aligned-to | |-- mm-memory_hotplug.c:warning:rollback_node_hotadd-defined-but-not-used | |-- mm-memory_hotplug.c:warning:unused-variable-start_pfn | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- arm64-allnoconfig | |-- kernel-sched-core.c:error:root_task_group-undeclared-(first-use-in-this-function) | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- arm64-defconfig | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- arm64-randconfig-001-20250630 | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- arm64-randconfig-002-20250630 | |-- kernel-sched-core.c:error:root_task_group-undeclared-(first-use-in-this-function) | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- arm64-randconfig-003-20250630 | |-- include-linux-list.h:warning:storing-the-address-of-local-variable-ticket-in-((struct-list_head-)((char-)space_info-))-.prev | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- arm64-randconfig-004-20250630 | |-- kernel-sched-core.c:error:root_task_group-undeclared-(first-use-in-this-function) | |-- mm-memory_hotplug.c:warning:rollback_node_hotadd-defined-but-not-used | |-- mm-memory_hotplug.c:warning:unused-variable-start_pfn | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- x86_64-allnoconfig | |-- Makefile:include-config-auto.conf.cmd:No-such-file-or-directory | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | |-- mm-shmem.c:linux-share_pool.h-is-included-more-than-once. | |-- mm-swap.c:linux-memremap.h-is-included-more-than-once. | |-- mm-vmalloc.c:warning:variable-start-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-allyesconfig | |-- mm-memory.c:warning:cast-from-int-(-)(unsigned-long-unsigned-long-struct-cgp_args-)-to-ktask_thread_func-(aka-int-(-)(void-void-void-)-)-converts-to-incompatible-function-type | |-- mm-memory_hotplug.c:warning:unused-variable-start_pfn | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- x86_64-buildonly-randconfig-002-20250630 | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | |-- mm-vmalloc.c:warning:variable-start-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-buildonly-randconfig-003-20250630 | |-- mm-memory.c:warning:cast-from-int-(-)(unsigned-long-unsigned-long-struct-cgp_args-)-to-ktask_thread_func-(aka-int-(-)(void-void-void-)-)-converts-to-incompatible-function-type | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | |-- mm-vmalloc.c:warning:variable-start-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-buildonly-randconfig-004-20250630 | |-- kernel-sched-core.c:error:use-of-undeclared-identifier-root_task_group | |-- mm-.tmp_vmacache.o:warning:objtool:missing-symbol-for-section-.text | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | |-- mm-memory.c:warning:cast-from-int-(-)(unsigned-long-unsigned-long-struct-cgp_args-)-to-ktask_thread_func-(aka-int-(-)(void-void-void-)-)-converts-to-incompatible-function-type | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | |-- mm-vmalloc.c:warning:variable-start-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-defconfig | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | `-- mm-vmalloc.c:warning:variable-start-set-but-not-used |-- x86_64-randconfig-161-20250701 | |-- kernel-hung_task.c:error:use-of-undeclared-identifier-sysctl_hung_task_all_cpu_backtrace | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | |-- mm-memcontrol.c:warning:no-previous-prototype-for-function-dhugetlb_pool_is_free | |-- mm-memory.c:warning:cast-from-int-(-)(unsigned-long-unsigned-long-struct-cgp_args-)-to-ktask_thread_func-(aka-int-(-)(void-void-void-)-)-converts-to-incompatible-function-type | |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page | |-- mm-vmalloc.c:warning:variable-start-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration `-- x86_64-rhel-9.4-rust |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool |-- mm-memcontrol.c:warning:no-previous-prototype-for-function-dhugetlb_pool_is_free |-- mm-memory_hotplug.c:warning:unused-variable-start_pfn |-- mm-page_alloc.c:warning:Function-parameter-or-member-mt-not-described-in-__putback_isolated_page `-- mm-vmalloc.c:warning:variable-start-set-but-not-used elapsed time: 727m configs tested: 17 configs skipped: 129 tested configs: arm64 allmodconfig gcc-15.1.0 arm64 allnoconfig gcc-15.1.0 arm64 defconfig gcc-15.1.0 arm64 randconfig-001-20250630 gcc-9.5.0 arm64 randconfig-002-20250630 gcc-14.3.0 arm64 randconfig-003-20250630 gcc-14.3.0 arm64 randconfig-004-20250630 gcc-9.5.0 x86_64 allnoconfig clang-20 x86_64 allyesconfig clang-20 x86_64 buildonly-randconfig-001-20250630 gcc-12 x86_64 buildonly-randconfig-002-20250630 clang-20 x86_64 buildonly-randconfig-003-20250630 clang-20 x86_64 buildonly-randconfig-004-20250630 clang-20 x86_64 buildonly-randconfig-005-20250630 gcc-12 x86_64 buildonly-randconfig-006-20250630 gcc-12 x86_64 defconfig gcc-11 x86_64 rhel-9.4-rust clang-18 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10 2882/2882] mm/page_alloc.c:3036:6: warning: no previous prototype for function '__drain_all_pages'
by kernel test robot 01 Jul '25

01 Jul '25

tree: https://gitee.com/openeuler/kernel.git OLK-5.10 head: 2264b0731bcc958f540da580ad93b9f103a8e271 commit: e037ee4a8deaff7c579618c0aba1f066d6d14b11 [2882/2882] mm, page_alloc: disable pcplists during memory offline config: x86_64-randconfig-2002-20250501 (https://download.01.org/0day-ci/archive/20250701/202507010222.B7Sw9hp0-lkp@…) compiler: clang version 20.1.2 (https://github.com/llvm/llvm-project 58df0ef89dd64126512e4ee27b4ac3fd8ddf6247) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250701/202507010222.B7Sw9hp0-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202507010222.B7Sw9hp0-lkp@intel.com/ All warnings (new ones prefixed by >>): >> mm/page_alloc.c:3036:6: warning: no previous prototype for function '__drain_all_pages' [-Wmissing-prototypes] 3036 | void __drain_all_pages(struct zone *zone, bool force_all_cpus) | ^ mm/page_alloc.c:3036:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 3036 | void __drain_all_pages(struct zone *zone, bool force_all_cpus) | ^ | static mm/page_alloc.c:3586:15: warning: no previous prototype for function 'should_fail_alloc_page' [-Wmissing-prototypes] 3586 | noinline bool should_fail_alloc_page(gfp_t gfp_mask, unsigned int order) | ^ mm/page_alloc.c:3586:10: note: declare 'static' if the function is not intended to be used outside of this translation unit 3586 | noinline bool should_fail_alloc_page(gfp_t gfp_mask, unsigned int order) | ^ | static mm/page_alloc.c:6497:20: warning: no previous prototype for function 'memmap_init' [-Wmissing-prototypes] 6497 | void __init __weak memmap_init(void) | ^ mm/page_alloc.c:6497:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 6497 | void __init __weak memmap_init(void) | ^ | static mm/page_alloc.c:6535:23: warning: no previous prototype for function 'arch_memmap_init' [-Wmissing-prototypes] 6535 | void __meminit __weak arch_memmap_init(unsigned long size, int nid, | ^ mm/page_alloc.c:6535:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 6535 | void __meminit __weak arch_memmap_init(unsigned long size, int nid, | ^ | static >> mm/page_alloc.c:6634:6: warning: no previous prototype for function '__zone_set_pageset_high_and_batch' [-Wmissing-prototypes] 6634 | void __zone_set_pageset_high_and_batch(struct zone *zone, unsigned long high, | ^ mm/page_alloc.c:6634:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 6634 | void __zone_set_pageset_high_and_batch(struct zone *zone, unsigned long high, | ^ | static 5 warnings generated. vim +/__drain_all_pages +3036 mm/page_alloc.c 3025 3026 /* 3027 * The implementation of drain_all_pages(), exposing an extra parameter to 3028 * drain on all cpus. 3029 * 3030 * drain_all_pages() is optimized to only execute on cpus where pcplists are 3031 * not empty. The check for non-emptiness can however race with a free to 3032 * pcplist that has not yet increased the pcp->count from 0 to 1. Callers 3033 * that need the guarantee that every CPU has drained can disable the 3034 * optimizing racy check. 3035 */ > 3036 void __drain_all_pages(struct zone *zone, bool force_all_cpus) 3037 { 3038 int cpu; 3039 3040 /* 3041 * Allocate in the BSS so we wont require allocation in 3042 * direct reclaim path for CONFIG_CPUMASK_OFFSTACK=y 3043 */ 3044 static cpumask_t cpus_with_pcps; 3045 3046 /* 3047 * Make sure nobody triggers this path before mm_percpu_wq is fully 3048 * initialized. 3049 */ 3050 if (WARN_ON_ONCE(!mm_percpu_wq)) 3051 return; 3052 3053 /* 3054 * Do not drain if one is already in progress unless it's specific to 3055 * a zone. Such callers are primarily CMA and memory hotplug and need 3056 * the drain to be complete when the call returns. 3057 */ 3058 if (unlikely(!mutex_trylock(&pcpu_drain_mutex))) { 3059 if (!zone) 3060 return; 3061 mutex_lock(&pcpu_drain_mutex); 3062 } 3063 3064 /* 3065 * We don't care about racing with CPU hotplug event 3066 * as offline notification will cause the notified 3067 * cpu to drain that CPU pcps and on_each_cpu_mask 3068 * disables preemption as part of its processing 3069 */ 3070 for_each_online_cpu(cpu) { 3071 struct per_cpu_pageset *pcp; 3072 struct zone *z; 3073 bool has_pcps = false; 3074 3075 if (force_all_cpus) { 3076 /* 3077 * The pcp.count check is racy, some callers need a 3078 * guarantee that no cpu is missed. 3079 */ 3080 has_pcps = true; 3081 } else if (zone) { 3082 pcp = per_cpu_ptr(zone->pageset, cpu); 3083 if (pcp->pcp.count) 3084 has_pcps = true; 3085 } else { 3086 for_each_populated_zone(z) { 3087 pcp = per_cpu_ptr(z->pageset, cpu); 3088 if (pcp->pcp.count) { 3089 has_pcps = true; 3090 break; 3091 } 3092 } 3093 } 3094 3095 if (has_pcps) 3096 cpumask_set_cpu(cpu, &cpus_with_pcps); 3097 else 3098 cpumask_clear_cpu(cpu, &cpus_with_pcps); 3099 } 3100 3101 for_each_cpu(cpu, &cpus_with_pcps) { 3102 struct pcpu_drain *drain = per_cpu_ptr(&pcpu_drain, cpu); 3103 3104 drain->zone = zone; 3105 INIT_WORK(&drain->work, drain_local_pages_wq); 3106 queue_work_on(cpu, mm_percpu_wq, &drain->work); 3107 } 3108 for_each_cpu(cpu, &cpus_with_pcps) 3109 flush_work(&per_cpu_ptr(&pcpu_drain, cpu)->work); 3110 3111 mutex_unlock(&pcpu_drain_mutex); 3112 } 3113 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0