- Kernel - mailweb.openeuler.org

[openeuler:openEuler-1.0-LTS 1740/1740] mm/mem_reliable.c:126:5: sparse: sparse: symbol 'reliable_limit_handler' was not declared. Should it be static?
by kernel test robot 23 Nov '25

23 Nov '25

tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 6c5657aecca1857be6ea39f789159c9acfde2f9e commit: 1845e7add95773a24019fb72bbea24a0a568663b [1740/1740] mm: Add reliable memory use limit for user tasks config: arm64-randconfig-r121-20250729 (https://download.01.org/0day-ci/archive/20251123/202511231029.GHGXNbti-lkp@…) compiler: aarch64-linux-gcc (GCC) 15.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251123/202511231029.GHGXNbti-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511231029.GHGXNbti-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> mm/mem_reliable.c:126:5: sparse: sparse: symbol 'reliable_limit_handler' was not declared. Should it be static? mm/mem_reliable.c:126:5: warning: no previous prototype for 'reliable_limit_handler' [-Wmissing-prototypes] 126 | int reliable_limit_handler(struct ctl_table *table, int write, | ^~~~~~~~~~~~~~~~~~~~~~ vim +/reliable_limit_handler +126 mm/mem_reliable.c 124 125 #ifdef CONFIG_SYSCTL > 126 int reliable_limit_handler(struct ctl_table *table, int write, 127 void __user *buffer, size_t *length, loff_t *ppos) 128 { 129 unsigned long old = task_reliable_limit; 130 int ret; 131 132 ret = proc_doulongvec_minmax(table, write, buffer, length, ppos); 133 if (ret == 0 && write) { 134 if (task_reliable_limit > total_reliable_mem_sz()) { 135 task_reliable_limit = old; 136 return -EINVAL; 137 } 138 } 139 140 return ret; 141 } 142 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS 1740/1740] include/linux/mem_reliable.h:41:15: sparse: sparse: restricted gfp_t degrades to integer
by kernel test robot 23 Nov '25

23 Nov '25

tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 6c5657aecca1857be6ea39f789159c9acfde2f9e commit: 33d1f46ad98ea3a13752a6360d97732ab4e119b9 [1740/1740] mm: Introduce memory reliable config: arm64-randconfig-r121-20250729 (https://download.01.org/0day-ci/archive/20251123/202511230702.EBfVb7L8-lkp@…) compiler: aarch64-linux-gcc (GCC) 15.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251123/202511230702.EBfVb7L8-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511230702.EBfVb7L8-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) mm/page_alloc.c:140:1: sparse: sparse: symbol 'pcpu_drain_mutex' was not declared. Should it be static? mm/page_alloc.c: note: in included file (through include/linux/mm.h): >> include/linux/mem_reliable.h:41:15: sparse: sparse: restricted gfp_t degrades to integer mm/page_alloc.c:4572:13: sparse: sparse: restricted gfp_t degrades to integer mm/page_alloc.c:4573:27: sparse: sparse: invalid assignment: |= mm/page_alloc.c:4573:27: sparse: left side has type restricted gfp_t mm/page_alloc.c:4573:27: sparse: right side has type unsigned int mm/page_alloc.c: note: in included file (through include/linux/mm.h): include/linux/gfp.h:457:34: sparse: sparse: restricted gfp_t degrades to integer include/linux/gfp.h:324:27: sparse: sparse: restricted gfp_t degrades to integer include/linux/gfp.h:324:27: sparse: sparse: restricted gfp_t degrades to integer include/linux/gfp.h:457:34: sparse: sparse: restricted gfp_t degrades to integer include/linux/gfp.h:457:34: sparse: sparse: restricted gfp_t degrades to integer mm/page_alloc.c: In function 'mem_init_print_info': mm/page_alloc.c:7373:27: warning: comparison between two arrays [-Warray-compare] 7373 | if (start <= pos && pos < end && size > adj) 20- | ^~ mm/page_alloc.c:7377:9: note: in expansion of macro 'adj_init_size' 7377 | adj_init_size(__init_begin, __init_end, init_data_size, | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:27: note: use '&__init_begin[0] <= &_sinittext[0]' to compare the addresses 7373 | if (start <= pos && pos < end && size > adj) 26- | ^~ mm/page_alloc.c:7377:9: note: in expansion of macro 'adj_init_size' 7377 | adj_init_size(__init_begin, __init_end, init_data_size, | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:41: warning: comparison between two arrays [-Warray-compare] 7373 | if (start <= pos && pos < end && size > adj) 32- | ^ mm/page_alloc.c:7377:9: note: in expansion of macro 'adj_init_size' 7377 | adj_init_size(__init_begin, __init_end, init_data_size, | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:41: note: use '&_sinittext[0] < &__init_end[0]' to compare the addresses 7373 | if (start <= pos && pos < end && size > adj) 38- | ^ mm/page_alloc.c:7377:9: note: in expansion of macro 'adj_init_size' 7377 | adj_init_size(__init_begin, __init_end, init_data_size, | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:27: warning: comparison between two arrays [-Warray-compare] 7373 | if (start <= pos && pos < end && size > adj) 44- | ^~ mm/page_alloc.c:7379:9: note: in expansion of macro 'adj_init_size' 7379 | adj_init_size(_stext, _etext, codesize, _sinittext, init_code_size); | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:27: note: use '&_stext[0] <= &_sinittext[0]' to compare the addresses 7373 | if (start <= pos && pos < end && size > adj) 50- | ^~ mm/page_alloc.c:7379:9: note: in expansion of macro 'adj_init_size' 7379 | adj_init_size(_stext, _etext, codesize, _sinittext, init_code_size); | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:41: warning: comparison between two arrays [-Warray-compare] 7373 | if (start <= pos && pos < end && size > adj) 56- | ^ mm/page_alloc.c:7379:9: note: in expansion of macro 'adj_init_size' 7379 | adj_init_size(_stext, _etext, codesize, _sinittext, init_code_size); | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:41: note: use '&_sinittext[0] < &_etext[0]' to compare the addresses 7373 | if (start <= pos && pos < end && size > adj) 62- | ^ mm/page_alloc.c:7379:9: note: in expansion of macro 'adj_init_size' 7379 | adj_init_size(_stext, _etext, codesize, _sinittext, init_code_size); | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:27: warning: comparison between two arrays [-Warray-compare] 7373 | if (start <= pos && pos < end && size > adj) 68- | ^~ mm/page_alloc.c:7380:9: note: in expansion of macro 'adj_init_size' 7380 | adj_init_size(_sdata, _edata, datasize, __init_begin, init_data_size); | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:27: note: use '&_sdata[0] <= &__init_begin[0]' to compare the addresses 7373 | if (start <= pos && pos < end && size > adj) 74- | ^~ mm/page_alloc.c:7380:9: note: in expansion of macro 'adj_init_size' 7380 | adj_init_size(_sdata, _edata, datasize, __init_begin, init_data_size); | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:41: warning: comparison between two arrays [-Warray-compare] 7373 | if (start <= pos && pos < end && size > adj) 80- | ^ mm/page_alloc.c:7380:9: note: in expansion of macro 'adj_init_size' 7380 | adj_init_size(_sdata, _edata, datasize, __init_begin, init_data_size); | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:41: note: use '&__init_begin[0] < &_edata[0]' to compare the addresses 7373 | if (start <= pos && pos < end && size > adj) 86- | ^ mm/page_alloc.c:7380:9: note: in expansion of macro 'adj_init_size' 7380 | adj_init_size(_sdata, _edata, datasize, __init_begin, init_data_size); | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:27: warning: comparison between two arrays [-Warray-compare] 7373 | if (start <= pos && pos < end && size > adj) 92- | ^~ mm/page_alloc.c:7381:9: note: in expansion of macro 'adj_init_size' 7381 | adj_init_size(_stext, _etext, codesize, __start_rodata, rosize); | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:27: note: use '&_stext[0] <= &__start_rodata[0]' to compare the addresses 7373 | if (start <= pos && pos < end && size > adj) 98- | ^~ mm/page_alloc.c:7381:9: note: in expansion of macro 'adj_init_size' 7381 | adj_init_size(_stext, _etext, codesize, __start_rodata, rosize); | ^~~~~~~~~~~~~ mm/page_alloc.c:7373:41: warning: comparison between two arrays [-Warray-compare] 7373 | if (start <= pos && pos < end && size > adj) 104- | ^ mm/page_alloc.c:7381:9: note: in expansion of macro 'adj_init_size' 7381 | adj_init_size(_stext, _etext, codesize, __start_rodata, rosize); vim +41 include/linux/mem_reliable.h 31 32 static inline bool skip_none_movable_zone(gfp_t gfp, struct zoneref *z) 33 { 34 if (!mem_reliable_is_enabled()) 35 return false; 36 37 if (!current->mm || (current->flags & PF_KTHREAD)) 38 return false; 39 40 /* user tasks can only alloc memory from non-mirrored region */ > 41 if (!(gfp & ___GFP_RELIABILITY) && (gfp & __GFP_HIGHMEM) && 42 (gfp & __GFP_MOVABLE)) { 43 if (zonelist_zone_idx(z) < ZONE_MOVABLE) 44 return true; 45 } 46 47 return false; 48 } 49 #else 50 #define reliable_enabled 0 51 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3306/3306] include/trace/events/kmem.h:416:1: error: incompatible function pointer types passing 'void (void *, struct mem_sampling_record *)' to parameter of type 'void (*)(void *, struct mem_sampling_record *)'
by kernel test robot 23 Nov '25

23 Nov '25

Hi Ze, FYI, the error/warning still remains. tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: ea193ff9f080f6657caa2b5f907d5465ca3147dc commit: 5c9754d56876f60e199456beda45715da2d1a20b [3306/3306] mm/mem_sampling: Add eBPF interface for memory access tracing config: arm64-randconfig-003-20251123 (https://download.01.org/0day-ci/archive/20251123/202511230641.K6V35Qsp-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 9e9fe08b16ea2c4d9867fb4974edf2a3776d6ece) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251123/202511230641.K6V35Qsp-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511230641.K6V35Qsp-lkp@intel.com/ All error/warnings (new ones prefixed by >>): In file included from mm/slub.c:46: >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] include/trace/events/kmem.h:419:10: error: incompatible pointer types passing 'struct mem_sampling_record *' to parameter of type 'struct mem_sampling_record *' [-Wincompatible-pointer-types] 419 | TP_ARGS(record), | ^~~~~~ include/trace/events/kmem.h:417:39: note: passing argument to parameter 'record' here 417 | TP_PROTO(struct mem_sampling_record *record), | ^ >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ include/trace/events/kmem.h:419:10: error: incompatible pointer types passing 'struct mem_sampling_record *' to parameter of type 'struct mem_sampling_record *' [-Wincompatible-pointer-types] 419 | TP_ARGS(record), | ^~~~~~ include/trace/events/kmem.h:417:39: note: passing argument to parameter 'record' here 417 | TP_PROTO(struct mem_sampling_record *record), | ^ >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] mm/slub.c:2281:15: warning: variable 'partial_slabs' set but not used [-Wunused-but-set-variable] 2281 | unsigned int partial_slabs = 0; | ^ 8 warnings and 2 errors generated. -- In file included from mm/slab_common.c:35: >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] include/trace/events/kmem.h:419:10: error: incompatible pointer types passing 'struct mem_sampling_record *' to parameter of type 'struct mem_sampling_record *' [-Wincompatible-pointer-types] 419 | TP_ARGS(record), | ^~~~~~ include/trace/events/kmem.h:417:39: note: passing argument to parameter 'record' here 417 | TP_PROTO(struct mem_sampling_record *record), | ^ >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ include/trace/events/kmem.h:419:10: error: incompatible pointer types passing 'struct mem_sampling_record *' to parameter of type 'struct mem_sampling_record *' [-Wincompatible-pointer-types] 419 | TP_ARGS(record), | ^~~~~~ include/trace/events/kmem.h:417:39: note: passing argument to parameter 'record' here 417 | TP_PROTO(struct mem_sampling_record *record), | ^ >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] In file included from mm/slab_common.c:35: In file included from include/trace/events/kmem.h:441: In file included from include/trace/define_trace.h:95: >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ include/trace/events/kmem.h:416:1: error: conflicting types for '__traceiter_mm_spe_record' 416 | TRACE_EVENT(mm_spe_record, | ^ include/trace/define_trace.h:28:2: note: expanded from macro 'TRACE_EVENT' 28 | DEFINE_TRACE(name, PARAMS(proto), PARAMS(args)) | ^ include/linux/tracepoint.h:341:2: note: expanded from macro 'DEFINE_TRACE' 341 | DEFINE_TRACE_FN(name, NULL, NULL, PARAMS(proto), PARAMS(args)); | ^ include/linux/tracepoint.h:305:6: note: expanded from macro 'DEFINE_TRACE_FN' 305 | int __traceiter_##_name(void *__data, proto); \ | ^ <scratch space>:97:1: note: expanded from here 97 | __traceiter_mm_spe_record | ^ include/trace/events/kmem.h:416:1: note: previous declaration is here 416 | TRACE_EVENT(mm_spe_record, | ^ include/linux/tracepoint.h:566:2: note: expanded from macro 'TRACE_EVENT' 566 | DECLARE_TRACE(name, PARAMS(proto), PARAMS(args)) | ^ include/linux/tracepoint.h:432:2: note: expanded from macro 'DECLARE_TRACE' 432 | __DECLARE_TRACE(name, PARAMS(proto), PARAMS(args), \ | ^ include/linux/tracepoint.h:252:13: note: expanded from macro '__DECLARE_TRACE' 252 | extern int __traceiter_##name(data_proto); \ | ^ <scratch space>:20:1: note: expanded from here 20 | __traceiter_mm_spe_record | ^ In file included from mm/slab_common.c:35: In file included from include/trace/events/kmem.h:441: In file included from include/trace/define_trace.h:95: >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] include/trace/events/kmem.h:416:1: error: conflicting types for '__traceiter_mm_spe_record' 416 | TRACE_EVENT(mm_spe_record, | ^ include/trace/define_trace.h:28:2: note: expanded from macro 'TRACE_EVENT' 28 | DEFINE_TRACE(name, PARAMS(proto), PARAMS(args)) | ^ include/linux/tracepoint.h:341:2: note: expanded from macro 'DEFINE_TRACE' 341 | DEFINE_TRACE_FN(name, NULL, NULL, PARAMS(proto), PARAMS(args)); | ^ include/linux/tracepoint.h:319:6: note: expanded from macro 'DEFINE_TRACE_FN' 319 | int __traceiter_##_name(void *__data, proto) \ | ^ <scratch space>:107:1: note: expanded from here 107 | __traceiter_mm_spe_record | ^ include/trace/events/kmem.h:416:1: note: previous declaration is here 416 | TRACE_EVENT(mm_spe_record, | ^ include/linux/tracepoint.h:566:2: note: expanded from macro 'TRACE_EVENT' 566 | DECLARE_TRACE(name, PARAMS(proto), PARAMS(args)) | ^ include/linux/tracepoint.h:432:2: note: expanded from macro 'DECLARE_TRACE' 432 | __DECLARE_TRACE(name, PARAMS(proto), PARAMS(args), \ | ^ include/linux/tracepoint.h:252:13: note: expanded from macro '__DECLARE_TRACE' 252 | extern int __traceiter_##name(data_proto); \ | ^ <scratch space>:20:1: note: expanded from here 20 | __traceiter_mm_spe_record | ^ In file included from mm/slab_common.c:35: In file included from include/trace/events/kmem.h:441: In file included from include/trace/define_trace.h:95: >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ include/trace/events/kmem.h:416:1: error: conflicting types for '__probestub_mm_spe_record' 416 | TRACE_EVENT(mm_spe_record, | ^ include/trace/define_trace.h:28:2: note: expanded from macro 'TRACE_EVENT' 28 | DEFINE_TRACE(name, PARAMS(proto), PARAMS(args)) | ^ include/linux/tracepoint.h:341:2: note: expanded from macro 'DEFINE_TRACE' 341 | DEFINE_TRACE_FN(name, NULL, NULL, PARAMS(proto), PARAMS(args)); | ^ include/linux/tracepoint.h:335:7: note: expanded from macro 'DEFINE_TRACE_FN' 335 | void __probestub_##_name(void *__data, proto) \ | ^ <scratch space>:118:1: note: expanded from here 118 | __probestub_mm_spe_record | ^ include/trace/events/kmem.h:416:1: note: previous declaration is here include/trace/define_trace.h:28:2: note: expanded from macro 'TRACE_EVENT' 28 | DEFINE_TRACE(name, PARAMS(proto), PARAMS(args)) | ^ include/linux/tracepoint.h:341:2: note: expanded from macro 'DEFINE_TRACE' 341 | DEFINE_TRACE_FN(name, NULL, NULL, PARAMS(proto), PARAMS(args)); | ^ include/linux/tracepoint.h:306:7: note: expanded from macro 'DEFINE_TRACE_FN' 306 | void __probestub_##_name(void *__data, proto); \ | ^ <scratch space>:98:1: note: expanded from here 98 | __probestub_mm_spe_record | ^ In file included from mm/slab_common.c:35: In file included from include/trace/events/kmem.h:441: In file included from include/trace/define_trace.h:102: In file included from include/trace/trace_events.h:286: >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ In file included from mm/slab_common.c:35: In file included from include/trace/events/kmem.h:441: In file included from include/trace/define_trace.h:102: In file included from include/trace/trace_events.h:460: >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ include/trace/events/kmem.h:419:10: error: incompatible pointer types passing 'struct mem_sampling_record *' to parameter of type 'struct mem_sampling_record *' [-Wincompatible-pointer-types] 419 | TP_ARGS(record), | ^~~~~~ include/trace/events/kmem.h:417:39: note: passing argument to parameter 'record' here 417 | TP_PROTO(struct mem_sampling_record *record), | ^ In file included from mm/slab_common.c:35: In file included from include/trace/events/kmem.h:441: In file included from include/trace/define_trace.h:102: In file included from include/trace/trace_events.h:460: include/trace/events/kmem.h:428:26: error: incomplete definition of type 'struct mem_sampling_record' 428 | __entry->vaddr = record->virt_addr; | ~~~~~~^ include/trace/events/kmem.h:417:18: note: forward declaration of 'struct mem_sampling_record' 417 | TP_PROTO(struct mem_sampling_record *record), | ^ include/trace/events/kmem.h:429:26: error: incomplete definition of type 'struct mem_sampling_record' 429 | __entry->paddr = record->phys_addr; | ~~~~~~^ include/trace/events/kmem.h:417:18: note: forward declaration of 'struct mem_sampling_record' 417 | TP_PROTO(struct mem_sampling_record *record), | ^ include/trace/events/kmem.h:430:24: error: incomplete definition of type 'struct mem_sampling_record' 430 | __entry->pid = record->context_id; | ~~~~~~^ include/trace/events/kmem.h:417:18: note: forward declaration of 'struct mem_sampling_record' 417 | TP_PROTO(struct mem_sampling_record *record), | ^ >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ include/trace/events/kmem.h:419:10: error: incompatible pointer types passing 'struct mem_sampling_record *' to parameter of type 'struct mem_sampling_record *' [-Wincompatible-pointer-types] 419 | TP_ARGS(record), | ^~~~~~ include/trace/events/kmem.h:417:39: note: passing argument to parameter 'record' here 417 | TP_PROTO(struct mem_sampling_record *record), | ^ >> include/trace/events/kmem.h:416:1: error: incompatible function pointer types passing 'void (void *, struct mem_sampling_record *)' to parameter of type 'void (*)(void *, struct mem_sampling_record *)' [-Wincompatible-function-pointer-types] 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~~~~~~~~~~~~~~~~ 417 | TP_PROTO(struct mem_sampling_record *record), | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 418 | 419 | TP_ARGS(record), | ~~~~~~~~~~~~~~~~ 420 | 421 | TP_STRUCT__entry( | ~~~~~~~~~~~~~~~~~ 422 | __field(u64, vaddr) | ~~~~~~~~~~~~~~~~~~~ 423 | __field(u64, paddr) | ~~~~~~~~~~~~~~~~~~~ 424 | __field(int, pid) | ~~~~~~~~~~~~~~~~~ 425 | ), | ~~ 426 | 427 | TP_fast_assign( | ~~~~~~~~~~~~~~~ 428 | __entry->vaddr = record->virt_addr; | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 429 | __entry->paddr = record->phys_addr; | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 430 | __entry->pid = record->context_id; | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 431 | include/trace/trace_events.h:46:2: note: expanded from macro 'TRACE_EVENT' 46 | DEFINE_EVENT(name, name, PARAMS(proto), PARAMS(args)); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/trace/trace_events.h:457:35: note: expanded from macro 'DEFINE_EVENT' 457 | check_trace_callback_type_##call(trace_event_raw_event_##template); \ | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ <scratch space>:129:1: note: expanded from here 129 | trace_event_raw_event_mm_spe_record | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/trace/events/kmem.h:416:1: note: passing argument to parameter 'cb' here 416 | TRACE_EVENT(mm_spe_record, | ^ include/linux/tracepoint.h:566:2: note: expanded from macro 'TRACE_EVENT' 566 | DECLARE_TRACE(name, PARAMS(proto), PARAMS(args)) | ^ include/linux/tracepoint.h:432:2: note: expanded from macro 'DECLARE_TRACE' 432 | __DECLARE_TRACE(name, PARAMS(proto), PARAMS(args), \ | ^ include/linux/tracepoint.h:287:42: note: expanded from macro '__DECLARE_TRACE' 287 | check_trace_callback_type_##name(void (*cb)(data_proto)) \ | ^ In file included from mm/slab_common.c:35: In file included from include/trace/events/kmem.h:441: In file included from include/trace/define_trace.h:102: In file included from include/trace/trace_events.h:512: >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ In file included from mm/slab_common.c:35: In file included from include/trace/events/kmem.h:441: In file included from include/trace/define_trace.h:103: In file included from include/trace/perf.h:75: >> include/trace/events/kmem.h:417:18: warning: declaration of 'struct mem_sampling_record' will not be visible outside of this function [-Wvisibility] 417 | TP_PROTO(struct mem_sampling_record *record), | ^ include/trace/events/kmem.h:416:1: error: conflicting types for 'perf_trace_mm_spe_record' 416 | TRACE_EVENT(mm_spe_record, | ^ include/trace/trace_events.h:40:2: note: expanded from macro 'TRACE_EVENT' 40 | DECLARE_EVENT_CLASS(name, \ | ^ include/trace/perf.h:17:27: note: expanded from macro 'DECLARE_EVENT_CLASS' 17 | static notrace void \ | ^ <scratch space>:5:1: note: expanded from here 5 | perf_trace_mm_spe_record | ^ include/trace/events/kmem.h:416:1: note: previous declaration is here 416 | TRACE_EVENT(mm_spe_record, | ^ include/trace/trace_events.h:40:2: note: expanded from macro 'TRACE_EVENT' 40 | DECLARE_EVENT_CLASS(name, \ | ^ include/trace/trace_events.h:467:72: note: expanded from macro 'DECLARE_EVENT_CLASS' 467 | #define DECLARE_EVENT_CLASS(call, proto, args, tstruct, assign, print) \ | ^ include/trace/trace_events.h:383:2: note: expanded from macro '\ _TRACE_PERF_PROTO' 383 | perf_trace_##call(void *__data, proto); | ^ <scratch space>:57:1: note: expanded from here 57 | perf_trace_mm_spe_record | ^ In file included from mm/slab_common.c:35: In file included from include/trace/events/kmem.h:441: In file included from include/trace/define_trace.h:103: In file included from include/trace/perf.h:75: include/trace/events/kmem.h:419:10: error: incompatible pointer types passing 'struct mem_sampling_record *' to parameter of type 'struct mem_sampling_record *' [-Wincompatible-pointer-types] 419 | TP_ARGS(record), | ^~~~~~ include/trace/events/kmem.h:417:39: note: passing argument to parameter 'record' here 417 | TP_PROTO(struct mem_sampling_record *record), | ^ In file included from mm/slab_common.c:35: In file included from include/trace/events/kmem.h:441: In file included from include/trace/define_trace.h:103: In file included from include/trace/perf.h:75: include/trace/events/kmem.h:428:26: error: incomplete definition of type 'struct mem_sampling_record' 428 | __entry->vaddr = record->virt_addr; | ~~~~~~^ include/trace/events/kmem.h:417:18: note: forward declaration of 'struct mem_sampling_record' 417 | TP_PROTO(struct mem_sampling_record *record), | ^ include/trace/events/kmem.h:429:26: error: incomplete definition of type 'struct mem_sampling_record' 429 | __entry->paddr = record->phys_addr; | ~~~~~~^ include/trace/events/kmem.h:417:18: note: forward declaration of 'struct mem_sampling_record' 417 | TP_PROTO(struct mem_sampling_record *record), | ^ include/trace/events/kmem.h:430:24: error: incomplete definition of type 'struct mem_sampling_record' 430 | __entry->pid = record->context_id; | ~~~~~~^ include/trace/events/kmem.h:417:18: note: forward declaration of 'struct mem_sampling_record' 417 | TP_PROTO(struct mem_sampling_record *record), | ^ >> include/trace/events/kmem.h:416:1: error: incompatible function pointer types passing 'void (void *, struct mem_sampling_record *)' to parameter of type 'void (*)(void *, struct mem_sampling_record *)' [-Wincompatible-function-pointer-types] 416 | TRACE_EVENT(mm_spe_record, | ^~~~~~~~~~~~~~~~~~~~~~~~~~ 417 | TP_PROTO(struct mem_sampling_record *record), | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 418 | 419 | TP_ARGS(record), | ~~~~~~~~~~~~~~~~ 420 | 421 | TP_STRUCT__entry( | ~~~~~~~~~~~~~~~~~ 422 | __field(u64, vaddr) | ~~~~~~~~~~~~~~~~~~~ 423 | __field(u64, paddr) | ~~~~~~~~~~~~~~~~~~~ 424 | __field(int, pid) | ~~~~~~~~~~~~~~~~~ 425 | ), | ~~ 426 | 427 | TP_fast_assign( | ~~~~~~~~~~~~~~~ 428 | __entry->vaddr = record->virt_addr; | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 429 | __entry->paddr = record->phys_addr; | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 430 | __entry->pid = record->context_id; | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 431 | include/trace/trace_events.h:46:2: note: expanded from macro 'TRACE_EVENT' 46 | DEFINE_EVENT(name, name, PARAMS(proto), PARAMS(args)); | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ include/trace/perf.h:67:35: note: expanded from macro 'DEFINE_EVENT' 67 | check_trace_callback_type_##call(perf_trace_##template); \ | ^~~~~~~~~~~~~~~~~~~~~ <scratch space>:11:1: note: expanded from here 11 | perf_trace_mm_spe_record | ^~~~~~~~~~~~~~~~~~~~~~~~ include/trace/events/kmem.h:416:1: note: passing argument to parameter 'cb' here 416 | TRACE_EVENT(mm_spe_record, | ^ include/linux/tracepoint.h:566:2: note: expanded from macro 'TRACE_EVENT' 566 | DECLARE_TRACE(name, PARAMS(proto), PARAMS(args)) | ^ include/linux/tracepoint.h:432:2: note: expanded from macro 'DECLARE_TRACE' 432 | __DECLARE_TRACE(name, PARAMS(proto), PARAMS(args), \ | ^ include/linux/tracepoint.h:287:42: note: expanded from macro '__DECLARE_TRACE' 287 | check_trace_callback_type_##name(void (*cb)(data_proto)) \ | ^ 16 warnings and 17 errors generated. .. vim +416 include/trace/events/kmem.h 388 389 TP_PROTO(struct mm_struct *mm, 390 int member), 391 392 TP_ARGS(mm, member), 393 394 TP_STRUCT__entry( 395 __field(unsigned int, mm_id) 396 __field(unsigned int, curr) 397 __field(int, member) 398 __field(long, size) 399 ), 400 401 TP_fast_assign( 402 __entry->mm_id = mm_ptr_to_hash(mm); 403 __entry->curr = !!(current->mm == mm); 404 __entry->member = member; 405 __entry->size = (mm_counter_sum_positive(mm, member) 406 << PAGE_SHIFT); 407 ), 408 409 TP_printk("mm_id=%u curr=%d type=%s size=%ldB", 410 __entry->mm_id, 411 __entry->curr, 412 __print_symbolic(__entry->member, TRACE_MM_PAGES), 413 __entry->size) 414 ); 415 #ifdef CONFIG_ARM_SPE_MEM_SAMPLING > 416 TRACE_EVENT(mm_spe_record, > 417 TP_PROTO(struct mem_sampling_record *record), 418 419 TP_ARGS(record), 420 421 TP_STRUCT__entry( 422 __field(u64, vaddr) 423 __field(u64, paddr) 424 __field(int, pid) 425 ), 426 427 TP_fast_assign( 428 __entry->vaddr = record->virt_addr; 429 __entry->paddr = record->phys_addr; 430 __entry->pid = record->context_id; 431 432 ), 433 434 TP_printk("vaddr=%llu paddr=%llu pid=%d", 435 __entry->vaddr, __entry->paddr, __entry->pid) 436 ); 437 #endif /* CONFIG_ARM_SPE_MEM_SAMPLING */ 438 #endif /* _TRACE_KMEM_H */ 439 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3306/3306] arch/arm64/kernel/xcall/xcall.c:49:24: warning: address of array '((struct xcall_info *)task->xinfo)->xcall_enable' will always evaluate to 'true'
by kernel test robot 23 Nov '25

23 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: ea193ff9f080f6657caa2b5f907d5465ca3147dc commit: fd83d0fe16f1c0a0b163480a40e424a6d3438612 [3306/3306] xcall: Rework the early exception vector of XCALL and SYNC config: arm64-randconfig-004-20251123 (https://download.01.org/0day-ci/archive/20251123/202511230550.gjk44kyv-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 9e9fe08b16ea2c4d9867fb4974edf2a3776d6ece) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251123/202511230550.gjk44kyv-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511230550.gjk44kyv-lkp@intel.com/ All warnings (new ones prefixed by >>): In file included from <built-in>:3: In file included from include/linux/compiler_types.h:150: include/linux/compiler-clang.h:33:9: warning: '__SANITIZE_ADDRESS__' macro redefined [-Wmacro-redefined] 33 | #define __SANITIZE_ADDRESS__ | ^ <built-in>:367:9: note: previous definition is here 367 | #define __SANITIZE_ADDRESS__ 1 | ^ >> arch/arm64/kernel/xcall/xcall.c:49:24: warning: address of array '((struct xcall_info *)task->xinfo)->xcall_enable' will always evaluate to 'true' [-Wpointer-bool-conversion] 49 | if (TASK_XINFO(task)->xcall_enable) | ~~ ~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~ 2 warnings generated. vim +49 arch/arm64/kernel/xcall/xcall.c 46 47 void xcall_info_switch(struct task_struct *task) 48 { > 49 if (TASK_XINFO(task)->xcall_enable) -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10 3301/3301] drivers/misc/zcopy/zcopy.c:259:5: warning: no previous prototype for 'attach_huge_pmd'
by kernel test robot 23 Nov '25

23 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-5.10 head: 40e02117ca786975378e324ac2e14cc00b00206e commit: 2125c55fc8765bced7091ccef19d2733a9ad9de0 [3301/3301] zcopy: Extend PMD trans hugepage mapping ability config: arm64-randconfig-002-20251123 (https://download.01.org/0day-ci/archive/20251123/202511230145.Q8A14oTe-lkp@…) compiler: aarch64-linux-gcc (GCC) 11.5.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251123/202511230145.Q8A14oTe-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511230145.Q8A14oTe-lkp@intel.com/ All warnings (new ones prefixed by >>): >> drivers/misc/zcopy/zcopy.c:259:5: warning: no previous prototype for 'attach_huge_pmd' [-Wmissing-prototypes] 259 | int attach_huge_pmd(struct vm_area_struct *dst_vma, struct vm_area_struct *src_vma, | ^~~~~~~~~~~~~~~ vim +/attach_huge_pmd +259 drivers/misc/zcopy/zcopy.c 258 > 259 int attach_huge_pmd(struct vm_area_struct *dst_vma, struct vm_area_struct *src_vma, 260 unsigned long dst_addr, unsigned long src_addr, pmd_t *dst_pmdp, pmd_t *src_pmdp) 261 { 262 struct mm_struct *dst_mm, *src_mm; 263 spinlock_t *src_ptl, *dst_ptl; 264 struct page *src_thp_page, *orig_thp_page; 265 pmd_t pmd, orig_pmd; 266 pgtable_t pgtable; 267 268 269 if (!vma_is_anonymous(dst_vma)) 270 return -EINVAL; 271 272 dst_mm = dst_vma->vm_mm; 273 src_mm = src_vma->vm_mm; 274 275 /* alloc a pgtable for new pmdp */ 276 pgtable = pte_alloc_one(dst_mm); 277 if (unlikely(!pgtable)) 278 return -ENOMEM; 279 280 src_ptl = pmd_lockptr(src_mm, src_pmdp); 281 dst_ptl = pmd_lockptr(dst_mm, dst_pmdp); 282 283 spin_lock(src_ptl); 284 pmd = *src_pmdp; 285 src_thp_page = pmd_page(pmd); 286 if (unlikely(!PageHead(src_thp_page))) { 287 pr_err("VM assertion failed: it is not a head page\n"); 288 spin_unlock(src_ptl); 289 return -EINVAL; 290 } 291 292 get_page(src_thp_page); 293 atomic_inc(compound_mapcount_ptr(src_thp_page)); 294 spin_unlock(src_ptl); 295 296 spin_lock_nested(dst_ptl, SINGLE_DEPTH_NESTING); 297 orig_pmd = *dst_pmdp; 298 /* umap the old page mappings */ 299 if (!pmd_none(orig_pmd)) { 300 orig_thp_page = pmd_page(orig_pmd); 301 put_page(orig_thp_page); 302 atomic_dec(compound_mapcount_ptr(orig_thp_page)); 303 zcopy_add_mm_counter(dst_mm, MM_ANONPAGES, -HPAGE_PMD_NR); 304 mm_dec_nr_ptes(dst_mm); 305 } 306 307 zcopy_add_mm_counter(dst_mm, MM_ANONPAGES, HPAGE_PMD_NR); 308 mm_inc_nr_ptes(dst_mm); 309 zcopy_pgtable_trans_huge_deposit(dst_mm, dst_pmdp, pgtable); 310 zcopy_set_pmd_at(dst_mm, dst_addr, dst_pmdp, pmd); 311 flush_tlb_range(dst_vma, dst_addr, dst_addr + HPAGE_PMD_SIZE); 312 spin_unlock(dst_ptl); 313 314 return 0; 315 } 316 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3304/3304] arch/arm64/kvm/vgic/vgic-its.c:567:40: error: passing argument 1 of 'hisi_ipiv_supported_per_vm' from incompatible pointer type
by kernel test robot 22 Nov '25

22 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: ea193ff9f080f6657caa2b5f907d5465ca3147dc commit: 22f1e3b38ca09cbc655a606e6404b996710841a1 [3304/3304] KVM: arm64: ipiv: fix bug in live migration config: arm64-defconfig (https://download.01.org/0day-ci/archive/20251122/202511221815.EIAnEfb9-lkp@…) compiler: aarch64-linux-gcc (GCC) 15.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251122/202511221815.EIAnEfb9-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511221815.EIAnEfb9-lkp@intel.com/ All errors (new ones prefixed by >>): arch/arm64/kvm/vgic/vgic-its.c: In function 'vgic_mmio_uaccess_write_its_iidr': >> arch/arm64/kvm/vgic/vgic-its.c:567:40: error: passing argument 1 of 'hisi_ipiv_supported_per_vm' from incompatible pointer type [-Wincompatible-pointer-types] 567 | if (hisi_ipiv_supported_per_vm(kvm) && | ^~~ | | | struct kvm * In file included from arch/arm64/kvm/vgic/vgic-its.c:25: arch/arm64/kvm/hisilicon/hisi_virt.h:127:64: note: expected 'struct kvm_vcpu *' but argument is of type 'struct kvm *' 127 | static inline bool hisi_ipiv_supported_per_vm(struct kvm_vcpu *vcpu) | ~~~~~~~~~~~~~~~~~^~~~ vim +/hisi_ipiv_supported_per_vm +567 arch/arm64/kvm/vgic/vgic-its.c 555 556 static int vgic_mmio_uaccess_write_its_iidr(struct kvm *kvm, 557 struct vgic_its *its, 558 gpa_t addr, unsigned int len, 559 unsigned long val) 560 { 561 u32 rev = GITS_IIDR_REV(val); 562 563 if (rev >= NR_ITS_ABIS) 564 return -EINVAL; 565 566 #ifdef CONFIG_ARM64_HISI_IPIV > 567 if (hisi_ipiv_supported_per_vm(kvm) && 568 val & (1UL << HISI_GUEST_ENABLE_IPIV_SHIFT)) 569 kvm->arch.vgic.its_vm.enable_ipiv_from_guest = true; 570 #endif 571 572 return vgic_its_set_abi(its, rev); 573 } 574 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
by z00845436 22 Nov '25

22 Nov '25

From: Takashi Iwai <tiwai(a)suse.de> mainline inclusion from mainline-v6.18-rc1 commit 4336efb59ef364e691ef829a73d9dbd4d5ed7c7b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BB3 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ---------------------------------- When an invalid value is passed via quirk option, currently bytcr_rt5640 driver just ignores and leaves as is, which may lead to unepxected results like OOB access. This patch adds the sanity check and corrects the input mapping to the certain default value if an invalid value is passed. Fixes: 64484ccee7af ("ASoC: Intel: bytcr_rt5651: Set card long_name based on quirks") Signed-off-by: Takashi Iwai <tiwai(a)suse.de> Message-ID: <20250902171826.27329-4-tiwai(a)suse.de> Signed-off-by: Mark Brown <broonie(a)kernel.org> --- sound/soc/intel/boards/bytcr_rt5651.c | 26 +++++++++++++++++++++----- 1 file changed, 21 insertions(+), 5 deletions(-) diff --git a/sound/soc/intel/boards/bytcr_rt5651.c b/sound/soc/intel/boards/bytcr_rt5651.c index 805afaf47b29..2abe47303ecd 100644 --- a/sound/soc/intel/boards/bytcr_rt5651.c +++ b/sound/soc/intel/boards/bytcr_rt5651.c @@ -58,7 +58,8 @@ enum { BYT_RT5651_OVCD_SF_1P5 = (RT5651_OVCD_SF_1P5 << 13), }; -#define BYT_RT5651_MAP(quirk) ((quirk) & GENMASK(3, 0)) +#define BYT_RT5651_MAP_MASK GENMASK(3, 0) +#define BYT_RT5651_MAP(quirk) ((quirk) & BYT_RT5651_MAP_MASK) #define BYT_RT5651_JDSRC(quirk) (((quirk) & GENMASK(7, 4)) >> 4) #define BYT_RT5651_OVCD_TH(quirk) (((quirk) & GENMASK(12, 8)) >> 8) #define BYT_RT5651_OVCD_SF(quirk) (((quirk) & GENMASK(14, 13)) >> 13) @@ -100,14 +101,29 @@ MODULE_PARM_DESC(quirk, "Board-specific quirk override"); static void log_quirks(struct device *dev) { - if (BYT_RT5651_MAP(byt_rt5651_quirk) == BYT_RT5651_DMIC_MAP) + int map; + + map = BYT_RT5651_MAP(byt_rt5651_quirk); + switch (map) { + case BYT_RT5651_DMIC_MAP: dev_info(dev, "quirk DMIC_MAP enabled"); - if (BYT_RT5651_MAP(byt_rt5651_quirk) == BYT_RT5651_IN1_MAP) + break; + case BYT_RT5651_IN1_MAP: dev_info(dev, "quirk IN1_MAP enabled"); - if (BYT_RT5651_MAP(byt_rt5651_quirk) == BYT_RT5651_IN2_MAP) + break; + case BYT_RT5651_IN2_MAP: dev_info(dev, "quirk IN2_MAP enabled"); - if (BYT_RT5651_MAP(byt_rt5651_quirk) == BYT_RT5651_IN1_IN2_MAP) + break; + case BYT_RT5651_IN1_IN2_MAP: dev_info(dev, "quirk IN1_IN2_MAP enabled"); + break; + default: + dev_warn_once(dev, "quirk sets invalid input map: 0x%x, default to DMIC_MAP\n", map); + byt_rt5651_quirk &= ~BYT_RT5651_MAP_MASK; + byt_rt5651_quirk |= BYT_RT5651_DMIC_MAP; + break; + } + if (BYT_RT5651_JDSRC(byt_rt5651_quirk)) { dev_info(dev, "quirk realtek,jack-detect-source %ld\n", BYT_RT5651_JDSRC(byt_rt5651_quirk)); -- 2.43.0

2 1

[PATCH OLK-6.6] iommu/vt-d: debugfs: Fix legacy mode page table dump logic
by z00845436 22 Nov '25

22 Nov '25

From: "Vineeth Pillai (Google)" <vineeth(a)bitbyteword.org> mainline inclusion from mainline-v6.18-rc1 commit fbe6070c73badca726e4ff7877320e6c62339917 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B92 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault, probably for non-canonical address 0xf00087d3f000f000: 0000 [#1] SMP NOPTI CPU: 2 UID: 0 PID: 786 Comm: cat Not tainted 6.16.0 #191 PREEMPT(voluntary) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.17.0-5.fc42 04/01/2014 RIP: 0010:pgtable_walk_level+0x98/0x150 RSP: 0018:ffffc90000f279c0 EFLAGS: 00010206 RAX: 0000000040000000 RBX: ffffc90000f27ab0 RCX: 000000000000001e RDX: 0000000000000003 RSI: f00087d3f000f000 RDI: f00087d3f0010000 RBP: ffffc90000f27a00 R08: ffffc90000f27a98 R09: 0000000000000002 R10: 0000000000000000 R11: 0000000000000000 R12: f00087d3f000f000 R13: 0000000000000000 R14: 0000000040000000 R15: ffffc90000f27a98 FS: 0000764566dcb740(0000) GS:ffff8881f812c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000764566d44000 CR3: 0000000109d81003 CR4: 0000000000772ef0 PKRU: 55555554 Call Trace: <TASK> pgtable_walk_level+0x88/0x150 domain_translation_struct_show.isra.0+0x2d9/0x300 dev_domain_translation_struct_show+0x20/0x40 seq_read_iter+0x12d/0x490 ... Avoid walking the page table if TT is not 00b or 01b. Fixes: 2b437e804566 ("iommu/vt-d: debugfs: Support dumping a specified page table") Signed-off-by: Vineeth Pillai (Google) <vineeth(a)bitbyteword.org> Reviewed-by: Kevin Tian <kevin.tian(a)intel.com> Link: https://lore.kernel.org/r/20250814163153.634680-1-vineeth@bitbyteword.org Signed-off-by: Lu Baolu <baolu.lu(a)linux.intel.com> Signed-off-by: Joerg Roedel <joerg.roedel(a)amd.com> --- drivers/iommu/intel/debugfs.c | 17 +++++++++++++++-- 1 file changed, 15 insertions(+), 2 deletions(-) diff --git a/drivers/iommu/intel/debugfs.c b/drivers/iommu/intel/debugfs.c index 86b506af7daa..7223adfabd7d 100644 --- a/drivers/iommu/intel/debugfs.c +++ b/drivers/iommu/intel/debugfs.c @@ -435,8 +435,21 @@ static int domain_translation_struct_show(struct seq_file *m, } pgd &= VTD_PAGE_MASK; } else { /* legacy mode */ - pgd = context->lo & VTD_PAGE_MASK; - agaw = context->hi & 7; + u8 tt = (u8)(context->lo & GENMASK_ULL(3, 2)) >> 2; + + /* + * According to Translation Type(TT), + * get the page table pointer(SSPTPTR). + */ + switch (tt) { + case CONTEXT_TT_MULTI_LEVEL: + case CONTEXT_TT_DEV_IOTLB: + pgd = context->lo & VTD_PAGE_MASK; + agaw = context->hi & 7; + break; + default: + goto iommu_unlock; + } } seq_printf(m, "Device %04x:%02x:%02x.%x ", -- 2.43.0

2 1

[PATCH OLK-6.6] iommu/vt-d: debugfs: Fix legacy mode page table dump logic
by z00845436 22 Nov '25

22 Nov '25

From: "Vineeth Pillai (Google)" <vineeth(a)bitbyteword.org> mainline inclusion from mainline-v6.18-rc1 commit fbe6070c73badca726e4ff7877320e6c62339917 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B92 Reference:https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.gi… -------------------------------- In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault, probably for non-canonical address 0xf00087d3f000f000: 0000 [#1] SMP NOPTI CPU: 2 UID: 0 PID: 786 Comm: cat Not tainted 6.16.0 #191 PREEMPT(voluntary) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.17.0-5.fc42 04/01/2014 RIP: 0010:pgtable_walk_level+0x98/0x150 RSP: 0018:ffffc90000f279c0 EFLAGS: 00010206 RAX: 0000000040000000 RBX: ffffc90000f27ab0 RCX: 000000000000001e RDX: 0000000000000003 RSI: f00087d3f000f000 RDI: f00087d3f0010000 RBP: ffffc90000f27a00 R08: ffffc90000f27a98 R09: 0000000000000002 R10: 0000000000000000 R11: 0000000000000000 R12: f00087d3f000f000 R13: 0000000000000000 R14: 0000000040000000 R15: ffffc90000f27a98 FS: 0000764566dcb740(0000) GS:ffff8881f812c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000764566d44000 CR3: 0000000109d81003 CR4: 0000000000772ef0 PKRU: 55555554 Call Trace: <TASK> pgtable_walk_level+0x88/0x150 domain_translation_struct_show.isra.0+0x2d9/0x300 dev_domain_translation_struct_show+0x20/0x40 seq_read_iter+0x12d/0x490 ... Avoid walking the page table if TT is not 00b or 01b. Fixes: 2b437e804566 ("iommu/vt-d: debugfs: Support dumping a specified page table") Signed-off-by: Vineeth Pillai (Google) <vineeth(a)bitbyteword.org> Reviewed-by: Kevin Tian <kevin.tian(a)intel.com> Link: https://lore.kernel.org/r/20250814163153.634680-1-vineeth@bitbyteword.org Signed-off-by: Lu Baolu <baolu.lu(a)linux.intel.com> Signed-off-by: Joerg Roedel <joerg.roedel(a)amd.com> --- drivers/iommu/intel/debugfs.c | 17 +++++++++++++++-- 1 file changed, 15 insertions(+), 2 deletions(-) diff --git a/drivers/iommu/intel/debugfs.c b/drivers/iommu/intel/debugfs.c index 86b506af7daa..7223adfabd7d 100644 --- a/drivers/iommu/intel/debugfs.c +++ b/drivers/iommu/intel/debugfs.c @@ -435,8 +435,21 @@ static int domain_translation_struct_show(struct seq_file *m, } pgd &= VTD_PAGE_MASK; } else { /* legacy mode */ - pgd = context->lo & VTD_PAGE_MASK; - agaw = context->hi & 7; + u8 tt = (u8)(context->lo & GENMASK_ULL(3, 2)) >> 2; + + /* + * According to Translation Type(TT), + * get the page table pointer(SSPTPTR). + */ + switch (tt) { + case CONTEXT_TT_MULTI_LEVEL: + case CONTEXT_TT_DEV_IOTLB: + pgd = context->lo & VTD_PAGE_MASK; + agaw = context->hi & 7; + break; + default: + goto iommu_unlock; + } } seq_printf(m, "Device %04x:%02x:%02x.%x ", -- 2.43.0

2 1

[PATCH OLK-6.6] iommu/vt-d: debugfs: Fix legacy mode page table dump logic
by z00845436 22 Nov '25

22 Nov '25

From: "Vineeth Pillai (Google)" <vineeth(a)bitbyteword.org> mainline inclusion from mainline-v6.18-rc1 commit fbe6070c73badca726e4ff7877320e6c62339917 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B92 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- In legacy mode, SSPTPTR is ignored if TT is not 00b or 01b. SSPTPTR maybe uninitialized or zero in that case and may cause oops like: Oops: general protection fault, probably for non-canonical address 0xf00087d3f000f000: 0000 [#1] SMP NOPTI CPU: 2 UID: 0 PID: 786 Comm: cat Not tainted 6.16.0 #191 PREEMPT(voluntary) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.17.0-5.fc42 04/01/2014 RIP: 0010:pgtable_walk_level+0x98/0x150 RSP: 0018:ffffc90000f279c0 EFLAGS: 00010206 RAX: 0000000040000000 RBX: ffffc90000f27ab0 RCX: 000000000000001e RDX: 0000000000000003 RSI: f00087d3f000f000 RDI: f00087d3f0010000 RBP: ffffc90000f27a00 R08: ffffc90000f27a98 R09: 0000000000000002 R10: 0000000000000000 R11: 0000000000000000 R12: f00087d3f000f000 R13: 0000000000000000 R14: 0000000040000000 R15: ffffc90000f27a98 FS: 0000764566dcb740(0000) GS:ffff8881f812c000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000764566d44000 CR3: 0000000109d81003 CR4: 0000000000772ef0 PKRU: 55555554 Call Trace: <TASK> pgtable_walk_level+0x88/0x150 domain_translation_struct_show.isra.0+0x2d9/0x300 dev_domain_translation_struct_show+0x20/0x40 seq_read_iter+0x12d/0x490 ... Avoid walking the page table if TT is not 00b or 01b. Fixes: 2b437e804566 ("iommu/vt-d: debugfs: Support dumping a specified page table") Signed-off-by: Vineeth Pillai (Google) <vineeth(a)bitbyteword.org> Reviewed-by: Kevin Tian <kevin.tian(a)intel.com> Link: https://lore.kernel.org/r/20250814163153.634680-1-vineeth@bitbyteword.org Signed-off-by: Lu Baolu <baolu.lu(a)linux.intel.com> Signed-off-by: Joerg Roedel <joerg.roedel(a)amd.com> --- drivers/iommu/intel/debugfs.c | 17 +++++++++++++++-- 1 file changed, 15 insertions(+), 2 deletions(-) diff --git a/drivers/iommu/intel/debugfs.c b/drivers/iommu/intel/debugfs.c index 86b506af7daa..7223adfabd7d 100644 --- a/drivers/iommu/intel/debugfs.c +++ b/drivers/iommu/intel/debugfs.c @@ -435,8 +435,21 @@ static int domain_translation_struct_show(struct seq_file *m, } pgd &= VTD_PAGE_MASK; } else { /* legacy mode */ - pgd = context->lo & VTD_PAGE_MASK; - agaw = context->hi & 7; + u8 tt = (u8)(context->lo & GENMASK_ULL(3, 2)) >> 2; + + /* + * According to Translation Type(TT), + * get the page table pointer(SSPTPTR). + */ + switch (tt) { + case CONTEXT_TT_MULTI_LEVEL: + case CONTEXT_TT_DEV_IOTLB: + pgd = context->lo & VTD_PAGE_MASK; + agaw = context->hi & 7; + break; + default: + goto iommu_unlock; + } } seq_printf(m, "Device %04x:%02x:%02x.%x ", -- 2.43.0

2 1

[openeuler:OLK-6.6 3304/3304] drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:450:39: error: incomplete definition of type 'struct ieee_pfc'
by kernel test robot 22 Nov '25

22 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 2e375b157ddf25336989b074c1f2a88a80ab72f5 commit: 2048b5b7f264f56a4d9e73079e790e13c8596aaf [3304/3304] net: wangxun: txgbe: add support for wangxun 10G/25G/40G config: x86_64-randconfig-015-20251122 (https://download.01.org/0day-ci/archive/20251122/202511221659.lFpcDW1g-lkp@…) compiler: clang version 20.1.8 (https://github.com/llvm/llvm-project 87f0227cb60147a26a1eeb4fb06e3b505e9c7261) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251122/202511221659.lFpcDW1g-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511221659.lFpcDW1g-lkp@intel.com/ All error/warnings (new ones prefixed by >>): In file included from drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:28: In file included from drivers/net/ethernet/wangxun/txgbe/txgbe_xsk.h:7: drivers/net/ethernet/wangxun/txgbe/txgbe.h:987:6: warning: variable 'cur_diff' set but not used [-Wunused-but-set-variable] 987 | u32 cur_diff = 0; | ^ >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:450:39: error: incomplete definition of type 'struct ieee_pfc' 450 | pfc_en |= !!(adapter->txgbe_ieee_pfc->pfc_en); | ~~~~~~~~~~~~~~~~~~~~~~~^ drivers/net/ethernet/wangxun/txgbe/txgbe.h:814:9: note: forward declaration of 'struct ieee_pfc' 814 | struct ieee_pfc *txgbe_ieee_pfc; | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:582:7: warning: variable 'real_tx_hang' set but not used [-Wunused-but-set-variable] 582 | bool real_tx_hang = false; | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:2618:21: warning: variable 'tx_ring' set but not used [-Wunused-but-set-variable] 2618 | struct txgbe_ring *tx_ring; | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:3270:39: error: incomplete definition of type 'struct ieee_pfc' 3270 | pfc_en |= !!(adapter->txgbe_ieee_pfc->pfc_en); | ~~~~~~~~~~~~~~~~~~~~~~~^ drivers/net/ethernet/wangxun/txgbe/txgbe.h:814:9: note: forward declaration of 'struct ieee_pfc' 814 | struct ieee_pfc *txgbe_ieee_pfc; | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4403:20: warning: variable 'vlnctrl' set but not used [-Wunused-but-set-variable] 4403 | u32 fctrl, vmolr, vlnctrl; | ^ >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4517:15: error: use of undeclared identifier 'IEEE_8021QAZ_MAX_TCS' 4517 | __u16 refill[IEEE_8021QAZ_MAX_TCS], max[IEEE_8021QAZ_MAX_TCS]; | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4517:42: error: use of undeclared identifier 'IEEE_8021QAZ_MAX_TCS' 4517 | __u16 refill[IEEE_8021QAZ_MAX_TCS], max[IEEE_8021QAZ_MAX_TCS]; | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4518:17: error: use of undeclared identifier 'IEEE_8021QAZ_MAX_TCS' 4518 | __u8 prio_type[IEEE_8021QAZ_MAX_TCS]; | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4522:14: error: use of undeclared identifier 'IEEE_8021QAZ_MAX_TCS' 4522 | __u8 bwg_id[IEEE_8021QAZ_MAX_TCS] = {0, 1, 2, 3, 4, 5, 6, 7}; | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4525:18: error: use of undeclared identifier 'IEEE_8021QAZ_MAX_TCS' 4525 | for (i = 0; i < IEEE_8021QAZ_MAX_TCS; i++) { | ^ >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4526:14: error: incomplete definition of type 'struct ieee_ets' 4526 | switch (ets->tc_tsa[i]) { | ~~~^ drivers/net/ethernet/wangxun/txgbe/txgbe.h:815:9: note: forward declaration of 'struct ieee_ets' 815 | struct ieee_ets *txgbe_ieee_ets; | ^ >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4527:8: error: use of undeclared identifier 'IEEE_8021QAZ_TSA_STRICT' 4527 | case IEEE_8021QAZ_TSA_STRICT: | ^ >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4530:8: error: use of undeclared identifier 'IEEE_8021QAZ_TSA_ETS' 4530 | case IEEE_8021QAZ_TSA_ETS: | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4543:36: error: incomplete definition of type 'struct ieee_ets' 4543 | txgbe_dcb_calculate_tc_credits(ets->tc_tx_bw, refill, max, max_frame); | ~~~^ drivers/net/ethernet/wangxun/txgbe/txgbe.h:815:9: note: forward declaration of 'struct ieee_ets' 815 | struct ieee_ets *txgbe_ieee_ets; | ^ >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4543:56: error: use of undeclared identifier 'max' 4543 | txgbe_dcb_calculate_tc_credits(ets->tc_tx_bw, refill, max, max_frame); | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4545:30: error: incomplete definition of type 'struct ieee_ets' 4545 | bwg_id, prio_type, ets->prio_tc); | ~~~^ drivers/net/ethernet/wangxun/txgbe/txgbe.h:815:9: note: forward declaration of 'struct ieee_ets' 815 | struct ieee_ets *txgbe_ieee_ets; | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4544:41: error: use of undeclared identifier 'max' 4544 | return txgbe_dcb_hw_config(hw, refill, max, | ^ >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4515:5: warning: no previous prototype for function 'txgbe_dcb_hw_ets' [-Wmissing-prototypes] 4515 | s32 txgbe_dcb_hw_ets(struct txgbe_hw *hw, struct ieee_ets *ets, int max_frame) | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4515:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 4515 | s32 txgbe_dcb_hw_ets(struct txgbe_hw *hw, struct ieee_ets *ets, int max_frame) | ^ | static >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4591:26: error: use of undeclared identifier 'DCB_CAP_DCBX_VER_IEEE' 4591 | if (adapter->dcbx_cap & DCB_CAP_DCBX_VER_IEEE) { | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4599:36: error: incomplete definition of type 'struct ieee_ets' 4599 | u8 *tc = adapter->txgbe_ieee_ets->prio_tc; | ~~~~~~~~~~~~~~~~~~~~~~~^ drivers/net/ethernet/wangxun/txgbe/txgbe.h:815:9: note: forward declaration of 'struct ieee_ets' 815 | struct ieee_ets *txgbe_ieee_ets; | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4601:42: error: incomplete definition of type 'struct ieee_pfc' 4601 | txgbe_dcb_config_pfc(&adapter->hw, pfc->pfc_en, tc); | ~~~^ drivers/net/ethernet/wangxun/txgbe/txgbe.h:814:9: note: forward declaration of 'struct ieee_pfc' 814 | struct ieee_pfc *txgbe_ieee_pfc; | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:6709:9: warning: variable 'missed_rx' set but not used [-Wunused-but-set-variable] 6709 | u32 i, missed_rx = 0, mpc, bprc, lxon, lxoff; | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:6915:6: warning: no previous prototype for function 'txgbe_irq_rearm_queues' [-Wmissing-prototypes] 6915 | void txgbe_irq_rearm_queues(struct txgbe_adapter *adapter, | ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:6915:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 6915 | void txgbe_irq_rearm_queues(struct txgbe_adapter *adapter, | ^ | static drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7007:39: error: incomplete definition of type 'struct ieee_pfc' 7007 | pfc_en |= !!(adapter->txgbe_ieee_pfc->pfc_en); | ~~~~~~~~~~~~~~~~~~~~~~~^ drivers/net/ethernet/wangxun/txgbe/txgbe.h:814:9: note: forward declaration of 'struct ieee_pfc' 814 | struct ieee_pfc *txgbe_ieee_pfc; | ^ >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7091:22: error: use of undeclared identifier 'DCB_APP_IDTYPE_ETHTYPE' 7091 | .selector = DCB_APP_IDTYPE_ETHTYPE, | ^ fatal error: too many errors emitted, stopping now [-ferror-limit=] 7 warnings and 20 errors generated. vim +450 drivers/net/ethernet/wangxun/txgbe/txgbe_main.c 439 440 static void txgbe_update_xoff_received(struct txgbe_adapter *adapter) 441 { 442 struct txgbe_hw *hw = &adapter->hw; 443 struct txgbe_hw_stats *hwstats = &adapter->stats; 444 u32 xoff[8] = {0}; 445 int tc; 446 int i; 447 bool pfc_en = adapter->dcb_cfg.pfc_mode_enable; 448 449 if (adapter->txgbe_ieee_pfc) > 450 pfc_en |= !!(adapter->txgbe_ieee_pfc->pfc_en); 451 452 if (!(adapter->flags & TXGBE_FLAG_DCB_ENABLED) || !pfc_en) { 453 txgbe_update_xoff_rx_lfc(adapter); 454 return; 455 } 456 457 /* update stats for each tc, only valid with PFC enabled */ 458 for (i = 0; i < MAX_TX_PACKET_BUFFERS; i++) { 459 u32 pxoffrxc; 460 461 wr32m(hw, TXGBE_MMC_CONTROL, TXGBE_MMC_CONTROL_UP, i << 16); 462 pxoffrxc = rd32(hw, TXGBE_MAC_PXOFFRXC); 463 hwstats->pxoffrxc[i] += pxoffrxc; 464 /* Get the TC for given UP */ 465 tc = netdev_get_prio_tc_map(adapter->netdev, i); 466 xoff[tc] += pxoffrxc; 467 } 468 469 /* disarm tx queues that have received xoff frames */ 470 for (i = 0; i < adapter->num_tx_queues; i++) { 471 struct txgbe_ring *tx_ring = adapter->tx_ring[i]; 472 473 tc = tx_ring->dcb_tc; 474 if (tc <= 7 && xoff[tc]) 475 clear_bit(__TXGBE_HANG_CHECK_ARMED, &tx_ring->state); 476 } 477 for (i = 0; i < adapter->num_xdp_queues; i++) { 478 struct txgbe_ring *xdp_ring = adapter->xdp_ring[i]; 479 480 tc = xdp_ring->dcb_tc; 481 if (tc <= 7 && xoff[tc]) 482 clear_bit(__TXGBE_HANG_CHECK_ARMED, &xdp_ring->state); 483 } 484 } 485 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3304/3304] arch/arm64/kvm/hypercalls.c:380:52: error: passing argument 1 of 'hisi_ipiv_supported_per_vm' from incompatible pointer type
by kernel test robot 22 Nov '25

22 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 2e375b157ddf25336989b074c1f2a88a80ab72f5 commit: cbd165f529bd32b586342c0a2d11c3ca50b9fdd3 [3304/3304] KVM: arm64: ipiv: Change parameter from vcpu to kvm config: arm64-defconfig (https://download.01.org/0day-ci/archive/20251122/202511221643.H3LgffBo-lkp@…) compiler: aarch64-linux-gcc (GCC) 15.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251122/202511221643.H3LgffBo-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511221643.H3LgffBo-lkp@intel.com/ All errors (new ones prefixed by >>): arch/arm64/kvm/hypercalls.c: In function 'kvm_smccc_call_handler': >> arch/arm64/kvm/hypercalls.c:380:52: error: passing argument 1 of 'hisi_ipiv_supported_per_vm' from incompatible pointer type [-Wincompatible-pointer-types] 380 | if (hisi_ipiv_supported_per_vm(vcpu->kvm)) | ~~~~^~~~~ | | | struct kvm * In file included from arch/arm64/kvm/hypercalls.c:13: arch/arm64/kvm/hisilicon/hisi_virt.h:127:64: note: expected 'struct kvm_vcpu *' but argument is of type 'struct kvm *' 127 | static inline bool hisi_ipiv_supported_per_vm(struct kvm_vcpu *vcpu) | ~~~~~~~~~~~~~~~~~^~~~ arch/arm64/kvm/hypercalls.c:386:52: error: passing argument 1 of 'hisi_ipiv_supported_per_vm' from incompatible pointer type [-Wincompatible-pointer-types] 386 | if (hisi_ipiv_supported_per_vm(vcpu->kvm)) { | ~~~~^~~~~ | | | struct kvm * arch/arm64/kvm/hisilicon/hisi_virt.h:127:64: note: expected 'struct kvm_vcpu *' but argument is of type 'struct kvm *' 127 | static inline bool hisi_ipiv_supported_per_vm(struct kvm_vcpu *vcpu) | ~~~~~~~~~~~~~~~~~^~~~ >> arch/arm64/kvm/hypercalls.c:387:53: error: passing argument 1 of 'hisi_ipiv_enable_per_vm' from incompatible pointer type [-Wincompatible-pointer-types] 387 | hisi_ipiv_enable_per_vm(vcpu->kvm); | ~~~~^~~~~ | | | struct kvm * arch/arm64/kvm/hisilicon/hisi_virt.h:131:61: note: expected 'struct kvm_vcpu *' but argument is of type 'struct kvm *' 131 | static inline void hisi_ipiv_enable_per_vm(struct kvm_vcpu *vcpu) {} | ~~~~~~~~~~~~~~~~~^~~~ vim +/hisi_ipiv_supported_per_vm +380 arch/arm64/kvm/hypercalls.c 264 265 int kvm_smccc_call_handler(struct kvm_vcpu *vcpu) 266 { 267 struct kvm_smccc_features *smccc_feat = &vcpu->kvm->arch.smccc_feat; 268 u32 func_id = smccc_get_function(vcpu); 269 u64 val[4] = {SMCCC_RET_NOT_SUPPORTED}; 270 u32 feature; 271 u8 action; 272 gpa_t gpa; 273 274 action = kvm_smccc_get_action(vcpu, func_id); 275 switch (action) { 276 case KVM_SMCCC_FILTER_HANDLE: 277 break; 278 case KVM_SMCCC_FILTER_DENY: 279 goto out; 280 case KVM_SMCCC_FILTER_FWD_TO_USER: 281 kvm_prepare_hypercall_exit(vcpu, func_id); 282 return 0; 283 default: 284 WARN_RATELIMIT(1, "Unhandled SMCCC filter action: %d\n", action); 285 goto out; 286 } 287 288 switch (func_id) { 289 case ARM_SMCCC_VERSION_FUNC_ID: 290 val[0] = ARM_SMCCC_VERSION_1_1; 291 break; 292 case ARM_SMCCC_ARCH_FEATURES_FUNC_ID: 293 feature = smccc_get_arg1(vcpu); 294 switch (feature) { 295 case ARM_SMCCC_ARCH_WORKAROUND_1: 296 switch (arm64_get_spectre_v2_state()) { 297 case SPECTRE_VULNERABLE: 298 break; 299 case SPECTRE_MITIGATED: 300 val[0] = SMCCC_RET_SUCCESS; 301 break; 302 case SPECTRE_UNAFFECTED: 303 val[0] = SMCCC_ARCH_WORKAROUND_RET_UNAFFECTED; 304 break; 305 } 306 break; 307 case ARM_SMCCC_ARCH_WORKAROUND_2: 308 switch (arm64_get_spectre_v4_state()) { 309 case SPECTRE_VULNERABLE: 310 break; 311 case SPECTRE_MITIGATED: 312 /* 313 * SSBS everywhere: Indicate no firmware 314 * support, as the SSBS support will be 315 * indicated to the guest and the default is 316 * safe. 317 * 318 * Otherwise, expose a permanent mitigation 319 * to the guest, and hide SSBS so that the 320 * guest stays protected. 321 */ 322 if (cpus_have_final_cap(ARM64_SSBS)) 323 break; 324 fallthrough; 325 case SPECTRE_UNAFFECTED: 326 val[0] = SMCCC_RET_NOT_REQUIRED; 327 break; 328 } 329 break; 330 case ARM_SMCCC_ARCH_WORKAROUND_3: 331 switch (arm64_get_spectre_bhb_state()) { 332 case SPECTRE_VULNERABLE: 333 break; 334 case SPECTRE_MITIGATED: 335 val[0] = SMCCC_RET_SUCCESS; 336 break; 337 case SPECTRE_UNAFFECTED: 338 val[0] = SMCCC_ARCH_WORKAROUND_RET_UNAFFECTED; 339 break; 340 } 341 break; 342 case ARM_SMCCC_HV_PV_TIME_FEATURES: 343 if (test_bit(KVM_REG_ARM_STD_HYP_BIT_PV_TIME, 344 &smccc_feat->std_hyp_bmap)) 345 val[0] = SMCCC_RET_SUCCESS; 346 break; 347 #ifdef CONFIG_PARAVIRT_SCHED 348 case ARM_SMCCC_HV_PV_SCHED_FEATURES: 349 val[0] = SMCCC_RET_SUCCESS; 350 break; 351 #endif /* CONFIG_PARAVIRT_SCHED */ 352 } 353 break; 354 case ARM_SMCCC_HV_PV_TIME_FEATURES: 355 val[0] = kvm_hypercall_pv_features(vcpu); 356 break; 357 case ARM_SMCCC_HV_PV_TIME_ST: 358 gpa = kvm_init_stolen_time(vcpu); 359 if (gpa != INVALID_GPA) 360 val[0] = gpa; 361 break; 362 #ifdef CONFIG_PARAVIRT_SCHED 363 case ARM_SMCCC_HV_PV_SCHED_FEATURES: 364 val[0] = kvm_hypercall_pvsched_features(vcpu); 365 break; 366 case ARM_SMCCC_HV_PV_SCHED_IPA_INIT: 367 gpa = smccc_get_arg1(vcpu); 368 if (gpa != INVALID_GPA) { 369 vcpu->arch.pvsched.base = gpa; 370 val[0] = SMCCC_RET_SUCCESS; 371 } 372 break; 373 case ARM_SMCCC_HV_PV_SCHED_IPA_RELEASE: 374 vcpu->arch.pvsched.base = INVALID_GPA; 375 val[0] = SMCCC_RET_SUCCESS; 376 break; 377 #endif /* CONFIG_PARAVIRT_SCHED */ 378 #ifdef CONFIG_ARM64_HISI_IPIV 379 case ARM_SMCCC_VENDOR_PV_SGI_FEATURES: > 380 if (hisi_ipiv_supported_per_vm(vcpu->kvm)) 381 val[0] = SMCCC_RET_SUCCESS; 382 else 383 val[0] = SMCCC_RET_NOT_SUPPORTED; 384 break; 385 case ARM_SMCCC_VENDOR_PV_SGI_ENABLE: > 386 if (hisi_ipiv_supported_per_vm(vcpu->kvm)) { > 387 hisi_ipiv_enable_per_vm(vcpu->kvm); 388 val[0] = SMCCC_RET_SUCCESS; 389 } else { 390 val[0] = SMCCC_RET_NOT_SUPPORTED; 391 } 392 break; 393 #endif 394 case ARM_SMCCC_VENDOR_HYP_CALL_UID_FUNC_ID: 395 val[0] = ARM_SMCCC_VENDOR_HYP_UID_KVM_REG_0; 396 val[1] = ARM_SMCCC_VENDOR_HYP_UID_KVM_REG_1; 397 val[2] = ARM_SMCCC_VENDOR_HYP_UID_KVM_REG_2; 398 val[3] = ARM_SMCCC_VENDOR_HYP_UID_KVM_REG_3; 399 break; 400 case ARM_SMCCC_VENDOR_HYP_KVM_FEATURES_FUNC_ID: 401 val[0] = smccc_feat->vendor_hyp_bmap; 402 /* Function numbers 2-63 are reserved for pKVM for now */ 403 val[2] = smccc_feat->vendor_hyp_bmap_2; 404 break; 405 case ARM_SMCCC_VENDOR_HYP_KVM_PTP_FUNC_ID: 406 kvm_ptp_get_time(vcpu, val); 407 break; 408 case ARM_SMCCC_TRNG_VERSION: 409 case ARM_SMCCC_TRNG_FEATURES: 410 case ARM_SMCCC_TRNG_GET_UUID: 411 case ARM_SMCCC_TRNG_RND32: 412 case ARM_SMCCC_TRNG_RND64: 413 return kvm_trng_call(vcpu); 414 default: 415 return kvm_psci_call(vcpu); 416 } 417 418 out: 419 smccc_set_retval(vcpu, val[0], val[1], val[2], val[3]); 420 return 1; 421 } 422 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-5.10] crypto: essiv - Check ssize for decryption and in-place encryption
by Yi Yang 22 Nov '25

22 Nov '25

From: Herbert Xu <herbert(a)gondor.apana.org.au> mainline inclusion from mainline-v6.18-rc1 commit 6bb73db6948c2de23e407fe1b7ef94bf02b7529f category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID3FOP CVE: CVE-2025-40019 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption. Reported-by: Muhammad Alifa Ramdhan <ramdhan(a)starlabs.sg> Fixes: be1eb7f78aa8 ("crypto: essiv - create wrapper template for ESSIV generation") Signed-off-by: Herbert Xu <herbert(a)gondor.apana.org.au> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- crypto/essiv.c | 14 ++++++-------- 1 file changed, 6 insertions(+), 8 deletions(-) diff --git a/crypto/essiv.c b/crypto/essiv.c index 85bb624e32b9..7db206fc97f2 100644 --- a/crypto/essiv.c +++ b/crypto/essiv.c @@ -185,9 +185,14 @@ static int essiv_aead_crypt(struct aead_request *req, bool enc) const struct essiv_tfm_ctx *tctx = crypto_aead_ctx(tfm); struct essiv_aead_request_ctx *rctx = aead_request_ctx(req); struct aead_request *subreq = &rctx->aead_req; + int ivsize = crypto_aead_ivsize(tfm); + int ssize = req->assoclen - ivsize; struct scatterlist *src = req->src; int err; + if (ssize < 0) + return -EINVAL; + crypto_cipher_encrypt_one(tctx->essiv_cipher, req->iv, req->iv); /* @@ -197,19 +202,12 @@ static int essiv_aead_crypt(struct aead_request *req, bool enc) */ rctx->assoc = NULL; if (req->src == req->dst || !enc) { - scatterwalk_map_and_copy(req->iv, req->dst, - req->assoclen - crypto_aead_ivsize(tfm), - crypto_aead_ivsize(tfm), 1); + scatterwalk_map_and_copy(req->iv, req->dst, ssize, ivsize, 1); } else { u8 *iv = (u8 *)aead_request_ctx(req) + tctx->ivoffset; - int ivsize = crypto_aead_ivsize(tfm); - int ssize = req->assoclen - ivsize; struct scatterlist *sg; int nents; - if (ssize < 0) - return -EINVAL; - nents = sg_nents_for_len(req->src, ssize); if (nents < 0) return -EINVAL; -- 2.25.1

2 1

[PATCH OLK-6.6] drm/vmwgfx: Fix a null-ptr access in the cursor snooper
by Yi Yang 22 Nov '25

22 Nov '25

From: Zack Rusin <zack.rusin(a)broadcom.com> stable inclusion from stable-v6.6.113 commit 299cfb5a7deabdf9ecd30071755672af0aced5eb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6796 CVE: CVE-2025-40110 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 5ac2c0279053a2c5265d46903432fb26ae2d0da2 ] Check that the resource which is converted to a surface exists before trying to use the cursor snooper on it. vmw_cmd_res_check allows explicit invalid (SVGA3D_INVALID_ID) identifiers because some svga commands accept SVGA3D_INVALID_ID to mean "no surface", unfortunately functions that accept the actual surfaces as objects might (and in case of the cursor snooper, do not) be able to handle null objects. Make sure that we validate not only the identifier (via the vmw_cmd_res_check) but also check that the actual resource exists before trying to do something with it. Fixes unchecked null-ptr reference in the snooping code. Signed-off-by: Zack Rusin <zack.rusin(a)broadcom.com> Fixes: c0951b797e7d ("drm/vmwgfx: Refactor resource management") Reported-by: Kuzey Arda Bulut <kuzeyardabulut(a)gmail.com> Cc: Broadcom internal kernel review list <bcm-kernel-feedback-list(a)broadcom.com> Cc: dri-devel(a)lists.freedesktop.org Reviewed-by: Ian Forbes <ian.forbes(a)broadcom.com> Link: https://lore.kernel.org/r/20250917153655.1968583-1-zack.rusin@broadcom.com Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yi Yang <yiyang13(a)huawei.com> --- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 17 ++++++++++++----- 1 file changed, 12 insertions(+), 5 deletions(-) diff --git a/drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c b/drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c index 5fef0b31c117..41be22e781e4 100644 --- a/drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c +++ b/drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c @@ -1514,6 +1514,7 @@ static int vmw_cmd_dma(struct vmw_private *dev_priv, SVGA3dCmdHeader *header) { struct vmw_bo *vmw_bo = NULL; + struct vmw_resource *res; struct vmw_surface *srf = NULL; VMW_DECLARE_CMD_VAR(*cmd, SVGA3dCmdSurfaceDMA); int ret; @@ -1549,18 +1550,24 @@ static int vmw_cmd_dma(struct vmw_private *dev_priv, dirty = (cmd->body.transfer == SVGA3D_WRITE_HOST_VRAM) ? VMW_RES_DIRTY_SET : 0; - ret = vmw_cmd_res_check(dev_priv, sw_context, vmw_res_surface, - dirty, user_surface_converter, - &cmd->body.host.sid, NULL); + ret = vmw_cmd_res_check(dev_priv, sw_context, vmw_res_surface, dirty, + user_surface_converter, &cmd->body.host.sid, + NULL); if (unlikely(ret != 0)) { if (unlikely(ret != -ERESTARTSYS)) VMW_DEBUG_USER("could not find surface for DMA.\n"); return ret; } - srf = vmw_res_to_srf(sw_context->res_cache[vmw_res_surface].res); + res = sw_context->res_cache[vmw_res_surface].res; + if (!res) { + VMW_DEBUG_USER("Invalid DMA surface.\n"); + return -EINVAL; + } - vmw_kms_cursor_snoop(srf, sw_context->fp->tfile, &vmw_bo->tbo, header); + srf = vmw_res_to_srf(res); + vmw_kms_cursor_snoop(srf, sw_context->fp->tfile, &vmw_bo->tbo, + header); return 0; } -- 2.25.1

2 1

[openeuler:OLK-6.6 3304/3304] mm/gmem.c:813:29: sparse: sparse: incorrect type in assignment (different base types)
by kernel test robot 22 Nov '25

22 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 2e375b157ddf25336989b074c1f2a88a80ab72f5 commit: 8a89dde40c2bd82755f374bc86b46c77acdfd0b6 [3304/3304] mm: implement hmemcpy API config: arm64-randconfig-r122-20251122 (https://download.01.org/0day-ci/archive/20251122/202511221253.wiWo5CIW-lkp@…) compiler: aarch64-linux-gcc (GCC) 13.4.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251122/202511221253.wiWo5CIW-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511221253.wiWo5CIW-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) mm/gmem.c:384:13: sparse: sparse: symbol 'gm_dev_fault' was not declared. Should it be static? >> mm/gmem.c:813:29: sparse: sparse: incorrect type in assignment (different base types) @@ expected unsigned int enum gm_ret ret @@ got restricted vm_fault_t @@ mm/gmem.c:813:29: sparse: expected unsigned int enum gm_ret ret mm/gmem.c:813:29: sparse: got restricted vm_fault_t vim +813 mm/gmem.c 765 766 static void do_hmemcpy(struct mm_struct *mm, int hnid, unsigned long dest, 767 unsigned long src, size_t size) 768 { 769 enum gm_ret ret; 770 int page_size = HPAGE_SIZE; 771 struct vm_area_struct *vma_dest, *vma_src; 772 struct gm_mapping *gm_mapping_dest, *gm_mapping_src; 773 struct gm_dev *dev = NULL; 774 struct gm_memcpy_t gmc = {0}; 775 776 if (size == 0) 777 return; 778 779 mmap_read_lock(mm); 780 vma_dest = find_vma(mm, dest); 781 vma_src = find_vma(mm, src); 782 783 if (!vma_src || vma_src->vm_start > src || !vma_dest || vma_dest->vm_start > dest) { 784 gmem_err("hmemcpy: the vma find by src/dest is NULL!"); 785 goto unlock_mm; 786 } 787 788 gm_mapping_dest = vm_object_lookup(vma_dest->vm_obj, dest & ~(page_size - 1)); 789 gm_mapping_src = vm_object_lookup(vma_src->vm_obj, src & ~(page_size - 1)); 790 791 if (!gm_mapping_src) { 792 gmem_err("hmemcpy: gm_mapping_src is NULL"); 793 goto unlock_mm; 794 } 795 796 if (gm_mapping_nomap(gm_mapping_src)) { 797 gmem_err("hmemcpy: src address is not mapping to CPU or device"); 798 goto unlock_mm; 799 } 800 801 if (hnid != -1) { 802 dev = get_gm_dev(hnid); 803 if (!dev) { 804 gmem_err("hmemcpy: hnode's dev is NULL"); 805 goto unlock_mm; 806 } 807 } 808 809 // Trigger dest page fault on host or device 810 if (!gm_mapping_dest || gm_mapping_nomap(gm_mapping_dest) 811 || !hnid_match_dest(hnid, gm_mapping_dest)) { 812 if (hnid == -1) { > 813 ret = handle_mm_fault(vma_dest, dest & ~(page_size - 1), FAULT_FLAG_USER | 814 FAULT_FLAG_INSTRUCTION | FAULT_FLAG_WRITE, NULL); 815 if (ret) { 816 gmem_err("%s: failed to execute host page fault, ret:%d", 817 __func__, ret); 818 goto unlock_mm; 819 } 820 } else { 821 ret = gm_dev_fault_locked(mm, dest & ~(page_size - 1), dev, MADV_WILLNEED); 822 if (ret != GM_RET_SUCCESS) { 823 gmem_err("%s: failed to excecute dev page fault.", __func__); 824 goto unlock_mm; 825 } 826 } 827 } 828 if (!gm_mapping_dest) 829 gm_mapping_dest = vm_object_lookup(vma_dest->vm_obj, round_down(dest, page_size)); 830 831 if (gm_mapping_dest && gm_mapping_dest != gm_mapping_src) 832 mutex_lock(&gm_mapping_dest->lock); 833 834 mutex_lock(&gm_mapping_src->lock); 835 // Use memcpy when there is no device address, otherwise use peer_memcpy 836 if (hnid == -1) { 837 if (gm_mapping_cpu(gm_mapping_src)) { // host to host 838 gmem_err("hmemcpy: host to host is unimplemented\n"); 839 goto unlock_gm_mapping; 840 } else if (gm_mapping_device(gm_mapping_src)) { // device to host 841 dev = gm_mapping_src->dev; 842 gmc.dest = phys_to_dma(dev->dma_dev, 843 page_to_phys(gm_mapping_dest->page) + (dest & (page_size - 1))); 844 gmc.src = gm_mapping_src->gm_page->dev_dma_addr + (src & (page_size - 1)); 845 gmc.kind = GM_MEMCPY_D2H; 846 } else { 847 gmem_err("hmemcpy: src address is not mapping to CPU or device"); 848 goto unlock_gm_mapping; 849 } 850 } else { 851 if (gm_mapping_cpu(gm_mapping_src)) { // host to device 852 gmc.dest = gm_mapping_dest->gm_page->dev_dma_addr + 853 (dest & (page_size - 1)); 854 gmc.src = phys_to_dma(dev->dma_dev, 855 page_to_phys(gm_mapping_src->page) + (src & (page_size - 1))); 856 gmc.kind = GM_MEMCPY_H2D; 857 } else if (gm_mapping_device(gm_mapping_src)) { // device to device 858 gmem_err("hmemcpy: device to device is unimplemented\n"); 859 goto unlock_gm_mapping; 860 } else { 861 gmem_err("hmemcpy: src address is not mapping to CPU or device"); 862 goto unlock_gm_mapping; 863 } 864 } 865 gmc.mm = mm; 866 gmc.dev = dev; 867 gmc.size = size; 868 dev->mmu->peer_hmemcpy(&gmc); 869 870 unlock_gm_mapping: 871 mutex_unlock(&gm_mapping_src->lock); 872 if (gm_mapping_dest && gm_mapping_dest != gm_mapping_src) 873 mutex_unlock(&gm_mapping_dest->lock); 874 unlock_mm: 875 mmap_read_unlock(mm); 876 } 877 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3304/3304] mm/kasan/shadow.c:90:(.text+0x590): relocation truncated to fit: R_AARCH64_CALL26 against undefined symbol `__memcpy_mc'
by kernel test robot 22 Nov '25

22 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 7fe983da1977aac40da78a43010d0612ff5c0bb1 commit: b991780c836ceb9a479c6c6e385e914b487e353a [3304/3304] arm64: introduce copy_mc_to_kernel() implementation config: arm64-randconfig-003-20251122 (https://download.01.org/0day-ci/archive/20251122/202511221034.dymjxfJa-lkp@…) compiler: aarch64-linux-gcc (GCC) 10.5.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251122/202511221034.dymjxfJa-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511221034.dymjxfJa-lkp@intel.com/ All errors (new ones prefixed by >>): aarch64-linux-ld: mm/kasan/shadow.o: in function `memcpy_mc': mm/kasan/shadow.c:90: undefined reference to `__memcpy_mc' >> mm/kasan/shadow.c:90:(.text+0x590): relocation truncated to fit: R_AARCH64_CALL26 against undefined symbol `__memcpy_mc' vim +90 mm/kasan/shadow.c 81 82 #ifdef __HAVE_ARCH_MEMCPY_MC 83 #undef memcpy_mc 84 int memcpy_mc(void *dest, const void *src, size_t len) 85 { 86 if (!kasan_check_range(src, len, false, _RET_IP_) || 87 !kasan_check_range(dest, len, true, _RET_IP_)) 88 return (int)len; 89 > 90 return __memcpy_mc(dest, src, len); 91 } 92 #endif 93 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-5.10 2818/2818] ../lib/gcc/aarch64-linux/5.5.0/plugin/include/config/elfos.h:102:21: warning: invalid suffix on literal; C++11 requires a space between literal and string macro
by kernel test robot 21 Nov '25

21 Nov '25

Hi Valdis, FYI, the error/warning still remains. tree: https://gitee.com/openeuler/kernel.git OLK-5.10 head: 3f1b18215d39769abfd210cb9a02b06b47b0b4b5 commit: 0908fe0570df658beb3866ddcb7bc55b0fb834b0 [2818/2818] gcc-plugins: fix gcc 11 indigestion with plugins... config: arm64-randconfig-002-20250321 (https://download.01.org/0day-ci/archive/20251121/202511212044.w0VqCIiP-lkp@…) compiler: aarch64-linux-gcc (GCC) 5.5.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251121/202511212044.w0VqCIiP-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511212044.w0VqCIiP-lkp@intel.com/ All warnings (new ones prefixed by >>): In file included from ../lib/gcc/aarch64-linux/5.5.0/plugin/include/tm.h:24, from ../lib/gcc/aarch64-linux/5.5.0/plugin/include/gcc-plugin.h:31, from ../lib/gcc/aarch64-linux/5.5.0/plugin/include/plugin.h:23, from scripts/gcc-plugins/gcc-common.h:9, from scripts/gcc-plugins/stackleak_plugin.c:30: >> ../lib/gcc/aarch64-linux/5.5.0/plugin/include/config/elfos.h:102:21: warning: invalid suffix on literal; C++11 requires a space between literal and string macro [-Wliteral-suffix] 102 | fprintf ((FILE), "%s"HOST_WIDE_INT_PRINT_UNSIGNED"\n",\ | ^ In file included from ../lib/gcc/aarch64-linux/5.5.0/plugin/include/tm.h:24, from ../lib/gcc/aarch64-linux/5.5.0/plugin/include/gcc-plugin.h:31, from ../lib/gcc/aarch64-linux/5.5.0/plugin/include/plugin.h:23, from scripts/gcc-plugins/gcc-common.h:9, from scripts/gcc-plugins/randomize_layout_plugin.c:19: >> ../lib/gcc/aarch64-linux/5.5.0/plugin/include/config/elfos.h:102:21: warning: invalid suffix on literal; C++11 requires a space between literal and string macro [-Wliteral-suffix] 102 | fprintf ((FILE), "%s"HOST_WIDE_INT_PRINT_UNSIGNED"\n",\ | ^ ../lib/gcc/aarch64-linux/5.5.0/plugin/include/config/elfos.h:170:24: warning: invalid suffix on literal; C++11 requires a space between literal and string macro [-Wliteral-suffix] 170 | fprintf ((FILE), ","HOST_WIDE_INT_PRINT_UNSIGNED",%u\n", \ | ^ ../lib/gcc/aarch64-linux/5.5.0/plugin/include/config/elfos.h:170:24: warning: invalid suffix on literal; C++11 requires a space between literal and string macro [-Wliteral-suffix] 170 | fprintf ((FILE), ","HOST_WIDE_INT_PRINT_UNSIGNED",%u\n", \ | ^ In file included from ../lib/gcc/aarch64-linux/5.5.0/plugin/include/tm.h:24, from ../lib/gcc/aarch64-linux/5.5.0/plugin/include/gcc-plugin.h:31, from ../lib/gcc/aarch64-linux/5.5.0/plugin/include/plugin.h:23, from scripts/gcc-plugins/gcc-common.h:9, from scripts/gcc-plugins/sancov_plugin.c:22: >> ../lib/gcc/aarch64-linux/5.5.0/plugin/include/config/elfos.h:102:21: warning: invalid suffix on literal; C++11 requires a space between literal and string macro [-Wliteral-suffix] 102 | fprintf ((FILE), "%s"HOST_WIDE_INT_PRINT_UNSIGNED"\n",\ | ^ ../lib/gcc/aarch64-linux/5.5.0/plugin/include/config/elfos.h:170:24: warning: invalid suffix on literal; C++11 requires a space between literal and string macro [-Wliteral-suffix] 170 | fprintf ((FILE), ","HOST_WIDE_INT_PRINT_UNSIGNED",%u\n", \ | ^ In file included from ../lib/gcc/aarch64-linux/5.5.0/plugin/include/tm.h:41: >> ../lib/gcc/aarch64-linux/5.5.0/plugin/include/defaults.h:126:24: warning: invalid suffix on literal; C++11 requires a space between literal and string macro [-Wliteral-suffix] 126 | fprintf ((FILE), ","HOST_WIDE_INT_PRINT_UNSIGNED",%u\n", \ | ^ In file included from ../lib/gcc/aarch64-linux/5.5.0/plugin/include/tm.h:41: >> ../lib/gcc/aarch64-linux/5.5.0/plugin/include/defaults.h:126:24: warning: invalid suffix on literal; C++11 requires a space between literal and string macro [-Wliteral-suffix] 126 | fprintf ((FILE), ","HOST_WIDE_INT_PRINT_UNSIGNED",%u\n", \ | ^ In file included from ../lib/gcc/aarch64-linux/5.5.0/plugin/include/tm.h:41: >> ../lib/gcc/aarch64-linux/5.5.0/plugin/include/defaults.h:126:24: warning: invalid suffix on literal; C++11 requires a space between literal and string macro [-Wliteral-suffix] 126 | fprintf ((FILE), ","HOST_WIDE_INT_PRINT_UNSIGNED",%u\n", \ | ^ ../libexec/gcc/aarch64-linux/5.5.0/cc1: error while loading shared libraries: libmpfr.so.4: cannot open shared object file: No such file or directory ../libexec/gcc/aarch64-linux/5.5.0/cc1: error while loading shared libraries: libmpfr.so.4: cannot open shared object file: No such file or directory make[2]: *** [scripts/Makefile.build:280: scripts/mod/empty.o] Error 1 shuffle=1096673560 make[2]: *** [scripts/Makefile.build:117: scripts/mod/devicetable-offsets.s] Error 1 shuffle=1096673560 make[2]: Target '__build' not remade because of errors. make[1]: *** [Makefile:1214: prepare0] Error 2 shuffle=1096673560 make[1]: Target 'prepare' not remade because of errors. make: *** [Makefile:185: __sub-make] Error 2 shuffle=1096673560 make: Target 'prepare' not remade because of errors. -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-5.10] cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
by Xinyu Zheng 21 Nov '25

21 Nov '25

From: "Rafael J. Wysocki" <rafael.j.wysocki(a)intel.com> stable inclusion from stable-v6.6.113 commit 69a18ff6c60e8e113420f15355fad862cb45d38e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BVZ CVE: CVE-2025-40194 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 69e5d50fcf4093fb3f9f41c4f931f12c2ca8c467 upstream. The cpufreq_cpu_put() call in update_qos_request() takes place too early because the latter subsequently calls freq_qos_update_request() that indirectly accesses the policy object in question through the QoS request object passed to it. Fortunately, update_qos_request() is called under intel_pstate_driver_lock, so this issue does not matter for changing the intel_pstate operation mode, but it theoretically can cause a crash to occur on CPU device hot removal (which currently can only happen in virt, but it is formally supported nevertheless). Address this issue by modifying update_qos_request() to drop the reference to the policy later. Fixes: da5c504c7aae ("cpufreq: intel_pstate: Implement QoS supported freq constraints") Cc: 5.4+ <stable(a)vger.kernel.org> # 5.4+ Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Reviewed-by: Zihuan Zhang <zhangzihuan(a)kylinos.cn> Link: https://patch.msgid.link/2255671.irdbgypaU6@rafael.j.wysocki Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Xinyu Zheng <zhengxinyu6(a)huawei.com> --- drivers/cpufreq/intel_pstate.c | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/drivers/cpufreq/intel_pstate.c b/drivers/cpufreq/intel_pstate.c index 0cec5148b69f..8d0d62aca50d 100644 --- a/drivers/cpufreq/intel_pstate.c +++ b/drivers/cpufreq/intel_pstate.c @@ -1243,10 +1243,10 @@ static void update_qos_request(enum freq_qos_req_type type) continue; req = policy->driver_data; - cpufreq_cpu_put(policy); - - if (!req) + if (!req) { + cpufreq_cpu_put(policy); continue; + } if (hwp_active) intel_pstate_get_hwp_cap(cpu); @@ -1262,6 +1262,8 @@ static void update_qos_request(enum freq_qos_req_type type) if (freq_qos_update_request(req, freq) < 0) pr_warn("Failed to update freq constraint: CPU%d\n", i); + + cpufreq_cpu_put(policy); } } -- 2.34.1

2 1

[PATCH OLK-6.6 v2 0/6] xcall2.0: bugfix for prefetch ko
by Xinyu Zheng 21 Nov '25

21 Nov '25

Xinyu Zheng (6): xcall2.0: prefetch: fix value name typos in __do_sys_epoll_pwait xcall2.0: prefetch: keep prefetch module name same with file name xcall2.0: prefetch: fix memory leak when release prefetch item through mmu notifier xcall2.0: add xcall_subdir_create help to create subdir below /proc/xcall xcall2.0: prefetch: epoll_ctl no need to occupy a file refcount xcall2.0: prefetch: introduce struct prefetch_mm_data arch/arm64/kernel/xcall/proc.c | 10 +- drivers/staging/xcall/prefetch.c | 163 ++++++++++++++++++++----------- include/linux/xcall.h | 1 + 3 files changed, 114 insertions(+), 60 deletions(-) -- 2.34.1

2 7

[PATCH OLK-6.6] mfs: tool: Add mfs user space tool prefetch demo
by Huang Xiaojia 21 Nov '25

21 Nov '25

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/release-management/issues/ID5W1P --------------------------------------- Provide a prefetch demo of mfs tools. When a MISS event is reported, prefetching will be triggered to accelerate latter reading. Files under a directory will all be prefecthed. Signed-off-by: Huang Xiaojia <huangxiaojia2(a)huawei.com> --- tools/mfs/Makefile | 2 +- tools/mfs/mfs_prefetch.cpp | 269 +++++++++++++++++++++++++++++++++++++ 2 files changed, 270 insertions(+), 1 deletion(-) create mode 100644 tools/mfs/mfs_prefetch.cpp diff --git a/tools/mfs/Makefile b/tools/mfs/Makefile index a6e3e970b63e..f99c9cde828f 100644 --- a/tools/mfs/Makefile +++ b/tools/mfs/Makefile @@ -3,7 +3,7 @@ CFLAGS = -Wall -Wextra -PROGS := mfsd +PROGS := mfsd mfsd_prefetch all: $(PROGS) %: %.c diff --git a/tools/mfs/mfs_prefetch.cpp b/tools/mfs/mfs_prefetch.cpp new file mode 100644 index 000000000000..3b1d4c0151ca --- /dev/null +++ b/tools/mfs/mfs_prefetch.cpp @@ -0,0 +1,269 @@ +// SPDX-License-Identifier: GPL-2.0 +/* + * User-space demo of mfs + * + * Example use: + * ./mfsd [mfs_mountpoint] + * mfsd.c demostrates how to poll mfs device, read the events, + * parse the events, process the events according to user mode + * and trigger the ioctls mfs supported. + * + * See Documentation/filesystems/mfs.rst + */ + +#include <errno.h> +#include <unistd.h> +#include <fcntl.h> +#include <stdlib.h> +#include <stdio.h> +#include <poll.h> +#include <string.h> +#include <dirent.h> +#include <sys/ioctl.h> +#include <sys/statfs.h> +#include <sys/stat.h> +#include <sys/mman.h> + +#include <map> +#include <string> + +#include "../../include/uapi/linux/mfs.h" +#include "../../include/uapi/linux/magic.h" + +using namespace std; + +#define pr_err(fmt, ...) fprintf(stderr, fmt, ##__VA_ARGS__) + +static int mfs_mode = -1; +static map<string, uint64_t> files; + +struct thread_ctx { + char *path; + uint64_t off; + uint64_t len; +}; + +static int get_files(const char *parent) +{ + DIR *dir; + struct dirent *entry; + string filepath; + struct stat buf; + + if ((dir = opendir(parent)) == NULL) { + perror("opening directory failed"); + return -1; + } + + while ((entry = readdir(dir)) != NULL) { + if (strcmp(entry->d_name, ".") == 0 || strcmp(entry->d_name, "..") == 0) + continue; + + filepath = string(parent) + "/" + string(entry->d_name); + if (stat(filepath.c_str(), &buf) == -1) { + pr_err("stat path:%s failed\n", filepath.c_str()); + continue; + } + if (S_ISDIR(buf.st_mode)) + continue; + files.insert(pair<string, uint64_t>(filepath, buf.st_size)); + } + + return 0; +} + +static void *fault(void *arg) +{ + struct thread_ctx *ctx = (struct thread_ctx *)arg; + int fd = open(ctx->path, O_RDONLY); + if (fd < 0) { + pr_err("open file:%s failed\n", ctx->path); + free(ctx); + return NULL; + } + + void *addr = mmap(NULL, ctx->len, PROT_READ, MAP_SHARED, fd, 0); + uint64_t idx; + char tmp, total, *buffer = (char *)addr; + total = 'B'; + for (idx = 0; idx < ctx->len; idx += 4096) { + tmp = buffer[idx]; + total += tmp; + } + munmap(addr, ctx->len); + close(fd); + free(ctx); + return NULL; +} + +static int process_local_read(struct mfs_msg *msg) +{ + map<string, uint64_t>::iterator it; + struct thread_ctx *ctx; + pthread_t t0; + int ret; + + if (files.empty()) + return 0; + + for (it = files.begin(); it != files.end(); ++it) { + ctx = (struct thread_ctx *)malloc(sizeof(struct thread_ctx)); + if (!ctx) { + perror("malloc ctx failed"); + continue; + } + ctx->path = strdup(it->first.c_str()); + ctx->off = 0; + ctx->len = it->second; + ret = pthread_create(&t0, NULL, fault, ctx); + if (ret == 0) + pthread_detach(t0); + } + files.clear(); + return 0; +} + +static int process_remote_read(struct mfs_msg *msg) +{ + struct mfs_ioc_rpath *rpath; + struct mfs_ioc_done done; + int fd = msg->fd; + int ret; + + rpath = (struct mfs_ioc_rpath *)malloc(sizeof(struct mfs_ioc_rpath) + 1024); + + if (!rpath) { + pr_err("malloc for path failed\n"); + return -1; + } + rpath->max = 1024; + ret = ioctl(fd, MFS_IOC_RPATH, (unsigned long)rpath); + if (ret) { + free(rpath); + perror("ioctl failed"); + return -1; + } + free(rpath); + + done.id = msg->id; + done.ret = 0; + ret = ioctl(fd, MFS_IOC_DONE, (unsigned long)&done); + if (ret) + perror("failed to ioctl MFS_IOC_DONE"); + + return ret; +} + +static int process_read(struct mfs_msg *msg) +{ + int ret; + + if (mfs_mode == MFS_MODE_REMOTE) + ret = process_remote_read(msg); + else if (mfs_mode == MFS_MODE_LOCAL) + ret = process_local_read(msg); + else + ret = -EINVAL; + return ret; +} + +static int process_req(int fd) +{ + char buf[1024]; + struct mfs_msg *msg; + int ret; + + memset(buf, 0, sizeof(buf)); + ret = read(fd, buf, sizeof(buf)); + if (ret <= 0) { + if (ret < 0) + pr_err("read failed, ret:%d\n", ret); + return -1; + } + + msg = (struct mfs_msg *)buf; + if (ret != msg->len) { + pr_err("invalid message length, read:%d, need:%d\n", ret, msg->len); + return -1; + } + if (msg->opcode == MFS_OP_READ || msg->opcode == MFS_OP_FAULT || + msg->opcode == MFS_OP_FAROUND) { + return process_read(msg); + } + pr_err("invalid opcode:%d\n", msg->opcode); + return -1; +} + +static void ioctl_mfs_mode(int fd) +{ + struct mfs_ioc_fsinfo fsinfo = {0}; + int ret; + + ret = ioctl(fd, MFS_IOC_FSINFO, (unsigned long)&fsinfo); + if (ret < 0) { + perror("failed to ioctl mfs_ioc_fsinfo"); + close(fd); + exit(-1); + } + + mfs_mode = fsinfo.mode; +} + +int main(int argc, char *argv[]) +{ + struct pollfd pfd; + struct statfs buf; + char *mountpoint; + char *parent; + char devname[10]; + int fd, ret; + + if (argc != 3) { + printf("./mfsd ${mfs_mountpoint} {data_dir}\n"); + return -1; + } + mountpoint = argv[1]; + parent = argv[2]; + + ret = statfs(mountpoint, &buf); + if (ret) { + pr_err("statfs %s failed\n", mountpoint); + return -1; + } + if (buf.f_type != MFS_SUPER_MAGIC) { + pr_err("fstype(%lx) is invalid, please check the mountpoint\n", buf.f_type); + return -1; + } + + sprintf(devname, "/dev/mfs%ld", buf.f_spare[0]); + fd = open(devname, O_RDWR); + if (fd < 0) { + pr_err("open %s failed\n", devname); + return -1; + } + + ioctl_mfs_mode(fd); + pfd.fd = fd; + pfd.events = POLLIN; + + ret = get_files(parent); + if (ret < 0) + return -1; + + while (1) { + ret = poll(&pfd, 1, -1); + if (ret < 0) { + pr_err("poll failed\n"); + return -1; + } + + if (ret == 0 || !(pfd.revents & POLLIN)) { + pr_err("poll event error, ret:%d, revents:%x\n", ret, pfd.revents); + continue; + } + + if (process_req(fd) == -1) + pr_err("process req failed, errcode:%d\n", errno); + } + return 0; +} -- 2.25.1

2 1

[PATCH OLK-6.6 0/3] cve-2025-40300-r
by Bowen You 21 Nov '25

21 Nov '25

fix cve 2025 40300 Pawan Gupta (3): x86/vmscape: Add conditional IBPB mitigation x86/vmscape: Enumerate VMSCAPE bug x86/vmscape: Enable the mitigation .../ABI/testing/sysfs-devices-system-cpu | 1 + .../admin-guide/kernel-parameters.txt | 11 +++ arch/x86/Kconfig | 8 ++ arch/x86/include/asm/cpufeatures.h | 2 + arch/x86/include/asm/entry-common.h | 7 ++ arch/x86/include/asm/nospec-branch.h | 2 + arch/x86/kernel/cpu/bugs.c | 86 +++++++++++++++++++ arch/x86/kernel/cpu/common.c | 58 +++++++++---- arch/x86/kvm/x86.c | 9 ++ drivers/base/cpu.c | 3 + include/linux/cpu.h | 1 + 11 files changed, 170 insertions(+), 18 deletions(-) -- 2.34.1

2 4

[PATCH OLK-6.6 0/2] Fix CVE-2025-39810 fix CVE-2025-39810
by Zhao Yipeng 21 Nov '25

21 Nov '25

Michael Chan (1): [Backport] bnxt_en: Fix possible crash after creating sw mqprio TCs Sreekanth Reddy (1): [Backport] bnxt_en: Fix memory corruption when FW resources change during ifdown drivers/net/ethernet/broadcom/bnxt/bnxt.c | 34 ++++++++++++++----- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 + drivers/net/ethernet/broadcom/bnxt/bnxt_dcb.c | 2 +- .../net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 4 +-- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 2 +- 5 files changed, 30 insertions(+), 13 deletions(-) -- 2.34.1

2 3

[openeuler:OLK-6.6 3297/3297] mm/kasan/shadow.c:90: undefined reference to `__memcpy_mc'
by kernel test robot 21 Nov '25

21 Nov '25

Hi Tong, FYI, the error/warning still remains. tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 5427a901f0549ec1c5dbf22e5029ae8ecf32077e commit: b991780c836ceb9a479c6c6e385e914b487e353a [3297/3297] arm64: introduce copy_mc_to_kernel() implementation config: arm64-randconfig-004-20251121 (https://download.01.org/0day-ci/archive/20251121/202511211332.9jZLwiBl-lkp@…) compiler: aarch64-linux-gcc (GCC) 10.5.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251121/202511211332.9jZLwiBl-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511211332.9jZLwiBl-lkp@intel.com/ All errors (new ones prefixed by >>): aarch64-linux-ld: Unexpected GOT/PLT entries detected! aarch64-linux-ld: Unexpected run-time procedure linkages detected! aarch64-linux-ld: mm/kasan/shadow.o: in function `memcpy_mc': >> mm/kasan/shadow.c:90: undefined reference to `__memcpy_mc' vim +90 mm/kasan/shadow.c 81 82 #ifdef __HAVE_ARCH_MEMCPY_MC 83 #undef memcpy_mc 84 int memcpy_mc(void *dest, const void *src, size_t len) 85 { 86 if (!kasan_check_range(src, len, false, _RET_IP_) || 87 !kasan_check_range(dest, len, true, _RET_IP_)) 88 return (int)len; 89 > 90 return __memcpy_mc(dest, src, len); 91 } 92 #endif 93 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 0/3] cve-2025-40300-1
by Bowen You 21 Nov '25

21 Nov '25

*** BLURB HERE *** Pawan Gupta (3): x86/vmscape: Add conditional IBPB mitigation x86/vmscape: Enumerate VMSCAPE bug x86/vmscape: Enable the mitigation .../ABI/testing/sysfs-devices-system-cpu | 1 + .../admin-guide/kernel-parameters.txt | 11 +++ arch/x86/Kconfig | 8 ++ arch/x86/include/asm/cpufeatures.h | 2 + arch/x86/include/asm/entry-common.h | 7 ++ arch/x86/include/asm/nospec-branch.h | 2 + arch/x86/kernel/cpu/bugs.c | 86 +++++++++++++++++++ arch/x86/kernel/cpu/common.c | 58 +++++++++---- arch/x86/kvm/x86.c | 9 ++ drivers/base/cpu.c | 3 + include/linux/cpu.h | 1 + 11 files changed, 170 insertions(+), 18 deletions(-) -- 2.34.1

2 4

[openeuler:OLK-6.6 3297/3297] drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:779:41: error: invalid use of undefined type 'struct acpi_device'
by kernel test robot 21 Nov '25

21 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 7fb5c993b2b055db83a6c5eb3cf23051f0d62b43 commit: 5d01c9ec4f3b95b0629a38d936f69bc05e494cc9 [3297/3297] pinctrl: Zhaoxin: Add KH-50000 support config: x86_64-buildonly-randconfig-003-20251121 (https://download.01.org/0day-ci/archive/20251121/202511211110.IldThlOV-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251121/202511211110.IldThlOV-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511211110.IldThlOV-lkp@intel.com/ All errors (new ones prefixed by >>): drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c: In function 'zhaoxin_gpio_set_gpio_mode_and_pull': drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:123:13: warning: variable 'value_back' set but not used [-Wunused-but-set-variable] 123 | u16 value_back = 0; | ^~~~~~~~~~ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c: In function 'zhaoxin_gpio_get': drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:249:13: warning: variable 'pin' set but not used [-Wunused-but-set-variable] 249 | int pin; | ^~~ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c: In function 'zhaoxin_gpio_set': drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:270:13: warning: variable 'pin' set but not used [-Wunused-but-set-variable] 270 | int pin; | ^~~ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c: In function 'zhaoxin_gpio_irq_ack': drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:330:13: warning: variable 'base_offset' set but not used [-Wunused-but-set-variable] 330 | int base_offset = 0; | ^~~~~~~~~~~ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c: In function 'zhaoxin_gpio_irq_mask_unmask': drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:363:13: warning: variable 'base_offset' set but not used [-Wunused-but-set-variable] 363 | int base_offset = 0; | ^~~~~~~~~~~ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c: In function 'zhaoxin_gpio_irq_type': drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:487:13: warning: variable 'test_mask' set but not used [-Wunused-but-set-variable] 487 | u16 test_mask; | ^~~~~~~~~ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c: In function 'zhaoxin_pinctrl_get_soc_data': >> drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:779:41: error: invalid use of undefined type 'struct acpi_device' 779 | if (!strcmp(adev->pnp.unique_id, table[i]->uid)) { | ^~ vim +779 drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c 996e18349e58a3 leoliu-oc 2024-02-04 765 996e18349e58a3 leoliu-oc 2024-02-04 766 const struct zhaoxin_pinctrl_soc_data *zhaoxin_pinctrl_get_soc_data(struct platform_device *pdev) 996e18349e58a3 leoliu-oc 2024-02-04 767 { 996e18349e58a3 leoliu-oc 2024-02-04 768 const struct zhaoxin_pinctrl_soc_data *data = NULL; 996e18349e58a3 leoliu-oc 2024-02-04 769 const struct zhaoxin_pinctrl_soc_data **table; 996e18349e58a3 leoliu-oc 2024-02-04 770 struct acpi_device *adev; 996e18349e58a3 leoliu-oc 2024-02-04 771 unsigned int i; 996e18349e58a3 leoliu-oc 2024-02-04 772 996e18349e58a3 leoliu-oc 2024-02-04 773 adev = ACPI_COMPANION(&pdev->dev); 996e18349e58a3 leoliu-oc 2024-02-04 774 if (adev) { 996e18349e58a3 leoliu-oc 2024-02-04 775 const void *match = device_get_match_data(&pdev->dev); 996e18349e58a3 leoliu-oc 2024-02-04 776 996e18349e58a3 leoliu-oc 2024-02-04 777 table = (const struct zhaoxin_pinctrl_soc_data **)match; 996e18349e58a3 leoliu-oc 2024-02-04 778 for (i = 0; table[i]; i++) { 996e18349e58a3 leoliu-oc 2024-02-04 @779 if (!strcmp(adev->pnp.unique_id, table[i]->uid)) { 996e18349e58a3 leoliu-oc 2024-02-04 780 data = table[i]; 996e18349e58a3 leoliu-oc 2024-02-04 781 break; 996e18349e58a3 leoliu-oc 2024-02-04 782 } 996e18349e58a3 leoliu-oc 2024-02-04 783 } 996e18349e58a3 leoliu-oc 2024-02-04 784 } else { 996e18349e58a3 leoliu-oc 2024-02-04 785 const struct platform_device_id *id; 996e18349e58a3 leoliu-oc 2024-02-04 786 996e18349e58a3 leoliu-oc 2024-02-04 787 id = platform_get_device_id(pdev); 996e18349e58a3 leoliu-oc 2024-02-04 788 if (!id) 996e18349e58a3 leoliu-oc 2024-02-04 789 return ERR_PTR(-ENODEV); 996e18349e58a3 leoliu-oc 2024-02-04 790 996e18349e58a3 leoliu-oc 2024-02-04 791 table = (const struct zhaoxin_pinctrl_soc_data **)id->driver_data; 996e18349e58a3 leoliu-oc 2024-02-04 792 data = table[pdev->id]; 996e18349e58a3 leoliu-oc 2024-02-04 793 } 996e18349e58a3 leoliu-oc 2024-02-04 794 996e18349e58a3 leoliu-oc 2024-02-04 795 return data ?: ERR_PTR(-ENODATA); 996e18349e58a3 leoliu-oc 2024-02-04 796 } 996e18349e58a3 leoliu-oc 2024-02-04 797 EXPORT_SYMBOL_GPL(zhaoxin_pinctrl_get_soc_data); 996e18349e58a3 leoliu-oc 2024-02-04 798 :::::: The code at line 779 was first introduced by commit :::::: 996e18349e58a3ace519f9c0f32f4e62fc46ec2c Add support Zhaoxin GPIO pinctrl :::::: TO: leoliu-oc <leoliu-oc(a)zhaoxin.com> :::::: CC: leoliu-oc <leoliu-oc(a)zhaoxin.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-5.10 0/2] Fix CVE-2025-40160
by Wupeng Ma 21 Nov '25

21 Nov '25

Fix CVE-2025-40160. Jason Andryuk (2): xen/events: Cleanup find_virq() return codes xen/events: Return -EEXIST for bound VIRQs drivers/xen/events/events_base.c | 24 +++++++++++++++++------- 1 file changed, 17 insertions(+), 7 deletions(-) -- 2.43.0

2 3

[PATCH OLK-5.10] sbitmap: fix infinite loop caused by negative wait_cnt
by Li Lingfeng 21 Nov '25

21 Nov '25

hulk inclusion category: bugfix bugzilla: http://hulk.rnd.huawei.com/issue/info/34955 -------------------------------- A race condition in sbitmap_queue_wake_up() can cause an infinite loop when multiple CPUs concurrently decrement the same wait_cnt, resulting in a negative value that still satisfies the original condition check. The race scenario: CPU20 (in ioctl context): - Calls __sbq_wake_up() and selects ws based on wake_index CPU3 (in softirq): - Concurrently selects the same ws (wake_index unchanged) - Decrements wait_cnt from 1 to 0 CPU20 (interrupted by softirq): - Selects the same ws again (wake_index still unchanged) - Decrements wait_cnt from 0 to -1 - Returns true because (wait_cnt < 0) - Enters infinite loop in while(__sbq_wake_up(sbq)) The root cause is that sbq_wake_ptr() returns the wait_state when atomic_read(&ws->wait_cnt) is non-zero, which includes negative values. Since wake_index is never updated when the same ws is repeatedly selected, multiple CPUs can race on the same wait_state, driving wait_cnt increasingly negative and triggering the infinite loop condition. Fix this by explicitly checking that wait_cnt is positive (> 0) in sbq_wake_ptr(), preventing selection of wait_states with negative counts and breaking the infinite loop condition. Fixes: 084cd94d0b2a ("sbitmap: fix possible io hung due to lost wakeup") Signed-off-by: Li Lingfeng <lilingfeng3(a)huawei.com> --- lib/sbitmap.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/sbitmap.c b/lib/sbitmap.c index 9fe2aebc13da..dbe4e3bc6b33 100644 --- a/lib/sbitmap.c +++ b/lib/sbitmap.c @@ -554,7 +554,7 @@ static struct sbq_wait_state *sbq_wake_ptr(struct sbitmap_queue *sbq) for (i = 0; i < SBQ_WAIT_QUEUES; i++) { struct sbq_wait_state *ws = &sbq->ws[wake_index]; - if (waitqueue_active(&ws->wait) && atomic_read(&ws->wait_cnt)) { + if (waitqueue_active(&ws->wait) && (atomic_read(&ws->wait_cnt) > 0)) { if (wake_index != atomic_read(&sbq->wake_index)) atomic_set(&sbq->wake_index, wake_index); return ws; -- 2.46.1

2 1

[openeuler:OLK-5.10 3296/3296] io_uring/io_uring.o: warning: objtool: io_kiocb_start_write()+0xdb: unreachable instruction
by kernel test robot 21 Nov '25

21 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-5.10 head: 879312ab2886aacda164b2417bbcd9782e18773d commit: 1aecd25937426bf0aeb9f5bcabdae370eed2dae6 [3296/3296] io_uring/rw: fix missing NOWAIT check for O_DIRECT start write config: x86_64-buildonly-randconfig-006-20251121 (https://download.01.org/0day-ci/archive/20251121/202511210630.FXaljEIH-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 9e9fe08b16ea2c4d9867fb4974edf2a3776d6ece) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251121/202511210630.FXaljEIH-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511210630.FXaljEIH-lkp@intel.com/ All warnings (new ones prefixed by >>): >> io_uring/io_uring.o: warning: objtool: io_kiocb_start_write()+0xdb: unreachable instruction -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3297/3297] versioncheck: ./drivers/ub/urma/ubcore/ubcm/ub_cm.c: 16 linux/version.h not needed.
by kernel test robot 21 Nov '25

21 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: c349580fcd9fbdf61e88be41b45051d3326d2a79 commit: e34a52d4eed8912f6dfdc7d68152c45f7a071ca8 [3297/3297] ubcore: implement ubcore connection management and messaging feature. reproduce: (https://download.01.org/0day-ci/archive/20251120/202511201819.SUr4K1Gq-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511201819.SUr4K1Gq-lkp@intel.com/ versioncheck warnings: (new ones prefixed by >>) INFO PATH=/opt/cross/rustc-1.88.0-bindgen-0.72.0/cargo/bin:/opt/cross/clang-20/bin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin /usr/bin/timeout -k 100 3h /usr/bin/make KCFLAGS= -fno-crash-diagnostics -Wno-error=return-type -Wreturn-type -funsigned-char -Wundef W=1 --keep-going LLVM=1 -j32 ARCH=x86_64 versioncheck find ./* $ -name SCCS -o -name BitKeeper -o -name .svn -o -name CVS -o -name .pc -o -name .hg -o -name .git $ -prune -o \ -name '*.[hcS]' -type f -print | sort \ | xargs perl -w ./scripts/checkversion.pl ./drivers/accessibility/speakup/genmap.c: 13 linux/version.h not needed. ./drivers/accessibility/speakup/makemapdata.c: 13 linux/version.h not needed. ./drivers/char/ipmi/ipmi_si_ls2k500.c: 19 linux/version.h not needed. ./drivers/crypto/ccp/hygon/ccp-mdev.c: 12 linux/version.h not needed. ./drivers/crypto/ccp/hygon/hct.c: 6 linux/version.h not needed. ./drivers/crypto/ccp/hygon/tdm-dev.h: 29 linux/version.h not needed. ./drivers/crypto/montage/tsse/tsse_vuart.c: 21 linux/version.h not needed. ./drivers/crypto/sedriver/wst_se_common_type.h: 19 linux/version.h not needed. ./drivers/gpu/drm/phytium/phytium_gem.c: 9 linux/version.h not needed. ./drivers/i2c/busses/i2c-zhaoxin.c: 18 linux/version.h not needed. ./drivers/net/ethernet/3snic/sssnic/include/kernel/sss_linux_kernel.h: 13 linux/version.h not needed. ./drivers/net/ethernet/huawei/bma/edma_drv/bma_include.h: 32 linux/version.h not needed. ./drivers/net/ethernet/huawei/bma/edma_drv/bma_pci.c: 17 linux/version.h not needed. ./drivers/net/ethernet/huawei/bma/kbox_drv/kbox_include.h: 20 linux/version.h not needed. ./drivers/net/ethernet/huawei/bma/kbox_drv/kbox_main.c: 22 linux/version.h not needed. ./drivers/net/ethernet/huawei/bma/kbox_drv/kbox_mce.c: 16 linux/version.h not needed. ./drivers/net/ethernet/huawei/bma/kbox_drv/kbox_ram_op.c: 16 linux/version.h not needed. ./drivers/net/ethernet/huawei/hinic/ossl_knl.h: 22 linux/version.h not needed. ./drivers/net/ethernet/huawei/hinic3/bond/hinic3_bond.c: 12 linux/version.h not needed. ./drivers/net/ethernet/huawei/hinic3/ossl_knl_linux.h: 12 linux/version.h not needed. ./drivers/net/ethernet/linkdata/sxe/base/compat/sxe_compat.h: 16 linux/version.h not needed. ./drivers/net/ethernet/linkdata/sxevf/base/compat/sxe_compat.h: 16 linux/version.h not needed. ./drivers/net/ethernet/mucse/rnpm/rnpm_common.h: 7 linux/version.h not needed. ./drivers/net/ethernet/yunsilicon/xsc/common/xsc_core.h: 26 linux/version.h not needed. ./drivers/scsi/hisi_raid/hiraid_main.c: 9 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/linux/ps3_base.c: 11 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/linux/ps3_cli.c: 14 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/linux/ps3_driver_log.c: 3 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/ps3_device_manager.h: 9 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/ps3_device_manager_sas.h: 6 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/ps3_qos.c: 6 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/ps3_rb_tree.h: 7 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/ps3_sas_transport.h: 9 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/ps3_scsi_cmd_err.c: 9 linux/version.h not needed. ./drivers/scsi/sssraid/sssraid_fw.c: 6 linux/version.h not needed. ./drivers/scsi/sssraid/sssraid_os.c: 6 linux/version.h not needed. ./drivers/staging/media/atomisp/include/linux/atomisp.h: 23 linux/version.h not needed. ./drivers/ub/cdma/cdma_mmap.c: 6 linux/version.h not needed. ./drivers/ub/urma/ubcore/net/ubcore_sock.c: 23 linux/version.h not needed. >> ./drivers/ub/urma/ubcore/ubcm/ub_cm.c: 16 linux/version.h not needed. >> ./drivers/ub/urma/ubcore/ubcm/ubcm_genl.c: 14 linux/version.h not needed. ./drivers/ub/urma/ubcore/ubcore_cdev_file.c: 14 linux/version.h not needed. ./drivers/ub/urma/ubcore/ubcore_device.c: 13 linux/version.h not needed. ./drivers/ub/urma/ubcore/ubcore_genl.c: 17 linux/version.h not needed. ./drivers/ub/urma/ubcore/ubcore_genl_admin.c: 11 linux/version.h not needed. ./fs/proc/etmem_scan.c: 13 linux/version.h not needed. ./samples/bpf/spintest.bpf.c: 8 linux/version.h not needed. ./samples/trace_events/trace_custom_sched.c: 11 linux/version.h not needed. ./sound/soc/codecs/cs42l42.c: 14 linux/version.h not needed. ./tools/lib/bpf/bpf_helpers.h: 402: need linux/version.h ./tools/testing/selftests/bpf/progs/dev_cgroup.c: 9 linux/version.h not needed. ./tools/testing/selftests/bpf/progs/netcnt_prog.c: 3 linux/version.h not needed. ./tools/testing/selftests/bpf/progs/test_map_lock.c: 4 linux/version.h not needed. ./tools/testing/selftests/bpf/progs/test_send_signal_kern.c: 4 linux/version.h not needed. ./tools/testing/selftests/bpf/progs/test_spin_lock.c: 4 linux/version.h not needed. ./tools/testing/selftests/bpf/progs/test_tcp_estats.c: 37 linux/version.h not needed. ./tools/testing/selftests/wireguard/qemu/init.c: 27 linux/version.h not needed. -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3297/3297] versioncheck: ./drivers/ub/urma/ubagg/ubagg_main.c: 14 linux/version.h not needed.
by kernel test robot 21 Nov '25

21 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: c349580fcd9fbdf61e88be41b45051d3326d2a79 commit: 1fe6d02bf7ba2fb5c30d3c4bed50f127243f7128 [3297/3297] urma: add ubagg ioctl interface and topology management reproduce: (https://download.01.org/0day-ci/archive/20251120/202511201821.QmmLLJu0-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511201821.QmmLLJu0-lkp@intel.com/ versioncheck warnings: (new ones prefixed by >>) INFO PATH=/opt/cross/rustc-1.88.0-bindgen-0.72.0/cargo/bin:/opt/cross/clang-20/bin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin /usr/bin/timeout -k 100 3h /usr/bin/make KCFLAGS= -fno-crash-diagnostics -Wno-error=return-type -Wreturn-type -funsigned-char -Wundef W=1 --keep-going LLVM=1 -j32 ARCH=x86_64 versioncheck find ./* $ -name SCCS -o -name BitKeeper -o -name .svn -o -name CVS -o -name .pc -o -name .hg -o -name .git $ -prune -o \ -name '*.[hcS]' -type f -print | sort \ | xargs perl -w ./scripts/checkversion.pl ./drivers/accessibility/speakup/genmap.c: 13 linux/version.h not needed. ./drivers/accessibility/speakup/makemapdata.c: 13 linux/version.h not needed. ./drivers/char/ipmi/ipmi_si_ls2k500.c: 19 linux/version.h not needed. ./drivers/crypto/ccp/hygon/ccp-mdev.c: 12 linux/version.h not needed. ./drivers/crypto/ccp/hygon/hct.c: 6 linux/version.h not needed. ./drivers/crypto/ccp/hygon/tdm-dev.h: 29 linux/version.h not needed. ./drivers/crypto/montage/tsse/tsse_vuart.c: 21 linux/version.h not needed. ./drivers/crypto/sedriver/wst_se_common_type.h: 19 linux/version.h not needed. ./drivers/gpu/drm/phytium/phytium_gem.c: 9 linux/version.h not needed. ./drivers/i2c/busses/i2c-zhaoxin.c: 18 linux/version.h not needed. ./drivers/net/ethernet/3snic/sssnic/include/kernel/sss_linux_kernel.h: 13 linux/version.h not needed. ./drivers/net/ethernet/huawei/bma/edma_drv/bma_include.h: 32 linux/version.h not needed. ./drivers/net/ethernet/huawei/bma/edma_drv/bma_pci.c: 17 linux/version.h not needed. ./drivers/net/ethernet/huawei/bma/kbox_drv/kbox_include.h: 20 linux/version.h not needed. ./drivers/net/ethernet/huawei/bma/kbox_drv/kbox_main.c: 22 linux/version.h not needed. ./drivers/net/ethernet/huawei/bma/kbox_drv/kbox_mce.c: 16 linux/version.h not needed. ./drivers/net/ethernet/huawei/bma/kbox_drv/kbox_ram_op.c: 16 linux/version.h not needed. ./drivers/net/ethernet/huawei/hinic/ossl_knl.h: 22 linux/version.h not needed. ./drivers/net/ethernet/huawei/hinic3/bond/hinic3_bond.c: 12 linux/version.h not needed. ./drivers/net/ethernet/huawei/hinic3/ossl_knl_linux.h: 12 linux/version.h not needed. ./drivers/net/ethernet/linkdata/sxe/base/compat/sxe_compat.h: 16 linux/version.h not needed. ./drivers/net/ethernet/linkdata/sxevf/base/compat/sxe_compat.h: 16 linux/version.h not needed. ./drivers/net/ethernet/mucse/rnpm/rnpm_common.h: 7 linux/version.h not needed. ./drivers/net/ethernet/yunsilicon/xsc/common/xsc_core.h: 26 linux/version.h not needed. ./drivers/scsi/hisi_raid/hiraid_main.c: 9 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/linux/ps3_base.c: 11 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/linux/ps3_cli.c: 14 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/linux/ps3_driver_log.c: 3 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/ps3_device_manager.h: 9 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/ps3_device_manager_sas.h: 6 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/ps3_qos.c: 6 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/ps3_rb_tree.h: 7 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/ps3_sas_transport.h: 9 linux/version.h not needed. ./drivers/scsi/linkdata/ps3stor/ps3_scsi_cmd_err.c: 9 linux/version.h not needed. ./drivers/scsi/sssraid/sssraid_fw.c: 6 linux/version.h not needed. ./drivers/scsi/sssraid/sssraid_os.c: 6 linux/version.h not needed. ./drivers/staging/media/atomisp/include/linux/atomisp.h: 23 linux/version.h not needed. ./drivers/ub/cdma/cdma_mmap.c: 6 linux/version.h not needed. >> ./drivers/ub/urma/ubagg/ubagg_main.c: 14 linux/version.h not needed. ./drivers/ub/urma/ubcore/net/ubcore_sock.c: 23 linux/version.h not needed. ./drivers/ub/urma/ubcore/ubcore_cdev_file.c: 14 linux/version.h not needed. ./drivers/ub/urma/ubcore/ubcore_device.c: 13 linux/version.h not needed. ./drivers/ub/urma/ubcore/ubcore_genl.c: 17 linux/version.h not needed. ./drivers/ub/urma/ubcore/ubcore_genl_admin.c: 11 linux/version.h not needed. ./fs/proc/etmem_scan.c: 13 linux/version.h not needed. ./samples/bpf/spintest.bpf.c: 8 linux/version.h not needed. ./samples/trace_events/trace_custom_sched.c: 11 linux/version.h not needed. ./sound/soc/codecs/cs42l42.c: 14 linux/version.h not needed. ./tools/lib/bpf/bpf_helpers.h: 402: need linux/version.h ./tools/testing/selftests/bpf/progs/dev_cgroup.c: 9 linux/version.h not needed. ./tools/testing/selftests/bpf/progs/netcnt_prog.c: 3 linux/version.h not needed. ./tools/testing/selftests/bpf/progs/test_map_lock.c: 4 linux/version.h not needed. ./tools/testing/selftests/bpf/progs/test_send_signal_kern.c: 4 linux/version.h not needed. ./tools/testing/selftests/bpf/progs/test_spin_lock.c: 4 linux/version.h not needed. ./tools/testing/selftests/bpf/progs/test_tcp_estats.c: 37 linux/version.h not needed. ./tools/testing/selftests/wireguard/qemu/init.c: 27 linux/version.h not needed. -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] crash: fix crashkernel resource shrink
by Tengda Wu 20 Nov '25

20 Nov '25

From: Sourabh Jain <sourabhjain(a)linux.ibm.com> mainline inclusion from mainline-v6.18-rc6 commit 00fbff75c5acb4755f06f08bd1071879c63940c5 category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ID7OIL Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- When crashkernel is configured with a high reservation, shrinking its value below the low crashkernel reservation causes two issues: 1. Invalid crashkernel resource objects 2. Kernel crash if crashkernel shrinking is done twice For example, with crashkernel=200M,high, the kernel reserves 200MB of high memory and some default low memory (say 256MB). The reservation appears as: cat /proc/iomem | grep -i crash af000000-beffffff : Crash kernel 433000000-43f7fffff : Crash kernel If crashkernel is then shrunk to 50MB (echo 52428800 > /sys/kernel/kexec_crash_size), /proc/iomem still shows 256MB reserved: af000000-beffffff : Crash kernel Instead, it should show 50MB: af000000-b21fffff : Crash kernel Further shrinking crashkernel to 40MB causes a kernel crash with the following trace (x86): BUG: kernel NULL pointer dereference, address: 0000000000000038 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI <snip...> Call Trace: <TASK> ? __die_body.cold+0x19/0x27 ? page_fault_oops+0x15a/0x2f0 ? search_module_extables+0x19/0x60 ? search_bpf_extables+0x5f/0x80 ? exc_page_fault+0x7e/0x180 ? asm_exc_page_fault+0x26/0x30 ? __release_resource+0xd/0xb0 release_resource+0x26/0x40 __crash_shrink_memory+0xe5/0x110 crash_shrink_memory+0x12a/0x190 kexec_crash_size_store+0x41/0x80 kernfs_fop_write_iter+0x141/0x1f0 vfs_write+0x294/0x460 ksys_write+0x6d/0xf0 <snip...> This happens because __crash_shrink_memory()/kernel/crash_core.c incorrectly updates the crashk_res resource object even when crashk_low_res should be updated. Fix this by ensuring the correct crashkernel resource object is updated when shrinking crashkernel memory. Link: https://lkml.kernel.org/r/20251101193741.289252-1-sourabhjain@linux.ibm.com Fixes: 16c6006af4d4 ("kexec: enable kexec_crash_size to support two crash kernel regions") Signed-off-by: Sourabh Jain <sourabhjain(a)linux.ibm.com> Acked-by: Baoquan He <bhe(a)redhat.com> Cc: Zhen Lei <thunder.leizhen(a)huawei.com> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Conflicts: kernel/kexec_core.c [The commit 02aff8480533 ("crash: split crash dumping code out from kexec_core.c") for reorgnizing code is not merged yet] Signed-off-by: Tengda Wu <wutengda2(a)huawei.com> --- kernel/kexec_core.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/kernel/kexec_core.c b/kernel/kexec_core.c index b7246b7171b7..88024cb22a9d 100644 --- a/kernel/kexec_core.c +++ b/kernel/kexec_core.c @@ -1132,7 +1132,7 @@ static int __crash_shrink_memory(struct resource *old_res, old_res->start = 0; old_res->end = 0; } else { - crashk_res.end = ram_res->start - 1; + old_res->end = ram_res->start - 1; } crash_free_reserved_phys_range(ram_res->start, ram_res->end); -- 2.34.1

2 1

[PATCH OLK-6.6 0/7] xcall2.0: bugfix for prefetch ko
by Xinyu Zheng 20 Nov '25

20 Nov '25

Xinyu Zheng (7): xcall2.0: fix value name typos in __do_sys_epoll_pwait xcall2.0: prefetch: keep prefetch module name same with file name xcall2.0: prefetch: fix memory leak when release prefetch item through mmu notifier xcall2.0: add a per xcall_area mmu notifier for kernel module to do release callback xcall2.0: prefetch: set MAX support prefetch fd number to 1024 xcall2.0: prefetch: epoll_ctl no need to occupy a file refcount xcall2.0: add xcall_subdir_create and xcall_proc_create arch/arm64/include/asm/xcall.h | 2 + arch/arm64/kernel/xcall/core.c | 3 + arch/arm64/kernel/xcall/proc.c | 17 ++++- drivers/staging/xcall/prefetch.c | 109 +++++++++++++++++++------------ include/linux/xcall.h | 4 ++ 5 files changed, 90 insertions(+), 45 deletions(-) -- 2.34.1

2 8

[OLK-6.6 0/7] xcall2.0: bugfix for prefetch ko
by Xinyu Zheng 20 Nov '25

20 Nov '25

Xinyu Zheng (7): xcall2.0: fix value name typos in __do_sys_epoll_pwait xcall2.0: prefetch: keep prefetch module name same with file name xcall2.0: prefetch: fix memory leak when release prefetch item through mmu notifier xcall2.0: add a per xcall_area mmu notifier for kernel module to do release callback xcall2.0: prefetch: set MAX support prefetch fd number to 1024 xcall2.0: prefetch: epoll_ctl no need to occupy a file refcount xcall2.0: add xcall_subdir_create and xcall_proc_create arch/arm64/include/asm/xcall.h | 2 + arch/arm64/kernel/xcall/core.c | 3 + arch/arm64/kernel/xcall/proc.c | 17 ++++- drivers/staging/xcall/prefetch.c | 109 +++++++++++++++++++------------ include/linux/xcall.h | 4 ++ 5 files changed, 90 insertions(+), 45 deletions(-) -- 2.34.1

1 7

[PATCH OLK-6.6] ext4: guard against EA inode refcount underflow in xattr update
by Zizhi Wo 20 Nov '25

20 Nov '25

From: Ahmet Eray Karadag <eraykrdg1(a)gmail.com> stable inclusion from stable-v6.6.113 commit 79ea7f3e11effe1bd9e753172981d9029133a278 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BVW CVE: CVE-2025-40190 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 57295e835408d8d425bef58da5253465db3d6888 upstream. syzkaller found a path where ext4_xattr_inode_update_ref() reads an EA inode refcount that is already <= 0 and then applies ref_change (often -1). That lets the refcount underflow and we proceed with a bogus value, triggering errors like: EXT4-fs error: EA inode <n> ref underflow: ref_count=-1 ref_change=-1 EXT4-fs warning: ea_inode dec ref err=-117 Make the invariant explicit: if the current refcount is non-positive, treat this as on-disk corruption, emit ext4_error_inode(), and fail the operation with -EFSCORRUPTED instead of updating the refcount. Delete the WARN_ONCE() as negative refcounts are now impossible; keep error reporting in ext4_error_inode(). This prevents the underflow and the follow-on orphan/cleanup churn. Reported-by: syzbot+0be4f339a8218d2a5bb1(a)syzkaller.appspotmail.com Fixes: https://syzbot.org/bug?extid=0be4f339a8218d2a5bb1 Cc: stable(a)kernel.org Co-developed-by: Albin Babu Varghese <albinbabuvarghese20(a)gmail.com> Signed-off-by: Albin Babu Varghese <albinbabuvarghese20(a)gmail.com> Signed-off-by: Ahmet Eray Karadag <eraykrdg1(a)gmail.com> Message-ID: <20250920021342.45575-1-eraykrdg1(a)gmail.com> Signed-off-by: Theodore Ts'o <tytso(a)mit.edu> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Zizhi Wo <wozizhi(a)huawei.com> --- fs/ext4/xattr.c | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/fs/ext4/xattr.c b/fs/ext4/xattr.c index b6bdb253ad34..6ef8820625b9 100644 --- a/fs/ext4/xattr.c +++ b/fs/ext4/xattr.c @@ -1033,7 +1033,7 @@ static int ext4_xattr_inode_update_ref(handle_t *handle, struct inode *ea_inode, int ref_change) { struct ext4_iloc iloc; - s64 ref_count; + u64 ref_count; int ret; inode_lock_nested(ea_inode, I_MUTEX_XATTR); @@ -1043,13 +1043,17 @@ static int ext4_xattr_inode_update_ref(handle_t *handle, struct inode *ea_inode, goto out; ref_count = ext4_xattr_inode_get_ref(ea_inode); + if ((ref_count == 0 && ref_change < 0) || (ref_count == U64_MAX && ref_change > 0)) { + ext4_error_inode(ea_inode, __func__, __LINE__, 0, + "EA inode %lu ref wraparound: ref_count=%lld ref_change=%d", + ea_inode->i_ino, ref_count, ref_change); + ret = -EFSCORRUPTED; + goto out; + } ref_count += ref_change; ext4_xattr_inode_set_ref(ea_inode, ref_count); if (ref_change > 0) { - WARN_ONCE(ref_count <= 0, "EA inode %lu ref_count=%lld", - ea_inode->i_ino, ref_count); - if (ref_count == 1) { WARN_ONCE(ea_inode->i_nlink, "EA inode %lu i_nlink=%u", ea_inode->i_ino, ea_inode->i_nlink); @@ -1058,9 +1062,6 @@ static int ext4_xattr_inode_update_ref(handle_t *handle, struct inode *ea_inode, ext4_orphan_del(handle, ea_inode); } } else { - WARN_ONCE(ref_count < 0, "EA inode %lu ref_count=%lld", - ea_inode->i_ino, ref_count); - if (ref_count == 0) { WARN_ONCE(ea_inode->i_nlink != 1, "EA inode %lu i_nlink=%u", -- 2.46.1

2 1

[OLK-6.6 0/7] xcall2.0: bugfix for prefetch ko
by Xinyu Zheng 20 Nov '25

20 Nov '25

*** BLURB HERE *** Xinyu Zheng (7): xcall2.0: fix value name typos in __do_sys_epoll_pwait xcall2.0: prefetch: keep prefetch module name same with file name xcall2.0: prefetch: fix memory leak when release prefetch item through mmu notifier xcall2.0: add a per xcall_area mmu notifier for kernel module to do release callback xcall2.0: prefetch: set MAX support prefetch fd number to 1024 xcall2.0: prefetch: epoll_ctl no need to occupy a file refcount xcall2.0: add xcall_subdir_create and xcall_proc_create arch/arm64/include/asm/xcall.h | 2 + arch/arm64/kernel/xcall/core.c | 3 + arch/arm64/kernel/xcall/proc.c | 17 ++++- drivers/staging/xcall/prefetch.c | 109 +++++++++++++++++++------------ include/linux/xcall.h | 4 ++ 5 files changed, 90 insertions(+), 45 deletions(-) -- 2.34.1

1 0

[PATCH OLK-6.6] ext4: detect invalid INLINE_DATA + EXTENTS flag combination
by Zizhi Wo 20 Nov '25

20 Nov '25

From: Deepanshu Kartikey <kartikey406(a)gmail.com> stable inclusion from stable-v6.6.114 commit cb6039b68efa547b676a8a10fc4618d9d1865c23 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BAP CVE: CVE-2025-40167 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 1d3ad183943b38eec2acf72a0ae98e635dc8456b upstream. syzbot reported a BUG_ON in ext4_es_cache_extent() when opening a verity file on a corrupted ext4 filesystem mounted without a journal. The issue is that the filesystem has an inode with both the INLINE_DATA and EXTENTS flags set: EXT4-fs error (device loop0): ext4_cache_extents:545: inode #15: comm syz.0.17: corrupted extent tree: lblk 0 < prev 66 Investigation revealed that the inode has both flags set: DEBUG: inode 15 - flag=1, i_inline_off=164, has_inline=1, extents_flag=1 This is an invalid combination since an inode should have either: - INLINE_DATA: data stored directly in the inode - EXTENTS: data stored in extent-mapped blocks Having both flags causes ext4_has_inline_data() to return true, skipping extent tree validation in __ext4_iget(). The unvalidated out-of-order extents then trigger a BUG_ON in ext4_es_cache_extent() due to integer underflow when calculating hole sizes. Fix this by detecting this invalid flag combination early in ext4_iget() and rejecting the corrupted inode. Cc: stable(a)kernel.org Reported-and-tested-by: syzbot+038b7bf43423e132b308(a)syzkaller.appspotmail.com Closes: https://syzkaller.appspot.com/bug?extid=038b7bf43423e132b308 Suggested-by: Zhang Yi <yi.zhang(a)huawei.com> Signed-off-by: Deepanshu Kartikey <kartikey406(a)gmail.com> Reviewed-by: Zhang Yi <yi.zhang(a)huawei.com> Message-ID: <20250930112810.315095-1-kartikey406(a)gmail.com> Signed-off-by: Theodore Ts'o <tytso(a)mit.edu> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Zizhi Wo <wozizhi(a)huawei.com> --- fs/ext4/inode.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/fs/ext4/inode.c b/fs/ext4/inode.c index 045a7213d6b6..f09c64c5c76c 100644 --- a/fs/ext4/inode.c +++ b/fs/ext4/inode.c @@ -5528,6 +5528,14 @@ struct inode *__ext4_iget(struct super_block *sb, unsigned long ino, } ei->i_flags = le32_to_cpu(raw_inode->i_flags); ext4_set_inode_flags(inode, true); + /* Detect invalid flag combination - can't have both inline data and extents */ + if (ext4_test_inode_flag(inode, EXT4_INODE_INLINE_DATA) && + ext4_test_inode_flag(inode, EXT4_INODE_EXTENTS)) { + ext4_error_inode(inode, function, line, 0, + "inode has both inline data and extents flags"); + ret = -EFSCORRUPTED; + goto bad_inode; + } inode->i_blocks = ext4_inode_blocks(raw_inode, ei); ei->i_file_acl = le32_to_cpu(raw_inode->i_file_acl_lo); if (ext4_has_feature_64bit(sb)) -- 2.46.1

2 1

[PATCH OLK-6.6] [Backport] Bluetooth: ISO: Fix possible UAF on iso_conn_free
by Chen Jinghuang 20 Nov '25

20 Nov '25

From: Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> stable inclusion from stable-v6.6.112 commit 5319145a07d8bf5b0782b25cb3115825689d42bb category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B6G CVE: CVE-2025-40141 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 9950f095d6c875dbe0c9ebfcf972ec88fdf26fc8 ] This attempt to fix similar issue to sco_conn_free where if the conn->sk is not set to NULL may lead to UAF on iso_conn_free. Fixes: ccf74f2390d6 ("Bluetooth: Add BTPROTO_ISO socket type") Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Chen Jinghuang <chenjinghuang2(a)huawei.com> --- net/bluetooth/iso.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/net/bluetooth/iso.c b/net/bluetooth/iso.c index b94d202bf374..be71082d9eaf 100644 --- a/net/bluetooth/iso.c +++ b/net/bluetooth/iso.c @@ -718,6 +718,13 @@ static void iso_sock_kill(struct sock *sk) BT_DBG("sk %p state %d", sk, sk->sk_state); + /* Sock is dead, so set conn->sk to NULL to avoid possible UAF */ + if (iso_pi(sk)->conn) { + iso_conn_lock(iso_pi(sk)->conn); + iso_pi(sk)->conn->sk = NULL; + iso_conn_unlock(iso_pi(sk)->conn); + } + /* Kill poor orphan */ bt_sock_unlink(&iso_sk_list, sk); sock_set_flag(sk, SOCK_DEAD); -- 2.34.1

2 1

[PATCH OLK-6.6 0/2] IPIV: fix bug in live migration
by Jinqian Yang 20 Nov '25

20 Nov '25

Patch#1: Change parameter from vcpu to kvm. IPIV is a per-VM feature. When checking whether IPIV is supported, it is more appropriate to use kvm as the input parameter. This change is also in preparation for the Patch#2 Patch#2: fix bug in live migration. If an environment has IPIV enabled and a VM also has IPIV enabled, when this VM is migrated to a host environment where IPIV is not enabled, the host will continuously print "vSGI trap! IPIV disabled!" This is because the destination host enabled the VM's IPIV without checking for IPIV support. Jinqian Yang (2): KVM: arm64: ipiv: Change parameter from vcpu to kvm KVM: arm64: ipiv: fix bug in live migration arch/arm64/kvm/hisilicon/hisi_virt.c | 10 +++++----- arch/arm64/kvm/hisilicon/hisi_virt.h | 4 ++-- arch/arm64/kvm/hypercalls.c | 6 +++--- arch/arm64/kvm/vgic/vgic-its.c | 4 +++- 4 files changed, 13 insertions(+), 11 deletions(-) -- 2.33.0

2 3

[PATCH OLK-6.6] crypto: rng - Ensure set_ent is always present
by Gu Bowen 20 Nov '25

20 Nov '25

From: Herbert Xu <herbert(a)gondor.apana.org.au> stable inclusion from stable-v6.6.111 commit ab172f4f42626549b02bada05f09e3f2b0cc26ec category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID5OZT CVE: CVE-2025-40109 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit c0d36727bf39bb16ef0a67ed608e279535ebf0da upstream. Ensure that set_ent is always set since only drbg provides it. Fixes: 77ebdabe8de7 ("crypto: af_alg - add extra parameters for DRBG interface") Reported-by: Yiqi Sun <sunyiqixm(a)gmail.com> Signed-off-by: Herbert Xu <herbert(a)gondor.apana.org.au> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Gu Bowen <gubowen5(a)huawei.com> --- crypto/rng.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/crypto/rng.c b/crypto/rng.c index 279dffdebf59..e462031fef68 100644 --- a/crypto/rng.c +++ b/crypto/rng.c @@ -197,6 +197,11 @@ int crypto_del_default_rng(void) EXPORT_SYMBOL_GPL(crypto_del_default_rng); #endif +static void rng_default_set_ent(struct crypto_rng *tfm, const u8 *data, + unsigned int len) +{ +} + int crypto_register_rng(struct rng_alg *alg) { struct crypto_istat_rng *istat = rng_get_stat(alg); @@ -212,6 +217,9 @@ int crypto_register_rng(struct rng_alg *alg) if (IS_ENABLED(CONFIG_CRYPTO_STATS)) memset(istat, 0, sizeof(*istat)); + if (!alg->set_ent) + alg->set_ent = rng_default_set_ent; + return crypto_register_alg(base); } EXPORT_SYMBOL_GPL(crypto_register_rng); -- 2.43.0

2 1

[PATCH OLK-6.6] KVM: arm64: Fix access_actlr() build warning
by Jinjie Ruan 20 Nov '25

20 Nov '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/release-management/issues/IBV2E4 -------------------------------- If ACTLR_XCALL_XINT not set, the following issue occurs as val is not used without ACTLR_XCALL_XINT, so fix it by moving it into CONFIG_ACTLR_XCALL_XINT controlled code. arch/arm64/kvm/sys_regs.c: In function ‘access_actlr’: arch/arm64/kvm/sys_regs.c:283:26: warning: unused variable ‘val’ [-Wunused-variable] 283 | u64 mask, shift, val; | ^~~ Fixes: bd2967e62cdf ("arm64: Fix actlr_el1 can not set problem in guest") Signed-off-by: Jinjie Ruan <ruanjinjie(a)huawei.com> --- arch/arm64/kvm/sys_regs.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/arch/arm64/kvm/sys_regs.c b/arch/arm64/kvm/sys_regs.c index 73d5102e7a10..ded8d28d10a8 100644 --- a/arch/arm64/kvm/sys_regs.c +++ b/arch/arm64/kvm/sys_regs.c @@ -280,11 +280,11 @@ static bool access_actlr(struct kvm_vcpu *vcpu, struct sys_reg_params *p, const struct sys_reg_desc *r) { - u64 mask, shift, val; + u64 mask, shift; #ifdef CONFIG_ACTLR_XCALL_XINT if (p->is_write) { - val = vcpu_read_sys_reg(vcpu, r->reg); + u64 val = vcpu_read_sys_reg(vcpu, r->reg); val &= ~(ACTLR_ELx_XCALL | ACTLR_ELx_XINT); val |= (p->regval & (ACTLR_ELx_XCALL | ACTLR_ELx_XINT)); vcpu_write_sys_reg(vcpu, val, r->reg); -- 2.34.1

2 1

[PATCH OLK-6.6] dm: fix NULL pointer dereference in __dm_suspend()
by Li Lingfeng 20 Nov '25

20 Nov '25

From: Zheng Qixing <zhengqixing(a)huawei.com> mainline inclusion from mainline-v6.18-rc1 commit 8d33a030c566e1f105cd5bf27f37940b6367f3be category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B5Z CVE: CVE-2025-40134 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… -------------------------------- There is a race condition between dm device suspend and table load that can lead to null pointer dereference. The issue occurs when suspend is invoked before table load completes: BUG: kernel NULL pointer dereference, address: 0000000000000054 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 6 PID: 6798 Comm: dmsetup Not tainted 6.6.0-g7e52f5f0ca9b #62 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014 RIP: 0010:blk_mq_wait_quiesce_done+0x0/0x50 Call Trace: <TASK> blk_mq_quiesce_queue+0x2c/0x50 dm_stop_queue+0xd/0x20 __dm_suspend+0x130/0x330 dm_suspend+0x11a/0x180 dev_suspend+0x27e/0x560 ctl_ioctl+0x4cf/0x850 dm_ctl_ioctl+0xd/0x20 vfs_ioctl+0x1d/0x50 __se_sys_ioctl+0x9b/0xc0 __x64_sys_ioctl+0x19/0x30 x64_sys_call+0x2c4a/0x4620 do_syscall_64+0x9e/0x1b0 The issue can be triggered as below: T1 T2 dm_suspend table_load __dm_suspend dm_setup_md_queue dm_mq_init_request_queue blk_mq_init_allocated_queue => q->mq_ops = set->ops; (1) dm_stop_queue / dm_wait_for_completion => q->tag_set NULL pointer! (2) => q->tag_set = set; (3) Fix this by checking if a valid table (map) exists before performing request-based suspend and waiting for target I/O. When map is NULL, skip these table-dependent suspend steps. Even when map is NULL, no I/O can reach any target because there is no table loaded; I/O submitted in this state will fail early in the DM layer. Skipping the table-dependent suspend logic in this case is safe and avoids NULL pointer dereferences. Fixes: c4576aed8d85 ("dm: fix request-based dm's use of dm_wait_for_completion") Cc: stable(a)vger.kernel.org Signed-off-by: Zheng Qixing <zhengqixing(a)huawei.com> Signed-off-by: Mikulas Patocka <mpatocka(a)redhat.com> Conflicts: drivers/md/dm.c [Commit 7f597c2cdb9d ("dm: fix queue start/stop imbalance under suspend/load/resume races") add setting of DMF_QUEUE_STOPPED in __dm_suspend.] Signed-off-by: Li Lingfeng <lilingfeng3(a)huawei.com> --- drivers/md/dm.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/drivers/md/dm.c b/drivers/md/dm.c index ffa469ececb9..5b2e2909f48f 100644 --- a/drivers/md/dm.c +++ b/drivers/md/dm.c @@ -2688,7 +2688,7 @@ static int __dm_suspend(struct mapped_device *md, struct dm_table *map, { bool do_lockfs = suspend_flags & DM_SUSPEND_LOCKFS_FLAG; bool noflush = suspend_flags & DM_SUSPEND_NOFLUSH_FLAG; - int r; + int r = 0; lockdep_assert_held(&md->suspend_lock); @@ -2740,7 +2740,7 @@ static int __dm_suspend(struct mapped_device *md, struct dm_table *map, * Stop md->queue before flushing md->wq in case request-based * dm defers requests to md->wq from md->queue. */ - if (dm_request_based(md)) + if (map && dm_request_based(md)) dm_stop_queue(md->queue); flush_workqueue(md->wq); @@ -2750,7 +2750,8 @@ static int __dm_suspend(struct mapped_device *md, struct dm_table *map, * We call dm_wait_for_completion to wait for all existing requests * to finish. */ - r = dm_wait_for_completion(md, task_state); + if (map) + r = dm_wait_for_completion(md, task_state); if (!r) set_bit(dmf_suspended_flag, &md->flags); -- 2.46.1

2 1

[PATCH OLK-6.6] nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
by Yifan Qiao 20 Nov '25

20 Nov '25

From: Daniel Wagner <wagi(a)kernel.org> stable inclusion from stable-v6.6.112 commit 060ecc81240ef9d60d9485a3a5eb55a0d6e7a25c category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BC6 CVE: CVE-2025-40171 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit db5a5406fb7e5337a074385c7a3e53c77f2c1bd3 ] It’s possible for more than one async command to be in flight from __nvmet_fc_send_ls_req. For each command, a tgtport reference is taken. In the current code, only one put work item is queued at a time, which results in a leaked reference. To fix this, move the work item to the nvmet_fc_ls_req_op struct, which already tracks all resources related to the command. Fixes: 710c69dbaccd ("nvmet-fc: avoid deadlock on delete association path") Reviewed-by: Hannes Reinecke <hare(a)suse.de> Signed-off-by: Daniel Wagner <wagi(a)kernel.org> Signed-off-by: Keith Busch <kbusch(a)kernel.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Yifan Qiao <qiaoyifan4(a)huawei.com> --- drivers/nvme/target/fc.c | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) diff --git a/drivers/nvme/target/fc.c b/drivers/nvme/target/fc.c index 8a02ed63b156..8c0082466d0c 100644 --- a/drivers/nvme/target/fc.c +++ b/drivers/nvme/target/fc.c @@ -54,6 +54,8 @@ struct nvmet_fc_ls_req_op { /* for an LS RQST XMT */ int ls_error; struct list_head lsreq_list; /* tgtport->ls_req_list */ bool req_queued; + + struct work_struct put_work; }; @@ -111,8 +113,6 @@ struct nvmet_fc_tgtport { struct nvmet_fc_port_entry *pe; struct kref ref; u32 max_sg_cnt; - - struct work_struct put_work; }; struct nvmet_fc_port_entry { @@ -250,12 +250,13 @@ static int nvmet_fc_tgt_a_get(struct nvmet_fc_tgt_assoc *assoc); static void nvmet_fc_tgt_q_put(struct nvmet_fc_tgt_queue *queue); static int nvmet_fc_tgt_q_get(struct nvmet_fc_tgt_queue *queue); static void nvmet_fc_tgtport_put(struct nvmet_fc_tgtport *tgtport); -static void nvmet_fc_put_tgtport_work(struct work_struct *work) +static void nvmet_fc_put_lsop_work(struct work_struct *work) { - struct nvmet_fc_tgtport *tgtport = - container_of(work, struct nvmet_fc_tgtport, put_work); + struct nvmet_fc_ls_req_op *lsop = + container_of(work, struct nvmet_fc_ls_req_op, put_work); - nvmet_fc_tgtport_put(tgtport); + nvmet_fc_tgtport_put(lsop->tgtport); + kfree(lsop); } static int nvmet_fc_tgtport_get(struct nvmet_fc_tgtport *tgtport); static void nvmet_fc_handle_fcp_rqst(struct nvmet_fc_tgtport *tgtport, @@ -382,7 +383,7 @@ __nvmet_fc_finish_ls_req(struct nvmet_fc_ls_req_op *lsop) DMA_BIDIRECTIONAL); out_putwork: - queue_work(nvmet_wq, &tgtport->put_work); + queue_work(nvmet_wq, &lsop->put_work); } static int @@ -403,6 +404,7 @@ __nvmet_fc_send_ls_req(struct nvmet_fc_tgtport *tgtport, lsreq->done = done; lsop->req_queued = false; INIT_LIST_HEAD(&lsop->lsreq_list); + INIT_WORK(&lsop->put_work, nvmet_fc_put_lsop_work); lsreq->rqstdma = fc_dma_map_single(tgtport->dev, lsreq->rqstaddr, lsreq->rqstlen + lsreq->rsplen, @@ -462,8 +464,6 @@ nvmet_fc_disconnect_assoc_done(struct nvmefc_ls_req *lsreq, int status) __nvmet_fc_finish_ls_req(lsop); /* fc-nvme target doesn't care about success or failure of cmd */ - - kfree(lsop); } /* @@ -1428,7 +1428,6 @@ nvmet_fc_register_targetport(struct nvmet_fc_port_info *pinfo, kref_init(&newrec->ref); ida_init(&newrec->assoc_cnt); newrec->max_sg_cnt = template->max_sgl_segments; - INIT_WORK(&newrec->put_work, nvmet_fc_put_tgtport_work); ret = nvmet_fc_alloc_ls_iodlist(newrec); if (ret) { -- 2.39.2

2 1

[PATCH OLK-6.6 0/2] CVE-2025-40198
by Yongjian Sun 20 Nov '25

20 Nov '25

Fedor Pchelkin (1): ext4: fix string copying in parse_apply_sb_mount_options() Theodore Ts'o (1): ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() fs/ext4/super.c | 18 ++++++------------ 1 file changed, 6 insertions(+), 12 deletions(-) -- 2.39.2

2 3

[PATCH OLK-6.6 0/3] CVE-2025-40179
by Yongjian Sun 20 Nov '25

20 Nov '25

Jan Kara (2): ext4: verify orphan file size is not too big ext4: free orphan info with kvfree Liao Yuanhong (1): ext4: use kmalloc_array() for array space allocation fs/ext4/orphan.c | 20 ++++++++++++++++---- 1 file changed, 16 insertions(+), 4 deletions(-) -- 2.39.2

2 4

[PATCH OLK-6.6 0/3] CVE-2025-40179
by Yongjian Sun 20 Nov '25

20 Nov '25

Jan Kara (2): ext4: verify orphan file size is not too big ext4: free orphan info with kvfree Liao Yuanhong (1): ext4: use kmalloc_array() for array space allocation fs/ext4/orphan.c | 20 ++++++++++++++++---- 1 file changed, 16 insertions(+), 4 deletions(-) -- 2.39.2

1 0

[openeuler:OLK-6.6 3269/3269] htmldocs: Documentation/misc-devices/zcopy.rst:18: WARNING: Title underline too short.
by kernel test robot 20 Nov '25

20 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: dfb9bd9242c2350c127d51a126976ed386e9cc48 commit: 3a1e43e597d3d6f872dd786af8dad22947c8239a [3269/3269] zcopy: Add ZCOPY documentation reproduce: (https://download.01.org/0day-ci/archive/20251120/202511200347.5qevtABT-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511200347.5qevtABT-lkp@intel.com/ All warnings (new ones prefixed by >>): WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 -function HID quirks ./include/linux/hid.h' failed with return code 1 WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 ./include/linux/i2c-atr.h' failed with return code 1 WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 -internal ./include/linux/mutex.h' failed with return code 2 WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 -function klp_patch -function klp_object -function klp_func -function klp_callbacks -function klp_state ./include/linux/livepatch.h' failed with return code 1 WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 ./include/linux/seqlock.h' failed with return code 1 >> Documentation/misc-devices/zcopy.rst:18: WARNING: Title underline too short. -- Key features ----------- [docutils] >> Documentation/misc-devices/zcopy.rst:18: WARNING: Title underline too short. -- WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 ./include/linux/fprobe.h' failed with return code 1 WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 -internal ./include/linux/mutex.h' failed with return code 2 Documentation/translations/zh_TW/dev-tools/index.rst:21: WARNING: toctree contains reference to nonexisting document 'translations/zh_TW/dev-tools/sparse' [toc.not_readable] WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 ./include/linux/fwctl.h' failed with return code 1 Documentation/arch/x86/hygon-secure-virtualization.rst: WARNING: document isn't included in any toctree [toc.not_included] >> Documentation/misc-devices/zcopy.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/mm/dynamic_hugetlb.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/networking/device_drivers/ethernet/nebula-matrix/m18120.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/networking/hinic3.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/scsi/hisi_raid.rst: WARNING: document isn't included in any toctree [toc.not_included] Documentation/scsi/sssraid.rst: WARNING: document isn't included in any toctree [toc.not_included] -- Important constraints and requirements --------------------- [docutils] Documentation/misc-devices/zcopy.rst:61: ERROR: Unexpected indentation. [docutils] >> Documentation/misc-devices/zcopy.rst:58: WARNING: Inline emphasis start-string without end-string. [docutils] Documentation/misc-devices/zcopy.rst:61: WARNING: Inline emphasis start-string without end-string. [docutils] >> Documentation/misc-devices/zcopy.rst:64: WARNING: Block quote ends without a blank line; unexpected unindent. [docutils] WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 ./include/linux/damon.h' failed with return code 1 WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 ./include/linux/highmem.h' failed with return code 1 WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 ./include/linux/highmem-internal.h' failed with return code 1 WARNING: kernel-doc './scripts/kernel-doc -rst -enable-lineno -sphinx-version 8.2.3 ./include/linux/migrate.h' failed with return code 1 Documentation/networking/device_drivers/ethernet/3snic/sssnic.rst:42: WARNING: Enumerated list ends without a blank line; unexpected unindent. [docutils] vim +18 Documentation/misc-devices/zcopy.rst 15 16 17 Key features > 18 ----------- 19 - Supports zero-copy communication between intra-node processes. 20 - Handles both PTE-level small pages and PMD-level huge pages. 21 - Preserves the read/write permissions of the source page in the target address space. 22 23 24 Important constraints and requirements 25 --------------------- 26 1. Callers must ensure the source address is already mapped to physical pages, 27 while the destination address is unused (no existing mappings). If exists 28 old mappings, the return value is -EAGAIN. For this case, caller should free 29 the old dst_addr, and alloc a new one to try again. 30 31 2. No internal locking is implemented in the PageAttach interface; Callers 32 must manage memory mapping and release order to avoid race conditions. 33 34 3. Source and destination must be different processes (not threads of the same process). 35 36 4. Only user-space addresses are supported; kernel addresses cannot be mapped. 37 38 5. Both source and destination processes must remain alive during the mapping operation. 39 40 6. PUD-level huge pages are not supported in current implementation. 41 42 7. The start address and size of both source and destination must be PMD-size-aligned. 43 44 8. Callers are responsible for ensuring safe access to mapped pages after attachment, 45 as permissions are inherited from the source. 46 47 48 Use 49 --- 50 Process a 51 src_addr= aligned_alloc(ALIGN_SIZE_2M, size); 52 memset(src_addr, 0, size); 53 54 Process b 55 #define ALIGN_SIZE_2M 2097152 56 int fd = open(SLS_DEVICE, O_RDWR); 57 > 58 dst_addr= aligned_alloc(ALIGN_SIZE_2M, size); 59 res = zcopy(fd, (void *)src_addr, dst_addr, src_pid, dst_pid, size); 60 while(res.ret == -EAGAIN && retry--) { 61 free(dst_addr); 62 dst_addr= aligned_alloc(ALIGN_SIZE_2M, size); 63 res = zcopy(fd, (void *)src_addr, dst_addr, src_pid, dst_pid, aligned_size); > 64 } -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 0/2] Fix CVE-2025-40123
by Tengda Wu 20 Nov '25

20 Nov '25

Fix CVE-2025-40123. Daniel Borkmann (2): bpf: Enforce expected_attach_type for tailcall compatibility selftests/bpf: Add test case for different expected_attach_type include/linux/bpf.h | 1 + kernel/bpf/core.c | 5 +++ .../bpf/prog_tests/xdp_devmap_attach.c | 31 ++++++++++++++++++- .../bpf/progs/test_xdp_devmap_tailcall.c | 29 +++++++++++++++++ 4 files changed, 65 insertions(+), 1 deletion(-) create mode 100644 tools/testing/selftests/bpf/progs/test_xdp_devmap_tailcall.c -- 2.34.1

2 3

[PATCH OLK-5.10 0/2] Fix CVE-2025-40123
by Tengda Wu 20 Nov '25

20 Nov '25

Fix CVE-2025-40123. Daniel Borkmann (2): bpf: Enforce expected_attach_type for tailcall compatibility selftests/bpf: Add test case for different expected_attach_type include/linux/bpf.h | 1 + kernel/bpf/core.c | 5 ++ .../bpf/prog_tests/xdp_devmap_attach.c | 62 ++++++++++++++++++- .../bpf/progs/test_xdp_devmap_tailcall.c | 18 ++++++ .../selftests/bpf/progs/xdp_tailcall_devmap.c | 19 ++++++ 5 files changed, 104 insertions(+), 1 deletion(-) create mode 100644 tools/testing/selftests/bpf/progs/test_xdp_devmap_tailcall.c create mode 100644 tools/testing/selftests/bpf/progs/xdp_tailcall_devmap.c -- 2.34.1

2 3

[openeuler:OLK-6.6 3281/3281] drivers/crypto/ccp/hygon/ccp-mdev.c:226:9: error: call to undeclared function 'pci_user_read_config_byte'; ISO C99 and later do not support implicit function declarations
by kernel test robot 20 Nov '25

20 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: dfb9bd9242c2350c127d51a126976ed386e9cc48 commit: 592817a30ddc0ef43c7f5b5fe906ae37cf3bea3b [3281/3281] crypto: ccp: add ccp-mdev functionality to the ccp module. config: arm64-randconfig-003-20251120 (https://download.01.org/0day-ci/archive/20251120/202511200645.o5HzMq38-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 0bba1e76581bad04e7d7f09f5115ae5e2989e0d9) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251120/202511200645.o5HzMq38-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511200645.o5HzMq38-lkp@intel.com/ All errors (new ones prefixed by >>): >> drivers/crypto/ccp/hygon/ccp-mdev.c:226:9: error: call to undeclared function 'pci_user_read_config_byte'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 226 | ret = pci_user_read_config_byte(pdev, offset, &tmp); | ^ drivers/crypto/ccp/hygon/ccp-mdev.c:226:9: note: did you mean 'pci_read_config_byte'? include/linux/pci.h:1962:1: note: 'pci_read_config_byte' declared here 1962 | _PCI_NOP_ALL(read, *) | ^ include/linux/pci.h:1959:28: note: expanded from macro '_PCI_NOP_ALL' 1959 | #define _PCI_NOP_ALL(o, x) _PCI_NOP(o, byte, u8 x) \ | ^ include/linux/pci.h:1955:20: note: expanded from macro '_PCI_NOP' 1955 | static inline int pci_##o##_config_##s(struct pci_dev *dev, \ | ^ <scratch space>:32:1: note: expanded from here 32 | pci_read_config_byte | ^ >> drivers/crypto/ccp/hygon/ccp-mdev.c:231:9: error: call to undeclared function 'pci_user_read_config_word'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 231 | ret = pci_user_read_config_word(pdev, offset, &tmp); | ^ drivers/crypto/ccp/hygon/ccp-mdev.c:231:9: note: did you mean 'pci_read_config_word'? include/linux/pci.h:1962:1: note: 'pci_read_config_word' declared here 1962 | _PCI_NOP_ALL(read, *) | ^ include/linux/pci.h:1960:5: note: expanded from macro '_PCI_NOP_ALL' 1960 | _PCI_NOP(o, word, u16 x) \ | ^ include/linux/pci.h:1955:20: note: expanded from macro '_PCI_NOP' 1955 | static inline int pci_##o##_config_##s(struct pci_dev *dev, \ | ^ <scratch space>:35:1: note: expanded from here 35 | pci_read_config_word | ^ >> drivers/crypto/ccp/hygon/ccp-mdev.c:234:9: error: call to undeclared function 'pci_user_read_config_dword'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 234 | ret = pci_user_read_config_dword(pdev, offset, (u32 *)&tmp_val); | ^ drivers/crypto/ccp/hygon/ccp-mdev.c:234:9: note: did you mean 'pci_read_config_dword'? include/linux/pci.h:1962:1: note: 'pci_read_config_dword' declared here 1962 | _PCI_NOP_ALL(read, *) | ^ include/linux/pci.h:1961:5: note: expanded from macro '_PCI_NOP_ALL' 1961 | _PCI_NOP(o, dword, u32 x) | ^ include/linux/pci.h:1955:20: note: expanded from macro '_PCI_NOP' 1955 | static inline int pci_##o##_config_##s(struct pci_dev *dev, \ | ^ <scratch space>:38:1: note: expanded from here 38 | pci_read_config_dword | ^ >> drivers/crypto/ccp/hygon/ccp-mdev.c:255:9: error: call to undeclared function 'pci_user_write_config_byte'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 255 | ret = pci_user_write_config_byte(pdev, offset, tmp_val); | ^ drivers/crypto/ccp/hygon/ccp-mdev.c:255:9: note: did you mean 'pci_write_config_byte'? include/linux/pci.h:1963:1: note: 'pci_write_config_byte' declared here 1963 | _PCI_NOP_ALL(write,) | ^ include/linux/pci.h:1959:28: note: expanded from macro '_PCI_NOP_ALL' 1959 | #define _PCI_NOP_ALL(o, x) _PCI_NOP(o, byte, u8 x) \ | ^ include/linux/pci.h:1955:20: note: expanded from macro '_PCI_NOP' 1955 | static inline int pci_##o##_config_##s(struct pci_dev *dev, \ | ^ <scratch space>:41:1: note: expanded from here 41 | pci_write_config_byte | ^ >> drivers/crypto/ccp/hygon/ccp-mdev.c:257:9: error: call to undeclared function 'pci_user_write_config_word'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 257 | ret = pci_user_write_config_word(pdev, offset, tmp_val); | ^ >> drivers/crypto/ccp/hygon/ccp-mdev.c:259:9: error: call to undeclared function 'pci_user_write_config_dword'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] 259 | ret = pci_user_write_config_dword(pdev, offset, tmp_val); | ^ drivers/crypto/ccp/hygon/ccp-mdev.c:1144:15: warning: no previous prototype for function 'ccp_pin_memory' [-Wmissing-prototypes] 1144 | struct page **ccp_pin_memory(struct ccp_private *private, unsigned long uaddr, | ^ drivers/crypto/ccp/hygon/ccp-mdev.c:1144:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 1144 | struct page **ccp_pin_memory(struct ccp_private *private, unsigned long uaddr, | ^ | static >> drivers/crypto/ccp/hygon/ccp-mdev.c:1788:46: error: use of undeclared identifier 'pci_bus_type'; did you mean 'pci_pcie_type'? 1788 | ccp_mdev_data.domain = iommu_domain_alloc(&pci_bus_type); | ^~~~~~~~~~~~ | pci_pcie_type include/linux/pci.h:2489:19: note: 'pci_pcie_type' declared here 2489 | static inline int pci_pcie_type(const struct pci_dev *dev) | ^ >> drivers/crypto/ccp/hygon/ccp-mdev.c:1788:45: error: incompatible pointer types passing 'int (*)(const struct pci_dev *)' to parameter of type 'const struct bus_type *' [-Wincompatible-pointer-types] 1788 | ccp_mdev_data.domain = iommu_domain_alloc(&pci_bus_type); | ^~~~~~~~~~~~~ include/linux/iommu.h:970:71: note: passing argument to parameter 'bus' here 970 | extern struct iommu_domain *iommu_domain_alloc(const struct bus_type *bus); | ^ drivers/crypto/ccp/hygon/ccp-mdev.c:1977:22: error: use of undeclared identifier 'pci_bus_type'; did you mean 'pci_pcie_type'? 1977 | if (!iommu_present(&pci_bus_type)) { | ^~~~~~~~~~~~ | pci_pcie_type include/linux/pci.h:2489:19: note: 'pci_pcie_type' declared here 2489 | static inline int pci_pcie_type(const struct pci_dev *dev) | ^ drivers/crypto/ccp/hygon/ccp-mdev.c:1977:21: error: incompatible pointer types passing 'int (*)(const struct pci_dev *)' to parameter of type 'const struct bus_type *' [-Wincompatible-pointer-types] 1977 | if (!iommu_present(&pci_bus_type)) { | ^~~~~~~~~~~~~ include/linux/iommu.h:967:50: note: passing argument to parameter 'bus' here 967 | extern bool iommu_present(const struct bus_type *bus); | ^ drivers/crypto/ccp/hygon/ccp-mdev.c:2018:22: error: use of undeclared identifier 'pci_bus_type'; did you mean 'pci_pcie_type'? 2018 | if (!iommu_present(&pci_bus_type)) { | ^~~~~~~~~~~~ | pci_pcie_type include/linux/pci.h:2489:19: note: 'pci_pcie_type' declared here 2489 | static inline int pci_pcie_type(const struct pci_dev *dev) | ^ drivers/crypto/ccp/hygon/ccp-mdev.c:2018:21: error: incompatible pointer types passing 'int (*)(const struct pci_dev *)' to parameter of type 'const struct bus_type *' [-Wincompatible-pointer-types] 2018 | if (!iommu_present(&pci_bus_type)) { | ^~~~~~~~~~~~~ include/linux/iommu.h:967:50: note: passing argument to parameter 'bus' here 967 | extern bool iommu_present(const struct bus_type *bus); | ^ 1 warning and 12 errors generated. Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for HALTPOLL_CPUIDLE Depends on [n]: CPU_IDLE [=n] && ARCH_CPUIDLE_HALTPOLL [=y] && ARCH_HAS_OPTIMIZED_POLL [=y] Selected by [y]: - ARM64 [=y] vim +/pci_user_read_config_byte +226 drivers/crypto/ccp/hygon/ccp-mdev.c 208 209 static int handle_pci_cfg_read(struct mdev_state *mdev_state, int offset, 210 __le32 *val, int count) 211 { 212 struct pci_dev *pdev = NULL; 213 u32 tmp_val = 0; 214 int ret = -EINVAL; 215 216 if (!mdev_state || !mdev_state->iommu) { 217 pr_err("ccp: invalid mdev_state.\n"); 218 return ret; 219 } 220 221 pdev = mdev_state->iommu->pdev; 222 223 if (count == 1) { 224 u8 tmp; 225 > 226 ret = pci_user_read_config_byte(pdev, offset, &tmp); 227 tmp_val = tmp; 228 } else if (count == 2) { 229 u16 tmp; 230 > 231 ret = pci_user_read_config_word(pdev, offset, &tmp); 232 tmp_val = tmp; 233 } else if (count == 4) > 234 ret = pci_user_read_config_dword(pdev, offset, (u32 *)&tmp_val); 235 236 *val = cpu_to_le32(tmp_val); 237 return ret; 238 } 239 240 static int handle_pci_cfg_write(struct mdev_state *mdev_state, u16 offset, 241 u8 *buf, u32 count) 242 { 243 u32 tmp_val = le32_to_cpu(*(u32 *)buf); 244 struct pci_dev *pdev = NULL; 245 int ret = -EINVAL; 246 247 if (!mdev_state || !mdev_state->iommu) { 248 pr_err("ccp: invalid mdev_state.\n"); 249 return ret; 250 } 251 252 pdev = mdev_state->iommu->pdev; 253 254 if (count == 1) > 255 ret = pci_user_write_config_byte(pdev, offset, tmp_val); 256 else if (count == 2) > 257 ret = pci_user_write_config_word(pdev, offset, tmp_val); 258 else if (count == 4) > 259 ret = pci_user_write_config_dword(pdev, offset, tmp_val); 260 261 return ret; 262 } 263 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:openEuler-1.0-LTS 1935/1935] mm/share_pool.c:1043:2: error: implicit declaration of function 'sysctl_compaction_handler'; did you mean 'compaction_failed'?
by kernel test robot 19 Nov '25

19 Nov '25

Hi Zhou, FYI, the error/warning still remains. tree: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS head: 6c5657aecca1857be6ea39f789159c9acfde2f9e commit: d45b33b72c530e64219ad997947a33f6e07d339c [1935/1935] share pool: Try to compact when memory is insufficient config: arm64-randconfig-r132-20251119 (https://download.01.org/0day-ci/archive/20251119/202511192140.dgf3lMX3-lkp@…) compiler: aarch64-linux-gcc (GCC) 8.5.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251119/202511192140.dgf3lMX3-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511192140.dgf3lMX3-lkp@intel.com/ All errors (new ones prefixed by >>): mm/share_pool.c:59:5: sparse: sparse: symbol 'enable_mdc_default_group' was not declared. Should it be static? mm/share_pool.c:1043:9: sparse: sparse: undefined identifier 'sysctl_compaction_handler' mm/share_pool.c:1772:21: sparse: sparse: undefined identifier 'huge_ptep_get' mm/share_pool.c:1772:34: sparse: sparse: invalid initializer mm/share_pool.c:2524:30: sparse: sparse: undefined identifier 'huge_pte_none' mm/share_pool.c:2537:23: sparse: sparse: undefined identifier 'huge_add_to_page_cache' mm/share_pool.c:2553:14: sparse: sparse: undefined identifier 'huge_pte_none' mm/share_pool.c:2559:9: sparse: sparse: undefined identifier 'set_huge_pte_at' mm/share_pool.c:2561:9: sparse: sparse: undefined identifier 'hugetlb_count_add' mm/share_pool.c:2597:24: sparse: sparse: undefined identifier 'hugetlb_alloc_hugepage' mm/share_pool.c: In function 'sp_compact_nodes': >> mm/share_pool.c:1043:2: error: implicit declaration of function 'sysctl_compaction_handler'; did you mean 'compaction_failed'? [-Werror=implicit-function-declaration] sysctl_compaction_handler(NULL, 1, NULL, NULL, NULL); ^~~~~~~~~~~~~~~~~~~~~~~~~ compaction_failed mm/share_pool.c: In function 'sp_hugetlb_entry': mm/share_pool.c:1772:14: error: implicit declaration of function 'huge_ptep_get'; did you mean 'huge_pte_lock'? [-Werror=implicit-function-declaration] pte_t pte = huge_ptep_get(ptep); ^~~~~~~~~~~~~ huge_pte_lock mm/share_pool.c:1772:14: error: invalid initializer mm/share_pool.c: In function 'sharepool_no_page': mm/share_pool.c:2524:9: error: implicit declaration of function 'huge_pte_none'; did you mean 'huge_pte_lock'? [-Werror=implicit-function-declaration] if (!huge_pte_none(huge_ptep_get(ptep))) { ^~~~~~~~~~~~~ huge_pte_lock mm/share_pool.c:2537:9: error: implicit declaration of function 'huge_add_to_page_cache'; did you mean 'add_to_page_cache'? [-Werror=implicit-function-declaration] err = huge_add_to_page_cache(page, mapping, idx); ^~~~~~~~~~~~~~~~~~~~~~ add_to_page_cache mm/share_pool.c:2559:2: error: implicit declaration of function 'set_huge_pte_at'; did you mean 'set_huge_swap_pte_at'? [-Werror=implicit-function-declaration] set_huge_pte_at(mm, haddr, ptep, new_pte); ^~~~~~~~~~~~~~~ set_huge_swap_pte_at mm/share_pool.c:2561:2: error: implicit declaration of function 'hugetlb_count_add'; did you mean 'hugetlb_count_sub'? [-Werror=implicit-function-declaration] hugetlb_count_add(pages_per_huge_page(h), mm); ^~~~~~~~~~~~~~~~~ hugetlb_count_sub mm/share_pool.c: In function 'sp_alloc_pages': mm/share_pool.c:2597:10: error: implicit declaration of function 'hugetlb_alloc_hugepage'; did you mean 'vmalloc_hugepage'? [-Werror=implicit-function-declaration] return hugetlb_alloc_hugepage(NUMA_NO_NODE, HUGETLB_ALLOC_NONE); ^~~~~~~~~~~~~~~~~~~~~~ vmalloc_hugepage mm/share_pool.c:2597:47: error: 'HUGETLB_ALLOC_NONE' undeclared (first use in this function); did you mean 'HUGETLB_ANON_FILE'? return hugetlb_alloc_hugepage(NUMA_NO_NODE, HUGETLB_ALLOC_NONE); ^~~~~~~~~~~~~~~~~~ HUGETLB_ANON_FILE mm/share_pool.c:2597:47: note: each undeclared identifier is reported only once for each function it appears in mm/share_pool.c:2600:1: warning: control reaches end of non-void function [-Wreturn-type] } ^ cc1: some warnings being treated as errors -- mm/share_pool.c: In function 'sp_compact_nodes': >> mm/share_pool.c:1043:2: error: implicit declaration of function 'sysctl_compaction_handler'; did you mean 'compaction_failed'? [-Werror=implicit-function-declaration] sysctl_compaction_handler(NULL, 1, NULL, NULL, NULL); ^~~~~~~~~~~~~~~~~~~~~~~~~ compaction_failed mm/share_pool.c: In function 'sp_hugetlb_entry': mm/share_pool.c:1772:14: error: implicit declaration of function 'huge_ptep_get'; did you mean 'huge_pte_lock'? [-Werror=implicit-function-declaration] pte_t pte = huge_ptep_get(ptep); ^~~~~~~~~~~~~ huge_pte_lock mm/share_pool.c:1772:14: error: invalid initializer mm/share_pool.c: In function 'sharepool_no_page': mm/share_pool.c:2524:9: error: implicit declaration of function 'huge_pte_none'; did you mean 'huge_pte_lock'? [-Werror=implicit-function-declaration] if (!huge_pte_none(huge_ptep_get(ptep))) { ^~~~~~~~~~~~~ huge_pte_lock mm/share_pool.c:2537:9: error: implicit declaration of function 'huge_add_to_page_cache'; did you mean 'add_to_page_cache'? [-Werror=implicit-function-declaration] err = huge_add_to_page_cache(page, mapping, idx); ^~~~~~~~~~~~~~~~~~~~~~ add_to_page_cache mm/share_pool.c:2559:2: error: implicit declaration of function 'set_huge_pte_at'; did you mean 'set_huge_swap_pte_at'? [-Werror=implicit-function-declaration] set_huge_pte_at(mm, haddr, ptep, new_pte); ^~~~~~~~~~~~~~~ set_huge_swap_pte_at mm/share_pool.c:2561:2: error: implicit declaration of function 'hugetlb_count_add'; did you mean 'hugetlb_count_sub'? [-Werror=implicit-function-declaration] hugetlb_count_add(pages_per_huge_page(h), mm); ^~~~~~~~~~~~~~~~~ hugetlb_count_sub mm/share_pool.c: In function 'sp_alloc_pages': mm/share_pool.c:2597:10: error: implicit declaration of function 'hugetlb_alloc_hugepage'; did you mean 'vmalloc_hugepage'? [-Werror=implicit-function-declaration] return hugetlb_alloc_hugepage(NUMA_NO_NODE, HUGETLB_ALLOC_NONE); ^~~~~~~~~~~~~~~~~~~~~~ vmalloc_hugepage mm/share_pool.c:2597:47: error: 'HUGETLB_ALLOC_NONE' undeclared (first use in this function); did you mean 'HUGETLB_ANON_FILE'? return hugetlb_alloc_hugepage(NUMA_NO_NODE, HUGETLB_ALLOC_NONE); ^~~~~~~~~~~~~~~~~~ HUGETLB_ANON_FILE mm/share_pool.c:2597:47: note: each undeclared identifier is reported only once for each function it appears in mm/share_pool.c:2600:1: warning: control reaches end of non-void function [-Wreturn-type] } ^ cc1: some warnings being treated as errors Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for HARDLOCKUP_DETECTOR Depends on [n]: DEBUG_KERNEL [=n] && !S390 && (HAVE_HARDLOCKUP_DETECTOR_PERF [=n] || HAVE_HARDLOCKUP_DETECTOR_ARCH [=y]) Selected by [y]: - SDEI_WATCHDOG [=y] && <choice> && ARM_SDE_INTERFACE [=y] && !HARDLOCKUP_CHECK_TIMESTAMP [=n] vim +1043 mm/share_pool.c 1039 1040 static unsigned long last_jiffies; 1041 static void sp_compact_nodes(struct work_struct *work) 1042 { > 1043 sysctl_compaction_handler(NULL, 1, NULL, NULL, NULL); 1044 1045 kfree(work); 1046 } 1047 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3278/3278] include/linux/xsched.h:309:28: error: array type has incomplete element type 'struct cgroup_file'
by kernel test robot 19 Nov '25

19 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: dfb9bd9242c2350c127d51a126976ed386e9cc48 commit: aafde051ac61687823976cc892fb3c416101d694 [3278/3278] xsched: Add support for CFS quota for cgroups config: arm64-allnoconfig (https://download.01.org/0day-ci/archive/20251119/202511192040.YIPXCVFH-lkp@…) compiler: aarch64-linux-gcc (GCC) 15.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251119/202511192040.YIPXCVFH-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511192040.YIPXCVFH-lkp@intel.com/ All errors (new ones prefixed by >>): In file included from kernel/xsched/vstream.c:23: include/linux/xsched.h:276:36: error: field 'css' has incomplete type 276 | struct cgroup_subsys_state css; | ^~~ >> include/linux/xsched.h:309:28: error: array type has incomplete element type 'struct cgroup_file' 309 | struct cgroup_file xcu_file[NR_XCU_FILE_TYPES]; | ^~~~~~~~ Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for ARCH_SUPPORTS_SCHED_SOFT_QUOTA Depends on [n]: CGROUPS [=n] Selected by [y]: - ARM64 [=y] WARNING: unmet direct dependencies detected for HALTPOLL_CPUIDLE Depends on [n]: CPU_IDLE [=n] && ARCH_CPUIDLE_HALTPOLL [=y] && ARCH_HAS_OPTIMIZED_POLL [=y] Selected by [y]: - ARM64 [=y] vim +309 include/linux/xsched.h 272 273 /* Xsched scheduling control group */ 274 struct xsched_group { 275 /* Cgroups controller structure */ 276 struct cgroup_subsys_state css; 277 278 /* Control group settings: */ 279 int sched_class; 280 int prio; 281 282 /* Bandwidth setting: shares value set by user */ 283 u64 shares_cfg; 284 u64 shares_cfg_red; 285 u32 weight; 286 u64 children_shares_sum; 287 288 /* Bandwidth setting: maximal quota in period */ 289 s64 quota; 290 /* record the runtime of operators during the period */ 291 s64 runtime; 292 s64 period; 293 struct hrtimer quota_timeout; 294 struct work_struct refill_work; 295 296 struct xsched_group_xcu_priv perxcu_priv[XSCHED_NR_CUS]; 297 298 /* Groups hierarchcy */ 299 struct xsched_group *parent; 300 struct list_head children_groups; 301 struct list_head group_node; 302 303 spinlock_t lock; 304 305 /* for XSE to move in perxcu */ 306 struct list_head members; 307 308 /* to control the xcu.{period, quota, shares} files shown or not */ > 309 struct cgroup_file xcu_file[NR_XCU_FILE_TYPES]; 310 struct work_struct file_show_work; 311 }; 312 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3278/3278] include/linux/xsched.h:309:29: error: array has incomplete element type 'struct cgroup_file'
by kernel test robot 19 Nov '25

19 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: dfb9bd9242c2350c127d51a126976ed386e9cc48 commit: aafde051ac61687823976cc892fb3c416101d694 [3278/3278] xsched: Add support for CFS quota for cgroups config: loongarch-allnoconfig (https://download.01.org/0day-ci/archive/20251119/202511191942.8hZlsAYZ-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 0bba1e76581bad04e7d7f09f5115ae5e2989e0d9) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251119/202511191942.8hZlsAYZ-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511191942.8hZlsAYZ-lkp@intel.com/ All errors (new ones prefixed by >>): In file included from kernel/xsched/vstream.c:23: include/linux/xsched.h:276:29: error: field has incomplete type 'struct cgroup_subsys_state' 276 | struct cgroup_subsys_state css; | ^ include/linux/kthread.h:219:8: note: forward declaration of 'struct cgroup_subsys_state' 219 | struct cgroup_subsys_state; | ^ In file included from kernel/xsched/vstream.c:23: >> include/linux/xsched.h:309:29: error: array has incomplete element type 'struct cgroup_file' 309 | struct cgroup_file xcu_file[NR_XCU_FILE_TYPES]; | ^ include/linux/xsched.h:309:9: note: forward declaration of 'struct cgroup_file' 309 | struct cgroup_file xcu_file[NR_XCU_FILE_TYPES]; | ^ 2 errors generated. vim +309 include/linux/xsched.h 272 273 /* Xsched scheduling control group */ 274 struct xsched_group { 275 /* Cgroups controller structure */ 276 struct cgroup_subsys_state css; 277 278 /* Control group settings: */ 279 int sched_class; 280 int prio; 281 282 /* Bandwidth setting: shares value set by user */ 283 u64 shares_cfg; 284 u64 shares_cfg_red; 285 u32 weight; 286 u64 children_shares_sum; 287 288 /* Bandwidth setting: maximal quota in period */ 289 s64 quota; 290 /* record the runtime of operators during the period */ 291 s64 runtime; 292 s64 period; 293 struct hrtimer quota_timeout; 294 struct work_struct refill_work; 295 296 struct xsched_group_xcu_priv perxcu_priv[XSCHED_NR_CUS]; 297 298 /* Groups hierarchcy */ 299 struct xsched_group *parent; 300 struct list_head children_groups; 301 struct list_head group_node; 302 303 spinlock_t lock; 304 305 /* for XSE to move in perxcu */ 306 struct list_head members; 307 308 /* to control the xcu.{period, quota, shares} files shown or not */ > 309 struct cgroup_file xcu_file[NR_XCU_FILE_TYPES]; 310 struct work_struct file_show_work; 311 }; 312 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-5.10 0/1] zcopy: Remove the dump_pagetable interface
by Liu Mingrui 19 Nov '25

19 Nov '25

zcopy: Remove the dump_pagetable interface Liu Mingrui (1): zcopy: Remove the dump_pagetable interface drivers/misc/zcopy/zcopy.c | 24 ------------------------ 1 file changed, 24 deletions(-) -- 2.25.1

2 2

[PATCH OLK-6.6 0/2] some minor bugfix about zcopy
by Liu Mingrui 19 Nov '25

19 Nov '25

Fix some minor bugs. Liu Mingrui (2): zcopy: Fix the incorrect mapping size passed in attach_pte_range zcopy: Remove the dump_pagetable interface drivers/misc/zcopy/zcopy.c | 25 +------------------------ 1 file changed, 1 insertion(+), 24 deletions(-) -- 2.25.1

2 3

[openeuler:OLK-6.6 3278/3278] include/linux/xsched.h:265:29: error: field has incomplete type 'struct cgroup_subsys_state'
by kernel test robot 19 Nov '25

19 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 4552257bd9515ad6f78bd3691c7379beb42dc3cd commit: 43bbefc53356009d3603faa2c6e6a2858f724e4d [3278/3278] xsched: Add XCU control group implementation and its backend in xsched CFS config: loongarch-allnoconfig (https://download.01.org/0day-ci/archive/20251119/202511191801.j34oMzNw-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 0bba1e76581bad04e7d7f09f5115ae5e2989e0d9) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251119/202511191801.j34oMzNw-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511191801.j34oMzNw-lkp@intel.com/ All errors (new ones prefixed by >>): In file included from kernel/xsched/vstream.c:23: >> include/linux/xsched.h:265:29: error: field has incomplete type 'struct cgroup_subsys_state' 265 | struct cgroup_subsys_state css; | ^ include/linux/kthread.h:219:8: note: forward declaration of 'struct cgroup_subsys_state' 219 | struct cgroup_subsys_state; | ^ 1 error generated. vim +265 include/linux/xsched.h 261 262 /* Xsched scheduling control group */ 263 struct xsched_group { 264 /* Cgroups controller structure */ > 265 struct cgroup_subsys_state css; 266 267 /* Control group settings: */ 268 int sched_class; 269 int prio; 270 271 /* Bandwidth setting: shares value set by user */ 272 u64 shares_cfg; 273 u64 shares_cfg_red; 274 u32 weight; 275 u64 children_shares_sum; 276 277 struct xsched_group_xcu_priv perxcu_priv[XSCHED_NR_CUS]; 278 279 /* Groups hierarchcy */ 280 struct xsched_group *parent; 281 struct list_head children_groups; 282 struct list_head group_node; 283 284 spinlock_t lock; 285 286 /* for XSE to move in perxcu */ 287 struct list_head members; 288 }; 289 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3278/3278] include/linux/xsched.h:265:36: error: field 'css' has incomplete type
by kernel test robot 19 Nov '25

19 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 4552257bd9515ad6f78bd3691c7379beb42dc3cd commit: 43bbefc53356009d3603faa2c6e6a2858f724e4d [3278/3278] xsched: Add XCU control group implementation and its backend in xsched CFS config: arm64-allnoconfig (https://download.01.org/0day-ci/archive/20251119/202511191730.FhCbWCm7-lkp@…) compiler: aarch64-linux-gcc (GCC) 15.1.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251119/202511191730.FhCbWCm7-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511191730.FhCbWCm7-lkp@intel.com/ All errors (new ones prefixed by >>): In file included from kernel/xsched/vstream.c:23: >> include/linux/xsched.h:265:36: error: field 'css' has incomplete type 265 | struct cgroup_subsys_state css; | ^~~ Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for ARCH_SUPPORTS_SCHED_SOFT_QUOTA Depends on [n]: CGROUPS [=n] Selected by [y]: - ARM64 [=y] WARNING: unmet direct dependencies detected for HALTPOLL_CPUIDLE Depends on [n]: CPU_IDLE [=n] && ARCH_CPUIDLE_HALTPOLL [=y] && ARCH_HAS_OPTIMIZED_POLL [=y] Selected by [y]: - ARM64 [=y] vim +/css +265 include/linux/xsched.h 261 262 /* Xsched scheduling control group */ 263 struct xsched_group { 264 /* Cgroups controller structure */ > 265 struct cgroup_subsys_state css; 266 267 /* Control group settings: */ 268 int sched_class; 269 int prio; 270 271 /* Bandwidth setting: shares value set by user */ 272 u64 shares_cfg; 273 u64 shares_cfg_red; 274 u32 weight; 275 u64 children_shares_sum; 276 277 struct xsched_group_xcu_priv perxcu_priv[XSCHED_NR_CUS]; 278 279 /* Groups hierarchcy */ 280 struct xsched_group *parent; 281 struct list_head children_groups; 282 struct list_head group_node; 283 284 spinlock_t lock; 285 286 /* for XSE to move in perxcu */ 287 struct list_head members; 288 }; 289 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 v2 0/3] Fix bugs
by Jinjie Ruan 19 Nov '25

19 Nov '25

Fix bugs. Jinjie Ruan (3): xcall2.0: Fix module unload issue by fixing refcount xcall2.0: Fix the semantic changes in xcall_enable xcall2.0: Fix stack-out-of-bounds bug in xcall_write() fs/proc/proc_xcall.c | 26 +++++++++++++++++++------- kernel/fork.c | 2 +- 2 files changed, 20 insertions(+), 8 deletions(-) -- 2.34.1

2 4

[PATCH OLK-6.6] zcopy: Fix the incorrect mapping size passed in attach_pte_range
by Liu Mingrui 19 Nov '25

19 Nov '25

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/release-management/issues/ID3TGE -------------------------------- We passed the wrong parameter; it should not be PMD_SIZE, but rather a variable. Fixes: 0305a09f222b ("zcopy: Introduce the pageattach interface") Signed-off-by: Liu Mingrui <liumingrui(a)huawei.com> --- drivers/misc/zcopy/zcopy.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/misc/zcopy/zcopy.c b/drivers/misc/zcopy/zcopy.c index 2096a9d9ff26..4b987f740e62 100644 --- a/drivers/misc/zcopy/zcopy.c +++ b/drivers/misc/zcopy/zcopy.c @@ -628,7 +628,7 @@ static int attach_page_range(struct mm_struct *dst_mm, struct mm_struct *src_mm, trace_attach_extent_start(dst_mm, src_mm, dst_addr, src_addr, dst_pmd, src_pmd, extent); ret = attach_pte_range(dst_vma, src_vma, dst_addr, src_addr, dst_pmd, - src_pmd, PMD_SIZE); + src_pmd, extent); trace_attach_extent_end(dst_mm, src_mm, dst_addr, src_addr, dst_pmd, src_pmd, ret); if (ret < 0) -- 2.25.1

2 1

[PATCH OLK-6.6] KVM: arm64: ipiv: Fix compilation warning
by Jinqian Yang 19 Nov '25

19 Nov '25

virt inclusion category: bugfix bugzilla: https://gitee.com/openeuler/qemu/issues/ID7F1Y ------------------------------------------------------------------------ static functions generate code in every compilation unit. If a compilation unit includes the header file but doesn't use the function, the compiler will issue a warning. In contrast, static inline functions are silently discarded when unused and won't produce warnings. Also fix the declaration/implementation mismatch for gic_dist_enable_ipiv. Fixes: cd77c03a1ee1 ("KVM: arm64: Implement PV_SGI related calls") Signed-off-by: Jinqian Yang <yangjinqian(a)huawei.com> --- arch/arm64/kvm/hisilicon/hisi_virt.h | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/arch/arm64/kvm/hisilicon/hisi_virt.h b/arch/arm64/kvm/hisilicon/hisi_virt.h index 2a995acd1c18..74f469a1c2f6 100644 --- a/arch/arm64/kvm/hisilicon/hisi_virt.h +++ b/arch/arm64/kvm/hisilicon/hisi_virt.h @@ -124,11 +124,11 @@ static inline bool hisi_ipiv_supported(void) { return false; } -static bool hisi_ipiv_supported_per_vm(struct kvm_vcpu *vcpu) +static inline bool hisi_ipiv_supported_per_vm(struct kvm_vcpu *vcpu) { return false; } -static void hisi_ipiv_enable_per_vm(struct kvm_vcpu *vcpu) {} +static inline void hisi_ipiv_enable_per_vm(struct kvm_vcpu *vcpu) {} static inline void ipiv_gicd_init(void) {} #endif /* CONFIG_ARM64_HISI_IPIV */ static inline void kvm_get_pg_cfg(void) {} @@ -149,7 +149,7 @@ static inline void kvm_hisi_reload_lsudvmbm(struct kvm *kvm) {} #endif /* CONFIG_KVM_HISI_VIRT */ #ifdef CONFIG_ARM64_HISI_IPIV -extern bool gic_dist_enable_ipiv(void); +extern void gic_dist_enable_ipiv(void); extern bool gic_get_ipiv_status(void); #endif /* CONFIG_ARM64_HISI_IPIV */ #endif /* __HISI_VIRT_H__ */ -- 2.33.0

2 1

[PATCH OLK-5.10] bpf: Fix invalid prog->stats access when update_effective_progs fails
by Pu Lehui 19 Nov '25

19 Nov '25

maillist inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ID7DOT Reference: https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git/commit/?id… -------------------------------- Syzkaller triggers an invalid memory access issue following fault injection in update_effective_progs. The issue can be described as follows: __cgroup_bpf_detach update_effective_progs compute_effective_progs bpf_prog_array_alloc <-- fault inject purge_effective_progs /* change to dummy_bpf_prog */ array->items[index] = &dummy_bpf_prog.prog ---softirq start--- __do_softirq ... __cgroup_bpf_run_filter_skb __bpf_prog_run_save_cb bpf_prog_run stats = this_cpu_ptr(prog->stats) /* invalid memory access */ flags = u64_stats_update_begin_irqsave(&stats->syncp) ---softirq end--- static_branch_dec(&cgroup_bpf_enabled_key[atype]) The reason is that fault injection caused update_effective_progs to fail and then changed the original prog into dummy_bpf_prog.prog in purge_effective_progs. Then a softirq came, and accessing the members of dummy_bpf_prog.prog in the softirq triggers invalid mem access. To fix it, skip updating stats when stats is NULL. Fixes: 492ecee892c2 ("bpf: enable program stats") Signed-off-by: Pu Lehui <pulehui(a)huawei.com> Link: https://lore.kernel.org/r/20251115102343.2200727-1-pulehui@huaweicloud.com Signed-off-by: Alexei Starovoitov <ast(a)kernel.org> Conflicts: include/linux/filter.h kernel/bpf/syscall.c [context conflicts and no bpf_prog_inc_misses_counter] Signed-off-by: Pu Lehui <pulehui(a)huawei.com> --- include/linux/filter.h | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/include/linux/filter.h b/include/linux/filter.h index 3c43603bfb62..75c79546aae7 100644 --- a/include/linux/filter.h +++ b/include/linux/filter.h @@ -580,11 +580,13 @@ DECLARE_STATIC_KEY_FALSE(bpf_stats_enabled_key); u64 __start = sched_clock(); \ unsigned long flags; \ __ret = dfunc(ctx, (prog)->insnsi, (prog)->bpf_func); \ - __stats = this_cpu_ptr(prog->aux->stats); \ - flags = u64_stats_update_begin_irqsave(&__stats->syncp);\ - __stats->cnt++; \ - __stats->nsecs += sched_clock() - __start; \ - u64_stats_update_end_irqrestore(&__stats->syncp, flags);\ + if (likely(prog->aux && prog->aux->stats)) { \ + __stats = this_cpu_ptr(prog->aux->stats); \ + flags = u64_stats_update_begin_irqsave(&__stats->syncp);\ + __stats->cnt++; \ + __stats->nsecs += sched_clock() - __start; \ + u64_stats_update_end_irqrestore(&__stats->syncp, flags);\ + } \ } else { \ __ret = dfunc(ctx, (prog)->insnsi, (prog)->bpf_func); \ } \ -- 2.34.1

2 1

[PATCH OLK-6.6 0/2] cgrp null
by Pu Lehui 19 Nov '25

19 Nov '25

Jose Fernandez (1): bpf: Improve program stats run-time calculation Pu Lehui (1): bpf: Fix invalid prog->stats access when update_effective_progs fails include/linux/filter.h | 16 ++++++++++------ kernel/bpf/syscall.c | 3 +++ kernel/bpf/trampoline.c | 3 ++- 3 files changed, 15 insertions(+), 7 deletions(-) -- 2.34.1

2 3

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 19 Nov '25

19 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm/tools/syscall.tbl | 2 +- arch/arm64/configs/openeuler_defconfig | 2 + arch/powerpc/kernel/syscalls/syscall.tbl | 2 +- arch/x86/configs/openeuler_defconfig | 2 + arch/x86/entry/syscalls/syscall_32.tbl | 2 +- arch/x86/entry/syscalls/syscall_64.tbl | 2 +- drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 +++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 ++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++ include/uapi/asm-generic/unistd.h | 5 +- include/uapi/linux/xcu_vstream.h | 77 ++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 83 ++ kernel/xsched/Makefile | 9 + kernel/xsched/cfs.c | 237 ++++++ kernel/xsched/cfs_quota.c | 98 +++ kernel/xsched/cgroup.c | 775 ++++++++++++++++++ kernel/xsched/core.c | 526 ++++++++++++ kernel/xsched/rt.c | 281 +++++++ kernel/xsched/vstream.c | 674 +++++++++++++++ .../arch/powerpc/entry/syscalls/syscall.tbl | 2 +- .../arch/x86/entry/syscalls/syscall_64.tbl | 2 +- 29 files changed, 3866 insertions(+), 9 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[openeuler:openEuler-1.0-LTS] BUILD REGRESSION 6c5657aecca1857be6ea39f789159c9acfde2f9e
by kernel test robot 19 Nov '25

19 Nov '25

tree/branch: https://gitee.com/openeuler/kernel.git openEuler-1.0-LTS branch HEAD: 6c5657aecca1857be6ea39f789159c9acfde2f9e !19025 scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() Unverified Error/Warning (likely false positive, kindly check if interested): include/linux/unaligned/access_ok.h:40:24: warning: array subscript -1 is outside array bounds of 'struct retrieve_data_struct_cmd[1]' [-Warray-bounds=] Error/Warning ids grouped by kconfigs: recent_errors |-- arm64-allnoconfig | |-- init-calibrate.c:warning:no-previous-prototype-for-calibration_delay_done | `-- mm-rmap.c:warning:variable-cstart-set-but-not-used |-- arm64-defconfig | |-- include-asm-generic-io.h:warning:this-statement-may-fall-through | |-- init-calibrate.c:warning:no-previous-prototype-for-calibration_delay_done | `-- mm-memcontrol.c:warning:bad-line:otherwise. |-- arm64-randconfig-001-20251118 | |-- crypto-xts.c:warning:mismatch-in-argument-type-of-built-in-function-free-expected-void | |-- init-calibrate.c:warning:no-previous-prototype-for-calibration_delay_done | `-- mm-memcontrol.c:warning:bad-line:otherwise. |-- arm64-randconfig-002-20251118 | |-- crypto-xts.c:warning:conflicting-types-for-built-in-function-free-expected-void(void-) | `-- init-calibrate.c:warning:no-previous-prototype-for-calibration_delay_done |-- arm64-randconfig-003-20251118 | |-- crypto-lrw.c:warning:conflicting-types-for-built-in-function-free-expected-void(void-) | |-- crypto-xts.c:warning:conflicting-types-for-built-in-function-free-expected-void(void-) | |-- include-linux-unaligned-access_ok.h:warning:array-subscript-is-outside-array-bounds-of-struct-retrieve_data_struct_cmd | |-- init-calibrate.c:warning:no-previous-prototype-for-calibration_delay_done | `-- mm-rmap.c:warning:variable-cstart-set-but-not-used |-- arm64-randconfig-004-20251118 | |-- init-calibrate.c:warning:no-previous-prototype-for-calibration_delay_done | |-- mm-memcontrol.c:warning:bad-line:otherwise. | `-- mm-rmap.c:warning:variable-cstart-set-but-not-used |-- arm64-randconfig-r132-20251119 | |-- block-bio-integrity.c:sparse:sparse:symbol-__bio_integrity_free-was-not-declared.-Should-it-be-static | |-- block-blk-mq-sched.c:sparse:sparse:symbol-__blk_mq_sched_dispatch_requests-was-not-declared.-Should-it-be-static | |-- crypto-algif_aead.c:sparse:sparse:Variable-length-array-is-used. | |-- crypto-algif_hash.c:sparse:sparse:Variable-length-array-is-used. | |-- crypto-xcbc.c:sparse:sparse:Variable-length-array-is-used. | |-- drivers-power-reset-xgene-reboot.c:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-void-volatile-noderef-asn-addr-got-void-csr | |-- drivers-power-reset-xgene-reboot.c:sparse:sparse:incorrect-type-in-assignment-(different-address-spaces)-expected-void-csr-got-void-noderef-asn | |-- fs-proc-etmem_scan.c:sparse:sparse:incorrect-type-in-assignment-(different-address-spaces)-expected-void-noderef-asn-buf-got-void-buf | |-- include-linux-backing-dev.h:sparse:sparse:incompatible-types-in-comparison-expression-(different-address-spaces): | |-- include-linux-ptrace.h:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-struct-cred-const-ptracer_cred-got-struct-cred-const-noderef-asn-ptracer_cred | |-- include-linux-ptrace.h:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-struct-task_struct-new_parent-got-struct-task_struct-noderef-asn-parent | |-- include-linux-ptrace.h:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-struct-task_struct-p1-got-struct-task_struct-noderef-asn-real_parent | |-- include-linux-ptrace.h:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-struct-task_struct-p2-got-struct-task_struct-noderef-asn-parent | |-- include-trace-events-vmscan.h:sparse:sparse:cast-to-restricted-isolate_mode_t | |-- init-calibrate.c:warning:no-previous-prototype-for-calibration_delay_done | |-- init-do_mounts.h:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-const-noderef-asn-filename-got-char-name | |-- init-do_mounts.h:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-const-noderef-asn-pathname-got-char-name | |-- init-do_mounts_initrd.c:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-const-noderef-asn-filename-got-char | |-- init-do_mounts_initrd.c:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-const-noderef-asn-pathname-got-char | |-- init-do_mounts_initrd.c:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-noderef-asn-name-got-char | |-- init-init_task.c:sparse:sparse:incorrect-type-in-initializer-(different-address-spaces)-expected-struct-task_struct-noderef-asn-parent-got-struct-task_struct | |-- init-init_task.c:sparse:sparse:incorrect-type-in-initializer-(different-address-spaces)-expected-struct-task_struct-noderef-asn-real_parent-got-struct-task_struct | |-- init-initramfs.c:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-const-noderef-asn-filename-got-char-filename | |-- init-initramfs.c:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-const-noderef-asn-filename-got-char-static-assigned-toplevel-collected | |-- init-initramfs.c:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-const-noderef-asn-name-got-char-path | |-- init-initramfs.c:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-const-noderef-asn-newname-got-char-static-assigned-toplevel-collected | |-- init-initramfs.c:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-const-noderef-asn-oldname-got-char | |-- init-initramfs.c:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-const-noderef-asn-oldname-got-char-old | |-- init-initramfs.c:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-const-noderef-asn-pathname-got-char-path | |-- init-initramfs.c:sparse:sparse:incorrect-type-in-argument-(different-address-spaces)-expected-char-const-noderef-asn-pathname-got-char-static-assigned-toplevel-collected | |-- kernel-sys.c:sparse:sparse:incorrect-type-in-initializer-(different-address-spaces)-expected-int-noderef-asn-noderef-asn-got-int-noderef-asn-tid_addr | |-- mm-page_alloc.c:sparse:sparse:symbol-pcpu_drain_mutex-was-not-declared.-Should-it-be-static | |-- mm-page_vma_mapped.c:sparse:sparse:Using-plain-integer-as-NULL-pointer | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | |-- mm-slub.c:sparse:sparse:dereference-of-noderef-expression | |-- mm-slub.c:sparse:sparse:incorrect-type-in-initializer-(different-address-spaces)-expected-unsigned-long-noderef-asn-got-unsigned-long | |-- mm-slub.c:sparse:sparse:incorrect-type-in-initializer-(different-address-spaces)-expected-void-noderef-asn-got-void | |-- mm-vmstat.c:sparse:sparse:dereference-of-noderef-expression | `-- mm-vmstat.c:sparse:sparse:incorrect-type-in-initializer-(different-address-spaces)-expected-signed-char-noderef-usertype-asn-got-signed-char |-- x86_64-allnoconfig | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-allnoconfig-bpf | |-- (.text):undefined-reference-to-_DYNAMIC | |-- (.text):undefined-reference-to-_fini | `-- (.text):undefined-reference-to-_init |-- x86_64-buildonly-randconfig-001-20251118 | |-- block-bfq-cgroup.o:warning:objtool:missing-symbol-for-section-.text | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | |-- mm-page_ext.o:warning:objtool:missing-symbol-for-section-.init.text | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-buildonly-randconfig-003-20251118 | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-buildonly-randconfig-004-20251118 | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | |-- mm-memcontrol.c:warning:bad-line:otherwise. | `-- mm-rmap.c:warning:variable-cstart-set-but-not-used |-- x86_64-buildonly-randconfig-005-20251118 | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | |-- mm-memcontrol.c:warning:bad-line:otherwise. | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-buildonly-randconfig-006-20251118 | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-randconfig-001-20251119 | |-- fs-ext4-mballoc.o:warning:objtool:ext4_mb_complex_scan_group:unreachable-instruction | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | |-- mm-memcontrol.c:warning:bad-line:otherwise. | `-- mm-rmap.c:warning:variable-cstart-set-but-not-used |-- x86_64-randconfig-002-20251119 | |-- mm-memcontrol.c:warning:bad-line:otherwise. | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-randconfig-006-20251119 | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | |-- mm-memcontrol.c:warning:bad-line:otherwise. | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-randconfig-011-20251119 | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-randconfig-012-20251119 | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | `-- mm-rmap.c:warning:variable-cstart-set-but-not-used |-- x86_64-randconfig-013-20251119 | |-- kernel-sched-core.c:error:use-of-undeclared-identifier-root_task_group | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-randconfig-015-20251119 | |-- kernel-sched-core.c:error:use-of-undeclared-identifier-root_task_group | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | |-- mm-memcontrol.c:warning:bad-line:otherwise. | `-- mm-rmap.c:warning:variable-cstart-set-but-not-used |-- x86_64-randconfig-072-20251118 | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | |-- mm-memcontrol.c:warning:bad-line:otherwise. | `-- mm-rmap.c:warning:variable-cstart-set-but-not-used |-- x86_64-randconfig-076-20251118 | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-randconfig-102-20251119 | |-- arch-x86-events-zhaoxin-uncore.c:opportunity-for-str_enabled_disabled(uncore_enabled) | |-- crypto-aead.c:opportunity-for-str_yes_no(alg-cra_flags-CRYPTO_ALG_ASYNC) | |-- kernel-sched-core.c:error:use-of-undeclared-identifier-root_task_group | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-randconfig-104-20251119 | |-- arch-x86-events-zhaoxin-uncore.c:opportunity-for-str_enabled_disabled(uncore_enabled) | |-- crypto-aead.c:opportunity-for-str_yes_no(alg-cra_flags-CRYPTO_ALG_ASYNC) | |-- mm-rmap.c:warning:variable-cstart-set-but-not-used | `-- mm-vmscan.c:error:implicit-declaration-of-function-kernel_swap_enabled-Werror-Wimplicit-function-declaration |-- x86_64-randconfig-121-20251119 | |-- include-linux-backing-dev.h:sparse:sparse:incompatible-types-in-comparison-expression-(different-address-spaces): | |-- mm-hugetlb.c:warning:no-previous-prototype-for-function-free_huge_page_to_dhugetlb_pool | `-- mm-rmap.c:warning:variable-cstart-set-but-not-used `-- x86_64-randconfig-123-20251119 |-- include-linux-backing-dev.h:sparse:sparse:incompatible-types-in-comparison-expression-(different-address-spaces): `-- mm-rmap.c:warning:variable-cstart-set-but-not-used elapsed time: 1573m configs tested: 32 configs skipped: 105 tested configs: arm64 allnoconfig gcc-15.1.0 arm64 defconfig gcc-15.1.0 arm64 randconfig-001-20251118 gcc-9.5.0 arm64 randconfig-002-20251118 gcc-12.5.0 arm64 randconfig-003-20251118 gcc-14.3.0 arm64 randconfig-004-20251118 gcc-12.5.0 x86_64 allnoconfig clang-20 x86_64 buildonly-randconfig-001-20251118 clang-20 x86_64 buildonly-randconfig-002-20251118 gcc-14 x86_64 buildonly-randconfig-003-20251118 clang-20 x86_64 buildonly-randconfig-004-20251118 clang-20 x86_64 buildonly-randconfig-005-20251118 clang-20 x86_64 buildonly-randconfig-006-20251118 clang-20 x86_64 defconfig gcc-14 x86_64 randconfig-001-20251119 clang-20 x86_64 randconfig-002-20251119 clang-20 x86_64 randconfig-003-20251119 gcc-14 x86_64 randconfig-004-20251119 gcc-14 x86_64 randconfig-005-20251119 gcc-14 x86_64 randconfig-006-20251119 clang-20 x86_64 randconfig-011-20251119 clang-20 x86_64 randconfig-012-20251119 clang-20 x86_64 randconfig-013-20251119 clang-20 x86_64 randconfig-014-20251119 gcc-14 x86_64 randconfig-015-20251119 clang-20 x86_64 randconfig-016-20251119 gcc-14 x86_64 randconfig-071-20251118 gcc-13 x86_64 randconfig-072-20251118 clang-20 x86_64 randconfig-073-20251118 gcc-14 x86_64 randconfig-074-20251118 gcc-13 x86_64 randconfig-075-20251118 gcc-14 x86_64 randconfig-076-20251118 clang-20 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 19 Nov '25

19 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm/tools/syscall.tbl | 2 +- arch/arm64/configs/openeuler_defconfig | 1 + arch/powerpc/kernel/syscalls/syscall.tbl | 2 +- arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_32.tbl | 2 +- arch/x86/entry/syscalls/syscall_64.tbl | 2 +- drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 +++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 ++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++ include/uapi/asm-generic/unistd.h | 5 +- include/uapi/linux/xcu_vstream.h | 77 ++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 83 ++ kernel/xsched/Makefile | 9 + kernel/xsched/cfs.c | 237 ++++++ kernel/xsched/cfs_quota.c | 98 +++ kernel/xsched/cgroup.c | 775 ++++++++++++++++++ kernel/xsched/core.c | 526 ++++++++++++ kernel/xsched/rt.c | 281 +++++++ kernel/xsched/vstream.c | 674 +++++++++++++++ .../arch/powerpc/entry/syscalls/syscall.tbl | 2 +- .../arch/x86/entry/syscalls/syscall_64.tbl | 2 +- 29 files changed, 3864 insertions(+), 9 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 19 Nov '25

19 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm/tools/syscall.tbl | 2 +- arch/arm64/configs/openeuler_defconfig | 1 + arch/powerpc/kernel/syscalls/syscall.tbl | 2 +- arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_32.tbl | 2 +- arch/x86/entry/syscalls/syscall_64.tbl | 2 +- drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 +++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 ++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++ include/uapi/asm-generic/unistd.h | 5 +- include/uapi/linux/xcu_vstream.h | 77 ++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 ++ kernel/xsched/Makefile | 9 + kernel/xsched/cfs.c | 237 ++++++ kernel/xsched/cfs_quota.c | 98 +++ kernel/xsched/cgroup.c | 775 ++++++++++++++++++ kernel/xsched/core.c | 526 ++++++++++++ kernel/xsched/rt.c | 281 +++++++ kernel/xsched/vstream.c | 674 +++++++++++++++ .../arch/powerpc/entry/syscalls/syscall.tbl | 2 +- .../arch/x86/entry/syscalls/syscall_64.tbl | 2 +- 29 files changed, 3866 insertions(+), 9 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[PATCH OLK-6.6] mm: hugetlb: avoid soft lockup when mprotect to large memory area
by Tong Tiangen 19 Nov '25

19 Nov '25

From: Yang Shi <yang(a)os.amperecomputing.com> stable inclusion from stable-v6.6.112 commit 964598e6f70a1be9fe675280bf16b4f96b0a6809 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B8J CVE: CVE-2025-40153 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit f52ce0ea90c83a28904c7cc203a70e6434adfecb upstream. When calling mprotect() to a large hugetlb memory area in our customer's workload (~300GB hugetlb memory), soft lockup was observed: watchdog: BUG: soft lockup - CPU#98 stuck for 23s! [t2_new_sysv:126916] CPU: 98 PID: 126916 Comm: t2_new_sysv Kdump: loaded Not tainted 6.17-rc7 Hardware name: GIGACOMPUTING R2A3-T40-AAV1/Jefferson CIO, BIOS 5.4.4.1 07/15/2025 pstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : mte_clear_page_tags+0x14/0x24 lr : mte_sync_tags+0x1c0/0x240 sp : ffff80003150bb80 x29: ffff80003150bb80 x28: ffff00739e9705a8 x27: 0000ffd2d6a00000 x26: 0000ff8e4bc00000 x25: 00e80046cde00f45 x24: 0000000000022458 x23: 0000000000000000 x22: 0000000000000004 x21: 000000011b380000 x20: ffff000000000000 x19: 000000011b379f40 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000000 x10: 0000000000000000 x9 : ffffc875e0aa5e2c x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : fffffc01ce7a5c00 x4 : 00000000046cde00 x3 : fffffc0000000000 x2 : 0000000000000004 x1 : 0000000000000040 x0 : ffff0046cde7c000 Call trace: mte_clear_page_tags+0x14/0x24 set_huge_pte_at+0x25c/0x280 hugetlb_change_protection+0x220/0x430 change_protection+0x5c/0x8c mprotect_fixup+0x10c/0x294 do_mprotect_pkey.constprop.0+0x2e0/0x3d4 __arm64_sys_mprotect+0x24/0x44 invoke_syscall+0x50/0x160 el0_svc_common+0x48/0x144 do_el0_svc+0x30/0xe0 el0_svc+0x30/0xf0 el0t_64_sync_handler+0xc4/0x148 el0t_64_sync+0x1a4/0x1a8 Soft lockup is not triggered with THP or base page because there is cond_resched() called for each PMD size. Although the soft lockup was triggered by MTE, it should be not MTE specific. The other processing which takes long time in the loop may trigger soft lockup too. So add cond_resched() for hugetlb to avoid soft lockup. Link: https://lkml.kernel.org/r/20250929202402.1663290-1-yang@os.amperecomputing.… Fixes: 8f860591ffb2 ("[PATCH] Enable mprotect on huge pages") Signed-off-by: Yang Shi <yang(a)os.amperecomputing.com> Tested-by: Carl Worth <carl(a)os.amperecomputing.com> Reviewed-by: Christoph Lameter (Ampere) <cl(a)gentwo.org> Reviewed-by: Catalin Marinas <catalin.marinas(a)arm.com> Acked-by: David Hildenbrand <david(a)redhat.com> Acked-by: Oscar Salvador <osalvador(a)suse.de> Reviewed-by: Anshuman Khandual <anshuman.khandual(a)arm.com> Reviewed-by: Dev Jain <dev.jain(a)arm.com> Cc: Muchun Song <muchun.song(a)linux.dev> Cc: Will Deacon <will(a)kernel.org> Cc: <stable(a)vger.kernel.org> Signed-off-by: Andrew Morton <akpm(a)linux-foundation.org> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Tong Tiangen <tongtiangen(a)huawei.com> --- mm/hugetlb.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/mm/hugetlb.c b/mm/hugetlb.c index ead99b38472a..5234ee0615bb 100644 --- a/mm/hugetlb.c +++ b/mm/hugetlb.c @@ -7144,6 +7144,8 @@ long hugetlb_change_protection(struct vm_area_struct *vma, psize); } spin_unlock(ptl); + + cond_resched(); } /* * Must flush TLB before releasing i_mmap_rwsem: x86's huge_pmd_unshare -- 2.25.1

2 1

[PATCH OLK-6.6 0/3] Fix some bugs.
by Jinjie Ruan 19 Nov '25

19 Nov '25

Fix some bugs. Jinjie Ruan (3): xcall2.0: Fix module unload issue by fixing refcount xcall2.0: Fix the semantic changes and concurrency issues in xcall_enable xcall2.0: Fix stack-out-of-bounds bug in xcall_write() arch/arm64/kernel/xcall/core.c | 8 ++++++++ fs/proc/proc_xcall.c | 25 ++++++++++++++++++++----- include/linux/xcall.h | 2 ++ kernel/fork.c | 3 ++- 4 files changed, 32 insertions(+), 6 deletions(-) -- 2.34.1

2 4

[PATCH OLK-6.6] arch_numa: make node_reclaim_distance_setup static
by Wupeng Ma 19 Nov '25

19 Nov '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ID4GC1 -------------------------------- Since node_reclaim_distance_setup is not used by others, make it static. Reported-by: kernel test robot <lkp(a)intel.com> Closes: https://lore.kernel.org/oe-kbuild-all/202511151421.e3kZPnSA-lkp@intel.com/ Fixes: 5e5d40e65cb5 ("arch_numa: Make node reclaim distance adjustment always available") Signed-off-by: Wupeng Ma <mawupeng1(a)huawei.com> --- drivers/base/arch_numa.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/base/arch_numa.c b/drivers/base/arch_numa.c index f1a86af00d25d..a280af59a821c 100644 --- a/drivers/base/arch_numa.c +++ b/drivers/base/arch_numa.c @@ -191,7 +191,7 @@ void __init setup_per_cpu_areas(void) #endif #define DISTANCE_MAX (1 << DISTANCE_BITS) -int __init node_reclaim_distance_setup(char *str) +static int __init node_reclaim_distance_setup(char *str) { int val; -- 2.43.0

2 1

[PATCH OLK-5.10] mm: proc: use per_vma mmap_lock for vma traversal.
by Qi Xi 19 Nov '25

19 Nov '25

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/ID6KMQ -------------------------------- The current method of reading /proc/pid/numa_maps uses a global mmap_lock, which can block high-priority writers and therefore lead to low performance. The mmap_lock is held during vma traversal, acquired in m_start() and released in m_stop(). Now introduces a more fine-grained mmap_lock that next() releases and reacquires the lock between vma iterations. The fine-grained lock avoids priority inversion and improves concurrency. However, the output is non-atomic for the entire address space. Signed-off-by: Qi Xi <xiqi2(a)huawei.com> --- fs/proc/task_mmu.c | 113 +++++++++++++++++++++++++++++++++++++-- include/linux/pagewalk.h | 2 + mm/pagewalk.c | 27 ++++++++++ 3 files changed, 138 insertions(+), 4 deletions(-) diff --git a/fs/proc/task_mmu.c b/fs/proc/task_mmu.c index 7b41f7c290ce..4370eb895e76 100644 --- a/fs/proc/task_mmu.c +++ b/fs/proc/task_mmu.c @@ -182,6 +182,102 @@ static void *m_next(struct seq_file *m, void *v, loff_t *ppos) return next; } +static void *numa_maps_next(struct seq_file *m, void *v, loff_t *ppos) +{ + struct proc_maps_private *priv = m->private; + struct vm_area_struct *next = NULL; + struct vm_area_struct *vma = v; + struct mm_struct *mm = priv->mm; + unsigned long last_vma_end; + unsigned long last_vma_start; + int ret; + + if (!mm) + goto out; + + if (vma == priv->tail_vma) + goto out; + + if (vma->vm_next) + next = vma->vm_next; + else + next = priv->tail_vma; + + last_vma_end = vma->vm_end; + last_vma_start = vma->vm_start; + if (mmap_lock_is_contended(mm)) { + mmap_read_unlock(mm); + ret = mmap_read_lock_killable(mm); + if (ret) { + mmput(mm); + put_task_struct(priv->task); + priv->task = NULL; + return ERR_PTR(ret); + } + + /* + * After dropping the lock, there are four cases to + * consider. See the following example for explanation. + * + * +------+------+-----------+ + * | VMA1 | VMA2 | VMA3 | + * +------+------+-----------+ + * | | | | + * 4k 8k 16k 400k + * + * Suppose we drop the lock after reading VMA2 due to + * contention, then we get: + * + * last_vma_end = 16k + * + * 1) VMA2 is freed, but VMA3 exists: + * + * find_vma(mm, 16k - 1) will return VMA3. + * In this case, just continue from VMA3. + * + * 2) VMA2 still exists: + * + * find_vma(mm, 16k - 1) will return VMA2. + * Iterate the loop like the original one. + * + * 3) No more VMAs can be found: + * + * find_vma(mm, 16k - 1) will return NULL. + * No more things to do, just break. + * + * 4) (last_vma_end - 1) is the middle of a vma (VMA'): + * + * find_vma(mm, 16k - 1) will return VMA' whose range + * contains last_vma_end. + * Iterate VMA' from last_vma_end. + */ + next = find_vma(mm, last_vma_end - 1); + + /* Case 3 above */ + if (!next) + goto out; + + /* Case 1 above */ + if (next->vm_start >= last_vma_end) + goto out; + + /* Case 4 above */ + if (next->vm_end > last_vma_end) { + *ppos = last_vma_end; + return next; + } + + /* Case 2 above */ + if (next->vm_next) + next = next->vm_next; + else + next = priv->tail_vma; + } +out: + *ppos = next ? next->vm_start : -1UL; + return next; +} + static void m_stop(struct seq_file *m, void *v) { struct proc_maps_private *priv = m->private; @@ -2260,6 +2356,7 @@ static int show_numa_map(struct seq_file *m, void *v) struct mempolicy *pol; char buffer[64]; int nid; + unsigned long start_addr; if (!mm) return 0; @@ -2267,7 +2364,15 @@ static int show_numa_map(struct seq_file *m, void *v) /* Ensure we start with an empty set of numa_maps statistics. */ memset(md, 0, sizeof(*md)); - pol = __get_vma_policy(vma, vma->vm_start); + start_addr = max_t(unsigned long, vma->vm_start, m->index); + if (start_addr >= vma->vm_end) { + VM_WARN_ONCE(1, + "invalid range: start_addr=%p vma=[%p-%p]\n", + (void *)start_addr, (void *)vma->vm_start, (void *)vma->vm_end); + return 0; + } + + pol = __get_vma_policy(vma, start_addr); if (pol) { mpol_to_str(buffer, sizeof(buffer), pol); mpol_cond_put(pol); @@ -2275,7 +2380,7 @@ static int show_numa_map(struct seq_file *m, void *v) mpol_to_str(buffer, sizeof(buffer), proc_priv->task_mempolicy); } - seq_printf(m, "%08lx %s", vma->vm_start, buffer); + seq_printf(m, "%08lx %s", start_addr, buffer); if (file) { seq_puts(m, " file="); @@ -2290,7 +2395,7 @@ static int show_numa_map(struct seq_file *m, void *v) seq_puts(m, " huge"); /* mmap_lock is held by m_start */ - walk_page_vma(vma, &show_numa_ops, md); + walk_page_vma_range(vma, start_addr, &show_numa_ops, md); if (!md->pages) goto out; @@ -2328,7 +2433,7 @@ static int show_numa_map(struct seq_file *m, void *v) static const struct seq_operations proc_pid_numa_maps_op = { .start = m_start, - .next = m_next, + .next = numa_maps_next, .stop = m_stop, .show = show_numa_map, }; diff --git a/include/linux/pagewalk.h b/include/linux/pagewalk.h index b1cb6b753abb..9b8e2586cfc2 100644 --- a/include/linux/pagewalk.h +++ b/include/linux/pagewalk.h @@ -101,6 +101,8 @@ int walk_page_range_novma(struct mm_struct *mm, unsigned long start, void *private); int walk_page_vma(struct vm_area_struct *vma, const struct mm_walk_ops *ops, void *private); +int walk_page_vma_range(struct vm_area_struct *vma, unsigned long start_addr, + const struct mm_walk_ops *ops, void *private); int walk_page_mapping(struct address_space *mapping, pgoff_t first_index, pgoff_t nr, const struct mm_walk_ops *ops, void *private); diff --git a/mm/pagewalk.c b/mm/pagewalk.c index 6a4212cf00ba..12032258d1ec 100644 --- a/mm/pagewalk.c +++ b/mm/pagewalk.c @@ -485,6 +485,33 @@ int walk_page_vma(struct vm_area_struct *vma, const struct mm_walk_ops *ops, return __walk_page_range(vma->vm_start, vma->vm_end, &walk); } +int walk_page_vma_range(struct vm_area_struct *vma, unsigned long start_addr, + const struct mm_walk_ops *ops, void *private) +{ + struct mm_walk walk = { + .ops = ops, + .mm = vma->vm_mm, + .vma = vma, + .private = private, + }; + int err; + + if (!walk.mm) + return -EINVAL; + + if (start_addr < vma->vm_start || start_addr >= vma->vm_end) + return -EINVAL; + + mmap_assert_locked(walk.mm); + + err = walk_page_test(start_addr, vma->vm_end, &walk); + if (err > 0) + return 0; + if (err < 0) + return err; + return __walk_page_range(start_addr, vma->vm_end, &walk); +} + /** * walk_page_mapping - walk all memory areas mapped into a struct address_space. * @mapping: Pointer to the struct address_space -- 2.33.0

2 1

[PATCH OLK-5.10] mm: proc: use per_vma mmap_lock for vma traversal.
by Qi Xi 19 Nov '25

19 Nov '25

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/ID6KMQ -------------------------------- The current method of reading /proc/pid/numa_maps uses a global mmap_lock, which can block high-priority writers and therefore lead to low performance. The mmap_lock is held during vma traversal, acquired in m_start() and released in m_stop(). Now introduces a more fine-grained mmap_lock that next() releases and reacquires the lock between vma iterations. The fine-grained lock avoids priority inversion and improves concurrency. However, the output is non-atomic for the entire address space. Signed-off-by: Qi Xi <xiqi2(a)huawei.com> --- fs/proc/task_mmu.c | 113 +++++++++++++++++++++++++++++++++++++-- include/linux/pagewalk.h | 2 + mm/pagewalk.c | 27 ++++++++++ 3 files changed, 138 insertions(+), 4 deletions(-) diff --git a/fs/proc/task_mmu.c b/fs/proc/task_mmu.c index 7b41f7c290ce..4370eb895e76 100644 --- a/fs/proc/task_mmu.c +++ b/fs/proc/task_mmu.c @@ -182,6 +182,102 @@ static void *m_next(struct seq_file *m, void *v, loff_t *ppos) return next; } +static void *numa_maps_next(struct seq_file *m, void *v, loff_t *ppos) +{ + struct proc_maps_private *priv = m->private; + struct vm_area_struct *next = NULL; + struct vm_area_struct *vma = v; + struct mm_struct *mm = priv->mm; + unsigned long last_vma_end; + unsigned long last_vma_start; + int ret; + + if (!mm) + goto out; + + if (vma == priv->tail_vma) + goto out; + + if (vma->vm_next) + next = vma->vm_next; + else + next = priv->tail_vma; + + last_vma_end = vma->vm_end; + last_vma_start = vma->vm_start; + if (mmap_lock_is_contended(mm)) { + mmap_read_unlock(mm); + ret = mmap_read_lock_killable(mm); + if (ret) { + mmput(mm); + put_task_struct(priv->task); + priv->task = NULL; + return ERR_PTR(ret); + } + + /* + * After dropping the lock, there are four cases to + * consider. See the following example for explanation. + * + * +------+------+-----------+ + * | VMA1 | VMA2 | VMA3 | + * +------+------+-----------+ + * | | | | + * 4k 8k 16k 400k + * + * Suppose we drop the lock after reading VMA2 due to + * contention, then we get: + * + * last_vma_end = 16k + * + * 1) VMA2 is freed, but VMA3 exists: + * + * find_vma(mm, 16k - 1) will return VMA3. + * In this case, just continue from VMA3. + * + * 2) VMA2 still exists: + * + * find_vma(mm, 16k - 1) will return VMA2. + * Iterate the loop like the original one. + * + * 3) No more VMAs can be found: + * + * find_vma(mm, 16k - 1) will return NULL. + * No more things to do, just break. + * + * 4) (last_vma_end - 1) is the middle of a vma (VMA'): + * + * find_vma(mm, 16k - 1) will return VMA' whose range + * contains last_vma_end. + * Iterate VMA' from last_vma_end. + */ + next = find_vma(mm, last_vma_end - 1); + + /* Case 3 above */ + if (!next) + goto out; + + /* Case 1 above */ + if (next->vm_start >= last_vma_end) + goto out; + + /* Case 4 above */ + if (next->vm_end > last_vma_end) { + *ppos = last_vma_end; + return next; + } + + /* Case 2 above */ + if (next->vm_next) + next = next->vm_next; + else + next = priv->tail_vma; + } +out: + *ppos = next ? next->vm_start : -1UL; + return next; +} + static void m_stop(struct seq_file *m, void *v) { struct proc_maps_private *priv = m->private; @@ -2260,6 +2356,7 @@ static int show_numa_map(struct seq_file *m, void *v) struct mempolicy *pol; char buffer[64]; int nid; + unsigned long start_addr; if (!mm) return 0; @@ -2267,7 +2364,15 @@ static int show_numa_map(struct seq_file *m, void *v) /* Ensure we start with an empty set of numa_maps statistics. */ memset(md, 0, sizeof(*md)); - pol = __get_vma_policy(vma, vma->vm_start); + start_addr = max_t(unsigned long, vma->vm_start, m->index); + if (start_addr >= vma->vm_end) { + VM_WARN_ONCE(1, + "invalid range: start_addr=%p vma=[%p-%p]\n", + (void *)start_addr, (void *)vma->vm_start, (void *)vma->vm_end); + return 0; + } + + pol = __get_vma_policy(vma, start_addr); if (pol) { mpol_to_str(buffer, sizeof(buffer), pol); mpol_cond_put(pol); @@ -2275,7 +2380,7 @@ static int show_numa_map(struct seq_file *m, void *v) mpol_to_str(buffer, sizeof(buffer), proc_priv->task_mempolicy); } - seq_printf(m, "%08lx %s", vma->vm_start, buffer); + seq_printf(m, "%08lx %s", start_addr, buffer); if (file) { seq_puts(m, " file="); @@ -2290,7 +2395,7 @@ static int show_numa_map(struct seq_file *m, void *v) seq_puts(m, " huge"); /* mmap_lock is held by m_start */ - walk_page_vma(vma, &show_numa_ops, md); + walk_page_vma_range(vma, start_addr, &show_numa_ops, md); if (!md->pages) goto out; @@ -2328,7 +2433,7 @@ static int show_numa_map(struct seq_file *m, void *v) static const struct seq_operations proc_pid_numa_maps_op = { .start = m_start, - .next = m_next, + .next = numa_maps_next, .stop = m_stop, .show = show_numa_map, }; diff --git a/include/linux/pagewalk.h b/include/linux/pagewalk.h index b1cb6b753abb..9b8e2586cfc2 100644 --- a/include/linux/pagewalk.h +++ b/include/linux/pagewalk.h @@ -101,6 +101,8 @@ int walk_page_range_novma(struct mm_struct *mm, unsigned long start, void *private); int walk_page_vma(struct vm_area_struct *vma, const struct mm_walk_ops *ops, void *private); +int walk_page_vma_range(struct vm_area_struct *vma, unsigned long start_addr, + const struct mm_walk_ops *ops, void *private); int walk_page_mapping(struct address_space *mapping, pgoff_t first_index, pgoff_t nr, const struct mm_walk_ops *ops, void *private); diff --git a/mm/pagewalk.c b/mm/pagewalk.c index 6a4212cf00ba..12032258d1ec 100644 --- a/mm/pagewalk.c +++ b/mm/pagewalk.c @@ -485,6 +485,33 @@ int walk_page_vma(struct vm_area_struct *vma, const struct mm_walk_ops *ops, return __walk_page_range(vma->vm_start, vma->vm_end, &walk); } +int walk_page_vma_range(struct vm_area_struct *vma, unsigned long start_addr, + const struct mm_walk_ops *ops, void *private) +{ + struct mm_walk walk = { + .ops = ops, + .mm = vma->vm_mm, + .vma = vma, + .private = private, + }; + int err; + + if (!walk.mm) + return -EINVAL; + + if (start_addr < vma->vm_start || start_addr >= vma->vm_end) + return -EINVAL; + + mmap_assert_locked(walk.mm); + + err = walk_page_test(start_addr, vma->vm_end, &walk); + if (err > 0) + return 0; + if (err < 0) + return err; + return __walk_page_range(start_addr, vma->vm_end, &walk); +} + /** * walk_page_mapping - walk all memory areas mapped into a struct address_space. * @mapping: Pointer to the struct address_space -- 2.33.0

2 1

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 19 Nov '25

19 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm/tools/syscall.tbl | 2 +- arch/arm64/configs/openeuler_defconfig | 2 + arch/powerpc/kernel/syscalls/syscall.tbl | 2 +- arch/x86/configs/openeuler_defconfig | 2 + arch/x86/entry/syscalls/syscall_32.tbl | 2 +- arch/x86/entry/syscalls/syscall_64.tbl | 2 +- drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 +++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 ++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++ include/uapi/asm-generic/unistd.h | 5 +- include/uapi/linux/xcu_vstream.h | 77 ++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 ++ kernel/xsched/Makefile | 9 + kernel/xsched/cfs.c | 237 ++++++ kernel/xsched/cfs_quota.c | 98 +++ kernel/xsched/cgroup.c | 775 ++++++++++++++++++ kernel/xsched/core.c | 526 ++++++++++++ kernel/xsched/rt.c | 281 +++++++ kernel/xsched/vstream.c | 674 +++++++++++++++ .../arch/powerpc/entry/syscalls/syscall.tbl | 2 +- .../arch/x86/entry/syscalls/syscall_64.tbl | 2 +- 29 files changed, 3868 insertions(+), 9 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[PATCH OLK-6.6] blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx
by Zheng Qixing 19 Nov '25

19 Nov '25

From: Li Nan <linan122(a)huawei.com> mainline inclusion from mainline-v6.18-rc1 commit 4c7ef92f6d4d08a27d676e4c348f4e2922cab3ed category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B4D CVE: CVE-2025-40125 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?… ------------------ In __blk_mq_update_nr_hw_queues() the return value of blk_mq_sysfs_register_hctxs() is not checked. If sysfs creation for hctx fails, later changing the number of hw_queues or removing disk will trigger the following warning: kernfs: can not remove 'nr_tags', no directory WARNING: CPU: 2 PID: 637 at fs/kernfs/dir.c:1707 kernfs_remove_by_name_ns+0x13f/0x160 Call Trace: remove_files.isra.1+0x38/0xb0 sysfs_remove_group+0x4d/0x100 sysfs_remove_groups+0x31/0x60 __kobject_del+0x23/0xf0 kobject_del+0x17/0x40 blk_mq_unregister_hctx+0x5d/0x80 blk_mq_sysfs_unregister_hctxs+0x94/0xd0 blk_mq_update_nr_hw_queues+0x124/0x760 nullb_update_nr_hw_queues+0x71/0xf0 [null_blk] nullb_device_submit_queues_store+0x92/0x120 [null_blk] kobjct_del() was called unconditionally even if sysfs creation failed. Fix it by checkig the kobject creation statusbefore deleting it. Fixes: 477e19dedc9d ("blk-mq: adjust debugfs and sysfs register when updating nr_hw_queues") Signed-off-by: Li Nan <linan122(a)huawei.com> Reviewed-by: Yu Kuai <yukuai3(a)huawei.com> Link: https://lore.kernel.org/r/20250826084854.1030545-1-linan666@huaweicloud.com Signed-off-by: Jens Axboe <axboe(a)kernel.dk> Signed-off-by: Zheng Qixing <zhengqixing(a)huawei.com> --- block/blk-mq-sysfs.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/block/blk-mq-sysfs.c b/block/blk-mq-sysfs.c index 156e9bb07abf..2fb234ab467b 100644 --- a/block/blk-mq-sysfs.c +++ b/block/blk-mq-sysfs.c @@ -150,9 +150,11 @@ static void blk_mq_unregister_hctx(struct blk_mq_hw_ctx *hctx) return; hctx_for_each_ctx(hctx, ctx, i) - kobject_del(&ctx->kobj); + if (ctx->kobj.state_in_sysfs) + kobject_del(&ctx->kobj); - kobject_del(&hctx->kobj); + if (hctx->kobj.state_in_sysfs) + kobject_del(&hctx->kobj); } static int blk_mq_register_hctx(struct blk_mq_hw_ctx *hctx) -- 2.39.2

2 1

[PATCH openEuler-1.0-LTS] scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses
by Zheng Qixing 19 Nov '25

19 Nov '25

From: Tomas Henzl <thenzl(a)redhat.com> stable inclusion from stable-v4.19.276 commit a156a262c543fa5ff30bcb2fc6ad1a95cb4ab57a category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID43SW CVE: CVE-2023-7324 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ------------------ commit db95d4df71cb55506425b6e4a5f8d68e3a765b63 upstream. Sanitize possible addl_desc_ptr out-of-bounds accesses in ses_enclosure_data_process(). Link: https://lore.kernel.org/r/20230202162451.15346-3-thenzl@redhat.com Cc: stable(a)vger.kernel.org Signed-off-by: Tomas Henzl <thenzl(a)redhat.com> Signed-off-by: Martin K. Petersen <martin.petersen(a)oracle.com> Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Conflicts: drivers/scsi/ses.c [Context conflicts.] Signed-off-by: Zheng Qixing <zhengqixing(a)huawei.com> --- drivers/scsi/ses.c | 35 ++++++++++++++++++++++++++--------- 1 file changed, 26 insertions(+), 9 deletions(-) diff --git a/drivers/scsi/ses.c b/drivers/scsi/ses.c index 6ef1e12a2fce..b42c0bb8caa9 100644 --- a/drivers/scsi/ses.c +++ b/drivers/scsi/ses.c @@ -435,8 +435,8 @@ int ses_match_host(struct enclosure_device *edev, void *data) } #endif /* 0 */ -static void ses_process_descriptor(struct enclosure_component *ecomp, - unsigned char *desc) +static int ses_process_descriptor(struct enclosure_component *ecomp, + unsigned char *desc, int max_desc_len) { int eip = desc[0] & 0x10; int invalid = desc[0] & 0x80; @@ -447,22 +447,32 @@ static void ses_process_descriptor(struct enclosure_component *ecomp, unsigned char *d; if (invalid) - return; + return 0; switch (proto) { case SCSI_PROTOCOL_FCP: if (eip) { + if (max_desc_len <= 7) + return 1; d = desc + 4; slot = d[3]; } break; case SCSI_PROTOCOL_SAS: + if (eip) { + if (max_desc_len <= 27) + return 1; d = desc + 4; slot = d[3]; d = desc + 8; - } else + } else { + if (max_desc_len <= 23) + return 1; d = desc + 4; + } + + /* only take the phy0 addr */ addr = (u64)d[12] << 56 | (u64)d[13] << 48 | @@ -479,6 +489,8 @@ static void ses_process_descriptor(struct enclosure_component *ecomp, } ecomp->slot = slot; scomp->addr = addr; + + return 0; } struct efd { @@ -548,7 +560,7 @@ static void ses_enclosure_data_process(struct enclosure_device *edev, /* skip past overall descriptor */ desc_ptr += len + 4; } - if (ses_dev->page10) + if (ses_dev->page10 && ses_dev->page10_len > 9) addl_desc_ptr = ses_dev->page10 + 8; type_ptr = ses_dev->page1_types; components = 0; @@ -556,6 +568,7 @@ static void ses_enclosure_data_process(struct enclosure_device *edev, for (j = 0; j < type_ptr[1]; j++) { char *name = NULL; struct enclosure_component *ecomp; + int max_desc_len; if (desc_ptr) { if (desc_ptr + 3 >= buf + page7_len) { @@ -588,10 +601,14 @@ static void ses_enclosure_data_process(struct enclosure_device *edev, ecomp = ERR_PTR(-EINVAL); if (!IS_ERR(ecomp)) { - if (addl_desc_ptr) - ses_process_descriptor( - ecomp, - addl_desc_ptr); + if (addl_desc_ptr) { + max_desc_len = ses_dev->page10_len - + (addl_desc_ptr - ses_dev->page10); + if (ses_process_descriptor(ecomp, + addl_desc_ptr, + max_desc_len)) + addl_desc_ptr = NULL; + } if (create) enclosure_component_register( ecomp); -- 2.39.2

2 1

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 19 Nov '25

19 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm/tools/syscall.tbl | 2 +- arch/arm64/configs/openeuler_defconfig | 1 + arch/powerpc/kernel/syscalls/syscall.tbl | 2 +- arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_32.tbl | 2 +- arch/x86/entry/syscalls/syscall_64.tbl | 2 +- drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 +++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 ++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++ include/uapi/asm-generic/unistd.h | 5 +- include/uapi/linux/xcu_vstream.h | 77 ++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 ++ kernel/xsched/Makefile | 9 + kernel/xsched/cfs.c | 237 ++++++ kernel/xsched/cfs_quota.c | 98 +++ kernel/xsched/cgroup.c | 775 ++++++++++++++++++ kernel/xsched/core.c | 526 ++++++++++++ kernel/xsched/rt.c | 281 +++++++ kernel/xsched/vstream.c | 674 +++++++++++++++ .../arch/powerpc/entry/syscalls/syscall.tbl | 2 +- .../arch/x86/entry/syscalls/syscall_64.tbl | 2 +- 29 files changed, 3866 insertions(+), 9 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[PATCH OLK-6.6] blk-ioinf: fix default weight being reset to 0 for non-root cgroups
by Baokun Li 19 Nov '25

19 Nov '25

hulk inclusion category: feature bugzilla: https://gitee.com/openeuler/kernel/issues/ID0C1D -------------------------------- The legacy blkio cgroup treats both `/sys/fs/cgroup/blkio` (the true root) and `/sys/fs/cgroup/blkio/1` (often the first user-created cgroup) as root when initializing the per-device (pd) structure. Consequently, if a default weight is set for the non-root cgroup (`/sys/fs/cgroup/blkio/1`), it is incorrectly overwritten and reset to 0 inside `ioinf_pd_init()`. This patch resolves the issue by increasing the priority of the `IOINFG_WEIGHT_UNINIT` check, ensuring that an explicitly set default weight is honored and is not reset when the `pd` is initialized. Fixes: a63e78514d11 ("blk-ioinf: introduce inflight-based IO QoS controller") Signed-off-by: Baokun Li <libaokun1(a)huawei.com> --- block/blk-ioinf.c | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/block/blk-ioinf.c b/block/blk-ioinf.c index 7432d88bf1f0..623c2715802b 100644 --- a/block/blk-ioinf.c +++ b/block/blk-ioinf.c @@ -1289,18 +1289,16 @@ static void ioinf_pd_init(struct blkg_policy_data *pd) struct blkcg_gq *parent = blkg->parent; infg->inf = q_to_inf(blkg->q); - if (!parent || parent->blkcg->css.cgroup->level == 0) { - infcg->dfl_user_weight = 0; - return; - } - - infg->user_weight = blkg_to_infg(parent)->user_weight; + if (parent) + infg->user_weight = blkg_to_infg(parent)->user_weight; /* Inherit the parent cgroup's dfl_user_weight if it was not set. */ if (infcg->dfl_user_weight == IOINFG_WEIGHT_UNINIT) { - struct ioinf_cgrp *parent_cgrp = blkcg_to_infcg(parent->blkcg); - - infcg->dfl_user_weight = parent_cgrp->dfl_user_weight; + if (!parent || parent->blkcg->css.cgroup->level == 0) + infcg->dfl_user_weight = 0; + else + infcg->dfl_user_weight = + blkcg_to_infcg(parent->blkcg)->dfl_user_weight; } infg->dfl_user_weight = infcg->dfl_user_weight; -- 2.46.1

2 1

[PATCH OLK-6.6] arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
by Zeng Heng 19 Nov '25

19 Nov '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IC03L1 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/morse/linux.git/commit/?h=m… -------------------------------- On the ARM64 architecture, the CONFIG_RESCTRL_IOMMU actually depends on the CONFIG_ARM_SMMU_V3, which allows to bind SMMU iommu_groups with resctrl groups. Therefore, add this build dependency in Kconfig. Additionally, to avoid compilation errors due to re-definitions in the include/linux/resctrl.h header file when the CONFIG_RESCTRL_IOMMU is disabled, add the build switch for resctrl_arch_*_iommu_closid_rmid(). Fixes: 7e3f95a1a861 ("fs/resctrl: Add support for assigning iommu_groups to resctrl groups") Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/platform/mpam/Kconfig | 2 +- drivers/platform/mpam/mpam_resctrl.c | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/platform/mpam/Kconfig b/drivers/platform/mpam/Kconfig index a6e937b8f91d..96dd7c091a9f 100644 --- a/drivers/platform/mpam/Kconfig +++ b/drivers/platform/mpam/Kconfig @@ -6,4 +6,4 @@ config ARM_CPU_RESCTRL depends on ARM64 && ARCH_HAS_CPU_RESCTRL depends on MISC_FILESYSTEMS select RESCTRL_RMID_DEPENDS_ON_CLOSID - select RESCTRL_IOMMU + select RESCTRL_IOMMU if ARM_SMMU_V3 diff --git a/drivers/platform/mpam/mpam_resctrl.c b/drivers/platform/mpam/mpam_resctrl.c index 2d3a1827a48c..7c386ce7b80f 100644 --- a/drivers/platform/mpam/mpam_resctrl.c +++ b/drivers/platform/mpam/mpam_resctrl.c @@ -260,6 +260,7 @@ bool resctrl_arch_match_rmid(struct task_struct *tsk, u32 closid, u32 rmid) return (tsk_closid == closid) && (tsk_rmid == rmid); } +#ifdef CONFIG_RESCTRL_IOMMU int resctrl_arch_set_iommu_closid_rmid(struct iommu_group *group, u32 closid, u32 rmid) { @@ -302,6 +303,7 @@ bool resctrl_arch_match_iommu_closid_rmid(struct iommu_group *group, return (partid == closid) && (rmid == pmg); } +#endif struct rdt_resource *resctrl_arch_get_resource(enum resctrl_res_level l) { -- 2.25.1

2 1

openEuler Kernel SIG双周例会
by openEuler conference 19 Nov '25

19 Nov '25

您好！ Kernel 邀请您参加 2025-11-21 14:00 召开的WeLink会议(自动录制) 会议主题：openEuler Kernel SIG双周例会会议内容： 1. 进展update 2. 议题征集中（新增议题可回复本邮件申请，或填报至会议纪要看板）会议链接：https://meeting.huaweicloud.com:36443/#/j/987186410 会议纪要：https://etherpad.openeuler.org/p/Kernel-meetings 更多资讯尽在：https://www.openeuler.org/zh/ Hello! Kernel invites you to attend the WeLink conference(auto recording) will be held at 2025-11-21 14:00, The subject of the conference is openEuler Kernel SIG双周例会 Summary: 1. 进展update 2. 议题征集中（新增议题可回复本邮件申请，或填报至会议纪要看板） You can join the meeting at https://meeting.huaweicloud.com:36443/#/j/987186410 Add topics at https://etherpad.openeuler.org/p/Kernel-meetings More information: https://www.openeuler.org/en/

1 0

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 19 Nov '25

19 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm64/configs/openeuler_defconfig | 1 + arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_64.tbl | 2 +- drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 +++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 ++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++ include/uapi/asm-generic/unistd.h | 5 +- include/uapi/linux/xcu_vstream.h | 77 ++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 ++ kernel/xsched/Makefile | 9 + kernel/xsched/cfs.c | 237 ++++++ kernel/xsched/cfs_quota.c | 98 +++ kernel/xsched/cgroup.c | 775 ++++++++++++++++++ kernel/xsched/core.c | 526 ++++++++++++ kernel/xsched/rt.c | 281 +++++++ kernel/xsched/vstream.c | 674 +++++++++++++++ .../arch/x86/entry/syscalls/syscall_64.tbl | 2 +- 25 files changed, 3862 insertions(+), 5 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[PATCH OLK-6.6 0/8] xsched: XCU Partition
by Zicheng Qu 19 Nov '25

19 Nov '25

Alekseev Dmitry (2): xsched: Add XCU control group implementation and its backend in xsched CFS xsched: Add support for CFS quota for cgroups Konstantin Meskhidze (6): xsched: Add base vstream support xcu: Add base NPU driver support xsched: Introduce vstream management xsched: Add basic scheduler core support xsched: Add xsched RT class xsched: Add xsched CFS class arch/arm64/configs/openeuler_defconfig | 1 + arch/x86/configs/openeuler_defconfig | 1 + arch/x86/entry/syscalls/syscall_64.tbl | 2 +- drivers/Makefile | 1 + drivers/xcu/Makefile | 2 + drivers/xcu/xcu_group.c | 380 ++++++++++++ include/linux/cgroup_subsys.h | 4 + include/linux/syscalls.h | 2 + include/linux/vstream.h | 91 +++ include/linux/xcu_group.h | 96 +++ include/linux/xsched.h | 514 ++++++++++++++++ include/uapi/asm-generic/unistd.h | 5 +- include/uapi/linux/xcu_vstream.h | 77 +++ init/Kconfig | 1 + kernel/Makefile | 1 + kernel/cgroup/cgroup.c | 2 +- kernel/xsched/Kconfig | 85 +++ kernel/xsched/Makefile | 9 + kernel/xsched/cfs.c | 237 ++++++++ kernel/xsched/cfs_quota.c | 98 ++++ kernel/xsched/cgroup.c | 775 +++++++++++++++++++++++++ kernel/xsched/core.c | 526 +++++++++++++++++ kernel/xsched/rt.c | 281 +++++++++ kernel/xsched/vstream.c | 674 +++++++++++++++++++++ 24 files changed, 3861 insertions(+), 4 deletions(-) create mode 100644 drivers/xcu/Makefile create mode 100644 drivers/xcu/xcu_group.c create mode 100644 include/linux/vstream.h create mode 100644 include/linux/xcu_group.h create mode 100644 include/linux/xsched.h create mode 100644 include/uapi/linux/xcu_vstream.h create mode 100644 kernel/xsched/Kconfig create mode 100644 kernel/xsched/Makefile create mode 100644 kernel/xsched/cfs.c create mode 100644 kernel/xsched/cfs_quota.c create mode 100644 kernel/xsched/cgroup.c create mode 100644 kernel/xsched/core.c create mode 100644 kernel/xsched/rt.c create mode 100644 kernel/xsched/vstream.c -- 2.34.1

2 9

[openeuler:OLK-6.6 3269/3269] drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:450:39: error: dereferencing pointer to incomplete type 'struct ieee_pfc'
by kernel test robot 19 Nov '25

19 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: b4a3c05741e1650e8bb8399196fb5d7a318a4698 commit: 2048b5b7f264f56a4d9e73079e790e13c8596aaf [3269/3269] net: wangxun: txgbe: add support for wangxun 10G/25G/40G config: arm64-randconfig-002-20251119 (https://download.01.org/0day-ci/archive/20251119/202511190613.H4utOQmR-lkp@…) compiler: aarch64-linux-gcc (GCC) 8.5.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251119/202511190613.H4utOQmR-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511190613.H4utOQmR-lkp@intel.com/ All error/warnings (new ones prefixed by >>): In file included from drivers/net/ethernet/wangxun/txgbe/txgbe_xsk.h:7, from drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:28: drivers/net/ethernet/wangxun/txgbe/txgbe.h: In function 'txgbe_misc_isb': drivers/net/ethernet/wangxun/txgbe/txgbe.h:987:6: warning: variable 'cur_diff' set but not used [-Wunused-but-set-variable] u32 cur_diff = 0; ^~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_update_xoff_received': >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:450:39: error: dereferencing pointer to incomplete type 'struct ieee_pfc' pfc_en |= !!(adapter->txgbe_ieee_pfc->pfc_en); ^~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_tx_timeout': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:582:7: warning: variable 'real_tx_hang' set but not used [-Wunused-but-set-variable] bool real_tx_hang = false; ^~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_do_lan_reset': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:2618:21: warning: variable 'tx_ring' set but not used [-Wunused-but-set-variable] struct txgbe_ring *tx_ring; ^~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: At top level: drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4515:5: warning: no previous prototype for 'txgbe_dcb_hw_ets' [-Wmissing-prototypes] s32 txgbe_dcb_hw_ets(struct txgbe_hw *hw, struct ieee_ets *ets, int max_frame) ^~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_dcb_hw_ets': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4517:15: error: 'IEEE_8021QAZ_MAX_TCS' undeclared (first use in this function) __u16 refill[IEEE_8021QAZ_MAX_TCS], max[IEEE_8021QAZ_MAX_TCS]; ^~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4517:15: note: each undeclared identifier is reported only once for each function it appears in >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4526:14: error: dereferencing pointer to incomplete type 'struct ieee_ets' switch (ets->tc_tsa[i]) { ^~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4527:8: error: 'IEEE_8021QAZ_TSA_STRICT' undeclared (first use in this function) case IEEE_8021QAZ_TSA_STRICT: ^~~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4530:8: error: 'IEEE_8021QAZ_TSA_ETS' undeclared (first use in this function) case IEEE_8021QAZ_TSA_ETS: ^~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4522:7: warning: unused variable 'bwg_id' [-Wunused-variable] __u8 bwg_id[IEEE_8021QAZ_MAX_TCS] = {0, 1, 2, 3, 4, 5, 6, 7}; ^~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4518:7: warning: unused variable 'prio_type' [-Wunused-variable] __u8 prio_type[IEEE_8021QAZ_MAX_TCS]; ^~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4517:38: warning: unused variable 'max' [-Wunused-variable] __u16 refill[IEEE_8021QAZ_MAX_TCS], max[IEEE_8021QAZ_MAX_TCS]; ^~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4517:8: warning: unused variable 'refill' [-Wunused-variable] __u16 refill[IEEE_8021QAZ_MAX_TCS], max[IEEE_8021QAZ_MAX_TCS]; ^~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_configure_dcb': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4591:26: error: 'DCB_CAP_DCBX_VER_IEEE' undeclared (first use in this function) if (adapter->dcbx_cap & DCB_CAP_DCBX_VER_IEEE) { ^~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: At top level: drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:6915:6: warning: no previous prototype for 'txgbe_irq_rearm_queues' [-Wmissing-prototypes] void txgbe_irq_rearm_queues(struct txgbe_adapter *adapter, ^~~~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_update_default_up': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7090:9: error: variable 'app' has initializer but incomplete type struct dcb_app app = { ^~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7091:11: error: 'struct dcb_app' has no member named 'selector' .selector = DCB_APP_IDTYPE_ETHTYPE, ^~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7091:22: error: 'DCB_APP_IDTYPE_ETHTYPE' undeclared (first use in this function); did you mean 'ENCAP_TYPE_ETHER'? .selector = DCB_APP_IDTYPE_ETHTYPE, ^~~~~~~~~~~~~~~~~~~~~~ ENCAP_TYPE_ETHER drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7091:22: warning: excess elements in struct initializer drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7091:22: note: (near initialization for 'app') drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7092:11: error: 'struct dcb_app' has no member named 'protocol' .protocol = 0, ^~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7092:22: warning: excess elements in struct initializer .protocol = 0, ^ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7092:22: note: (near initialization for 'app') drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7090:17: error: storage size of 'app' isn't known struct dcb_app app = { ^~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7094:7: error: implicit declaration of function 'dcb_getapp'; did you mean 'wb_get'? [-Werror=implicit-function-declaration] up = dcb_getapp(netdev, &app); ^~~~~~~~~~ wb_get drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:7090:17: warning: unused variable 'app' [-Wunused-variable] struct dcb_app app = { ^~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_set_prio_tc_map': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:9722:27: error: 'DCB_CAP_DCBX_VER_CEE' undeclared (first use in this function) if (adapter->dcbx_cap & DCB_CAP_DCBX_VER_CEE) ^~~~~~~~~~~~~~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: At top level: >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:10239:22: error: 'txgbe_fcoe_get_wwn' undeclared here (not in a function); did you mean 'txgbe_fcoe_enable'? .ndo_fcoe_get_wwn = txgbe_fcoe_get_wwn, ^~~~~~~~~~~~~~~~~~ txgbe_fcoe_enable drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_remove': >> drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:10826:2: error: implicit declaration of function 'txgbe_fcoe_ddp_disable'; did you mean 'txgbe_fcoe_disable'? [-Werror=implicit-function-declaration] txgbe_fcoe_ddp_disable(adapter); ^~~~~~~~~~~~~~~~~~~~~~ txgbe_fcoe_disable drivers/net/ethernet/wangxun/txgbe/txgbe_main.c: In function 'txgbe_dcb_hw_ets': drivers/net/ethernet/wangxun/txgbe/txgbe_main.c:4546:1: warning: control reaches end of non-void function [-Wreturn-type] } ^ cc1: some warnings being treated as errors -- In file included from drivers/net/ethernet/wangxun/txgbe/txgbe_fcoe.c:4: drivers/net/ethernet/wangxun/txgbe/txgbe.h: In function 'txgbe_misc_isb': drivers/net/ethernet/wangxun/txgbe/txgbe.h:987:6: warning: variable 'cur_diff' set but not used [-Wunused-but-set-variable] u32 cur_diff = 0; ^~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_fcoe.c: At top level: >> drivers/net/ethernet/wangxun/txgbe/txgbe_fcoe.c:748:5: warning: no previous prototype for 'txgbe_fcoe_ddp_enable' [-Wmissing-prototypes] int txgbe_fcoe_ddp_enable(struct txgbe_adapter *adapter) ^~~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/wangxun/txgbe/txgbe_fcoe.c:767:6: warning: no previous prototype for 'txgbe_fcoe_ddp_disable' [-Wmissing-prototypes] void txgbe_fcoe_ddp_disable(struct txgbe_adapter *adapter) ^~~~~~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/wangxun/txgbe/txgbe_fcoe.c:899:5: warning: no previous prototype for 'txgbe_fcoe_get_wwn' [-Wmissing-prototypes] int txgbe_fcoe_get_wwn(struct net_device *netdev, u64 *wwn, int type) ^~~~~~~~~~~~~~~~~~ >> drivers/net/ethernet/wangxun/txgbe/txgbe_fcoe.c:936:4: warning: no previous prototype for 'txgbe_fcoe_get_tc' [-Wmissing-prototypes] u8 txgbe_fcoe_get_tc(struct txgbe_adapter *adapter) ^~~~~~~~~~~~~~~~~ -- In file included from drivers/net/ethernet/wangxun/txgbe/txgbe_lib.c:4: drivers/net/ethernet/wangxun/txgbe/txgbe.h: In function 'txgbe_misc_isb': drivers/net/ethernet/wangxun/txgbe/txgbe.h:987:6: warning: variable 'cur_diff' set but not used [-Wunused-but-set-variable] u32 cur_diff = 0; ^~~~~~~~ drivers/net/ethernet/wangxun/txgbe/txgbe_lib.c: In function 'txgbe_cache_ring_dcb_vmdq': >> drivers/net/ethernet/wangxun/txgbe/txgbe_lib.c:63:16: error: implicit declaration of function 'txgbe_fcoe_get_tc'; did you mean 'txgbe_fcoe_enable'? [-Werror=implicit-function-declaration] u8 fcoe_tc = txgbe_fcoe_get_tc(adapter); ^~~~~~~~~~~~~~~~~ txgbe_fcoe_enable cc1: some warnings being treated as errors vim +450 drivers/net/ethernet/wangxun/txgbe/txgbe_main.c 439 440 static void txgbe_update_xoff_received(struct txgbe_adapter *adapter) 441 { 442 struct txgbe_hw *hw = &adapter->hw; 443 struct txgbe_hw_stats *hwstats = &adapter->stats; 444 u32 xoff[8] = {0}; 445 int tc; 446 int i; 447 bool pfc_en = adapter->dcb_cfg.pfc_mode_enable; 448 449 if (adapter->txgbe_ieee_pfc) > 450 pfc_en |= !!(adapter->txgbe_ieee_pfc->pfc_en); 451 452 if (!(adapter->flags & TXGBE_FLAG_DCB_ENABLED) || !pfc_en) { 453 txgbe_update_xoff_rx_lfc(adapter); 454 return; 455 } 456 457 /* update stats for each tc, only valid with PFC enabled */ 458 for (i = 0; i < MAX_TX_PACKET_BUFFERS; i++) { 459 u32 pxoffrxc; 460 461 wr32m(hw, TXGBE_MMC_CONTROL, TXGBE_MMC_CONTROL_UP, i << 16); 462 pxoffrxc = rd32(hw, TXGBE_MAC_PXOFFRXC); 463 hwstats->pxoffrxc[i] += pxoffrxc; 464 /* Get the TC for given UP */ 465 tc = netdev_get_prio_tc_map(adapter->netdev, i); 466 xoff[tc] += pxoffrxc; 467 } 468 469 /* disarm tx queues that have received xoff frames */ 470 for (i = 0; i < adapter->num_tx_queues; i++) { 471 struct txgbe_ring *tx_ring = adapter->tx_ring[i]; 472 473 tc = tx_ring->dcb_tc; 474 if (tc <= 7 && xoff[tc]) 475 clear_bit(__TXGBE_HANG_CHECK_ARMED, &tx_ring->state); 476 } 477 for (i = 0; i < adapter->num_xdp_queues; i++) { 478 struct txgbe_ring *xdp_ring = adapter->xdp_ring[i]; 479 480 tc = xdp_ring->dcb_tc; 481 if (tc <= 7 && xoff[tc]) 482 clear_bit(__TXGBE_HANG_CHECK_ARMED, &xdp_ring->state); 483 } 484 } 485 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] mm/memory.c:2802:5: sparse: sparse: symbol '__remap_pfn_range' was not declared. Should it be static?
by kernel test robot 19 Nov '25

19 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: b4a3c05741e1650e8bb8399196fb5d7a318a4698 commit: 923e224a12462d640fa37f3069c6bfafd378ac3b [3214/3214] mm: introduce remap_pfn_range_try_pmd() for PMD-level hugepage mapping config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251119/202511190025.obom3fen-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251119/202511190025.obom3fen-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511190025.obom3fen-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> mm/memory.c:2802:5: sparse: sparse: symbol '__remap_pfn_range' was not declared. Should it be static? mm/memory.c:301:9: sparse: sparse: incompatible types in conditional expression (different base types): mm/memory.c:301:9: sparse: void mm/memory.c:301:9: sparse: int vim +/__remap_pfn_range +2802 mm/memory.c 2789 2790 /** 2791 * remap_pfn_range - remap kernel memory to userspace 2792 * @vma: user vma to map to 2793 * @addr: target page aligned user address to start at 2794 * @pfn: page frame number of kernel physical memory address 2795 * @size: size of mapping area 2796 * @prot: page protection flags for this mapping 2797 * 2798 * Note: this is only safe if the mm semaphore is held when called. 2799 * 2800 * Return: %0 on success, negative error code otherwise. 2801 */ > 2802 int __remap_pfn_range(struct vm_area_struct *vma, unsigned long addr, 2803 unsigned long pfn, unsigned long size, pgprot_t prot, 2804 unsigned int page_shift) 2805 { 2806 int err; 2807 2808 err = track_pfn_remap(vma, &prot, pfn, addr, PAGE_ALIGN(size)); 2809 if (err) 2810 return -EINVAL; 2811 2812 err = __remap_pfn_range_notrack(vma, addr, pfn, size, prot, page_shift); 2813 if (err) 2814 untrack_pfn(vma, pfn, PAGE_ALIGN(size), true); 2815 return err; 2816 } 2817 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] block/blk-ioinf.c:530:41: error: array type has incomplete element type 'struct blk_mq_debugfs_attr'
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: b4a3c05741e1650e8bb8399196fb5d7a318a4698 commit: 4192ef0b07762c6dabf617654df442fecffe8510 [3214/3214] blk-ioinf: add rqos/inflight/stat debufs interface config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511182212.yHIyxmau-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511182212.yHIyxmau-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511182212.yHIyxmau-lkp@intel.com/ All error/warnings (new ones prefixed by >>): block/blk-ioinf.c:248:6: warning: no previous prototype for 'ioinf_done' [-Wmissing-prototypes] 248 | void ioinf_done(struct ioinf *inf, struct ioinf_rq_wait *rqw) | ^~~~~~~~~~ >> block/blk-ioinf.c:530:41: error: array type has incomplete element type 'struct blk_mq_debugfs_attr' 530 | static const struct blk_mq_debugfs_attr ioinf_debugfs_attrs[] = { | ^~~~~~~~~~~~~~~~~~~ block/blk-ioinf.c:547:5: warning: no previous prototype for 'ioinf_calc_budget' [-Wmissing-prototypes] 547 | u32 ioinf_calc_budget(struct ioinf_rq_wait *rqw) | ^~~~~~~~~~~~~~~~~ >> block/blk-ioinf.c:530:41: warning: 'ioinf_debugfs_attrs' defined but not used [-Wunused-variable] 530 | static const struct blk_mq_debugfs_attr ioinf_debugfs_attrs[] = { | ^~~~~~~~~~~~~~~~~~~ Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_PRELOAD Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=n] Selected by [y]: - PGP_PRELOAD_PUBLIC_KEYS [=y] && CRYPTO [=y] vim +530 block/blk-ioinf.c 529 > 530 static const struct blk_mq_debugfs_attr ioinf_debugfs_attrs[] = { 531 {"stat", 0400, ioinf_stat_show}, 532 {}, 533 }; 534 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH] arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
by Zeng Heng 18 Nov '25

18 Nov '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/IC03L1 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/morse/linux.git/commit/?h=m… -------------------------------- On the ARM64 architecture, the CONFIG_RESCTRL_IOMMU actually depends on the CONFIG_ARM_SMMU_V3, which allows to bind SMMU iommu_groups with resctrl groups. Therefore, add this build dependency in Kconfig. Additionally, to avoid compilation errors due to re-definitions in the include/linux/resctrl.h header file when the CONFIG_RESCTRL_IOMMU is disabled, add the build switch for resctrl_arch_*_iommu_closid_rmid(). Fixes: 7e3f95a1a861 ("fs/resctrl: Add support for assigning iommu_groups to resctrl groups") Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/platform/mpam/Kconfig | 2 +- drivers/platform/mpam/mpam_resctrl.c | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/platform/mpam/Kconfig b/drivers/platform/mpam/Kconfig index a6e937b8f91d..96dd7c091a9f 100644 --- a/drivers/platform/mpam/Kconfig +++ b/drivers/platform/mpam/Kconfig @@ -6,4 +6,4 @@ config ARM_CPU_RESCTRL depends on ARM64 && ARCH_HAS_CPU_RESCTRL depends on MISC_FILESYSTEMS select RESCTRL_RMID_DEPENDS_ON_CLOSID - select RESCTRL_IOMMU + select RESCTRL_IOMMU if ARM_SMMU_V3 diff --git a/drivers/platform/mpam/mpam_resctrl.c b/drivers/platform/mpam/mpam_resctrl.c index 2d3a1827a48c..7c386ce7b80f 100644 --- a/drivers/platform/mpam/mpam_resctrl.c +++ b/drivers/platform/mpam/mpam_resctrl.c @@ -260,6 +260,7 @@ bool resctrl_arch_match_rmid(struct task_struct *tsk, u32 closid, u32 rmid) return (tsk_closid == closid) && (tsk_rmid == rmid); } +#ifdef CONFIG_RESCTRL_IOMMU int resctrl_arch_set_iommu_closid_rmid(struct iommu_group *group, u32 closid, u32 rmid) { @@ -302,6 +303,7 @@ bool resctrl_arch_match_iommu_closid_rmid(struct iommu_group *group, return (partid == closid) && (rmid == pmg); } +#endif struct rdt_resource *resctrl_arch_get_resource(enum resctrl_res_level l) { -- 2.25.1

1 0

[openeuler:OLK-6.6 3214/3214] block/blk-ioinf.c:233:6: warning: no previous prototype for 'ioinf_done'
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 09c1ca7bc68f566c176a3647d87ed91e455d90f3 commit: a63e78514d119d4ee6525e1cc3a0aca4a2b29cbd [3214/3214] blk-ioinf: introduce inflight-based IO QoS controller config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511182153.2rP8BCJI-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511182153.2rP8BCJI-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511182153.2rP8BCJI-lkp@intel.com/ All warnings (new ones prefixed by >>): >> block/blk-ioinf.c:233:6: warning: no previous prototype for 'ioinf_done' [-Wmissing-prototypes] 233 | void ioinf_done(struct ioinf *inf, struct ioinf_rq_wait *rqw) | ^~~~~~~~~~ >> block/blk-ioinf.c:461:5: warning: no previous prototype for 'ioinf_calc_budget' [-Wmissing-prototypes] 461 | u32 ioinf_calc_budget(struct ioinf_rq_wait *rqw) | ^~~~~~~~~~~~~~~~~ Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_PRELOAD Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=n] Selected by [y]: - PGP_PRELOAD_PUBLIC_KEYS [=y] && CRYPTO [=y] vim +/ioinf_done +233 block/blk-ioinf.c 232 > 233 void ioinf_done(struct ioinf *inf, struct ioinf_rq_wait *rqw) 234 { 235 int inflight; 236 237 if (!inf->params.enabled) 238 return; 239 240 inflight = atomic_dec_return(&rqw->inflight); 241 if (inflight >= (int)rqw->hinflight) 242 return; 243 244 if (!READ_ONCE(inf->waking) && atomic_read(&rqw->sleepers)) { 245 WRITE_ONCE(inf->waking, true); 246 hrtimer_start(&inf->wakeup_timer, 0, HRTIMER_MODE_REL); 247 } 248 } 249 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] net/ipv4/tcp_input.c:7198:25: error: 'struct tcp_options_received' has no member named 'ums_ok'; did you mean 'smc_ok'?
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 72220f090cf216491c25f4fe87c974ea97eb4e19 commit: 62eb2012d814e530839ba9ccf4146712701f486a [3214/3214] net: Add a new protocol family AF_UB config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511181912.iiOiNVW1-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511181912.iiOiNVW1-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511181912.iiOiNVW1-lkp@intel.com/ All errors (new ones prefixed by >>): net/ipv4/tcp_input.c: In function 'tcp_conn_request': >> net/ipv4/tcp_input.c:7198:25: error: 'struct tcp_options_received' has no member named 'ums_ok'; did you mean 'smc_ok'? 7198 | tmp_opt.ums_ok = 0; | ^~~~~~ | smc_ok Kconfig warnings: (for reference only) WARNING: unmet direct dependencies detected for PGP_PRELOAD Depends on [n]: CRYPTO [=y] && ASYMMETRIC_KEY_TYPE [=n] Selected by [y]: - PGP_PRELOAD_PUBLIC_KEYS [=y] && CRYPTO [=y] vim +7198 net/ipv4/tcp_input.c 7184 7185 tcp_clear_options(&tmp_opt); 7186 tmp_opt.mss_clamp = af_ops->mss_clamp; 7187 tmp_opt.user_mss = tp->rx_opt.user_mss; 7188 tcp_parse_options(sock_net(sk), skb, &tmp_opt, 0, 7189 want_cookie ? NULL : &foc); 7190 7191 if (want_cookie && !tmp_opt.saw_tstamp) 7192 tcp_clear_options(&tmp_opt); 7193 7194 if (IS_ENABLED(CONFIG_SMC) && want_cookie) 7195 tmp_opt.smc_ok = 0; 7196 7197 if (IS_ENABLED(CONFIG_UB_UMS) && want_cookie) > 7198 tmp_opt.ums_ok = 0; -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6] EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
by Luo Gengkun 18 Nov '25

18 Nov '25

From: Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> stable inclusion from stable-v6.6.112 commit 8100b6c0f9089d5b156642b81270ce27fff17490 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B9J CVE: CVE-2025-40157 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ---------------------------------------------------------------------- [ Upstream commit 2e6fe1bbefd9c059c3787d1c620fe67343a94dff ] When loading the i10nm_edac driver on some Intel Granite Rapids servers, a call trace may appear as follows: UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:453:16 shift exponent -66 is negative ... __ubsan_handle_shift_out_of_bounds+0x1e3/0x390 skx_get_dimm_info.cold+0x47/0xd40 [skx_edac_common] i10nm_get_dimm_config+0x23e/0x390 [i10nm_edac] skx_register_mci+0x159/0x220 [skx_edac_common] i10nm_init+0xcb0/0x1ff0 [i10nm_edac] ... This occurs because some BIOS may disable a memory controller if there aren't any memory DIMMs populated on this memory controller. The DIMMMTR register of this disabled memory controller contains the invalid value ~0, resulting in the call trace above. Fix this call trace by skipping DIMM enumeration on a disabled memory controller. Fixes: ba987eaaabf9 ("EDAC/i10nm: Add Intel Granite Rapids server support") Reported-by: Jose Jesus Ambriz Meza <jose.jesus.ambriz.meza(a)intel.com> Reported-by: Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> Closes: https://lore.kernel.org/all/20250730063155.2612379-1-acelan.kao@canonical.c… Signed-off-by: Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> Signed-off-by: Tony Luck <tony.luck(a)intel.com> Tested-by: Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> Link: https://lore.kernel.org/r/20250806065707.3533345-1-qiuxu.zhuo@intel.com Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Luo Gengkun <luogengkun2(a)huawei.com> --- drivers/edac/i10nm_base.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/drivers/edac/i10nm_base.c b/drivers/edac/i10nm_base.c index 1f06183d1399..80527845dc5f 100644 --- a/drivers/edac/i10nm_base.c +++ b/drivers/edac/i10nm_base.c @@ -1056,6 +1056,15 @@ static bool i10nm_check_ecc(struct skx_imc *imc, int chan) return !!GET_BITFIELD(mcmtr, 2, 2); } +static bool i10nm_channel_disabled(struct skx_imc *imc, int chan) +{ + u32 mcmtr = I10NM_GET_MCMTR(imc, chan); + + edac_dbg(1, "mc%d ch%d mcmtr reg %x\n", imc->mc, chan, mcmtr); + + return (mcmtr == ~0 || GET_BITFIELD(mcmtr, 18, 18)); +} + static int i10nm_get_dimm_config(struct mem_ctl_info *mci, struct res_config *cfg) { @@ -1069,6 +1078,11 @@ static int i10nm_get_dimm_config(struct mem_ctl_info *mci, if (!imc->mbase) continue; + if (i10nm_channel_disabled(imc, i)) { + edac_dbg(1, "mc%d ch%d is disabled.\n", imc->mc, i); + continue; + } + ndimms = 0; if (res_cfg->type != GNR) -- 2.34.1

2 1

[PATCH OLK-5.10] EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
by Luo Gengkun 18 Nov '25

18 Nov '25

From: Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> mainline inclusion from mainline-v6.18-rc1 commit 2e6fe1bbefd9c059c3787d1c620fe67343a94dff category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B9J CVE: CVE-2025-40157 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… ---------------------------------------------------------------------- When loading the i10nm_edac driver on some Intel Granite Rapids servers, a call trace may appear as follows: UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:453:16 shift exponent -66 is negative ... __ubsan_handle_shift_out_of_bounds+0x1e3/0x390 skx_get_dimm_info.cold+0x47/0xd40 [skx_edac_common] i10nm_get_dimm_config+0x23e/0x390 [i10nm_edac] skx_register_mci+0x159/0x220 [skx_edac_common] i10nm_init+0xcb0/0x1ff0 [i10nm_edac] ... This occurs because some BIOS may disable a memory controller if there aren't any memory DIMMs populated on this memory controller. The DIMMMTR register of this disabled memory controller contains the invalid value ~0, resulting in the call trace above. Fix this call trace by skipping DIMM enumeration on a disabled memory controller. Fixes: ba987eaaabf9 ("EDAC/i10nm: Add Intel Granite Rapids server support") Reported-by: Jose Jesus Ambriz Meza <jose.jesus.ambriz.meza(a)intel.com> Reported-by: Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> Closes: https://lore.kernel.org/all/20250730063155.2612379-1-acelan.kao@canonical.c… Signed-off-by: Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> Signed-off-by: Tony Luck <tony.luck(a)intel.com> Tested-by: Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> Link: https://lore.kernel.org/r/20250806065707.3533345-1-qiuxu.zhuo@intel.com Signed-off-by: Luo Gengkun <luogengkun2(a)huawei.com> --- drivers/edac/i10nm_base.c | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/drivers/edac/i10nm_base.c b/drivers/edac/i10nm_base.c index 75262ee01167..a7a30a7ab038 100644 --- a/drivers/edac/i10nm_base.c +++ b/drivers/edac/i10nm_base.c @@ -1062,6 +1062,15 @@ static bool i10nm_check_ecc(struct skx_imc *imc, int chan) return !!GET_BITFIELD(mcmtr, 2, 2); } +static bool i10nm_channel_disabled(struct skx_imc *imc, int chan) +{ + u32 mcmtr = I10NM_GET_MCMTR(imc, chan); + + edac_dbg(1, "mc%d ch%d mcmtr reg %x\n", imc->mc, chan, mcmtr); + + return (mcmtr == ~0 || GET_BITFIELD(mcmtr, 18, 18)); +} + static int i10nm_get_dimm_config(struct mem_ctl_info *mci, struct res_config *cfg) { @@ -1075,6 +1084,11 @@ static int i10nm_get_dimm_config(struct mem_ctl_info *mci, if (!imc->mbase) continue; + if (i10nm_channel_disabled(imc, i)) { + edac_dbg(1, "mc%d ch%d is disabled.\n", imc->mc, i); + continue; + } + ndimms = 0; if (res_cfg->type != GNR) -- 2.34.1

2 1

[PATCH OLK-6.6] arm64/mpam: Add build dependencies for CONFIG_RESCTRL_IOMMU
by Zeng Heng 18 Nov '25

18 Nov '25

hulk inclusion category: bugfix bugzilla: https://gitee.com/openeuler/kernel/issues/ID65P3 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/morse/linux.git/commit/?h=m… -------------------------------- On the ARM64 architecture, the CONFIG_RESCTRL_IOMMU actually depends on the CONFIG_ARM_SMMU_V3, which allows to bind SMMU iommu_groups with resctrl groups. Therefore, add this build dependency in Kconfig. Additionally, to avoid compilation errors due to re-definitions in the include/linux/resctrl.h header file when the CONFIG_RESCTRL_IOMMU is disabled, add the build switch for resctrl_arch_*_iommu_closid_rmid(). Fixes: 7e3f95a1a861 ("fs/resctrl: Add support for assigning iommu_groups to resctrl groups") Signed-off-by: Zeng Heng <zengheng4(a)huawei.com> --- drivers/platform/mpam/Kconfig | 2 +- drivers/platform/mpam/mpam_resctrl.c | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/drivers/platform/mpam/Kconfig b/drivers/platform/mpam/Kconfig index a6e937b8f91d..96dd7c091a9f 100644 --- a/drivers/platform/mpam/Kconfig +++ b/drivers/platform/mpam/Kconfig @@ -6,4 +6,4 @@ config ARM_CPU_RESCTRL depends on ARM64 && ARCH_HAS_CPU_RESCTRL depends on MISC_FILESYSTEMS select RESCTRL_RMID_DEPENDS_ON_CLOSID - select RESCTRL_IOMMU + select RESCTRL_IOMMU if ARM_SMMU_V3 diff --git a/drivers/platform/mpam/mpam_resctrl.c b/drivers/platform/mpam/mpam_resctrl.c index 2d3a1827a48c..7c386ce7b80f 100644 --- a/drivers/platform/mpam/mpam_resctrl.c +++ b/drivers/platform/mpam/mpam_resctrl.c @@ -260,6 +260,7 @@ bool resctrl_arch_match_rmid(struct task_struct *tsk, u32 closid, u32 rmid) return (tsk_closid == closid) && (tsk_rmid == rmid); } +#ifdef CONFIG_RESCTRL_IOMMU int resctrl_arch_set_iommu_closid_rmid(struct iommu_group *group, u32 closid, u32 rmid) { @@ -302,6 +303,7 @@ bool resctrl_arch_match_iommu_closid_rmid(struct iommu_group *group, return (partid == closid) && (rmid == pmg); } +#endif struct rdt_resource *resctrl_arch_get_resource(enum resctrl_res_level l) { -- 2.25.1

2 1

[PATCH OLK-6.6 v6 00/48] fuse:io_uring: support fuse over io_uring
by Long Li 18 Nov '25

18 Nov '25

v1 -> v2: Fix some build error for io_uring patchs. v2 -> v3: Modify kabi fixed patchs format v3 -> v4: Enable CONFIG_FUSE_IO_URING v4 -> v5: Fix patch commit message format v5 -> v6: Fix separate bg req in fuse iouring Bernd Schubert (19): fuse: rename to fuse_dev_end_requests and make non-static fuse: Move fuse_get_dev to header file fuse: Move request bits fuse: Add fuse-io-uring design documentation fuse: make args->in_args[0] to be always the header fuse: {io-uring} Handle SQEs - register commands fuse: Make fuse_copy non static fuse: Add fuse-io-uring handling into fuse_copy fuse: {io-uring} Make hash-list req unique finding functions non-static fuse: Add io-uring sqe commit and fetch support fuse: {io-uring} Handle teardown of ring entries fuse: {io-uring} Make fuse_dev_queue_{interrupt,forget} non-static fuse: Allow to queue fg requests through io-uring fuse: Allow to queue bg requests through io-uring fuse: {io-uring} Prevent mount point hang on fuse-server termination fuse: block request allocation until io-uring init is complete fuse: enable fuse-over-io-uring fuse: prevent disabling io-uring on active connections fuse: {io-uring} Fix a possible req cancellation race Jens Axboe (1): io_uring: remove dead struct io_submit_state member Joanne Koong (2): fuse: fix uring race condition for null dereference of fc fuse: remove unneeded atomic set in uring creation Long Li (5): io_uring: fix kabi broken in struct io_tw_state io_uring: fix kabi broken in struct io_ring_ctx io_uring: fix kabi broken in struct io_submit_state io_uring: fix kabi broken for header file changed openeuler_defconfig: enable CONFIG_FUSE_IO_URING by default Luis Henriques (2): fuse: fix possible deadlock if rings are never initialized fuse: removed unused function fuse_uring_create() from header Ming Lei (3): io_uring: retain top 8bits of uring_cmd flags for kernel internal use io_uring: cancelable uring_cmd io_uring: kill dead code in io_req_complete_post Pavel Begunkov (16): io_uring: split out cmd api into a separate header io_uring/cmd: inline io_uring_cmd_do_in_task_lazy io_uring/cmd: expose iowq to cmds io_uring/cmd: give inline space in request to cmds io_uring/cmd: move io_uring_try_cancel_uring_cmd() io_uring/cmd: kill one issue_flags to tw conversion io_uring/cmd: fix tw <-> issue_flags conversion io_uring/cmd: document some uring_cmd related helpers io_uring: force tw ctx locking io_uring: remove struct io_tw_state::locked io_uring: refactor io_fill_cqe_req_aux io_uring: get rid of intermediate aux cqe caches io_uring: remove current check from complete_post io_uring: refactor io_req_complete_post() io_uring: clean up io_lockdep_assert_cq_locked io_uring/cmd: let cmds to know about dying task Documentation/filesystems/fuse-io-uring.rst | 99 ++ Documentation/filesystems/index.rst | 1 + MAINTAINERS | 1 + arch/arm64/configs/openeuler_defconfig | 1 + arch/x86/configs/openeuler_defconfig | 1 + drivers/block/ublk_drv.c | 2 +- drivers/nvme/host/ioctl.c | 2 +- fs/fuse/Kconfig | 12 + fs/fuse/Makefile | 1 + fs/fuse/dax.c | 11 +- fs/fuse/dev.c | 165 ++- fs/fuse/dev_uring.c | 1326 +++++++++++++++++++ fs/fuse/dev_uring_i.h | 205 +++ fs/fuse/dir.c | 32 +- fs/fuse/fuse_dev_i.h | 69 + fs/fuse/fuse_i.h | 35 +- fs/fuse/inode.c | 14 +- fs/fuse/xattr.c | 7 +- include/linux/io_uring.h | 73 +- include/linux/io_uring/cmd.h | 140 ++ include/linux/io_uring_types.h | 7 +- include/uapi/linux/fuse.h | 77 +- include/uapi/linux/io_uring.h | 5 +- io_uring/io_uring.c | 212 +-- io_uring/io_uring.h | 34 +- io_uring/net.c | 6 +- io_uring/poll.c | 3 +- io_uring/refs.h | 7 + io_uring/rw.c | 8 +- io_uring/timeout.c | 8 +- io_uring/uring_cmd.c | 114 +- io_uring/uring_cmd.h | 3 + security/selinux/hooks.c | 2 +- security/smack/smack_lsm.c | 2 +- 34 files changed, 2308 insertions(+), 377 deletions(-) create mode 100644 Documentation/filesystems/fuse-io-uring.rst create mode 100644 fs/fuse/dev_uring.c create mode 100644 fs/fuse/dev_uring_i.h create mode 100644 fs/fuse/fuse_dev_i.h create mode 100644 include/linux/io_uring/cmd.h -- 2.39.2

2 49

[PATCH OLK-6.6] cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request()
by Xinyu Zheng 18 Nov '25

18 Nov '25

From: "Rafael J. Wysocki" <rafael.j.wysocki(a)intel.com> stable inclusion from stable-v6.6.113 commit 69a18ff6c60e8e113420f15355fad862cb45d38e category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BVZ CVE: CVE-2025-40194 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- commit 69e5d50fcf4093fb3f9f41c4f931f12c2ca8c467 upstream. The cpufreq_cpu_put() call in update_qos_request() takes place too early because the latter subsequently calls freq_qos_update_request() that indirectly accesses the policy object in question through the QoS request object passed to it. Fortunately, update_qos_request() is called under intel_pstate_driver_lock, so this issue does not matter for changing the intel_pstate operation mode, but it theoretically can cause a crash to occur on CPU device hot removal (which currently can only happen in virt, but it is formally supported nevertheless). Address this issue by modifying update_qos_request() to drop the reference to the policy later. Fixes: da5c504c7aae ("cpufreq: intel_pstate: Implement QoS supported freq constraints") Cc: 5.4+ <stable(a)vger.kernel.org> # 5.4+ Signed-off-by: Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> Reviewed-by: Zihuan Zhang <zhangzihuan(a)kylinos.cn> Link: https://patch.msgid.link/2255671.irdbgypaU6@rafael.j.wysocki Signed-off-by: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Signed-off-by: Xinyu Zheng <zhengxinyu6(a)huawei.com> --- drivers/cpufreq/intel_pstate.c | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/drivers/cpufreq/intel_pstate.c b/drivers/cpufreq/intel_pstate.c index 51e7d2ea8294..0908e3ed17b3 100644 --- a/drivers/cpufreq/intel_pstate.c +++ b/drivers/cpufreq/intel_pstate.c @@ -1354,10 +1354,10 @@ static void update_qos_request(enum freq_qos_req_type type) continue; req = policy->driver_data; - cpufreq_cpu_put(policy); - - if (!req) + if (!req) { + cpufreq_cpu_put(policy); continue; + } if (hwp_active) intel_pstate_get_hwp_cap(cpu); @@ -1373,6 +1373,8 @@ static void update_qos_request(enum freq_qos_req_type type) if (freq_qos_update_request(req, freq) < 0) pr_warn("Failed to update freq constraint: CPU%d\n", i); + + cpufreq_cpu_put(policy); } } -- 2.34.1

2 1

[openeuler:OLK-6.6 3214/3214] mm/gmem_phys.c:245:19: sparse: sparse: symbol 'gm_evict_page_locked' was not declared. Should it be static?
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: c1201208f61f497ac8e2b9826e822e261af1d334 commit: 8f4f66a9d851f366942e8ee319292e41ad2baa95 [3214/3214] gmem: support swapping heterogeneous memory config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511181354.QrCo9qqP-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511181354.QrCo9qqP-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511181354.QrCo9qqP-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) mm/gmem_phys.c:21:1: sparse: sparse: symbol 'hnode_lock' was not declared. Should it be static? >> mm/gmem_phys.c:245:19: sparse: sparse: symbol 'gm_evict_page_locked' was not declared. Should it be static? >> mm/gmem_phys.c:345:19: sparse: sparse: symbol 'gm_evict_page' was not declared. Should it be static? vim +/gm_evict_page_locked +245 mm/gmem_phys.c 244 > 245 enum gm_evict_ret gm_evict_page_locked(struct gm_page *gm_page) 246 { 247 struct gm_dev *gm_dev; 248 struct gm_mapping *gm_mapping; 249 struct vm_area_struct *vma; 250 struct mm_struct *mm; 251 struct page *page; 252 struct device *dma_dev; 253 unsigned long va; 254 struct folio *folio = NULL; 255 struct gm_fault_t gmf = { 256 .size = HPAGE_SIZE, 257 .copy = true 258 }; 259 enum gm_evict_ret ret = GM_EVICT_SUCCESS; 260 enum gm_ret gm_ret; 261 262 gm_dev = get_gm_dev(gm_page->hnid); 263 if (!gm_dev) 264 return GM_EVICT_DEVERR; 265 266 spin_lock(&gm_page->rmap_lock); 267 if (!gm_page->mm) { 268 /* Evicting gm_page conflicts with unmap.*/ 269 ret = GM_EVICT_UNMAP; 270 goto rmap_unlock; 271 } 272 273 mm = gm_page->mm; 274 va = gm_page->va; 275 vma = find_vma(mm, va); 276 if (!vma || !vma->vm_obj) { 277 gmem_err("%s: cannot find vma or vma->vm_obj is null for va %lx", __func__, va); 278 ret = GM_EVICT_UNMAP; 279 goto rmap_unlock; 280 } 281 282 gm_mapping = vm_object_lookup(vma->vm_obj, va); 283 if (!gm_mapping) { 284 gmem_err("%s: no gm_mapping for va %lx", __func__, va); 285 ret = GM_EVICT_UNMAP; 286 goto rmap_unlock; 287 } 288 289 spin_unlock(&gm_page->rmap_lock); 290 291 mutex_lock(&gm_mapping->lock); 292 if (!gm_mapping_device(gm_mapping)) { 293 /* Evicting gm_page conflicts with unmap.*/ 294 ret = GM_EVICT_UNMAP; 295 goto gm_mapping_unlock; 296 } 297 298 if (gm_mapping->gm_page != gm_page) { 299 /* gm_mapping maps to another gm_page. */ 300 ret = GM_EVICT_UNMAP; 301 goto gm_mapping_unlock; 302 } 303 304 folio = vma_alloc_folio(GFP_TRANSHUGE, HPAGE_PMD_ORDER, vma, va, true); 305 if (!folio) { 306 gmem_err("%s: allocate host page failed.", __func__); 307 ret = GM_EVICT_FALLBACK; 308 goto gm_mapping_unlock; 309 } 310 page = &folio->page; 311 312 gmf.mm = mm; 313 gmf.va = va; 314 gmf.dev = gm_dev; 315 gmf.pfn = gm_page->dev_pfn; 316 dma_dev = gm_dev->dma_dev; 317 gmf.dma_addr = dma_map_page(dma_dev, page, 0, HPAGE_SIZE, DMA_BIDIRECTIONAL); 318 if (dma_mapping_error(dma_dev, gmf.dma_addr)) { 319 gmem_err("%s: dma map failed.", __func__); 320 ret = GM_EVICT_FALLBACK; 321 goto gm_mapping_unlock; 322 } 323 324 gm_ret = gm_dev->mmu->peer_unmap(&gmf); 325 if (gm_ret != GM_RET_SUCCESS) { 326 gmem_err("%s: peer_unmap failed.", __func__); 327 ret = GM_EVICT_DEVERR; 328 goto dma_unmap; 329 } 330 331 gm_mapping_flags_set(gm_mapping, GM_MAPPING_CPU); 332 gm_page_remove_rmap(gm_page); 333 gm_mapping->page = page; 334 put_gm_page(gm_page); 335 dma_unmap: 336 dma_unmap_page(dma_dev, gmf.dma_addr, HPAGE_SIZE, DMA_BIDIRECTIONAL); 337 gm_mapping_unlock: 338 mutex_unlock(&gm_mapping->lock); 339 return ret; 340 rmap_unlock: 341 spin_unlock(&gm_page->rmap_lock); 342 return ret; 343 } 344 > 345 enum gm_evict_ret gm_evict_page(struct gm_page *gm_page) 346 { 347 struct mm_struct *mm = gm_page->mm; 348 enum gm_evict_ret ret; 349 350 mmap_read_lock(mm); 351 ret = gm_evict_page_locked(gm_page); 352 mmap_read_unlock(mm); 353 return ret; 354 } 355 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] drivers/base/arch_numa.c:194:12: sparse: sparse: symbol 'node_reclaim_distance_setup' was not declared. Should it be static?
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 4bd802eb810aced0425a9fbdedbf306c0c1e0fda commit: 5e5d40e65cb55e4699c9879674a004f246606a8d [3214/3214] arch_numa: Make node reclaim distance adjustment always available config: arm64-randconfig-r121-20251118 (https://download.01.org/0day-ci/archive/20251118/202511181224.q1NCFdeb-lkp@…) compiler: clang version 22.0.0git (https://github.com/llvm/llvm-project 0bba1e76581bad04e7d7f09f5115ae5e2989e0d9) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511181224.q1NCFdeb-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511181224.q1NCFdeb-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> drivers/base/arch_numa.c:194:12: sparse: sparse: symbol 'node_reclaim_distance_setup' was not declared. Should it be static? vim +/node_reclaim_distance_setup +194 drivers/base/arch_numa.c 192 193 #define DISTANCE_MAX (1 << DISTANCE_BITS) > 194 int __init node_reclaim_distance_setup(char *str) 195 { 196 int val; 197 198 if (kstrtoint(str, 0, &val)) 199 return -EINVAL; 200 201 if (val < LOCAL_DISTANCE || val >= DISTANCE_MAX) 202 return -EINVAL; 203 204 if (val != RECLAIM_DISTANCE) { 205 node_reclaim_distance = val; 206 pr_info("Force set node_reclaim_distance to %d\n", val); 207 } 208 209 return 0; 210 } 211 early_param("node_reclaim_distance", node_reclaim_distance_setup); 212 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] mm/gmem_phys.c:18:1: sparse: sparse: symbol 'hnode_lock' was not declared. Should it be static?
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 4bd802eb810aced0425a9fbdedbf306c0c1e0fda commit: ef19106bc1b493f2eb9d312de86f3cc0896b218a [3214/3214] gmem: introduce hnode for free peer-shared free page management config: x86_64-randconfig-r111-20251118 (https://download.01.org/0day-ci/archive/20251118/202511181114.4QpjxRoN-lkp@…) compiler: gcc-14 (Debian 14.2.0-19) 14.2.0 reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511181114.4QpjxRoN-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511181114.4QpjxRoN-lkp@intel.com/ sparse warnings: (new ones prefixed by >>) >> mm/gmem_phys.c:18:1: sparse: sparse: symbol 'hnode_lock' was not declared. Should it be static? vim +/hnode_lock +18 mm/gmem_phys.c 16 17 > 18 DEFINE_SPINLOCK(hnode_lock); 19 static nodemask_t hnode_map; 20 struct hnode *hnodes[MAX_NUMNODES]; 21 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:779:20: error: incomplete definition of type 'struct acpi_device'
by kernel test robot 18 Nov '25

18 Nov '25

Hi LeoLiu-oc, First bad commit (maybe != root cause): tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 17cadcdf512f891675c3c9df62bcf05511293ae9 commit: 5d01c9ec4f3b95b0629a38d936f69bc05e494cc9 [3214/3214] pinctrl: Zhaoxin: Add KH-50000 support config: x86_64-buildonly-randconfig-004-20251118 (https://download.01.org/0day-ci/archive/20251118/202511180448.bJpcAwU9-lkp@…) compiler: clang version 20.1.8 (https://github.com/llvm/llvm-project 87f0227cb60147a26a1eeb4fb06e3b505e9c7261) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511180448.bJpcAwU9-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511180448.bJpcAwU9-lkp@intel.com/ All errors (new ones prefixed by >>): drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:123:6: warning: variable 'value_back' set but not used [-Wunused-but-set-variable] 123 | u16 value_back = 0; | ^ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:249:6: warning: variable 'pin' set but not used [-Wunused-but-set-variable] 249 | int pin; | ^ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:270:6: warning: variable 'pin' set but not used [-Wunused-but-set-variable] 270 | int pin; | ^ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:330:6: warning: variable 'base_offset' set but not used [-Wunused-but-set-variable] 330 | int base_offset = 0; | ^ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:363:6: warning: variable 'base_offset' set but not used [-Wunused-but-set-variable] 363 | int base_offset = 0; | ^ drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:487:6: warning: variable 'test_mask' set but not used [-Wunused-but-set-variable] 487 | u16 test_mask; | ^ >> drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:779:20: error: incomplete definition of type 'struct acpi_device' 779 | if (!strcmp(adev->pnp.unique_id, table[i]->uid)) { | ~~~~^ include/linux/compiler.h:55:47: note: expanded from macro 'if' 55 | #define if(cond, ...) if ( __trace_if_var( !!(cond , ## __VA_ARGS__) ) ) | ^~~~ include/linux/compiler.h:57:52: note: expanded from macro '__trace_if_var' 57 | #define __trace_if_var(cond) (__builtin_constant_p(cond) ? (cond) : __trace_if_value(cond)) | ^~~~ include/linux/acpi.h:798:8: note: forward declaration of 'struct acpi_device' 798 | struct acpi_device; | ^ >> drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:779:20: error: incomplete definition of type 'struct acpi_device' 779 | if (!strcmp(adev->pnp.unique_id, table[i]->uid)) { | ~~~~^ include/linux/compiler.h:55:47: note: expanded from macro 'if' 55 | #define if(cond, ...) if ( __trace_if_var( !!(cond , ## __VA_ARGS__) ) ) | ^~~~ include/linux/compiler.h:57:61: note: expanded from macro '__trace_if_var' 57 | #define __trace_if_var(cond) (__builtin_constant_p(cond) ? (cond) : __trace_if_value(cond)) | ^~~~ include/linux/acpi.h:798:8: note: forward declaration of 'struct acpi_device' 798 | struct acpi_device; | ^ >> drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c:779:20: error: incomplete definition of type 'struct acpi_device' 779 | if (!strcmp(adev->pnp.unique_id, table[i]->uid)) { | ~~~~^ include/linux/compiler.h:55:47: note: expanded from macro 'if' 55 | #define if(cond, ...) if ( __trace_if_var( !!(cond , ## __VA_ARGS__) ) ) | ^~~~ include/linux/compiler.h:57:86: note: expanded from macro '__trace_if_var' 57 | #define __trace_if_var(cond) (__builtin_constant_p(cond) ? (cond) : __trace_if_value(cond)) | ^~~~ include/linux/compiler.h:68:3: note: expanded from macro '__trace_if_value' 68 | (cond) ? \ | ^~~~ include/linux/acpi.h:798:8: note: forward declaration of 'struct acpi_device' 798 | struct acpi_device; | ^ 6 warnings and 3 errors generated. vim +779 drivers/pinctrl/zhaoxin/pinctrl-zhaoxin.c 996e18349e58a3 leoliu-oc 2024-02-04 765 996e18349e58a3 leoliu-oc 2024-02-04 766 const struct zhaoxin_pinctrl_soc_data *zhaoxin_pinctrl_get_soc_data(struct platform_device *pdev) 996e18349e58a3 leoliu-oc 2024-02-04 767 { 996e18349e58a3 leoliu-oc 2024-02-04 768 const struct zhaoxin_pinctrl_soc_data *data = NULL; 996e18349e58a3 leoliu-oc 2024-02-04 769 const struct zhaoxin_pinctrl_soc_data **table; 996e18349e58a3 leoliu-oc 2024-02-04 770 struct acpi_device *adev; 996e18349e58a3 leoliu-oc 2024-02-04 771 unsigned int i; 996e18349e58a3 leoliu-oc 2024-02-04 772 996e18349e58a3 leoliu-oc 2024-02-04 773 adev = ACPI_COMPANION(&pdev->dev); 996e18349e58a3 leoliu-oc 2024-02-04 774 if (adev) { 996e18349e58a3 leoliu-oc 2024-02-04 775 const void *match = device_get_match_data(&pdev->dev); 996e18349e58a3 leoliu-oc 2024-02-04 776 996e18349e58a3 leoliu-oc 2024-02-04 777 table = (const struct zhaoxin_pinctrl_soc_data **)match; 996e18349e58a3 leoliu-oc 2024-02-04 778 for (i = 0; table[i]; i++) { 996e18349e58a3 leoliu-oc 2024-02-04 @779 if (!strcmp(adev->pnp.unique_id, table[i]->uid)) { 996e18349e58a3 leoliu-oc 2024-02-04 780 data = table[i]; 996e18349e58a3 leoliu-oc 2024-02-04 781 break; 996e18349e58a3 leoliu-oc 2024-02-04 782 } 996e18349e58a3 leoliu-oc 2024-02-04 783 } 996e18349e58a3 leoliu-oc 2024-02-04 784 } else { 996e18349e58a3 leoliu-oc 2024-02-04 785 const struct platform_device_id *id; 996e18349e58a3 leoliu-oc 2024-02-04 786 996e18349e58a3 leoliu-oc 2024-02-04 787 id = platform_get_device_id(pdev); 996e18349e58a3 leoliu-oc 2024-02-04 788 if (!id) 996e18349e58a3 leoliu-oc 2024-02-04 789 return ERR_PTR(-ENODEV); 996e18349e58a3 leoliu-oc 2024-02-04 790 996e18349e58a3 leoliu-oc 2024-02-04 791 table = (const struct zhaoxin_pinctrl_soc_data **)id->driver_data; 996e18349e58a3 leoliu-oc 2024-02-04 792 data = table[pdev->id]; 996e18349e58a3 leoliu-oc 2024-02-04 793 } 996e18349e58a3 leoliu-oc 2024-02-04 794 996e18349e58a3 leoliu-oc 2024-02-04 795 return data ?: ERR_PTR(-ENODATA); 996e18349e58a3 leoliu-oc 2024-02-04 796 } 996e18349e58a3 leoliu-oc 2024-02-04 797 EXPORT_SYMBOL_GPL(zhaoxin_pinctrl_get_soc_data); 996e18349e58a3 leoliu-oc 2024-02-04 798 :::::: The code at line 779 was first introduced by commit :::::: 996e18349e58a3ace519f9c0f32f4e62fc46ec2c Add support Zhaoxin GPIO pinctrl :::::: TO: leoliu-oc <leoliu-oc(a)zhaoxin.com> :::::: CC: leoliu-oc <leoliu-oc(a)zhaoxin.com> -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[openeuler:OLK-6.6 3214/3214] drivers/crypto/ccp/hygon/ccp-mdev.c:895:17: error: no member named 'numa_node' in 'struct device'
by kernel test robot 18 Nov '25

18 Nov '25

tree: https://gitee.com/openeuler/kernel.git OLK-6.6 head: 17cadcdf512f891675c3c9df62bcf05511293ae9 commit: 592817a30ddc0ef43c7f5b5fe906ae37cf3bea3b [3214/3214] crypto: ccp: add ccp-mdev functionality to the ccp module. config: x86_64-buildonly-randconfig-005-20251118 (https://download.01.org/0day-ci/archive/20251118/202511180451.SpjYxpJv-lkp@…) compiler: clang version 20.1.8 (https://github.com/llvm/llvm-project 87f0227cb60147a26a1eeb4fb06e3b505e9c7261) reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20251118/202511180451.SpjYxpJv-lkp@…) If you fix the issue in a separate patch/commit (i.e. not just a new version of the same patch/commit), kindly add following tags | Reported-by: kernel test robot <lkp(a)intel.com> | Closes: https://lore.kernel.org/oe-kbuild-all/202511180451.SpjYxpJv-lkp@intel.com/ All errors (new ones prefixed by >>): >> drivers/crypto/ccp/hygon/ccp-mdev.c:895:17: error: no member named 'numa_node' in 'struct device' 895 | if (pdev->dev.numa_node >= 0) | ~~~~~~~~~ ^ drivers/crypto/ccp/hygon/ccp-mdev.c:896:31: error: no member named 'numa_node' in 'struct device' 896 | addr.numa_node = pdev->dev.numa_node; | ~~~~~~~~~ ^ drivers/crypto/ccp/hygon/ccp-mdev.c:1144:15: warning: no previous prototype for function 'ccp_pin_memory' [-Wmissing-prototypes] 1144 | struct page **ccp_pin_memory(struct ccp_private *private, unsigned long uaddr, | ^ drivers/crypto/ccp/hygon/ccp-mdev.c:1144:1: note: declare 'static' if the function is not intended to be used outside of this translation unit 1144 | struct page **ccp_pin_memory(struct ccp_private *private, unsigned long uaddr, | ^ | static drivers/crypto/ccp/hygon/ccp-mdev.c:1542:54: error: no member named 'numa_node' in 'struct device' 1542 | numa_node = ccp_mdev_data.iommu[page_idx].pdev->dev.numa_node; | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ^ 1 warning and 3 errors generated. vim +895 drivers/crypto/ccp/hygon/ccp-mdev.c 720 721 static long ccp_ioctl(struct file *file, unsigned int cmd, unsigned long arg) 722 { 723 struct mdev_state *mdev_state = file->private_data; 724 unsigned long minsz; 725 int ret = 0; 726 727 switch (cmd) { 728 case VFIO_DEVICE_GET_INFO: 729 { 730 struct vfio_device_info info; 731 732 minsz = offsetofend(struct vfio_device_info, num_irqs); 733 734 if (copy_from_user(&info, (void __user *)arg, minsz)) 735 return -EFAULT; 736 737 if (info.argsz < minsz) 738 return -EINVAL; 739 740 ret = ccp_get_device_info(mdev_state, &info); 741 if (ret) 742 return ret; 743 744 memcpy(&mdev_state->dev_info, &info, sizeof(info)); 745 746 if (copy_to_user((void __user *)arg, &info, minsz)) 747 return -EFAULT; 748 749 return 0; 750 } 751 case VFIO_DEVICE_GET_REGION_INFO: 752 { 753 struct vfio_region_info info; 754 u16 cap_type_id = 0; 755 void *cap_type = NULL; 756 757 minsz = offsetofend(struct vfio_region_info, offset); 758 759 if (copy_from_user(&info, (void __user *)arg, minsz)) 760 return -EFAULT; 761 762 if (info.argsz < minsz) 763 return -EINVAL; 764 765 ret = ccp_get_region_info(mdev_state, &info, &cap_type_id, 766 &cap_type); 767 if (ret) 768 return ret; 769 770 if (copy_to_user((void __user *)arg, &info, minsz)) 771 return -EFAULT; 772 773 return 0; 774 } 775 case VFIO_DEVICE_GET_IRQ_INFO: 776 { 777 struct vfio_irq_info info; 778 779 minsz = offsetofend(struct vfio_irq_info, count); 780 781 if (copy_from_user(&info, (void __user *)arg, minsz)) 782 return -EFAULT; 783 784 if ((info.argsz < minsz) || 785 (info.index >= mdev_state->dev_info.num_irqs)) 786 return -EINVAL; 787 788 ret = ccp_get_irq_info(mdev_state, &info); 789 if (ret) 790 return ret; 791 792 if (copy_to_user((void __user *)arg, &info, minsz)) 793 return -EFAULT; 794 795 return 0; 796 } 797 case VFIO_DEVICE_SET_IRQS: 798 { 799 struct vfio_irq_set hdr; 800 u8 *data = NULL; 801 size_t data_size = 0; 802 803 minsz = offsetofend(struct vfio_irq_set, count); 804 805 if (copy_from_user(&hdr, (void __user *)arg, minsz)) 806 return -EFAULT; 807 808 ret = ccp_set_irqs_validate_and_prepare(&hdr, mdev_state->dev_info.num_irqs, 809 mdev_state->dev_info.num_irqs, &data_size); 810 if (ret) 811 return ret; 812 813 if (data_size) { 814 data = memdup_user((void __user *)(arg + minsz), data_size); 815 if (IS_ERR(data)) 816 return PTR_ERR(data); 817 } 818 819 mutex_lock(&mdev_state->ops_lock); 820 ret = ccp_set_irq_efds(mdev_state, &hdr, data); 821 mutex_unlock(&mdev_state->ops_lock); 822 kfree(data); 823 824 return ret; 825 } 826 case VFIO_DEVICE_CCP_SET_MODE: 827 { 828 struct hygon_ccp_dev_wrapper *ccp_wrapper = mdev_state->iommu->wrapper; 829 unsigned long flags; 830 831 if (!write_trylock_irqsave(&ccp_wrapper->q_lock, flags)) 832 return -EAGAIN; 833 834 if (ccp_wrapper->used_mode == arg) { 835 write_unlock_irqrestore(&ccp_wrapper->q_lock, flags); 836 return 0; 837 } 838 839 switch (arg) { 840 case _KERNEL_SPACE_USED: 841 ccp_wrapper->used_mode = _KERNEL_SPACE_USED; 842 ccp_dev_iommu_detach_device(ccp_wrapper->pdev); 843 ccp_dev_queue_switch(ccp_wrapper->cdev); 844 ccp_add_device(ccp_wrapper->cdev); 845 break; 846 case _USER_SPACE_USED: 847 if (ccp_wrapper->del_flag == 0) { 848 ccp_del_device(ccp_wrapper->cdev); 849 ccp_wrapper->del_flag = 1; 850 } 851 if (ccp_dev_kernel_mode_used_state(ccp_wrapper->cdev)) { 852 ret = -EAGAIN; 853 break; 854 } 855 if (ccp_dev_iommu_attach_device(ccp_wrapper->pdev)) { 856 ccp_add_device(ccp_wrapper->cdev); 857 ccp_wrapper->del_flag = 0; 858 ret = -EINVAL; 859 } else { 860 ccp_wrapper->used_mode = _USER_SPACE_USED; 861 ccp_ectx_list_init(ccp_wrapper); 862 ccp_dev_usermode_userid_clear(mdev_state->iommu->id); 863 } 864 break; 865 default: 866 pr_err("arg = %lu, invalid.\n", arg); 867 ret = -EINVAL; 868 break; 869 } 870 871 write_unlock_irqrestore(&ccp_wrapper->q_lock, flags); 872 return ret; 873 } 874 case VFIO_DEVICE_CCP_GET_MODE: 875 { 876 struct hygon_ccp_dev_wrapper *ccp_wrapper = mdev_state->iommu->wrapper; 877 878 if (put_user(ccp_wrapper->used_mode, (int __user *)arg)) 879 return -EFAULT; 880 881 return 0; 882 } 883 case VFIO_DEVICE_GET_PCI_ADDR: 884 { 885 struct pci_dev *pdev = mdev_state->iommu->pdev; 886 struct mccp_pci_addr addr; 887 888 if (copy_from_user(&addr, (void __user *)arg, sizeof(addr))) 889 return -EFAULT; 890 891 addr.domain = pci_domain_nr(pdev->bus); 892 addr.bus = pdev->bus->number; 893 addr.devid = PCI_SLOT(pdev->devfn); 894 addr.function = PCI_FUNC(pdev->devfn); > 895 if (pdev->dev.numa_node >= 0) 896 addr.numa_node = pdev->dev.numa_node; 897 else 898 addr.numa_node = 0; 899 900 if (copy_to_user((void __user *)arg, &addr, sizeof(addr))) 901 return -EFAULT; 902 903 return 0; 904 } 905 case VFIO_DEVICE_GET_PCI_ID: 906 { 907 struct pci_dev *pdev = mdev_state->iommu->pdev; 908 struct mccp_pci_id pid; 909 910 if (copy_from_user(&pid, (void __user *)arg, sizeof(pid))) 911 return -EFAULT; 912 913 pid.class = pdev->class; 914 pid.vendor = pdev->vendor; 915 pid.device = pdev->device; 916 pid.subsystem_vendor = pdev->subsystem_vendor; 917 pid.subsystem_device = pdev->subsystem_device; 918 919 if (copy_to_user((void __user *)arg, &pid, sizeof(pid))) 920 return -EFAULT; 921 922 return 0; 923 } 924 case VFIO_DEVICE_RESET: 925 return ccp_reset(mdev_state); 926 } 927 return -ENOTTY; 928 } 929 -- 0-DAY CI Kernel Test Service https://github.com/intel/lkp-tests/wiki

1 0

[PATCH OLK-6.6 v11 00/10] Add xcall 2.0 support
by Jinjie Ruan 17 Nov '25

17 Nov '25

Add xcall 2.0 support, which is compatible with xcall1.0, and can be used to dynamic instruction replacement for hardware xcall. Changes in v11: - Fix a bug in prefetch ko. - Fix a warning when concurrent write xcall comm. Changes in v10: - Fix memory leak in parse_xcall_command(). - Fix memory leak in xcall_comm_open(). - Add comment for smp_store_release(&mm->xcall, area). - Add sys_call_data in xcall_area struct. - clear_xcall_area() in __mmdrop() instead of __mmput(). - Add prefetch ko with some cleanup. Chanegs in v9: - /proc/xcall/comm, 0644 -> 0640 - /proc/xcall/comm check proc_mkdir("xcall", NULL) return value, use it as the parent proc_dir_entry for "comm". - Consider next task is NULL for xcall_info_switch(). - Return -EINVAL for error path in parse_xcall_command(). - Use bitmap for check_xcall_prog(). - Fix global-out-of-bounds KASAN bug in xcall_prog_register(). Changes in v8: - Fix no reigister and unregister null-ptr-ref bug by find prog first. - Fix xcall_comm_write write empty null-ptr-ref bug in memdup_user_nul(). - Add empty owner, exceed 64 prog name and repeat syscall check in check_prog(). - Move INIT_LIST_HEAD(&prog->list) to xcall_prog_register() instead of kernel module. Changes in v7: - Fix alternative bug in sync ventry. - Add "xcall" limit for xcall2.0 and hardware xcall. Changes in v6: - Add "xcall=debug" debug mode to use the "fast syscall" for every system call. - Use alternative to reduce the baseline performance noise floor when not set "xcall" on the kernel cmdline - Move binary_path out from xcall struct, and add to xcall_comm struct. - Fix1. insert_xcall_locked() check both "name" and "binary" to avoid repeated attach same name of xcall. - Fix2. Check if it is an executable file for the binary path. - Fix3. Check if it is an absolute path for the binary path. - Fix4. Remove the extra free_xcall_comm(info) in default branch in proc_xcall_command(). - Fix5. Add zero syscall hijack check for xcall_prog_register(). - Use __arm64_sys_ni_syscall() instead of define inv_xcall(). - Replace the -ENOSYS return value with -EINVAL, to avoid the warning. Changes in v5: - Fix build problem. - el0t_64_sync_ventry jump to kernel_ventry to do VMAP_STACK. - Some cleanups. - Merge the three refactor patch. Changes in v4: - Reuse uprobe_write_opcode() instead of use __replace_page() and copy_to_page(). - Handle error for uprobe_write_opcode(). - Support xcall1.0 before 920G. - Change xcall1.0 bitmap to byte array to save check insns. - Use percpu variable to save check insns for xcall1.0. - A little cleanup. Changes in v3: - Add validity checks during xcall registration to prevent out-of-bounds access and null pointer dereferences. - Extract __replace_page() and copy_to_page() from uprobe, to avoid code duplication. - Replace with new compatible refactored code. - Remove unnecessary member, such as old_name. Jinjie Ruan (2): xcall2.0: Support xcall1.0 for hardware xcall openeuler_defconfig: Enable CONFIG_DYNAMIC_XCALL by default Liao Chang (6): xcall2.0: Add userspace proc interface xcall2.0: Add xcall module register interface xcall2.0: Add xcall_area xcall2.0: Hajack syscall with dynamic instruciton replace xcall: Rework the early exception vector of XCALL and SYNC xcall2.0: Add a basic testcase Xinyu Zheng (1): xcall2.0: Introduce xcall epollwait prefetch feature Yipeng Zou (1): xcall: Add debug mode to force fast syscall for all threads arch/arm64/Kconfig.turbo | 13 + arch/arm64/configs/openeuler_defconfig | 1 + arch/arm64/include/asm/exception.h | 4 +- arch/arm64/include/asm/mmu_context.h | 7 - arch/arm64/include/asm/xcall.h | 155 +++--- arch/arm64/kernel/cpufeature.c | 79 +-- arch/arm64/kernel/entry-common.c | 28 +- arch/arm64/kernel/entry.S | 86 +-- arch/arm64/kernel/probes/uprobes.c | 6 + arch/arm64/kernel/process.c | 5 + arch/arm64/kernel/syscall.c | 14 + arch/arm64/kernel/xcall/Makefile | 3 +- arch/arm64/kernel/xcall/core.c | 405 +++++++++++++++ arch/arm64/kernel/xcall/entry.S | 139 ++++- arch/arm64/kernel/xcall/proc.c | 238 +++++++++ arch/arm64/kernel/xcall/xcall.c | 68 +-- arch/arm64/kvm/sys_regs.c | 1 + drivers/staging/Kconfig | 2 + drivers/staging/Makefile | 1 + drivers/staging/xcall/Kconfig | 19 + drivers/staging/xcall/Makefile | 1 + drivers/staging/xcall/dynamic_xcall_test.c | 89 ++++ drivers/staging/xcall/prefetch.c | 577 +++++++++++++++++++++ fs/proc/proc_xcall.c | 144 ++--- include/linux/mm_types.h | 4 + include/linux/xcall.h | 51 ++ kernel/events/uprobes.c | 23 + kernel/fork.c | 3 + mm/mmap.c | 14 +- 29 files changed, 1806 insertions(+), 374 deletions(-) create mode 100644 arch/arm64/kernel/xcall/core.c create mode 100644 arch/arm64/kernel/xcall/proc.c create mode 100644 drivers/staging/xcall/Kconfig create mode 100644 drivers/staging/xcall/Makefile create mode 100644 drivers/staging/xcall/dynamic_xcall_test.c create mode 100644 drivers/staging/xcall/prefetch.c create mode 100644 include/linux/xcall.h -- 2.34.1

2 11

[PATCH OLK-6.6] accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
by Zhang Xiaoxu 17 Nov '25

17 Nov '25

From: Youssef Samir <quic_yabdulra(a)quicinc.com> stable inclusion from stable-v6.6.114 commit 48b1d42286bfef7628b1d6c8c28d4e456c90f725 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BC8 CVE: CVE-2025-40172 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 11f08c30a3e4157305ba692f1d44cca5fc9a8fca ] Currently, if find_and_map_user_pages() takes a DMA xfer request from the user with a length field set to 0, or in a rare case, the host receives QAIC_TRANS_DMA_XFER_CONT from the device where resources->xferred_dma_size is equal to the requested transaction size, the function will return 0 before allocating an sgt or setting the fields of the dma_xfer struct. In that case, encode_addr_size_pairs() will try to access the sgt which will lead to a general protection fault. Return an EINVAL in case the user provides a zero-sized ALP, or the device requests continuation after all of the bytes have been transferred. Fixes: 96d3c1cadedb ("accel/qaic: Clean up integer overflow checking in map_user_pages()") Signed-off-by: Youssef Samir <quic_yabdulra(a)quicinc.com> Signed-off-by: Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> Reviewed-by: Jeff Hugo <jeff.hugo(a)oss.qualcomm.com> Reviewed-by: Carl Vanderlip <carl.vanderlip(a)oss.qualcomm.com> Signed-off-by: Jeff Hugo <jeff.hugo(a)oss.qualcomm.com> Link: https://lore.kernel.org/r/20251007122320.339654-1-youssef.abdulrahman@oss.q… Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhang Xiaoxu <zhangxiaoxu5(a)huawei.com> --- drivers/accel/qaic/qaic_control.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/accel/qaic/qaic_control.c b/drivers/accel/qaic/qaic_control.c index f3db3fa91dd5..08b78f567853 100644 --- a/drivers/accel/qaic/qaic_control.c +++ b/drivers/accel/qaic/qaic_control.c @@ -407,7 +407,7 @@ static int find_and_map_user_pages(struct qaic_device *qdev, return -EINVAL; remaining = in_trans->size - resources->xferred_dma_size; if (remaining == 0) - return 0; + return -EINVAL; if (check_add_overflow(xfer_start_addr, remaining, &end)) return -EINVAL; -- 2.34.1

2 1

[PATCH openEuler-1.0-LTS] scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
by Zhang Xiaoxu 17 Nov '25

17 Nov '25

From: Ranjan Kumar <ranjan.kumar(a)broadcom.com> stable inclusion from stable-v5.10.246 commit 4e1442bae50ed633c2fe8058f47cd79b4ad88b9b category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6BAH CVE: CVE-2025-40115 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 1703fe4f8ae50d1fb6449854e1fcaed1053e3a14 ] During mpt3sas_transport_port_remove(), messages were logged with dev_printk() against &mpt3sas_port->port->dev. At this point the SAS transport device may already be partially unregistered or freed, leading to a crash when accessing its struct device. Using ioc_info(), which logs via the PCI device (ioc->pdev->dev), guaranteed to remain valid until driver removal. [83428.295776] Oops: general protection fault, probably for non-canonical address 0x6f702f323a33312d: 0000 [#1] SMP NOPTI [83428.295785] CPU: 145 UID: 0 PID: 113296 Comm: rmmod Kdump: loaded Tainted: G OE 6.16.0-rc1+ #1 PREEMPT(voluntary) [83428.295792] Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE [83428.295795] Hardware name: Dell Inc. Precision 7875 Tower/, BIOS 89.1.67 02/23/2024 [83428.295799] RIP: 0010:__dev_printk+0x1f/0x70 [83428.295805] Code: 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 49 89 d1 48 85 f6 74 52 4c 8b 46 50 4d 85 c0 74 1f 48 8b 46 68 48 85 c0 74 22 <48> 8b 08 0f b6 7f 01 48 c7 c2 db e8 42 ad 83 ef 30 e9 7b f8 ff ff [83428.295813] RSP: 0018:ff85aeafc3137bb0 EFLAGS: 00010206 [83428.295817] RAX: 6f702f323a33312d RBX: ff4290ee81292860 RCX: 5000cca25103be32 [83428.295820] RDX: ff85aeafc3137bb8 RSI: ff4290eeb1966c00 RDI: ffffffffc1560845 [83428.295823] RBP: ff85aeafc3137c18 R08: 74726f702f303a33 R09: ff85aeafc3137bb8 [83428.295826] R10: ff85aeafc3137b18 R11: ff4290f5bd60fe68 R12: ff4290ee81290000 [83428.295830] R13: ff4290ee6e345de0 R14: ff4290ee81290000 R15: ff4290ee6e345e30 [83428.295833] FS: 00007fd9472a6740(0000) GS:ff4290f5ce96b000(0000) knlGS:0000000000000000 [83428.295837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [83428.295840] CR2: 00007f242b4db238 CR3: 00000002372b8006 CR4: 0000000000771ef0 [83428.295844] PKRU: 55555554 [83428.295846] Call Trace: [83428.295848] <TASK> [83428.295850] _dev_printk+0x5c/0x80 [83428.295857] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.295863] mpt3sas_transport_port_remove+0x1c7/0x420 [mpt3sas] [83428.295882] _scsih_remove_device+0x21b/0x280 [mpt3sas] [83428.295894] ? _scsih_expander_node_remove+0x108/0x140 [mpt3sas] [83428.295906] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.295910] mpt3sas_device_remove_by_sas_address.part.0+0x8f/0x110 [mpt3sas] [83428.295921] _scsih_expander_node_remove+0x129/0x140 [mpt3sas] [83428.295933] _scsih_expander_node_remove+0x6a/0x140 [mpt3sas] [83428.295944] scsih_remove+0x3f0/0x4a0 [mpt3sas] [83428.295957] pci_device_remove+0x3b/0xb0 [83428.295962] device_release_driver_internal+0x193/0x200 [83428.295968] driver_detach+0x44/0x90 [83428.295971] bus_remove_driver+0x69/0xf0 [83428.295975] pci_unregister_driver+0x2a/0xb0 [83428.295979] _mpt3sas_exit+0x1f/0x300 [mpt3sas] [83428.295991] __do_sys_delete_module.constprop.0+0x174/0x310 [83428.295997] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.296000] ? __x64_sys_getdents64+0x9a/0x110 [83428.296005] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.296009] ? syscall_trace_enter+0xf6/0x1b0 [83428.296014] do_syscall_64+0x7b/0x2c0 [83428.296019] ? srso_alias_return_thunk+0x5/0xfbef5 [83428.296023] entry_SYSCALL_64_after_hwframe+0x76/0x7e Fixes: f92363d12359 ("[SCSI] mpt3sas: add new driver supporting 12GB SAS") Signed-off-by: Ranjan Kumar <ranjan.kumar(a)broadcom.com> Signed-off-by: Martin K. Petersen <martin.petersen(a)oracle.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhang Xiaoxu <zhangxiaoxu5(a)huawei.com> --- drivers/scsi/mpt3sas/mpt3sas_transport.c | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/drivers/scsi/mpt3sas/mpt3sas_transport.c b/drivers/scsi/mpt3sas/mpt3sas_transport.c index 20d36061c217..5927a9ae62f2 100644 --- a/drivers/scsi/mpt3sas/mpt3sas_transport.c +++ b/drivers/scsi/mpt3sas/mpt3sas_transport.c @@ -828,11 +828,9 @@ mpt3sas_transport_port_remove(struct MPT3SAS_ADAPTER *ioc, u64 sas_address, list_for_each_entry_safe(mpt3sas_phy, next_phy, &mpt3sas_port->phy_list, port_siblings) { if ((ioc->logging_level & MPT_DEBUG_TRANSPORT)) - dev_printk(KERN_INFO, &mpt3sas_port->port->dev, - "remove: sas_addr(0x%016llx), phy(%d)\n", - (unsigned long long) - mpt3sas_port->remote_identify.sas_address, - mpt3sas_phy->phy_id); + ioc_info(ioc, "remove: sas_addr(0x%016llx), phy(%d)\n", + (unsigned long long) mpt3sas_port->remote_identify.sas_address, + mpt3sas_phy->phy_id); mpt3sas_phy->phy_belongs_to_port = 0; if (!ioc->remove_host) sas_port_delete_phy(mpt3sas_port->port, -- 2.34.1

2 1

[PATCH OLK-6.6] sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC
by Zhang Xiaoxu 17 Nov '25

17 Nov '25

From: Michael Karcher <kernel(a)mkarcher.dialup.fu-berlin.de> stable inclusion from stable-v6.6.112 commit 674ff598148a28bae0b5372339de56f2abf0b1d1 category: bugfix bugzilla: https://gitee.com/src-openeuler/kernel/issues/ID6B4C CVE: CVE-2025-40126 Reference: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id… -------------------------------- [ Upstream commit 4fba1713001195e59cfc001ff1f2837dab877efb ] The referenced commit introduced exception handlers on user-space memory references in copy_from_user and copy_to_user. These handlers return from the respective function and calculate the remaining bytes left to copy using the current register contents. This commit fixes a couple of bad calculations. This will fix the return value of copy_from_user and copy_to_user in the faulting case. The behaviour of memcpy stays unchanged. Fixes: cb736fdbb208 ("sparc64: Convert U1copy_{from,to}_user to accurate exception reporting.") Tested-by: John Paul Adrian Glaubitz <glaubitz(a)physik.fu-berlin.de> # on QEMU 10.0.3 Tested-by: René Rebe <rene(a)exactcode.com> # on Ultra 5 UltraSparc IIi Tested-by: Jonathan 'theJPster' Pallant <kernel(a)thejpster.org.uk> # on Sun Netra T1 Signed-off-by: Michael Karcher <kernel(a)mkarcher.dialup.fu-berlin.de> Reviewed-by: Andreas Larsson <andreas(a)gaisler.com> Link: https://lore.kernel.org/r/20250905-memcpy_series-v4-1-1ca72dda195b@mkarcher… Signed-off-by: Andreas Larsson <andreas(a)gaisler.com> Signed-off-by: Sasha Levin <sashal(a)kernel.org> Signed-off-by: Zhang Xiaoxu <zhangxiaoxu5(a)huawei.com> --- arch/sparc/lib/U1memcpy.S | 19 ++++++++++--------- 1 file changed, 10 insertions(+), 9 deletions(-) diff --git a/arch/sparc/lib/U1memcpy.S b/arch/sparc/lib/U1memcpy.S index 635398ec7540..154fbd35400c 100644 --- a/arch/sparc/lib/U1memcpy.S +++ b/arch/sparc/lib/U1memcpy.S @@ -164,17 +164,18 @@ ENTRY(U1_gs_40_fp) retl add %o0, %o2, %o0 ENDPROC(U1_gs_40_fp) -ENTRY(U1_g3_0_fp) - VISExitHalf - retl - add %g3, %o2, %o0 -ENDPROC(U1_g3_0_fp) ENTRY(U1_g3_8_fp) VISExitHalf add %g3, 8, %g3 retl add %g3, %o2, %o0 ENDPROC(U1_g3_8_fp) +ENTRY(U1_g3_16_fp) + VISExitHalf + add %g3, 16, %g3 + retl + add %g3, %o2, %o0 +ENDPROC(U1_g3_16_fp) ENTRY(U1_o2_0_fp) VISExitHalf retl @@ -547,18 +548,18 @@ FUNC_NAME: /* %o0=dst, %o1=src, %o2=len */ 62: FINISH_VISCHUNK(o0, f44, f46) 63: UNEVEN_VISCHUNK_LAST(o0, f46, f0) -93: EX_LD_FP(LOAD(ldd, %o1, %f2), U1_g3_0_fp) +93: EX_LD_FP(LOAD(ldd, %o1, %f2), U1_g3_8_fp) add %o1, 8, %o1 subcc %g3, 8, %g3 faligndata %f0, %f2, %f8 - EX_ST_FP(STORE(std, %f8, %o0), U1_g3_8_fp) + EX_ST_FP(STORE(std, %f8, %o0), U1_g3_16_fp) bl,pn %xcc, 95f add %o0, 8, %o0 - EX_LD_FP(LOAD(ldd, %o1, %f0), U1_g3_0_fp) + EX_LD_FP(LOAD(ldd, %o1, %f0), U1_g3_8_fp) add %o1, 8, %o1 subcc %g3, 8, %g3 faligndata %f2, %f0, %f8 - EX_ST_FP(STORE(std, %f8, %o0), U1_g3_8_fp) + EX_ST_FP(STORE(std, %f8, %o0), U1_g3_16_fp) bge,pt %xcc, 93b add %o0, 8, %o0 -- 2.34.1

2 1

[PATCH OLK-6.6 v11 00/10] Add xcall 2.0 support
by Jinjie Ruan 17 Nov '25

17 Nov '25

Add xcall 2.0 support, which is compatible with xcall1.0, and can be used to dynamic instruction replacement for hardware xcall. Changes in v11: - Fix a bug in prefetch ko. - Fix a warning when concurrent write xcall comm. Changes in v10: - Fix memory leak in parse_xcall_command(). - Fix memory leak in xcall_comm_open(). - Add comment for smp_store_release(&mm->xcall, area). - Add sys_call_data in xcall_area struct. - clear_xcall_area() in __mmdrop() instead of __mmput(). - Add prefetch ko with some cleanup. Chanegs in v9: - /proc/xcall/comm, 0644 -> 0640 - /proc/xcall/comm check proc_mkdir("xcall", NULL) return value, use it as the parent proc_dir_entry for "comm". - Consider next task is NULL for xcall_info_switch(). - Return -EINVAL for error path in parse_xcall_command(). - Use bitmap for check_xcall_prog(). - Fix global-out-of-bounds KASAN bug in xcall_prog_register(). Changes in v8: - Fix no reigister and unregister null-ptr-ref bug by find prog first. - Fix xcall_comm_write write empty null-ptr-ref bug in memdup_user_nul(). - Add empty owner, exceed 64 prog name and repeat syscall check in check_prog(). - Move INIT_LIST_HEAD(&prog->list) to xcall_prog_register() instead of kernel module. Changes in v7: - Fix alternative bug in sync ventry. - Add "xcall" limit for xcall2.0 and hardware xcall. Changes in v6: - Add "xcall=debug" debug mode to use the "fast syscall" for every system call. - Use alternative to reduce the baseline performance noise floor when not set "xcall" on the kernel cmdline - Move binary_path out from xcall struct, and add to xcall_comm struct. - Fix1. insert_xcall_locked() check both "name" and "binary" to avoid repeated attach same name of xcall. - Fix2. Check if it is an executable file for the binary path. - Fix3. Check if it is an absolute path for the binary path. - Fix4. Remove the extra free_xcall_comm(info) in default branch in proc_xcall_command(). - Fix5. Add zero syscall hijack check for xcall_prog_register(). - Use __arm64_sys_ni_syscall() instead of define inv_xcall(). - Replace the -ENOSYS return value with -EINVAL, to avoid the warning. Changes in v5: - Fix build problem. - el0t_64_sync_ventry jump to kernel_ventry to do VMAP_STACK. - Some cleanups. - Merge the three refactor patch. Changes in v4: - Reuse uprobe_write_opcode() instead of use __replace_page() and copy_to_page(). - Handle error for uprobe_write_opcode(). - Support xcall1.0 before 920G. - Change xcall1.0 bitmap to byte array to save check insns. - Use percpu variable to save check insns for xcall1.0. - A little cleanup. Changes in v3: - Add validity checks during xcall registration to prevent out-of-bounds access and null pointer dereferences. - Extract __replace_page() and copy_to_page() from uprobe, to avoid code duplication. - Replace with new compatible refactored code. - Remove unnecessary member, such as old_name. Jinjie Ruan (2): xcall2.0: Support xcall1.0 for hardware xcall openeuler_defconfig: Enable CONFIG_DYNAMIC_XCALL by default Liao Chang (6): xcall2.0: Add userspace proc interface xcall2.0: Add xcall module register interface xcall2.0: Add xcall_area xcall2.0: Hajack syscall with dynamic instruciton replace xcall: Rework the early exception vector of XCALL and SYNC xcall2.0: Add a basic testcase Xinyu Zheng (1): xcall2.0: Introduce xcall epollwait prefetch feature Yipeng Zou (1): xcall: Add debug mode to force fast syscall for all threads arch/arm64/Kconfig.turbo | 13 + arch/arm64/configs/openeuler_defconfig | 1 + arch/arm64/include/asm/exception.h | 4 +- arch/arm64/include/asm/mmu_context.h | 7 - arch/arm64/include/asm/xcall.h | 155 +++--- arch/arm64/kernel/cpufeature.c | 79 +-- arch/arm64/kernel/entry-common.c | 28 +- arch/arm64/kernel/entry.S | 86 +-- arch/arm64/kernel/probes/uprobes.c | 6 + arch/arm64/kernel/process.c | 5 + arch/arm64/kernel/syscall.c | 14 + arch/arm64/kernel/xcall/Makefile | 3 +- arch/arm64/kernel/xcall/core.c | 415 +++++++++++++++ arch/arm64/kernel/xcall/entry.S | 139 ++++- arch/arm64/kernel/xcall/proc.c | 238 +++++++++ arch/arm64/kernel/xcall/xcall.c | 68 +-- arch/arm64/kvm/sys_regs.c | 1 + drivers/staging/Kconfig | 2 + drivers/staging/Makefile | 1 + drivers/staging/xcall/Kconfig | 19 + drivers/staging/xcall/Makefile | 1 + drivers/staging/xcall/dynamic_xcall_test.c | 89 ++++ drivers/staging/xcall/prefetch.c | 577 +++++++++++++++++++++ fs/proc/proc_xcall.c | 144 ++--- include/linux/mm_types.h | 4 + include/linux/xcall.h | 51 ++ kernel/events/uprobes.c | 23 + kernel/fork.c | 3 + mm/mmap.c | 14 +- 29 files changed, 1816 insertions(+), 374 deletions(-) create mode 100644 arch/arm64/kernel/xcall/core.c create mode 100644 arch/arm64/kernel/xcall/proc.c create mode 100644 drivers/staging/xcall/Kconfig create mode 100644 drivers/staging/xcall/Makefile create mode 100644 drivers/staging/xcall/dynamic_xcall_test.c create mode 100644 drivers/staging/xcall/prefetch.c create mode 100644 include/linux/xcall.h -- 2.34.1

2 11