- Kernel - mailweb.openeuler.org

[openeuler:OLK-6.6 2679/2679] kernel/bpf-rvi/common_kfuncs.c:143:26: warning: no previous prototype for function 'bpf_kstat_softirqs_cpu'
by kernel test robot 15 Aug '25

15 Aug '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 43d8c124ec4624389b14d42595e5f0195e3e5a1d commit: e553ff4b5e1eed196ab68b4efd4a189c45396667 [2679/2679] bpf-rvi: Add kstat_ & kcpustat_ kfuncs config: loongarch-allmodconfig (https://download.01.org/0day-ci/archive/20250815/202508151345.8J2PvFWg-lkp@…) compiler: clang version 19.1.7 (https://github.com/llvm/llvm-project cd708029e0b2869e80abe31ddb175f7c35361f90) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250815/202508151345.8J2PvFWg-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202508151345.8J2PvFWg-lkp@intel.com/ All warnings (new ones prefixed by >>): kernel/bpf-rvi/common_kfuncs.c:25:32: warning: no previous prototype for function 'bpf_mem_cgroup_from_task' [-Wmissing-prototypes] 25 | __bpf_kfunc struct mem_cgroup *bpf_mem_cgroup_from_task(struct task_struct *p) | ^ kernel/bpf-rvi/common_kfuncs.c:25:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 25 | __bpf_kfunc struct mem_cgroup *bpf_mem_cgroup_from_task(struct task_struct *p) | ^ | static kernel/bpf-rvi/common_kfuncs.c:34:35: warning: no previous prototype for function 'bpf_task_active_pid_ns' [-Wmissing-prototypes] 34 | __bpf_kfunc struct pid_namespace *bpf_task_active_pid_ns(struct task_struct *task) | ^ kernel/bpf-rvi/common_kfuncs.c:34:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 34 | __bpf_kfunc struct pid_namespace *bpf_task_active_pid_ns(struct task_struct *task) | ^ | static kernel/bpf-rvi/common_kfuncs.c:39:17: warning: no previous prototype for function 'bpf_pidns_nr_tasks' [-Wmissing-prototypes] 39 | __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) | ^ kernel/bpf-rvi/common_kfuncs.c:39:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 39 | __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) | ^ | static kernel/bpf-rvi/common_kfuncs.c:53:17: warning: no previous prototype for function 'bpf_pidns_last_pid' [-Wmissing-prototypes] 53 | __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) | ^ kernel/bpf-rvi/common_kfuncs.c:53:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 53 | __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) | ^ | static kernel/bpf-rvi/common_kfuncs.c:82:18: warning: no previous prototype for function 'bpf_si_memswinfo' [-Wmissing-prototypes] 82 | __bpf_kfunc void bpf_si_memswinfo(struct bpf_sysinfo *bsi) | ^ kernel/bpf-rvi/common_kfuncs.c:82:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 82 | __bpf_kfunc void bpf_si_memswinfo(struct bpf_sysinfo *bsi) | ^ | static kernel/bpf-rvi/common_kfuncs.c:92:27: warning: no previous prototype for function 'bpf_page_counter_read' [-Wmissing-prototypes] 92 | __bpf_kfunc unsigned long bpf_page_counter_read(struct page_counter *counter) | ^ kernel/bpf-rvi/common_kfuncs.c:92:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 92 | __bpf_kfunc unsigned long bpf_page_counter_read(struct page_counter *counter) | ^ | static kernel/bpf-rvi/common_kfuncs.c:102:18: warning: no previous prototype for function 'bpf_seq_file_append' [-Wmissing-prototypes] 102 | __bpf_kfunc void bpf_seq_file_append(struct seq_file *dst, struct seq_file *src) | ^ kernel/bpf-rvi/common_kfuncs.c:102:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 102 | __bpf_kfunc void bpf_seq_file_append(struct seq_file *dst, struct seq_file *src) | ^ | static kernel/bpf-rvi/common_kfuncs.c:116:18: warning: no previous prototype for function 'bpf_get_boottime_timens' [-Wmissing-prototypes] 116 | __bpf_kfunc void bpf_get_boottime_timens(struct task_struct *tsk, struct timespec64 *boottime) | ^ kernel/bpf-rvi/common_kfuncs.c:116:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 116 | __bpf_kfunc void bpf_get_boottime_timens(struct task_struct *tsk, struct timespec64 *boottime) | ^ | static kernel/bpf-rvi/common_kfuncs.c:122:27: warning: no previous prototype for function 'bpf_get_total_forks' [-Wmissing-prototypes] 122 | __bpf_kfunc unsigned long bpf_get_total_forks(void) | ^ kernel/bpf-rvi/common_kfuncs.c:122:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 122 | __bpf_kfunc unsigned long bpf_get_total_forks(void) | ^ | static kernel/bpf-rvi/common_kfuncs.c:127:26: warning: no previous prototype for function 'bpf_nr_running' [-Wmissing-prototypes] 127 | __bpf_kfunc unsigned int bpf_nr_running(void) | ^ kernel/bpf-rvi/common_kfuncs.c:127:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 127 | __bpf_kfunc unsigned int bpf_nr_running(void) | ^ | static kernel/bpf-rvi/common_kfuncs.c:132:32: warning: no previous prototype for function 'bpf_nr_context_switches' [-Wmissing-prototypes] 132 | __bpf_kfunc unsigned long long bpf_nr_context_switches(void) | ^ kernel/bpf-rvi/common_kfuncs.c:132:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 132 | __bpf_kfunc unsigned long long bpf_nr_context_switches(void) | ^ | static kernel/bpf-rvi/common_kfuncs.c:137:26: warning: no previous prototype for function 'bpf_nr_iowait' [-Wmissing-prototypes] 137 | __bpf_kfunc unsigned int bpf_nr_iowait(void) | ^ kernel/bpf-rvi/common_kfuncs.c:137:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 137 | __bpf_kfunc unsigned int bpf_nr_iowait(void) | ^ | static >> kernel/bpf-rvi/common_kfuncs.c:143:26: warning: no previous prototype for function 'bpf_kstat_softirqs_cpu' [-Wmissing-prototypes] 143 | __bpf_kfunc unsigned int bpf_kstat_softirqs_cpu(unsigned int irq, int cpu) | ^ kernel/bpf-rvi/common_kfuncs.c:143:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 143 | __bpf_kfunc unsigned int bpf_kstat_softirqs_cpu(unsigned int irq, int cpu) | ^ | static >> kernel/bpf-rvi/common_kfuncs.c:148:27: warning: no previous prototype for function 'bpf_kstat_cpu_irqs_sum' [-Wmissing-prototypes] 148 | __bpf_kfunc unsigned long bpf_kstat_cpu_irqs_sum(unsigned int cpu) | ^ kernel/bpf-rvi/common_kfuncs.c:148:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 148 | __bpf_kfunc unsigned long bpf_kstat_cpu_irqs_sum(unsigned int cpu) | ^ | static >> kernel/bpf-rvi/common_kfuncs.c:153:18: warning: no previous prototype for function 'bpf_kcpustat_cpu_fetch' [-Wmissing-prototypes] 153 | __bpf_kfunc void bpf_kcpustat_cpu_fetch(struct kernel_cpustat *dst, int cpu) | ^ kernel/bpf-rvi/common_kfuncs.c:153:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 153 | __bpf_kfunc void bpf_kcpustat_cpu_fetch(struct kernel_cpustat *dst, int cpu) | ^ | static 15 warnings generated. vim +/bpf_kstat_softirqs_cpu +143 kernel/bpf-rvi/common_kfuncs.c 141 142 /* Kernel statistics for CPU accounting */ > 143 __bpf_kfunc unsigned int bpf_kstat_softirqs_cpu(unsigned int irq, int cpu) 144 { 145 return kstat_softirqs_cpu(irq, cpu); 146 } 147 > 148 __bpf_kfunc unsigned long bpf_kstat_cpu_irqs_sum(unsigned int cpu) 149 { 150 return kstat_cpu_irqs_sum(cpu); 151 } 152 > 153 __bpf_kfunc void bpf_kcpustat_cpu_fetch(struct kernel_cpustat *dst, int cpu) 154 { 155 kcpustat_cpu_fetch(dst, cpu); 156 } 157 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 2679/2679] kernel/bpf-rvi/common_kfuncs.c:127:26: warning: no previous prototype for function 'bpf_nr_running'
by kernel test robot 15 Aug '25

15 Aug '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 43d8c124ec4624389b14d42595e5f0195e3e5a1d commit: 34f90dce941b028e02a0336711907b220e3c5765 [2679/2679] bpf-rvi: Add cpu runqueue related kfuncs config: loongarch-allmodconfig (https://download.01.org/0day-ci/archive/20250815/202508151109.6yJtnNTX-lkp@…) compiler: clang version 19.1.7 (https://github.com/llvm/llvm-project cd708029e0b2869e80abe31ddb175f7c35361f90) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250815/202508151109.6yJtnNTX-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202508151109.6yJtnNTX-lkp@intel.com/ All warnings (new ones prefixed by >>): kernel/bpf-rvi/common_kfuncs.c:25:32: warning: no previous prototype for function 'bpf_mem_cgroup_from_task' [-Wmissing-prototypes] 25 | __bpf_kfunc struct mem_cgroup *bpf_mem_cgroup_from_task(struct task_struct *p) | ^ kernel/bpf-rvi/common_kfuncs.c:25:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 25 | __bpf_kfunc struct mem_cgroup *bpf_mem_cgroup_from_task(struct task_struct *p) | ^ | static kernel/bpf-rvi/common_kfuncs.c:34:35: warning: no previous prototype for function 'bpf_task_active_pid_ns' [-Wmissing-prototypes] 34 | __bpf_kfunc struct pid_namespace *bpf_task_active_pid_ns(struct task_struct *task) | ^ kernel/bpf-rvi/common_kfuncs.c:34:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 34 | __bpf_kfunc struct pid_namespace *bpf_task_active_pid_ns(struct task_struct *task) | ^ | static kernel/bpf-rvi/common_kfuncs.c:39:17: warning: no previous prototype for function 'bpf_pidns_nr_tasks' [-Wmissing-prototypes] 39 | __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) | ^ kernel/bpf-rvi/common_kfuncs.c:39:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 39 | __bpf_kfunc u64 bpf_pidns_nr_tasks(struct pid_namespace *ns) | ^ | static kernel/bpf-rvi/common_kfuncs.c:53:17: warning: no previous prototype for function 'bpf_pidns_last_pid' [-Wmissing-prototypes] 53 | __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) | ^ kernel/bpf-rvi/common_kfuncs.c:53:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 53 | __bpf_kfunc u32 bpf_pidns_last_pid(struct pid_namespace *ns) | ^ | static kernel/bpf-rvi/common_kfuncs.c:82:18: warning: no previous prototype for function 'bpf_si_memswinfo' [-Wmissing-prototypes] 82 | __bpf_kfunc void bpf_si_memswinfo(struct bpf_sysinfo *bsi) | ^ kernel/bpf-rvi/common_kfuncs.c:82:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 82 | __bpf_kfunc void bpf_si_memswinfo(struct bpf_sysinfo *bsi) | ^ | static kernel/bpf-rvi/common_kfuncs.c:92:27: warning: no previous prototype for function 'bpf_page_counter_read' [-Wmissing-prototypes] 92 | __bpf_kfunc unsigned long bpf_page_counter_read(struct page_counter *counter) | ^ kernel/bpf-rvi/common_kfuncs.c:92:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 92 | __bpf_kfunc unsigned long bpf_page_counter_read(struct page_counter *counter) | ^ | static kernel/bpf-rvi/common_kfuncs.c:102:18: warning: no previous prototype for function 'bpf_seq_file_append' [-Wmissing-prototypes] 102 | __bpf_kfunc void bpf_seq_file_append(struct seq_file *dst, struct seq_file *src) | ^ kernel/bpf-rvi/common_kfuncs.c:102:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 102 | __bpf_kfunc void bpf_seq_file_append(struct seq_file *dst, struct seq_file *src) | ^ | static kernel/bpf-rvi/common_kfuncs.c:116:18: warning: no previous prototype for function 'bpf_get_boottime_timens' [-Wmissing-prototypes] 116 | __bpf_kfunc void bpf_get_boottime_timens(struct task_struct *tsk, struct timespec64 *boottime) | ^ kernel/bpf-rvi/common_kfuncs.c:116:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 116 | __bpf_kfunc void bpf_get_boottime_timens(struct task_struct *tsk, struct timespec64 *boottime) | ^ | static kernel/bpf-rvi/common_kfuncs.c:122:27: warning: no previous prototype for function 'bpf_get_total_forks' [-Wmissing-prototypes] 122 | __bpf_kfunc unsigned long bpf_get_total_forks(void) | ^ kernel/bpf-rvi/common_kfuncs.c:122:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 122 | __bpf_kfunc unsigned long bpf_get_total_forks(void) | ^ | static >> kernel/bpf-rvi/common_kfuncs.c:127:26: warning: no previous prototype for function 'bpf_nr_running' [-Wmissing-prototypes] 127 | __bpf_kfunc unsigned int bpf_nr_running(void) | ^ kernel/bpf-rvi/common_kfuncs.c:127:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 127 | __bpf_kfunc unsigned int bpf_nr_running(void) | ^ | static >> kernel/bpf-rvi/common_kfuncs.c:132:32: warning: no previous prototype for function 'bpf_nr_context_switches' [-Wmissing-prototypes] 132 | __bpf_kfunc unsigned long long bpf_nr_context_switches(void) | ^ kernel/bpf-rvi/common_kfuncs.c:132:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 132 | __bpf_kfunc unsigned long long bpf_nr_context_switches(void) | ^ | static >> kernel/bpf-rvi/common_kfuncs.c:137:26: warning: no previous prototype for function 'bpf_nr_iowait' [-Wmissing-prototypes] 137 | __bpf_kfunc unsigned int bpf_nr_iowait(void) | ^ kernel/bpf-rvi/common_kfuncs.c:137:13: note: declare 'static' if the function is not intended to be used outside of this translation unit 137 | __bpf_kfunc unsigned int bpf_nr_iowait(void) | ^ | static 12 warnings generated. vim +/bpf_nr_running +127 kernel/bpf-rvi/common_kfuncs.c 126 > 127 __bpf_kfunc unsigned int bpf_nr_running(void) 128 { 129 return nr_running(); 130 } 131 > 132 __bpf_kfunc unsigned long long bpf_nr_context_switches(void) 133 { 134 return nr_context_switches(); 135 } 136 > 137 __bpf_kfunc unsigned int bpf_nr_iowait(void) 138 { 139 return nr_iowait(); 140 } 141 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS 1755/1755] fs/xattr.c:222: warning: Function parameter or member 'dentry' not described in '__vfs_setxattr_locked'
by kernel test robot 15 Aug '25

15 Aug '25

Hi Frank, First bad commit (maybe != root cause): tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 8723dc57de6371f9cc8764e15d4cc9e57ae592ee commit: 9f6e50a6f05d96c8ae495e278d86daa132b84085 [1755/1755] xattr: break delegations in {set, remove}xattr config: x86_64-buildonly-randconfig-2002-20250811 (https://download.01.org/0day-ci/archive/20250815/202508150542.jyItpbw4-lkp@…) compiler: clang version 20.1.8 (https://github.com/llvm/llvm-project 87f0227cb60147a26a1eeb4fb06e3b505e9c7261) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20250815/202508150542.jyItpbw4-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202508150542.jyItpbw4-lkp@intel.com/ All warnings (new ones prefixed by >>): fs/xattr.c:171: warning: Function parameter or member 'dentry' not described in '__vfs_setxattr_noperm' fs/xattr.c:171: warning: Function parameter or member 'name' not described in '__vfs_setxattr_noperm' fs/xattr.c:171: warning: Function parameter or member 'value' not described in '__vfs_setxattr_noperm' fs/xattr.c:171: warning: Function parameter or member 'size' not described in '__vfs_setxattr_noperm' fs/xattr.c:171: warning: Function parameter or member 'flags' not described in '__vfs_setxattr_noperm' >> fs/xattr.c:222: warning: Function parameter or member 'dentry' not described in '__vfs_setxattr_locked' >> fs/xattr.c:222: warning: Function parameter or member 'name' not described in '__vfs_setxattr_locked' >> fs/xattr.c:222: warning: Function parameter or member 'value' not described in '__vfs_setxattr_locked' >> fs/xattr.c:222: warning: Function parameter or member 'size' not described in '__vfs_setxattr_locked' >> fs/xattr.c:222: warning: Function parameter or member 'flags' not described in '__vfs_setxattr_locked' >> fs/xattr.c:222: warning: Function parameter or member 'delegated_inode' not described in '__vfs_setxattr_locked' >> fs/xattr.c:429: warning: Function parameter or member 'dentry' not described in '__vfs_removexattr_locked' >> fs/xattr.c:429: warning: Function parameter or member 'name' not described in '__vfs_removexattr_locked' >> fs/xattr.c:429: warning: Function parameter or member 'delegated_inode' not described in '__vfs_removexattr_locked' vim +222 fs/xattr.c b1ab7e4b2a88d3 David P. Quigley 2009-09-03 205 9f6e50a6f05d96 Frank van der Linden 2020-09-22 206 /** 9f6e50a6f05d96 Frank van der Linden 2020-09-22 207 * __vfs_setxattr_locked: set an extended attribute while holding the inode 9f6e50a6f05d96 Frank van der Linden 2020-09-22 208 * lock 9f6e50a6f05d96 Frank van der Linden 2020-09-22 209 * 9f6e50a6f05d96 Frank van der Linden 2020-09-22 210 * @dentry - object to perform setxattr on 9f6e50a6f05d96 Frank van der Linden 2020-09-22 211 * @name - xattr name to set 9f6e50a6f05d96 Frank van der Linden 2020-09-22 212 * @value - value to set @name to 9f6e50a6f05d96 Frank van der Linden 2020-09-22 213 * @size - size of @value 9f6e50a6f05d96 Frank van der Linden 2020-09-22 214 * @flags - flags to pass into filesystem operations 9f6e50a6f05d96 Frank van der Linden 2020-09-22 215 * @delegated_inode - on return, will contain an inode pointer that 9f6e50a6f05d96 Frank van der Linden 2020-09-22 216 * a delegation was broken on, NULL if none. 9f6e50a6f05d96 Frank van der Linden 2020-09-22 217 */ b1ab7e4b2a88d3 David P. Quigley 2009-09-03 218 int 9f6e50a6f05d96 Frank van der Linden 2020-09-22 219 __vfs_setxattr_locked(struct dentry *dentry, const char *name, 9f6e50a6f05d96 Frank van der Linden 2020-09-22 220 const void *value, size_t size, int flags, 9f6e50a6f05d96 Frank van der Linden 2020-09-22 221 struct inode **delegated_inode) b1ab7e4b2a88d3 David P. Quigley 2009-09-03 @222 { b1ab7e4b2a88d3 David P. Quigley 2009-09-03 223 struct inode *inode = dentry->d_inode; b1ab7e4b2a88d3 David P. Quigley 2009-09-03 224 int error; b1ab7e4b2a88d3 David P. Quigley 2009-09-03 225 b1ab7e4b2a88d3 David P. Quigley 2009-09-03 226 error = xattr_permission(inode, name, MAY_WRITE); b1ab7e4b2a88d3 David P. Quigley 2009-09-03 227 if (error) b1ab7e4b2a88d3 David P. Quigley 2009-09-03 228 return error; b1ab7e4b2a88d3 David P. Quigley 2009-09-03 229 b1ab7e4b2a88d3 David P. Quigley 2009-09-03 230 error = security_inode_setxattr(dentry, name, value, size, flags); b1ab7e4b2a88d3 David P. Quigley 2009-09-03 231 if (error) b1ab7e4b2a88d3 David P. Quigley 2009-09-03 232 goto out; b1ab7e4b2a88d3 David P. Quigley 2009-09-03 233 9f6e50a6f05d96 Frank van der Linden 2020-09-22 234 error = try_break_deleg(inode, delegated_inode); 9f6e50a6f05d96 Frank van der Linden 2020-09-22 235 if (error) 9f6e50a6f05d96 Frank van der Linden 2020-09-22 236 goto out; 9f6e50a6f05d96 Frank van der Linden 2020-09-22 237 b1ab7e4b2a88d3 David P. Quigley 2009-09-03 238 error = __vfs_setxattr_noperm(dentry, name, value, size, flags); b1ab7e4b2a88d3 David P. Quigley 2009-09-03 239 5be196e5f925da Christoph Hellwig 2006-01-09 240 out: 9f6e50a6f05d96 Frank van der Linden 2020-09-22 241 return error; 9f6e50a6f05d96 Frank van der Linden 2020-09-22 242 } 9f6e50a6f05d96 Frank van der Linden 2020-09-22 243 EXPORT_SYMBOL_GPL(__vfs_setxattr_locked); 9f6e50a6f05d96 Frank van der Linden 2020-09-22 244 :::::: The code at line 222 was first introduced by commit :::::: b1ab7e4b2a88d3ac13771463be8f302ce1616cfc VFS: Factor out part of vfs_setxattr so it can be called from the SELinux hook for inode_setsecctx. :::::: TO: David P. Quigley <dpquigl(a)tycho.nsa.gov> :::::: CC: James Morris <jmorris(a)namei.org> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[OLK-6.6 0/4] net: sched: Fix CVE-2025-37890
by Dong Chenchen 15 Aug '25

15 Aug '25

Fix CVE-2025-37890 Cong Wang (1): sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Lion Ackermann (1): net/sched: Always pass notifications when child class becomes empty Pedro Tammela (1): net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Victor Nogueira (1): net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc net/sched/sch_api.c | 19 +++++-------------- net/sched/sch_hfsc.c | 15 +++++++++++---- 2 files changed, 16 insertions(+), 18 deletions(-) -- 2.25.1

1 4

[PATCH OLK-5.10 0/4] net: sched: Fix CVE-2025-37890
by Dong Chenchen 15 Aug '25

15 Aug '25

Fix CVE-2025-37890 Cong Wang (1): sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() Lion Ackermann (1): net/sched: Always pass notifications when child class becomes empty Pedro Tammela (1): net_sched: hfsc: Address reentrant enqueue adding class to eltree twice Victor Nogueira (1): net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc net/sched/sch_api.c | 19 +++++-------------- net/sched/sch_hfsc.c | 15 +++++++++++---- 2 files changed, 16 insertions(+), 18 deletions(-) -- 2.25.1

2 5

openEuler Kernel SIG双周例会
by openEuler conference 15 Aug '25

15 Aug '25

您好！ Kernel 邀请您参加 2025-08-15 14:00 召开的WeLink会议(自动录制) 会议主题：openEuler Kernel SIG双周例会会议内容： 1. 进展update 2. 议题征集中（新增议题可回复本邮件申报，也可直接填报至会议纪要看板）会议链接：https://meeting.huaweicloud.com:36443/#/j/963670522 会议纪要：https://etherpad.openeuler.org/p/Kernel-meetings 更多资讯尽在：https://www.openeuler.org/zh/ Hello! Kernel invites you to attend the WeLink conference(auto recording) will be held at 2025-08-15 14:00, The subject of the conference is openEuler Kernel SIG双周例会 Summary: 1. 进展update 2. 议题征集中（新增议题可回复本邮件申报，也可直接填报至会议纪要看板） You can join the meeting at https://meeting.huaweicloud.com:36443/#/j/963670522 Add topics at https://etherpad.openeuler.org/p/Kernel-meetings More information: https://www.openeuler.org/en/

1 0

[PATCH OLK-6.6] net_sched: drr: Fix double list add in class with netem as child qdisc
by Dong Chenchen 15 Aug '25

15 Aug '25

From: Victor Nogueira <victor(a)mojatatu.com> stable inclusion from stable-v6.6.90 commit db205b92dfe0501e5b92fb7cf00971d0e44ba3eb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IC990Y CVE: CVE-2025-37915 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit f99a3fbf023e20b626be4b0f042463d598050c9a ] As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of drr, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption. In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before adding to the list to cover for the reentrant case. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp… Fixes: 37d9cf1a3ce3 ("sched: Fix detection of empty queues in child qdiscs") Acked-by: Jamal Hadi Salim <jhs(a)mojatatu.com> Signed-off-by: Victor Nogueira <victor(a)mojatatu.com> Link: https://patch.msgid.link/20250425220710.3964791-2-victor@mojatatu.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Dong Chenchen <dongchenchen2(a)huawei.com> --- net/sched/sch_drr.c | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/net/sched/sch_drr.c b/net/sched/sch_drr.c index f1abd9f84d0d..9b36955e32b1 100644 --- a/net/sched/sch_drr.c +++ b/net/sched/sch_drr.c @@ -35,6 +35,11 @@ struct drr_sched { struct Qdisc_class_hash clhash; }; +static bool cl_is_active(struct drr_class *cl) +{ + return !list_empty(&cl->alist); +} + static struct drr_class *drr_find_class(struct Qdisc *sch, u32 classid) { struct drr_sched *q = qdisc_priv(sch); @@ -337,7 +342,6 @@ static int drr_enqueue(struct sk_buff *skb, struct Qdisc *sch, struct drr_sched *q = qdisc_priv(sch); struct drr_class *cl; int err = 0; - bool first; cl = drr_classify(skb, sch, &err); if (cl == NULL) { @@ -347,7 +351,6 @@ static int drr_enqueue(struct sk_buff *skb, struct Qdisc *sch, return err; } - first = !cl->qdisc->q.qlen; err = qdisc_enqueue(skb, cl->qdisc, to_free); if (unlikely(err != NET_XMIT_SUCCESS)) { if (net_xmit_drop_count(err)) { @@ -357,7 +360,7 @@ static int drr_enqueue(struct sk_buff *skb, struct Qdisc *sch, return err; } - if (first) { + if (!cl_is_active(cl)) { list_add_tail(&cl->alist, &q->active); cl->deficit = cl->quantum; } -- 2.25.1

2 1

[PATCH OLK-6.6] net_sched: qfq: Fix double list add in class with netem as child qdisc
by Dong Chenchen 15 Aug '25

15 Aug '25

From: Victor Nogueira <victor(a)mojatatu.com> stable inclusion from stable-v6.6.90 commit a43783119e01849fbf2fe8855634e8989b240cb4 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IC9911 CVE: CVE-2025-37913 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit f139f37dcdf34b67f5bf92bc8e0f7f6b3ac63aa4 ] As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of qfq, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption. This patch checks whether the class was already added to the agg->active list (cl_is_active) before doing the addition to cater for the reentrant case. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp… Fixes: 37d9cf1a3ce3 ("sched: Fix detection of empty queues in child qdiscs") Acked-by: Jamal Hadi Salim <jhs(a)mojatatu.com> Signed-off-by: Victor Nogueira <victor(a)mojatatu.com> Link: https://patch.msgid.link/20250425220710.3964791-5-victor@mojatatu.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Dong Chenchen <dongchenchen2(a)huawei.com> --- net/sched/sch_qfq.c | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/net/sched/sch_qfq.c b/net/sched/sch_qfq.c index 07d8bb89516d..ffa52bc0b2dc 100644 --- a/net/sched/sch_qfq.c +++ b/net/sched/sch_qfq.c @@ -202,6 +202,11 @@ struct qfq_sched { */ enum update_reason {enqueue, requeue}; +static bool cl_is_active(struct qfq_class *cl) +{ + return !list_empty(&cl->alist); +} + static struct qfq_class *qfq_find_class(struct Qdisc *sch, u32 classid) { struct qfq_sched *q = qdisc_priv(sch); @@ -1218,7 +1223,6 @@ static int qfq_enqueue(struct sk_buff *skb, struct Qdisc *sch, struct qfq_class *cl; struct qfq_aggregate *agg; int err = 0; - bool first; cl = qfq_classify(skb, sch, &err); if (cl == NULL) { @@ -1240,7 +1244,6 @@ static int qfq_enqueue(struct sk_buff *skb, struct Qdisc *sch, } gso_segs = skb_is_gso(skb) ? skb_shinfo(skb)->gso_segs : 1; - first = !cl->qdisc->q.qlen; err = qdisc_enqueue(skb, cl->qdisc, to_free); if (unlikely(err != NET_XMIT_SUCCESS)) { pr_debug("qfq_enqueue: enqueue failed %d\n", err); @@ -1256,8 +1259,8 @@ static int qfq_enqueue(struct sk_buff *skb, struct Qdisc *sch, ++sch->q.qlen; agg = cl->agg; - /* if the queue was not empty, then done here */ - if (!first) { + /* if the class is active, then done here */ + if (cl_is_active(cl)) { if (unlikely(skb == cl->qdisc->ops->peek(cl->qdisc)) && list_first_entry(&agg->active, struct qfq_class, alist) == cl && cl->deficit < len) -- 2.25.1

2 1

[PATCH OLK-5.10] net_sched: drr: Fix double list add in class with netem as child qdisc
by Dong Chenchen 15 Aug '25

15 Aug '25

From: Victor Nogueira <victor(a)mojatatu.com> mainline inclusion from mainline-v6.15-rc5 commit f99a3fbf023e20b626be4b0f042463d598050c9a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IC990Y CVE: CVE-2025-37915 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- As described in Gerrard's report [1], there are use cases where a netem child qdisc will make the parent qdisc's enqueue callback reentrant. In the case of drr, there won't be a UAF, but the code will add the same classifier to the list twice, which will cause memory corruption. In addition to checking for qlen being zero, this patch checks whether the class was already added to the active_list (cl_is_active) before adding to the list to cover for the reentrant case. [1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp… Fixes: 37d9cf1a3ce3 ("sched: Fix detection of empty queues in child qdiscs") Acked-by: Jamal Hadi Salim <jhs(a)mojatatu.com> Signed-off-by: Victor Nogueira <victor(a)mojatatu.com> Link: https://patch.msgid.link/20250425220710.3964791-2-victor@mojatatu.com Signed-off-by: Jakub Kicinski <kuba(a)kernel.org> Signed-off-by: Dong Chenchen <dongchenchen2(a)huawei.com> --- net/sched/sch_drr.c | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/net/sched/sch_drr.c b/net/sched/sch_drr.c index 3be888fd598f..7200895d98c0 100644 --- a/net/sched/sch_drr.c +++ b/net/sched/sch_drr.c @@ -36,6 +36,11 @@ struct drr_sched { struct Qdisc_class_hash clhash; }; +static bool cl_is_active(struct drr_class *cl) +{ + return !list_empty(&cl->alist); +} + static struct drr_class *drr_find_class(struct Qdisc *sch, u32 classid) { struct drr_sched *q = qdisc_priv(sch); @@ -345,7 +350,6 @@ static int drr_enqueue(struct sk_buff *skb, struct Qdisc *sch, struct drr_sched *q = qdisc_priv(sch); struct drr_class *cl; int err = 0; - bool first; cl = drr_classify(skb, sch, &err); if (cl == NULL) { @@ -355,7 +359,6 @@ static int drr_enqueue(struct sk_buff *skb, struct Qdisc *sch, return err; } - first = !cl->qdisc->q.qlen; err = qdisc_enqueue(skb, cl->qdisc, to_free); if (unlikely(err != NET_XMIT_SUCCESS)) { if (net_xmit_drop_count(err)) { @@ -365,7 +368,7 @@ static int drr_enqueue(struct sk_buff *skb, struct Qdisc *sch, return err; } - if (first) { + if (!cl_is_active(cl)) { list_add_tail(&cl->alist, &q->active); cl->deficit = cl->quantum; } -- 2.25.1

2 1

[PATCH OLK-5.10] net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
by Dong Chenchen 15 Aug '25

15 Aug '25

From: Pedro Tammela <pctammela(a)mojatatu.com> mainline inclusion from mainline-v6.15-rc7 commit ac9fe7dd8e730a103ae4481147395cc73492d786 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/IC8Y28 CVE: CVE-2025-37890 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Savino says: "We are writing to report that this recent patch (141d34391abbb315d68556b7c67ad97885407547) [1] can be bypassed, and a UAF can still occur when HFSC is utilized with NETEM. The patch only checks the cl->cl_nactive field to determine whether it is the first insertion or not [2], but this field is only incremented by init_vf [3]. By using HFSC_RSC (which uses init_ed) [4], it is possible to bypass the check and insert the class twice in the eltree. Under normal conditions, this would lead to an infinite loop in hfsc_dequeue for the reasons we already explained in this report [5]. However, if TBF is added as root qdisc and it is configured with a very low rate, it can be utilized to prevent packets from being dequeued. This behavior can be exploited to perform subsequent insertions in the HFSC eltree and cause a UAF." To fix both the UAF and the infinite loop, with netem as an hfsc child, check explicitly in hfsc_enqueue whether the class is already in the eltree whenever the HFSC_RSC flag is set. [1] https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/comm… [2] https://elixir.bootlin.com/linux/v6.15-rc5/source/net/sched/sch_hfsc.c#L1572 [3] https://elixir.bootlin.com/linux/v6.15-rc5/source/net/sched/sch_hfsc.c#L677 [4] https://elixir.bootlin.com/linux/v6.15-rc5/source/net/sched/sch_hfsc.c#L1574 [5] https://lore.kernel.org/netdev/8DuRWwfqjoRDLDmBMlIfbrsZg9Gx50DHJc1ilxsEBNe2… Fixes: 37d9cf1a3ce3 ("sched: Fix detection of empty queues in child qdiscs") Reported-by: Savino Dicanosa <savy(a)syst3mfailure.io> Reported-by: William Liu <will(a)willsroot.io> Acked-by: Jamal Hadi Salim <jhs(a)mojatatu.com> Tested-by: Victor Nogueira <victor(a)mojatatu.com> Signed-off-by: Pedro Tammela <pctammela(a)mojatatu.com> Link: https://patch.msgid.link/20250522181448.1439717-2-pctammela@mojatatu.com Signed-off-by: Paolo Abeni <pabeni(a)redhat.com> Signed-off-by: Dong Chenchen <dongchenchen2(a)huawei.com> --- net/sched/sch_hfsc.c | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/net/sched/sch_hfsc.c b/net/sched/sch_hfsc.c index defda085bdbb..e558adcf20a5 100644 --- a/net/sched/sch_hfsc.c +++ b/net/sched/sch_hfsc.c @@ -176,6 +176,11 @@ struct hfsc_sched { #define HT_INFINITY 0xffffffffffffffffULL /* infinite time value */ +static bool cl_in_el_or_vttree(struct hfsc_class *cl) +{ + return ((cl->cl_flags & HFSC_FSC) && cl->cl_nactive) || + ((cl->cl_flags & HFSC_RSC) && !RB_EMPTY_NODE(&cl->el_node)); +} /* * eligible tree holds backlogged classes being sorted by their eligible times. @@ -1036,6 +1041,8 @@ hfsc_change_class(struct Qdisc *sch, u32 classid, u32 parentid, if (cl == NULL) return -ENOBUFS; + RB_CLEAR_NODE(&cl->el_node); + err = tcf_block_get(&cl->block, &cl->filter_list, sch, extack); if (err) { kfree(cl); @@ -1573,7 +1580,7 @@ hfsc_enqueue(struct sk_buff *skb, struct Qdisc *sch, struct sk_buff **to_free) sch->qstats.backlog += len; sch->q.qlen++; - if (first && !cl->cl_nactive) { + if (first && !cl_in_el_or_vttree(cl)) { if (cl->cl_flags & HFSC_RSC) init_ed(cl, len); if (cl->cl_flags & HFSC_FSC) -- 2.25.1

2 3